Import table
advapi32.dll
InitializeSecurityDescriptor, ConvertStringSecurityDescriptorToSecurityDescriptorW, ConvertSidToStringSidW, ConvertStringSidToSidW, OpenThreadToken, ChangeServiceConfigW, QueryServiceConfigW, RevertToSelf, RegOpenCurrentUser, ImpersonateLoggedOnUser, RegEnumKeyW, RegNotifyChangeKeyValue, CryptAcquireContextW, CryptCreateHash, CryptHashData, CryptGetHashParam, CryptDestroyHash, CryptReleaseContext, DuplicateToken, CheckTokenMembership, ChangeServiceConfig2W, RegisterServiceCtrlHandlerExW, StartServiceCtrlDispatcherW, RegQueryValueExW, SetServiceStatus, DeregisterEventSource, ReportEventW, RegisterEventSourceW, QueryServiceStatusEx, SetSecurityDescriptorDacl, RegDeleteValueW, RegCreateKeyExW, RegSetValueExW, RegEnumKeyExW, RegQueryInfoKeyW, RegDeleteKeyW, OpenSCManagerW, DeleteService, ControlService, StartServiceW, OpenServiceW, CloseServiceHandle, CreateServiceW, LookupAccountNameW, RegCloseKey, RegEnumValueW, RegOpenKeyExW, EqualSid, IsValidSid, FreeSid, AllocateAndInitializeSid, CreateProcessAsUserW, DuplicateTokenEx, GetTokenInformation, EnumServicesStatusExW, RegOpenKeyW, EnumDependentServicesW
kernel32.dll
DllMain
ole32.dll
CoTaskMemFree, CoCreateInstance, StringFromGUID2, CoTaskMemRealloc, CoTaskMemAlloc, CoInitializeSecurity, CLSIDFromString, CoInitializeEx, CoUninitialize, CoResumeClassObjects, CoRevokeClassObject, CoSuspendClassObjects, CoCreateFreeThreadedMarshaler, StringFromCLSID, CoRevertToSelf, CoImpersonateClient, CoInitialize, CoRegisterClassObject
psapi.dll
EnumProcesses, GetProcessImageFileNameW, GetModuleFileNameExW, GetModuleBaseNameW
shell32.dll
SHGetFolderLocation, SHGetPathFromIDListW, SHGetFolderPathW, SHGetSpecialFolderLocation, SHGetMalloc
shlwapi.dll
PathStripPathW, PathFindExtensionW, PathRemoveExtensionW, PathGetArgsW, PathRemoveArgsW, PathIsRelativeW, PathFindOnPathW, PathSearchAndQualifyW, PathCanonicalizeW, PathIsRootW, PathAppendW, PathRemoveFileSpecW, PathFindFileNameW, StrStrIW, StrCmpNIW, PathIsDirectoryW, PathParseIconLocationW, PathRemoveBlanksW, PathFileExistsW, PathAddBackslashW
user32.dll
CharNextW, PostThreadMessageW, DispatchMessageW, TranslateMessage, GetMessageW, CharUpperW, LoadStringW, wsprintfW
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
version.dll
GetFileVersionInfoSizeW, VerQueryValueW, GetFileVersionInfoW
wtsapi32.dll
WTSQueryUserToken, WTSFreeMemory, WTSQuerySessionInformationW, WTSEnumerateSessionsW, WTSCloseServer, WTSOpenServerW