w3logsvc.dll

v10.0.19041.3636 32-bit Windows NT Analyzed
Description
IIS Logging Service
Authors
© Microsoft Corporation. All rights reserved.
File size
74.0 KB
Uploaded
2025-12-01 08:33
Views
25
SHA-256
456bad9d8dbfa1fda757d19f3945b82f

Exported functions 1

ServiceMain #1 · 0x3880

Imported DLLs & functions 198

api-ms-win-core-com-l1-1-0.dll 3
CoCreateInstance 0x10011020
CoInitializeEx 0x10011024
CoUninitialize 0x10011028
api-ms-win-core-datetime-l1-1-0.dll 1
GetDateFormatW 0x10011030
api-ms-win-core-datetime-l1-1-1.dll 1
GetTimeFormatEx 0x10011038
api-ms-win-core-debug-l1-1-0.dll 1
OutputDebugStringA 0x10011040
api-ms-win-core-errorhandling-l1-1-0.dll 3
GetLastError 0x1001104c
SetUnhandledExceptionFilter 0x10011048
UnhandledExceptionFilter 0x10011050
api-ms-win-core-file-l1-1-0.dll 7
CreateDirectoryW 0x10011068
CreateFileW 0x10011060
GetFileAttributesExW 0x1001105c
GetFileAttributesW 0x10011070
GetFileSizeEx 0x1001106c
GetFileTime 0x10011064
WriteFile 0x10011058
api-ms-win-core-handle-l1-1-0.dll 2
CloseHandle 0x1001107c
DuplicateHandle 0x10011078
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1001108c
HeapAlloc 0x10011088
HeapFree 0x10011084
api-ms-win-core-heap-l2-1-0.dll 2
LocalAlloc 0x10011098
LocalFree 0x10011094
api-ms-win-core-libraryloader-l1-2-0.dll 1
DisableThreadLibraryCalls 0x100110a0
api-ms-win-core-path-l1-1-0.dll 1
PathAllocCombine 0x100110a8
api-ms-win-core-processthreads-l1-1-0.dll 7
CreateThread 0x100110b4
GetCurrentProcess 0x100110c0
GetCurrentProcessId 0x100110b8
GetCurrentThreadId 0x100110b0
GetExitCodeThread 0x100110bc
SetThreadPriority 0x100110c8
TerminateProcess 0x100110c4
api-ms-win-core-processthreads-l1-1-1.dll 1
OpenProcess 0x100110d0
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x100110d8
api-ms-win-core-synch-l1-1-0.dll 12
AcquireSRWLockExclusive 0x100110e8
AcquireSRWLockShared 0x100110fc
CreateEventW 0x1001110c
DeleteCriticalSection 0x100110f4
EnterCriticalSection 0x10011104
InitializeCriticalSectionAndSpinCount 0x100110f0
InitializeSRWLock 0x100110e0
LeaveCriticalSection 0x10011108
ReleaseSRWLockExclusive 0x100110ec
ReleaseSRWLockShared 0x10011100
SetEvent 0x100110f8
WaitForSingleObject 0x100110e4
api-ms-win-core-synch-l1-2-0.dll 1
Sleep 0x10011114
api-ms-win-core-sysinfo-l1-1-0.dll 6
GetComputerNameExW 0x10011130
GetLocalTime 0x10011120
GetSystemTime 0x10011124
GetSystemTimeAsFileTime 0x1001112c
GetTickCount 0x10011128
GetTickCount64 0x1001111c
api-ms-win-core-threadpool-l1-2-0.dll 16
CloseThreadpool 0x10011140
CloseThreadpoolCleanupGroup 0x1001113c
CloseThreadpoolCleanupGroupMembers 0x10011138
CloseThreadpoolTimer 0x10011168
CloseThreadpoolWait 0x1001115c
CreateThreadpool 0x10011154
CreateThreadpoolCleanupGroup 0x1001114c
CreateThreadpoolTimer 0x1001116c
CreateThreadpoolWait 0x10011150
SetThreadpoolThreadMaximum 0x10011144
SetThreadpoolThreadMinimum 0x10011148
SetThreadpoolTimer 0x10011170
SetThreadpoolWait 0x10011164
TrySubmitThreadpoolCallback 0x10011158
WaitForThreadpoolTimerCallbacks 0x10011174
WaitForThreadpoolWaitCallbacks 0x10011160
api-ms-win-core-timezone-l1-1-0.dll 2
FileTimeToSystemTime 0x10011180
SystemTimeToTzSpecificLocalTime 0x1001117c
api-ms-win-eventing-consumer-l1-1-0.dll 3
CloseTrace 0x10011190
OpenTraceW 0x10011188
ProcessTrace 0x1001118c
api-ms-win-eventing-controller-l1-1-0.dll 4
ControlTraceW 0x1001119c
EnableTraceEx2 0x10011198
StartTraceW 0x100111a0
StopTraceW 0x100111a4
api-ms-win-eventing-legacy-l1-1-0.dll 1
QueryTraceW 0x100111ac
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x100111b8
EventUnregister 0x100111b4
EventWriteTransfer 0x100111bc
api-ms-win-security-base-l1-1-0.dll 5
AllocateAndInitializeSid 0x100111cc
FreeSid 0x100111c4
InitializeSecurityDescriptor 0x100111d0
SetSecurityDescriptorDacl 0x100111d4
SetSecurityDescriptorOwner 0x100111c8
api-ms-win-security-lsapolicy-l1-1-0.dll 4
LsaClose 0x100111e8
LsaFreeMemory 0x100111e0
LsaLookupNames2 0x100111dc
LsaOpenPolicy 0x100111e4
api-ms-win-security-provider-l1-1-0.dll 2
GetNamedSecurityInfoW 0x100111f0
SetEntriesInAclW 0x100111f4
api-ms-win-service-core-l1-1-0.dll 1
SetServiceStatus 0x100111fc
api-ms-win-service-winsvc-l1-1-0.dll 1
RegisterServiceCtrlHandlerW 0x10011204
iisutil.dll 63
??0ALLOC_CACHE_HANDLER@@QAE@PBDPBUALLOC_CACHE_CONFIGURATION@@H@Z 0x10011220
??0EVENT_LOG@@QAE@PBG@Z 0x10011258
??0MULTISZ@@QAE@PBG@Z 0x10011248
??0MULTISZ@@QAE@XZ 0x100112b8
??0STRA@@QAE@PADK@Z 0x10011270
??0STRA@@QAE@XZ 0x10011290
??0STRU@@QAE@PAGK@Z 0x1001129c
??0STRU@@QAE@XZ 0x10011288
??1ALLOC_CACHE_HANDLER@@QAE@XZ 0x10011210
??1BUFFER@@QAE@XZ 0x1001123c
??1MULTISZ@@QAE@XZ 0x100112ac
??1STRA@@QAE@XZ 0x10011294
??1STRU@@QAE@XZ 0x1001128c
?Alloc@ALLOC_CACHE_HANDLER@@QAEPAXXZ 0x1001126c
?Append@MULTISZ@@QAEHAAVSTRU@@@Z 0x10011304
?Append@MULTISZ@@QAEHPBG@Z 0x10011230
?Append@STRA@@QAEJABV1@@Z 0x100112d8
?Append@STRA@@QAEJPBD@Z 0x100112f4
?Append@STRA@@QAEJPBDK@Z 0x100112f0
?Append@STRU@@QAEJABV1@@Z 0x100112c8
?Append@STRU@@QAEJG@Z 0x100112c4
?Append@STRU@@QAEJPBG@Z 0x100112c0
?Append@STRU@@QAEJPBGK@Z 0x100112dc
?AppendA@STRU@@QAEJPBDK@Z 0x100112f8
?AppendWSimple@STRA@@QAEJPBGK@Z 0x100112d0
?CleanupLookaside@ALLOC_CACHE_HANDLER@@QAEXH@Z 0x10011214
?Copy@MULTISZ@@QAEHABV1@@Z 0x100112b0
?Copy@STRA@@QAEJABV1@@Z 0x100112d4
?Copy@STRA@@QAEJPBD@Z 0x100112a4
?Copy@STRA@@QAEJPBDK@Z 0x10011244
?Copy@STRU@@QAEJABV1@@Z 0x100112b4
?Copy@STRU@@QAEJPBG@Z 0x100112a8
?Copy@STRU@@QAEJPBGK@Z 0x100112ec
?CopyA@STRU@@QAEJPBD@Z 0x10011234
?CopyA@STRU@@QAEJPBDK@Z 0x10011238
?CopyWToUTF8Unescaped@STRA@@QAEJABVSTRU@@@Z 0x100112e4
?CopyWToUTF8Unescaped@STRA@@QAEJPBGK@Z 0x100112cc
?CreateIpmMessagePipe@IPM2_MESSAGE_PIPE@@SGJPAVIPM2_MESSAGE_ACCEPTOR@@PBGHPAU_SECURITY_ATTRIBUTES@@PAPAV1@@Z 0x10011228
?DestroyIpmMessagePipe@IPM2_MESSAGE_PIPE@@QAGXXZ 0x1001122c
?Equals@MULTISZ@@QAEHPAV1@@Z 0x10011298
?EqualsNoCase@STRU@@QBE_NABV1@@Z 0x1001124c
?EqualsNoCase@STRU@@QBE_NPBG@Z 0x100112e0
?ExpandEnvironmentVariables@STRU@@SGJPBGPAV1@@Z 0x100112bc
?Free@ALLOC_CACHE_HANDLER@@QAEHPAX@Z 0x10011218
?LogEvent@EVENT_LOG@@QAEXKGQAPBGK@Z 0x10011300
?QueryOutstandingAllocationCount@ALLOC_CACHE_HANDLER@@QBEKXZ 0x1001121c
?Resize@BUFFER@@QAE_NK@Z 0x10011250
?Resize@STRA@@QAEJK@Z 0x100112a0
?Resize@STRU@@QAEJK@Z 0x100112fc
?SetLen@STRU@@QAE_NK@Z 0x100112e8
?WriteMessage@IPM2_MESSAGE_PIPE@@QAEJW4IPM2_OPCODE@@HKKPAXK1@Z 0x10011224
DestroyRefTraceLog 0x1001120c
IISInitializeCriticalSection 0x10011240
InitializeIISUtil 0x10011264
IsStringEqualOrdinalIgnoreCase 0x10011254
PuCreateDebugPrintsObject 0x10011274
PuDbgPrint 0x1001127c
PuDbgPrintError 0x10011280
PuDeleteDebugPrintsObject 0x10011284
PuLoadDebugFlagsFromRegStr 0x10011278
ReadDwordParameterValueFromAnyService 0x1001125c
TerminateIISUtil 0x10011260
WriteRefTraceLog 0x10011268
msvcrt.dll 28
__CxxFrameHandler3 0x1001132c
_amsg_exit 0x10011330
_callnewh 0x10011344
_except_handler4_common 0x1001130c
_initterm 0x10011374
_itow_s 0x10011318
_purecall 0x1001134c
_strnicmp 0x10011358
_ui64tow_s 0x10011328
_ultow 0x10011340
_ultow_s 0x10011364
_vsnwprintf_s 0x1001136c
_wcsicmp 0x10011310
_wcsupr_s 0x10011334
_XcptFilter 0x10011338
?terminate@@YAXXZ 0x10011370
free 0x10011350
malloc 0x10011348
memchr 0x10011324
memcpy 0x10011320
memcpy_s 0x10011354
memset 0x10011378
strncpy_s 0x10011360
strtoul 0x1001135c
swprintf_s 0x10011368
wcscpy_s 0x1001133c
wcsnlen 0x1001131c
wcsstr 0x10011314
ntdll.dll 6
RtlCreateTimer 0x10011380
RtlCreateTimerQueue 0x10011384
RtlDeleteTimer 0x10011390
RtlDeleteTimerQueueEx 0x10011394
RtlIpv4AddressToStringExW 0x1001138c
RtlIpv6AddressToStringExW 0x10011388
OLEAUT32.dll 5
SysAllocString 0x10011004
SysFreeString 0x10011008
VariantChangeType 0x1001100c
VariantClear 0x10011000
VariantInit 0x10011010
WS2_32.dll 1
ntohs 0x10011018