Import table
advapi32.dll
DeregisterEventSource, RegisterEventSourceW, RegEnumValueW, RegCreateKeyW, RegOpenKeyExA, DuplicateTokenEx, CreateProcessAsUserW, RegSetValueExA, RegQueryValueExA, RegCreateKeyExA, RegQueryValueA, AllocateAndInitializeSid, FreeSid, SetKernelObjectSecurity, AccessCheck, DestroyPrivateObjectSecurity, CreatePrivateObjectSecurity, GetSidSubAuthorityCount, GetSidSubAuthority, RegCloseKey, RegCreateKeyExW, RegEnumKeyW, RegOpenKeyExW, RegQueryInfoKeyW, RegQueryValueExW, RegSetValueExW, CloseServiceHandle, QueryServiceConfigW, OpenServiceW, OpenSCManagerW, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegDeleteKeyW, RegEnumKeyExW, RegOpenKeyW, OpenThreadToken, InitializeSecurityDescriptor, CopySid, GetLengthSid, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, OpenProcessToken, AddAce, GetAce, GetAclInformation, InitializeAcl, AddAccessAllowedAce, SetSecurityDescriptorDacl, SetSecurityDescriptorSacl, GetSecurityDescriptorDacl, GetKernelObjectSecurity, RegDeleteValueW, RegQueryValueW, SetServiceStatus, RegisterServiceCtrlHandlerExW, DeleteService, QueryServiceStatus, ControlService, InitializeSid, GetSidLengthRequired, GetTokenInformation, LookupAccountSidW, StartServiceW, EventRegister, EventWrite, EventUnregister, RegDeleteKeyExW
cfgmgr32.dll
CM_Reenumerate_DevNode, CM_Open_DevNode_Key_Ex, CM_Get_DevNode_Registry_PropertyA, CM_Open_DevNode_Key, CM_Locate_DevNodeW, CM_Get_Device_ID_Size_Ex, CM_Get_Device_IDW, CM_Get_DevNode_Registry_PropertyW, CM_Set_DevNode_Registry_PropertyW, CM_Get_DevNode_Status
comdlg32.dll
GetFileTitleA
kernel32.dll
PurgeComm, SetCommMask, LocalFree, LocalAlloc, GetCurrentThreadId, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, InterlockedDecrement, GetVolumeInformationW, GetDriveTypeW, lstrcmpiW, GetLastError, lstrlenW, lstrcpynW, SetEvent, ResetEvent, CloseHandle, CreateMutexW, FreeLibrary, InterlockedIncrement, IsBadWritePtr, CreateEventW, InterlockedExchange, WaitForSingleObject, InterlockedCompareExchange, GetModuleFileNameW, CreateThread, MapViewOfFileEx, DuplicateHandle, OpenProcess, GetCurrentProcess, GetCurrentThread, UnmapViewOfFile, IsBadReadPtr, MulDiv, CreateFileMappingW, GetFileType, SetupComm, DeleteFileW, lstrcmpW, lstrcpyW, InitializeCriticalSection, MultiByteToWideChar, WideCharToMultiByte, lstrlenA, HeapDestroy, GetModuleHandleW, FormatMessageW, GetTickCount, SetLastError, DisableThreadLibraryCalls, Sleep, GetCurrentProcessId, WaitForSingleObjectEx, GetLocalTime, GetVersionExA, HeapFree, HeapAlloc, GetProcessHeap, lstrcpyA, WaitForMultipleObjects, SystemTimeToFileTime, GetSystemTime, lstrcpynA, IsBadStringPtrW, WriteFile, SetFilePointer, QueryPerformanceCounter, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, SetCommTimeouts, EscapeCommFunction, ClearCommError, IsBadCodePtr, GetModuleHandleA, CreateFileW, GetTimeFormatW, CreateMutexA, ReleaseMutex, FlushFileBuffers, SetFilePointerEx, CreateFileA, ExpandEnvironmentStringsA, GetModuleFileNameA, ReadFile, GetProcAddress, LoadLibraryW, LoadLibraryA, lstrcmpiA, ExpandEnvironmentStringsW, OutputDebugStringW, GetFileInformationByHandle, GetDateFormatW, GetWindowsDirectoryW, SetEndOfFile, RaiseException, FormatMessageA, GetSystemDirectoryA, CreateDirectoryW, lstrcmpA, GetSystemDirectoryW, CompareStringW, GetTempFileNameW, GetTempPathW, GetFileSize, IsWow64Process, PowerClearRequest, PowerSetRequest, PowerCreateRequest, GetThreadId, LoadLibraryExA, IsProcessorFeaturePresent
mscms.dll
GetStandardColorSpaceProfileW
msvcrt.dll
DllMain
ntdll.dll
NtDuplicateToken, NtClose, WinSqmIncrementDWORD
ole32.dll
StringFromCLSID, CoRegisterClassObject, CoRevokeClassObject, CoSuspendClassObjects, CoAddRefServerProcess, CoTaskMemFree, CoCreateInstance, StgCreatePropStg, CreateStreamOnHGlobal, StgOpenPropStg, CoUninitialize, CoInitializeSecurity, CoCreateInstanceEx, CLSIDFromString, StringFromGUID2, MkParseDisplayName, CreateBindCtx, CoInitializeEx, CoRevertToSelf, CoImpersonateClient, FreePropVariantArray, PropVariantClear, CoTaskMemAlloc, CoInitialize, PropVariantCopy, CoGetCallContext, CoResumeClassObjects, CoDisconnectObject
rpcrt4.dll
RpcServerRegisterIfEx, RpcServerListen, RpcBindingInqAuthClientW, RpcBindingToStringBindingW, RpcStringBindingParseW, RpcImpersonateClient, RpcRevertToSelf, UuidToStringW, NdrServerCall2, RpcStringFreeW, RpcServerUseProtseqEpW, RpcMgmtWaitServerListen, UuidToStringA, RpcStringFreeA, UuidCreateNil, UuidCreate, RpcServerUnregisterIf, RpcMgmtStopServerListening, RpcAsyncCompleteCall, RpcAsyncAbortCall, RpcServerRegisterAuthInfoW, RpcServerInqDefaultPrincNameW, NdrAsyncServerCall, RpcServerUnsubscribeForNotification, RpcServerTestCancel, RpcServerSubscribeForNotification
setupapi.dll
SetupDiDestroyDeviceInfoList, SetupDiGetClassDevsExW, SetupDiOpenDevRegKey, SetupDiOpenDeviceInterfaceRegKey, SetupDiGetDeviceInterfaceDetailW, SetupDiEnumDeviceInterfaces, SetupDiOpenDeviceInterfaceW, SetupDiEnumDeviceInfo, SetupDiGetClassDevsW, SetupDiDeleteDeviceInterfaceData, SetupDiCreateDeviceInfoList
shlwapi.dll
SHDeleteKeyW
user32.dll
CharNextW, SendMessageTimeoutW, UnregisterDeviceNotification, RegisterDeviceNotificationW, wsprintfW, ShowWindow, IsWindow, PostQuitMessage, DestroyWindow, AllowSetForegroundWindow, CharUpperW, wvsprintfA, GetSystemMetrics, DefWindowProcW, BroadcastSystemMessageW, LoadStringW, CharUpperBuffW, CharUpperA, CharNextA, PostMessageW, UnregisterPowerSettingNotification, RegisterPowerSettingNotification, wvsprintfW
userenv.dll
CreateEnvironmentBlock, DestroyEnvironmentBlock
version.dll
GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW
winsta.dll
WinStationQueryInformationW
Export table
DllEntryPoint
DllRegisterServer
DllUnregisterServer
ServiceMain
SvchostPushServiceGlobals
wiasCreateChildAppItem
wiasCreateDrvItem
wiasCreateLogInstance
wiasCreatePropContext
wiasDebugError
wiasDebugTrace
wiasDownSampleBuffer
wiasFormatArgs
wiasFreePropContext
wiasGetChangedValueFloat
wiasGetChangedValueGuid
wiasGetChangedValueLong
wiasGetChangedValueStr
wiasGetChildrenContexts
wiasGetContextFromName
wiasGetDrvItem
wiasGetImageInformation
wiasGetItemType
wiasGetPropertyAttributes
wiasGetRootItem
wiasIsPropChanged
wiasParseEndorserString
wiasPrintDebugHResult
wiasQueueEvent
wiasReadMultiple
wiasReadPropBin
wiasReadPropFloat
wiasReadPropGuid
wiasReadPropLong
wiasReadPropStr
wiasSendEndOfPage
wiasSetItemPropAttribs
wiasSetItemPropNames
wiasSetPropChanged
wiasSetPropertyAttributes
wiasSetValidFlag
wiasSetValidListFloat
wiasSetValidListGuid
wiasSetValidListLong
wiasSetValidListStr
wiasSetValidRangeFloat
wiasSetValidRangeLong
wiasUpdateScanRect
wiasUpdateValidFormat
wiasValidateItemProperties
wiasWriteBufToFile
wiasWriteMultiple
wiasWritePageBufToFile
wiasWritePageBufToStream
wiasWritePropBin
wiasWritePropFloat
wiasWritePropGuid
wiasWritePropLong
wiasWritePropStr