Import table
api-ms-win-core-errorhandling-l1-1-0.dll
SetUnhandledExceptionFilter, GetLastError, UnhandledExceptionFilter
api-ms-win-core-file-l1-1-0.dll
CreateFileW, WriteFile, DeleteFileW, SetFilePointer
api-ms-win-core-handle-l1-1-0.dll
CloseHandle
api-ms-win-core-interlocked-l1-1-0.dll
InterlockedExchange, InterlockedCompareExchange
api-ms-win-core-io-l1-1-0.dll
DeviceIoControl
api-ms-win-core-libraryloader-l1-1-0.dll
GetProcAddress, LoadLibraryExA, FreeLibrary
api-ms-win-core-localregistry-l1-1-0.dll
RegCloseKey, RegQueryValueExW, RegOpenKeyExW, RegQueryValueExA, RegOpenKeyExA, RegNotifyChangeKeyValue
api-ms-win-core-misc-l1-1-0.dll
Sleep, LocalFree, LocalAlloc, lstrcmpA, lstrlenA, lstrcmpW
api-ms-win-core-processthreads-l1-1-0.dll
OpenThreadToken, SetThreadPriority, GetCurrentThread, GetCurrentThreadId, GetCurrentProcessId, TerminateProcess, GetCurrentProcess
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-string-l1-1-0.dll
MultiByteToWideChar
api-ms-win-core-synch-l1-1-0.dll
WaitForSingleObjectEx, DeleteCriticalSection, SetEvent, WaitForSingleObject, CreateEventW, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, ReleaseSemaphore, WaitForMultipleObjectsEx
api-ms-win-core-sysinfo-l1-1-0.dll
GetSystemDirectoryW, GetComputerNameExW, GetTickCount, GetSystemTimeAsFileTime, GetLocalTime
api-ms-win-security-base-l1-1-0.dll
GetLengthSid, EqualSid, AccessCheck
api-ms-win-service-core-l1-1-0.dll
SetServiceStatus
api-ms-win-service-management-l1-1-0.dll
CloseServiceHandle, OpenSCManagerW, OpenServiceW
api-ms-win-service-management-l2-1-0.dll
QueryServiceConfigW
api-ms-win-service-winsvc-l1-1-0.dll
QueryServiceStatus, RegisterServiceCtrlHandlerW
kernel32.dll
CreateSemaphoreW, CreateTimerQueue, ChangeTimerQueueTimer, CreateTimerQueueTimer, LocalHandle, LoadLibraryA, MoveFileW, DelayLoadFailureHook, RaiseException, DeleteTimerQueueTimer, LocalReAlloc, GetTimeZoneInformation, ExpandEnvironmentStringsW, RegQueryInfoKeyW, DeleteTimerQueue, LocalSize
msvcrt.dll
DllMain
ntdll.dll
RtlAcquireResourceShared, RtlInitString, RtlOemStringToUnicodeString, RtlInitializeResource, RtlDeleteResource, RtlEqualUnicodeString, RtlGetNtProductType, NtQuerySystemInformation, NtQuerySystemTime, RtlTimeToSecondsSince1980, RtlCompareMemory, RtlUpcaseUnicodeToOemN, NtDeviceIoControlFile, RtlCopyUnicodeString, RtlAppendUnicodeToString, NtQueryPerformanceCounter, NtCancelIoFile, RtlInitializeSid, RtlLengthRequiredSid, RtlSubAuthoritySid, RtlCopySid, RtlSubAuthorityCountSid, RtlDeleteSecurityObject, RtlLengthSid, RtlSetSaclSecurityDescriptor, RtlSetDaclSecurityDescriptor, RtlSetGroupSecurityDescriptor, RtlSetOwnerSecurityDescriptor, RtlCreateSecurityDescriptor, RtlAddAce, RtlCreateAcl, RtlNewSecurityObject, NtOpenProcessToken, RtlCompareMemoryUlong, NtSetInformationThread, NtFsControlFile, NtCreateFile, NtImpersonateAnonymousToken, NtOpenThreadToken, RtlInitAnsiString, RtlUnicodeToOemN, RtlxUnicodeStringToOemSize, NlsMbOemCodePageTag, NtOpenFile, RtlUpcaseUnicodeStringToOemString, RtlNtStatusToDosError, NtClose, RtlAcquireResourceExclusive, RtlReleaseResource, RtlInitUnicodeString, NtOpenEvent
rpcrt4.dll
RpcImpersonateClient, RpcRevertToSelf, NdrServerCall2, RpcServerUseProtseqEpW, RpcServerRegisterIfEx, RpcServerUnregisterIf, RpcBindingServerFromClient, RpcBindingToStringBindingW, RpcStringBindingParseW, RpcBindingFree, RpcStringFreeW
Export table
I_BrowserServerEnumForXactsrv
ServiceMain
SvchostPushServiceGlobals
