Import table
advapi32.dll
RegQueryValueExA, RegOpenKeyExA, ConvertStringSecurityDescriptorToSecurityDescriptorA, RegCloseKey, RegQueryValueExW, RegOpenKeyExW, AllocateAndInitializeSid, CheckTokenMembership, FreeSid
kernel32.dll
GetProcAddress, GetTimeZoneInformation, SetLastError, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, InterlockedCompareExchange, SwitchToThread, DeleteCriticalSection, GetLocalTime, GetCurrentThreadId, OutputDebugStringW, WaitForSingleObject, WriteFile, ReadFile, SetFilePointerEx, DeleteFileW, GetFileAttributesW, MultiByteToWideChar, LocalAlloc, CreateMutexW, OpenMutexW, LocalFree, FreeLibrary, InterlockedExchange, RaiseException, GetModuleFileNameA, LoadLibraryA, GetCurrentProcess, GetLastError, CloseHandle, MoveFileExW, CreateDirectoryW, CreateFileW, Sleep, SetUnhandledExceptionFilter, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, GetCurrentProcessId, ReleaseMutex, IsDebuggerPresent, ProcessIdToSessionId
msvcp80.dll
DllMain
msvcr80.dll
DllMain
shell32.dll
ShellExecuteExW
wtsapi32.dll
WTSEnumerateSessionsW, WTSFreeMemory