Import table
advapi32.dll
RegCreateKeyExA, RegSetKeySecurity, RegDeleteKeyA, FreeSid, ConvertStringSidToSidA, AllocateAndInitializeSid, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, CloseServiceHandle, OpenSCManagerA, OpenServiceA, StartServiceA, ControlService, CreateServiceA, RegOpenKeyExA, RegQueryValueExA, RegCloseKey, RegDeleteValueA, RegSetValueExA, ChangeServiceConfigA, DeleteService
kernel32.dll
ReadFile, lstrlenW, WideCharToMultiByte, SetEvent, WaitForMultipleObjects, CancelIo, GetOverlappedResult, CreateEventA, WaitForSingleObject, ResetEvent, lstrlenA, CreateFileA, GetCurrentProcessId, LoadLibraryA, GetProcAddress, FreeLibrary, GetVersionExA, DeviceIoControl, CloseHandle, lstrcpynA, GetFileSize, CreateFileW, WriteFile, LocalFree, GetShortPathNameA, GetTempFileNameA, MultiByteToWideChar, GetTickCount, GetCurrentProcess, GetSystemInfo, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, InterlockedDecrement, OpenProcess, Process32Next, Process32First, CreateToolhelp32Snapshot, GetModuleFileNameA, GetLongPathNameA, QueryPerformanceCounter, OpenFile, AreFileApisANSI, SetLastError, GetFullPathNameA, GetFileAttributesA, GetCurrentThreadId, ReleaseMutex, CreateMutexA, VirtualQuery, GetCurrentDirectoryA, GetCurrentDirectoryW, InterlockedIncrement, InterlockedExchange, EncodePointer, DecodePointer, HeapFree, RaiseException, RtlUnwind, ExitThread, GetCommandLineA, GetSystemTimeAsFileTime, HeapAlloc, LCMapStringW, GetCPInfo, IsProcessorFeaturePresent, HeapCreate, HeapDestroy, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, GetModuleHandleW, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetStdHandle, GetModuleFileNameW, GetLocaleInfoW, HeapSize, ExitProcess, HeapReAlloc, SetHandleCount, InitializeCriticalSectionAndSpinCount, GetFileType, GetStartupInfoW, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetACP, GetOEMCP, IsValidCodePage, GetStringTypeW, GetUserDefaultLCID, GetLocaleInfoA, EnumSystemLocalesA, IsValidLocale, SetFilePointer, GetConsoleCP, GetConsoleMode, LoadLibraryW, CompareStringW, SetEnvironmentVariableA, SetStdHandle, WriteConsoleW, FlushFileBuffers, CreateThread, Sleep, DisableThreadLibraryCalls, DeleteFileA, CopyFileA, GetTempPathA, GetPrivateProfileStringA, WritePrivateProfileStringA, FindResourceA, GetLastError, SizeofResource, GetModuleHandleA
shell32.dll
SHGetPathFromIDListA, SHGetDesktopFolder, SHGetMalloc
user32.dll
CallNextHookEx, PostMessageA, LoadStringA, SetWindowsHookExA, UnhookWindowsHookEx