Import table
advapi32.dll
RegisterServiceCtrlHandlerW, SetServiceStatus, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, AllocateAndInitializeSid, FreeSid, GetSecurityInfo, SetEntriesInAclW, SetSecurityInfo, DuplicateTokenEx, SetTokenInformation, CreateProcessAsUserW, OpenProcessToken, StartServiceCtrlDispatcherW
kernel32.dll
FlushFileBuffers, ConnectNamedPipe, ReadFile, GetLastError, DisconnectNamedPipe, CreateNamedPipeW, GlobalAlloc, SetNamedPipeHandleState, CreateFileW, FindFirstFileA, CreateDirectoryA, FindClose, CreateFileA, LocalFree, WaitForSingleObject, DuplicateHandle, WriteFile, GetCurrentProcess, LoadLibraryW, GetProcAddress, OpenProcess, CloseHandle, GlobalFree, SetEnvironmentVariableA, CompareStringW, CompareStringA, MoveFileA, DeleteFileA, GetTempFileNameA, GetTempPathA, SetFileAttributesA, GetFileAttributesA, GetEnvironmentVariableW, MoveFileW, DeleteFileW, GetTempFileNameW, GetTempPathW, FreeLibrary, FindNextFileA, CreateMutexW, ReleaseMutex, WideCharToMultiByte, MultiByteToWideChar, CreateDirectoryW, FindFirstFileW, SetFileAttributesW, EnterCriticalSection, Sleep, InitializeCriticalSection, InterlockedExchange, DeleteCriticalSection, LeaveCriticalSection, RtlUnwind, GetCommandLineA, GetVersion, ExitProcess, GetTimeZoneInformation, GetSystemTime, GetLocalTime, HeapFree, HeapAlloc, GetCurrentThreadId, TlsSetValue, TlsAlloc, SetLastError, TlsGetValue, TerminateProcess, UnhandledExceptionFilter, GetModuleFileNameA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetModuleHandleA, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, SetFilePointer, HeapReAlloc, HeapSize, VirtualAlloc, IsBadWritePtr, SetUnhandledExceptionFilter, IsBadReadPtr, IsBadCodePtr, GetCPInfo, GetACP, GetOEMCP, LoadLibraryA, SetStdHandle, InterlockedDecrement, InterlockedIncrement, GetStringTypeA, GetStringTypeW, LCMapStringA, LCMapStringW, SetEndOfFile
psapi.dll
GetModuleBaseNameW, EnumProcesses, EnumProcessModules
shell32.dll
SHGetFolderPathW, SHGetFolderPathA
userenv.dll
CreateEnvironmentBlock
