Import table
advapi32.dll
ConvertSidToStringSidW, ConvertStringSidToSidW, OpenThreadToken, ChangeServiceConfigW, QueryServiceConfigW, RevertToSelf, RegOpenCurrentUser, ImpersonateLoggedOnUser, RegEnumKeyW, RegNotifyChangeKeyValue, CryptAcquireContextW, CryptCreateHash, CryptHashData, CryptGetHashParam, CryptDestroyHash, CryptReleaseContext, DuplicateToken, CheckTokenMembership, ChangeServiceConfig2W, RegisterServiceCtrlHandlerExW, StartServiceCtrlDispatcherW, RegQueryValueExW, SetServiceStatus, DeregisterEventSource, ReportEventW, RegisterEventSourceW, QueryServiceStatusEx, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, RegDeleteValueW, RegCreateKeyExW, RegSetValueExW, RegEnumKeyExW, RegQueryInfoKeyW, RegDeleteKeyW, OpenSCManagerW, DeleteService, ControlService, StartServiceW, OpenServiceW, CloseServiceHandle, CreateServiceW, LookupAccountNameW, RegCloseKey, RegEnumValueW, RegOpenKeyExW, EqualSid, IsValidSid, FreeSid, AllocateAndInitializeSid, CreateProcessAsUserW, DuplicateTokenEx, GetTokenInformation, EnumServicesStatusExW, RegOpenKeyW, EnumDependentServicesW, ConvertStringSecurityDescriptorToSecurityDescriptorW
kernel32.dll
DllMain
ole32.dll
CoRegisterClassObject, CoCreateFreeThreadedMarshaler, StringFromGUID2, CoRevertToSelf, CoImpersonateClient, CoInitialize, CoCreateInstance, CoTaskMemFree, CoTaskMemRealloc, CoTaskMemAlloc, CoInitializeSecurity, CLSIDFromString, CoAddRefServerProcess, CoReleaseServerProcess, CoInitializeEx, CoResumeClassObjects, StringFromCLSID, CoRevokeClassObject, CoUninitialize
psapi.dll
GetProcessImageFileNameW, GetModuleBaseNameW, GetModuleFileNameExW, EnumProcesses
setupapi.dll
SetupDiGetClassDevsW, SetupDiEnumDeviceInfo, SetupDiChangeState, SetupDiGetDeviceRegistryPropertyW, SetupDiSetClassInstallParamsW, SetupDiDestroyDriverInfoList, SetupDiGetClassDescriptionW, SetupDiDestroyDeviceInfoList
shell32.dll
SHGetMalloc, SHGetFolderLocation, SHGetPathFromIDListW, SHGetFolderPathW, SHGetSpecialFolderLocation
shlwapi.dll
PathSearchAndQualifyW, PathFindOnPathW, PathFileExistsW, PathRemoveArgsW, PathGetArgsW, PathRemoveExtensionW, PathFindFileNameW, PathStripPathW, PathFindExtensionW, PathCanonicalizeW, PathIsRootW, PathAppendW, PathAddBackslashW, PathRemoveFileSpecW, StrStrIW, StrCmpNIW, PathIsDirectoryW, PathParseIconLocationW, PathRemoveBlanksW, PathIsRelativeW
user32.dll
DispatchMessageW, TranslateMessage, GetMessageW, CharUpperW, wsprintfW, CharNextW, PostThreadMessageW, LoadStringW
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
version.dll
GetFileVersionInfoW, VerQueryValueW, GetFileVersionInfoSizeW
wtsapi32.dll
WTSCloseServer, WTSEnumerateSessionsW, WTSOpenServerW, WTSFreeMemory, WTSQueryUserToken, WTSQuerySessionInformationW
