Import table
api-ms-win-core-errorhandling-l1-1-0.dll
UnhandledExceptionFilter, SetUnhandledExceptionFilter, SetLastError, GetLastError
api-ms-win-core-file-l1-1-0.dll
CreateFileW, GetDiskFreeSpaceA
api-ms-win-core-handle-l1-1-0.dll
CloseHandle
api-ms-win-core-heap-l1-1-0.dll
HeapFree, GetProcessHeap, HeapAlloc
api-ms-win-core-interlocked-l1-1-0.dll
InterlockedExchange, InterlockedCompareExchange
api-ms-win-core-io-l1-1-0.dll
DeviceIoControl
api-ms-win-core-libraryloader-l1-1-0.dll
FreeLibrary, LoadLibraryExW, GetProcAddress
api-ms-win-core-localregistry-l1-1-0.dll
RegOpenKeyExW, RegCloseKey, RegGetValueW, RegQueryValueExW
api-ms-win-core-memory-l1-1-0.dll
UnmapViewOfFile, MapViewOfFileEx, VirtualFree, VirtualAlloc
api-ms-win-core-misc-l1-1-0.dll
LocalFree, Sleep, LocalAlloc
api-ms-win-core-processthreads-l1-1-0.dll
OpenThreadToken, GetCurrentProcess, GetCurrentThread, GetCurrentProcessId, GetCurrentThreadId, SwitchToThread, TerminateProcess
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-synch-l1-1-0.dll
LeaveCriticalSection, InitializeCriticalSectionAndSpinCount, EnterCriticalSection
api-ms-win-core-sysinfo-l1-1-0.dll
GlobalMemoryStatusEx, GetTickCount, GetSystemTimeAsFileTime, GetComputerNameExA
api-ms-win-security-base-l1-1-0.dll
AllocateAndInitializeSid, IsValidSid, FreeSid, GetLengthSid, CheckTokenMembership, SetSecurityDescriptorDacl, InitializeAcl, CopySid, AllocateLocallyUniqueId, AddAccessAllowedAce, InitializeSecurityDescriptor, GetTokenInformation, EqualSid
api-ms-win-service-core-l1-1-0.dll
SetServiceStatus, RegisterServiceCtrlHandlerExW
kernelbase.dll
BemFreeContract, BemCreateContractFrom, CompareStringA
msvcrt.dll
DllMain
ntdll.dll
RtlNtStatusToDosError, DbgPrint, NtOpenSection, RtlInitUnicodeString, NtSetUuidSeed, EtwEventRegister, EtwEventWrite, EtwEventEnabled, NtQuerySystemInformation, RtlInitializeCriticalSection, RtlGetNtProductType, WinSqmIsOptedIn, WinSqmSetDWORD, NtOpenFile, RtlFreeHeap, RtlAllocateHeap, RtlImageNtHeader
rpcrt4.dll
RpcServerRegisterIf2, I_RpcServerSetAddressChangeFn, I_RpcServerRegisterForwardFunction, TowerExplode, RpcRaiseException, I_RpcServerInqRemoteConnAddress, I_RpcBindingIsClientLocal, I_RpcSystemFunction001, RpcServerRegisterAuthInfoW, RpcImpersonateClient, I_RpcServerInqLocalConnAddress, I_RpcBindingInqTransportType, I_RpcGetPortAllocationData, UuidIsNil, NdrServerCall2, RpcServerUseProtseqEpExW, RpcMgmtSetServerStackSize, I_RpcFwThisIsTheManager, RpcMgmtIsServerListening, RpcServerListen, RpcRevertToSelfEx, RpcServerInqCallAttributesW, I_RpcAllocate, RpcRevertToSelf, I_RpcFree, RpcServerUnregisterIf, I_RpcServerCheckClientRestriction