provcore.dll
Description: Microsoft Wireless Provisioning Core
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.4355
Architecture: 64-bit
Operating System: Windows NT
SHA256: d006761c715d5301da0e46d464382b0e
File Size: 668.5 KB
Uploaded At: Dec. 1, 2025, 7:37 a.m.
Views: 5
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x4eb0)
- DllGetActivationFactory (Ordinal: 2, Address: 0x4c60)
- DllGetClassObject (Ordinal: 3, Address: 0x4f30)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x18007d4f8)
api-ms-win-core-atoms-l1-1-0.dll
- GlobalGetAtomNameW (Address: 0x18007d508)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x18007d528)
- IsDebuggerPresent (Address: 0x18007d520)
- OutputDebugStringW (Address: 0x18007d518)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x18007d538)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x18007d548)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x18007d578)
- RaiseException (Address: 0x18007d560)
- SetLastError (Address: 0x18007d570)
- SetUnhandledExceptionFilter (Address: 0x18007d558)
- UnhandledExceptionFilter (Address: 0x18007d568)
api-ms-win-core-file-l1-1-0.dll
- CreateFileW (Address: 0x18007d590)
- DeleteFileW (Address: 0x18007d5a0)
- GetTempFileNameW (Address: 0x18007d588)
- WriteFile (Address: 0x18007d598)
api-ms-win-core-file-l1-2-0.dll
- GetTempPathW (Address: 0x18007d5b0)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x18007d5c0)
- DuplicateHandle (Address: 0x18007d5c8)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x18007d5e8)
- HeapAlloc (Address: 0x18007d5e0)
- HeapFree (Address: 0x18007d5d8)
api-ms-win-core-heap-l2-1-0.dll
- GlobalAlloc (Address: 0x18007d5f8)
- GlobalFree (Address: 0x18007d610)
- LocalAlloc (Address: 0x18007d600)
- LocalFree (Address: 0x18007d608)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- GlobalLock (Address: 0x18007d620)
- GlobalUnlock (Address: 0x18007d628)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x18007d638)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x18007d680)
- GetModuleFileNameA (Address: 0x18007d660)
- GetModuleFileNameW (Address: 0x18007d650)
- GetModuleHandleExW (Address: 0x18007d668)
- GetModuleHandleW (Address: 0x18007d678)
- GetProcAddress (Address: 0x18007d658)
- LoadLibraryExW (Address: 0x18007d670)
- LoadStringW (Address: 0x18007d648)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x18007d690)
- LocaleNameToLCID (Address: 0x18007d698)
api-ms-win-core-namespace-l1-1-0.dll
- AddSIDToBoundaryDescriptor (Address: 0x18007d6b0)
- ClosePrivateNamespace (Address: 0x18007d6c0)
- CreateBoundaryDescriptorW (Address: 0x18007d6b8)
- CreatePrivateNamespaceW (Address: 0x18007d6a8)
- DeleteBoundaryDescriptor (Address: 0x18007d6d0)
- OpenPrivateNamespaceW (Address: 0x18007d6c8)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x18007d6e0)
api-ms-win-core-processthreads-l1-1-0.dll
- GetCurrentProcess (Address: 0x18007d6f8)
- GetCurrentProcessId (Address: 0x18007d718)
- GetCurrentThread (Address: 0x18007d728)
- GetCurrentThreadId (Address: 0x18007d738)
- GetExitCodeThread (Address: 0x18007d708)
- GetProcessId (Address: 0x18007d6f0)
- OpenProcessToken (Address: 0x18007d730)
- OpenThreadToken (Address: 0x18007d710)
- SetThreadPriority (Address: 0x18007d720)
- TerminateProcess (Address: 0x18007d700)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x18007d750)
- OpenProcess (Address: 0x18007d748)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x18007d760)
api-ms-win-core-psapi-l1-1-0.dll
- QueryFullProcessImageNameW (Address: 0x18007d770)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x18007d7a8)
- RegCreateKeyExW (Address: 0x18007d7b0)
- RegDeleteTreeW (Address: 0x18007d7a0)
- RegDeleteValueW (Address: 0x18007d7b8)
- RegEnumKeyExW (Address: 0x18007d798)
- RegGetValueW (Address: 0x18007d790)
- RegOpenCurrentUser (Address: 0x18007d780)
- RegOpenKeyExW (Address: 0x18007d7c0)
- RegSetValueExW (Address: 0x18007d788)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x18007d7d0)
- RtlLookupFunctionEntry (Address: 0x18007d7d8)
- RtlVirtualUnwind (Address: 0x18007d7e0)
api-ms-win-core-sidebyside-l1-1-0.dll
- ActivateActCtx (Address: 0x18007d800)
- CreateActCtxW (Address: 0x18007d7f0)
- DeactivateActCtx (Address: 0x18007d808)
- ReleaseActCtx (Address: 0x18007d7f8)
api-ms-win-core-string-l1-1-0.dll
- CompareStringEx (Address: 0x18007d828)
- CompareStringOrdinal (Address: 0x18007d820)
- WideCharToMultiByte (Address: 0x18007d818)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x18007d8d8)
- AcquireSRWLockShared (Address: 0x18007d8d0)
- CreateEventExW (Address: 0x18007d850)
- CreateEventW (Address: 0x18007d880)
- CreateMutexExW (Address: 0x18007d898)
- CreateMutexW (Address: 0x18007d8a8)
- CreateSemaphoreExW (Address: 0x18007d888)
- DeleteCriticalSection (Address: 0x18007d8c0)
- EnterCriticalSection (Address: 0x18007d8e0)
- InitializeCriticalSection (Address: 0x18007d8b8)
- InitializeCriticalSectionAndSpinCount (Address: 0x18007d8c8)
- InitializeSRWLock (Address: 0x18007d868)
- LeaveCriticalSection (Address: 0x18007d8b0)
- OpenSemaphoreW (Address: 0x18007d890)
- ReleaseMutex (Address: 0x18007d848)
- ReleaseSemaphore (Address: 0x18007d838)
- ReleaseSRWLockExclusive (Address: 0x18007d8a0)
- ReleaseSRWLockShared (Address: 0x18007d8e8)
- ResetEvent (Address: 0x18007d878)
- SetEvent (Address: 0x18007d870)
- WaitForMultipleObjectsEx (Address: 0x18007d860)
- WaitForSingleObject (Address: 0x18007d840)
- WaitForSingleObjectEx (Address: 0x18007d858)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceExecuteOnce (Address: 0x18007d8f8)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTime (Address: 0x18007d908)
- GetSystemTimeAsFileTime (Address: 0x18007d910)
- GetTickCount (Address: 0x18007d918)
- GetTickCount64 (Address: 0x18007d920)
api-ms-win-core-threadpool-l1-2-0.dll
- CallbackMayRunLong (Address: 0x18007d950)
- CloseThreadpoolTimer (Address: 0x18007d960)
- CreateThreadpoolTimer (Address: 0x18007d930)
- FreeLibraryWhenCallbackReturns (Address: 0x18007d948)
- SetThreadpoolTimer (Address: 0x18007d940)
- TrySubmitThreadpoolCallback (Address: 0x18007d958)
- WaitForThreadpoolTimerCallbacks (Address: 0x18007d938)
api-ms-win-core-timezone-l1-1-0.dll
- FileTimeToSystemTime (Address: 0x18007d978)
- SystemTimeToFileTime (Address: 0x18007d970)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x18007d988)
- EncodePointer (Address: 0x18007d990)
api-ms-win-crt-private-l1-1-0.dll
- __C_specific_handler (Address: 0x18007daa0)
- __CxxFrameHandler3 (Address: 0x18007da40)
- __CxxFrameHandler4 (Address: 0x18007dab0)
- __std_terminate (Address: 0x18007daa8)
- __std_type_info_compare (Address: 0x18007da98)
- _CxxThrowException (Address: 0x18007da48)
- _o___std_exception_copy (Address: 0x18007da68)
- _o___std_exception_destroy (Address: 0x18007da60)
- _o___std_type_info_destroy_list (Address: 0x18007da58)
- _o___stdio_common_vsnprintf_s (Address: 0x18007da50)
- _o___stdio_common_vswprintf (Address: 0x18007d9e8)
- _o___stdio_common_vswprintf_s (Address: 0x18007dac0)
- _o___stdio_common_vswscanf (Address: 0x18007dab8)
- _o__beginthreadex (Address: 0x18007da80)
- _o__callnewh (Address: 0x18007da78)
- _o__cexit (Address: 0x18007da70)
- _o__configure_narrow_argv (Address: 0x18007dad0)
- _o__crt_atexit (Address: 0x18007da88)
- _o__errno (Address: 0x18007d9a0)
- _o__execute_onexit_table (Address: 0x18007d9a8)
- _o__initialize_narrow_environment (Address: 0x18007d9b0)
- _o__initialize_onexit_table (Address: 0x18007d9b8)
- _o__invalid_parameter_noinfo (Address: 0x18007d9c0)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x18007d9c8)
- _o__purecall (Address: 0x18007d9d0)
- _o__register_onexit_function (Address: 0x18007d9d8)
- _o__seh_filter_dll (Address: 0x18007d9e0)
- _o__wcsicmp (Address: 0x18007d9f8)
- _o__wtoi (Address: 0x18007da00)
- _o_free (Address: 0x18007da08)
- _o_malloc (Address: 0x18007da10)
- _o_memcpy_s (Address: 0x18007da18)
- _o_realloc (Address: 0x18007da20)
- _o_wcscpy_s (Address: 0x18007da28)
- _o_wcstod (Address: 0x18007da30)
- _o_wcstoul (Address: 0x18007da38)
- memcmp (Address: 0x18007dad8)
- memcpy (Address: 0x18007dae0)
- memmove (Address: 0x18007d9f0)
- strchr (Address: 0x18007da90)
- wcschr (Address: 0x18007dac8)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x18007daf0)
- _initterm_e (Address: 0x18007daf8)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x18007db08)
api-ms-win-devices-query-l1-1-0.dll
- DevFreeObjectProperties (Address: 0x18007db20)
- DevGetObjectProperties (Address: 0x18007db18)
api-ms-win-rtcore-ntuser-synch-l1-1-0.dll
- MsgWaitForMultipleObjectsEx (Address: 0x18007db30)
api-ms-win-security-base-l1-1-0.dll
- AddAccessAllowedAce (Address: 0x18007db48)
- AllocateAndInitializeSid (Address: 0x18007db60)
- CheckTokenMembership (Address: 0x18007db80)
- CopySid (Address: 0x18007db50)
- CreateWellKnownSid (Address: 0x18007db70)
- FreeSid (Address: 0x18007db78)
- GetLengthSid (Address: 0x18007db68)
- GetTokenInformation (Address: 0x18007db90)
- InitializeAcl (Address: 0x18007db40)
- InitializeSecurityDescriptor (Address: 0x18007db88)
- SetSecurityDescriptorDacl (Address: 0x18007db58)
MobileNetworking.dll
- GetPersistentRegPath (Address: 0x18007d4b0)
msvcp_win.dll
- _Wcscoll (Address: 0x18007dc38)
- _Wcsxfrm (Address: 0x18007dc30)
- ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x18007dbc0)
- ?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x18007dd18)
- ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x18007dba8)
- ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x18007dc18)
- ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x18007dbb8)
- ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x18007dc28)
- ?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA_N_N@Z (Address: 0x18007dcd8)
- ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x18007dcb0)
- ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ (Address: 0x18007dd10)
- ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x18007dca8)
- ?_Xbad_alloc@std@@YAXXZ (Address: 0x18007dd00)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x18007dc58)
- ?_Xinvalid_argument@std@@YAXPEBD@Z (Address: 0x18007dc10)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18007dd20)
- ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18007dcf8)
- ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x18007dbf8)
- ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x18007dbf0)
- ??0_Lockit@std@@QEAA@H@Z (Address: 0x18007dc48)
- ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x18007dc20)
- ??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z (Address: 0x18007dd08)
- ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x18007dc78)
- ??0facet@locale@std@@IEAA@_K@Z (Address: 0x18007dbc8)
- ??1_Locinfo@std@@QEAA@XZ (Address: 0x18007dba0)
- ??1_Lockit@std@@QEAA@XZ (Address: 0x18007dc40)
- ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x18007dcf0)
- ??1?$basic_istream@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x18007dc50)
- ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x18007dcc0)
- ??1facet@locale@std@@MEAA@XZ (Address: 0x18007dbd0)
- ??Bid@locale@std@@QEAA_KXZ (Address: 0x18007dbb0)
- ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z (Address: 0x18007dcc8)
- ?id@?$collate@G@std@@2V0locale@2@A (Address: 0x18007dc00)
- ?id@?$ctype@G@std@@2V0locale@2@A (Address: 0x18007dc08)
- ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x18007dc60)
- ?is@?$ctype@G@std@@QEBA_NFG@Z (Address: 0x18007dbd8)
- ?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ (Address: 0x18007dcd0)
- ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z (Address: 0x18007dc70)
- ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z (Address: 0x18007dce8)
- ?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ (Address: 0x18007dcb8)
- ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ (Address: 0x18007dca0)
- ?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ (Address: 0x18007dce0)
- ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ (Address: 0x18007dc68)
- ?tolower@?$ctype@G@std@@QEBAGG@Z (Address: 0x18007dbe0)
- ?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z (Address: 0x18007dbe8)
- ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ (Address: 0x18007dc98)
- ?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGD@Z (Address: 0x18007dc80)
- ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z (Address: 0x18007dc90)
- ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z (Address: 0x18007dc88)
ntdll.dll
- EtwEventActivityIdControl (Address: 0x18007ddc8)
- EtwEventRegister (Address: 0x18007dda8)
- EtwEventSetInformation (Address: 0x18007ddb0)
- EtwEventUnregister (Address: 0x18007ddb8)
- EtwEventWriteTransfer (Address: 0x18007dd70)
- EtwGetTraceEnableFlags (Address: 0x18007dd90)
- EtwGetTraceEnableLevel (Address: 0x18007dd88)
- EtwGetTraceLoggerHandle (Address: 0x18007dd80)
- EtwRegisterTraceGuidsW (Address: 0x18007dd98)
- EtwTraceMessage (Address: 0x18007dd78)
- EtwUnregisterTraceGuids (Address: 0x18007dda0)
- NtQueryInformationToken (Address: 0x18007dd38)
- NtQueryKey (Address: 0x18007dd68)
- RtlAllocateHeap (Address: 0x18007dd50)
- RtlCompareUnicodeString (Address: 0x18007dd60)
- RtlEqualSid (Address: 0x18007dd48)
- RtlFreeHeap (Address: 0x18007dd30)
- RtlGetPersistedStateLocation (Address: 0x18007ddd0)
- RtlInitUnicodeString (Address: 0x18007dd40)
- RtlLoadString (Address: 0x18007ddc0)
- RtlNtStatusToDosErrorNoTeb (Address: 0x18007dd58)
RPCRT4.dll
- NdrClientCall3 (Address: 0x18007d4e8)
- RpcBindingBind (Address: 0x18007d4d0)
- RpcBindingCreateW (Address: 0x18007d4c0)
- RpcBindingFree (Address: 0x18007d4c8)
- RpcExceptionFilter (Address: 0x18007d4d8)
- RpcServerInqCallAttributesW (Address: 0x18007d4e0)