Import table
advapi32.dll
EqualSid, OpenServiceW, OpenSCManagerW, DeregisterEventSource, ReportEventW, RegisterEventSourceW, SetServiceStatus, RegDeleteValueW, RegCloseKey, DuplicateTokenEx, CreateProcessAsUserW, GetTokenInformation, AllocateAndInitializeSid, FreeSid, ChangeServiceConfig2W, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerW, ControlService, DeleteService, CreateServiceW, RegSetValueExW, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, CloseServiceHandle
kernel32.dll
GetStartupInfoW, InterlockedCompareExchange, InterlockedExchange, GetProcessHeap, TerminateProcess, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, CreateProcessW, WTSGetActiveConsoleSessionId, GlobalAlloc, GlobalFree, GetCommandLineW, SetEvent, InterlockedDecrement, InterlockedIncrement, GetCurrentThreadId, CreateEventW, CreateThread, Sleep, GetLastError, lstrlenW, WaitForSingleObject, CloseHandle, InitializeCriticalSection, GetModuleHandleW, GetProcAddress, GetSystemTimeAsFileTime, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, RaiseException, GetModuleFileNameW, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, HeapSize
msvcr90.dll
DllMain
ole32.dll
CoCreateInstance, CoInitialize, CoUninitialize, CoInitializeSecurity
shlwapi.dll
PathFileExistsW
user32.dll
CharNextW, OpenDesktopW, CloseDesktop, MessageBoxW, CharUpperW, PostThreadMessageW, GetMessageW, DispatchMessageW, TranslateMessage, LoadStringW
userenv.dll
CreateEnvironmentBlock
wtsapi32.dll
WTSQueryUserToken