Import table
advapi32.dll
GetTokenInformation, ConvertSidToStringSidW, RegQueryInfoKeyW, RegSetValueExW, RegEnumKeyExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW, RegQueryValueExW, RegEnumValueW, RegNotifyChangeKeyValue, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, ReportEventW, DeregisterEventSource, RegisterEventSourceW, OpenProcessToken
kernel32.dll
WaitForMultipleObjects, SetEvent, GetCommandLineW, WaitForSingleObject, GetCurrentThreadId, CreateEventW, FlushInstructionCache, SetLastError, GetCurrentProcess, LocalFree, CloseHandle, RaiseException, lstrcmpiW, LoadLibraryExW, FreeLibrary, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, lstrlenW, GetModuleFileNameW, GetModuleHandleW, InterlockedIncrement, InitializeCriticalSection, GetCurrentProcessId, CreateFileW, GetLastError, FindResourceExW, LoadResource, LockResource, SizeofResource, FindResourceW, MultiByteToWideChar, GetCurrentThread, GetThreadPriority, SetThreadPriority, Sleep, CreateThread, InterlockedDecrement, FlushFileBuffers, SetEndOfFile, IsValidLocale, EnumSystemLocalesA, GetUserDefaultLCID, GetStringTypeW, GetStringTypeA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, CreateFileA, GetTickCount, GetStartupInfoA, SetHandleCount, GetCommandLineA, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, ExitProcess, HeapCreate, GetModuleFileNameA, GetStdHandle, LCMapStringW, LCMapStringA, IsValidCodePage, GetOEMCP, GetCPInfo, WideCharToMultiByte, HeapFree, GetProcessHeap, HeapAlloc, FormatMessageW, ResetEvent, ReleaseMutex, CreateMutexW, FindClose, WriteFile, SetFilePointer, DeviceIoControl, FindFirstFileW, DeleteFileW, ReadFile, GetFileSize, GetShortPathNameW, GetLongPathNameW, FileTimeToSystemTime, FileTimeToLocalFileTime, GetFileTime, GetTempPathW, FindNextFileW, GetDriveTypeW, CreateDirectoryW, MoveFileW, GetLogicalDriveStringsW, QueryPerformanceCounter, GetLocalTime, GetSystemTime, GetLocaleInfoW, OutputDebugStringW, GetFileAttributesW, PostQueuedCompletionStatus, ReadDirectoryChangesW, GetQueuedCompletionStatus, CreateIoCompletionPort, OpenProcess, TerminateProcess, ExpandEnvironmentStringsW, InterlockedExchange, GetACP, GetLocaleInfoA, GetThreadLocale, GetVersionExA, HeapDestroy, HeapReAlloc, HeapSize, InterlockedCompareExchange, GetProcAddress, LoadLibraryA, IsProcessorFeaturePresent, VirtualFree, VirtualAlloc, RtlUnwind, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetStartupInfoW, SetFileAttributesW, GetFileType, GetConsoleCP, GetConsoleMode, GetSystemTimeAsFileTime, GetModuleHandleA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, LocalAlloc
ole32.dll
CLSIDFromString, CoInitializeEx, CoUninitialize, CoTaskMemFree, CoTaskMemAlloc, CoTaskMemRealloc, ProgIDFromCLSID, CoInitializeSecurity, CoCreateInstance, CoResumeClassObjects, CoRegisterClassObject, CoRevokeClassObject, StringFromGUID2, CoSuspendClassObjects, StringFromCLSID, CoGetClassObject, OleRun
psapi.dll
EnumProcessModules, GetModuleBaseNameW, EnumProcesses
shlwapi.dll
PathFileExistsW
user32.dll
SetWindowLongW, CharUpperW, DestroyWindow, DefWindowProcW, PostQuitMessage, GetWindowLongW, GetMessageW, TranslateMessage, DispatchMessageW, LoadStringW, CharNextW, CallWindowProcW, UnregisterClassA, GetClassInfoExW, LoadCursorW, RegisterClassExW, PostThreadMessageW, CreateWindowExW, wsprintfW