PrintWorkflowService.dll
v10.0.19041.6456
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 4
ServiceMain
#1 · 0x16c70
SvchostPushServiceGlobals
#2 · 0x16c40
DllCanUnloadNow
#3 · 0x166f0
DllGetActivationFactory
#4 · 0x16730
No function matches your filter.
Imported DLLs & functions 255
GetPackagesByPackageFamily
0x10058014
CloseState
0x1005801c
GetSystemAppDataKey
0x10058024
OpenStateExplicit
0x10058020
IsDeveloperModeEnabled
0x1005802c
ApiSetQueryApiSetPresence
0x10058034
GlobalGetAtomNameW
0x1005803c
BiPtActivateInBackground
0x10058048
BiPtQueryWorkItemStatusStateName
0x10058044
CoAddRefServerProcess
0x10058088
CoCreateFreeThreadedMarshaler
0x10058070
CoCreateGuid
0x100580a0
CoCreateInstance
0x10058054
CoDecrementMTAUsage
0x10058060
CoDisconnectContext
0x10058050
CoGetCallContext
0x10058098
CoGetClassObject
0x1005805c
CoGetMalloc
0x10058074
CoGetObjectContext
0x10058068
CoGetStdMarshalEx
0x1005809c
CoImpersonateClient
0x10058090
CoIncrementMTAUsage
0x100580ac
CoInitializeEx
0x1005808c
CoRegisterClassObject
0x10058064
CoReleaseServerProcess
0x10058080
CoResumeClassObjects
0x100580a4
CoRevertToSelf
0x10058094
CoRevokeClassObject
0x10058084
CoTaskMemAlloc
0x1005807c
CoTaskMemFree
0x1005806c
CoUninitialize
0x10058078
CreateStreamOnHGlobal
0x10058058
StringFromGUID2
0x100580a8
RoGetAgileReference
0x100580b4
DebugBreak
0x100580c4
IsDebuggerPresent
0x100580bc
OutputDebugStringW
0x100580c0
CheckRemoteDebuggerPresent
0x100580cc
DelayLoadFailureHook
0x100580d4
ResolveDelayLoadedAPI
0x100580dc
GetLastError
0x100580f0
RaiseException
0x100580ec
SetLastError
0x100580e4
SetUnhandledExceptionFilter
0x100580f4
UnhandledExceptionFilter
0x100580e8
GetTempPathW
0x10058108
GetProcessHeap
0x10058124
HeapAlloc
0x10058120
HeapFree
0x1005811c
InitializeSListHead
0x1005813c
InterlockedFlushSList
0x10058138
InterlockedPushEntrySList
0x10058140
UnregisterWait
0x10058148
DisableThreadLibraryCalls
0x1005815c
FreeLibrary
0x10058160
GetModuleFileNameA
0x10058154
GetModuleHandleExW
0x10058164
GetModuleHandleW
0x10058158
GetProcAddress
0x10058150
LoadLibraryW
0x1005816c
FormatMessageW
0x10058174
PathCchCombineEx
0x1005817c
CreateThread
0x10058188
GetCurrentProcess
0x100581a8
GetCurrentProcessId
0x10058194
GetCurrentThread
0x100581a0
GetCurrentThreadId
0x1005818c
GetExitCodeThread
0x10058190
GetProcessId
0x1005819c
OpenProcessToken
0x10058184
OpenThreadToken
0x100581a4
TerminateProcess
0x10058198
GetCurrentProcessorNumber
0x100581b8
IsProcessorFeaturePresent
0x100581b4
OpenProcess
0x100581b0
QueryPerformanceCounter
0x100581c0
QueryFullProcessImageNameW
0x100581c8
RegCloseKey
0x100581d8
RegCreateKeyExW
0x100581e0
RegGetValueW
0x100581d0
RegOpenCurrentUser
0x100581d4
RegOpenKeyExW
0x100581dc
RegQueryValueExW
0x100581e4
RegOpenKeyW
0x100581ec
PathFindFileNameW
0x100581f4
CompareStringOrdinal
0x10058204
MultiByteToWideChar
0x10058200
WideCharToMultiByte
0x100581fc
AcquireSRWLockExclusive
0x10058240
AcquireSRWLockShared
0x10058258
CreateEventExW
0x10058210
CreateEventW
0x1005821c
CreateMutexExW
0x10058254
CreateSemaphoreExW
0x10058220
DeleteCriticalSection
0x1005825c
EnterCriticalSection
0x10058214
InitializeCriticalSectionAndSpinCount
0x10058230
InitializeCriticalSectionEx
0x10058224
InitializeSRWLock
0x10058234
LeaveCriticalSection
0x10058244
OpenSemaphoreW
0x1005824c
ReleaseMutex
0x1005822c
ReleaseSemaphore
0x10058218
ReleaseSRWLockExclusive
0x10058238
ReleaseSRWLockShared
0x10058250
ResetEvent
0x1005820c
SetEvent
0x1005823c
WaitForSingleObject
0x10058228
WaitForSingleObjectEx
0x10058248
InitOnceBeginInitialize
0x10058270
InitOnceComplete
0x10058268
InitOnceExecuteOnce
0x10058264
Sleep
0x1005826c
WaitForMultipleObjects
0x10058278
GetSystemTimeAsFileTime
0x10058280
GetTickCount
0x10058284
GetTickCount64
0x10058288
CloseThreadpoolTimer
0x100582a4
CloseThreadpoolWait
0x10058298
CreateThreadpoolTimer
0x100582ac
CreateThreadpoolWait
0x100582a8
SetThreadpoolTimer
0x10058294
SetThreadpoolWait
0x10058290
TrySubmitThreadpoolCallback
0x1005829c
WaitForThreadpoolTimerCallbacks
0x100582a0
GetRestrictedErrorInfo
0x100582cc
RoFailFastWithErrorContext
0x100582c4
RoOriginateError
0x100582d4
RoOriginateErrorW
0x100582d0
RoTransformError
0x100582c0
SetRestrictedErrorInfo
0x100582c8
RoGetMatchingRestrictedErrorInfo
0x100582e0
RoOriginateLanguageException
0x100582dc
RoActivateInstance
0x100582ec
RoGetActivationFactory
0x100582e8
RoInitialize
0x100582f4
RoRegisterActivationFactories
0x100582fc
RoRevokeActivationFactories
0x100582f0
RoUninitialize
0x100582f8
WindowsCreateString
0x10058328
WindowsCreateStringReference
0x10058308
WindowsDeleteString
0x10058314
WindowsDeleteStringBuffer
0x10058304
WindowsDuplicateString
0x10058318
WindowsGetStringRawBuffer
0x10058310
WindowsIsStringEmpty
0x10058320
WindowsPreallocateStringBuffer
0x1005830c
WindowsPromoteStringBuffer
0x1005831c
WindowsStringHasEmbeddedNull
0x10058324
WindowsSubstringWithSpecifiedLength
0x1005832c
__CxxFrameHandler3
0x100583b4
__std_terminate
0x100583b0
_CxxThrowException
0x10058378
_except_handler4_common
0x10058374
_o___std_exception_copy
0x100583a8
_o___std_exception_destroy
0x100583a4
_o___std_type_info_destroy_list
0x100583a0
_o___stdio_common_vsnprintf_s
0x1005839c
_o___stdio_common_vswprintf
0x10058398
_o___stdio_common_vswprintf_s
0x10058394
_o__callnewh
0x10058388
_o__cexit
0x10058380
_o__configure_narrow_argv
0x1005837c
_o__crt_atexit
0x10058354
_o__errno
0x1005838c
_o__execute_onexit_table
0x10058384
_o__initialize_narrow_environment
0x10058334
_o__initialize_onexit_table
0x10058338
_o__invalid_parameter_noinfo
0x1005833c
_o__invalid_parameter_noinfo_noreturn
0x10058340
_o__itow_s
0x10058344
_o__purecall
0x10058348
_o__register_onexit_function
0x1005834c
_o__seh_filter_dll
0x10058350
_o__wcsicmp
0x1005835c
_o_free
0x10058360
_o_iswspace
0x10058364
_o_malloc
0x10058368
_o_terminate
0x1005836c
_o_toupper
0x10058370
memcmp
0x100583b8
memcpy
0x100583bc
memmove
0x10058358
wcschr
0x100583ac
wcsrchr
0x10058390
DevFreeObjectProperties
0x100583dc
DevGetObjectProperties
0x100583e0
EventActivityIdControl
0x100583fc
EventProviderEnabled
0x100583f8
EventRegister
0x100583ec
EventSetInformation
0x100583f4
EventUnregister
0x100583f0
EventWriteTransfer
0x100583e8
PowerSettingRegisterNotification
0x10058408
PowerSettingUnregisterNotification
0x10058404
DispatchMessageW
0x10058410
PeekMessageW
0x10058418
PostMessageW
0x1005841c
RegisterClassExW
0x10058420
TranslateMessage
0x10058414
GetSecurityDescriptorSacl
0x10058428
GetSidSubAuthority
0x10058430
GetSidSubAuthorityCount
0x1005842c
GetTokenInformation
0x10058434
SetNamedSecurityInfoW
0x1005843c
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x10058444
RegisterServiceCtrlHandlerExW
0x1005844c
SetServiceStatus
0x10058450
IUnknown_QueryService
0x10058458
IStream_Write
0x10058464
SHCreateMemStream
0x10058468
SHCreateStreamOnFileEx
0x10058460
CreateRandomAccessStreamOverStream
0x10058474
CreateStreamOverRandomAccessStream
0x10058470
_Xtime_get_ticks
0x100584a4
?__ExceptionPtrAssign@@YAXPAXPBX@Z
0x100584b0
?__ExceptionPtrCopy@@YAXPAXPBX@Z
0x100584a8
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
0x10058498
?__ExceptionPtrCreate@@YAXPAX@Z
0x100584a0
?__ExceptionPtrCurrentException@@YAXPAX@Z
0x100584bc
?__ExceptionPtrDestroy@@YAXPAX@Z
0x100584ac
?__ExceptionPtrRethrow@@YAXPBX@Z
0x1005849c
?_Xbad_function_call@std@@YAXXZ
0x10058494
?_Xlength_error@std@@YAXPBD@Z
0x100584b8
?_Xout_of_range@std@@YAXPBD@Z
0x100584b4
ntdll.dll
10
NtQueryInformationToken
0x100584d0
NtQueryWnfStateData
0x100584c8
RtlAllocateHeap
0x100584dc
RtlCompareUnicodeString
0x100584e4
RtlFreeHeap
0x100584cc
RtlGetDeviceFamilyInfoEnum
0x100584d8
RtlInitUnicodeString
0x100584e8
RtlNtStatusToDosErrorNoTeb
0x100584e0
RtlSubscribeWnfStateChangeNotification
0x100584d4
RtlUnsubscribeWnfNotificationWaitForCompletion
0x100584c4
CreateOnDemandBrokerClient
0x1005800c
No function matches your filter.