Import table
advapi32.dll
StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerExW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, SetServiceStatus, CreateProcessAsUserW, DuplicateTokenEx, OpenSCManagerW, CreateServiceW, OpenServiceW, ChangeServiceConfigW, ChangeServiceConfig2W, CloseServiceHandle, DeleteService, StartServiceW, QueryServiceStatus, ControlService, GetTokenInformation, OpenProcessToken
kernel32.dll
SetFilePointer, InterlockedCompareExchange, MultiByteToWideChar, GetLastError, LoadResource, LockResource, SizeofResource, FindResourceW, FindResourceExW, CloseHandle, CreateFileW, GetConsoleCP, WaitForSingleObject, GetModuleFileNameW, GetFileSize, ReadFile, SetLastError, CreateEventW, OutputDebugStringW, Sleep, GetVersionExW, GetProcAddress, GetModuleHandleW, OpenProcess, CreateToolhelp32Snapshot, Process32FirstW, Process32NextW, WTSGetActiveConsoleSessionId, RaiseException, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, GetConsoleMode, SetStdHandle, WriteConsoleW, SetEvent, ExitThread, GetCurrentThreadId, CreateThread, EncodePointer, DecodePointer, GetCommandLineW, HeapSetInformation, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, ExitProcess, IsProcessorFeaturePresent, WideCharToMultiByte, LCMapStringW, WriteFile, GetStdHandle, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, GetFileType, GetStartupInfoW, HeapCreate, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, GetStringTypeW, RtlUnwind, LoadLibraryW, FlushFileBuffers, CreateNamedPipeW, ConnectNamedPipe, ResetEvent, DisconnectNamedPipe
shell32.dll
SHGetFolderPathW
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
wtsapi32.dll
WTSQueryUserToken