Import table
advapi32.dll
RegEnumValueA, RegNotifyChangeKeyValue, RegEnumKeyA, RegQueryValueA, RegOpenKeyA, RegDeleteKeyA, RegDeleteValueA, RegOpenKeyExA, RegQueryValueExA, RegCreateKeyExA, RegSetValueExA, RegCloseKey, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, ConvertStringSecurityDescriptorToSecurityDescriptorA, GetSecurityDescriptorSacl
kernel32.dll
CloseHandle, CreateFileA, DuplicateHandle, GetCurrentProcess, LocalFree, CreateDirectoryA, GetVersionExA, GetSystemDirectoryA, GetEnvironmentVariableA, DeleteCriticalSection, LeaveCriticalSection, GetCurrentThreadId, EnterCriticalSection, InitializeCriticalSection, LoadLibraryA, GetProcAddress, FreeLibrary, GetModuleFileNameA, InterlockedExchange, GetLocalTime, Sleep, WaitForSingleObject, OutputDebugStringA, CreateThread, ResetEvent, SetEvent, WaitForMultipleObjects, CreateEventA, SetThreadPriority, TerminateThread, InterlockedDecrement, InterlockedIncrement, MoveFileExA, GetModuleHandleA, GetCurrentProcessId, GetShortPathNameA, GetFileType, FlushFileBuffers, SetFilePointer, GetFileSize, WriteFile, GetLastError, ExitThread, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, RaiseException, RtlUnwind, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCommandLineA, HeapAlloc, HeapFree, GetModuleHandleW, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, HeapSize, ExitProcess, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, GetStdHandle, LCMapStringA, WideCharToMultiByte, MultiByteToWideChar, LCMapStringW, SetHandleCount, GetStartupInfoA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, HeapCreate, HeapDestroy, VirtualFree, QueryPerformanceCounter, GetTickCount, VirtualAlloc, HeapReAlloc, InitializeCriticalSectionAndSpinCount, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, GetConsoleCP, GetConsoleMode
shell32.dll
SHGetFolderPathA
version.dll
VerQueryValueA, GetFileVersionInfoA, GetFileVersionInfoSizeA
Export table
CreateCollector
DestroyCollector