Import table
advapi32.dll
CryptGenRandom, RegCloseKey, OpenServiceA, OpenSCManagerA, RegQueryValueExA, RegOpenKeyA, DeleteService, RegSetValueExA, CreateServiceA, RegDeleteValueW, StartServiceW, QueryServiceStatusEx, CryptEncrypt, CryptAcquireContextW, CryptGenKey, CryptReleaseContext, CryptImportKey, CryptExportKey, CryptDestroyKey, ConvertSidToStringSidA, AllocateAndInitializeSid, EqualSid, FreeSid, DuplicateTokenEx, ConvertStringSidToSidW, GetLengthSid, SetTokenInformation, CreateProcessAsUserA, RegQueryValueExW, QueryServiceStatus, RegOpenKeyExA, OpenProcessToken, GetTokenInformation, GetSidSubAuthority, RegOpenKeyExW, CloseServiceHandle, RegDeleteKeyW, RegCreateKeyExW, RegSetValueExW, RegQueryInfoKeyW, RegEnumKeyExW, OpenSCManagerW, OpenServiceW, GetNamedSecurityInfoW, GetEffectiveRightsFromAclW, SetEntriesInAclW, SetNamedSecurityInfoW
gdi32.dll
TextOutW, CreateHatchBrush, GetPixel, SetPixel, SetDCBrushColor, GetStockObject, GetObjectW, CreateSolidBrush, GetTextExtentPoint32W, PatBlt, CreateFontIndirectW, DeleteObject, GetDeviceCaps, BitBlt, CreateCompatibleDC, CreateCompatibleBitmap, DeleteDC, SelectObject, CreateRectRgn, GetRandomRgn, GetRegionData, GetDIBits
iphlpapi.dll
GetAdaptersAddresses, GetAdaptersInfo
js32.dll
JS_GetStringBytes, JS_DefineFunctions, JS_SetProperty, JS_InitStandardClasses, JS_SetGlobalObject, JS_NewObject, JS_SetVersion, JS_SetOptions, JS_GetOptions, JS_NewContext, JS_SetGCParameter, JS_Init, JS_GetImplementationVersion, JS_CallFunctionName, JS_GetClass, JS_NextProperty, JS_TypeOfValue, JS_NewPropertyIterator, JS_SetContextPrivate, JS_GetStringLength, JS_GetContextPrivate, JS_ReportPendingException, JS_IsExceptionPending, JS_NewStringCopyN, JS_ValueToString, JS_GetElement, JS_GetArrayLength, JS_IsArrayObject, JS_GetProperty, JS_ConvertArguments, JS_LeaveLocalRootScope, JS_EnterLocalRootScope, JS_ShutDown, JS_Finish, JS_DestroyContext, JS_GC, JS_RemoveRoot, JS_GetGlobalObject, JS_CompileScriptForPrincipals, JS_DestroyScript, JS_ExecuteScript, JS_MaybeGC, JS_GetFunctionName, JS_ValueToFunction, JS_DefineFunction, JS_NewArrayObject, JS_CallFunctionValue, JS_AddRoot, JS_SetGCCallback, JS_SetDebugErrorHook, JS_SetErrorReporter
kernel32.dll
DllMain, IsWow64Process, GetFileAttributesA, InterlockedExchangeAdd, GetSystemTime, VirtualProtect, Process32NextW, Process32FirstW, CreateToolhelp32Snapshot, DeviceIoControl, ReadFile, GetSystemDirectoryA, GetWindowsDirectoryA, ResetEvent, MapViewOfFileEx, CreateFileMappingW, UnmapViewOfFile, HeapFree, GetProcessHeap, lstrlenA, lstrcmpW, MulDiv, GlobalUnlock, GlobalLock, GlobalAlloc, ExpandEnvironmentStringsW, GetSystemTimeAsFileTime, GetComputerNameExW, GetVolumeInformationA, FlushInstructionCache, lstrcpynW, QueryPerformanceFrequency, QueryPerformanceCounter, CompareFileTime, FindFirstFileA, FindNextFileA, ExpandEnvironmentStringsA, FindNextFileW, RemoveDirectoryW, CreateDirectoryW, CopyFileW, MoveFileW, CreateFileA, GetFileTime, LocalFree, WideCharToMultiByte, GetExitCodeProcess, GetVersionExA, GetVersionExW, SuspendThread, GetThreadContext, ResumeThread, OutputDebugStringA, InterlockedExchange, GetFileAttributesW, FormatMessageA, CreateEventW, LoadLibraryW, LoadLibraryA, SetLastError, SetEvent, SetProcessShutdownParameters, CreateEventA, GetTimeFormatA, GetDateFormatA, DeleteFileW, GetProcessTimes, GetTempPathW, GetTempFileNameW, SystemTimeToTzSpecificLocalTime, GetTimeFormatW, GetDateFormatW, FileTimeToSystemTime, DuplicateHandle, GetProcessId, GetModuleFileNameA, CreateProcessA, WaitForSingleObject, GetTickCount, GetCommandLineA, LoadLibraryExW, WriteFile, GlobalFree, VirtualQuery, LoadLibraryExA, WaitForMultipleObjects, SetWaitableTimer, CancelWaitableTimer, LocalAlloc, GetStartupInfoA, GetACP, GetLocaleInfoA, GetThreadLocale, HeapAlloc, IsProcessorFeaturePresent, VirtualFree, VirtualAlloc, CreateWaitableTimerW, FindFirstChangeNotificationW, FindNextChangeNotification, FindCloseChangeNotification, ReadProcessMemory, ProcessIdToSessionId, OpenEventA, GetSystemTimes, GetLocalTime, GetLastError, CloseHandle, GetCurrentProcess, Sleep, OpenProcess, SleepEx, GetCurrentThread, CreateThread, GetProcAddress, GetModuleHandleA, MultiByteToWideChar, QueryDosDeviceA, FindClose, FindFirstFileW, EnterCriticalSection, LeaveCriticalSection, InterlockedIncrement, InterlockedDecrement, DeleteCriticalSection, InitializeCriticalSection, InterlockedCompareExchange, CreateFileW, GetSystemDirectoryW, RaiseException, GetModuleHandleW, GetCurrentProcessId, OpenMutexA, GetEnvironmentVariableW, TerminateProcess, SetUnhandledExceptionFilter, GetCurrentThreadId, DebugBreak, GetModuleFileNameW, CreateProcessW, lstrlenW, lstrcmpiW, FreeLibrary, SizeofResource, LoadResource, FindResourceW
msvcp80.dll
DllMain
msvcr80.dll
DllMain
ole32.dll
CLSIDFromProgID, CoTaskMemRealloc, CoSetProxyBlanket, OleRun, OleUninitialize, OleInitialize, CreateStreamOnHGlobal, CLSIDFromString, CoTaskMemAlloc, CoGetClassObject, OleLockRunning, StringFromGUID2, CoUninitialize, CoInitializeEx, CoTaskMemFree, CoCreateInstance
psapi.dll
EnumProcesses, GetModuleInformation, EnumProcessModules, GetModuleBaseNameA, GetProcessMemoryInfo, GetModuleFileNameExA
rapportutil.dll
DllMain
rpcrt4.dll
UuidCreate, UuidToStringW, RpcStringFreeW
shell32.dll
Shell_NotifyIconA, Shell_NotifyIconW, ShellExecuteA, SHGetFolderPathA, ShellExecuteExA, SHGetFolderPathW, SHFileOperationW
shlwapi.dll
AssocQueryStringA, PathAppendA, SHDeleteKeyW
trf.dll
counters_release, stacktrace_get_stack_trace, env_alloc_default, iterate_pid, get_remote_process_sym_addr, get_current_session_id, get_parent_pid_from_pid, counters_acquire, create_medium_integrity_process, win32_dep_opt_in, counters_get, env_shutdown, redirect_io_to_console, GetCurrentSessionId, env_get, is_process_suspended, get_application_directory, set_application_directory, env_is_inited, generate_dump_file, stacktrace_get_caller_module, stacktrace_get_stack_trace_unl, proctools_get_process_image_name, iterate_modules, proctools_get_file_version_info, bring_process_main_window_to_foreground
urlmon.dll
CoInternetGetSession
user32.dll
GetClassInfoExW, LoadCursorW, SetLayeredWindowAttributes, AttachThreadInput, GetSystemMetrics, GetCursorPos, SystemParametersInfoW, ScreenToClient, RegisterClassExW, GetSysColor, PeekMessageW, ClientToScreen, GetDC, InvalidateRgn, RedrawWindow, SetCapture, IsChild, GetDlgItem, ReleaseCapture, FillRect, EndPaint, BeginPaint, DestroyAcceleratorTable, GetWindow, IsWindow, EnableWindow, IsWindowEnabled, GetWindowTextW, GetWindowTextLengthW, RegisterWindowMessageW, RegisterClassW, SendMessageA, PostMessageA, CreateWindowExA, RegisterClassA, GetKeyboardLayoutList, PostQuitMessage, RegisterClassExA, GetWindowPlacement, IsWindowVisible, GetAncestor, RegisterWindowMessageA, CallNextHookEx, GetClientRect, PostThreadMessageW, GetAsyncKeyState, UnregisterClassA, SetFocus, SetTimer, KillTimer, CreateAcceleratorTableW, GetKeyState, ToAscii, GetWindowTextA, ShowWindow, SetForegroundWindow, GetSystemMenu, MessageBoxA, keybd_event, SendMessageW, ReleaseDC, GetDCEx, GetClassNameW, EnumChildWindows, GetClassNameA, GetDesktopWindow, GetForegroundWindow, wsprintfW, SetWindowLongW, GetWindowLongW, MessageBoxW, CallWindowProcW, DefWindowProcW, MessageBoxExW, AllowSetForegroundWindow, FindWindowW, CharNextW, LoadIconW, CreateWindowExW, InvalidateRect, EnumWindows, SetWindowsHookExW, DeleteMenu, GetParent, PostMessageW, GetFocus, FindWindowExA, GetWindowThreadProcessId, UnhookWindowsHookEx, DispatchMessageW, GetWindowRect, SetWindowPos, MoveWindow, IsZoomed, SetWindowTextW, DestroyWindow, GetMessageW, TranslateMessage, VkKeyScanW, BroadcastSystemMessageW, MonitorFromPoint, EnumDisplayMonitors
version.dll
GetFileVersionInfoW, VerQueryValueW, VerQueryValueA, GetFileVersionInfoSizeA, GetFileVersionInfoA, GetFileVersionInfoSizeW
wininet.dll
HttpOpenRequestA, HttpSendRequestA, InternetSetStatusCallbackA, InternetConnectA, InternetReadFileExA, HttpQueryInfoW, InternetSetOptionA, InternetSetOptionW, InternetCrackUrlA, InternetOpenA, InternetGetConnectedState, InternetCloseHandle, HttpQueryInfoA
wintrust.dll
CryptCATAdminReleaseCatalogContext, CryptCATAdminReleaseContext, CryptCATCatalogInfoFromContext, CryptCATAdminEnumCatalogFromHash, WinVerifyTrust, CryptCATAdminCalcHashFromFileHandle, CryptCATAdminAcquireContext
wtsapi32.dll
WTSUnRegisterSessionNotification, WTSRegisterSessionNotification
