Import table
api-ms-win-core-delayload-l1-1-1.dll
ResolveDelayLoadedAPI, DelayLoadFailureHook
api-ms-win-core-errorhandling-l1-1-1.dll
GetLastError, UnhandledExceptionFilter, SetUnhandledExceptionFilter
api-ms-win-core-file-l1-2-0.dll
GetFileAttributesW, GetFinalPathNameByHandleW, CreateFileW, GetDriveTypeW
api-ms-win-core-handle-l1-1-0.dll
CloseHandle
api-ms-win-core-interlocked-l1-2-0.dll
InterlockedDecrement, InterlockedIncrement, InterlockedCompareExchange64
api-ms-win-core-processthreads-l1-1-1.dll
GetCurrentThreadId, TerminateProcess, GetCurrentProcess, GetProcessId, GetCurrentProcessId
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegGetValueW
api-ms-win-core-sysinfo-l1-2-0.dll
GetTickCount, GetSystemTimeAsFileTime
api-ms-win-core-threadpool-l1-2-0.dll
SetThreadpoolThreadMaximum, SetThreadpoolThreadMinimum, CreateThreadpoolCleanupGroup, CloseThreadpoolCleanupGroupMembers, CloseThreadpoolCleanupGroup, CloseThreadpool, SubmitThreadpoolWork, CreateThreadpoolWork, CloseThreadpoolWork, CreateThreadpool
api-ms-win-service-core-l1-1-1.dll
RegisterServiceCtrlHandlerExW, SetServiceStatus
apphelp.dll
ApphelpCheckRunAppEx, ApphelpDebugPrintf
kernel32.dll
GetVolumePathNameW, DisableThreadLibraryCalls, GetFileSize, GetModuleHandleW, GetProcAddress, CreateActCtxW, QueryActCtxW, ReleaseActCtx, FindFirstFileW, SetFilePointer, SetErrorMode, SetFilePointerEx, ReadFile, ExpandEnvironmentStringsW, GetFileTime, VirtualQuery, GetFileSizeEx, GetFileInformationByHandle, GetVolumeNameForVolumeMountPointW, CompareStringA, LocalAlloc, SetLastError, CompareStringW, IsDBCSLeadByte, LoadLibraryExW, FreeLibrary, lstrlenA, VirtualProtect, VirtualAlloc, GetLongPathNameW, VirtualFree, OutputDebugStringW, GetEnvironmentVariableW, FindNextFileW, FindClose, GetVolumeInformationW, UnregisterWaitEx, GetSystemWindowsDirectoryW, CreateFileMappingW, MapViewOfFile, UnmapViewOfFile, GetBinaryTypeW, CreateMutexW, WaitForSingleObject, ReleaseMutex, GetFileAttributesExW, LocalFree
msvcrt.dll
DllMain
ntdll.dll
EtwTraceMessage, RtlValidateHeap, RtlSizeHeap, RtlAdjustPrivilege, RtlNtStatusToDosError, RtlCheckTokenMembership, NtQueryValueKey, NtOpenKey, NtOpenFile, NtQueryInformationFile, RtlDeleteCriticalSection, EtwEventUnregister, EtwEventRegister, RtlInitializeCriticalSectionAndSpinCount, RtlLeaveCriticalSection, RtlEnterCriticalSection, NtWaitForSingleObject, NtCreateEvent, RtlExitUserThread, NtSetEvent, NtAlpcCancelMessage, AlpcInitializeMessageAttribute, NtAlpcAcceptConnectPort, NtResumeThread, RtlCreateUserThread, NtAlpcOpenSenderProcess, RtlFreeUnicodeString, RtlReleaseRelativeName, RtlDosPathNameToRelativeNtPathName_U, NtApphelpCacheControl, NtAlpcSendWaitReceivePort, NtAlpcCreatePort, AlpcMaxAllowedMessageLength, RtlInitUnicodeString, RtlFreeSid, RtlSetDaclSecurityDescriptor, RtlAddAccessAllowedAce, RtlCreateAcl, RtlCreateSecurityDescriptor, RtlLengthSid, RtlAllocateAndInitializeSid, EtwEventWrite, NtClose, AlpcGetMessageAttribute, RtlFreeHeap, RtlGetVersion, RtlImageRvaToVa, RtlImageDirectoryEntryToData, RtlAppendUnicodeToString, RtlAppendUnicodeStringToString, DbgPrintEx, RtlFormatCurrentUserKeyPath, RtlDowncaseUnicodeString, NlsMbCodePageTag, NtQueryKey, NtEnumerateValueKey, RtlExpandEnvironmentStrings_U, RtlAnsiStringToUnicodeString, NtMapViewOfSection, NtQuerySystemInformation, RtlInitAnsiString, RtlInitString, LdrGetDllHandle, NtQueryInformationProcess, NtQueryDirectoryFile, NtUnmapViewOfSection, RtlQueryEnvironmentVariable_U, RtlxAnsiStringToUnicodeSize, NtCreateFile, RtlGetNativeSystemInformation, RtlUnicodeStringToInteger, RtlDoesFileExists_U, RtlGetFullPathName_U, NtCreateSection, LdrGetProcedureAddressEx, RtlDosPathNameToNtPathName_U, RtlUnicodeStringToAnsiString, RtlFreeAnsiString, LdrResSearchResource, LdrResFindResource, RtlUpcaseUnicodeString, RtlCopyUnicodeString, RtlUpcaseUnicodeChar, RtlUpcaseUnicodeToMultiByteN, RtlGUIDFromString, RtlAllocateHeap
Export table
ServiceMain
SvchostPushServiceGlobals
