Import table
advapi32.dll
RegCreateKeyExW, RegCloseKey, RegSetValueExW, CloseServiceHandle, OpenProcessToken, OpenSCManagerW, OpenServiceW, GetTokenInformation, EqualSid, StartServiceW, QueryServiceStatus, ChangeServiceConfigW, AllocateAndInitializeSid, FreeSid, QueryServiceConfigW, RegDeleteValueW, LookupPrivilegeValueW, AdjustTokenPrivileges, QueryServiceLockStatusW
kernel32.dll
WaitNamedPipeW, CreateNamedPipeW, ConnectNamedPipe, PeekNamedPipe, InterlockedIncrement, ReleaseMutex, CreateSemaphoreW, ReleaseSemaphore, CreateMutexW, WriteFile, ReadFile, DisconnectNamedPipe, FlushFileBuffers, GetCurrentThreadId, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetLongPathNameW, InterlockedCompareExchange, CancelIo, DeviceIoControl, GetOverlappedResult, CreateFileW, GetCurrentProcess, FormatMessageW, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSectionAndSpinCount, ExpandEnvironmentStringsW, CreateThread, CloseHandle, WaitForMultipleObjects, CreateEventW, ResetEvent, lstrlenW, Sleep, OpenProcess, GetTickCount, SetEvent, WaitForSingleObject, GetSystemTimeAsFileTime, RaiseException, LoadLibraryA, InterlockedExchange, FreeLibrary, GetProcAddress, LocalFree, LocalAlloc, GetUserDefaultLCID, GetLocaleInfoW, GetCurrentProcessId, DisableThreadLibraryCalls, SetLastError, GetLastError, MultiByteToWideChar, TerminateProcess, WideCharToMultiByte, FormatMessageA, DecodePointer, EncodePointer, WaitForMultipleObjectsEx, LoadLibraryExA
msvcp100.dll
DllMain
msvcp90.dll
DllMain
msvcr100.dll
DllMain
msvcr110.dll
DllMain
msvcr90.dll
DllMain
ntdll.dll
ZwCreateFile, RtlFreeUnicodeString, ZwWriteFile, ZwQueryInformationFile, ZwCreateSection, ZwClose, RtlNtStatusToDosError, ZwUnmapViewOfSection, ZwWaitForSingleObject, ZwSetInformationFile, ZwQuerySystemInformation, ZwMapViewOfSection, ZwReadFile, memmove, ZwQueryInformationProcess, ZwDelayExecution, RtlFreeHeap, RtlAllocateHeap, ZwCreateEvent, RtlInitUnicodeString, ZwOpenFile, ZwQueryVirtualMemory, ZwOpenSymbolicLinkObject, ZwQuerySymbolicLinkObject, _wcsnicmp, wcsncmp, ispunct, isspace, wcstombs, sprintf, mbstowcs, ZwReadVirtualMemory, ZwOpenProcess, RtlReAllocateHeap, ZwQueryKey, RtlOpenCurrentUser, ZwQueryInformationToken, ZwCreateKey, ZwOpenKey, LdrLoadDll, RtlLeaveCriticalSection, RtlFreeAnsiString, RtlAppendUnicodeStringToString, ZwQueryValueKey, LdrGetDllHandle, RtlUnicodeStringToAnsiString, RtlAppendUnicodeToString, memcpy, _allmul, memset, _allrem, _alldiv, _chkstk, RtlEnterCriticalSection, ZwSetEvent, _allshl, ZwTerminateProcess, RtlCreateUnicodeString, ZwFsControlFile, ZwCreateNamedPipeFile, ZwSetInformationThread, ZwFlushBuffersFile, ZwCancelIoFile
user32.dll
ExitWindowsEx, PeekMessageW, MsgWaitForMultipleObjects, DispatchMessageW
version.dll
GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueW
Export table
GetAvgObject
GetLockCount
