Import table
advapi32.dll
GetTokenInformation, RegQueryValueA, RegOpenKeyA, OpenSCManagerW, OpenServiceW, QueryServiceStatus, StartServiceW, CloseServiceHandle, AllocateAndInitializeSid, SetEntriesInAclA, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, FreeSid, RegCreateKeyExW, DeregisterEventSource, ReportEventW, RegisterEventSourceA, RegisterServiceCtrlHandlerExW, SetServiceStatus, GetUserNameA, OpenProcessToken, RegSetValueExA, RegCreateKeyExA, RegOpenKeyExW, RegQueryValueExW, RegEnumValueW, OpenThreadToken, RevertToSelf, SetThreadToken, RegOpenKeyExA, RegQueryValueExA, RegCloseKey
api-ms-win-core-apiquery-l1-1-0.dll
ApiSetQueryApiSetPresence
api-ms-win-core-com-l1-1-0.dll
CoTaskMemAlloc, CoInitializeEx, CoUninitialize, CreateStreamOnHGlobal, GetHGlobalFromStream, CoCreateInstance, CoTaskMemRealloc, CoTaskMemFree
api-ms-win-core-com-l1-1-1.dll
GetHGlobalFromStream, CoInitializeEx, CoCreateInstance, CoTaskMemFree, CreateStreamOnHGlobal, CoTaskMemAlloc, CoUninitialize, CoTaskMemRealloc
api-ms-win-core-delayload-l1-1-1.dll
DelayLoadFailureHook, ResolveDelayLoadedAPI
api-ms-win-core-errorhandling-l1-1-1.dll
GetLastError, SetLastError, UnhandledExceptionFilter, SetUnhandledExceptionFilter
api-ms-win-core-file-l1-1-1.dll
FindNextFileW, GetFileAttributesW, FindFirstFileW, LocalFileTimeToFileTime, FileTimeToSystemTime, CompareFileTime, DeleteFileW, SetEndOfFile, CreateFileW, FindClose, RemoveDirectoryW, SetFilePointer, WriteFile, GetFileSizeEx, ReadFile, SetFileAttributesW, CreateDirectoryW
api-ms-win-core-file-l1-2-0.dll
GetFileSizeEx, WriteFile, CreateFileW, CompareFileTime, ReadFile, SetFileAttributesW, RemoveDirectoryW, DeleteFileW, SetFilePointer, SetEndOfFile, FindNextFileW, LocalFileTimeToFileTime, FindFirstFileW, CreateDirectoryW, FindClose, GetFileAttributesW
api-ms-win-core-file-l1-2-1.dll
ReadFile, SetFilePointer, CompareFileTime, WriteFile, CreateFileW, LocalFileTimeToFileTime, GetFileAttributesW, CreateDirectoryW, FindFirstFileW, FindNextFileW, SetFileAttributesW, RemoveDirectoryW, SetEndOfFile, DeleteFileW, FindClose, GetFileSizeEx
api-ms-win-core-handle-l1-1-0.dll
DuplicateHandle, CloseHandle
api-ms-win-core-heap-l1-1-0.dll
HeapAlloc, HeapFree, GetProcessHeap, HeapReAlloc
api-ms-win-core-heap-l1-2-0.dll
GetProcessHeap, HeapFree, HeapAlloc, HeapReAlloc
api-ms-win-core-heap-obsolete-l1-1-0.dll
GlobalLock, GlobalReAlloc, LocalAlloc, LocalFree, GlobalFree, GlobalUnlock, GlobalAlloc
api-ms-win-core-interlocked-l1-1-1.dll
InterlockedIncrement, InterlockedExchange, InterlockedDecrement, InterlockedPushEntrySList, InterlockedPopEntrySList, InterlockedCompareExchange, InitializeSListHead
api-ms-win-core-interlocked-l1-2-0.dll
InterlockedPopEntrySList, InterlockedIncrement, InterlockedPushEntrySList, InterlockedExchange, InterlockedDecrement, InitializeSListHead, InterlockedCompareExchange
api-ms-win-core-io-l1-1-1.dll
DeviceIoControl
api-ms-win-core-kernel32-legacy-l1-1-0.dll
RaiseFailFastException, LoadLibraryW
api-ms-win-core-kernel32-legacy-l1-1-1.dll
LoadLibraryW, RaiseFailFastException
api-ms-win-core-libraryloader-l1-1-1.dll
GetProcAddress, LoadLibraryExW, FreeLibrary, GetModuleHandleExA, LoadLibraryExA, GetModuleFileNameW
api-ms-win-core-libraryloader-l1-2-0.dll
GetModuleFileNameW, GetProcAddress, LoadLibraryExW, LoadLibraryExA, FreeLibrary, GetModuleHandleExA
api-ms-win-core-localization-l1-2-0.dll
IdnToAscii, FormatMessageW
api-ms-win-core-localization-l1-2-1.dll
FormatMessageW, IdnToAscii
api-ms-win-core-localization-obsolete-l1-1-0.dll
CompareStringA
api-ms-win-core-localization-obsolete-l1-2-0.dll
CompareStringA
api-ms-win-core-localregistry-l1-1-0.dll
RegCreateKeyExW, RegEnumKeyExW, RegQueryValueExW, RegOpenKeyExW, RegSetValueExA, RegCreateKeyExA, RegOpenKeyExA, RegQueryValueExA, RegCloseKey, RegGetValueA
api-ms-win-core-processenvironment-l1-1-1.dll
ExpandEnvironmentStringsW
api-ms-win-core-processenvironment-l1-2-0.dll
ExpandEnvironmentStringsW
api-ms-win-core-processthreads-l1-1-1.dll
GetCurrentProcess, OpenProcessToken, TerminateProcess, GetCurrentThread, OpenThreadToken, TlsAlloc, SetThreadToken, GetCurrentThreadId, ResumeThread, CreateThread, TlsFree, TlsGetValue, TlsSetValue, GetCurrentProcessId, IsProcessorFeaturePresent
api-ms-win-core-processthreads-l1-1-2.dll
TerminateProcess, OpenThreadToken, GetCurrentThread, OpenProcessToken, GetCurrentProcess, GetCurrentProcessId, TlsAlloc, GetCurrentThreadId, CreateThread, ResumeThread, TlsFree, TlsGetValue, TlsSetValue, SetThreadToken
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegOpenKeyExA, RegQueryValueExW, RegQueryValueExA, RegDeleteKeyExW, RegSetValueExA, RegGetValueW, RegCloseKey, RegCreateKeyExW, RegDeleteValueW, RegSetValueExW, RegOpenKeyExW, RegEnumKeyExW, RegCreateKeyExA, RegQueryInfoKeyA
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
StrCmpNICA, StrChrA, StrStrIA, StrCmpNW, StrStrA, StrChrW, StrCmpNCA
api-ms-win-core-string-l1-1-0.dll
WideCharToMultiByte, CompareStringW, MultiByteToWideChar
api-ms-win-core-string-l2-1-0.dll
CharLowerW
api-ms-win-core-string-obsolete-l1-1-0.dll
lstrcmpiW, lstrcmpA
api-ms-win-core-synch-l1-1-1.dll
InitializeSRWLock, WaitForMultipleObjectsEx, ReleaseSRWLockExclusive, ReleaseSRWLockShared, AcquireSRWLockExclusive, InitializeCriticalSection, DeleteCriticalSection, AcquireSRWLockShared, ResetEvent, WaitForSingleObject, CreateEventA, WaitForSingleObjectEx, InitOnceExecuteOnce, CreateEventW, EnterCriticalSection, LeaveCriticalSection, SetEvent, Sleep
api-ms-win-core-synch-l1-2-0.dll
InitializeSRWLock, ReleaseSRWLockExclusive, CreateEventW, WaitForSingleObject, WaitForSingleObjectEx, InitOnceExecuteOnce, ResetEvent, AcquireSRWLockShared, Sleep, SetEvent, AcquireSRWLockExclusive, ReleaseSRWLockShared, InitializeCriticalSection, CreateEventA, WaitForMultipleObjectsEx, CreateEventExA, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection
api-ms-win-core-sysinfo-l1-1-1.dll
GetSystemTimeAsFileTime, GetTickCount, GetNativeSystemInfo, GetTickCount64, SystemTimeToFileTime, GetSystemTime
api-ms-win-core-sysinfo-l1-2-0.dll
GetSystemTime, GetSystemTimeAsFileTime, GetTickCount, GetNativeSystemInfo, GetTickCount64
api-ms-win-core-sysinfo-l1-2-1.dll
GetNativeSystemInfo, GetTickCount, GetSystemTimeAsFileTime, GetSystemTime, GetTickCount64
api-ms-win-core-threadpool-l1-2-0.dll
WaitForThreadpoolTimerCallbacks, SubmitThreadpoolWork, CreateThreadpoolTimer, CloseThreadpoolWait, CreateThreadpoolWait, CloseThreadpoolCleanupGroup, CloseThreadpoolCleanupGroupMembers, CloseThreadpoolWork, CreateThreadpoolWork, CreateThreadpoolCleanupGroup, WaitForThreadpoolWorkCallbacks, SetThreadpoolTimer, CloseThreadpoolTimer, FreeLibraryWhenCallbackReturns, CallbackMayRunLong, SetThreadpoolWait, WaitForThreadpoolWaitCallbacks
api-ms-win-core-threadpool-legacy-l1-1-0.dll
UnregisterWaitEx, QueueUserWorkItem
api-ms-win-core-threadpool-private-l1-1-0.dll
RegisterWaitForSingleObjectEx
api-ms-win-core-timezone-l1-1-0.dll
SystemTimeToFileTime, FileTimeToSystemTime
api-ms-win-core-url-l1-1-0.dll
UrlCanonicalizeW, UrlCombineW, UrlUnescapeA
api-ms-win-eventing-classicprovider-l1-1-0.dll
TraceMessageVa
api-ms-win-eventing-provider-l1-1-0.dll
EventActivityIdControl, EventWriteTransfer, EventWrite, EventUnregister, EventRegister
api-ms-win-obsolete-localization-l1-1-0.dll
CompareStringA
api-ms-win-obsolete-shlwapi-l1-1-0.dll
StrStrIA, StrCmpNW, StrCmpNCA, StrChrW, StrStrA, StrCmpNICA, StrChrA
api-ms-win-security-base-l1-1-0.dll
RevertToSelf, GetTokenInformation, DuplicateToken, CheckTokenMembership, CopySid, CreateWellKnownSid
api-ms-win-security-base-l1-2-0.dll
GetTokenInformation, RevertToSelf, DuplicateToken, CreateWellKnownSid, CheckTokenMembership, CopySid, ImpersonateLoggedOnUser
api-ms-win-security-sddl-l1-1-0.dll
ConvertStringSecurityDescriptorToSecurityDescriptorW, ConvertSidToStringSidW
kernel32.dll
GetLocalTime, GetCurrentProcessId, LocalAlloc, LocalFree, GetProcessHeap, RegisterWaitForSingleObject, UnregisterWaitEx, GlobalLock, GlobalUnlock, GetTickCount, FormatMessageW, GetModuleFileNameW, InterlockedIncrement, CreateEventA, LoadLibraryA, GetModuleFileNameA, GetSystemInfo, TlsFree, OutputDebugStringA, GetCurrentThreadId, TlsSetValue, TlsAlloc, ResetEvent, CreateEventW, WaitForMultipleObjects, WaitForSingleObject, CompareStringW, GetCurrentThread, GetCurrentProcess, InterlockedDecrement, CloseHandle, GetVersionExA, GetModuleHandleW, GetSystemDirectoryW, lstrcmpiW, WriteFile, SetEndOfFile, SetFilePointer, CreateFileW, Sleep, QueryPerformanceCounter, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, TlsGetValue, HeapFree, GetModuleHandleA, RegSetValueExW, CreateThreadpoolCleanupGroup, CreateThreadpoolWork, SubmitThreadpoolWork, CallbackMayRunLong, CloseThreadpoolWork, CloseThreadpoolCleanupGroupMembers, CloseThreadpoolCleanupGroup, InitializeCriticalSectionAndSpinCount, CreateThreadpoolTimer, SetThreadpoolTimer, FreeLibraryWhenCallbackReturns, CloseThreadpoolTimer, GetDateFormatA, WaitForSingleObjectEx, GetTickCount64, LoadLibraryW, CompareFileTime, lstrcmpA, InitializeCriticalSection, DeleteCriticalSection, DelayLoadFailureHook, GetProcAddress, GetLastError, FreeLibrary, InterlockedCompareExchange, LoadLibraryExA, GlobalFree, GlobalAlloc, lstrlenW, InterlockedExchange, HeapReAlloc, HeapAlloc, SetLastError, lstrlenA, WideCharToMultiByte, EnterCriticalSection, LeaveCriticalSection, MultiByteToWideChar, FileTimeToSystemTime, LocalFileTimeToFileTime, SystemTimeToFileTime, GetSystemTime, CompareStringA, SetEvent, SetUnhandledExceptionFilter, InterlockedExchangeAdd, SetErrorMode, CreateIoCompletionPort, GetQueuedCompletionStatus, CreateThread, FreeLibraryAndExitThread, PostQueuedCompletionStatus, GetExitCodeThread, lstrcmpiA, GetComputerNameA, IsDBCSLeadByte, IsDBCSLeadByteEx, GetCPInfo, RtlMoveMemory, LocalReAlloc
msvcrt.dll
DllMain
ntdll.dll
EtwEventWrite, RtlGUIDFromString, EtwEventActivityIdControl, EtwEventRegister, EtwEventUnregister, EtwEventWriteTransfer, RtlDllShutdownInProgress, RtlMoveMemory, RtlIpv4AddressToStringExW, RtlIpv6AddressToStringExW, RtlNtStatusToDosError, RtlImageNtHeader, NtOpenFile, RtlIpv6StringToAddressExW, RtlIpv4StringToAddressExW, RtlConvertSidToUnicodeString, EtwUnregisterTraceGuids, EtwRegisterTraceGuidsA, EtwGetTraceEnableFlags, EtwGetTraceEnableLevel, EtwGetTraceLoggerHandle, RtlPublishWnfStateData, EtwRegisterTraceGuidsW, RtlGetVersion
rpcrt4.dll
I_RpcBindingInqTransportType, RpcRevertToSelf, RpcAsyncCompleteCall, RpcBindingVectorFree, RpcEpRegisterW, RpcServerUnregisterIf, RpcServerInqBindings, RpcServerRegisterIf2, RpcServerUseProtseqW, RpcRaiseException, RpcAsyncAbortCall, RpcServerTestCancel, RpcImpersonateClient, NdrAsyncServerCall, RpcBindingFree, RpcBindingSetAuthInfoExW, RpcStringFreeW, RpcBindingFromStringBindingW, RpcStringBindingComposeW, RpcAsyncCancelCall, RpcAsyncInitializeHandle, NdrAsyncClientCall
shlwapi.dll
StrCmpNIW, StrStrW, StrCmpIW, StrCmpW, StrRChrW, StrChrA, StrStrIA, SHGetValueA, StrToIntA, StrRChrA, UrlCombineA, UrlCanonicalizeA, StrStrA, UrlUnescapeA
user32.dll
MessageBoxA, IntersectRect, EqualRect, CreateWindowExA, SetWindowLongA, MsgWaitForMultipleObjects, UnregisterClassA, RegisterClassA, PostMessageA, GetWindowLongA, DefWindowProcA, DestroyWindow, PeekMessageA, TranslateMessage, DispatchMessageA, CharLowerA
Export table
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Private1
SvchostPushServiceGlobals
WinHttpAddRequestHeaders
WinHttpAutoProxySvcMain
WinHttpCheckPlatform
WinHttpCloseHandle
WinHttpConnect
WinHttpCrackUrl
WinHttpCreateProxyResolver
WinHttpCreateUrl
WinHttpDetectAutoProxyConfigUrl
WinHttpFreeProxyResult
WinHttpGetDefaultProxyConfiguration
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpGetProxyForUrlEx
WinHttpGetProxyResult
WinHttpOpen
WinHttpOpenRequest
WinHttpPalAcquireNextInterface
WinHttpPalAcquireNextInterfaceAsync
WinHttpPalCancelRequest
WinHttpPalCreateCmSessionReference
WinHttpPalCreateRequestCtx
WinHttpPalDllInit
WinHttpPalDllUnload
WinHttpPalFreeProxyInfo
WinHttpPalFreeRequestCtx
WinHttpPalGetProxyCreds
WinHttpPalGetProxyForCurrentInterface
WinHttpPalIsImplemented
WinHttpPalOnSendRequestComplete
WinHttpProbeConnectivity
WinHttpQueryAuthSchemes
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpQueryOption
WinHttpReadData
WinHttpReceiveResponse
WinHttpResetAutoProxy
WinHttpSaveProxyCredentials
WinHttpSendRequest
WinHttpSetCredentials
WinHttpSetDefaultProxyConfiguration
WinHttpSetOption
WinHttpSetStatusCallback
WinHttpSetTimeouts
WinHttpTimeFromSystemTime
WinHttpTimeToSystemTime
WinHttpWebSocketClose
WinHttpWebSocketCompleteUpgrade
WinHttpWebSocketQueryCloseStatus
WinHttpWebSocketReceive
WinHttpWebSocketSend
WinHttpWebSocketShutdown
WinHttpWriteData