Import table
advapi32.dll
EventWrite, TraceMessage, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, RegisterTraceGuidsW, UnregisterTraceGuids, EventRegister, EventUnregister, RegCloseKey, RegDeleteTreeW, RegCreateKeyExW, RegGetValueW, RegSetValueExW, RegOpenKeyExW, LookupPrivilegeValueW, AdjustTokenPrivileges, OpenProcessToken, RegSetKeyValueW, RegEnumKeyExW
api-ms-win-core-apiquery-l1-1-0.dll
ApiSetQueryApiSetPresence
api-ms-win-core-com-l1-1-1.dll
CoReleaseMarshalData, PropVariantClear, StringFromCLSID, CoTaskMemFree, CoCreateInstance, CoCreateGuid, CoResumeClassObjects, CoRegisterClassObject, CoTaskMemRealloc, CoReleaseServerProcess, CoGetCallContext, CoSetProxyBlanket, CoAddRefServerProcess, CoRevokeClassObject, CoMarshalInterThreadInterfaceInStream, CoTaskMemAlloc, CoGetInterfaceAndReleaseStream, RoGetAgileReference, CoUninitialize, CoFreeUnusedLibraries, CoGetApartmentType, CoGetMalloc, StringFromGUID2, CoInitializeEx, CLSIDFromString, CoCreateFreeThreadedMarshaler, StringFromIID, CoWaitForMultipleHandles, CoGetClassObject
api-ms-win-core-delayload-l1-1-1.dll
ResolveDelayLoadedAPI, DelayLoadFailureHook
api-ms-win-core-errorhandling-l1-1-1.dll
UnhandledExceptionFilter, GetLastError, SetUnhandledExceptionFilter, RaiseException
api-ms-win-core-file-l1-2-1.dll
CompareFileTime, GetFileAttributesW, SetFileAttributesW, DeleteFileW, FindNextFileW, FindClose, RemoveDirectoryW, FindFirstFileW
api-ms-win-core-handle-l1-1-0.dll
CloseHandle, DuplicateHandle
api-ms-win-core-heap-l1-2-0.dll
HeapSetInformation, HeapFree, GetProcessHeap
api-ms-win-core-heap-obsolete-l1-1-0.dll
LocalAlloc, LocalReAlloc, LocalFree
api-ms-win-core-kernel32-legacy-l1-1-1.dll
CreateSemaphoreW
api-ms-win-core-libraryloader-l1-1-1.dll
GetModuleFileNameW, FreeLibraryAndExitThread, FreeLibrary, GetModuleHandleA, GetModuleHandleExW
api-ms-win-core-libraryloader-l1-2-0.dll
GetModuleFileNameW, FreeLibrary, FreeLibraryAndExitThread, GetModuleHandleA, GetModuleHandleExW
api-ms-win-core-localization-l1-2-1.dll
GetUserDefaultLCID, GetGeoInfoW, GetUserGeoID
api-ms-win-core-path-l1-1-0.dll
PathAllocCombine, PathCchAppend
api-ms-win-core-processthreads-l1-1-2.dll
CreateThread, OpenThreadToken, GetCurrentThread, SetPriorityClass, TlsSetValue, TlsAlloc, TlsFree, GetStartupInfoW, GetCurrentProcessId, GetCurrentThreadId, OpenProcessToken, TlsGetValue, ProcessIdToSessionId, TerminateProcess, GetCurrentProcess, SetThreadPriority
api-ms-win-core-profile-l1-1-0.dll
QueryPerformanceCounter
api-ms-win-core-registry-l1-1-0.dll
RegQueryValueExW, RegDeleteTreeW, RegEnumKeyExW, RegDeleteValueW, RegGetValueW, RegOpenCurrentUser, RegCreateKeyExW, RegOpenKeyExW, RegEnumValueW, RegSetValueExW, RegCloseKey, RegQueryInfoKeyW
api-ms-win-core-registry-l2-1-0.dll
RegDeleteKeyValueW
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
PathFindFileNameW
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
StrToIntExW, StrToIntW, StrStrIW, StrRChrW, QISearch
api-ms-win-core-string-l1-1-0.dll
CompareStringOrdinal, WideCharToMultiByte, MultiByteToWideChar
api-ms-win-core-string-l2-1-0.dll
CharLowerBuffW
api-ms-win-core-synch-l1-2-0.dll
CreateEventExW, InitOnceExecuteOnce, WaitForSingleObject, AcquireSRWLockExclusive, ReleaseSRWLockExclusive, CreateEventW, SetEvent, EnterCriticalSection, ResetEvent, CreateMutexExW, ReleaseMutex, DeleteCriticalSection, OpenEventW, InitializeCriticalSectionEx, InitializeCriticalSection, ReleaseSRWLockShared, LeaveCriticalSection, InitializeSRWLock, ReleaseSemaphore, OpenSemaphoreW, AcquireSRWLockShared, Sleep
api-ms-win-core-sysinfo-l1-2-1.dll
GetSystemTime, GetSystemDirectoryW, GetTickCount, GetVersionExW, GetTickCount64, GetSystemTimeAsFileTime, GetOsSafeBootMode
api-ms-win-core-threadpool-l1-2-0.dll
SetThreadpoolTimer, WaitForThreadpoolTimerCallbacks, CloseThreadpoolTimer, CallbackMayRunLong, TrySubmitThreadpoolCallback, CreateThreadpoolTimer, FreeLibraryWhenCallbackReturns, SetThreadpoolWait, CreateThreadpoolWait, CloseThreadpoolWait
api-ms-win-core-timezone-l1-1-0.dll
SystemTimeToFileTime, FileTimeToSystemTime
api-ms-win-core-url-l1-1-0.dll
UrlEscapeW
api-ms-win-core-util-l1-1-0.dll
EncodePointer, DecodePointer
api-ms-win-core-winrt-error-l1-1-1.dll
RoTransformError, RoOriginateError, RoOriginateErrorW
api-ms-win-core-winrt-l1-1-0.dll
RoRevokeActivationFactories, RoGetActivationFactory, RoActivateInstance, RoRegisterActivationFactories
api-ms-win-core-winrt-string-l1-1-0.dll
WindowsCreateString, WindowsGetStringRawBuffer, WindowsCreateStringReference, WindowsStringHasEmbeddedNull, WindowsIsStringEmpty, WindowsDeleteString
api-ms-win-eventing-classicprovider-l1-1-0.dll
TraceMessage, GetTraceEnableFlags, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, GetTraceEnableLevel
api-ms-win-eventing-provider-l1-1-0.dll
EventRegister, EventWrite, EventUnregister
api-ms-win-power-base-l1-1-0.dll
PowerDeterminePlatformRoleEx
api-ms-win-security-base-l1-2-0.dll
AdjustTokenPrivileges, GetSidSubAuthority, GetTokenInformation, CreateWellKnownSid
api-ms-win-security-lsalookup-l1-1-1.dll
ReleaseIdentityProviderEnumContext, GetIdentityProviderInfoByGUID, EnumerateIdentityProviders, GetDefaultIdentityProvider
api-ms-win-security-provider-l1-1-0.dll
GetNamedSecurityInfoW, SetNamedSecurityInfoW, SetEntriesInAclW
api-ms-win-security-sddl-l1-1-0.dll
ConvertStringSecurityDescriptorToSecurityDescriptorW, ConvertSidToStringSidW
api-ms-win-shcore-obsolete-l1-1-0.dll
SHStrDupW, CommandLineToArgvW, SHStrDupA
api-ms-win-shcore-registry-l1-1-1.dll
SHRegGetValueW, SHSetValueW, SHDeleteKeyW, SHRegSetPathW, SHDeleteValueW, SHRegGetPathW
api-ms-win-shcore-stream-l1-1-0.dll
IStream_Copy, IStream_Write, IStream_Reset, IStream_Size, IStream_Read, SHOpenRegStream2W, SHCreateMemStream
api-ms-win-shcore-thread-l1-1-0.dll
SHCreateThreadWithHandle, SHGetThreadRef, SHSetThreadRef, SHCreateThread, SHCreateThreadRef
api-ms-win-shell-shellfolders-l1-1-0.dll
SHGetKnownFolderPath
kernel32.dll
GetCurrentProcess, HeapSetInformation, SetProcessInformation, CompareStringOrdinal, LocalFree, CompareFileTime, ResetEvent, AcquireSRWLockShared, ReleaseSRWLockShared, Sleep, GetTickCount64, SetThreadpoolTimer, WaitForMultipleObjects, AcquireSRWLockExclusive, ReleaseSRWLockExclusive, CreateEventExW, SetPriorityClass, OpenEventW, ResolveDelayLoadedAPI, DelayLoadFailureHook, InitializeSRWLock, SetThreadPriority, GetModuleFileNameW, GetModuleHandleExW, TlsSetValue, TlsGetValue, DuplicateHandle, TlsFree, TlsAlloc, GetCurrentThread, LocalAlloc, TerminateProcess, UnhandledExceptionFilter, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, GetStartupInfoW, InterlockedExchange, GetCurrentProcessId, LeaveCriticalSection, EnterCriticalSection, GetSystemTimeAsFileTime, DeleteCriticalSection, InitializeCriticalSection, GetCurrentThreadId, WaitForSingleObject, GetLastError, CloseHandle, InterlockedCompareExchange, CloseThreadpoolTimer, CreateThreadpoolTimer, InterlockedDecrement, InterlockedIncrement, CreateEventW, SetEvent
msvcrt.dll
DllMain
ntdll.dll
WinSqmAddToAverageDWORD, RtlInitUnicodeString, EtwTraceMessage, WinSqmAddToStream, RtlFreeHeap, RtlAllocateHeap, ZwAlpcCancelMessage, ZwAlpcSendWaitReceivePort, ZwAlpcConnectPort, RtlWaitOnAddress, TpAllocAlpcCompletion, AlpcGetMessageAttribute, RtlWakeAddressAll, TpWaitForAlpcCompletion, ZwAlpcDisconnectPort, ZwClose, TpReleaseAlpcCompletion, ZwAlpcQueryInformation, AlpcInitializeMessageAttribute, vDbgPrintEx, WinSqmIsOptedIn, WinSqmAddToStreamEx, WinSqmSetDWORD, WinSqmIncrementDWORD, WinSqmSetDWORD64, NtPowerInformation, EtwEventWrite, NtSetInformationProcess, NtSetInformationThread
propsys.dll
PSCreateMemoryPropertyStore, PropVariantToBoolean, PropVariantToStringAlloc, PropVariantToUInt32
user32.dll
SystemParametersInfoW, GetKeyboardLayout, DefWindowProcW, DestroyWindow, CharLowerBuffW, SetWindowLongW, GetWindowLongW, ActivateKeyboardLayout
userenv.dll
GetProfileType