Import table
advapi32.dll
RegQueryInfoKeyW, SetThreadToken, CryptAcquireContextW, CryptGenRandom, CryptReleaseContext, RegSetValueExW, RegCreateKeyExW, RegisterServiceCtrlHandlerW, RegDeleteValueW, DeleteService, OpenSCManagerW, OpenServiceW, ChangeServiceConfigW, CreateServiceW, ChangeServiceConfig2W, CloseServiceHandle, ControlService, QueryServiceStatus, SetServiceStatus, RegEnumKeyExW, ConvertStringSecurityDescriptorToSecurityDescriptorW, MakeAbsoluteSD, MakeSelfRelativeSD, IsValidSecurityDescriptor, OpenThreadToken, OpenProcessToken, GetTokenInformation, GetLengthSid, InitializeAcl, AddAccessAllowedAce, GetSecurityDescriptorLength, RegDeleteKeyW, RegOpenKeyExW, RegQueryValueExW, DeregisterEventSource, ReportEventW, RegisterEventSourceW, RegOpenKeyW, AllocateAndInitializeSid, FreeSid, SetSecurityDescriptorDacl, SetSecurityDescriptorSacl, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, InitializeSecurityDescriptor, CheckTokenMembership, GetSidSubAuthority, GetSidSubAuthorityCount, GetSidIdentifierAuthority, IsValidSid, LookupAccountSidW, AdjustTokenPrivileges, LookupPrivilegeValueW, RegUnLoadKeyW, RegLoadKeyW, RegEnumValueW, RegCloseKey, EqualSid, GetUserNameW
comres.dll
COMResModuleInstance
kernel32.dll
GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, MultiByteToWideChar, ReleaseMutex, DebugBreak, RaiseException, CreateFileW, GetWindowsDirectoryW, CreateMutexW, GetLocalTime, WriteFile, SetFilePointer, lstrcatA, lstrcpyA, lstrlenA, InterlockedCompareExchange, GetModuleHandleW, LocalFree, GetSystemInfo, CreateSemaphoreW, Sleep, ReleaseSemaphore, SetLastError, GetComputerNameW, GetCurrentThread, WideCharToMultiByte, GetSystemDirectoryW, SearchPathW, GlobalFree, GlobalAlloc, GlobalMemoryStatusEx, ResetEvent, CreateThread, DuplicateHandle, CreateEventA, InitializeCriticalSection, PostQueuedCompletionStatus, InterlockedExchangeAdd, QueryPerformanceFrequency, CreateIoCompletionPort, InterlockedExchange, FreeLibraryAndExitThread, GetQueuedCompletionStatus, SetThreadPriority, OutputDebugStringA, GetTickCount, lstrcmpA, lstrcmpiW, GetModuleFileNameA, VirtualQueryEx, lstrcpynW, LockResource, LoadResource, FindResourceW, FindClose, DeleteFileW, SetFileAttributesW, FindNextFileW, FindFirstFileW, GetExitCodeProcess, CreateProcessW, ExpandEnvironmentStringsW, CreateDirectoryW, GetThreadContext, IsDebuggerPresent, LoadLibraryExW, GetModuleHandleA, FormatMessageW, GetFileAttributesW, GetModuleFileNameW, GetLastError, DisableThreadLibraryCalls, GetVersionExA, LoadLibraryW, GetProcAddress, FreeLibrary, lstrcatW, lstrcpyW, CreateEventW, WaitForSingleObject, CloseHandle, GetCurrentThreadId, SetEvent, GetUserDefaultLCID, InterlockedDecrement, CompareStringW, lstrcmpW, InterlockedIncrement, lstrlenW, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, LoadLibraryA, QueryPerformanceCounter, GetVersionExW
msvcrt.dll
DllMain
ntdll.dll
RtlDelete, RtlSplay, RtlInitializeCriticalSectionAndSpinCount, RtlDeleteCriticalSection, RtlInitializeCriticalSection
ole32.dll
StringFromCLSID, CoGetMalloc, CoGetObjectContext, FreePropVariantArray, PropVariantClear, PropVariantCopy, CoUnmarshalInterface, IIDFromString, StringFromIID, CoUninitialize, CoRevokeClassObject, CoRegisterClassObject, CoRevertToSelf, CoImpersonateClient, CoMarshalInterface, CreateStreamOnHGlobal, CoGetInterceptorFromTypeInfo, CoCreateInstance, CoEnableCallCancellation, CoDisableCallCancellation, StringFromGUID2, CoGetObject, CoCreateGuid, CLSIDFromString, CoGetClassObject, CoSetProxyBlanket, CoCancelCall, CoTaskMemFree, CoTaskMemAlloc, CoInitializeEx
rpcrt4.dll
NdrCStdStubBuffer_Release, NdrCStdStubBuffer2_Release, NdrDllUnregisterProxy, CStdStubBuffer_DebugServerRelease, CStdStubBuffer_DebugServerQueryInterface, NdrDllRegisterProxy, CStdStubBuffer_CountRefs, CStdStubBuffer_IsIIDSupported, CStdStubBuffer_Invoke, CStdStubBuffer_Disconnect, CStdStubBuffer_Connect, CStdStubBuffer_AddRef, CStdStubBuffer_QueryInterface, NdrStubCall2, NdrStubForwardingFunction, IUnknown_Release_Proxy, IUnknown_AddRef_Proxy, IUnknown_QueryInterface_Proxy, NdrOleFree, NdrOleAllocate, I_RpcBindingInqTransportType, NdrDllGetClassObject
user32.dll
wsprintfW, LoadStringW, DialogBoxParamW, EndDialog, SetDlgItemTextW, CloseWindowStation, GetProcessWindowStation, OpenWindowStationW, SetProcessWindowStation, GetDesktopWindow, GetWindowRect, GetClientRect, MapWindowPoints, SetWindowPos, OpenDesktopW, SetThreadDesktop, GetThreadDesktop, CloseDesktop, PeekMessageW, MsgWaitForMultipleObjects, PostThreadMessageW, wsprintfA
version.dll
VerQueryValueW
Export table
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
LCEControlServer
NotifyLogoffUser
NotifyLogonUser
RegisterTheEventServiceAfterSetup
RegisterTheEventServiceDuringSetup
ServiceMain
