Import table
advapi32.dll
AdjustTokenPrivileges, RegSetValueExW, RegCreateKeyExW, RegEnumValueW, RegOpenKeyW, RegEnumKeyW, RegQueryInfoKeyW, LookupPrivilegeValueW, SetFileSecurityW, LsaNtStatusToWinError, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, SetServiceStatus, RegisterEventSourceW, ReportEventW, DeregisterEventSource, RegisterServiceCtrlHandlerExW, StartServiceCtrlDispatcherW, StartServiceW, OpenServiceW, ControlService, QueryServiceStatus, DeleteService, OpenSCManagerW, CreateServiceW, CloseServiceHandle, ChangeServiceConfig2W, OpenProcessToken, GetTokenInformation, RegSetKeySecurity, ConvertSidToStringSidW, LookupAccountNameW, CopySid, CreateProcessAsUserW, SetNamedSecurityInfoW
kernel32.dll
DeleteCriticalSection, InitializeCriticalSection, WaitForSingleObject, CreateThread, SetThreadPriority, ResumeThread, GetCurrentProcess, TerminateThread, SetErrorMode, LoadLibraryW, GetProcAddress, SetEvent, CloseHandle, WaitForMultipleObjects, GetTickCount, WTSGetActiveConsoleSessionId, GetModuleFileNameW, Sleep, SetConsoleCtrlHandler, EnterCriticalSection, LeaveCriticalSection, GetCurrentThreadId, GetCurrentProcessId, SetProcessWorkingSetSize, SetLastError, GetLastError, GetSystemInfo, SetStdHandle, SetEnvironmentVariableW, SetEnvironmentVariableA, CompareStringW, CompareStringA, GetStringTypeW, GetStringTypeA, GetConsoleCP, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, DeleteFileW, FlushFileBuffers, RemoveDirectoryW, CreateDirectoryW, GetSystemDirectoryW, GetDriveTypeW, CreateMutexW, OpenMutexW, ReleaseMutex, CreateEventW, OpenEventW, ResetEvent, FreeLibrary, GetProcessHeap, HeapAlloc, HeapFree, HeapReAlloc, VirtualAlloc, VirtualFree, HeapCompact, SystemTimeToFileTime, GetSystemTime, SystemTimeToTzSpecificLocalTime, GetTimeZoneInformation, FileTimeToSystemTime, TzSpecificLocalTimeToSystemTime, CreateFileW, ReadFile, SetFilePointerEx, WriteFile, SetFilePointer, DeviceIoControl, ExpandEnvironmentStringsW, GetEnvironmentVariableW, GetSystemTimes, GetPrivateProfileStringW, WritePrivateProfileStringW, QueryDosDeviceW, GetShortPathNameW, MapViewOfFile, CreateFileMappingW, UnmapViewOfFile, GetSystemPowerStatus, OpenFileMappingW, InterlockedIncrement, InterlockedDecrement, GetVolumeInformationW, GetVersionExW, LocalFree, FormatMessageW, GetLongPathNameW, GetLogicalDrives, GetStdHandle, LoadLibraryA, CreateFileA, SuspendThread, GetModuleHandleW, GetTimeFormatW, GetDateFormatW, SetCurrentDirectoryW, GetCurrentDirectoryW, RtlUnwind, RaiseException, ReadConsoleInputA, SetConsoleMode, GetConsoleMode, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetVersionExA, MultiByteToWideChar, GetModuleHandleA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, GetModuleFileNameA, HeapSize, ExitProcess, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineA, GetCommandLineW, SetHandleCount, GetFileType, GetStartupInfoA, HeapDestroy, HeapCreate, QueryPerformanceCounter, GetSystemTimeAsFileTime, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, LCMapStringA, WideCharToMultiByte, LCMapStringW, GetLocaleInfoA
ole32.dll
CoInitializeEx, CoUninitialize, StringFromGUID2, CoCreateGuid, CoTaskMemFree, CoTaskMemAlloc
secur32.dll
GetUserNameExW, LsaEnumerateLogonSessions, LsaGetLogonSessionData, LsaFreeReturnBuffer
setupapi.dll
SetupDiEnumDeviceInfo, SetupDiGetDeviceRegistryPropertyW, SetupDiEnumDeviceInterfaces, SetupDiDestroyDeviceInfoList, SetupDiGetDeviceInterfaceDetailW, SetupDiGetClassDevsW
shell32.dll
SHGetFileInfoW, SHGetSpecialFolderPathW, SHBindToParent
shlwapi.dll
PathRemoveFileSpecW, PathFileExistsW, PathAppendW, PathStripToRootW, StrRetToBufW, PathAddBackslashW
user32.dll
UnregisterDeviceNotification, DestroyWindow, CreateWindowExW, RegisterClassW, DefWindowProcW, KillTimer, SetTimer, GetWindowLongW, SetWindowLongW, UnregisterClassW, MsgWaitForMultipleObjects, PeekMessageW, DispatchMessageW, RegisterDeviceNotificationW, TranslateMessage, ExitWindowsEx, MessageBoxW
wtsapi32.dll
WTSEnumerateProcessesW, WTSFreeMemory, WTSEnumerateSessionsW, WTSQuerySessionInformationW, WTSQueryUserToken
