Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
10Static
static
10Bin1799/Ca...ll.exe
windows7-x64
10Bin1799/Ca...ll.exe
windows10-2004-x64
10Bin1799/Client.exe
windows7-x64
5Bin1799/Client.exe
windows10-2004-x64
5Bin1799/Pl...u.html
windows7-x64
3Bin1799/Pl...u.html
windows10-2004-x64
3Bin1799/Pl...E.html
windows7-x64
3Bin1799/Pl...E.html
windows10-2004-x64
3Bin1799/Pl...e.html
windows7-x64
3Bin1799/Pl...e.html
windows10-2004-x64
3Bin1799/Pl...E.html
windows7-x64
3Bin1799/Pl...E.html
windows10-2004-x64
3Bin1799/Pl...32.exe
windows7-x64
3Bin1799/Pl...32.exe
windows10-2004-x64
3Bin1799/Pl...64.exe
windows7-x64
1Bin1799/Pl...64.exe
windows10-2004-x64
1Bin1799/Pl...te.exe
windows7-x64
3Bin1799/Pl...te.exe
windows10-2004-x64
3Bin1799/Pl...ck.exe
windows7-x64
5Bin1799/Pl...ck.exe
windows10-2004-x64
5Bin1799/Pl...de.bat
windows7-x64
10Bin1799/Pl...de.bat
windows10-2004-x64
10Bin1799/Pl...de.exe
windows7-x64
1Bin1799/Pl...de.exe
windows10-2004-x64
3Bin1799/Pl...eo.dll
windows7-x64
1Bin1799/Pl...eo.dll
windows10-2004-x64
1Bin1799/Pl...ax.dll
windows7-x64
3Bin1799/Pl...ax.dll
windows10-2004-x64
3Bin1799/Pl..._t.dll
windows7-x64
3Bin1799/Pl..._t.dll
windows10-2004-x64
3Bin1799/SkinH.dll
windows7-x64
5Bin1799/SkinH.dll
windows10-2004-x64
5Behavioral task
behavioral1
Sample
Bin1799/Cache/Install.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
Bin1799/Cache/Install.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Bin1799/Client.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
Bin1799/Client.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Bin1799/Plugins/Baidu.html
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
Bin1799/Plugins/Baidu.html
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
Bin1799/Plugins/BaiduE.html
Resource
win7-20241023-en
Behavioral task
behavioral8
Sample
Bin1799/Plugins/BaiduE.html
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
Bin1799/Plugins/Gaode.html
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Bin1799/Plugins/Gaode.html
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
Bin1799/Plugins/GaodeE.html
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
Bin1799/Plugins/GaodeE.html
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
Bin1799/Plugins/GetPswd32.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
Bin1799/Plugins/GetPswd32.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
Bin1799/Plugins/GetPswd64.exe
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
Bin1799/Plugins/GetPswd64.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
Bin1799/Plugins/IPUpdate.exe
Resource
win7-20241010-en
Behavioral task
behavioral18
Sample
Bin1799/Plugins/IPUpdate.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
Bin1799/Plugins/PcLock.exe
Resource
win7-20241023-en
Behavioral task
behavioral20
Sample
Bin1799/Plugins/PcLock.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
Bin1799/Plugins/ShellCode.bat
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
Bin1799/Plugins/ShellCode.bat
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
Bin1799/Plugins/ShellCode.exe
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
Bin1799/Plugins/ShellCode.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
Bin1799/Plugins/bPluginVideo.dll
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
Bin1799/Plugins/bPluginVideo.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
Bin1799/Plugins/mstscax.dll
Resource
win7-20241010-en
Behavioral task
behavioral28
Sample
Bin1799/Plugins/mstscax.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
Bin1799/Plugins/termsrv_t.dll
Resource
win7-20240729-en
Behavioral task
behavioral30
Sample
Bin1799/Plugins/termsrv_t.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
Bin1799/SkinH.dll
Resource
win7-20240903-en
Target
9e364ccf2384a19973de23c0b730e50a84a250f915e09253e77740baa69eb9bb
Size
10.9MB
MD5
9f01ccb1587ba4b9009d6ce0d333e143
SHA1
19c95a4a08dcbdfdfa70af09b14ee5dff05d3788
SHA256
9e364ccf2384a19973de23c0b730e50a84a250f915e09253e77740baa69eb9bb
SHA512
7ddb1ce1c23060d1a72f75e06fa85b579ed179f72d05e5915b8924b38149ea4e4737490dd1e6305a651298aa0cc058f12750fa8591e8217f71caa51d8be11308
SSDEEP
196608:vYPJdcE4G1fCTcT0RTmpwYk5vdQ2ypCVyn1qoKQoumCbi9if6VdJh1AqKups1oD:UAG1f4cwdmFfnUoKQoxYSVdNAqKui1M
Processes:
resource | yara_rule |
---|---|
static1/unpack001/Bin1799/Plugins/GetPswd32.exe | mimikatz |
static1/unpack001/Bin1799/Plugins/GetPswd64.exe | mimikatz |
Detects file using ACProtect software.
Processes:
resource | yara_rule |
---|---|
static1/unpack001/Bin1799/SkinH.dll | acprotect |
Processes:
resource | yara_rule |
---|---|
static1/unpack001/Bin1799/Plugins/PcLock.exe | upx |
static1/unpack001/Bin1799/SkinH.dll | upx |
static1/unpack003/out.upx | upx |
Checks for missing Authenticode signature.
Processes:
resource |
---|
unpack001/Bin1799/Cache/Install.dat |
unpack001/Bin1799/Client.exe |
unpack001/Bin1799/Plugins/IPUpdate.exe |
unpack001/Bin1799/Plugins/PcLock.exe |
unpack002/out.upx |
unpack001/Bin1799/Plugins/ShellCode.exe |
unpack001/Bin1799/Plugins/mstscax.dll |
unpack001/Bin1799/Plugins/termsrv_t.dll |
unpack001/Bin1799/SkinH.dll |
unpack003/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
HeapFree
GetProcessHeap
HeapAlloc
HeapReAlloc
VirtualFree
FreeLibrary
VirtualAlloc
VirtualProtect
GetProcAddress
LoadLibraryA
IsBadReadPtr
ExitProcess
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
WriteFile
IsBadWritePtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SHAutoComplete
waveInUnprepareHeader
waveInReset
waveOutClose
waveOutUnprepareHeader
waveOutReset
waveInStop
waveOutWrite
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInOpen
waveInGetNumDevs
waveOutPrepareHeader
waveOutOpen
waveOutGetNumDevs
PlaySoundA
waveInClose
GetStringTypeA
GetStringTypeW
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
IsBadWritePtr
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
SetStdHandle
HeapSize
GetACP
TerminateProcess
GetSystemTime
GetEnvironmentStringsW
RaiseException
ExitThread
GetDriveTypeA
HeapReAlloc
RtlUnwind
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GlobalFlags
SystemTimeToFileTime
GetProfileIntA
GetProfileStringA
GetPrivateProfileSectionNamesA
EnumResourceLanguagesA
EnumResourceTypesA
GetCurrentProcessId
GetExitCodeThread
ResetEvent
GetEnvironmentStrings
GetTimeZoneInformation
CreateEventA
LocalFileTimeToFileTime
CloseHandle
TerminateThread
WaitForSingleObject
MulDiv
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempFileNameA
GetCurrentThread
SetThreadPriority
SetEvent
ResumeThread
CreateThread
Sleep
VirtualFree
VirtualAlloc
GetVolumeInformationA
GetComputerNameA
SetFilePointer
ReadFile
GetFileSize
CreateFileA
CopyFileA
DeleteFileA
lstrcatA
GetModuleFileNameA
WriteFile
GetCurrentDirectoryA
LockResource
GlobalAlloc
LoadResource
SizeofResource
FindResourceA
FindClose
FindNextFileA
RemoveDirectoryA
SetFileAttributesA
GetFileAttributesA
FindFirstFileA
GlobalUnlock
GlobalLock
GetTickCount
CreateProcessA
lstrcpyA
GetLastError
GetTempPathA
FreeEnvironmentStringsW
SetLastError
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
FormatMessageA
InterlockedIncrement
GetVersion
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpA
LocalSize
LocalReAlloc
GetModuleHandleA
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GlobalSize
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
EnumResourceNamesA
HeapFree
IsBadReadPtr
VirtualProtect
GetProcessHeap
HeapAlloc
WideCharToMultiByte
OutputDebugStringA
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
DeleteCriticalSection
CancelIo
InterlockedExchange
GetQueuedCompletionStatus
InterlockedDecrement
CreateIoCompletionPort
GetSystemInfo
PostQueuedCompletionStatus
InitializeCriticalSection
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
LoadLibraryExA
FreeLibrary
CreateDirectoryA
MoveFileA
lstrcpynA
MultiByteToWideChar
LocalAlloc
lstrlenA
GlobalFree
LocalFree
SetUnhandledExceptionFilter
LoadLibraryA
GetLocalTime
GetProcAddress
GetCommandLineA
GetStartupInfoA
ExitProcess
GetSystemDirectoryA
FreeResource
IsRectEmpty
FillRect
IsZoomed
SetRectEmpty
DestroyMenu
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
ValidateRect
CharUpperA
LoadStringA
wvsprintfA
GetMenuCheckMarkDimensions
ModifyMenuA
SetMenuItemBitmaps
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
MapWindowPoints
PeekMessageA
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
TabbedTextOutA
GrayStringA
LoadAcceleratorsA
DispatchMessageA
TranslateMessage
GetMessageA
LoadIconA
SendMessageTimeoutA
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
TranslateAcceleratorA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
GetClassNameA
GetDialogBaseUnits
CopyAcceleratorTableA
GetNextDlgGroupItem
GetDCEx
RegisterClipboardFormatA
GetWindowTextLengthA
GetWindowTextA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetWindowDC
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
SendMessageA
EnableWindow
RegisterWindowMessageA
UpdateWindow
InvalidateRect
SetRect
wsprintfA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
IsWindowVisible
RedrawWindow
PostMessageA
MessageBoxA
DestroyIcon
LoadImageA
GetCursorPos
GetMenuItemCount
GetSubMenu
LoadMenuA
LockWindowUpdate
GetDesktopWindow
ReleaseDC
GetDC
GetSysColor
LoadCursorA
SetCursor
ReleaseCapture
SetWindowPos
GetDlgCtrlID
CharNextA
UnregisterClassA
InvertRect
PostThreadMessageA
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
IntersectRect
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
InsertMenuA
GetMenuStringA
CreateMenu
PtInRect
DeleteMenu
SetWindowRgn
LoadBitmapA
GetSysColorBrush
RegisterClassExA
ShowScrollBar
CheckMenuRadioItem
GetMenuState
AppendMenuA
DrawTextA
GetScrollBarInfo
DrawIconEx
GetKeyState
SetClassLongA
DestroyCursor
SetWindowLongA
SendDlgItemMessageA
SetParent
DrawMenuBar
TranslateMDISysAccel
BeginPaint
UnhookWindowsHookEx
EndPaint
DefFrameProcA
ExcludeUpdateRgn
DefDlgProcA
GetTabbedTextExtentA
GetClipboardFormatNameA
GetAsyncKeyState
GetDoubleClickTime
IsWindowUnicode
GetWindowLongW
SetWindowLongW
SetCursorPos
UnionRect
GetMenuDefaultItem
GetMenuStringW
LookupIconIdFromDirectoryEx
GetCursor
GetKeyboardLayoutList
GetKeyboardState
ToAsciiEx
GetKeyboardLayout
MapVirtualKeyExA
GetKeyNameTextA
IsCharLowerA
IsClipboardFormatAvailable
GetWindowRgn
HideCaret
ShowCaret
IsMenu
GetMenuItemInfoA
CopyIcon
CreateIconIndirect
GetIconInfo
KillTimer
GetFocus
SetTimer
WaitForInputIdle
GetWindowLongA
GetWindowThreadProcessId
IsIconic
DrawIcon
ClipCursor
SystemParametersInfoA
EnumWindows
FindWindowA
ShowWindow
DrawFocusRect
DrawFrameControl
CreatePopupMenu
DrawAnimatedRects
EnumChildWindows
SetMenuDefaultItem
DrawEdge
WaitMessage
MapVirtualKeyA
DrawStateA
CheckMenuItem
EnableMenuItem
GetClientRect
ClientToScreen
ScreenToClient
SetCapture
GetWindow
GetParent
WindowFromPoint
GetWindowRect
CreateIconFromResource
CreateIconFromResourceEx
LookupIconIdFromDirectory
GetClipboardData
GetSystemMetrics
MessageBeep
InflateRect
OffsetRect
GetSystemMenu
SaveDC
RestoreDC
SetPolyFillMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
IntersectClipRect
MoveToEx
LineTo
CreateFontIndirectA
GetCurrentPositionEx
DPtoLP
GetClipRgn
ExtSelectClipRgn
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
CreatePatternBrush
PtVisible
RectVisible
Escape
GetMapMode
SetRectRgn
CopyMetaFileA
GetTextColor
GetBkColor
GetPixel
TextOutA
SetBkMode
GetClipBox
LPtoDP
CreateFontA
GetCharWidthA
CreateSolidBrush
DeleteObject
GdiFlush
DeleteDC
StretchBlt
SetStretchBltMode
BitBlt
SetDIBColorTable
SelectObject
CreateCompatibleDC
CreateDIBSection
GetStockObject
GetPaletteEntries
CreateHalftonePalette
StretchDIBits
ExtTextOutA
SetTextColor
SetBkColor
GetObjectA
CombineRgn
PolyBezierTo
CreateRectRgn
CreateBitmap
PatBlt
CreateRectRgnIndirect
GetTextExtentPoint32A
GetTextMetricsA
SetTextAlign
ExcludeClipRect
Polygon
GetTextAlign
SetPixel
GetCurrentObject
GetDIBits
PtInRegion
GetWindowOrgEx
GetBitmapBits
ExtCreateRegion
EnumFontFamiliesExA
Polyline
GetViewportOrgEx
ExtFloodFill
Ellipse
SetBrushOrgEx
GetRgnBox
CreatePolygonRgn
RoundRect
StrokePath
FillPath
StrokeAndFillPath
EndPath
CloseFigure
BeginPath
GetTextExtentPoint32W
ExtTextOutW
GetTextExtentPointA
CreateDIBitmap
CreateCompatibleBitmap
ChooseColorA
GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
OpenPrinterA
DocumentPropertiesA
ClosePrinter
RegCreateKeyExA
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegEnumKeyA
RegCreateKeyA
RegDeleteValueA
RegSetValueExA
RegCloseKey
RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegDeleteKeyA
Shell_NotifyIconA
DragAcceptFiles
SHAppBarMessage
ExtractIconA
SHGetFileInfoA
DragQueryFileA
DragFinish
SHGetSpecialFolderPathA
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
ImageList_LoadImageA
ImageList_Create
ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Remove
ImageList_GetImageInfo
ImageList_Add
ImageList_DrawEx
ImageList_GetIcon
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Draw
_TrackMouseEvent
ord1
ord8
CoTaskMemFree
CoTaskMemAlloc
OleDuplicateData
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoInitialize
CoCreateInstance
CoGetClassObject
ReleaseStgMedium
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleRun
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleInitialize
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
ord253
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantClear
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
SysStringByteLen
VarDateFromStr
VarBstrFromDate
SafeArrayGetLBound
SysFreeString
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen
LoadTypeLi
SafeArrayGetUBound
SafeArrayAccessData
OleLoadPicturePath
VariantChangeTypeEx
SafeArrayUnaccessData
URLDownloadToFileA
SkinH_AttachEx
SkinH_Detach
WSAGetLastError
WSACreateEvent
WSAEventSelect
bind
listen
WSAStartup
socket
WSACleanup
ioctlsocket
htons
connect
select
gethostname
gethostbyname
closesocket
getpeername
inet_ntoa
WSASocketA
inet_addr
__WSAFDIsSet
recv
send
shutdown
getsockname
ntohs
WSAIoctl
WSACloseEvent
accept
WSAEnumNetworkEvents
WSARecv
setsockopt
WSASend
WSAWaitForMultipleEvents
AVIFileExit
AVIFileCreateStreamA
AVIFileOpenA
AVIStreamWrite
AVIStreamSetFormat
AVIFileRelease
AVIFileInit
AVIStreamRelease
DrawDibOpen
DrawDibClose
DrawDibDraw
InternetGetLastResponseInfoA
FindNextUrlCacheEntryA
DeleteUrlCacheEntry
FindFirstUrlCacheEntryA
InternetGetConnectedState
InternetCloseHandle
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetOpenA
InternetOpenUrlA
InternetReadFile
PdhCollectQueryData
PdhAddCounterA
PdhOpenQueryA
PdhGetFormattedCounterValue
PdhCloseQuery
ImmAssociateContext
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CryptSetHashParam
CryptGetHashParam
CryptExportKey
CryptAcquireContextW
CryptSetKeyParam
CryptGetKeyParam
CryptReleaseContext
CryptDuplicateKey
CryptAcquireContextA
CryptGetProvParam
CryptImportKey
SystemFunction007
CryptEncrypt
CryptCreateHash
CryptGenKey
CryptDestroyKey
CryptDecrypt
CryptDestroyHash
CryptHashData
CopySid
GetLengthSid
LsaQueryInformationPolicy
LsaOpenPolicy
LsaClose
CreateWellKnownSid
CreateProcessWithLogonW
CreateProcessAsUserW
RegQueryValueExW
RegQueryInfoKeyW
RegEnumValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
SystemFunction032
ConvertSidToStringSidW
CreateServiceW
CloseServiceHandle
DeleteService
OpenSCManagerW
SetServiceObjectSecurity
OpenServiceW
BuildSecurityDescriptorW
QueryServiceObjectSecurity
StartServiceW
AllocateAndInitializeSid
QueryServiceStatusEx
FreeSid
ControlService
IsTextUnicode
OpenProcessToken
GetTokenInformation
LookupAccountNameW
LookupAccountSidW
DuplicateTokenEx
CheckTokenMembership
CryptEnumProvidersW
ConvertStringSidToSidW
LsaFreeMemory
SetThreadToken
CryptSetProvParam
CryptEnumProviderTypesW
SystemFunction006
CryptGetUserKey
OpenEventLogW
GetNumberOfEventLogRecords
ClearEventLogW
SystemFunction001
CryptDeriveKey
SystemFunction005
LsaQueryTrustedDomainInfoByName
CryptSignHashW
LsaOpenSecret
LsaQuerySecret
SystemFunction013
LsaRetrievePrivateData
LsaEnumerateTrustedDomainsEx
LookupPrivilegeValueW
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerW
IsValidSid
LookupPrivilegeNameW
OpenThreadToken
CredFree
CredEnumerateW
GetSidSubAuthority
GetSidSubAuthorityCount
SystemFunction025
ConvertStringSecurityDescriptorToSecurityDescriptorW
SystemFunction024
A_SHAFinal
A_SHAInit
A_SHAUpdate
ord11
ord14
ord10
ord13
CertGetNameStringW
CryptEncodeObject
CertEnumSystemStore
CryptSignAndEncodeCertificate
CertEnumCertificatesInStore
CertAddEncodedCertificateToStore
CertOpenStore
CertFreeCertificateContext
CertCloseStore
CertSetCertificateContextProperty
PFXExportCertStoreEx
CryptUnprotectData
CryptBinaryToStringW
CryptStringToBinaryW
CryptProtectData
CryptExportPublicKeyInfo
CryptAcquireCertificatePrivateKey
CertNameToStrW
CertGetCertificateContextProperty
CertAddCertificateContextToStore
CertFindCertificateInStore
MD5Init
MD5Update
MD5Final
CDLocateCSystem
CDGenerateRandomBits
CDLocateCheckSum
FilterFindFirst
FilterFindNext
NetServerGetInfo
NetStatisticsGet
NetShareEnum
NetSessionEnum
DsGetDcNameW
NetApiBufferFree
NetRemoteTOD
NetWkstaUserEnum
I_NetServerAuthenticate2
I_NetServerTrustPasswordsGet
I_NetServerReqChallenge
CoInitializeEx
CoUninitialize
CoCreateInstance
VariantInit
SysFreeString
SysAllocString
RpcMgmtEpEltInqNextW
RpcMgmtEpEltInqBegin
I_RpcGetCurrentCallHandle
NdrClientCall2
RpcMgmtEpEltInqDone
RpcBindingFromStringBindingW
RpcStringBindingComposeW
MesEncodeIncrementalHandleCreate
RpcBindingSetAuthInfoExW
RpcBindingInqAuthClientW
RpcBindingSetOption
RpcImpersonateClient
RpcBindingFree
RpcStringFreeW
RpcRevertToSelf
MesDecodeIncrementalHandleCreate
MesHandleFree
MesIncrementalHandleReset
NdrMesTypeDecode2
NdrMesTypeAlignSize2
NdrMesTypeFree2
NdrMesTypeEncode2
RpcServerUnregisterIfEx
I_RpcBindingInqSecurityContext
RpcServerInqBindings
RpcServerListen
RpcMgmtWaitServerListen
RpcEpRegisterW
RpcMgmtStopServerListening
RpcBindingToStringBindingW
RpcServerRegisterIf2
RpcServerRegisterAuthInfoW
RpcBindingVectorFree
UuidToStringW
RpcServerUseProtseqEpW
RpcEpUnregister
NdrServerCall2
RpcEpResolveBinding
UuidCreate
PathIsDirectoryW
PathCanonicalizeW
PathCombineW
PathFindFileNameW
PathIsRelativeW
SamGetGroupsForUser
SamEnumerateGroupsInDomain
SamiChangePasswordUser
SamGetMembersInGroup
SamSetInformationUser
SamRidToSid
SamGetMembersInAlias
SamEnumerateAliasesInDomain
SamGetAliasMembership
SamOpenGroup
SamOpenAlias
SamQueryInformationUser
SamCloseHandle
SamEnumerateDomainsInSamServer
SamFreeMemory
SamEnumerateUsersInDomain
SamOpenUser
SamLookupDomainInSamServer
SamLookupNamesInDomain
SamLookupIdsInDomain
SamOpenDomain
SamConnect
FreeContextBuffer
LsaLookupAuthenticationPackage
LsaConnectUntrusted
LsaFreeReturnBuffer
LsaDeregisterLogonProcess
DeleteSecurityContext
LsaCallAuthenticationPackage
FreeCredentialsHandle
EnumerateSecurityPackagesW
InitializeSecurityContextW
QueryContextAttributesW
AcquireCredentialsHandleW
CommandLineToArgvW
IsCharAlphaNumericW
GetKeyboardLayout
DispatchMessageW
DefWindowProcW
SetClipboardViewer
SendMessageW
GetClipboardSequenceNumber
OpenClipboard
CreateWindowExW
ChangeClipboardChain
GetClipboardData
RegisterClassExW
TranslateMessage
EnumClipboardFormats
PostMessageW
UnregisterClassW
GetMessageW
CloseClipboard
DestroyWindow
DestroyEnvironmentBlock
CreateEnvironmentBlock
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
HidD_GetPreparsedData
HidD_FreePreparsedData
HidP_GetCaps
HidD_GetFeature
HidD_GetAttributes
HidD_GetHidGuid
HidD_SetFeature
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SCardControl
SCardTransmit
SCardDisconnect
SCardGetAttrib
SCardEstablishContext
SCardFreeMemory
SCardListReadersW
SCardReleaseContext
SCardGetCardTypeProviderNameW
SCardListCardsW
SCardConnectW
WinStationEnumerateW
WinStationFreeMemory
WinStationConnectW
WinStationQueryInformationW
WinStationCloseServer
WinStationOpenServerW
ord69
ord203
ord140
ord122
ord14
ord157
ord88
ord133
ord142
ord77
ord97
ord13
ord147
ord167
ord208
ord145
ord36
ord79
ord26
ord41
ord127
ord73
ord301
ord304
ord309
ord54
ord310
ord223
ord12
ord113
ord224
ord96
ord27
ord139
ASN1_CreateModule
ASN1BERDotVal2Eoid
ASN1_CloseEncoder
ASN1_CreateDecoder
ASN1_FreeEncoded
ASN1_CloseModule
ASN1_CreateEncoder
ASN1_CloseDecoder
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
RtlDowncaseUnicodeString
RtlFreeUnicodeString
RtlInitUnicodeString
RtlEqualUnicodeString
NtQueryObject
RtlCompressBuffer
RtlGetCompressionWorkSpaceSize
NtQuerySystemInformation
RtlGetCurrentPeb
NtQueryInformationProcess
RtlCreateUserThread
RtlGUIDFromString
RtlStringFromGUID
NtCompareTokens
RtlGetNtVersionNumbers
RtlEqualString
RtlUpcaseUnicodeString
RtlAppendUnicodeStringToString
RtlAnsiStringToUnicodeString
RtlFreeOemString
RtlUpcaseUnicodeStringToOemString
NtResumeProcess
RtlAdjustPrivilege
NtSuspendProcess
NtTerminateProcess
NtQuerySystemEnvironmentValueEx
NtSetSystemEnvironmentValueEx
NtEnumerateSystemEnvironmentValuesEx
RtlIpv4AddressToStringW
RtlIpv6AddressToStringW
GetFileSize
HeapReAlloc
GetFullPathNameA
CreateMutexW
GetTimeFormatW
WideCharToMultiByte
GetSystemTimeAsFileTime
SystemTimeToFileTime
LoadLibraryA
InterlockedExchange
GetProcessId
GetDateFormatW
lstrlenW
PurgeComm
ClearCommError
CreateRemoteThread
WaitForSingleObject
SetLastError
CreateProcessW
SetConsoleOutputCP
GetConsoleOutputCP
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
WriteProcessMemory
VirtualProtect
VirtualAllocEx
VirtualProtectEx
VirtualAlloc
ReadProcessMemory
VirtualFreeEx
VirtualQueryEx
VirtualFree
VirtualQuery
GetComputerNameExW
DeviceIoControl
DuplicateHandle
OpenProcess
GetCurrentProcess
ExpandEnvironmentStringsW
FindNextFileW
FindClose
GetCurrentDirectoryW
GetFileSizeEx
FlushFileBuffers
GetFileAttributesW
FindFirstFileW
DeleteFileA
GetTempPathA
GetFileInformationByHandle
FileTimeToLocalFileTime
GetCurrentDirectoryA
GetTempFileNameA
SetFilePointer
CreateFileA
FileTimeToDosDateTime
CreateThread
LocalFree
CloseHandle
LocalAlloc
GetLastError
CreateFileW
ReadFile
Sleep
TerminateThread
WriteFile
FileTimeToSystemTime
TryEnterCriticalSection
SetEndOfFile
HeapAlloc
QueryPerformanceCounter
HeapFree
InterlockedCompareExchange
UnlockFile
FlushViewOfFile
LockFile
WaitForSingleObjectEx
OutputDebugStringW
GetTickCount
UnlockFileEx
GetProcessHeap
FormatMessageA
InitializeCriticalSection
FormatMessageW
GetVersionExW
HeapDestroy
LeaveCriticalSection
GetFileAttributesA
HeapCompact
HeapCreate
HeapValidate
MultiByteToWideChar
GetTempPathW
HeapSize
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
CreateFileMappingA
GetDiskFreeSpaceA
GetSystemInfo
GetFileAttributesExW
DeleteCriticalSection
OutputDebugStringA
GetVersionExA
DeleteFileW
GetCurrentProcessId
GetSystemTime
AreFileApisANSI
ExitProcess
RaiseException
SetConsoleCtrlHandler
SetConsoleTitleW
lstrlenA
FreeLibrary
LoadLibraryW
GetProcAddress
GlobalSize
GetModuleHandleW
SetHandleInformation
CreatePipe
SetEvent
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersion
GetModuleHandleA
GetCurrentThreadId
GetFullPathNameW
CreateEventW
GetSystemDirectoryW
SetConsoleCursorPosition
GetTimeZoneInformation
GetStdHandle
GetComputerNameW
ProcessIdToSessionId
GetCurrentThread
SetCurrentDirectoryW
IsWow64Process
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterW
calloc
__set_app_type
isdigit
_read
_lseeki64
mbtowc
__mb_cur_max
isleadbyte
isxdigit
localeconv
_snprintf
_itoa
wctomb
ferror
iswctype
wcstombs
_write
_isatty
ungetc
?terminate@@YAXXZ
_controlfp
__badioinfo
__pioinfo
__p__fmode
isspace
strrchr
__p__commode
__setusermatherr
_amsg_exit
_initterm
_errno
free
_wcsdup
_vsnprintf
_except_handler3
_wcsicmp
vfwprintf
_vscwprintf
fflush
_wfopen
wprintf
_fileno
_iob
vwprintf
_setmode
fclose
_stricmp
wcsrchr
wcschr
strtoul
_wcsnicmp
wcsstr
gmtime
memmove
malloc
_msize
strftime
realloc
fgetws
wcstoul
wcstol
towupper
_wpgmptr
_wcstoui64
wcsncmp
getchar
memset
memcpy
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
CryptSetHashParam
CryptGetHashParam
CryptExportKey
CryptAcquireContextW
CryptSetKeyParam
CryptGetKeyParam
CryptReleaseContext
CryptDuplicateKey
CryptAcquireContextA
CryptGetProvParam
CryptImportKey
SystemFunction007
CryptEncrypt
CryptCreateHash
CryptGenKey
CryptDestroyKey
CryptDecrypt
CryptDestroyHash
CryptHashData
CopySid
GetLengthSid
LsaQueryInformationPolicy
LsaOpenPolicy
LsaClose
CreateWellKnownSid
CreateProcessWithLogonW
CreateProcessAsUserW
RegQueryValueExW
RegQueryInfoKeyW
RegEnumValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
RegSetValueExW
SystemFunction032
ConvertSidToStringSidW
CreateServiceW
CloseServiceHandle
DeleteService
OpenSCManagerW
SetServiceObjectSecurity
OpenServiceW
BuildSecurityDescriptorW
QueryServiceObjectSecurity
StartServiceW
AllocateAndInitializeSid
QueryServiceStatusEx
FreeSid
ControlService
IsTextUnicode
OpenProcessToken
GetTokenInformation
LookupAccountNameW
LookupAccountSidW
DuplicateTokenEx
CheckTokenMembership
CryptEnumProvidersW
ConvertStringSidToSidW
LsaFreeMemory
SetThreadToken
CryptSetProvParam
CryptEnumProviderTypesW
SystemFunction006
CryptGetUserKey
OpenEventLogW
GetNumberOfEventLogRecords
ClearEventLogW
SystemFunction001
CryptDeriveKey
SystemFunction005
LsaQueryTrustedDomainInfoByName
CryptSignHashW
LsaOpenSecret
LsaQuerySecret
SystemFunction013
LsaRetrievePrivateData
LsaEnumerateTrustedDomainsEx
LookupPrivilegeValueW
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerW
IsValidSid
LookupPrivilegeNameW
OpenThreadToken
CredFree
CredEnumerateW
GetSidSubAuthority
GetSidSubAuthorityCount
SystemFunction025
ConvertStringSecurityDescriptorToSecurityDescriptorW
SystemFunction024
A_SHAFinal
A_SHAInit
A_SHAUpdate
ord11
ord14
ord10
ord13
CertGetNameStringW
CryptEncodeObject
CertEnumSystemStore
CryptSignAndEncodeCertificate
CertEnumCertificatesInStore
CertAddEncodedCertificateToStore
CertOpenStore
CertFreeCertificateContext
CertCloseStore
CertSetCertificateContextProperty
PFXExportCertStoreEx
CryptUnprotectData
CryptBinaryToStringW
CryptStringToBinaryW
CryptProtectData
CryptExportPublicKeyInfo
CryptAcquireCertificatePrivateKey
CertNameToStrW
CertGetCertificateContextProperty
CertAddCertificateContextToStore
CertFindCertificateInStore
CDLocateCSystem
MD5Final
MD5Init
CDLocateCheckSum
CDGenerateRandomBits
MD5Update
FilterFindFirst
FilterFindNext
NetServerGetInfo
NetStatisticsGet
NetShareEnum
NetSessionEnum
DsGetDcNameW
NetApiBufferFree
NetRemoteTOD
NetWkstaUserEnum
I_NetServerTrustPasswordsGet
I_NetServerReqChallenge
I_NetServerAuthenticate2
CoInitializeEx
CoUninitialize
CoCreateInstance
VariantInit
SysFreeString
SysAllocString
RpcMgmtEpEltInqNextW
RpcMgmtEpEltInqBegin
I_RpcGetCurrentCallHandle
NdrClientCall2
RpcMgmtEpEltInqDone
RpcBindingFromStringBindingW
RpcStringBindingComposeW
MesEncodeIncrementalHandleCreate
RpcBindingSetAuthInfoExW
RpcBindingInqAuthClientW
RpcBindingSetOption
RpcImpersonateClient
RpcBindingFree
RpcStringFreeW
RpcRevertToSelf
MesDecodeIncrementalHandleCreate
MesHandleFree
MesIncrementalHandleReset
NdrMesTypeDecode2
NdrMesTypeAlignSize2
NdrMesTypeFree2
NdrMesTypeEncode2
RpcServerUnregisterIfEx
I_RpcBindingInqSecurityContext
RpcServerInqBindings
RpcServerListen
RpcMgmtWaitServerListen
RpcEpRegisterW
RpcMgmtStopServerListening
RpcBindingToStringBindingW
RpcServerRegisterIf2
RpcServerRegisterAuthInfoW
RpcBindingVectorFree
UuidToStringW
RpcServerUseProtseqEpW
RpcEpUnregister
NdrServerCall2
RpcEpResolveBinding
UuidCreate
PathIsDirectoryW
PathCanonicalizeW
PathCombineW
PathFindFileNameW
PathIsRelativeW
SamGetGroupsForUser
SamEnumerateGroupsInDomain
SamiChangePasswordUser
SamGetMembersInGroup
SamSetInformationUser
SamRidToSid
SamGetMembersInAlias
SamEnumerateAliasesInDomain
SamGetAliasMembership
SamOpenGroup
SamOpenAlias
SamQueryInformationUser
SamCloseHandle
SamEnumerateDomainsInSamServer
SamFreeMemory
SamEnumerateUsersInDomain
SamOpenUser
SamLookupDomainInSamServer
SamLookupNamesInDomain
SamLookupIdsInDomain
SamOpenDomain
SamConnect
FreeContextBuffer
LsaLookupAuthenticationPackage
LsaConnectUntrusted
LsaFreeReturnBuffer
LsaDeregisterLogonProcess
DeleteSecurityContext
LsaCallAuthenticationPackage
FreeCredentialsHandle
AcquireCredentialsHandleW
InitializeSecurityContextW
QueryContextAttributesW
EnumerateSecurityPackagesW
CommandLineToArgvW
IsCharAlphaNumericW
GetKeyboardLayout
DispatchMessageW
DefWindowProcW
SetClipboardViewer
SendMessageW
GetClipboardSequenceNumber
OpenClipboard
CreateWindowExW
ChangeClipboardChain
GetClipboardData
RegisterClassExW
TranslateMessage
EnumClipboardFormats
PostMessageW
UnregisterClassW
GetMessageW
CloseClipboard
DestroyWindow
CreateEnvironmentBlock
DestroyEnvironmentBlock
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
HidD_GetPreparsedData
HidD_FreePreparsedData
HidP_GetCaps
HidD_GetFeature
HidD_GetAttributes
HidD_GetHidGuid
HidD_SetFeature
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SCardFreeMemory
SCardListCardsW
SCardControl
SCardGetCardTypeProviderNameW
SCardReleaseContext
SCardListReadersW
SCardEstablishContext
SCardConnectW
SCardTransmit
SCardDisconnect
SCardGetAttrib
WinStationCloseServer
WinStationOpenServerW
WinStationFreeMemory
WinStationConnectW
WinStationQueryInformationW
WinStationEnumerateW
ord140
ord122
ord14
ord88
ord133
ord142
ord77
ord27
ord13
ord147
ord96
ord208
ord224
ord36
ord79
ord157
ord26
ord41
ord127
ord73
ord301
ord304
ord309
ord54
ord310
ord69
ord139
ord97
ord223
ord12
ord145
ord113
ord167
ord203
ASN1_CreateModule
ASN1_CloseEncoder
ASN1_CreateDecoder
ASN1_FreeEncoded
ASN1_CloseModule
ASN1_CreateEncoder
ASN1_CloseDecoder
ASN1BERDotVal2Eoid
wcsncmp
_wcstoui64
wcstol
wcstoul
memmove
wcsstr
_wcsnicmp
strtoul
wcschr
wcsrchr
_stricmp
_vscwprintf
_wcsicmp
strrchr
_vsnprintf
memcmp
RtlUnicodeStringToAnsiString
RtlFreeAnsiString
RtlDowncaseUnicodeString
RtlFreeUnicodeString
RtlInitUnicodeString
RtlEqualUnicodeString
NtQueryObject
RtlCompressBuffer
RtlGetCompressionWorkSpaceSize
NtQuerySystemInformation
RtlGetCurrentPeb
NtQueryInformationProcess
RtlCreateUserThread
RtlGUIDFromString
RtlStringFromGUID
NtCompareTokens
RtlGetNtVersionNumbers
RtlEqualString
RtlUpcaseUnicodeString
RtlAppendUnicodeStringToString
RtlAnsiStringToUnicodeString
RtlFreeOemString
RtlUpcaseUnicodeStringToOemString
NtResumeProcess
RtlAdjustPrivilege
NtSuspendProcess
NtTerminateProcess
NtQuerySystemEnvironmentValueEx
NtSetSystemEnvironmentValueEx
NtEnumerateSystemEnvironmentValuesEx
RtlIpv4AddressToStringW
RtlIpv6AddressToStringW
towupper
__chkstk
GetFullPathNameA
GetFullPathNameW
GetTimeFormatW
HeapReAlloc
GetSystemTimeAsFileTime
SystemTimeToFileTime
GetDateFormatW
lstrlenW
RtlVirtualUnwind
LoadLibraryA
GetProcessId
PurgeComm
ClearCommError
CreateRemoteThread
WaitForSingleObject
SetLastError
CreateProcessW
SetConsoleOutputCP
GetConsoleOutputCP
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
WriteProcessMemory
VirtualAllocEx
VirtualProtectEx
VirtualAlloc
ReadProcessMemory
VirtualFreeEx
VirtualQueryEx
VirtualFree
VirtualQuery
GetComputerNameExW
DeviceIoControl
DuplicateHandle
OpenProcess
GetCurrentProcess
ExpandEnvironmentStringsW
FindNextFileW
FindClose
GetCurrentDirectoryW
GetFileSizeEx
FlushFileBuffers
GetFileAttributesW
FindFirstFileW
DeleteFileA
GetTempPathA
GetFileInformationByHandle
FileTimeToLocalFileTime
GetCurrentDirectoryA
GetTempFileNameA
SetFilePointer
CreateFileA
FileTimeToDosDateTime
CreateThread
LocalFree
CloseHandle
LocalAlloc
GetLastError
CreateFileW
ReadFile
TerminateThread
WriteFile
FileTimeToSystemTime
Sleep
VirtualProtect
CreateMutexW
HeapCompact
TryEnterCriticalSection
SetEndOfFile
HeapAlloc
QueryPerformanceCounter
HeapFree
UnlockFile
FlushViewOfFile
LockFile
WaitForSingleObjectEx
OutputDebugStringW
GetTickCount
UnlockFileEx
GetProcessHeap
FormatMessageA
InitializeCriticalSection
FormatMessageW
GetVersionExW
HeapDestroy
LeaveCriticalSection
GetFileAttributesA
GetFileSize
HeapCreate
HeapValidate
MultiByteToWideChar
GetTempPathW
HeapSize
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
CreateFileMappingA
GetDiskFreeSpaceA
GetSystemInfo
GetFileAttributesExW
DeleteCriticalSection
OutputDebugStringA
GetVersionExA
DeleteFileW
GetCurrentProcessId
GetSystemTime
AreFileApisANSI
ExitProcess
RaiseException
SetConsoleCtrlHandler
SetConsoleTitleW
lstrlenA
FreeLibrary
LoadLibraryW
GetProcAddress
GlobalSize
GetModuleHandleW
SetHandleInformation
CreatePipe
SetEvent
CreateEventW
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentThreadId
WideCharToMultiByte
GetSystemDirectoryW
SetConsoleCursorPosition
GetTimeZoneInformation
GetStdHandle
FillConsoleOutputCharacterW
GetComputerNameW
ProcessIdToSessionId
GetCurrentThread
SetCurrentDirectoryW
GetConsoleScreenBufferInfo
isdigit
isspace
__set_app_type
mbtowc
__mb_cur_max
isleadbyte
isxdigit
localeconv
_snprintf
_itoa
calloc
wctomb
ferror
iswctype
wcstombs
?terminate@@YAXXZ
__badioinfo
__pioinfo
_read
_lseeki64
_write
_isatty
ungetc
_fmode
getchar
_wpgmptr
_commode
__setusermatherr
_amsg_exit
_initterm
exit
_cexit
_exit
_XcptFilter
__wgetmainargs
__C_specific_handler
fgetws
memset
memcpy
_errno
free
_wcsdup
vfwprintf
fflush
_wfopen
wprintf
_fileno
_iob
vwprintf
_setmode
fclose
gmtime
malloc
_msize
strftime
realloc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
CloseHandle
CompareStringA
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
EnumCalendarInfoA
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindResourceA
FormatMessageA
FreeLibrary
FreeResource
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceA
GetEnvironmentStrings
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeExA
GetStringTypeW
GetSystemInfo
GetTempPathA
GetThreadLocale
GetTickCount
GetTimeZoneInformation
GetVersion
GetVersionExA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadResource
LocalAlloc
LocalFree
LockResource
MulDiv
MultiByteToWideChar
RaiseException
ReadFile
ResetEvent
RtlUnwind
SetConsoleCtrlHandler
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetThreadLocale
SizeofResource
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpA
lstrcpyA
lstrcpynA
lstrlenA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
WSACleanup
WSAStartup
gethostbyname
gethostname
ioctlsocket
inet_addr
ntohl
ImageList_Add
ImageList_BeginDrag
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Read
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetDragCursorImage
ImageList_SetIconSize
ImageList_Write
ord17
GetOpenFileNameA
GetSaveFileNameA
BitBlt
CombineRgn
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateDIBitmap
CreateFontIndirectA
CreateHalftonePalette
CreatePalette
CreatePenIndirect
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
ExcludeClipRect
ExtTextOutA
GetBitmapBits
GetBrushOrgEx
GetClipBox
GetCurrentPositionEx
GetDCOrgEx
GetDIBColorTable
GetDIBits
GetDeviceCaps
GetObjectA
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextExtentPoint32A
GetTextMetricsA
GetWindowOrgEx
IntersectClipRect
LineTo
MaskBlt
MoveToEx
PatBlt
Polyline
RealizePalette
RectVisible
Rectangle
RestoreDC
SaveDC
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetPixel
SetROP2
SetStretchBltMode
SetTextColor
SetViewportOrgEx
SetWindowOrgEx
StretchBlt
UnrealizeObject
ShellExecuteA
ActivateKeyboardLayout
AdjustWindowRectEx
BeginPaint
CallNextHookEx
CallWindowProcA
CharLowerA
CharNextA
CheckMenuItem
ChildWindowFromPoint
ClientToScreen
CreateIcon
CreateMenu
CreatePopupMenu
CreateWindowExA
DefFrameProcA
DefMDIChildProcA
DefWindowProcA
DeleteMenu
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DrawEdge
DrawFocusRect
DrawFrameControl
DrawIcon
DrawIconEx
DrawMenuBar
DrawTextA
EnableMenuItem
EnableScrollBar
EnableWindow
EndPaint
EnumThreadWindows
EnumWindows
EqualRect
FillRect
FindWindowA
FrameRect
GetActiveWindow
GetCapture
GetClassInfoA
GetClassNameA
GetClientRect
GetCursor
GetCursorPos
GetDC
GetDCEx
GetDesktopWindow
GetDlgItem
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyNameTextA
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardState
GetKeyboardType
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoA
GetMenuState
GetMenuStringA
GetMessagePos
GetParent
GetPropA
GetScrollInfo
GetScrollPos
GetScrollRange
GetSubMenu
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetWindow
GetWindowDC
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowThreadProcessId
InflateRect
InsertMenuA
InsertMenuItemA
IntersectRect
InvalidateRect
IsChild
IsDialogMessageA
IsIconic
IsRectEmpty
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapA
LoadCursorA
LoadIconA
LoadKeyboardLayoutA
LoadStringA
MapVirtualKeyA
MapWindowPoints
MessageBoxA
OemToCharA
OffsetRect
PeekMessageA
PostMessageA
PostQuitMessage
PtInRect
RedrawWindow
RegisterClassA
RegisterClipboardFormatA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ScreenToClient
ScrollWindow
SendMessageA
SetActiveWindow
SetCapture
SetClassLongA
SetCursor
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoA
SetPropA
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongA
SetWindowPlacement
SetWindowPos
SetWindowTextA
SetWindowsHookExA
ShowCursor
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoA
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UpdateWindow
WaitMessage
WinHelpA
WindowFromPoint
wsprintfA
GetSysColor
SafeArrayCreate
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayRedim
SysAllocStringLen
SysFreeString
SysReAllocStringLen
VariantChangeType
VariantClear
VariantCopy
VariantCopyInd
VariantInit
@$xp$17Zlibex@EZLibError
@$xp$17Zlibex@TZStrategy
@$xp$18Zlibex@TZStreamRec
@$xp$21Zlibex@TCustomZStream
@$xp$25Zlibex@EZCompressionError
@$xp$25Zlibex@TZCompressionLevel
@$xp$26Zlibex@TZCompressionStream
@$xp$27Zlibex@EZDecompressionError
@$xp$28Zlibex@TZDecompressionStream
@@Gfrtl@Finalize
@@Gfrtl@Initialize
@@Unit1@Finalize
@@Unit1@Initialize
@@Unit2@Finalize
@@Unit2@Initialize
@Zlibex@EZCompressionError@
@Zlibex@EZDecompressionError@
@Zlibex@EZLibError@
@Zlibex@Finalization$qqrv
@Zlibex@TCustomZStream@
@Zlibex@TCustomZStream@$bctr$qqrp15Classes@TStream
@Zlibex@TCustomZStream@DoProgress$qqrv
@Zlibex@TZCompressionStream@
@Zlibex@TZCompressionStream@$bctr$qqrp15Classes@TStream25Zlibex@TZCompressionLevel
@Zlibex@TZCompressionStream@$bctr$qqrp15Classes@TStream25Zlibex@TZCompressionLevelii17Zlibex@TZStrategy
@Zlibex@TZCompressionStream@$bdtr$qqrv
@Zlibex@TZCompressionStream@GetCompressionRate$qqrv
@Zlibex@TZCompressionStream@Read$qqrpvi
@Zlibex@TZCompressionStream@Seek$qqrius
@Zlibex@TZCompressionStream@Write$qqrpxvi
@Zlibex@TZDecompressionStream@
@Zlibex@TZDecompressionStream@$bctr$qqrp15Classes@TStream
@Zlibex@TZDecompressionStream@$bctr$qqrp15Classes@TStreami
@Zlibex@TZDecompressionStream@$bdtr$qqrv
@Zlibex@TZDecompressionStream@Read$qqrpvi
@Zlibex@TZDecompressionStream@Seek$qqrius
@Zlibex@TZDecompressionStream@Write$qqrpxvi
@Zlibex@ZCompress$qqrpxvirpvri25Zlibex@TZCompressionLevel
@Zlibex@ZCompress2$qqrpxvirpvri25Zlibex@TZCompressionLevelii17Zlibex@TZStrategy
@Zlibex@ZCompressStr$qqrx17System@AnsiString25Zlibex@TZCompressionLevel
@Zlibex@ZCompressStr2$qqrx17System@AnsiString25Zlibex@TZCompressionLevelii17Zlibex@TZStrategy
@Zlibex@ZCompressStrEx$qqrx17System@AnsiString25Zlibex@TZCompressionLevel
@Zlibex@ZCompressStrWeb$qqrx17System@AnsiString
@Zlibex@ZCompressStream$qqrp15Classes@TStreamt125Zlibex@TZCompressionLevel
@Zlibex@ZCompressStream2$qqrp15Classes@TStreamt125Zlibex@TZCompressionLevelii17Zlibex@TZStrategy
@Zlibex@ZDecompress$qqrpxvirpvrii
@Zlibex@ZDecompress2$qqrpxvirpvriii
@Zlibex@ZDecompressStr$qqrx17System@AnsiString
@Zlibex@ZDecompressStr2$qqrx17System@AnsiStringi
@Zlibex@ZDecompressStrEx$qqrx17System@AnsiString
@Zlibex@ZDecompressStream$qqrp15Classes@TStreamt1
@Zlibex@ZDecompressStream2$qqrp15Classes@TStreamt1i
@Zlibex@initialization$qqrv
_Form1
_Form2
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
WriteFile
CloseHandle
VirtualFree
ReadFile
VirtualAlloc
GetFileSize
CreateFileA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
GetLastError
SetFilePointer
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
mstscax.pdb
lstrcatA
GetProcessHeap
GetTimeZoneInformation
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetCPInfo
GetOEMCP
GetACP
HeapSize
InterlockedExchange
RtlUnwind
IsBadWritePtr
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
TlsFree
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualProtect
HeapFree
GetSystemDefaultLangID
SetEvent
GetVersion
FreeResource
GetModuleHandleW
LoadLibraryW
GetModuleFileNameW
GetCommandLineA
IsBadReadPtr
SetFilePointer
ReadFile
DuplicateHandle
GlobalFree
GlobalHandle
Beep
lstrcmpA
GetSystemTime
GetExitCodeThread
WaitForMultipleObjects
ReleaseSemaphore
GlobalSize
ResetEvent
CreateDirectoryA
DeleteFileA
GetTempFileNameA
CreateDirectoryW
DeleteFileW
GetTempFileNameW
GetTempPathA
Sleep
QueryDosDeviceW
FindNextChangeNotification
FindCloseChangeNotification
GetFileInformationByHandle
SetFileTime
SetEndOfFile
LockFileEx
LockFile
UnlockFile
FreeLibraryAndExitThread
ResumeThread
CreateThread
GetComputerNameA
DebugBreak
WaitForMultipleObjectsEx
EscapeCommFunction
SetCommState
GetCommState
TransmitCommChar
WaitCommEvent
SetCommTimeouts
SetupComm
SetCommMask
PurgeComm
GetCommTimeouts
GetCommMask
GetCommModemStatus
ClearCommError
GetCommProperties
GetCommConfig
SetErrorMode
DeviceIoControl
GetOverlappedResult
FlushFileBuffers
FindClose
GetDiskFreeSpaceA
GlobalMemoryStatus
GetLocalTime
CompareFileTime
SystemTimeToFileTime
GetSystemDefaultLCID
CreateEventA
CreateEventW
CreateFileA
CreateFileW
FindFirstFileA
FindFirstFileW
FindResourceA
FindResourceW
lstrcmpiA
lstrcmpiW
GetFileAttributesA
GetFileAttributesW
GetSystemDirectoryA
GetSystemDirectoryW
SetFileAttributesA
SetFileAttributesW
FindNextFileA
FindNextFileW
GetFullPathNameA
GetFullPathNameW
GetShortPathNameA
GetShortPathNameW
GetProfileStringA
GetProfileStringW
LoadLibraryExA
LoadLibraryExW
MoveFileA
MoveFileW
OutputDebugStringW
RemoveDirectoryA
RemoveDirectoryW
CreateMutexA
CreateMutexW
CreateSemaphoreA
CreateSemaphoreW
lstrcpyA
GetDiskFreeSpaceW
GetDriveTypeA
GetDriveTypeW
FindFirstChangeNotificationA
FindFirstChangeNotificationW
GetVolumeInformationA
GetVolumeInformationW
GetComputerNameW
GetVersionExW
GetDefaultCommConfigA
GetDefaultCommConfigW
lstrcpynA
ExitThread
RaiseException
IsBadCodePtr
SetStdHandle
TlsSetValue
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
MultiByteToWideChar
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
SizeofResource
DisableThreadLibraryCalls
GetProcAddress
FreeLibrary
GlobalAlloc
GlobalLock
GlobalUnlock
HeapDestroy
LoadResource
LockResource
SetLastError
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
WaitForSingleObject
CloseHandle
GetLastError
EnterCriticalSection
LeaveCriticalSection
LocalFree
lstrlenA
lstrlenW
LocalAlloc
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
OutputDebugStringA
RegCloseKey
RegQueryValueExA
SetFileSecurityW
SetFileSecurityA
GetFileSecurityW
GetFileSecurityA
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegEnumValueW
RegEnumValueA
RegEnumKeyExW
RegEnumKeyExA
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW
GetUserNameA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
GetSecurityDescriptorLength
RegOpenKeyA
SetRect
GetWindowDC
DestroyCursor
CreateCursor
AttachThreadInput
GetWindowThreadProcessId
CallNextHookEx
GetAsyncKeyState
GetForegroundWindow
MessageBeep
FlashWindow
SetCapture
ReleaseCapture
GetMessageExtraInfo
UnhookWindowsHookEx
CreateIconIndirect
MsgWaitForMultipleObjects
PostQuitMessage
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
EnumClipboardFormats
CountClipboardFormats
GetClipboardData
SetClipboardViewer
ChangeClipboardChain
GetMessageTime
CallWindowProcA
CallWindowProcW
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
DispatchMessageA
DispatchMessageW
DrawTextA
DrawTextW
GetClassInfoA
GetClassInfoW
GetClipboardFormatNameA
GetClipboardFormatNameW
GetMessageA
GetMessageW
GetWindowLongA
GetWindowLongW
FillRect
LoadCursorA
LoadCursorW
LoadIconA
LoadIconW
BringWindowToTop
LoadStringW
PeekMessageA
PeekMessageW
PostMessageA
PostMessageW
PostThreadMessageA
PostThreadMessageW
RegisterClassA
RegisterClassW
RegisterClipboardFormatA
RegisterClipboardFormatW
SendMessageA
SendMessageW
SetWindowLongA
SetWindowLongW
SetWindowsHookExA
SetWindowsHookExW
SetWindowTextA
SetWindowTextW
UnregisterClassA
UnregisterClassW
wvsprintfA
wvsprintfW
RegisterClassExA
RegisterClassExW
GetClassInfoExA
GetClassInfoExW
GetKeyboardLayoutNameA
GetKeyboardLayoutNameW
MapVirtualKeyA
MapVirtualKeyW
GetSystemMenu
EnableMenuItem
SetWindowPlacement
CloseWindow
GetKeyboardState
ScreenToClient
ClientToScreen
SetCursorPos
keybd_event
SetCursor
GetKeyboardType
IsWindowVisible
GetSysColor
GetCursorPos
SetScrollPos
LockWindowUpdate
ShowScrollBar
GetKeyboardLayout
DestroyWindow
InflateRect
GetSysColorBrush
SetScrollInfo
AdjustWindowRect
SystemParametersInfoA
IsIconic
SetParent
TranslateMessage
SetFocus
GetClientRect
UpdateWindow
InvalidateRect
IsWindow
MoveWindow
ShowWindow
IsChild
GetFocus
DestroyAcceleratorTable
GetParent
SetWindowPos
GetWindowRect
GetDesktopWindow
GetSystemMetrics
GetWindowPlacement
BeginPaint
EndPaint
GetKeyState
IntersectRect
EqualRect
SetWindowRgn
UnionRect
PtInRect
GetDC
ReleaseDC
SetTimer
KillTimer
OffsetRect
wsprintfA
CreateSolidBrush
PatBlt
StretchDIBits
CreateCompatibleDC
CreateCompatibleBitmap
LineTo
MoveToEx
CreatePen
DeleteObject
SetBkMode
SetBkColor
CreatePolygonRgn
GetRgnBox
CombineRgn
SetRectRgn
UpdateColors
BitBlt
SetBrushOrgEx
SetStretchBltMode
SelectClipRgn
CreateRectRgn
StretchBlt
RealizePalette
SelectPalette
CreateDIBitmap
CreateBrushIndirect
GetNearestPaletteIndex
GetCurrentObject
CreateBitmap
SetDIBitsToDevice
CreatePalette
SetDIBColorTable
CreateDIBPatternBrushPt
CreatePatternBrush
SetBitmapBits
SetTextAlign
GetTextAlign
SetROP2
CreateDIBSection
GetBitmapBits
GdiFlush
GetPaletteEntries
Polyline
Polygon
SetPolyFillMode
SetWindowExtEx
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
GetDeviceCaps
LPtoDP
SaveDC
SetTextColor
SetMapMode
CreateMetaFileW
CreateMetaFileA
GetObjectW
GetObjectA
CreateDCW
CreateDCA
GetDIBits
SetMetaFileBitsEx
PlayMetaFile
GetMetaFileBitsEx
GetDIBColorTable
GetNearestColor
Ellipse
SelectObject
GetStockObject
Rectangle
RestoreDC
DeleteDC
SetViewportOrgEx
SetWindowOrgEx
SetPrinterW
EnumPrintersW
EnumPrintersA
GetPrinterA
GetPrinterDriverA
GetPrinterDataW
GetPrinterDataA
StartDocPrinterW
StartPagePrinter
WritePrinter
GetJobW
SetJobW
GetJobA
SetJobA
EndPagePrinter
EndDocPrinter
GetPrinterW
GetPrinterDriverW
StartDocPrinterA
OpenPrinterW
OpenPrinterA
ClosePrinter
CreateDataAdviseHolder
OleRegGetMiscStatus
OleRegGetUserType
CreateOleAdviseHolder
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
OleLoadFromStream
OleUninitialize
OleIsCurrentClipboard
OleSetClipboard
WriteClassStm
OleRegEnumVerbs
OleSaveToStream
OleInitialize
CoGetMalloc
VariantClear
OleCreatePropertyFrame
VariantChangeType
VarUI4FromStr
SysStringLen
SysFreeString
SysAllocString
LoadTypeLi
RegisterTypeLi
SysStringByteLen
SysAllocStringByteLen
LoadRegTypeLi
waveOutSetVolume
waveOutGetVolume
waveOutGetPitch
waveOutPrepareHeader
waveOutWrite
waveOutUnprepareHeader
waveOutReset
waveOutClose
waveOutOpen
ioctlsocket
inet_addr
getsockname
shutdown
setsockopt
WSACleanup
WSAAsyncSelect
WSAAsyncGetHostByName
connect
htons
socket
closesocket
send
recv
WSAStartup
bind
sendto
recvfrom
gethostbyname
gethostname
WSACancelAsyncRequest
WSAGetLastError
ExtractIconW
ExtractIconA
SHFileOperationA
ord100
DllCanUnloadNow
DllGetClassObject
DllGetTscCtlVer
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
termsrv.pdb
InitializeCriticalSection
FileTimeToSystemTime
GetDateFormatW
GetDiskFreeSpaceA
GlobalMemoryStatus
GetLocalTime
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCurrentThreadId
QueryPerformanceCounter
LoadLibraryA
InterlockedCompareExchange
lstrcpynW
GetACP
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
GetComputerNameExW
PulseEvent
GetCurrentProcess
LocalSize
GetCurrentThread
SetThreadPriority
GetWindowsDirectoryW
GetProfileIntW
lstrcmpiW
lstrcatW
GetTickCount
GetProfileStringW
LoadLibraryW
GetProcAddress
FreeLibrary
GetComputerNameW
OpenProcess
IsBadWritePtr
IsBadReadPtr
ExitThread
lstrcpyW
InterlockedIncrement
WaitForSingleObject
GetSystemTimeAsFileTime
GetComputerNameA
GetSystemTime
GetSystemDirectoryW
CreateFileW
CreateThread
InterlockedDecrement
OpenMutexW
OpenEventW
WaitForMultipleObjects
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
CreateMutexW
CompareFileTime
CreateWaitableTimerW
SetWaitableTimer
FormatMessageW
GetSystemDefaultLCID
SystemTimeToFileTime
LoadLibraryExW
DelayLoadFailureHook
ReleaseMutex
GetLastError
CreateEventW
VerSetConditionMask
VerifyVersionInfoW
SetEvent
ResetEvent
GetVersionExW
IsDebuggerPresent
GetCurrentProcessId
CreateProcessW
CloseHandle
Sleep
DebugBreak
DisableThreadLibraryCalls
GetProcessHeap
LocalAlloc
SetLastError
LocalFree
lstrlenW
GetVersion
qsort
strncpy
gmtime
time
mktime
_mbslen
mbstowcs
wcscpy
_wcsicmp
wcscmp
_except_handler3
_wcsnicmp
wcscat
swscanf
wcslen
wcsncpy
swprintf
memmove
_snwprintf
wcschr
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
_vsnwprintf
_purecall
RtlInitializeResource
NtCreateEvent
RtlAnsiStringToUnicodeString
NtQuerySystemTime
RtlEqualSid
RtlAdjustPrivilege
RtlInitializeCriticalSection
NtTerminateProcess
NtQueryMutant
NtReleaseMutant
NtWaitForSingleObject
NtCreateMutant
NtQueryInformationProcess
NtDuplicateToken
NtSetInformationThread
RtlpNtEnumerateSubKey
NtRequestPort
NtConnectPort
RtlInitAnsiString
RtlQueryRegistryValues
NtDeviceIoControlFile
RtlExtendedLargeIntegerDivide
NtSetTimer
NtCreateTimer
RtlCopySecurityDescriptor
RtlNtStatusToDosError
RtlDeleteAce
RtlDeleteElementGenericTable
RtlQueryInformationAcl
NtSetEvent
RtlEnterCriticalSection
RtlAllocateHeap
RtlFreeHeap
RtlLeaveCriticalSection
RtlAcquireResourceExclusive
RtlReleaseResource
RtlInitUnicodeString
NtOpenKey
NtQueryValueKey
NtClose
RtlInsertElementGenericTable
RtlCompareMemory
RtlConvertExclusiveToShared
RtlConvertSharedToExclusive
RtlDeleteResource
NtRequestWaitReplyPort
RtlGetDaclSecurityDescriptor
RtlMapGenericMask
RtlSubAuthoritySid
RtlInitializeSid
RtlCreateUserSecurityObject
RtlSetDaclSecurityDescriptor
RtlAddAccessAllowedAce
RtlCreateEnvironment
RtlSetProcessIsCritical
DbgPrint
NtQuerySystemInformation
RtlLookupElementGenericTable
RtlDeleteCriticalSection
RtlInitializeGenericTable
RtlCreateAcl
RtlCreateSecurityDescriptor
NtWaitForMultipleObjects
NtResetEvent
NtOpenProcess
RtlPrefixUnicodeString
DbgBreakPoint
NtDelayExecution
RtlAcquireResourceShared
NtFreeVirtualMemory
NtAllocateVirtualMemory
RtlCopySid
RtlLengthSid
NtQueryInformationToken
NtOpenProcessToken
RtlLengthRequiredSid
NtOpenThreadToken
NtReplyPort
NtCompleteConnectPort
NtAcceptConnectPort
NtCreateSection
NtReplyWaitReceivePort
RtlFreeUnicodeString
RtlGetAce
NtCreatePort
RtlWriteRegistryValue
RtlCreateRegistryKey
RtlLengthSecurityDescriptor
RtlSetGroupSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
NtSetSecurityObject
NtQuerySecurityObject
NtOpenSymbolicLinkObject
NtQueryDirectoryObject
NtCreateDirectoryObject
RtlFreeSid
RtlAllocateAndInitializeSid
RtlIntegerToUnicodeString
RtlAppendUnicodeToString
NtDuplicateObject
IcaStackCallback
IcaStackClose
IcaStackDisconnect
IcaStackOpen
_IcaStackIoControl
IcaOpen
IcaIoControl
IcaStackConnectionClose
IcaChannelIoControl
IcaChannelOpen
IcaPushConsoleStack
IcaStackIoControl
IcaChannelClose
IcaStackTerminate
IcaStackReconnect
IcaStackUnlock
IcaStackConnectionAccept
IcaStackConnectionRequest
IcaClose
IcaStackConnectionWait
RpcServerListen
RpcServerUseProtseqEpW
RpcRaiseException
RpcServerInqDefaultPrincNameW
NdrServerCall2
RpcServerRegisterIf
RpcServerRegisterAuthInfoW
RpcServerRegisterIfEx
RpcBindingToStringBindingW
RpcStringBindingParseW
RpcStringFreeW
RpcImpersonateClient
I_RpcBindingIsClientLocal
RpcRevertToSelf
RpcSsContextLockExclusive
LoadStringW
MessageBeep
ExitWindowsEx
wsprintfW
GetMessageTime
GetCursorPos
GetUserNameExW
WSAGetLastError
gethostbyname
inet_addr
inet_ntoa
WSAStartup
getaddrinfo
OpenThreadToken
I_ScSendTSMessage
RegCreateKeyExW
LsaStorePrivateData
LsaNtStatusToWinError
LsaRetrievePrivateData
RegDeleteValueW
RegDeleteKeyW
ElfReportEventW
LsaQueryInformationPolicy
GetEventLogInformation
LsaQuerySecret
LsaFreeMemory
LsaOpenPolicy
LsaCreateSecret
LsaOpenSecret
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
SetServiceStatus
GetUserNameW
RegOpenKeyW
SetServiceBits
ReportEventW
RegisterEventSourceW
RegisterServiceCtrlHandlerW
CryptHashData
CryptReleaseContext
CryptDestroyHash
CryptDestroyKey
CryptVerifySignatureW
CryptImportKey
CryptCreateHash
CryptAcquireContextW
DeregisterEventSource
RegEnumKeyW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
AllocateAndInitializeSid
AccessCheckAndAuditAlarmW
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
IsValidSid
GetTokenInformation
EqualSid
LookupAccountSidW
RegSetValueExW
CryptGenRandom
LogonUserW
AddAccessAllowedAce
InitializeAcl
GetLengthSid
ElfRegisterEventSourceW
CheckTokenMembership
MakeSelfRelativeSD
MakeAbsoluteSD
IsValidSecurityDescriptor
OpenProcessToken
AddAce
GetAce
GetAclInformation
GetSecurityDescriptorDacl
LsaDelete
LsaSetSecret
LsaClose
GetUserNameA
CertGetIssuerCertificateFromStore
CryptBinaryToStringW
CryptVerifyCertificateSignature
CertFreeCertificateContext
CryptDecodeObject
CertDuplicateCertificateContext
CertCloseStore
CertOpenStore
CertEnumCertificatesInStore
SysStringByteLen
SysFreeString
SysAllocString
VariantInit
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
SafeArrayDestroy
SysAllocStringLen
AuthziInitializeAuditEvent
AuthziInitializeAuditEventType
AuthzInitializeResourceManager
AuthziFreeAuditParams
AuthzFreeAuditEvent
AuthziLogAuditEvent
AuthziFreeAuditEventType
AuthziInitializeAuditParamsWithRM
AuthziAllocateAuditParams
AuthzFreeResourceManager
ord39
ord26
ord24
ord30
ord6
ord33
ord34
ord35
ord29
ord36
ord38
ord32
ord134
ord25
ord41
ord40
ord10
ord43
ord131
ord135
ord133
ord132
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SkinH_AdjustAero
SkinH_AdjustHSV
SkinH_Attach
SkinH_AttachEx
SkinH_AttachExt
SkinH_AttachRes
SkinH_AttachResEx
SkinH_Detach
SkinH_DetachEx
SkinH_GetColor
SkinH_LockUpdate
SkinH_Map
SkinH_NineBlt
SkinH_SetAero
SkinH_SetBackColor
SkinH_SetFont
SkinH_SetFontEx
SkinH_SetForeColor
SkinH_SetMenuAlpha
SkinH_SetTitleMenuBar
SkinH_SetWindowAlpha
SkinH_SetWindowMovable
SkinH_VerifySign
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ