wiaservc.dll
v10.0.19041.5794
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 57
ServiceMain
#1 · 0x15890
DllRegisterServer
#2 · 0x2ca10
DllUnregisterServer
#3 · 0x2ca30
wiasCreateChildAppItem
#4 · 0x3bc70
wiasCreateDrvItem
#5 · 0x33f00
wiasCreateLogInstance
#6 · 0x341d0
wiasCreatePropContext
#7 · 0x342f0
wiasDebugError
#8 · 0x34570
wiasDebugTrace
#9 · 0x34760
wiasDownSampleBuffer
#10 · 0x34950
wiasFormatArgs
#11 · 0x34c80
wiasFreePropContext
#12 · 0x34e10
wiasGetChangedValueFloat
#13 · 0x34ef0
wiasGetChangedValueGuid
#14 · 0x350b0
wiasGetChangedValueLong
#15 · 0x35270
wiasGetChangedValueStr
#16 · 0x35430
wiasGetChildrenContexts
#17 · 0x355f0
wiasGetContextFromName
#18 · 0x35a70
wiasGetDrvItem
#19 · 0x35cc0
wiasGetImageInformation
#20 · 0x35e30
wiasGetItemType
#21 · 0x36030
wiasGetPropertyAttributes
#22 · 0x36160
wiasGetRootItem
#23 · 0x36300
wiasIsPropChanged
#24 · 0x363f0
wiasParseEndorserString
#25 · 0x36580
wiasPrintDebugHResult
#26 · 0x36c60
wiasQueueEvent
#27 · 0x30700
wiasReadMultiple
#28 · 0x36cd0
wiasReadPropBin
#29 · 0x36ec0
wiasReadPropFloat
#30 · 0x37130
wiasReadPropGuid
#31 · 0x37310
wiasReadPropLong
#32 · 0x37520
wiasReadPropStr
#33 · 0x37700
wiasSendEndOfPage
#34 · 0x379d0
wiasSetItemPropAttribs
#35 · 0x37b00
wiasSetItemPropNames
#36 · 0x37d40
wiasSetPropChanged
#37 · 0x37ed0
wiasSetPropertyAttributes
#38 · 0x38030
wiasSetValidFlag
#39 · 0x38360
wiasSetValidListFloat
#40 · 0x38540
wiasSetValidListGuid
#41 · 0x387a0
wiasSetValidListLong
#42 · 0x38a10
wiasSetValidListStr
#43 · 0x38c70
wiasSetValidRangeFloat
#44 · 0x38fd0
wiasSetValidRangeLong
#45 · 0x391d0
wiasUpdateScanRect
#46 · 0x39470
wiasUpdateValidFormat
#47 · 0x39650
wiasValidateItemProperties
#48 · 0x39bd0
wiasWriteBufToFile
#49 · 0x39f60
wiasWriteMultiple
#50 · 0x3a0f0
wiasWritePageBufToFile
#51 · 0x3a460
wiasWritePageBufToStream
#52 · 0x3a610
wiasWritePropBin
#53 · 0x3a7b0
wiasWritePropFloat
#54 · 0x3aae0
wiasWritePropGuid
#55 · 0x3adb0
wiasWritePropLong
#56 · 0x3b0f0
wiasWritePropStr
#57 · 0x3b3b0
No function matches your filter.
Imported DLLs & functions 271
ADVAPI32.dll
56
AccessCheck
0x180084618
AddAccessAllowedAce
0x180084758
AddAce
0x1800846f8
AllocateAndInitializeSid
0x180084728
CloseServiceHandle
0x1800846a0
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x180084748
CopySid
0x180084658
CreatePrivateObjectSecurity
0x180084650
DestroyPrivateObjectSecurity
0x180084640
EventRegister
0x180084698
EventSetInformation
0x180084688
EventUnregister
0x180084678
EventWriteTransfer
0x1800846b0
FreeSid
0x180084730
GetAce
0x180084628
GetAclInformation
0x180084610
GetKernelObjectSecurity
0x180084708
GetLengthSid
0x180084750
GetSecurityDescriptorDacl
0x180084608
GetSidLengthRequired
0x180084648
GetSidSubAuthority
0x180084638
GetSidSubAuthorityCount
0x180084630
GetTokenInformation
0x180084600
InitializeAcl
0x180084740
InitializeSecurityDescriptor
0x180084738
InitializeSid
0x180084660
LookupAccountSidW
0x1800845f8
OpenProcessToken
0x180084700
OpenSCManagerW
0x180084690
OpenServiceW
0x180084670
OpenThreadToken
0x1800845d0
QueryServiceStatus
0x1800846a8
RegCloseKey
0x1800846f0
RegCreateKeyExA
0x1800845d8
RegCreateKeyExW
0x1800846d8
RegDeleteKeyExW
0x180084780
RegDeleteKeyW
0x1800846e0
RegDeleteValueW
0x180084788
RegEnumKeyExW
0x1800846d0
RegGetValueW
0x180084768
RegisterServiceCtrlHandlerExW
0x180084770
RegOpenKeyExA
0x1800845e0
RegOpenKeyExW
0x1800846c0
RegOpenKeyW
0x180084760
RegQueryInfoKeyW
0x1800846e8
RegQueryValueExA
0x1800845e8
RegQueryValueExW
0x1800846b8
RegQueryValueW
0x1800845f0
RegSetValueExW
0x1800846c8
SetKernelObjectSecurity
0x180084710
SetSecurityDescriptorDacl
0x180084720
SetSecurityDescriptorGroup
0x180084718
SetSecurityDescriptorOwner
0x180084620
SetSecurityDescriptorSacl
0x180084668
SetServiceStatus
0x180084778
StartServiceW
0x180084680
KERNEL32.dll
114
AcquireSRWLockExclusive
0x180084988
AcquireSRWLockShared
0x180084968
ClearCommError
0x1800848c0
CloseHandle
0x1800847a0
CloseThreadpoolTimer
0x180084990
CompareStringW
0x180084a50
CreateDirectoryW
0x180084b20
CreateEventW
0x1800849d8
CreateFileMappingW
0x180084930
CreateFileW
0x180084aa0
CreateMutexExW
0x1800847b8
CreateMutexW
0x180084af8
CreateSemaphoreExW
0x180084a48
CreateThread
0x180084aa8
CreateThreadpoolTimer
0x180084970
DebugBreak
0x1800847e0
DeleteCriticalSection
0x1800847c0
DeleteFileW
0x180084940
DisableThreadLibraryCalls
0x1800849b0
DuplicateHandle
0x180084a80
EnterCriticalSection
0x180084a28
EscapeCommFunction
0x1800848c8
ExpandEnvironmentStringsW
0x180084b18
FlushFileBuffers
0x1800848d8
FormatMessageA
0x180084ad8
FormatMessageW
0x1800849c8
FreeLibrary
0x180084800
GetCurrentProcess
0x180084898
GetCurrentProcessId
0x1800847c8
GetCurrentThread
0x180084960
GetCurrentThreadId
0x1800849f0
GetDateFormatW
0x1800848e0
GetFileInformationByHandle
0x1800848e8
GetFileSize
0x180084908
GetFileType
0x180084918
GetLastError
0x1800849c0
GetLocalTime
0x180084860
GetModuleFileNameA
0x180084a58
GetModuleFileNameW
0x1800848f0
GetModuleHandleA
0x180084ae8
GetModuleHandleExW
0x180084a18
GetModuleHandleW
0x1800847d8
GetProcAddress
0x1800847b0
GetProcessHeap
0x1800847d0
GetSystemDirectoryA
0x180084ae0
GetSystemDirectoryW
0x1800847f8
GetSystemInfo
0x180084ab8
GetSystemTime
0x180084830
GetSystemTimeAsFileTime
0x1800848b0
GetTempFileNameW
0x180084938
GetTempPathW
0x180084950
GetThreadId
0x180084a98
GetTickCount
0x1800847e8
HeapAlloc
0x1800847a8
HeapFree
0x180084a40
InitializeCriticalSection
0x180084a00
InitializeCriticalSectionAndSpinCount
0x180084a10
InitializeCriticalSectionEx
0x1800849a8
InitOnceBeginInitialize
0x180084a88
InitOnceComplete
0x180084a70
IsDebuggerPresent
0x1800847f0
LeaveCriticalSection
0x180084a08
LoadLibraryExA
0x180084b00
LoadLibraryExW
0x180084808
LocalAlloc
0x180084818
LocalFree
0x180084820
lstrcmpA
0x180084af0
lstrcmpiW
0x180084838
lstrcmpW
0x180084840
lstrlenA
0x180084850
lstrlenW
0x180084810
MapViewOfFileEx
0x180084928
MulDiv
0x180084868
MultiByteToWideChar
0x180084858
OpenProcess
0x180084958
OpenSemaphoreW
0x180084798
OutputDebugStringW
0x1800849b8
PowerClearRequest
0x180084a68
PowerCreateRequest
0x180084a78
PowerSetRequest
0x180084a90
PurgeComm
0x1800848d0
QueryPerformanceCounter
0x1800848a8
RaiseException
0x180084ac8
ReadFile
0x180084900
ReleaseMutex
0x1800849e8
ReleaseSemaphore
0x180084a20
ReleaseSRWLockExclusive
0x180084998
ReleaseSRWLockShared
0x180084978
RemoveDirectoryW
0x180084b08
ResetEvent
0x180084a30
RtlCaptureContext
0x180084870
RtlLookupFunctionEntry
0x180084878
RtlVirtualUnwind
0x180084880
SetCommMask
0x1800848b8
SetEndOfFile
0x180084910
SetEvent
0x180084b10
SetFilePointer
0x180084920
SetLastError
0x180084a38
SetProcessMitigationPolicy
0x1800849e0
SetThreadpoolTimer
0x180084980
SetUnhandledExceptionFilter
0x180084890
Sleep
0x1800849d0
SystemTimeToFileTime
0x180084828
TerminateProcess
0x1800848a0
UnhandledExceptionFilter
0x180084888
UnmapViewOfFile
0x180084948
VirtualProtect
0x180084ad0
VirtualQuery
0x180084ab0
WaitForMultipleObjects
0x180084ac0
WaitForSingleObject
0x1800849f8
WaitForSingleObjectEx
0x180084a60
WaitForThreadpoolTimerCallbacks
0x1800849a0
WideCharToMultiByte
0x1800848f8
WriteFile
0x180084848
msvcrt.dll
30
__C_specific_handler
0x180084cd8
__CxxFrameHandler3
0x180084d28
__dllonexit
0x180084d08
__RTDynamicCast
0x180084d78
_amsg_exit
0x180084ce8
_callnewh
0x180084d60
_initterm
0x180084cf0
_lock
0x180084da0
_onexit
0x180084d68
_purecall
0x180084d50
_splitpath_s
0x180084db0
_unlock
0x180084d00
_vscwprintf
0x180084d10
_vsnprintf
0x180084d70
_vsnwprintf
0x180084d30
_wcsicmp
0x180084cd0
_wsplitpath_s
0x180084d38
_XcptFilter
0x180084d98
??1type_info@@UEAA@XZ
0x180084d18
free
0x180084cf8
malloc
0x180084ce0
memcmp
0x180084d80
memcpy
0x180084d88
memcpy_s
0x180084da8
memmove
0x180084d90
memmove_s
0x180084d40
memset
0x180084d20
wcschr
0x180084d58
wcscmp
0x180084db8
wcsstr
0x180084d48
ole32.dll
23
CLSIDFromString
0x180084e38
CoCreateInstance
0x180084e60
CoDisconnectObject
0x180084e18
CoGetCallContext
0x180084dc8
CoImpersonateClient
0x180084e08
CoInitializeEx
0x180084e68
CoInitializeSecurity
0x180084e58
CoRegisterClassObject
0x180084df8
CoResumeClassObjects
0x180084e78
CoRevertToSelf
0x180084de8
CoRevokeClassObject
0x180084df0
CoSuspendClassObjects
0x180084e10
CoTaskMemAlloc
0x180084e28
CoTaskMemFree
0x180084e40
CoUninitialize
0x180084e70
CreateStreamOnHGlobal
0x180084dd0
FreePropVariantArray
0x180084e00
PropVariantClear
0x180084e30
PropVariantCopy
0x180084e20
StgCreatePropStg
0x180084dd8
StgOpenPropStg
0x180084de0
StringFromCLSID
0x180084e50
StringFromGUID2
0x180084e48
OLEAUT32.dll
11
BSTR_UserFree
0x180084b30
BSTR_UserFree64
0x180084b50
BSTR_UserMarshal
0x180084b48
BSTR_UserMarshal64
0x180084b60
BSTR_UserSize
0x180084b78
BSTR_UserSize64
0x180084b58
BSTR_UserUnmarshal
0x180084b40
BSTR_UserUnmarshal64
0x180084b38
SysAllocString
0x180084b80
SysFreeString
0x180084b68
SysStringLen
0x180084b70
RPCRT4.dll
25
Ndr64AsyncServerCallAll
0x180084bc0
NdrAsyncServerCall
0x180084b90
NdrServerCall2
0x180084bc8
NdrServerCallAll
0x180084c18
RpcAsyncAbortCall
0x180084c08
RpcAsyncCompleteCall
0x180084be0
RpcBindingInqAuthClientW
0x180084c00
RpcBindingToStringBindingW
0x180084c38
RpcImpersonateClient
0x180084b98
RpcRevertToSelf
0x180084bf0
RpcServerInqDefaultPrincNameW
0x180084c40
RpcServerListen
0x180084ba8
RpcServerRegisterAuthInfoW
0x180084ba0
RpcServerRegisterIfEx
0x180084bb0
RpcServerSubscribeForNotification
0x180084c20
RpcServerTestCancel
0x180084be8
RpcServerUnsubscribeForNotification
0x180084c28
RpcServerUseProtseqEpW
0x180084c10
RpcStringBindingParseW
0x180084bb8
RpcStringFreeA
0x180084bd0
RpcStringFreeW
0x180084c50
UuidCreate
0x180084bd8
UuidCreateNil
0x180084c30
UuidToStringA
0x180084c48
UuidToStringW
0x180084bf8
CharNextA
0x180084c68
CharNextW
0x180084c70
CharUpperA
0x180084c60
IsWindow
0x180084c80
PostMessageW
0x180084c78
RegisterDeviceNotificationW
0x180084ca0
RegisterPowerSettingNotification
0x180084c90
UnregisterDeviceNotification
0x180084c98
UnregisterPowerSettingNotification
0x180084c88
GetFileVersionInfoSizeW
0x180084cc0
GetFileVersionInfoW
0x180084cb8
VerQueryValueW
0x180084cb0
No function matches your filter.