Import table
advapi32.dll
RegCreateKeyExW, IsValidSid, CopySid, GetSidSubAuthority, InitializeSid, GetSidLengthRequired, GetUserNameW, RegSetValueExW, RegDeleteValueW, CreateProcessAsUserW, SetTokenInformation, SaferCloseLevel, SaferComputeTokenFromLevel, SaferCreateLevel, GetSidSubAuthorityCount, GetTokenInformation, ConvertSidToStringSidW, LookupAccountNameW, RegDeleteKeyW, RegQueryInfoKeyW, RegEnumKeyExW, GetSecurityInfo, GetAce, RegEnumValueW, RegCloseKey, RegOpenKeyExW, RegQueryValueExW, ReportEventW, RegisterServiceCtrlHandlerW, SetServiceStatus, DeregisterEventSource, StartServiceCtrlDispatcherW, RegisterEventSourceW, GetSecurityDescriptorDacl, ControlService, CheckTokenMembership, BuildExplicitAccessWithNameW, FreeSid, SetEntriesInAclW, AllocateAndInitializeSid, ChangeServiceConfigW, ImpersonateLoggedOnUser, QueryServiceStatus, DuplicateTokenEx, StartServiceW, ChangeServiceConfig2W, QueryServiceObjectSecurity, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, AdjustTokenPrivileges, RevertToSelf, LookupPrivilegeValueW, InitializeAcl, AddAce, SetSecurityInfo, GetAclInformation, CreateServiceW, CloseServiceHandle, OpenProcessToken, DeleteService, OpenSCManagerW, SetServiceObjectSecurity, OpenServiceW, GetLengthSid, QueryServiceConfigW, QueryServiceStatusEx, GetSecurityDescriptorSacl, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegOpenKeyW
dbghelp.dll
SymSetOptions, UnDecorateSymbolName, SymInitialize, StackWalk, SymCleanup, SymGetLineFromAddr, SymGetSymFromAddr64, SymFunctionTableAccess, SymGetModuleBase
kernel32.dll
DllMain
ole32.dll
CoUninitialize, CoCreateInstance, CoInitialize, CoCreateGuid, CoTaskMemFree, StringFromIID, CLSIDFromProgID, StringFromCLSID, CoInitializeEx, CLSIDFromString, CoInitializeSecurity
psapi.dll
GetProcessMemoryInfo
rpcrt4.dll
UuidToStringW, RpcStringFreeW
sensapi.dll
IsNetworkAlive
shell32.dll
SHGetFolderPathW, SHGetSpecialFolderPathW, ShellExecuteExW, SHFileOperationW
shlwapi.dll
PathAppendW, StrStrIW, UrlEscapeW, PathFileExistsW, PathFindFileNameW, PathGetArgsW
user32.dll
GetGUIThreadInfo, wsprintfW
userenv.dll
UnloadUserProfile, DestroyEnvironmentBlock, CreateEnvironmentBlock
version.dll
GetFileVersionInfoSizeW, VerQueryValueW, GetFileVersionInfoW
wininet.dll
InternetGetConnectedState
wtsapi32.dll
WTSFreeMemory, WTSQuerySessionInformationW, WTSQueryUserToken