BTAGService.dll
v10.0.19041.5848
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 4
SvchostPushServiceGlobals
#1 · 0x1a180
DllCanUnloadNow
#2 · 0x22200
DllGetClassObject
#3 · 0x221d0
ServiceMain
#4 · 0x1a1b0
No function matches your filter.
Imported DLLs & functions 440
ApiSetQueryApiSetPresence
0x100a614c
CoAddRefServerProcess
0x100a6184
CoCreateFreeThreadedMarshaler
0x100a61a4
CoCreateGuid
0x100a6170
CoCreateInstance
0x100a6158
CoDecrementMTAUsage
0x100a617c
CoDisconnectContext
0x100a61a0
CoDisconnectObject
0x100a619c
CoGetMalloc
0x100a6178
CoImpersonateClient
0x100a615c
CoIncrementMTAUsage
0x100a6174
CoMarshalInterface
0x100a6168
CoRegisterClassObject
0x100a618c
CoReleaseMarshalData
0x100a6190
CoReleaseServerProcess
0x100a6180
CoResumeClassObjects
0x100a6194
CoRevertToSelf
0x100a6160
CoRevokeClassObject
0x100a6188
CoSetProxyBlanket
0x100a616c
CoTaskMemAlloc
0x100a6198
CoTaskMemFree
0x100a6154
CoTaskMemRealloc
0x100a61a8
CreateStreamOnHGlobal
0x100a6164
RoGetAgileReference
0x100a61b0
CStdStubBuffer2_Connect
0x100a6208
CStdStubBuffer2_CountRefs
0x100a61ec
CStdStubBuffer2_Disconnect
0x100a61d0
CStdStubBuffer2_QueryInterface
0x100a61e0
NdrProxyForwardingFunction3
0x100a6228
NdrProxyForwardingFunction4
0x100a61e8
NdrProxyForwardingFunction5
0x100a61f4
ObjectStublessClient10
0x100a621c
ObjectStublessClient11
0x100a61f0
ObjectStublessClient12
0x100a6204
ObjectStublessClient13
0x100a61dc
ObjectStublessClient14
0x100a6218
ObjectStublessClient15
0x100a61bc
ObjectStublessClient16
0x100a6220
ObjectStublessClient17
0x100a6214
ObjectStublessClient18
0x100a61b8
ObjectStublessClient19
0x100a61e4
ObjectStublessClient20
0x100a61c8
ObjectStublessClient21
0x100a6224
ObjectStublessClient22
0x100a61d8
ObjectStublessClient23
0x100a61c4
ObjectStublessClient24
0x100a61c0
ObjectStublessClient25
0x100a622c
ObjectStublessClient26
0x100a6210
ObjectStublessClient27
0x100a61cc
ObjectStublessClient3
0x100a61fc
ObjectStublessClient6
0x100a61f8
ObjectStublessClient7
0x100a61d4
ObjectStublessClient8
0x100a6200
ObjectStublessClient9
0x100a620c
DebugBreak
0x100a6238
IsDebuggerPresent
0x100a6234
OutputDebugStringW
0x100a623c
DelayLoadFailureHook
0x100a6244
ResolveDelayLoadedAPI
0x100a624c
GetLastError
0x100a625c
RaiseException
0x100a6254
SetLastError
0x100a6260
SetUnhandledExceptionFilter
0x100a6264
UnhandledExceptionFilter
0x100a6258
RaiseFailFastException
0x100a626c
CreateFileW
0x100a6274
CloseHandle
0x100a627c
GetProcessHeap
0x100a628c
HeapAlloc
0x100a6284
HeapFree
0x100a6288
InitializeSListHead
0x100a62a0
InterlockedPushEntrySList
0x100a62a4
CancelIoEx
0x100a62b0
DeviceIoControl
0x100a62ac
GetOverlappedResult
0x100a62b4
CancelIo
0x100a62bc
RegisterWaitForSingleObject
0x100a62c8
UnregisterWait
0x100a62c4
DisableThreadLibraryCalls
0x100a62d8
FindResourceExW
0x100a62d4
FreeLibrary
0x100a62d0
GetModuleFileNameA
0x100a62e8
GetModuleHandleExW
0x100a62e4
GetModuleHandleW
0x100a62dc
GetProcAddress
0x100a62e0
LoadResource
0x100a62ec
LockResource
0x100a62f0
FormatMessageW
0x100a62f8
ExpandEnvironmentStringsW
0x100a6300
CreateThread
0x100a6314
GetCurrentProcess
0x100a630c
GetCurrentProcessId
0x100a6310
GetCurrentThread
0x100a6320
GetCurrentThreadId
0x100a6318
OpenProcessToken
0x100a631c
OpenThreadToken
0x100a6308
TerminateProcess
0x100a6324
IsProcessorFeaturePresent
0x100a6330
OpenProcess
0x100a632c
QueryPerformanceCounter
0x100a6338
RegCloseKey
0x100a6344
RegCreateKeyExW
0x100a634c
RegGetValueW
0x100a6354
RegNotifyChangeKeyValue
0x100a6348
RegOpenKeyExW
0x100a6340
RegQueryValueExW
0x100a6350
RtlCompareMemory
0x100a635c
CompareStringOrdinal
0x100a6368
MultiByteToWideChar
0x100a6364
WideCharToMultiByte
0x100a636c
AcquireSRWLockExclusive
0x100a63a4
AcquireSRWLockShared
0x100a6398
CreateEventExW
0x100a63ac
CreateEventW
0x100a638c
CreateMutexExW
0x100a63c8
CreateSemaphoreExW
0x100a63b0
DeleteCriticalSection
0x100a6394
EnterCriticalSection
0x100a6388
InitializeCriticalSection
0x100a637c
InitializeCriticalSectionAndSpinCount
0x100a63c4
InitializeCriticalSectionEx
0x100a6374
InitializeSRWLock
0x100a63bc
LeaveCriticalSection
0x100a6378
OpenSemaphoreW
0x100a63b8
ReleaseMutex
0x100a63c0
ReleaseSemaphore
0x100a6384
ReleaseSRWLockExclusive
0x100a63a0
ReleaseSRWLockShared
0x100a63b4
ResetEvent
0x100a6390
SetEvent
0x100a639c
WaitForSingleObject
0x100a6380
WaitForSingleObjectEx
0x100a63a8
InitOnceExecuteOnce
0x100a63d0
Sleep
0x100a63d8
WaitOnAddress
0x100a63dc
WakeByAddressAll
0x100a63d4
WaitForMultipleObjects
0x100a63e4
GetSystemTimeAsFileTime
0x100a63ec
GetTickCount
0x100a63f0
GetTickCount64
0x100a63f4
CloseThreadpoolCleanupGroup
0x100a63fc
CloseThreadpoolCleanupGroupMembers
0x100a6418
CloseThreadpoolTimer
0x100a6404
CloseThreadpoolWait
0x100a6434
CloseThreadpoolWork
0x100a641c
CreateThreadpoolCleanupGroup
0x100a6400
CreateThreadpoolTimer
0x100a642c
CreateThreadpoolWait
0x100a6440
CreateThreadpoolWork
0x100a6438
FreeLibraryWhenCallbackReturns
0x100a6414
SetThreadpoolTimer
0x100a6410
SetThreadpoolTimerEx
0x100a6408
SetThreadpoolWait
0x100a6428
SubmitThreadpoolWork
0x100a6430
TrySubmitThreadpoolCallback
0x100a640c
WaitForThreadpoolTimerCallbacks
0x100a6424
WaitForThreadpoolWaitCallbacks
0x100a6420
WaitForThreadpoolWorkCallbacks
0x100a643c
CreateTimerQueueTimer
0x100a6448
DeleteTimerQueueTimer
0x100a6454
QueueUserWorkItem
0x100a644c
UnregisterWaitEx
0x100a6450
GetRestrictedErrorInfo
0x100a6474
RoOriginateError
0x100a6470
RoOriginateErrorW
0x100a646c
RoTransformError
0x100a6468
SetRestrictedErrorInfo
0x100a6478
IsErrorPropagationEnabled
0x100a6480
RoGetMatchingRestrictedErrorInfo
0x100a6488
RoOriginateLanguageException
0x100a648c
RoReportFailedDelegate
0x100a6484
RoGetActivationFactory
0x100a6498
RoInitialize
0x100a64a4
RoRegisterActivationFactories
0x100a649c
RoRevokeActivationFactories
0x100a64a0
RoUninitialize
0x100a6494
HSTRING_UserFree
0x100a64b0
HSTRING_UserMarshal
0x100a64b4
HSTRING_UserSize
0x100a64b8
HSTRING_UserUnmarshal
0x100a64ac
WindowsCompareStringOrdinal
0x100a64c0
WindowsCreateString
0x100a64d4
WindowsCreateStringReference
0x100a64bc
WindowsDeleteString
0x100a64d0
WindowsDuplicateString
0x100a64d8
WindowsGetStringRawBuffer
0x100a64c4
WindowsIsStringEmpty
0x100a64cc
WindowsStringHasEmbeddedNull
0x100a64c8
__CxxFrameHandler3
0x100a65c0
__std_terminate
0x100a65bc
__std_type_info_compare
0x100a65b8
_CxxThrowException
0x100a6558
_except_handler4_common
0x100a6554
_o___std_exception_copy
0x100a6590
_o___std_exception_destroy
0x100a658c
_o___std_type_info_destroy_list
0x100a6588
_o___stdio_common_vsnprintf_s
0x100a657c
_o___stdio_common_vsprintf
0x100a6578
_o___stdio_common_vsprintf_s
0x100a6574
_o___stdio_common_vsscanf
0x100a6570
_o___stdio_common_vswprintf
0x100a656c
_o__callnewh
0x100a65ac
_o__cexit
0x100a65a8
_o__configure_narrow_argv
0x100a6598
_o__crt_atexit
0x100a6594
_o__errno
0x100a6584
_o__execute_onexit_table
0x100a6580
_o__initialize_narrow_environment
0x100a6568
_o__initialize_onexit_table
0x100a6564
_o__invalid_parameter_noinfo
0x100a6560
_o__invalid_parameter_noinfo_noreturn
0x100a655c
_o__itoa_s
0x100a64e0
_o__purecall
0x100a64e4
_o__register_onexit_function
0x100a64e8
_o__seh_filter_dll
0x100a64ec
_o__strnicmp
0x100a64f0
_o__wcsnicmp
0x100a64f4
_o__wtoi
0x100a65a4
_o__wtol
0x100a64fc
_o_atoi
0x100a6500
_o_bsearch
0x100a6504
_o_free
0x100a6508
_o_isdigit
0x100a650c
_o_isprint
0x100a6510
_o_isspace
0x100a6514
_o_iswdigit
0x100a6518
_o_malloc
0x100a651c
_o_qsort
0x100a6520
_o_realloc
0x100a6524
_o_strcat_s
0x100a6528
_o_strtok
0x100a652c
_o_strtol
0x100a6530
_o_strtoul
0x100a6534
_o_terminate
0x100a6538
_o_toupper
0x100a653c
_o_wcscpy_s
0x100a6540
_o_wcsncpy_s
0x100a6544
_o_wcstok_s
0x100a6548
_o_wcstol
0x100a654c
_o_wcstoul
0x100a6550
memcmp
0x100a65c8
memcpy
0x100a65c4
memmove
0x100a64f8
strchr
0x100a65b4
strstr
0x100a65b0
wcschr
0x100a65a0
wcsstr
0x100a659c
memset
0x100a65e8
strncmp
0x100a65dc
strnlen
0x100a65e4
wcsncmp
0x100a65e0
CM_Get_Device_Interface_PropertyW
0x100a65f8
CM_MapCrToWin32Err
0x100a65fc
CM_Register_Notification
0x100a65f4
CM_Unregister_Notification
0x100a65f0
DevCloseObjectQuery
0x100a661c
DevCreateObjectQuery
0x100a6618
DevFindProperty
0x100a6608
DevFreeObjectProperties
0x100a6604
DevFreeObjects
0x100a6614
DevGetObjectProperties
0x100a660c
DevGetObjects
0x100a6610
DevCreateObjectQueryEx
0x100a6624
GetTraceEnableFlags
0x100a6638
GetTraceEnableLevel
0x100a6640
GetTraceLoggerHandle
0x100a6630
RegisterTraceGuidsW
0x100a663c
TraceMessage
0x100a662c
UnregisterTraceGuids
0x100a6634
EventProviderEnabled
0x100a6654
EventRegister
0x100a6650
EventSetInformation
0x100a6658
EventUnregister
0x100a6648
EventWriteTransfer
0x100a664c
PowerSettingRegisterNotification
0x100a6664
PowerSettingUnregisterNotification
0x100a6660
CopySid
0x100a6680
DuplicateTokenEx
0x100a6670
GetLengthSid
0x100a6684
GetSidSubAuthority
0x100a6674
GetSidSubAuthorityCount
0x100a667c
GetTokenInformation
0x100a668c
ImpersonateSelf
0x100a666c
IsValidSid
0x100a6688
RevertToSelf
0x100a6678
CapabilityCheck
0x100a6694
RpcClientCapabilityCheck
0x100a6698
ConvertSidToStringSidW
0x100a66a0
RegisterServiceCtrlHandlerExW
0x100a66a8
SetServiceStatus
0x100a66ac
IStream_Write
0x100a66b4
SHTaskPoolAllowThreadReuse
0x100a66bc
SHTaskPoolQueueTask
0x100a66c0
GetPersistedRegistryLocationW
0x100a66c8
BCryptCloseAlgorithmProvider
0x100a66dc
BCryptCreateHash
0x100a66d0
BCryptDestroyHash
0x100a66d8
BCryptFinishHash
0x100a66e0
BCryptGetProperty
0x100a66e8
BCryptHashData
0x100a66d4
BCryptOpenAlgorithmProvider
0x100a66e4
DevObjCreateDeviceInfoList
0x100a601c
DevObjDestroyDeviceInfoList
0x100a6010
DevObjEnumDeviceInterfaces
0x100a6014
DevObjGetClassDevs
0x100a600c
DevObjGetDeviceInterfaceDetail
0x100a6018
?__ExceptionPtrAssign@@YAXPAXPBX@Z
0x100a672c
?__ExceptionPtrCopy@@YAXPAXPBX@Z
0x100a6730
?__ExceptionPtrCreate@@YAXPAX@Z
0x100a6724
?__ExceptionPtrCurrentException@@YAXPAX@Z
0x100a6734
?__ExceptionPtrDestroy@@YAXPAX@Z
0x100a6728
?__ExceptionPtrRethrow@@YAXPBX@Z
0x100a673c
?__ExceptionPtrToBool@@YA_NPBX@Z
0x100a6738
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
0x100a6744
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
0x100a6768
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
0x100a670c
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
0x100a6784
?_Random_device@std@@YAIXZ
0x100a6798
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
0x100a676c
?_Xbad_alloc@std@@YAXXZ
0x100a6770
?_Xbad_function_call@std@@YAXXZ
0x100a67a4
?_Xinvalid_argument@std@@YAXPBD@Z
0x100a6790
?_Xlength_error@std@@YAXPBD@Z
0x100a679c
?_Xout_of_range@std@@YAXPBD@Z
0x100a6794
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
0x100a6718
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
0x100a671c
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
0x100a6708
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
0x100a678c
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
0x100a6788
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
0x100a6780
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
0x100a6720
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
0x100a6710
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
0x100a6748
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
0x100a675c
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
0x100a674c
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
0x100a6714
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
0x100a6760
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
0x100a6754
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
0x100a6740
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
0x100a6774
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
0x100a677c
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
0x100a67a0
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
0x100a6758
?uncaught_exception@std@@YA_NXZ
0x100a6778
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
0x100a6704
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
0x100a6750
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
0x100a6764
ntdll.dll
12
EtwTraceMessage
0x100a67cc
NtQueryInformationToken
0x100a67c0
NtQuerySystemInformation
0x100a67b0
NtQueryWnfStateData
0x100a67bc
RtlConvertSidToUnicodeString
0x100a67c4
RtlFreeUnicodeString
0x100a67d4
RtlInitUnicodeString
0x100a67b4
RtlNtStatusToDosError
0x100a67d0
RtlPublishWnfStateData
0x100a67c8
RtlQueryPackageIdentity
0x100a67b8
RtlSubscribeWnfStateChangeNotification
0x100a67d8
RtlUnsubscribeWnfNotificationWaitForCompletion
0x100a67ac
SysFreeString
0x100a6024
PhoneOm.dll
21
PhoneAcceptIncomingEx
0x100a6060
PhoneAddListener
0x100a6054
PhoneAPIInitialize
0x100a6038
PhoneAPIUninitialize
0x100a6084
PhoneConference
0x100a6074
PhoneDial
0x100a6058
PhoneDropAccept
0x100a6070
PhoneEnd
0x100a605c
PhoneFreeCallInfo
0x100a6050
PhoneGetDefaultOutgoingLine
0x100a6040
PhoneGetLines
0x100a603c
PhoneGetProviderLineInfo
0x100a6048
PhoneGetProviderLineServiceInfo
0x100a6044
PhoneGetState
0x100a604c
PhoneIsActionAvailable
0x100a6080
PhonePrivate
0x100a606c
PhoneRejectIncoming
0x100a6064
PhoneRemoveListener
0x100a6034
PhoneSendDTMF
0x100a607c
PhoneSetHold
0x100a6068
PhoneSwap
0x100a6078
FindMatchingContactEx
0x100a602c
RPCRT4.dll
20
CStdStubBuffer_AddRef
0x100a60a4
CStdStubBuffer_Connect
0x100a60cc
CStdStubBuffer_CountRefs
0x100a60ac
CStdStubBuffer_DebugServerQueryInterface
0x100a609c
CStdStubBuffer_DebugServerRelease
0x100a60bc
CStdStubBuffer_Disconnect
0x100a60c0
CStdStubBuffer_Invoke
0x100a608c
CStdStubBuffer_IsIIDSupported
0x100a60c8
CStdStubBuffer_QueryInterface
0x100a60b4
IUnknown_AddRef_Proxy
0x100a6098
IUnknown_QueryInterface_Proxy
0x100a60c4
IUnknown_Release_Proxy
0x100a60a8
NdrCStdStubBuffer_Release
0x100a60d0
NdrCStdStubBuffer2_Release
0x100a60b0
NdrDllCanUnloadNow
0x100a60d8
NdrDllGetClassObject
0x100a60d4
NdrOleAllocate
0x100a60b8
NdrOleFree
0x100a60a0
NdrStubCall2
0x100a6094
NdrStubForwardingFunction
0x100a6090
WS2_32.dll
26
accept
0x100a6114
bind
0x100a60f8
closesocket
0x100a6118
connect
0x100a60f0
getpeername
0x100a6100
getsockname
0x100a60fc
listen
0x100a6108
recv
0x100a6120
send
0x100a6124
setsockopt
0x100a6104
WSAAddressToStringW
0x100a612c
WSACleanup
0x100a60e8
WSACreateEvent
0x100a6138
WSAEnumNetworkEvents
0x100a6110
WSAEventSelect
0x100a610c
WSAGetLastError
0x100a60e4
WSAGetOverlappedResult
0x100a6144
WSALookupServiceBeginW
0x100a6130
WSALookupServiceEnd
0x100a60ec
WSALookupServiceNextW
0x100a6128
WSARecv
0x100a611c
WSASend
0x100a613c
WSASetEvent
0x100a6140
WSASetServiceW
0x100a6134
WSASocketW
0x100a60f4
WSAStartup
0x100a60e0
No function matches your filter.