Import table
kernel32.dll
GetModuleHandleA, VirtualAllocEx, VirtualFreeEx, WriteProcessMemory, GetCurrentProcess, GetVersionExW, GetModuleFileNameW, GetModuleFileNameA, CreateFileA, CreateFileMappingA, MapViewOfFileEx, UnmapViewOfFile, ReadProcessMemory, IsBadReadPtr, GetCurrentProcessId, CreateToolhelp32Snapshot, Process32FirstW, Process32NextW, GetVersion, OpenThread, SuspendThread, GetThreadContext, ResumeThread, Sleep, Thread32First, Thread32Next, ReadFile, CloseHandle, OpenProcess, GetProcAddress, CreateRemoteThread, GetModuleHandleW, CreateMutexW, GetEnvironmentVariableW, GetLastError, HeapFree, HeapAlloc, GetCurrentThreadId, GetCommandLineA, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapCreate, HeapDestroy, VirtualFree, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, VirtualAlloc, HeapReAlloc, ExitProcess, WriteFile, GetStdHandle, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, InterlockedDecrement, SetHandleCount, GetFileType, GetStartupInfoA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, RaiseException, SetFilePointer, GetConsoleCP, GetConsoleMode, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, InitializeCriticalSectionAndSpinCount, RtlUnwind, LoadLibraryA, HeapSize, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, MultiByteToWideChar, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, FlushFileBuffers, WaitForSingleObject, ReleaseMutex, GetProcessHeap, SetEnvironmentVariableW, VirtualQuery
psapi.dll
GetModuleBaseNameW, EnumProcessModules
shlwapi.dll
PathAppendW, StrRChrW, PathRemoveFileSpecW, StrCmpIW
Export table
qhadproc
tpicallback
tpicallback2
tpicallback3