Import table
advapi32.dll
CopySid, GetTokenInformation, SetThreadToken, RevertToSelf, ImpersonateLoggedOnUser, OpenThreadToken, GetLengthSid
kernel32.dll
InterlockedExchange, EnterCriticalSection, DeleteCriticalSection, GetCurrentThread, GetLastError, CloseHandle, GetModuleFileNameW, InterlockedCompareExchange, GetFileAttributesW, WaitForSingleObject, ReleaseSemaphore, GetCurrentThreadId, GetTickCount, CreateFileW, WriteFile, ReadFile, SetFilePointer, GetFileSize, SetEndOfFile, FlushFileBuffers, FindClose, LeaveCriticalSection, FindFirstFileW, CompareStringW, GetFileAttributesExW, SetFileTime, DeleteFileW, CopyFileW, CreateDirectoryW, VirtualAlloc, CreateSemaphoreW, FreeLibrary, LoadLibraryW, GetProcAddress, SystemTimeToFileTime, GetSystemTimeAsFileTime, FileTimeToSystemTime, GetTimeZoneInformation, GetModuleHandleW, InterlockedExchangeAdd, GetCurrentProcessId, QueryPerformanceCounter, Sleep, InitializeCriticalSection, GetProcessHeap, HeapFree, InterlockedDecrement, InterlockedIncrement, FindNextFileW, HeapAlloc, DecodePointer, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, DisableThreadLibraryCalls, EncodePointer
msvcp100.dll
DllMain
msvcr100.dll
DllMain
user32.dll
CharLowerBuffW
userenv.dll
UnloadUserProfile
version.dll
GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueW
Export table
ekaCanUnloadModule
ekaGetObjectFactory