Import table
advapi32.dll
RegQueryValueExW, LookupAccountNameW, ConvertSidToStringSidW, IsValidSid, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegOpenKeyExW, RegCloseKey
dbghelp.dll
ImageNtHeader
kernel32.dll
CreateEventW, CreateSemaphoreA, ReleaseSemaphore, OpenMutexW, PulseEvent, GetCurrentProcessId, WaitForMultipleObjects, GetProcessHeap, HeapFree, LocalFree, HeapAlloc, LoadLibraryA, DuplicateHandle, GetCurrentProcess, lstrlenW, CopyFileW, DeleteFileW, FreeLibrary, VirtualQuery, SetLastError, GetModuleHandleA, VirtualAlloc, InterlockedCompareExchange, ResumeThread, FlushInstructionCache, GetThreadContext, SetThreadContext, SuspendThread, GetModuleFileNameW, WideCharToMultiByte, MultiByteToWideChar, GetCommandLineW, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, GetVersionExW, AreFileApisANSI, SetFilePointer, SetEndOfFile, FlushFileBuffers, UnlockFile, LockFile, GetFileAttributesA, DeleteFileA, GetFileAttributesW, LoadLibraryW, QueryPerformanceCounter, GetTickCount, GetSystemTime, LockFileEx, GetTempPathA, GetTempPathW, FormatMessageA, FormatMessageW, GetFullPathNameA, GetFullPathNameW, GetDiskFreeSpaceA, GetDiskFreeSpaceW, CreateFileA, CompareStringA, WriteConsoleW, GetConsoleOutputCP, GetProcAddress, GetCurrentThread, TlsAlloc, GetCurrentThreadId, TlsSetValue, TlsGetValue, IsBadWritePtr, OpenEventW, WriteFile, ReadFile, GetLastError, GetFileSize, CreateFileW, GetModuleHandleW, RemoveVectoredExceptionHandler, InterlockedExchange, VirtualProtect, IsBadReadPtr, AddVectoredExceptionHandler, SetEvent, CreateEventA, CloseHandle, WaitForSingleObject, GetSystemTimeAsFileTime, CompareStringW, SetEnvironmentVariableA, Sleep, WriteConsoleA, SetStdHandle, InterlockedIncrement, InterlockedDecrement, HeapDestroy, HeapReAlloc, HeapSize, ReleaseMutex, TlsFree, CreateMutexA, ResetEvent, SystemTimeToFileTime, SetWaitableTimer, CreateWaitableTimerA, GetUserDefaultLCID, GetStringTypeExA, LCMapStringA, LCMapStringW, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCommandLineA, RaiseException, RtlUnwind, GetCPInfo, GetStringTypeW, ExitThread, CreateThread, ExitProcess, GetStdHandle, GetModuleFileNameA, HeapCreate, VirtualFree, GetACP, GetOEMCP, IsValidCodePage, SetHandleCount, GetFileType, GetStartupInfoA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetTimeZoneInformation, GetLocaleInfoA, EnumSystemLocalesA, IsValidLocale, GetStringTypeA, InitializeCriticalSectionAndSpinCount, GetLocaleInfoW, GetConsoleCP, GetConsoleMode
user32.dll
GetWindowThreadProcessId, FindWindowExW, LoadStringA
wtsapi32.dll
WTSQuerySessionInformationW, WTSFreeMemory
