Import table
advapi32.dll
RegQueryValueW, RegOpenKeyW, RegEnumKeyW, RegDeleteKeyW, RegSetValueExW, RegCreateKeyExW, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, StartServiceCtrlDispatcherW, DeleteService, QueryServiceStatus, ControlService, OpenServiceW, CloseServiceHandle, CreateServiceW, OpenSCManagerW, RegisterServiceCtrlHandlerW, SetServiceStatus, CreateProcessAsUserW, AdjustTokenPrivileges, SetTokenInformation, DuplicateTokenEx, LookupPrivilegeValueW, OpenProcessToken, SetSecurityDescriptorDacl, InitializeSecurityDescriptor
gdi32.dll
SelectObject, Escape, ExtTextOutW, TextOutW, RectVisible, GetDeviceCaps, GetStockObject, DeleteDC, ScaleWindowExtEx, SetWindowExtEx, ScaleViewportExtEx, SetViewportExtEx, OffsetViewportOrgEx, CreateBitmap, PtVisible, DeleteObject, GetClipBox, SetMapMode, SetTextColor, SetBkColor, RestoreDC, SaveDC, SetViewportOrgEx
kernel32.dll
RaiseException, HeapSize, HeapReAlloc, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, VirtualFree, VirtualAlloc, HeapCreate, GetStdHandle, GetModuleFileNameA, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, GetFileType, ExitProcess, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, InitializeCriticalSectionAndSpinCount, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, GetConsoleCP, GetConsoleMode, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, CreateFileA, RtlUnwind, HeapFree, HeapAlloc, lstrlenA, GetCurrentProcess, FlushFileBuffers, SetFilePointer, WriteFile, GlobalFindAtomW, LoadLibraryA, GetVersionExA, GetCurrentProcessId, GlobalAddAtomW, InterlockedIncrement, FormatMessageW, TlsFree, DeleteCriticalSection, LocalReAlloc, TlsSetValue, TlsAlloc, InitializeCriticalSection, GlobalHandle, GlobalReAlloc, EnterCriticalSection, TlsGetValue, LeaveCriticalSection, LocalFree, LocalAlloc, GlobalFlags, GlobalUnlock, GetModuleHandleA, InterlockedDecrement, WritePrivateProfileStringW, SetLastError, SetErrorMode, GlobalDeleteAtom, GetCurrentThread, GetCurrentThreadId, ConvertDefaultLocale, EnumResourceLanguagesW, lstrcmpA, GetLocaleInfoW, LoadLibraryW, MultiByteToWideChar, FindResourceW, LoadResource, LockResource, SizeofResource, WideCharToMultiByte, InterlockedExchange, GlobalLock, lstrcmpW, FreeLibrary, GetProcAddress, GetModuleHandleW, GetCommandLineW, Sleep, GetModuleFileNameW, OpenProcess, Process32NextW, ProcessIdToSessionId, Process32FirstW, CreateToolhelp32Snapshot, WTSGetActiveConsoleSessionId, lstrlenW, SetEvent, ConnectNamedPipe, CreateNamedPipeW, GlobalFree, CloseHandle, DisconnectNamedPipe, WriteFileEx, ReadFileEx, GlobalAlloc, GetOverlappedResult, WaitForSingleObjectEx, GetLastError, GetStartupInfoA, CreateEventW
shlwapi.dll
PathFindExtensionW, PathFindFileNameW
user32.dll
DestroyMenu, LoadCursorW, GetSysColorBrush, ShowWindow, RegisterWindowMessageW, LoadIconW, WinHelpW, GetCapture, GetClassLongW, SetPropW, GetPropW, RemovePropW, IsWindow, GetForegroundWindow, GetDlgItem, GetTopWindow, DestroyWindow, GetMessagePos, MapWindowPoints, SetMenu, GetClientRect, CreateWindowExW, GetClassInfoExW, GetClassInfoW, RegisterClassW, AdjustWindowRectEx, DefWindowProcW, CallWindowProcW, CopyRect, GetMenu, SetWindowLongW, SetWindowPos, SystemParametersInfoA, IsIconic, GetWindowPlacement, GetSystemMetrics, GetWindowThreadProcessId, GetLastActivePopup, IsWindowEnabled, EnableWindow, MessageBoxW, GetMenuItemID, GetSubMenu, GetWindow, GetDlgCtrlID, GetWindowRect, GetWindowLongW, GetClassNameW, PtInRect, GetWindowTextW, SetWindowTextW, GetSysColor, ReleaseDC, GetDC, GetMessageTime, ClientToScreen, GrayStringW, DrawTextExW, DrawTextW, TabbedTextOutW, UnhookWindowsHookEx, GetMenuItemCount, SetCursor, SetMenuItemBitmaps, GetMenuCheckMarkDimensions, LoadBitmapW, GetFocus, GetParent, ModifyMenuW, GetMenuState, EnableMenuItem, CheckMenuItem, SetWindowsHookExW, CallNextHookEx, GetMessageW, TranslateMessage, DispatchMessageW, GetActiveWindow, IsWindowVisible, SendMessageW, GetKeyState, PeekMessageW, GetCursorPos, ValidateRect, PostMessageW, PostQuitMessage, SetForegroundWindow
userenv.dll
CreateEnvironmentBlock, DestroyEnvironmentBlock
winspool.drv
ClosePrinter, DocumentPropertiesW, OpenPrinterW
wtsapi32.dll
WTSQueryUserToken