Import table
kernel32.dll
AddVectoredExceptionHandler, RemoveVectoredExceptionHandler, GetProcAddress, GetModuleHandleW, OpenThread, GetCurrentThreadId, GetThreadContext, SetThreadContext, CloseHandle, GetModuleFileNameW, WriteProcessMemory, VirtualAllocEx, VirtualFreeEx, VirtualProtectEx, Process32FirstW, CreateToolhelp32Snapshot, Process32NextW, GetCurrentProcessId, OpenEventW, OpenProcess, GetWindowsDirectoryW, CreateProcessW, WaitForSingleObject, CreateEventA, SetEvent, InterlockedIncrement, InterlockedDecrement, WideCharToMultiByte, InterlockedCompareExchange, InterlockedExchange, MultiByteToWideChar, GetStringTypeW, Sleep, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, EncodePointer, DecodePointer, SetEndOfFile, CreateFileW, DeviceIoControl, GetLastError, GetFileAttributesW, SetLastError, GetModuleHandleA, AreFileApisANSI, LocalFree, FormatMessageA, HeapFree, GetCommandLineA, RaiseException, RtlUnwind, HeapAlloc, LCMapStringW, GetCPInfo, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, IsProcessorFeaturePresent, HeapSize, ExitProcess, WriteFile, GetStdHandle, GetLocaleInfoW, HeapCreate, HeapDestroy, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, GetACP, GetOEMCP, IsValidCodePage, SetHandleCount, InitializeCriticalSectionAndSpinCount, GetFileType, GetStartupInfoW, GetConsoleCP, GetConsoleMode, SetFilePointer, ReadFile, FlushFileBuffers, GetModuleFileNameA, FreeEnvironmentStringsW, GetEnvironmentStringsW, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, GetUserDefaultLCID, GetLocaleInfoA, EnumSystemLocalesA, IsValidLocale, HeapReAlloc, LoadLibraryW, WriteConsoleW, SetStdHandle, GetProcessHeap, OpenEventA, ResetEvent, GetTimeFormatA, GetDateFormatA, CompareStringW, GetTimeZoneInformation, SetEnvironmentVariableA
Export table
CreateProcessNotify
switch_processor_mode