Import table
advapi32.dll
DuplicateTokenEx, AdjustTokenPrivileges, LookupPrivilegeValueW, OpenProcessToken, CreateProcessAsUserW
kernel32.dll
UnmapViewOfFile, QueryDosDeviceW, LoadLibraryW, MapViewOfFile, FreeLibrary, CreateFileMappingW, CreateFileW, CloseHandle, GetLastError, GetProcAddress, GetCurrentProcess, GetStringTypeW, MultiByteToWideChar, LCMapStringW, IsValidCodePage, GetOEMCP, GetACP, EncodePointer, DecodePointer, GetCurrentThreadId, GetCommandLineA, RaiseException, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapAlloc, HeapFree, IsProcessorFeaturePresent, Sleep, HeapSize, GetModuleHandleW, ExitProcess, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, InterlockedDecrement, SetHandleCount, GetStdHandle, InitializeCriticalSectionAndSpinCount, GetFileType, GetStartupInfoW, DeleteCriticalSection, GetModuleFileNameA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, HeapCreate, HeapDestroy, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, WriteFile, GetModuleFileNameW, LeaveCriticalSection, EnterCriticalSection, RtlUnwind, HeapReAlloc, GetCPInfo
user32.dll
wsprintfW
userenv.dll
CreateEnvironmentBlock, DestroyEnvironmentBlock
wtsapi32.dll
WTSFreeMemory, WTSQueryUserToken, WTSEnumerateSessionsW
Export table
DllExport_GetLoggedOnUserToken
DllExport_GetSymLink
DllExport_Is64bitProcessor
DllExport_IsExportExistsInFile
DllExport_ParseSmbiosData
DllExport_QueryDosDevice
DllExport_RunProcessAsLoggedOnUser