Import table
advapi32.dll
RegQueryValueA, RegCreateKeyExA, RegOpenKeyExA, RegOpenKeyA, StartServiceCtrlDispatcherA, CreateServiceA, ChangeServiceConfig2A, StartServiceA, RegisterServiceCtrlHandlerExA, DuplicateTokenEx, SetTokenInformation, CreateProcessAsUserA, OpenProcessToken, ImpersonateLoggedOnUser, RevertToSelf, OpenSCManagerA, OpenServiceA, ControlService, QueryServiceStatus, DeleteService, CloseServiceHandle, RegQueryValueExA, RegDeleteValueA, SetServiceStatus, LookupPrivilegeValueA, AdjustTokenPrivileges, RegCreateKeyA, RegDeleteKeyA, RegSetValueExA, RegCloseKey, RegEnumKeyA
kernel32.dll
SetLastError, LocalFree, FormatMessageA, GlobalUnlock, GlobalLock, GlobalAlloc, GlobalFree, SetErrorMode, FreeLibrary, lstrcmpA, LoadLibraryA, GetLocaleInfoA, EnumResourceLanguagesA, ConvertDefaultLocale, GetCurrentThreadId, GetCurrentThread, GlobalDeleteAtom, GetCurrentProcessId, LocalAlloc, LeaveCriticalSection, TlsGetValue, EnterCriticalSection, GlobalReAlloc, GlobalHandle, InitializeCriticalSection, TlsAlloc, TlsSetValue, LocalReAlloc, DeleteCriticalSection, TlsFree, GetModuleFileNameW, InterlockedDecrement, InterlockedIncrement, GlobalGetAtomNameA, GetThreadLocale, GetVersionExA, lstrcmpW, GlobalFindAtomA, GlobalAddAtomA, WritePrivateProfileStringA, GlobalFlags, GetCPInfo, GetOEMCP, ReadFile, SetFilePointer, FlushFileBuffers, RaiseException, RtlUnwind, CreateDirectoryA, HeapFree, HeapReAlloc, VirtualAlloc, GetProcessHeap, ExitProcess, HeapSize, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetACP, IsValidCodePage, LCMapStringA, LCMapStringW, VirtualFree, HeapDestroy, HeapCreate, GetStdHandle, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, GetFileType, GetStartupInfoA, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, GetStringTypeA, GetStringTypeW, GetUserDefaultLCID, EnumSystemLocalesA, IsValidLocale, GetConsoleCP, GetConsoleMode, GetLocaleInfoW, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, lstrlenA, CompareStringA, GetVersion, MultiByteToWideChar, InterlockedExchange, GetCommandLineA, FindFirstFileA, CopyFileA, FindNextFileA, FindClose, WideCharToMultiByte, FindResourceA, LoadResource, LockResource, SizeofResource, SetEvent, GetCurrentProcess, SetPriorityClass, CreateEventA, WaitForSingleObject, Sleep, GetModuleFileNameA, WriteFile, GetModuleHandleA, GetProcAddress, WaitNamedPipeA, CreateFileA, CloseHandle, GetLastError, HeapAlloc
shlwapi.dll
PathFindExtensionA, PathFindFileNameA
wtsapi32.dll
WTSQueryUserToken