Import table
advapi32.dll
RegOpenKeyExW, RegCloseKey, LookupPrivilegeValueW, RegQueryValueExW, OpenProcessToken, AdjustTokenPrivileges
crypt32.dll
CryptDecodeObject, CryptMsgGetParam, CertCloseStore, CertFindCertificateInStore, CertFreeCertificateContext, CertGetNameStringW, CryptQueryObject, CryptMsgClose
kernel32.dll
InterlockedExchange, InterlockedCompareExchange, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, DecodePointer, FreeLibrary, InterlockedIncrement, InterlockedDecrement, WaitForSingleObject, InitializeCriticalSection, LoadLibraryW, Sleep, GetVersionExW, LeaveCriticalSection, QueryPerformanceCounter, GetLastError, GetProcAddress, EnterCriticalSection, CreateSemaphoreW, DeleteCriticalSection, GetCurrentThreadId, CloseHandle, ResumeThread, CreateThread, GetLogicalDrives, WideCharToMultiByte, QueryDosDeviceW, lstrcmpA, CreateFileW, GetCurrentProcess, GetModuleHandleW, OpenProcess, GetModuleFileNameW, DeviceIoControl, LoadLibraryExW, FindFirstFileW, CreateDirectoryW, CopyFileW, GetFileAttributesW, FindClose, FindNextFileW, SetFileAttributesW, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, EncodePointer, ReleaseSemaphore
msvcp100.dll
DllMain
msvcr100.dll
DllMain
psapi.dll
GetModuleFileNameExW, GetProcessImageFileNameW
shell32.dll
SHGetFolderPathW
shlwapi.dll
PathFileExistsW, PathRemoveFileSpecW, PathAppendW, PathIsDirectoryW
winmm.dll
timeGetTime
wintrust.dll
CryptCATAdminCalcHashFromFileHandle, CryptCATAdminReleaseContext, CryptCATCatalogInfoFromContext, CryptCATAdminEnumCatalogFromHash, WinVerifyTrust, CryptCATAdminAcquireContext
Export table
BdCreateObject
BdDestroyObject