Import table
advapi32.dll
RegQueryInfoKeyW, RegEnumKeyExW, CryptDestroyKey, CryptDecrypt, CryptSetKeyParam, CryptImportKey, RegOpenKeyW, RegDeleteKeyW, DuplicateTokenEx, ImpersonateLoggedOnUser, RevertToSelf, GetTokenInformation, RegEnumValueW, OpenThreadToken, RegisterServiceCtrlHandlerExW, SetServiceStatus, CryptAcquireContextW, CryptGenRandom, CryptReleaseContext, RegCreateKeyExW, RegEnumKeyW, RegDeleteValueW, RegOpenKeyExW, RegCloseKey, RegSetValueExW, RegQueryValueExW
crypt32.dll
CryptProtectData, CryptUnprotectData, CertFreeCertificateContext, CryptFindOIDInfo, CertOpenStore, CertGetCertificateContextProperty, CertGetNameStringW, CryptDecodeObjectEx, CertGetEnhancedKeyUsage, CertCloseStore, CertFindCertificateInStore
dhcpcsvc.dll
DhcpNotifyMediaReconnected, DhcpReleaseParameters, DhcpStaticRefreshParams
dot3api.dll
Dot3QueryGUIDNCSState
eapolqec.dll
EapolQecInitialize, EapolQecGetSoH, EapolQecUninitialize, EapolQecCreateConnection, EapolQecDeleteConnection, EapolQecSetQuarantineEnabled, EapolQecIndicateSoHResponseList
esent.dll
JetInit, JetEndSession, JetTerm2, JetAttachDatabase, JetSetSystemParameter, JetCreateInstance, JetBeginTransaction, JetRollback, JetCommitTransaction, JetPrepareUpdate, JetOpenDatabase, JetCreateDatabase, JetSeek, JetMakeKey, JetSetCurrentIndex, JetUpdate, JetSetColumn, JetMove, JetCreateIndex, JetAddColumn, JetCreateTable, JetGetTableColumnInfo, JetBeginSession, JetDeleteTable, JetCloseTable, JetRetrieveColumn, JetOpenTable
kernel32.dll
WriteFile, LoadLibraryW, DeleteTimerQueue, ResetEvent, GetStringTypeExW, GetThreadLocale, lstrcmpW, lstrlenW, DebugBreak, CreateFileW, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetProcAddress, FreeLibrary, WaitForSingleObject, CreateEventW, UnregisterWait, Sleep, GetUserDefaultLCID, lstrlenA, OutputDebugStringW, CreateFileA, CloseHandle, GetLastError, SetEvent, GetSystemTimeAsFileTime, LocalAlloc, SetLastError, FormatMessageW, ExpandEnvironmentStringsW, LoadLibraryExW, WideCharToMultiByte, MultiByteToWideChar, LocalFree, ChangeTimerQueueTimer, CreateTimerQueueTimer, DeleteTimerQueueTimer, DeleteTimerQueueEx, CreateTimerQueue, BindIoCompletionCallback, HeapAlloc, InterlockedCompareExchange, InterlockedExchange, GetCurrentThread, ReadFile, GetProcessHeap, HeapFree, InterlockedIncrement, QueueUserWorkItem, InterlockedDecrement, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, DeviceIoControl, GetUserDefaultUILanguage, CompareFileTime, SystemTimeToFileTime, GetLocalTime, VerifyVersionInfoW, CreateThread, WaitForMultipleObjects, InitializeCriticalSection, FileTimeToLocalFileTime, FileTimeToSystemTime, GetDateFormatW, GetTimeFormatW
msvcrt.dll
DllMain
netapi32.dll
DsGetDcNameW, NetApiBufferFree
ntdll.dll
RtlInitUnicodeString, RtlNtStatusToDosError, VerSetConditionMask, NtDuplicateToken, NtOpenFile, RtlInitializeSid, RtlLengthRequiredSid, RtlSubAuthoritySid, RtlCopySid, RtlSubAuthorityCountSid, RtlDeleteSecurityObject, RtlLengthSid, RtlSetSaclSecurityDescriptor, RtlSetDaclSecurityDescriptor, RtlSetGroupSecurityDescriptor, RtlSetOwnerSecurityDescriptor, RtlCreateSecurityDescriptor, RtlAddAce, RtlCreateAcl, NtClose, RtlNewSecurityObject, NtOpenProcessToken, NtAccessCheckAndAuditAlarm, RtlAdjustPrivilege, RtlConvertSidToUnicodeString, NtConnectPort, NtCreateSection, NtRequestWaitReplyPort, RtlCompareMemory
ole32.dll
CoInitializeEx, StringFromGUID2, CLSIDFromString, CoCreateInstance, CoUninitialize, CoTaskMemFree
rpcrt4.dll
RpcBindingSetAuthInfoExW, RpcBindingFromStringBindingW, NdrClientCall2, RpcRevertToSelf, RpcImpersonateClient, RpcRevertToSelfEx, RpcServerUseProtseqEpW, RpcBindingFree, NdrServerCall2, RpcStringFreeW, RpcStringBindingParseW, RpcBindingToStringBindingW, UuidToStringW, RpcServerRegisterIfEx, RpcServerRegisterAuthInfoW, RpcServerListen, RpcServerUnregisterIfEx
rtutils.dll
RouterLogRegisterW, TraceVprintfExA, TraceDeregisterW, TraceRegisterExW, TracePrintfExA, RouterLogDeregisterW, RouterLogEventW, TraceDumpExW, TraceDeregisterA, TraceDumpExA
secur32.dll
GetUserNameExW
shlwapi.dll
SHDeleteKeyW
user32.dll
UnregisterDeviceNotification, wsprintfW, CharNextW, RegisterDeviceNotificationA, GetSystemMetrics, OemToCharBuffA, CharLowerW, wvsprintfW, LoadStringW
winsta.dll
WinStationQueryInformationW
wmi.dll
WmiNotificationRegistrationW
wtsapi32.dll
WTSQueryUserToken, WTSFreeMemory, WTSEnumerateSessionsW
Export table
SvchostPushServiceGlobals
WZCQueryGUIDNCSState
WZCSvcMain
WZCTrayIconReady
