Import table
advapi32.dll
RegQueryValueExW, RegOpenKeyExW, RegCloseKey, SetSecurityDescriptorDacl, RegSetValueExA, RegSetValueExW, RegQueryValueExA, RegQueryInfoKeyW, RegOpenKeyExA, RegFlushKey, RegEnumValueW, RegEnumKeyA, RegEnumKeyExW, RegDeleteValueA, RegDeleteValueW, RegDeleteKeyW, RegCreateKeyExA, RegCreateKeyExW, InitializeSecurityDescriptor, GetUserNameA, FreeSid, AllocateAndInitializeSid, SetEntriesInAclW, BuildExplicitAccessWithNameW, SetNamedSecurityInfoW, GetNamedSecurityInfoW
comctl32.dll
InitializeFlatSB, FlatSB_SetScrollProp, FlatSB_SetScrollPos, FlatSB_SetScrollInfo, FlatSB_GetScrollPos, FlatSB_GetScrollInfo, _TrackMouseEvent, ImageList_SetIconSize, ImageList_GetIconSize, ImageList_Write, ImageList_Read, ImageList_GetDragImage, ImageList_DragShowNolock, ImageList_DragMove, ImageList_DragLeave, ImageList_DragEnter, ImageList_EndDrag, ImageList_BeginDrag, ImageList_Remove, ImageList_DrawEx, ImageList_GetBkColor, ImageList_SetBkColor, ImageList_Add, ImageList_SetImageCount, ImageList_GetImageCount, ImageList_Destroy, ImageList_Create, InitCommonControls
comdlg32.dll
PrintDlgW, GetSaveFileNameA
crypt32.dll
CryptMsgClose, CertCloseStore, CertFreeCertificateContext, CertGetNameStringW, CertFindCertificateInStore, CryptMsgGetParam, CryptQueryObject
gdi32.dll
UnrealizeObject, TextOutA, StretchBlt, StartPage, StartDocA, SetWindowOrgEx, SetViewportOrgEx, SetTextColor, SetStretchBltMode, SetROP2, SetPixel, SetMapMode, SetDIBColorTable, SetBrushOrgEx, SetBkMode, SetBkColor, SelectPalette, SelectObject, SelectClipRgn, SaveDC, RestoreDC, RectVisible, RealizePalette, PatBlt, MoveToEx, MaskBlt, LineTo, IntersectClipRect, GetWindowOrgEx, GetTextMetricsW, GetTextFaceA, GetTextExtentPoint32A, GetTextExtentPoint32W, GetSystemPaletteEntries, GetStockObject, GetRgnBox, GetPixel, GetPaletteEntries, GetObjectW, GetDeviceCaps, GetDIBits, GetDIBColorTable, GetDCOrgEx, GetCurrentPositionEx, GetClipBox, GetBrushOrgEx, GetBitmapBits, GdiFlush, FrameRgn, ExcludeClipRect, EndPage, EndDoc, DeleteObject, DeleteDC, CreateSolidBrush, CreateRectRgnIndirect, CreateRectRgn, CreatePenIndirect, CreatePen, CreatePalette, CreateHalftonePalette, CreateFontIndirectW, CreateFontA, CreateFontW, CreateDIBitmap, CreateDIBSection, CreateDCW, CreateCompatibleDC, CreateCompatibleBitmap, CreateBrushIndirect, CreateBitmap, CombineRgn, BitBlt
kernel32.dll
GetACP, Sleep, VirtualFree, VirtualAlloc, GetSystemInfo, GetTickCount, QueryPerformanceCounter, GetVersion, GetCurrentThreadId, VirtualQuery, WideCharToMultiByte, MultiByteToWideChar, lstrlenW, lstrcpynW, LoadLibraryExW, GetThreadLocale, GetStartupInfoA, GetProcAddress, GetModuleHandleW, GetModuleFileNameW, GetLocaleInfoW, GetLastError, GetCommandLineW, FreeLibrary, FindFirstFileW, FindClose, ExitProcess, ExitThread, CreateThread, CompareStringW, WriteFile, UnhandledExceptionFilter, SetFilePointer, SetEndOfFile, RtlUnwind, ReadFile, RaiseException, GetStdHandle, GetFileSize, GetFileType, CreateFileW, CloseHandle, TlsSetValue, TlsGetValue, TlsFree, TlsAlloc, LocalFree, LocalAlloc, DllMain, GetFileSizeEx
msimg32.dll
AlphaBlend
ole32.dll
OleUninitialize, OleInitialize
oleaut32.dll
SysFreeString, SysReAllocStringLen, SysAllocStringLen, SafeArrayPtrOfIndex, SafeArrayGetUBound, SafeArrayGetLBound, SafeArrayCreate, VariantChangeType, VariantCopy, VariantClear, VariantInit
shell32.dll
ShellExecuteExA, ShellExecuteA, SHGetSpecialFolderPathW, SHGetPathFromIDListA, SHGetSpecialFolderLocation, SHGetMalloc, SHFileOperationW
sqlite3.dll
sqlite3_bind_parameter_index, sqlite3_bind_null, sqlite3_bind_int64, sqlite3_bind_int, sqlite3_bind_double, sqlite3_bind_text, sqlite3_bind_blob, sqlite3_reset, sqlite3_finalize, sqlite3_column_int64, sqlite3_column_type, sqlite3_column_text, sqlite3_column_double, sqlite3_column_bytes, sqlite3_column_blob, sqlite3_step, sqlite3_column_decltype, sqlite3_column_name, sqlite3_column_count, sqlite3_prepare_v2, sqlite3_changes, sqlite3_free, sqlite3_errcode, sqlite3_errmsg, sqlite3_close, sqlite3_open
unrar.dll
RARSetPassword, RARSetCallback, RARProcessFile, RARReadHeaderEx, RARCloseArchive, RAROpenArchiveEx
user32.dll
GetKeyboardType, LoadStringW, MessageBoxA, CharNextW, DllMain, CreateWindowExA, CreateWindowExW, WindowFromPoint, TranslateMessage, SystemParametersInfoW, ShowWindow, SetWindowTextA, SetWindowPos, SetWindowLongA, SetTimer, SetRect, SetForegroundWindow, SetFocus, SetCursor, SetClipboardData, SetCapture, SetActiveWindow, SendMessageTimeoutA, SendMessageA, SendMessageW, ScreenToClient, RemoveMenu, ReleaseDC, ReleaseCapture, RegisterWindowMessageW, RegisterClassA, PostThreadMessageA, PostThreadMessageW, PostQuitMessage, PostMessageA, PostMessageW, PeekMessageA, PeekMessageW, OpenClipboard, OffsetRect, MessageBoxW, MessageBeep, LoadImageA, LoadCursorW, KillTimer, IsWindowVisible, IsWindowUnicode, IsWindowEnabled, IsWindow, IsIconic, IsDialogMessageW, InvalidateRect, InflateRect, GetWindowThreadProcessId, GetWindowTextA, GetWindowRect, GetWindowPlacement, GetWindowLongW, GetWindowDC, GetSystemMetrics, GetSystemMenu, GetSysColorBrush, GetSysColor, GetWindow, GetMessageA, GetMessageW, GetKeyState, GetIconInfo, GetFocus, GetDC, GetCursorPos, GetCursor, GetClientRect, GetClassNameA, GetCapture, FrameRect, FindWindowW, FillRect, EnumWindows, EndPaint, EnableWindow, EmptyClipboard, DrawTextA, DrawIconEx, DrawFrameControl, DrawFocusRect, DispatchMessageW, DestroyWindow, DefWindowProcA, DefWindowProcW, CloseClipboard, CharUpperBuffW, CharToOemW, CallWindowProcW, BringWindowToTop, BeginPaint, AttachThreadInput
version.dll
VerQueryValueA, VerQueryValueW, GetFileVersionInfoSizeA, GetFileVersionInfoSizeW, GetFileVersionInfoA, GetFileVersionInfoW
wininet.dll
FindNextUrlCacheEntryW, FindFirstUrlCacheEntryW, FindCloseUrlCache, DeleteUrlCacheEntryW
wintrust.dll
WinVerifyTrust, CryptCATAdminReleaseCatalogContext, CryptCATCatalogInfoFromContext, CryptCATAdminEnumCatalogFromHash, CryptCATAdminCalcHashFromFileHandle, CryptCATAdminReleaseContext, CryptCATAdminAcquireContext
wsock32.dll
WSACleanup, WSAStartup, gethostbyname, socket, setsockopt, sendto, send, select, recvfrom, recv, inet_addr, htons, connect, closesocket, bind
Export table
CreateCacheObj
CreateDbObj
CreateEnumObj
CreateRepairObj
CreateScanConfigObj
CreateScanObj
CreateScanThreadObj
madTraceProcess
