Import table
advapi32.dll
RegCloseKey, RegQueryInfoKeyW, RegEnumKeyExW, RegOpenKeyExW, RegSetValueExW, RegCreateKeyExW, RegDeleteValueW, OpenProcessToken, DuplicateTokenEx, SetTokenInformation, CreateProcessAsUserW, RegQueryValueExW, StartServiceCtrlDispatcherW, RegisterEventSourceW, ReportEventW, DeregisterEventSource, SetServiceStatus, RegisterServiceCtrlHandlerW, OpenSCManagerW, OpenServiceW, CloseServiceHandle, CreateServiceW, ControlService, DeleteService, LookupPrivilegeValueW, AdjustTokenPrivileges
kernel32.dll
lstrcmpiW, RaiseException, LeaveCriticalSection, EnterCriticalSection, MultiByteToWideChar, SizeofResource, LoadResource, FindResourceExW, GetModuleFileNameW, InitializeCriticalSection, DeleteCriticalSection, GetCurrentProcess, WaitForSingleObject, CloseHandle, Sleep, GetFileAttributesW, SetEvent, CreateThread, WTSGetActiveConsoleSessionId, CreateEventW, InterlockedIncrement, InterlockedDecrement, GetCommandLineW, GetCurrentThreadId, CreateFileW, GetProcessHeap, SystemTimeToTzSpecificLocalTime, GetSystemTime, ExpandEnvironmentStringsW, CreateFileA, FlushFileBuffers, GetModuleHandleW, WriteConsoleA, GetConsoleOutputCP, SetStdHandle, SetFilePointer, GetConsoleMode, GetConsoleCP, TlsSetValue, TlsGetValue, TlsAlloc, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, LoadLibraryExA, InitializeCriticalSectionAndSpinCount, GetCPInfo, GetOEMCP, GetACP, IsValidCodePage, HeapSize, HeapReAlloc, OutputDebugStringA, FreeEnvironmentStringsW, SetLastError, GetModuleHandleA, VirtualQuery, VirtualProtect, VirtualAlloc, GetSystemInfo, TerminateProcess, SetUnhandledExceptionFilter, UnhandledExceptionFilter, HeapFree, HeapAlloc, GetEnvironmentStringsW, GetTickCount, GetSystemTimeAsFileTime, GetCurrentProcessId, QueryPerformanceCounter, GetStartupInfoA, SetHandleCount, GetFileType, VirtualFree, HeapCreate, GetModuleFileNameA, WriteFile, GetStdHandle, ExitProcess, LoadLibraryExW, GetProcAddress, GetLastError, FreeLibrary, WriteConsoleW, WideCharToMultiByte, GetStartupInfoW, GetVersionExA, TlsFree
netapi32.dll
NetLocalGroupAddMembers, NetLocalGroupDelMembers
ntdll.dll
RtlInitUnicodeString, NtOpenEvent, RtlUnwind, NtDuplicateToken, NtQueryInformationToken
ole32.dll
CoTaskMemRealloc, CoTaskMemAlloc, CoTaskMemFree, CoInitializeEx, StringFromGUID2, CoCreateInstance, CoResumeClassObjects, CoRevokeClassObject, CoRegisterClassObject, CoSuspendClassObjects, PropVariantClear, CoUninitialize
sas.dll
SendSAS
shlwapi.dll
PathFindFileNameW, SHStrDupW
user32.dll
PostThreadMessageW, LoadStringW, SendMessageW, GetMessageW, CharUpperW, RegisterClassW, DefWindowProcW, SetWindowLongW, GetWindowLongW, DispatchMessageW, MessageBoxW, CreateWindowExW, UnregisterClassA, CharNextW, MsgWaitForMultipleObjects, PeekMessageW, TranslateMessage
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
wtsapi32.dll
WTSFreeMemory, WTSRegisterSessionNotification, WTSQuerySessionInformationW, WTSQueryUserToken, WTSDisconnectSession, WTSEnumerateSessionsW, WTSLogoffSession, WTSEnumerateProcessesExW, WTSUnRegisterSessionNotification
