WATPCSP.dll

Description: Windows Defender Advanced Threat Protection Manageability module

Version: 10.8804.27858.1000

Architecture: 64-bit

Operating System: Windows NT

SHA256: f43a2a12c3fc620986ea4fe891d26721

File Size: 413.4 KB

Uploaded At: Dec. 1, 2025, 8:30 a.m.

Views: 26

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0xab20)
DllGetClassObject (Ordinal: 2, Address: 0xab40)

Imported DLLs & Functions

ADVAPI32.dll

CloseServiceHandle (Address: 0x18003e068)
EventActivityIdControl (Address: 0x18003e050)
EventRegister (Address: 0x18003e030)
EventSetInformation (Address: 0x18003e040)
EventUnregister (Address: 0x18003e038)
EventWriteTransfer (Address: 0x18003e048)
OpenSCManagerW (Address: 0x18003e090)
OpenServiceW (Address: 0x18003e028)
QueryServiceConfig2W (Address: 0x18003e018)
QueryServiceConfigW (Address: 0x18003e020)
QueryServiceStatus (Address: 0x18003e010)
RegCloseKey (Address: 0x18003e058)
RegCreateKeyExW (Address: 0x18003e060)
RegDeleteValueW (Address: 0x18003e000)
RegGetValueW (Address: 0x18003e088)
RegOpenKeyExW (Address: 0x18003e070)
RegQueryValueExW (Address: 0x18003e078)
RegSetValueExW (Address: 0x18003e080)
StartServiceW (Address: 0x18003e008)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x18003e188)
CloseHandle (Address: 0x18003e0d0)
CreateEventA (Address: 0x18003e208)
CreateFileW (Address: 0x18003e1c8)
CreateMutexExW (Address: 0x18003e128)
CreateSemaphoreExW (Address: 0x18003e130)
DebugBreak (Address: 0x18003e0c0)
DecodePointer (Address: 0x18003e178)
DeleteCriticalSection (Address: 0x18003e198)
DisableThreadLibraryCalls (Address: 0x18003e1b0)
EncodePointer (Address: 0x18003e230)
EnterCriticalSection (Address: 0x18003e220)
EnumSystemLocalesW (Address: 0x18003e358)
ExitProcess (Address: 0x18003e2f8)
ExpandEnvironmentStringsW (Address: 0x18003e1c0)
FileTimeToSystemTime (Address: 0x18003e1b8)
FindClose (Address: 0x18003e368)
FindFirstFileExW (Address: 0x18003e370)
FindNextFileW (Address: 0x18003e378)
FlsAlloc (Address: 0x18003e318)
FlsFree (Address: 0x18003e330)
FlsGetValue (Address: 0x18003e320)
FlsSetValue (Address: 0x18003e328)
FlushFileBuffers (Address: 0x18003e3d0)
FormatMessageW (Address: 0x18003e168)
FreeEnvironmentStringsW (Address: 0x18003e3b0)
FreeLibrary (Address: 0x18003e2e8)
GetACP (Address: 0x18003e388)
GetCommandLineA (Address: 0x18003e398)
GetCommandLineW (Address: 0x18003e3a0)
GetConsoleMode (Address: 0x18003e3e8)
GetConsoleOutputCP (Address: 0x18003e3e0)
GetCPInfo (Address: 0x18003e0a8)
GetCurrentProcess (Address: 0x18003e278)
GetCurrentProcessId (Address: 0x18003e138)
GetCurrentThreadId (Address: 0x18003e140)
GetEnvironmentStringsW (Address: 0x18003e3a8)
GetFileType (Address: 0x18003e310)
GetLastError (Address: 0x18003e0d8)
GetLocaleInfoW (Address: 0x18003e340)
GetModuleFileNameA (Address: 0x18003e148)
GetModuleFileNameW (Address: 0x18003e300)
GetModuleHandleExA (Address: 0x18003e1e8)
GetModuleHandleExW (Address: 0x18003e158)
GetModuleHandleW (Address: 0x18003e150)
GetOEMCP (Address: 0x18003e390)
GetProcAddress (Address: 0x18003e160)
GetProcessHeap (Address: 0x18003e0f8)
GetStartupInfoW (Address: 0x18003e268)
GetStdHandle (Address: 0x18003e308)
GetStringTypeW (Address: 0x18003e218)
GetSystemTimeAsFileTime (Address: 0x18003e290)
GetTickCount64 (Address: 0x18003e1e0)
GetUserDefaultLCID (Address: 0x18003e350)
HeapAlloc (Address: 0x18003e0e8)
HeapFree (Address: 0x18003e0f0)
HeapReAlloc (Address: 0x18003e360)
HeapSize (Address: 0x18003e3b8)
InitializeCriticalSectionAndSpinCount (Address: 0x18003e2c0)
InitializeCriticalSectionEx (Address: 0x18003e190)
InitializeSListHead (Address: 0x18003e298)
InitOnceBeginInitialize (Address: 0x18003e1a0)
InitOnceComplete (Address: 0x18003e1a8)
InstallELAMCertificateInfo (Address: 0x18003e1d0)
InterlockedFlushSList (Address: 0x18003e2b8)
IsDebuggerPresent (Address: 0x18003e0b8)
IsProcessorFeaturePresent (Address: 0x18003e270)
IsValidCodePage (Address: 0x18003e380)
IsValidLocale (Address: 0x18003e348)
LCMapStringEx (Address: 0x18003e238)
LCMapStringW (Address: 0x18003e338)
LeaveCriticalSection (Address: 0x18003e228)
LoadLibraryExW (Address: 0x18003e2f0)
MultiByteToWideChar (Address: 0x18003e210)
OpenEventA (Address: 0x18003e200)
OpenSemaphoreW (Address: 0x18003e120)
OutputDebugStringW (Address: 0x18003e0c8)
QueryPerformanceCounter (Address: 0x18003e288)
RaiseException (Address: 0x18003e2a0)
ReleaseMutex (Address: 0x18003e108)
ReleaseSemaphore (Address: 0x18003e100)
ReleaseSRWLockExclusive (Address: 0x18003e180)
ResetEvent (Address: 0x18003e1f0)
RtlCaptureContext (Address: 0x18003e240)
RtlLookupFunctionEntry (Address: 0x18003e248)
RtlPcToFileHeader (Address: 0x18003e2a8)
RtlUnwindEx (Address: 0x18003e2b0)
RtlVirtualUnwind (Address: 0x18003e250)
SetEvent (Address: 0x18003e1f8)
SetFilePointerEx (Address: 0x18003e3c0)
SetLastError (Address: 0x18003e0e0)
SetStdHandle (Address: 0x18003e3c8)
SetUnhandledExceptionFilter (Address: 0x18003e260)
SleepConditionVariableSRW (Address: 0x18003e0a0)
SleepEx (Address: 0x18003e1d8)
TerminateProcess (Address: 0x18003e280)
TlsAlloc (Address: 0x18003e2c8)
TlsFree (Address: 0x18003e2e0)
TlsGetValue (Address: 0x18003e2d0)
TlsSetValue (Address: 0x18003e2d8)
UnhandledExceptionFilter (Address: 0x18003e258)
WaitForSingleObject (Address: 0x18003e110)
WaitForSingleObjectEx (Address: 0x18003e118)
WakeAllConditionVariable (Address: 0x18003e0b0)
WideCharToMultiByte (Address: 0x18003e170)
WriteConsoleW (Address: 0x18003e3f0)
WriteFile (Address: 0x18003e3d8)

ole32.dll

CoTaskMemAlloc (Address: 0x18003e450)
CoTaskMemFree (Address: 0x18003e448)

OLEAUT32.dll

SysAllocString (Address: 0x18003e400)
SysFreeString (Address: 0x18003e418)
VariantClear (Address: 0x18003e410)
VariantInit (Address: 0x18003e408)

PROPSYS.dll

InitVariantFromFileTime (Address: 0x18003e428)

SLC.dll

SLGetWindowsInformationDWORD (Address: 0x18003e438)