Import table
advapi32.dll
StartServiceCtrlDispatcherA, RegisterServiceCtrlHandlerA, SetServiceStatus, DeleteService, CreateServiceA, RegCreateKeyA, RegSetValueExA, DeregisterEventSource, RegisterEventSourceA, ReportEventA, OpenSCManagerA, OpenServiceA, CloseServiceHandle, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, CreateProcessAsUserA, GetTokenInformation, LookupPrivilegeValueA, AdjustTokenPrivileges, OpenProcessToken, DuplicateTokenEx, SetTokenInformation, RegOpenKeyExA, RegQueryValueExA, RegCloseKey, RegQueryInfoKeyA, RegEnumKeyA, SetNamedSecurityInfoA, AllocateAndInitializeSid, FreeSid, RegCreateKeyExA
kernel32.dll
SetStdHandle, SetEnvironmentVariableA, CompareStringW, CompareStringA, InterlockedExchange, InitializeCriticalSection, HeapSize, GetLocaleInfoA, GetStringTypeW, GetStringTypeA, GetConsoleMode, GetConsoleCP, LCMapStringW, LCMapStringA, GetSystemTimeAsFileTime, GetTickCount, QueryPerformanceCounter, GetStartupInfoA, GetFileType, SetHandleCount, LoadLibraryA, GetCurrentProcess, GetLocalTime, CreateFileA, GetFileSize, SetFilePointer, GetThreadLocale, GetModuleHandleA, GetProcAddress, GetVersionExA, lstrlenW, MultiByteToWideChar, WideCharToMultiByte, GetModuleFileNameA, GetCurrentThreadId, OutputDebugStringA, CreateThread, SetEvent, OpenEventA, Sleep, CreateNamedPipeA, ConnectNamedPipe, ReadFile, WriteFile, FlushFileBuffers, DisconnectNamedPipe, GetCurrentProcessId, GetLastError, WTSGetActiveConsoleSessionId, OpenProcess, CloseHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetStdHandle, ExitProcess, HeapCreate, HeapDestroy, HeapReAlloc, VirtualAlloc, VirtualFree, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, SetLastError, RtlUnwind, HeapAlloc, HeapFree, RaiseException, GetCommandLineA, GetProcessHeap, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, IsBadWritePtr, IsBadReadPtr, VirtualQuery, GetSystemInfo, VirtualProtect, IsBadCodePtr, WaitForSingleObject
ole32.dll
CoSetProxyBlanket, CoCreateInstance, CoInitialize, CoUninitialize
user32.dll
CharLowerBuffA, wsprintfA
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
wtsapi32.dll
WTSEnumerateSessionsA, WTSEnumerateProcessesA, WTSFreeMemory
