Import table
advapi32.dll
LookupAccountSidW, RegOpenKeyExA, RegEnumKeyA, RegQueryValueExA, RegEnumValueW, ConvertSidToStringSidW, GetTokenInformation, CryptImportKey, IsValidSid, GetLengthSid, CopySid, RevertToSelf, ImpersonateAnonymousToken, CryptCreateHash, CryptSignHashW, CryptGetHashParam, CryptHashData, CryptDuplicateHash, CryptAcquireContextW, CryptReleaseContext, OpenThreadToken, DeregisterEventSource, RegQueryInfoKeyW, RegDeleteValueW, RegEnumKeyExW, RegCreateKeyW, CryptDestroyKey, CryptDestroyHash, RegSetValueExW, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegDeleteKeyW
crypt32.dll
CryptEncodeObject, CryptDecodeObject
dpptutils.dll
DPFormatMessage
kernel32.dll
SetFilePointer, CreateMutexW, GetCurrentThreadId, FindClose, FindFirstFileW, CreateDirectoryW, GetModuleFileNameA, GetFileSize, CreateFileW, SetLastError, InterlockedExchange, GetTickCount, GetComputerNameA, LCMapStringW, LCMapStringA, GetVersionExA, GetSystemTimeAsFileTime, GetComputerNameW, WideCharToMultiByte, CompareFileTime, LoadLibraryW, GetLocalTime, GetVersionExW, CloseHandle, LockResource, DisableThreadLibraryCalls, LoadLibraryExW, FindResourceW, LoadResource, SizeofResource, MultiByteToWideChar, FreeLibrary, lstrcmpiW, InterlockedDecrement, InterlockedIncrement, GetModuleFileNameW, GetCurrentProcess, lstrlenW, GetModuleHandleW, GetProcAddress, GetLastError, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, RaiseException, GetCurrentThread, WriteFile, GetStringTypeA, GetStringTypeW, GetConsoleMode, GetConsoleCP, GetLocaleInfoA, FlushFileBuffers, CreateFileA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, LoadLibraryA, InitializeCriticalSectionAndSpinCount, GetModuleHandleA, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, SetStdHandle, GetCurrentProcessId, LocalFree, ProcessIdToSessionId, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, RtlUnwind, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, ExitThread, CreateThread, GetCommandLineA, HeapCreate, VirtualFree, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, Sleep, ExitProcess, GetStdHandle, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, SetHandleCount, GetFileType, GetStartupInfoA
ole32.dll
CoUninitialize, CoCreateGuid, CoInitializeEx, CoRevertToSelf, CoImpersonateClient, StringFromGUID2, CoTaskMemRealloc, CoTaskMemAlloc, StringFromCLSID, CoTaskMemFree, OleRun, CoCreateInstance
rpcrt4.dll
RpcRevertToSelf, RpcImpersonateClient
shlwapi.dll
SHDeleteKeyW
user32.dll
CharNextW
userenv.dll
UnloadUserProfile
Export table
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer