Import table
advapi32.dll
IsValidSid, LookupAccountSidW, GetTokenInformation, RegSetValueExW, RegCloseKey, ControlService, StartServiceW, RegCreateKeyExW, CloseServiceHandle, DeleteService, OpenSCManagerW, StartServiceCtrlDispatcherW, OpenServiceW, RegisterServiceCtrlHandlerExW, ChangeServiceConfig2W, SetServiceStatus, RegQueryValueExW, RegOpenKeyExW, GetSidSubAuthority, OpenThreadToken, GetSidSubAuthorityCount, CreateServiceW
kernel32.dll
EncodePointer, GetCurrentProcess, GetCurrentThread, GetProcessAffinityMask, SetThreadAffinityMask, InterlockedIncrement, InterlockedDecrement, WaitForSingleObject, SetEvent, InitializeCriticalSection, OpenProcess, LeaveCriticalSection, EnterCriticalSection, ResetEvent, CreateEventW, WaitForMultipleObjects, DeleteCriticalSection, CloseHandle, CreateThread, GetFullPathNameW, GetVersionExW, DecodePointer, GetLastError, GetCurrentDirectoryW, GetConsoleScreenBufferInfo, SetConsoleCtrlHandler, SetCurrentDirectoryW, GetTickCount64, IsValidLocaleName, GetFileMUIPath, GetThreadPreferredUILanguages, SetThreadPreferredUILanguages, SetUnhandledExceptionFilter, LoadLibraryW, GetModuleFileNameW, CreateFileW, GetTempPathW, GetProcAddress, ProcessIdToSessionId, GetCurrentThreadId, GetCurrentProcessId, FindFirstFileW, FreeLibrary, QueryPerformanceCounter, FindClose, FindNextFileW, QueryPerformanceFrequency, DeleteFileW, LocalFree, HeapAlloc, HeapFree, GetProcessHeap, VerSetConditionMask, VerifyVersionInfoW, WTSGetActiveConsoleSessionId, InterlockedExchange, Sleep, InterlockedCompareExchange, HeapSetInformation, TerminateProcess, UnhandledExceptionFilter, IsDebuggerPresent, GetTickCount, GetSystemTimeAsFileTime, MultiByteToWideChar, lstrlenA, WideCharToMultiByte, GetStdHandle
msvcp100.dll
DllMain
msvcr100.dll
DllMain
ole32.dll
CLSIDFromString, CoCreateInstance, CoSetProxyBlanket, CoUninitialize, CoInitializeEx, StringFromGUID2, CoInitialize, OleRun, CoCreateGuid, CoTaskMemFree
powrprof.dll
PowerDeleteScheme, PowerReadDescription, PowerReadFriendlyName, PowerEnumerate, PowerWriteACValueIndex, PowerWriteFriendlyName
rpcrt4.dll
RpcRevertToSelf, RpcServerUseProtseqEpW, RpcServerRegisterAuthInfoW, RpcImpersonateClient, RpcMgmtStopServerListening, NdrServerCall2, RpcServerListen, NdrClientCall2, RpcMgmtWaitServerListen, RpcServerRegisterIf
shell32.dll
SHCreateDirectoryExW, SHGetKnownFolderPath
user32.dll
LoadStringW, UnregisterDeviceNotification, DispatchMessageW, DefWindowProcW, UnregisterPowerSettingNotification, SendMessageW, GetMessageW, UnregisterClassW, TranslateMessage, RegisterClassExW, CreateWindowExW, RegisterPowerSettingNotification
version.dll
VerQueryValueW, GetFileVersionInfoSizeW, GetFileVersionInfoW
wtsapi32.dll
WTSFreeMemory, WTSEnumerateSessionsW, WTSUnRegisterSessionNotification, WTSRegisterSessionNotification
