Import table
advapi32.dll
RegQueryInfoKeyW, CryptGetHashParam, CryptDestroyHash, CryptHashData, CryptReleaseContext, RegOpenKeyW, RegEnumValueW, RegCloseKey, RegQueryValueExW, RegOpenKeyExW, RegSetValueExW, RegCreateKeyExW, RegEnumKeyExW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, RegDeleteKeyW, RegDeleteValueW, OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, GetUserNameW, RegNotifyChangeKeyValue, GetTokenInformation, ConvertSidToStringSidW, CryptAcquireContextW, CryptCreateHash, RegEnumKeyW
easyhook32.dll
_LhInstallHook@16, _LhSetExclusiveACL@12, _LhUninstallAllHooks@0, _LhWaitForPendingRemovals@0, _RhIsX64Process@8
gdi32.dll
SetBkMode, SetBkColor, ExtTextOutW, BitBlt, DeleteObject, DeleteDC, SelectObject, CreateFontW, GetObjectW
iphlpapi.dll
GetAdaptersInfo
kernel32.dll
DllMain
ole32.dll
CoTaskMemFree, CoTaskMemRealloc, CoTaskMemAlloc, CoCreateInstance, CoUninitialize, CoInitialize, CoInitializeSecurity, CoCreateGuid
secur32.dll
GetUserNameExW
shell32.dll
Shell_NotifyIconW, SHGetFolderPathW, FindExecutableW
shlwapi.dll
SHRegWriteUSValueW, SHSetValueW, SHDeleteKeyW, SHDeleteValueW
user32.dll
UnhookWindowsHookEx, GetClassNameW, WindowFromDC, DrawTextW, EndDialog, DrawIconEx, ScreenToClient, GetWindowTextW, GetSysColor, GetDlgItem, GetWindow, MonitorFromWindow, GetMonitorInfoW, GetWindowRect, GetParent, GetClientRect, MapWindowPoints, SetWindowPos, SetActiveWindow, BringWindowToTop, DestroyWindow, SetMenuDefaultItem, GetMenuDefaultItem, GetSubMenu, LoadMenuW, DestroyMenu, CreateWindowExW, LoadCursorW, GetClassInfoExW, RegisterClassExW, CallWindowProcW, GetWindowLongW, SetWindowLongW, KillTimer, SetTimer, IsWindow, GetActiveWindow, DialogBoxParamW, SendMessageTimeoutW, SendMessageW, PostMessageW, TrackPopupMenu, SetForegroundWindow, GetCursorPos, LoadIconW, DestroyIcon, DefWindowProcW, RegisterWindowMessageW, CharNextW, wvsprintfW, LoadStringW, IsMenu, UnregisterClassA, CharLowerW, wsprintfW
version.dll
VerQueryValueW, GetFileVersionInfoW, GetFileVersionInfoSizeW
wininet.dll
InternetOpenUrlW, HttpQueryInfoW, InternetQueryDataAvailable, InternetReadFileExA, InternetOpenW, InternetSetStatusCallbackW, InternetSetOptionW, InternetQueryOptionW, InternetCrackUrlW, InternetConnectW, HttpOpenRequestW, HttpSendRequestExW, InternetWriteFile, InternetCloseHandle
ws2_32.dll
WSASend
Export table
_NativeInjectionEntryPoint@4
CheckSignal
CreateTask
CreateTaskA
InstallSearch
InstallSearch2
InstallSearch2A
InstallSearchA
InstallStart
InstallStart2
InstallStart2A
InstallStartA
Reinstall
RemoveTask
RemoveTaskA
ReportUninstall
SearchBySpeedbit
ShouldDisplayCheckbox
StartMon
StopMon
TakeSnapshot
TaskExists
Uninstall