xwtpw32.dll

Description: Extensible Wizard Type Plugin for Win32

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: cc7a0241bf085891c64d79f7f8f5cab2

File Size: 144.5 KB

Uploaded At: Dec. 1, 2025, 7:46 a.m.

Views: 6

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x4720)
  • DllGetClassObject (Ordinal: 2, Address: 0x4740)

Imported DLLs & Functions

api-ms-win-core-atoms-l1-1-0.dll
  • GlobalAddAtomW (Address: 0x180017b18)
  • GlobalDeleteAtom (Address: 0x180017b28)
  • GlobalGetAtomNameW (Address: 0x180017b20)
api-ms-win-core-com-l1-1-0.dll
  • CLSIDFromString (Address: 0x180017b60)
  • CoCreateGuid (Address: 0x180017b68)
  • CoCreateInstance (Address: 0x180017b40)
  • CoTaskMemAlloc (Address: 0x180017b38)
  • CoTaskMemFree (Address: 0x180017b58)
  • CoTaskMemRealloc (Address: 0x180017b50)
  • StringFromGUID2 (Address: 0x180017b48)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x180017b78)
  • OutputDebugStringA (Address: 0x180017b80)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x180017b90)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x180017ba0)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180017bc0)
  • RaiseException (Address: 0x180017bb0)
  • SetLastError (Address: 0x180017bb8)
  • SetUnhandledExceptionFilter (Address: 0x180017bc8)
  • UnhandledExceptionFilter (Address: 0x180017bd0)
api-ms-win-core-file-l1-1-0.dll
  • GetFullPathNameW (Address: 0x180017be0)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x180017bf0)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x180017c00)
  • HeapAlloc (Address: 0x180017c08)
  • HeapFree (Address: 0x180017c10)
  • HeapReAlloc (Address: 0x180017c18)
api-ms-win-core-heap-l2-1-0.dll
  • LocalFree (Address: 0x180017c28)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x180017c88)
  • FindResourceExW (Address: 0x180017c58)
  • FreeLibrary (Address: 0x180017c48)
  • GetModuleFileNameA (Address: 0x180017c60)
  • GetModuleFileNameW (Address: 0x180017c70)
  • GetModuleHandleA (Address: 0x180017c50)
  • GetModuleHandleW (Address: 0x180017c38)
  • GetProcAddress (Address: 0x180017c78)
  • LoadLibraryExW (Address: 0x180017c40)
  • LoadResource (Address: 0x180017c68)
  • SizeofResource (Address: 0x180017c80)
api-ms-win-core-libraryloader-l1-2-1.dll
  • FindResourceW (Address: 0x180017ca0)
  • LoadLibraryW (Address: 0x180017c98)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x180017cb0)
api-ms-win-core-memory-l1-1-0.dll
  • WriteProcessMemory (Address: 0x180017cc0)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x180017ce8)
  • GetCurrentProcessId (Address: 0x180017cf8)
  • GetCurrentThreadId (Address: 0x180017d00)
  • TerminateProcess (Address: 0x180017cf0)
  • TlsAlloc (Address: 0x180017d08)
  • TlsFree (Address: 0x180017ce0)
  • TlsGetValue (Address: 0x180017cd8)
  • TlsSetValue (Address: 0x180017cd0)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180017d18)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x180017d60)
  • RegCreateKeyExW (Address: 0x180017d38)
  • RegDeleteValueW (Address: 0x180017d28)
  • RegEnumKeyExW (Address: 0x180017d30)
  • RegOpenKeyExW (Address: 0x180017d48)
  • RegQueryInfoKeyW (Address: 0x180017d58)
  • RegQueryValueExW (Address: 0x180017d50)
  • RegSetValueExW (Address: 0x180017d40)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x180017d78)
  • RtlLookupFunctionEntry (Address: 0x180017d70)
  • RtlVirtualUnwind (Address: 0x180017d80)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • PathFileExistsW (Address: 0x180017d90)
  • PathUnExpandEnvStringsW (Address: 0x180017d98)
api-ms-win-core-sidebyside-l1-1-0.dll
  • ActivateActCtx (Address: 0x180017dc0)
  • CreateActCtxW (Address: 0x180017da8)
  • DeactivateActCtx (Address: 0x180017db0)
  • ReleaseActCtx (Address: 0x180017db8)
api-ms-win-core-string-l1-1-0.dll
  • MultiByteToWideChar (Address: 0x180017dd0)
  • WideCharToMultiByte (Address: 0x180017dd8)
api-ms-win-core-string-l2-1-0.dll
  • CharNextW (Address: 0x180017de8)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrcmpiA (Address: 0x180017e00)
  • lstrcmpiW (Address: 0x180017df8)
api-ms-win-core-synch-l1-1-0.dll
  • CreateMutexW (Address: 0x180017e20)
  • DeleteCriticalSection (Address: 0x180017e38)
  • EnterCriticalSection (Address: 0x180017e18)
  • InitializeCriticalSection (Address: 0x180017e40)
  • InitializeCriticalSectionAndSpinCount (Address: 0x180017e28)
  • LeaveCriticalSection (Address: 0x180017e30)
  • ReleaseMutex (Address: 0x180017e10)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x180017e50)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x180017e68)
  • GetTickCount (Address: 0x180017e60)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x180017ea0)
  • GetTraceEnableLevel (Address: 0x180017e98)
  • GetTraceLoggerHandle (Address: 0x180017e78)
  • RegisterTraceGuidsW (Address: 0x180017e90)
  • TraceMessage (Address: 0x180017e88)
  • UnregisterTraceGuids (Address: 0x180017e80)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventRegister (Address: 0x180017ec0)
  • EventUnregister (Address: 0x180017eb8)
  • EventWriteTransfer (Address: 0x180017eb0)
DUI70.dll
  • ??0IXProviderCP@DirectUI@@QEAA@XZ (Address: 0x1800179d0)
  • ?AddListener@Element@DirectUI@@QEAAJPEAUIElementListener@2@@Z (Address: 0x1800179b8)
  • ?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z (Address: 0x1800179a8)
  • ?CreateElement@DUIXmlParser@DirectUI@@QEAAJPEBGPEAVElement@2@1PEAKPEAPEAV32@@Z (Address: 0x180017a00)
  • ?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ (Address: 0x1800179f0)
  • ?Destroy@Element@DirectUI@@QEAAJ_N@Z (Address: 0x1800179c0)
  • ?SetAccessible@Element@DirectUI@@QEAAJ_N@Z (Address: 0x1800179c8)
  • ?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z (Address: 0x1800179f8)
  • CreateDUIWrapperEx (Address: 0x1800179e0)
  • InitProcessPriv (Address: 0x1800179e8)
  • InitThread (Address: 0x1800179b0)
  • UnInitProcessPriv (Address: 0x180017a08)
  • UnInitThread (Address: 0x1800179d8)
GDI32.dll
  • CreateFontIndirectW (Address: 0x180017a20)
  • DeleteObject (Address: 0x180017a28)
  • GetObjectW (Address: 0x180017a18)
msvcrt.dll
  • __C_specific_handler (Address: 0x180017f98)
  • __CxxFrameHandler3 (Address: 0x180017f10)
  • __dllonexit (Address: 0x180017fb0)
  • __RTDynamicCast (Address: 0x180017fc8)
  • _amsg_exit (Address: 0x180017f88)
  • _callnewh (Address: 0x180017f60)
  • _CxxThrowException (Address: 0x180017f70)
  • _errno (Address: 0x180017fc0)
  • _initterm (Address: 0x180017fa0)
  • _lock (Address: 0x180017f68)
  • _onexit (Address: 0x180017f48)
  • _purecall (Address: 0x180017ef0)
  • _unlock (Address: 0x180017f00)
  • _vsnwprintf (Address: 0x180017f08)
  • _XcptFilter (Address: 0x180017f80)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x180017f90)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x180017f28)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x180017f78)
  • ??0exception@@QEAA@XZ (Address: 0x180017f30)
  • ??1exception@@UEAA@XZ (Address: 0x180017ee0)
  • ??1type_info@@UEAA@XZ (Address: 0x180017f20)
  • ?terminate@@YAXXZ (Address: 0x180017fa8)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x180017ee8)
  • free (Address: 0x180017f58)
  • malloc (Address: 0x180017f40)
  • memcpy (Address: 0x180017f18)
  • memcpy_s (Address: 0x180017f38)
  • memmove_s (Address: 0x180017f50)
  • memset (Address: 0x180017fd0)
  • realloc (Address: 0x180017fb8)
  • tolower (Address: 0x180017ed8)
  • towlower (Address: 0x180017ed0)
  • wcsncpy_s (Address: 0x180017ef8)
USER32.dll
  • CallWindowProcW (Address: 0x180017a40)
  • DestroyWindow (Address: 0x180017a60)
  • EnumPropsA (Address: 0x180017ab8)
  • EnumPropsExA (Address: 0x180017ae0)
  • EnumPropsExW (Address: 0x180017b08)
  • EnumPropsW (Address: 0x180017ac8)
  • FindWindowExW (Address: 0x180017b00)
  • GetFocus (Address: 0x180017a58)
  • GetParent (Address: 0x180017ae8)
  • GetPropW (Address: 0x180017a78)
  • GetSystemMetrics (Address: 0x180017a98)
  • GetWindowLongPtrW (Address: 0x180017aa8)
  • GetWindowRect (Address: 0x180017a50)
  • GetWindowTextW (Address: 0x180017af8)
  • IsWindow (Address: 0x180017ab0)
  • LoadImageW (Address: 0x180017af0)
  • LoadStringW (Address: 0x180017a38)
  • MessageBeep (Address: 0x180017aa0)
  • MessageBoxW (Address: 0x180017a70)
  • PeekMessageW (Address: 0x180017ac0)
  • PostMessageW (Address: 0x180017a48)
  • PostQuitMessage (Address: 0x180017ad8)
  • RemovePropW (Address: 0x180017a90)
  • SendMessageW (Address: 0x180017a88)
  • SetPropW (Address: 0x180017ad0)
  • SetWindowLongPtrW (Address: 0x180017a80)
  • SetWindowPos (Address: 0x180017a68)