Import table
advapi32.dll
RegQueryValueExW, LookupAccountSidW, AdjustTokenPrivileges, DuplicateTokenEx, LookupPrivilegeValueW, CloseServiceHandle, OpenSCManagerW, OpenServiceW, StartServiceW, QueryServiceStatus, ControlService, QueryServiceConfigW, EnumServicesStatusExW, RegCreateKeyExW, RegDeleteValueW, RegOpenKeyExW, RegCloseKey, RegSetValueExW, GetUserNameW, OpenProcessToken, GetSidSubAuthority, GetSidSubAuthorityCount, GetTokenInformation
kernel32.dll
GetStartupInfoW, DisconnectNamedPipe, OpenMutexW, CreateEventW, OpenEventW, GetVersionExW, GetModuleFileNameW, LocalAlloc, LocalFree, lstrlenW, ExitProcess, GetFileSize, GetSystemTimeAsFileTime, GetExitCodeProcess, GetFileTime, CreateMutexW, SetFilePointer, SetEndOfFile, GetComputerNameW, IsBadReadPtr, TerminateThread, GetLocalTime, WaitForMultipleObjects, ReleaseMutex, CreateThread, IsBadWritePtr, lstrlenA, GetTickCount, ResetEvent, GetSystemDirectoryW, GetTempPathW, CloseHandle, GetHandleInformation, WideCharToMultiByte, HeapAlloc, HeapFree, GetProcessHeap, OpenProcess, InterlockedExchange, SetLastError, MoveFileW, ProcessIdToSessionId, RemoveDirectoryW, GetVolumeNameForVolumeMountPointW, GetCommandLineW, SetPriorityClass, SetUnhandledExceptionFilter, SetThreadExecutionState, MultiByteToWideChar, SetProcessPriorityBoost, GetPriorityClass, SetThreadPriority, SetThreadPriorityBoost, OpenThread, GetProcessId, GlobalMemoryStatusEx, GetThreadPriority, QueryPerformanceFrequency, SetProcessShutdownParameters, SetProcessAffinityMask, GetProcessPriorityBoost, GetProcessTimes, TerminateProcess, SetProcessWorkingSetSize, GetProcessAffinityMask, SuspendThread, ResumeThread, FindFirstChangeNotificationW, FindCloseChangeNotification, FindNextChangeNotification, GetConsoleCP, QueryPerformanceCounter, GetFileType, SetHandleCount, GetEnvironmentStringsW, FreeEnvironmentStringsW, RtlUnwind, GetConsoleMode, SetConsoleMode, ReadConsoleInputW, GetStringTypeW, LCMapStringW, IsProcessorFeaturePresent, GetCurrentThreadId, TlsFree, TlsSetValue, TlsGetValue, TlsAlloc, IsValidCodePage, GetOEMCP, GetACP, InterlockedIncrement, GetCPInfo, GetStdHandle, HeapCreate, IsDebuggerPresent, UnhandledExceptionFilter, HeapSetInformation, DecodePointer, EncodePointer, RaiseException, HeapSize, HeapReAlloc, HeapDestroy, ReadFile, WriteFile, SetEvent, WaitForSingleObject, CreateProcessW, InterlockedDecrement, LockResource, EnterCriticalSection, LeaveCriticalSection, SizeofResource, Sleep, LoadResource, FindResourceW, FindResourceExW, GetCurrentProcessId, DeleteFileW, GetCurrentDirectoryW, FlushFileBuffers, CreateFileW, GetFileAttributesW, LoadLibraryW, CreateDirectoryW, GetCurrentProcess, FreeLibrary, GetTimeFormatW, OutputDebugStringW, GetDateFormatW, DeleteCriticalSection, GetSystemInfo, GetProcAddress, GetLastError, InitializeCriticalSectionAndSpinCount, GetModuleHandleW, WriteConsoleW, SetStdHandle, GetCurrentThread, VirtualQuery
shell32.dll
ShellExecuteExW, SHCreateDirectoryExW, SHGetSpecialFolderPathW, ShellExecuteW
user32.dll
PostMessageW, wvsprintfW, GetWindowThreadProcessId, FindWindowW, GetLastInputInfo, GetForegroundWindow, LoadStringW, MessageBoxW
wtsapi32.dll
WTSQuerySessionInformationW, WTSFreeMemory