wimgapi.dll
v10.0.19041.5553
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 60
DllCanUnloadNow
#1 · 0x15ee0
DllMain
#2 · 0x15eb0
WIMAddImagePath
#3 · 0x169e0
WIMAddImagePaths
#4 · 0x16f80
WIMAddWimbootEntry
#5 · 0x17790
WIMApplyImage
#6 · 0x18bb0
WIMCaptureImage
#7 · 0x1c330
WIMCloseHandle
#8 · 0x1d260
WIMCommitImageHandle
#9 · 0x20a50
WIMCopyFile
#10 · 0x22b50
WIMCreateFile
#11 · 0x1c7e0
WIMCreateImageFile
#12 · 0x26da0
WIMCreateWofCompressedFile
#13 · 0x18d50
WIMDeleteImage
#14 · 0x27720
WIMDeleteImageMounts
#15 · 0x1fac0
WIMEnumImageFiles
#16 · 0x26bd0
WIMExportImage
#17 · 0x283a0
WIMExtractImageDirectory
#18 · 0x293f0
WIMExtractImagePath
#19 · 0x28d60
WIMFindFirstImageFile
#20 · 0x268b0
WIMFindNextImageFile
#21 · 0x26ab0
WIMGetAttributes
#22 · 0x1d790
WIMGetImageCount
#23 · 0x1d740
WIMGetImageInformation
#24 · 0x2ada0
WIMGetMessageCallbackCount
#25 · 0x2c140
WIMGetMountedImageHandle
#26 · 0x226a0
WIMGetMountedImageInfo
#27 · 0x220a0
WIMGetMountedImageInfoFromHandle
#28 · 0x222e0
WIMGetMountedImages
#29 · 0x225f0
WIMGetWIMBootEntries
#30 · 0x17620
WIMGetWIMBootWIMPath
#31 · 0x17340
WIMInitFileIOCallbacks
#32 · 0x2cf40
WIMInitializeWofDriver
#33 · 0x180b0
WIMIsCurrentSystemWimboot
#34 · 0x178d0
WIMIsReferenceWim
#35 · 0x27290
WIMLoadImage
#36 · 0x2d2f0
WIMMountImage
#37 · 0x21370
WIMMountImageHandle
#38 · 0x1ff20
WIMProcessCustomImage
#39 · 0x31cb0
WIMReadFileEx
#40 · 0x1da00
WIMReadImageFile
#41 · 0x25e20
WIMRedirectFolderBeforeApply
#42 · 0x18b30
WIMRegisterLogFile
#43 · 0x336f0
WIMRegisterMessageCallback
#44 · 0x2c1b0
WIMRemountImage
#45 · 0x215a0
WIMSetBootImage
#46 · 0x1d360
WIMSetFileIOCallbackTemporaryPath
#47 · 0x2cf90
WIMSetImageInformation
#48 · 0x2b010
WIMSetImageUserSpecifiedCreationTime
#49 · 0x1c530
WIMSetReferenceFile
#50 · 0x1d590
WIMSetTemporaryPath
#51 · 0x1d2e0
WIMSetWimGuid
#52 · 0x1c500
WIMSingleInstanceFile
#53 · 0x26f10
WIMSplitFile
#54 · 0x34190
WIMUnmountImage
#55 · 0x218b0
WIMUnmountImageHandle
#56 · 0x20fe0
WIMUnregisterLogFile
#57 · 0x338a0
WIMUnregisterMessageCallback
#58 · 0x2c2d0
WIMUpdateWIMBootEntry
#59 · 0x174e0
WIMWriteFileWithIntegrity
#60 · 0x257f0
No function matches your filter.
Imported DLLs & functions 254
ApiSetQueryApiSetPresence
0x1008802c
DelayLoadFailureHook
0x10088034
ResolveDelayLoadedAPI
0x1008803c
GetLastError
0x10088050
SetLastError
0x10088048
SetUnhandledExceptionFilter
0x10088044
UnhandledExceptionFilter
0x1008804c
CreateDirectoryW
0x10088074
CreateFileW
0x100880d0
DeleteFileW
0x100880c8
FindClose
0x10088094
FindFirstFileW
0x1008809c
FindNextFileW
0x10088098
FlushFileBuffers
0x100880d4
GetDriveTypeW
0x100880bc
GetFileAttributesW
0x100880a0
GetFileInformationByHandle
0x100880cc
GetFileSize
0x10088088
GetFileSizeEx
0x1008807c
GetFinalPathNameByHandleW
0x10088064
GetFullPathNameW
0x10088068
GetLogicalDriveStringsW
0x100880b0
GetLongPathNameW
0x1008805c
GetTempFileNameW
0x1008808c
GetVolumeInformationByHandleW
0x100880b4
GetVolumeInformationW
0x1008806c
GetVolumePathNameW
0x10088078
LocalFileTimeToFileTime
0x100880a8
LockFileEx
0x100880ac
ReadFile
0x10088080
RemoveDirectoryW
0x100880b8
SetEndOfFile
0x100880c4
SetFileAttributesW
0x10088058
SetFileInformationByHandle
0x10088060
SetFilePointer
0x10088084
SetFilePointerEx
0x100880c0
SetFileTime
0x10088090
UnlockFileEx
0x10088070
WriteFile
0x100880a4
GetTempPathW
0x100880dc
GetVolumeNameForVolumeMountPointW
0x100880e0
GetVolumePathNamesForVolumeNameW
0x100880e4
CloseHandle
0x10088100
DuplicateHandle
0x100880fc
GetHandleInformation
0x100880f8
GetProcessHeap
0x1008810c
HeapAlloc
0x10088114
HeapFree
0x10088110
HeapReAlloc
0x10088108
DosDateTimeToFileTime
0x10088134
DisableThreadLibraryCalls
0x1008814c
FreeLibrary
0x10088140
GetModuleFileNameW
0x10088150
GetModuleHandleExW
0x10088148
GetModuleHandleW
0x10088154
GetProcAddress
0x10088144
LoadLibraryExW
0x1008813c
LoadLibraryW
0x1008815c
FormatMessageW
0x10088164
CreateFileMappingW
0x10088170
MapViewOfFile
0x10088174
UnmapViewOfFile
0x1008816c
GetPrivateProfileSectionW
0x1008817c
ExpandEnvironmentStringsW
0x10088188
GetCurrentDirectoryW
0x10088184
GetEnvironmentVariableW
0x1008818c
CreateProcessW
0x100881a4
CreateThread
0x100881b0
GetCurrentProcess
0x100881c4
GetCurrentProcessId
0x100881a8
GetCurrentThread
0x100881cc
GetCurrentThreadId
0x10088198
GetExitCodeProcess
0x10088194
OpenProcessToken
0x100881a0
OpenThreadToken
0x1008819c
SetThreadToken
0x100881ac
TerminateProcess
0x100881c8
TlsAlloc
0x100881c0
TlsFree
0x100881bc
TlsGetValue
0x100881b8
TlsSetValue
0x100881b4
OpenProcess
0x100881d4
SetThreadIdealProcessor
0x100881dc
QueryPerformanceCounter
0x100881e4
RegCloseKey
0x100881f0
RegCreateKeyExW
0x10088200
RegDeleteKeyExW
0x10088208
RegDeleteValueW
0x1008820c
RegEnumKeyExW
0x1008821c
RegEnumValueW
0x100881f4
RegFlushKey
0x10088214
RegLoadKeyW
0x10088204
RegOpenKeyExW
0x100881ec
RegQueryInfoKeyW
0x100881f8
RegQueryValueExW
0x100881fc
RegSetValueExW
0x10088210
RegUnLoadKeyW
0x10088218
CompareStringW
0x1008822c
MultiByteToWideChar
0x10088228
WideCharToMultiByte
0x10088224
CharUpperW
0x10088234
CreateEventW
0x1008826c
CreateMutexW
0x10088248
CreateSemaphoreExW
0x10088250
DeleteCriticalSection
0x10088268
EnterCriticalSection
0x1008825c
InitializeCriticalSection
0x10088244
InitializeCriticalSectionAndSpinCount
0x10088240
LeaveCriticalSection
0x10088260
OpenEventW
0x10088274
ReleaseMutex
0x10088258
ReleaseSemaphore
0x10088254
ResetEvent
0x10088270
SetEvent
0x1008823c
WaitForMultipleObjectsEx
0x10088264
WaitForSingleObject
0x1008824c
Sleep
0x1008827c
GetSystemDirectoryW
0x1008829c
GetSystemInfo
0x10088298
GetSystemTimeAsFileTime
0x100882a0
GetTickCount
0x10088294
GlobalMemoryStatusEx
0x10088290
GetFileVersionInfoExW
0x100882ac
GetFileVersionInfoSizeExW
0x100882a8
VerQueryValueW
0x100882b0
Wow64DisableWow64FsRedirection
0x100882b8
Wow64RevertWow64FsRedirection
0x100882bc
AddAccessAllowedAce
0x100882c8
AddAccessAllowedAceEx
0x10088308
AdjustTokenPrivileges
0x100882fc
AllocateAndInitializeSid
0x100882d8
EqualSid
0x100882ec
FreeSid
0x100882d4
GetAclInformation
0x1008830c
GetLengthSid
0x100882cc
GetSecurityDescriptorControl
0x10088300
GetSecurityDescriptorDacl
0x100882f8
GetSecurityDescriptorGroup
0x100882e8
GetSecurityDescriptorLength
0x100882e4
GetSecurityDescriptorOwner
0x100882dc
GetSecurityDescriptorSacl
0x100882f0
GetTokenInformation
0x100882f4
InitializeAcl
0x100882c4
InitializeSecurityDescriptor
0x100882e0
RevertToSelf
0x10088304
SetSecurityDescriptorDacl
0x100882d0
BCryptCloseAlgorithmProvider
0x10088314
BCryptCreateHash
0x10088324
BCryptDestroyHash
0x10088318
BCryptFinishHash
0x1008831c
BCryptGetProperty
0x10088328
BCryptHashData
0x10088320
BCryptOpenAlgorithmProvider
0x1008832c
msvcrt.dll
43
__dllonexit
0x10088364
_amsg_exit
0x10088394
_callnewh
0x10088348
_except_handler4_common
0x10088374
_initterm
0x10088378
_lock
0x1008836c
_onexit
0x10088360
_purecall
0x100883b0
_strnicmp
0x1008834c
_unlock
0x10088368
_vscwprintf
0x100883b8
_vsnwprintf
0x100883c0
_wcsicmp
0x10088384
_wcslwr
0x10088350
_wcsnicmp
0x100883d0
_wcsrev
0x10088370
_wcstoi64
0x100883ac
_wcsupr
0x10088354
_wtoi
0x100883bc
_XcptFilter
0x10088344
bsearch
0x1008839c
free
0x1008838c
iswspace
0x100883d4
malloc
0x1008837c
memcmp
0x10088338
memcpy
0x1008833c
memcpy_s
0x10088358
memmove
0x100883c4
memmove_s
0x100883a4
memset
0x100883dc
qsort
0x10088340
strcpy_s
0x100883b4
strncpy_s
0x1008835c
swscanf_s
0x10088390
towlower
0x10088334
towupper
0x10088380
wcschr
0x100883a8
wcsncmp
0x100883d8
wcsnlen
0x100883cc
wcsrchr
0x10088388
wcsstr
0x100883c8
wcstok_s
0x100883a0
wcstoul
0x10088398
ntdll.dll
40
DbgPrintEx
0x100883e8
NtClose
0x10088464
NtCreateFile
0x10088438
NtOpenFile
0x10088470
NtQueryDirectoryFile
0x10088468
NtQueryEaFile
0x1008843c
NtQueryInformationFile
0x10088454
NtQueryInformationProcess
0x10088440
NtQuerySecurityObject
0x10088428
NtQueryVolumeInformationFile
0x10088434
NtSetEaFile
0x10088418
NtSetInformationFile
0x10088458
NtSetSecurityObject
0x10088444
NtUnloadKey2
0x10088424
NtYieldExecution
0x100883ec
RtlAcquireResourceExclusive
0x10088410
RtlAcquireResourceShared
0x1008840c
RtlAdjustPrivilege
0x10088478
RtlAllocateHeap
0x1008846c
RtlCompressBuffer
0x10088420
RtlDeleteResource
0x10088404
RtlDosPathNameToNtPathName_U
0x10088474
RtlDosPathNameToNtPathName_U_WithStatus
0x10088400
RtlDowncaseUnicodeChar
0x100883e4
RtlFindAceByType
0x10088448
RtlFreeHeap
0x10088460
RtlGetCompressionWorkSpaceSize
0x10088480
RtlGetLastNtStatus
0x10088450
RtlGetPersistedStateLocation
0x1008841c
RtlGetVersion
0x100883fc
RtlImpersonateSelf
0x10088430
RtlInitializeCriticalSection
0x100883f4
RtlInitializeResource
0x10088414
RtlInitUnicodeString
0x1008842c
RtlNtStatusToDosError
0x1008847c
RtlRaiseStatus
0x100883f0
RtlReAllocateHeap
0x100883f8
RtlReleaseResource
0x10088408
RtlSetControlSecurityDescriptor
0x1008844c
RtlSetIoCompletionCallback
0x1008845c
RPCRT4.dll
10
I_RpcMapWin32Status
0x10088004
NdrClientCall2
0x1008801c
RpcBindingFree
0x10088020
RpcBindingFromStringBindingW
0x10088014
RpcBindingSetAuthInfoW
0x10088018
RpcStringBindingComposeW
0x10088010
RpcStringFreeW
0x1008800c
UuidCreate
0x10088000
UuidFromStringW
0x10088024
UuidToStringW
0x10088008
No function matches your filter.