Import table
advapi32.dll
SetServiceStatus, UnregisterTraceGuids, TraceMessage, RegisterTraceGuidsW, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, RegisterServiceCtrlHandlerExW, RegQueryValueExW, TraceEvent, RegCloseKey, RegOpenKeyExW, ConvertSidToStringSidW, RegSetKeySecurity, IsValidSecurityDescriptor, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, GetSecurityDescriptorLength, IsValidAcl, AddAccessAllowedAceEx, InitializeAcl, EqualSid, GetAce, AddAuditAccessAceEx, AddAccessDeniedAceEx, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, SetSecurityDescriptorSacl, CreateProcessAsUserW, RegEnumKeyExW, RegGetKeySecurity, GetSecurityDescriptorControl, GetSecurityDescriptorDacl, GetLengthSid, GetTokenInformation, OpenProcessToken, LogonUserW, RegSetValueExW, SetSecurityInfo, RegQueryInfoKeyW, EventWrite, EventRegister, EventUnregister, AddAce
api-ms-win-core-datetime-l1-1-1.dll
GetDateFormatW
api-ms-win-core-errorhandling-l1-1-1.dll
SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetLastError, SetLastError
api-ms-win-core-file-l1-2-1.dll
CreateFileW, CompareFileTime
api-ms-win-core-handle-l1-1-0.dll
CloseHandle
api-ms-win-core-heap-obsolete-l1-1-0.dll
LocalFree
api-ms-win-core-io-l1-1-1.dll
DeviceIoControl
api-ms-win-core-processenvironment-l1-2-0.dll
ExpandEnvironmentStringsW, SearchPathW
api-ms-win-core-processthreads-l1-1-2.dll
CreateThread, TerminateProcess, CreateProcessAsUserW, GetCurrentProcessId, GetCurrentProcess, GetCurrentThreadId, GetExitCodeProcess, ResumeThread
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegSetValueExW, RegQueryInfoKeyW, RegGetKeySecurity, RegSetKeySecurity, RegOpenKeyExW, RegQueryValueExW, RegCloseKey
api-ms-win-core-string-obsolete-l1-1-0.dll
lstrlenW
api-ms-win-core-synch-l1-2-0.dll
CreateEventW, SetWaitableTimer, DeleteCriticalSection, CancelWaitableTimer, CreateWaitableTimerExW, WaitForMultipleObjectsEx, WaitForSingleObject, InitializeCriticalSectionAndSpinCount, SetEvent, Sleep, EnterCriticalSection, LeaveCriticalSection
api-ms-win-core-sysinfo-l1-2-1.dll
GetSystemTimeAsFileTime, GetSystemDirectoryW, GetTickCount64, GetTickCount
api-ms-win-core-threadpool-l1-2-0.dll
CreateThreadpool, CreateThreadpoolCleanupGroup, CloseThreadpoolCleanupGroupMembers, CallbackMayRunLong, TrySubmitThreadpoolCallback, CloseThreadpool, CloseThreadpoolCleanupGroup
api-ms-win-core-threadpool-legacy-l1-1-0.dll
UnregisterWaitEx
api-ms-win-core-threadpool-private-l1-1-0.dll
RegisterWaitForSingleObjectEx
api-ms-win-core-timezone-l1-1-0.dll
FileTimeToSystemTime
api-ms-win-devices-config-l1-1-0.dll
CM_Setup_DevNode, CM_Query_And_Remove_SubTreeW, CM_Get_DevNode_Status
api-ms-win-eventing-classicprovider-l1-1-0.dll
GetTraceEnableLevel, UnregisterTraceGuids, TraceMessage, RegisterTraceGuidsW, GetTraceLoggerHandle, GetTraceEnableFlags
api-ms-win-eventing-provider-l1-1-0.dll
EventWrite, EventRegister, EventUnregister
api-ms-win-security-base-l1-2-0.dll
GetSecurityDescriptorControl, AddAuditAccessAceEx, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, SetSecurityDescriptorSacl, GetSecurityDescriptorDacl, GetLengthSid, GetAce, EqualSid, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, IsValidAcl, AddAccessAllowedAceEx, AddAce, AddAccessDeniedAceEx, InitializeAcl
api-ms-win-security-sddl-l1-1-0.dll
ConvertSidToStringSidW
api-ms-win-service-core-l1-1-1.dll
SetServiceStatus, RegisterServiceCtrlHandlerExW
devobj.dll
DevObjOpenDevRegKey, DevObjGetDeviceRegistryProperty, DevObjGetDeviceProperty, DevObjDeleteDeviceInfo, DevObjGetDeviceInstanceId, DevObjCreateDeviceInfoList, DevObjGetDeviceInfoListDetail, DevObjEnumDeviceInfo, DevObjGetClassDevs, DevObjDestroyDeviceInfoList, DevObjOpenDeviceInfo
kernel32.dll
ResumeThread, SetEvent, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, CloseHandle, UnregisterWait, CreateEventW, InitializeCriticalSectionAndSpinCount, ExpandEnvironmentStringsW, SearchPathW, GetSystemDirectoryW, InterlockedIncrement, InterlockedDecrement, DeviceIoControl, GetLastError, GetProcAddress, GetModuleHandleW, GetVersionExW, InterlockedExchange, Sleep, InterlockedCompareExchange, RtlUnwind, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, CreateFileW, WaitForSingleObject, lstrlenW, LocalFree, WaitForMultipleObjects, QueueUserWorkItem, RtlCaptureContext, GetExitCodeProcess, InitializeCriticalSection, CreateProcessW, CancelWaitableTimer, UnregisterWaitEx, SetWaitableTimer, RegisterWaitForSingleObject, CreateWaitableTimerW, VerifyVersionInfoW, VerSetConditionMask, CreateThreadpool, CreateThreadpoolCleanupGroup, CloseThreadpoolCleanupGroup, CloseThreadpool, TrySubmitThreadpoolCallback, CallbackMayRunLong, CloseThreadpoolCleanupGroupMembers, CompareFileTime, CreateThread, FileTimeToSystemTime, GetDateFormatW, GetTickCount64
msvcrt.dll
DllMain
ntdll.dll
RtlNtStatusToDosError, DbgPrint, NtClose, _vsnwprintf, RtlInitUnicodeString, NtQuerySystemInformation, VerSetConditionMask, RtlVerifyVersionInfo, RtlCaptureContext
rpcrt4.dll
UuidCreate, UuidFromStringW, RpcStringFreeW, UuidToStringW
setupapi.dll
SetupDiGetDeviceRegistryPropertyW, CM_Setup_DevNode, CM_Query_And_Remove_SubTreeW, SetupDiDestroyDeviceInfoList, SetupDiEnumDeviceInfo, SetupDiGetClassDevsW, CM_Get_DevNode_Status_Ex, SetupDiOpenDeviceInfoW, SetupDiCreateDeviceInfoList, SetupDiOpenDevRegKey, SetupDiGetDeviceInfoListDetailW, SetupDiGetDeviceInstanceIdW, SetupDiDeleteDeviceInfo, CM_Get_DevNode_Status, SetupDiGetDevicePropertyW
wudfplatform.dll
InitializePlatformLibrary, GetAndInitializePlatformObject, WdfGetLpcInterface, ShutdownPlatformLibrary
Export table
ServiceMain
SvchostPushServiceGlobals