Import table
advapi32.dll
RegOpenKeyExA, MakeAbsoluteSD, RegOpenKeyExW, RegQueryValueExW, RegEnumKeyExW, RegEnumValueW, RegSetValueExW, RegCreateKeyExW, RegEnumKeyW, RegGetValueW, RegOpenKeyW, WmiDevInstToInstanceNameW, WmiQuerySingleInstanceW, WmiCloseBlock, WmiOpenBlock, IsWellKnownSid, GetTokenInformation, OpenProcessToken, RegDeleteValueW, RegQueryInfoKeyW, RegSetValueW, RegDeleteKeyExW, RegCloseKey
api-ms-win-security-sddl-l1-1-0.dll
ConvertStringSecurityDescriptorToSecurityDescriptorW, ConvertSidToStringSidW
gdi32.dll
GetDeviceCaps
hid.dll
HidP_GetLinkCollectionNodes, HidD_GetFeature, HidP_GetCaps, HidD_GetAttributes, HidD_GetPreparsedData, HidP_MaxUsageListLength, HidP_GetValueCaps, HidP_GetButtonCaps, HidP_GetUsages, HidD_GetHidGuid, HidP_GetSpecificValueCaps, HidD_GetProductString, HidP_GetUsageValue, HidD_FlushQueue, HidD_FreePreparsedData
imm32.dll
ImmDisableIME
kernel32.dll
LocalAlloc, UnhandledExceptionFilter, FlushInstructionCache, OpenEventW, CloseHandle, GetTickCount64, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetModuleHandleA, SetUnhandledExceptionFilter, Sleep, VirtualFree, LoadLibraryA, HeapAlloc, CreateWaitableTimerW, QueryPerformanceFrequency, GetCurrentThread, SetThreadPriority, GetOverlappedResult, GetCurrentThreadId, CancelIo, WaitForMultipleObjects, ReadFile, DeviceIoControl, CancelWaitableTimer, SetWaitableTimer, InterlockedDecrement, InterlockedIncrement, CreateFileMappingW, MapViewOfFile, CreateEventW, CreateMutexW, LocalFree, ResetEvent, SetEvent, UnmapViewOfFile, QueryPerformanceCounter, GetCurrentProcess, DuplicateHandle, QueueUserAPC, OpenProcess, GetTickCount, CreateFileW, WaitForSingleObject, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, GetLastError, RaiseException, InitializeCriticalSection, InterlockedCompareExchange, SignalObjectAndWait, FreeLibrary, GetProcAddress, GlobalAddAtomW, WaitForMultipleObjectsEx, SetLastError, GlobalDeleteAtom, InitializeCriticalSectionAndSpinCount, GetVersionExW, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, MultiByteToWideChar, lstrlenW, lstrcpyW, LoadLibraryW, GetModuleHandleW, lstrcmpiW, lstrcpynW, GetModuleFileNameW, GetWindowsDirectoryW, lstrcatW, OpenMutexW, SetProcessShutdownParameters, SetPriorityClass, lstrlenA, SizeofResource, LoadResource, FindResourceW, LoadLibraryExW, HeapSetInformation, SetThreadExecutionState, MulDiv, GetStartupInfoW, CompareStringW, GetCommandLineW, ReleaseMutex, WerSetFlags, HeapFree, GetProcessHeap, InterlockedExchange
magnification.dll
MagInitialize, MagUninitialize
msvcrt.dll
DllMain
ntdll.dll
EtwTraceMessage, EtwEventWrite, WinSqmSetDWORD, WinSqmIsOptedIn, EtwLogTraceEvent, WinSqmIncrementDWORD, WinSqmAddToStream, WinSqmAddToStreamEx, WinSqmAddToAverageDWORD, NtQuerySystemInformation, EtwGetTraceEnableFlags, EtwGetTraceEnableLevel, EtwGetTraceLoggerHandle, EtwRegisterTraceGuidsW, EtwEventUnregister, EtwEventRegister, EtwUnregisterTraceGuids
ole32.dll
CoTaskMemAlloc, CoCreateInstance, CoUninitialize, CoInitializeEx, CoTaskMemFree, StringFromGUID2, CoCreateGuid, CoRevokeClassObject, CoRegisterClassObject, CoTaskMemRealloc, CoInitializeSecurity
oleacc.dll
AccessibleObjectFromEvent
setupapi.dll
SetupDiOpenDeviceInterfaceW, SetupDiGetDeviceInstanceIdW, SetupDiDestroyDeviceInfoList, SetupDiGetClassDevsExW, SetupDiEnumDeviceInterfaces, SetupDiEnumDeviceInfo, SetupDiOpenDevRegKey, SetupDiGetDeviceInterfaceDetailW, SetupDiGetClassDevsW
slc.dll
SLGetWindowsInformationDWORD
user32.dll
SetWinEventHook, GetMessageW, UnhookWinEvent, CharPrevW, OpenDesktopW, SetThreadDesktop, OpenInputDesktop, CallWindowProcW, DefWindowProcW, GetForegroundWindow, GetGUIThreadInfo, GetWindowRect, IsChild, ChildWindowFromPointEx, ScreenToClient, PtInRect, GetUserObjectInformationW, CloseDesktop, CharNextW, MonitorFromWindow, GetCursorPos, ChangeWindowMessageFilterEx, SetWindowsHookExW, CallNextHookEx, EnumDisplayMonitors, GetMonitorInfoW, EnumDisplayDevicesW, MsgWaitForMultipleObjectsEx, PeekMessageW, TranslateMessage, DispatchMessageW, MsgWaitForMultipleObjects, SetWindowLongW, GetGestureConfig, GetPropW, GetClassInfoExW, LoadCursorW, wsprintfW, SetRect, RegisterClassExW, DestroyWindow, SendMessageTimeoutW, UnhookWindowsHookEx, RegisterDeviceNotificationW, PostThreadMessageW, UnregisterDeviceNotification, CreateWindowExW, ReleaseDC, GetDesktopWindow, GetDC, SystemParametersInfoW, WindowFromPhysicalPoint, EnumDisplaySettingsExW, GetSystemMetrics, LoadStringW, GetRawInputDeviceList, GetRawInputDeviceInfoW, IsTouchWindow, SetRectEmpty, SetPhysicalCursorPos, SendInput, LogicalToPhysicalPoint, GetDoubleClickTime, SetDoubleClickTime, PostMessageW, IsWindow, GetWindowLongW, GetAncestor, EqualRect, GetClientRect, MapWindowPoints, GetClassNameW, GetWindowThreadProcessId, CharLowerW, InflateRect
wtsapi32.dll
WTSRegisterSessionNotification
