Import table
advapi32.dll
RegQueryValueExW, RegOpenKeyExW, RegCloseKey
kernel32.dll
GetCurrentProcessId, GetCurrentThreadId, FlushFileBuffers, CloseHandle, CreateFileW, IsProcessorFeaturePresent, WriteConsoleW, SetStdHandle, GetStringTypeW, LCMapStringW, GetModuleFileNameW, lstrcmpiW, EncodePointer, DecodePointer, GetCommandLineA, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetLastError, HeapFree, Sleep, HeapSize, GetProcAddress, GetModuleHandleW, ExitProcess, HeapAlloc, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, InterlockedDecrement, SetHandleCount, GetStdHandle, InitializeCriticalSectionAndSpinCount, GetFileType, GetStartupInfoW, DeleteCriticalSection, GetModuleFileNameA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, HeapCreate, HeapDestroy, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, HeapReAlloc, LeaveCriticalSection, EnterCriticalSection, LoadLibraryW, WriteFile, RtlUnwind, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, SetFilePointer, GetConsoleCP, GetConsoleMode, MultiByteToWideChar, RaiseException
ole32.dll
CoCreateInstance, StringFromGUID2
shlwapi.dll
PathFindFileNameW
user32.dll
GetClassNameW, SetWinEventHook, UnhookWinEvent, SendMessageW, IsWindow, EnumChildWindows, GetParent, GetWindowTextW, RegisterWindowMessageW, GetWindowThreadProcessId
Export table
StartUserModeBrowserInjection
StopUserModeBrowserInjection