Import table
api-ms-win-security-base-l1-1-0.dll
GetTokenInformation, CheckTokenMembership, GetWindowsAccountDomainSid, CreateWellKnownSid, RevertToSelf, EqualSid, CopySid
api-ms-win-service-core-l1-1-0.dll
RegisterServiceCtrlHandlerExW, SetServiceStatus
api-ms-win-service-management-l1-1-0.dll
CloseServiceHandle, StartServiceW, OpenServiceW, OpenSCManagerW
api-ms-win-service-winsvc-l1-1-0.dll
QueryServiceStatus
kernel32.dll
LoadLibraryExA, InterlockedExchange, Sleep, QueryPerformanceCounter, GetTickCount, InterlockedCompareExchange, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetProcessHeap, HeapSetInformation, HeapCreate, HeapDestroy, HeapAlloc, HeapReAlloc, HeapFree, RegOpenKeyExW, RegCloseKey, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, InterlockedDecrement, InterlockedIncrement, FreeLibrary, GetLastError, GetProcAddress, DelayLoadFailureHook, DisableThreadLibraryCalls, SwitchToThread, LoadLibraryW, GetCurrentThreadId, CreateDirectoryW, RegCreateKeyExW, RegDeleteKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegEnumValueW, DuplicateHandle, ResetEvent, CreateTimerQueueTimer, DeleteTimerQueueTimer, DeviceIoControl, RegNotifyChangeKeyValue, CreateThread, WaitForMultipleObjects, WaitForSingleObject, FileTimeToSystemTime, SystemTimeToFileTime, ExitProcess, GetVersionExW, SetLastError, CopyFileW, DeleteFileW, RegQueryValueExW, DebugBreak, MultiByteToWideChar, WideCharToMultiByte, CloseHandle, WriteFile, CreateFileW, ReadFile, GetFileSize, CompareFileTime, CompareStringA, lstrlenA, lstrlenW, UnregisterWaitEx, SetEvent, RegisterWaitForSingleObject, CreateEventW, GetCurrentThread
msvcrt.dll
DllMain
ntdll.dll
EtwGetTraceEnableLevel, EtwGetTraceLoggerHandle, EtwRegisterTraceGuidsW, EtwUnregisterTraceGuids, EtwTraceMessage, RtlIpv4AddressToStringExW, RtlIpv6AddressToStringExW, EtwGetTraceEnableFlags
rpcrt4.dll
RpcSsContextLockExclusive, RpcRaiseException, NdrClientCall2, I_RpcExceptionFilter, UuidToStringW, RpcServerUseProtseqW, RpcServerUseProtseqEpW, RpcServerRegisterAuthInfoW, RpcServerRegisterIfEx, RpcEpRegisterW, RpcErrorStartEnumeration, RpcErrorGetNextRecord, RpcErrorEndEnumeration, RpcStringBindingComposeW, RpcBindingFromStringBindingW, RpcBindingSetAuthInfoExW, RpcBindingFree, RpcServerUnregisterIfEx, RpcServerInqBindings, RpcStringFreeW, RpcBindingToStringBindingW, RpcStringBindingParseW, RpcBindingVectorFree, I_RpcBindingInqTransportType, RpcBindingInqAuthClientW, UuidCreate, RpcRevertToSelf, RpcImpersonateClient, NdrServerCall2
Export table
IMServiceMain
SvchostPushServiceGlobals
SVCServiceMain
