Import table
api-ms-win-core-com-l1-1-0.dll
CoRegisterClassObject, CoRevokeClassObject, CoTaskMemRealloc, CoUninitialize, CoInitializeEx, CLSIDFromString, StringFromGUID2, CoSetProxyBlanket, CoTaskMemFree, PropVariantClear, CoCreateInstance, CoWaitForMultipleHandles, CoTaskMemAlloc, CoGetMalloc
api-ms-win-core-delayload-l1-1-1.dll
DelayLoadFailureHook, ResolveDelayLoadedAPI
api-ms-win-core-errorhandling-l1-1-0.dll
GetLastError, UnhandledExceptionFilter, SetUnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll
SetUnhandledExceptionFilter, GetLastError, UnhandledExceptionFilter
api-ms-win-core-file-l1-1-1.dll
DeleteFileW, CreateFileW, ReadFile, GetFileSize, FileTimeToSystemTime, GetFileAttributesExW
api-ms-win-core-file-l1-2-0.dll
CreateFileW, CompareFileTime, GetFileAttributesExW, DeleteFileW, GetFileSize, ReadFile
api-ms-win-core-file-l1-2-1.dll
GetFileAttributesExW, ReadFile, DeleteFileW, CreateFileW, CompareFileTime, GetFileSize
api-ms-win-core-handle-l1-1-0.dll
CloseHandle
api-ms-win-core-heap-l1-1-0.dll
HeapAlloc, GetProcessHeap, HeapFree, HeapReAlloc
api-ms-win-core-heap-l1-2-0.dll
HeapReAlloc, GetProcessHeap, HeapAlloc, HeapFree
api-ms-win-core-heap-obsolete-l1-1-0.dll
LocalFree, LocalAlloc
api-ms-win-core-interlocked-l1-1-0.dll
InterlockedIncrement, InterlockedDecrement, InterlockedExchange, InterlockedCompareExchange
api-ms-win-core-interlocked-l1-2-0.dll
InterlockedIncrement, InterlockedCompareExchange, InterlockedExchange, InterlockedDecrement
api-ms-win-core-kernel32-legacy-l1-1-0.dll
GetComputerNameW
api-ms-win-core-kernel32-legacy-l1-1-1.dll
GetComputerNameW
api-ms-win-core-libraryloader-l1-1-0.dll
LoadStringW, DisableThreadLibraryCalls, GetProcAddress, FreeLibrary, LoadLibraryExA
api-ms-win-core-libraryloader-l1-1-1.dll
DisableThreadLibraryCalls, LoadStringW, GetModuleHandleW, GetProcAddress
api-ms-win-core-localization-l1-1-1.dll
LoadStringByReference, FormatMessageW
api-ms-win-core-localization-l1-2-0.dll
FormatMessageW
api-ms-win-core-localization-l1-2-1.dll
FormatMessageW
api-ms-win-core-localregistry-l1-1-0.dll
RegOpenKeyExW, RegEnumValueW, RegQueryInfoKeyW, RegDeleteTreeW, RegCreateKeyExW, RegSetValueExW, RegDeleteValueW, RegGetValueW, RegCloseKey
api-ms-win-core-processenvironment-l1-1-0.dll
ExpandEnvironmentStringsW
api-ms-win-core-processenvironment-l1-2-0.dll
ExpandEnvironmentStringsW
api-ms-win-core-processthreads-l1-1-1.dll
GetCurrentProcessId, OpenProcessToken, GetCurrentThreadId, TerminateProcess, GetCurrentThread, GetCurrentProcess, OpenThreadToken
api-ms-win-core-processthreads-l1-1-2.dll
TerminateProcess, OpenThreadToken, GetCurrentThreadId, GetCurrentProcess, OpenProcessToken, GetCurrentThread, GetCurrentProcessId
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegOpenKeyExW, RegDeleteTreeW, RegCloseKey, RegSetValueExW, RegQueryInfoKeyW, RegEnumValueW, RegGetValueW, RegCreateKeyExW, RegDeleteKeyExW, RegCopyTreeW, RegDeleteValueW
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
SHExpandEnvironmentStringsW
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
StrStrIW, StrCmpW, StrChrW, StrCmpIW, QISearch, StrRChrW
api-ms-win-core-string-l1-1-0.dll
CompareStringOrdinal, MultiByteToWideChar, CompareStringW
api-ms-win-core-string-obsolete-l1-1-0.dll
lstrcmpiW, lstrcmpA, lstrlenW, lstrlenA
api-ms-win-core-synch-l1-1-1.dll
EnterCriticalSection, LeaveCriticalSection, AcquireSRWLockShared, InitializeCriticalSection, DeleteCriticalSection, ReleaseSRWLockExclusive, AcquireSRWLockExclusive, InitializeSRWLock, ReleaseSRWLockShared, WaitForSingleObject, Sleep, InitOnceExecuteOnce, SetEvent, CreateEventW, ResetEvent
api-ms-win-core-synch-l1-2-0.dll
CreateEventW, ReleaseSRWLockShared, WaitForSingleObject, EnterCriticalSection, LeaveCriticalSection, SetEvent, Sleep, InitializeCriticalSection, ResetEvent, DeleteCriticalSection, AcquireSRWLockShared, InitOnceExecuteOnce, AcquireSRWLockExclusive, ReleaseSRWLockExclusive
api-ms-win-core-sysinfo-l1-1-1.dll
SystemTimeToFileTime, GetSystemTimeAsFileTime, GetTickCount, SystemTimeToTzSpecificLocalTime, TzSpecificLocalTimeToSystemTime, GetComputerNameExW
api-ms-win-core-sysinfo-l1-2-0.dll
GetComputerNameExW, GetTickCount, GetSystemTimeAsFileTime
api-ms-win-core-sysinfo-l1-2-1.dll
GetSystemTimeAsFileTime, GetComputerNameExW, GetTickCount
api-ms-win-core-timezone-l1-1-0.dll
SystemTimeToFileTime, SystemTimeToTzSpecificLocalTime, FileTimeToSystemTime, TzSpecificLocalTimeToSystemTime
api-ms-win-eventing-controller-l1-1-0.dll
StartTraceW, EnableTraceEx2, StopTraceW
api-ms-win-legacy-kernel32-l1-1-0.dll
GetComputerNameW
api-ms-win-legacy-shlwapi-l1-1-0.dll
SHExpandEnvironmentStringsW
api-ms-win-obsolete-kernelbase-l1-1-0.dll
lstrlenW, LocalFree, lstrcmpiW, LocalAlloc
api-ms-win-obsolete-shlwapi-l1-1-0.dll
StrCmpIW, StrStrIW, StrChrW, QISearch, StrRChrW
api-ms-win-security-base-l1-1-0.dll
GetLengthSid, IsValidSid, GetSidSubAuthority, CreateWellKnownSid, GetSidSubAuthorityCount, GetFileSecurityW, ImpersonateLoggedOnUser, RevertToSelf, GetSecurityDescriptorDacl, CopySid, GetAclInformation, GetAce, EqualSid, EqualDomainSid, GetTokenInformation
api-ms-win-security-base-l1-2-0.dll
GetAclInformation, GetAce, EqualSid, IsValidSid, GetLengthSid, GetFileSecurityW, GetSidSubAuthority, GetSidSubAuthorityCount, RevertToSelf, ImpersonateLoggedOnUser, EqualDomainSid, CreateWellKnownSid, GetSecurityDescriptorDacl, GetTokenInformation, CopySid
api-ms-win-security-credentials-l1-1-0.dll
CredEnumerateW, CredFree, CredDeleteW, CredWriteW
api-ms-win-security-credentials-l2-1-0.dll
CredWriteW, CredEnumerateW, CredDeleteW
api-ms-win-security-lsalookup-l1-1-0.dll
LookupAccountSidLocalW
api-ms-win-service-core-l1-1-0.dll
SetServiceStatus, RegisterServiceCtrlHandlerExW
api-ms-win-service-core-l1-1-1.dll
SetServiceStatus, RegisterServiceCtrlHandlerExW
api-ms-win-service-management-l1-1-0.dll
CloseServiceHandle, OpenServiceW, OpenSCManagerW
api-ms-win-service-winsvc-l1-2-0.dll
QueryServiceStatus
api-ms-win-shcore-comhelpers-l1-1-0.dll
IUnknown_Set
api-ms-win-shcore-obsolete-l1-1-0.dll
SHStrDupW
api-ms-win-shcore-registry-l1-1-0.dll
SHDeleteValueW, SHEnumKeyExW, SHDeleteKeyW, SHEnumValueW, SHRegGetValueW, SHDeleteEmptyKeyW, SHSetValueW
api-ms-win-shcore-registry-l1-1-1.dll
SHDeleteKeyW, SHEnumKeyExW, SHEnumValueW, SHRegGetValueW, SHDeleteEmptyKeyW, SHDeleteValueW
api-ms-win-shcore-sysinfo-l1-1-0.dll
IsOS
api-ms-win-shcore-thread-l1-1-0.dll
SHCreateThread, SHCreateThreadWithHandle
kernel32.dll
InitOnceExecuteOnce, HeapReAlloc, FileTimeToSystemTime, SystemTimeToFileTime, lstrcmpiW, CompareStringW, ExpandEnvironmentStringsW, ReadFile, GetFileSize, GetComputerNameExW, FormatMessageW, ResetEvent, GetModuleHandleW, CreateFileW, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, Sleep, InterlockedExchange, InterlockedCompareExchange, DelayLoadFailureHook, CreateEventW, WaitForSingleObject, SetEvent, HeapFree, GetProcessHeap, HeapAlloc, GetComputerNameW, InterlockedDecrement, InterlockedIncrement, CloseHandle, InitializeCriticalSection, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, CompareStringOrdinal, GetSystemTimeAsFileTime, lstrlenW, LocalAlloc, LocalFree, GetLastError, SystemTimeToTzSpecificLocalTime, DeleteFileW, GetFileAttributesExW, TzSpecificLocalTimeToSystemTime
msvcrt.dll
DllMain
ntdll.dll
EtwRegisterTraceGuidsW, EtwGetTraceLoggerHandle, EtwGetTraceEnableLevel, EtwGetTraceEnableFlags, WinSqmIncrementDWORD, EtwEventWrite, EtwTraceMessage, RtlInitializeSid, RtlInitUnicodeString, RtlMapGenericMask, RtlNtStatusToDosError, EtwUnregisterTraceGuids, EtwEventRegister, EtwEventUnregister, RtlSubAuthoritySid
shell32.dll
SHGetKnownFolderPath, SHCreateItemFromRelativeName, SHGetKnownFolderIDList, SHCreateShellItemArrayFromShellItem, SHChangeNotify, SHGetKnownFolderItem
shlwapi.dll
StrToIntExW, SHStrDupW, SHEnumKeyExW, SHEnumValueW, SHRegGetValueW, SHDeleteValueW, StrCmpIW, StrRChrW, StrChrW, StrDupW, StrToInt64ExW, SHSetValueW, StrStrIW
ws2_32.dll
GetAddrInfoW, WSAAddressToStringW, FreeAddrInfoW
Export table
DllCanUnloadNow
DllGetClassObject
ListenerServiceMain