Import table
advapi32.dll
RegSetValueExW, RegEnumKeyExW, GetLengthSid, AddAce, RegSetKeySecurity, FreeSid, RegEnumValueW, AllocateAndInitializeSid, InitializeAcl, RegDeleteValueW, RegGetKeySecurity, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegQueryInfoKeyW, CopySid, GetTokenInformation, GetSidSubAuthorityCount, GetSidSubAuthority, GetSidIdentifierAuthority, RegOpenKeyExW, RegDeleteKeyW, RegCreateKeyExW, AdjustTokenPrivileges, LookupPrivilegeValueW, GetUserNameW, OpenProcessToken, RegCloseKey, RevertToSelf, RegOpenCurrentUser, ImpersonateLoggedOnUser, RegOpenKeyW, RegQueryValueExW, RegEnumKeyW, RegOpenUserClassesRoot, ConvertSidToStringSidW, LookupAccountNameW, CreateProcessAsUserW
kernel32.dll
GetFullPathNameA, HeapReAlloc, CreateFileA, GetFileSize, CreateMutexW, SetFilePointer, MapViewOfFile, UnmapViewOfFile, SetEndOfFile, QueryPerformanceCounter, InterlockedCompareExchange, UnlockFile, LockFile, UnlockFileEx, GetSystemTimeAsFileTime, FormatMessageA, WriteFile, FormatMessageW, HeapDestroy, GetFileAttributesA, HeapCreate, HeapValidate, ReadFile, CreateFileW, FlushFileBuffers, HeapSize, LockFileEx, LoadLibraryA, CreateFileMappingW, GetDiskFreeSpaceA, GetSystemInfo, GetFileAttributesExW, GetVersionExA, GetFullPathNameW, GetTempPathA, AreFileApisANSI, DeleteFileA, WaitForSingleObject, SetEvent, ResetEvent, CreateEventW, ExpandEnvironmentStringsW, lstrcpynW, GetLocalTime, InterlockedExchange, InterlockedExchangeAdd, lstrlenW, CompareStringA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, InitializeCriticalSectionAndSpinCount, GetLocaleInfoW, GetStringTypeW, GetStringTypeA, IsValidLocale, EnumSystemLocalesA, GetLocaleInfoA, GetUserDefaultLCID, LocalFree, CreateToolhelp32Snapshot, Process32NextW, Process32FirstW, WideCharToMultiByte, GetCurrentProcess, Sleep, GetTickCount, SetLastError, GetVersionExW, SetEnvironmentVariableA, GetModuleHandleW, SetFileAttributesW, GetSystemTime, DeleteFileW, FindNextFileW, RemoveDirectoryW, FindClose, GetDiskFreeSpaceW, GetLastError, FileTimeToSystemTime, CreateDirectoryW, SystemTimeToFileTime, FindFirstFileW, GetTempPathW, GetFileAttributesW, GetSystemWindowsDirectoryW, CloseHandle, DeleteCriticalSection, QueueUserWorkItem, WTSGetActiveConsoleSessionId, LockResource, EnterCriticalSection, GetProcAddress, MultiByteToWideChar, GetModuleFileNameW, LeaveCriticalSection, SizeofResource, LoadLibraryW, InitializeCriticalSection, GetPrivateProfileStringW, IsBadReadPtr, GetProcessHeap, HeapFree, InterlockedDecrement, InterlockedIncrement, HeapAlloc, LoadResource, FreeLibrary, FindResourceW, FindResourceExW, GetEnvironmentVariableW, CompareStringW, GetCurrentProcessId, GetModuleHandleA, GetConsoleMode, GetConsoleCP, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetStartupInfoA, GetFileType, SetHandleCount, GetTimeZoneInformation, VirtualAlloc, VirtualFree, ExitProcess, GetModuleFileNameA, GetStdHandle, TlsFree, TlsSetValue, TlsAlloc, TlsGetValue, IsValidCodePage, GetOEMCP, GetACP, GetCPInfo, LCMapStringW, LCMapStringA, RtlUnwind, GetCommandLineA, CreateThread, RaiseException, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, ExitThread, GetCurrentThreadId, DllMain
log.dll
WriteLog
ole32.dll
CoUninitialize, CoInitialize, CoCreateInstance
psapi.dll
GetModuleBaseNameW
rpcrt4.dll
UuidFromStringW
shell32.dll
SHEmptyRecycleBinW, SHQueryRecycleBinW, ShellExecuteW, SHGetSpecialFolderPathW, SHGetFolderPathW, SHCreateDirectoryExW
shlwapi.dll
SHDeleteKeyW, PathFindExtensionW, PathAddBackslashW, PathAppendW, PathRemoveFileSpecW, SHGetValueW, PathFileExistsW, PathIsDirectoryW, PathFindFileNameW, PathIsFileSpecW, SHDeleteValueW, PathRemoveExtensionW
sqlite.dll
sqlite3_column_bytes, sqlite3_column_text, sqlite3_open, sqlite3_exec, sqlite3_prepare, sqlite3_column_name16, sqlite3_step, sqlite3_finalize, sqlite3_prepare16, sqlite3_column_blob, sqlite3_column_int, sqlite3_open16, sqlite3_busy_timeout, sqlite3_bind_blob, sqlite3_column_text16, sqlite3_errmsg16, sqlite3_column_count, sqlite3_close, sqlite3_free
user32.dll
CreateWindowExW, CallWindowProcW, DispatchMessageW, GetWindowLongW, IsWindow, SetWindowLongW, DestroyWindow, GetMessageW, PostMessageW
userenv.dll
CreateEnvironmentBlock, DestroyEnvironmentBlock
wtsapi32.dll
WTSQueryUserToken, WTSFreeMemory, WTSEnumerateSessionsW
Export table
_DllMain@12
CreateObject
