Import table
advapi32.dll
RegQueryValueExW, RegEnumKeyW, RegQueryInfoKeyW, RegDeleteValueW, RegSetValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, SetSecurityDescriptorDacl, InitializeSecurityDescriptor
kernel32.dll
HeapReAlloc, GetSystemTimeAsFileTime, GetProcessHeap, HeapFree, HeapSize, HeapValidate, HeapAlloc, IsBadCodePtr, CreateEventW, CreateThread, SetEvent, WaitForSingleObject, TerminateThread, CloseHandle, GetCurrentThreadId, ExitThread, CreateMutexW, ReleaseMutex, lstrlenW, CreateFileW, SetThreadPriority, CancelIo, DisconnectNamedPipe, ReadFile, GetLastError, WaitForMultipleObjects, LoadLibraryW, GetOverlappedResult, WriteFile, PeekNamedPipe, ConnectNamedPipe, GetTickCount, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, Sleep, GetVersionExW, OpenProcess, TerminateProcess, MultiByteToWideChar, DeviceIoControl, WideCharToMultiByte, GetCurrentProcessId, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetFileType, SetHandleCount, SetFilePointer, RtlUnwind, LCMapStringW, GetStringTypeW, SetLastError, TlsFree, TlsSetValue, GetConsoleCP, SetEndOfFile, GetConsoleMode, SetStdHandle, FlushFileBuffers, WriteConsoleW, ResetEvent, TlsGetValue, TlsAlloc, IsValidCodePage, GetOEMCP, GetACP, InterlockedDecrement, InterlockedIncrement, GetCPInfo, HeapCreate, IsProcessorFeaturePresent, GetModuleFileNameW, GetStdHandle, ExitProcess, GetModuleHandleW, EncodePointer, DecodePointer, GetCommandLineW, HeapSetInformation, GetStartupInfoW, RaiseException, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetProcAddress
ole32.dll
CLSIDFromString, CoTaskMemAlloc, CoTaskMemFree, StringFromCLSID
setupapi.dll
SetupDiEnumDeviceInterfaces, SetupDiGetDeviceInterfaceDetailW, SetupDiDestroyDeviceInfoList, CM_Locate_DevNode_ExW, CM_Reenumerate_DevNode, SetupDiEnumDeviceInfo, SetupDiGetDeviceRegistryPropertyW, CM_Get_DevNode_Status, SetupDiSetClassInstallParamsW, SetupDiCallClassInstaller, SetupDiSetDeviceRegistryPropertyW, SetupDiGetDeviceInstallParamsW, SetupDiGetClassDevsW
shell32.dll
SHGetSpecialFolderPathW
user32.dll
RegisterClassExW, DispatchMessageW, GetMessageW, PostQuitMessage, CreateWindowExW, ShowWindow, UnregisterClassW, DefWindowProcW, PostMessageW, CharUpperBuffW, RegisterDeviceNotificationW, UnregisterDeviceNotification, UpdateWindow
wtsapi32.dll
WTSFreeMemory, WTSEnumerateProcessesW