fwbase.dll
v10.0.19041.6328
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 201
FwExtractPortNumber
#1 · 0x9e90
FwIsValidPorts
#2 · 0x4ab0
FwPortsToString
#3 · 0x47e0
FWIndicatePortInUse_Helper
#4 · 0x92b0
FwAddrChangeSourceInitialize
#5 · 0x9930
FwAddrChangeSourceShutdown
#6 · 0x1b580
FwAddrChangeSourceSignal
#7 · 0x99c0
FwAlloc
#8 · 0x7cc0
FwAllocArray
#9 · 0xa4b0
FwAllocCheckSize
#10 · 0x6db0
FwArrayAppend
#11 · 0x8a50
FwArrayCat
#12 · 0x8b80
FwArrayCopy
#13 · 0x8870
FwArrayCreateFromRegistry
#14 · 0x1a6d0
FwArrayDestroy
#15 · 0x6f00
FwArrayErase
#16 · 0x1a890
FwAuthSuiteEmpty
#17 · 0x1cac0
FwAuthSuiteEmptyByVersion
#18 · 0x1cae0
FwAuthorizedAppEncode
#19 · 0x1bf00
FwBaseAlloc
#20 · 0x7cc0
FwBaseAllocCheckSize
#21 · 0x6db0
FwBaseFree
#22 · 0x7870
FwBoolIsEqual
#23 · 0x9460
FwBuildIndirectString
#24 · 0x19660
FwCanonizeAuthorizedApps
#25 · 0x9420
FwChangeSinkCreate
#26 · 0x84b0
FwChangeSinkDestroy
#27 · 0x1b5b0
FwChangeSourceInitialize
#28 · 0x9920
FwChangeSourceShutdown
#29 · 0x1b5e0
FwChangeSourceSignal
#30 · 0x95c0
FwChangeSourceSignalStart
#31 · 0xa530
FwCloseHandle
#32 · 0x8f00
FwConstructRemoteMachineSPN
#33 · 0x196e0
FwCreateDirectory
#34 · 0x19830
FwCreateSDDLStringFromPolicyAppId
#35 · 0xf390
FwCriticalSectionCreate
#36 · 0x9340
FwCriticalSectionDestroy
#37 · 0x9590
FwCriticalSectionEnter
#38 · 0x9180
FwCriticalSectionLeave
#39 · 0x9170
FwDWordMultiply
#40 · 0x6e00
FwEnableMemTracing
#41 · 0x9680
FwEnablePrivilege
#42 · 0x19940
FwExpandEnvironmentStrings
#43 · 0x7b70
FwFieldNameMatchStringBegining
#44 · 0x87d0
FwFinalHash
#45 · 0x1ae60
FwFree
#46 · 0x7870
FwFreeCertCriteria
#47 · 0x1cb60
FwFreeRpcCallersProcessInfo
#48 · 0x77f0
FwGetAppBlockList
#49 · 0xa0d0
FwGetAuthorizedApp
#50 · 0x1bfd0
FwGetExpandedCanonicalLongPathName
#51 · 0x7730
FwGetIcmpSettings
#52 · 0x1c080
FwGetLongPathName
#53 · 0x7960
FwGetPolicyAppIdFromSDDLString
#54 · 0xf400
FwGetProfileIndexFromProfileType
#55 · 0x89e0
FwGetProfileTypeFromProfileIndex
#56 · 0x8a30
FwGetRemoteAdminSettings
#57 · 0x1c130
FwGetRpcCallersProcessImageName
#58 · 0x4b90
FwGetRpcCallersProcessInfo
#59 · 0x7da0
FwGetService
#60 · 0x1cdc0
FwGetServiceTypes
#61 · 0x1ce10
FwGetServices
#62 · 0x1c180
FwGetStaticFwPort
#63 · 0x1c240
FwGetStringId
#64 · 0x9010
FwGetStringIdForStatusCode
#65 · 0xa470
FwGetSysPathName
#66 · 0x19af0
FwGetTokenInformation
#67 · 0x6e40
FwHResultToWindowsError
#68 · 0x8b50
FwHashtableCreate
#69 · 0xa1a0
FwHashtableDestroy
#70 · 0x1ae80
FwHashtableEmpty
#71 · 0x9520
FwHashtableFind
#72 · 0x1af00
FwHashtableGetNext
#73 · 0x1af30
FwHashtableInsert
#74 · 0x1af50
FwHashtableIsEmpty
#75 · 0x10890
FwHashtableRemove
#76 · 0x1afb0
FwIOReadPortUseIndications
#77 · 0x9b00
FwIOWritePortUseIndications
#78 · 0x9a00
FwIcfAuthBypassServicesDestroy
#79 · 0x7d80
FwIcfAuthBypassSubNetsDestroy
#80 · 0x7d40
FwIcfAuthorizedAppCopy
#81 · 0x1aa20
FwIcfAuthorizedAppsCopy
#82 · 0x1ab50
FwIcfAuthorizedAppsDestroy
#83 · 0x1abc0
FwIcfDynamicFwPortDestroy
#84 · 0x71d0
FwIcfIpV4SubNetsCanonize
#85 · 0x9400
FwIcfIpV6SubNetsCanonize
#86 · 0x93e0
FwIcfSubNetsCopy
#87 · 0x1adb0
FwIcfSubNetsDestroy
#88 · 0x6d90
FwIcfSubNetsGetScope
#89 · 0x1ae30
FwIcfSubNetsIsEqual
#90 · 0x93a0
FwImageListDestroy
#91 · 0x1c310
FwImageListHasImage
#92 · 0x1c330
FwInitMemoryMgr
#93 · 0xf040
FwInitializeHashContext
#94 · 0x1afd0
FwIpV4SubNetDecode
#95 · 0x1c370
FwIsBuiltInPort
#96 · 0x1cee0
FwIsMachineLocalHost
#97 · 0x8f30
FwLicensingIsIoT
#98 · 0xa4e0
FwLicensingIsNetIsolationOnly
#99 · 0x6960
FwLicensingIsXbox
#100 · 0x9190
FwLoadIndirectString
#101 · 0x6fc0
FwLoadString
#102 · 0x96b0
FwLookupAccountSid
#103 · 0x9f20
FwMarshalledMetaDataCopy
#104 · 0x8990
FwMarshalledMetaDataInitialize
#105 · 0x8b20
FwMetaDataAddEnforcementState
#106 · 0x8c20
FwMetaDataCopy
#107 · 0x19c10
FwMetaDataFree
#108 · 0x9050
FwMetaDataIsEnforcementStatePresent
#109 · 0x8f80
FwModifySDDLStringWithPolicyAppId
#110 · 0xf490
FwMultiByteToWideChar
#111 · 0x19d40
FwNtStatusToHResult
#112 · 0xf790
FwParseEdpCloudResourceStringToNrptRuleList
#113 · 0x1b090
FwProfileTypesToString
#114 · 0x7210
FwRegCloseKey
#115 · 0x91b0
FwRegCreateKey
#116 · 0x8750
FwRegDeleteAllValues
#117 · 0x19070
FwRegDeleteKey
#118 · 0x19170
FwRegDeleteValue
#119 · 0x91d0
FwRegEnumValueNameAndValueData
#120 · 0xb630
FwRegNotifyCreate
#121 · 0x82f0
FwRegNotifyDestroy
#122 · 0x192f0
FwRegOpenKey
#123 · 0x8270
FwRegQueryDWord
#124 · 0x8530
FwRegQueryNumKeys
#125 · 0x19350
FwRegQueryNumValues
#126 · 0x94d0
FwRegQueryString
#127 · 0x75c0
FwRegSetDWord
#128 · 0x9610
FwRegSetString
#129 · 0x90c0
FwReleasePrivilege
#130 · 0x19ef0
FwRemovePolicyAppIdFromSDDLString
#131 · 0xf7e0
FwReplacePolicyAppIdInSDDLString
#132 · 0xf9f0
FwReportErrorAsNtStatus
#133 · 0x19f80
FwReportErrorAsWinError
#134 · 0x9cc0
FwReportReturnError
#135 · 0x7190
FwResolveIndirectString
#136 · 0x6f40
FwRestructureHashtable
#137 · 0x1aff0
FwServiceSidCreateInPlace
#138 · 0xa220
FwSetMemLeakPolicy
#139 · 0x9680
FwShutdownMemoryMgr
#140 · 0xf040
FwSidCreate
#141 · 0x9e00
FwSidDestroy
#142 · 0x19fd0
FwSizeTAdd
#143 · 0x6d60
FwSizeTMultiply
#144 · 0x6e00
FwSortAddresses
#145 · 0x9250
FwSortInterfaceLUIDs
#146 · 0x9490
FwStaticFwPortEncode
#147 · 0x1c660
FwStaticFwPortEncodeValueName
#148 · 0x1c760
FwStringArrayCopy
#149 · 0xfad0
FwStringBuild
#150 · 0x6c20
FwStringBuildWithPrefix
#151 · 0xfc10
FwStringCanonicalizeCopy
#152 · 0x19ff0
FwStringConcat
#153 · 0xfd90
FwStringCopy
#154 · 0x7a60
FwStringCopyA
#155 · 0x1a170
FwStringCopyAtoWAlloc
#156 · 0x1a230
FwStringCopyWtoAAlloc
#157 · 0x1a320
FwStringPrefixConcat
#158 · 0xfe20
FwStringPrefixCopy
#159 · 0xfea0
FwSubNetsEncode
#160 · 0x1c9a0
FwSubstituteDeviceName
#161 · 0x4590
FwTriggerGetEventForSource
#162 · 0xa550
FwTriggerRearm
#163 · 0xa3e0
FwTriggerRegisterWait
#164 · 0xa310
FwTriggerUnregisterWait
#165 · 0x1b4c0
FwUpdateHash
#166 · 0x1b060
FwVerifyAuthenticationSet
#167 · 0x1cf10
FwVerifyAuthenticationSetQuery
#168 · 0x1d030
FwVerifyConnectionSecurityRule
#169 · 0x1d150
FwVerifyConnectionSecurityRuleQuery
#170 · 0x1d2b0
FwVerifyCryptoSet
#171 · 0x1d3d0
FwVerifyCryptoSetQuery
#172 · 0x1d4f0
FwVerifyFirewallRule
#173 · 0x4af0
FwVerifyFirewallRuleQuery
#174 · 0x8c50
FwVerifyMainModeRule
#175 · 0x1d610
FwVerifyMainModeRuleQuery
#176 · 0x1d700
FwVerifyNoHeapLeaks
#177 · 0xf040
FwWcsICmp
#178 · 0xa510
Int_FWVerifyAuthenticationSet
#179 · 0x1e260
Int_FWVerifyConnectionSecurityRule
#180 · 0x1e670
Int_FWVerifyCryptoSet
#181 · 0x1f8c0
Int_FWVerifyFirewallRule
#182 · 0x4e30
Int_FWVerifyMainModeRule
#183 · 0x1fc50
Int_FwIPV4RangeContainsMulticast
#184 · 0x200d0
Int_FwIPV6RangeContainsMulticast
#185 · 0x20120
Int_FwIsV6AddrLoopback
#186 · 0xa1f0
Int_FwValidateAndMigrateSecurityDescriptor
#187 · 0x4bf0
Int_FwValidateComplianceAndReduceAuthSetToVersion
#188 · 0x20150
Int_FwValidateComplianceAndReduceConnSecRuleToVersion
#189 · 0x20340
Int_FwValidateComplianceAndReduceCryptoSetToVersion
#190 · 0x20780
Int_FwValidateComplianceAndReduceFirewallRuleToVersion
#191 · 0x5820
Int_FwValidateComplianceAndReduceMainModeRuleToVersion
#192 · 0x20b60
Int_FwValidateSecurityDescriptor
#193 · 0x55c0
IsAddressesEmpty
#194 · 0x9d10
IsCSRuleTunnelMode
#195 · 0x1cbc0
IsRuleOldAuthApp
#196 · 0x8fc0
IsRuleOldGlobalOpenPort
#197 · 0x9070
IsRuleOldv1Compliant
#198 · 0x1cc50
IsRuleOpenPortOrAuthApp
#199 · 0x1cc90
Isv4AddressesEmpty
#200 · 0x9d70
Isv6AddressesEmpty
#201 · 0x9d40
No function matches your filter.
Imported DLLs & functions 174
ApiSetQueryApiSetPresence
0x10025010
DebugBreak
0x10025024
IsDebuggerPresent
0x10025028
OutputDebugStringW
0x1002502c
DelayLoadFailureHook
0x10025034
ResolveDelayLoadedAPI
0x1002503c
GetLastError
0x10025050
SetLastError
0x10025048
SetUnhandledExceptionFilter
0x1002504c
UnhandledExceptionFilter
0x10025044
CreateDirectoryW
0x1002505c
CreateFileW
0x10025058
GetLongPathNameW
0x10025060
CloseHandle
0x10025068
GetProcessHeap
0x10025070
HeapAlloc
0x10025078
HeapFree
0x10025074
FreeLibrary
0x10025090
GetModuleFileNameA
0x100250a4
GetModuleHandleExW
0x100250a0
GetModuleHandleW
0x1002509c
GetProcAddress
0x10025098
LoadLibraryExW
0x1002508c
LoadStringW
0x10025094
FormatMessageW
0x100250ac
ExpandEnvironmentStringsW
0x100250b4
GetCurrentProcess
0x100250c8
GetCurrentProcessId
0x100250c0
GetCurrentThread
0x100250d0
GetCurrentThreadId
0x100250d8
OpenProcessToken
0x100250cc
OpenThreadToken
0x100250d4
SetThreadToken
0x100250c4
TerminateProcess
0x100250bc
OpenProcess
0x100250e0
QueryPerformanceCounter
0x100250e8
RegCloseKey
0x100250f0
RegCreateKeyExW
0x100250f4
RegDeleteTreeW
0x100250f8
RegDeleteValueW
0x1002510c
RegEnumValueW
0x10025108
RegNotifyChangeKeyValue
0x10025104
RegOpenKeyExW
0x100250fc
RegQueryInfoKeyW
0x10025110
RegQueryValueExW
0x10025100
RegSetValueExW
0x10025114
PathCanonicalizeW
0x10025124
PathFindNextComponentW
0x1002511c
PathIsRelativeW
0x10025120
PathSkipRootW
0x10025128
CompareStringW
0x10025138
MultiByteToWideChar
0x10025130
WideCharToMultiByte
0x10025134
SHLoadIndirectString
0x10025140
lstrcmpiW
0x10025148
AcquireSRWLockExclusive
0x10025174
AcquireSRWLockShared
0x10025168
CreateEventW
0x10025188
CreateMutexExW
0x10025184
CreateSemaphoreExW
0x10025190
DeleteCriticalSection
0x10025178
EnterCriticalSection
0x10025154
InitializeCriticalSectionAndSpinCount
0x1002518c
InitializeCriticalSectionEx
0x1002516c
LeaveCriticalSection
0x10025180
OpenSemaphoreW
0x1002517c
ReleaseMutex
0x10025150
ReleaseSemaphore
0x1002515c
ReleaseSRWLockExclusive
0x10025170
ReleaseSRWLockShared
0x10025164
SetEvent
0x10025194
WaitForSingleObject
0x10025160
WaitForSingleObjectEx
0x10025158
Sleep
0x1002519c
GetComputerNameExW
0x100251a8
GetSystemTimeAsFileTime
0x100251b0
GetTickCount
0x100251a4
GetVersionExW
0x100251ac
CloseThreadpoolTimer
0x100251cc
CloseThreadpoolWait
0x100251c0
CreateThreadpoolTimer
0x100251c8
CreateThreadpoolWait
0x100251c4
SetThreadpoolTimer
0x100251d4
SetThreadpoolWait
0x100251b8
WaitForThreadpoolTimerCallbacks
0x100251d0
WaitForThreadpoolWaitCallbacks
0x100251bc
QueueUserWorkItem
0x100251dc
UnregisterWaitEx
0x100251e0
RegisterWaitForSingleObjectEx
0x100251e8
AdjustTokenPrivileges
0x100251fc
AllocateAndInitializeSid
0x10025204
DuplicateTokenEx
0x10025200
FreeSid
0x10025208
GetAce
0x100251f0
GetSecurityDescriptorDacl
0x100251f4
GetTokenInformation
0x1002520c
IsValidSecurityDescriptor
0x100251f8
msvcrt.dll
40
__CxxFrameHandler3
0x1002522c
__dllonexit
0x10025274
_amsg_exit
0x10025248
_CxxThrowException
0x10025298
_except_handler4_common
0x100252a0
_initterm
0x10025224
_lock
0x100252a8
_onexit
0x10025270
_purecall
0x100252a4
_ultow
0x1002527c
_unlock
0x10025278
_vsnprintf_s
0x10025220
_vsnwprintf
0x1002526c
_wcsicmp
0x10025280
_wcsnicmp
0x10025268
_XcptFilter
0x10025240
??0exception@@QAE@ABV0@@Z
0x1002521c
??0exception@@QAE@XZ
0x10025214
??1exception@@UAE@XZ
0x10025228
??1type_info@@UAE@XZ
0x10025218
??3@YAXPAX@Z
0x10025294
free
0x100252ac
iswalpha
0x10025238
iswdigit
0x10025264
malloc
0x1002524c
memcmp
0x1002528c
memcpy
0x10025254
memcpy_s
0x1002529c
memmove
0x10025250
memmove_s
0x10025290
memset
0x100252b0
qsort
0x10025244
towupper
0x10025230
wcschr
0x1002525c
wcsncmp
0x10025288
wcsncpy_s
0x10025284
wcspbrk
0x10025234
wcsstr
0x10025258
wcstok_s
0x1002523c
wcstoul
0x10025260
ntdll.dll
30
EtwEventWrite
0x100252f0
EtwGetTraceEnableFlags
0x1002531c
EtwGetTraceEnableLevel
0x10025324
EtwGetTraceLoggerHandle
0x10025320
EtwRegisterTraceGuidsW
0x10025328
EtwTraceMessage
0x10025314
EtwUnregisterTraceGuids
0x10025318
NtClose
0x10025304
NtOpenSymbolicLinkObject
0x1002530c
NtQueryInformationProcess
0x100252c0
NtQueryObject
0x10025300
NtQuerySymbolicLinkObject
0x10025308
RtlCanonicalizeDomainName
0x100252f4
RtlContractHashTable
0x100252c4
RtlCreateHashTable
0x100252ec
RtlCreateServiceSid
0x100252fc
RtlDeleteHashTable
0x100252e8
RtlEndEnumerationHashTable
0x100252cc
RtlEnumerateEntryHashTable
0x100252d0
RtlExpandHashTable
0x100252c8
RtlFreeUnicodeString
0x1002532c
RtlGetNextEntryHashTable
0x100252d8
RtlInitEnumerationHashTable
0x100252d4
RtlInitUnicodeString
0x10025310
RtlInsertEntryHashTable
0x100252e4
RtlIpv4AddressToStringW
0x100252b8
RtlIpv4StringToAddressW
0x100252bc
RtlLookupEntryHashTable
0x100252dc
RtlNtStatusToDosError
0x100252f8
RtlRemoveEntryHashTable
0x100252e0
I_RpcBindingInqLocalClientPID
0x10025008
RpcImpersonateClient
0x10025004
RpcRevertToSelf
0x10025000
No function matches your filter.