Import table
advapi32.dll
RegOpenKeyExW, GetSidIdentifierAuthority, GetSidSubAuthorityCount, GetSidSubAuthority, GetTokenInformation, OpenThreadToken, OpenProcessToken, CheckTokenMembership, CreateProcessAsUserW, GetUserNameW, LookupPrivilegeValueW, RegEnumValueW, RegLoadKeyW, RegUnLoadKeyW, RegRestoreKeyW, RegSaveKeyW, RegFlushKey, SetSecurityInfo, CryptAcquireContextW, CryptCreateHash, CryptHashData, CryptGetHashParam, CryptDestroyHash, CryptReleaseContext, AdjustTokenPrivileges, StartServiceW, QueryServiceStatus, QueryServiceConfigW, AddAce, GetAclInformation, GetSecurityDescriptorDacl, GetSecurityDescriptorControl, MakeAbsoluteSD, DuplicateTokenEx, CryptDestroyKey, CryptImportKey, CryptGetUserKey, CryptSignHashW, CryptVerifySignatureW, GetSidLengthRequired, InitializeSid, CopySid, SetFileSecurityW, RegNotifyChangeKeyValue, EqualSid, CreateRestrictedToken, GetSecurityDescriptorLength, MakeSelfRelativeSD, GetSecurityDescriptorSacl, GetSecurityDescriptorGroup, GetSecurityDescriptorOwner, RegisterEventSourceW, ReportEventW, DeregisterEventSource, SetServiceStatus, InitializeSecurityDescriptor, AllocateAndInitializeSid, SetSecurityDescriptorGroup, RegQueryValueExW, SetSecurityDescriptorOwner, RegCloseKey, GetLengthSid, StartServiceCtrlDispatcherW, InitializeAcl, RegEnumKeyExW, AddAccessAllowedAce, OpenSCManagerW, SetSecurityDescriptorDacl, IsValidSecurityDescriptor, RegDeleteKeyW, SetServiceObjectSecurity, CreateServiceW, RegQueryInfoKeyW, CloseServiceHandle, OpenServiceW, FreeSid, RegisterServiceCtrlHandlerExW, ControlService, DeleteService, RegCreateKeyExW, RegDeleteValueW, RegSetValueExW, ChangeServiceConfigW, ChangeServiceConfig2W, GetAce, ConvertStringSidToSidW, IsValidSid
crypt32.dll
CryptUnprotectData, CertGetCertificateChain, CertFreeCertificateChain, CryptQueryObject, CryptMsgGetParam, CertFindCertificateInStore, CertGetNameStringW, CertFreeCertificateContext, CertCloseStore, CryptMsgClose, CryptVerifyMessageSignature, CryptProtectData
dbghelp.dll
ImageRvaToVa, MiniDumpWriteDump
imagehlp.dll
ImageGetCertificateData, ImageEnumerateCertificates
iphlpapi.dll
GetNetworkParams
kernel32.dll
DllMain
ole32.dll
CoCreateInstance, StringFromGUID2, CoUninitialize, CoCreateGuid, CoInitializeEx, StringFromCLSID, CoTaskMemAlloc, CoInitializeSecurity, CoRegisterClassObject, CoDisconnectObject, CoRevokeClassObject, CoTaskMemRealloc, CoInitialize, CoTaskMemFree
psapi.dll
GetModuleBaseNameW, GetModuleFileNameExW, GetModuleBaseNameA, GetProcessMemoryInfo
shell32.dll
SHGetFolderPathW, SHGetFolderLocation, SHGetPathFromIDListW, SHFileOperationW, CommandLineToArgvW
shlwapi.dll
PathFileExistsW, PathAppendW, PathRenameExtensionW
user32.dll
EnumDesktopsW, OpenWindowStationW, EnumDesktopWindows, CharUpperW, CharNextW, OpenDesktopW, FindWindowW, GetWindowThreadProcessId, GetWindowTextW, GetClassNameW, EnumWindowStationsW, GetSystemMetrics, EnumChildWindows, LoadStringW, UnregisterClassA, MessageBoxW, GetMessageW, TranslateMessage, PostThreadMessageW, DispatchMessageW, wsprintfW, RegisterWindowMessageW, CloseWindowStation, WaitForInputIdle
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
vdmdbg.dll
VDMEnumTaskWOWEx
version.dll
GetFileVersionInfoW, VerQueryValueW, GetFileVersionInfoSizeW
wininet.dll
GetUrlCacheEntryInfoW, DeleteUrlCacheEntryW, FindCloseUrlCache, FindFirstUrlCacheEntryExW, FindNextUrlCacheEntryExW
wintrust.dll
WinVerifyTrust
ws2_32.dll
WSCInstallProvider, WSCDeinstallProvider, WSCGetProviderPath, WSCEnumProtocols
