Import table
advapi32.dll
GetSecurityInfo, RegEnumKeyExA, RegDeleteKeyA, LookupAccountSidA, GetTokenInformation, RegQueryInfoKeyA, StartServiceCtrlDispatcherA, FreeSid, CloseServiceHandle, SetSecurityInfo, OpenSCManagerA, OpenServiceA, SetServiceStatus, AllocateAndInitializeSid, RegNotifyChangeKeyValue, RegisterServiceCtrlHandlerExA, CreateServiceA, ChangeServiceConfig2A, SetEntriesInAclA, ControlService, DeleteService, RegOpenKeyExW, RegOpenKeyExA, RegQueryValueExW, RegCreateKeyExA, RegCloseKey, RegQueryValueExA
asl.dll
asl_vlog, asl_add_log_file
corefoundation.dll
DllMain
kernel32.dll
WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, SetEndOfFile, ReadFile, lstrlenA, LocalAlloc, GetCurrentThreadId, OutputDebugStringA, CreateEventA, GetLastError, LeaveCriticalSection, CloseHandle, GetCurrentProcessId, EnterCriticalSection, InitializeCriticalSection, LocalFree, GetLocalTime, WaitForSingleObject, DeleteCriticalSection, FormatMessageA, ReleaseMutex, CreateSemaphoreA, ReleaseSemaphore, LoadLibraryExW, SetDllDirectoryW, SignalObjectAndWait, CreateMutexA, SetEvent, HeapSetInformation, GetFullPathNameA, RaiseException, GetOverlappedResult, ResetEvent, CreateFileA, DeviceIoControl, CancelIo, GetTickCount, GetSystemPowerStatus, GetSystemTimeAsFileTime, GetProcAddress, GetModuleHandleA, ExitProcess, HeapFree, HeapAlloc, ExitThread, CreateThread, GetCommandLineA, GetVersionExA, GetProcessHeap, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, InterlockedDecrement, WriteFile, GetModuleFileNameA, FreeLibrary, InterlockedExchange, LoadLibraryA, RtlUnwind, Sleep, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, HeapReAlloc, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, LCMapStringA, WideCharToMultiByte, MultiByteToWideChar, LCMapStringW, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, QueryPerformanceCounter, SetStdHandle, GetConsoleCP, GetConsoleMode, FlushFileBuffers, HeapSize, GetLocaleInfoA, SetFilePointer, GetStringTypeA, GetStringTypeW
setupapi.dll
CM_Get_Sibling, SetupDiCreateDeviceInfoList, SetupDiDestroyDeviceInfoList, CM_Get_Device_ID_Size, SetupDiEnumDeviceInfo, SetupDiEnumDeviceInterfaces, SetupDiGetDeviceInterfaceDetailA, CM_Get_Child, SetupDiGetDeviceRegistryPropertyA, SetupDiOpenDeviceInfoA, CM_Get_Device_IDA, SetupDiGetClassDevsA
user32.dll
UnregisterDeviceNotification, RegisterDeviceNotificationA
userenv.dll
UnloadUserProfile, LoadUserProfileA
ws2_32.dll
WSAIoctl
wtsapi32.dll
WTSQueryUserToken