Import table
advapi32.dll
RegOpenKeyExW, RegCloseKey, RegCreateKeyExW, CryptAcquireContextW, CryptGetHashParam, CryptHashData, CryptDestroyHash, CryptDestroyKey, CryptCreateHash, CryptEncrypt, CryptAcquireContextA, CryptReleaseContext, CryptDeriveKey, AdjustTokenPrivileges, RegSetKeySecurity, FreeSid, SetEntriesInAclW, AddAccessAllowedAce, AllocateAndInitializeSid, InitializeAcl, GetNamedSecurityInfoW, LookupPrivilegeValueW, SetNamedSecurityInfoW, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegFlushKey, GetLengthSid, RegQueryValueExW, GetTokenInformation, OpenProcessToken, RegEnumKeyExW, RegQueryInfoKeyW, RegDeleteValueW, RegDeleteKeyW, RegSetValueExW
crypt32.dll
CryptProtectData
kernel32.dll
DllMain
ole32.dll
CoInitialize, CoUninitialize, CoTaskMemAlloc, CoTaskMemRealloc, CoRevokeClassObject, CoRegisterClassObject, CoTaskMemFree, StringFromGUID2, CoCreateInstance, CLSIDFromProgID
rpcrt4.dll
NdrOleAllocate, NdrOleFree, IUnknown_QueryInterface_Proxy, NdrCStdStubBuffer2_Release, UuidToStringW, NdrStubCall2, NdrStubForwardingFunction, IUnknown_Release_Proxy, IUnknown_AddRef_Proxy
shell32.dll
ShellExecuteW, SHGetSpecialFolderPathW
shlwapi.dll
PathFileExistsW
user32.dll
CharUpperW, GetMessageW, PostThreadMessageW, DispatchMessageW, TranslateMessage, CharNextW, LoadStringW, PostMessageW, FindWindowW, wsprintfW, EnumWindows, GetClassNameW, IsWindow, GetSystemMetrics
version.dll
GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueW
wininet.dll
FindFirstUrlCacheEntryW, InternetOpenW, InternetConnectW, DeleteUrlCacheEntryW, FindNextUrlCacheEntryW, InternetReadFile, InternetCloseHandle, HttpOpenRequestW, HttpQueryInfoW, HttpAddRequestHeadersW, InternetSetOptionW, HttpSendRequestW