Import table
advapi32.dll
RegOpenKeyExW, RegCloseKey, RegDeleteValueW, RegSetValueExW, RegQueryValueExW, RegEnumKeyW, RegCreateKeyExW, RegEnumValueW
iswul.dll
_IswIsPathModified@4, _IswIpcConnect@4
kernel32.dll
GetTickCount, FindFirstFileW, FindNextFileW, FindClose, InterlockedCompareExchange, Sleep, GetLastError, SetLastError, GetLogicalDriveStringsW, GetThreadPriority, GetCurrentThread, SetThreadPriority, GetProcessTimes, GetProcessAffinityMask, GetCurrentProcess, TerminateProcess, CloseHandle, GetCurrentThreadId, SetEvent, CreateEventW, WaitForSingleObject, UnhandledExceptionFilter, QueryPerformanceFrequency, ExitThread, HeapFree, QueryPerformanceCounter, GetCommandLineW, QueueUserAPC, CompareFileTime, SetFilePointerEx, WriteFile, GetSystemTime, MoveFileExW, GetFileSizeEx, SystemTimeToFileTime, HeapCreate, HeapDestroy, DeleteFileW, HeapAlloc, WaitForSingleObjectEx, SetEndOfFile, ReleaseMutex, DuplicateHandle, GetLocalTime, CreateMutexW, GetCurrentDirectoryW, VirtualFree, VirtualAlloc, SetUnhandledExceptionFilter, IsDebuggerPresent, GetSystemTimeAsFileTime, CopyFileW, ReadProcessMemory, GetDriveTypeW, TlsAlloc, CreateThread, WideCharToMultiByte, OutputDebugStringW, ReadFile, GetFileSize, CreateFileW, GetShortPathNameW, GetProcAddress, GetModuleFileNameW, InterlockedDecrement, InterlockedIncrement, LoadLibraryW, FreeLibrary, QueueUserWorkItem, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, UnmapViewOfFile, GetExitCodeThread, InterlockedExchange, MapViewOfFile, CreateFileMappingW, LoadLibraryExW, MultiByteToWideChar, OpenThread, GetCurrentProcessId, TlsSetValue, TlsGetValue, TlsFree, GetEnvironmentStringsW, SetEnvironmentVariableW, GetModuleHandleW, GetWindowsDirectoryW, GetTempPathW, CreateDirectoryW, GetEnvironmentVariableW, GetFileAttributesW
msvcp80.dll
DllMain
msvcr80.dll
DllMain
ntdll.dll
ZwCreateEvent, ZwClose, ZwYieldExecution, ZwQueryInformationThread, ZwQueryInformationProcess, ZwWaitForSingleObject, ZwOpenThread, ZwDelayExecution, ZwQueryKey, ZwResetEvent, RtlGetVersion, ZwReadFile, ZwWriteFile, ZwCreateKey, ZwCreateMutant, RtlInitUnicodeString, RtlFormatCurrentUserKeyPath, ZwSetInformationFile, ZwQueryFullAttributesFile, RtlFreeUnicodeString, ZwWaitForMultipleObjects, ZwCreateFile, ZwOpenKey, ZwOpenFile, ZwSetValueKey, ZwQueryValueKey, ZwQueryInformationFile, ZwReleaseMutant, memcpy, wcscpy, ZwSetEvent, _wcsicmp, memset, wcslen, ZwFlushBuffersFile, wcscmp, _fltused, _aulldiv, _chkstk, _allmul, memcmp
ole32.dll
CoInitialize, CoUninitialize
psapi.dll
GetProcessMemoryInfo
shell32.dll
SHGetSpecialFolderPathW, ExtractAssociatedIconW
shlwapi.dll
SHDeleteKeyW
user32.dll
GetDesktopWindow, FindWindowExW, GetUserObjectInformationW, CharUpperBuffW, CharUpperBuffA, CharLowerBuffA, wsprintfW, LoadStringW, PostThreadMessageW, SetThreadDesktop, CloseDesktop, GetQueueStatus, GetMessageW, DispatchMessageW, TranslateMessage, PeekMessageW, MsgWaitForMultipleObjects, OpenInputDesktop, MessageBoxW, CharLowerBuffW, GetForegroundWindow, EnumThreadWindows, OpenDesktopW, RegisterWindowMessageW, DestroyWindow, LoadImageW, GetThreadDesktop, SwitchDesktop, GetClassNameW, GetWindowTextW, GetWindowLongW, CopyIcon, LoadIconW, DestroyIcon, FlashWindowEx, SetWindowPos, GetWindowPlacement, EnumWindows, GetParent, SendMessageW, KillTimer, GetWindowThreadProcessId, EnableWindow, GetClassLongW, SendMessageTimeoutW, IsWindowVisible, SetForegroundWindow, SetTimer
Export table
_GetISWPlugin@8
_IswDllCanUnloadNow@0
_IswLog_FlushThread@4
_TrustedDllEntry@4