Import table
api-ms-win-core-localregistry-l1-1-0.dll
RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, RegSetValueExW, RegQueryInfoKeyW, RegEnumKeyExW, RegDeleteValueW, RegDeleteKeyExW, RegQueryValueExW, RegQueryValueExA
api-ms-win-core-processthreads-l1-1-0.dll
CreateThread, GetCurrentThreadId, GetCurrentProcessId, GetCurrentProcess, OpenProcessToken, OpenThreadToken, GetCurrentThread, TerminateProcess
api-ms-win-security-base-l1-1-0.dll
GetTokenInformation
api-ms-win-service-core-l1-1-0.dll
RegisterServiceCtrlHandlerExW, SetServiceStatus
api-ms-win-service-management-l1-1-0.dll
CloseServiceHandle, OpenServiceW, OpenSCManagerW
api-ms-win-service-management-l2-1-0.dll
NotifyServiceStatusChangeW
kernel32.dll
InterlockedExchange, GetVersionExA, LoadLibraryExA, InterlockedCompareExchange, DelayLoadFailureHook, LoadLibraryExW, WideCharToMultiByte, LoadResource, SizeofResource, SubmitThreadpoolWork, CreateThreadpoolWork, Sleep, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, UnhandledExceptionFilter, SetUnhandledExceptionFilter, OutputDebugStringA, RegisterWaitForSingleObject, InitializeSRWLock, ReleaseMutex, ReleaseSRWLockShared, AcquireSRWLockShared, DeleteFileW, AcquireSRWLockExclusive, ResetEvent, TryEnterCriticalSection, GetACP, SetFileAttributesW, GetFileAttributesW, CopyFileW, FormatMessageW, FindResourceW, CreateEventW, WaitForSingleObjectEx, InterlockedDecrement, InterlockedIncrement, TrySubmitThreadpoolCallback, UnregisterWaitEx, CloseHandle, WaitForSingleObject, SetEvent, DisableThreadLibraryCalls, GetModuleFileNameW, lstrcmpiW, GetModuleHandleW, GetProcAddress, LoadLibraryW, GetLastError, CloseThreadpoolWork, ReleaseSRWLockExclusive, SystemTimeToFileTime, GetFileSize, ReadFile, LockResource, FreeResource, MultiByteToWideChar, InitializeCriticalSectionAndSpinCount, GetLocalTime, CreateMutexW, CreateFileW, WriteFile, ExpandEnvironmentStringsW, GetSystemDirectoryW, lstrlenW, RaiseException, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection, FreeLibrary
msvcrt.dll
DllMain
nlaapi.dll
NlaRefreshQuery, NlaCreatePluginRequests, NlaAddToPluginRequests, NlaOpenQuery, NlaDeletePluginRequests, NlaQueryNetDataEx, NlaAddToTypeSet, NlaRegisterQuery, NlaQueryNetSignatures, NlaDeleteTypeSet, NlaQueryNetData, NlaDeleteDataSet, NlaCloseQuery, NlaCreateTypeSet
nsi.dll
NsiAllocateAndGetTable, NsiFreeTable, NsiSetAllParameters
ntdll.dll
WinSqmAddToStreamEx, EtwEventWrite, EtwUnregisterTraceGuids, EtwRegisterTraceGuidsW, EtwGetTraceLoggerHandle, EtwGetTraceEnableLevel, EtwGetTraceEnableFlags, EtwTraceMessage, EtwEventUnregister, EtwEventRegister
user32.dll
MsgWaitForMultipleObjectsEx, PeekMessageW, GetMessageW, PostThreadMessageW, UnregisterClassA, CharNextW, LoadStringW
Export table
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ServiceMain
SvchostPushServiceGlobals