iisw3adm.dll - Online Dependency Analysis & Download

Description

IIS Web Admin Service

Authors

File size

583.5 KB

Uploaded

2025-12-01 08:13

Views

SHA-256

b9a8ab591901bccda494888b7241d130

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported functions 72

ServiceMain #1 · 0x2230

??0?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@QEAA@PEBDNKK_N@Z #2 · 0x1a90

??0?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@QEAA@PEBDNKK_N@Z #3 · 0x1b40

??0HASH_POOL_HASH@@QEAA@XZ #4 · 0x16a0

??0IPM_MESSAGE_PIPE@@QEAA@AEBV0@@Z #5 · 0x1220

??0POOL_HASH_HASH@@QEAA@XZ #6 · 0x13f0

??1?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@QEAA@XZ #7 · 0x1680

??1?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@QEAA@XZ #8 · 0x1680

??1HASH_POOL_HASH@@QEAA@XZ #9 · 0x1680

??1POOL_HASH_HASH@@QEAA@XZ #10 · 0x1680

??4CSecurityDispenser@@QEAAAEAV0@AEBV0@@Z #11 · 0x1380

??4IPM_MESSAGE_PIPE@@QEAAAEAV0@AEBV0@@Z #12 · 0x1280

??_7IPM_MESSAGE_PIPE@@6B@ #13 · 0x69010

?AddRefRecord@HASH_POOL_HASH@@SAXPEAVPOOL_HASH_ENTRY@@H@Z #14 · 0x14e0

?AddRefRecord@POOL_HASH_HASH@@SAXPEAVPOOL_HASH_ENTRY@@H@Z #15 · 0x14e0

?Apply@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@QEAAKP6A?AW4LK_ACTION@@PEAVPOOL_HASH_ENTRY@@PEAX@Z1W4LK_LOCKTYPE@@@Z #16 · 0x1970

?Apply@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@QEAAKP6A?AW4LK_ACTION@@PEAVPOOL_HASH_ENTRY@@PEAX@Z1W4LK_LOCKTYPE@@@Z #17 · 0x1970

?ApplyIf@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@QEAAKP6A?AW4LK_PREDICATE@@PEAVPOOL_HASH_ENTRY@@PEAX@ZP6A?AW4LK_ACTION@@01@Z1W4LK_LOCKTYPE@@@Z #18 · 0x1910

?ApplyIf@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@QEAAKP6A?AW4LK_PREDICATE@@PEAVPOOL_HASH_ENTRY@@PEAX@ZP6A?AW4LK_ACTION@@01@Z1W4LK_LOCKTYPE@@@Z #19 · 0x1910

?CalcKeyHash@HASH_POOL_HASH@@SAKPEBUAPP_POOL_HASH@@@Z #20 · 0x1720

?CalcKeyHash@POOL_HASH_HASH@@SAKPEBG@Z #21 · 0x1470

?ClearHash@HASH_POOL_HASH@@SAXPEAV1@@Z #22 · 0x1570

?ClearHash@POOL_HASH_HASH@@SAXPEAV1@@Z #23 · 0x1570

?DeleteIf@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@QEAAKP6A?AW4LK_PREDICATE@@PEAVPOOL_HASH_ENTRY@@PEAX@Z1@Z #24 · 0x18c0

?DeleteIf@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@QEAAKP6A?AW4LK_PREDICATE@@PEAVPOOL_HASH_ENTRY@@PEAX@Z1@Z #25 · 0x18c0

?DeleteKey@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@QEAA?AW4LK_RETCODE@@QEBUAPP_POOL_HASH@@@Z #26 · 0x1a50

?DeleteKey@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@QEAA?AW4LK_RETCODE@@QEBG@Z #27 · 0x1a50

?DeletePoolHashEntriesAction@HASH_POOL_HASH@@SA?AW4LK_ACTION@@PEAVPOOL_HASH_ENTRY@@PEAX@Z #28 · 0x1540

?DeletePoolHashEntriesAction@POOL_HASH_HASH@@SA?AW4LK_ACTION@@PEAVPOOL_HASH_ENTRY@@PEAX@Z #29 · 0x1540

?DeleteRecord@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@QEAA?AW4LK_RETCODE@@PEBVPOOL_HASH_ENTRY@@@Z #30 · 0x1a30

?DeleteRecord@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@QEAA?AW4LK_RETCODE@@PEBVPOOL_HASH_ENTRY@@@Z #31 · 0x1a30

?EqualKeys@HASH_POOL_HASH@@SA_NPEBUAPP_POOL_HASH@@0@Z #32 · 0x1740

?EqualKeys@POOL_HASH_HASH@@SA_NPEBG0@Z #33 · 0x14b0

?EqualRange@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@QEAA_NQEBUAPP_POOL_HASH@@AEAViterator@1@1@Z #34 · 0x1780

?EqualRange@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@QEAA_NQEBGAEAViterator@1@1@Z #35 · 0x1780

?Erase@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@QEAA_NAEAViterator@1@0@Z #36 · 0x17c0

?Erase@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@QEAA_NAEAViterator@1@@Z #37 · 0x17e0

?Erase@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@QEAA_NAEAViterator@1@0@Z #38 · 0x17c0

?Erase@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@QEAA_NAEAViterator@1@@Z #39 · 0x17e0

?ExtractKey@HASH_POOL_HASH@@SAPEBUAPP_POOL_HASH@@PEBVPOOL_HASH_ENTRY@@@Z #40 · 0x1710

?ExtractKey@POOL_HASH_HASH@@SAPEBGPEBVPOOL_HASH_ENTRY@@@Z #41 · 0x1460

?Find@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@QEAA_NQEBUAPP_POOL_HASH@@AEAViterator@1@@Z #42 · 0x17a0

?Find@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@QEAA_NQEBGAEAViterator@1@@Z #43 · 0x17a0

?FindKey@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@QEBA?AW4LK_RETCODE@@QEBUAPP_POOL_HASH@@PEAPEAVPOOL_HASH_ENTRY@@@Z #44 · 0x19e0

?FindKey@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@QEBA?AW4LK_RETCODE@@QEBGPEAPEAVPOOL_HASH_ENTRY@@@Z #45 · 0x19e0

?FindRecord@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@QEBA?AW4LK_RETCODE@@PEBVPOOL_HASH_ENTRY@@@Z #46 · 0x19c0

?FindRecord@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@QEBA?AW4LK_RETCODE@@PEBVPOOL_HASH_ENTRY@@@Z #47 · 0x19c0

HostedW3SVCStart #48 · 0x2390

HostedW3SVCStop #49 · 0x28b0

?Insert@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@QEAA_NPEBVPOOL_HASH_ENTRY@@AEAViterator@1@_N@Z #50 · 0x1800

?Insert@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@QEAA_NPEBVPOOL_HASH_ENTRY@@AEAViterator@1@_N@Z #51 · 0x1800

?InsertRecord@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@QEAA?AW4LK_RETCODE@@PEBVPOOL_HASH_ENTRY@@_N@Z #52 · 0x1a70

?InsertRecord@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@QEAA?AW4LK_RETCODE@@PEBVPOOL_HASH_ENTRY@@_N@Z #53 · 0x1a70

?QueryState@HTTP_WRAPPER@@QEBA?AW4HTTP_WRAPPER_STATE@@XZ #54 · 0x13e0

?_Action@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@CA?AW4LK_ACTION@@PEBXPEAX@Z #55 · 0x1b00

?_Action@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@CA?AW4LK_ACTION@@PEBXPEAX@Z #56 · 0x1b00

?_AddRefRecord@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@CAXPEBXH@Z #57 · 0x14e0

?_AddRefRecord@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@CAXPEBXH@Z #58 · 0x14e0

?_CalcKeyHash@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@CAK_K@Z #59 · 0x1720

?_CalcKeyHash@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@CAK_K@Z #60 · 0x1470

?_EqualKeys@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@CA_N_K0@Z #61 · 0x1740

?_EqualKeys@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@CA_N_K0@Z #62 · 0x14b0

?_ExtractKey@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@CA?B_KPEBX@Z #63 · 0x1710

?_ExtractKey@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@CA?B_KPEBX@Z #64 · 0x1460

?_Pred@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@CA?AW4LK_PREDICATE@@PEBXPEAX@Z #65 · 0x1b20

?_Pred@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@CA?AW4LK_PREDICATE@@PEBXPEAX@Z #66 · 0x1b20

?begin@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@QEAA?AViterator@1@XZ #67 · 0x1870

?begin@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@QEAA?AViterator@1@XZ #68 · 0x1870

?end@?$CTypedHashTable@VHASH_POOL_HASH@@VPOOL_HASH_ENTRY@@PEBUAPP_POOL_HASH@@VCLKRHashTable@@@@QEAA?AViterator@1@XZ #69 · 0x1820

?end@?$CTypedHashTable@VPOOL_HASH_HASH@@VPOOL_HASH_ENTRY@@PEBGVCLKRHashTable@@@@QEAA?AViterator@1@XZ #70 · 0x1820

DllRegisterServer #71 · 0x2b80

DllUnregisterServer #72 · 0x2ba0

Imported DLLs & functions 384

api-ms-win-core-com-l1-1-0.dll 9

CoCreateInstance 0x18006a070

CoFreeUnusedLibrariesEx 0x18006a050

CoInitializeEx 0x18006a068

CoInitializeSecurity 0x18006a030

CoRegisterClassObject 0x18006a040

CoRevokeClassObject 0x18006a048

CoTaskMemAlloc 0x18006a038

CoTaskMemFree 0x18006a060

CoUninitialize 0x18006a058

api-ms-win-core-debug-l1-1-0.dll 2

OutputDebugStringA 0x18006a088

OutputDebugStringW 0x18006a080

api-ms-win-core-debug-l1-1-1.dll 1

CheckRemoteDebuggerPresent 0x18006a098

api-ms-win-core-delayload-l1-1-0.dll 1

DelayLoadFailureHook 0x18006a0a8

api-ms-win-core-delayload-l1-1-1.dll 1

ResolveDelayLoadedAPI 0x18006a0b8

api-ms-win-core-errorhandling-l1-1-0.dll 4

GetLastError 0x18006a0c8

SetLastError 0x18006a0d8

SetUnhandledExceptionFilter 0x18006a0e0

UnhandledExceptionFilter 0x18006a0d0

api-ms-win-core-file-l1-1-0.dll 10

CreateDirectoryW 0x18006a108

CreateFileW 0x18006a128

DeleteFileW 0x18006a120

GetFileAttributesW 0x18006a118

GetTempFileNameW 0x18006a0f0

ReadFile 0x18006a100

RemoveDirectoryW 0x18006a0f8

SetEndOfFile 0x18006a138

SetFileAttributesW 0x18006a130

WriteFile 0x18006a110

api-ms-win-core-file-l2-1-0.dll 1

MoveFileExW 0x18006a148

api-ms-win-core-handle-l1-1-0.dll 2

CloseHandle 0x18006a160

DuplicateHandle 0x18006a158

api-ms-win-core-heap-l1-1-0.dll 4

GetProcessHeap 0x18006a188

HeapAlloc 0x18006a170

HeapFree 0x18006a178

HeapReAlloc 0x18006a180

api-ms-win-core-heap-l2-1-0.dll 4

GlobalAlloc 0x18006a1a0

GlobalFree 0x18006a1b0

LocalAlloc 0x18006a198

LocalFree 0x18006a1a8

api-ms-win-core-io-l1-1-0.dll 3

CreateIoCompletionPort 0x18006a1d0

GetQueuedCompletionStatus 0x18006a1c0

PostQueuedCompletionStatus 0x18006a1c8

api-ms-win-core-job-l2-1-0.dll 4

AssignProcessToJobObject 0x18006a1f0

CreateJobObjectW 0x18006a1e0

QueryInformationJobObject 0x18006a1e8

SetInformationJobObject 0x18006a1f8

api-ms-win-core-kernel32-legacy-l1-1-0.dll 4

CreateFileMappingA 0x18006a220

GetComputerNameW 0x18006a218

RegisterWaitForSingleObject 0x18006a210

UnregisterWait 0x18006a208

api-ms-win-core-kernel32-legacy-l1-1-1.dll 2

GetNumaAvailableMemoryNodeEx 0x18006a230

SetDllDirectoryW 0x18006a238

api-ms-win-core-kernel32-legacy-l1-1-2.dll 1

OpenFileMappingA 0x18006a248

api-ms-win-core-libraryloader-l1-2-0.dll 6

DisableThreadLibraryCalls 0x18006a260

FreeLibrary 0x18006a280

GetModuleFileNameW 0x18006a268

GetModuleHandleW 0x18006a270

GetProcAddress 0x18006a258

LoadLibraryExW 0x18006a278

api-ms-win-core-libraryloader-l1-2-1.dll 1

LoadLibraryW 0x18006a290

api-ms-win-core-memory-l1-1-0.dll 4

CreateFileMappingW 0x18006a2a8

MapViewOfFile 0x18006a2a0

OpenFileMappingW 0x18006a2b0

UnmapViewOfFile 0x18006a2b8

api-ms-win-core-normalization-l1-1-0.dll 1

IdnToNameprepUnicode 0x18006a2c8

api-ms-win-core-perfcounters-l1-1-0.dll 7

PerfCreateInstance 0x18006a2e0

PerfDeleteInstance 0x18006a2e8

PerfSetCounterRefValue 0x18006a300

PerfSetCounterSetInfo 0x18006a2f8

PerfSetULongLongCounterValue 0x18006a2f0

PerfStartProvider 0x18006a308

PerfStopProvider 0x18006a2d8

api-ms-win-core-processenvironment-l1-1-0.dll 3

ExpandEnvironmentStringsW 0x18006a318

FreeEnvironmentStringsW 0x18006a320

GetEnvironmentStringsW 0x18006a328

api-ms-win-core-processthreads-l1-1-0.dll 16

CreateProcessAsUserW 0x18006a380

CreateProcessW 0x18006a398

CreateThread 0x18006a388

DeleteProcThreadAttributeList 0x18006a358

GetCurrentProcess 0x18006a390

GetCurrentProcessId 0x18006a3a0

GetCurrentThread 0x18006a368

GetCurrentThreadId 0x18006a338

GetExitCodeProcess 0x18006a378

GetExitCodeThread 0x18006a350

InitializeProcThreadAttributeList 0x18006a3b0

OpenProcessToken 0x18006a370

ResumeThread 0x18006a340

SetThreadPriority 0x18006a360

TerminateProcess 0x18006a3a8

UpdateProcThreadAttribute 0x18006a348

api-ms-win-core-processthreads-l1-1-1.dll 1

OpenProcess 0x18006a3c0

api-ms-win-core-processtopology-private-l1-1-0.dll 1

SetProcessGroupAffinity 0x18006a3d0

api-ms-win-core-profile-l1-1-0.dll 1

QueryPerformanceCounter 0x18006a3e0

api-ms-win-core-registry-l1-1-0.dll 8

RegCloseKey 0x18006a410

RegCreateKeyExW 0x18006a418

RegDeleteKeyExW 0x18006a428

RegEnumKeyExW 0x18006a3f0

RegNotifyChangeKeyValue 0x18006a3f8

RegOpenKeyExW 0x18006a408

RegQueryValueExW 0x18006a400

RegSetKeySecurity 0x18006a420

api-ms-win-core-synch-l1-1-0.dll 17

AcquireSRWLockExclusive 0x18006a490

AcquireSRWLockShared 0x18006a4b0

CreateEventA 0x18006a460

CreateEventW 0x18006a458

CreateMutexA 0x18006a450

DeleteCriticalSection 0x18006a468

EnterCriticalSection 0x18006a480

InitializeCriticalSection 0x18006a440

InitializeCriticalSectionAndSpinCount 0x18006a470

InitializeSRWLock 0x18006a448

LeaveCriticalSection 0x18006a478

ReleaseMutex 0x18006a4a0

ReleaseSRWLockExclusive 0x18006a488

ReleaseSRWLockShared 0x18006a498

ResetEvent 0x18006a4b8

SetEvent 0x18006a4a8

WaitForSingleObject 0x18006a438

api-ms-win-core-synch-l1-2-0.dll 1

Sleep 0x18006a4c8

api-ms-win-core-sysinfo-l1-1-0.dll 6

GetLogicalProcessorInformationEx 0x18006a4d8

GetSystemDirectoryW 0x18006a500

GetSystemInfo 0x18006a4e8

GetSystemTimeAsFileTime 0x18006a4f0

GetTickCount 0x18006a4f8

GetVersionExW 0x18006a4e0

api-ms-win-core-threadpool-l1-2-0.dll 16

CloseThreadpool 0x18006a518

CloseThreadpoolCleanupGroup 0x18006a588

CloseThreadpoolCleanupGroupMembers 0x18006a580

CloseThreadpoolIo 0x18006a540

CloseThreadpoolTimer 0x18006a528

CreateThreadpool 0x18006a558

CreateThreadpoolCleanupGroup 0x18006a570

CreateThreadpoolIo 0x18006a550

CreateThreadpoolTimer 0x18006a510

SetThreadpoolThreadMaximum 0x18006a560

SetThreadpoolThreadMinimum 0x18006a568

SetThreadpoolTimer 0x18006a520

StartThreadpoolIo 0x18006a548

TrySubmitThreadpoolCallback 0x18006a578

WaitForThreadpoolIoCallbacks 0x18006a538

WaitForThreadpoolTimerCallbacks 0x18006a530

api-ms-win-core-threadpool-legacy-l1-1-0.dll 3

CreateTimerQueueTimer 0x18006a598

DeleteTimerQueueTimer 0x18006a5a0

UnregisterWaitEx 0x18006a5a8

api-ms-win-core-wow64-l1-1-1.dll 1

GetSystemWow64DirectoryW 0x18006a5b8

api-ms-win-eventing-provider-l1-1-0.dll 4

EventRegister 0x18006a5c8

EventSetInformation 0x18006a5d0

EventUnregister 0x18006a5d8

EventWriteTransfer 0x18006a5e0

api-ms-win-security-base-l1-1-0.dll 17

AddAccessAllowedAce 0x18006a658

AllocateAndInitializeSid 0x18006a620

AllocateLocallyUniqueId 0x18006a608

CopySid 0x18006a628

CreateRestrictedToken 0x18006a650

CreateWellKnownSid 0x18006a630

DuplicateTokenEx 0x18006a5f8

EqualSid 0x18006a610

FreeSid 0x18006a660

GetLengthSid 0x18006a638

GetSecurityDescriptorDacl 0x18006a640

GetTokenInformation 0x18006a618

InitializeAcl 0x18006a648

InitializeSecurityDescriptor 0x18006a668

IsValidSid 0x18006a600

SetSecurityDescriptorDacl 0x18006a670

SetTokenInformation 0x18006a5f0

api-ms-win-security-logon-l1-1-0.dll 1

LogonUserExW 0x18006a680

api-ms-win-security-lsalookup-l2-1-0.dll 1

LookupAccountNameW 0x18006a690

api-ms-win-security-lsalookup-l2-1-1.dll 1

LsaManageSidNameMapping 0x18006a6a0

api-ms-win-security-lsapolicy-l1-1-0.dll 4

LsaAddAccountRights 0x18006a6b0

LsaClose 0x18006a6c8

LsaFreeMemory 0x18006a6b8

LsaOpenPolicy 0x18006a6c0

api-ms-win-security-provider-l1-1-0.dll 4

GetSecurityInfo 0x18006a6d8

SetEntriesInAclW 0x18006a6e8

SetNamedSecurityInfoW 0x18006a6e0

SetSecurityInfo 0x18006a6f0

api-ms-win-service-core-l1-1-0.dll 1

SetServiceStatus 0x18006a700

api-ms-win-service-management-l1-1-0.dll 4

CloseServiceHandle 0x18006a720

OpenSCManagerW 0x18006a728

OpenServiceW 0x18006a710

StartServiceW 0x18006a718

api-ms-win-service-winsvc-l1-1-0.dll 3

ControlService 0x18006a740

QueryServiceStatus 0x18006a748

RegisterServiceCtrlHandlerW 0x18006a738

bcrypt.dll 4

BCryptCreateHash 0x18006a758

BCryptDestroyHash 0x18006a768

BCryptFinishHash 0x18006a770

BCryptHashData 0x18006a760

DNSAPI.dll 1

GetCurrentTimeInSeconds 0x180069f78

iisutil.dll 116

??0ALLOC_CACHE_HANDLER@@QEAA@PEBDPEBUALLOC_CACHE_CONFIGURATION@@H@Z 0x18006ab00

??0BUFFER@@QEAA@XZ 0x18006a878

??0CLKRHashTable_Iterator@@QEAA@AEBV0@@Z 0x18006a818

??0CLKRHashTable@@QEAA@PEBDP6A?B_KPEBX@ZP6AK_K@ZP6A_N33@ZP6AX1H@ZNKK_N@Z 0x18006a810

??0CSecurityDispenser@@QEAA@XZ 0x18006a898

??0EVENT_LOG@@QEAA@PEBG@Z 0x18006a860

??0MULTISZ@@QEAA@PEBG@Z 0x18006aa98

??0MULTISZ@@QEAA@XZ 0x18006a908

??0STRA@@QEAA@PEADK@Z 0x18006a780

??0STRA@@QEAA@XZ 0x18006a9b8

??0STRU@@QEAA@PEAGK@Z 0x18006ab10

??0STRU@@QEAA@XZ 0x18006a868

??1ALLOC_CACHE_HANDLER@@QEAA@XZ 0x18006ab08

??1BUFFER@@QEAA@XZ 0x18006a870

??1CLKRHashTable_Iterator@@QEAA@XZ 0x18006a828

??1CLKRHashTable@@QEAA@XZ 0x18006a808

??1CSecurityDispenser@@QEAA@XZ 0x18006a8a0

??1CSmallSpinLock@@QEAA@XZ 0x18006a890

??1IPM_MESSAGE_PIPE@@EEAA@XZ 0x18006a788

??1MULTISZ@@QEAA@XZ 0x18006a910

??1STRA@@QEAA@XZ 0x18006a888

??1STRU@@QEAA@XZ 0x18006a820

??9CLKRHashTable_Iterator@@QEBA_NAEBV0@@Z 0x18006a9e0

?AdjustTokenForAdministrators@CSecurityDispenser@@QEAAKPEAX@Z 0x18006aaa8

?Alloc@ALLOC_CACHE_HANDLER@@QEAAPEAXXZ 0x18006aae0

?Append@MULTISZ@@QEAAHAEAVSTRU@@@Z 0x18006aad8

?Append@MULTISZ@@QEAAHPEBG@Z 0x18006a920

?Append@STRA@@QEAAJPEBD@Z 0x18006a9c0

?Append@STRU@@QEAAJAEBV1@@Z 0x18006aa18

?Append@STRU@@QEAAJG@Z 0x18006a968

?Append@STRU@@QEAAJPEBG@Z 0x18006a8b8

?Append@STRU@@QEAAJPEBGK@Z 0x18006aad0

?AppendW@STRA@@QEAAJPEBG@Z 0x18006a9c8

?Apply@CLKRHashTable@@QEAAKP6A?AW4LK_ACTION@@PEBXPEAX@Z1W4LK_LOCKTYPE@@@Z 0x18006a7d8

?ApplyIf@CLKRHashTable@@QEAAKP6A?AW4LK_PREDICATE@@PEBXPEAX@ZP6A?AW4LK_ACTION@@01@Z1W4LK_LOCKTYPE@@@Z 0x18006a7d0

?Begin@CLKRHashTable@@QEAA?AVCLKRHashTable_Iterator@@XZ 0x18006a7b8

?Clear@CLKRHashTable@@QEAAXXZ 0x18006a8f0

?Clone@MULTISZ@@QEBAHPEAV1@@Z 0x18006aab0

?Copy@MULTISZ@@QEAAHAEBV1@@Z 0x18006a958

?Copy@STRU@@QEAAJAEBV1@@Z 0x18006a978

?Copy@STRU@@QEAAJPEBG@Z 0x18006a8a8

?Copy@STRU@@QEAAJPEBGK@Z 0x18006a950

?Copy@STRU@@QEAAJPEBV1@@Z 0x18006a9a8

?CreateIpmMessagePipe@IPM_MESSAGE_PIPE@@SAJPEAVIPM_MESSAGE_ACCEPTOR@@PEBGHPEAU_SECURITY_ATTRIBUTES@@PEAPEAV1@@Z 0x18006aa48

?DeleteIf@CLKRHashTable@@QEAAKP6A?AW4LK_PREDICATE@@PEBXPEAX@Z1@Z 0x18006a7c8

?DeleteKey@CLKRHashTable@@QEAA?AW4LK_RETCODE@@_K@Z 0x18006a7f8

?DeleteRecord@CLKRHashTable@@QEAA?AW4LK_RETCODE@@PEBX@Z 0x18006a7f0

?DestroyIpmMessagePipe@IPM_MESSAGE_PIPE@@QEAAXXZ 0x18006aa58

?End@CLKRHashTable@@QEAA?AVCLKRHashTable_Iterator@@XZ 0x18006a830

?EqualRange@CLKRHashTable@@QEAA_N_KAEAVCLKRHashTable_Iterator@@1@Z 0x18006a790

?Equals@MULTISZ@@QEAAHPEAV1@@Z 0x18006aac0

?Equals@STRA@@QEBA_NAEBV1@@Z 0x18006a930

?Equals@STRU@@QEBA_NAEBV1@@Z 0x18006aab8

?EqualsNoCase@STRU@@QEBA_NAEBV1@@Z 0x18006a988

?EqualsNoCase@STRU@@QEBA_NPEBG@Z 0x18006a9d0

?Erase@CLKRHashTable@@QEAA_NAEAVCLKRHashTable_Iterator@@@Z 0x18006a7a0

?Erase@CLKRHashTable@@QEAA_NAEAVCLKRHashTable_Iterator@@0@Z 0x18006a7a8

?FastAppend@MULTISZ@@QEAAHPEBG@Z 0x18006a9b0

?Find@CLKRHashTable@@QEAA_N_KAEAVCLKRHashTable_Iterator@@@Z 0x18006a798

?FindKey@CLKRHashTable@@QEBA?AW4LK_RETCODE@@_KPEAPEBX@Z 0x18006a7e8

?FindRecord@CLKRHashTable@@QEBA?AW4LK_RETCODE@@PEBX@Z 0x18006a7e0

?FindStringNoCase@MULTISZ@@QEAAHPEBG@Z 0x18006ab18

?First@MULTISZ@@QEBAPEBGXZ 0x18006a948

?Free@ALLOC_CACHE_HANDLER@@QEAAHPEAX@Z 0x18006a880

?GetIisIusrsSID@CSecurityDispenser@@QEAAKPEAPEAX@Z 0x18006a8e8

?GetLocalGroupSID@CSecurityDispenser@@QEAAKPEAPEAX@Z 0x18006a8e0

?GetSID@CSecurityDispenser@@QEAAKW4WELL_KNOWN_SID_TYPE@@PEAPEAX@Z 0x18006a8c0

?GetStringizedIpmOpcode@IPM_MESSAGE_PIPE@@SAPEBGW4IPM_OPCODE@@@Z 0x18006aa30

?Increment@CLKRHashTable_Iterator@@QEAA_NXZ 0x18006a9e8

?Insert@CLKRHashTable@@QEAA_NPEBXAEAVCLKRHashTable_Iterator@@_N@Z 0x18006a7b0

?InsertRecord@CLKRHashTable@@QEAA?AW4LK_RETCODE@@PEBX_N@Z 0x18006a800

?IsValid@CLKRHashTable@@QEBA_NXZ 0x18006aa20

?LogEvent@EVENT_LOG@@QEAAXKGQEAPEBGK@Z 0x18006a900

?ReadLock@CReaderWriterLock3@@QEAAXXZ 0x18006a990

?ReadUnlock@CReaderWriterLock3@@QEAAXXZ 0x18006a998

?Record@CLKRHashTable_Iterator@@QEBAPEBXXZ 0x18006a9d8

?Reset@MULTISZ@@QEAAXXZ 0x18006aac8

?Resize@BUFFER@@QEAA_NK@Z 0x18006a8d8

?Resize@STRA@@QEAAJK@Z 0x18006a928

?Resize@STRU@@QEAAJK@Z 0x18006a9a0

?SetLen@STRU@@QEAA_NK@Z 0x18006a940

?Size@CLKRHashTable@@QEBAKXZ 0x18006a7c0

?SyncWithBuffer@STRU@@QEAAXXZ 0x18006aa28

?WriteLock@CReaderWriterLock3@@QEAAXXZ 0x18006a970

?WriteLock@CSmallSpinLock@@QEAAXXZ 0x18006aaf0

?WriteMessage@IPM_MESSAGE_PIPE@@QEAAJW4IPM_OPCODE@@KPEAX@Z 0x18006aa60

?WriteUnlock@CReaderWriterLock3@@QEAAXXZ 0x18006a980

?WriteUnlock@CSmallSpinLock@@QEAAXXZ 0x18006aaf8

AllocateAndCreateWellKnownSid 0x18006a9f0

CreateSubkey 0x18006aa68

DisableTokenBackupPrivilege 0x18006aae8

DupTokenAddAccess 0x18006aa00

FreeSecurityAttributes 0x18006aa50

FreeTokenUserSID 0x18006aa10

FreeWellKnownSid 0x18006aa08

GenerateNameWithGUID 0x18006aa40

GetSecurityAttributesForSid 0x18006aa38

GetTokenSID 0x18006aaa0

GetTokenUserSID 0x18006a9f8

HandleKeyGeneration 0x18006aa80

HandleMigration 0x18006aa78

InitializeIISUtil 0x18006a8b0

IsPathUnc 0x18006a960

IsStringEqualOrdinalIgnoreCase 0x18006a938

MakeAllProcessHeapsLFH 0x18006aa88

PuCreateDebugPrintsObject 0x18006a838

PuDbgPrint 0x18006a848

PuDbgPrintError 0x18006a850

PuDeleteDebugPrintsObject 0x18006a858

PuLoadDebugFlagsFromRegStr 0x18006a840

ReadDwordParameterValueFromAnyService 0x18006a8c8

ReadMultiStringParameterValueFromAnyService 0x18006a918

ReadStringParameterValueFromAnyService 0x18006a8d0

SetExplicitAccessSettings 0x18006aa90

SetStringParameterValueInAnyService 0x18006aa70

TerminateIISUtil 0x18006a8f8

logoncli.dll 2

NetGetDCName 0x18006ab28

NetIsServiceAccount 0x18006ab30

msvcrt.dll 39

__C_specific_handler 0x18006ac08

__CxxFrameHandler3 0x18006ac40

__dllonexit 0x18006ab50

_amsg_exit 0x18006ab58

_callnewh 0x18006ab68

_i64tow_s 0x18006aba0

_initterm 0x18006ac68

_lock 0x18006ab40

_ltow_s 0x18006ab90

_onexit 0x18006ab78

_purecall 0x18006ac48

_ultow 0x18006ac50

_ultow_s 0x18006aba8

_unlock 0x18006ab48

_vsnprintf 0x18006abf0

_vsnwprintf 0x18006ac18

_wcsicmp 0x18006ab98

_wcslwr_s 0x18006abb8

_wcsnicmp 0x18006ac28

_wcsupr 0x18006ab88

_XcptFilter 0x18006ab60

?terminate@@YAXXZ 0x18006ac10

free 0x18006ac00

malloc 0x18006abf8

memcmp 0x18006ac38

memcpy 0x18006abd0

memcpy_s 0x18006abd8

memmove 0x18006abc8

memset 0x18006ac60

swprintf_s 0x18006abe0

wcscat_s 0x18006abc0

wcschr 0x18006ac30

wcscmp 0x18006ac70

wcscpy_s 0x18006ac20

wcsncmp 0x18006abe8

wcsncpy_s 0x18006ab80

wcsrchr 0x18006ac58

wcsstr 0x18006ab70

wcstoul 0x18006abb0

nativerd.dll 4

CreateNativeConfigurationSystem 0x18006ac90

GetDefaultNativeConfigurationSystem 0x18006ac98

InitializeNativeConfiguration 0x18006ac88

TerminateNativeConfiguration 0x18006ac80

ntdll.dll 16

NtQuerySystemInformation 0x18006ad18

RtlCaptureContext 0x18006acc8

RtlDeregisterWaitEx 0x18006ad08

RtlExpandEnvironmentStrings_U 0x18006acf8

RtlInitializeSid 0x18006aca8

RtlInitUnicodeString 0x18006acf0

RtlInitUnicodeStringEx 0x18006ad00

RtlIpv4StringToAddressW 0x18006acd0

RtlLengthRequiredSid 0x18006acb0

RtlLookupFunctionEntry 0x18006acc0

RtlNtStatusToDosError 0x18006ace8

RtlRegisterWait 0x18006ad10

RtlSubAuthoritySid 0x18006ad20

RtlVirtualUnwind 0x18006acb8

WinSqmSetDWORD 0x18006ace0

WinSqmSetDWORD64 0x18006acd8

OLEAUT32.dll 5

GetErrorInfo 0x180069f88

SysAllocString 0x180069fa8

SysFreeString 0x180069f98

VariantClear 0x180069fa0

VariantInit 0x180069f90

SspiCli.dll 2

LogonUserExExW 0x180069fb8

LsaFreeReturnBuffer 0x180069fc0

W3TP.dll 3

ThreadPoolInitialize 0x180069fe0

ThreadPoolSetInfo 0x180069fd8

ThreadPoolTerminate 0x180069fd0

WS2_32.dll 4

GetNameInfoW 0x18006a000

WSACleanup 0x18006a008

WSAGetLastError 0x180069ff8

WSAStartup 0x180069ff0

XmlLite.dll 2

CreateXmlReader 0x18006a020

CreateXmlWriter 0x18006a018