Import table
advapi32.dll
SetThreadToken, OpenProcessToken, UnregisterIdleTask, RegisterIdleTask, RegDeleteValueW, RegConnectRegistryW, ConvertSidToStringSidW, RegQueryInfoKeyW, RegEnumValueW, LookupAccountNameW, EqualSid, DeleteAce, GetSecurityDescriptorDacl, IsValidAcl, GetAclInformation, GetLengthSid, AddAccessAllowedAce, GetAce, AddAccessDeniedAce, SetSecurityDescriptorDacl, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, RegCreateKeyExW, MakeAbsoluteSD, InitializeSecurityDescriptor, InitializeAcl, GetTokenInformation, RegisterServiceCtrlHandlerExW, RegNotifyChangeKeyValue, RegSetValueExW, SetServiceStatus, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, OpenThreadToken, MakeSelfRelativeSD, IsValidSecurityDescriptor
kernel32.dll
QueryPerformanceCounter, FindFirstChangeNotificationW, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetSystemDefaultUILanguage, GetUserDefaultUILanguage, GetLocalTime, SetLastError, LoadLibraryExW, GetSystemDirectoryW, GlobalUnlock, GlobalLock, GlobalAlloc, GetUserDefaultLCID, GetTimeZoneInformation, GetModuleFileNameW, DeleteTimerQueueTimer, UnregisterWaitEx, CreateTimerQueueTimer, RegisterWaitForSingleObject, GetCurrentThread, FindCloseChangeNotification, LocalFree, OpenProcess, GlobalFree, Sleep, FindNextChangeNotification, lstrlenW, DisableThreadLibraryCalls, CreateEventA, GetLastError, WaitForMultipleObjects, SetEvent, HeapDestroy, DeleteCriticalSection, InitializeCriticalSection, EnterCriticalSection, CreateProcessW, WaitForSingleObject, TerminateProcess, CloseHandle, LeaveCriticalSection, ExpandEnvironmentStringsW, GetTickCount
msvcrt.dll
DllMain
netapi32.dll
NetLocalGroupAddMembers, NetLocalGroupDel, NetLocalGroupAdd, NetLocalGroupGetInfo, NetApiBufferFree, NetLocalGroupGetMembers, NetLocalGroupDelMembers
ntdll.dll
NtQueryInformationProcess
ole32.dll
StringFromGUID2, CoRegisterClassObject, CoRevokeClassObject, CoUninitialize, CoCreateInstance, CoGetCallContext, CoInitializeEx
rpcrt4.dll
I_RpcBindingInqLocalClientPID
user32.dll
LoadStringW
winsta.dll
WinStationSetInformationA