Import table
advapi32.dll
RegSetValueExA, DeleteService, OpenSCManagerW, OpenServiceW, CloseServiceHandle, CreateServiceW, GetKernelObjectSecurity, AllocateAndInitializeSid, FreeSid, GetLengthSid, GetTokenInformation, InitializeSecurityDescriptor, LookupPrivilegeValueA, RegCreateKeyExW, RegDeleteKeyW, RegEnumKeyW, RegOpenKeyExW, RegSetValueExW, SetSecurityDescriptorDacl, RegCloseKey, RegOpenKeyExA, RegQueryValueExA, OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, ControlService, CopySid, IsValidSid, RegQueryValueExW, ConvertSidToStringSidW
crypt32.dll
CertCloseStore, CertFreeCertificateContext, CertFindCertificateInStore, CryptMsgGetParam, CryptQueryObject, CertGetNameStringW, CryptMsgClose
kernel32.dll
DllMain
netapi32.dll
NetApiBufferFree, NetShareGetInfo
ole32.dll
StringFromCLSID, CoTaskMemFree
psapi.dll
GetModuleFileNameExW
shell32.dll
SHGetMalloc, SHGetSpecialFolderPathW, SHGetPathFromIDListW, SHGetSpecialFolderLocation
user32.dll
GetKeyboardType, MessageBoxA, CloseDesktop, DispatchMessageA, GetSystemMetrics, GetThreadDesktop, GetUserObjectInformationA, MsgWaitForMultipleObjects, OpenInputDesktop, PeekMessageA, TranslateMessage
userenv.dll
UnloadUserProfile
wintrust.dll
WinVerifyTrust
Export table
CreateInstance3
InstallAppEventsDriver
UninstallAppEventsDriver