Import table
advapi32.dll
OpenSCManagerA, RegCreateKeyExA, OpenThreadToken, OpenProcessToken, LookupPrivilegeValueA, AdjustTokenPrivileges, StartServiceCtrlDispatcherA, RegisterServiceCtrlHandlerA, StartServiceA, RegDeleteValueA, OpenServiceA, ControlService, QueryServiceStatus, DeleteService, CreateServiceA, CloseServiceHandle, ChangeServiceConfig2A, RegDeleteKeyA, RegCreateKeyA, RegSetValueExA, RegCloseKey, RegOpenKeyExA, RegQueryValueExA, RegisterEventSourceA, ReportEventA, DeregisterEventSource, SetServiceStatus, GetUserNameA, LookupAccountNameA, IsValidSid, GetLengthSid, CopySid, LsaStorePrivateData, LsaOpenPolicy, LsaAddAccountRights, LsaClose, RegCreateKeyExW, LookupPrivilegeValueW, StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerW, RegDeleteKeyW, RegOpenKeyExW, RegQueryValueExW, StartServiceW, RegDeleteValueW, OpenServiceW, RegCreateKeyW, RegSetValueExW, OpenSCManagerW, CreateServiceW, ChangeServiceConfig2W, RegisterEventSourceW, ReportEventW, GetUserNameW, LookupAccountNameW
kernel32.dll
CreateEventA, GetCurrentThreadId, GetTickCount, WaitForMultipleObjects, ExitProcess, GetSystemTimeAsFileTime, GetVersionExA, GetLastError, OutputDebugStringA, CreateToolhelp32Snapshot, Process32First, Process32Next, ProcessIdToSessionId, lstrcpyA, GetCurrentProcessId, WaitForSingleObject, OpenProcess, GetCurrentThread, GetCurrentProcess, CloseHandle, TerminateProcess, SetErrorMode, CreateProcessA, SetEvent, SetConsoleCtrlHandler, GetModuleHandleA, LocalFree, GetProcAddress, Sleep, GetModuleFileNameA, AllocConsole, GetStdHandle, GlobalAlloc, GlobalFree, FormatMessageA, QueryPerformanceCounter, SetStdHandle, LoadLibraryA, GetOEMCP, GetACP, GetStringTypeW, GetStringTypeA, GetCPInfo, HeapReAlloc, IsBadWritePtr, GetFileType, HeapFree, HeapAlloc, RtlUnwind, GetCommandLineA, GetVersion, FreeEnvironmentStringsW, SetHandleCount, GetStartupInfoA, GetEnvironmentVariableA, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, WriteFile, FlushFileBuffers, UnhandledExceptionFilter, FreeEnvironmentStringsA, SetFilePointer, WideCharToMultiByte, GetEnvironmentStrings, GetEnvironmentStringsW, LCMapStringA, IsBadReadPtr, MultiByteToWideChar, SetUnhandledExceptionFilter, LCMapStringW, IsBadCodePtr, IsDebuggerPresent, InterlockedCompareExchange, InterlockedExchange, lstrlenA, lstrcatA, Process32FirstW, Process32NextW, lstrlenW, CreateEventW, OutputDebugStringW, CreateProcessW, lstrcpyW, GetModuleHandleW, GetModuleFileNameW, FormatMessageW, GetVersionExW
msvcr71.dll
DllMain
msvcr80.dll
DllMain
msvcr90.dll
DllMain
user32.dll
RegisterWindowMessageA, BroadcastSystemMessageA, RegisterClassA, CreateWindowExA, DefWindowProcA, DestroyWindow, BroadcastSystemMessageW, RegisterClassW, CreateWindowExW, DefWindowProcW, RegisterWindowMessageW
wtsapi32.dll
WTSEnumerateSessionsA, WTSFreeMemory