TabSvc.dll

Description: Microsoft Touch Keyboard and Handwriting Panel Service

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: 5a9ddcf82e95768ea42ff0567ba60d10

File Size: 228.5 KB

Uploaded At: Dec. 1, 2025, 7:40 a.m.

Views: 20

Exported Functions

ServiceMain (Ordinal: 1, Address: 0x1a770)
SvchostPushServiceGlobals (Ordinal: 2, Address: 0x1c570)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateInstance (Address: 0x18002da00)
CoInitializeEx (Address: 0x18002da10)
CoUninitialize (Address: 0x18002da08)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessAsUserW (Address: 0x18002da20)
CreateThread (Address: 0x18002da28)
GetCurrentProcess (Address: 0x18002da50)
GetCurrentProcessId (Address: 0x18002da38)
GetCurrentThreadId (Address: 0x18002da58)
GetExitCodeProcess (Address: 0x18002da30)
OpenProcessToken (Address: 0x18002da48)
TerminateProcess (Address: 0x18002da40)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18002daa0)
RegCreateKeyExW (Address: 0x18002da70)
RegDeleteKeyExW (Address: 0x18002da90)
RegGetValueW (Address: 0x18002da88)
RegNotifyChangeKeyValue (Address: 0x18002da68)
RegOpenKeyExW (Address: 0x18002da80)
RegQueryValueExW (Address: 0x18002da98)
RegSetValueExW (Address: 0x18002da78)

api-ms-win-security-base-l1-1-0.dll

AddAce (Address: 0x18002db40)
AdjustTokenPrivileges (Address: 0x18002db00)
CopySid (Address: 0x18002dab8)
DuplicateTokenEx (Address: 0x18002db10)
EqualSid (Address: 0x18002dad0)
GetAce (Address: 0x18002db18)
GetAclInformation (Address: 0x18002db20)
GetLengthSid (Address: 0x18002dae8)
GetSecurityDescriptorDacl (Address: 0x18002db28)
GetSidLengthRequired (Address: 0x18002dab0)
GetSidSubAuthority (Address: 0x18002db38)
GetTokenInformation (Address: 0x18002daf8)
InitializeAcl (Address: 0x18002dae0)
InitializeSecurityDescriptor (Address: 0x18002dad8)
InitializeSid (Address: 0x18002dac0)
IsValidSid (Address: 0x18002dac8)
SetSecurityDescriptorControl (Address: 0x18002daf0)
SetSecurityDescriptorDacl (Address: 0x18002db30)
SetTokenInformation (Address: 0x18002db08)

api-ms-win-security-sddl-l1-1-0.dll

ConvertSidToStringSidW (Address: 0x18002db58)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18002db50)
ConvertStringSidToSidW (Address: 0x18002db60)

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW (Address: 0x18002db78)
SetServiceStatus (Address: 0x18002db70)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x18002db98)
OpenSCManagerW (Address: 0x18002db90)
OpenServiceW (Address: 0x18002db88)

api-ms-win-service-management-l2-1-0.dll

ChangeServiceConfig2W (Address: 0x18002dbb0)
ChangeServiceConfigW (Address: 0x18002dba8)
QueryServiceConfigW (Address: 0x18002dbb8)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x18002d960)
AcquireSRWLockShared (Address: 0x18002d8f8)
CloseHandle (Address: 0x18002d948)
CloseThreadpoolTimer (Address: 0x18002d978)
CreateEventW (Address: 0x18002d9a8)
CreateMutexExW (Address: 0x18002d910)
CreateSemaphoreExW (Address: 0x18002d7c8)
CreateThreadpoolTimer (Address: 0x18002d930)
DebugBreak (Address: 0x18002d858)
DelayLoadFailureHook (Address: 0x18002d898)
DeleteCriticalSection (Address: 0x18002d8e8)
EnterCriticalSection (Address: 0x18002d8a8)
ExpandEnvironmentStringsW (Address: 0x18002d828)
FormatMessageW (Address: 0x18002d9a0)
FreeLibrary (Address: 0x18002d870)
GetLastError (Address: 0x18002d998)
GetModuleFileNameA (Address: 0x18002d7c0)
GetModuleFileNameW (Address: 0x18002d880)
GetModuleHandleExW (Address: 0x18002d8c8)
GetModuleHandleW (Address: 0x18002d860)
GetProcAddress (Address: 0x18002d918)
GetProcessHeap (Address: 0x18002d868)
GetProcessMitigationPolicy (Address: 0x18002d878)
GetSystemTimeAsFileTime (Address: 0x18002d7e8)
GetTickCount (Address: 0x18002d7e0)
HeapAlloc (Address: 0x18002d920)
HeapDestroy (Address: 0x18002d810)
HeapFree (Address: 0x18002d7d0)
HeapReAlloc (Address: 0x18002d818)
HeapSize (Address: 0x18002d820)
InitializeCriticalSectionEx (Address: 0x18002d9d0)
InitializeSListHead (Address: 0x18002d848)
InitOnceBeginInitialize (Address: 0x18002d8b0)
InitOnceComplete (Address: 0x18002d968)
InterlockedFlushSList (Address: 0x18002d970)
InterlockedPushEntrySList (Address: 0x18002d850)
IsDebuggerPresent (Address: 0x18002d838)
LeaveCriticalSection (Address: 0x18002d8e0)
LocalAlloc (Address: 0x18002d830)
LocalFree (Address: 0x18002d900)
OpenMutexW (Address: 0x18002d840)
OpenSemaphoreW (Address: 0x18002d950)
OutputDebugStringW (Address: 0x18002d988)
QueryPerformanceCounter (Address: 0x18002d7f0)
RegisterWaitForSingleObject (Address: 0x18002d8c0)
ReleaseMutex (Address: 0x18002d9b0)
ReleaseSemaphore (Address: 0x18002d8b8)
ReleaseSRWLockExclusive (Address: 0x18002d990)
ReleaseSRWLockShared (Address: 0x18002d938)
ResetEvent (Address: 0x18002d928)
ResolveDelayLoadedAPI (Address: 0x18002d8a0)
SetEvent (Address: 0x18002d980)
SetLastError (Address: 0x18002d7d8)
SetThreadpoolTimer (Address: 0x18002d940)
SetUnhandledExceptionFilter (Address: 0x18002d7f8)
Sleep (Address: 0x18002d808)
SleepConditionVariableSRW (Address: 0x18002d888)
UnhandledExceptionFilter (Address: 0x18002d800)
UnregisterWait (Address: 0x18002d8d0)
UnregisterWaitEx (Address: 0x18002d908)
WaitForMultipleObjects (Address: 0x18002d8d8)
WaitForMultipleObjectsEx (Address: 0x18002d9c0)
WaitForSingleObject (Address: 0x18002d9b8)
WaitForSingleObjectEx (Address: 0x18002d958)
WaitForThreadpoolTimerCallbacks (Address: 0x18002d9c8)
WakeAllConditionVariable (Address: 0x18002d890)
WTSGetActiveConsoleSessionId (Address: 0x18002d8f0)

msvcrt.dll

__C_specific_handler (Address: 0x18002dc28)
__CxxFrameHandler3 (Address: 0x18002dcc0)
__dllonexit (Address: 0x18002dbf8)
_aligned_free (Address: 0x18002dcb8)
_aligned_malloc (Address: 0x18002dc88)
_amsg_exit (Address: 0x18002dc18)
_beginthreadex (Address: 0x18002dc90)
_callnewh (Address: 0x18002dc30)
_CxxThrowException (Address: 0x18002dca8)
_initterm (Address: 0x18002dc10)
_lock (Address: 0x18002dc08)
_onexit (Address: 0x18002dbf0)
_purecall (Address: 0x18002dc80)
_unlock (Address: 0x18002dc00)
_vsnprintf_s (Address: 0x18002dc60)
_vsnwprintf (Address: 0x18002dcb0)
_XcptFilter (Address: 0x18002dc20)
??0exception@@QEAA@AEBV0@@Z (Address: 0x18002dc68)
??0exception@@QEAA@XZ (Address: 0x18002dc70)
??1exception@@UEAA@XZ (Address: 0x18002dc78)
??1type_info@@UEAA@XZ (Address: 0x18002dbe0)
?terminate@@YAXXZ (Address: 0x18002dbe8)
calloc (Address: 0x18002dc48)
free (Address: 0x18002dc40)
malloc (Address: 0x18002dc38)
memcmp (Address: 0x18002dbc8)
memcpy (Address: 0x18002dbd0)
memcpy_s (Address: 0x18002dc98)
memmove_s (Address: 0x18002dc50)
memset (Address: 0x18002dbd8)
srand (Address: 0x18002dca0)
time (Address: 0x18002dc58)
wcscmp (Address: 0x18002dcc8)

ntdll.dll

EtwEventRegister (Address: 0x18002dd70)
EtwEventSetInformation (Address: 0x18002dd40)
EtwEventUnregister (Address: 0x18002dd20)
EtwEventWriteTransfer (Address: 0x18002dd30)
EtwGetTraceEnableFlags (Address: 0x18002dd48)
EtwGetTraceEnableLevel (Address: 0x18002dd60)
EtwGetTraceLoggerHandle (Address: 0x18002dd58)
EtwLogTraceEvent (Address: 0x18002dd28)
EtwRegisterTraceGuidsW (Address: 0x18002dd68)
EtwTraceMessage (Address: 0x18002dd50)
EtwUnregisterTraceGuids (Address: 0x18002dd38)
NtClose (Address: 0x18002dcf8)
NtCreateEvent (Address: 0x18002dce8)
NtOpenDirectoryObject (Address: 0x18002dcf0)
NtOpenEvent (Address: 0x18002dd08)
NtOpenMutant (Address: 0x18002dd10)
RtlCaptureContext (Address: 0x18002dce0)
RtlInitUnicodeString (Address: 0x18002dd00)
RtlLookupFunctionEntry (Address: 0x18002dcd8)
RtlVirtualUnwind (Address: 0x18002dd18)

USER32.dll

GetSystemMetrics (Address: 0x18002d9e8)
RegisterDeviceNotificationW (Address: 0x18002d9e0)
UnregisterDeviceNotification (Address: 0x18002d9f0)