Import table
advapi32.dll
OpenProcessToken, GetUserNameW, ImpersonateLoggedOnUser, RegEnumValueW, RegQueryInfoKeyW, RegEnumKeyW, RegDeleteValueW, RegSetValueExW, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RevertToSelf
kernel32.dll
InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, ReadFile, WriteFile, SetFilePointer, SetEndOfFile, GetFileSize, IsBadCodePtr, CreateFileW, GetProcAddress, GetModuleHandleW, CloseHandle, MultiByteToWideChar, DeleteFileW, lstrlenW, GetCurrentProcess, HeapFree, GetProcessHeap, TerminateThread, WaitForSingleObject, SetEvent, ExitThread, GetCurrentThreadId, ResetEvent, GetLastError, WaitForMultipleObjects, CreateProcessW, GetModuleFileNameW, Process32NextW, Process32FirstW, CreateToolhelp32Snapshot, OpenProcess, HeapAlloc, HeapReAlloc, CreateThread, CreateEventW, CreateDirectoryW, OutputDebugStringA, GetModuleHandleA, GetConsoleMode, GetConsoleCP, LoadLibraryW, IsValidCodePage, GetOEMCP, GetACP, GetCPInfo, LeaveCriticalSection, EnterCriticalSection, GetStringTypeW, LCMapStringW, SetStdHandle, WriteConsoleW, FlushFileBuffers, GetExitCodeProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, GetEnvironmentStringsW, WideCharToMultiByte, FreeEnvironmentStringsW, GetModuleFileNameA, GetStartupInfoW, GetFileType, SetHandleCount, ExitProcess, HeapSize, Sleep, RtlUnwind, RaiseException, DecodePointer, EncodePointer, MoveFileW, GetFileAttributesW, GetCommandLineA, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, InterlockedDecrement, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapCreate, HeapDestroy, GetStdHandle, IsProcessorFeaturePresent
ole32.dll
CoTaskMemFree, CoTaskMemAlloc
shell32.dll
SHGetFolderPathW
shlwapi.dll
SHDeleteKeyW, PathAppendW
user32.dll
wsprintfW, MsgWaitForMultipleObjects, PeekMessageW, DispatchMessageW, FindWindowW, FindWindowExW, SendMessageW, CharUpperBuffW
version.dll
GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW
wtsapi32.dll
WTSFreeMemory, WTSEnumerateProcessesW, WTSEnumerateSessionsW
