Import table
advapi32.dll
CreateProcessAsUserW, RegSetValueExW, RegQueryValueExW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, DeregisterEventSource, ReportEventW, RegisterEventSourceW, SetServiceStatus, RegisterServiceCtrlHandlerW, StartServiceCtrlDispatcherW, OpenProcessToken
kernel32.dll
GetModuleFileNameW, SetLastError, OpenProcess, CreateToolhelp32Snapshot, Process32FirstW, DuplicateHandle, GetCurrentProcess, GetModuleHandleW, Process32NextW, WTSGetActiveConsoleSessionId, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, IsDebuggerPresent, GetProcAddress, MultiByteToWideChar, Sleep, CloseHandle, FindResourceExW, FindResourceW, SizeofResource, LockResource, LoadResource, WideCharToMultiByte, GetLastError, GetProcessHeap, TerminateProcess, DecodePointer, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, EncodePointer, LeaveCriticalSection, EnterCriticalSection, RaiseException, InterlockedExchange, InterlockedCompareExchange, HeapSetInformation, GetStartupInfoW, UnhandledExceptionFilter, SetUnhandledExceptionFilter
msvcr100.dll
DllMain
psapi.dll
GetModuleFileNameExW
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock, GetUserProfileDirectoryW
wtsapi32.dll
WTSQueryUserToken