Import table
advapi32.dll
RegCreateKeyA, ImpersonateLoggedOnUser, DeregisterEventSource, ReportEventA, RegisterEventSourceA, RevertToSelf, RegSetValueExA, TraceEvent, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, RegisterTraceGuidsW, UnregisterTraceGuids, RegNotifyChangeKeyValue, GetSidLengthRequired, InitializeSid, GetSidSubAuthority, RegCreateKeyExW, RegCloseKey, RegQueryValueExW, ConvertSidToStringSidW, GetTokenInformation, OpenProcessToken, RegOpenKeyExW, RegEnumKeyExW, RegQueryInfoKeyW, RegEnumValueW, RegDeleteKeyW, RegDeleteValueW, RegSetValueExW, RegOpenKeyExA, RegQueryValueExA, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, GetSecurityDescriptorDacl, AddAce, InitializeAcl, GetAclInformation, GetSecurityDescriptorControl, MakeAbsoluteSD, GetSecurityDescriptorSacl, GetSecurityDescriptorGroup, GetSecurityDescriptorOwner, MakeSelfRelativeSD, GetSecurityDescriptorLength, GetLengthSid, IsValidSid, CopySid, FreeSid, RegDeleteKeyA, RegDeleteValueA, RegCreateKeyExA, RegQueryInfoKeyA, RegEnumKeyExA, QueryServiceStatus, CloseServiceHandle, OpenServiceA, OpenSCManagerA, CryptDestroyHash, CryptGetHashParam, CryptHashData, CryptCreateHash, CryptDestroyKey, CryptEncrypt, CryptDecrypt, CryptSignHashA, CryptVerifySignatureA, CryptGetUserKey, CryptReleaseContext, CryptDeriveKey, CryptSetProvParam, SetEntriesInAclA, AllocateAndInitializeSid, CryptGetProvParam, CryptGenKey, CryptAcquireContextA
iphlpapi.dll
GetAdaptersInfo
kernel32.dll
DllMain
ole32.dll
StringFromGUID2, StgCreateDocfile, CoGetClassObject, CreateBindCtx, StgOpenStorage, CoInitializeEx, CoTaskMemRealloc, CoTaskMemAlloc, CoUninitialize, StringFromCLSID, CoCreateInstance, CoTaskMemFree
rpcrt4.dll
UuidToStringA, UuidCreate, RpcStringFreeA
shell32.dll
SHGetSpecialFolderPathA, SHGetFolderPathW, SHGetSpecialFolderPathW, SHGetFolderPathA
shlwapi.dll
PathAppendW, UrlGetPartA, PathAppendA, SHDeleteKeyW, UrlCombineA
urlmon.dll
MkParseDisplayNameEx
user32.dll
CreateWindowExW, CharNextW, DefWindowProcW, UnregisterClassW, wsprintfW, MsgWaitForMultipleObjects, GetUserObjectInformationW, GetProcessWindowStation, GetDesktopWindow, MessageBoxA, LoadStringW, LoadImageW, LoadBitmapW, LoadIconW, PeekMessageW, TranslateMessage, DispatchMessageW, RegisterClassW, CreateWindowExA, DefWindowProcA, RegisterClassA, LoadStringA, CharNextA, wsprintfA, PeekMessageA, DispatchMessageA, UnregisterClassA
version.dll
VerQueryValueW, GetFileVersionInfoSizeW, GetFileVersionInfoW
winhttp.dll
WinHttpGetProxyForUrl, WinHttpSetOption, WinHttpCrackUrl, WinHttpQueryDataAvailable, WinHttpCloseHandle, WinHttpQueryHeaders, WinHttpOpenRequest, WinHttpConnect, WinHttpOpen, WinHttpReceiveResponse, WinHttpSendRequest, WinHttpReadData
wintrust.dll
WinVerifyTrust
ws2_32.dll
getaddrinfo
wtsapi32.dll
WTSQueryUserToken
Export table
DllCanDefer
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
