Import table
advapi32.dll
RegisterServiceCtrlHandlerW, SetServiceStatus, RegDeleteValueW, RegCreateKeyExW, RegSetValueExW, RegCloseKey, DuplicateTokenEx, SetTokenInformation, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, CreateProcessAsUserW, OpenProcessToken, AllocateAndInitializeSid, FreeSid, GetSecurityInfo, SetEntriesInAclW, SetSecurityInfo, StartServiceCtrlDispatcherW
kernel32.dll
GetModuleHandleW, RemoveDirectoryW, FindNextFileW, DeleteFileW, SetFileAttributesW, FindFirstFileW, MoveFileExW, CopyFileW, CreateDirectoryW, GetModuleFileNameW, ReadFile, GetLastError, ConnectNamedPipe, DisconnectNamedPipe, GlobalFree, CreateNamedPipeW, GlobalAlloc, SetNamedPipeHandleState, CreateFileW, FindFirstFileA, CreateDirectoryA, FindClose, WaitForSingleObject, DuplicateHandle, WriteFile, GetCurrentProcess, LoadLibraryW, GetProcAddress, OpenProcess, CreateFileA, CloseHandle, LocalFree, CompareStringA, CompareStringW, SetEnvironmentVariableA, FlushFileBuffers, GetTempPathW, LCMapStringW, LCMapStringA, SetEndOfFile, GetStringTypeW, MoveFileA, DeleteFileA, GetTempFileNameA, GetTempPathA, SetFileAttributesA, GetFileAttributesA, GetEnvironmentVariableW, MoveFileW, GetTempFileNameW, GetStringTypeA, FreeLibrary, FindNextFileA, CreateMutexW, ReleaseMutex, WideCharToMultiByte, MultiByteToWideChar, EnterCriticalSection, Sleep, InitializeCriticalSection, InterlockedExchange, DeleteCriticalSection, LeaveCriticalSection, RtlUnwind, GetCommandLineA, GetVersion, ExitProcess, GetTimeZoneInformation, GetSystemTime, GetLocalTime, HeapFree, HeapAlloc, GetCurrentThreadId, TlsSetValue, TlsAlloc, SetLastError, TlsGetValue, TerminateProcess, UnhandledExceptionFilter, GetModuleFileNameA, FreeEnvironmentStringsA, FreeEnvironmentStringsW, GetEnvironmentStrings, GetEnvironmentStringsW, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetModuleHandleA, GetEnvironmentVariableA, GetVersionExA, HeapDestroy, HeapCreate, VirtualFree, SetFilePointer, HeapReAlloc, HeapSize, VirtualAlloc, IsBadWritePtr, SetStdHandle, InterlockedDecrement, InterlockedIncrement, SetUnhandledExceptionFilter, IsBadReadPtr, IsBadCodePtr, GetCPInfo, GetACP, GetOEMCP, LoadLibraryA, OutputDebugStringA
psapi.dll
EnumProcesses, EnumProcessModules, GetModuleBaseNameW
shell32.dll
SHGetSpecialFolderPathW, SHGetFolderPathA, SHGetFolderPathW
shlwapi.dll
PathAppendW, PathRemoveFileSpecW, PathRemoveBackslashW, PathFileExistsW
userenv.dll
CreateEnvironmentBlock
