Import table
advapi32.dll
RegEnumValueW, OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, DeleteService, ControlService, OpenServiceW, CloseServiceHandle, CreateServiceW, OpenSCManagerW, RegisterServiceCtrlHandlerW, DeregisterEventSource, ReportEventW, RegisterEventSourceW, SetServiceStatus, StartServiceCtrlDispatcherW, RegQueryValueExW, GetSecurityDescriptorLength, RegDeleteValueW, RegCreateKeyExW, RegSetValueExW, RegOpenKeyExW, RegEnumKeyExW, RegQueryInfoKeyW, RegCloseKey, RegDeleteKeyW, ChangeServiceConfig2W, ConvertSidToStringSidW, GetTokenInformation, CreateProcessAsUserW, RevertToSelf, ImpersonateLoggedOnUser, GetLengthSid, LookupAccountSidW, IsValidSid, CopySid, RegEnumKeyW
kernel32.dll
GetTimeFormatA, InterlockedIncrement, InterlockedExchange, OpenProcess, HeapFree, HeapAlloc, GetProcessHeap, CreateThread, CreateEventW, Sleep, WaitForSingleObject, CloseHandle, GetCurrentThreadId, SetEvent, GetCommandLineW, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, GetModuleFileNameW, LoadLibraryExW, FindResourceW, LoadResource, SizeofResource, EnterCriticalSection, RaiseException, LeaveCriticalSection, GetModuleHandleW, GetProcAddress, FreeLibrary, InterlockedDecrement, lstrlenW, lstrcmpiW, MultiByteToWideChar, LocalFree, GetLastError, CreateEventA, GetDateFormatA, CompareStringW, GetTimeZoneInformation, HeapSize, FormatMessageA, MoveFileW, FormatMessageW, LocalAlloc, GetVersionExW, GetCurrentProcess, ResetEvent, OpenEventW, WaitForSingleObjectEx, GetCurrentProcessId, ProcessIdToSessionId, DuplicateHandle, CreateToolhelp32Snapshot, Process32FirstW, Process32NextW, InitializeCriticalSection, WideCharToMultiByte, LoadLibraryW, HeapDestroy, HeapReAlloc, SetEnvironmentVariableA, InterlockedCompareExchange, GetStringTypeW, EncodePointer, DecodePointer, GetSystemTimeAsFileTime, TlsAlloc, TlsFree, TlsGetValue, GetSystemInfo, OpenEventA, TlsSetValue, ResumeThread, GetTickCount, SystemTimeToFileTime, WaitForMultipleObjects, SetWaitableTimer, CreateWaitableTimerA, lstrlenA, VirtualProtect, VirtualAlloc, VirtualQuery, HeapSetInformation, GetStartupInfoW, RtlUnwind, LCMapStringW, GetCPInfo, ExitThread, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, IsProcessorFeaturePresent, HeapCreate, ExitProcess, WriteFile, GetStdHandle, GetLocaleInfoW, SetLastError, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, GetFileType, QueryPerformanceCounter, GetACP, GetOEMCP, IsValidCodePage, GetUserDefaultLCID, GetLocaleInfoA, EnumSystemLocalesA, IsValidLocale, SetFilePointer, GetConsoleCP, GetConsoleMode, SetStdHandle, WriteConsoleW, FlushFileBuffers, CreateFileW, GetFileAttributesW
netapi32.dll
NetUserGetInfo, NetApiBufferFree
ole32.dll
CoTaskMemAlloc, CoTaskMemRealloc, CoInitializeSecurity, CoCreateGuid, CoAddRefServerProcess, CoReleaseServerProcess, StringFromGUID2, CoCreateInstance, CoResumeClassObjects, CoRegisterClassObject, CoRevokeClassObject, CoInitializeEx, CoUninitialize, CoInitialize, OleRun, CoTaskMemFree
user32.dll
CharUpperW, TranslateMessage, DispatchMessageW, MessageBoxW, GetMessageW, PostThreadMessageW, LoadStringW, CharNextW
userenv.dll
CreateEnvironmentBlock, UnloadUserProfile, DestroyEnvironmentBlock, LoadUserProfileW
winspool.drv
SetPrinterW, GetPrinterW, FindClosePrinterChangeNotification, FindNextPrinterChangeNotification, FindFirstPrinterChangeNotification, ClosePrinter, OpenPrinterW
wtsapi32.dll
WTSQuerySessionInformationW, WTSFreeMemory, WTSEnumerateSessionsW
