Import table
advapi32.dll
ReportEventW, SetTokenInformation, CreatePrivateObjectSecurity, DestroyPrivateObjectSecurity, ImpersonateAnonymousToken, CryptCreateHash, CryptDeriveKey, CryptSetProvParam, CryptHashData, CryptDestroyHash, CryptEncrypt, MapGenericMask, GetSecurityDescriptorDacl, IsValidAcl, GetSecurityDescriptorSacl, SetSecurityDescriptorSacl, GetSecurityDescriptorOwner, GetSecurityDescriptorGroup, IsValidSecurityDescriptor, LookupAccountSidW, ConvertStringSidToSidW, LookupAccountNameW, ConvertSidToStringSidW, GetUserNameW, CryptImportKey, CryptGetUserKey, CryptDecrypt, CryptDuplicateKey, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerExW, ControlService, DeleteService, CreateServiceW, ChangeServiceConfig2W, RegEnumKeyW, SetServiceStatus, SetSecurityInfo, GetSidSubAuthority, GetSidLengthRequired, InitializeSid, RegQueryInfoKeyW, RegDeleteValueW, SetSecurityDescriptorDacl, AdjustTokenPrivileges, OpenThreadToken, RegEnumKeyExW, CryptGetProvParam, CryptGenKey, CryptAcquireContextW, CryptReleaseContext, CryptDestroyKey, InitializeAcl, AddAccessAllowedAceEx, GetAclInformation, GetAce, AddAce, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, InitializeSecurityDescriptor, OpenProcessToken, GetTokenInformation, ImpersonateSelf, RevertToSelf, SetThreadToken, LookupPrivilegeValueW, EqualSid, IsValidSid, GetLengthSid, CopySid, CloseEventLog, DeregisterEventSource, OpenEventLogW, RegOpenKeyExA, RegQueryValueExA, RegEnumKeyA, RegEnumValueW, RegSetValueExW, RegDeleteKeyW, OpenSCManagerW, OpenServiceW, QueryServiceConfigW, QueryServiceStatus, CloseServiceHandle, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey
crypt32.dll
CryptEncodeObject, CryptVerifyCertificateSignature, CryptExportPublicKeyInfo, CryptSignCertificate, CryptDecodeObject
dnsapi.dll
DnsQueryConfig
kernel32.dll
TlsAlloc, TlsGetValue, GetStartupInfoA, GetProcessHeap, GetCommandLineA, GetVersionExW, GetSystemTimeAsFileTime, GetCommandLineW, ExitProcess, WideCharToMultiByte, GetSystemDirectoryW, IsDebuggerPresent, LoadLibraryExW, FindResourceW, LoadResource, SizeofResource, SetLastError, CreateFileW, GetFileSize, GetComputerNameA, FormatMessageW, lstrlenA, GetCurrentProcess, GetModuleFileNameA, InterlockedExchange, CreateDirectoryW, FindFirstFileW, FindClose, lstrcmpiW, GetCurrentThread, SetFilePointer, GetCurrentThreadId, GetModuleFileNameW, GetModuleHandleW, TlsSetValue, CreateMutexW, GetLocalTime, WriteFile, ProcessIdToSessionId, GetVersionExA, GetCurrentProcessId, RaiseException, lstrlenW, MultiByteToWideChar, QueueUserWorkItem, InterlockedDecrement, InterlockedIncrement, CreateTimerQueueTimer, HeapReAlloc, CreateEventW, GetTickCount, Sleep, GetComputerNameExW, ResetEvent, WaitForSingleObject, SetEvent, CloseHandle, GetCPInfo, LoadLibraryW, FreeLibrary, LocalAlloc, GetLastError, LocalFree, DeleteTimerQueueTimer, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, VirtualQuery, GetSystemInfo, GetModuleHandleA, ReleaseMutex, TlsFree, LoadLibraryA, VirtualFree, GetConsoleMode, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, CreateFileA, FlushFileBuffers, GetStringTypeW, GetStringTypeA, QueryPerformanceCounter, GetFileType, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, HeapSize, GetStdHandle, HeapCreate, HeapDestroy, VirtualAlloc, VirtualProtect, HeapFree, HeapAlloc, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, RtlUnwind, GetThreadLocale, GetLocaleInfoA, GetACP, GetOEMCP, LCMapStringA, LCMapStringW, GetProcAddress, GetConsoleCP
netapi32.dll
NetApiBufferFree, NetUserGetInfo
ole32.dll
CoSetProxyBlanket, CoCreateInstance, CoRevokeClassObject, StringFromCLSID, CoTaskMemFree, CoRegisterClassObject, StringFromGUID2, CoTaskMemAlloc, CoTaskMemRealloc, CoCreateGuid, CoUninitialize, CoFreeUnusedLibraries, CoInitializeSecurity, CoInitializeEx, CoRevertToSelf, CoImpersonateClient, CLSIDFromString, CoDisconnectObject, OleRun
rpcrt4.dll
RpcImpersonateClient, RpcRevertToSelf
user32.dll
UnregisterClassA, CharNextW, CloseWindowStation, CloseDesktop, OpenWindowStationW, OpenDesktopW, MessageBoxW, LoadStringW, SetProcessWindowStation, SetThreadDesktop, GetMessageW, DispatchMessageW, PostThreadMessageW