Import table
advapi32.dll
RegOpenKeyExA, RegEnumKeyExW, RegQueryValueExW, OpenThreadToken, OpenProcessToken, GetTokenInformation, AllocateAndInitializeSid, EqualSid, FreeSid, RegQueryInfoKeyW, RegSetValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW, RegQueryValueExA
kernel32.dll
FindResourceW, CloseHandle, GlobalFree, GlobalAlloc, GetCurrentProcess, GetCurrentThread, GetShortPathNameW, FreeLibrary, LoadLibraryW, InterlockedIncrement, InterlockedDecrement, GetTickCount, LoadLibraryExW, GetModuleHandleW, GetModuleFileNameW, EnterCriticalSection, LeaveCriticalSection, SetThreadLocale, LoadResource, SystemTimeToFileTime, GetVersionExA, LoadLibraryA, GetProcAddress, GetSystemDirectoryA, lstrlenA, GetShortPathNameA, Module32Next, Module32First, CreateToolhelp32Snapshot, GetCurrentProcessId, OpenProcess, FindClose, FindFirstFileA, IsBadWritePtr, SetStdHandle, LockResource, SizeofResource, GetVersionExW, GetThreadLocale, GetLocaleInfoA, GetACP, MultiByteToWideChar, WideCharToMultiByte, lstrcmpiW, GetLastError, DeleteCriticalSection, InitializeCriticalSection, RaiseException, lstrlenW, WriteConsoleA, IsBadReadPtr, FlushFileBuffers, GetConsoleOutputCP, CreateFileA, WriteConsoleW, GetStringTypeW, GetStringTypeA, LCMapStringW, LCMapStringA, GetConsoleMode, GetConsoleCP, SetFilePointer, GetSystemTimeAsFileTime, QueryPerformanceCounter, InterlockedExchange, HeapAlloc, HeapFree, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, RtlUnwind, HeapReAlloc, GetCurrentThreadId, GetCommandLineA, GetProcessHeap, VirtualFree, VirtualAlloc, HeapDestroy, HeapCreate, GetModuleHandleA, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, GetCPInfo, GetOEMCP, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, Sleep, HeapSize, SetHandleCount, GetFileType, GetStartupInfoA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW
ole32.dll
StringFromGUID2, CoCreateInstance, CLSIDFromProgID, CoTaskMemFree, CoTaskMemRealloc, CoTaskMemAlloc, CoGetClassObject
user32.dll
LoadStringW, CharNextW, UnregisterClassA
wintrust.dll
WinVerifyTrust
Export table
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
