Import table
advapi32.dll
AddAccessAllowedAce, RegCreateKeyExA, RegSetValueExW, RegCreateKeyExW, RegDeleteValueW, RegEnumValueA, GetTokenInformation, OpenThreadToken, OpenProcessToken, AllocateAndInitializeSid, GetLengthSid, InitializeAcl, RegDeleteKeyA, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, IsValidSecurityDescriptor, FreeSid, RegEnumKeyA, RegEnumValueW, CryptCreateHash, CryptHashData, CryptGetHashParam, CryptDestroyHash, CryptAcquireContextA, CryptGenRandom, CryptReleaseContext, RegEnumKeyExW, RegQueryValueExW, GetSecurityDescriptorLength, MakeSelfRelativeSD, GetSecurityDescriptorOwner, GetSecurityDescriptorGroup, GetSecurityDescriptorDacl, GetSecurityDescriptorSacl, MakeAbsoluteSD, GetSecurityDescriptorControl, ImpersonateSelf, AccessCheck, RevertToSelf, RegOpenKeyExW, OpenSCManagerA, LockServiceDatabase, OpenServiceA, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, SetServiceObjectSecurity, ChangeServiceConfigA, CreateServiceA, CloseServiceHandle, UnlockServiceDatabase, RegQueryInfoKeyA, RegQueryValueExA, RegEnumKeyExA, RegQueryInfoKeyW, RegSetValueExA, RegCloseKey, RegDeleteValueA, RegOpenKeyExA
kernel32.dll
DllMain
ole32.dll
CoTaskMemAlloc, CoTaskMemRealloc, CoTaskMemFree, CoCreateInstance, CLSIDFromProgID, ProgIDFromCLSID, CoUnmarshalInterface, CreateStreamOnHGlobal, CoSetProxyBlanket, CoQueryProxyBlanket, CoCopyProxy, CoGetClassObject, StringFromGUID2, CoInitialize, CoInitializeEx, CoWaitForMultipleHandles, PropVariantClear, StringFromCLSID, CoUninitialize
shell32.dll
SHGetMalloc, SHGetSpecialFolderLocation, SHGetPathFromIDListA
shlwapi.dll
PathGetCharTypeW, PathRemoveBackslashA, PathIsUNCW, PathIsUNCA, PathIsRootA, PathIsRelativeW, PathUnquoteSpacesW, PathIsFileSpecW, PathIsFileSpecA, PathIsDirectoryA, PathGetDriveNumberA, PathAppendA, PathStripPathW, PathFileExistsA, PathAppendW, PathAddBackslashW, PathFileExistsW, PathUnquoteSpacesA, PathStripPathA, PathSkipRootW, PathSkipRootA, PathIsRelativeA
user32.dll
PostMessageA, IsWindow, GetClassInfoExA, LoadCursorA, DestroyWindow, LoadStringA, GetWindowLongA, CallWindowProcA, DefWindowProcA, RegisterClassExA, CreateWindowExA, SetWindowLongA, UnregisterClassA, DispatchMessageA, TranslateMessage, PeekMessageA, CharNextA, CharNextW, GetWindowThreadProcessId, FindWindowW, GetFocus
Export table
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer