tapisrv.dll
v10.0.19041.6157
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 2
ServiceMain
#1 · 0x26430
SvchostPushServiceGlobals
#2 · 0x26240
No function matches your filter.
Imported DLLs & functions 143
CoCreateInstance
0x1003b1a4
CoInitializeEx
0x1003b1a0
CoUninitialize
0x1003b19c
RegCloseKey
0x1003b1d4
RegCreateKeyExW
0x1003b1bc
RegDeleteKeyExW
0x1003b1d8
RegDeleteValueW
0x1003b1cc
RegEnumKeyExW
0x1003b1b8
RegEnumValueW
0x1003b1d0
RegNotifyChangeKeyValue
0x1003b1c8
RegOpenCurrentUser
0x1003b1dc
RegOpenKeyExA
0x1003b1c4
RegOpenKeyExW
0x1003b1ac
RegQueryInfoKeyW
0x1003b1e0
RegQueryValueExA
0x1003b1c0
RegQueryValueExW
0x1003b1b0
RegSetValueExW
0x1003b1b4
SetServiceStatus
0x1003b1e8
CloseServiceHandle
0x1003b1f0
OpenSCManagerW
0x1003b1f4
OpenServiceW
0x1003b1f8
ChangeServiceConfigW
0x1003b200
RegisterServiceCtrlHandlerW
0x1003b208
KERNEL32.dll
82
CloseHandle
0x1003b130
CompareStringW
0x1003b0f8
CreateEventW
0x1003b0bc
CreateFileMappingW
0x1003b054
CreateFileW
0x1003b0d4
CreateMutexW
0x1003b108
CreateThread
0x1003b0ac
DelayLoadFailureHook
0x1003b004
DeleteCriticalSection
0x1003b094
DeleteFileW
0x1003b014
DisableThreadLibraryCalls
0x1003b0b8
DuplicateHandle
0x1003b11c
EnterCriticalSection
0x1003b0fc
ExitThread
0x1003b0c4
FileTimeToSystemTime
0x1003b048
FindClose
0x1003b078
FindFirstFileW
0x1003b084
FindNextFileW
0x1003b080
FreeLibrary
0x1003b000
GetComputerNameExW
0x1003b0c8
GetComputerNameW
0x1003b090
GetCurrentDirectoryW
0x1003b060
GetCurrentProcess
0x1003b0f0
GetCurrentProcessId
0x1003b01c
GetCurrentThread
0x1003b0b4
GetCurrentThreadId
0x1003b114
GetFileAttributesExW
0x1003b068
GetFileSize
0x1003b05c
GetLastError
0x1003b128
GetLocalTime
0x1003b030
GetPrivateProfileIntW
0x1003b0e4
GetPrivateProfileSectionNamesW
0x1003b0cc
GetPrivateProfileSectionW
0x1003b07c
GetPrivateProfileStringW
0x1003b06c
GetProcAddress
0x1003b098
GetProcessHeap
0x1003b08c
GetSystemDirectoryW
0x1003b074
GetSystemInfo
0x1003b0b0
GetSystemTime
0x1003b13c
GetSystemTimeAsFileTime
0x1003b03c
GetSystemWindowsDirectoryW
0x1003b04c
GetTickCount
0x1003b140
GetWindowsDirectoryW
0x1003b00c
GlobalAlloc
0x1003b018
GlobalFree
0x1003b010
HeapAlloc
0x1003b0a4
HeapCompact
0x1003b0a0
HeapCreate
0x1003b144
HeapDestroy
0x1003b09c
HeapFree
0x1003b0f4
InitializeCriticalSectionAndSpinCount
0x1003b0d8
IsDBCSLeadByte
0x1003b064
K32EnumProcesses
0x1003b044
LeaveCriticalSection
0x1003b104
LoadLibraryW
0x1003b134
LocalAlloc
0x1003b110
LocalFree
0x1003b040
lstrcmpiW
0x1003b088
lstrlenA
0x1003b034
lstrlenW
0x1003b100
MapViewOfFile
0x1003b050
MultiByteToWideChar
0x1003b120
OpenEventW
0x1003b0d0
OpenProcess
0x1003b0c0
OutputDebugStringA
0x1003b038
QueryPerformanceCounter
0x1003b020
ReleaseMutex
0x1003b118
ResetEvent
0x1003b0a8
ResolveDelayLoadedAPI
0x1003b008
SetEvent
0x1003b12c
SetThreadPriority
0x1003b0dc
SetUnhandledExceptionFilter
0x1003b028
Sleep
0x1003b124
TerminateProcess
0x1003b024
UnhandledExceptionFilter
0x1003b02c
UnmapViewOfFile
0x1003b070
UnregisterWait
0x1003b0e8
WaitForMultipleObjects
0x1003b0e0
WaitForSingleObject
0x1003b10c
WriteFile
0x1003b0ec
WritePrivateProfileSectionW
0x1003b058
WritePrivateProfileStringW
0x1003b138
msvcrt.dll
19
_amsg_exit
0x1003b228
_except_handler4_common
0x1003b214
_initterm
0x1003b224
_itow
0x1003b22c
_vsnprintf
0x1003b230
_vsnwprintf
0x1003b250
_wcsicmp
0x1003b24c
_wcsnicmp
0x1003b234
_wcsupr
0x1003b248
_wtol
0x1003b23c
_XcptFilter
0x1003b218
free
0x1003b220
malloc
0x1003b210
memcpy
0x1003b254
memmove
0x1003b21c
memset
0x1003b258
wcschr
0x1003b244
wcsncmp
0x1003b238
wcsstr
0x1003b240
RPCRT4.dll
19
I_RpcExceptionFilter
0x1003b16c
NdrClientCall4
0x1003b178
NdrServerCall2
0x1003b174
RpcBindingFree
0x1003b184
RpcBindingFromStringBindingW
0x1003b154
RpcBindingSetAuthInfoW
0x1003b160
RpcCancelThread
0x1003b17c
RpcImpersonateClient
0x1003b194
RpcMgmtSetCancelTimeout
0x1003b158
RpcRevertToSelf
0x1003b15c
RpcServerInqCallAttributesW
0x1003b180
RpcServerInqDefaultPrincNameW
0x1003b150
RpcServerListen
0x1003b18c
RpcServerRegisterAuthInfoW
0x1003b188
RpcServerRegisterIfEx
0x1003b190
RpcServerUnregisterIf
0x1003b164
RpcServerUseProtseqEpW
0x1003b14c
RpcStringBindingComposeW
0x1003b168
RpcStringFreeW
0x1003b170
No function matches your filter.