NCProv.dll - Online Dependency Analysis & Download - DLLView

NCProv.dll

Description: Non-COM WMI Event Provision APIs

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.4474

Architecture: 64-bit

Operating System: Windows NT

SHA256: 807296c34bd97d3ce02630f6ce06090d

File Size: 111.5 KB

Uploaded At: Dec. 1, 2025, 7:51 a.m.

Views: 5

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x3f90)
DllGetClassObject (Ordinal: 2, Address: 0x4770)
DllRegisterServer (Ordinal: 3, Address: 0xd6c0)
DllUnregisterServer (Ordinal: 4, Address: 0xd6d0)

Imported DLLs & Functions

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180012100)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180012110)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180012128)
SetUnhandledExceptionFilter (Address: 0x180012130)
UnhandledExceptionFilter (Address: 0x180012120)

api-ms-win-core-file-l1-1-0.dll

ReadFileEx (Address: 0x180012148)
WriteFile (Address: 0x180012140)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180012158)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180012170)
HeapDestroy (Address: 0x180012168)

api-ms-win-core-heap-l2-1-0.dll

LocalFree (Address: 0x180012180)

api-ms-win-core-io-l1-1-0.dll

GetOverlappedResult (Address: 0x180012190)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1800121e0)
FindResourceExW (Address: 0x1800121d8)
FreeLibrary (Address: 0x1800121a8)
GetModuleFileNameW (Address: 0x1800121b0)
GetModuleHandleW (Address: 0x1800121a0)
GetProcAddress (Address: 0x1800121c8)
LoadLibraryExW (Address: 0x1800121d0)
LoadResource (Address: 0x1800121c0)
SizeofResource (Address: 0x1800121b8)

api-ms-win-core-memory-l1-1-0.dll

VirtualAlloc (Address: 0x180012200)
VirtualProtect (Address: 0x1800121f8)
VirtualQuery (Address: 0x1800121f0)

api-ms-win-core-namedpipe-l1-1-0.dll

ConnectNamedPipe (Address: 0x180012220)
CreateNamedPipeW (Address: 0x180012218)
DisconnectNamedPipe (Address: 0x180012210)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x180012250)
GetCurrentProcess (Address: 0x180012230)
GetCurrentProcessId (Address: 0x180012238)
GetCurrentThreadId (Address: 0x180012240)
TerminateProcess (Address: 0x180012248)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180012260)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180012298)
RegCreateKeyExW (Address: 0x180012280)
RegDeleteValueW (Address: 0x180012270)
RegEnumKeyExW (Address: 0x1800122a0)
RegEnumValueW (Address: 0x180012288)
RegOpenKeyExW (Address: 0x1800122a8)
RegQueryInfoKeyW (Address: 0x180012290)
RegSetValueExW (Address: 0x180012278)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x1800122c8)
RtlLookupFunctionEntry (Address: 0x1800122b8)
RtlVirtualUnwind (Address: 0x1800122c0)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x1800122d8)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x1800122f0)
CharPrevW (Address: 0x1800122e8)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x180012300)
lstrcpynW (Address: 0x180012310)
lstrcpyW (Address: 0x180012308)

api-ms-win-core-synch-l1-1-0.dll

CreateEventW (Address: 0x180012338)
DeleteCriticalSection (Address: 0x180012328)
EnterCriticalSection (Address: 0x180012360)
InitializeCriticalSection (Address: 0x180012358)
LeaveCriticalSection (Address: 0x180012368)
OpenEventW (Address: 0x180012348)
ResetEvent (Address: 0x180012350)
SetEvent (Address: 0x180012330)
WaitForMultipleObjectsEx (Address: 0x180012340)
WaitForSingleObject (Address: 0x180012320)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x180012378)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x180012388)
GetSystemTimeAsFileTime (Address: 0x180012398)
GetTickCount (Address: 0x180012390)

msvcrt.dll

__C_specific_handler (Address: 0x180012460)
__CxxFrameHandler3 (Address: 0x1800123e8)
__dllonexit (Address: 0x180012470)
_amsg_exit (Address: 0x180012430)
_CxxThrowException (Address: 0x180012410)
_initterm (Address: 0x180012438)
_lock (Address: 0x180012450)
_onexit (Address: 0x1800123b8)
_purecall (Address: 0x180012478)
_unlock (Address: 0x180012468)
_vsnwprintf (Address: 0x180012480)
_wcsupr (Address: 0x1800123c0)
_XcptFilter (Address: 0x180012428)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800123a8)
??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1800123b0)
??0exception@@QEAA@AEBV0@@Z (Address: 0x1800123c8)
??1exception@@UEAA@XZ (Address: 0x1800123e0)
??1type_info@@UEAA@XZ (Address: 0x180012448)
?terminate@@YAXXZ (Address: 0x180012440)
?what@exception@@UEBAPEBDXZ (Address: 0x180012408)
free (Address: 0x180012458)
malloc (Address: 0x180012400)
memcmp (Address: 0x180012488)
memcpy (Address: 0x180012418)
memmove (Address: 0x180012420)
memset (Address: 0x180012490)
realloc (Address: 0x1800123f0)
wcscat_s (Address: 0x1800123f8)
wcscpy_s (Address: 0x1800123d8)
wcsstr (Address: 0x1800123d0)

ntdll.dll

EtwGetTraceEnableFlags (Address: 0x1800124a0)
EtwGetTraceEnableLevel (Address: 0x1800124b8)
EtwGetTraceLoggerHandle (Address: 0x1800124c0)
EtwRegisterTraceGuidsW (Address: 0x1800124a8)
EtwTraceMessage (Address: 0x1800124c8)
EtwUnregisterTraceGuids (Address: 0x1800124b0)

wbemcomn.dll

_ThrowMemoryException_ (Address: 0x180012508)
??0QL1_Parser@@QEAA@PEAVCGenLexSource@@@Z (Address: 0x1800124f0)
??1QL_LEVEL_1_RPN_EXPRESSION@@QEAA@XZ (Address: 0x1800124e8)
??1QL1_Parser@@UEAA@XZ (Address: 0x1800124e0)
?Next@CAbstractQl1Parser@@MEAAHH@Z (Address: 0x1800124d8)
?Parse@QL1_Parser@@QEAAHPEAPEAUQL_LEVEL_1_RPN_EXPRESSION@@@Z (Address: 0x180012520)
?WbemHeapInitialize@CWin32DefaultArena@@SAHPEAX@Z (Address: 0x180012510)
?WbemMemAlloc@CWin32DefaultArena@@SAPEAX_K@Z (Address: 0x180012528)
?WbemMemFree@CWin32DefaultArena@@SAHPEAX@Z (Address: 0x180012518)
?Write@CMemoryLog@@QEAAXJ@Z (Address: 0x180012500)
GetMemLogObject (Address: 0x1800124f8)