umpnpmgr.dll

v10.0.19041.3636 64-bit Windows NT Analyzed
Download
Description
User-mode Plug-and-Play Service
Authors
© Microsoft Corporation. All rights reserved.
File size
130.0 KB
Uploaded
2025-12-01 07:41
Views
115
SHA-256
44ae9b80e19198bc23e39181170d04f8

Exported functions 3

PlugPlayServiceMain #1 · 0xf240
ServiceMain #2 · 0xaff0
SvchostPushServiceGlobals #3 · 0xb4c0

Imported DLLs & functions 187

api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x16d014950
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x16d014960
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x16d014988
RaiseException 0x16d014970
SetLastError 0x16d014990
SetUnhandledExceptionFilter 0x16d014978
UnhandledExceptionFilter 0x16d014980
api-ms-win-core-file-l1-1-0.dll 16
CreateDirectoryW 0x16d014a18
CreateFileW 0x16d014a08
DeleteFileW 0x16d0149e8
FileTimeToLocalFileTime 0x16d0149b8
FindClose 0x16d0149b0
FindFirstFileW 0x16d0149a8
FindNextFileW 0x16d0149f8
FlushFileBuffers 0x16d0149d0
GetFileAttributesW 0x16d014a10
GetFileInformationByHandle 0x16d0149e0
GetFileSize 0x16d0149c8
GetFullPathNameW 0x16d0149a0
SetEndOfFile 0x16d014a00
SetFileAttributesW 0x16d0149f0
SetFilePointer 0x16d0149d8
WriteFile 0x16d0149c0
api-ms-win-core-file-l2-1-0.dll 2
CreateHardLinkW 0x16d014a30
MoveFileExW 0x16d014a28
api-ms-win-core-handle-l1-1-0.dll 2
CloseHandle 0x16d014a48
DuplicateHandle 0x16d014a40
api-ms-win-core-heap-l1-1-0.dll 4
GetProcessHeap 0x16d014a58
HeapAlloc 0x16d014a60
HeapFree 0x16d014a70
HeapReAlloc 0x16d014a68
api-ms-win-core-io-l1-1-0.dll 1
DeviceIoControl 0x16d014a80
api-ms-win-core-libraryloader-l1-2-0.dll 6
DisableThreadLibraryCalls 0x16d014a90
FreeLibrary 0x16d014ab8
GetModuleFileNameA 0x16d014ab0
GetProcAddress 0x16d014aa0
LoadLibraryExW 0x16d014a98
LoadStringW 0x16d014aa8
api-ms-win-core-localization-l1-2-0.dll 1
LCMapStringW 0x16d014ac8
api-ms-win-core-memory-l1-1-0.dll 3
CreateFileMappingW 0x16d014ad8
MapViewOfFile 0x16d014ae8
UnmapViewOfFile 0x16d014ae0
api-ms-win-core-processenvironment-l1-1-0.dll 2
ExpandEnvironmentStringsW 0x16d014b00
GetCommandLineA 0x16d014af8
api-ms-win-core-processthreads-l1-1-0.dll 11
CreateProcessW 0x16d014b40
CreateThread 0x16d014b58
GetCurrentProcess 0x16d014b50
GetCurrentProcessId 0x16d014b60
GetCurrentThread 0x16d014b48
GetCurrentThreadId 0x16d014b38
GetExitCodeProcess 0x16d014b30
OpenThreadToken 0x16d014b10
ProcessIdToSessionId 0x16d014b18
QueueUserAPC 0x16d014b20
TerminateProcess 0x16d014b28
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x16d014b70
api-ms-win-core-registry-l1-1-0.dll 8
RegCloseKey 0x16d014b98
RegCreateKeyExW 0x16d014ba8
RegDeleteTreeW 0x16d014ba0
RegDeleteValueW 0x16d014b80
RegNotifyChangeKeyValue 0x16d014bb8
RegOpenKeyExW 0x16d014b88
RegQueryValueExW 0x16d014b90
RegSetValueExW 0x16d014bb0
api-ms-win-core-string-l1-1-0.dll 3
CompareStringOrdinal 0x16d014bc8
CompareStringW 0x16d014bd0
WideCharToMultiByte 0x16d014bd8
api-ms-win-core-synch-l1-1-0.dll 13
CreateEventW 0x16d014be8
CreateMutexW 0x16d014c40
DeleteCriticalSection 0x16d014bf8
EnterCriticalSection 0x16d014c10
InitializeCriticalSection 0x16d014bf0
LeaveCriticalSection 0x16d014c48
OpenEventW 0x16d014c38
ReleaseMutex 0x16d014c08
ResetEvent 0x16d014c30
SetEvent 0x16d014c20
SleepEx 0x16d014c28
WaitForMultipleObjectsEx 0x16d014c00
WaitForSingleObjectEx 0x16d014c18
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x16d014c58
api-ms-win-core-sysinfo-l1-1-0.dll 8
GetLocalTime 0x16d014c90
GetSystemDirectoryW 0x16d014c68
GetSystemInfo 0x16d014c78
GetSystemTime 0x16d014c70
GetSystemTimeAsFileTime 0x16d014c80
GetSystemWindowsDirectoryW 0x16d014ca0
GetTickCount 0x16d014c98
GetTickCount64 0x16d014c88
api-ms-win-core-threadpool-l1-2-0.dll 4
CloseThreadpoolTimer 0x16d014cb0
CreateThreadpoolTimer 0x16d014cb8
SetThreadpoolTimer 0x16d014cc8
WaitForThreadpoolTimerCallbacks 0x16d014cc0
api-ms-win-core-threadpool-legacy-l1-1-0.dll 2
QueueUserWorkItem 0x16d014ce0
UnregisterWaitEx 0x16d014cd8
api-ms-win-core-threadpool-private-l1-1-0.dll 1
RegisterWaitForSingleObjectEx 0x16d014cf0
api-ms-win-core-timezone-l1-1-0.dll 2
FileTimeToSystemTime 0x16d014d08
SystemTimeToFileTime 0x16d014d00
api-ms-win-security-base-l1-1-0.dll 9
AccessCheckAndAuditAlarmW 0x16d014d40
AddAccessAllowedAceEx 0x16d014d20
DuplicateTokenEx 0x16d014d50
GetLengthSid 0x16d014d58
GetTokenInformation 0x16d014d48
InitializeAcl 0x16d014d18
InitializeSecurityDescriptor 0x16d014d28
MapGenericMask 0x16d014d38
SetSecurityDescriptorDacl 0x16d014d30
api-ms-win-service-core-l1-1-0.dll 2
RegisterServiceCtrlHandlerExW 0x16d014d68
SetServiceStatus 0x16d014d70
api-ms-win-service-private-l1-1-1.dll 1
I_ScRegisterPreshutdownRestart 0x16d014d80
KERNELBASE.dll 1
WTSGetServiceSessionId 0x16d0148b0
msvcrt.dll 16
__C_specific_handler 0x16d014e00
_amsg_exit 0x16d014dd8
_initterm 0x16d014dc0
_resetstkoflw 0x16d014df0
_vsnprintf 0x16d014da0
_vsnwprintf 0x16d014d90
_XcptFilter 0x16d014de8
free 0x16d014dd0
malloc 0x16d014dc8
memcpy 0x16d014db0
memmove 0x16d014d98
memset 0x16d014e08
toupper 0x16d014da8
wcschr 0x16d014de0
wcsrchr 0x16d014df8
wcsstr 0x16d014db8
ntdll.dll 43
EtwEventRegister 0x16d014f68
EtwEventSetInformation 0x16d014e80
EtwEventUnregister 0x16d014e88
EtwEventWriteTransfer 0x16d014f18
EtwGetTraceEnableFlags 0x16d014f48
EtwGetTraceEnableLevel 0x16d014f50
EtwGetTraceLoggerHandle 0x16d014f58
EtwRegisterTraceGuidsW 0x16d014f40
EtwTraceMessage 0x16d014f60
EtwUnregisterTraceGuids 0x16d014f38
NtClose 0x16d014eb8
NtCreateKey 0x16d014e50
NtDeleteValueKey 0x16d014e38
NtOpenKey 0x16d014e58
NtOpenThreadToken 0x16d014ed0
NtQueryInformationFile 0x16d014e30
NtQuerySystemInformation 0x16d014e70
NtQueryValueKey 0x16d014e48
NtSetInformationFile 0x16d014e28
NtSetInformationThread 0x16d014eb0
NtSetValueKey 0x16d014e40
RtlAdjustPrivilege 0x16d014ee0
RtlAllocateHeap 0x16d014ef8
RtlCaptureContext 0x16d014e20
RtlCreateAndSetSD 0x16d014ec8
RtlDeleteSecurityObject 0x16d014ea0
RtlDestroyHeap 0x16d014f00
RtlFormatCurrentUserKeyPath 0x16d014e68
RtlFreeHeap 0x16d014ee8
RtlFreeUnicodeString 0x16d014e60
RtlGetVersion 0x16d014e78
RtlImpersonateSelf 0x16d014ed8
RtlInitUnicodeString 0x16d014e98
RtlLookupFunctionEntry 0x16d014e18
RtlNewSecurityObject 0x16d014ec0
RtlNtStatusToDosError 0x16d014ea8
RtlNtStatusToDosErrorNoTeb 0x16d014f10
RtlPublishWnfStateData 0x16d014f08
RtlQueryWnfStateData 0x16d014f30
RtlReAllocateHeap 0x16d014ef0
RtlSubscribeWnfStateChangeNotification 0x16d014f28
RtlUnsubscribeWnfNotificationWaitForCompletion 0x16d014f20
RtlVirtualUnwind 0x16d014e90
RPCRT4.dll 17
I_RpcBindingInqLocalClientPID 0x16d014918
I_RpcBindingIsClientLocal 0x16d0148e0
I_RpcMapWin32Status 0x16d0148f8
Ndr64AsyncServerCallAll 0x16d0148c8
NdrAsyncServerCall 0x16d0148d0
NdrServerCall2 0x16d0148d8
NdrServerCallAll 0x16d0148c0
RpcAsyncCompleteCall 0x16d0148f0
RpcBindingToStringBindingW 0x16d014928
RpcImpersonateClient 0x16d014900
RpcRevertToSelf 0x16d014908
RpcServerInterfaceGroupActivate 0x16d0148e8
RpcServerInterfaceGroupClose 0x16d014940
RpcServerInterfaceGroupCreateW 0x16d014910
RpcServerInterfaceGroupDeactivate 0x16d014920
RpcStringBindingParseW 0x16d014930
RpcStringFreeW 0x16d014938