nduprov.dll

Description: Network Statistics Provider for System Resource Usage Monitor Service

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: 2c7e627fcb5306ab8fe6a9f484f268fa

File Size: 129.5 KB

Uploaded At: Dec. 1, 2025, 7:35 a.m.

Views: 5

Exported Functions

  • CommitStatsHelperCollectContainerData (Ordinal: 1, Address: 0x11e0)
  • CommitStatsHelperDedupHostData (Ordinal: 2, Address: 0xdef0)
  • DedupDoubleCountedData (Ordinal: 3, Address: 0xe260)
  • NduProvPopulateStatsFromRecord (Ordinal: 4, Address: 0xe560)
  • OverflowCheckOnBytesFromContainers (Ordinal: 5, Address: 0xefe0)
  • PopulateUserName (Ordinal: 6, Address: 0xf140)
  • SruInitializeProvider (Ordinal: 7, Address: 0xf510)
  • SruUninitializeProvider (Ordinal: 8, Address: 0xf8e0)

Imported DLLs & Functions

ADVAPI32.dll
  • EventProviderEnabled (Address: 0x180014358)
  • EventSetInformation (Address: 0x180014360)
  • LsaNtStatusToWinError (Address: 0x180014368)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x180014398)
  • IsDebuggerPresent (Address: 0x180014390)
  • OutputDebugStringW (Address: 0x180014388)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1800143a8)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1800143b8)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1800143d8)
  • RaiseException (Address: 0x1800143c8)
  • SetLastError (Address: 0x1800143e0)
  • SetUnhandledExceptionFilter (Address: 0x1800143d0)
  • UnhandledExceptionFilter (Address: 0x1800143e8)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x1800143f8)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x180014408)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x180014420)
  • HeapAlloc (Address: 0x180014428)
  • HeapFree (Address: 0x180014418)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x180014440)
  • LocalFree (Address: 0x180014438)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x180014450)
api-ms-win-core-io-l1-1-0.dll
  • DeviceIoControl (Address: 0x180014460)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x180014490)
  • GetModuleFileNameA (Address: 0x180014480)
  • GetModuleHandleExW (Address: 0x180014478)
  • GetModuleHandleW (Address: 0x180014470)
  • GetProcAddress (Address: 0x180014488)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1800144a0)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1800144c0)
  • GetCurrentProcessId (Address: 0x1800144b8)
  • GetCurrentThreadId (Address: 0x1800144c8)
  • TerminateProcess (Address: 0x1800144b0)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x1800144d8)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800144e8)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x1800144f8)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x180014518)
  • CreateEventExW (Address: 0x180014510)
  • CreateMutexExW (Address: 0x180014568)
  • CreateSemaphoreExW (Address: 0x180014578)
  • DeleteCriticalSection (Address: 0x180014538)
  • EnterCriticalSection (Address: 0x180014548)
  • InitializeCriticalSectionEx (Address: 0x180014540)
  • LeaveCriticalSection (Address: 0x180014550)
  • OpenSemaphoreW (Address: 0x180014570)
  • ReleaseMutex (Address: 0x180014528)
  • ReleaseSemaphore (Address: 0x180014520)
  • ReleaseSRWLockExclusive (Address: 0x180014508)
  • SetEvent (Address: 0x180014558)
  • WaitForSingleObject (Address: 0x180014560)
  • WaitForSingleObjectEx (Address: 0x180014530)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x180014588)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x1800145a0)
  • GetTickCount (Address: 0x180014598)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpool (Address: 0x1800145c0)
  • CloseThreadpoolWork (Address: 0x1800145d8)
  • CreateThreadpool (Address: 0x1800145d0)
  • CreateThreadpoolWork (Address: 0x1800145b8)
  • SetThreadpoolThreadMaximum (Address: 0x1800145e0)
  • SetThreadpoolThreadMinimum (Address: 0x1800145b0)
  • SubmitThreadpoolWork (Address: 0x1800145e8)
  • WaitForThreadpoolWorkCallbacks (Address: 0x1800145c8)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x180014688)
  • __CxxFrameHandler3 (Address: 0x180014690)
  • __CxxFrameHandler4 (Address: 0x1800146c8)
  • _CxxThrowException (Address: 0x180014698)
  • _o___std_exception_copy (Address: 0x1800146b0)
  • _o___std_exception_destroy (Address: 0x1800146a8)
  • _o___std_type_info_destroy_list (Address: 0x1800146a0)
  • _o___stdio_common_vsnprintf_s (Address: 0x1800146c0)
  • _o___stdio_common_vswprintf (Address: 0x1800146b8)
  • _o__callnewh (Address: 0x1800145f8)
  • _o__cexit (Address: 0x180014600)
  • _o__configure_narrow_argv (Address: 0x180014608)
  • _o__crt_atexit (Address: 0x180014610)
  • _o__errno (Address: 0x180014618)
  • _o__execute_onexit_table (Address: 0x180014620)
  • _o__initialize_narrow_environment (Address: 0x180014628)
  • _o__initialize_onexit_table (Address: 0x180014630)
  • _o__invalid_parameter_noinfo (Address: 0x180014638)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x180014640)
  • _o__recalloc (Address: 0x180014648)
  • _o__register_onexit_function (Address: 0x180014650)
  • _o__seh_filter_dll (Address: 0x180014658)
  • _o__wcsnicmp (Address: 0x180014668)
  • _o_free (Address: 0x180014670)
  • _o_malloc (Address: 0x180014678)
  • _o_toupper (Address: 0x180014680)
  • memcpy (Address: 0x1800146d0)
  • memmove (Address: 0x180014660)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x1800146e8)
  • _initterm_e (Address: 0x1800146e0)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x1800146f8)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x180014718)
  • EventUnregister (Address: 0x180014710)
  • EventWriteTransfer (Address: 0x180014708)
api-ms-win-security-base-l1-1-0.dll
  • CopySid (Address: 0x180014740)
  • GetLengthSid (Address: 0x180014728)
  • GetTokenInformation (Address: 0x180014730)
  • IsValidSid (Address: 0x180014738)
api-ms-win-security-lsapolicy-l1-1-0.dll
  • LsaLookupSids2 (Address: 0x180014750)
  • LsaOpenPolicy (Address: 0x180014758)
api-ms-win-security-sddl-l1-1-0.dll
  • ConvertSidToStringSidW (Address: 0x180014768)
api-ms-win-service-management-l1-1-0.dll
  • CloseServiceHandle (Address: 0x180014788)
  • OpenSCManagerW (Address: 0x180014780)
  • OpenServiceW (Address: 0x180014778)
api-ms-win-service-private-l1-1-0.dll
  • I_QueryTagInformation (Address: 0x1800147a0)
  • SubscribeServiceChangeNotifications (Address: 0x1800147a8)
  • UnsubscribeServiceChangeNotifications (Address: 0x180014798)
api-ms-win-service-winsvc-l1-1-0.dll
  • QueryServiceStatus (Address: 0x1800147b8)
msvcp_win.dll
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x1800147d0)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1800147c8)
ntdll.dll
  • NtCreateFile (Address: 0x180014808)
  • RtlAllocateHeap (Address: 0x1800147e8)
  • RtlCaptureContext (Address: 0x180014818)
  • RtlCompareMemory (Address: 0x1800147f8)
  • RtlFreeHeap (Address: 0x1800147f0)
  • RtlGetActiveConsoleId (Address: 0x180014830)
  • RtlInitUnicodeString (Address: 0x180014810)
  • RtlLengthSid (Address: 0x1800147e0)
  • RtlLookupFunctionEntry (Address: 0x180014820)
  • RtlNtStatusToDosError (Address: 0x180014800)
  • RtlVirtualUnwind (Address: 0x180014828)
SspiCli.dll
  • LsaFreeReturnBuffer (Address: 0x180014378)
wlanapi.dll
  • WlanRegisterNotification (Address: 0x180014840)
wwapi.dll
  • WwanGetProfileIndex (Address: 0x180014850)