Import table
api-ms-win-core-apiquery-l1-1-0.dll
ApiSetQueryApiSetPresence
api-ms-win-core-delayload-l1-1-1.dll
ResolveDelayLoadedAPI, DelayLoadFailureHook
api-ms-win-core-errorhandling-l1-1-0.dll
RaiseException, GetLastError, SetUnhandledExceptionFilter, UnhandledExceptionFilter, SetLastError
api-ms-win-core-errorhandling-l1-1-1.dll
RaiseException, UnhandledExceptionFilter, SetUnhandledExceptionFilter, SetLastError, GetLastError
api-ms-win-core-file-l1-1-1.dll
GetFullPathNameW, FileTimeToSystemTime, GetFileAttributesW, CreateDirectoryW
api-ms-win-core-file-l1-2-0.dll
GetFullPathNameW, GetFileAttributesW, CreateDirectoryW
api-ms-win-core-file-l1-2-1.dll
GetFullPathNameW, GetFileAttributesW, CreateDirectoryW
api-ms-win-core-handle-l1-1-0.dll
DuplicateHandle, CloseHandle
api-ms-win-core-heap-l1-1-0.dll
GetProcessHeap, HeapAlloc, HeapFree
api-ms-win-core-heap-l1-2-0.dll
HeapFree, HeapAlloc, GetProcessHeap
api-ms-win-core-heap-obsolete-l1-1-0.dll
LocalFree
api-ms-win-core-interlocked-l1-1-0.dll
InterlockedCompareExchange64, InterlockedExchange, InterlockedDecrement, InterlockedPushEntrySList, InterlockedCompareExchange, InterlockedIncrement, InitializeSListHead, InterlockedPopEntrySList
api-ms-win-core-interlocked-l1-2-0.dll
InterlockedExchange, InitializeSListHead, InterlockedIncrement, InterlockedPopEntrySList, InterlockedCompareExchange, InterlockedPushEntrySList, InterlockedCompareExchange64, InterlockedDecrement
api-ms-win-core-libraryloader-l1-1-1.dll
DisableThreadLibraryCalls, FreeLibrary, GetProcAddress, LoadLibraryExW, GetModuleHandleExW
api-ms-win-core-libraryloader-l1-2-0.dll
GetModuleHandleExW, FreeLibrary, LoadLibraryExW, DisableThreadLibraryCalls, GetProcAddress
api-ms-win-core-processthreads-l1-1-1.dll
GetCurrentProcess, GetExitCodeProcess, OpenProcess, CreateProcessAsUserW, TerminateProcess, GetCurrentThreadId, GetCurrentProcessId, SetThreadToken, GetCurrentThread, OpenProcessToken, OpenThreadToken
api-ms-win-core-processthreads-l1-1-2.dll
TerminateProcess, GetExitCodeProcess, GetCurrentProcessId, OpenProcessToken, OpenThreadToken, GetCurrentProcess, GetCurrentThread, CreateProcessAsUserW, GetCurrentThreadId, SetThreadToken, OpenProcess
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegGetValueW, RegOpenKeyExW, RegEnumKeyExW, RegCloseKey
api-ms-win-core-string-l1-1-0.dll
CompareStringOrdinal
api-ms-win-core-string-obsolete-l1-1-0.dll
lstrlenW
api-ms-win-core-synch-l1-1-1.dll
DeleteCriticalSection, SetEvent, ReleaseSRWLockExclusive, AcquireSRWLockExclusive, InitializeCriticalSection, ResetEvent, LeaveCriticalSection, ReleaseSRWLockShared, SleepEx, EnterCriticalSection, InitializeSRWLock, CreateEventW, Sleep, AcquireSRWLockShared, WaitForSingleObjectEx, WaitForSingleObject, OpenEventW
api-ms-win-core-synch-l1-2-0.dll
DeleteCriticalSection, ReleaseSRWLockShared, OpenEventW, ReleaseSRWLockExclusive, Sleep, InitializeSRWLock, EnterCriticalSection, InitializeCriticalSection, SetEvent, SleepEx, AcquireSRWLockExclusive, ResetEvent, WaitForSingleObject, CreateEventW, AcquireSRWLockShared, WaitForSingleObjectEx, LeaveCriticalSection
api-ms-win-core-sysinfo-l1-1-1.dll
GetTickCount, GetSystemTimeAsFileTime, GetSystemWindowsDirectoryW
api-ms-win-core-sysinfo-l1-2-0.dll
GetSystemTimeAsFileTime, GetTickCount, GetSystemWindowsDirectoryW
api-ms-win-core-sysinfo-l1-2-1.dll
GetSystemWindowsDirectoryW, GetTickCount, GetSystemTimeAsFileTime
api-ms-win-core-threadpool-l1-1-1.dll
CloseThreadpoolCleanupGroupMembers, CreateThreadpoolTimer, WaitForThreadpoolWaitCallbacks, CreateThreadpoolCleanupGroup, SubmitThreadpoolWork, CloseThreadpoolWork, CreateThreadpoolWork, CreateThreadpoolWait, FreeLibraryWhenCallbackReturns, WaitForThreadpoolWorkCallbacks, SetThreadpoolTimer, CallbackMayRunLong, TrySubmitThreadpoolCallback, CloseThreadpoolTimer, WaitForThreadpoolTimerCallbacks, SetThreadpoolWait, CloseThreadpoolCleanupGroup
api-ms-win-core-threadpool-l1-2-0.dll
CallbackMayRunLong, CloseThreadpoolTimer, SetThreadpoolTimer, CreateThreadpoolTimer, TrySubmitThreadpoolCallback, SubmitThreadpoolWork, CreateThreadpoolWait, CloseThreadpoolWork, SetThreadpoolWait, CreateThreadpoolWork, CloseThreadpoolWait, CloseThreadpoolCleanupGroup, WaitForThreadpoolWaitCallbacks, FreeLibraryWhenCallbackReturns, CreateThreadpoolCleanupGroup, WaitForThreadpoolWorkCallbacks, WaitForThreadpoolTimerCallbacks, CloseThreadpoolCleanupGroupMembers
api-ms-win-devices-query-l1-1-1.dll
DevFreeObjectProperties, DevGetObjectPropertiesEx
api-ms-win-devices-swdevice-l1-1-0.dll
SwMemFree, SwDeviceInterfaceRegister, SwDeviceClose, SwDevicePropertySet, SwDeviceCreate, SwDeviceInterfaceSetState, SwDeviceInterfacePropertySet
api-ms-win-devices-swdevice-l1-1-1.dll
SwDeviceInterfaceRegister, SwMemFree, SwDeviceClose, SwDevicePropertySet, SwDeviceCreate, SwDeviceInterfaceSetState, SwDeviceInterfacePropertySet
api-ms-win-eventing-classicprovider-l1-1-0.dll
TraceMessage, GetTraceLoggerHandle, UnregisterTraceGuids, RegisterTraceGuidsW, GetTraceEnableLevel, GetTraceEnableFlags
api-ms-win-eventing-provider-l1-1-0.dll
EventUnregister, EventWrite, EventActivityIdControl, EventRegister
api-ms-win-obsolete-kernelbase-l1-1-0.dll
lstrlenW, LocalFree
api-ms-win-security-base-l1-1-0.dll
AllocateAndInitializeSid, GetKernelObjectSecurity, AdjustTokenPrivileges, DuplicateToken, CreateWellKnownSid, RevertToSelf, SetSecurityDescriptorOwner, ImpersonateLoggedOnUser, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, DuplicateTokenEx
api-ms-win-security-base-l1-2-0.dll
GetKernelObjectSecurity, AdjustTokenPrivileges, SetSecurityDescriptorDacl, DuplicateToken, CreateWellKnownSid, DuplicateTokenEx, FreeSid, RevertToSelf, SetSecurityDescriptorOwner, AllocateAndInitializeSid, ImpersonateLoggedOnUser, InitializeSecurityDescriptor
api-ms-win-security-sddl-l1-1-0.dll
ConvertSecurityDescriptorToStringSecurityDescriptorW, ConvertSidToStringSidW, ConvertStringSecurityDescriptorToSecurityDescriptorW
api-ms-win-service-core-l1-1-1.dll
RegisterServiceCtrlHandlerExW, SetServiceStatus
api-ms-win-service-management-l1-1-0.dll
OpenServiceW, CloseServiceHandle, OpenSCManagerW
api-ms-win-service-management-l2-1-0.dll
ChangeServiceConfigW
msvcrt.dll
DllMain
ntdll.dll
RtlNtStatusToDosError, RtlCompareMemory, RtlTimeToTimeFields, RtlEqualUnicodeString, LdrGetProcedureAddress, RtlInitAnsiString, LdrGetDllHandle, RtlInitUnicodeString, RtlGetGroupSecurityDescriptor, RtlGetSaclSecurityDescriptor, RtlGetOwnerSecurityDescriptor, NtQueryValueKey, NtSetValueKey, NtDeleteValueKey, NtEnumerateValueKey, NtEnumerateKey, NtSetSecurityObject, NtQueryKey, NtDeleteKey, NtCreateKey, NtOpenKey, RtlAddAce, RtlCopySid, RtlGetDaclSecurityDescriptor, NtSetInformationThread, NtAdjustPrivilegesToken, NtDuplicateToken, NtQuerySecurityObject, NtOpenProcessToken, NtOpenThreadToken, RtlAbsoluteToSelfRelativeSD, RtlValidSecurityDescriptor, RtlSetGroupSecurityDescriptor, RtlSetOwnerSecurityDescriptor, RtlSetDaclSecurityDescriptor, RtlCreateSecurityDescriptor, RtlAddAccessAllowedAceEx, RtlLengthSid, RtlValidSid, RtlFreeUnicodeString, RtlPrefixUnicodeString, RtlFormatCurrentUserKeyPath, RtlGetVersion, RtlUnicodeStringToInteger, RtlGUIDFromString, RtlInitUnicodeStringEx, RtlLengthSecurityDescriptor, RtlValidRelativeSecurityDescriptor, NtClose, RtlEqualSid, RtlSubAuthoritySid, RtlInitializeSid, RtlLengthRequiredSid, NtQueryInformationToken, NtOpenProcessTokenEx, NtOpenThreadTokenEx, RtlFreeHeap, RtlAllocateHeap, WinSqmAddToStreamEx, WinSqmSetDWORD, RtlAddAccessAllowedAce, RtlCreateAcl, WinSqmIsOptedIn, RtlLookupElementGenericTableAvl, RtlEnumerateGenericTableAvl, RtlInitializeGenericTableAvl, RtlInsertElementGenericTableAvl, RtlDeleteElementGenericTableAvl, RtlStringFromGUID
rpcrt4.dll
MesEncodeIncrementalHandleCreate, UuidFromStringW, RpcAsyncCompleteCall, RpcAsyncAbortCall, I_RpcExceptionFilter, RpcRevertToSelf, RpcImpersonateClient, RpcServerUnsubscribeForNotification, RpcAsyncInitializeHandle, RpcBindingFromStringBindingW, RpcStringBindingComposeW, RpcBindingFree, RpcStringFreeW, RpcServerInterfaceGroupClose, RpcServerInterfaceGroupActivate, RpcServerInterfaceGroupCreateW, I_RpcMapWin32Status, I_RpcBindingInqLocalClientPID, RpcExceptionFilter, MesHandleFree, MesIncrementalHandleReset, RpcServerInterfaceGroupDeactivate, UuidCreate, MesDecodeIncrementalHandleCreate, NdrAsyncClientCall, NdrClientCall2, NdrMesTypeEncode2, NdrAsyncServerCall, NdrServerCall2, NdrMesTypeDecode2, NdrMesTypeAlignSize2, RpcServerSubscribeForNotification, MesDecodeBufferHandleCreate, RpcBindingSetOption, RpcSsDestroyClientContext, MesEncodeDynBufferHandleCreate, RpcEpUnregister, RpcBindingVectorFree, RpcServerUseProtseqW, RpcEpRegisterW, I_RpcBindingIsClientLocal, RpcServerInqBindings, RpcServerUnregisterIfEx, RpcServerRegisterIfEx