InstallService.dll

v10.0.19041.6280 32-bit Windows NT Analyzed
Description
InstallService
Authors
© Microsoft Corporation. All rights reserved.
File size
1.9 MB
Uploaded
2025-12-01 07:57
Views
124
SHA-256
e475077b9f5987fdac4d6f67dee1a3f7

Exported functions 4

ServiceMain #1 · 0x50570
DllCanUnloadNow #2 · 0x4c620
DllGetActivationFactory #3 · 0x4c6c0
DllGetClassObject #4 · 0x4c650

Imported DLLs & functions 424

GetPackageFullNameFromToken 0x101da0c4
ApiSetQueryApiSetPresence 0x101da0cc
DebugBreak 0x101da0d4
IsDebuggerPresent 0x101da0dc
OutputDebugStringW 0x101da0d8
DelayLoadFailureHook 0x101da0e4
ResolveDelayLoadedAPI 0x101da0ec
GetLastError 0x101da0f4
RaiseException 0x101da0fc
SetLastError 0x101da104
SetUnhandledExceptionFilter 0x101da100
UnhandledExceptionFilter 0x101da0f8
CompareFileTime 0x101da124
CreateDirectoryW 0x101da118
CreateFileW 0x101da12c
DeleteFileW 0x101da120
FindClose 0x101da144
FindFirstFileExW 0x101da128
FindFirstFileW 0x101da14c
FindNextFileW 0x101da148
GetFileAttributesExW 0x101da11c
GetFileAttributesW 0x101da10c
GetFileSizeEx 0x101da13c
GetFinalPathNameByHandleW 0x101da130
GetTempFileNameW 0x101da110
ReadFile 0x101da138
SetFileAttributesW 0x101da114
SetFileInformationByHandle 0x101da134
WriteFile 0x101da140
GetTempPathW 0x101da158
GetVolumeNameForVolumeMountPointW 0x101da154
GetFileInformationByHandleEx 0x101da160
CloseHandle 0x101da168
GetProcessHeap 0x101da174
HeapAlloc 0x101da170
HeapFree 0x101da178
GlobalFree 0x101da188
LocalAlloc 0x101da180
LocalFree 0x101da184
InitializeSListHead 0x101da190
InterlockedFlushSList 0x101da198
InterlockedPushEntrySList 0x101da194
PowerClearRequest 0x101da1a0
PowerSetRequest 0x101da1a4
DisableThreadLibraryCalls 0x101da1cc
FindStringOrdinal 0x101da1b0
FreeLibrary 0x101da1b8
GetModuleFileNameA 0x101da1c8
GetModuleFileNameW 0x101da1bc
GetModuleHandleExW 0x101da1c0
GetModuleHandleW 0x101da1c4
GetProcAddress 0x101da1b4
LoadStringW 0x101da1ac
FormatMessageW 0x101da1dc
LCMapStringEx 0x101da1e0
CreateFileMappingW 0x101da1e8
FlushViewOfFile 0x101da1f4
MapViewOfFile 0x101da1f0
UnmapViewOfFile 0x101da1ec
PathCchAddExtension 0x101da200
PathCchAppend 0x101da210
PathCchCombine 0x101da20c
PathCchRemoveExtension 0x101da1fc
PathCchRemoveFileSpec 0x101da204
PathCchStripToRoot 0x101da208
GetCurrentDirectoryW 0x101da218
GetEnvironmentVariableW 0x101da21c
GetCurrentProcess 0x101da23c
GetCurrentProcessId 0x101da244
GetCurrentThread 0x101da228
GetCurrentThreadId 0x101da234
OpenProcessToken 0x101da238
OpenThreadToken 0x101da224
ProcessIdToSessionId 0x101da240
SetThreadToken 0x101da22c
TerminateProcess 0x101da230
IsProcessorFeaturePresent 0x101da250
OpenProcess 0x101da24c
QueryPerformanceCounter 0x101da258
QueryFullProcessImageNameW 0x101da260
RegCloseKey 0x101da284
RegCreateKeyExW 0x101da274
RegDeleteValueW 0x101da270
RegEnumValueW 0x101da27c
RegGetValueW 0x101da280
RegOpenCurrentUser 0x101da268
RegOpenKeyExW 0x101da278
RegSetValueExW 0x101da26c
RegDeleteKeyValueW 0x101da290
RegSetKeyValueW 0x101da28c
RegCreateKeyW 0x101da29c
RegDeleteKeyW 0x101da298
PathFileExistsW 0x101da2a4
PathFindFileNameW 0x101da2a8
CompareStringOrdinal 0x101da2b8
MultiByteToWideChar 0x101da2b4
WideCharToMultiByte 0x101da2b0
AcquireSRWLockExclusive 0x101da314
AcquireSRWLockShared 0x101da2cc
CreateEventExW 0x101da2f8
CreateEventW 0x101da2d4
CreateMutexExW 0x101da2dc
CreateMutexW 0x101da308
CreateSemaphoreExW 0x101da2f4
DeleteCriticalSection 0x101da2c0
EnterCriticalSection 0x101da2c4
InitializeCriticalSection 0x101da318
InitializeCriticalSectionAndSpinCount 0x101da300
InitializeCriticalSectionEx 0x101da310
InitializeSRWLock 0x101da30c
LeaveCriticalSection 0x101da2c8
OpenSemaphoreW 0x101da2e0
ReleaseMutex 0x101da2e8
ReleaseSemaphore 0x101da2f0
ReleaseSRWLockExclusive 0x101da2d8
ReleaseSRWLockShared 0x101da2d0
ResetEvent 0x101da304
SetEvent 0x101da2fc
WaitForSingleObject 0x101da2ec
WaitForSingleObjectEx 0x101da2e4
InitOnceExecuteOnce 0x101da324
Sleep 0x101da320
WaitOnAddress 0x101da32c
WakeByAddressAll 0x101da328
GetSystemTime 0x101da334
GetSystemTimeAsFileTime 0x101da33c
GetTickCount 0x101da338
GetTickCount64 0x101da344
GetVersionExA 0x101da340
CloseThreadpoolTimer 0x101da34c
CloseThreadpoolWork 0x101da368
CreateThreadpoolTimer 0x101da354
CreateThreadpoolWork 0x101da35c
FreeLibraryWhenCallbackReturns 0x101da364
SetThreadpoolTimer 0x101da350
SubmitThreadpoolWork 0x101da360
WaitForThreadpoolTimerCallbacks 0x101da358
QueueUserWorkItem 0x101da370
SystemTimeToFileTime 0x101da378
UrlEscapeW 0x101da380
DecodePointer 0x101da38c
EncodePointer 0x101da388
IsWow64Process 0x101da394
IsWow64Process2 0x101da39c
__CxxFrameHandler3 0x101da4c0
__std_terminate 0x101da4bc
__std_type_info_compare 0x101da4d0
_CxxThrowException 0x101da478
_except_handler4_common 0x101da474
_o____lc_codepage_func 0x101da4b8
_o___std_exception_copy 0x101da4b0
_o___std_exception_destroy 0x101da4ac
_o___std_type_info_destroy_list 0x101da4a8
_o___stdio_common_vsnprintf_s 0x101da4a4
_o___stdio_common_vsnwprintf_s 0x101da4a0
_o___stdio_common_vsprintf_s 0x101da49c
_o___stdio_common_vswprintf 0x101da498
_o___stdio_common_vswprintf_s 0x101da494
_o__beginthreadex 0x101da490
_o__callnewh 0x101da48c
_o__cexit 0x101da488
_o__configure_narrow_argv 0x101da484
_o__crt_atexit 0x101da480
_o__errno 0x101da4cc
_o__execute_onexit_table 0x101da4b4
_o__fseeki64 0x101da47c
_o__initialize_narrow_environment 0x101da3a4
_o__initialize_onexit_table 0x101da3a8
_o__invalid_parameter_noinfo 0x101da3ac
_o__invalid_parameter_noinfo_noreturn 0x101da3b0
_o__localtime64_s 0x101da3b4
_o__lock_file 0x101da3b8
_o__mktime64 0x101da3bc
_o__purecall 0x101da3c0
_o__register_onexit_function 0x101da3c4
_o__seh_filter_dll 0x101da3c8
_o__set_errno 0x101da3cc
_o__ui64tow_s 0x101da3d0
_o__unlock_file 0x101da3d4
_o__wcsicmp 0x101da3d8
_o__wcstoui64 0x101da3dc
_o__wtoi 0x101da3e4
_o__wtoi64 0x101da3e8
_o_ceil 0x101da3ec
_o_fclose 0x101da3f0
_o_fflush 0x101da3f4
_o_fgetc 0x101da3f8
_o_fgetpos 0x101da3fc
_o_fgetwc 0x101da400
_o_fputwc 0x101da404
_o_free 0x101da408
_o_fsetpos 0x101da40c
_o_fwrite 0x101da410
_o_isalnum 0x101da414
_o_iswspace 0x101da418
_o_malloc 0x101da41c
_o_mbstowcs 0x101da420
_o_mbstowcs_s 0x101da424
_o_rand 0x101da428
_o_realloc 0x101da42c
_o_setvbuf 0x101da430
_o_srand 0x101da434
_o_strncpy_s 0x101da438
_o_strtol 0x101da43c
_o_terminate 0x101da440
_o_toupper 0x101da444
_o_ungetc 0x101da448
_o_ungetwc 0x101da44c
_o_wcscat_s 0x101da450
_o_wcscpy_s 0x101da454
_o_wcsftime 0x101da458
_o_wcsncpy_s 0x101da45c
_o_wcstok_s 0x101da460
_o_wcstol 0x101da464
_o_wcstombs 0x101da468
_o_wcstombs_s 0x101da46c
_o_wcstoul 0x101da470
memcmp 0x101da4c4
memcpy 0x101da4c8
memmove 0x101da3e0
strchr 0x101da4e0
strrchr 0x101da4d4
wcschr 0x101da4dc
wcsstr 0x101da4d8
_initterm 0x101da4e8
_initterm_e 0x101da4ec
memset 0x101da4f8
wcsncpy 0x101da4f4
wcsnlen 0x101da4fc
EventActivityIdControl 0x101da510
EventProviderEnabled 0x101da518
EventRegister 0x101da50c
EventSetInformation 0x101da520
EventUnregister 0x101da514
EventWriteTransfer 0x101da51c
GetMonitorInfoW 0x101da528
CapabilityCheck 0x101da530
CryptAcquireContextW 0x101da53c
CryptCreateHash 0x101da538
CryptDestroyHash 0x101da54c
CryptGetHashParam 0x101da544
CryptHashData 0x101da540
CryptReleaseContext 0x101da548
ConvertSidToStringSidW 0x101da554
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x101da558
RegisterServiceCtrlHandlerExW 0x101da564
SetServiceStatus 0x101da560
CloseServiceHandle 0x101da578
OpenSCManagerW 0x101da56c
OpenServiceW 0x101da574
StartServiceW 0x101da570
QueryServiceStatus 0x101da580
SHTaskPoolAllowThreadReuse 0x101da58c
SHTaskPoolQueueTask 0x101da588
SHGetIDListFromObject 0x101da594
GetPersistedRegistryLocationW 0x101da5a4
0x101da5ac
0x101da5b0
0x101da5b4
0x101da5b8
WNetGetConnectionW 0x101da000
_Cnd_broadcast 0x101da6e0
_Cnd_destroy_in_situ 0x101da6f0
_Cnd_do_broadcast_at_thread_exit 0x101da638
_Cnd_init_in_situ 0x101da738
_Cnd_register_at_thread_exit 0x101da6d8
_Cnd_unregister_at_thread_exit 0x101da6f4
_Cnd_wait 0x101da6b4
_Mtx_destroy_in_situ 0x101da6ec
_Mtx_init_in_situ 0x101da734
_Mtx_lock 0x101da76c
_Mtx_unlock 0x101da774
_Thrd_detach 0x101da630
_Xtime_get_ticks 0x101da600
?__ExceptionPtrAssign@@YAXPAXPBX@Z 0x101da74c
?__ExceptionPtrCopy@@YAXPAXPBX@Z 0x101da6d4
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z 0x101da690
?__ExceptionPtrCreate@@YAXPAX@Z 0x101da760
?__ExceptionPtrCurrentException@@YAXPAX@Z 0x101da764
?__ExceptionPtrDestroy@@YAXPAX@Z 0x101da6e8
?__ExceptionPtrRethrow@@YAXPBX@Z 0x101da768
?__ExceptionPtrToBool@@YA_NPBX@Z 0x101da6cc
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z 0x101da678
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z 0x101da724
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ 0x101da720
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ 0x101da644
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z 0x101da6a8
?_Fiopen@std@@YAPAU_iobuf@@PBGHH@Z 0x101da664
?_Getcat@?$codecvt@GDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z 0x101da740
?_Getcat@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z 0x101da754
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ 0x101da694
?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ 0x101da688
?_Incref@facet@locale@std@@UAEXXZ 0x101da654
?_Init@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXXZ 0x101da680
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z 0x101da640
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z 0x101da710
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ 0x101da5cc
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ 0x101da718
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z 0x101da71c
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ 0x101da70c
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ 0x101da714
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ 0x101da700
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ 0x101da704
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z 0x101da750
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ 0x101da5c4
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ 0x101da5ec
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z 0x101da72c
?_ReportUnobservedException@details@Concurrency@@YAXXZ 0x101da75c
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ 0x101da748
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z 0x101da6d0
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z 0x101da728
?_Syserror_map@std@@YAPBDH@Z 0x101da6b0
?_Throw_C_error@std@@YAXH@Z 0x101da6dc
?_Throw_Cpp_error@std@@YAXH@Z 0x101da770
?_Throw_future_error@std@@YAXABVerror_code@1@@Z 0x101da6a4
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ 0x101da670
?_Winerror_map@std@@YAHH@Z 0x101da620
?_Winerror_message@std@@YAKKPADK@Z 0x101da624
?_Xbad_alloc@std@@YAXXZ 0x101da674
?_Xbad_function_call@std@@YAXXZ 0x101da758
?_XGetLastError@std@@YAXXZ 0x101da73c
?_Xinvalid_argument@std@@YAXPBD@Z 0x101da628
?_Xlength_error@std@@YAXPBD@Z 0x101da6ac
?_Xout_of_range@std@@YAXPBD@Z 0x101da608
??0_Lockit@std@@QAE@H@Z 0x101da698
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ 0x101da5fc
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z 0x101da61c
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z 0x101da5f8
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z 0x101da684
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ 0x101da5f4
??0?$codecvt@GDU_Mbstatet@@@std@@QAE@I@Z 0x101da650
??0task_continuation_context@Concurrency@@AAE@XZ 0x101da744
??1_Lockit@std@@QAE@XZ 0x101da69c
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ 0x101da6e4
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ 0x101da604
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ 0x101da5f0
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ 0x101da658
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ 0x101da5d0
??1?$codecvt@GDU_Mbstatet@@@std@@MAE@XZ 0x101da64c
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z 0x101da668
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z 0x101da618
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z 0x101da614
??Bid@locale@std@@QAEIXZ 0x101da634
?always_noconv@codecvt_base@std@@QBE_NXZ 0x101da65c
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ 0x101da6f8
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z 0x101da5e4
?get@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBG4@Z 0x101da6c4
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ 0x101da730
?getloc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QBE?AVlocale@2@XZ 0x101da67c
?getloc@ios_base@std@@QBE?AVlocale@2@XZ 0x101da6a0
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A 0x101da66c
?id@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A 0x101da708
?imbue@?$basic_ios@GU?$char_traits@G@std@@@std@@QAE?AVlocale@2@ABV32@@Z 0x101da68c
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z 0x101da5d4
?in@?$codecvt@GDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAG3AAPAG@Z 0x101da63c
?out@?$codecvt@GDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBG1AAPBGPAD3AAPAD@Z 0x101da648
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ 0x101da6bc
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z 0x101da5d8
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z 0x101da6c8
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ 0x101da6c0
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ 0x101da5e8
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ 0x101da6fc
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z 0x101da60c
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE_JPBG_J@Z 0x101da610
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ 0x101da5c0
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ 0x101da6b8
?uncaught_exception@std@@YA_NXZ 0x101da5c8
?uncaught_exceptions@std@@YAHXZ 0x101da62c
?unshift@?$codecvt@GDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z 0x101da660
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z 0x101da5e0
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z 0x101da5dc
NtQueryWnfStateData 0x101da794
RtlClearAllBits 0x101da784
RtlConvertDeviceFamilyInfoToString 0x101da78c
RtlGetDeviceFamilyInfoEnum 0x101da798
RtlInitializeBitMap 0x101da788
RtlIsMultiSessionSku 0x101da790
RtlIsMultiUsersInSessionSku 0x101da79c
RtlSetBit 0x101da780
RtlWow64IsWowGuestMachineSupported 0x101da77c
SysAllocString 0x101da008
SysAllocStringByteLen 0x101da024
SysFreeString 0x101da01c
SysStringByteLen 0x101da020
SysStringLen 0x101da00c
VarBstrCmp 0x101da010
VariantClear 0x101da014
VariantInit 0x101da028
VariantTimeToSystemTime 0x101da018
I_RpcBindingInqLocalClientPID 0x101da044
I_RpcExceptionFilter 0x101da040
NdrAsyncClientCall 0x101da03c
RpcAsyncCancelCall 0x101da034
RpcAsyncCompleteCall 0x101da030
RpcAsyncInitializeHandle 0x101da054
RpcBindingFree 0x101da05c
RpcBindingFromStringBindingW 0x101da04c
RpcBindingSetAuthInfoExW 0x101da050
RpcStringBindingComposeW 0x101da048
RpcStringFreeW 0x101da058
UuidCreate 0x101da038
Pdcv2ActivationClientActivate 0x101da064
Pdcv2ActivationClientDeactivate 0x101da068
ExpandEnvironmentStringsForUserW 0x101da070
WinHttpCloseHandle 0x101da078
WinHttpConnect 0x101da098
WinHttpCrackUrl 0x101da07c
WinHttpCreateUrl 0x101da09c
WinHttpGetDefaultProxyConfiguration 0x101da080
WinHttpGetIEProxyConfigForCurrentUser 0x101da084
WinHttpGetProxyForUrl 0x101da0a0
WinHttpOpen 0x101da094
WinHttpOpenRequest 0x101da088
WinHttpQueryDataAvailable 0x101da0b0
WinHttpQueryHeaders 0x101da0ac
WinHttpReadData 0x101da0b4
WinHttpReceiveResponse 0x101da090
WinHttpSendRequest 0x101da08c
WinHttpSetOption 0x101da0a4
WinHttpSetTimeouts 0x101da0a8
WldpIsAppApprovedByPolicy 0x101da0bc