Import table
advapi32.dll
RegQueryInfoKeyA, SetKernelObjectSecurity, ConvertStringSecurityDescriptorToSecurityDescriptorW, ConvertStringSecurityDescriptorToSecurityDescriptorA, RegOpenKeyExW, RegOpenKeyExA, RegCloseKey, RegQueryValueExW, RegSetValueExW, RegSetValueExA, RegCreateKeyExA, RegDeleteKeyA, RegQueryValueExA, RegEnumKeyA, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, CreateProcessAsUserW, StartServiceCtrlDispatcherA, CreateServiceA, CloseServiceHandle, DeleteService, OpenServiceA, OpenSCManagerA, SetServiceStatus, RegisterServiceCtrlHandlerExA, GetUserNameW, RegEnumValueA, RegQueryInfoKeyW, RegEnumKeyExA, RegDeleteValueA
kernel32.dll
LoadLibraryA, SetUnhandledExceptionFilter, CreateFileW, GetCurrentThreadId, GetCurrentProcess, GetFileSize, LoadLibraryW, FindFirstFileW, FindClose, GetSystemTime, SystemTimeToFileTime, FreeLibrary, DeleteCriticalSection, InitializeCriticalSection, EnterCriticalSection, LeaveCriticalSection, LocalAlloc, LocalFree, OpenMutexA, CreateMutexA, GetStartupInfoA, CreateProcessA, TerminateProcess, WaitForMultipleObjects, GetModuleFileNameW, WideCharToMultiByte, MultiByteToWideChar, InterlockedExchange, GetTimeZoneInformation, SetLastError, GetLocalTime, OutputDebugStringW, WriteFile, ReadFile, SetFilePointerEx, ReleaseMutex, CreateMutexW, OpenMutexW, DeleteFileW, MoveFileExW, GetFileAttributesW, CreateDirectoryW, GetFileSizeEx, GetSystemTimeAsFileTime, QueryPerformanceCounter, IsDebuggerPresent, UnhandledExceptionFilter, InterlockedCompareExchange, ProcessIdToSessionId, GetCurrentProcessId, VirtualProtect, GetProcAddress, GetModuleHandleA, OpenThread, GetModuleFileNameA, ResetEvent, CreateEventA, GetLastError, WaitForSingleObject, Sleep, GetTickCount, SetEvent, CreateThread, CloseHandle, GetSystemInfo, RaiseException, SwitchToThread, CreateProcessW, GetModuleHandleW
msvcp80.dll
DllMain
msvcr80.dll
DllMain
shell32.dll
SHGetFolderPathW
user32.dll
TranslateMessage, GetMessageA, GetWindowLongA, DispatchMessageA, SetWindowLongA, DefWindowProcA, RegisterClassExA, CreateWindowExA, PostThreadMessageA
userenv.dll
DestroyEnvironmentBlock, LoadUserProfileW, UnloadUserProfile, CreateEnvironmentBlock
wtsapi32.dll
WTSQuerySessionInformationW, WTSEnumerateSessionsA, WTSQueryUserToken, WTSFreeMemory