dps.dll

Description: WDI Diagnostic Policy Service

Version: 10.0.19041.1

Architecture: 64-bit

Operating System: Windows NT

SHA256: a8707bd19d584daeca39990a2e791194

File Size: 171.5 KB

Uploaded At: Dec. 1, 2025, 7:26 a.m.

Views: 9

Exported Functions

ServiceMain (Ordinal: 1, Address: 0x9ce0)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll

OutputDebugStringW (Address: 0x18001f138)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18001f148)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18001f158)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18001f178)
SetUnhandledExceptionFilter (Address: 0x18001f168)
UnhandledExceptionFilter (Address: 0x18001f170)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x18001f1b8)
CreateFileW (Address: 0x18001f190)
DeleteFileW (Address: 0x18001f1c0)
FindClose (Address: 0x18001f1a8)
FindFirstFileW (Address: 0x18001f198)
FindNextFileW (Address: 0x18001f188)
GetDiskFreeSpaceW (Address: 0x18001f1e0)
ReadFile (Address: 0x18001f1a0)
RemoveDirectoryW (Address: 0x18001f1d0)
SetFilePointer (Address: 0x18001f1c8)
SetFilePointerEx (Address: 0x18001f1b0)
WriteFile (Address: 0x18001f1d8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18001f1f0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18001f218)
HeapAlloc (Address: 0x18001f210)
HeapFree (Address: 0x18001f208)
HeapReAlloc (Address: 0x18001f200)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18001f230)
LocalFree (Address: 0x18001f228)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18001f240)
InterlockedFlushSList (Address: 0x18001f248)
InterlockedPushEntrySList (Address: 0x18001f250)

api-ms-win-core-kernel32-legacy-l1-1-1.dll

VerifyVersionInfoW (Address: 0x18001f260)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18001f270)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x18001f280)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessAsUserW (Address: 0x18001f2b0)
CreateThread (Address: 0x18001f2a8)
GetCurrentProcess (Address: 0x18001f298)
GetCurrentProcessId (Address: 0x18001f2c8)
GetCurrentThread (Address: 0x18001f2b8)
GetCurrentThreadId (Address: 0x18001f290)
OpenThreadToken (Address: 0x18001f2c0)
SetThreadToken (Address: 0x18001f2d0)
TerminateProcess (Address: 0x18001f2a0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18001f2e0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18001f308)
RegDeleteValueW (Address: 0x18001f300)
RegEnumKeyExW (Address: 0x18001f2f8)
RegOpenKeyExW (Address: 0x18001f318)
RegQueryInfoKeyW (Address: 0x18001f2f0)
RegQueryValueExW (Address: 0x18001f310)
RegSetValueExW (Address: 0x18001f320)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18001f370)
AcquireSRWLockShared (Address: 0x18001f330)
CreateEventW (Address: 0x18001f378)
DeleteCriticalSection (Address: 0x18001f350)
EnterCriticalSection (Address: 0x18001f360)
InitializeCriticalSection (Address: 0x18001f358)
InitializeSRWLock (Address: 0x18001f348)
LeaveCriticalSection (Address: 0x18001f368)
ReleaseSRWLockExclusive (Address: 0x18001f380)
ReleaseSRWLockShared (Address: 0x18001f340)
ResetEvent (Address: 0x18001f338)
SetEvent (Address: 0x18001f388)
WaitForMultipleObjectsEx (Address: 0x18001f390)
WaitForSingleObject (Address: 0x18001f398)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x18001f3a8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18001f3b8)
GetTickCount (Address: 0x18001f3c0)

api-ms-win-eventing-consumer-l1-1-0.dll

CloseTrace (Address: 0x18001f3d0)
OpenTraceW (Address: 0x18001f3d8)
ProcessTrace (Address: 0x18001f3e0)

api-ms-win-eventing-controller-l1-1-0.dll

ControlTraceW (Address: 0x18001f3f0)

api-ms-win-security-base-l1-1-0.dll

AccessCheck (Address: 0x18001f488)
AllocateAndInitializeSid (Address: 0x18001f490)
CheckTokenMembership (Address: 0x18001f4a0)
CopySid (Address: 0x18001f458)
CreateWellKnownSid (Address: 0x18001f420)
DuplicateTokenEx (Address: 0x18001f408)
EqualSid (Address: 0x18001f438)
FreeSid (Address: 0x18001f430)
GetLengthSid (Address: 0x18001f460)
GetSecurityDescriptorDacl (Address: 0x18001f448)
GetSecurityDescriptorGroup (Address: 0x18001f480)
GetSecurityDescriptorOwner (Address: 0x18001f498)
GetTokenInformation (Address: 0x18001f470)
IsValidSecurityDescriptor (Address: 0x18001f478)
IsValidSid (Address: 0x18001f400)
MakeAbsoluteSD (Address: 0x18001f468)
MakeSelfRelativeSD (Address: 0x18001f450)
MapGenericMask (Address: 0x18001f410)
RevertToSelf (Address: 0x18001f440)
SetSecurityDescriptorGroup (Address: 0x18001f418)
SetSecurityDescriptorOwner (Address: 0x18001f428)

api-ms-win-security-grouppolicy-l1-1-0.dll

RegisterGPNotificationInternal (Address: 0x18001f4b8)
UnregisterGPNotificationInternal (Address: 0x18001f4b0)

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW (Address: 0x18001f4c8)
SetServiceStatus (Address: 0x18001f4d0)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x18001f4f0)
OpenSCManagerW (Address: 0x18001f4e0)
OpenServiceW (Address: 0x18001f4e8)
StartServiceW (Address: 0x18001f4f8)

api-ms-win-service-management-l2-1-0.dll

QueryServiceStatusEx (Address: 0x18001f508)

api-ms-win-service-winsvc-l1-1-0.dll

ControlService (Address: 0x18001f520)
QueryServiceStatus (Address: 0x18001f518)

KERNELBASE.dll

WTSGetServiceSessionId (Address: 0x18001f128)

msvcrt.dll

__C_specific_handler (Address: 0x18001f560)
_amsg_exit (Address: 0x18001f550)
_initterm (Address: 0x18001f530)
_vsnwprintf (Address: 0x18001f538)
_wcsicmp (Address: 0x18001f568)
_XcptFilter (Address: 0x18001f558)
free (Address: 0x18001f548)
malloc (Address: 0x18001f540)
memcpy (Address: 0x18001f570)
memset (Address: 0x18001f578)

ntdll.dll

AlpcGetMessageAttribute (Address: 0x18001f628)
AlpcInitializeMessageAttribute (Address: 0x18001f668)
AlpcMaxAllowedMessageLength (Address: 0x18001f648)
EtwEventActivityIdControl (Address: 0x18001f5b0)
EtwEventEnabled (Address: 0x18001f5c0)
EtwEventRegister (Address: 0x18001f5a0)
EtwEventUnregister (Address: 0x18001f598)
EtwEventWrite (Address: 0x18001f5b8)
NtAlpcAcceptConnectPort (Address: 0x18001f618)
NtAlpcCancelMessage (Address: 0x18001f600)
NtAlpcCreatePort (Address: 0x18001f5f0)
NtAlpcDeleteSecurityContext (Address: 0x18001f620)
NtAlpcDisconnectPort (Address: 0x18001f650)
NtAlpcImpersonateClientOfPort (Address: 0x18001f5e0)
NtAlpcQueryInformation (Address: 0x18001f660)
NtAlpcSendWaitReceivePort (Address: 0x18001f610)
NtTraceControl (Address: 0x18001f5d8)
RtlCaptureContext (Address: 0x18001f590)
RtlFirstEntrySList (Address: 0x18001f5a8)
RtlInitUnicodeString (Address: 0x18001f5f8)
RtlLookupFunctionEntry (Address: 0x18001f588)
RtlNtStatusToDosError (Address: 0x18001f658)
RtlVirtualUnwind (Address: 0x18001f608)
TpAllocAlpcCompletion (Address: 0x18001f5e8)
TpReleaseAlpcCompletion (Address: 0x18001f638)
TpWaitForAlpcCompletion (Address: 0x18001f630)
VerSetConditionMask (Address: 0x18001f640)
WinSqmAddToStream (Address: 0x18001f5d0)
WinSqmIncrementDWORD (Address: 0x18001f5c8)