Import table
kernel32.dll
ExpandEnvironmentStringsW, WaitForMultipleObjectsEx, GetLocaleInfoW, InterlockedDecrement, InterlockedIncrement, DisableThreadLibraryCalls, SetLastError, HeapSize, HeapReAlloc, HeapAlloc, HeapDestroy, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, InterlockedCompareExchange, Sleep, InterlockedExchange, GetProcessHeap, HeapFree, WideCharToMultiByte, lstrlenA, MultiByteToWideChar, GetVolumeInformationW, FindFirstVolumeW, FindNextVolumeW, SetErrorMode, GetDriveTypeW, FindVolumeClose, GetLastError, LocalFree, EncodePointer, DecodePointer
msvcr100.dll
DllMain
msvcr110.dll
DllMain
msvcr90.dll
DllMain
ntdll.dll
ZwReleaseMutant, ZwOpenSymbolicLinkObject, ZwQuerySymbolicLinkObject, ZwReadVirtualMemory, ZwOpenProcess, RtlReAllocateHeap, LdrLoadDll, LdrGetProcedureAddress, RtlInitAnsiString, LdrUnloadDll, ZwOpenKey, ZwQueryKey, RtlOpenCurrentUser, ZwEnumerateKey, ZwQueryInformationToken, ZwQueryValueKey, RtlEqualSid, ZwCreateKey, ZwQueryVirtualMemory, ZwResetEvent, ZwSetEvent, RtlInitUnicodeString, ZwCreateEvent, RtlAllocateHeap, RtlFreeHeap, ZwDelayExecution, RtlCreateUserThread, ZwQueryInformationThread, ZwTerminateProcess, ZwQueryInformationProcess, LdrShutdownThread, CsrClientCallServer, ZwResumeThread, ZwTerminateThread, ZwCreateFile, RtlFreeUnicodeString, ZwWriteFile, ZwQueryInformationFile, ZwCreateSection, ZwFlushBuffersFile, ZwClose, RtlNtStatusToDosError, ZwUnmapViewOfSection, ZwWaitForSingleObject, ZwSetInformationFile, ZwQuerySystemInformation, ZwMapViewOfSection, ZwReadFile, ZwFsControlFile, memmove, _alldiv, _aulldiv, memcpy, ZwFlushVirtualMemory, NtClose, _aulldvrm
ole32.dll
OleRun, CoInitialize, CoCreateInstance
psapi.dll
GetDeviceDriverFileNameW, EnumDeviceDrivers, GetDeviceDriverBaseNameW
Export table
GetAvgObject
GetLockCount
