Import table
advapi32.dll
RegQueryValueExW, RegEnumValueW, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW, RegCreateKeyExW, RegOpenKeyExW, TraceMessage, UnregisterTraceGuids, RegisterTraceGuidsW, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, CloseServiceHandle, RevertToSelf, ImpersonateLoggedOnUser, ControlService, StartServiceW, OpenServiceW, OpenSCManagerW, RegOpenCurrentUser, RegNotifyChangeKeyValue, GetUserNameW, AdjustTokenPrivileges, OpenProcessToken
gdi32.dll
GetDeviceGammaRamp, SetDeviceGammaRamp
kernel32.dll
FlushFileBuffers, SetEnvironmentVariableA, CompareStringW, IsValidLocale, WaitForSingleObject, InterlockedExchange, lstrlenW, RaiseException, EnterCriticalSection, LeaveCriticalSection, GetLastError, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, GetProcAddress, GetModuleHandleW, CloseHandle, lstrcmpiW, InterlockedIncrement, InterlockedDecrement, GetSystemTimeAsFileTime, CreateFileW, GetProcessTimes, GetCurrentProcess, CreateThread, OpenEventW, CreateEventW, GetModuleFileNameW, SetEvent, Sleep, GetCurrentThreadId, FreeLibrary, MultiByteToWideChar, SizeofResource, LoadLibraryExW, InterlockedCompareExchange, CreateEventA, ExpandEnvironmentStringsW, CreateMutexW, InterlockedExchangeAdd, OutputDebugStringW, QueryPerformanceCounter, QueryPerformanceFrequency, ReleaseMutex, GetFileSizeEx, WriteFile, WideCharToMultiByte, ProcessIdToSessionId, GetCurrentProcessId, GetCommandLineW, HeapFree, GetProcessHeap, ReleaseSemaphore, CreateSemaphoreA, DuplicateHandle, HeapAlloc, WaitForMultipleObjects, GetLocaleInfoW, LocalFree, LoadResource, FormatMessageA, ExitThread, InitializeCriticalSection, OpenEventA, ResetEvent, ResumeThread, SystemTimeToFileTime, SetWaitableTimer, CreateWaitableTimerA, GetFileAttributesW, ReadFile, FindResourceW, EnumSystemLocalesA, MoveFileW, CreateDirectoryW, DeleteFileW, RemoveDirectoryW, GetLocaleInfoA, GetUserDefaultLCID, WriteConsoleW, SetStdHandle, GetConsoleMode, GetConsoleCP, SetFilePointer, LoadLibraryW, GetTickCount, GetFileType, SetHandleCount, GetEnvironmentStringsW, LocalAlloc, LoadLibraryA, RtlUnwind, GetTimeFormatA, GetDateFormatA, EncodePointer, DecodePointer, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, TerminateProcess, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, HeapSetInformation, GetStartupInfoW, IsProcessorFeaturePresent, ExitProcess, GetStdHandle, HeapCreate, GetTimeZoneInformation, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, SetLastError, HeapReAlloc, HeapSize, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, LCMapStringW, GetStringTypeW, FreeEnvironmentStringsW, CreateMutexA, CreateFileA, CompareStringA, GetConsoleOutputCP, WriteConsoleA, LCMapStringA, GetStringTypeA, VirtualFree, GetModuleFileNameA, GetModuleHandleA, GetStartupInfoA, DllMain
ole32.dll
CoSuspendClassObjects, CoTaskMemFree, CoRegisterClassObject, CoResumeClassObjects, CoTaskMemAlloc, CoUninitialize, CoInitializeEx, CoCreateInstance, StringFromGUID2, CoAddRefServerProcess, CoReleaseServerProcess, CoCreateInstanceEx, CoRevokeClassObject, CoTaskMemRealloc, CLSIDFromString
pdh.dll
PdhAddCounterW, PdhCollectQueryData, PdhGetFormattedCounterArrayW, PdhCloseQuery, PdhOpenQueryW
psapi.dll
EnumProcessModules, EnumProcesses, GetModuleFileNameExW
rpcrt4.dll
CStdStubBuffer_DebugServerRelease, NdrCStdStubBuffer_Release, NdrOleAllocate, NdrOleFree, IUnknown_QueryInterface_Proxy, IUnknown_AddRef_Proxy, IUnknown_Release_Proxy, CStdStubBuffer_QueryInterface, CStdStubBuffer_AddRef, CStdStubBuffer_Connect, CStdStubBuffer_Disconnect, CStdStubBuffer_Invoke, CStdStubBuffer_IsIIDSupported, CStdStubBuffer_CountRefs, CStdStubBuffer_DebugServerQueryInterface, NdrDllUnregisterProxy, NdrDllRegisterProxy, NdrDllCanUnloadNow, NdrDllGetClassObject
shlwapi.dll
PathFindFileNameW, PathFileExistsA, PathCombineA, SHDeleteKeyW
wtsapi32.dll
WTSQueryUserToken