Import table
advapi32.dll
RegSetValueExW, RegCreateKeyExW, RegDeleteValueW, DuplicateTokenEx, CreateProcessAsUserW, RegDeleteKeyW, SetEntriesInAclW, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, StartServiceW, QueryServiceStatusEx, ControlService, CloseServiceHandle, OpenServiceW, OpenSCManagerW, ConvertSidToStringSidW, RegUnLoadKeyW, RegFlushKey, RegLoadKeyW, EqualSid, RegQueryInfoKeyW, FreeSid, CheckTokenMembership, AllocateAndInitializeSid, GetTokenInformation, OpenProcessToken, RegCloseKey, RegQueryValueExW, RegOpenKeyExW, AdjustTokenPrivileges, LookupPrivilegeValueW, RegEnumKeyExW
kernel32.dll
GetFileType, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, IsValidCodePage, GetOEMCP, GetACP, GetCPInfo, HeapSize, lstrlenW, RaiseException, InitializeCriticalSection, DeleteCriticalSection, GetLastError, HeapFree, HeapAlloc, GetProcessHeap, GetCurrentProcess, lstrcatW, lstrcpyW, CloseHandle, OpenProcess, GetProcAddress, GetModuleHandleW, FreeLibrary, LoadLibraryW, lstrcmpiW, InterlockedIncrement, InterlockedDecrement, MultiByteToWideChar, SizeofResource, LoadResource, FindResourceW, LoadLibraryExW, GetModuleFileNameW, lstrcmpW, LocalFree, WaitForSingleObject, Sleep, CreateThread, CreateEventW, GetCurrentThreadId, SetEvent, CreateMutexW, GetCommandLineW, GetLocaleInfoW, GetUserDefaultLCID, lstrcpynW, LeaveCriticalSection, SetEnvironmentVariableW, GetStartupInfoA, WaitForMultipleObjects, lstrcpyA, WideCharToMultiByte, lstrlenA, DisconnectNamedPipe, WriteFile, ReadFile, ConnectNamedPipe, CreateNamedPipeW, ProcessIdToSessionId, GetCurrentProcessId, VerifyVersionInfoW, VerSetConditionMask, GetUserDefaultUILanguage, GetTickCount, ExpandEnvironmentStringsW, DeviceIoControl, CreateFileW, LoadLibraryA, GetSystemDirectoryA, OutputDebugStringA, UnmapViewOfFile, MapViewOfFile, OpenFileMappingA, ReleaseMutex, CreateMutexA, CreateEventA, CreateFileA, CreateProcessA, SetLastError, TlsFree, TlsSetValue, TlsAlloc, TlsGetValue, GetModuleFileNameA, GetStdHandle, ExitProcess, HeapCreate, HeapReAlloc, VirtualFree, GetStartupInfoW, VirtualQuery, GetSystemInfo, VirtualAlloc, VirtualProtect, RtlUnwind, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, QueryPerformanceCounter, GetSystemTimeAsFileTime, GetModuleHandleA, InitializeCriticalSectionAndSpinCount, GetLocaleInfoA, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, SetFilePointer, GetConsoleCP, GetConsoleMode, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, FlushFileBuffers, EnterCriticalSection
ole32.dll
CLSIDFromString, StringFromCLSID, CoFreeUnusedLibraries, CoCreateInstance, CoRegisterClassObject, CoRevokeClassObject, CoUninitialize, CoInitialize, CoTaskMemFree, StringFromGUID2, CoTaskMemRealloc, CoTaskMemAlloc
setupapi.dll
SetupDiGetClassDevsW, SetupDiEnumDeviceInterfaces, SetupDiGetDeviceInterfaceDetailW, SetupDiDestroyDeviceInfoList, SetupDiOpenDeviceInterfaceRegKey
shell32.dll
ShellExecuteW, Shell_NotifyIconW, ExtractIconW, SHGetSpecialFolderPathW
shlwapi.dll
PathFindExtensionW, AssocQueryStringW, UrlGetPartW, SHDeleteEmptyKeyW
user32.dll
FindWindowW, RegisterDeviceNotificationW, UnregisterDeviceNotification, SetTimer, DestroyIcon, GetCursorPos, CreateWindowExW, DefWindowProcW, CharNextW, PostThreadMessageW, DestroyWindow, RegisterClassExW, TranslateMessage, DispatchMessageW, GetShellWindow, CharUpperW, PostMessageW, GetClassNameW, GetParent, CallWindowProcW, LoadStringW, GetMenuItemInfoW, InsertMenuItemW, GetMenuItemCount, SetForegroundWindow, TrackPopupMenu, DestroyMenu, CreatePopupMenu, DeleteMenu, GetMenuInfo, SetMenuInfo, KillTimer, GetWindowRect, GetAsyncKeyState, SetWindowLongW, GetWindowThreadProcessId, wsprintfW, RegisterWindowMessageW, GetMessageW, FindWindowExW
wininet.dll
InternetOpenA, InternetCloseHandle, InternetCrackUrlA, InternetConnectA, HttpOpenRequestA, InternetReadFile, InternetQueryDataAvailable, HttpSendRequestA, InternetSetOptionA, InternetQueryOptionA
winspool.drv
FindFirstPrinterChangeNotification, ClosePrinter, DeletePrintProvidorW, GetJobW, GetPrinterW, OpenPrinterW, AddPrintProvidorW, FindClosePrinterChangeNotification, FreePrinterNotifyInfo, FindNextPrinterChangeNotification