Import table
advapi32.dll
RegisterServiceCtrlHandlerW, InitializeSecurityDescriptor, AllocateAndInitializeSid, InitializeAcl, AddAccessAllowedAce, SetSecurityDescriptorDacl, IsValidSecurityDescriptor, FreeSid, RegOpenKeyW, RegEnumValueW, RegCloseKey, RegOpenKeyExW, CreateProcessAsUserW, OpenProcessToken, DuplicateTokenEx, LookupPrivilegeValueW, AdjustTokenPrivileges, SetTokenInformation, SetServiceStatus, StartServiceCtrlDispatcherW
kernel32.dll
SetFilePointer, GetLocaleInfoA, GetStringTypeW, GetStringTypeA, LCMapStringW, CreateNamedPipeW, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, RtlUnwind, InitializeCriticalSection, LoadLibraryA, HeapSize, HeapReAlloc, ConnectNamedPipe, Sleep, CreateThread, ReadFile, WriteFile, FlushFileBuffers, DisconnectNamedPipe, CreateEventW, WaitForSingleObject, IsWow64Process, GetCurrentProcess, GetLastError, CloseHandle, CreateFileA, LCMapStringA, UnhandledExceptionFilter, HeapFree, GetVersionExA, HeapAlloc, GetProcessHeap, GetStartupInfoW, TerminateProcess, SetUnhandledExceptionFilter, IsDebuggerPresent, RaiseException, GetProcAddress, GetModuleHandleA, ExitProcess, GetStdHandle, GetModuleFileNameA, GetModuleFileNameW, FreeEnvironmentStringsA, MultiByteToWideChar, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineA, GetCommandLineW, SetHandleCount, GetFileType, GetStartupInfoA, DeleteCriticalSection, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, GetCurrentThreadId, InterlockedDecrement, HeapDestroy, HeapCreate, VirtualFree, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, WideCharToMultiByte, GetConsoleCP, GetConsoleMode, EnterCriticalSection, LeaveCriticalSection, GetCPInfo, GetACP, GetOEMCP, VirtualAlloc
user32.dll
GetMessageW, TranslateAcceleratorW, TranslateMessage, DispatchMessageW, LoadIconW, LoadCursorW, RegisterClassExW, BeginPaint, EndPaint, PostQuitMessage, DefWindowProcW, DestroyWindow, CreateWindowExW, UpdateWindow, SendMessageW
userenv.dll
CreateEnvironmentBlock, DestroyEnvironmentBlock
wtsapi32.dll
WTSRegisterSessionNotification, WTSUnRegisterSessionNotification, WTSQueryUserToken, WTSQuerySessionInformationW, WTSFreeMemory
