Import table
advapi32.dll
GetUserNameW, SetSecurityInfo, CreateProcessAsUserW, SetThreadToken, ImpersonateLoggedOnUser, OpenThreadToken, OpenProcessToken, DuplicateTokenEx, SetTokenInformation, GetLengthSid, RevertToSelf, GetSecurityDescriptorLength, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegEnumKeyExW, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerW, RegQueryInfoKeyW, ControlService, DeleteService, CreateServiceW, RegSetValueExW, RegQueryValueExW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW, RegCreateKeyExW, RegOpenKeyExW, SetServiceStatus, RegisterEventSourceW, ReportEventW, DeregisterEventSource, OpenSCManagerW, OpenServiceW, CloseServiceHandle, ConvertStringSidToSidW
kernel32.dll
GetSystemTimeAsFileTime, GetCurrentProcess, GetCurrentThread, CreateMutexW, FormatMessageA, GetFileAttributesW, WideCharToMultiByte, CreateProcessW, GetProcessHeap, HeapFree, HeapAlloc, TlsAlloc, OpenProcess, GetProcessTimes, SetEnvironmentVariableA, CreateFileA, WriteConsoleW, SetStdHandle, SetEnvironmentVariableW, LoadLibraryW, IsValidLocale, EnumSystemLocalesA, GetLocaleInfoA, TlsGetValue, TlsSetValue, InitializeCriticalSection, LocalFree, CreateEventA, LoadLibraryExW, FindResourceW, LoadResource, SizeofResource, MultiByteToWideChar, FreeLibrary, InterlockedIncrement, GetCurrentProcessId, InterlockedDecrement, lstrcmpiW, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, LeaveCriticalSection, EnterCriticalSection, RaiseException, GetCommandLineW, GetCurrentThreadId, SetEvent, CreateEventW, CreateThread, Sleep, GetModuleFileNameW, FormatMessageW, LocalAlloc, lstrlenW, GetModuleHandleW, GetProcAddress, GetLastError, WaitForSingleObject, GetVersionExW, CloseHandle, GetUserDefaultLCID, IsValidCodePage, GetOEMCP, GetACP, GetTimeZoneInformation, SetFilePointer, FlushFileBuffers, GetConsoleMode, GetConsoleCP, QueryPerformanceCounter, GetFileType, SetHandleCount, HeapReAlloc, GetEnvironmentStringsW, FreeEnvironmentStringsW, HeapCreate, GetStdHandle, WriteFile, ExitProcess, HeapSize, TerminateProcess, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, IsProcessorFeaturePresent, CompareStringW, GetDateFormatA, GetTimeFormatA, LCMapStringW, GetStringTypeW, InterlockedCompareExchange, InterlockedExchange, EncodePointer, DecodePointer, GetLocaleInfoW, SetEndOfFile, CreateFileW, DeviceIoControl, CreateDirectoryW, SetLastError, GetModuleHandleA, AreFileApisANSI, TlsFree, OpenEventA, ResetEvent, GetTickCount, RtlUnwind, HeapSetInformation, GetStartupInfoW, GetCPInfo, ReadFile
ole32.dll
CoInitializeEx, CoUninitialize, CoRevokeClassObject, StringFromGUID2, CoCreateInstance, CoResumeClassObjects, CoTaskMemAlloc, CoTaskMemRealloc, CoTaskMemFree, CoAddRefServerProcess, CoReleaseServerProcess, OleRun, CoRegisterClassObject, CoInitializeSecurity
shell32.dll
SHGetFolderPathW, SHGetSpecialFolderPathW
user32.dll
TranslateMessage, PostThreadMessageW, LoadStringW, CharNextW, GetMessageW, DispatchMessageW, CharUpperW, MessageBoxW, GetSystemMetrics
userenv.dll
DestroyEnvironmentBlock, UnloadUserProfile, CreateEnvironmentBlock
