Import table
advapi32.dll
RegEnumValueW, RegGetValueW, RegSetValueExW, RegisterTraceGuidsW, RegEnumKeyExW, ControlService, GetTraceEnableLevel, ConvertStringSecurityDescriptorToSecurityDescriptorW, UnregisterTraceGuids, SetServiceStatus, QueryServiceStatus, DuplicateTokenEx, GetTraceLoggerHandle, SetTokenInformation, RegQueryInfoKeyW, GetTraceEnableFlags, RegCreateKeyExW, RegisterServiceCtrlHandlerExW, OpenServiceW, TraceMessage, StartServiceCtrlDispatcherW, OpenSCManagerW, DeleteService, OpenProcessToken, CloseServiceHandle, CreateServiceW, RegCloseKey, RegOpenKeyExW, RegDeleteValueW, RegDeleteKeyW, CreateProcessAsUserW, RegQueryValueExW
kernel32.dll
WaitForSingleObject, InterlockedCompareExchange, SetEvent, OutputDebugStringW, GetModuleHandleW, GetSystemTimeAsFileTime, WriteFile, InitializeCriticalSection, GetProcessTimes, WideCharToMultiByte, LoadLibraryW, InitializeCriticalSectionAndSpinCount, Sleep, SizeofResource, CreateEventA, LeaveCriticalSection, TerminateProcess, GetModuleFileNameW, CreateFileW, MultiByteToWideChar, lstrlenW, RaiseException, InterlockedExchange, GetFileSizeEx, SetLastError, GetProcAddress, QueryPerformanceCounter, InterlockedExchangeAdd, CreateEventW, WaitForMultipleObjects, OpenEventW, QueryPerformanceFrequency, DeleteCriticalSection, GetCurrentThreadId, ReleaseMutex, LocalFree, ExpandEnvironmentStringsW, GetTickCount, CreateSemaphoreA, ReleaseSemaphore, DuplicateHandle, CreateThread, DeviceIoControl, GetLocaleInfoW, GetCurrentProcess, InterlockedDecrement, LoadLibraryExW, InterlockedIncrement, LoadResource, FreeLibrary, FindResourceW, CreateMutexW, GetCommandLineW, CloseHandle, lstrcmpiW, WTSGetActiveConsoleSessionId, GetLastError, GetSystemDirectoryW, RemoveDirectoryW, DeleteFileW, CreateDirectoryW, MoveFileW, ReadFile, FormatMessageA, EnterCriticalSection, GetFileAttributesW, CreateWaitableTimerA, SetWaitableTimer, SystemTimeToFileTime, ResetEvent, OpenEventA, GetProcessHeap, SetEnvironmentVariableA, CompareStringW, FlushFileBuffers, IsValidLocale, EnumSystemLocalesA, GetLocaleInfoA, GetUserDefaultLCID, WriteConsoleW, SetStdHandle, GetConsoleMode, GetConsoleCP, SetFilePointer, RtlUnwind, LocalAlloc, LoadLibraryA, HeapFree, HeapAlloc, GetTimeFormatA, GetDateFormatA, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, EncodePointer, DecodePointer, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, GetCommandLineA, HeapSetInformation, GetStartupInfoW, HeapCreate, ExitProcess, GetStdHandle, IsProcessorFeaturePresent, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, GetTimeZoneInformation, HeapSize, HeapReAlloc, LCMapStringW, GetStringTypeW, GetModuleFileNameA, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, GetFileType, GetCurrentProcessId
ole32.dll
CoTaskMemRealloc, StringFromGUID2, CoTaskMemFree, CoTaskMemAlloc, CoRevokeClassObject, StringFromCLSID, CoCreateInstance, CoInitializeSecurity, CoInitializeEx, CoRegisterClassObject, CoResumeClassObjects, CoCreateInstanceEx, CoAddRefServerProcess
setupapi.dll
SetupDiEnumDeviceInfo, SetupDiGetClassDevsW, SetupDiOpenDevRegKey, SetupDiDestroyDeviceInfoList, SetupDiGetDeviceRegistryPropertyW, CM_Get_DevNode_Status, SetupDiGetDeviceInstanceIdW
shlwapi.dll
SHSetValueW, PathAddBackslashW, StrStrIW, PathFindFileNameW, SHDeleteValueW
userenv.dll
CreateEnvironmentBlock, DestroyEnvironmentBlock
wtsapi32.dll
WTSQueryUserToken
