Import table
advapi32.dll
SetServiceStatus, RegEnumValueW, RegNotifyChangeKeyValue, RegCloseKey, RegQueryInfoKeyW, RegQueryValueExW, RegOpenKeyExW, AccessCheck, MapGenericMask, GetSecurityInfo, EventUnregister, EventRegister, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, SetEntriesInAclW, GetSidSubAuthority, GetSidSubAuthorityCount, GetTokenInformation, OpenProcessToken, OpenThreadToken, CopySid, GetLengthSid, ConvertSidToStringSidW, EqualSid, EventEnabled, EventWrite, RegisterServiceCtrlHandlerExW, RevertToSelf, CreateWellKnownSid, IsWellKnownSid, GetAce, GetAclInformation, GetSecurityDescriptorDacl, AddAccessAllowedAce, InitializeAcl, GetFileSecurityW
api-ms-win-core-debug-l1-1-1.dll
OutputDebugStringA
api-ms-win-core-errorhandling-l1-1-0.dll
GetLastError, SetErrorMode, UnhandledExceptionFilter, RaiseException, SetUnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll
SetErrorMode, SetUnhandledExceptionFilter, RaiseException, UnhandledExceptionFilter, GetLastError
api-ms-win-core-file-l1-1-1.dll
FindFirstFileW, ReadFile, FindFirstChangeNotificationW, GetFileInformationByHandle, CreateFileW, DeleteFileW, FindNextFileW, FindCloseChangeNotification, FindClose
api-ms-win-core-file-l1-2-0.dll
GetFileInformationByHandle, CreateFileW, FindFirstChangeNotificationW, ReadFile, FindFirstFileW, DeleteFileW, FlushFileBuffers, FindNextFileW, FindClose, FindCloseChangeNotification
api-ms-win-core-file-l1-2-1.dll
FindNextFileW, FindClose, DeleteFileW, FindFirstFileW, CreateFileW, GetFileInformationByHandle, ReadFile, FlushFileBuffers, FindFirstChangeNotificationW, FindCloseChangeNotification
api-ms-win-core-file-l2-1-0.dll
MoveFileExW
api-ms-win-core-file-l2-1-1.dll
MoveFileExW
api-ms-win-core-handle-l1-1-0.dll
DuplicateHandle, CloseHandle
api-ms-win-core-interlocked-l1-1-0.dll
InterlockedExchange, InterlockedCompareExchange, InterlockedDecrement, InterlockedIncrement
api-ms-win-core-interlocked-l1-1-1.dll
InterlockedExchange, InterlockedDecrement, InterlockedCompareExchange, InterlockedIncrement
api-ms-win-core-interlocked-l1-2-0.dll
InterlockedCompareExchange, InterlockedExchange, InterlockedDecrement, InterlockedIncrement
api-ms-win-core-libraryloader-l1-1-1.dll
LoadResource, GetProcAddress, GetModuleHandleW, FreeLibraryAndExitThread, DisableThreadLibraryCalls, FreeLibrary, LockResource, FindResourceExW, GetModuleHandleExW
api-ms-win-core-libraryloader-l1-2-0.dll
GetModuleHandleW, GetProcAddress, FindResourceExW, LockResource, FreeLibrary, LoadResource, GetModuleHandleExW, FreeLibraryAndExitThread, DisableThreadLibraryCalls
api-ms-win-core-localization-l1-1-1.dll
LocaleNameToLCID, GetSystemDefaultLCID, LCMapStringW
api-ms-win-core-localization-l1-2-0.dll
LocaleNameToLCID, LCMapStringW, GetSystemDefaultLCID
api-ms-win-core-localization-l1-2-1.dll
LocaleNameToLCID, GetSystemDefaultLCID, LCMapStringW
api-ms-win-core-localization-obsolete-l1-1-0.dll
LCIDToLocaleName
api-ms-win-core-localization-obsolete-l1-2-0.dll
LCIDToLocaleName
api-ms-win-core-memory-l1-1-1.dll
FlushViewOfFile, UnmapViewOfFile, MapViewOfFileEx, VirtualAlloc, CreateFileMappingW
api-ms-win-core-memory-l1-1-2.dll
CreateFileMappingW, MapViewOfFileEx, FlushViewOfFile, UnmapViewOfFile, VirtualAlloc, VirtualFree
api-ms-win-core-processenvironment-l1-1-0.dll
GetEnvironmentVariableW
api-ms-win-core-processenvironment-l1-1-1.dll
GetEnvironmentVariableW
api-ms-win-core-processenvironment-l1-2-0.dll
GetEnvironmentVariableW
api-ms-win-core-processthreads-l1-1-1.dll
IsProcessorFeaturePresent, GetCurrentProcessId, GetExitCodeThread, GetCurrentProcess, TerminateProcess, OpenThreadToken, OpenProcessToken, CreateThread, GetCurrentThread, GetCurrentThreadId
api-ms-win-core-processthreads-l1-1-2.dll
GetCurrentThreadId, CreateThread, GetCurrentProcessId, OpenProcessToken, GetCurrentProcess, TerminateProcess, GetCurrentThread, GetExitCodeThread, OpenThreadToken
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegEnumValueW, RegNotifyChangeKeyValue, RegQueryValueExW, RegCloseKey, RegOpenKeyExW
api-ms-win-core-string-l1-1-0.dll
WideCharToMultiByte, CompareStringOrdinal, CompareStringW, MultiByteToWideChar
api-ms-win-core-synch-l1-1-1.dll
LeaveCriticalSection, WaitForSingleObjectEx, SetEvent, Sleep, InitializeCriticalSection, DeleteCriticalSection, ResetEvent, WaitForMultipleObjectsEx, WaitForSingleObject, EnterCriticalSection, CreateEventW
api-ms-win-core-synch-l1-2-0.dll
CreateEventW, DeleteCriticalSection, WaitForMultipleObjectsEx, ResetEvent, Sleep, SetEvent, WaitForSingleObjectEx, LeaveCriticalSection, InitializeCriticalSection, EnterCriticalSection, WaitForSingleObject
api-ms-win-core-sysinfo-l1-1-1.dll
GlobalMemoryStatusEx, GetTickCount64, GetSystemTimeAsFileTime, GetTickCount, GetSystemInfo, GetSystemWindowsDirectoryW
api-ms-win-core-sysinfo-l1-2-0.dll
GetSystemInfo, GetTickCount64, GetSystemTimeAsFileTime, GlobalMemoryStatusEx, GetTickCount, GetSystemWindowsDirectoryW
api-ms-win-core-sysinfo-l1-2-1.dll
GetSystemTimeAsFileTime, GetSystemWindowsDirectoryW, GlobalMemoryStatusEx, GetSystemInfo, GetTickCount, GetTickCount64
api-ms-win-core-threadpool-l1-1-1.dll
QueueUserWorkItem, UnregisterWaitEx
api-ms-win-core-threadpool-l1-2-0.dll
SetEventWhenCallbackReturns, SetThreadpoolTimer, CreateThreadpoolTimer, CloseThreadpoolWork, CreateThreadpoolWork, SubmitThreadpoolWork, WaitForThreadpoolWorkCallbacks, WaitForThreadpoolTimerCallbacks, CloseThreadpoolTimer
api-ms-win-core-threadpool-legacy-l1-1-0.dll
UnregisterWaitEx
api-ms-win-eventing-provider-l1-1-0.dll
EventRegister, EventUnregister, EventEnabled, EventWrite
api-ms-win-security-base-l1-1-0.dll
IsWellKnownSid, GetAce, GetAclInformation, GetSecurityDescriptorDacl, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, AddAccessAllowedAce, InitializeAcl, GetTokenInformation, CopySid, GetLengthSid, GetFileSecurityW, RevertToSelf, EqualSid, CreateWellKnownSid
api-ms-win-security-base-l1-2-0.dll
GetAce, GetAclInformation, GetSecurityDescriptorDacl, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, AddAccessAllowedAce, InitializeAcl, GetTokenInformation, GetFileSecurityW, CopySid, GetLengthSid, EqualSid, CreateWellKnownSid, RevertToSelf, IsWellKnownSid
api-ms-win-service-core-l1-1-1.dll
SetServiceStatus, RegisterServiceCtrlHandlerExW
kernel32.dll
FindResourceW, LoadResource, LockResource, LCMapStringW, CompareStringW, CompareStringOrdinal, MultiByteToWideChar, WideCharToMultiByte, LocalAlloc, GetSystemWindowsDirectoryW, GetModuleHandleW, GetProcAddress, RtlCaptureStackBackTrace, GetLocaleInfoW, GetModuleHandleExW, SetLastError, FindFirstFileW, FindClose, GetCurrentThread, SetErrorMode, GetLastError, CreateFileTransactedW, WriteFile, QueueUserWorkItem, GlobalMemoryStatusEx, Sleep, DisableThreadLibraryCalls, FindCloseChangeNotification, FindFirstChangeNotificationW, WaitForSingleObject, CreateThread, WaitForMultipleObjectsEx, GetExitCodeThread, InterlockedExchange, InterlockedCompareExchange, OutputDebugStringA, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, RaiseException, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, CloseHandle, InterlockedIncrement, InterlockedDecrement, LocalFree, UnregisterWaitEx, CreateFileMappingW, MapViewOfFileEx, UnmapViewOfFile, VirtualAlloc, VirtualQuery, IsProcessorFeaturePresent, CreateEventW, WaitForSingleObjectEx, SetEvent, ResetEvent, GetEnvironmentVariableW, CreateFileW, GetFileInformationByHandle, ReadFile, GetSystemInfo, GetSystemDefaultLCID, LocaleNameToLCID, LCIDToLocaleName, GetTickCount64, FreeLibrary, FreeLibraryAndExitThread, SetEventWhenCallbackReturns, DuplicateHandle, MoveFileExW, FlushViewOfFile, FlushFileBuffers, DeleteFileW, FindNextFileW, CloseThreadpoolWork, CreateThreadpoolWork, SubmitThreadpoolWork, WaitForThreadpoolWorkCallbacks, WaitForThreadpoolTimerCallbacks, CloseThreadpoolTimer, CreateThreadpoolTimer, SetThreadpoolTimer, FindResourceExW
kernelbase.dll
LCIDToLocaleName
ktmw32.dll
CreateTransaction, CommitTransaction
msvcrt.dll
DllMain
ntdll.dll
RtlInitUnicodeString, NtClose, NtAlpcCancelMessage, NtAlpcAcceptConnectPort, AlpcGetMessageAttribute, NtAlpcSendWaitReceivePort, AlpcInitializeMessageAttribute, NtAlpcCreatePort, NtAlpcImpersonateClientOfPort, NtSetInformationThread, NtQueryInformationThread, NtAlpcOpenSenderProcess, RtlCaptureStackBackTrace, WinSqmAddToStreamEx, WinSqmIsOptedIn, RtlConvertSidToUnicodeString, RtlFreeUnicodeString
rpcrt4.dll
RpcStringFreeW, UuidToStringW, UuidCreate
Export table
ServiceMain
SvchostPushServiceGlobals