adhsvc.dll

v10.0.19041.3636 64-bit Windows NT Analyzed
Download
Description
AD Harvest Sites and Subnets Service
Authors
© Microsoft Corporation. All rights reserved.
File size
98.0 KB
Uploaded
2025-12-01 07:21
Views
117
SHA-256
a111db2388bd290c91f3776d84fe5f04

Exported functions 3

SubServiceScmNotification #1 · 0x1ba0
SubServiceStart #2 · 0x3810
SubServiceStop #3 · 0x9d80

Imported DLLs & functions 169

api-ms-win-core-com-l1-1-0.dll 6
CoCreateInstance 0x180011748
CoInitializeEx 0x180011750
CoTaskMemAlloc 0x180011740
CoTaskMemFree 0x180011730
CoTaskMemRealloc 0x180011738
CoUninitialize 0x180011758
api-ms-win-core-debug-l1-1-0.dll 1
OutputDebugStringA 0x180011768
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x180011778
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x180011788
api-ms-win-core-errorhandling-l1-1-0.dll 5
GetLastError 0x1800117b0
RaiseException 0x1800117a8
SetLastError 0x1800117b8
SetUnhandledExceptionFilter 0x180011798
UnhandledExceptionFilter 0x1800117a0
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x1800117c8
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x1800117e8
HeapAlloc 0x1800117d8
HeapFree 0x1800117e0
api-ms-win-core-heap-l2-1-0.dll 1
LocalFree 0x1800117f8
api-ms-win-core-libraryloader-l1-2-0.dll 9
DisableThreadLibraryCalls 0x180011808
FindResourceExW 0x180011828
FreeLibrary 0x180011818
GetModuleFileNameW 0x180011848
GetModuleHandleW 0x180011840
GetProcAddress 0x180011838
LoadLibraryExW 0x180011810
LoadResource 0x180011820
SizeofResource 0x180011830
api-ms-win-core-processthreads-l1-1-0.dll 7
CreateThread 0x180011858
GetCurrentProcess 0x180011870
GetCurrentProcessId 0x180011868
GetCurrentThread 0x180011880
GetCurrentThreadId 0x180011878
OpenThreadToken 0x180011888
TerminateProcess 0x180011860
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x180011898
api-ms-win-core-registry-l1-1-0.dll 8
RegCloseKey 0x1800118d8
RegCreateKeyExW 0x1800118b0
RegDeleteValueW 0x1800118e0
RegEnumKeyExW 0x1800118c8
RegOpenKeyExW 0x1800118d0
RegQueryInfoKeyW 0x1800118c0
RegQueryValueExW 0x1800118a8
RegSetValueExW 0x1800118b8
api-ms-win-core-string-l1-1-0.dll 1
MultiByteToWideChar 0x1800118f0
api-ms-win-core-string-l2-1-0.dll 1
CharNextW 0x180011900
api-ms-win-core-string-obsolete-l1-1-0.dll 1
lstrcmpiW 0x180011910
api-ms-win-core-synch-l1-1-0.dll 14
AcquireSRWLockExclusive 0x180011928
CreateEventW 0x180011958
CreateMutexW 0x180011940
DeleteCriticalSection 0x180011948
EnterCriticalSection 0x180011988
InitializeCriticalSection 0x180011970
InitializeCriticalSectionAndSpinCount 0x180011938
LeaveCriticalSection 0x180011920
ReleaseMutex 0x180011950
ReleaseSRWLockExclusive 0x180011968
SetEvent 0x180011960
WaitForMultipleObjectsEx 0x180011980
WaitForSingleObject 0x180011978
WaitForSingleObjectEx 0x180011930
api-ms-win-core-synch-l1-2-0.dll 3
Sleep 0x1800119a8
SleepConditionVariableSRW 0x180011998
WakeAllConditionVariable 0x1800119a0
api-ms-win-core-sysinfo-l1-1-0.dll 2
GetSystemTimeAsFileTime 0x1800119b8
GetTickCount 0x1800119c0
api-ms-win-core-threadpool-l1-2-0.dll 8
CloseThreadpoolTimer 0x1800119e0
CloseThreadpoolWait 0x180011a08
CreateThreadpoolTimer 0x180011a00
CreateThreadpoolWait 0x1800119e8
SetThreadpoolTimer 0x1800119d8
SetThreadpoolWait 0x1800119f0
WaitForThreadpoolTimerCallbacks 0x1800119d0
WaitForThreadpoolWaitCallbacks 0x1800119f8
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x180011a40
GetTraceEnableLevel 0x180011a28
GetTraceLoggerHandle 0x180011a30
RegisterTraceGuidsW 0x180011a20
TraceMessage 0x180011a38
UnregisterTraceGuids 0x180011a18
api-ms-win-security-base-l1-1-0.dll 1
AccessCheck 0x180011a50
api-ms-win-security-sddl-l1-1-0.dll 2
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x180011a68
ConvertStringSidToSidW 0x180011a60
api-ms-win-service-management-l1-1-0.dll 4
CloseServiceHandle 0x180011a90
OpenSCManagerW 0x180011a88
OpenServiceW 0x180011a80
StartServiceW 0x180011a78
api-ms-win-service-management-l2-1-0.dll 1
NotifyServiceStatusChangeW 0x180011aa0
FirewallAPI.dll 8
FwAlloc 0x1800115a0
FwConvertIPv6SubNetToRange 0x1800115b0
FwCopyWFAddressesContents 0x1800115a8
FwFree 0x180011598
FwFreeAddresses 0x180011590
FwGetAddressesAsString 0x1800115c8
FwMergeAddresses 0x1800115b8
FwStringToAddresses 0x1800115c0
msvcrt.dll 30
__C_specific_handler 0x180011ac0
__CxxFrameHandler3 0x180011b90
__dllonexit 0x180011b48
_amsg_exit 0x180011ad0
_callnewh 0x180011b20
_CxxThrowException 0x180011b80
_errno 0x180011ab0
_initterm 0x180011af0
_lock 0x180011b08
_onexit 0x180011b58
_purecall 0x180011b78
_unlock 0x180011b18
_XcptFilter 0x180011ad8
??_V@YAXPEAX@Z 0x180011b70
??0exception@@QEAA@AEBQEBD@Z 0x180011b10
??0exception@@QEAA@AEBQEBDH@Z 0x180011b00
??0exception@@QEAA@AEBV0@@Z 0x180011b38
??1exception@@UEAA@XZ 0x180011b40
??1type_info@@UEAA@XZ 0x180011b68
??3@YAXPEAX@Z 0x180011b88
?terminate@@YAXXZ 0x180011b60
?what@exception@@UEBAPEBDXZ 0x180011af8
free 0x180011ac8
malloc 0x180011b28
memcpy 0x180011ae8
memcpy_s 0x180011b50
memmove 0x180011ae0
memset 0x180011b98
realloc 0x180011ab8
wcsncpy_s 0x180011b30
ntdll.dll 3
RtlCaptureContext 0x180011ba8
RtlLookupFunctionEntry 0x180011bb0
RtlVirtualUnwind 0x180011bb8
OLEAUT32.dll 1
VarUI4FromStr 0x1800115d8
RPCRT4.dll 22
I_RpcBindingIsClientLocal 0x180011650
Ndr64AsyncServerCallAll 0x180011630
NdrAsyncServerCall 0x180011620
NdrServerCall2 0x180011658
NdrServerCallAll 0x180011648
RpcAsyncAbortCall 0x1800115e8
RpcAsyncCompleteCall 0x180011628
RpcBindingInqAuthClientW 0x180011690
RpcBindingToStringBindingW 0x180011670
RpcBindingVectorFree 0x180011608
RpcEpRegisterW 0x180011638
RpcEpUnregister 0x180011640
RpcImpersonateClient 0x180011660
RpcRevertToSelf 0x180011600
RpcServerInqBindings 0x180011680
RpcServerInqDefaultPrincNameW 0x180011618
RpcServerRegisterAuthInfoW 0x180011610
RpcServerRegisterIfEx 0x180011668
RpcServerUnregisterIfEx 0x1800115f8
RpcServerUseProtseqW 0x180011688
RpcStringBindingParseW 0x180011678
RpcStringFreeW 0x1800115f0
WLDAP32.dll 17
0x1800116a0
0x1800116a8
0x1800116b0
0x1800116c8
0x180011718
0x1800116c0
0x1800116d0
0x1800116d8
0x1800116b8
0x1800116e0
0x1800116e8
0x1800116f0
0x1800116f8
0x180011700
0x180011708
0x180011710
0x180011720