Import table
advapi32.dll
GetTraceEnableFlags, GetTraceLoggerHandle, TraceEvent, GetTraceEnableLevel, RegisterTraceGuidsW, UnregisterTraceGuids, RegCloseKey, RegQueryInfoKeyW, RegEnumKeyExW, RegOpenKeyExW, RegSetValueExW, RegCreateKeyExW, RegDeleteValueW, StartServiceCtrlDispatcherW, IsValidSid, GetLengthSid, CopySid, ConvertSidToStringSidW, LookupAccountSidW, RegQueryValueExW, RegNotifyChangeKeyValue, RegOpenKeyExA, RegQueryValueExA, RegisterServiceCtrlHandlerExW, SetServiceStatus, TraceMessage
kernel32.dll
InterlockedDecrement, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, GetProcessId, GetCurrentProcess, FreeLibrary, LoadLibraryExW, lstrcmpiW, LeaveCriticalSection, RaiseException, EnterCriticalSection, MultiByteToWideChar, SizeofResource, LoadResource, FindResourceExW, GetModuleFileNameW, InitializeCriticalSection, SetProcessWorkingSetSize, CloseHandle, Sleep, InterlockedExchangeAdd, GetSystemTimeAsFileTime, DeleteTimerQueueTimer, DeviceIoControl, CreateSemaphoreW, WaitForSingleObject, InterlockedExchange, ReleaseSemaphore, SetEvent, CreateEventW, ResetEvent, ExpandEnvironmentStringsW, QueryDosDeviceW, SetErrorMode, VerifyVersionInfoW, CompareFileTime, VerSetConditionMask, CreateFileW, InterlockedIncrement, CreateTimerQueueTimer, GetNativeSystemInfo, ReadFile, GetFileSizeEx, GetFileAttributesW, LoadLibraryW, GetModuleHandleExW, WaitForSingleObjectEx, CreateEventA, GetProcessHeap, LoadLibraryA, InterlockedCompareExchange64, DuplicateHandle, MapViewOfFile, CreateFileMappingW, UnmapViewOfFile, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, QueryPerformanceCounter, GetModuleHandleA, OutputDebugStringA, TerminateProcess, SetUnhandledExceptionFilter, UnhandledExceptionFilter, SwitchToThread, InterlockedCompareExchange, HeapDestroy, GetLastError, HeapSetInformation, HeapCreate, LocalFree, LocalAlloc, GetProcAddress, GetVersionExW, GetModuleHandleW, GetSystemDirectoryW, ChangeTimerQueueTimer
mpclient.dll
MpConfigGetValue, MpConfigGetValueAlloc, MpConfigIteratorOpen, MpConfigOpen, MpConfigClose, MpTelemetrySetDWORD, MpTelemetryIncrementDWORD, MpClientUtilExportFunctions, MpConfigIteratorEnum, MpConfigInitialize, MpTelemetryInitialize, MpTelemetryUninitialize, MpConfigUninitialize, MpAllocMemory, MpConfigUnregisterNotifications, MpHandleClose, MpConfigRegisterForNotifications, MpNotificationRegister, MpManagerOpen, MpTelemetrySetIfMaxDWORD, MpTelemetryAddToAverageDWORD, MpFreeMemory, MpUtilsExportFunctions, MpConfigIteratorClose, MpTelemetrySetString
msvcrt.dll
DllMain
nislog.dll
NisLogOnServiceStart, NisLogOnSignatureEntry, NisLogOnSignatureMatch, NisLogOnParseError, NisLogInitialize, NisLogSPrintfW, NisLogWrite, NisLogCleanup
ole32.dll
CoTaskMemFree, CoTaskMemRealloc, CoTaskMemAlloc, CoInitializeEx, CoCreateInstance, CoUninitialize, IIDFromString, CoRevokeClassObject
user32.dll
CharNextW, CharLowerBuffW, UnregisterClassA
version.dll
VerQueryValueW, GetFileVersionInfoW, GetFileVersionInfoSizeW
