IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

CreateUiPolicyPtr

CreateUiLogic

GetRecordObj

GetScheduleObj

DestroyEnvironmentBlock

CreateEnvironmentBlock

GetUserProfileDirectoryW

UnloadUserProfile

LoadUserProfileW

WTSFreeMemory

WTSEnumerateSessionsW

WTSQueryUserToken

WTSEnumerateProcessesW

WTSRegisterSessionNotification

RpcServerUnregisterIf

RpcRevertToSelf

RpcImpersonateClient

NdrServerCall2

RpcServerListen

RpcStringBindingComposeW

RpcMgmtStopServerListening

RpcStringFreeW

RpcServerRegisterIf

RpcServerUseProtseqEpW

NdrClientCall2

RpcBindingFree

RpcBindingFromStringBindingW

GetObjectLang

GetObjectSys

GetObjectLog

WSACleanup

inet_addr

listen

send

recvfrom

sendto

WSAIoctl

setsockopt

getsockopt

getsockname

select

htonl

htons

accept

WSAStartup

socket

connect

closesocket

bind

inet_ntoa

WSAGetLastError

gethostbyname

recv

CreateEncryptObject

StrToHex

HexToStr

CreateDdmManager

PathFileExistsW

?GetLastError@Amnet@@YAHXZ

?GetAdapterCount@Amnet@@YAHXZ

?GetHostName@Amnet@@YAXPAD@Z

?CleanVirtualAdapter@Amnet@@YAXXZ

?ToCharacter@Amnet@@YAPADK@Z

?GetAdapterAt@Amnet@@YA_NIAAUTAdapter@1@@Z

?ToInteger@Amnet@@YAKPAD@Z

?ToInteger@Amnet@@YAKPA_W@Z

?InitAdapter@Amnet@@YAX_N@Z

?Sendto@Amnet@@YA_NHPADI0H_N@Z

?Disconnect@Amnet@@YA_NH_N@Z

?Install@Amnet@@YA_NXZ

?Uninstall@Amnet@@YAXXZ

?CloseLog@NTLOG@@YAXH@Z

?WriteLog@NTLOG@@YAHHIPB_WZZ

?OpenLog@NTLOG@@YAHIPA_W@Z

?StringToGUID@Help32@@YAXPA_WAAU_GUID@@@Z

?MakeGUID@Help32@@YAXAAU_GUID@@@Z

?ReadFile@Help32@@YAKPA_WKPAXK@Z

?EqualString@Help32@@YAHPA_W0@Z

?EqualString@Help32@@YAHPA_WPAD@Z

?GetModuleFilePath@Help32@@YAXPAD@Z

?GetModuleFilePath@Help32@@YAXPA_W@Z

?Chartowchar@Help32@@YAXPBDPA_WH@Z

?GetAddrInIPv4@Help32@@YAXKPA_W@Z

?CheckWindowsUserAndPasswordIsValid@Help32@@YAHPA_W0@Z

?SplitString@Help32@@YAXPA_W_WAAV?$vector@PA_WV?$allocator@PA_W@std@@@std@@@Z

?Decrypto@Help32@@YAXPAEK@Z

?IsEmpty@Help32@@YAHPA_W@Z

?IsEmpty@Help32@@YAHPAD@Z

?IsValidUserAndHasAdmin@Help32@@YAHPA_WAAH@Z

?GUIDToString@Help32@@YAXAAU_GUID@@PA_WH@Z

?FileIsExist@Help32@@YAHPA_W@Z

?Compress@Help32@@YAHPAEI@Z

?Wchartochar@Help32@@YAXPB_WPADH@Z

?Encrypto@Help32@@YAXPAEK@Z

?InternetCheckResult@Help32@@YAHPBDH@Z

?GetIPv4InAddr@Help32@@YAKPBD@Z

?GetIPv4InAddr@Help32@@YAKPB_W@Z

?WriteFile@Help32@@YAKPA_WKPAXK@Z

?Expansion@Help32@@YAXPAEIPADI@Z

?CopyString@Help32@@YAPA_WPA_W@Z

?CopyString@Help32@@YAXPAD0@Z

?CopyString@Help32@@YAXPA_W0@Z

?RegisterNotification@USBDriveDetector@@QAE_NPAUSERVICE_STATUS_HANDLE__@@PAVHandler@1@@Z

?EventHandler@USBDriveDetector@@QAEXKKPAX@Z

?GetCurRemovablePartitions@DeviceUtil@@SAXPAV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@DU?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@D@std@@@2@@std@@@Z

?Get@USBDriveDetector@@SAAAV1@XZ

?GetCurRemovableDrives@DeviceUtil@@SAXPAV?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z

CreateEnumDisk

HeapFree

GetProcessHeap

UnhandledExceptionFilter

IsDebuggerPresent

InterlockedCompareExchange

LocalFree

GenerateConsoleCtrlEvent

GetCurrentThread

GetVersion

LocalAlloc

GetStdHandle

WriteConsoleA

SetLastError

WriteConsoleW

PeekNamedPipe

CreatePipe

DeviceIoControl

GetSystemDirectoryW

FlushFileBuffers

GetWindowsDirectoryW

QueryPerformanceCounter

GetVersionExA

WaitForSingleObject

CreateThread

FindFirstFileW

SetSystemPowerState

CreateMutexW

InitializeCriticalSection

LeaveCriticalSection

GetTickCount

ReleaseMutex

SetEvent

FindClose

QueueUserWorkItem

GetModuleFileNameW

CloseHandle

GetLocalTime

GetLastError

DeleteCriticalSection

Sleep

lstrcpyW

EnterCriticalSection

CreateEventW

DeleteFileW

GetCurrentProcess

LoadLibraryW

GetVersionExW

Process32FirstW

Process32NextW

CreateToolhelp32Snapshot

OpenProcess

GetProcAddress

FreeLibrary

CreateProcessW

GetStartupInfoW

WideCharToMultiByte

WritePrivateProfileStringW

GetFileAttributesW

GetPrivateProfileIntW

TerminateProcess

SetFilePointer

GetPrivateProfileStringW

ReadFile

GetModuleFileNameA

CreateFileW

WTSGetActiveConsoleSessionId

CreateDirectoryW

WriteFile

MultiByteToWideChar

GetExitCodeProcess

SetProcessPriorityBoost

SetPriorityClass

SetUnhandledExceptionFilter

RemoveDirectoryW

GetEnvironmentVariableW

FindNextFileW

OpenEventW

InterlockedIncrement

InterlockedExchange

GetSystemInfo

GetCurrentProcessId

GetDriveTypeW

GetCurrentThreadId

OutputDebugStringA

InterlockedDecrement

OutputDebugStringW

OpenMutexW

GetModuleHandleW

LoadLibraryA

CreateMutexA

GetLogicalDriveStringsW

GetPrivateProfileStructW

GetPrivateProfileStringA

WritePrivateProfileStructW

PostQueuedCompletionStatus

CreateIoCompletionPort

GetQueuedCompletionStatus

CreateFileA

GetFileSize

TerminateThread

GetComputerNameW

GetFileAttributesA

CreateDirectoryA

IsBadReadPtr

IsBadWritePtr

lstrlenW

GetFileSizeEx

SetFilePointerEx

MoveFileW

GetSystemTimeAsFileTime

SetWindowLongW

SetUserObjectSecurity

GetUserObjectSecurity

GetThreadDesktop

SetThreadDesktop

ExitWindowsEx

wsprintfW

wvsprintfW

LoadCursorW

DefWindowProcW

GetMessageW

UnregisterDeviceNotification

CreateWindowExW

TranslateMessage

RegisterClassExW

GetWindowLongW

DispatchMessageW

SendMessageW

PostQuitMessage

RegisterDeviceNotificationW

OpenDesktopW

SetProcessWindowStation

CloseDesktop

CloseWindowStation

OpenWindowStationW

GetProcessWindowStation

RegDeleteKeyA

AddAce

GetAclInformation

SetSecurityDescriptorDacl

GetSecurityDescriptorDacl

LogonUserW

RegOpenKeyExA

InitializeAcl

AddAccessAllowedAce

GetLengthSid

GetAce

OpenThreadToken

ImpersonateLoggedOnUser

CopySid

InitializeSecurityDescriptor

RegEnumKeyW

RegQueryInfoKeyW

RegSetValueExA

RegFlushKey

RegOpenKeyW

RegOpenKeyA

RegQueryValueExA

LookupAccountSidW

RegQueryValueExW

OpenServiceW

CreateServiceW

QueryServiceStatus

OpenSCManagerW

ChangeServiceConfig2W

ControlService

DeleteService

CloseServiceHandle

SetServiceStatus

DeregisterEventSource

RegisterServiceCtrlHandlerExW

StartServiceCtrlDispatcherW

ReportEventW

RegisterEventSourceW

RegDeleteValueW

SetTokenInformation

DuplicateTokenEx

RegOpenKeyExW

CreateProcessAsUserW

RegSetValueExW

RegCloseKey

GetTokenInformation

OpenProcessToken

AdjustTokenPrivileges

LookupPrivilegeValueW

RevertToSelf

SHGetFolderPathA

SHGetFolderPathW

ShellExecuteExW

CoCreateInstance

StringFromCLSID

CLSIDFromString

CoInitialize

CoTaskMemFree

CoUninitialize

CoInitializeEx

SysStringLen

SysAllocString

SysFreeString

?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB

??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z

??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z

?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z

?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ

?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z

?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z

?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ

?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ

??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z

??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ

?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ

??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z

?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z

?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z

?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z

?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z

?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ

??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z

?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ

?allocate@?$allocator@_W@std@@QAEPA_WI@Z

?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z

?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z

?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z

?max_size@?$allocator@_W@std@@QBEIXZ

?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z

??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z

??0?$allocator@_W@std@@QAE@XZ

??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z

??0?$allocator@_W@std@@QAE@ABV01@@Z

?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z

?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z

??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z

?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ

??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z

?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB

?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ

?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ

?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z

?eof@?$char_traits@D@std@@SAHXZ

?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z

?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z

?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z

?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ

?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z

??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z

?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ

??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z

??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z

?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z

?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z

??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z

?width@ios_base@std@@QAEHH@Z

?width@ios_base@std@@QBEHXZ

?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z

?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z

?flags@ios_base@std@@QBEHXZ

?length@?$char_traits@D@std@@SAIPBD@Z

?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ

??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ

?good@ios_base@std@@QBE_NXZ

?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ

?uncaught_exception@std@@YA_NXZ

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z

??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z

??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z

??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

ord9

ferror

_wfsopen

ftell

fread

_CIpow

_fsopen

fseek

_vsnprintf_s

isspace

isalnum

tolower

fopen_s

_wcsicmp

fclose

??_V@YAXPAX@Z

_vswprintf

_localtime64_s

free

malloc

wcscpy_s

_time64

memmove_s

??2@YAPAXI@Z

swprintf_s

wcscat_s

swscanf_s

??0exception@std@@QAE@ABV01@@Z

??0exception@std@@QAE@ABQBD@Z

strrchr

_swprintf

??0exception@std@@QAE@XZ

fputc

memmove

_strnicmp

_itoa

_controlfp_s

_invoke_watson

?_type_info_dtor_internal_method@type_info@@QAEXXZ

_crt_debugger_hook

_except_handler4_common

__CxxFrameHandler3

__set_app_type

__p__fmode

__p__commode

_adjust_fdiv

__setusermatherr

_configthreadlocale

_initterm_e

_initterm

printf

fprintf

_purecall

_beginthread

_mktime64

strstr

_wtoi

wcsrchr

strchr

_itow

_wcsnicmp

fopen

wcschr

atoi

_vsnwprintf

wprintf

fgets

strtok

vswprintf_s

wcsncpy

atol

feof

towupper

_beginthreadex

__winitenv

strncpy

_wcsupr

srand

_endthreadex

strncmp

mbstowcs

strcpy_s

wcsstr

_vsnprintf

strtol

calloc

strftime

rand

toupper

_vscprintf

_vscwprintf

vsprintf

gets

wcscpy

strcpy

wcscmp

strcmp

memcpy

strlen

div

memset

_CxxThrowException

_unlock

__dllonexit

_encode_pointer

_lock

_onexit

_decode_pointer

?terminate@@YAXXZ

_amsg_exit

__wgetmainargs

_cexit

_exit

_XcptFilter

sscanf_s

isalpha

exit

_invalid_parameter_noinfo

??3@YAXPAX@Z

wcsncmp

_localtime64

?what@exception@std@@UBEPBDXZ

sprintf

??1exception@std@@UAE@XZ

wcstombs

AddIPAddress

GetAdaptersInfo

GetFileVersionInfoSizeW

GetFileVersionInfoW

VerQueryValueW

WinHttpAddRequestHeaders

WinHttpQueryDataAvailable

WinHttpOpen

WinHttpConnect

WinHttpReadData

WinHttpOpenRequest

WinHttpCrackUrl

WinHttpSendRequest

WinHttpReceiveResponse

WinHttpSetTimeouts

WinHttpCloseHandle

CreateEnumRemoteFolder

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE