Import table
advapi32.dll
GetSidIdentifierAuthority, IsValidSid, LookupAccountSidA, LookupPrivilegeNameA, GetExplicitEntriesFromAclA, EqualSid, AdjustTokenGroups, CreateRestrictedToken, GetAce, LookupAccountNameW, ConvertStringSidToSidW, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerW, CopySid, GetSidSubAuthorityCount, GetTokenInformation, OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, ConvertSidToStringSidW, DuplicateTokenEx, RegNotifyChangeKeyValue, OpenThreadToken, GetSecurityDescriptorLength, IsValidSecurityDescriptor, SetFileSecurityW, RegEnumKeyExW, StartServiceW, ConvertStringSecurityDescriptorToSecurityDescriptorW, AccessCheck, GetSidSubAuthority, GetLengthSid, GetSecurityDescriptorDacl, SetSecurityInfo, OpenServiceW, DeleteService, OpenSCManagerW, CreateServiceW, CloseServiceHandle, QueryServiceStatus, ControlService, SetServiceStatus, RegCreateKeyExW, ReportEventW, RegisterEventSourceA, RegisterEventSourceW, DeregisterEventSource, RegOpenKeyExW, RegCloseKey, RegSetValueExW, RegQueryValueExW, IsTokenRestricted
kernel32.dll
SetEnvironmentVariableW, GetTimeZoneInformation, SetStdHandle, FlushFileBuffers, GetLocaleInfoW, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, SetEndOfFile, ReadFile, ResetEvent, SetEnvironmentVariableA, CompareStringW, CompareStringA, IsValidLocale, EnumSystemLocalesA, GetLocaleInfoA, GetUserDefaultLCID, GetDateFormatA, GetTimeFormatA, GetStringTypeW, GetStringTypeA, LoadLibraryA, InterlockedExchange, SetConsoleCtrlHandler, GetConsoleMode, GetConsoleCP, SetFilePointer, HeapFree, GetProcessHeap, GetLastError, InterlockedDecrement, LocalFree, CloseHandle, OutputDebugStringA, SetLastError, GetModuleFileNameW, FreeLibrary, lstrcpyA, GetProcAddress, LoadLibraryW, InterlockedIncrement, lstrlenW, InitializeCriticalSection, DeleteCriticalSection, GetDriveTypeW, GetVolumeInformationW, GetLogicalDrives, SetEvent, Sleep, FormatMessageW, DeviceIoControl, CreateFileW, WaitForSingleObject, VerifyVersionInfoW, VerSetConditionMask, CreateEventW, EnterCriticalSection, LeaveCriticalSection, GetCurrentThread, ExitThread, WaitForMultipleObjects, QueryDosDeviceW, GetSystemDirectoryW, GetModuleHandleW, TerminateThread, OpenEventW, CreateThread, GetCurrentProcess, GetCommandLineW, lstrcmpiA, lstrlenA, GetExitCodeThread, MultiByteToWideChar, ResumeThread, OutputDebugStringW, WinExec, LocalAlloc, GetUserDefaultUILanguage, ProcessIdToSessionId, GetCurrentProcessId, GetTickCount, GetOverlappedResult, SizeofResource, LockResource, LoadResource, FindResourceW, FindResourceExW, lstrcpyW, WideCharToMultiByte, RtlUnwind, GetSystemTimeAsFileTime, RaiseException, HeapAlloc, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCurrentThreadId, GetLocalTime, GetCommandLineA, GetVersionExA, GetModuleHandleA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, HeapDestroy, HeapCreate, VirtualFree, FatalAppExitA, VirtualAlloc, HeapReAlloc, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, LCMapStringA, LCMapStringW, HeapSize, SetHandleCount, GetFileType, GetStartupInfoA, QueryPerformanceCounter, CreateFileA
netapi32.dll
DsGetDcNameW, NetApiBufferFree
ole32.dll
CoTaskMemFree, StringFromCLSID, CoUninitialize, CoInitializeEx, CoSetProxyBlanket, CoInitializeSecurity, CoCreateInstance
rpcrt4.dll
NdrServerCall2, RpcServerUseProtseqEpA, RpcServerRegisterIf, RpcMgmtStopServerListening, RpcServerListen, RpcImpersonateClient, RpcRevertToSelf
secur32.dll
GetComputerObjectNameW
setupapi.dll
SetupDiChangeState, SetupDiGetClassDevsW, SetupDiEnumDeviceInterfaces, SetupDiGetDeviceInterfaceDetailW, CM_Get_Device_IDW, CM_Get_Parent, SetupDiGetDeviceRegistryPropertyW, SetupDiDestroyDeviceInfoList, SetupDiSetClassInstallParamsW, CM_Get_DevNode_Status, SetupDiOpenClassRegKeyExW, SetupDiGetClassDescriptionW
shell32.dll
ShellExecuteExW
user32.dll
PostQuitMessage, EndPaint, wsprintfW, KillTimer, SetTimer, BeginPaint, UpdateWindow, ShowWindow, CreateWindowExW, RegisterClassExW, LoadCursorW, UnregisterClassW, DestroyWindow, DispatchMessageW, GetMessageW, PostMessageW, DefWindowProcW, UnregisterClassA
wtsapi32.dll
WTSEnumerateSessionsW, WTSQuerySessionInformationW, WTSFreeMemory