Import table
api-ms-win-service-core-l1-1-0.dll
RegisterServiceCtrlHandlerExW, SetServiceStatus
kernel32.dll
FindFirstFileW, lstrlenW, RemoveDirectoryW, FindClose, FindNextFileW, SetFileAttributesW, DisableThreadLibraryCalls, SetLastError, CloseHandle, GetLastError, UnregisterWait, SetEvent, CreateEventW, InterlockedIncrement, InterlockedDecrement, DelayLoadFailureHook, GetProcAddress, FreeLibrary, InterlockedCompareExchange, LoadLibraryExA, InterlockedExchange, Sleep, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, OutputDebugStringA, RtlCaptureStackBackTrace, LocalFree, LocalAlloc, RegCloseKey, RegQueryValueExW, RegOpenKeyExW, GetVersionExW, ProcessIdToSessionId, GetCurrentThread, HeapAlloc, GetProcessHeap, HeapFree, LoadLibraryW, ExpandEnvironmentStringsW, VerifyVersionInfoW, VerSetConditionMask, RegCreateKeyExW, RegOpenCurrentUser, RegDeleteValueW, RegSetValueExW, RegEnumKeyExW, CreateDirectoryW, GetComputerNameExW, WaitForSingleObject, TerminateThread, GetThreadId, WaitForMultipleObjects, ResetEvent, CreateThread, GetModuleHandleExW, CompareFileTime, DeleteTimerQueueTimer, GetFileTime, CreateFileW, GetFileAttributesW, RegGetValueW, DeleteTimerQueueEx, FileTimeToSystemTime, FileTimeToLocalFileTime, CreateTimerQueueTimer, CreateTimerQueue, CloseThreadpoolWork, WaitForThreadpoolWorkCallbacks, CallbackMayRunLong, SubmitThreadpoolWork, CreateThreadpoolWork, WTSGetActiveConsoleSessionId, MultiByteToWideChar, SystemTimeToFileTime, GetSystemTime, DeleteFileW, FormatMessageW, RegNotifyChangeKeyValue
msvcrt.dll
DllMain
ntdll.dll
RtlInitializeResource, RtlDeleteResource, RtlEqualSid, NtClose, EtwEventWrite, EtwEventRegister, EtwEventUnregister, RtlInitUnicodeStringEx, RtlQueryEnvironmentVariable_U, RtlLookupElementGenericTable, RtlInsertElementGenericTable, RtlInitializeGenericTable, RtlEnumerateGenericTable, RtlNtStatusToDosError, RtlDeleteElementGenericTable, RtlAllocateAndInitializeSid, RtlReleaseResource, RtlAcquireResourceShared, RtlAcquireResourceExclusive, RtlRaiseException, RtlFreeHeap, RtlAllocateHeap, RtlFreeSid, RtlInitUnicodeString, NtCreateFile
rpcrt4.dll
RpcImpersonateClient, I_RpcBindingInqLocalClientPID, RpcRevertToSelf
sysntfy.dll
SysNotifyStopServer, SysNotifyStartServer
Export table
ServiceMain
SvchostPushServiceGlobals
