ReadFile CreateDirectoryW CreateFileA GetCurrentProcess WriteFile CreateFileW OpenProcess FindResourceExW GetLogicalDriveStringsW GetEnvironmentVariableW SetEvent ResetEvent CreateEventW TerminateProcess DeviceIoControl GetSystemDirectoryA VirtualAlloc GetFileSize VirtualProtect SetLastError LoadLibraryA IsBadReadPtr IsDebuggerPresent OutputDebugStringW ReadConsoleA SetConsoleMode SwitchToFiber DeleteFiber CreateFiber GlobalMemoryStatus ConvertFiberToThread GetVersionExW GetModuleHandleW FormatMessageW LocalFree LocalAlloc LeaveCriticalSection EnterCriticalSection InitializeCriticalSection MoveFileW VirtualQuery GetModuleFileNameA LoadLibraryW GetProcAddress FreeLibrary DeleteFileW WaitForMultipleObjects Process32NextW Process32FirstW CreateToolhelp32Snapshot VerifyVersionInfoW MoveFileExW FindNextFileW FindFirstFileW GetSystemDirectoryW GetNativeSystemInfo GetSystemTime FindClose VerSetConditionMask GetCurrentProcessId WideCharToMultiByte MultiByteToWideChar GetTickCount Sleep GetCurrentThreadId FindResourceW SizeofResource LoadResource ConvertThreadToFiber SystemTimeToFileTime LockResource GetCommandLineW CreateMutexW CloseHandle WaitForSingleObject ReleaseMutex SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetModuleFileNameW DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetLastError RaiseException GetProcessHeap HeapSize HeapFree HeapReAlloc IsValidCodePage FindFirstFileExW GetFullPathNameW GetCurrentDirectoryW HeapAlloc HeapDestroy VirtualFree DecodePointer TryEnterCriticalSection GetStringTypeW QueryPerformanceCounter QueryPerformanceFrequency SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime EncodePointer CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo SleepEx CompareFileTime GetEnvironmentVariableA GetFileType GetStdHandle PeekNamedPipe WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetStartupInfoW InitializeSListHead SignalObjectAndWait CreateThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait GetCurrentThread GetThreadTimes FreeLibraryAndExitThread GetModuleHandleA LoadLibraryExW DuplicateHandle ReleaseSemaphore InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx CreateTimerQueue RtlUnwind GetTimeZoneInformation GetConsoleCP GetConsoleMode SetFilePointerEx ExitThread GetModuleHandleExW GetFileAttributesExW GetDriveTypeW SystemTimeToTzSpecificLocalTime FileTimeToSystemTime ExitProcess GetACP ReadConsoleW GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW SetStdHandle SetEndOfFile FlushFileBuffers WriteConsoleW SetConsoleCtrlHandler

GetProcessWindowStation GetUserObjectInformationW MessageBoxW DefWindowProcW

CryptDestroyKey CryptSetHashParam CryptGetProvParam CryptGetUserKey CryptExportKey CryptDecrypt CryptCreateHash CryptDestroyHash CryptSignHashW CryptEnumProvidersW CryptGenRandom RegSetValueExW RegCloseKey RegCreateKeyExW RegQueryValueExW GetUserNameW CryptReleaseContext CryptAcquireContextW ReportEventW RegisterEventSourceW DeregisterEventSource AllocateAndInitializeSid FreeSid InitializeSecurityDescriptor SetSecurityDescriptorDacl SetEntriesInAclW RegOpenKeyExW LookupAccountSidW GetTokenInformation OpenProcessToken

CoUninitialize CoInitialize

CommandLineToArgvW SHGetFolderPathW

PathRemoveFileSpecW PathFindFileNameW PathFileExistsW SHDeleteKeyW PathCombineW

ObtainUserAgentString

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

EnumProcesses GetProcessImageFileNameW

CertGetCertificateContextProperty CertDuplicateCertificateContext CertFindCertificateInStore CertOpenStore CertCloseStore CertOpenSystemStoreW CertGetIntendedKeyUsage CertGetEnhancedKeyUsage CertFreeCertificateContext CertEnumCertificatesInStore

gethostname sendto recvfrom WSAEventSelect WSAEnumNetworkEvents WSACreateEvent WSACloseEvent getnameinfo accept WSACleanup WSAStartup WSAIoctl WSASetLastError socket setsockopt ntohs htons getsockopt getsockname getpeername connect bind WSAGetLastError send recv closesocket freeaddrinfo getaddrinfo select __WSAFDIsSet ioctlsocket listen htonl shutdown

ord301 ord147 ord133 ord79 ord142 ord167 ord127 ord27 ord145 ord219 ord46 ord14 ord216 ord208 ord41 ord117 ord26