Import table
advapi32.dll
StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerExW, StartServiceW, QueryServiceStatus, OpenSCManagerW, OpenServiceW, ChangeServiceConfig2W, CloseServiceHandle, ControlService, QueryServiceLockStatusW, SetServiceStatus, UnlockServiceDatabase, LockServiceDatabase
kernel32.dll
GetLastError, GetSystemPowerStatus, SetCurrentDirectoryW, GetModuleFileNameW, QueryPerformanceCounter, IsDebuggerPresent, UnhandledExceptionFilter, TerminateProcess, GetVolumeInformationW, FindVolumeClose, FindNextVolumeW, FindFirstVolumeW, GetDiskFreeSpaceExW, GetLogicalDrives, QueryDosDeviceW, GetDriveTypeW, CreateProcessW, SetUnhandledExceptionFilter, SetEvent, CreateEventW, WaitForSingleObject, GetTempPathW, GetFileAttributesW, CreateFileW, Sleep, GetSystemTimeAsFileTime, GetTickCount, LoadLibraryW, FreeLibrary, GetProcAddress, InterlockedExchange, InterlockedIncrement, InterlockedDecrement, InterlockedCompareExchange, SetLastError, ReleaseMutex, CreateMutexW, GetCurrentProcess, GetSystemDefaultLCID, WideCharToMultiByte, CompareStringW, GetACP, LocalFree, LocalAlloc, CloseHandle, GetWindowsDirectoryW, GetCurrentProcessId, GetSystemDirectoryW, GetSystemInfo, GetComputerNameW, GetVersionExW, GetModuleHandleW, LoadLibraryA, GetCurrentThreadId, DeviceIoControl, WaitForMultipleObjects, CreateEventA, CreateProcessA, MultiByteToWideChar
msvcr80.dll
DllMain
msvcr90.dll
DllMain
ntdll.dll
ZwSetEvent, ZwCreateEvent, ZwOpenSymbolicLinkObject, ZwQuerySymbolicLinkObject, ZwDelayExecution, ZwTerminateProcess, ZwWaitForSingleObject, RtlInitUnicodeString, ZwQueryVirtualMemory, ZwQueryInformationProcess, RtlAllocateHeap, RtlReAllocateHeap, RtlFreeHeap, ZwOpenKey, ZwQueryKey, RtlOpenCurrentUser, ZwClose, RtlNtStatusToDosError, ZwQueryValueKey, ZwCreateKey, memmove, memset, memcpy, ZwReleaseMutant
user32.dll
UnregisterDeviceNotification, RegisterDeviceNotificationW, MessageBoxW
