Import table
advapi32.dll
RegCloseKey, RegisterEventSourceW, ReportEventW, DeregisterEventSource, SetServiceStatus, ImpersonateLoggedOnUser, RegOpenCurrentUser, RevertToSelf, RegOpenKeyW, RegQueryValueExW, RegDeleteValueW, QueryServiceStatusEx, ControlService, RegisterServiceCtrlHandlerW, OpenServiceW, CloseServiceHandle, OpenSCManagerW, CreateServiceW, ChangeServiceConfig2W, StartServiceW, DeleteService, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerExW, RegisterEventSourceA, ReportEventA, OpenThreadToken, AllocateAndInitializeSid, FreeSid, CheckTokenMembership, ChangeServiceConfigW, RegOpenKeyExW, ConvertSidToStringSidW, DuplicateTokenEx, CreateProcessAsUserW, GetTokenInformation, OpenProcessToken
crypt32.dll
CryptQueryObject, CryptMsgGetParam, CertFindCertificateInStore, CertGetNameStringW, CertFreeCertificateContext, CertCloseStore, CryptMsgClose
dbghelp.dll
MiniDumpWriteDump
kernel32.dll
GetCommandLineW, GetCurrentProcessId, GetCurrentProcess, GetLongPathNameW, MoveFileExW, FormatMessageA, InterlockedExchange, InterlockedCompareExchange, HeapSetInformation, GetStartupInfoW, EncodePointer, DecodePointer, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, QueryPerformanceCounter, GetCurrentThreadId, GetSystemTimeAsFileTime, LocalAlloc, GetModuleFileNameW, WaitForSingleObject, Sleep, GetTickCount, CloseHandle, CreateProcessW, GetFileAttributesW, CreateEventW, SetEvent, GetLastError, LocalFree, WaitForMultipleObjects, OpenProcess, WTSGetActiveConsoleSessionId, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, CreateEventA, InitializeCriticalSectionAndSpinCount, InitializeCriticalSection, TryEnterCriticalSection, DuplicateHandle, SetLastError, FlushConsoleInputBuffer, GetVersion, DeviceIoControl, SetEndOfFile, ReadConsoleW, ReadConsoleInputA, ExitThread, SetEnvironmentVariableA, FlushFileBuffers, WriteConsoleW, SetStdHandle, SetEnvironmentVariableW, GetCurrentThread, GetVersionExW, ProcessIdToSessionId, ResetEvent, TerminateThread, LoadLibraryA, GetProcAddress, MultiByteToWideChar, LoadLibraryW, GetVersionExA, GetModuleHandleW, FreeLibrary, GetModuleHandleExW, GetUserDefaultLCID, GetLocaleInfoW, GetSystemInfo, CreateMutexW, WideCharToMultiByte, TlsSetValue, TlsGetValue, TlsAlloc, GetFileAttributesExW, CreateFileW, SetFilePointer, WriteFile, ReleaseMutex, GetFileSize, ReadFile, GetDiskFreeSpaceExW, CreateDirectoryW, GetModuleHandleExA, GetModuleFileNameA, SetConsoleMode, RaiseException, GetProcessHeap, HeapFree, HeapAlloc, LockFileEx, UnlockFileEx, lstrcpynA, lstrcpyA, lstrlenA, FileTimeToLocalFileTime, FileTimeToDosDateTime, CreateFileA, GetFileTime, VirtualQuery, GetModuleHandleA, OutputDebugStringA, GlobalMemoryStatus, GetLocalTime, InterlockedIncrement, InterlockedDecrement, GetStringTypeW, OpenEventA, ReleaseSemaphore, SetWaitableTimer, ResumeThread, TlsFree, CreateWaitableTimerA, SystemTimeToFileTime, IsProcessorFeaturePresent, HeapReAlloc, CreateThread, LoadLibraryExW, GetCPInfo, ExitProcess, AreFileApisANSI, RtlUnwind, CreateSemaphoreW, GetDateFormatW, GetTimeFormatW, CompareStringW, LCMapStringW, IsValidLocale, EnumSystemLocalesW, HeapSize, GetStdHandle, IsValidCodePage, GetACP, GetOEMCP, GetFileType, GetEnvironmentStringsW, FreeEnvironmentStringsW, SetConsoleCtrlHandler, GetTimeZoneInformation, OutputDebugStringW, GetConsoleCP, GetConsoleMode, SetFilePointerEx
msvcp100.dll
DllMain
msvcr100.dll
DllMain
ole32.dll
CoCreateGuid, StringFromGUID2
rpcrt4.dll
RpcObjectInqType, RpcImpersonateClient, I_RpcBindingInqLocalClientPID, RpcServerUseProtseqEpW, NdrServerCall2, RpcBindingSetObject, RpcBindingFromStringBindingW, RpcStringBindingComposeW, RpcEpResolveBinding, RpcBindingFree, RpcStringFreeW, NdrClientCall2, RpcBindingInqObject, RpcObjectSetType, RpcServerUnregisterIfEx, RpcServerRegisterIfEx, RpcRevertToSelfEx, I_RpcBindingInqTransportType
shell32.dll
CommandLineToArgvW, SHGetFolderPathW
shlwapi.dll
PathFileExistsW
user32.dll
GetSystemMetrics, RegisterClassW, SetTimer, KillTimer, PostThreadMessageW, DefWindowProcW, CreateWindowExW, SetWindowLongW, MessageBoxA, GetDesktopWindow, GetProcessWindowStation, GetUserObjectInformationW, DestroyWindow, GetMessageW, PostQuitMessage, DispatchMessageW, GetWindowLongW, RegisterClassExW, TranslateMessage, PostMessageW, UnregisterClassW
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
version.dll
GetFileVersionInfoSizeA, VerQueryValueA, GetFileVersionInfoA
wtsapi32.dll
WTSQueryUserToken, WTSEnumerateSessionsW, WTSRegisterSessionNotification, WTSEnumerateProcessesW, WTSFreeMemory, WTSOpenServerW, WTSUnRegisterSessionNotification, WTSCloseServer
