Import table
advapi32.dll
LookupPrivilegeValueW, AdjustTokenPrivileges, PrivilegeCheck, GetTokenInformation, OpenThreadToken, OpenProcessToken, LookupPrivilegeNameW, RegCloseKey, GetLengthSid, GetFileSecurityA, SetFileSecurityA, AddAccessAllowedAce, InitializeAcl, SetFileSecurityW, RegOpenKeyExA, SetSecurityDescriptorDacl, GetFileSecurityW, InitializeSecurityDescriptor, RegQueryValueExA
kernel32.dll
BackupSeek, OutputDebugStringW, SetFileTime, WideCharToMultiByte, FileTimeToSystemTime, GetModuleFileNameW, MultiByteToWideChar, FindFirstFileA, SetLastError, BackupRead, SetFileAttributesA, FindClose, LocalAlloc, CreateFileMappingW, GetSystemInfo, GetModuleFileNameA, FindNextFileA, FindNextFileW, GetFileTime, DeleteFileW, SystemTimeToTzSpecificLocalTime, LocalFree, SetFileAttributesW, DeleteFileA, WaitForSingleObject, GetModuleHandleW, GetProcAddress, SetEndOfFile, MapViewOfFileEx, lstrcmpA, lstrlenA, GetVersionExW, GetModuleHandleA, GetVersionExA, GetCurrentThread, OpenProcess, GetCurrentProcessId, GetShortPathNameA, SetEnvironmentVariableA, CompareStringW, UnmapViewOfFile, MapViewOfFile, FindFirstFileW, GetFileSize, GetFullPathNameA, GetFullPathNameW, CloseHandle, DeviceIoControl, GetDiskFreeSpaceA, QueryDosDeviceW, GetDiskFreeSpaceW, GetLastError, CreateFileW, ReadFile, GetDriveTypeA, WriteFile, GetLogicalDrives, CreateFileA, SetFilePointer, GetTempPathA, CompareStringA, FlushFileBuffers, HeapFree, HeapAlloc, ExitThread, GetCurrentThreadId, CreateThread, GetCommandLineA, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, HeapCreate, HeapDestroy, VirtualFree, DeleteCriticalSection, LeaveCriticalSection, FatalAppExitA, EnterCriticalSection, VirtualAlloc, HeapReAlloc, Sleep, ExitProcess, GetStdHandle, GetStringTypeW, SetHandleCount, GetFileType, GetStartupInfoA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, GetConsoleCP, GetConsoleMode, LCMapStringA, LCMapStringW, GetStringTypeA, GetTimeFormatA, GetDateFormatA, GetUserDefaultLCID, GetLocaleInfoA, EnumSystemLocalesA, IsValidLocale, InitializeCriticalSectionAndSpinCount, RtlUnwind, SetConsoleCtrlHandler, FreeLibrary, InterlockedExchange, LoadLibraryA, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, GetTimeZoneInformation, HeapSize, GetLocaleInfoW, RaiseException
user32.dll
GetSystemMetrics
Export table
AlterPriveledge
FindEnabledPrivileges
ForceSavPriveledges
GetFirstMemoryControlBlock
GetFirstVMHandle
GetFirstVMMemoryControlBlock
GetNextVMHandle
GetPhysicalDriveFromLogical
GetPhysParamForLogicalDrive
GetPhysParamForPhysicalDrive
GetSizeOfLogicalSector
GetSizeOfPhysicalSector
GetTokenHandle
GetTokenUser
GetVMInfo
IsDriveSubstituted
IsLogicalFloppyBootSector
IsLogicalHardBootSector
IsMainConsole
IsPhysicalFloppyBootSector
IsPhysicalHardBootSector
IsPhysicalMasterBootSector
IsTerminalServer
IsWindows95
NTMajorVersion
ReadAbsoluteSector
ReadDOSMemory
ReadLogicalSector
ReadPhysicalMemory
ReadPhysicalSector
ReadVMMemory
RevokeSavPriveledges
SAV_CloseFile
SAV_CompareFileNamesW
SAV_FindClose
SAV_FindFirstA
SAV_FindFirstW
SAV_FindFirstWithTypeA
SAV_FindFirstWithTypeW
SAV_FindNextA
SAV_FindNextW
SAV_FindNextWithTypeA
SAV_FindNextWithTypeW
SAV_GetFileAttributesA
SAV_GetFileAttributesW
SAV_GetFileDateTimeA
SAV_GetFileDateTimeW
SAV_GetFileLength
SAV_GetFileLength64
SAV_GetFileTime
SAV_GetLastError
SAV_GetModuleFileNameA
SAV_GetModuleFileNameW
SAV_GetPathLengthOfCurrentModule
SAV_GetTempPathA
SAV_GetTempPathW
SAV_IsFileLocked
SAV_IsMacFileA
SAV_IsMacFileW
SAV_IsRootDirectoryA
SAV_IsRootDirectoryW
SAV_MakeFileWritableA
SAV_MakeFileWritableW
SAV_MarkAppAsTamperedW
SAV_NormalisePathA
SAV_NormalisePathW
SAV_OpenFileA
SAV_OpenFileW
SAV_OpenMacFileA
SAV_OpenMacFileW
SAV_ReadFile
SAV_RemoveA
SAV_RemoveW
SAV_SeekInFile
SAV_SeekInFile64
SAV_SetFileAttributesA
SAV_SetFileAttributesW
SAV_SetFileTime
SAV_SOpenFileA
SAV_SOpenFileW
SAV_Tell
SAV_Tell64
SAV_WriteFile
VENG_MMFBaseAddress
VENG_MMFClose
VENG_MMFNew
VENG_MMFOpen
WriteAbsoluteSector
WriteLogicalSector
WritePhysicalSector