Import table
advapi32.dll
RegisterServiceCtrlHandlerW, StartServiceW, RegDeleteKeyW, QueryServiceStatusEx, SetServiceObjectSecurity, QueryServiceObjectSecurity, RegDeleteValueW, StartServiceCtrlDispatcherW, RegQueryValueExW, RegOpenKeyExW, RegCloseKey, SetSecurityDescriptorSacl, GetSecurityDescriptorSacl, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, SetNamedSecurityInfoW, FreeSid, RegEnumKeyExW, RegCreateKeyExW, OpenServiceW, CloseServiceHandle, ControlService, DeleteService, ConvertStringSecurityDescriptorToSecurityDescriptorW, SetNamedSecurityInfoA, RegSetValueExW, SetServiceStatus, GetSecurityDescriptorLength, CreateServiceW, ChangeServiceConfig2W, RegQueryInfoKeyW, OpenSCManagerW
comctl32.dll
InitCommonControlsEx
gdi32.dll
SetBkMode, GetTextExtentPoint32W, BitBlt, DeleteDC, SelectObject, CreateCompatibleDC, DeleteObject, SetTextColor, CreateFontIndirectW, GetTextMetricsW, SetViewportOrgEx
kernel32.dll
GetCurrentProcess, LocalAlloc, GetModuleFileNameW, CreateProcessW, GetExitCodeProcess, CreateMutexW, OpenMutexW, ReleaseMutex, OpenProcess, TerminateProcess, MapViewOfFile, UnmapViewOfFile, GetLocalTime, SetEvent, CreateFileMappingW, OpenFileMappingW, GetCurrentThreadId, FlushInstructionCache, RaiseException, GetCurrentThread, GetCurrentDirectoryA, GetThreadContext, ResumeThread, GetVersionExA, SuspendThread, CreateToolhelp32Snapshot, Thread32First, Thread32Next, GetSystemDirectoryW, CreateEventW, ResetEvent, OpenEventW, WaitForMultipleObjects, GetCommandLineW, CopyFileW, FindFirstFileA, FileTimeToLocalFileTime, FileTimeToDosDateTime, CreateFileA, SetFilePointer, ReadFile, GetStdHandle, GetUserDefaultLangID, WideCharToMultiByte, GetCurrentProcessId, lstrcmpiW, LoadLibraryExW, HeapFree, CreateThread, lstrlenW, lstrcmpiA, SetErrorMode, GetVersion, GetModuleHandleA, TlsAlloc, TlsFree, TlsSetValue, TlsGetValue, LocalFree, GetSystemTimeAsFileTime, GetTimeZoneInformation, FileTimeToSystemTime, QueryPerformanceCounter, GetLocaleInfoA, GetACP, HeapSize, HeapReAlloc, HeapDestroy, InterlockedExchange, InterlockedCompareExchange, VirtualFree, VirtualAlloc, ExitThread, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, DeleteFileW, DeleteFileA, GetDriveTypeA, MoveFileW, GetCommandLineA, RtlUnwind, LCMapStringA, LCMapStringW, GetProcessHeap, GetCPInfo, FindClose, FindNextFileW, FindFirstFileW, CreateFileW, GetLastError, SetLastError, GetTickCount, IsBadReadPtr, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, InterlockedDecrement, GetStringTypeA, GetStringTypeW, HeapCreate, GetModuleFileNameA, GetOEMCP, IsValidCodePage, SetHandleCount, GetFileType, GetStartupInfoA, GetConsoleCP, GetConsoleMode, FlushFileBuffers, GetFullPathNameA, FreeEnvironmentStringsA, InterlockedIncrement, Sleep, LoadLibraryA, WaitForSingleObject, FreeLibrary, GetProcAddress, CloseHandle, CreateDirectoryW, GetFileAttributesW, WriteFile, FormatMessageW, MultiByteToWideChar, FindResourceExW, FindResourceW, SizeofResource, LockResource, LoadResource, ExitProcess, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetUserDefaultLCID, EnumSystemLocalesA, IsValidLocale, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, SetStdHandle, GetLocaleInfoW, SetEndOfFile, CompareStringA, CompareStringW, SetEnvironmentVariableA, GetThreadLocale, HeapAlloc, IsProcessorFeaturePresent, DllMain
ole32.dll
CLSIDFromProgID, OleRun, CoUninitialize, CoInitializeEx, CoInitializeSecurity, CoResumeClassObjects, CoSuspendClassObjects, CoRevokeClassObject, CoRegisterClassObject, CoTaskMemFree, CoTaskMemAlloc, CoTaskMemRealloc, StringFromGUID2, CoCreateInstance
shell32.dll
SHGetFolderPathW
user32.dll
LoadStringW, CharUpperW, PostThreadMessageW, MessageBoxW, CharNextW, SystemParametersInfoW, MoveWindow, RegisterClassExW, GetClassInfoExW, EnableWindow, CreateWindowExW, ScrollWindowEx, UpdateWindow, CharNextExA, GetScrollInfo, SetScrollPos, LoadIconW, ShowWindow, CreateDialogParamW, DialogBoxParamW, EndPaint, BeginPaint, LoadCursorW, CallWindowProcW, DefWindowProcW, GetParent, DrawTextW, SetCursor, DestroyCursor, GetWindowLongW, SetScrollInfo, InvalidateRect, SetWindowLongW, DrawTextExW, GetDlgItemTextW, MapWindowPoints, ClientToScreen, GetClientRect, GetWindowRect, GetDlgItem, SetWindowPos, SetActiveWindow, GetWindow, SetDlgItemTextW, SetWindowTextW, ReleaseDC, SendMessageW, GetDC, GetDesktopWindow, EndDialog, PostMessageW, IsDialogMessageW, TranslateMessage, DestroyWindow, DispatchMessageW, GetMessageW, IsWindow, UnregisterClassA, OffsetRect, PeekMessageW, PostQuitMessage, UnregisterClassW
version.dll
VerQueryValueW, GetFileVersionInfoW, GetFileVersionInfoSizeW
wininet.dll
InternetErrorDlg, InternetCloseHandle, InternetReadFile, HttpQueryInfoA, InternetSetOptionW, InternetQueryOptionW, HttpSendRequestA, HttpOpenRequestA, InternetConnectA, InternetOpenA
Export table
ComMain
CrashMain
Escort
Escort2
EscortIE11
EscortStop
HttpMain
Init
IsSamePath
Manifest
OffLoad
SetLogLabelLow