DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
Overview
overview
8Static
static
3ACTXPRXY.dll
windows7-x64
3ACTXPRXY.dll
windows10-2004-x64
3CKCNV.exe
windows7-x64
3CKCNV.exe
windows10-2004-x64
3CRYPT32.dll
windows7-x64
3CRYPT32.dll
windows10-2004-x64
3DISPEX.dll
windows7-x64
3DISPEX.dll
windows10-2004-x64
3EXTRAC32.exe
windows7-x64
3EXTRAC32.exe
windows10-2004-x64
3IEDKCS32.dll
windows7-x64
4IEDKCS32.dll
windows10-2004-x64
4IERNONCE.dll
windows7-x64
3IERNONCE.dll
windows10-2004-x64
3JSCRIPT.dll
windows7-x64
3JSCRIPT.dll
windows10-2004-x64
3MSRATING.dll
windows7-x64
3MSRATING.dll
windows10-2004-x64
3PLUGIN.dll
windows7-x64
3PLUGIN.dll
windows10-2004-x64
3SENDMAIL.dll
windows7-x64
3SENDMAIL.dll
windows10-2004-x64
3SHDOCLC.dll
windows7-x64
1SHDOCLC.dll
windows10-2004-x64
1SHLWAPI.dll
windows7-x64
3SHLWAPI.dll
windows10-2004-x64
3SOFTPUB.dll
windows7-x64
8SOFTPUB.dll
windows10-2004-x64
8URLMON.dll
windows7-x64
3URLMON.dll
windows10-2004-x64
3WININET.dll
windows7-x64
3WININET.dll
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
ACTXPRXY.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ACTXPRXY.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
CKCNV.exe
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
CKCNV.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
CRYPT32.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
CRYPT32.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
DISPEX.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
DISPEX.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
EXTRAC32.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
EXTRAC32.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
IEDKCS32.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
IEDKCS32.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
IERNONCE.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
IERNONCE.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
JSCRIPT.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
JSCRIPT.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
MSRATING.dll
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
MSRATING.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
PLUGIN.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
PLUGIN.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
SENDMAIL.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
SENDMAIL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
SHDOCLC.dll
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
SHDOCLC.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
SHLWAPI.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
SHLWAPI.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
SOFTPUB.dll
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
SOFTPUB.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
URLMON.dll
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
URLMON.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
WININET.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
WININET.dll
Resource
win10v2004-20240802-en
Target
1e77b2b3345d374f26f811137903f54d3bae9e03733ade3e53121448e5714c8bN
Size
1.4MB
MD5
cb248e3aaabf878006e7783746707320
SHA1
ded2308f89274da43da7ec2fe2d353b05aded102
SHA256
1e77b2b3345d374f26f811137903f54d3bae9e03733ade3e53121448e5714c8b
SHA512
0f1c866fa87d75f2baf78688d140e57710f03c36c95347664865d9668efd5ea7d55068262b6a04f91a02031c27d5ef7e7037772a990c928542f3782e5ef1b937
SSDEEP
24576:/SDlxLgScg1UPKkFU9I00ZC+tCw6Mm16C476Q9NKHxmjfU0MEITZLFKQnakIxO6F:8lxaWU3UO00ftC1bm76Q9NIMg0JCVfIH
Checks for missing Authenticode signature.
resource |
---|
unpack002/ACTXPRXY.DLL |
unpack002/CKCNV.EXE |
unpack002/CRYPT32.DLL |
unpack002/DISPEX.DLL |
unpack002/EXTRAC32.EXE |
unpack002/IEDKCS32.DLL |
unpack002/IERNONCE.DLL |
unpack002/JSCRIPT.DLL |
unpack002/MSRATING.DLL |
unpack002/PLUGIN.OCX |
unpack002/SENDMAIL.DLL |
unpack002/SHDOCLC.DLL |
unpack002/SHLWAPI.DLL |
unpack002/SOFTPUB.DLL |
unpack002/URLMON.DLL |
unpack002/WININET.DLL |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
WideCharToMultiByte
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
_controlfp
__set_app_type
??3@YAXPAX@Z
_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_strnicmp
??2@YAPAXI@Z
strstr
strtok
atoi
RegOpenKeyExA
GetUserNameA
RegQueryValueExA
GetModuleHandleA
DeleteFileA
GetModuleFileNameA
GetVersionExA
MoveFileExA
WritePrivateProfileSectionA
FindFirstFileA
CopyFileA
FindNextFileA
FindClose
CreateFileA
ReadFile
CompareFileTime
GetLastError
GetStartupInfoA
CloseHandle
GetUrlCacheEntryInfoA
CommitUrlCacheEntryA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
lstrcatA
FileTimeToSystemTime
InterlockedExchange
GetModuleFileNameA
LocalReAlloc
MapViewOfFile
FileTimeToLocalFileTime
GetTempFileNameA
GetTempPathA
UnmapViewOfFile
FormatMessageA
GetDateFormatA
CreateFileMappingA
TlsSetValue
FindNextChangeNotification
IsBadReadPtr
GetSystemTimeAsFileTime
LocalSize
lstrcpyA
GetSystemTime
TlsFree
CompareStringA
FindCloseChangeNotification
FindClose
FindFirstChangeNotificationW
FindFirstChangeNotificationA
Sleep
FindNextFileA
FindFirstFileA
GetCurrentThreadId
OpenEventA
ExitThread
PulseEvent
CreateThread
WaitForMultipleObjectsEx
TlsGetValue
TlsAlloc
SystemTimeToFileTime
GetEnvironmentVariableA
GetComputerNameW
GetComputerNameA
RaiseException
SetFilePointer
GetFileSize
DuplicateHandle
lstrlenA
SetEndOfFile
WaitForSingleObjectEx
CompareFileTime
lstrcmpiA
lstrcmpA
InterlockedDecrement
CreateEventA
WaitForSingleObject
LeaveCriticalSection
InterlockedIncrement
SetEvent
WriteFile
EnterCriticalSection
ReadFile
GetCurrentThread
DeleteCriticalSection
InitializeCriticalSection
GetLastError
GetCurrentProcess
CloseHandle
lstrlenW
WideCharToMultiByte
GetVersionExA
ExpandEnvironmentStringsW
GetProcAddress
FreeLibrary
LoadLibraryExA
ExpandEnvironmentStringsA
LoadLibraryExW
LoadLibraryA
CreateDirectoryA
CreateDirectoryW
LocalAlloc
LocalFree
SetLastError
MultiByteToWideChar
GetFileAttributesW
SetFileAttributesW
SetFileAttributesA
GetFileAttributesA
DeleteFileW
CreateFileA
DeleteFileA
CreateFileW
lstrcmpiW
bsearch
towupper
wcslen
strncmp
memmove
wcsncmp
__dllonexit
_onexit
qsort
_except_handler3
ossSetEncodingFlags
ossLinkDer
ossEncodedOidToDotVal
ossDotValToEncodedOid
ossLinkBer
ossGetOssGlobalSize
ossinit
ossGetDecodingFlags
ossSetDecodingFlags
ossDecode
ossFreePDU
ossFreeBuf
ossSetEncodingRules
ossEncode
ossterm
RpcImpersonateClient
RpcStringBindingComposeA
RpcBindingFree
RpcStringFreeA
RpcRevertToSelf
UuidCreate
NdrClientCall2
UuidToStringA
RpcBindingFromStringBindingA
RegGetKeySecurity
GetSecurityDescriptorOwner
RegSetKeySecurity
GetSecurityDescriptorDacl
GetAce
EqualSid
FreeSid
RegEnumKeyA
AllocateAndInitializeSid
CryptGenKey
CryptImportKey
RegNotifyChangeKeyValue
CryptGetKeyParam
CryptExportKey
CryptGetUserKey
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptGetProvParam
CryptDestroyKey
CryptReleaseContext
GetTokenInformation
CryptSetProvParam
CopySid
IsValidSid
GetLengthSid
GetSidSubAuthorityCount
GetSidSubAuthority
GetSidIdentifierAuthority
OpenProcessToken
RegConnectRegistryW
OpenThreadToken
RegOpenKeyExW
RegOpenKeyExA
RegConnectRegistryA
RegSetValueExW
RegSetValueExA
RegQueryInfoKeyW
RegQueryValueExA
RegDeleteValueW
RegQueryValueExW
RegEnumValueW
RegEnumValueA
RegDeleteValueA
RegEnumKeyExA
RegDeleteKeyW
RegEnumKeyExW
RegCreateKeyExW
RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
CryptSetProviderA
RegQueryInfoKeyA
CryptSignHashA
CryptAcquireContextA
CryptVerifySignatureA
QueryServiceStatus
CloseServiceHandle
OpenServiceW
InitializeSecurityDescriptor
AdjustTokenPrivileges
SetSecurityDescriptorOwner
SetSecurityDescriptorSacl
SetSecurityDescriptorDacl
LookupPrivilegeValueA
InitializeAcl
GetUserNameW
AddAccessAllowedAce
CryptSetKeyParam
CryptGenRandom
SetSecurityDescriptorGroup
CryptEncrypt
CryptDecrypt
CryptSetHashParam
GetUserNameA
OpenSCManagerW
MessageBoxA
LoadStringA
wsprintfW
LoadStringW
CertAddCRLContextToStore
CertAddCRLLinkToStore
CertAddCTLContextToStore
CertAddCTLLinkToStore
CertAddCertificateContextToStore
CertAddCertificateLinkToStore
CertAddEncodedCRLToStore
CertAddEncodedCTLToStore
CertAddEncodedCertificateToStore
CertAddEncodedCertificateToSystemStoreA
CertAddEncodedCertificateToSystemStoreW
CertAddEnhancedKeyUsageIdentifier
CertAddSerializedElementToStore
CertAddStoreToCollection
CertAlgIdToOID
CertCloseStore
CertCompareCertificate
CertCompareCertificateName
CertCompareIntegerBlob
CertComparePublicKeyInfo
CertControlStore
CertCreateCRLContext
CertCreateCTLContext
CertCreateCertificateChainEngine
CertCreateCertificateContext
CertCreateContext
CertCreateSelfSignCertificate
CertDeleteCRLFromStore
CertDeleteCTLFromStore
CertDeleteCertificateFromStore
CertDuplicateCRLContext
CertDuplicateCTLContext
CertDuplicateCertificateChain
CertDuplicateCertificateContext
CertDuplicateStore
CertEnumCRLContextProperties
CertEnumCRLsInStore
CertEnumCTLContextProperties
CertEnumCTLsInStore
CertEnumCertificateContextProperties
CertEnumCertificatesInStore
CertEnumPhysicalStore
CertEnumSubjectInSortedCTL
CertEnumSystemStore
CertEnumSystemStoreLocation
CertFindAttribute
CertFindCRLInStore
CertFindCTLInStore
CertFindCertificateInCRL
CertFindCertificateInStore
CertFindChainInStore
CertFindExtension
CertFindRDNAttr
CertFindSubjectInCTL
CertFindSubjectInSortedCTL
CertFreeCRLContext
CertFreeCTLContext
CertFreeCertificateChain
CertFreeCertificateChainEngine
CertFreeCertificateContext
CertGetCRLContextProperty
CertGetCRLFromStore
CertGetCTLContextProperty
CertGetCertificateChain
CertGetCertificateContextProperty
CertGetEnhancedKeyUsage
CertGetIntendedKeyUsage
CertGetIssuerCertificateFromStore
CertGetNameStringA
CertGetNameStringW
CertGetPublicKeyLength
CertGetStoreProperty
CertGetSubjectCertificateFromStore
CertGetValidUsages
CertIsRDNAttrsInCertificateName
CertNameToStrA
CertNameToStrW
CertOIDToAlgId
CertOpenStore
CertOpenSystemStoreA
CertOpenSystemStoreW
CertRDNValueToStrA
CertRDNValueToStrW
CertRegisterPhysicalStore
CertRegisterSystemStore
CertRemoveEnhancedKeyUsageIdentifier
CertRemoveStoreFromCollection
CertResyncCertificateChainEngine
CertSaveStore
CertSerializeCRLStoreElement
CertSerializeCTLStoreElement
CertSerializeCertificateStoreElement
CertSetCRLContextProperty
CertSetCTLContextProperty
CertSetCertificateContextProperty
CertSetEnhancedKeyUsage
CertSetStoreProperty
CertStrToNameA
CertStrToNameW
CertUnregisterPhysicalStore
CertUnregisterSystemStore
CertVerifyCRLRevocation
CertVerifyCRLTimeValidity
CertVerifyCTLUsage
CertVerifyCertificateChainPolicy
CertVerifyRevocation
CertVerifySubjectCertificateContext
CertVerifyTimeValidity
CertVerifyValidityNesting
ChainWlxLogoffEvent
CreateFileU
CryptAcquireCertificatePrivateKey
CryptAcquireContextU
CryptCloseAsyncHandle
CryptCreateAsyncHandle
CryptCreateKeyIdentifierFromCSP
CryptDecodeMessage
CryptDecodeObject
CryptDecodeObjectEx
CryptDecryptAndVerifyMessageSignature
CryptDecryptMessage
CryptEncodeObject
CryptEncodeObjectEx
CryptEncryptMessage
CryptEnumKeyIdentifierProperties
CryptEnumOIDFunction
CryptEnumOIDInfo
CryptEnumProvidersU
CryptExportPKCS8
CryptExportPublicKeyInfo
CryptExportPublicKeyInfoEx
CryptFindCertificateKeyProvInfo
CryptFindLocalizedName
CryptFindOIDInfo
CryptFormatObject
CryptFreeOIDFunctionAddress
CryptGetAsyncParam
CryptGetDefaultOIDDllList
CryptGetDefaultOIDFunctionAddress
CryptGetKeyIdentifierProperty
CryptGetMessageCertificates
CryptGetMessageSignerCount
CryptGetOIDFunctionAddress
CryptGetOIDFunctionValue
CryptHashCertificate
CryptHashMessage
CryptHashPublicKeyInfo
CryptHashToBeSigned
CryptImportPKCS8
CryptImportPublicKeyInfo
CryptImportPublicKeyInfoEx
CryptInitOIDFunctionSet
CryptInstallDefaultContext
CryptInstallOIDFunctionAddress
CryptLoadSip
CryptMemAlloc
CryptMemFree
CryptMemRealloc
CryptMsgCalculateEncodedLength
CryptMsgClose
CryptMsgControl
CryptMsgCountersign
CryptMsgCountersignEncoded
CryptMsgDuplicate
CryptMsgEncodeAndSignCTL
CryptMsgGetAndVerifySigner
CryptMsgGetParam
CryptMsgOpenToDecode
CryptMsgOpenToEncode
CryptMsgSignCTL
CryptMsgUpdate
CryptMsgVerifyCountersignatureEncoded
CryptProtectData
CryptQueryObject
CryptRegisterDefaultOIDFunction
CryptRegisterOIDFunction
CryptRegisterOIDInfo
CryptSIPAddProvider
CryptSIPCreateIndirectData
CryptSIPGetSignedDataMsg
CryptSIPLoad
CryptSIPPutSignedDataMsg
CryptSIPRemoveProvider
CryptSIPRemoveSignedDataMsg
CryptSIPRetrieveSubjectGuid
CryptSIPVerifyIndirectData
CryptSetAsyncParam
CryptSetKeyIdentifierProperty
CryptSetOIDFunctionValue
CryptSetProviderU
CryptSignAndEncodeCertificate
CryptSignAndEncryptMessage
CryptSignCertificate
CryptSignHashU
CryptSignMessage
CryptSignMessageWithKey
CryptUninstallDefaultContext
CryptUnprotectData
CryptUnregisterDefaultOIDFunction
CryptUnregisterOIDFunction
CryptUnregisterOIDInfo
CryptVerifyCertificateSignature
CryptVerifyDetachedMessageHash
CryptVerifyDetachedMessageSignature
CryptVerifyMessageHash
CryptVerifyMessageSignature
CryptVerifyMessageSignatureWithKey
CryptVerifySignatureU
I_CertProtectFunction
I_CertSrvProtectFunction
I_CertSyncStore
I_CryptAddRefLruEntry
I_CryptAddSmartCardCertToStore
I_CryptAllocTls
I_CryptCreateLruCache
I_CryptCreateLruEntry
I_CryptDetachTls
I_CryptDisableLruOfEntries
I_CryptEnableLruOfEntries
I_CryptEnumMatchingLruEntries
I_CryptFindLruEntry
I_CryptFindLruEntryData
I_CryptFindSmartCardCertInStore
I_CryptFlushLruCache
I_CryptFreeLruCache
I_CryptFreeTls
I_CryptGetDefaultCryptProv
I_CryptGetDefaultCryptProvForEncrypt
I_CryptGetFileVersion
I_CryptGetLruEntryData
I_CryptGetLruEntryIdentifier
I_CryptGetOssGlobal
I_CryptGetTls
I_CryptInsertLruEntry
I_CryptInstallOssGlobal
I_CryptRegisterSmartCardStore
I_CryptReleaseLruEntry
I_CryptRemoveLruEntry
I_CryptSetTls
I_CryptTouchLruEntry
I_CryptUninstallOssGlobal
I_CryptUnregisterSmartCardStore
I_CryptWalkAllLruCacheEntries
PFXExportCertStore
PFXExportCertStoreEx
PFXImportCertStore
PFXIsPFXBlob
PFXVerifyPassword
RegCreateHKCUKeyExU
RegCreateKeyExU
RegDeleteValueU
RegEnumValueU
RegOpenHKCUKeyExU
RegOpenKeyExU
RegQueryInfoKeyU
RegQueryValueExU
RegSetValueExU
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IUnknown_QueryInterface_Proxy
NdrProxyErrorHandler
IUnknown_AddRef_Proxy
NdrClearOutParameters
NdrProxyFreeBuffer
NdrConvert
NdrProxySendReceive
NdrUserMarshalMarshall
NdrProxyGetBuffer
NdrUserMarshalBufferSize
NdrProxyInitialize
NdrUserMarshalFree
NdrStubGetBuffer
NdrUserMarshalUnmarshall
NdrStubInitialize
NdrComplexArrayUnmarshall
NdrComplexStructUnmarshall
NdrStubForwardingFunction
IUnknown_Release_Proxy
NdrInterfacePointerMarshall
NdrComplexStructMarshall
NdrComplexArrayBufferSize
NdrConformantArrayBufferSize
NdrInterfacePointerBufferSize
NdrComplexStructBufferSize
NdrInterfacePointerFree
NdrPointerFree
NdrConformantArrayUnmarshall
NdrInterfacePointerUnmarshall
NdrPointerUnmarshall
NdrPointerMarshall
NdrPointerBufferSize
NdrSimpleStructMarshall
NdrSimpleStructBufferSize
NdrSimpleStructUnmarshall
CStdStubBuffer_QueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
NdrOleFree
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer2_Release
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrComplexArrayMarshall
NdrConformantArrayMarshall
BSTR_UserSize
BSTR_UserMarshal
BSTR_UserUnmarshal
BSTR_UserFree
VARIANT_UserSize
VARIANT_UserMarshal
VARIANT_UserUnmarshal
VARIANT_UserFree
_adjust_fdiv
malloc
_initterm
free
??3@YAXPAX@Z
??2@YAPAXI@Z
_except_handler3
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetVersion
CloseHandle
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileTime
CreateFileA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
FindClose
GetLastError
FileTimeToSystemTime
FindFirstFileA
DeleteFileA
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
SetFilePointer
GetFileType
ReadFile
WriteFile
CreateDirectoryA
GetCurrentDirectoryA
GetModuleHandleA
GetStartupInfoA
GetDriveTypeA
GetFileAttributesA
HeapDestroy
HeapCreate
VirtualFree
GetModuleFileNameA
GetFullPathNameA
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
SetStdHandle
SetHandleCount
GetStdHandle
SetEndOfFile
GetStringTypeA
GetStringTypeW
GetProcAddress
RtlUnwind
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
FlushFileBuffers
LoadLibraryA
HeapReAlloc
GetCommandLineA
VirtualAlloc
PeekMessageA
SendDlgItemMessageA
EnableMenuItem
GetSystemMenu
DestroyWindow
CreateDialogParamA
DispatchMessageA
ord17
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetPrivateProfileSectionA
lstrcatA
GlobalFree
LoadLibraryA
MoveFileA
FindNextFileA
FindFirstFileA
lstrcpynA
MultiByteToWideChar
FindClose
GetFileSize
SetFileAttributesA
WriteFile
GetTickCount
GetFileTime
ReadFile
GetVersionExA
RemoveDirectoryA
CreateDirectoryA
GetLocalTime
GetFileAttributesA
IsDBCSLeadByte
FreeLibrary
GetProcAddress
GetVersion
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
LocalReAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
ExitProcess
LeaveCriticalSection
LocalFree
TerminateProcess
GetCurrentProcess
EnterCriticalSection
WritePrivateProfileStringA
lstrcmpiA
lstrlenA
CreateThread
GetModuleFileNameA
lstrcmpA
CloseHandle
lstrcpyA
GetPrivateProfileStringA
GetWindowsDirectoryA
CopyFileA
GetPrivateProfileIntA
DeleteFileA
FlushFileBuffers
GetLastError
SetFilePointer
RaiseException
InterlockedExchange
WideCharToMultiByte
OutputDebugStringA
GetModuleHandleA
CreateFileA
GetMessageA
PeekMessageA
PostMessageA
GetTopWindow
GetClassNameA
GetShellWindow
SendMessageTimeoutA
GetDesktopWindow
LoadStringA
wsprintfA
LoadCursorA
wvsprintfA
CharLowerA
MsgWaitForMultipleObjects
DestroyIcon
CharNextA
LoadImageA
EndDialog
KillTimer
DispatchMessageA
TranslateMessage
SetCursor
SetTimer
DialogBoxParamA
GetWindow
CharPrevA
SendDlgItemMessageA
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegEnumValueA
RegCreateKeyExA
RegSaveKeyA
RegDeleteValueA
RegEnumKeyA
PathGetCharTypeA
PathGetDriveNumberA
PathFileExistsA
PathAddExtensionA
PathRemoveExtensionA
StrToIntExA
PathIsFileSpecA
PathAppendA
PathRemoveFileSpecA
SHSetValueA
SHGetValueA
SHDeleteValueA
PathAddBackslashA
SHDeleteKeyA
StrCmpNA
SHDeleteEmptyKeyA
PathCombineA
StrChrA
PathFindFileNameA
StrPBrkA
PathIsUNCA
StrStrIA
StrCmpNIA
PathAppendW
StrCpyW
StrRetToStrW
wnsprintfA
SHQueryValueExA
PathIsURLA
PathFindExtensionA
StrRChrA
StrSpnA
StrTrimA
PathIsDirectoryA
PathRemoveBackslashA
PathIsUNCServerA
PathIsRootA
PathSkipRootA
PathFindNextComponentA
CoCreateGuid
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoUninitialize
CoGetMalloc
CoInitializeEx
StringFromGUID2
InternetCreateUrlA
InternetGetLastResponseInfoA
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA
InternetReadFile
InternetCrackUrlA
InternetGetConnectedStateExA
InternetSetOptionA
InternetQueryOptionA
ShellExecuteExA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHChangeNotify
ord328
ord334
ord332
BrandCleanInstallStubs
BrandICW
BrandICW2
BrandIE4
BrandInfAndOutlookExpress
BrandIntra
BrandMe
Clear
CloseRASConnections
DllMain
InternetInitializeAutoProxyDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetDlgItem
GetSystemMetrics
DrawTextA
SetCursor
LoadCursorA
PostMessageA
wsprintfA
ReleaseDC
GetParent
SetWindowTextA
SetWindowPos
GetSysColor
EndDialog
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjects
GetDC
GetWindowRect
LoadStringA
MessageBoxA
ExitWindowsEx
CharPrevA
LoadBitmapA
CharNextA
SendMessageA
DialogBoxParamA
GetTextExtentPointA
SetTextColor
CreateSolidBrush
GetObjectA
SetBkColor
DeleteObject
BitBlt
CreateCompatibleDC
ExtTextOutA
CreateFontIndirectA
SelectObject
LookupPrivilegeValueA
OpenServiceA
OpenSCManagerA
RegQueryValueA
RegQueryInfoKeyA
OpenProcessToken
AdjustTokenPrivileges
CloseServiceHandle
EnumDependentServicesA
RegEnumKeyA
RegCloseKey
RegEnumValueA
RegDeleteKeyA
RegOpenKeyExA
RegDeleteValueA
RegFlushKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
DisableThreadLibraryCalls
GetProcAddress
CreateProcessA
LoadLibraryExA
CompareStringA
WideCharToMultiByte
RtlUnwind
HeapFree
HeapAlloc
GetLocalTime
WriteFile
CreateFileA
SetFilePointer
GetProfileStringA
IsDBCSLeadByte
FormatMessageA
GetCurrentProcess
GetVersionExA
GetProcessHeap
GetLastError
lstrlenA
CopyFileA
SetFileAttributesA
lstrcpyA
GetWindowsDirectoryA
FreeLibrary
GetModuleHandleA
MultiByteToWideChar
CreateThread
LocalAlloc
CloseHandle
GetSystemDirectoryA
LocalFree
ShellExecuteExA
ord335
ord338
ord332
ord329
ord328
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
IsNTAdmin
GetVersionFromFile
NeedReboot
InitCallback
RunOnceExProcess
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
RegOpenKeyA
RegOpenKeyExA
RegSetValueA
RegCreateKeyA
RegCloseKey
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
InterlockedDecrement
TlsGetValue
InitializeCriticalSection
InterlockedIncrement
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
GetModuleHandleA
GetUserDefaultLCID
GetCurrentThreadId
IsValidCodePage
GetLocaleInfoA
IsValidLocale
IsBadStringPtrW
IsBadWritePtr
GetProcAddress
TlsSetValue
GetTickCount
GetCurrentProcessId
QueryPerformanceCounter
TlsAlloc
FreeLibrary
TlsFree
FreeResource
LockResource
LoadResource
FindResourceA
LoadLibraryExA
GetTimeZoneInformation
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
MkParseDisplayName
CLSIDFromString
CoGetMalloc
StringFromCLSID
CreateBindCtx
BindMoniker
CLSIDFromProgID
CoGetClassObject
CoTaskMemFree
CoCreateInstance
LoadTypeLibEx
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
VariantChangeTypeEx
SysAllocStringByteLen
SysAllocString
SysStringByteLen
GetActiveObject
LoadTypeLi
VariantCopyInd
VariantClear
LoadRegTypeLi
CreateTypeLi
SafeArrayCreate
SysFreeString
SafeArrayRedim
SafeArrayDestroy
VariantCopy
SysStringLen
SysAllocStringLen
VariantInit
CreateTypeLib2
_wcsnicmp
_adjust_fdiv
_initterm
_onexit
__dllonexit
atoi
wcsncmp
wcscat
_wcslwr
isalpha
_wasctime
towlower
_ftol
localtime
_ftime
atan2
ceil
tan
sqrt
wcsftime
isdigit
_wcsicmp
sin
cos
atan
asin
acos
fmod
_ismbblead
wcsstr
wcscspn
strrchr
swprintf
realloc
malloc
??3@YAXPAX@Z
free
_wcsdup
longjmp
_setjmp3
memmove
??2@YAPAXI@Z
_purecall
wcslen
log
exp
wcschr
_ultow
floor
wcscpy
pow
sprintf
wcsncpy
wcscmp
strtoul
_control87
_clearfp
_ltow
_except_handler3
__CxxFrameHandler
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetOpenFileNameA
LocalReAlloc
CopyFileA
GlobalAlloc
GlobalFree
LocalAlloc
lstrcmpiA
LocalFree
GetSystemTime
ReadFile
ReleaseSemaphore
GetSystemDirectoryA
GetWindowsDirectoryA
GetFileAttributesA
GetVersion
IsDBCSLeadByte
MultiByteToWideChar
GetLastError
lstrcpyA
CreateThread
CreateEventA
WaitForMultipleObjects
SetEvent
FreeLibrary
LoadLibraryA
GetProcAddress
lstrlenA
CreateFileA
GetFileSize
CloseHandle
DisableThreadLibraryCalls
lstrcmpA
CreateMutexA
CreateSemaphoreA
ReleaseMutex
WaitForSingleObject
InterlockedIncrement
InterlockedDecrement
lstrcatA
RaiseException
IsDialogMessageA
TranslateMessage
GetPropA
DialogBoxParamA
GetDlgItemTextA
SetDlgItemTextA
GetWindowLongA
GetMessageA
DispatchMessageA
LoadImageA
SetWindowLongA
SetPropA
GetDlgItem
GetDC
GetSystemMetrics
GetFocus
SetFocus
ShowWindow
EnableWindow
GetParent
DestroyWindow
GetSysColor
IsDlgButtonChecked
CheckDlgButton
RemovePropA
EndDialog
ReleaseDC
SendDlgItemMessageA
GetWindowTextLengthA
SendMessageA
wsprintfA
LoadStringA
CharUpperA
MessageBoxA
GetWindowTextA
SetWindowTextA
GetWindowRect
PostMessageA
GetTextExtentPointA
GetTextMetricsA
SelectObject
DeleteObject
PropertySheetA
DestroyPropertySheetPage
InitCommonControlsEx
CreatePropertySheetPageA
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy
ImageList_Add
ImageList_GetImageCount
FreeSid
RegCreateKeyExA
RegOpenKeyExA
RegDeleteValueA
RegUnLoadKeyA
RegLoadKeyA
RegCreateKeyA
RegCloseKey
RegFlushKey
RegEnumValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueExA
RegSetValueExA
InitializeSecurityDescriptor
RegSaveKeyA
SetSecurityDescriptorDacl
GetAce
AddAccessAllowedAce
AllocateAndInitializeSid
InitializeAcl
ioctlsocket
gethostbyname
ord431
ord224
UrlApplySchemeA
ord223
ord222
ord417
ChangeSupervisorPassword
ClickedOnPRF
ClickedOnRAT
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RatingAccessDeniedDialog
RatingAccessDeniedDialog2
RatingAddPropertyPages
RatingCheckUserAccess
RatingEnable
RatingEnabledQuery
RatingFreeDetails
RatingInit
RatingObtainCancel
RatingObtainQuery
RatingSetupUI
VerifySupervisorPassword
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
VariantChangeType
VariantClear
SysFreeString
LoadTypeLi
VariantInit
SafeArrayDestroy
SysAllocString
SafeArrayPutElement
SafeArrayCreate
RegisterTypeLi
SysAllocStringLen
LHashValOfNameSys
SetErrorInfo
VariantCopy
LoadRegTypeLi
OleCreatePropertyFrame
CoTaskMemAlloc
CoCreateInstance
CoGetInterfaceAndReleaseStream
CreateOleAdviseHolder
CoMarshalInterThreadInterfaceInStream
CoTaskMemFree
BeginPaint
SetFocus
EndPaint
IsWindowVisible
ShowWindow
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
GetWindowRect
GetActiveWindow
CharNextA
UnregisterClassA
GetClipboardFormatNameA
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
EnumChildWindows
DialogBoxParamA
GetPropA
GetSystemMetrics
SetWindowPos
SetDlgItemTextA
EndDialog
SetParent
LoadStringA
MessageBoxA
wsprintfA
GetWindowLongA
LoadImageA
DrawIconEx
GetClientRect
DefWindowProcA
MapWindowPoints
SendMessageA
GetFocus
GetParent
IsWindow
PostMessageA
SetWindowLongA
GetKeyState
CreateWindowExA
PeekMessageA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
DestroyWindow
GetDC
ReleaseDC
LoadCursorA
RegisterClassA
RegisterWindowMessageA
PtInRect
RemovePropA
SetPropA
DrawEdge
LPtoDP
GetDeviceCaps
SetWindowOrgEx
GetMapMode
DeleteObject
CreateRectRgnIndirect
DeleteDC
SetMapMode
SetViewportOrgEx
CreateDCA
OffsetWindowOrgEx
RegOpenKeyA
RegSetValueExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegQueryInfoKeyA
RegEnumValueA
RegCreateKeyA
GetShortPathNameA
SetEvent
GetFileSize
DisableThreadLibraryCalls
GetCurrentThreadId
GlobalAddAtomA
TlsSetValue
TlsFree
TlsAlloc
TlsGetValue
FindFirstFileA
GetLastError
lstrcpynA
FindClose
GlobalLock
GlobalUnlock
CreateFileA
SetFilePointer
ReadFile
CloseHandle
GlobalAlloc
FindNextFileA
GetProcessHeap
GetVersion
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleA
LoadLibraryExA
GetEnvironmentVariableA
SetEnvironmentVariableA
HeapAlloc
lstrlenW
WideCharToMultiByte
lstrlenA
HeapFree
LocalAlloc
GlobalFree
CreateEventA
MulDiv
lstrcpyA
lstrcmpiA
LocalFree
lstrcatA
CreateDirectoryA
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
LoadLibraryA
GetLocaleInfoA
HeapReAlloc
InterlockedIncrement
InterlockedDecrement
RtlUnwind
lstrcmpA
MultiByteToWideChar
FreeLibrary
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
ord17
SHDeleteKeyA
InternetCanonicalizeUrlA
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
HttpQueryInfoA
InternetCrackUrlA
HlinkSimpleNavigateToString
URLDownloadA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
FindPluginA
FindPluginByExtA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GlobalAlloc
LocalAlloc
GlobalFree
GlobalUnlock
GlobalLock
LocalFree
lstrlenW
GlobalSize
FreeLibrary
GetVersionExW
CloseHandle
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
WideCharToMultiByte
GetProcAddress
CoInitialize
CoUninitialize
ReleaseStgMedium
CoCreateInstance
StrCpyW
PathIsDirectoryW
PathFindFileNameW
SHCreateStreamOnFileW
StrCatW
PathFindExtensionW
SHQueryValueExW
StrCmpIW
PathFindFileNameA
PathAppendW
SHCreateThread
StrCpyNW
ord215
ord217
ord346
ord313
ord112
ord90
PathRenameExtensionW
ord318
ord107
ord340
ord132
ord436
ord127
ord125
ord309
ord86
ord361
ord334
ord52
ord119
ord130
ord338
ord121
ord123
ord124
ord80
ord97
ord57
SHRegGetUSValueW
wnsprintfW
SHGetSpecialFolderLocation
ord195
ord75
ord175
ord171
RegCloseKey
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
GetCharacterPlacementW
GetCharWidthA
GetCharWidth32W
CreateFontA
GetCharacterPlacementA
SetBkColor
SetTextColor
CreateMetaFileW
StartDocA
StartDocW
GetTextExtentPointW
ExtTextOutA
ExtTextOutW
SetBkMode
GetTextFaceW
GetTextMetricsW
GetTextMetricsA
GetTextExtentPoint32A
GetTextFaceA
GetTextExtentPoint32W
EnumFontFamiliesExA
GetObjectW
EnumFontFamiliesExW
CreateFontIndirectW
EnumFontFamiliesW
EnumFontFamiliesA
CreateICA
CreateFontIndirectA
CreateICW
GetTextExtentPointA
CreateDCW
CreateDCA
GetObjectA
DeleteObject
SelectObject
GetDeviceCaps
CreateCompatibleBitmap
CreateBitmap
GetSystemPaletteEntries
GetStockObject
CreateCompatibleDC
CreateFontW
CreateMetaFileA
CreateHalftonePalette
DeleteDC
CreatePalette
GetCurrentThreadId
GetWindowsDirectoryA
EnterCriticalSection
DebugBreak
LeaveCriticalSection
FlushFileBuffers
WriteFile
SetLastError
CreateFileA
GetSystemTime
GetTickCount
SetFilePointer
QueryPerformanceFrequency
IsDBCSLeadByte
GetCPInfo
lstrlenW
lstrcmpA
QueryPerformanceCounter
CompareStringA
GetNumberFormatW
GetFileAttributesA
LCMapStringA
SetErrorMode
GetEnvironmentVariableA
GetSystemDirectoryA
GetThreadLocale
SearchPathA
FindClose
FindNextFileA
FindFirstFileA
SetFileAttributesA
CreateDirectoryA
CreateDirectoryW
CreateEventW
CreateFileW
DeleteFileA
DeleteFileW
GetFullPathNameA
EnumResourceNamesW
FindFirstFileW
FindResourceA
FindResourceW
FormatMessageA
FormatMessageW
GetCurrentDirectoryA
GetCurrentDirectoryW
GetFileAttributesW
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetSystemDirectoryW
SetEvent
EnumResourceNamesA
GetModuleHandleW
SetFileAttributesW
GetNumberFormatA
FindNextFileW
GetFullPathNameW
GetShortPathNameA
GetShortPathNameW
GetStringTypeExA
GetStringTypeExW
GetPrivateProfileIntA
GetPrivateProfileIntW
GetProfileStringA
GetProfileStringW
GetTempFileNameA
GetTempFileNameW
GetTempPathA
GetTempPathW
GetWindowsDirectoryW
GetEnvironmentVariableW
SizeofResource
LockResource
LoadResource
LoadLibraryExA
LoadLibraryExW
CompareStringW
CopyFileA
CopyFileW
MoveFileA
MoveFileW
OpenEventA
OpenEventW
OutputDebugStringA
OutputDebugStringW
RemoveDirectoryA
RemoveDirectoryW
SetCurrentDirectoryA
SetCurrentDirectoryW
CreateEventA
CreateMutexW
CreateSemaphoreA
CreateSemaphoreW
IsBadStringPtrW
LoadLibraryW
GetTimeFormatA
GetTimeFormatW
GetDateFormatA
GetDateFormatW
WritePrivateProfileStringA
WritePrivateProfileStringW
GetPrivateProfileStringA
GetPrivateProfileStringW
WritePrivateProfileStructA
WritePrivateProfileStructW
GetPrivateProfileStructA
GetPrivateProfileStructW
CreateProcessA
CreateProcessW
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
InterlockedIncrement
InterlockedDecrement
CompareFileTime
GetFileTime
LCMapStringW
FileTimeToSystemTime
SystemTimeToFileTime
GetLocalTime
FileTimeToLocalFileTime
TlsSetValue
TlsGetValue
WaitForSingleObject
CreateThread
GlobalMemoryStatus
GlobalDeleteAtom
GlobalAddAtomW
GlobalAddAtomA
ReleaseSemaphore
GetACP
GetUserDefaultLCID
IsBadReadPtr
IsBadStringPtrA
LocalSize
SleepEx
QueueUserAPC
FreeLibraryAndExitThread
ReadFile
HeapDestroy
HeapAlloc
HeapCreate
DeviceIoControl
GetSystemPowerStatus
IsBadCodePtr
WaitForMultipleObjectsEx
GetVersionExA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CreateMutexA
GetCurrentProcessId
OpenProcess
GetCurrentProcess
DuplicateHandle
CloseHandle
lstrcmpiA
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
lstrlenA
lstrcpynA
GetLastError
MultiByteToWideChar
InterlockedExchange
WideCharToMultiByte
lstrcpyA
lstrcatA
LocalReAlloc
LocalAlloc
LocalFree
FreeLibrary
LoadLibraryA
GetProcAddress
IsBadWritePtr
DisableThreadLibraryCalls
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
TlsFree
GetModuleHandleA
SearchPathW
RtlUnwind
SetWindowsHookExA
CreateAcceleratorTableW
CreateDialogIndirectParamA
CreateDialogIndirectParamW
CreateDialogParamA
CreateDialogParamW
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
DialogBoxIndirectParamA
DialogBoxIndirectParamW
DialogBoxParamA
DialogBoxParamW
DispatchMessageA
DispatchMessageW
DrawTextA
DrawTextW
FindWindowW
FindWindowExA
FindWindowExW
GetClassInfoA
GetClassInfoW
GetClassLongW
GetClassNameW
GetClipboardFormatNameA
GetClipboardFormatNameW
GetMessageA
GetMessageW
MessageBoxA
MessageBoxW
GetPropA
GetPropW
GetWindowLongA
GetWindowLongW
GetWindowTextW
GetWindowTextLengthA
GetWindowTextLengthW
IsDialogMessageA
IsDialogMessageW
LoadAcceleratorsA
LoadAcceleratorsW
LoadBitmapA
LoadBitmapW
LoadCursorA
LoadCursorW
LoadIconA
LoadIconW
CreateIconFromResource
CreateIconFromResourceEx
LookupIconIdFromDirectoryEx
LoadImageA
LoadImageW
DeleteMenu
DestroyMenu
CreateMenu
SetMenuContextHelpId
LoadMenuA
LoadMenuW
OffsetRect
CopyRect
GetSysColor
SystemParametersInfoA
GetMenuStringA
GetMenuStringW
InsertMenuA
InsertMenuW
GetWindowThreadProcessId
IsWindow
TrackPopupMenu
TrackPopupMenuEx
LoadStringW
MessageBoxIndirectA
MessageBoxIndirectW
ModifyMenuA
ModifyMenuW
OemToCharA
OemToCharW
PeekMessageA
PeekMessageW
PostMessageA
PostMessageW
PostThreadMessageA
PostThreadMessageW
RegisterClassA
RegisterClassW
RegisterClipboardFormatA
RegisterClipboardFormatW
RegisterWindowMessageA
RegisterWindowMessageW
RemovePropA
RemovePropW
SendDlgItemMessageW
SendMessageTimeoutA
SendMessageTimeoutW
SendMessageW
SetPropA
SetPropW
SetWindowLongA
SetWindowLongW
CreateAcceleratorTableA
SetWindowsHookExW
SetWindowTextW
SystemParametersInfoW
TranslateAcceleratorA
TranslateAcceleratorW
UnregisterClassA
UnregisterClassW
VkKeyScanA
VkKeyScanW
WinHelpW
wvsprintfA
wvsprintfW
DrawTextExA
DrawTextExW
GetMenuItemInfoW
InsertMenuItemA
InsertMenuItemW
SetMenuItemInfoA
SetMenuItemInfoW
RegisterClassExA
RegisterClassExW
GetClassInfoExA
GetClassInfoExW
DdeInitializeA
DdeInitializeW
DdeCreateStringHandleA
DdeCreateStringHandleW
DdeQueryStringA
DdeQueryStringW
SetParent
GetParent
RemoveMenu
GetSubMenu
EnumChildWindows
IsWindowUnicode
EnableMenuItem
CheckMenuItem
DeferWindowPos
MapWindowPoints
SendDlgItemMessageA
SetWindowPos
GetWindowRect
EndDeferWindowPos
BeginDeferWindowPos
EnableWindow
ShowWindow
SetFocus
IsDlgButtonChecked
EndDialog
MsgWaitForMultipleObjects
IsChild
GetMenuDefaultItem
CreatePopupMenu
SetCursor
FindWindowA
InvalidateRect
EndPaint
BeginPaint
UpdateWindow
DrawFocusRect
GetFocus
ValidateRect
EqualRect
GetUpdateRect
BroadcastSystemMessage
CopyAcceleratorTableW
CopyAcceleratorTableA
CharUpperBuffW
CharUpperW
CharToOemW
CharToOemA
CharLowerBuffW
CharLowerW
CallMsgFilterW
CallMsgFilterA
CallWindowProcW
CallWindowProcA
CharUpperA
GetDlgItem
GetClientRect
SendMessageA
SetWindowTextA
CharPrevA
GetDC
GetIconInfo
DrawIconEx
CreateIconIndirect
ReleaseDC
DestroyIcon
CharNextA
GetClassLongA
SetTimer
KillTimer
GetWindowTextA
GetClassNameA
wsprintfA
WinHelpA
LoadStringA
GetMenuItemInfoA
GetMenuItemCount
GetSystemMetrics
RegCloseKey
RegOpenKeyExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegDeleteKeyA
RegSetValueExW
RegSetValueW
RegQueryValueW
RegQueryValueA
RegSetValueA
RegOpenKeyA
RegEnumKeyW
RegOpenKeyW
RegCreateKeyW
GetUserNameW
RegDeleteKeyW
RegCreateKeyA
RegQueryInfoKeyW
GetUserNameA
RegEnumKeyExW
RegQueryValueExW
RegEnumValueW
RegEnumKeyExA
RegEnumValueA
RegQueryValueExA
RegDeleteValueA
RegCreateKeyExW
RegDeleteValueW
RegSetValueExA
RegOpenKeyExW
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumKeyA
AssocCreate
AssocQueryKeyA
AssocQueryKeyW
AssocQueryStringA
AssocQueryStringByKeyA
AssocQueryStringByKeyW
AssocQueryStringW
ChrCmpIA
ChrCmpIW
ColorAdjustLuma
ColorHLSToRGB
ColorRGBToHLS
DllGetVersion
GetMenuPosFromID
HashData
IntlStrEqWorkerA
IntlStrEqWorkerW
PathAddBackslashA
PathAddBackslashW
PathAddExtensionA
PathAddExtensionW
PathAppendA
PathAppendW
PathBuildRootA
PathBuildRootW
PathCanonicalizeA
PathCanonicalizeW
PathCombineA
PathCombineW
PathCommonPrefixA
PathCommonPrefixW
PathCompactPathA
PathCompactPathExA
PathCompactPathExW
PathCompactPathW
PathCreateFromUrlA
PathCreateFromUrlW
PathFileExistsA
PathFileExistsW
PathFindExtensionA
PathFindExtensionW
PathFindFileNameA
PathFindFileNameW
PathFindNextComponentA
PathFindNextComponentW
PathFindOnPathA
PathFindOnPathW
PathFindSuffixArrayA
PathFindSuffixArrayW
PathGetArgsA
PathGetArgsW
PathGetCharTypeA
PathGetCharTypeW
PathGetDriveNumberA
PathGetDriveNumberW
PathIsContentTypeA
PathIsContentTypeW
PathIsDirectoryA
PathIsDirectoryEmptyA
PathIsDirectoryEmptyW
PathIsDirectoryW
PathIsFileSpecA
PathIsFileSpecW
PathIsLFNFileSpecA
PathIsLFNFileSpecW
PathIsNetworkPathA
PathIsNetworkPathW
PathIsPrefixA
PathIsPrefixW
PathIsRelativeA
PathIsRelativeW
PathIsRootA
PathIsRootW
PathIsSameRootA
PathIsSameRootW
PathIsSystemFolderA
PathIsSystemFolderW
PathIsUNCA
PathIsUNCServerA
PathIsUNCServerShareA
PathIsUNCServerShareW
PathIsUNCServerW
PathIsUNCW
PathIsURLA
PathIsURLW
PathMakePrettyA
PathMakePrettyW
PathMakeSystemFolderA
PathMakeSystemFolderW
PathMatchSpecA
PathMatchSpecW
PathParseIconLocationA
PathParseIconLocationW
PathQuoteSpacesA
PathQuoteSpacesW
PathRelativePathToA
PathRelativePathToW
PathRemoveArgsA
PathRemoveArgsW
PathRemoveBackslashA
PathRemoveBackslashW
PathRemoveBlanksA
PathRemoveBlanksW
PathRemoveExtensionA
PathRemoveExtensionW
PathRemoveFileSpecA
PathRemoveFileSpecW
PathRenameExtensionA
PathRenameExtensionW
PathSearchAndQualifyA
PathSearchAndQualifyW
PathSetDlgItemPathA
PathSetDlgItemPathW
PathSkipRootA
PathSkipRootW
PathStripPathA
PathStripPathW
PathStripToRootA
PathStripToRootW
PathUndecorateA
PathUndecorateW
PathUnmakeSystemFolderA
PathUnmakeSystemFolderW
PathUnquoteSpacesA
PathUnquoteSpacesW
SHAutoComplete
SHCopyKeyA
SHCopyKeyW
SHCreateShellPalette
SHCreateStreamOnFileA
SHCreateStreamOnFileAOld
SHCreateStreamOnFileW
SHCreateStreamOnFileWOld
SHCreateStreamWrapper
SHCreateThread
SHDeleteEmptyKeyA
SHDeleteEmptyKeyW
SHDeleteKeyA
SHDeleteKeyW
SHDeleteOrphanKeyA
SHDeleteOrphanKeyW
SHDeleteValueA
SHDeleteValueW
SHEnumKeyExA
SHEnumKeyExW
SHEnumValueA
SHEnumValueW
SHGetInverseCMAP
SHGetThreadRef
SHGetValueA
SHGetValueW
SHIsLowMemoryMachine
SHOpenRegStream2A
SHOpenRegStream2W
SHOpenRegStreamA
SHOpenRegStreamW
SHQueryInfoKeyA
SHQueryInfoKeyW
SHQueryValueExA
SHQueryValueExW
SHRegCloseUSKey
SHRegCreateUSKeyA
SHRegCreateUSKeyW
SHRegDeleteEmptyUSKeyA
SHRegDeleteEmptyUSKeyW
SHRegDeleteUSValueA
SHRegDeleteUSValueW
SHRegDuplicateHKey
SHRegEnumUSKeyA
SHRegEnumUSKeyW
SHRegEnumUSValueA
SHRegEnumUSValueW
SHRegGetBoolUSValueA
SHRegGetBoolUSValueW
SHRegGetUSValueA
SHRegGetUSValueW
SHRegOpenUSKeyA
SHRegOpenUSKeyW
SHRegQueryInfoUSKeyA
SHRegQueryInfoUSKeyW
SHRegQueryUSValueA
SHRegQueryUSValueW
SHRegSetUSValueA
SHRegSetUSValueW
SHRegWriteUSValueA
SHRegWriteUSValueW
SHSetThreadRef
SHSetValueA
SHSetValueW
SHSkipJunction
SHStrDupA
SHStrDupW
StrCSpnA
StrCSpnIA
StrCSpnIW
StrCSpnW
StrCatBuffA
StrCatBuffW
StrCatW
StrChrA
StrChrIA
StrChrIW
StrChrW
StrCmpIW
StrCmpNA
StrCmpNIA
StrCmpNIW
StrCmpNW
StrCmpW
StrCpyNW
StrCpyW
StrDupA
StrDupW
StrFormatByteSize64A
StrFormatByteSizeA
StrFormatByteSizeW
StrFormatKBSizeA
StrFormatKBSizeW
StrFromTimeIntervalA
StrFromTimeIntervalW
StrIsIntlEqualA
StrIsIntlEqualW
StrNCatA
StrNCatW
StrPBrkA
StrPBrkW
StrRChrA
StrRChrIA
StrRChrIW
StrRChrW
StrRStrIA
StrRStrIW
StrRetToBufA
StrRetToBufW
StrRetToStrA
StrRetToStrW
StrSpnA
StrSpnW
StrStrA
StrStrIA
StrStrIW
StrStrW
StrToIntA
StrToIntExA
StrToIntExW
StrToIntW
StrTrimA
StrTrimW
UrlApplySchemeA
UrlApplySchemeW
UrlCanonicalizeA
UrlCanonicalizeW
UrlCombineA
UrlCombineW
UrlCompareA
UrlCompareW
UrlCreateFromPathA
UrlCreateFromPathW
UrlEscapeA
UrlEscapeW
UrlGetLocationA
UrlGetLocationW
UrlGetPartA
UrlGetPartW
UrlHashA
UrlHashW
UrlIsA
UrlIsNoHistoryA
UrlIsNoHistoryW
UrlIsOpaqueA
UrlIsOpaqueW
UrlIsW
UrlUnescapeA
UrlUnescapeW
_SHGetInstanceExplorer@4
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
wcscpy
atol
vswprintf
qsort
_ltoa
_purecall
free
wcscmp
wcschr
_adjust_fdiv
_initterm
malloc
towupper
_wtol
_except_handler3
CryptMsgOpenToDecode
I_CryptGetDefaultCryptProv
CryptMsgUpdate
CryptMsgControl
CryptMsgVerifyCountersignatureEncoded
CryptEncodeObjectEx
CryptExportPublicKeyInfo
CryptSIPLoad
CertComparePublicKeyInfo
CertFindRDNAttr
CertCreateCertificateChainEngine
CertDuplicateStore
CertAddStoreToCollection
CertFreeCertificateChainEngine
CertGetCertificateChain
CertGetIssuerCertificateFromStore
CertCreateCertificateContext
CertSetCertificateContextProperty
CertAddCertificateContextToStore
CertOpenSystemStoreA
CertCloseStore
CertEnumCertificatesInStore
CertGetCertificateContextProperty
CertNameToStrW
CertDuplicateCertificateContext
CertOpenStore
CryptMsgGetParam
CertVerifyCTLUsage
CertFreeCertificateContext
CertVerifyRevocation
CryptDecodeObject
CertFindExtension
CertVerifyTimeValidity
CertFindAttribute
CertVerifyCertificateChainPolicy
CertGetSubjectCertificateFromStore
CertGetEnhancedKeyUsage
CryptSIPRetrieveSubjectGuid
CertRDNValueToStrW
WTHelperOpenKnownStores
TrustFreeDecode
WTHelperGetFileName
TrustDecode
WintrustLoadFunctionPointers
WTHelperCheckCertUsage
WTHelperIsInRootStore
WintrustAddActionID
WintrustAddDefaultForUsage
WintrustRemoveActionID
WTHelperGetProvPrivateDataFromChain
WTHelperGetFileHandle
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
RegDeleteValueA
RegOpenKeyA
RegEnumKeyA
RegCreateKeyExW
GetTokenInformation
GetLengthSid
CopySid
CryptSetProvParam
CryptReleaseContext
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
CryptAcquireContextA
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
RegOpenKeyExW
OpenProcessToken
OpenThreadToken
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
RegSetValueExA
IsValidSid
GetCurrentProcess
GetCurrentThread
InterlockedExchange
RaiseException
GetProcessHeap
CloseHandle
lstrcmpA
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
SetLastError
lstrcmpiA
LocalAlloc
LocalFree
DisableThreadLibraryCalls
GetVersionExA
HeapFree
lstrlenW
HeapAlloc
lstrlenA
WriteFile
WideCharToMultiByte
GetDateFormatA
MultiByteToWideChar
GetTimeFormatA
FileTimeToSystemTime
CreateFileA
CreateFileW
WinHelpA
DialogBoxParamA
GetParent
GetWindowLongA
wsprintfW
MessageBoxA
SetWindowPos
GetWindowRect
SystemParametersInfoA
ShowWindow
SendMessageA
EnableWindow
EndDialog
SetWindowTextA
LoadStringA
LoadStringW
GetDesktopWindow
GetDlgItem
SetWindowLongA
CoTaskMemAlloc
CoTaskMemFree
AddPersonalTrustDBPages
DllRegisterServer
DllUnregisterServer
DriverCleanupPolicy
DriverFinalPolicy
DriverInitializePolicy
FindCertsByIssuer
GenericChainCertificateTrust
GenericChainFinalProv
HTTPSCertificateTrust
HTTPSFinalProv
OfficeCleanupPolicy
OfficeInitializePolicy
OpenPersonalTrustDBDialog
SoftpubAuthenticode
SoftpubCheckCert
SoftpubCleanup
SoftpubDefCertInit
SoftpubDumpStructure
SoftpubFreeDefUsageCallData
SoftpubInitialize
SoftpubLoadDefUsageCallData
SoftpubLoadMessage
SoftpubLoadSignature
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CoTaskMemFree
GetClassFile
StgOpenStorageOnILockBytes
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StringFromCLSID
CoGetClassObject
CreateGenericComposite
MonikerRelativePathTo
CoUnmarshalInterface
ReleaseStgMedium
CreateBindCtx
HWND_UserFree
HWND_UserUnmarshal
HWND_UserMarshal
HWND_UserSize
CLSIDFromString
CLSIDFromProgID
MkParseDisplayName
CoFreeUnusedLibraries
CoLoadLibrary
CoRegisterMessageFilter
CoMarshalInterface
CoGetMarshalSizeMax
CoCreateInstance
StgOpenStorage
OleGetAutoConvert
StrCatW
ord24
StrCpyW
ord52
ord441
ord435
ord1
ord75
ord65
ord151
ord154
ord155
ord153
StrCmpNIW
ord158
ord2
ord436
PathFindExtensionW
SHRegQueryInfoUSKeyW
SHRegEnumUSKeyW
SHRegEnumUSValueW
StrRChrW
SHRegDeleteUSValueW
SHRegDeleteEmptyUSKeyW
StrDupW
wnsprintfW
SHRegWriteUSValueW
SHRegQueryUSValueW
SHRegOpenUSKeyW
SHRegCreateUSKeyW
SHRegCloseUSKey
PathIsPrefixW
SHGetValueW
PathRemoveBackslashW
SHRegGetUSValueW
wnsprintfA
StrCmpNA
PathFindExtensionA
PathFindFileNameW
StrCatBuffW
SHQueryValueExA
StrCatBuffA
PathFileExistsA
StrToIntW
StrToIntA
UrlCombineA
UrlGetLocationA
PathCreateFromUrlA
StrDupA
StrStrA
StrStrW
StrCmpIW
StrCmpNIA
StrCpyNW
StrChrW
StrChrA
UrlCompareW
UrlCombineW
StrCmpW
UrlCanonicalizeW
UrlGetPartW
UrlUnescapeW
UrlEscapeW
PathCreateFromUrlW
UrlCreateFromPathW
UrlGetLocationW
SHRegGetUSValueA
StrNCatA
StrStrIA
MsgWaitForMultipleObjects
GetQueueStatus
DialogBoxParamA
IsDlgButtonChecked
CheckDlgButton
EndDialog
GetDlgItem
SetWindowTextA
SetForegroundWindow
CharLowerA
CharUpperBuffA
OemToCharA
SetTimer
KillTimer
FindWindowA
SendNotifyMessageA
GetParent
GetLastActivePopup
wsprintfW
RegisterClassA
TranslateMessage
DispatchMessageA
PeekMessageA
PostQuitMessage
GetClipboardFormatNameA
CreateWindowExA
UnregisterClassA
wsprintfA
RegisterClipboardFormatA
LoadStringA
CharPrevA
CharNextA
DefWindowProcA
SetWindowLongA
PostMessageA
DestroyWindow
GetObjectA
GetPaletteEntries
CreatePalette
GetObjectType
SetEnhMetaFileBits
GetEnhMetaFileBits
GetMetaFileBitsEx
CreateBitmap
GetBitmapBits
SetMetaFileBitsEx
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegEnumValueA
RegEnumKeyExA
RegEnumKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegQueryValueA
RegDeleteKeyA
RegCreateKeyA
RegSetValueExA
InterlockedExchange
GetCurrentProcess
SetFileAttributesA
FindNextFileA
GlobalUnlock
GetFileSize
GetFileTime
SetFilePointer
CreateFileA
ReadFile
FindClose
lstrcmpA
LocalFree
GetLastError
GetACP
FindAtomA
AddAtomA
CloseHandle
GetCurrentProcessId
LoadLibraryA
GetProcAddress
GlobalAlloc
GlobalFree
lstrcpyA
lstrlenA
GetProcessHeap
TlsAlloc
TlsFree
TlsGetValue
HeapAlloc
TlsSetValue
HeapFree
GetCurrentThreadId
GetModuleFileNameA
MultiByteToWideChar
lstrcmpiA
lstrcpynA
WideCharToMultiByte
GetVersionExA
GetSystemInfo
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
IsBadWritePtr
IsBadReadPtr
lstrlenW
FormatMessageA
FileTimeToSystemTime
GetUserDefaultLCID
GetSystemDefaultLCID
GetLocaleInfoA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
LocalAlloc
GlobalSize
GetModuleHandleA
GetDriveTypeA
CreateMutexA
GetTimeFormatA
GlobalLock
ReleaseMutex
RaiseException
LocalReAlloc
RtlUnwind
GetPrivateProfileStringA
GetLocalTime
RemoveDirectoryA
SetLastError
GetSystemTime
CompareFileTime
SystemTimeToFileTime
TerminateThread
TerminateProcess
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
ExitThread
CreateThread
GetSystemTimeAsFileTime
CopyFileA
GetSystemDirectoryA
LoadLibraryExA
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
FindFirstFileA
GetVersion
GetThreadLocale
GetFileAttributesA
CreateDirectoryA
SearchPathA
CompareStringA
GetWindowsDirectoryA
lstrcatA
GetShortPathNameA
GetFullPathNameA
WriteFile
GetTempPathA
DeleteFileA
ExitProcess
GetPrivateProfileIntA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
AsyncGetClassBits
AsyncInstallDistributionUnit
BindAsyncMoniker
CDLGetLongPathNameA
CDLGetLongPathNameW
CoGetClassObjectFromURL
CoInstall
CoInternetCombineUrl
CoInternetCompareUrl
CoInternetCreateSecurityManager
CoInternetCreateZoneManager
CoInternetGetProtocolFlags
CoInternetGetSecurityUrl
CoInternetGetSession
CoInternetParseUrl
CoInternetQueryInfo
CopyBindInfo
CopyStgMedium
CreateAsyncBindCtx
CreateAsyncBindCtxEx
CreateFormatEnumerator
CreateURLMoniker
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllRegisterServerEx
DllUnregisterServer
Extract
FaultInIEFeature
FindMediaType
FindMediaTypeClass
FindMimeFromData
GetClassFileOrMime
GetClassURL
GetComponentIDFromCLSSPEC
GetMarkOfTheWeb
GetSoftwareUpdateInfo
HlinkGoBack
HlinkGoForward
HlinkNavigateMoniker
HlinkNavigateString
HlinkSimpleNavigateToMoniker
HlinkSimpleNavigateToString
IsAsyncMoniker
IsLoggingEnabledA
IsLoggingEnabledW
IsValidURL
MkParseDisplayNameEx
ObtainUserAgentString
PrivateCoInstall
RegisterBindStatusCallback
RegisterFormatEnumerator
RegisterMediaTypeClass
RegisterMediaTypes
ReleaseBindInfo
RevokeBindStatusCallback
RevokeFormatEnumerator
SetSoftwareUpdateAdvertisementState
URLDownloadA
URLDownloadToCacheFileA
URLDownloadToCacheFileW
URLDownloadToFileA
URLDownloadToFileW
URLDownloadW
URLOpenBlockingStreamA
URLOpenBlockingStreamW
URLOpenPullStreamA
URLOpenPullStreamW
URLOpenStreamA
URLOpenStreamW
UrlMkBuildVersion
UrlMkGetSessionOption
UrlMkSetSessionOption
WriteHitLogging
ZonesReInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
wnsprintfA
SHSetValueA
SHGetValueA
StrNCatA
StrCmpIW
StrToIntA
StrCmpNA
UrlUnescapeA
StrRChrA
PathCreateFromUrlA
UrlCombineA
ord153
UrlCanonicalizeA
ord151
UrlCanonicalizeW
UrlCombineW
ord260
StrStrA
StrCmpNIA
ord419
wvnsprintfA
StrChrA
StrCatBuffA
RegDeleteKeyA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegEnumKeyA
CryptGetProvParam
CryptSetProvParam
CryptAcquireContextA
CryptReleaseContext
RegDeleteValueA
GetUserNameA
CloseServiceHandle
RegQueryInfoKeyA
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
OpenSCManagerA
EnumServicesStatusA
TlsSetValue
RtlMoveMemory
GlobalReAlloc
lstrcpyA
GetCurrentProcess
TerminateProcess
RaiseException
GetLocalTime
GetTimeZoneInformation
ExitProcess
GetVersion
GetComputerNameA
RtlUnwind
SetEndOfFile
CreateFileMappingA
GetUserDefaultLCID
UnmapViewOfFile
IsDBCSLeadByte
MapViewOfFileEx
GetProcAddress
LoadLibraryA
FreeLibrary
lstrcmpiA
GetLastError
GetVersionExA
CloseHandle
GetFileSize
CreateFileA
GetSystemDirectoryA
lstrcpynA
lstrlenA
CreateMutexA
ReleaseMutex
GetTickCount
WaitForSingleObject
lstrcmpA
LeaveCriticalSection
LocalFree
EnterCriticalSection
SetLastError
MultiByteToWideChar
WideCharToMultiByte
LocalAlloc
lstrlenW
CreateEventA
SetEvent
InterlockedIncrement
InterlockedDecrement
LocalReAlloc
FileTimeToSystemTime
ReadFile
SetFilePointer
WriteFile
DeleteCriticalSection
InitializeCriticalSection
GetModuleFileNameA
SleepEx
InterlockedExchange
IsBadStringPtrA
IsBadWritePtr
IsBadCodePtr
DeleteFileA
IsBadReadPtr
GlobalFree
GlobalAlloc
LocalFileTimeToFileTime
CompareStringA
GetTimeFormatA
GetDateFormatA
TlsFree
GetWindowsDirectoryA
GetCurrentThreadId
TlsAlloc
TlsGetValue
GetModuleHandleA
SetErrorMode
SystemTimeToFileTime
GetSystemTime
lstrcatA
FormatMessageA
CreateThread
Sleep
RemoveDirectoryA
FindNextFileA
TerminateThread
ResetEvent
ExitThread
ExpandEnvironmentStringsA
GetFileTime
FindFirstFileA
WritePrivateProfileStringA
GetEnvironmentVariableA
GetPrivateProfileStringA
GetFileAttributesA
IsBadStringPtrW
FileTimeToDosDateTime
FindClose
OutputDebugStringA
GetVolumeInformationA
SetFileAttributesA
DeviceIoControl
CopyFileA
CreateDirectoryA
SetFileTime
FlushViewOfFile
DosDateTimeToFileTime
GetDiskFreeSpaceA
MoveFileA
OpenMutexA
SendDlgItemMessageA
SendMessageA
PostMessageA
FindWindowA
DialogBoxParamA
GetDesktopWindow
wsprintfA
CharLowerA
MessageBoxA
CharToOemA
CharUpperA
IsWindow
CharNextA
SetWindowLongA
EndDialog
GetDlgItem
WinHelpA
GetWindowLongA
LoadStringA
EnableWindow
SetDlgItemTextA
SetWindowTextA
SetWindowPos
GetWindowRect
CheckDlgButton
SetFocus
IsDlgButtonChecked
SetTimer
GetWindowTextA
SetForegroundWindow
RegisterWindowMessageA
ShowWindow
KillTimer
DestroyIcon
LoadImageA
CommitUrlCacheEntryA
CommitUrlCacheEntryW
CreateUrlCacheContainerA
CreateUrlCacheContainerW
CreateUrlCacheEntryA
CreateUrlCacheEntryW
CreateUrlCacheGroup
DeleteIE3Cache
DeleteUrlCacheContainerA
DeleteUrlCacheContainerW
DeleteUrlCacheEntry
DeleteUrlCacheEntryA
DeleteUrlCacheEntryW
DeleteUrlCacheGroup
DetectAutoProxyUrl
DllInstall
FindCloseUrlCache
FindFirstUrlCacheContainerA
FindFirstUrlCacheContainerW
FindFirstUrlCacheEntryA
FindFirstUrlCacheEntryExA
FindFirstUrlCacheEntryExW
FindFirstUrlCacheEntryW
FindFirstUrlCacheGroup
FindNextUrlCacheContainerA
FindNextUrlCacheContainerW
FindNextUrlCacheEntryA
FindNextUrlCacheEntryExA
FindNextUrlCacheEntryExW
FindNextUrlCacheEntryW
FindNextUrlCacheGroup
FreeUrlCacheSpaceA
FreeUrlCacheSpaceW
FtpCommandA
FtpCommandW
FtpCreateDirectoryA
FtpCreateDirectoryW
FtpDeleteFileA
FtpDeleteFileW
FtpFindFirstFileA
FtpFindFirstFileW
FtpGetCurrentDirectoryA
FtpGetCurrentDirectoryW
FtpGetFileA
FtpGetFileEx
FtpGetFileSize
FtpGetFileW
FtpOpenFileA
FtpOpenFileW
FtpPutFileA
FtpPutFileEx
FtpPutFileW
FtpRemoveDirectoryA
FtpRemoveDirectoryW
FtpRenameFileA
FtpRenameFileW
FtpSetCurrentDirectoryA
FtpSetCurrentDirectoryW
GetUrlCacheConfigInfoA
GetUrlCacheConfigInfoW
GetUrlCacheEntryInfoA
GetUrlCacheEntryInfoExA
GetUrlCacheEntryInfoExW
GetUrlCacheEntryInfoW
GetUrlCacheGroupAttributeA
GetUrlCacheGroupAttributeW
GetUrlCacheHeaderData
GopherCreateLocatorA
GopherCreateLocatorW
GopherFindFirstFileA
GopherFindFirstFileW
GopherGetAttributeA
GopherGetAttributeW
GopherGetLocatorTypeA
GopherGetLocatorTypeW
GopherOpenFileA
GopherOpenFileW
HttpAddRequestHeadersA
HttpAddRequestHeadersW
HttpCheckDavCompliance
HttpEndRequestA
HttpEndRequestW
HttpOpenRequestA
HttpOpenRequestW
HttpQueryInfoA
HttpQueryInfoW
HttpSendRequestA
HttpSendRequestExA
HttpSendRequestExW
HttpSendRequestW
IncrementUrlCacheHeaderData
InternetAlgIdToStringA
InternetAlgIdToStringW
InternetAttemptConnect
InternetAutodial
InternetAutodialCallback
InternetAutodialHangup
InternetCanonicalizeUrlA
InternetCanonicalizeUrlW
InternetCheckConnectionA
InternetCheckConnectionW
InternetCloseHandle
InternetCombineUrlA
InternetCombineUrlW
InternetConfirmZoneCrossing
InternetConfirmZoneCrossingA
InternetConfirmZoneCrossingW
InternetConnectA
InternetConnectW
InternetCrackUrlA
InternetCrackUrlW
InternetCreateUrlA
InternetCreateUrlW
InternetDial
InternetDialA
InternetDialW
InternetErrorDlg
InternetFindNextFileA
InternetFindNextFileW
InternetFortezzaCommand
InternetGetCertByURL
InternetGetCertByURLA
InternetGetConnectedState
InternetGetConnectedStateEx
InternetGetConnectedStateExA
InternetGetConnectedStateExW
InternetGetCookieA
InternetGetCookieW
InternetGetLastResponseInfoA
InternetGetLastResponseInfoW
InternetGoOnline
InternetGoOnlineA
InternetGoOnlineW
InternetHangUp
InternetInitializeAutoProxyDll
InternetLockRequestFile
InternetOpenA
InternetOpenUrlA
InternetOpenUrlW
InternetOpenW
InternetQueryDataAvailable
InternetQueryFortezzaStatus
InternetQueryOptionA
InternetQueryOptionW
InternetReadFile
InternetReadFileExA
InternetReadFileExW
InternetSecurityProtocolToStringA
InternetSecurityProtocolToStringW
InternetSetCookieA
InternetSetCookieW
InternetSetDialState
InternetSetDialStateA
InternetSetDialStateW
InternetSetFilePointer
InternetSetOptionA
InternetSetOptionExA
InternetSetOptionExW
InternetSetOptionW
InternetSetStatusCallback
InternetSetStatusCallbackA
InternetSetStatusCallbackW
InternetShowSecurityInfoByURL
InternetShowSecurityInfoByURLA
InternetShowSecurityInfoByURLW
InternetTimeFromSystemTime
InternetTimeFromSystemTimeA
InternetTimeFromSystemTimeW
InternetTimeToSystemTime
InternetTimeToSystemTimeA
InternetTimeToSystemTimeW
InternetUnlockRequestFile
InternetWriteFile
InternetWriteFileExA
InternetWriteFileExW
IsHostInProxyBypassList
IsUrlCacheEntryExpiredA
IsUrlCacheEntryExpiredW
LoadUrlCacheContent
ParseX509EncodedCertificateForListBoxEntry
ReadUrlCacheEntryStream
RegisterUrlCacheNotification
ResumeSuspendedDownload
RetrieveUrlCacheEntryFileA
RetrieveUrlCacheEntryFileW
RetrieveUrlCacheEntryStreamA
RetrieveUrlCacheEntryStreamW
RunOnceUrlCache
SetUrlCacheConfigInfoA
SetUrlCacheConfigInfoW
SetUrlCacheEntryGroup
SetUrlCacheEntryGroupA
SetUrlCacheEntryGroupW
SetUrlCacheEntryInfoA
SetUrlCacheEntryInfoW
SetUrlCacheGroupAttributeA
SetUrlCacheGroupAttributeW
SetUrlCacheHeaderData
ShowCertificate
ShowClientAuthCerts
ShowSecurityInfo
ShowX509EncodedCertificate
UnlockUrlCacheEntryFile
UnlockUrlCacheEntryFileA
UnlockUrlCacheEntryFileW
UnlockUrlCacheEntryStream
UpdateUrlCacheContentPath
UrlZonesDetach
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ