Import table
advapi32.dll
RegQueryValueExW, StartServiceA, CreateServiceW, RegDeleteValueA, RegSetValueExA, RegQueryValueExA, LookupAccountNameA, ConvertSidToStringSidW, OpenSCManagerA, OpenServiceA, CloseServiceHandle, RegOpenKeyExA, RegCloseKey, DeleteService, RegOpenKeyExW, RegEnumKeyExW
kernel32.dll
GetModuleFileNameW, GetLastError, WaitForSingleObject, SetEvent, ReadProcessMemory, LoadLibraryW, LocalFree, GetOverlappedResult, CreateEventA, CreateThread, OutputDebugStringA, FreeLibrary, GetModuleHandleA, GetProcAddress, GetCurrentProcess, GetVersionExA, CopyFileW, GetSystemDirectoryW, DeleteFileW, MoveFileExW, lstrlenW, GetCurrentProcessId, CreateFileA, DeviceIoControl, CreateFileW, GetFileSize, ReadFile, CloseHandle, OpenProcess, FlushFileBuffers, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, GetSystemTimeAsFileTime, SetLastError, MultiByteToWideChar, lstrlenA, GetSystemTime, FormatMessageW, GetCurrentThreadId, GetFileType, SetFilePointer, GetFileSizeEx, SetFilePointerEx, WriteFile, HeapFree, TlsFree, ReleaseMutex, SetEnvironmentVariableA, TlsAlloc, HeapAlloc, GetProcessHeap, GetEnvironmentVariableA, CreateMutexA, TlsSetValue, OpenThread, TlsGetValue, LocalFileTimeToFileTime, SystemTimeToFileTime, RtlUnwind, GetCommandLineA, RaiseException, HeapReAlloc, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetModuleHandleW, InterlockedIncrement, InterlockedDecrement, HeapCreate, HeapDestroy, VirtualFree, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, VirtualAlloc, Sleep, ExitProcess, GetStdHandle, GetModuleFileNameA, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, LCMapStringW, SetHandleCount, GetStartupInfoA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, QueryPerformanceCounter, GetTickCount, HeapSize, VirtualQuery, GetConsoleCP, GetConsoleMode, InitializeCriticalSectionAndSpinCount, LoadLibraryA, LCMapStringA, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, SetStdHandle, WideCharToMultiByte
secur32.dll
GetUserNameExA
shlwapi.dll
PathFileExistsW, StrCmpIW, PathFindExtensionW, SHDeleteKeyA
user32.dll
CharUpperW
version.dll
GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW
Export table
AddExceptionRule
ClearMonpoint
Init
Install
ReadVirtualMemory
ReplyMonpoint
SetMonpoint
SetMonpoint2
SetupInstall
StartMon
StopMon
Uninit
Uninstall