bthserv.dll

Description: Bluetooth Support Service

Version: 10.0.19041.5848

Architecture: 64-bit

Operating System: Windows NT

SHA256: f73afe30f5254378c83fea032bf69af6

File Size: 233.5 KB

Uploaded At: Dec. 1, 2025, 7:23 a.m.

Views: 16

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

ServiceMain (Ordinal: 1, Address: 0x5130)

Imported DLLs & Functions

api-ms-win-core-com-l1-1-0.dll

CoCreateInstance (Address: 0x18002fbb8)
CoInitializeEx (Address: 0x18002fba8)
CoInitializeSecurity (Address: 0x18002fbc0)
CoUninitialize (Address: 0x18002fbb0)
StringFromGUID2 (Address: 0x18002fbc8)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18002fbe8)
IsDebuggerPresent (Address: 0x18002fbd8)
OutputDebugStringW (Address: 0x18002fbe0)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18002fbf8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18002fc08)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18002fc28)
RaiseException (Address: 0x18002fc30)
SetLastError (Address: 0x18002fc20)
SetUnhandledExceptionFilter (Address: 0x18002fc38)
UnhandledExceptionFilter (Address: 0x18002fc18)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x18002fc48)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18002fc58)
DuplicateHandle (Address: 0x18002fc60)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18002fc70)
HeapAlloc (Address: 0x18002fc78)
HeapFree (Address: 0x18002fc80)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18002fc90)
LocalFree (Address: 0x18002fc98)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18002fca8)

api-ms-win-core-io-l1-1-0.dll

CancelIoEx (Address: 0x18002fcb8)
DeviceIoControl (Address: 0x18002fcc0)
GetOverlappedResult (Address: 0x18002fcc8)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x18002fce8)
GetModuleFileNameA (Address: 0x18002fcd8)
GetModuleHandleExW (Address: 0x18002fd00)
GetModuleHandleW (Address: 0x18002fcf8)
GetProcAddress (Address: 0x18002fce0)
LoadLibraryExW (Address: 0x18002fcf0)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18002fd10)
GetThreadLocale (Address: 0x18002fd18)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x18002fd38)
GetCurrentProcess (Address: 0x18002fd30)
GetCurrentProcessId (Address: 0x18002fd48)
GetCurrentThreadId (Address: 0x18002fd40)
TerminateProcess (Address: 0x18002fd28)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18002fd58)
OpenProcess (Address: 0x18002fd60)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18002fd78)
QueryPerformanceFrequency (Address: 0x18002fd70)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18002fdb8)
RegCreateKeyExW (Address: 0x18002fda0)
RegEnumValueW (Address: 0x18002fd98)
RegOpenKeyExW (Address: 0x18002fda8)
RegQueryInfoKeyW (Address: 0x18002fd90)
RegQueryValueExW (Address: 0x18002fdb0)
RegSetValueExW (Address: 0x18002fd88)

api-ms-win-core-registry-l1-1-1.dll

RegSetKeyValueW (Address: 0x18002fdc8)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x18002fdd8)
MultiByteToWideChar (Address: 0x18002fde8)
WideCharToMultiByte (Address: 0x18002fde0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18002fe50)
AcquireSRWLockShared (Address: 0x18002fe00)
CreateEventExW (Address: 0x18002fe48)
CreateEventW (Address: 0x18002fe60)
CreateMutexExW (Address: 0x18002fe88)
CreateMutexW (Address: 0x18002fe38)
CreateSemaphoreExW (Address: 0x18002fea0)
DeleteCriticalSection (Address: 0x18002fe78)
EnterCriticalSection (Address: 0x18002fe18)
InitializeCriticalSection (Address: 0x18002fe28)
InitializeCriticalSectionAndSpinCount (Address: 0x18002fe10)
InitializeCriticalSectionEx (Address: 0x18002fe80)
LeaveCriticalSection (Address: 0x18002fe20)
OpenSemaphoreW (Address: 0x18002fe90)
ReleaseMutex (Address: 0x18002fe58)
ReleaseSemaphore (Address: 0x18002fe40)
ReleaseSRWLockExclusive (Address: 0x18002fe70)
ReleaseSRWLockShared (Address: 0x18002fdf8)
ResetEvent (Address: 0x18002fe08)
SetEvent (Address: 0x18002fe68)
WaitForSingleObject (Address: 0x18002fe30)
WaitForSingleObjectEx (Address: 0x18002fe98)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x18002feb0)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x18002fec0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTime (Address: 0x18002fed8)
GetSystemTimeAsFileTime (Address: 0x18002fed0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolCleanupGroup (Address: 0x18002fef0)
CloseThreadpoolTimer (Address: 0x18002ff30)
CloseThreadpoolWork (Address: 0x18002ff00)
CreateThreadpoolTimer (Address: 0x18002ff18)
CreateThreadpoolWork (Address: 0x18002fee8)
SetThreadpoolTimer (Address: 0x18002ff20)
SetThreadpoolTimerEx (Address: 0x18002fef8)
SubmitThreadpoolWork (Address: 0x18002ff10)
TrySubmitThreadpoolCallback (Address: 0x18002ff28)
WaitForThreadpoolTimerCallbacks (Address: 0x18002ff38)
WaitForThreadpoolWorkCallbacks (Address: 0x18002ff08)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x18002ff48)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x180030040)
__CxxFrameHandler3 (Address: 0x18002ffe0)
__CxxFrameHandler4 (Address: 0x180030050)
__std_terminate (Address: 0x180030048)
_CxxThrowException (Address: 0x18002ffe8)
_o___std_exception_copy (Address: 0x180030030)
_o___std_exception_destroy (Address: 0x180030028)
_o___std_type_info_destroy_list (Address: 0x180030020)
_o___stdio_common_vsnprintf_s (Address: 0x180030018)
_o___stdio_common_vswprintf (Address: 0x180030010)
_o___stdio_common_vswscanf (Address: 0x180030008)
_o__callnewh (Address: 0x180030000)
_o__cexit (Address: 0x18002fff0)
_o__configure_narrow_argv (Address: 0x18002ff90)
_o__crt_atexit (Address: 0x180030038)
_o__errno (Address: 0x18002fff8)
_o__execute_onexit_table (Address: 0x18002ffa0)
_o__initialize_narrow_environment (Address: 0x18002ff58)
_o__initialize_onexit_table (Address: 0x18002ff60)
_o__invalid_parameter_noinfo (Address: 0x18002ff68)
_o__invalid_parameter_noinfo_noreturn (Address: 0x18002ff70)
_o__purecall (Address: 0x18002ff78)
_o__register_onexit_function (Address: 0x18002ff80)
_o__seh_filter_dll (Address: 0x18002ff88)
_o__wcsicmp (Address: 0x18002ffa8)
_o__wcstoi64 (Address: 0x18002ffb0)
_o_free (Address: 0x18002ffb8)
_o_malloc (Address: 0x18002ffc0)
_o_memcpy_s (Address: 0x18002ffc8)
_o_wcscpy_s (Address: 0x18002ffd0)
_o_wcstok_s (Address: 0x18002ffd8)
memcmp (Address: 0x180030058)
memcpy (Address: 0x180030060)
memmove (Address: 0x18002ff98)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x180030078)
_initterm_e (Address: 0x180030070)

api-ms-win-crt-string-l1-1-0.dll

memmove_s (Address: 0x180030090)
memset (Address: 0x180030088)

api-ms-win-devices-config-l1-1-1.dll

CM_Register_Notification (Address: 0x1800300a0)
CM_Unregister_Notification (Address: 0x1800300a8)

api-ms-win-devices-query-l1-1-0.dll

DevCloseObjectQuery (Address: 0x1800300b8)
DevCreateObjectQuery (Address: 0x1800300c0)

api-ms-win-devices-query-l1-1-1.dll

DevCreateObjectQueryEx (Address: 0x1800300d0)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x1800300e0)
EventUnregister (Address: 0x1800300f0)
EventWriteTransfer (Address: 0x1800300e8)

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW (Address: 0x180030100)
SetServiceStatus (Address: 0x180030108)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x180030118)
OpenSCManagerW (Address: 0x180030120)
OpenServiceW (Address: 0x180030128)

api-ms-win-service-management-l2-1-0.dll

NotifyServiceStatusChangeW (Address: 0x180030138)
QueryServiceStatusEx (Address: 0x180030140)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x180030150)

BthTelemetry.dll

BthCollectFingerprintInfo (Address: 0x18002fa98)
BthProcessEventOccurrenceBthaddr (Address: 0x18002fa88)
BthProcessEventOccurrenceResultBthaddr (Address: 0x18002fa90)

DEVOBJ.dll

DevObjCreateDeviceInfoList (Address: 0x18002fab0)
DevObjDestroyDeviceInfoList (Address: 0x18002faa8)
DevObjEnumDeviceInfo (Address: 0x18002fac0)
DevObjEnumDeviceInterfaces (Address: 0x18002fae0)
DevObjGetClassDevs (Address: 0x18002fae8)
DevObjGetDeviceInstanceId (Address: 0x18002fac8)
DevObjGetDeviceInterfaceDetail (Address: 0x18002fad8)
DevObjOpenDevRegKey (Address: 0x18002fab8)
DevObjUninstallDevice (Address: 0x18002fad0)

msvcp_win.dll

?_Xbad_function_call@std@@YAXXZ (Address: 0x180030160)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180030168)

ntdll.dll

EtwGetTraceEnableFlags (Address: 0x1800301b0)
EtwGetTraceEnableLevel (Address: 0x1800301b8)
EtwGetTraceLoggerHandle (Address: 0x1800301c0)
EtwRegisterTraceGuidsW (Address: 0x180030200)
EtwTraceMessage (Address: 0x1800301c8)
EtwUnregisterTraceGuids (Address: 0x180030198)
RtlCaptureContext (Address: 0x1800301e0)
RtlGUIDFromString (Address: 0x1800301a0)
RtlInitUnicodeString (Address: 0x1800301d0)
RtlLookupFunctionEntry (Address: 0x1800301e8)
RtlNtStatusToDosError (Address: 0x1800301d8)
RtlNtStatusToDosErrorNoTeb (Address: 0x180030190)
RtlPublishWnfStateData (Address: 0x1800301a8)
RtlRbInsertNodeEx (Address: 0x1800301f0)
RtlRbRemoveNode (Address: 0x180030188)
RtlSubscribeWnfStateChangeNotification (Address: 0x180030180)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x180030178)
RtlVirtualUnwind (Address: 0x1800301f8)

OLEAUT32.dll

SysAllocString (Address: 0x18002fb10)
SysFreeString (Address: 0x18002fb08)
VariantClear (Address: 0x18002fb00)
VariantInit (Address: 0x18002faf8)

policymanager.dll

PolicyManager_FreeStringValue (Address: 0x180030220)
PolicyManager_GetPolicyInt (Address: 0x180030218)
PolicyManager_GetPolicyString (Address: 0x180030210)

RPCRT4.dll

NdrServerCall2 (Address: 0x18002fb98)
NdrServerCallAll (Address: 0x18002fb88)
RpcBindingInqAuthClientW (Address: 0x18002fb60)
RpcBindingVectorFree (Address: 0x18002fb50)
RpcEpRegisterW (Address: 0x18002fb30)
RpcEpUnregister (Address: 0x18002fb48)
RpcImpersonateClient (Address: 0x18002fb68)
RpcRaiseException (Address: 0x18002fb58)
RpcRevertToSelf (Address: 0x18002fb70)
RpcServerInqBindings (Address: 0x18002fb28)
RpcServerInqDefaultPrincNameW (Address: 0x18002fb38)
RpcServerRegisterAuthInfoW (Address: 0x18002fb20)
RpcServerRegisterIfEx (Address: 0x18002fb80)
RpcServerUnregisterIfEx (Address: 0x18002fb78)
RpcServerUseProtseqW (Address: 0x18002fb40)
RpcStringFreeW (Address: 0x18002fb90)