Import table
advapi32.dll
RegOpenKeyExA, RegEnumKeyA, RegQueryValueExA, RegEnumValueW, LookupAccountSidW, ConvertSidToStringSidW, GetTokenInformation, IsValidSid, GetLengthSid, CopySid, RevertToSelf, ImpersonateAnonymousToken, OpenThreadToken, DeregisterEventSource, RegQueryInfoKeyW, RegDeleteValueW, RegEnumKeyExW, RegCreateKeyW, RegSetValueExW, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegDeleteKeyW, CryptSetKeyParam, CryptImportKey, CryptCreateHash, CryptSetHashParam, CryptHashData, CryptGetHashParam, CryptGetDefaultProviderW, CryptDecrypt, CryptEncrypt, CryptDestroyKey, CryptDuplicateKey, CryptDestroyHash, CryptGenRandom, CryptAcquireContextW, CryptReleaseContext
dpptutils.dll
DPFormatMessage
kernel32.dll
GetCurrentThreadId, FindClose, FindFirstFileW, CreateDirectoryW, GetModuleFileNameA, GetFileSize, CreateFileW, SetLastError, InterlockedExchange, GetTickCount, GetComputerNameA, GetStringTypeW, GetStringTypeA, SetFilePointer, GetLocalTime, WriteFile, GetCurrentProcess, GetCurrentProcessId, ProcessIdToSessionId, GetVersionExA, GetComputerNameW, LoadLibraryW, GetCurrentThread, GetVersionExW, LockResource, DisableThreadLibraryCalls, LoadLibraryExW, FindResourceW, LoadResource, SizeofResource, MultiByteToWideChar, FreeLibrary, lstrcmpiW, InterlockedDecrement, InterlockedIncrement, GetModuleFileNameW, LocalFree, GetModuleHandleW, GetProcAddress, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, RaiseException, lstrlenW, WideCharToMultiByte, GetLastError, CloseHandle, CreateMutexW, LCMapStringW, LCMapStringA, GetConsoleMode, GetConsoleCP, FlushFileBuffers, CreateFileA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, GetLocaleInfoA, LoadLibraryA, InitializeCriticalSectionAndSpinCount, GetSystemTimeAsFileTime, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, SetStdHandle, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, RtlUnwind, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, GetCommandLineA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, HeapCreate, VirtualFree, GetModuleHandleA, Sleep, ExitProcess, GetStdHandle, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, SetHandleCount, GetFileType, GetStartupInfoA, FreeEnvironmentStringsA, GetEnvironmentStrings
ole32.dll
StringFromGUID2, CoTaskMemRealloc, StringFromCLSID, CoTaskMemFree, CoTaskMemAlloc, CoImpersonateClient, CoRevertToSelf, OleRun, CoCreateInstance
rpcrt4.dll
RpcRevertToSelf, RpcImpersonateClient
shlwapi.dll
SHDeleteKeyW
user32.dll
CharNextW
userenv.dll
UnloadUserProfile
Export table
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer