Import table
advapi32.dll
GetLengthSid, DuplicateTokenEx, ConvertStringSidToSidW, SetTokenInformation, CreateProcessAsUserW, RegEnumValueW, RegQueryValueExW, RegFlushKey, OpenProcessToken, GetTokenInformation, GetSidSubAuthorityCount, GetSidSubAuthority, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegNotifyChangeKeyValue, CryptDeriveKey, CryptReleaseContext, CryptAcquireContextA, CryptEncrypt, CryptCreateHash, CryptDestroyKey, CryptDecrypt, CryptDestroyHash, CryptHashData, CryptGetHashParam, CryptAcquireContextW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, AllocateAndInitializeSid, SetEntriesInAclW, FreeSid, RegSetKeySecurity, SetNamedSecurityInfoW, LookupPrivilegeValueW, GetNamedSecurityInfoW, InitializeAcl, AddAccessAllowedAce, AdjustTokenPrivileges, OpenServiceA, RegDeleteValueW, CloseServiceHandle, DeleteService, OpenSCManagerW, CreateServiceA, ChangeServiceConfigA, StartServiceW, QueryServiceStatus, ControlService, RegDeleteKeyW
crypt32.dll
CryptProtectData, CryptUnprotectData
gdi32.dll
PatBlt, CreatePatternBrush, CreateDIBSection, CreateFontIndirectW, EnumFontFamiliesExW, Rectangle, CreateBitmap, GetPixel, DeleteDC, DeleteObject, SetBrushOrgEx, CreateCompatibleBitmap, CreateCompatibleDC, BitBlt, GetDeviceCaps, CreateSolidBrush, GetObjectW, GetStockObject, GetTextExtentPointW, SetTextColor, SetBkColor, SetBkMode, CreateFontW, SelectObject, SetDCBrushColor, StretchBlt
kernel32.dll
DllMain
ole32.dll
CoTaskMemFree, CoInitializeEx, CoCreateGuid, CoUninitialize, CoCreateInstance, StringFromGUID2, OleLockRunning, CoGetClassObject, CLSIDFromProgID, CLSIDFromString, CreateStreamOnHGlobal, OleInitialize, OleUninitialize, OleRun, CoInitialize, ReleaseStgMedium, StringFromCLSID, CoTaskMemAlloc, CoTaskMemRealloc
rpcrt4.dll
UuidToStringW
sensapi.dll
IsNetworkAlive
shell32.dll
SHGetFolderPathW, SHGetSpecialFolderLocation, ShellExecuteExW, SHGetFolderPathA, SHGetPathFromIDListW, SHGetSpecialFolderPathW, ShellExecuteW
shlwapi.dll
SHDeleteKeyW, PathFileExistsW
urlmon.dll
URLDownloadToFileW
user32.dll
GetWindowDC, InflateRect, GetMessagePos, DrawEdge, CopyRect, KillTimer, SetTimer, IsWindowVisible, MapWindowPoints, SetMenuItemInfoW, DrawFrameControl, DrawTextW, GetMenuItemCount, GetMenuItemID, SetRectEmpty, GetMenuItemInfoW, GetSubMenu, EnumWindows, GetForegroundWindow, FindWindowExW, PostMessageW, GetSysColorBrush, OffsetRect, LoadImageW, FrameRect, UnhookWindowsHookEx, PtInRect, GetWindowThreadProcessId, LoadAcceleratorsW, UnregisterClassA, GetMenuItemRect, SystemParametersInfoW, GetMessageW, SetWindowLongW, GetWindowLongW, RegisterClassExW, GetClassInfoExW, DefWindowProcW, GetSysColor, MoveWindow, SetWindowPos, GetClientRect, ClientToScreen, ScreenToClient, GetDC, ReleaseDC, InvalidateRect, InvalidateRgn, RedrawWindow, EnumChildWindows, UpdateWindow, wsprintfW, MessageBoxA, GetSystemMetrics, MessageBoxW, CopyImage, wvsprintfW, SetWindowTextA, GetKeyState, TranslateMessage, DispatchMessageW, SetActiveWindow, ShowWindow, GetWindowRect, AppendMenuW, TrackPopupMenu, DestroyMenu, CreatePopupMenu, RegisterWindowMessageW, GetWindowTextLengthW, GetWindowTextW, SetWindowTextW, CreateAcceleratorTableW, CreateWindowExW, LoadCursorW, IsWindow, TranslateAcceleratorW, CharNextW, SendMessageW, GetFocus, GetWindow, SetCapture, IsChild, GetParent, GetDlgItem, SetFocus, DestroyAcceleratorTable, GetDesktopWindow, BeginPaint, EndPaint, CallWindowProcW, DestroyWindow, FillRect, ReleaseCapture, GetClassNameW, FindWindowW
uxtheme.dll
DrawThemeParentBackground, IsThemeBackgroundPartiallyTransparent, OpenThemeData, GetThemeSysSize, CloseThemeData, SetWindowTheme, DrawThemeBackground
version.dll
GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueW
wininet.dll
HttpQueryInfoW, HttpSendRequestW, HttpOpenRequestW, HttpOpenRequestA, InternetConnectW, DeleteUrlCacheEntryW, HttpSendRequestA, InternetReadFile, InternetGetCookieExW, InternetCloseHandle, InternetGetLastResponseInfoW, InternetOpenA, InternetOpenW, InternetConnectA, HttpAddRequestHeadersW, FindNextUrlCacheEntryW, FindFirstUrlCacheEntryW, InternetOpenUrlW, InternetSetOptionW
wtsapi32.dll
WTSEnumerateSessionsW
Export table
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
HighIntegrityHandling
LowIntegrityHandling
ProcessChangeIEDefautlSearchBrowser
ProcessChangeIEHomePage
ProcessChangeNewTab
ProcessDisable
ProcessEnable
ProcessGetGUID
ProcessGetStartupFolder
ProcessInstallPreference
ProcessUnInstallPreference
SendGetRequest