Import table
advapi32.dll
CryptGenRandom, RegCloseKey, RegOpenKeyExW, WmiNotificationRegistrationW, RegisterServiceCtrlHandlerW, SetServiceStatus, RegCreateKeyExW, RegDeleteValueW, RegSetValueExW, RegEnumValueW, RegDeleteTreeW, RegDeleteKeyW, CryptAcquireContextW, CryptReleaseContext, RegOpenKeyExA, RegQueryValueExW, RegEnumKeyExW, OpenSCManagerW, OpenServiceW, CloseServiceHandle, NotifyServiceStatusChangeW
api-ms-win-core-com-l1-1-0.dll
PropVariantClear, CoTaskMemAlloc, CoInitializeEx, CoCreateInstance, CoUninitialize, CoTaskMemFree, CoTaskMemRealloc
api-ms-win-core-debug-l1-1-1.dll
OutputDebugStringA
api-ms-win-core-delayload-l1-1-1.dll
ResolveDelayLoadedAPI, DelayLoadFailureHook
api-ms-win-core-errorhandling-l1-1-0.dll
SetUnhandledExceptionFilter, SetLastError, GetLastError, UnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll
GetLastError, UnhandledExceptionFilter, SetUnhandledExceptionFilter, SetLastError, RaiseException
api-ms-win-core-file-l1-1-1.dll
CreateFileW, ReadFile, WriteFile
api-ms-win-core-file-l1-2-0.dll
WriteFile, ReadFile, CreateFileW
api-ms-win-core-file-l1-2-1.dll
WriteFile, ReadFile, CreateFileW
api-ms-win-core-handle-l1-1-0.dll
CloseHandle
api-ms-win-core-heap-l1-1-0.dll
HeapFree, GetProcessHeap, HeapDestroy, HeapAlloc, HeapCreate
api-ms-win-core-heap-l1-2-0.dll
HeapDestroy, GetProcessHeap, HeapAlloc, HeapCreate, HeapFree
api-ms-win-core-heap-obsolete-l1-1-0.dll
LocalAlloc, LocalFree
api-ms-win-core-interlocked-l1-1-0.dll
InterlockedDecrement, InterlockedPushEntrySList, InterlockedPopEntrySList, InterlockedExchange, InterlockedCompareExchange64, InterlockedExchangeAdd, InterlockedCompareExchange, InitializeSListHead, InterlockedIncrement, QueryDepthSList
api-ms-win-core-interlocked-l1-1-1.dll
InitializeSListHead, QueryDepthSList, InterlockedPushEntrySList, InterlockedCompareExchange, InterlockedExchangeAdd, InterlockedDecrement, InterlockedPopEntrySList, InterlockedExchange, InterlockedIncrement, InterlockedCompareExchange64
api-ms-win-core-interlocked-l1-2-0.dll
InterlockedDecrement, InterlockedExchange, InterlockedPopEntrySList, InterlockedExchangeAdd, InterlockedCompareExchange, InitializeSListHead, InterlockedPushEntrySList, InterlockedCompareExchange64, InterlockedIncrement, QueryDepthSList
api-ms-win-core-io-l1-1-1.dll
GetOverlappedResult, CancelIoEx, DeviceIoControl
api-ms-win-core-kernel32-legacy-l1-1-0.dll
WaitForMultipleObjects, BindIoCompletionCallback
api-ms-win-core-kernel32-legacy-l1-1-1.dll
BindIoCompletionCallback, WaitForMultipleObjects, GetNumaProcessorNodeEx
api-ms-win-core-libraryloader-l1-1-1.dll
GetModuleFileNameW, FindResourceExW, LoadResource, DisableThreadLibraryCalls, SizeofResource, GetModuleHandleW, LoadLibraryExW, GetProcAddress, FreeLibrary, LoadStringW
api-ms-win-core-libraryloader-l1-2-0.dll
FreeLibrary, GetProcAddress, LoadLibraryExW, LoadStringW, DisableThreadLibraryCalls
api-ms-win-core-localregistry-l1-1-0.dll
RegCreateKeyExW, RegDeleteTreeW, RegSetValueExW, RegEnumValueW, RegGetValueW, RegQueryInfoKeyW, RegDeleteValueW, RegOpenKeyExA, RegQueryValueExW, RegOpenKeyExW, RegCloseKey, RegDeleteKeyExW, RegEnumKeyExW
api-ms-win-core-memory-l1-1-2.dll
VirtualAllocExNuma, VirtualFree
api-ms-win-core-processenvironment-l1-1-0.dll
ExpandEnvironmentStringsW
api-ms-win-core-processenvironment-l1-1-1.dll
ExpandEnvironmentStringsW
api-ms-win-core-processenvironment-l1-2-0.dll
ExpandEnvironmentStringsW
api-ms-win-core-processthreads-l1-1-1.dll
GetCurrentProcess, OpenThreadToken, GetCurrentThread, SetThreadToken, GetCurrentThreadId, TerminateProcess, GetCurrentProcessId, IsProcessorFeaturePresent
api-ms-win-core-processthreads-l1-1-2.dll
GetCurrentThread, OpenThreadToken, GetCurrentProcess, UpdateProcThreadAttribute, DeleteProcThreadAttributeList, SetThreadToken, TerminateProcess, InitializeProcThreadAttributeList, GetCurrentProcessId, GetCurrentThreadId, CreateRemoteThreadEx
api-ms-win-core-processtopology-l1-1-0.dll
SetThreadGroupAffinity
api-ms-win-core-processtopology-l1-2-0.dll
SetThreadGroupAffinity
api-ms-win-core-processtopology-obsolete-l1-1-0.dll
GetActiveProcessorCount, SetThreadAffinityMask
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegDeleteValueW, RegSetValueExW, RegGetValueW, RegDeleteTreeW, RegDeleteKeyExW, RegEnumValueW, RegNotifyChangeKeyValue, RegQueryValueExW, RegOpenKeyExA, RegCreateKeyExW, RegOpenKeyExW, RegEnumKeyExW, RegCloseKey, RegQueryInfoKeyW
api-ms-win-core-string-l1-1-0.dll
MultiByteToWideChar
api-ms-win-core-string-l2-1-0.dll
CharNextW
api-ms-win-core-string-obsolete-l1-1-0.dll
lstrcmpiW, lstrlenW
api-ms-win-core-synch-l1-1-1.dll
InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, LeaveCriticalSection, WaitForSingleObjectEx, ReleaseMutex, EnterCriticalSection, CreateMutexW, CreateEventW, WaitForSingleObject, WaitForMultipleObjectsEx, InitializeCriticalSection, OpenEventW, SetEvent, Sleep, ResetEvent
api-ms-win-core-synch-l1-2-0.dll
CreateMutexW, WaitForSingleObjectEx, ResetEvent, CreateEventW, ReleaseMutex, WaitForSingleObject, InitializeCriticalSectionAndSpinCount, WaitForMultipleObjectsEx, Sleep, SetEvent, OpenEventW, InitializeCriticalSection, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection
api-ms-win-core-sysinfo-l1-1-1.dll
GetTickCount64, GetTickCount, GetSystemTimeAsFileTime
api-ms-win-core-sysinfo-l1-2-0.dll
GetTickCount64, GetSystemTimeAsFileTime, GetTickCount, GetSystemInfo
api-ms-win-core-sysinfo-l1-2-1.dll
GetTickCount, GetSystemInfo, GetTickCount64, GetSystemTimeAsFileTime
api-ms-win-core-systemtopology-l1-1-0.dll
GetNumaNodeProcessorMaskEx
api-ms-win-core-threadpool-l1-1-1.dll
CloseThreadpool, CloseThreadpoolCleanupGroup, CloseThreadpoolCleanupGroupMembers, CreateThreadpoolCleanupGroup, CreateThreadpool, SetThreadpoolWait, WaitForThreadpoolWaitCallbacks, CloseThreadpoolTimer, CreateThreadpoolIo, CloseThreadpoolIo, WaitForThreadpoolTimerCallbacks, StartThreadpoolIo, CreateThreadpoolWork, TrySubmitThreadpoolCallback, CallbackMayRunLong, CancelThreadpoolIo, SubmitThreadpoolWork, CloseThreadpoolWork, CreateThreadpoolTimer, CloseThreadpoolWait, UnregisterWaitEx, SetThreadpoolTimer, CreateThreadpoolWait
api-ms-win-core-threadpool-l1-2-0.dll
SubmitThreadpoolWork, CloseThreadpoolWork, CreateThreadpoolIo, CallbackMayRunLong, CloseThreadpoolIo, TrySubmitThreadpoolCallback, WaitForThreadpoolWaitCallbacks, SetThreadpoolWait, CancelThreadpoolIo, CreateThreadpoolWait, CreateThreadpool, CreateThreadpoolCleanupGroup, CloseThreadpoolCleanupGroupMembers, CloseThreadpoolCleanupGroup, CloseThreadpoolWait, StartThreadpoolIo, CloseThreadpoolTimer, CloseThreadpool, WaitForThreadpoolTimerCallbacks, SetThreadpoolTimer, CreateThreadpoolTimer, CreateThreadpoolWork
api-ms-win-core-threadpool-legacy-l1-1-0.dll
UnregisterWaitEx
api-ms-win-core-threadpool-private-l1-1-0.dll
RegisterWaitForSingleObjectEx
api-ms-win-devices-config-l1-1-0.dll
CM_Get_DevNode_Status, CM_Get_Device_IDW
api-ms-win-devices-config-l1-1-1.dll
CM_Get_DevNode_Status, CM_Get_Device_IDW
api-ms-win-devices-query-l1-1-1.dll
DevCloseObjectQuery, DevCreateObjectQuery
api-ms-win-eventing-provider-l1-1-0.dll
EventRegister, EventUnregister, EventWrite
api-ms-win-legacy-advapi32-l1-1-0.dll
RegEnumKeyW, GetNamedSecurityInfoW, SetNamedSecurityInfoW, SetEntriesInAclW
api-ms-win-legacy-kernel32-l1-1-0.dll
LoadLibraryW, RegisterWaitForSingleObject, UnregisterWait, GetSystemPowerStatus
api-ms-win-obsolete-kernel32-l1-1-0.dll
BindIoCompletionCallback
api-ms-win-obsolete-kernelbase-l1-1-0.dll
LocalAlloc, LocalFree
api-ms-win-security-base-l1-1-0.dll
RevertToSelf, FreeSid, SetSecurityDescriptorDacl, CheckTokenMembership, AllocateAndInitializeSid, InitializeSecurityDescriptor, CreateWellKnownSid, GetLengthSid, DuplicateTokenEx, InitializeAcl, AddAccessAllowedAce, CopySid, GetTokenInformation
api-ms-win-security-base-l1-2-0.dll
RevertToSelf, FreeSid, DuplicateTokenEx, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, GetLengthSid, InitializeAcl, AddAccessAllowedAce, CopySid, GetTokenInformation, AllocateAndInitializeSid, CheckTokenMembership, CreateWellKnownSid
api-ms-win-security-sddl-l1-1-0.dll
ConvertStringSecurityDescriptorToSecurityDescriptorW, ConvertSecurityDescriptorToStringSecurityDescriptorW
api-ms-win-service-core-l1-1-0.dll
SetServiceStatus, RegisterServiceCtrlHandlerExW
api-ms-win-service-core-l1-1-1.dll
SetServiceStatus, RegisterServiceCtrlHandlerExW
api-ms-win-service-management-l1-1-0.dll
CloseServiceHandle, OpenServiceW, OpenSCManagerW
api-ms-win-service-management-l2-1-0.dll
NotifyServiceStatusChangeW
bcrypt.dll
BCryptOpenAlgorithmProvider, BCryptCreateHash, BCryptHashData, BCryptFinishHash, BCryptDestroyHash, BCryptCloseAlgorithmProvider, BCryptGetProperty
cfgmgr32.dll
CM_Get_DevNode_Status, CMP_WaitNoPendingInstallEvents, SwDeviceCreate, SwDeviceClose
firewallapi.dll
FWIndicatePortInUse, FWResetIndicatedPortInUse, FWDeleteCryptoSet, FWDeleteAuthenticationSet, FWQueryFirewallRules, FWAddCryptoSet, FWFreeAuthenticationSets, FWAddAuthenticationSet, FWAddConnectionSecurityRule, FWQueryAuthenticationSets, FWDeleteConnectionSecurityRule, FWQueryCryptoSets, FWSetAuthenticationSet, FWSetConnectionSecurityRule, FWFreeCryptoSets, FWAddFirewallRule, FWSetCryptoSet, FWFreeConnectionSecurityRules, FWClosePolicyStore, FWFreeFirewallRules, FWOpenPolicyStore, FWDeleteFirewallRule, FWSetFirewallRule, FWQueryConnectionSecurityRules
fwpuclnt.dll
FwpmFilterGetByKey0, FwpmFilterCreateEnumHandle0, FwpmFilterEnum0, FwpmFilterDestroyEnumHandle0, FwpmTransactionAbort0, FwpmSubLayerAdd0, FwpmEngineOpen0, FwpmFilterAdd0, FwpmProviderDeleteByKey0, FwpmFilterSubscribeChanges0, FwpmProviderAdd0, FwpmFilterUnsubscribeChanges0, FwpmFreeMemory0, FwpmEngineClose0, FwpmFilterDeleteById0, FwpmTransactionBegin0, FwpmTransactionCommit0, FwpmGetSidFromOnlineId0
iphlpapi.dll
ConvertGuidToStringA, ConvertStringToGuidW, InternalSetTeredoPort, IcmpCloseHandle, ConvertInterfaceGuidToLuid, GetIfEntry2, GetIpForwardTable2, FreeMibTable, GetIpNetEntry2, ConvertGuidToStringW, GetUnicastIpAddressTable, Icmp6SendEcho2, Icmp6CreateFile, ResolveIpNetEntry2, GetBestRoute2, SetCurrentThreadCompartmentId, GetBestInterface, DeleteIpForwardEntry2, CreateIpForwardEntry2, InitializeIpForwardEntry, DeleteUnicastIpAddressEntry, InitializeUnicastIpAddressEntry, ConvertInterfaceLuidToGuid, CreateUnicastIpAddressEntry, GetIfTable2, CancelMibChangeNotify2, GetUnicastIpAddressEntry, NotifyIpInterfaceChange, NotifyUnicastIpAddressChange, GetIpForwardEntry2, NotifyRouteChange2, GetIpInterfaceTable, ConvertInterfaceLuidToAlias, InternalSetIpInterfaceEntry, InitializeIpInterfaceEntry, GetBestInterfaceEx, GetAdaptersAddresses, ConvertInterfaceIndexToLuid, ParseNetworkString, ConvertInterfaceLuidToIndex
kernel32.dll
FindResourceW, LoadLibraryExW, GetModuleFileNameW, DelayLoadFailureHook, LoadLibraryExA, GetVersionExA, QueryPerformanceCounter, GetCurrentThreadId, GetCurrentProcessId, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, CloseThreadpoolWait, SetThreadpoolWait, WaitForThreadpoolTimerCallbacks, CloseThreadpoolTimer, SetThreadpoolTimer, TrySubmitThreadpoolCallback, LoadLibraryW, GetProcAddress, FreeLibrary, OpenEventW, UnregisterWait, ResetEvent, SetUnhandledExceptionFilter, OutputDebugStringA, DisableThreadLibraryCalls, ReadFile, StartThreadpoolIo, CancelThreadpoolIo, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, QueryDepthSList, DeviceIoControl, WriteFile, LocalAlloc, ExpandEnvironmentStringsW, CreateFileW, LocalFree, HeapCreate, HeapDestroy, CreateMutexW, GetSystemTimeAsFileTime, InterlockedCompareExchange64, InitializeSListHead, CreateEventW, GetTickCount, Sleep, GetLastError, InterlockedExchange, InterlockedPopEntrySList, HeapFree, HeapAlloc, ReleaseMutex, WaitForSingleObject, InterlockedDecrement, InterlockedIncrement, InterlockedExchangeAdd, InterlockedPushEntrySList, InterlockedCompareExchange, SetEvent, CloseHandle, SetLastError, CreateThreadpoolIo, CloseThreadpoolIo, WaitForThreadpoolIoCallbacks, CloseThreadpool, CloseThreadpoolCleanupGroup, CloseThreadpoolCleanupGroupMembers, CreateThreadpoolTimer, CreateThreadpoolWait, CreateThreadpoolCleanupGroup, CreateThreadpool, WaitForSingleObjectEx, CancelIoEx, GetCurrentThread, GetOverlappedResult, LoadResource, SizeofResource, MultiByteToWideChar, lstrcmpiW, GetModuleHandleW, lstrlenW, RaiseException, CreateThreadpoolWork, BindIoCompletionCallback, CloseThreadpoolWork, GlobalFree, SubmitThreadpoolWork, WaitForThreadpoolWaitCallbacks, FindResourceExW, InitOnceExecuteOnce, GetActiveProcessorGroupCount, InitializeCriticalSectionAndSpinCount, WaitForMultipleObjects, GetProcessHeap, RegisterWaitForSingleObjectEx, RegQueryInfoKeyW
msvcrt.dll
DllMain
mswsock.dll
AcceptEx, GetAcceptExSockaddrs
nci.dll
NciSetConnectionName
nsi.dll
NsiFreeTable, NsiSetAllParameters, NsiSetParameter, NsiGetParameter, NsiGetAllParameters, NsiAllocateAndGetTable
ntdll.dll
RtlCreateHashTable, EtwEventWrite, RtlCompareMemory, RtlIpv6AddressToStringW, EtwEventActivityIdControl, EtwEventRegister, EtwEventUnregister, RtlInitUnicodeString, RtlIpv4AddressToStringW, RtlIpv4StringToAddressW, RtlIpv6StringToAddressW, RtlGetVersion, WinSqmSetDWORD, RtlRemoveEntryHashTable, RtlInsertEntryHashTable, WinSqmSetIfMaxDWORD, RtlDeleteHashTable, RtlEndEnumerationHashTable, RtlEnumerateEntryHashTable, WinSqmIsOptedIn, WinSqmIncrementDWORD, RtlGetNextEntryHashTable, RtlLookupEntryHashTable, RtlInitEnumerationHashTable, EtwTraceMessage, NtPowerInformation, RtlNtStatusToDosError
ole32.dll
CoUninitialize, CoTaskMemFree, CoCreateInstance, CoInitializeEx, CoTaskMemRealloc, CoTaskMemAlloc
rpcrt4.dll
RpcServerInqBindings, UuidCreate, RpcBindingVectorFree, RpcServerUnregisterIfEx, RpcServerUseProtseqW, RpcServerRegisterIfEx, RpcServerInqCallAttributesW, NdrServerCall2, RpcEpUnregister, RpcImpersonateClient, RpcRevertToSelf, RpcEpRegisterW, NdrAsyncServerCall, RpcStringBindingComposeW, RpcBindingSetAuthInfoW, RpcAsyncGetCallStatus, RpcBindingUnbind, RpcBindingCreateW, I_RpcExceptionFilter, RpcBindingFree, RpcSsContextLockExclusive, RpcAsyncCompleteCall, RpcBindingSetOption, RpcBindingFromStringBindingW, RpcAsyncCancelCall, RpcBindingBind, NdrAsyncClientCall, NdrClientCall2, RpcAsyncInitializeHandle, RpcStringFreeW
rtutils.dll
TraceDeregisterW, TraceRegisterExW, TracePrintfExW
setupapi.dll
SetupDiGetClassDevsW, SetupDiEnumDeviceInfo, SetupDiGetDeviceRegistryPropertyW, SetupDiSetClassInstallParamsW, SetupDiCallClassInstaller, SetupDiDestroyDeviceInfoList, CMP_WaitNoPendingInstallEvents
sqmapi.dll
SqmEndSession, SqmWaitForUploadComplete, SqmStartUpload, SqmSetFlags, SqmSetUserId, SqmWriteSharedUserId, SqmReadSharedUserId, SqmSetMachineId, SqmWriteSharedMachineId, SqmCreateNewId, SqmReadSharedMachineId, SqmSet, SqmGetSession, SqmSetAppId, SqmClearFlags
user32.dll
CharNextW, UnregisterClassA, RegisterPowerSettingNotification, UnregisterPowerSettingNotification
wdscore.dll
ConstructPartialMsgVW, CurrentIP, WdsSetupLogMessageW
winnsi.dll
NsiConnectToServer, NsiDisconnectFromServer, NsiRpcDeregisterChangeNotification, NsiRpcRegisterChangeNotification
ws2_32.dll
WSASendTo, WSARecvFrom, WSAEventSelect, WSASocketW, getnameinfo, GetAddrInfoW, WSAAddressToStringA, FreeAddrInfoW, WSAIoctl, GetNameInfoW
Export table
IphlpsvcSysprepGeneralize
ServiceMain
SvchostPushServiceGlobals