Import table
advapi32.dll
DeleteService, DuplicateTokenEx, LookupPrivilegeValueW, GetTokenInformation, OpenProcessToken, SetServiceStatus, DeregisterEventSource, ReportEventW, RegisterEventSourceW, RegisterServiceCtrlHandlerW, StartServiceCtrlDispatcherW, CloseServiceHandle, StartServiceW, ControlService, QueryServiceStatus, CreateProcessAsUserW, CreateServiceW, OpenSCManagerW, OpenServiceW
kernel32.dll
GetTickCount, QueryPerformanceCounter, DecodePointer, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, InterlockedExchange, InterlockedCompareExchange, HeapSetInformation, GetModuleFileNameW, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, Sleep, EncodePointer, WTSGetActiveConsoleSessionId, OpenProcess, CreateToolhelp32Snapshot, OutputDebugStringW, Process32FirstW, ProcessIdToSessionId, Process32NextW, OutputDebugStringA, CreateMutexW, CloseHandle, GetLastError
msvcr100.dll
DllMain
shlwapi.dll
PathAddExtensionW, PathRemoveFileSpecW
user32.dll
KillTimer, SetTimer, wsprintfW
userenv.dll
CreateEnvironmentBlock, DestroyEnvironmentBlock
wtsapi32.dll
WTSQueryUserToken