Import table
advapi32.dll
DuplicateTokenEx, ConvertStringSidToSidW, SetTokenInformation, CreateProcessAsUserW, OpenProcessToken, GetLengthSid
kernel32.dll
InterlockedDecrement, WaitForSingleObject, SetEvent, WaitForSingleObjectEx, InterlockedExchange, ResetEvent, CreateEventW, InterlockedIncrement, CreateThread, SetLastError, CompareStringW, CompareStringA, CreateFileA, GetTimeZoneInformation, SetStdHandle, LocalFree, CloseHandle, GetModuleFileNameW, Sleep, GetCurrentProcess, ResumeThread, CreateProcessW, SetFilePointer, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, GetLocaleInfoW, IsValidLocale, EnumSystemLocalesA, GetLocaleInfoA, GetUserDefaultLCID, GetDateFormatA, GetTimeFormatA, GetStringTypeW, GetStringTypeA, LCMapStringW, GetLastError, HeapFree, HeapAlloc, GetCurrentThreadId, GetCommandLineA, RaiseException, RtlUnwind, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, EnterCriticalSection, LeaveCriticalSection, HeapCreate, HeapDestroy, VirtualFree, DeleteCriticalSection, FatalAppExitA, VirtualAlloc, HeapReAlloc, GetModuleHandleW, GetProcAddress, ExitProcess, WriteFile, GetStdHandle, GetModuleFileNameA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, GetCurrentThread, SetHandleCount, GetFileType, GetStartupInfoA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, HeapSize, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, MultiByteToWideChar, InitializeCriticalSectionAndSpinCount, SetConsoleCtrlHandler, FreeLibrary, LoadLibraryA, GetConsoleCP, GetConsoleMode, FlushFileBuffers, LCMapStringA, SetEnvironmentVariableA
rpcrt4.dll
NdrServerCall2, NdrClientCall2, RpcStringFreeW, RpcStringBindingComposeW, RpcServerUseProtseqEpW, RpcServerUnregisterIf, RpcMgmtSetAuthorizationFn, RpcMgmtStopServerListening, RpcServerListen, RpcServerRegisterIfEx, RpcMgmtIsServerListening, RpcBindingFree, RpcBindingFromStringBindingW
user32.dll
PeekMessageW, DispatchMessageW, WaitForInputIdle, TranslateMessage