Import table
advapi32.dll
OpenSCManagerW, OpenServiceW, QueryServiceStatus, CloseServiceHandle, WmiNotificationRegistrationW, CreateProcessAsUserW, GetTokenInformation, LookupAccountSidW, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, GetLengthSid, InitializeAcl, AddAccessAllowedAce, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, AllocateAndInitializeSid, FreeSid, UnregisterTraceGuids, RegisterTraceGuidsW, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, RegisterServiceCtrlHandlerExW, SetServiceStatus, TraceMessage
api-ms-win-core-delayload-l1-1-1.dll
DelayLoadFailureHook, ResolveDelayLoadedAPI
api-ms-win-core-errorhandling-l1-1-0.dll
UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetLastError
api-ms-win-core-errorhandling-l1-1-1.dll
UnhandledExceptionFilter, GetLastError, SetUnhandledExceptionFilter
api-ms-win-core-handle-l1-1-0.dll
DuplicateHandle, CloseHandle
api-ms-win-core-heap-l1-1-0.dll
HeapFree, GetProcessHeap, HeapAlloc
api-ms-win-core-heap-l1-2-0.dll
GetProcessHeap, HeapAlloc, HeapFree
api-ms-win-core-interlocked-l1-1-0.dll
InterlockedExchange, InterlockedCompareExchange, InterlockedDecrement, InterlockedIncrement
api-ms-win-core-interlocked-l1-2-0.dll
InterlockedCompareExchange, InterlockedExchange, InterlockedDecrement, InterlockedIncrement
api-ms-win-core-kernel32-legacy-l1-1-0.dll
GetSystemPowerStatus
api-ms-win-core-libraryloader-l1-1-0.dll
LoadLibraryExA, FreeLibrary, GetProcAddress, DisableThreadLibraryCalls
api-ms-win-core-libraryloader-l1-1-1.dll
LoadLibraryExW, GetProcAddress, FreeLibrary, DisableThreadLibraryCalls
api-ms-win-core-localregistry-l1-1-0.dll
RegCloseKey, RegOpenKeyExW, RegQueryValueExW
api-ms-win-core-memory-l1-1-0.dll
CreateFileMappingW, UnmapViewOfFile, MapViewOfFile
api-ms-win-core-memory-l1-1-1.dll
MapViewOfFile, CreateFileMappingW, UnmapViewOfFile
api-ms-win-core-misc-l1-1-0.dll
Sleep
api-ms-win-core-processthreads-l1-1-0.dll
GetCurrentProcessId, TerminateProcess, GetCurrentThreadId, CreateProcessAsUserW, GetCurrentProcess
api-ms-win-core-processthreads-l1-1-1.dll
GetCurrentProcessId, TerminateProcess, GetCurrentThreadId, GetCurrentProcess, CreateProcessAsUserW
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegQueryValueExW, RegCloseKey, RegOpenKeyExW
api-ms-win-core-synch-l1-1-0.dll
WaitForSingleObject, ResetEvent, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, InitializeCriticalSection, CreateEventW, SetEvent
api-ms-win-core-synch-l1-2-0.dll
LeaveCriticalSection, Sleep, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, CreateEventW, ResetEvent, SetEvent, WaitForSingleObject
api-ms-win-core-sysinfo-l1-1-0.dll
GetTickCount, GetSystemTimeAsFileTime
api-ms-win-core-sysinfo-l1-2-0.dll
GetTickCount, GetSystemTimeAsFileTime
api-ms-win-core-threadpool-l1-1-0.dll
DeleteTimerQueueTimer, CreateTimerQueueTimer, UnregisterWaitEx
api-ms-win-core-threadpool-legacy-l1-1-0.dll
QueueUserWorkItem, UnregisterWaitEx, DeleteTimerQueueTimer, CreateTimerQueueTimer
api-ms-win-security-base-l1-1-0.dll
GetTokenInformation, GetLengthSid, InitializeAcl, AddAccessAllowedAce, FreeSid, SetSecurityDescriptorDacl, AllocateAndInitializeSid, InitializeSecurityDescriptor
api-ms-win-security-base-l1-2-0.dll
GetLengthSid, AddAccessAllowedAce, AllocateAndInitializeSid, InitializeSecurityDescriptor, FreeSid, SetSecurityDescriptorDacl, GetTokenInformation, InitializeAcl
api-ms-win-security-lsalookup-l1-1-1.dll
LookupAccountSidLocalW
kernel32.dll
QueueUserWorkItem, DelayLoadFailureHook, GetSystemPowerStatus, LoadLibraryW, CloseHandle, SetEvent, GetLastError, CreateEventW, UnregisterWaitEx, InitializeCriticalSection, GetProcessHeap, DeleteCriticalSection, ResetEvent, GetTickCount, DisableThreadLibraryCalls, FreeLibrary, GetProcAddress, WaitForSingleObject, DuplicateHandle, GetCurrentProcess, InterlockedIncrement, InterlockedDecrement, EnterCriticalSection, LeaveCriticalSection, HeapAlloc, HeapFree, InterlockedExchange, DeleteTimerQueueTimer, Sleep, CreateTimerQueueTimer, MapViewOfFile, CreateFileMappingW, UnmapViewOfFile, InterlockedCompareExchange, LoadLibraryA, QueryPerformanceCounter, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter
msvcrt.dll
DllMain
ntdll.dll
EtwGetTraceEnableFlags, EtwGetTraceEnableLevel, EtwGetTraceLoggerHandle, EtwRegisterTraceGuidsW, EtwUnregisterTraceGuids, EtwTraceMessage
ole32.dll
CoCreateInstance, CoRevokeClassObject, CoInitializeEx, CoUninitialize
rpcrt4.dll
RpcServerUseProtseqEpW, NdrClientCall2, RpcBindingFromStringBindingW, RpcBindingSetAuthInfoExW, RpcBindingFree, RpcServerUnregisterIf, RpcMgmtSetServerStackSize, RpcServerRegisterIfEx, I_RpcBindingIsClientLocal, NdrServerCall2, RpcServerRegisterIf3
sysntfy.dll
SysNotifyStartServer, SysNotifyStopServer
user32.dll
UnregisterDeviceNotification
wtsapi32.dll
WTSQueryUserToken
Export table
SensNotifyNetconEvent
SensNotifyRasEvent
SensNotifyWinlogonEvent
ServiceMain
SvchostPushServiceGlobals