Import table
advapi32.dll
RegCloseKey, RegDeleteKeyW, RegQueryInfoKeyW, RegQueryValueExW, RegCreateKeyExW, RegOpenKeyExW, RegSetValueExW, AdjustTokenPrivileges, OpenProcessToken, RegEnumKeyExW, GetTokenInformation, EqualSid, RegDeleteValueW, OpenThreadToken, SetServiceStatus, RegisterServiceCtrlHandlerExW, CheckTokenMembership, ConvertStringSidToSidW, RegNotifyChangeKeyValue, DuplicateTokenEx, CloseServiceHandle, QueryServiceStatus, OpenServiceW, OpenSCManagerW, RegGetValueW, RegEnumValueW, UnlockServiceDatabase, LockServiceDatabase, DuplicateToken, FreeSid, AllocateAndInitializeSid, InitiateSystemShutdownExW, WmiNotificationRegistrationW
api-ms-win-core-console-l1-1-0.dll
GetConsoleMode, GetConsoleCP, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA
api-ms-win-core-debug-l1-1-0.dll
OutputDebugStringA
api-ms-win-core-errorhandling-l1-1-0.dll
SetUnhandledExceptionFilter, GetLastError, UnhandledExceptionFilter, SetLastError, RaiseException
api-ms-win-core-file-l1-1-0.dll
FlushFileBuffers, SetFilePointer, WriteFile, CreateFileA, CreateFileW, GetFileType
api-ms-win-core-handle-l1-1-0.dll
CloseHandle, DuplicateHandle
api-ms-win-core-heap-l1-1-0.dll
HeapCreate, HeapSize, GetProcessHeap, HeapDestroy, HeapFree, HeapAlloc, HeapReAlloc
api-ms-win-core-interlocked-l1-1-0.dll
InterlockedExchange, InterlockedCompareExchange, InterlockedIncrement, InterlockedDecrement
api-ms-win-core-io-l1-1-0.dll
DeviceIoControl
api-ms-win-core-libraryloader-l1-1-0.dll
LockResource, GetModuleFileNameA, GetModuleHandleA, GetModuleFileNameW, LoadLibraryExW, LoadResource, SizeofResource, LoadLibraryExA, FreeLibrary, GetModuleHandleW, GetProcAddress, DisableThreadLibraryCalls
api-ms-win-core-localization-l1-1-0.dll
GetSystemDefaultLCID, GetOEMCP, GetACP, GetCPInfo, LCMapStringW
api-ms-win-core-memory-l1-1-0.dll
VirtualAlloc, VirtualFree, VirtualProtect, VirtualQuery
api-ms-win-core-misc-l1-1-0.dll
LocalAlloc, SetHandleCount, lstrlenW, lstrcmpiW, lstrcpynW, lstrlenA, Sleep, LocalFree, lstrcmpW, LCMapStringA
api-ms-win-core-processenvironment-l1-1-0.dll
FreeEnvironmentStringsA, ExpandEnvironmentStringsW, SetStdHandle, GetEnvironmentStringsW, GetCommandLineA, GetStdHandle, GetEnvironmentStrings, FreeEnvironmentStringsW
api-ms-win-core-processthreads-l1-1-0.dll
CreateProcessW, TerminateProcess, GetCurrentProcessId, GetCurrentThread, GetCurrentThreadId, OpenProcessToken, GetCurrentProcess, OpenThreadToken, TlsFree, ExitProcess, TlsGetValue, TlsAlloc, TlsSetValue
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-string-l1-1-0.dll
WideCharToMultiByte, MultiByteToWideChar, GetStringTypeW, CompareStringW
api-ms-win-core-synch-l1-1-0.dll
TryEnterCriticalSection, ResetEvent, DeleteCriticalSection, SetEvent, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, OpenEventW, WaitForSingleObject, CreateEventW
api-ms-win-core-sysinfo-l1-1-0.dll
GetVersionExA, GetTickCount, GetSystemTimeAsFileTime, GetSystemInfo, GetVersionExW
kernel32.dll
UnregisterWaitEx, DelayLoadFailureHook, FindResourceW, RegNotifyChangeKeyValue, RegEnumValueW, RegDeleteKeyExW, RegGetValueW, GetStartupInfoA, QueueUserWorkItem, GetPrivateProfileStringW, RegCloseKey, LoadLibraryW, RegQueryInfoKeyW, RegQueryValueExW, RegCreateKeyExW, RegOpenKeyExW, RegSetValueExW, RegEnumKeyExW, RegDeleteValueW, LeaveCriticalSection, DisableThreadLibraryCalls, GetVersionExW, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, lstrlenW, RaiseException, InitializeCriticalSection, DeleteCriticalSection, InterlockedIncrement, InterlockedDecrement, HeapFree, HeapAlloc, HeapReAlloc, lstrcmpiW, MultiByteToWideChar, WideCharToMultiByte, GetCurrentThreadId, GetLastError, CloseHandle, GetCurrentProcess, WaitForSingleObject, HeapDestroy, lstrcpynW, FreeLibrary, lstrlenA, SizeofResource, LoadResource, LoadLibraryExW, CreateFileW, GetModuleFileNameW, GetModuleHandleW, GetCurrentThread, CreateEventW, OpenEventW, OutputDebugStringA, CreateThread, SetEvent, GetProcAddress, InterlockedCompareExchange, LoadLibraryA, Sleep, LocalFree, lstrcmpW, InterlockedExchange, DuplicateHandle, TryEnterCriticalSection, ResetEvent, HeapCreate, GetCommandLineA, GetVersionExA, RtlUnwind, GetModuleHandleA, ExitProcess, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, SetHandleCount, GetStdHandle, GetFileType, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, EnterCriticalSection, GetEnvironmentStringsW, VirtualFree, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCPInfo, GetACP, GetOEMCP, HeapSize, WriteFile, SetFilePointer, GetConsoleCP, GetConsoleMode, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, CreateFileA, FlushFileBuffers, CompareStringW, LocalAlloc, GetSystemDefaultLCID, DeviceIoControl, LockResource, GetProcessHeap, CreateProcessW, ExpandEnvironmentStringsW, FreeEnvironmentStringsW
kernelbase.dll
GetStringTypeA, GetLocaleInfoA
nsi.dll
NsiGetParameter
ntdll.dll
RtlRegisterWait, NtClose, RtlOpenCurrentUser, RtlUnwind, RtlDeregisterWaitEx, RtlNtStatusToDosError, NtOpenFile, RtlGetNtProductType, RtlInitUnicodeString
ole32.dll
StringFromGUID2, CoTaskMemFree, CoTaskMemAlloc, CoRevokeClassObject, CoRegisterClassObject, CoTaskMemRealloc, CoImpersonateClient, CoRevertToSelf, CLSIDFromString, CoSetProxyBlanket, IIDFromString, CoInitializeEx, CoUninitialize, CoCreateInstance
rasapi32.dll
DwCloneEntry, RasSetAutodialAddressW, RasValidateEntryNameW, RasHangUpW, RasGetEntryPropertiesW, RasRenameEntryW, RasEnumConnectionsW, DwEnumEntryDetails, RasGetConnectStatusW, RasDeleteEntryW
user32.dll
MessageBoxW, LoadImageW, DestroyIcon, UnregisterDeviceNotification, CharNextW, PeekMessageW, DispatchMessageW, MsgWaitForMultipleObjects, RegisterDeviceNotificationW
winnsi.dll
NsiRpcRegisterChangeNotification, NsiRpcDeregisterChangeNotification, NsiDisconnectFromServer, NsiConnectToServer
Export table
DllRegisterServer
DllUnregisterServer
HrGetPnpDeviceStatus
HrLanConnectionNameFromGuidOrPath
HrPnpInstanceIdFromGuid
HrQueryLanMediaState
NetManDiagFromCommandArgs
ProcessQueue
ServiceMain
SvchostPushServiceGlobals