WofUtil.dll

v10.0.19041.5438 32-bit Windows NT Analyzed
Download
Description
Windows Overlay File System Filter user mode API
Authors
© Microsoft Corporation. All rights reserved.
File size
28.5 KB
Uploaded
2025-12-01 08:08
Views
62
SHA-256
ba59d345510f5c0359963a2a842abcf8

Exported functions 11

WofEnumEntries #1 · 0x23f0
WofFileEnumFiles #2 · 0x2e70
WofGetDriverVersion #3 · 0x2800
WofIsExternalFile #4 · 0x2770
WofSetFileDataLocation #5 · 0x2620
WofShouldCompressBinaries #6 · 0x48b0
WofWimAddEntry #7 · 0x1f90
WofWimEnumFiles #8 · 0x2e40
WofWimRemoveEntry #9 · 0x2330
WofWimSuspendEntry #10 · 0x2270
WofWimUpdateEntry #11 · 0x2130

Imported DLLs & functions 79

api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x10008008
SetLastError 0x1000800c
SetUnhandledExceptionFilter 0x10008004
UnhandledExceptionFilter 0x10008000
api-ms-win-core-file-l1-1-0.dll 5
CreateFileW 0x10008014
FindClose 0x10008020
GetDriveTypeW 0x1000801c
GetFinalPathNameByHandleW 0x10008018
GetVolumePathNameW 0x10008024
api-ms-win-core-file-l1-2-0.dll 2
GetVolumeNameForVolumeMountPointW 0x1000802c
GetVolumePathNamesForVolumeNameW 0x10008030
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x10008038
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x10008040
HeapAlloc 0x10008044
HeapFree 0x10008048
api-ms-win-core-io-l1-1-0.dll 2
DeviceIoControl 0x10008054
GetOverlappedResult 0x10008050
api-ms-win-core-kernel32-legacy-l1-1-0.dll 1
LoadLibraryW 0x1000805c
api-ms-win-core-kernel32-legacy-l1-1-1.dll 1
PowerCreateRequest 0x10008064
api-ms-win-core-libraryloader-l1-2-0.dll 3
FreeLibrary 0x10008070
GetModuleHandleW 0x1000806c
GetProcAddress 0x10008074
api-ms-win-core-processthreads-l1-1-0.dll 7
CreateThread 0x1000807c
GetCurrentProcess 0x10008088
GetCurrentProcessId 0x10008090
GetCurrentThread 0x1000808c
GetCurrentThreadId 0x10008094
OpenThreadToken 0x10008080
TerminateProcess 0x10008084
api-ms-win-core-profile-l1-1-0.dll 2
QueryPerformanceCounter 0x100080a0
QueryPerformanceFrequency 0x1000809c
api-ms-win-core-psapi-l1-1-0.dll 1
K32GetPerformanceInfo 0x100080a8
api-ms-win-core-registry-l1-1-0.dll 5
RegCloseKey 0x100080bc
RegCreateKeyExW 0x100080c0
RegOpenKeyExW 0x100080b4
RegQueryValueExW 0x100080b0
RegSetValueExW 0x100080b8
api-ms-win-core-synch-l1-1-0.dll 5
CreateEventW 0x100080d4
CreateMutexW 0x100080d8
ReleaseMutex 0x100080c8
SetEvent 0x100080cc
WaitForSingleObject 0x100080d0
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x100080e0
api-ms-win-core-sysinfo-l1-1-0.dll 3
GetSystemTimeAsFileTime 0x100080ec
GetTickCount 0x100080e8
GetVersionExW 0x100080f0
api-ms-win-core-sysinfo-l1-2-0.dll 1
GetNativeSystemInfo 0x100080f8
api-ms-win-security-base-l1-1-0.dll 2
ImpersonateLoggedOnUser 0x10008104
RevertToSelf 0x10008100
msvcrt.dll 11
_amsg_exit 0x1000812c
_except_handler4_common 0x10008124
_initterm 0x10008118
_vsnwprintf 0x10008120
_XcptFilter 0x1000810c
free 0x10008110
malloc 0x10008128
memcpy 0x10008114
memset 0x10008134
printf 0x10008130
wcschr 0x1000811c
ntdll.dll 19
NtClose 0x1000813c
NtCreateFile 0x10008174
NtPowerInformation 0x10008158
NtQueryInformationFile 0x10008178
NtQueryVolumeInformationFile 0x10008144
NtSetInformationThread 0x10008164
RtlAcquirePrivilege 0x10008154
RtlAllocateHeap 0x10008170
RtlCompressBuffer 0x10008150
RtlDecompressBufferEx 0x1000814c
RtlDosPathNameToNtPathName_U 0x10008140
RtlDosPathNameToNtPathName_U_WithStatus 0x10008180
RtlFreeHeap 0x10008148
RtlGetCompressionWorkSpaceSize 0x10008184
RtlGetNtProductType 0x10008160
RtlGetPersistedStateLocation 0x10008168
RtlInitializeCriticalSection 0x1000815c
RtlNtStatusToDosError 0x1000817c
RtlRandom 0x1000816c