Import table
advapi32.dll
CreateServiceW, RegEnumKeyExW, SetServiceStatus, RegisterEventSourceW, ReportEventW, DeregisterEventSource, RegQueryInfoKeyW, RegSetValueExW, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW, ControlService, ChangeServiceConfigW, OpenSCManagerW, OpenServiceW, QueryServiceConfigW, CloseServiceHandle, EqualSid, GetSecurityDescriptorDacl, AllocateAndInitializeSid, GetLengthSid, InitializeAcl, AddAccessDeniedAce, AddAccessAllowedAce, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, FreeSid, AdjustTokenPrivileges, OpenProcessToken, GetTokenInformation, LookupPrivilegeValueW, ChangeServiceConfig2W, CreateProcessAsUserW, SetTokenInformation, DuplicateTokenEx, RegisterServiceCtrlHandlerExW, StartServiceCtrlDispatcherW, DeleteService
crypt32.dll
CertFreeCertificateContext, CryptMsgClose, CertGetNameStringW, CertFindCertificateInStore, CryptMsgGetParam, CryptQueryObject, CertCloseStore
imm32.dll
ImmDisableIME
kernel32.dll
DuplicateHandle, OpenProcess, GetCurrentProcessId, MultiByteToWideChar, LoadLibraryExW, CancelWaitableTimer, SetWaitableTimer, CreateWaitableTimerW, GetCommandLineW, CreateFileW, CreateSemaphoreW, OpenSemaphoreW, OpenWaitableTimerW, GetCurrentThreadId, GetTickCount, HeapFree, HeapAlloc, GetProcessHeap, GetPrivateProfileIntW, QueryPerformanceCounter, GetStartupInfoW, GetModuleHandleA, ExitProcess, HeapSize, HeapReAlloc, HeapDestroy, GetVersionExA, GetSystemDefaultLCID, lstrcpynW, GetModuleFileNameW, lstrcatW, lstrcmpiW, InterlockedDecrement, InterlockedIncrement, FindResourceW, FindResourceExW, LoadResource, LockResource, SizeofResource, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, Sleep, CreateThread, lstrcpyW, ResetEvent, ReleaseMutex, OpenFileMappingW, WaitForSingleObject, TerminateThread, SetEvent, WaitForMultipleObjects, LoadLibraryW, GetProcAddress, FreeLibrary, GlobalAlloc, GlobalFree, CreateFileMappingW, CreateMutexW, OpenMutexW, CreateEventW, OpenEventW, LocalAlloc, LocalFree, SetLastError, GetCurrentProcess, GetLastError, CloseHandle, lstrcmpW, lstrlenW, GetVersionExW, GetThreadLocale, GetLocaleInfoA, GetACP, InterlockedExchange, GetUserDefaultLCID, GetSystemTimeAsFileTime, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, HeapSetInformation, InterlockedCompareExchange, DecodePointer, WTSGetActiveConsoleSessionId, CreateProcessW, RaiseException, GetModuleHandleW, LoadLibraryA, InitializeCriticalSectionAndSpinCount, EncodePointer
msvcr100.dll
DllMain
msvcr70.dll
DllMain
msvcr80.dll
DllMain
ole32.dll
CoInitializeEx, CoUninitialize, CoSuspendClassObjects, StringFromGUID2, CoCreateInstance, CoResumeClassObjects, CoTaskMemRealloc, CoCreateFreeThreadedMarshaler, CoTaskMemFree, CoTaskMemAlloc, CoInitializeSecurity, CoRevokeClassObject, CoGetCurrentProcess, CoReleaseMarshalData, CreateStreamOnHGlobal, CoUnmarshalInterface, CLSIDFromString, CoInitialize, CoRegisterClassObject, CoMarshalInterface, CoAddRefServerProcess, CoReleaseServerProcess
psapi.dll
EnumProcessModules, GetModuleFileNameExW
shlwapi.dll
PathFileExistsW, PathFindExtensionW
user32.dll
CloseWindowStation, SetProcessWindowStation, PostMessageW, wsprintfW, RegisterDeviceNotificationW, MessageBoxW, MsgWaitForMultipleObjects, IsWindow, RegisterWindowMessageW, CharNextW, LoadStringW, CharUpperW, TranslateMessage, PeekMessageW, PostThreadMessageW, UnregisterDeviceNotification, DispatchMessageW, GetMessageW, GetSystemMetrics, OpenInputDesktop, GetUserObjectInformationW, CloseDesktop, GetProcessWindowStation, OpenWindowStationW, UnregisterClassA
version.dll
GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW
wintrust.dll
WinVerifyTrust