Import table
advapi32.dll
SetServiceStatus, CryptAcquireContextW, CryptReleaseContext, CryptVerifySignatureW, CryptDestroyKey, CryptDestroyHash, CryptCreateHash, CryptHashData, CryptImportKey, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerExW, ControlService, DeleteService, CreateWellKnownSid, CreateServiceW, StartServiceW, OpenThreadToken, OpenProcessToken, InitializeAcl, AddAccessAllowedAce, GetAclInformation, AddAce, GetAce, GetTokenInformation, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, IsValidSid, GetLengthSid, CopySid, RegisterEventSourceW, ReportEventW, DeregisterEventSource, QueryServiceStatus, OpenServiceW, ChangeServiceConfigW, OpenSCManagerW, GetServiceKeyNameW, CloseServiceHandle, AllocateAndInitializeSid, SetEntriesInAclW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, FreeSid, RegQueryValueExW, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW, EqualSid
kernel32.dll
DllMain, GetCurrentThreadId, CreateEventW, OpenProcess, GetVersionExW, DeleteTimerQueue, GetCurrentProcessId, CreateTimerQueueTimer, CreateTimerQueue, SetEnvironmentVariableW, GetVolumeInformationW, FlushFileBuffers, QueryDosDeviceW, LoadLibraryW, GlobalAlloc, TerminateProcess, GetExitCodeProcess, CreateProcessW, VerifyVersionInfoW, VerSetConditionMask, FormatMessageW, DeleteFileW, ReleaseMutex, QueryPerformanceFrequency, QueryPerformanceCounter, OutputDebugStringW, SetLastError, MoveFileW, GetTempFileNameW, FindClose, FindNextFileW, FindFirstFileW, GetFullPathNameW, GetFileAttributesExW, CreateDirectoryW, CreateMutexW, GetFirmwareEnvironmentVariableW, CompareStringW, HeapFree, HeapAlloc, GetProcessHeap, WriteFile, ExpandEnvironmentStringsW, WideCharToMultiByte, HeapDestroy, HeapReAlloc, HeapSize, SetFilePointer, IsValidLocale, EnumSystemLocalesA, GetLocaleInfoA, GetUserDefaultLCID, ReadFile, GetConsoleMode, GetConsoleCP, GetSystemTimeAsFileTime, GetCurrentThread, GetCurrentProcess, LoadLibraryExW, FreeLibrary, GetModuleFileNameW, lstrcmpiW, RaiseException, SetEvent, FindFirstVolumeW, FindNextVolumeW, FindVolumeClose, GetVolumePathNamesForVolumeNameW, GetCommandLineW, GetSystemPowerStatus, DeviceIoControl, ReleaseSemaphore, CreateSemaphoreW, LocalFree, LocalAlloc, CreateThread, WaitForSingleObject, SetProcessShutdownParameters, MultiByteToWideChar, SetThreadPriority, GetLocalTime, InitializeCriticalSection, EnterCriticalSection, LeaveCriticalSection, Sleep, WaitForMultipleObjects, TerminateThread, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, GlobalFree, GetModuleHandleW, GetProcAddress, InterlockedCompareExchange, CreateFileW, InterlockedExchange, InterlockedDecrement, OpenEventW, PulseEvent, CloseHandle, lstrlenW, InterlockedIncrement, GetLastError, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, SetStdHandle, WriteConsoleW, SetEndOfFile, SetEnvironmentVariableA, EncodePointer, DecodePointer, GetTickCount, GetFileType, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetTimeZoneInformation, GetLocaleInfoW, GetStdHandle, HeapCreate, ExitProcess, IsProcessorFeaturePresent, IsValidCodePage, GetOEMCP, GetACP, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TlsFree, TlsSetValue, TlsGetValue, TlsAlloc, GetCPInfo, LCMapStringW, GetFileAttributesW, GetStartupInfoW, HeapSetInformation, VirtualQuery, RtlUnwind, ExitThread, ResumeThread, GetTimeFormatW, GetDateFormatW, VirtualProtect, VirtualAlloc, GetSystemInfo, GetStringTypeW
ole32.dll
CoTaskMemFree, CoTaskMemRealloc, CoTaskMemAlloc, CoFreeUnusedLibraries, CoRevokeClassObject, CoRegisterClassObject, CoSuspendClassObjects, StringFromGUID2, CoSetProxyBlanket, CoResumeClassObjects, CoInitializeEx, CLSIDFromString, OleRun, CoDisconnectObject, CoCreateGuid, CoInitializeSecurity, CoInitialize, CoUninitialize, CoCreateInstance, CoAddRefServerProcess, CoReleaseServerProcess
psapi.dll
GetProcessImageFileNameW, EnumProcesses
setupapi.dll
CM_Get_Sibling, CM_Get_Device_ID_Size, SetupDiDestroyDeviceInfoList, CM_Get_Device_IDW, SetupDiOpenDeviceInfoW, CM_Get_Child, SetupDiOpenClassRegKeyExW, SetupDiEnumDeviceInterfaces, CM_Get_DevNode_Status, SetupDiGetClassDevsW, SetupDiEnumDeviceInfo, SetupDiGetDeviceRegistryPropertyW, CM_Locate_DevNodeW
shell32.dll
CommandLineToArgvW, SHGetFolderPathW
shlwapi.dll
StrTrimW, StrCmpNIW, StrCmpIW, StrCmpW
user32.dll
UnregisterDeviceNotification, RegisterDeviceNotificationW, LoadStringW, CharUpperW, TranslateMessage, DispatchMessageW, GetMessageW, PostThreadMessageW, GetSystemMetrics, CharNextW
version.dll
GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueW