Import table
advapi32.dll
SetServiceStatus, RegEnumValueW, LsaQuerySecret, LsaClose, LsaCreateSecret, LsaSetSecret, LsaDelete, LsaOpenSecret, LsaOpenPolicy, RegDeleteKeyW, RegDeleteValueW, LsaFreeMemory, RegSetValueExW, RegCreateKeyExW, RegEnumKeyW, GetUserNameW, OpenThreadToken, GetTokenInformation, RegisterEventSourceW, ReportEventW, DeregisterEventSource, RegisterServiceCtrlHandlerW, RegOpenKeyExW, RegCloseKey, RegQueryValueExW
kernel32.dll
LocalFileTimeToFileTime, FileTimeToSystemTime, lstrlenA, SystemTimeToFileTime, LeaveCriticalSection, lstrcmpiW, QueryDosDeviceW, DosPathToSessionPathW, DefineDosDeviceW, GetCurrentThread, LocalAlloc, WaitForSingleObject, CreateEventW, CreateThread, WaitForMultipleObjects, ExitThread, FormatMessageW, SetEvent, CloseHandle, LocalFree, LocalReAlloc, DisableThreadLibraryCalls, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, WideCharToMultiByte, GetLastError, lstrcmpW, EnterCriticalSection, SetConsoleCtrlHandler, LoadLibraryW, GetProcAddress, FreeLibrary, InitializeCriticalSection, DeleteCriticalSection
msvcrt.dll
DllMain
netapi32.dll
NetShareDelSticky
ntdll.dll
NtUnloadDriver, RtlNtStatusToDosError, NtOpenThreadToken, NtQueryInformationToken, NtQueryDefaultLocale, RtlInitUnicodeString, NtFsControlFile, NtLoadDriver, RtlAdjustPrivilege, NtQueryValueKey, RtlOemStringToUnicodeString, RtlInitAnsiString, NtQueryInformationProcess, NtClose, RtlCopyLuid, RtlCopyUnicodeString, NtOpenFile, NtCreateFile, RtlRunEncodeUnicodeString, RtlRunDecodeUnicodeString, NtQueryDirectoryFile, RtlInitString, RtlFreeOemString, RtlUnicodeStringToOemString, NtWriteFile, RtlQueryRegistryValues
nwapi32.dll
NwNdsGetQueueInformation, NWReadPropertyValue, NWDetachFromFileServer, NWAttachToFileServerW, UnmapSpecialJapaneseChars, NwNdsChangePassword, NWGetFileServerVersionInfo, NwNdsOpenTreeHandle, NwNdsResolveName, NwlibMakeNcp, NwLibCanonLocalName, NwLibCanonUserName, NwLibCanonRemoteName, NwNdsList, NwlibCopyStringToBuffer, NwNdsReadObjectInfo, NwNdsOpenGenericHandle, MapSpecialJapaneseChars
nwprovau.dll
NwDeregisterService, NwRegisterService, NwGetService, NwInitializeServiceProvider
rpcrt4.dll
RpcStringFreeW, RpcBindingFree, RpcStringBindingParseW, RpcBindingToStringBindingW, RpcBindingServerFromClient, RpcServerUnregisterIf, RpcRevertToSelf, RpcImpersonateClient, NdrServerCall2, RpcServerUseProtseqEpW, RpcServerRegisterIfEx
secur32.dll
LsaRegisterLogonProcess, LsaCallAuthenticationPackage, LsaFreeReturnBuffer, LsaLookupAuthenticationPackage, LsaDeregisterLogonProcess
user32.dll
MessageBoxW, wsprintfW, CharUpperW, MessageBeep
ws2_32.dll
WSALookupServiceBeginW, WSALookupServiceNextW, WSALookupServiceEnd
Export table
ServiceMain
SvchostPushServiceGlobals
