Import table
advapi32.dll
GetAce, CryptImportKey, CryptDestroyKey, CryptExportKey, CryptGetUserKey, CryptGetKeyParam, RegOpenKeyExW, RegCloseKey, RegQueryValueExW, RevertToSelf, CopySid, RegCreateKeyW, RegSetValueW, RegQueryValueW, RegOpenKeyW, RegEnumKeyW, RegNotifyChangeKeyValue, RegisterEventSourceW, ReportEventW, DeregisterEventSource, LogonUserW, CryptEnumProvidersW, CryptDecrypt, CryptEncrypt, CryptGetProvParam, CryptGenKey, RegDeleteValueW, RegSetValueExW, LookupAccountNameW, IsValidSid, RegQueryMultipleValuesW, RegEnumValueW, RegEnumKeyExW, RegRestoreKeyW, RegQueryInfoKeyW, RegSaveKeyW, RegDeleteKeyW, RegCreateKeyExW, RegOpenCurrentUser, GetFileSecurityW, GetSecurityDescriptorDacl, GetAclInformation, AddAce, CryptReleaseContext, EqualSid, GetSecurityDescriptorControl, SetSecurityDescriptorControl, SetFileSecurityW, SetNamedSecurityInfoW, LookupPrivilegeValueW, AdjustTokenPrivileges, CryptAcquireContextW, CryptGenRandom, ConvertSidToStringSidW, GetTokenInformation, LookupAccountSidW, OpenSCManagerW, OpenServiceW, QueryServiceStatus, CloseServiceHandle, ImpersonateLoggedOnUser, GetUserNameW, ImpersonateSelf, OpenThreadToken, OpenProcessToken, AllocateAndInitializeSid, InitializeSecurityDescriptor, InitializeAcl, AddAccessAllowedAce, SetSecurityDescriptorDacl, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, IsValidSecurityDescriptor, AccessCheck, FreeSid, GetLengthSid, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegisterEventSourceA, ReportEventA, InitiateSystemShutdownW, ChangeServiceConfigW, CreateServiceW, DeleteService, ControlService, QueryServiceConfigW, StartServiceW, ChangeServiceConfig2W
comctl32.dll
ImageList_Draw, ImageList_GetImageInfo, ImageList_Read, ImageList_Write, ImageList_Destroy, ImageList_Create, ImageList_LoadImageW, ImageList_Merge
comdlg32.dll
ReplaceTextW, GetFileTitleW, FindTextW, PrintDlgW, CommDlgExtendedError, GetSaveFileNameW, GetOpenFileNameW, PageSetupDlgW
crypt32.dll
CryptQueryObject, CertEnumCertificatesInStore, CryptAcquireCertificatePrivateKey, CertDeleteCertificateFromStore, CertFreeCertificateContext, CertGetPublicKeyLength, CertGetCertificateContextProperty, CertGetEnhancedKeyUsage, CertDuplicateCertificateContext, CertGetNameStringW, CertSetCertificateContextProperty, CryptFindOIDInfo, CertCloseStore, CryptMsgClose, CertFindCertificateInStore, CertOpenStore
gdi32.dll
SetAbortProc, AbortDoc, EndDoc, CreateDCW, CopyMetaFileW, CreateHatchBrush, ExtCreatePen, CreatePen, PlayMetaFile, EnumMetaFile, GetObjectType, PlayMetaFileRecord, SelectPalette, CreateCompatibleDC, CreatePatternBrush, CreateDIBPatternBrushPt, DeleteDC, ExtSelectClipRgn, PolyBezierTo, PolylineTo, PolyDraw, ArcTo, GetCurrentPositionEx, ScaleWindowExtEx, SetWindowExtEx, EndPage, SetWindowOrgEx, ScaleViewportExtEx, SetViewportExtEx, OffsetViewportOrgEx, SetViewportOrgEx, Escape, ExtTextOutW, TextOutW, StartPage, RectVisible, GetBkColor, GetTextMetricsW, CreateFontW, GetCharWidthW, PtVisible, StartDocW, GetPixel, BitBlt, GetWindowExtEx, GetViewportExtEx, GetObjectW, SelectClipPath, CreateRectRgn, GetClipRgn, SelectClipRgn, SetColorAdjustment, SetArcDirection, SetMapperFlags, SetTextCharacterExtra, SetTextJustification, StretchDIBits, GetDCOrgEx, PatBlt, GetMapMode, CombineRgn, SetRectRgn, CreateFontIndirectW, CreateCompatibleBitmap, GetRgnBox, CreateRectRgnIndirect, GetTextColor, OffsetWindowOrgEx, SetTextAlign, MoveToEx, LineTo, OffsetClipRgn, IntersectClipRect, ExcludeClipRect, GetClipBox, SetMapMode, GetStockObject, SelectObject, DeleteObject, CreateSolidBrush, GetDeviceCaps, GetTextExtentPoint32W, CreateBitmap, SaveDC, RestoreDC, SetBkColor, SetBkMode, SetPolyFillMode, SetROP2, SetStretchBltMode, DPtoLP, SetTextColor, GetBitmapBits, GetObjectA, CreateDCA, ModifyWorldTransform, SetWorldTransform, SetGraphicsMode
kernel32.dll
DllMain
netapi32.dll
NetApiBufferFree, NetWkstaUserGetInfo, NetQueryDisplayInformation, NetGetDCName, NetGroupEnum, NetUserEnum, NetUserChangePassword
ole32.dll
CoRevokeClassObject, CoRegisterClassObject, OleInitialize, CoFreeUnusedLibraries, OleUninitialize, OleRun, StringFromGUID2, CLSIDFromProgID, CoDisconnectObject, OleSetClipboard, CoInitialize, CoUninitialize, CoCreateInstance, CLSIDFromString, StgOpenStorageOnILockBytes, OleFlushClipboard, CoTaskMemFree, CoGetClassObject, CoTreatAsClass, OleIsCurrentClipboard, CreateILockBytesOnHGlobal, StringFromCLSID, OleDuplicateData, ReleaseStgMedium, CoTaskMemAlloc, CreateBindCtx, ReadClassStg, ReadFmtUserTypeStg, OleRegGetUserType, WriteClassStg, WriteFmtUserTypeStg, CreateStreamOnHGlobal, StgCreateDocfileOnILockBytes, SetConvertStg, CoRegisterMessageFilter, CoInitializeSecurity, CoSetProxyBlanket
oledlg.dll
OleUIBusyW
psapi.dll
EnumProcessModules, EnumProcesses, GetModuleBaseNameW
shell32.dll
SHGetFolderPathW, DragFinish, DragQueryFileW, ExtractIconW, SHGetFileInfoW, ShellExecuteExW
shlwapi.dll
PathFindExtensionW, PathRemoveExtensionW, PathFindFileNameW, PathStripToRootW, PathIsUNCW, SHDeleteKeyW, SHCopyKeyW
tvttsp.dll
Tspi_Context_FreeMemory, Tspi_TPM_GetRandom, Tspi_Key_GetPubKey, Tspi_Policy_SetSecret, Tspi_GetPolicyObject, Tspi_Context_CreateObject, Tspi_Context_GetTpmObject, Tspi_Context_Connect, Tspi_Context_Create, Tspi_Key_LoadKey, Tspi_Key_WrapKey, Tspi_SetAttribData, Tspi_TPM_GetCapability, Tspi_TPM_GetPubEndorsementKey, Tspi_Context_Close, Tspi_TPM_NSC_AbortLockout, Tspi_TPM_Atmel_OwnerSetState, Tspi_ChangeAuth, Tspi_TPM_TakeOwnership, Tspi_SetAttribUint32, Tspi_Key_CreateKey, Tspi_Context_CloseObject, Tspi_Hash_VerifySignature, Tspi_Hash_SetHashValue, Tspi_GetAttribData, Tspi_Data_Bind, Tspi_Hash_Sign, Tspi_Data_Unbind, Tspi_TPM_NSC_A1_2CommandThatShouldBeDeletedWhen1_2StackIsWritten
user32.dll
DllMain
userenv.dll
GetProfilesDirectoryW
version.dll
GetFileVersionInfoW, VerQueryValueW, GetFileVersionInfoSizeW
winspool.drv
GetJobW, OpenPrinterW, DocumentPropertiesW, ClosePrinter
wintrust.dll
WinVerifyTrust
wtsapi32.dll
WTSFreeMemory, WTSQuerySessionInformationW
