Import table
advapi32.dll
RegQueryValueExA, RegOpenKeyExA, GetUserNameW, RegCloseKey
gdi32.dll
BitBlt, StretchBlt, DeleteDC, DeleteObject, GetObjectW, CreateBitmap, CreateRectRgnIndirect, GetRgnBox, PtInRegion, SetBkColor, SetTextColor, CreateCompatibleDC, SelectObject
kernel32.dll
HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, VirtualProtectEx, HeapDestroy, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, InterlockedCompareExchange, InterlockedExchange, LocalAlloc, LocalFree, OutputDebugStringW, MultiByteToWideChar, CreateThread, GetModuleHandleW, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, CreateToolhelp32Snapshot, Thread32First, Thread32Next, OpenThread, GetThreadTimes, OpenProcess, FileTimeToLocalFileTime, FileTimeToSystemTime, GetCurrentProcess, RaiseException, GetModuleFileNameW, LoadLibraryW, GetProcAddress, GetLastError, FreeLibrary, Sleep, DeleteCriticalSection, CloseHandle, WaitForSingleObject, GetCurrentThreadId, ReleaseSemaphore, LeaveCriticalSection, EnterCriticalSection, CreateSemaphoreW, InitializeCriticalSection
msvcp90.dll
DllMain
msvcr90.dll
DllMain
psapi.dll
EnumProcesses, GetModuleFileNameExW, GetModuleBaseNameW, EnumProcessModules
shlwapi.dll
PathIsRelativeW, PathRemoveFileSpecW, PathAppendW
user32.dll
LoadImageW, SetWindowsHookExW, CallNextHookEx, EnumWindows, GetWindowTextW, FindWindowW, GetWindowThreadProcessId, UnhookWindowsHookEx, EnumChildWindows, GetWindowLongA, SetWindowLongW, SetWindowLongA, IsWindowUnicode, CallWindowProcA, GetClassNameW, PostMessageW, CallWindowProcW, ClientToScreen, LoadCursorW, SetCursor, InvalidateRect, InvalidateRgn, SetCapture, GetWindowDC, ReleaseDC, SendMessageW, GetMenu, GetMenuItemRect, ScreenToClient, GetSystemMetrics, SetWindowPos, GetWindowLongW, RegisterWindowMessageW, CreatePopupMenu, AppendMenuW, EnableMenuItem, GetMenuState, ModifyMenuW, RemoveMenu, GetWindowRect, GetParent, CreateWindowExW
Export table
IsYMProcessRunning
SetYMEncryptionEnabled
StartHook
StopHook