Import table
advapi32.dll
RegEnumKeyW, GetTokenInformation, ImpersonateLoggedOnUser, AllocateAndInitializeSid, SetEntriesInAclW, GetUserNameW, AdjustTokenPrivileges, SetTokenInformation, LookupPrivilegeValueW, SetNamedSecurityInfoW, AddAce, AddAccessAllowedAce, InitializeAcl, GetLengthSid, GetAclInformation, GetSidSubAuthority, GetSidSubAuthorityCount, GetSidIdentifierAuthority, GetAce, GetNamedSecurityInfoW, RegOpenKeyW, CryptReleaseContext, CryptDestroyHash, CryptGetHashParam, CryptHashData, CryptCreateHash, CryptAcquireContextW, RegEnumValueW, RegQueryValueExA, OpenProcessToken, SetServiceStatus, RegisterServiceCtrlHandlerExW, StartServiceCtrlDispatcherW, QueryServiceStatusEx, StartServiceW, QueryServiceStatus, CloseServiceHandle, OpenServiceW, OpenSCManagerW, CreateProcessAsUserW, RegNotifyChangeKeyValue, RegDeleteValueW, RegQueryValueExW, RegOpenKeyExW, RegCloseKey, RegSetValueExW, RegCreateKeyExW, RevertToSelf, FreeSid, DuplicateTokenEx, SetSecurityDescriptorDacl, InitializeSecurityDescriptor
iphlpapi.dll
GetAdaptersAddresses, NotifyAddrChange
kernel32.dll
SetFilePointer, FileTimeToSystemTime, WriteFile, SetEndOfFile, WideCharToMultiByte, MultiByteToWideChar, GetVersion, GetCurrentProcessId, GetFileAttributesW, CreatePipe, SetHandleInformation, GetFileAttributesExW, CreateIoCompletionPort, GetQueuedCompletionStatus, GetVolumeNameForVolumeMountPointW, GetSystemDirectoryA, LoadLibraryA, DebugBreak, SetUnhandledExceptionFilter, ProcessIdToSessionId, OpenMutexW, OpenEventW, OpenFileMappingW, MapViewOfFile, UnmapViewOfFile, WaitForMultipleObjectsEx, ExpandEnvironmentStringsW, GetShortPathNameW, CreateMutexW, GetSystemTime, ExitProcess, CreateDirectoryW, ReadProcessMemory, Module32FirstW, Module32NextW, GetDriveTypeW, GetFileSizeEx, CreateFileA, GetFileInformationByHandle, FileTimeToDosDateTime, GetFileAttributesA, HeapSize, GlobalUnlock, GetTempPathW, MoveFileW, CreateFileMappingW, GlobalMemoryStatus, GetSystemInfo, GetVersionExW, lstrcmpiW, ResetEvent, VirtualQuery, ReadFile, GetFileSize, MoveFileExW, GetLocalTime, GetWindowsDirectoryW, GetSystemDirectoryW, FindClose, FindNextFileW, DeleteFileW, SystemTimeToFileTime, FindFirstFileW, FileTimeToLocalFileTime, GetSystemTimeAsFileTime, CreateProcessW, GetOverlappedResult, WaitForMultipleObjects, SetWaitableTimer, CreateWaitableTimerW, DeviceIoControl, GetCurrentThreadId, PostQueuedCompletionStatus, QueueUserWorkItem, CreateEventW, TryEnterCriticalSection, Sleep, GetModuleFileNameW, SetEvent, SetLastError, SignalObjectAndWait, ReleaseMutex, WaitForSingleObject, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, FreeLibrary, LoadLibraryW, GetExitCodeProcess, GetProcessTimes, HeapFree, GetProcessHeap, HeapAlloc, GetCurrentProcess, GetCurrentThread, Process32NextW, Process32FirstW, CreateToolhelp32Snapshot, GetLongPathNameW, GlobalFree, GlobalAlloc, LocalFree, LocalAlloc, OpenProcess, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, GetTickCount, CloseHandle, CreateFileW, GetLastError, GetProcAddress, GetModuleHandleW, HeapReAlloc, HeapDestroy, QueryPerformanceCounter, IsDebuggerPresent, UnhandledExceptionFilter, TerminateProcess, InterlockedCompareExchange, InterlockedExchange, CopyFileW, DecodePointer, EncodePointer, RaiseException, GlobalLock
mpr.dll
WNetGetConnectionW
msvcp100.dll
DllMain
msvcr100.dll
DllMain
ole32.dll
CoCreateInstance, CoUninitialize, StringFromGUID2, CoInitializeEx, CoInitialize
psapi.dll
EnumProcessModules, GetModuleFileNameExW, EnumProcesses
shell32.dll
SHCreateDirectoryExW, CommandLineToArgvW, SHGetSpecialFolderPathW, SHGetFolderPathW
shlwapi.dll
PathRemoveExtensionW, StrTrimW, PathRemoveBlanksW, PathAppendW, PathStripPathW, PathUnquoteSpacesW, PathRemoveFileSpecW, PathFileExistsW, StrStrIW, PathRenameExtensionW, PathFindFileNameW
user32.dll
GetSystemMetrics
userenv.dll
CreateEnvironmentBlock, DestroyEnvironmentBlock
version.dll
GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW
wintrust.dll
CryptCATAdminReleaseContext, WinVerifyTrust
ws2_32.dll
freeaddrinfo, WSAResetEvent, getaddrinfo, WSACreateEvent, WSACloseEvent
wtsapi32.dll
WTSFreeMemory, WTSQuerySessionInformationW, WTSEnumerateSessionsW
Export table
DllMain
ServiceMain