Import table
advapi32.dll
QueryServiceStatusEx, CreateServiceW, StartServiceW, OpenSCManagerW, OpenServiceW, CloseServiceHandle, QueryServiceStatus, ControlService, DeleteService, RegQueryValueExW, RegisterServiceCtrlHandlerW, SetServiceStatus, AllocateAndInitializeSid, FreeSid, SetEntriesInAclW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, RegDeleteValueW, RegCreateKeyExW, RegSetValueExW, RegDeleteKeyW, RegOpenKeyExW, RegCloseKey, RegEnumKeyExW, AdjustTokenPrivileges, LookupPrivilegeValueW, OpenProcessToken, ChangeServiceConfigW, ChangeServiceConfig2W, RegisterServiceCtrlHandlerExW, CryptVerifySignatureW, CheckTokenMembership
dbghelp.dll
ImageDirectoryEntryToData
kernel32.dll
SetEvent, ReleaseMutex, WaitForSingleObject, CreateEventW, lstrlenW, CreateMutexW, GetTickCount, FormatMessageW, VirtualFreeEx, CreateRemoteThread, CreateFileW, WriteProcessMemory, VirtualAllocEx, OpenProcess, lstrcmpiA, IsBadReadPtr, VirtualProtect, DisableThreadLibraryCalls, OpenMutexW, CloseHandle, GetCurrentProcess, IsWow64Process, LocalAlloc, InterlockedDecrement, LocalFree, InterlockedIncrement, CopyFileW, SetFileAttributesW, DeleteFileW, GetSystemDirectoryW, GetTempFileNameW, MoveFileExW, ExpandEnvironmentStringsW, GetModuleHandleExW, GetLastError, GetModuleFileNameW, FindFirstFileW, FindClose, lstrcmpiW, Sleep, LoadLibraryW, SetFilePointerEx, ReadFile, FlushInstructionCache, GetFileSizeEx, FreeLibrary, LoadLibraryExW, TerminateThread, ExitThread, FreeLibraryAndExitThread, Process32FirstW, ProcessIdToSessionId, Module32FirstW, Process32NextW, CreateToolhelp32Snapshot, Module32NextW, GetCurrentProcessId, ResumeThread, SetLastError, SearchPathW, GetVersionExW
ntdll.dll
RtlNtStatusToDosError, RtlCreateUserThread, NtQueueApcThread
shell32.dll
SHGetFolderPathW
user32.dll
MessageBoxW, LoadStringW, GetSystemMetrics
uxtheme.dll
IsThemeActive
Export table
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ServiceMain
ServiceRunCmd