Import table
advapi32.dll
SetTokenInformation, DuplicateTokenEx, OpenProcessToken, CreateProcessAsUserW
kernel32.dll
DeleteCriticalSection, WTSGetActiveConsoleSessionId, InitializeCriticalSection, OpenFileMappingW, OpenMutexW, MapViewOfFile, WaitForSingleObject, ReleaseMutex, Sleep, UnmapViewOfFile, GetLastError, EnterCriticalSection, WriteFile, lstrlenW, LeaveCriticalSection, CreateFileW, WaitNamedPipeW, SetNamedPipeHandleState, GetSystemDirectoryW, GetCurrentProcess, CloseHandle, Process32FirstW, ProcessIdToSessionId, Process32NextW, OpenProcess, TerminateProcess, GetLocaleInfoA, GetStringTypeW, GetStringTypeA, LCMapStringW, WideCharToMultiByte, LCMapStringA, LoadLibraryA, CreateThread, GetProcAddress, GetModuleHandleW, CreateToolhelp32Snapshot, GetCommandLineW, VirtualAlloc, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapFree, GetVersionExA, HeapAlloc, GetProcessHeap, GetStartupInfoW, RaiseException, RtlUnwind, GetModuleHandleA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, GetCurrentThreadId, InterlockedDecrement, HeapSize, ExitProcess, GetCPInfo, GetACP, GetOEMCP, GetStdHandle, GetModuleFileNameA, GetModuleFileNameW, FreeEnvironmentStringsA, MultiByteToWideChar, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCommandLineA, SetHandleCount, GetFileType, GetStartupInfoA, HeapDestroy, HeapCreate, VirtualFree, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, HeapReAlloc
user32.dll
LoadStringW, LoadAcceleratorsW, PostMessageW, DefWindowProcW, PostQuitMessage, EndPaint, BeginPaint, wsprintfW, CreateWindowExW, RegisterClassExW, LoadCursorW, LoadIconW, DispatchMessageW, TranslateMessage, TranslateAcceleratorW, GetMessageW
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock