Import table
advapi32.dll
RegisterEventSourceW, CloseServiceHandle, QueryServiceConfigW, OpenServiceW, OpenSCManagerW, RegisterServiceCtrlHandlerW, RegCloseKey, RegQueryInfoKeyW, OpenThreadToken, AccessCheck, RegConnectRegistryW, LsaOpenPolicy, LsaQueryInformationPolicy, LsaFreeMemory, LsaClose, SetServiceStatus, ReportEventW, DeregisterEventSource, RegOpenKeyExW, RegQueryValueExW, QueryServiceStatus, RegNotifyChangeKeyValue, RegOpenKeyExA, RegQueryValueExA, GetLengthSid, EqualSid, ConvertStringSecurityDescriptorToSecurityDescriptorW
api-ms-win-core-delayload-l1-1-1.dll
ResolveDelayLoadedAPI, DelayLoadFailureHook
api-ms-win-core-errorhandling-l1-1-0.dll
SetUnhandledExceptionFilter, GetLastError, UnhandledExceptionFilter, RaiseException
api-ms-win-core-errorhandling-l1-1-1.dll
GetLastError, RaiseException, UnhandledExceptionFilter, SetUnhandledExceptionFilter
api-ms-win-core-file-l1-1-0.dll
CreateFileW, WriteFile, DeleteFileW, SetFilePointer
api-ms-win-core-file-l1-1-1.dll
CreateFileW, DeleteFileW, SetFilePointer, WriteFile
api-ms-win-core-file-l1-2-0.dll
SetFilePointer, CreateFileW, WriteFile, DeleteFileW
api-ms-win-core-file-l1-2-1.dll
CreateFileW, DeleteFileW, SetFilePointer, WriteFile
api-ms-win-core-file-l2-1-0.dll
MoveFileExW
api-ms-win-core-file-l2-1-1.dll
MoveFileExW
api-ms-win-core-handle-l1-1-0.dll
CloseHandle
api-ms-win-core-heap-obsolete-l1-1-0.dll
LocalFree, LocalSize, LocalAlloc, LocalReAlloc
api-ms-win-core-interlocked-l1-1-0.dll
InterlockedExchange, InterlockedCompareExchange, InterlockedDecrement, InterlockedIncrement
api-ms-win-core-interlocked-l1-2-0.dll
InterlockedDecrement, InterlockedCompareExchange, InterlockedIncrement, InterlockedExchange
api-ms-win-core-io-l1-1-0.dll
DeviceIoControl
api-ms-win-core-io-l1-1-1.dll
DeviceIoControl
api-ms-win-core-libraryloader-l1-1-0.dll
GetProcAddress, LoadLibraryExA, FreeLibrary
api-ms-win-core-libraryloader-l1-1-1.dll
GetProcAddress, LoadLibraryExW, FreeLibrary
api-ms-win-core-localregistry-l1-1-0.dll
RegCloseKey, RegQueryValueExW, RegOpenKeyExW, RegQueryValueExA, RegOpenKeyExA, RegNotifyChangeKeyValue
api-ms-win-core-misc-l1-1-0.dll
Sleep, LocalFree, LocalAlloc, lstrcmpA, lstrlenA, lstrcmpW
api-ms-win-core-processenvironment-l1-1-0.dll
ExpandEnvironmentStringsW
api-ms-win-core-processenvironment-l1-2-0.dll
ExpandEnvironmentStringsW
api-ms-win-core-processthreads-l1-1-0.dll
OpenThreadToken, SetThreadPriority, GetCurrentThread, GetCurrentThreadId, GetCurrentProcessId, TerminateProcess, GetCurrentProcess
api-ms-win-core-processthreads-l1-1-1.dll
GetCurrentThread, TerminateProcess, GetCurrentProcessId, GetCurrentThreadId, OpenThreadToken, SetThreadPriority, GetCurrentProcess
api-ms-win-core-processthreads-l1-1-2.dll
TerminateProcess, GetCurrentProcessId, GetCurrentThreadId, OpenThreadToken, GetCurrentProcess, SetThreadPriority, GetCurrentThread
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegQueryValueExW, RegOpenKeyExW, RegCloseKey, RegQueryInfoKeyW, RegNotifyChangeKeyValue, RegOpenKeyExA, RegQueryValueExA
api-ms-win-core-string-l1-1-0.dll
MultiByteToWideChar
api-ms-win-core-string-obsolete-l1-1-0.dll
lstrcmpA, lstrcmpW
api-ms-win-core-synch-l1-1-0.dll
WaitForSingleObjectEx, DeleteCriticalSection, SetEvent, WaitForSingleObject, CreateEventW, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, ReleaseSemaphore, WaitForMultipleObjectsEx
api-ms-win-core-synch-l1-1-1.dll
InitializeCriticalSection, WaitForSingleObjectEx, ReleaseSemaphore, WaitForSingleObject, DeleteCriticalSection, WaitForMultipleObjectsEx, CreateEventW, Sleep, LeaveCriticalSection, SetEvent, CreateSemaphoreExW, EnterCriticalSection
api-ms-win-core-synch-l1-2-0.dll
LeaveCriticalSection, EnterCriticalSection, WaitForSingleObject, ReleaseSemaphore, Sleep, WaitForMultipleObjectsEx, CreateSemaphoreExW, WaitForSingleObjectEx, DeleteCriticalSection, InitializeCriticalSection, SetEvent, CreateEventW
api-ms-win-core-sysinfo-l1-1-0.dll
GetSystemDirectoryW, GetComputerNameExW, GetTickCount, GetSystemTimeAsFileTime, GetLocalTime
api-ms-win-core-sysinfo-l1-1-1.dll
GetSystemTimeAsFileTime, GetTickCount, GetTimeZoneInformation, GetLocalTime, GetComputerNameExW, GetSystemDirectoryW
api-ms-win-core-sysinfo-l1-2-0.dll
GetSystemDirectoryW, GetSystemTimeAsFileTime, GetLocalTime, GetTickCount, GetComputerNameExW
api-ms-win-core-sysinfo-l1-2-1.dll
GetSystemDirectoryW, GetLocalTime, GetTickCount, GetComputerNameExW, GetSystemTimeAsFileTime
api-ms-win-core-threadpool-l1-1-1.dll
DeleteTimerQueueEx, CreateTimerQueueTimer, CreateTimerQueue, ChangeTimerQueueTimer, DeleteTimerQueueTimer
api-ms-win-core-threadpool-legacy-l1-1-0.dll
CreateTimerQueue, DeleteTimerQueueEx, CreateTimerQueueTimer, ChangeTimerQueueTimer, DeleteTimerQueueTimer
api-ms-win-core-timezone-l1-1-0.dll
GetTimeZoneInformation
api-ms-win-obsolete-kernel32-l1-1-0.dll
LocalSize
api-ms-win-obsolete-kernelbase-l1-1-0.dll
LocalReAlloc, lstrcmpA, LocalFree, LocalAlloc, lstrcmpW
api-ms-win-security-base-l1-1-0.dll
GetLengthSid, EqualSid, AccessCheck
api-ms-win-security-base-l1-2-0.dll
AccessCheck, EqualSid, GetLengthSid
api-ms-win-service-core-l1-1-0.dll
SetServiceStatus
api-ms-win-service-core-l1-1-1.dll
SetServiceStatus
api-ms-win-service-management-l1-1-0.dll
CloseServiceHandle, OpenSCManagerW, OpenServiceW
api-ms-win-service-management-l2-1-0.dll
QueryServiceConfigW
api-ms-win-service-winsvc-l1-1-0.dll
QueryServiceStatus, RegisterServiceCtrlHandlerW
api-ms-win-service-winsvc-l1-2-0.dll
RegisterServiceCtrlHandlerW, QueryServiceStatus
kernel32.dll
CreateSemaphoreW, CreateTimerQueue, ChangeTimerQueueTimer, CreateTimerQueueTimer, LocalHandle, LoadLibraryA, MoveFileW, DelayLoadFailureHook, RaiseException, DeleteTimerQueueTimer, LocalReAlloc, GetTimeZoneInformation, ExpandEnvironmentStringsW, RegQueryInfoKeyW, DeleteTimerQueue, LocalSize, MultiByteToWideChar, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, DisableThreadLibraryCalls, GetComputerNameExW, WaitForMultipleObjectsEx, DeleteCriticalSection, GetLastError, SetEvent, WaitForSingleObject, lstrcmpW, FreeLibrary, Sleep, GetProcAddress, LoadLibraryW, InitializeCriticalSection, CloseHandle, CreateEventW, SetThreadPriority, GetCurrentThread, LeaveCriticalSection, EnterCriticalSection, WaitForSingleObjectEx, lstrcpyA, LocalFree, LocalAlloc, GetSystemDirectoryW, SetFilePointer, CreateFileW, DeleteFileW, WriteFile, GetLocalTime, DeviceIoControl, lstrcpynA, lstrcmpA, lstrlenA, ReleaseSemaphore, InterlockedCompareExchange, InterlockedExchange
msvcrt.dll
DllMain
netapi32.dll
NetApiBufferFree, NetUseDel, RxNetServerEnum, I_NetNameCanonicalize, NetShareGetInfo, DsGetDcNameW, I_BrowserQueryOtherDomains, Netbios, NetAlertRaiseEx, NetApiBufferAllocate, NetpIsRemote, I_NetServerSetServiceBitsEx
netutils.dll
NetpIsRemote, NetapipBufferAllocate, NetpIsUncComputerNameValid, NetApiBufferAllocate, NetpwNameCanonicalize, NetApiBufferFree, NetpIsRemoteNameValid
ntdll.dll
RtlAcquireResourceShared, RtlInitString, RtlOemStringToUnicodeString, RtlInitializeResource, RtlDeleteResource, RtlEqualUnicodeString, RtlGetNtProductType, NtQuerySystemInformation, NtQuerySystemTime, RtlTimeToSecondsSince1980, RtlCompareMemory, RtlUpcaseUnicodeToOemN, NtDeviceIoControlFile, RtlCopyUnicodeString, RtlAppendUnicodeToString, NtQueryPerformanceCounter, NtCancelIoFile, RtlInitializeSid, RtlLengthRequiredSid, RtlSubAuthoritySid, RtlCopySid, RtlSubAuthorityCountSid, RtlDeleteSecurityObject, RtlLengthSid, RtlSetSaclSecurityDescriptor, RtlSetDaclSecurityDescriptor, RtlSetGroupSecurityDescriptor, RtlSetOwnerSecurityDescriptor, RtlCreateSecurityDescriptor, RtlAddAce, RtlCreateAcl, RtlNewSecurityObject, NtOpenProcessToken, RtlCompareMemoryUlong, NtSetInformationThread, NtFsControlFile, NtCreateFile, NtImpersonateAnonymousToken, NtOpenThreadToken, RtlInitAnsiString, RtlUnicodeToOemN, RtlxUnicodeStringToOemSize, NlsMbOemCodePageTag, NtOpenFile, RtlUpcaseUnicodeStringToOemString, RtlNtStatusToDosError, NtClose, RtlAcquireResourceExclusive, RtlReleaseResource, RtlInitUnicodeString, NtOpenEvent, DbgBreakPoint, RtlSetEnvironmentVariable, RtlExpandEnvironmentStrings_U, RtlCreateEnvironment, RtlDestroyEnvironment, NtCreateTimer, NtCancelTimer, NtSetTimer, RtlInitUnicodeStringEx, NtQueryInformationToken, RtlUnicodeStringToOemString, RtlFreeOemString
ole32.dll
CoCreateInstance, CoUninitialize, CoInitialize
rpcrt4.dll
RpcImpersonateClient, RpcRevertToSelf, NdrServerCall2, RpcServerUseProtseqEpW, RpcServerRegisterIfEx, RpcServerUnregisterIf, RpcBindingServerFromClient, RpcBindingToStringBindingW, RpcStringBindingParseW, RpcBindingFree, RpcStringFreeW, I_RpcExceptionFilter
Export table
I_BrowserServerEnumForXactsrv
ServiceMain
SvchostPushServiceGlobals