Import table
advapi32.dll
CheckTokenMembership, AllocateAndInitializeSid, CreateProcessAsUserW, DuplicateTokenEx, AdjustTokenPrivileges, LookupPrivilegeValueW, OpenProcessToken, FreeSid
kernel32.dll
GetProcAddress, FreeLibrary, LoadLibraryW, QueryDosDeviceW, UnmapViewOfFile, MapViewOfFile, CreateFileMappingW, CreateFileW, CloseHandle, GetLastError, GetCurrentProcess, GetStringTypeW, LCMapStringW, ReadFile, GetProcessHeap, SetEndOfFile, SetStdHandle, EncodePointer, DecodePointer, GetCurrentThreadId, GetCommandLineA, RaiseException, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapAlloc, HeapFree, IsProcessorFeaturePresent, Sleep, HeapSize, GetModuleHandleW, ExitProcess, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSectionAndSpinCount, RtlUnwind, WriteFile, WideCharToMultiByte, GetConsoleCP, GetConsoleMode, FlushFileBuffers, DeleteCriticalSection, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, InterlockedDecrement, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoW, GetModuleFileNameA, FreeEnvironmentStringsW, GetEnvironmentStringsW, HeapCreate, HeapDestroy, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, GetModuleFileNameW, HeapReAlloc, CreateFileA, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, MultiByteToWideChar, WriteConsoleW, SetFilePointer
user32.dll
wsprintfW
userenv.dll
CreateEnvironmentBlock, DestroyEnvironmentBlock
wtsapi32.dll
WTSFreeMemory, WTSQueryUserToken, WTSEnumerateSessionsW
Export table
DllExport_GetLoggedOnUserToken
DllExport_GetSymLink
DllExport_Is64bitProcessor
DllExport_IsExportExistsInFile
DllExport_IsLoggedOnUserAdmin
DllExport_ParseSmbiosData
DllExport_QueryDosDevice
DllExport_RunProcessAsLoggedOnUser