Import table
advapi32.dll
InitializeSid, LookupPrivilegeValueW, GetTokenInformation, AdjustTokenPrivileges, SystemFunction036, GetSidLengthRequired, GetSidSubAuthority, OpenProcessToken, DuplicateTokenEx, CreateProcessAsUserW, ImpersonateLoggedOnUser, RevertToSelf, LsaNtStatusToWinError, SetTokenInformation, SetSecurityDescriptorDacl, SetSecurityDescriptorOwner, CopySid, IsValidSid, GetLengthSid, AllocateLocallyUniqueId, AllocateAndInitializeSid, FreeSid, GetSecurityDescriptorLength, MakeSelfRelativeSD, InitializeSecurityDescriptor, GetSecurityDescriptorOwner, GetSecurityDescriptorGroup, GetSecurityDescriptorDacl, GetSecurityDescriptorSacl, MakeAbsoluteSD, GetSecurityDescriptorControl, GetAclInformation, InitializeAcl, AddAce, ConvertSidToStringSidW, GetSecurityInfo, SetEntriesInAclW, SetSecurityInfo, CreateWellKnownSid, EqualSid, CheckTokenMembership, ConvertStringSidToSidW
crypt32.dll
CertVerifyCertificateChainPolicy, CertGetCertificateContextProperty, CryptDecodeObject, CryptFindOIDInfo
dnsapi.dll
DnsNameCompare_W
kernel32.dll
GetCurrentProcess, OutputDebugStringW, IsDebuggerPresent, DebugBreak, FatalExit, LoadLibraryW, GetProcAddress, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, InitializeCriticalSection, InterlockedCompareExchange, SetLastError, AssignProcessToJobObject, GetSystemDirectoryW, ResumeThread, TerminateProcess, WaitForMultipleObjects, GetProcessHeap, OpenProcess, LocalFree, LocalAlloc, FreeLibrary, CreateFileW, IsProcessorFeaturePresent, GetFileType, CloseHandle, GetLastError, GetCurrentProcessId, CreateJobObjectW, InterlockedExchange, HeapSize, HeapReAlloc, Sleep, UnhandledExceptionFilter, SetUnhandledExceptionFilter, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetSystemTimeAsFileTime, HeapDestroy, HeapAlloc, HeapSetInformation, GetVersionExW, ProcessIdToSessionId, GetVolumeInformationW, HeapFree
mscoree.dll
DllMain
msvcp80.dll
DllMain
msvcr80.dll
DllMain
ntdll.dll
RtlInitUnicodeString, RtlInitString
rpcrt4.dll
NdrServerCall2, RpcStringFreeW, RpcBindingFree, I_RpcBindingInqLocalClientPID, RpcStringBindingParseW, RpcBindingToStringBindingW, RpcBindingServerFromClient, RpcServerListen, RpcServerRegisterAuthInfoW, RpcServerRegisterIf2, RpcRevertToSelf, RpcImpersonateClient, RpcStringBindingComposeW, RpcBindingFromStringBindingW, RpcBindingSetAuthInfoW, NdrClientCall2, RpcMgmtStopServerListening, RpcServerUseProtseqEpW
secur32.dll
LsaGetLogonSessionData, LsaConnectUntrusted, LsaLookupAuthenticationPackage, LsaFreeReturnBuffer, LsaDeregisterLogonProcess, LsaLogonUser
shell32.dll
SHGetFolderPathW
shlwapi.dll
PathCombineW
user32.dll
MessageBoxW
userenv.dll
UnloadUserProfile, DestroyEnvironmentBlock, CreateEnvironmentBlock, LoadUserProfileW