Import table
api-ms-win-service-core-l1-1-0.dll
RegisterServiceCtrlHandlerExW, SetServiceStatus
api-ms-win-service-management-l1-1-0.dll
CloseServiceHandle, OpenServiceW, OpenSCManagerW
api-ms-win-service-winsvc-l1-1-0.dll
QueryServiceStatus, ControlService
kernel32.dll
CompareStringW, QueueUserAPC, VirtualAllocEx, WriteProcessMemory, VirtualFreeEx, OpenProcess, ProcessIdToSessionId, OpenEventW, VirtualAlloc, ReadFile, VirtualFree, GetSystemDirectoryW, HeapReAlloc, LocalAlloc, LocalFree, GetProcessHeap, DisableThreadLibraryCalls, DelayLoadFailureHook, GetProcAddress, GetLastError, FreeLibrary, InterlockedCompareExchange, LoadLibraryExA, InitializeCriticalSectionAndSpinCount, EnterCriticalSection, LeaveCriticalSection, InterlockedIncrement, InterlockedDecrement, DeleteCriticalSection, GetVolumePathNamesForVolumeNameW, CompareStringOrdinal, WaitForSingleObject, CloseHandle, Sleep, HeapCreate, HeapDestroy, SystemTimeToFileTime, GetLocalTime, GetTickCount, lstrlenW, GetCurrentThreadId, HeapAlloc, HeapFree, QueueUserWorkItem, DuplicateHandle, GetCurrentProcess, GetCurrentThread, GetCurrentProcessId, InterlockedExchange, QueryPerformanceCounter, GetSystemTimeAsFileTime, LoadLibraryW, UnhandledExceptionFilter, SetUnhandledExceptionFilter, ResetEvent, lstrcmpW, ExpandEnvironmentStringsW, GetVolumePathNameW, GetVolumeNameForVolumeMountPointW, lstrcmpiW, FindClose, FindFirstFileW, DeviceIoControl, SetEvent, CreateFileW, GetPrivateProfileStringW, WritePrivateProfileStringW, CreateEventW, TerminateProcess, MultiByteToWideChar, GetVolumeInformationW, GetFileAttributesW
msvcrt.dll
DllMain
ntdll.dll
NtOpenProcessToken, EtwEventUnregister, NtQueryVolumeInformationFile, EtwEventEnabled, EtwEventWrite, RtlAllocateAndInitializeSid, RtlCompareMemory, NtFilterToken, NtClose, RtlFreeSid, RtlNtStatusToDosError, EtwEventRegister
rpcrt4.dll
I_RpcBindingInqLocalClientPID
slc.dll
SLGetWindowsInformationDWORD
user32.dll
RegisterDeviceNotificationW, UnregisterDeviceNotification
Export table
CreateHardwareEventMoniker
HardwareDetectionServiceMain
