Import table
advapi32.dll
RegOpenKeyExW, RegQueryValueExW, RegCloseKey
kernel32.dll
InterlockedCompareExchange, SetEvent, InitializeCriticalSection, OpenProcess, LeaveCriticalSection, CreateFileW, GetOverlappedResult, InterlockedExchange, GetLastError, EnterCriticalSection, WaitForSingleObject, CreateEventW, DeviceIoControl, WaitForMultipleObjects, CancelIo, DeleteCriticalSection, CloseHandle, CreateThread, ExpandEnvironmentStringsW, InterlockedIncrement, ResetEvent, GetFileType, GetCurrentThreadId, GetCommandLineA, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapFree, HeapAlloc, RaiseException, GetModuleHandleW, GetProcAddress, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, InterlockedDecrement, Sleep, ExitProcess, SetHandleCount, GetStdHandle, GetStartupInfoA, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, HeapCreate, HeapDestroy, VirtualFree, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, SetFilePointer, WriteFile, GetConsoleCP, GetConsoleMode, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, MultiByteToWideChar, VirtualAlloc, HeapReAlloc, HeapSize, LoadLibraryA, InitializeCriticalSectionAndSpinCount, RtlUnwind, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, CreateFileA, FlushFileBuffers, DeleteFileW, LoadLibraryW, FreeLibrary, DecodePointer, EncodePointer, GetStartupInfoW, GetModuleFileNameW, IsProcessorFeaturePresent
psapi.dll
GetModuleFileNameExW
user32.dll
CharLowerW
Export table
hips_exclude_path
hips_exclude_pid
hips_init
hips_protect_path
hips_protect_pid
hips_register
hips_set_level
hips_set_log
hips_unexclude_path
hips_unexclude_pid
hips_uninit
hips_unprotect_path
hips_unprotect_pid
hips_unregister
MonitorCLSID
MonitorRegistryIEHomepage
MonitorRegistryServices