Import table
api-ms-win-service-core-l1-1-0.dll
RegisterServiceCtrlHandlerExW, SetServiceStatus
api-ms-win-service-management-l1-1-0.dll
CloseServiceHandle, OpenSCManagerW, OpenServiceW
api-ms-win-service-management-l2-1-0.dll
NotifyServiceStatusChangeW
api-ms-win-service-winsvc-l1-1-0.dll
QueryServiceStatus
cfgmgr32.dll
CM_Open_Class_Key_ExW
dhcpcsvc.dll
DhcpFreeLeaseInfo, DhcpQueryLeaseInfoEx
iphlpapi.dll
ConvertInterfaceIndexToLuid, CancelMibChangeNotify2, NotifyRouteChange2, NotifyUnicastIpAddressChange, ConvertInterfaceLuidToIndex, ResolveIpNetEntry2, GetAdaptersAddresses, ConvertInterfaceLuidToNameW, ConvertInterfaceLuidToGuid, ConvertInterfaceGuidToLuid, ConvertInterfaceLuidToAlias, GetAdaptersInfo
kernel32.dll
LoadLibraryExA, FreeLibrary, GetProcAddress, DelayLoadFailureHook, QueueUserWorkItem, GetTickCount64, WaitForMultipleObjects, CreateThread, ResetEvent, LocalAlloc, LocalFree, UnregisterWaitEx, InitializeCriticalSectionAndSpinCount, QueryPerformanceCounter, SetLastError, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, GetTickCount, GetLastError, CreateTimerQueueTimer, DeleteTimerQueueTimer, ChangeTimerQueueTimer, CreateTimerQueue, CreateEventW, WaitForSingleObject, Sleep, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, LoadLibraryW, MultiByteToWideChar, WideCharToMultiByte, lstrlenA, DeviceIoControl, lstrlenW, HeapFree, HeapDestroy, HeapCreate, GetProcessHeap, DisableThreadLibraryCalls, RegisterWaitForSingleObject, InterlockedDecrement, SetEvent, InterlockedCompareExchange, InterlockedIncrement, CloseHandle, UnregisterWait, DeleteTimerQueueEx, InterlockedExchange, HeapAlloc
msvcrt.dll
DllMain
ncsi.dll
NcsiUpdateClientPresence, NcsiNotifySessionChange, NcsiDeregisterConnectivityStatusChange, NcsiAllocateAndGetConnectivityStatusSet, NcsiFreeConnectivityStatusSet, NcsiRegisterConnectivityStatusChange, NcsiPerformRefresh
nsi.dll
NsiAllocateAndGetTable, NsiSetAllParameters, NsiGetAllParameters, NsiGetParameter, NsiFreeTable
ntdll.dll
EtwGetTraceEnableLevel, EtwGetTraceEnableFlags, EtwEventUnregister, EtwEventRegister, RtlGUIDFromString, RtlInitUnicodeString, RtlUpcaseUnicodeChar, EtwEventEnabled, RtlCompareMemory, RtlAnsiStringToUnicodeString, RtlInitAnsiString, RtlNtStatusToDosError, NtOpenFile, EtwEventActivityIdControl, EtwEventWriteTransfer, RtlIpv6AddressToStringExW, RtlIpv4AddressToStringExW, EtwRegisterTraceGuidsW, EtwUnregisterTraceGuids, RtlCopyUnicodeString, RtlCopySid, RtlDeleteSecurityObject, RtlLengthSid, RtlSetSaclSecurityDescriptor, RtlSetDaclSecurityDescriptor, RtlSetGroupSecurityDescriptor, RtlSetOwnerSecurityDescriptor, RtlCreateSecurityDescriptor, RtlAddAce, RtlCreateAcl, NtClose, RtlNewSecurityObject, NtOpenProcessToken, NtAccessCheckAndAuditAlarm, RtlAdjustPrivilege, EtwTraceMessage, RtlEqualUnicodeString, EtwEventWrite, RtlFreeUnicodeString, EtwGetTraceLoggerHandle, RtlStringFromGUID
rpcrt4.dll
RpcAsyncCompleteCall, RpcSsContextLockExclusive, RpcServerInqDefaultPrincNameW, RpcServerRegisterAuthInfoW, RpcServerUseProtseqEpW, RpcImpersonateClient, RpcServerRegisterIfEx, RpcServerListen, RpcBindingInqAuthClientW, RpcServerUnregisterIfEx, NdrServerCall2, NdrAsyncServerCall, RpcRevertToSelf, RpcStringFreeW
wevtapi.dll
EvtSubscribe, EvtClose, EvtOpenSession
Export table
ServiceMain
SvchostPushServiceGlobals
