windowsperformancerecordercontrol.dll

Description: Microsoft Windows Performance Recorder Control Library

Version: 10.0.19041.6093

Architecture: 64-bit

Operating System: Windows NT

SHA256: e8c95b8b23e47958c48918e562724da1

File Size: 1.2 MB

Uploaded At: Dec. 1, 2025, 7:44 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0xd960)
DllGetClassObject (Ordinal: 2, Address: 0xd9a0)
DllRegisterServer (Ordinal: 3, Address: 0x1bc0)
DllUnregisterServer (Ordinal: 4, Address: 0x1bc0)
WPRCControlLogging (Ordinal: 5, Address: 0x6c4d0)
WPRCCreateInstance (Ordinal: 6, Address: 0x6abb0)
WPRCCreateInstanceUnderInstanceName (Ordinal: 7, Address: 0x6abe0)
WPRCDisableBuiltinProfiles (Ordinal: 8, Address: 0x6afb0)
WPRCFormatError (Ordinal: 9, Address: 0x6c2b0)
WPRCQueryBuiltInProfiles (Ordinal: 10, Address: 0x6aec0)
WPRCReleaseInstanceByName (Ordinal: 11, Address: 0x6afd0)
WPRCRemoveLogging (Ordinal: 12, Address: 0x6c6d0)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateGuid (Address: 0x18009cdf8)
CoCreateInstance (Address: 0x18009ce20)
CoInitializeEx (Address: 0x18009ce18)
CoTaskMemFree (Address: 0x18009cdf0)
CoUninitialize (Address: 0x18009ce08)
IIDFromString (Address: 0x18009ce10)
StringFromGUID2 (Address: 0x18009ce28)
StringFromIID (Address: 0x18009ce00)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18009ce48)
IsDebuggerPresent (Address: 0x18009ce40)
OutputDebugStringW (Address: 0x18009ce38)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18009ce78)
RaiseException (Address: 0x18009ce58)
SetLastError (Address: 0x18009ce60)
SetUnhandledExceptionFilter (Address: 0x18009ce70)
UnhandledExceptionFilter (Address: 0x18009ce68)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x18009ce98)
CreateFileW (Address: 0x18009ced0)
DeleteFileW (Address: 0x18009ceb0)
FindClose (Address: 0x18009ce88)
FindFirstFileExW (Address: 0x18009ce90)
FindFirstFileW (Address: 0x18009cef0)
FindFirstVolumeW (Address: 0x18009cec8)
FindNextFileW (Address: 0x18009cea8)
FindNextVolumeW (Address: 0x18009cec0)
FindVolumeClose (Address: 0x18009cee0)
GetFileAttributesW (Address: 0x18009ced8)
GetFileSize (Address: 0x18009cf00)
GetFileTime (Address: 0x18009cf10)
GetTempFileNameW (Address: 0x18009cf08)
QueryDosDeviceW (Address: 0x18009ceb8)
ReadFile (Address: 0x18009cef8)
RemoveDirectoryW (Address: 0x18009cf18)
SetFilePointer (Address: 0x18009cea0)
SetFilePointerEx (Address: 0x18009cf20)
WriteFile (Address: 0x18009cee8)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x18009cf38)
GetVolumePathNamesForVolumeNameW (Address: 0x18009cf30)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18009cf48)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18009cf80)
HeapAlloc (Address: 0x18009cf68)
HeapDestroy (Address: 0x18009cf60)
HeapFree (Address: 0x18009cf70)
HeapReAlloc (Address: 0x18009cf58)
HeapSize (Address: 0x18009cf78)

api-ms-win-core-heap-obsolete-l1-1-0.dll

LocalFree (Address: 0x18009cf90)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18009cfa0)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

CopyFileW (Address: 0x18009cfb0)
FindResourceW (Address: 0x18009cfc0)
LoadLibraryW (Address: 0x18009cfb8)

api-ms-win-core-libraryloader-l1-1-0.dll

DisableThreadLibraryCalls (Address: 0x18009cfe8)
FindResourceExW (Address: 0x18009cfd0)
FreeLibrary (Address: 0x18009d010)
GetModuleFileNameA (Address: 0x18009cfe0)
GetModuleFileNameW (Address: 0x18009d018)
GetModuleHandleExW (Address: 0x18009d008)
GetModuleHandleW (Address: 0x18009d028)
GetProcAddress (Address: 0x18009cff8)
LoadLibraryExW (Address: 0x18009d020)
LoadResource (Address: 0x18009cfd8)
LockResource (Address: 0x18009cff0)
SizeofResource (Address: 0x18009d000)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18009d040)
LCMapStringEx (Address: 0x18009d038)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x18009d058)
MapViewOfFileEx (Address: 0x18009d050)
UnmapViewOfFile (Address: 0x18009d060)

api-ms-win-core-processenvironment-l1-1-0.dll

GetEnvironmentVariableW (Address: 0x18009d078)
SetEnvironmentVariableW (Address: 0x18009d070)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x18009d0b0)
GetCurrentProcess (Address: 0x18009d0b8)
GetCurrentProcessId (Address: 0x18009d0a8)
GetCurrentThread (Address: 0x18009d098)
GetCurrentThreadId (Address: 0x18009d0a0)
GetExitCodeProcess (Address: 0x18009d088)
TerminateProcess (Address: 0x18009d090)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18009d0c8)
OpenProcess (Address: 0x18009d0d0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18009d0e0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18009d100)
RegCreateKeyExW (Address: 0x18009d0f0)
RegDeleteValueW (Address: 0x18009d120)
RegEnumKeyExW (Address: 0x18009d118)
RegEnumValueW (Address: 0x18009d108)
RegOpenKeyExW (Address: 0x18009d0f8)
RegQueryInfoKeyW (Address: 0x18009d128)
RegQueryValueExW (Address: 0x18009d110)
RegSetValueExW (Address: 0x18009d130)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18009d140)
RtlLookupFunctionEntry (Address: 0x18009d148)
RtlVirtualUnwind (Address: 0x18009d150)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathAddBackslashW (Address: 0x18009d180)
PathAddExtensionW (Address: 0x18009d178)
PathAppendW (Address: 0x18009d168)
PathFileExistsW (Address: 0x18009d160)
PathRemoveBackslashW (Address: 0x18009d170)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x18009d198)
WideCharToMultiByte (Address: 0x18009d190)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18009d230)
AcquireSRWLockShared (Address: 0x18009d1e8)
CreateEventW (Address: 0x18009d1f0)
CreateMutexExW (Address: 0x18009d1c0)
CreateSemaphoreExW (Address: 0x18009d200)
DeleteCriticalSection (Address: 0x18009d1b0)
EnterCriticalSection (Address: 0x18009d1a8)
InitializeCriticalSection (Address: 0x18009d218)
InitializeCriticalSectionEx (Address: 0x18009d210)
LeaveCriticalSection (Address: 0x18009d220)
OpenSemaphoreW (Address: 0x18009d1d8)
ReleaseMutex (Address: 0x18009d1f8)
ReleaseSemaphore (Address: 0x18009d1e0)
ReleaseSRWLockExclusive (Address: 0x18009d1c8)
ReleaseSRWLockShared (Address: 0x18009d1b8)
SetEvent (Address: 0x18009d228)
WaitForSingleObject (Address: 0x18009d208)
WaitForSingleObjectEx (Address: 0x18009d1d0)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x18009d240)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemDirectoryW (Address: 0x18009d270)
GetSystemInfo (Address: 0x18009d260)
GetSystemTimeAsFileTime (Address: 0x18009d268)
GetSystemWindowsDirectoryW (Address: 0x18009d250)
GetVersionExW (Address: 0x18009d280)
GetWindowsDirectoryW (Address: 0x18009d278)
GlobalMemoryStatusEx (Address: 0x18009d258)

api-ms-win-core-sysinfo-l1-2-0.dll

GetNativeSystemInfo (Address: 0x18009d290)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18009d2a8)
CreateThreadpoolTimer (Address: 0x18009d2b8)
SetThreadpoolTimer (Address: 0x18009d2a0)
WaitForThreadpoolTimerCallbacks (Address: 0x18009d2b0)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x18009d2c8)

api-ms-win-core-version-l1-1-0.dll

GetFileVersionInfoExW (Address: 0x18009d2e0)
GetFileVersionInfoSizeExW (Address: 0x18009d2d8)
VerQueryValueW (Address: 0x18009d2e8)

api-ms-win-core-wow64-l1-1-0.dll

IsWow64Process (Address: 0x18009d308)
Wow64DisableWow64FsRedirection (Address: 0x18009d2f8)
Wow64RevertWow64FsRedirection (Address: 0x18009d300)

api-ms-win-crt-math-l1-1-0.dll

ceilf (Address: 0x18009d318)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18009d4b8)
__CxxFrameHandler3 (Address: 0x18009d4c0)
_CxxThrowException (Address: 0x18009d440)
_o___std_exception_copy (Address: 0x18009d4a0)
_o___std_exception_destroy (Address: 0x18009d498)
_o___std_type_info_destroy_list (Address: 0x18009d490)
_o___stdio_common_vsnprintf_s (Address: 0x18009d488)
_o___stdio_common_vswprintf (Address: 0x18009d480)
_o___stdio_common_vswprintf_s (Address: 0x18009d478)
_o__callnewh (Address: 0x18009d470)
_o__cexit (Address: 0x18009d468)
_o__configure_narrow_argv (Address: 0x18009d460)
_o__crt_atexit (Address: 0x18009d458)
_o__errno (Address: 0x18009d450)
_o__execute_onexit_table (Address: 0x18009d448)
_o__gmtime64 (Address: 0x18009d328)
_o__initialize_narrow_environment (Address: 0x18009d330)
_o__initialize_onexit_table (Address: 0x18009d338)
_o__invalid_parameter_noinfo (Address: 0x18009d340)
_o__invalid_parameter_noinfo_noreturn (Address: 0x18009d348)
_o__memicmp (Address: 0x18009d350)
_o__purecall (Address: 0x18009d358)
_o__recalloc (Address: 0x18009d360)
_o__register_onexit_function (Address: 0x18009d368)
_o__seh_filter_dll (Address: 0x18009d370)
_o__stricmp (Address: 0x18009d378)
_o__ultow_s (Address: 0x18009d380)
_o__wcsicmp (Address: 0x18009d390)
_o__wcslwr_s (Address: 0x18009d398)
_o__wcsnicmp (Address: 0x18009d3a0)
_o__wcstoui64 (Address: 0x18009d3a8)
_o__wfullpath (Address: 0x18009d3b0)
_o__wtof (Address: 0x18009d3b8)
_o__wtoi (Address: 0x18009d3c0)
_o_calloc (Address: 0x18009d3c8)
_o_ceil (Address: 0x18009d3d0)
_o_free (Address: 0x18009d3d8)
_o_iswdigit (Address: 0x18009d3e0)
_o_iswspace (Address: 0x18009d3e8)
_o_malloc (Address: 0x18009d3f0)
_o_realloc (Address: 0x18009d3f8)
_o_terminate (Address: 0x18009d400)
_o_towlower (Address: 0x18009d408)
_o_wcscpy_s (Address: 0x18009d410)
_o_wcsncpy_s (Address: 0x18009d418)
_o_wcstod (Address: 0x18009d420)
_o_wcstol (Address: 0x18009d428)
_o_wcstoul (Address: 0x18009d430)
_o_wmemcpy_s (Address: 0x18009d438)
memchr (Address: 0x18009d4c8)
memcmp (Address: 0x18009d4d0)
memcpy (Address: 0x18009d4d8)
memmove (Address: 0x18009d388)
strrchr (Address: 0x18009d4e0)
wcschr (Address: 0x18009d4b0)
wcsrchr (Address: 0x18009d4a8)
wcsstr (Address: 0x18009d4e8)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18009d500)
_initterm_e (Address: 0x18009d4f8)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18009d510)
strncmp (Address: 0x18009d548)
wcscmp (Address: 0x18009d528)
wcscspn (Address: 0x18009d540)
wcsncmp (Address: 0x18009d518)
wcsnlen (Address: 0x18009d520)
wcspbrk (Address: 0x18009d530)
wcsspn (Address: 0x18009d538)

api-ms-win-crt-utility-l1-1-0.dll

ldiv (Address: 0x18009d558)

api-ms-win-eventing-classicprovider-l1-1-0.dll

RegisterTraceGuidsW (Address: 0x18009d570)
TraceEvent (Address: 0x18009d578)
UnregisterTraceGuids (Address: 0x18009d568)

api-ms-win-eventing-consumer-l1-1-0.dll

CloseTrace (Address: 0x18009d590)
OpenTraceW (Address: 0x18009d588)
ProcessTrace (Address: 0x18009d598)

api-ms-win-eventing-controller-l1-1-0.dll

ControlTraceW (Address: 0x18009d5c0)
EnumerateTraceGuidsEx (Address: 0x18009d5b8)
QueryAllTracesW (Address: 0x18009d5b0)
StartTraceW (Address: 0x18009d5c8)
TraceQueryInformation (Address: 0x18009d5d0)
TraceSetInformation (Address: 0x18009d5a8)

api-ms-win-eventing-legacy-l1-1-0.dll

EnableTraceEx (Address: 0x18009d5e0)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x18009d5f0)
EventSetInformation (Address: 0x18009d600)
EventUnregister (Address: 0x18009d608)
EventWriteTransfer (Address: 0x18009d5f8)

api-ms-win-shcore-stream-l1-1-0.dll

SHCreateStreamOnFileW (Address: 0x18009d618)

bcrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x18009d650)
BCryptCreateHash (Address: 0x18009d638)
BCryptDestroyHash (Address: 0x18009d648)
BCryptFinishHash (Address: 0x18009d630)
BCryptGetProperty (Address: 0x18009d658)
BCryptHashData (Address: 0x18009d628)
BCryptOpenAlgorithmProvider (Address: 0x18009d640)

ntdll.dll

NtQuerySystemInformation (Address: 0x18009d680)
NtSetIntervalProfile (Address: 0x18009d678)
NtSetSystemInformation (Address: 0x18009d670)
RtlAcquireSRWLockExclusive (Address: 0x18009d690)
RtlAdjustPrivilege (Address: 0x18009d6d0)
RtlGetDeviceFamilyInfoEnum (Address: 0x18009d6a0)
RtlGetVersion (Address: 0x18009d6c8)
RtlGUIDFromString (Address: 0x18009d6c0)
RtlImageDirectoryEntryToData (Address: 0x18009d6a8)
RtlImageRvaToVa (Address: 0x18009d6b0)
RtlInitUnicodeString (Address: 0x18009d6b8)
RtlNtStatusToDosError (Address: 0x18009d668)
RtlReleaseSRWLockExclusive (Address: 0x18009d698)
RtlSetHeapInformation (Address: 0x18009d688)

OLEAUT32.dll

LoadRegTypeLib (Address: 0x18009cd80)
LoadTypeLib (Address: 0x18009cdb0)
SysAllocString (Address: 0x18009cd98)
SysAllocStringByteLen (Address: 0x18009cd78)
SysAllocStringLen (Address: 0x18009cda8)
SysFreeString (Address: 0x18009cdb8)
SysStringByteLen (Address: 0x18009cda0)
SysStringLen (Address: 0x18009cd88)
VarBstrCmp (Address: 0x18009cd90)

RPCRT4.dll

UuidFromStringW (Address: 0x18009cdc8)

XmlLite.dll

CreateXmlReader (Address: 0x18009cdd8)
CreateXmlReaderInputWithEncodingName (Address: 0x18009cde0)