Import table
advapi32.dll
RegCreateKeyExW, RegSetValueExW, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, OpenProcessToken, GetTokenInformation, GetSidSubAuthorityCount, GetSidSubAuthority, SetSecurityInfo, SetNamedSecurityInfoW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, ConvertStringSecurityDescriptorToSecurityDescriptorW, GetSecurityDescriptorSacl, SetSecurityDescriptorSacl, RegDeleteValueW
gdi32.dll
SetROP2, CreatePen, SelectObject, MoveToEx, LineTo, DeleteObject, SetBkMode
kernel32.dll
FreeLibrary, GetProcAddress, LoadLibraryW, GetModuleHandleW, CreateThread, CreateEventW, TerminateThread, WaitForSingleObject, OpenProcess, lstrlenW, SetLastError, GlobalReAlloc, GlobalUnlock, GlobalLock, GlobalAlloc, CreateDirectoryW, GetModuleFileNameW, GetStringTypeW, GetStringTypeA, LCMapStringW, MultiByteToWideChar, LCMapStringA, InitializeCriticalSectionAndSpinCount, LoadLibraryA, WriteFile, GetCurrentProcess, HeapReAlloc, VirtualAlloc, EnterCriticalSection, LeaveCriticalSection, IsValidCodePage, GetOEMCP, GetACP, GetCPInfo, GetSystemTimeAsFileTime, QueryPerformanceCounter, VirtualFree, HeapDestroy, HeapCreate, GetEnvironmentStringsW, WideCharToMultiByte, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetModuleFileNameA, DeleteCriticalSection, GetStartupInfoA, GetFileType, GetStdHandle, SetHandleCount, ExitProcess, HeapSize, Sleep, HeapAlloc, LocalAlloc, LocalFree, GetVersionExW, UnmapViewOfFile, CloseHandle, GetProcessHeap, CreateFileMappingW, GetLastError, MapViewOfFile, GetTickCount, OpenEventW, SetEvent, GetCurrentProcessId, InterlockedCompareExchange, GetLocaleInfoA, GetModuleHandleA, IsDebuggerPresent, SetUnhandledExceptionFilter, RtlUnwind, GetCurrentThreadId, GetCommandLineA, RaiseException, HeapFree, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, InterlockedDecrement, TerminateProcess, UnhandledExceptionFilter, FindClose, FindFirstFileW, WriteConsoleA, FlushFileBuffers, SetStdHandle, SetFilePointer, GetConsoleMode, GetConsoleCP, GetConsoleOutputCP, WriteConsoleW, CreateFileW, CreateFileA, SetEndOfFile, ReadFile, GetLocalTime, FindResourceW, SizeofResource, LockResource, LoadResource, FindResourceExW, GetStartupInfoW, IsProcessorFeaturePresent, DecodePointer, ResetEvent, EncodePointer
oleacc.dll
AccessibleObjectFromPoint
psapi.dll
GetModuleFileNameExW, GetModuleBaseNameW, EnumProcessModules, EnumProcesses
shell32.dll
SHGetFolderPathW
shlwapi.dll
PathRemoveFileSpecW
user32.dll
SetClipboardData, SetRect, IsRectEmpty, CopyRect, GetTopWindow, IsWindowVisible, GetWindow, ScreenToClient, IsChild, GetClassNameW, IsWindow, GetWindowRect, PtInRect, GetDesktopWindow, ClientToScreen, ChildWindowFromPointEx, MapWindowPoints, GetWindowLongW, CloseClipboard, EnumChildWindows, RealGetWindowClassW, GetCursorPos, GetWindowDC, ReleaseDC, GetKeyState, RegisterWindowMessageW, GetFocus, HideCaret, ShowCaret, CallNextHookEx, UnhookWindowsHookEx, GetWindowThreadProcessId, SetWindowsHookExW, SendMessageW, EmptyClipboard, OpenClipboard, EnableWindow, OffsetRect, IntersectRect, GetParent
version.dll
VerQueryValueW, GetFileVersionInfoW, GetFileVersionInfoSizeW
Export table
WH_GetLineColor
WH_GetLineStyle
WH_GetLineWidth
WH_SetLineColor
WH_SetLineStyle
WH_SetLineWidth
WH_Start
WH_StartHideCaretSession
WH_Stop