Import table
advapi32.dll
SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, InitializeAcl, AddAccessAllowedAce, SetSecurityDescriptorDacl, SetFileSecurityW, GetTokenInformation, LookupPrivilegeValueW, AdjustTokenPrivileges, GetLengthSid, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerExW, DuplicateTokenEx, OpenProcessToken, SetTokenInformation, CreateProcessAsUserW, SetServiceStatus, RegQueryValueExW, RegOpenKeyExW, RegCloseKey, RegDeleteValueW, ControlService, DeleteService, CreateServiceW, OpenSCManagerW, OpenServiceW, CloseServiceHandle, InitializeSecurityDescriptor
kernel32.dll
RemoveDirectoryW, GetCurrentProcess, Sleep, OpenEventW, OpenProcess, InterlockedDecrement, WaitForSingleObject, HeapFree, GetProcessHeap, FindFirstFileW, HeapAlloc, lstrlenA, CreateEventW, lstrcmpiW, GetCommandLineW, GetStringTypeW, GetStringTypeA, DeleteFileW, FindNextFileW, FindClose, WTSGetActiveConsoleSessionId, SetEvent, WaitForMultipleObjects, FormatMessageW, LocalAlloc, GetLocalTime, CreateFileW, SetFilePointer, WriteFile, CloseHandle, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, GetLastError, GetModuleFileNameW, lstrcatW, LocalFree, RaiseException, lstrlenW, MultiByteToWideChar, InterlockedIncrement, LCMapStringW, LCMapStringA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, IsValidCodePage, GetOEMCP, FlushFileBuffers, CreateFileA, InterlockedExchange, GetACP, GetLocaleInfoA, GetThreadLocale, GetVersionExA, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection, HeapDestroy, HeapReAlloc, HeapSize, RtlUnwind, ExitThread, GetCurrentThreadId, CreateThread, GetProcAddress, GetModuleHandleA, ExitProcess, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapCreate, VirtualFree, VirtualAlloc, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, GetStdHandle, GetModuleFileNameA, LoadLibraryA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineA, SetHandleCount, GetFileType, GetStartupInfoA, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, WideCharToMultiByte, GetConsoleCP, GetConsoleMode, GetCPInfo
ole32.dll
StringFromGUID2
shell32.dll
CommandLineToArgvW
user32.dll
MessageBoxW, wsprintfW, UnregisterClassA
userenv.dll
CreateEnvironmentBlock, DestroyEnvironmentBlock
wtsapi32.dll
WTSFreeMemory, WTSQuerySessionInformationW, WTSEnumerateSessionsW, WTSQueryUserToken