Import table
advapi32.dll
RegisterServiceCtrlHandlerExW, OpenThreadToken, GetTokenInformation, CreateWellKnownSid, SetServiceStatus, TraceMessage, RegCreateKeyExW, CopySid, GetLengthSid, IsValidSid, ConvertSidToStringSidW, LookupAccountNameW, OpenSCManagerW, OpenServiceW, CloseServiceHandle, NotifyServiceStatusChangeW, EqualSid, CheckTokenMembership, RegQueryValueExW, RegQueryInfoKeyW, RegOpenKeyExW, RegCloseKey, RegSetValueExW
api-ms-win-core-apiquery-l1-1-0.dll
ApiSetQueryApiSetPresence
api-ms-win-core-com-l1-1-0.dll
CoTaskMemFree, StringFromCLSID, StringFromGUID2, CLSIDFromString
api-ms-win-core-com-l1-1-1.dll
StringFromCLSID, CLSIDFromString, CoCreateInstance, CoTaskMemFree, StringFromGUID2
api-ms-win-core-delayload-l1-1-1.dll
ResolveDelayLoadedAPI, DelayLoadFailureHook
api-ms-win-core-errorhandling-l1-1-1.dll
SetUnhandledExceptionFilter, UnhandledExceptionFilter, SetLastError, GetLastError
api-ms-win-core-file-l1-1-1.dll
CreateFileW
api-ms-win-core-file-l1-2-0.dll
CreateFileW
api-ms-win-core-file-l1-2-1.dll
CreateFileW
api-ms-win-core-handle-l1-1-0.dll
CloseHandle
api-ms-win-core-heap-l1-1-0.dll
HeapAlloc, HeapFree, GetProcessHeap
api-ms-win-core-heap-l1-2-0.dll
HeapAlloc, HeapFree, GetProcessHeap
api-ms-win-core-heap-obsolete-l1-1-0.dll
LocalFree
api-ms-win-core-interlocked-l1-1-1.dll
InterlockedCompareExchange, InterlockedExchange, InterlockedIncrement, InterlockedDecrement
api-ms-win-core-interlocked-l1-2-0.dll
InterlockedIncrement, InterlockedDecrement, InterlockedCompareExchange, InterlockedExchange
api-ms-win-core-io-l1-1-1.dll
DeviceIoControl
api-ms-win-core-kernel32-legacy-l1-1-1.dll
WaitForMultipleObjects
api-ms-win-core-libraryloader-l1-1-1.dll
GetProcAddress, FreeLibrary, LoadLibraryExW
api-ms-win-core-libraryloader-l1-2-0.dll
FreeLibrary, LoadLibraryExW, GetProcAddress
api-ms-win-core-processthreads-l1-1-1.dll
CreateThread, GetCurrentThreadId, GetCurrentProcess, TerminateProcess, GetCurrentProcessId, GetCurrentThread, OpenThreadToken, IsProcessorFeaturePresent
api-ms-win-core-processthreads-l1-1-2.dll
GetCurrentProcessId, GetCurrentProcess, GetCurrentThread, GetCurrentThreadId, OpenThreadToken, CreateThread, TerminateProcess
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegCreateKeyExW, RegSetValueExW, RegCloseKey, RegOpenKeyExW, RegQueryValueExW, RegQueryInfoKeyW, RegDeleteTreeW
api-ms-win-core-string-l1-1-0.dll
MultiByteToWideChar
api-ms-win-core-synch-l1-1-1.dll
WaitForSingleObject, InitializeCriticalSectionAndSpinCount, ReleaseSRWLockExclusive, WaitForMultipleObjectsEx, AcquireSRWLockShared, Sleep, SetEvent, EnterCriticalSection, ReleaseSRWLockShared, LeaveCriticalSection, DeleteCriticalSection, CreateEventW, AcquireSRWLockExclusive, InitializeSRWLock, InitializeCriticalSection
api-ms-win-core-synch-l1-2-0.dll
DeleteCriticalSection, InitializeSRWLock, AcquireSRWLockShared, WaitForMultipleObjectsEx, ReleaseSRWLockShared, WaitForSingleObject, LeaveCriticalSection, AcquireSRWLockExclusive, EnterCriticalSection, ReleaseSRWLockExclusive, CreateEventW, InitializeCriticalSection, Sleep, InitializeCriticalSectionAndSpinCount, SetEvent, ResetEvent
api-ms-win-core-sysinfo-l1-1-1.dll
GetVersionExW, GetSystemTime, GetSystemTimeAsFileTime, GetTickCount, GetOsSafeBootMode, GetTickCount64
api-ms-win-core-sysinfo-l1-2-0.dll
GetTickCount, GetSystemTimeAsFileTime, GetVersionExW, GetSystemTime, GetTickCount64, GetOsSafeBootMode
api-ms-win-core-sysinfo-l1-2-1.dll
GetTickCount64, GetOsSafeBootMode, GetVersionExW, GetSystemTimeAsFileTime, GetTickCount
api-ms-win-core-threadpool-legacy-l1-1-0.dll
DeleteTimerQueueEx, QueueUserWorkItem, UnregisterWaitEx, DeleteTimerQueueTimer, CreateTimerQueueTimer, ChangeTimerQueueTimer, CreateTimerQueue
api-ms-win-eventing-classicprovider-l1-1-0.dll
TraceMessage
api-ms-win-security-base-l1-1-0.dll
EqualSid, GetTokenInformation, CopySid, GetLengthSid, IsValidSid, CheckTokenMembership, CreateWellKnownSid
api-ms-win-security-base-l1-2-0.dll
GetLengthSid, IsValidSid, EqualSid, CheckTokenMembership, GetTokenInformation, CopySid, CreateWellKnownSid
api-ms-win-security-grouppolicy-l1-1-0.dll
RegisterGPNotificationInternal, UnregisterGPNotificationInternal
api-ms-win-security-lsalookup-l1-1-0.dll
LookupAccountNameLocalW
api-ms-win-security-lsalookup-l1-1-1.dll
LookupAccountNameLocalW
api-ms-win-security-sddl-l1-1-0.dll
ConvertSidToStringSidW, ConvertStringSecurityDescriptorToSecurityDescriptorW
api-ms-win-service-core-l1-1-1.dll
SetServiceStatus, RegisterServiceCtrlHandlerExW
api-ms-win-service-management-l1-1-0.dll
OpenServiceW, CloseServiceHandle, OpenSCManagerW
api-ms-win-service-management-l2-1-0.dll
NotifyServiceStatusChangeW
api-ms-win-service-private-l1-1-1.dll
SubscribeServiceChangeNotifications, UnsubscribeServiceChangeNotifications
iphlpapi.dll
ConvertInterfaceLuidToGuid, ConvertInterfaceIndexToLuid, ConvertInterfaceLuidToIndex, ConvertInterfaceGuidToLuid, GetIfEntry2, FreeMibTable, GetIfStackTable, NotifyUnicastIpAddressChange, CancelMibChangeNotify2, GetUnicastIpAddressTable, InitializeIpInterfaceEntry, SetIpInterfaceEntry
kernel32.dll
InitializeCriticalSectionAndSpinCount, GetSystemTime, MultiByteToWideChar, GetLastError, CreateEventW, InterlockedDecrement, InterlockedIncrement, UnregisterWait, CloseHandle, Sleep, GetProcessHeap, HeapAlloc, HeapFree, SetEvent, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, InitializeCriticalSection, WaitForSingleObject, QueueUserWorkItem, LocalFree, CreateThread, GetProcAddress, LoadLibraryW, FreeLibrary, AcquireSRWLockExclusive, ReleaseSRWLockExclusive, WaitForMultipleObjectsEx, AcquireSRWLockShared, ReleaseSRWLockShared, InitializeSRWLock, CreateTimerQueue, DeleteTimerQueueEx, WTSGetActiveConsoleSessionId, DeleteTimerQueueTimer, CreateTimerQueueTimer, GetCurrentThread, ChangeTimerQueueTimer, CreateFileW, DeviceIoControl, InterlockedExchange, InterlockedCompareExchange, QueryPerformanceCounter, GetCurrentProcessId, GetCurrentThreadId, GetSystemTimeAsFileTime, GetTickCount, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, SetLastError, GetTickCount64
msvcrt.dll
DllMain
nlaapi.dll
NlaAddToTypeSet, NlaDeleteTypeSet, NlaDeleteDataSet, NlaRegisterQuery, NlaOpenQuery, NlaQueryNetData, NlaQueryNetDataEx, NlaCreateTypeSet, NlaQueryNetSignatures, NlaCloseQuery
nsi.dll
NsiSetAllParameters, NsiGetAllParameters
ntdll.dll
WinSqmIncrementDWORD, WinSqmAddToStreamEx, WinSqmIsOptedInEx, WinSqmSetDWORD, RtlPublishWnfStateData, NtDeleteWnfStateName, NtCreateWnfStateName, RtlInitializeCriticalSection, RtlDeleteCriticalSection, EtwEventWrite, EtwEventUnregister, EtwEventRegister, EtwUnregisterTraceGuids, EtwRegisterTraceGuidsW, RtlFreeHeap, RtlAllocateHeap, ZwAlpcCancelMessage, ZwAlpcSendWaitReceivePort, ZwAlpcConnectPort, RtlWaitOnAddress, TpAllocAlpcCompletion, RtlInitUnicodeString, AlpcGetMessageAttribute, RtlWakeAddressAll, TpWaitForAlpcCompletion, ZwAlpcDisconnectPort, ZwClose, TpReleaseAlpcCompletion, ZwAlpcQueryInformation, AlpcInitializeMessageAttribute, vDbgPrintEx, NtQueryInformationToken, EtwGetTraceEnableLevel, EtwGetTraceLoggerHandle, EtwTraceMessage, EtwGetTraceEnableFlags, RtlNtStatusToDosError
ole32.dll
CoTaskMemFree, StringFromCLSID, StringFromGUID2, CLSIDFromString
rpcrt4.dll
NdrServerCall2, RpcServerInqCallAttributesW, UuidFromStringW, RpcServerUnregisterIfEx, RpcEpUnregister, RpcEpRegisterW, RpcServerRegisterIfEx, RpcServerRegisterAuthInfoW, RpcBindingVectorFree, RpcServerInqDefaultPrincNameW, RpcServerInqBindings, RpcServerUseProtseqW, RpcStringFreeW, RpcStringBindingParseW, RpcBindingToStringBindingW, RpcAsyncCompleteCall, RpcAsyncAbortCall, RpcRevertToSelfEx, RpcImpersonateClient, NdrAsyncServerCall
user32.dll
GetSystemMetrics
userenv.dll
UnregisterGPNotification, RegisterGPNotification
wtsapi32.dll
WTSFreeMemoryExW, WTSEnumerateSessionsExW
Export table
CdeCancelOnDemandRequest
CdeCloseOnDemandRequestHandle
CdeGetEntireProfileList
CdeGetProfileList
CdeGetProfileListForInterface
CdeOpenOnDemandRequestHandle
CdeOpenOnDemandRequestHandleByWwanProfileName
CdeQueryOnDemandRequestStateInfo
CdeQueryParameter
CdeSetParameter
CdeStartOnDemandRequest
SvchostPushServiceGlobals
WcmSvcMain