Import table
kernel32.dll
GetModuleFileNameW, GetLastError, GetCurrentProcess, GetCurrentThread, DisableThreadLibraryCalls, GetCommandLineW, GetProcAddress, GetModuleHandleA, VirtualProtect, CreateEventW, CreateThread, GetCurrentProcessId, FreeLibrary, VirtualAlloc, VirtualFree, GetModuleHandleW, LoadLibraryW, FormatMessageW, GetCurrentThreadId, OutputDebugStringW, LocalFree, EncodePointer, DecodePointer, GetSystemTimeAsFileTime, GetTimeZoneInformation, GetCommandLineA, RaiseException, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapFree, HeapAlloc, IsProcessorFeaturePresent, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, SetLastError, RtlUnwind, Sleep, HeapSize, ExitProcess, WriteFile, GetStdHandle, GetLocaleInfoW, GetStringTypeW, WideCharToMultiByte, SetHandleCount, InitializeCriticalSectionAndSpinCount, GetFileType, GetStartupInfoW, DeleteCriticalSection, GetModuleFileNameA, FreeEnvironmentStringsW, GetEnvironmentStringsW, HeapCreate, HeapDestroy, QueryPerformanceCounter, GetTickCount, LeaveCriticalSection, FatalAppExitA, EnterCriticalSection, LCMapStringW, MultiByteToWideChar, GetUserDefaultLCID, GetLocaleInfoA, EnumSystemLocalesA, IsValidLocale, HeapReAlloc, SetConsoleCtrlHandler, InterlockedExchange, SetFilePointer, GetConsoleCP, GetConsoleMode, SetStdHandle, WriteConsoleW, CompareStringW, SetEnvironmentVariableA, CreateFileW, CloseHandle, FlushFileBuffers, SetEndOfFile, ReadFile, InitializeCriticalSection, FlushInstructionCache, GetModuleHandleExW, lstrlenW, IsBadCodePtr, IsBadReadPtr, IsWow64Process, GetVersionExW, GetSystemInfo, GetProcessHeap, CreateRemoteThread
ntdll.dll
RtlImageNtHeader, LdrUnlockLoaderLock, RtlCompareUnicodeString, LdrLockLoaderLock, RtlSetLastWin32Error, RtlGetLastWin32Error, ZwQueryInformationThread, ZwQueryVirtualMemory, LdrGetDllHandle, LdrLoadDll, LdrUnloadDll, LdrAddRefDll, LdrGetProcedureAddress, RtlAppendUnicodeStringToString, RtlFreeAnsiString, RtlUnicodeStringToAnsiString, RtlDeleteCriticalSection, RtlInitializeCriticalSection, RtlEnterCriticalSection, RtlLeaveCriticalSection
Export table
_RegCloseKey@4
_RegOpenKeyExW@20
_RegQueryValueExW@24
