Import table
advapi32.dll
RevertToSelf, ImpersonateNamedPipeClient
kernel32.dll
GetModuleHandleA, DeleteFileW, QueryPerformanceCounter, IsDebuggerPresent, UnhandledExceptionFilter, TerminateProcess, GetStartupInfoW, DuplicateHandle, CreateProcessW, SetUnhandledExceptionFilter, UnlockFileEx, UnmapViewOfFile, MapViewOfFile, CreateFileMappingW, GetFileSize, LockFileEx, CancelIo, GetOverlappedResult, SetEndOfFile, SetFilePointer, WideCharToMultiByte, GetSystemDefaultLCID, MultiByteToWideChar, GetACP, CompareStringW, CreateDirectoryW, GetTempPathW, MoveFileExW, GetFileTime, FindNextFileW, GetFileAttributesW, FindFirstFileW, CopyFileW, RemoveDirectoryW, SetCurrentDirectoryW, FindClose, SetFileAttributesW, MoveFileW, GetLongPathNameW, GetCurrentDirectoryW, GetSystemDirectoryW, OpenProcess, GetPriorityClass, SetPriorityClass, SetProcessWorkingSetSize, GetCurrentProcessId, GlobalMemoryStatusEx, GetModuleFileNameW, GetWindowsDirectoryW, ProcessIdToSessionId, GetCommandLineW, OpenThread, GetComputerNameW, GetCurrentThreadId, GetVersionExW, GetComputerNameExW, GetThreadPriority, ReadFile, SetNamedPipeHandleState, WriteFile, WaitNamedPipeW, CreateNamedPipeW, ConnectNamedPipe, FlushFileBuffers, DisconnectNamedPipe, CreateEventW, ResetEvent, WaitForMultipleObjects, GetLastError, SetLastError, WaitForSingleObject, CloseHandle, InterlockedIncrement, InterlockedDecrement, InterlockedCompareExchange, InterlockedExchange, ReleaseMutex, CreateMutexW, LocalAlloc, LocalFree, GetSystemTime, GetTickCount, GetSystemTimeAsFileTime, GetLocalTime, Sleep, SystemTimeToFileTime, FileTimeToSystemTime, GetModuleHandleW, FreeLibrary, GetProcAddress, LoadLibraryExW, LoadLibraryW, GetCurrentProcess, LoadLibraryA, SetEvent, CreateFileW, GetSystemInfo, GetExitCodeThread, ResumeThread, TerminateThread, SetThreadPriority, OpenMutexW, CreateEventA, CreateProcessA, GetTimeZoneInformation
msvcr80.dll
DllMain
ntdll.dll
memcpy, memmove, memset, _aulldiv, DbgPrint, _allrem, _aullrem, _stricmp, _strnicmp, _ftol, RtlAllocateHeap, RtlFreeHeap, RtlReAllocateHeap, ZwTerminateProcess, _chkstk, RtlNtStatusToDosError, ZwClose, ZwWaitForSingleObject, ZwReleaseMutant, RtlInitUnicodeString, _allmul, RtlTimeFieldsToTime, RtlUpcaseUnicodeString, LdrUnloadDll, LdrGetProcedureAddress, RtlInitAnsiString, LdrLoadDll, ZwQueryInformationThread, ZwSetInformationThread, ZwDelayExecution, ZwResumeThread, ZwTerminateThread, RtlRaiseException, ZwQueryInformationProcess, ZwDuplicateObject, LdrShutdownThread, CsrClientCallServer, RtlCreateUserThread, ZwCreateEvent, ZwSetEvent, ZwResetEvent, RtlQueryEnvironmentVariable_U, ZwReadVirtualMemory, RtlFreeUnicodeString, ZwQueryInformationFile, ZwOpenFile, ZwSetInformationFile, ZwFsControlFile, ZwWriteFile, ZwReadFile, ZwQuerySystemInformation, ZwDisplayString, RtlUnwind, RtlDosPathNameToNtPathName_U, RtlGetFullPathName_U, RtlCreateUnicodeString, RtlxAnsiStringToUnicodeSize, RtlxOemStringToUnicodeSize, NlsMbOemCodePageTag, RtlAnsiStringToUnicodeString, RtlOemStringToUnicodeString, RtlxUnicodeStringToAnsiSize, RtlxUnicodeStringToOemSize, RtlUnicodeStringToAnsiString, RtlUnicodeStringToOemString, _aullshr, ZwQueryObject, ZwDuplicateToken, ZwOpenProcess, ZwSetInformationProcess, RtlGetCurrentDirectory_U, RtlLeaveCriticalSection, ZwQueryVirtualMemory, RtlEnterCriticalSection, RtlReleasePebLock, RtlClearBits, RtlFindClearBitsAndSet, RtlAcquirePebLock, RtlAreBitsSet, RtlAddAccessDeniedAceEx, RtlAddAccessAllowedAceEx, RtlValidSecurityDescriptor, RtlSetDaclSecurityDescriptor, RtlSetSaclSecurityDescriptor, RtlSetGroupSecurityDescriptor, RtlSetOwnerSecurityDescriptor, RtlCreateSecurityDescriptor, RtlCreateAcl, ZwOpenKey, _allshl, RtlInitializeCriticalSection, RtlDeleteCriticalSection, ZwQuerySymbolicLinkObject, ZwOpenSymbolicLinkObject, LdrGetDllHandle, RtlDestroyEnvironment, RtlSetEnvironmentVariable, RtlCreateEnvironment, NtRaiseException, ZwCreateKey, RtlOpenCurrentUser, ZwQueryValueKey, ZwQueryKey, ZwWaitForMultipleObjects, ZwCancelIoFile, RtlAdjustPrivilege, RtlImpersonateSelf, ZwOpenThreadToken, RtlDestroyProcessParameters, RtlCreateUserProcess, RtlCreateProcessParameters, ZwUnmapViewOfSection, ZwMapViewOfSection, ZwCreateSection, NtTerminateThread, NtResumeThread, RtlCompareUnicodeString, DbgBreakPoint
