Import table
advapi32.dll
ImpersonateNamedPipeClient, RevertToSelf
kernel32.dll
DisableThreadLibraryCalls, GetExitCodeProcess, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, DeviceIoControl, QueryDosDeviceW, GetLogicalDrives, GetDiskFreeSpaceExW, GetDriveTypeW, GetOverlappedResult, CancelIo, GetCurrentThreadId, GetComputerNameExW, GetSystemDirectoryW, GetModuleFileNameW, GetComputerNameW, GetCurrentProcessId, GetVersionExW, GetWindowsDirectoryW, WaitForSingleObject, WaitForMultipleObjects, SetEvent, CreateEventW, ResetEvent, GetExitCodeThread, SetThreadPriority, TerminateThread, ResumeThread, WaitNamedPipeW, CreateNamedPipeW, ConnectNamedPipe, DisconnectNamedPipe, SetNamedPipeHandleState, CreateMutexW, ReleaseMutex, SetLastError, SetEndOfFile, CreateFileMappingW, UnmapViewOfFile, MapViewOfFile, SetFilePointer, FlushFileBuffers, ReadFile, GetFileSize, InterlockedIncrement, InterlockedDecrement, InterlockedCompareExchange, InterlockedExchange, CreateFileW, FreeLibrary, GetSystemInfo, GetLastError, GetProcAddress, GetCurrentProcess, LoadLibraryA, DeleteFileW, LocalAlloc, LocalFree, FindClose, FindFirstFileW, RemoveDirectoryW, GetFileAttributesW, MoveFileExW, FindNextFileW, CreateDirectoryW, GetTempPathW, CloseHandle, GetCurrentDirectoryW, GetModuleHandleW, SetFileAttributesW, GetModuleHandleA, LoadLibraryW, GetTickCount, GetSystemTimeAsFileTime, Sleep, WideCharToMultiByte, CompareStringW, GetACP, MultiByteToWideChar, GetSystemDefaultLCID, WriteFile, WaitForMultipleObjectsEx, FileTimeToSystemTime, DecodePointer, EncodePointer
msvcr100.dll
DllMain
msvcr80.dll
DllMain
msvcr90.dll
DllMain
ntdll.dll
ZwSetValueKey, ZwAdjustPrivilegesToken, ZwQueryValueKey, ZwQueryInformationToken, ZwDeleteKey, ZwEnumerateKey, RtlOpenCurrentUser, ZwQueryKey, ZwOpenKey, RtlReAllocateHeap, RtlCreateUnicodeString, ZwCreateNamedPipeFile, ZwOpenProcess, ZwReadVirtualMemory, ZwCancelIoFile, ZwReleaseMutant, ZwCreateKey, ZwRestoreKey, memmove, RtlFreeHeap, RtlAllocateHeap, ZwFsControlFile, ZwReadFile, ZwMapViewOfSection, ZwQuerySystemInformation, ZwSetInformationFile, ZwWaitForSingleObject, ZwUnmapViewOfSection, RtlNtStatusToDosError, ZwClose, ZwFlushBuffersFile, ZwCreateSection, ZwQueryInformationFile, ZwWriteFile, RtlFreeUnicodeString, ZwCreateFile, ZwOpenFile, ZwTerminateThread, ZwResumeThread, CsrClientCallServer, LdrShutdownThread, ZwQueryVirtualMemory, ZwOpenSymbolicLinkObject, RtlInitUnicodeString, ZwQuerySymbolicLinkObject, ZwResetEvent, ZwSetEvent, ZwCreateEvent, ZwDelayExecution, RtlCreateUserThread, ZwQueryInformationThread, ZwTerminateProcess, ZwQueryInformationProcess, ZwSetInformationThread, _allmul, memset, memcpy, _aulldiv, _chkstk, _allrem, _alldiv, ZwOpenThreadToken, ZwDuplicateObject, ZwFlushVirtualMemory
shell32.dll
ShellExecuteExW
Export table
GetAvgObject
GetLockCount
