biwinrt.dll
v10.0.19041.5794
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 11
DllCanUnloadNow
#1 · 0x17430
DllGetActivationFactory
#2 · 0x16c80
DllGetClassObject
#3 · 0x20c70
DllMain
#4 · 0x18b70
BiRtCreateEventForApp
#5 · 0xd670
BiRtDeleteEventForApp
#6 · 0xaff0
BiRtEnumerateBrokeredEvents
#7 · 0x35670
BiRtIsValidActivationTypeForEventType
#8 · 0xd070
BiRtQueryBrokerEventId
#9 · 0x35890
BiRtRegisterWorkItem
#10 · 0xd0e0
BiRtRegisterWorkItemClsid
#11 · 0x35920
No function matches your filter.
Imported DLLs & functions 164
CoCreateFreeThreadedMarshaler
0x10039030
CoDecrementMTAUsage
0x1003902c
CoGetApartmentType
0x10039034
CoGetClassObject
0x10039048
CoIncrementMTAUsage
0x1003904c
CoTaskMemAlloc
0x1003903c
CoTaskMemFree
0x10039040
CoUnmarshalInterface
0x10039038
CreateStreamOnHGlobal
0x10039044
RoGetAgileReference
0x10039054
DebugBreak
0x10039060
IsDebuggerPresent
0x10039064
OutputDebugStringW
0x1003905c
DelayLoadFailureHook
0x1003906c
ResolveDelayLoadedAPI
0x10039074
GetLastError
0x10039080
RaiseException
0x10039084
SetLastError
0x1003908c
SetUnhandledExceptionFilter
0x1003907c
UnhandledExceptionFilter
0x10039088
CloseHandle
0x10039094
GetProcessHeap
0x100390a4
HeapAlloc
0x1003909c
HeapFree
0x100390a0
GlobalAlloc
0x100390ac
GlobalFree
0x100390b4
LocalAlloc
0x100390b0
DisableThreadLibraryCalls
0x100390c4
GetModuleFileNameA
0x100390cc
GetModuleHandleExW
0x100390bc
GetModuleHandleW
0x100390c0
GetProcAddress
0x100390c8
FormatMessageW
0x100390d4
GetCurrentProcess
0x100390e0
GetCurrentProcessId
0x100390e4
GetCurrentThreadId
0x100390ec
OpenProcessToken
0x100390e8
TerminateProcess
0x100390dc
OpenProcess
0x100390f4
QueryPerformanceCounter
0x100390fc
QuirkIsEnabled
0x10039104
AcquireSRWLockExclusive
0x10039118
AcquireSRWLockShared
0x10039124
CreateEventW
0x1003910c
CreateMutexExW
0x10039120
CreateSemaphoreExW
0x10039114
DeleteCriticalSection
0x10039130
EnterCriticalSection
0x10039144
InitializeCriticalSectionEx
0x10039148
InitializeSRWLock
0x1003913c
LeaveCriticalSection
0x10039150
OpenSemaphoreW
0x10039138
ReleaseMutex
0x10039134
ReleaseSemaphore
0x1003911c
ReleaseSRWLockExclusive
0x10039140
ReleaseSRWLockShared
0x1003912c
SetEvent
0x10039154
TryAcquireSRWLockExclusive
0x1003914c
WaitForSingleObject
0x10039128
WaitForSingleObjectEx
0x10039110
CloseThreadpoolTimer
0x10039174
CreateThreadpoolTimer
0x10039180
SetThreadpoolTimer
0x10039178
WaitForThreadpoolTimerCallbacks
0x1003917c
RoOriginateError
0x1003919c
RoOriginateErrorW
0x10039194
RoTransformError
0x10039198
SetRestrictedErrorInfo
0x100391a0
IsErrorPropagationEnabled
0x100391ac
RoGetMatchingRestrictedErrorInfo
0x100391b0
RoReportFailedDelegate
0x100391a8
RoActivateInstance
0x100391c4
RoGetActivationFactory
0x100391c0
RoInitialize
0x100391bc
RoUninitialize
0x100391b8
WindowsCompareStringOrdinal
0x100391e4
WindowsCreateString
0x100391cc
WindowsCreateStringReference
0x100391e8
WindowsDeleteString
0x100391d4
WindowsDuplicateString
0x100391d0
WindowsGetStringRawBuffer
0x100391d8
WindowsIsStringEmpty
0x100391e0
WindowsStringHasEmbeddedNull
0x100391dc
GetTraceEnableFlags
0x100391fc
GetTraceEnableLevel
0x100391f0
GetTraceLoggerHandle
0x10039200
RegisterTraceGuidsW
0x100391f4
UnregisterTraceGuids
0x100391f8
EventProviderEnabled
0x1003920c
EventRegister
0x10039208
EventSetInformation
0x10039218
EventUnregister
0x10039214
EventWriteTransfer
0x10039210
CloseServiceHandle
0x10039228
OpenSCManagerW
0x10039220
OpenServiceW
0x10039224
WaitServiceState
0x10039230
msvcrt.dll
34
__CxxFrameHandler3
0x10039260
__dllonexit
0x10039264
_amsg_exit
0x10039240
_callnewh
0x10039278
_CxxThrowException
0x1003927c
_except_handler4_common
0x1003924c
_ftol2
0x10039298
_initterm
0x10039238
_lock
0x10039258
_onexit
0x100392b8
_purecall
0x100392a4
_unlock
0x10039284
_vsnprintf_s
0x10039280
_vsnwprintf
0x100392b0
_XcptFilter
0x10039268
??_V@YAXPAX@Z
0x100392b4
??0exception@@QAE@ABV0@@Z
0x10039290
??0exception@@QAE@XZ
0x1003929c
??1exception@@UAE@XZ
0x100392a0
??1type_info@@UAE@XZ
0x10039244
??3@YAXPAX@Z
0x100392a8
?terminate@@YAXXZ
0x1003923c
?what@exception@@UBEPBDXZ
0x10039274
free
0x10039254
malloc
0x10039250
memcmp
0x10039294
memcpy
0x1003928c
memcpy_s
0x100392ac
memmove
0x10039288
memmove_s
0x1003925c
memset
0x100392bc
realloc
0x10039248
toupper
0x10039270
wcschr
0x1003926c
ntdll.dll
18
NtQueryInformationToken
0x10039308
NtQueryWnfStateData
0x100392cc
RtlAllocateHeap
0x100392e4
RtlCaptureContext
0x10039304
RtlCompareMemory
0x100392e8
RtlCompareUnicodeString
0x100392c4
RtlFreeHeap
0x100392dc
RtlInitUnicodeString
0x100392c8
RtlNtStatusToDosError
0x100392f0
RtlNtStatusToDosErrorNoTeb
0x100392ec
RtlQueryPackageClaims
0x100392e0
RtlReportException
0x100392fc
RtlRunOnceBeginInitialize
0x100392f4
RtlRunOnceComplete
0x10039300
RtlRunOnceInitialize
0x100392f8
RtlSubscribeWnfStateChangeNotification
0x100392d0
RtlUnsubscribeWnfStateChangeNotification
0x100392d4
WinSqmAddToStreamEx
0x100392d8
SysFreeString
0x10039000
NdrAsyncClientCall2
0x10039014
NdrClientCall4
0x10039020
RpcAsyncCompleteCall
0x10039018
RpcAsyncInitializeHandle
0x10039024
RpcBindingBind
0x10039008
RpcBindingCreateW
0x1003900c
RpcBindingFree
0x10039010
RpcExceptionFilter
0x1003901c
No function matches your filter.