Import table
advapi32.dll
ConvertStringSecurityDescriptorToSecurityDescriptorW, RegEnumValueW, ControlService, SetServiceStatus, QueryServiceStatus, DuplicateTokenEx, SetTokenInformation, RegQueryInfoKeyW, RegisterServiceCtrlHandlerExW, OpenServiceW, StartServiceCtrlDispatcherW, OpenSCManagerW, DeleteService, OpenProcessToken, CloseServiceHandle, CreateServiceW, RegSetValueExW, RegEnumKeyExW, RegGetValueW, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RegCreateKeyExW, RegCloseKey, RegOpenKeyExW, RegDeleteValueW, RegDeleteKeyW, CreateProcessAsUserW, RegQueryValueExW
kernel32.dll
InterlockedDecrement, ConnectNamedPipe, CreateNamedPipeW, WriteFile, ReadFile, CreateFileW, DisconnectNamedPipe, FlushFileBuffers, ResumeThread, CreateThread, GetCommandLineW, CreateMutexW, FindResourceW, FreeLibrary, LoadResource, LoadLibraryExW, GetCurrentProcess, QueryPerformanceCounter, WaitForSingleObject, InterlockedCompareExchange, SetEvent, OutputDebugStringW, GetModuleHandleW, GetSystemTimeAsFileTime, InitializeCriticalSection, GetProcessTimes, WideCharToMultiByte, LoadLibraryW, InitializeCriticalSectionAndSpinCount, Sleep, SizeofResource, CreateEventA, LeaveCriticalSection, InterlockedIncrement, GetLastError, MultiByteToWideChar, lstrlenW, RaiseException, InterlockedExchange, GetFileSizeEx, SetLastError, GetProcAddress, EnterCriticalSection, InterlockedExchangeAdd, CreateEventW, WaitForMultipleObjects, OpenEventW, QueryPerformanceFrequency, DeleteCriticalSection, GetCurrentThreadId, ReleaseMutex, LocalFree, ExpandEnvironmentStringsW, GetTickCount, CreateSemaphoreA, ReleaseSemaphore, DuplicateHandle, DeviceIoControl, GetLocaleInfoW, CloseHandle, lstrcmpiW, TerminateProcess, WTSGetActiveConsoleSessionId, GetSystemDirectoryW, GetFileAttributesW, RemoveDirectoryW, DeleteFileW, CreateDirectoryW, MoveFileW, FormatMessageA, GetModuleFileNameW, CreateWaitableTimerA, SetWaitableTimer, SystemTimeToFileTime, ResetEvent, OpenEventA, GetProcessHeap, SetEnvironmentVariableA, CompareStringW, WriteConsoleW, SetStdHandle, IsValidLocale, EnumSystemLocalesA, GetLocaleInfoA, GetUserDefaultLCID, GetConsoleMode, GetConsoleCP, SetFilePointer, RtlUnwind, GetCurrentProcessId, GetFileType, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetModuleFileNameA, GetStringTypeW, HeapReAlloc, LocalAlloc, LoadLibraryA, HeapFree, HeapAlloc, EncodePointer, DecodePointer, GetTimeFormatA, GetDateFormatA, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, GetCommandLineA, HeapSetInformation, GetStartupInfoW, HeapCreate, ExitProcess, GetStdHandle, IsProcessorFeaturePresent, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, HeapSize, LCMapStringW, GetTimeZoneInformation
ole32.dll
CoResumeClassObjects, CoRegisterClassObject, CoInitializeEx, CoInitializeSecurity, CoCreateInstance, CoTaskMemRealloc, StringFromGUID2, CoTaskMemFree, CoTaskMemAlloc, CoRevokeClassObject, StringFromCLSID, CoCreateInstanceEx, CoAddRefServerProcess
rpcrt4.dll
UuidToStringW, RpcStringFreeW
setupapi.dll
CM_Get_DevNode_Status, SetupDiGetDeviceInstanceIdW, SetupDiGetDeviceRegistryPropertyW, SetupDiGetClassDevsW, SetupDiEnumDeviceInfo, SetupDiDestroyDeviceInfoList, SetupDiOpenDevRegKey
shlwapi.dll
PathAppendW, PathFileExistsW, SHDeleteValueW, SHSetValueW, StrStrIW, PathAddBackslashW, PathFindFileNameW
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
wtsapi32.dll
WTSQueryUserToken