swprv.dll

Description: Microsoft® Volume Shadow Copy Service software provider

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 8d4850d5e1a417be37c187113d5b7ee1

File Size: 488.5 KB

Uploaded At: Dec. 1, 2025, 7:40 a.m.

Views: 5

Exported Functions

ServiceMain (Ordinal: 1, Address: 0xb990)
DllCanUnloadNow (Ordinal: 2, Address: 0xb950)
DllGetClassObject (Ordinal: 3, Address: 0xb970)
DllRegisterServer (Ordinal: 4, Address: 0xcf00)
DllUnregisterServer (Ordinal: 5, Address: 0xcfd0)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180052a40)
IsDebuggerPresent (Address: 0x180052a30)
OutputDebugStringW (Address: 0x180052a38)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180052a50)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180052a60)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180052a70)
RaiseException (Address: 0x180052a80)
SetLastError (Address: 0x180052a78)
SetUnhandledExceptionFilter (Address: 0x180052a90)
UnhandledExceptionFilter (Address: 0x180052a88)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x180052ab0)
FindFirstVolumeW (Address: 0x180052ad8)
FindNextVolumeW (Address: 0x180052ad0)
FindVolumeClose (Address: 0x180052ac8)
GetDiskFreeSpaceExW (Address: 0x180052ae8)
GetDriveTypeW (Address: 0x180052ab8)
GetFileAttributesW (Address: 0x180052aa8)
GetVolumeInformationW (Address: 0x180052ae0)
GetVolumePathNameW (Address: 0x180052aa0)
ReadFile (Address: 0x180052ac0)

api-ms-win-core-file-l1-2-0.dll

GetVolumeNameForVolumeMountPointW (Address: 0x180052af8)
GetVolumePathNamesForVolumeNameW (Address: 0x180052b00)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180052b10)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180052b30)
HeapAlloc (Address: 0x180052b20)
HeapDestroy (Address: 0x180052b38)
HeapFree (Address: 0x180052b28)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x180052b50)
LocalFree (Address: 0x180052b48)

api-ms-win-core-io-l1-1-0.dll

DeviceIoControl (Address: 0x180052b68)
GetOverlappedResult (Address: 0x180052b60)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180052bc0)
FindResourceExW (Address: 0x180052ba8)
FreeLibrary (Address: 0x180052bb8)
GetModuleFileNameA (Address: 0x180052b78)
GetModuleFileNameW (Address: 0x180052bb0)
GetModuleHandleExW (Address: 0x180052bd0)
GetModuleHandleW (Address: 0x180052b80)
GetProcAddress (Address: 0x180052b90)
LoadLibraryExW (Address: 0x180052bc8)
LoadResource (Address: 0x180052ba0)
LoadStringW (Address: 0x180052b88)
SizeofResource (Address: 0x180052b98)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x180052be0)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x180052bf8)
VirtualFree (Address: 0x180052c08)
VirtualProtect (Address: 0x180052c00)
VirtualQuery (Address: 0x180052bf0)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x180052c18)
GetCommandLineW (Address: 0x180052c20)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x180052c70)
GetCurrentProcessId (Address: 0x180052c68)
GetCurrentThread (Address: 0x180052c48)
GetCurrentThreadId (Address: 0x180052c40)
OpenProcessToken (Address: 0x180052c50)
OpenThreadToken (Address: 0x180052c58)
ResumeThread (Address: 0x180052c30)
SetThreadToken (Address: 0x180052c38)
TerminateProcess (Address: 0x180052c60)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180052c80)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180052ca8)
RegCreateKeyExW (Address: 0x180052c98)
RegDeleteTreeW (Address: 0x180052cc0)
RegDeleteValueW (Address: 0x180052c90)
RegEnumKeyExW (Address: 0x180052cd0)
RegEnumValueW (Address: 0x180052ca0)
RegGetValueW (Address: 0x180052cc8)
RegOpenKeyExW (Address: 0x180052ce0)
RegQueryInfoKeyW (Address: 0x180052cb8)
RegQueryValueExW (Address: 0x180052cb0)
RegSetValueExW (Address: 0x180052cd8)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180052cf0)
RtlLookupFunctionEntry (Address: 0x180052cf8)
RtlVirtualUnwind (Address: 0x180052d00)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x180052d10)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x180052d28)
CharPrevW (Address: 0x180052d20)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x180052d40)
lstrcpynW (Address: 0x180052d38)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180052d68)
AcquireSRWLockShared (Address: 0x180052d78)
CancelWaitableTimer (Address: 0x180052d60)
CreateEventW (Address: 0x180052da8)
CreateMutexExW (Address: 0x180052de0)
CreateSemaphoreExW (Address: 0x180052dd8)
CreateWaitableTimerExW (Address: 0x180052df0)
DeleteCriticalSection (Address: 0x180052d88)
EnterCriticalSection (Address: 0x180052d50)
InitializeCriticalSection (Address: 0x180052d80)
InitializeCriticalSectionEx (Address: 0x180052dc0)
LeaveCriticalSection (Address: 0x180052d58)
OpenSemaphoreW (Address: 0x180052dc8)
ReleaseMutex (Address: 0x180052db0)
ReleaseSemaphore (Address: 0x180052da0)
ReleaseSRWLockExclusive (Address: 0x180052d70)
ReleaseSRWLockShared (Address: 0x180052d90)
ResetEvent (Address: 0x180052d98)
SetWaitableTimer (Address: 0x180052dd0)
WaitForSingleObject (Address: 0x180052de8)
WaitForSingleObjectEx (Address: 0x180052db8)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x180052e00)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x180052e28)
GetSystemDirectoryW (Address: 0x180052e48)
GetSystemInfo (Address: 0x180052e40)
GetSystemTimeAsFileTime (Address: 0x180052e38)
GetSystemWindowsDirectoryW (Address: 0x180052e20)
GetTickCount (Address: 0x180052e30)
GetVersionExW (Address: 0x180052e18)
GetWindowsDirectoryW (Address: 0x180052e10)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x180052e60)
CreateThreadpoolTimer (Address: 0x180052e58)
SetThreadpoolTimer (Address: 0x180052e68)
WaitForThreadpoolTimerCallbacks (Address: 0x180052e70)

api-ms-win-eventlog-legacy-l1-1-0.dll

DeregisterEventSource (Address: 0x180052e88)
RegisterEventSourceW (Address: 0x180052e90)
ReportEventW (Address: 0x180052e80)

api-ms-win-security-base-l1-1-0.dll

AddAccessAllowedAceEx (Address: 0x180052ea8)
AddAccessDeniedAceEx (Address: 0x180052eb0)
AddAce (Address: 0x180052ec0)
AdjustTokenPrivileges (Address: 0x180052f38)
AllocateAndInitializeSid (Address: 0x180052f28)
CheckTokenMembership (Address: 0x180052f20)
CopySid (Address: 0x180052ef0)
CreateWellKnownSid (Address: 0x180052f10)
DuplicateTokenEx (Address: 0x180052ed8)
FreeSid (Address: 0x180052f18)
GetAce (Address: 0x180052ec8)
GetAclInformation (Address: 0x180052ed0)
GetLengthSid (Address: 0x180052ef8)
GetTokenInformation (Address: 0x180052f30)
InitializeAcl (Address: 0x180052eb8)
InitializeSecurityDescriptor (Address: 0x180052f08)
IsValidSid (Address: 0x180052ea0)
SetSecurityDescriptorDacl (Address: 0x180052ee0)
SetSecurityDescriptorGroup (Address: 0x180052ee8)
SetSecurityDescriptorOwner (Address: 0x180052f00)

DEVOBJ.dll

DevObjCreateDeviceInfoList (Address: 0x180052988)
DevObjDestroyDeviceInfoList (Address: 0x1800529a8)
DevObjEnumDeviceInterfaces (Address: 0x180052998)
DevObjGetClassDevs (Address: 0x1800529a0)
DevObjGetDeviceInterfaceDetail (Address: 0x180052990)
DevObjGetDeviceRegistryProperty (Address: 0x1800529b0)

msvcrt.dll

__C_specific_handler (Address: 0x180053088)
__CxxFrameHandler3 (Address: 0x180053050)
__dllonexit (Address: 0x180053030)
_amsg_exit (Address: 0x180052fb8)
_beginthreadex (Address: 0x180053070)
_callnewh (Address: 0x180052f90)
_CxxThrowException (Address: 0x180052fa8)
_errno (Address: 0x180053068)
_initterm (Address: 0x180053078)
_lock (Address: 0x180052f60)
_onexit (Address: 0x180053028)
_purecall (Address: 0x180053020)
_unlock (Address: 0x180053058)
_vsnprintf (Address: 0x180052fe0)
_vsnprintf_s (Address: 0x180053090)
_vsnwprintf (Address: 0x180052ff8)
_wcsicmp (Address: 0x180052f78)
_wcsnicmp (Address: 0x180052f58)
_wtoi64 (Address: 0x180052fc8)
_XcptFilter (Address: 0x180052fc0)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x180052fd0)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180052f98)
??0exception@@QEAA@AEBV0@@Z (Address: 0x180053048)
??0exception@@QEAA@XZ (Address: 0x180053060)
??1exception@@UEAA@XZ (Address: 0x180053080)
??1type_info@@UEAA@XZ (Address: 0x180052f68)
?terminate@@YAXXZ (Address: 0x180052f70)
?what@exception@@UEBAPEBDXZ (Address: 0x180052fa0)
free (Address: 0x180053040)
iswdigit (Address: 0x180052fd8)
malloc (Address: 0x180053018)
memcmp (Address: 0x180052f48)
memcpy (Address: 0x180052f50)
memcpy_s (Address: 0x180053000)
memmove (Address: 0x180053008)
memmove_s (Address: 0x180052ff0)
memset (Address: 0x180053098)
realloc (Address: 0x180053038)
towupper (Address: 0x180052f88)
wcscat_s (Address: 0x180053010)
wcschr (Address: 0x180052f80)
wcscpy_s (Address: 0x180052fe8)
wcsncmp (Address: 0x180052fb0)

ntdll.dll

NtQueryInformationProcess (Address: 0x1800530b0)
NtQuerySystemInformation (Address: 0x1800530d0)
NtQueryVolumeInformationFile (Address: 0x1800530b8)
RtlCompareMemory (Address: 0x1800530a8)
RtlInitializeBitMap (Address: 0x1800530c8)
RtlNtStatusToDosError (Address: 0x1800530d8)
RtlNtStatusToDosErrorNoTeb (Address: 0x1800530c0)
RtlTimeToElapsedTimeFields (Address: 0x1800530e0)
WinSqmAddToStream (Address: 0x1800530e8)

VirtDisk.dll

GetStorageDependencyInformation (Address: 0x1800529c0)

VssTrace.DLL

(Address: 0x180052a20)
(Address: 0x180052a18)
(Address: 0x180052a10)
(Address: 0x180052a08)
(Address: 0x180052a00)
(Address: 0x1800529f8)
(Address: 0x1800529f0)
(Address: 0x1800529e8)
(Address: 0x1800529e0)
(Address: 0x1800529d8)
(Address: 0x1800529d0)