Import table
advapi32.dll
AdjustTokenPrivileges, AllocateAndInitializeSid, FreeSid, GetLengthSid, GetTokenInformation, InitializeSecurityDescriptor, LookupPrivilegeValueA, OpenProcessToken, RegCreateKeyExW, RegDeleteKeyW, RegEnumKeyW, RegOpenKeyExW, RegSetValueExW, SetSecurityDescriptorDacl, ConvertStringSecurityDescriptorToSecurityDescriptorW, GetSecurityDescriptorSacl, SetSecurityInfo, RegCreateKeyExA, RegSetValueExA, RegOpenKeyA, RegQueryValueExA, RegDeleteValueA, RegCloseKey, RegDeleteKeyA, RegEnumKeyExA, RegOpenKeyExA, RegEnumValueA, GetKernelObjectSecurity
kernel32.dll
DllMain, DeleteCriticalSection, CreateThread, MapViewOfFile, UnmapViewOfFile, GetCurrentThreadId, OpenFileMappingA, VirtualFree, VirtualAlloc, LocalAlloc, GetVersion, WideCharToMultiByte, MultiByteToWideChar, GetThreadLocale, GetStartupInfoA, GetLocaleInfoA, GetCommandLineA, FreeLibrary, ExitProcess, WriteFile, UnhandledExceptionFilter, RtlUnwind, RaiseException, GetStdHandle, TlsSetValue, TlsGetValue, TlsFree, TlsAlloc, lstrlenW, lstrlenA, lstrcpyW, lstrcpyA, lstrcmpiA, lstrcmpA, lstrcatW, WriteProcessMemory, WaitForSingleObject, WaitForMultipleObjects, VirtualQueryEx, VirtualQuery, VirtualProtectEx, VirtualProtect, TerminateThread, TerminateProcess, SetThreadPriority, SetLastError, SetEvent, ResumeThread, ReleaseSemaphore, ReleaseMutex, ReadProcessMemory, ReadFile, OpenProcess, OpenMutexW, OpenFileMappingW, EnterCriticalSection, OpenEventA, LoadLibraryExA, LoadLibraryW, LoadLibraryA, IsBadWritePtr, IsBadReadPtr, GetWindowsDirectoryW, GetVersionExW, GetThreadContext, GetSystemDirectoryW, GetSystemDirectoryA, GetProcAddress, GetModuleHandleW, GetModuleHandleA, GetModuleFileNameW, GetFileAttributesW, GetFileAttributesA, GetExitCodeThread, GetCurrentThread, GetCurrentProcessId, GetCurrentProcess, GetCurrentDirectoryW, GetCurrentDirectoryA, InterlockedExchange, FormatMessageA, DuplicateHandle, DeviceIoControl, CreateSemaphoreA, CreateProcessA, CreatePipe, CreateMutexW, CreateFileMappingW, CreateFileMappingA, CreateFileW, CreateEventW, CreateEventA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetStringTypeW, GetStringTypeA, InitializeCriticalSectionAndSpinCount, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, LeaveCriticalSection, InitializeCriticalSection, LocalFree, CloseHandle, GetVersionExA, CreateMutexA, GetModuleFileNameA, OpenMutexA, GlobalFree, GetLastError, Sleep, GlobalAlloc, GetTickCount, CreateFileA, FlushFileBuffers, SetEndOfFile, GetProcessHeap, OpenEventW, CreateProcessW, FreeEnvironmentStringsA, HeapSize, SetFilePointer, GetFileType, SetHandleCount, HeapFree, HeapAlloc, SetUnhandledExceptionFilter, IsDebuggerPresent, GetSystemTimeAsFileTime, HeapCreate, HeapDestroy, HeapReAlloc, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, LCMapStringA, LCMapStringW, GetConsoleCP, GetConsoleMode
shell32.dll
SHGetFolderPathA
user32.dll
CloseDesktop, GetSystemMetrics, GetThreadDesktop, GetUserObjectInformationA, MsgWaitForMultipleObjects, OpenInputDesktop, MessageBoxA, GetKeyboardType, UnhookWindowsHookEx, BroadcastSystemMessageA, SetWindowsHookExA, CallNextHookEx, LoadStringA, PeekMessageA, TranslateMessage, DispatchMessageA
version.dll
GetFileVersionInfoA, GetFileVersionInfoSizeA, VerQueryValueA
Export table
Attach
Detach
GCL
GPL
GTI
