Import table
advapi32.dll
RegSetValueExW, RegQueryValueExA, RegOpenKeyExA, CryptReleaseContext, CryptDestroyHash, CryptAcquireContextA, CryptGenRandom, CryptGetHashParam, RegEnumValueW, RegDeleteKeyW, RegCreateKeyExW, RegOpenKeyExW, RegQueryValueExW, RegCreateKeyExA, RegLoadKeyA, RegUnLoadKeyA, RegOpenKeyW, RegCloseKey, RegDeleteKeyA, RegEnumKeyA, RegCreateKeyA, RegSetValueExA, RegEnumValueA, RegDeleteValueA, RegOpenKeyA, CryptCreateHash, CryptHashData
crypt32.dll
CryptUnprotectData, CryptProtectData
kernel32.dll
GetCurrentThreadId, GetCurrentProcessId, CloseHandle, SetEvent, WaitForMultipleObjects, CreateFileW, CreateEventA, CreateThread, InitializeCriticalSection, EnterCriticalSection, LeaveCriticalSection, LoadLibraryA, GetSystemDirectoryA, GetModuleHandleA, GetVolumeNameForVolumeMountPointW, GetVolumePathNameW, InterlockedDecrement, GetVersionExA, DebugBreak, OpenMutexA, CreateMutexA, WaitForSingleObject, ReleaseMutex, GetSystemTimeAsFileTime, FormatMessageA, InterlockedIncrement, Sleep, SetFileAttributesA, FindClose, FindNextFileW, FindFirstFileW, lstrcatA, SetThreadLocale, GetThreadLocale, lstrcmpA, VerSetConditionMask, GetExitCodeThread, GetModuleFileNameA, QueryPerformanceCounter, QueryPerformanceFrequency, GetCurrentProcess, GetSystemDirectoryW, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, InterlockedCompareExchange, GetProcessHeap, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, GetLocaleInfoA, LocalAlloc, OutputDebugStringA, GetTickCount, LocalFree, FindResourceExA, FindResourceA, LoadResource, LockResource, SizeofResource, lstrcpyA, GetFileAttributesA, LoadLibraryExA, FreeLibrary, GetProcAddress, GetStringTypeExW, GetStringTypeExA, GetEnvironmentVariableW, GetEnvironmentVariableA, lstrlenA, lstrcmpiW, lstrcmpiA, CompareStringW, CompareStringA, lstrlenW, GlobalAlloc, GlobalFree, GetVersion, DeleteCriticalSection, GetACP, GetLastError, RaiseException, WideCharToMultiByte, MultiByteToWideChar, InterlockedExchange, SystemTimeToFileTime, GetComputerNameA, TerminateThread
msvcp80.dll
DllMain
msvcr80.dll
DllMain
ole32.dll
CoInitialize, CoTaskMemFree, StringFromGUID2, CoInitializeEx, CoCreateInstance, CoCreateGuid, CoTaskMemAlloc, CoUninitialize
shell32.dll
SHGetFolderPathW, SHGetSpecialFolderPathA, SHGetFolderPathA
shlwapi.dll
PathRemoveBackslashA, PathAddBackslashA
user32.dll
CharNextA, UnregisterClassA, CharLowerA, CharLowerW, CharUpperA, CharUpperW, wsprintfA, GetSystemMetrics, CharPrevW, CharPrevA, CharNextW
wtsapi32.dll
WTSSendMessageA
Export table
AddNewCommand
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetFactory
GetForwardingEnabled
GetObjectCount
GetOpState
NTSGetComputerName
ParsePolicyXml
RefreshCommandStatus
SetForwardingEnabled
StartEventForwarder
StartEventForwarderEx
StopEventForwarder
