WideCharToMultiByte WriteFile GetCurrentThreadId CreateEventW GetSystemWindowsDirectoryW ResetEvent GetTickCount SystemTimeToFileTime GlobalAlloc GetWindowsDirectoryW GlobalUnlock GlobalLock QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess SetUnhandledExceptionFilter FileTimeToSystemTime DeleteCriticalSection GetModuleHandleExW GetDateFormatW GetTimeFormatW Sleep EnterCriticalSection LeaveCriticalSection GetTempPathW GetTempFileNameW CreateProcessW WaitForSingleObject CloseHandle LocalFree LocalAlloc LoadLibraryA HeapAlloc OutputDebugStringA GetModuleFileNameW GetLastError LoadLibraryW lstrlenW GetProcessHeap HeapFree FreeLibrary VirtualFree VirtualAlloc SetEvent GlobalFree InterlockedDecrement InterlockedIncrement InitializeCriticalSection GetCurrentProcess IsBadReadPtr VirtualProtect SetLastError GetVersion GetFileAttributesW FormatMessageW FlushInstructionCache GetProcAddress GetModuleHandleW GlobalSize lstrcpynW GetModuleHandleA

ord5283 ord3793 ord4435 ord2640 ord2047 ord6372 ord3744 ord5059 ord1720 ord5257 ord2438 ord2116 ord5273 ord2977 ord3142 ord3254 ord4459 ord3131 ord3257 ord2980 ord3076 ord2971 ord3825 ord3826 ord3820 ord3074 ord4075 ord4621 ord4419 ord3694 ord802 ord542 ord823 ord2859 ord2371 ord2403 ord2015 ord4213 ord2570 ord6051 ord1768 ord4392 ord5286 ord4831 ord4418 ord3577 ord567 ord616 ord1662 ord2644 ord4370 ord4847 ord5276 ord3592 ord641 ord324 ord4229 ord5798 ord5949 ord3092 ord5977 ord6565 ord3798 ord5597 ord2634 ord613 ord289 ord5947 ord3090 ord6466 ord665 ord4347 ord1971 ord6381 ord5180 ord354 ord5568 ord2910 ord4253 ord6451 ord3296 ord3281 ord3991 ord5706 ord5679 ord4124 ord2756 ord538 ord2810 ord1197 ord6896 ord942 ord2769 ord6898 ord3993 ord6868 ord6024 ord927 ord4371 ord4829 ord768 ord489 ord1086 ord2388 ord3341 ord5296 ord5299 ord4074 ord4693 ord5303 ord5285 ord3348 ord4616 ord3736 ord2718 ord4199 ord2755 ord2606 ord5677 ord1196 ord3605 ord1001 ord4198 ord536 ord2809 ord4270 ord6278 ord926 ord5438 ord3313 ord3871 ord6237 ord2567 ord4390 ord3569 ord1764 ord6362 ord2405 ord2016 ord4214 ord2573 ord4395 ord3634 ord3867 ord4215 ord2576 ord3649 ord2430 ord2858 ord1637 ord1143 ord2248 ord817 ord6266 ord565 ord1008 ord2385 ord498 ord6563 ord3621 ord2406 ord3566 ord1634 ord1128 ord860 ord6371 ord4480 ord2546 ord2504 ord5727 ord3917 ord1089 ord5193 ord5298 ord4692 ord5710 ord3396 ord3733 ord561 ord815 ord2717 ord3948 ord4638 ord4212 ord2568 ord4391 ord3347 ord3572 ord5886 ord5892 ord2932 ord1594 ord600 ord1240 ord1173 ord1571 ord1250 ord1248 ord1563 ord1194 ord342 ord1179 ord1570 ord1568 ord1115 ord269 ord826 ord2036 ord5830 ord2440 ord6370 ord5157 ord2377 ord5237 ord4401 ord1767 ord4073 ord6048 ord2506 ord4992 ord4848 ord5261 ord4942 ord4970 ord4736 ord4899 ord5154 ord5156 ord5155 ord6195 ord4155 ord6211 ord6379 ord5436 ord6390 ord5446 ord2099 ord2836 ord922 ord925 ord940 ord2757 ord5605 ord1085 ord535 ord3087 ord540 ord3312 ord800 ord609 ord692 ord656 ord858 ord825 ord861 ord4704 ord1165 ord3658 ord5579 ord3898

_onexit __dllonexit ?terminate@@YAXXZ ??1type_info@@UAE@XZ _adjust_fdiv _initterm exit _wcsicoll swscanf wcsrchr swprintf realloc ftell _wfopen fread fclose wcsncmp _purecall _wtol wcscpy wcscmp __RTDynamicCast __CxxFrameHandler _wcsicmp _except_handler3 wcsncpy fseek fwprintf wcslen _wcsnicmp free malloc qsort bsearch _iob

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z ??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB ?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z

ord44 ord43 ord32 ord15 ord22 ord18 ord21 ord16 ord30 ord45

LoadBitmapW PostMessageW PostThreadMessageW DispatchMessageW PeekMessageW SetForegroundWindow EnumWindows SetWindowTextW MsgWaitForMultipleObjects LoadIconW DestroyWindow SetWindowLongW CreateWindowExW DefWindowProcW GetWindowLongW CallWindowProcW UnhookWindowsHookEx CallNextHookEx SetWindowsHookExW KillTimer SetTimer ChildWindowFromPointEx ScreenToClient LoadMenuW GetSubMenu RegisterClipboardFormatW GetWindowTextLengthW GetWindowTextW LoadStringW GetDlgItem GetDlgCtrlID GetParent SendMessageW EnableWindow

SafeArrayUnaccessData VariantChangeType SafeArrayGetLBound SafeArrayGetUBound SafeArrayGetElement SysAllocString VariantInit VariantClear SysFreeString SafeArrayAccessData

CoInitialize CoUninitialize CoTaskMemFree StringFromGUID2 CreateStreamOnHGlobal ReleaseStgMedium StringFromCLSID OleInitialize CoCreateInstance CoTaskMemAlloc OleUninitialize

RegOpenKeyExW RegQueryValueExW CryptAcquireContextW RegEnumKeyExW RegSetValueExW RegCreateKeyExW RegDeleteKeyW CryptImportKey CryptSetKeyParam CryptDecrypt CryptDestroyKey CryptReleaseContext CryptCreateHash CryptHashData CryptGetHashParam CryptDestroyHash RegCloseKey

DeleteObject GetObjectW CreateFontIndirectW GetTextMetricsW GetTextExtentPoint32W

ord9 ord13 ord7 ord15

ImmAssociateContext

ord10

CryptProtectData CryptUnprotectData