Import table
advapi32.dll
RegEnumValueA, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, RegOpenKeyExA, RegEnumKeyExA, RegQueryValueExA, RegCloseKey, RegSetValueExA, RegQueryInfoKeyA
kernel32.dll
LeaveCriticalSection, EnterCriticalSection, InterlockedDecrement, DeleteFileA, GetModuleFileNameA, WaitForSingleObject, CreateMutexA, ReleaseMutex, SetFileAttributesA, GetPrivateProfileIntA, GetModuleHandleA, GetCurrentThreadId, GetLongPathNameW, MultiByteToWideChar, SystemTimeToFileTime, DeleteCriticalSection, FindNextFileA, GetFileAttributesA, FindFirstFileA, GetLocalTime, WritePrivateProfileSectionA, GetPrivateProfileSectionA, MoveFileExA, GetShortPathNameA, GetSystemDirectoryA, WritePrivateProfileStringA, OpenEventA, CreateEventA, LocalAlloc, SetEvent, lstrlenA, WideCharToMultiByte, InitializeCriticalSection, GetCurrentProcess, CloseHandle, GetLastError, LoadLibraryA, GetProcAddress, FreeLibrary, LocalFree, FindClose, GetVersionExA, DisableThreadLibraryCalls
msvcrt.dll
DllMain
ole32.dll
CoUninitialize, CoInitializeEx, CoInitializeSecurity, CoCreateInstance, CoSetProxyBlanket
user32.dll
GetSystemMetrics
Export table
CreateRMDInfoObject
DeleteRMDInfoObject
GetQHOptions
GetSSStatus
QhCleanBoot
QhCleanFile
QhCleanFileEx
QhCleanFileExForMobile
QhCleanFileForMobile
QhCloseFile
QhCloseFileForMobile
QhCreateMimeObject
QhDeinitScan
QhDeinitScanForSAS
QhDeleteMimeObject
QhGetActionForCommandLineW
QhGetAPIVersion
QhGetAPIVersionEx
QhGetAVStamp
QhGetAVStampEx
QhGetFileType
QhGetFileTypeForMobile
QhGetOptions
QhGetOptionsForSAS
QhGetQuarantineUploadDecisionW
QhGetUpdateState
QhInitScan
QhInitScanForSAS
QhIsAccessDeniedAppExcludedW
QhIsCriticalAppInfectedW
QhIsHiddenProcessExcludedW
QhIsKindOfWorm
QhLoadBootScanner
QhOpenFile
QhOpenFileForMobile
QhOpenFileForSAS
QhReloadSignatures
QhResetFPTFlags
QhScanBoot
QhScanFile
QhScanFileEx
QhScanFileExForMobile
QhScanFileForMobile
QhScanMBR
QhScanMessage
QhScanSectorBuffer
QhScanSSMemDS
QhScanURL
QhSetCallBack
QhSetCallBackForMobile
QhSetMessageString
QhSetMessageStringForSAS
QhSetOptions
QhSetOptionsForSAS
QhUnloadBootScanner