CheckInt13Extension32
Disk_ThunkData32
ReadDisk32
WriteDisk32
Overview
overview
6Static
static
3ConNet.exe
windows7-x64
6ConNet.exe
windows10-2004-x64
6DISK16.dll
windows7-x64
1DISK16.dll
windows10-2004-x64
1Disk32.dll
windows7-x64
1Disk32.dll
windows10-2004-x64
1SetUp.exe
windows7-x64
1SetUp.exe
windows10-2004-x64
1StartServer.exe
windows7-x64
1StartServer.exe
windows10-2004-x64
1WinIo.dll
windows7-x64
1WinIo.dll
windows10-2004-x64
1WinIo.sys
windows7-x64
1WinIo.sys
windows10-2004-x64
1ZFCard.exe
windows7-x64
3ZFCard.exe
windows10-2004-x64
3ZFDEL.exe
windows7-x64
1ZFDEL.exe
windows10-2004-x64
1unload.exe
windows7-x64
1unload.exe
windows10-2004-x64
1zfsoft.exe
windows7-x64
1zfsoft.exe
windows10-2004-x64
1ʹ��˵...��.doc
windows7-x64
ʹ��˵...��.doc
windows10-2004-x64
Static task
static1
Behavioral task
behavioral1
Sample
ConNet.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ConNet.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
DISK16.dll
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
DISK16.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
Disk32.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
Disk32.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
SetUp.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
SetUp.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
StartServer.exe
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
StartServer.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
WinIo.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
WinIo.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
WinIo.sys
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
WinIo.sys
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
ZFCard.exe
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
ZFCard.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
ZFDEL.exe
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
ZFDEL.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
unload.exe
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
unload.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
zfsoft.exe
Resource
win7-20240220-en
Behavioral task
behavioral22
Sample
zfsoft.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
ʹ��˵����.doc
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
ʹ��˵����.doc
Resource
win10v2004-20240508-en
Target
9cdfaf5d2634a2643f28e35b4789632a_JaffaCakes118
Size
1.1MB
MD5
9cdfaf5d2634a2643f28e35b4789632a
SHA1
6002ff9ab88e8c59643b1156b659a4afd7bd31a3
SHA256
439c6fa7fd6a9fb38db2076a1ef206490aca9800174e513f612b8a77b336d5eb
SHA512
e29c5b2e8e427561aa3a32c304578ba9e79cd196987e89b63e7e43811625b3ddd99ebd285ced4e3703f893379a63286a92254b2fff1c273bd2a2fddfbc6929f5
SSDEEP
24576:2pfUkOwKrPAxW+m5tSajJz/L2ILQPFs9RD6GXVU:2lOwmYWh5wWZLQs9cYU
Checks for missing Authenticode signature.
resource |
---|
unpack001/ConNet.exe |
unpack001/Disk32.dll |
unpack001/SetUp.dll |
unpack001/StartServer.exe |
unpack001/WinIo.dll |
unpack001/WinIo.sys |
unpack001/ZFCard.exe |
unpack001/ZFDEL.EXE |
unpack001/unload.exe |
unpack001/zfsoft.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SetPortVal
ord5289
ord5307
ord4698
ord5714
ord3147
ord3259
ord4465
ord2982
ord3262
ord3136
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord2985
ord4622
ord4424
ord3738
ord4080
ord4079
ord815
ord2621
ord6117
ord1134
ord540
ord800
ord537
ord1200
ord665
ord6283
ord2818
ord1979
ord5442
ord2725
ord354
ord941
ord4129
ord5683
ord858
ord4277
ord2764
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord4673
ord825
ord561
ord5186
ord1576
ord1168
_controlfp
__p__fmode
_except_handler3
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p__commode
_acmdln
_XcptFilter
_exit
__set_app_type
__dllonexit
_mbscmp
fopen
fprintf
fclose
__CxxFrameHandler
exit
_onexit
_setmbcp
Sleep
GetProcAddress
LoadLibraryA
FreeLibrary
ReadFile
SetFilePointer
GetLastError
GetVersion
CreateFileA
GetCommandLineA
LocalFree
LocalUnlock
LocalLock
LocalAlloc
GetStartupInfoA
GetModuleHandleA
MessageBoxA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetEnvironmentStrings
SUnMapLS_IP_EBP_28
ThunkConnect32
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
SMapLS_IP_EBP_28
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
GetEnvironmentStrings
SUnMapLS_IP_EBP_28
ThunkConnect32
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
SMapLS_IP_EBP_28
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
CheckInt13Extension32
Disk_ThunkData32
ReadDisk32
WriteDisk32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
f:\204_207_208_103\UnLoad\UnLoad\Release\UnLoad.pdb
RemoveWinIoDriver
VirtualQuery
GetStartupInfoA
HeapReAlloc
SetStdHandle
GetFileType
TerminateProcess
HeapSize
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStringTypeA
GetSystemInfo
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
SetUnhandledExceptionFilter
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetTickCount
SetErrorMode
GetOEMCP
GetCPInfo
GlobalFlags
GetCurrentDirectoryA
GetFileTime
GetFileAttributesA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetFullPathNameA
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
InterlockedDecrement
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
FreeResource
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
FreeLibrary
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
ConvertDefaultLocale
EnumResourceLanguagesA
LoadLibraryA
lstrcpyA
FileTimeToLocalFileTime
FileTimeToSystemTime
SetLastError
GlobalFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
WriteFile
GetSystemDirectoryA
GetCurrentProcess
lstrcmpA
CompareStringW
CompareStringA
lstrcmpiA
GetLastError
MultiByteToWideChar
WritePrivateProfileStringA
FindNextFileA
RemoveDirectoryA
DeleteFileA
Sleep
MoveFileExA
GetVersion
FindFirstFileA
FindClose
GetCommandLineA
GetVolumeInformationA
GetPrivateProfileStringA
GetModuleFileNameA
GetDriveTypeA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CreateFileA
CloseHandle
lstrlenA
lstrcpynA
GetStringTypeW
PostThreadMessageA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
IsRectEmpty
CharNextA
SetCapture
LoadCursorA
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
CreateWindowExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextLengthA
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
AdjustWindowRectEx
EqualRect
GetClassInfoA
RegisterClassA
UnregisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
PtInRect
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
wsprintfA
ReleaseDC
GetDC
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
ValidateRect
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
SetCursor
PostQuitMessage
GetMenuState
GetMenuItemID
RegisterClipboardFormatA
GetMenuItemCount
GetSubMenu
GetCursorPos
ClientToScreen
WindowFromPoint
GetSysColor
GetWindowRect
DrawEdge
GetCapture
ReleaseCapture
GetWindowTextA
GetMenu
InvalidateRect
SetRect
CopyRect
ExitWindowsEx
GetSystemMetrics
LoadIconA
EnableWindow
FindWindowA
GetClientRect
IsIconic
GetSystemMenu
PostMessageA
SendMessageA
AppendMenuA
DrawIcon
CharUpperA
MessageBoxA
ScreenToClient
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
SetMapMode
SetBkMode
RestoreDC
SaveDC
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateRectRgnIndirect
CreateBitmap
GetDeviceCaps
GetStockObject
ExtTextOutA
GetTextMetricsA
SelectObject
SetStretchBltMode
SetDIBitsToDevice
GetFileTitleA
ClosePrinter
OpenPrinterA
DocumentPropertiesA
RegEnumKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
CloseServiceHandle
OpenServiceA
OpenSCManagerA
DeleteService
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegQueryValueA
RegOpenKeyExA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
ord17
_TrackMouseEvent
PathFindFileNameA
PathStripToRootA
PathRemoveFileSpecA
PathFindExtensionA
PathIsUNCA
ord8
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoGetClassObject
CoTaskMemFree
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
SysFreeString
OleCreateFontIndirect
SysAllocString
SystemTimeToVariantTime
SafeArrayDestroy
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysAllocStringByteLen
SysStringLen
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetCurrentThread
GetCurrentProcess
CloseHandle
lstrcatA
lstrcpyA
LoadLibraryA
GetProcAddress
InitializeCriticalSection
IsDBCSLeadByte
lstrcpynA
LoadLibraryExA
GetLastError
FindResourceA
LoadResource
SizeofResource
FreeLibrary
WideCharToMultiByte
GetShortPathNameA
MultiByteToWideChar
lstrlenW
GetModuleFileNameA
lstrlenA
lstrcmpiA
GetCurrentThreadId
GetCommandLineA
WinExec
HeapCreate
SetLastError
TlsGetValue
GetStringTypeA
LCMapStringW
LCMapStringA
SetEnvironmentVariableA
InterlockedDecrement
CompareStringW
CompareStringA
GetStringTypeW
DeleteCriticalSection
VirtualFree
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
HeapFree
HeapAlloc
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
TlsSetValue
TlsAlloc
ReadFile
SetEndOfFile
EnterCriticalSection
LeaveCriticalSection
HeapDestroy
IsBadReadPtr
SetHandleCount
VirtualAlloc
IsBadWritePtr
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
FlushFileBuffers
GetStdHandle
GetFileType
WriteFile
SetStdHandle
InterlockedIncrement
CreateFileA
SetFilePointer
SetUnhandledExceptionFilter
CharNextA
MessageBoxA
PostThreadMessageA
DispatchMessageA
GetMessageA
LoadStringA
GetTokenInformation
OpenThreadToken
CopySid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
StartServiceCtrlDispatcherA
ControlService
DeleteService
CreateServiceA
RegDeleteValueA
RegSetValueExA
RegCloseKey
RegQueryValueExA
SetServiceStatus
RegisterServiceCtrlHandlerA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
OpenSCManagerA
OpenServiceA
SetSecurityDescriptorOwner
CloseServiceHandle
SetSecurityDescriptorGroup
OpenProcessToken
GetLengthSid
CoTaskMemFree
CoCreateInstance
CoRevokeClassObject
CoTaskMemAlloc
CoInitialize
CoInitializeEx
CoInitializeSecurity
CoUninitialize
CoTaskMemRealloc
CoRegisterClassObject
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VarUI4FromStr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CreateFileA
GetModuleFileNameA
GetModuleHandleA
GetVersionExA
DeviceIoControl
GetEnvironmentVariableA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
ControlService
CloseServiceHandle
OpenSCManagerA
CreateServiceA
StartServiceA
OpenServiceA
DeleteService
GetPhysLong
GetPortVal
InitializeWinIo
InstallWinIoDriver
MapPhysToLin
RemoveWinIoDriver
SetPhysLong
SetPortVal
ShutdownWinIo
UnmapPhysicalMemory
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RtlInitUnicodeString
IoCreateDevice
MmAllocateNonCachedMemory
MmFreeNonCachedMemory
Ke386SetIoAccessMap
IoCreateSymbolicLink
IofCompleteRequest
Ke386IoSetAccessProcess
IoDeleteSymbolicLink
ZwClose
ZwMapViewOfSection
ObReferenceObjectByHandle
ZwOpenSection
ZwUnmapViewOfSection
IoDeleteDevice
IoGetCurrentProcess
HalTranslateBusAddress
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SetPortVal
GetPortVal
ExitProcess
HeapReAlloc
SetStdHandle
GetFileType
TerminateProcess
HeapSize
GetTimeZoneInformation
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
GetStartupInfoA
InitializeCriticalSection
DeleteCriticalSection
GetModuleFileNameA
LeaveCriticalSection
SetLastError
GetLastError
MultiByteToWideChar
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
SizeofResource
LockResource
LoadResource
FindResourceA
WideCharToMultiByte
GetProcAddress
LoadLibraryA
FreeLibrary
CloseHandle
GetCurrentProcess
Sleep
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapAlloc
HeapFree
RtlUnwind
GetSystemTimeAsFileTime
GetDateFormatA
GetTimeFormatA
GetTickCount
SetErrorMode
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
InterlockedIncrement
FileTimeToSystemTime
EnterCriticalSection
lstrcmpA
ReadFile
SetFilePointer
CreateFileA
DeviceIoControl
MulDiv
GetCommandLineA
GetDriveTypeA
GetLogicalDrives
GetFullPathNameA
FindFirstFileA
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WriteFile
DeleteFileA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
RaiseException
InterlockedDecrement
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
GetModuleHandleA
GlobalFree
GetVolumeInformationA
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
WritePrivateProfileStringA
CreateMutexA
CompareStringW
CompareStringA
lstrcmpiA
GetVersion
lstrlenA
lstrcpynA
GetPrivateProfileStringA
PostThreadMessageA
ReleaseCapture
SetCapture
LoadCursorA
GetSysColorBrush
GetDesktopWindow
CreateDialogIndirectParamA
EndDialog
SetWindowContextHelpId
MapDialogRect
wsprintfA
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
EndPaint
BeginPaint
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
IsWindowEnabled
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
GetMenu
AdjustWindowRectEx
ScreenToClient
EqualRect
GetClassInfoA
RegisterClassA
UnregisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
IntersectRect
GetWindowPlacement
PtInRect
GetWindow
GetMenuState
GetCursorPos
IsWindow
LoadIconA
GetWindowDC
BringWindowToTop
IsIconic
GetSystemMenu
CreatePopupMenu
DrawIcon
FindWindowA
ShowWindow
UpdateWindow
SetRect
CharUpperA
MessageBoxA
GetSystemMetrics
DrawIconEx
SystemParametersInfoA
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
AppendMenuA
DrawFrameControl
DrawEdge
KillTimer
SetTimer
LoadBitmapA
RegisterClipboardFormatA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
MapVirtualKeyA
GetKeyNameTextA
ExitWindowsEx
LoadImageA
GetSysColor
GetSubMenu
TrackPopupMenuEx
PostMessageA
SetCursor
DestroyCursor
DestroyMenu
GetWindowLongA
CopyAcceleratorTableA
IsRectEmpty
CharNextA
TrackPopupMenu
EnableWindow
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
GetWindowRect
DrawFocusRect
FrameRect
FillRect
OffsetRect
InflateRect
CopyRect
GetDC
ReleaseDC
DrawStateA
DestroyIcon
SendMessageA
wvsprintfA
GetTopWindow
MoveToEx
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
LineTo
ExtSelectClipRgn
CreateSolidBrush
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetRgnBox
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetClipBox
GetDeviceCaps
CreatePen
PatBlt
Rectangle
GetTextColor
CreateFontA
CreateFontIndirectA
CreateDIBitmap
GetObjectA
CreateCompatibleBitmap
GetPixel
SetPixel
CreateBitmap
CreateCompatibleDC
SelectObject
SetBkColor
BitBlt
SetTextColor
DeleteDC
DeleteObject
GetStockObject
GetFileTitleA
ClosePrinter
OpenPrinterA
DocumentPropertiesA
RegEnumKeyA
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
AdjustTokenPrivileges
RegDeleteKeyA
RegOpenKeyA
GetUserNameW
RegCreateKeyA
ShellExecuteExA
Shell_NotifyIconA
ShellExecuteA
_TrackMouseEvent
ord17
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathRemoveFileSpecA
PathIsUNCA
ord8
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringByteLen
SysStringLen
SysFreeString
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocString
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
FormatMessageA
MoveFileA
WriteFile
SetFilePointer
VirtualFree
VirtualAlloc
DeleteFileA
CloseHandle
GetLastError
CreateFileA
WaitForSingleObject
GetDiskFreeSpaceA
RemoveDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetProcAddress
GetModuleHandleA
GetVersion
GetCurrentDirectoryA
GetFullPathNameA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
LocalFree
InterlockedIncrement
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FlushFileBuffers
SetHandleCount
GetFileType
GetStartupInfoA
IsBadWritePtr
IsBadReadPtr
HeapValidate
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
SetConsoleCtrlHandler
GetStringTypeA
GetStringTypeW
SetStdHandle
HeapAlloc
HeapReAlloc
CompareStringA
CompareStringW
SetEnvironmentVariableA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
d:\隔离卡\优化后的管理工具\UnInstall\UnInstall\Release\UnInstall.pdb
RtlUnwind
ExitProcess
GetStartupInfoA
GetCommandLineA
TerminateProcess
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
VirtualQuery
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
GetTickCount
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
SetErrorMode
FileTimeToSystemTime
GetOEMCP
GetCPInfo
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
InterlockedDecrement
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
WritePrivateProfileStringA
FreeResource
CloseHandle
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetModuleHandleA
GetProcAddress
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
LoadLibraryA
SetLastError
GlobalFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
GetTempPathA
CopyFileA
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
SizeofResource
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
FreeEnvironmentStringsW
InterlockedExchange
PostThreadMessageA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
CopyAcceleratorTableA
SetRect
IsRectEmpty
CharNextA
ReleaseCapture
SetCapture
LoadCursorA
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextA
GetForegroundWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
GetSysColor
AdjustWindowRectEx
EqualRect
GetClassInfoA
RegisterClassA
UnregisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
CharUpperA
DrawIcon
AppendMenuA
SendMessageA
GetSystemMenu
IsIconic
GetClientRect
EnableWindow
LoadIconA
GetSystemMetrics
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
CopyRect
PtInRect
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
wsprintfA
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
RegisterClipboardFormatA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetTopWindow
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
PostMessageA
PostQuitMessage
SetCursor
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
MessageBoxA
ValidateRect
GetCursorPos
PeekMessageA
GetKeyState
IsWindowVisible
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
CallNextHookEx
SetWindowsHookExA
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetStockObject
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutA
RectVisible
GetMapMode
GetDeviceCaps
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
RestoreDC
SaveDC
ExtTextOutA
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
PtVisible
GetFileTitleA
OpenPrinterA
DocumentPropertiesA
ClosePrinter
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
ShellExecuteA
ord17
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathRemoveFileSpecA
PathIsUNCA
ord8
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemFree
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoTaskMemAlloc
OleInitialize
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysAllocStringByteLen
OleCreateFontIndirect
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy
SysFreeString
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ord3874
ord540
ord5875
ord2859
ord613
ord1641
ord1640
ord6880
ord289
ord1146
ord2122
ord4160
ord6197
ord283
ord4133
ord4297
ord5788
ord472
ord2567
ord668
ord1980
ord3181
ord4058
ord2781
ord2770
ord941
ord5710
ord535
ord356
ord2614
ord940
ord859
ord537
ord860
ord5220
ord913
ord4189
ord5645
ord5265
ord4998
ord2514
ord6052
ord1775
ord4407
ord5280
ord4425
ord3597
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord616
ord641
ord324
ord2370
ord2302
ord4234
ord4853
ord4376
ord858
ord4129
ord5683
ord2652
ord1200
ord4224
ord939
ord1669
ord1168
ord3825
ord3499
ord2515
ord355
ord5651
ord3616
ord1979
ord665
ord3127
ord5186
ord350
ord354
ord823
ord4710
ord4644
ord1771
ord800
ord2413
ord2024
ord4217
ord2576
ord4397
ord3352
ord3577
ord692
ord5890
ord2937
ord2289
ord5572
ord2915
ord2086
ord6215
ord5440
ord6383
ord5450
ord6394
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord617
ord700
ord5214
ord398
ord296
ord2621
ord1134
ord3092
ord6241
ord2863
ord755
ord470
ord3831
ord3830
ord3402
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4396
ord2864
ord5981
ord5053
ord2405
ord2379
ord4284
ord4275
ord5785
ord2414
ord3663
ord3626
ord825
ord567
ord556
ord323
ord609
ord809
ord640
ord3574
ord4424
ord4627
ord4080
ord6366
ord3079
ord1776
ord4078
ord6055
ord2575
ord6334
ord3571
ord1576
__CxxFrameHandler
_ftol
_mbsnbcpy
_mbscmp
sprintf
_mbsicmp
fprintf
_iob
free
fwrite
fread
malloc
fclose
fopen
rewind
printf
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_setmbcp
GetModuleHandleA
GetLogicalDriveStringsA
WaitForSingleObject
GetModuleFileNameA
GetTempPathA
GetTempFileNameA
CopyFileA
FindFirstFileA
GetFileAttributesA
SetFileAttributesA
RemoveDirectoryA
FindNextFileA
FindClose
CreateFileA
GetFileSize
SetFilePointer
WriteFile
CloseHandle
GetVersionExA
GetWindowsDirectoryA
GetComputerNameA
DeleteFileA
GetStartupInfoA
SendMessageA
GetWindowLongA
GetSystemMetrics
DestroyCursor
DestroyMenu
DrawIcon
GetSystemMenu
AppendMenuA
LoadIconA
RedrawWindow
GetDlgItem
SetFocus
EnableWindow
FrameRect
LoadImageA
GetNextDlgTabItem
GetDC
ReleaseDC
GetSysColor
FillRect
DrawStateA
OffsetRect
GetClientRect
CopyRect
InflateRect
DrawFocusRect
GetWindowRect
GetSubMenu
TrackPopupMenuEx
PostMessageA
ClientToScreen
WindowFromPoint
GetActiveWindow
IsIconic
InvalidateRect
SetCursor
DestroyIcon
GetParent
GetObjectA
GetPixel
SetPixel
CreateBitmap
SelectObject
SetBkColor
SetTextColor
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
GetStockObject
CryptDestroyHash
CryptCreateHash
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegFlushKey
RegCloseKey
CryptEncrypt
GetUserNameA
CryptReleaseContext
CryptDestroyKey
CryptDecrypt
CryptHashData
CryptDeriveKey
CryptAcquireContextA
ShellExecuteExA
SHGetSpecialFolderPathA
_TrackMouseEvent
CoCreateInstance
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ