wkssvc.dll

v10.0.19041.5072 64-bit Windows NT Analyzed
Download
Description
Workstation Service DLL
Authors
© Microsoft Corporation. All rights reserved.
File size
296.0 KB
Uploaded
2025-12-01 07:44
Views
80
SHA-256
52c82df82a03eb5613ef3361e7e64d6e

Exported functions 2

ServiceMain #1 · 0x1f600
SvchostPushServiceGlobals #2 · 0x1f920

Imported DLLs & functions 282

api-ms-win-core-apiquery-l1-1-0.dll 1
ApiSetQueryApiSetPresence 0x1800324c8
api-ms-win-core-debug-l1-1-0.dll 1
IsDebuggerPresent 0x1800324d8
api-ms-win-core-delayload-l1-1-0.dll 1
DelayLoadFailureHook 0x1800324e8
api-ms-win-core-delayload-l1-1-1.dll 1
ResolveDelayLoadedAPI 0x1800324f8
api-ms-win-core-errorhandling-l1-1-0.dll 4
GetLastError 0x180032518
SetLastError 0x180032510
SetUnhandledExceptionFilter 0x180032520
UnhandledExceptionFilter 0x180032508
api-ms-win-core-file-l1-1-0.dll 3
CreateFileW 0x180032530
DefineDosDeviceW 0x180032540
QueryDosDeviceW 0x180032538
api-ms-win-core-handle-l1-1-0.dll 1
CloseHandle 0x180032550
api-ms-win-core-heap-l1-1-0.dll 3
GetProcessHeap 0x180032570
HeapAlloc 0x180032568
HeapFree 0x180032560
api-ms-win-core-heap-l2-1-0.dll 5
LocalAlloc 0x180032590
LocalFree 0x1800325a0
LocalLock 0x180032598
LocalReAlloc 0x180032588
LocalUnlock 0x180032580
api-ms-win-core-interlocked-l1-1-0.dll 1
InitializeSListHead 0x1800325b0
api-ms-win-core-io-l1-1-0.dll 3
CreateIoCompletionPort 0x1800325c0
GetQueuedCompletionStatus 0x1800325d0
PostQueuedCompletionStatus 0x1800325c8
api-ms-win-core-kernel32-legacy-l1-1-0.dll 3
AddLocalAlternateComputerNameW 0x1800325f0
DnsHostnameToComputerNameW 0x1800325e8
RegisterWaitForSingleObject 0x1800325e0
api-ms-win-core-kernel32-private-l1-1-0.dll 4
DosPathToSessionPathW 0x180032608
EnumerateLocalComputerNamesW 0x180032600
RemoveLocalAlternateComputerNameW 0x180032610
SetLocalPrimaryComputerNameW 0x180032618
api-ms-win-core-libraryloader-l1-2-0.dll 5
DisableThreadLibraryCalls 0x180032638
FreeLibrary 0x180032648
GetModuleFileNameW 0x180032628
GetModuleHandleExW 0x180032630
GetProcAddress 0x180032640
api-ms-win-core-processthreads-l1-1-0.dll 8
CreateThread 0x180032660
GetCurrentProcess 0x180032690
GetCurrentProcessId 0x180032680
GetCurrentThread 0x180032658
GetCurrentThreadId 0x180032668
OpenThreadToken 0x180032678
SetThreadToken 0x180032670
TerminateProcess 0x180032688
api-ms-win-core-processthreads-l1-1-1.dll 2
GetProcessMitigationPolicy 0x1800326a8
IsProcessorFeaturePresent 0x1800326a0
api-ms-win-core-profile-l1-1-0.dll 1
QueryPerformanceCounter 0x1800326b8
api-ms-win-core-registry-l1-1-0.dll 11
RegCloseKey 0x1800326f8
RegCreateKeyExW 0x1800326e0
RegDeleteKeyExW 0x1800326c8
RegEnumKeyExW 0x180032708
RegFlushKey 0x1800326d8
RegGetValueW 0x1800326d0
RegNotifyChangeKeyValue 0x180032718
RegOpenKeyExW 0x1800326e8
RegQueryInfoKeyW 0x180032710
RegQueryValueExW 0x1800326f0
RegSetValueExW 0x180032700
api-ms-win-core-rtlsupport-l1-1-0.dll 4
RtlCaptureContext 0x180032730
RtlCompareMemory 0x180032738
RtlLookupFunctionEntry 0x180032728
RtlVirtualUnwind 0x180032740
api-ms-win-core-string-obsolete-l1-1-0.dll 1
lstrcmpW 0x180032750
api-ms-win-core-synch-l1-1-0.dll 10
CreateEventW 0x180032770
DeleteCriticalSection 0x180032760
EnterCriticalSection 0x1800327a8
InitializeCriticalSection 0x180032788
LeaveCriticalSection 0x180032780
OpenEventW 0x180032790
ResetEvent 0x180032778
SetEvent 0x180032768
WaitForMultipleObjectsEx 0x180032798
WaitForSingleObject 0x1800327a0
api-ms-win-core-sysinfo-l1-1-0.dll 7
GetComputerNameExW 0x1800327d0
GetLocalTime 0x1800327e8
GetSystemTimeAsFileTime 0x1800327b8
GetTickCount64 0x1800327c0
GetVersion 0x1800327d8
GetVersionExW 0x1800327c8
GlobalMemoryStatusEx 0x1800327e0
api-ms-win-core-threadpool-l1-2-0.dll 11
CloseThreadpoolCleanupGroup 0x180032820
CloseThreadpoolCleanupGroupMembers 0x180032818
CloseThreadpoolTimer 0x180032838
CloseThreadpoolWait 0x180032810
CreateThreadpoolCleanupGroup 0x180032840
CreateThreadpoolWait 0x180032800
SetThreadpoolTimer 0x180032828
SetThreadpoolWait 0x1800327f8
TrySubmitThreadpoolCallback 0x180032848
WaitForThreadpoolTimerCallbacks 0x180032830
WaitForThreadpoolWaitCallbacks 0x180032808
api-ms-win-core-threadpool-legacy-l1-1-0.dll 1
UnregisterWaitEx 0x180032858
api-ms-win-crt-private-l1-1-0.dll 35
__C_specific_handler 0x180032960
__CxxFrameHandler4 0x180032918
__std_terminate 0x180032910
_CxxThrowException 0x180032900
_o___std_exception_copy 0x180032958
_o___std_exception_destroy 0x180032950
_o___std_type_info_destroy_list 0x180032948
_o___stdio_common_vswprintf 0x180032938
_o__callnewh 0x180032930
_o__cexit 0x180032928
_o__configure_narrow_argv 0x180032920
_o__errno 0x1800328f8
_o__execute_onexit_table 0x1800328f0
_o__initialize_narrow_environment 0x180032868
_o__initialize_onexit_table 0x180032870
_o__invalid_parameter_noinfo 0x180032878
_o__invalid_parameter_noinfo_noreturn 0x180032880
_o__itow_s 0x180032888
_o__seh_filter_dll 0x180032890
_o__wcsicmp 0x180032940
_o__wcsnicmp 0x180032898
_o_free 0x1800328a8
_o_iswalpha 0x1800328b0
_o_malloc 0x1800328b8
_o_tolower 0x1800328c0
_o_towupper 0x1800328c8
_o_wcscat_s 0x1800328d0
_o_wcscpy_s 0x1800328d8
_o_wcsncpy_s 0x1800328e0
_o_wcstoul 0x1800328e8
memcmp 0x180032970
memcpy 0x180032978
memmove 0x1800328a0
wcschr 0x180032968
wcsstr 0x180032908
api-ms-win-crt-runtime-l1-1-0.dll 2
_initterm 0x180032990
_initterm_e 0x180032988
api-ms-win-crt-string-l1-1-0.dll 3
memset 0x1800329a0
wcscmp 0x1800329a8
wcsspn 0x1800329b0
api-ms-win-eventing-classicprovider-l1-1-0.dll 6
GetTraceEnableFlags 0x1800329c0
GetTraceEnableLevel 0x1800329c8
GetTraceLoggerHandle 0x1800329d0
RegisterTraceGuidsW 0x1800329e0
TraceMessage 0x1800329d8
UnregisterTraceGuids 0x1800329e8
api-ms-win-eventing-provider-l1-1-0.dll 3
EventRegister 0x1800329f8
EventUnregister 0x180032a08
EventWriteTransfer 0x180032a00
api-ms-win-security-activedirectoryclient-l1-1-0.dll 8
DsBindWithSpnExW 0x180032a18
DsCrackNamesW 0x180032a38
DsFreeDomainControllerInfoW 0x180032a40
DsFreeNameResultW 0x180032a28
DsFreePasswordCredentials 0x180032a30
DsGetDomainControllerInfoW 0x180032a50
DsMakePasswordCredentialsW 0x180032a20
DsUnBindW 0x180032a48
api-ms-win-security-base-l1-1-0.dll 4
CheckTokenMembership 0x180032a68
CreateWellKnownSid 0x180032a70
PrivilegeCheck 0x180032a78
RevertToSelf 0x180032a60
api-ms-win-security-lsalookup-l1-1-0.dll 4
LsaLookupClose 0x180032a90
LsaLookupFreeMemory 0x180032a98
LsaLookupGetDomainInfo 0x180032a88
LsaLookupOpenLocalPolicy 0x180032aa0
api-ms-win-service-core-l1-1-0.dll 2
RegisterServiceCtrlHandlerExW 0x180032ab8
SetServiceStatus 0x180032ab0
api-ms-win-service-private-l1-1-0.dll 1
I_ScSetServiceBitsW 0x180032ac8
api-ms-win-stateseparation-helpers-l1-1-0.dll 1
GetPersistedRegistryLocationW 0x180032ad8
bcrypt.dll 12
BCryptCloseAlgorithmProvider 0x180032b18
BCryptCreateHash 0x180032b38
BCryptDecrypt 0x180032b00
BCryptDestroyHash 0x180032b10
BCryptDestroyKey 0x180032b20
BCryptEncrypt 0x180032b08
BCryptFinishHash 0x180032b28
BCryptGenerateSymmetricKey 0x180032b40
BCryptGetProperty 0x180032af0
BCryptHashData 0x180032b30
BCryptOpenAlgorithmProvider 0x180032ae8
BCryptSetProperty 0x180032af8
DSPARSE.dll 1
DsMakeSpnW 0x180032360
msvcp_win.dll 1
?_Xlength_error@std@@YAXPEBD@Z 0x180032b50
netutils.dll 7
NetApiBufferAllocate 0x180032b80
NetApiBufferFree 0x180032b90
NetpwListCanonicalize 0x180032b70
NetpwListTraverse 0x180032b68
NetpwNameCanonicalize 0x180032b88
NetpwPathCanonicalize 0x180032b60
NetpwPathType 0x180032b78
ntdll.dll 59
DbgPrint 0x180032cf8
NtAccessCheckAndAuditAlarm 0x180032c78
NtClose 0x180032c68
NtCreateEvent 0x180032d20
NtCreateFile 0x180032bd8
NtDeviceIoControlFile 0x180032c88
NtFsControlFile 0x180032c60
NtOpenFile 0x180032c58
NtOpenProcessToken 0x180032ce0
NtOpenThreadToken 0x180032ba0
NtQueryInformationFile 0x180032c28
NtQueryInformationToken 0x180032c50
NtQueryVolumeInformationFile 0x180032be8
RtlAcquireResourceExclusive 0x180032c38
RtlAcquireResourceShared 0x180032bb0
RtlAddAce 0x180032cb0
RtlAdjustPrivilege 0x180032c70
RtlAppendUnicodeStringToString 0x180032bc8
RtlAppendUnicodeToString 0x180032bd0
RtlCompareUnicodeString 0x180032bb8
RtlCopyLuid 0x180032ba8
RtlCopySid 0x180032c98
RtlCreateAcl 0x180032ca8
RtlCreateSecurityDescriptor 0x180032cb8
RtlDeleteElementGenericTable 0x180032d18
RtlDeleteResource 0x180032d60
RtlDeleteSecurityObject 0x180032cf0
RtlDeregisterWait 0x180032d28
RtlDeregisterWaitEx 0x180032d10
RtlEnumerateGenericTable 0x180032d40
RtlGetNtProductType 0x180032c18
RtlHashUnicodeString 0x180032d70
RtlInitializeGenericTable 0x180032d00
RtlInitializeResource 0x180032d68
RtlInitString 0x180032d58
RtlInitUnicodeString 0x180032c20
RtlInsertElementGenericTable 0x180032d30
RtlIpv4AddressToStringExW 0x180032c80
RtlIpv4AddressToStringW 0x180032c30
RtlIpv4StringToAddressW 0x180032bf8
RtlIpv6AddressToStringExW 0x180032be0
RtlIpv6AddressToStringW 0x180032c10
RtlIpv6StringToAddressW 0x180032bf0
RtlLengthSid 0x180032ca0
RtlLookupElementGenericTable 0x180032d38
RtlMapSecurityErrorToNtStatus 0x180032c90
RtlNewSecurityObject 0x180032ce8
RtlNtStatusToDosError 0x180032d08
RtlRegisterWait 0x180032d50
RtlReleaseResource 0x180032c40
RtlRunDecodeUnicodeString 0x180032c00
RtlRunEncodeUnicodeString 0x180032c08
RtlSetDaclSecurityDescriptor 0x180032cd0
RtlSetGroupSecurityDescriptor 0x180032cc8
RtlSetOwnerSecurityDescriptor 0x180032cc0
RtlSetSaclSecurityDescriptor 0x180032cd8
RtlValidRelativeSecurityDescriptor 0x180032c48
WinSqmIsOptedIn 0x180032d48
WinSqmSetDWORD 0x180032bc0
RPCRT4.dll 37
I_RpcBindingIsClientLocal 0x180032468
I_RpcExceptionFilter 0x180032428
I_RpcMapWin32Status 0x180032380
Ndr64AsyncClientCall 0x180032440
Ndr64AsyncServerCallAll 0x180032410
NdrAsyncServerCall 0x180032378
NdrClientCall3 0x180032448
NdrServerCall2 0x1800323b8
NdrServerCallAll 0x180032408
RpcAsyncAbortCall 0x180032388
RpcAsyncCancelCall 0x180032470
RpcAsyncCompleteCall 0x1800323a8
RpcAsyncInitializeHandle 0x180032460
RpcBindingFree 0x1800323f0
RpcBindingFromStringBindingW 0x180032438
RpcBindingServerFromClient 0x1800323e0
RpcBindingSetAuthInfoExW 0x180032478
RpcBindingSetOption 0x180032450
RpcBindingToStringBindingW 0x180032390
RpcBindingVectorFree 0x180032370
RpcEpRegisterW 0x180032400
RpcEpResolveBinding 0x180032480
RpcEpUnregister 0x1800323f8
RpcImpersonateClient 0x1800323d0
RpcMgmtSetComTimeout 0x180032488
RpcRevertToSelf 0x180032458
RpcServerInqBindings 0x180032420
RpcServerInqCallAttributesW 0x180032418
RpcServerRegisterIfEx 0x1800323c8
RpcServerTestCancel 0x1800323e8
RpcServerUnregisterIf 0x1800323a0
RpcServerUnregisterIfEx 0x180032430
RpcServerUseProtseqEpW 0x1800323d8
RpcServerUseProtseqW 0x180032398
RpcStringBindingComposeW 0x180032490
RpcStringBindingParseW 0x1800323c0
RpcStringFreeW 0x1800323b0
USERENV.dll 4
EnterCriticalPolicySection 0x1800324a0
LeaveCriticalPolicySection 0x1800324b0
RegisterGPNotification 0x1800324a8
UnregisterGPNotification 0x1800324b8