Import table
advapi32.dll
OpenThreadToken, OpenProcessToken, GetTokenInformation, AllocateAndInitializeSid, EqualSid, FreeSid, RegEnumValueA, RegEnumKeyExA, RegCreateKeyExA, RegOpenKeyExA, RegDeleteKeyA, DeleteService, CreateServiceA, RegCreateKeyA, RegOpenKeyA, RegQueryValueExA, RegDeleteValueA, RegSetValueExA, RegCloseKey, ControlService, OpenSCManagerA, OpenServiceA, CloseServiceHandle, StartServiceA, QueryServiceStatus, RegQueryInfoKeyA
kernel32.dll
CompareStringA, CompareStringW, GetTimeZoneInformation, GetEnvironmentVariableA, GetCurrentThread, GetCurrentProcess, lstrlenA, GetModuleHandleA, GetProcAddress, LoadLibraryA, FreeLibrary, CreateEventA, DeviceIoControl, GetSystemDirectoryA, CreateThread, GetCurrentProcessId, GetVersionExA, CreateFileA, OpenFileMappingA, SetLastError, MapViewOfFile, CloseHandle, OpenMutexA, UnmapViewOfFile, WaitForSingleObject, ReleaseMutex, GetLastError, GetLocaleInfoW, Sleep, HeapFree, HeapAlloc, RaiseException, RtlUnwind, GetCurrentThreadId, GetCommandLineA, GetACP, GetOEMCP, GetCPInfo, TlsAlloc, TlsFree, TlsSetValue, TlsGetValue, HeapDestroy, HeapCreate, VirtualFree, DeleteCriticalSection, LeaveCriticalSection, FatalAppExitA, EnterCriticalSection, VirtualAlloc, HeapReAlloc, IsBadWritePtr, LCMapStringA, WideCharToMultiByte, MultiByteToWideChar, LCMapStringW, SetUnhandledExceptionFilter, ReadFile, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, SetFilePointer, ExitProcess, TerminateProcess, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, UnhandledExceptionFilter, WriteFile, HeapSize, GetStringTypeA, GetStringTypeW, InitializeCriticalSection, InterlockedExchange, VirtualQuery, GetLocaleInfoA, VirtualProtect, GetSystemInfo, IsBadReadPtr, IsBadCodePtr, SetStdHandle, FlushFileBuffers, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, GetTimeFormatA, GetDateFormatA, GetUserDefaultLCID, EnumSystemLocalesA, IsValidLocale, IsValidCodePage, SetConsoleCtrlHandler, SetEndOfFile, SetEnvironmentVariableA
user32.dll
EnumChildWindows, GetWindowThreadProcessId, EnumWindows
Export table
Func_0007
Func_0008
Func_0013
Func_0015
Func_0017
Func_0022
Func_0024
Func_0027
Func_0039
Func_0042
Func_0044
Func_0047
Func_0055
Func_0056
Func_0059
Func_0061
Func_0063
Func_0064
Func_0071
Func_0072
Func_0075
Func_0081
Func_0082
Func_0083
Func_0087
Func_0091
Func_0092
Func_0095
Func_0097
Func_0098
Func_0099
Func_0101
Func_0137
Func_0202
Func_0203