Import table
advapi32.dll
RegEnumValueW, RegSetValueExW, RegCreateKeyExW, RegQueryInfoKeyW, RegDeleteValueW, RegOpenKeyExW, RegQueryValueExW, RegCloseKey
kernel32.dll
LoadLibraryW, OutputDebugStringA, LoadLibraryExW, MultiByteToWideChar, GetModuleFileNameW, GetLastError, GetUserDefaultLangID, WideCharToMultiByte, FormatMessageW, GetCurrentThreadId, GetCommandLineA, HeapFree, GetVersionExA, HeapAlloc, GetProcessHeap, RaiseException, RtlUnwind, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, InterlockedDecrement, Sleep, HeapSize, ExitProcess, SetLastError, GetStdHandle, GetModuleFileNameA, SetHandleCount, GetFileType, GetStartupInfoA, DeleteCriticalSection, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, HeapDestroy, HeapCreate, VirtualFree, QueryPerformanceCounter, GetCurrentProcessId, GetSystemTimeAsFileTime, LeaveCriticalSection, EnterCriticalSection, GetCPInfo, GetACP, GetOEMCP, HeapReAlloc, VirtualAlloc, LoadLibraryA, InitializeCriticalSection, GetLocaleInfoA, GetStringTypeA, GetStringTypeW, LCMapStringA, LCMapStringW, GetTickCount, GetVersion, GetFileAttributesW, GetProcAddress, GetModuleHandleW, WriteFile, GetModuleHandleA, SetFilePointer, GetConsoleCP, GetConsoleMode, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, CreateFileA, CloseHandle, FlushFileBuffers, IsValidCodePage
Export table
InitializeChangeNotify
LockEvent
LogoffEvent
LogonEvent
PasswordChangeNotify
PasswordFilter
ShellStartEvent
ShutdownEvent
StartupEvent
UnlockEvent