Import table
advapi32.dll
RegisterServiceCtrlHandlerExW, RegEnumValueW, RegNotifyChangeKeyValue, RegCloseKey, RegQueryInfoKeyW, RegQueryValueExW, RegOpenKeyExW, AccessCheck, MapGenericMask, GetSecurityInfo, EventUnregister, EventRegister, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, SetEntriesInAclW, GetSidSubAuthority, GetSidSubAuthorityCount, GetTokenInformation, OpenProcessToken, OpenThreadToken, CopySid, GetLengthSid, ConvertSidToStringSidW, EqualSid, CreateWellKnownSid, EventEnabled, EventWrite, SetServiceStatus, RevertToSelf
kernel32.dll
UnregisterWaitEx, FindResourceW, LoadResource, LockResource, LCMapStringW, CompareStringW, CompareStringOrdinal, MultiByteToWideChar, WideCharToMultiByte, LocalAlloc, GetSystemWindowsDirectoryW, GetModuleHandleW, GetProcAddress, RtlCaptureStackBackTrace, GetLocaleInfoW, GetModuleHandleExW, SetLastError, FindFirstFileW, FindClose, SetErrorMode, GetLastError, CreateFileTransactedW, WriteFile, QueueUserWorkItem, GlobalMemoryStatusEx, Sleep, DisableThreadLibraryCalls, FindCloseChangeNotification, FindFirstChangeNotificationW, WaitForSingleObject, CreateThread, WaitForMultipleObjectsEx, GetExitCodeThread, InterlockedExchange, InterlockedCompareExchange, OutputDebugStringA, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, RaiseException, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, CloseHandle, GetCurrentThread, LocalFree, CreateFileMappingW, InterlockedDecrement, MapViewOfFileEx, UnmapViewOfFile, VirtualAlloc, VirtualQuery, IsProcessorFeaturePresent, CreateEventW, WaitForSingleObjectEx, SetEvent, ResetEvent, GetEnvironmentVariableW, CreateFileW, GetFileInformationByHandle, ReadFile, GetSystemInfo, InterlockedIncrement
ktmw32.dll
CommitTransaction, CreateTransaction
msvcrt.dll
DllMain
ntdll.dll
RtlInitUnicodeString, NtClose, NtAlpcCancelMessage, NtAlpcAcceptConnectPort, AlpcGetMessageAttribute, NtAlpcSendWaitReceivePort, AlpcInitializeMessageAttribute, NtAlpcCreatePort, NtAlpcImpersonateClientOfPort
rpcrt4.dll
UuidCreate, RpcStringFreeW, UuidToStringW
Export table
ServiceMain
SvchostPushServiceGlobals