Import table
advapi32.dll
CreateProcessAsUserW, DuplicateTokenEx, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, OpenProcessToken, GetUserNameW, ConvertStringSecurityDescriptorToSecurityDescriptorW
kernel32.dll
IsBadWritePtr, GetModuleFileNameW, GetSystemDefaultUILanguage, GetFileAttributesW, CreateFileW, LocalAlloc, HeapAlloc, GetProcessHeap, GetUserDefaultUILanguage, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, QueryPerformanceCounter, RtlUnwind, InterlockedCompareExchange, InterlockedExchange, SetThreadPriority, lstrcpyW, LoadLibraryW, GetSystemDefaultLangID, MultiByteToWideChar, GetComputerNameW, GlobalAlloc, lstrcmpiW, GetCurrentThreadId, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, lstrcatW, CreateMutexW, WaitForMultipleObjects, FreeLibrary, OpenProcess, CreateProcessW, lstrcmpW, CreateThread, ReleaseMutex, WaitForSingleObject, GetLastError, GetTickCount, Sleep, GlobalFree, GetVersionExW, lstrcpynA, lstrlenA, lstrcmpA, lstrlenW, GetProcAddress, SetLastError, lstrcpynW, LeaveCriticalSection, EnterCriticalSection, WideCharToMultiByte, CloseHandle, LocalFree, CreateNamedPipeW, CreateEventW, SetEvent, CancelIo, ConnectNamedPipe, ResetEvent, DisconnectNamedPipe, GetOverlappedResult, ReadFile
msvcrt.dll
DllMain
psapi.dll
GetModuleBaseNameW, EnumProcessModules, EnumProcesses
spoolss.dll
GetPrinterDataW, SetJobW, GetJobW, OpenPrinterW, ClosePrinter, GetPrinterW, GetPrinterDriverDirectoryW, GetPrinterDriverW, RevertToPrinterSelf, ImpersonatePrinterClient, SetPortW
user32.dll
CharLowerW, LoadStringW, CharUpperBuffA, CharLowerBuffW, wsprintfW
Export table
DllMain
InitializePrintMonitor2