Import table
advapi32.dll
OpenThreadToken, RegDeleteKeyW, RegDeleteValueW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, RegSetValueExW, RegQueryInfoKeyW, RegEnumKeyExW, RegEnumValueW, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, AdjustTokenPrivileges, PrivilegeCheck, LookupPrivilegeValueW, OpenProcessToken, CreateProcessAsUserW, SetTokenInformation, GetLengthSid, ConvertStringSidToSidW, DuplicateTokenEx, EncryptFileW, GetNamedSecurityInfoW, SetFileSecurityW, GetTokenInformation, ConvertSidToStringSidW, LookupAccountSidW, DecryptFileW, CryptGenRandom, AddAce, GetSidSubAuthority, InitializeSid, InitializeAcl, GetSidLengthRequired, SetNamedSecurityInfoW, CryptAcquireContextW, CryptReleaseContext, CopySid, FreeSid, CheckTokenMembership, AllocateAndInitializeSid, RegQueryValueExW, CloseServiceHandle, QueryServiceStatus, OpenServiceW, OpenSCManagerW, IsValidSid, DeregisterEventSource, ReportEventW, RegisterEventSourceW, SetServiceStatus, DeleteService, ControlService, RegisterServiceCtrlHandlerW, CryptSetHashParam, CryptGetHashParam, CryptCreateHash, CryptHashData, CryptDeriveKey, CryptDestroyHash, RegNotifyChangeKeyValue, GetUserNameA, StartServiceCtrlDispatcherW, ChangeServiceConfig2W, ChangeServiceConfigW, CreateServiceW, SetThreadToken, GetAclInformation, GetSecurityDescriptorControl, MakeSelfRelativeSD, MakeAbsoluteSD, GetSecurityDescriptorSacl, GetSecurityDescriptorDacl, GetSecurityDescriptorGroup, GetSecurityDescriptorOwner, IsTextUnicode, LogonUserW, CryptDestroyKey, GetSecurityDescriptorLength, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, ConvertStringSecurityDescriptorToSecurityDescriptorA
comctl32.dll
_TrackMouseEvent, ImageList_ReplaceIcon, ImageList_Destroy, ImageList_Create, ImageList_SetImageCount, ImageList_Draw
imm32.dll
ImmGetCompositionStringW, ImmGetContext, ImmSetCompositionWindow, ImmReleaseContext
kernel32.dll
DllMain
ole32.dll
OleGetClipboard, CoInitializeSecurity, ReleaseStgMedium, CoCreateGuid, OleRegGetMiscStatus, OleRegEnumVerbs, CreateOleAdviseHolder, CoTaskMemRealloc, CoInitialize, PropVariantClear, CoRevertToSelf, CoImpersonateClient, CoSuspendClassObjects, CoResumeClassObjects, OleUninitialize, OleInitialize, CoDisconnectObject, OleLockRunning, CoGetClassObject, RegisterDragDrop, RevokeDragDrop, CLSIDFromString, CoCreateInstance, CoTaskMemFree, CLSIDFromProgID, CreateBindCtx, CoTaskMemAlloc, StringFromGUID2, OleRegGetUserType, CoInitializeEx, CoUninitialize, CoRegisterClassObject, CoRevokeClassObject, WriteClassStm, OleSaveToStream, OleLoadFromStream, CoCreateFreeThreadedMarshaler, CreateILockBytesOnHGlobal, StgOpenStorageOnILockBytes, StgOpenStorageEx, StgCreateStorageEx, CreateStreamOnHGlobal, CoFreeUnusedLibraries, StringFromCLSID
psapi.dll
QueryWorkingSet, GetProcessMemoryInfo
user32.dll
DllMain
userenv.dll
LoadUserProfileW, UnloadUserProfile
Export table
KeyboardProcMainW
OutOfProcMetadataMainW
