Import table
advapi32.dll
DuplicateToken, RegEnumKeyW, DuplicateTokenEx, GetTokenInformation, OpenThreadToken, StartServiceW, RegQueryInfoKeyW, RegEnumKeyExW, OpenSCManagerW, RevertToSelf, RegOpenKeyW, ControlService, OpenProcessToken, CreateProcessAsUserW, SetServiceStatus, RegisterServiceCtrlHandlerW, CreateServiceW, StartServiceCtrlDispatcherW, QueryServiceStatus, DeleteService, RegDeleteKeyW, AllocateAndInitializeSid, EqualSid, FreeSid, RegEnumValueW, RegDeleteValueW, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, GetSecurityDescriptorDacl, GetKernelObjectSecurity, SetKernelObjectSecurity, RegOpenKeyA, RegUnLoadKeyW, RegLoadKeyW, LookupPrivilegeValueW, AdjustTokenPrivileges, LookupAccountNameW, GetSidSubAuthority, IsValidSid, GetSidIdentifierAuthority, GetSidSubAuthorityCount, SetThreadToken, RegOpenKeyExW, CloseServiceHandle, OpenServiceW, RegCloseKey, LookupAccountSidW, RegQueryValueExW, RegCreateKeyExW, RegSetValueExW, RegQueryValueExA, RegDeleteKeyA, GetNamedSecurityInfoW, SetNamedSecurityInfoW, LogonUserW, LsaNtStatusToWinError, LsaAddAccountRights, LsaRemoveAccountRights, GetAclInformation, GetLengthSid, InitializeAcl, AddAccessAllowedAceEx, AddAccessDeniedAceEx, GetAce, AddAce, DeleteAce, LsaStorePrivateData, LsaRetrievePrivateData, ReportEventW, RegisterEventSourceW, DeregisterEventSource
gdi32.dll
SelectObject, CreateCompatibleDC, GetObjectW, DeleteDC, DeleteObject, GetDIBits
kernel32.dll
MoveFileExW, MoveFileW, GetVersion, LocalFree, SetFileAttributesW, FileTimeToLocalFileTime, GetComputerNameA, GetLocalTime, GetACP, VirtualAlloc, ReleaseMutex, OpenFileMappingW, DuplicateHandle, UnmapViewOfFile, CreateMutexW, MapViewOfFile, OpenMutexW, GetDriveTypeW, QueryDosDeviceW, GetEnvironmentVariableW, GetLogicalDriveStringsW, FindResourceW, FindResourceExW, LoadResource, LockResource, FreeResource, SizeofResource, LocalAlloc, GlobalMemoryStatus, ReadProcessMemory, GetModuleHandleA, lstrcmpA, InterlockedExchangeAdd, GetLocaleInfoW, LoadLibraryExW, GetLogicalDrives, GetModuleFileNameA, VirtualProtect, GetFileTime, SetFileTime, SetFilePointer, SetEndOfFile, GetTempFileNameW, FlushFileBuffers, GetFileInformationByHandle, GetDiskFreeSpaceW, LockFileEx, UnlockFileEx, GetSystemInfo, VirtualFree, TryEnterCriticalSection, CreateSemaphoreW, ReleaseSemaphore, GetExitCodeThread, SetUnhandledExceptionFilter, TlsFree, TlsGetValue, TlsSetValue, GetExitCodeProcess, InterlockedExchange, QueryPerformanceCounter, UnhandledExceptionFilter, TerminateProcess, GetStartupInfoA, InterlockedCompareExchange, GetVersionExA, RaiseException, GetProcessHeap, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, lstrcpynW, lstrlenW, GetFullPathNameW, GetFileAttributesW, GetModuleFileNameW, WaitForMultipleObjects, WriteFile, FileTimeToSystemTime, CreateProcessW, GetShortPathNameW, SetThreadPriority, CopyFileW, CreateDirectoryW, GetTempPathW, GetCurrentThread, FindClose, FindNextFileW, InterlockedDecrement, InterlockedIncrement, FindFirstFileW, GetModuleHandleW, GetTimeZoneInformation, GetCurrentThreadId, GetVersionExW, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, GetLastError, SystemTimeToFileTime, CompareFileTime, EnterCriticalSection, GetSystemTime, WaitForSingleObject, ReadFile, GetFileSize, FreeLibrary, SetEvent, LoadLibraryW, Sleep, GetProcAddress, ExpandEnvironmentStringsW, ResetEvent, WideCharToMultiByte, lstrlenA, MultiByteToWideChar, TlsAlloc, GetTickCount, GetCurrentProcess, GetCurrentProcessId, GetTimeFormatW, SetErrorMode, TerminateThread, GetDateFormatW, GetSystemTimeAsFileTime, GetComputerNameW, LocalFileTimeToFileTime, OpenProcess, DeleteFileW, SetLastError, GetSystemPowerStatus, GetFileAttributesA, GetFullPathNameA, AreFileApisANSI, lstrcpynA, CreateFileA, CreateFileMappingW, CreateFileMappingA, DeviceIoControl, CreateEventW, CreateFileW, CreateThread, CloseHandle, ResumeThread, IsBadReadPtr, GetOverlappedResult, GetVolumeNameForVolumeMountPointW, GetVolumePathNameW, lstrcpyW, lstrcatW, CreatePipe, GetWindowsDirectoryW, SetHandleInformation, RemoveDirectoryW, GetEnvironmentStringsW, FreeEnvironmentStringsW, GlobalFree, IsProcessorFeaturePresent
msvcp110.dll
DllMain
msvcp80.dll
DllMain
msvcr110.dll
DllMain
msvcr80.dll
DllMain
ole32.dll
CoTaskMemFree, CoUninitialize, CoCreateInstance, CoInitialize, CoCreateGuid
secur32.dll
FreeCredentialsHandle, AcquireCredentialsHandleW, LsaFreeReturnBuffer, LsaEnumerateLogonSessions, LsaGetLogonSessionData
shell32.dll
SHGetMalloc, SHGetDesktopFolder, SHGetPathFromIDListW, SHGetPathFromIDListA, SHGetSpecialFolderPathW
user32.dll
UnregisterClassA, PostMessageW, GetDC, PeekMessageW, TranslateMessage, DispatchMessageW, MsgWaitForMultipleObjects, wsprintfW, SendMessageW, KillTimer, DefWindowProcW, LoadStringW, RegisterClassW, CreateWindowExW, SetTimer, GetIconInfo, DestroyIcon, GetMessageW
ws2_32.dll
WSAIoctl
wtsapi32.dll
WTSLogoffSession, WTSOpenServerW, WTSCloseServer
