Import table
advapi32.dll
RegQueryValueExA, StartServiceCtrlDispatcherA, RegisterServiceCtrlHandlerA, SetServiceStatus, DeleteService, CreateServiceA, RegCreateKeyA, RegSetValueExA, StartServiceA, DeregisterEventSource, RegisterEventSourceA, ReportEventA, OpenSCManagerA, OpenServiceA, CloseServiceHandle, AllocateAndInitializeSid, SetEntriesInAclA, SetNamedSecurityInfoA, FreeSid, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, CreateProcessAsUserA, GetTokenInformation, LookupPrivilegeValueA, AdjustTokenPrivileges, OpenProcessToken, DuplicateTokenEx, SetTokenInformation, RegOpenKeyExA, RegCloseKey
kernel32.dll
SetStdHandle, SetEnvironmentVariableA, CompareStringW, CompareStringA, InterlockedExchange, InitializeCriticalSection, HeapSize, GetLocaleInfoA, GetStringTypeW, GetStringTypeA, GetConsoleMode, GetConsoleCP, LCMapStringW, LCMapStringA, GetSystemTimeAsFileTime, GetTickCount, QueryPerformanceCounter, GetStartupInfoA, GetFileType, SetHandleCount, LoadLibraryA, GetLocalTime, CreateFileA, GetFileSize, SetFilePointer, GetModuleHandleA, GetThreadLocale, GetProcAddress, GetVersionExA, lstrlenW, MultiByteToWideChar, WideCharToMultiByte, GetModuleFileNameA, GetCurrentThreadId, OutputDebugStringA, CreateThread, InterlockedIncrement, SetEvent, OpenEventA, Sleep, InterlockedDecrement, GetCurrentProcess, LocalFree, CreateNamedPipeA, ConnectNamedPipe, ReadFile, WriteFile, FlushFileBuffers, DisconnectNamedPipe, GetCurrentProcessId, GetLastError, WTSGetActiveConsoleSessionId, OpenProcess, CloseHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetStdHandle, ExitProcess, HeapCreate, HeapDestroy, HeapReAlloc, VirtualAlloc, VirtualFree, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, SetLastError, TlsFree, TlsSetValue, TlsAlloc, TlsGetValue, RtlUnwind, HeapAlloc, HeapFree, RaiseException, GetCommandLineA, GetProcessHeap, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage
ole32.dll
CoSetProxyBlanket, CoCreateInstance, CoInitialize, CoUninitialize
user32.dll
CharLowerBuffA
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
wtsapi32.dll
WTSEnumerateSessionsA, WTSEnumerateProcessesA, WTSFreeMemory
