Import table
advapi32.dll
OpenProcessToken, RevertToSelf, CryptDestroyKey, CryptReleaseContext, CryptImportKey, RegCloseKey, RegSetValueExW, RegCreateKeyExW, RegOpenKeyExW, RegQueryValueExA, RegQueryValueExW, RegEnumKeyExW, CopySid, GetLengthSid, IsValidSid, GetTokenInformation, OpenThreadToken, GetSidSubAuthority, GetSidSubAuthorityCount, GetSidIdentifierAuthority, CryptGetKeyParam, CryptDecrypt, CryptGetUserKey, CryptExportKey, CryptGetProvParam, CryptSetKeyParam, CryptDuplicateKey, CryptAcquireContextW, CryptGenKey, CryptEncrypt
fltlib.dll
FilterGetMessage, FilterReplyMessage, FilterGetDosName, FilterConnectCommunicationPort, FilterSendMessage
kernel32.dll
CreateThread, DebugActiveProcess, CreateIoCompletionPort, ReleaseMutex, CreateMutexA, SetLastError, LocalFree, WideCharToMultiByte, GetCurrentThreadId, GetCurrentProcessId, SetProcessShutdownParameters, OpenEventA, GetModuleFileNameW, OpenProcess, GetFileAttributesW, DeleteFileA, DefineDosDeviceW, WaitForSingleObject, CreateMutexW, FormatMessageW, GetLogicalDrives, CreateDirectoryW, GetSystemTime, OutputDebugStringA, OutputDebugStringW, UnhandledExceptionFilter, HeapFree, HeapAlloc, GetProcessHeap, OpenThread, LocalAlloc, HeapCreate, MultiByteToWideChar, ReadFile, CreateFileW, FindClose, FindFirstFileExW, FindNextFileW, GetShortPathNameW, RemoveDirectoryW, FindFirstFileW, TerminateProcess, GetSystemTimeAsFileTime, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, GetStartupInfoA, InterlockedCompareExchange, Sleep, InterlockedExchange, SetEvent, GetQueuedCompletionStatus, GetTickCount, GetModuleHandleW, QueryDosDeviceW, GetCurrentProcess, OpenFileMappingA, MapViewOfFile, CopyFileW, DeleteFileW, UnmapViewOfFile, CloseHandle, GetLastError, CreateProcessW
mpr.dll
WNetAddConnection2W
msvcrt.dll
DllMain
ole32.dll
CoCreateInstance, OleRun, CoInitialize
shell32.dll
SHGetFolderPathW, SHGetFileInfoW, SHChangeNotify
shlwapi.dll
PathAppendW, PathFileExistsW, PathFileExistsA
user32.dll
DefWindowProcW, BeginPaint, EndPaint, RegisterClassExW, PostMessageW, SetTimer, LoadStringW, GetActiveWindow, DispatchMessageW, TranslateMessage, MessageBoxA, FindWindowW, GetMessageW, KillTimer, MessageBoxW, CreateWindowExW, ShowWindow, RegisterWindowMessageW, UpdateWindow
wavxvltmgrwrp.dll
VaultRestoreToNewVault, VaultRestoreToCurrentVault, VaultBackup, SetVServiceCalBak
