Import table
advapi32.dll
RegCloseKey, CryptGetUserKey, RegQueryValueExA, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegQueryInfoKeyW, RegQueryValueExW, RegEnumValueW, RegEnumKeyExW, RegOpenKeyExW, RegCreateKeyExW, RegDeleteValueW, RegSetValueExW, RegNotifyChangeKeyValue, CryptDuplicateKey, CryptDuplicateHash, CryptSignHashW, CryptDecrypt, CryptSetKeyParam, CryptGetKeyParam, CryptEncrypt, CryptExportKey, CryptSetHashParam, CryptGetHashParam, CryptImportKey, CryptVerifySignatureW, CryptAcquireContextW, CryptCreateHash, CryptHashData, CryptDestroyHash, CryptContextAddRef, CryptGenKey, CryptDestroyKey, CryptReleaseContext, IsValidSid, InitializeAcl, AddAccessAllowedAce, ConvertStringSidToSidW, GetLengthSid, SetTokenInformation, GetFileSecurityW, ConvertSecurityDescriptorToStringSecurityDescriptorW, SetFileSecurityW, LookupAccountSidW, AllocateAndInitializeSid, CheckTokenMembership, FreeSid, ConvertStringSecurityDescriptorToSecurityDescriptorW, GetSecurityDescriptorSacl, SetSecurityInfo, LookupAccountNameW, RegEnumValueA, RegOpenKeyExA, GetSidSubAuthority, GetSidSubAuthorityCount, GetTokenInformation, OpenProcessToken, CreateProcessAsUserW, ConvertSidToStringSidW, GetTraceEnableLevel, GetTraceEnableFlags, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, TraceEvent, RegDeleteKeyW, GetUserNameW, RegSetValueExA, RegSetValueA, RegCreateKeyExA, CloseEventLog, ReadEventLogW, OpenEventLogW
comctl32.dll
ImageList_Destroy, InitCommonControlsEx, ImageList_ReplaceIcon, ImageList_Create
dnsapi.dll
DnsFree, DnsQuery_A
gdi32.dll
SetDIBits, GetRegionData, SetICMMode, EnumFontFamiliesExW, LPtoDP, GetClipBox, Rectangle, StretchDIBits, CombineRgn, SetRectRgn, SetDIBitsToDevice, ExcludeClipRect, EqualRgn, GetRgnBox, GetBkColor, SetLayout, SetViewportOrgEx, ExtEscape, DeleteEnhMetaFile, CreateEnhMetaFileW, GetEnhMetaFileW, SetEnhMetaFileBits, CloseEnhMetaFile, PlayEnhMetaFile, GetEnhMetaFileBits, GdiComment, GetEnhMetaFileHeader, EndPage, StartPage, CancelDC, SetPixelFormat, ChoosePixelFormat, SwapBuffers, RemoveFontMemResourceEx, EnumFontFamiliesW, GetTextColor, GetCharWidthI, SetMiterLimit, ExtCreatePen, GetStretchBltMode, StrokePath, StrokeAndFillPath, SetAbortProc, PolyBezier, CreatePen, MoveToEx, LineTo, PtInRegion, PatBlt, CreatePolygonRgn, EnumEnhMetaFile, PlayEnhMetaFileRecord, GetWorldTransform, CreateDCA, GetCurrentObject, CreateDCW, StartDocW, ModifyWorldTransform, EndDoc, CreateRectRgn, CreateRectRgnIndirect, PathToRegion, SelectClipRgn, SetPolyFillMode, BeginPath, AddFontMemResourceEx, AbortPath, EndPath, SetStretchBltMode, SetBrushOrgEx, SetArcDirection, SetDCBrushColor, SetDCPenColor, SetROP2, GdiAlphaBlend, GetCharABCWidthsW, GetFontUnicodeRanges, SetTextAlign, SetWorldTransform, ExtTextOutW, GdiFlush, GetOutlineTextMetricsW, GetGlyphIndicesW, SetGraphicsMode, GetFontData, GetGlyphOutlineW, CreateSolidBrush, CreateCompatibleBitmap, StretchBlt, CreateBitmap, SetBkColor, BitBlt, GetStockObject, SaveDC, IntersectClipRect, RestoreDC, SetBkMode, SetTextColor, CreateCompatibleDC, CreateDIBSection, DeleteDC, GetTextFaceW, CreateFontW, CreateFontIndirectW, SelectObject, SetMapMode, GetTextMetricsW, GetTextExtentPoint32W, DeleteObject, GetObjectW, GetDeviceCaps
kernel32.dll
DllMain
msimg32.dll
AlphaBlend
ole32.dll
CoCreateInstance, PropVariantClear, CoTaskMemAlloc, CoTaskMemRealloc, CreateStreamOnHGlobal, GetHGlobalFromStream, StgCreateDocfile, CreateILockBytesOnHGlobal, CoUninitialize, OleSetContainedObject, ReleaseStgMedium, OleDuplicateData, CoSetProxyBlanket, CoInitializeEx, DoDragDrop, RevokeDragDrop, OleUninitialize, OleInitialize, StgCreateDocfileOnILockBytes, CoTaskMemFree, CoCreateGuid, CLSIDFromString, StringFromGUID2, CoGetObject, RegisterDragDrop, CoInitialize
oleacc.dll
LresultFromObject, CreateStdAccessibleObject, AccessibleObjectFromWindow
psapi.dll
GetModuleFileNameExW, GetPerformanceInfo, GetMappedFileNameW, QueryWorkingSet, GetProcessMemoryInfo
rpcrt4.dll
UuidCreate, UuidToStringW, UuidCreateSequential, RpcStringFreeW
secur32.dll
FreeCredentialsHandle, DeleteSecurityContext, CompleteAuthToken, AcquireCredentialsHandleA, InitializeSecurityContextA, AcquireCredentialsHandleW, InitializeSecurityContextW, QuerySecurityPackageInfoW, FreeContextBuffer, QueryContextAttributesW, EncryptMessage, DecryptMessage, ApplyControlToken
shell32.dll
SHBrowseForFolderW, Shell_NotifyIconW, SHGetFileInfoW, DragQueryFileW, DragFinish, SHAppBarMessage, SHGetFolderPathW, CommandLineToArgvW, ShellExecuteW, SHFileOperationW, ShellExecuteExW, SHChangeNotify, SHGetSpecialFolderPathW, ShellExecuteA, SHGetDesktopFolder, SHGetPathFromIDListW
shlwapi.dll
PathGetCharTypeW, SHGetValueA, SHCopyKeyW, SHDeleteEmptyKeyW, UrlCreateFromPathA, PathIsUNCA, PathFileExistsA, UrlCreateFromPathW, PathIsUNCW, PathFileExistsW, PathRemoveExtensionW, PathFindExtensionW, SHDeleteKeyW, SHStrDupW, PathFindFileNameW, PathUnquoteSpacesW, PathRemoveArgsW
user32.dll
DllMain
userenv.dll
CreateEnvironmentBlock, RegisterGPNotification, DestroyEnvironmentBlock
usp10.dll
ScriptJustify, ScriptTextOut, ScriptXtoCP, ScriptCPtoX, ScriptGetFontProperties, ScriptApplyDigitSubstitution, ScriptRecordDigitSubstitution, ScriptLayout, ScriptFreeCache, ScriptShape, ScriptItemize, ScriptPlace
version.dll
GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueW
winmm.dll
waveOutWrite, waveOutOpen, waveOutPrepareHeader, waveInMessage, waveOutRestart, PlaySoundW, timeGetTime, timeBeginPeriod, timeEndPeriod, waveInGetNumDevs, waveOutGetNumDevs, waveOutPause, timeGetDevCaps, waveOutReset, waveOutClose, waveInReset, waveInPrepareHeader, waveInUnprepareHeader, waveInAddBuffer, waveInOpen, waveInStart, waveInClose, waveOutUnprepareHeader
wtsapi32.dll
WTSQueryUserToken
Export table
_DelayedLowerToken@4
ChromeMain
RelaunchChromeBrowserWithNewCommandLineIfNeeded
RMLogLowLevelError
