Import table
crypt32.dll
CryptUnprotectData, CryptProtectData
kernel32.dll
InterlockedDecrement, SizeofResource, LockResource, LoadResource, FindResourceW, FindResourceExW, MoveFileExW, InterlockedExchange, lstrlenA, WideCharToMultiByte, lstrlenW, GetCurrentProcessId, CopyFileW, GetFileAttributesW, WaitForSingleObject, FreeLibrary, GetProcAddress, LoadLibraryExW, CloseHandle, ReadFile, GetFileSize, CreateFileW, GetModuleFileNameW, OutputDebugStringW, GetModuleHandleW, WriteFile, LocalFree, DeleteFileW, VirtualFree, GetSystemInfo, VirtualAlloc, SetFileAttributesW, InterlockedIncrement, FlushFileBuffers, SetFilePointer, GetCurrentThread, OpenProcess, ProcessIdToSessionId, OpenThread, GetCurrentThreadId, TerminateProcess, GetCurrentProcess, ExpandEnvironmentStringsW, DisableThreadLibraryCalls, WaitForMultipleObjects, InitializeCriticalSection, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, LoadLibraryA, RaiseException, GetSystemTimeAsFileTime, GetTickCount, QueryPerformanceCounter, IsProcessorFeaturePresent, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, InterlockedCompareExchange, Sleep, DecodePointer, EncodePointer, HeapDestroy, HeapAlloc, HeapFree, MultiByteToWideChar, GetTempFileNameW, GetLastError, HeapReAlloc, HeapSize, GetProcessHeap, InitializeCriticalSectionAndSpinCount, LocalAlloc
msvcp100.dll
DllMain
msvcr100.dll
DllMain
ole32.dll
CoSetProxyBlanket, CoCreateInstance, CoCreateGuid, StringFromGUID2, IIDFromString
psapi.dll
EnumProcesses, GetModuleBaseNameW
rpcrt4.dll
RpcRevertToSelfEx, RpcImpersonateClient, RpcRevertToSelf
secur32.dll
LsaFreeReturnBuffer, LsaGetLogonSessionData, LsaEnumerateLogonSessions
user32.dll
CharNextW
Export table
GetFactory
GetObjectCount