This will only search Windows System directory for the DLL if name is a base name (like "advapi32.dll"), which prevents DLL preloading attacks. To get access to NewLazySystemDLL imports of syscall needs to be swapped with golang.org/x/sys/windows.