Import table
advapi32.dll
RegisterServiceCtrlHandlerA, RegOpenKeyExA, RegQueryValueExA, GetTokenInformation, DuplicateTokenEx, SetTokenInformation, OpenProcessToken, LookupPrivilegeValueA, AdjustTokenPrivileges, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, StartServiceCtrlDispatcherA, SetServiceStatus, InitializeSecurityDescriptor, GetSidLengthRequired, InitializeAcl, InitializeSid, GetSidSubAuthority, AddAccessAllowedAce, SetSecurityDescriptorDacl, IsValidSecurityDescriptor, CreateProcessAsUserW, CreateProcessAsUserA
kernel32.dll
SetEvent, InitializeCriticalSection, GetModuleFileNameA, LocalFree, WaitForMultipleObjects, LocalAlloc, CreateThread, GetLastError, GetSystemTimeAsFileTime, DeleteCriticalSection, SystemTimeToFileTime, GetLocalTime, GetPrivateProfileStringA, ReleaseMutex, CreateMutexA, CreateFileA, WriteFile, ReadFile, GetFileSize, InterlockedExchange, WaitForSingleObject, GetLocaleInfoA, GetThreadLocale, GetVersionExA, RaiseException, FreeLibrary, GetProcAddress, LoadLibraryA, WideCharToMultiByte, lstrlenW, SetLastError, GetCurrentProcess, OutputDebugStringA, OpenProcess, GetModuleHandleA, FormatMessageA, GetStringTypeA, TerminateProcess, CreateEventA, CloseHandle, CreateProcessW, CreateProcessA, EnterCriticalSection, LeaveCriticalSection, Sleep, GetStringTypeW, IsBadReadPtr, IsBadCodePtr, VirtualProtect, GetSystemInfo, SetStdHandle, FlushFileBuffers, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, SetEndOfFile, GetACP, RtlUnwind, MultiByteToWideChar, HeapFree, HeapAlloc, GetFileAttributesA, HeapReAlloc, GetStartupInfoA, GetCommandLineA, VirtualQuery, TlsAlloc, GetCurrentThreadId, TlsFree, TlsSetValue, TlsGetValue, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, IsBadWritePtr, GetOEMCP, GetCPInfo, ExitProcess, HeapSize, LCMapStringA, LCMapStringW, SetUnhandledExceptionFilter, SetHandleCount, GetStdHandle, GetFileType, SetFilePointer, UnhandledExceptionFilter, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW
rpcrt4.dll
NdrClientCall2, RpcBindingFromStringBindingA, RpcStringBindingComposeA, RpcBindingFree, RpcStringFreeA, UuidCreate, RpcServerUnregisterIf, RpcServerListen, RpcServerRegisterIf, NdrServerCall2, RpcMgmtIsServerListening, RpcMgmtStopServerListening, RpcServerUseProtseqEpA
user32.dll
PostQuitMessage
userenv.dll
CreateEnvironmentBlock, DestroyEnvironmentBlock