Import table
advapi32.dll
RegisterEventSourceW, OpenProcessToken, GetTokenInformation, CopySid, RegCreateKeyExW, DeregisterEventSource, ReportEventW, GetLengthSid, RegCloseKey, RegSetValueExW, FreeSid, CreateProcessAsUserW, ImpersonateLoggedOnUser, RevertToSelf, GetSidIdentifierAuthority, GetSidSubAuthority, GetSidSubAuthorityCount, LookupAccountNameA, RegQueryValueExA, LookupAccountSidA, RegQueryValueExW, RegOpenKeyExA, AllocateAndInitializeSid
kernel32.dll
OutputDebugStringW, ReadFile, WriteFile, PeekNamedPipe, LocalFree, GetFileInformationByHandle, GetFileType, GetDriveTypeA, GetFullPathNameW, FindNextFileW, FindNextFileA, FindClose, FindFirstFileA, CreateDirectoryA, CreateDirectoryW, FindFirstFileW, DeleteFileA, DeleteFileW, MoveFileA, SetStdHandle, SetLastError, GetStdHandle, CreateFileW, MoveFileExW, SetFilePointer, CreateFileA, FormatMessageA, DuplicateHandle, SetHandleInformation, ResetEvent, CreateEventA, SetEvent, WaitForSingleObject, InterlockedExchange, FileTimeToLocalFileTime, GetTimeZoneInformation, FileTimeToSystemTime, Sleep, GetSystemTimeAsFileTime, SystemTimeToFileTime, SystemTimeToTzSpecificLocalTime, InterlockedCompareExchange, InterlockedDecrement, InterlockedIncrement, TlsFree, TlsAlloc, TlsSetValue, TlsGetValue, EnterCriticalSection, DeleteCriticalSection, CreateMutexA, ReleaseMutex, GetFullPathNameA, GetDriveTypeW, GetCurrentDirectoryW, GetCurrentDirectoryA, ExpandEnvironmentStringsA, ExpandEnvironmentStringsW, GetEnvironmentVariableW, GetEnvironmentVariableA, TerminateProcess, GetProcAddress, LoadLibraryA, GetVersionExA, GetCurrentProcessId, UnlockFile, LockFile, UnlockFileEx, LockFileEx, CreateNamedPipeA, CreatePipe, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, DisableThreadLibraryCalls, CloseHandle, GetLastError, GetModuleFileNameW, FormatMessageW, GetProcessHeap, GetModuleHandleW, HeapFree, GetCurrentProcess, HeapAlloc, GetCurrentThreadId, QueryPerformanceCounter, GetTickCount, GetOverlappedResult, CreateProcessW, InitializeCriticalSection, LeaveCriticalSection, GetExitCodeProcess, CreateProcessA, GetHandleInformation
msvcp90.dll
DllMain
msvcr90.dll
DllMain
ws2_32.dll
WSASend