amsi.dll

v10.0.19041.4355 64-bit Windows NT Analyzed
Description
Anti-Malware Scan Interface
Authors
© Microsoft Corporation. All rights reserved.
File size
101.5 KB
Uploaded
2025-12-01 07:22
Views
139
SHA-256
66f7a134f6a4d9fe63dd7d6ff88dded5

Exported functions 13

AmsiCloseSession #1 · 0x3860
AmsiInitialize #2 · 0x34e0
AmsiOpenSession #3 · 0x3800
AmsiScanBuffer #4 · 0x3880
AmsiScanString #5 · 0x3980
AmsiUacInitialize #6 · 0x39e0
AmsiUacScan #7 · 0x3c60
AmsiUacUninitialize #8 · 0x3c00
AmsiUninitialize #9 · 0x37a0
DllCanUnloadNow #10 · 0x1b00
DllGetClassObject #11 · 0x1b40
DllRegisterServer #12 · 0x1c80
DllUnregisterServer #13 · 0x1c80

Imported DLLs & functions 108

api-ms-win-core-debug-l1-1-0.dll 3
DebugBreak 0x180011e48
IsDebuggerPresent 0x180011e40
OutputDebugStringW 0x180011e38
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x180011e58
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x180011e68
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x180011e88
SetLastError 0x180011e90
SetUnhandledExceptionFilter 0x180011e78
UnhandledExceptionFilter 0x180011e80
api-ms-win-core-file-l1-1-0.dll 1
CreateFileW 0x180011ea0
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x180011eb0
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x180011ec8
HeapAlloc 0x180011ec0
HeapFree 0x180011ed0
api-ms-win-core-libraryloader-l1-2-0.dll 5
GetModuleFileNameA 0x180011ee8
GetModuleHandleExW 0x180011f00
GetModuleHandleW 0x180011ef8
GetProcAddress 0x180011ef0
LoadLibraryExW 0x180011ee0
api-ms-win-core-localization-l1-2-0.dll 1
FormatMessageW 0x180011f10
api-ms-win-core-processthreads-l1-1-0.dll 4
GetCurrentProcess 0x180011f20
GetCurrentProcessId 0x180011f38
GetCurrentThreadId 0x180011f28
TerminateProcess 0x180011f30
api-ms-win-core-processthreads-l1-1-1.dll 1
OpenProcess 0x180011f48
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x180011f58
api-ms-win-core-registry-l1-1-0.dll 5
RegCloseKey 0x180011f78
RegEnumKeyExW 0x180011f70
RegGetValueW 0x180011f88
RegOpenKeyExW 0x180011f68
RegQueryInfoKeyW 0x180011f80
api-ms-win-core-rtlsupport-l1-1-0.dll 3
RtlCaptureContext 0x180011fa8
RtlLookupFunctionEntry 0x180011fa0
RtlVirtualUnwind 0x180011f98
api-ms-win-core-synch-l1-1-0.dll 16
AcquireSRWLockExclusive 0x180011fe8
AcquireSRWLockShared 0x180011fd0
CreateMutexExW 0x180012010
CreateSemaphoreExW 0x180011ff0
DeleteCriticalSection 0x180012000
EnterCriticalSection 0x180011fb8
InitializeCriticalSection 0x180012008
InitializeCriticalSectionEx 0x180011fc0
LeaveCriticalSection 0x180011fc8
OpenSemaphoreW 0x180012018
ReleaseMutex 0x180012028
ReleaseSemaphore 0x180011fd8
ReleaseSRWLockExclusive 0x180011ff8
ReleaseSRWLockShared 0x180011fe0
WaitForSingleObject 0x180012020
WaitForSingleObjectEx 0x180012030
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x180012040
api-ms-win-core-sysinfo-l1-1-0.dll 2
GetSystemTimeAsFileTime 0x180012050
GetTickCount 0x180012058
api-ms-win-core-sysinfo-l1-2-0.dll 1
GetSystemTimePreciseAsFileTime 0x180012068
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x180012080
CreateThreadpoolTimer 0x180012090
SetThreadpoolTimer 0x180012088
WaitForThreadpoolTimerCallbacks 0x180012078
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x1800120a0
GetTraceEnableLevel 0x1800120b0
GetTraceLoggerHandle 0x1800120c8
RegisterTraceGuidsW 0x1800120b8
TraceMessage 0x1800120a8
UnregisterTraceGuids 0x1800120c0
api-ms-win-eventing-provider-l1-1-0.dll 6
EventProviderEnabled 0x1800120f0
EventRegister 0x1800120d8
EventSetInformation 0x1800120f8
EventUnregister 0x180012100
EventWrite 0x1800120e0
EventWriteTransfer 0x1800120e8
msvcrt.dll 36
__C_specific_handler 0x180012218
__CxxFrameHandler3 0x180012220
__dllonexit 0x180012128
_amsg_exit 0x1800121f0
_callnewh 0x180012198
_CxxThrowException 0x180012170
_initterm 0x1800121c8
_lock 0x180012110
_onexit 0x180012138
_purecall 0x1800121a8
_unlock 0x180012118
_vsnprintf_s 0x180012148
_vsnwprintf 0x1800121e8
_XcptFilter 0x1800121f8
??_V@YAXPEAX@Z 0x180012208
??0exception@@QEAA@AEBQEBD@Z 0x180012190
??0exception@@QEAA@AEBQEBDH@Z 0x180012188
??0exception@@QEAA@AEBV0@@Z 0x180012158
??0exception@@QEAA@XZ 0x180012180
??1exception@@UEAA@XZ 0x1800121b0
??1type_info@@UEAA@XZ 0x180012140
??3@YAXPEAX@Z 0x180012130
?terminate@@YAXXZ 0x1800121c0
?what@exception@@UEBAPEBDXZ 0x180012178
free 0x180012210
malloc 0x180012200
memcmp 0x180012160
memcpy 0x180012168
memcpy_s 0x1800121d8
memmove 0x180012150
memmove_s 0x1800121a0
memset 0x180012228
rand 0x1800121d0
srand 0x1800121e0
time 0x180012120
wcsnlen 0x1800121b8
ntdll.dll 1
NtQueryInformationProcess 0x180012238
RPCRT4.dll 1
UuidFromStringW 0x180011e28