ord2676 ord2479 ord4518 ord4519 ord1557 ord702 ord453 ord933 ord2145 ord3191 ord3355 ord6411 ord1754 ord1751 ord4345 ord1493 ord4664 ord5602 ord2074 ord5512 ord6800 ord4603 ord5664 ord3743 ord5154 ord4702 ord1728 ord6466 ord5685 ord5683 ord960 ord965 ord969 ord967 ord971 ord2615 ord2635 ord2619 ord2625 ord2623 ord2621 ord2638 ord2633 ord2617 ord2640 ord2628 ord2610 ord2612 ord2630 ord2375 ord2368 ord1641 ord6802 ord4174 ord6804 ord3682 ord5404 ord6376 ord3226 ord1442 ord5625 ord2139 ord1792 ord1727 ord5650 ord3140 ord4910 ord1791 ord1220 ord3868 ord1070 ord5788 ord1298 ord310 ord324 ord608 ord1542 ord6528 ord2539 ord3221 ord305 ord2829 ord1608 ord6633 ord1137 ord4044 ord797 ord595 ord3953 ord911 ord6531 ord316 ord601 ord266 ord265 ord935 ord939 ord2370 ord5770 ord2696 ord6116 ord1034 ord2327 ord6079 ord580 ord782 ord1248 ord946 ord6171 ord6013 ord2478 ord6687 ord2523 ord1243 ord2458 ord582 ord784 ord1250 ord392 ord802 ord322 ord1076 ord1145 ord1249 ord5853 ord406 ord665 ord2490 ord5939 ord6164 ord6529 ord6022 ord321 ord1271 ord1273 ord5553 ord3071 ord690 ord441 ord1211 ord4442 ord2326 ord6415 ord4490 ord452 ord1254 ord3187 ord4324 ord938 ord1603 ord6659 ord5979 ord6686 ord4405 ord1607 ord285 ord3220 ord1599 ord4448 ord4423 ord6801 ord4173 ord6803 ord4747 ord2251 ord2206 ord6035 ord4179 ord1048 ord5548 ord6741 ord5830 ord4213 ord2087 ord3217 ord5674 ord5676 ord4347 ord4996 ord5680 ord5663 ord6018 ord2771 ord2983 ord3112 ord4728 ord2966 ord3115 ord2774 ord2893 ord2764 ord4080 ord4081 ord4071 ord2891 ord4348 ord4905 ord4681 ord3670 ord3500 ord6813 ord1064 ord4309 ord4351 ord2447 ord4211 ord794 ord589 ord4043 ord2537 ord2702 ord5851 ord811 ord296 ord280 ord1855 ord600 ord3185 ord2694 ord2828 ord6630 ord813 ord1152 ord391 ord1233 ord1180 ord942 ord821 ord818 ord300 ord5852 ord4325 ord1088 ord4494 ord6359 ord6514 ord3186 ord286 ord909 ord799 ord2084 ord1552 ord1261 ord320 ord5535 ord1264 ord1239 ord2695 ord814 ord6660 ord3406 ord663 ord404 ord1241 ord1274 ord605 ord801

_stricmp ??0exception@std@@QAE@ABQBD@Z ??1exception@std@@UAE@XZ memmove_s ??0exception@std@@QAE@XZ ??0exception@std@@QAE@ABV01@@Z _invalid_parameter_noinfo wcsrchr _wcsicmp wcstol _time64 wcsftime _localtime64_s ?what@exception@std@@UBEPBDXZ _purecall wcscpy_s _beginthreadex printf free _recalloc calloc _wfopen_s fwprintf_s fflush fclose _vsnwprintf_s malloc wcsncpy_s wprintf _wtoi fprintf __iob_func _wcstoi64 strtol _strtoi64 _wfopen fread ferror feof fwrite memcpy_s _gmtime64 wcsncpy wcsstr strncpy srand rand fputc strncmp isspace putc _pclose _isatty _access _popen fgetc isalnum tolower isprint fgets fopen isalpha isdigit realloc getenv exit memmove wcschr _wcsnicmp swprintf_s _wcsdup strstr wcsncmp sscanf sprintf strchr sprintf_s strpbrk __CxxFrameHandler3 _unlock __dllonexit _encode_pointer _lock _onexit _decode_pointer ?terminate@@YAXXZ _malloc_crt _encoded_null _initterm _initterm_e _amsg_exit _adjust_fdiv __CppXcptFilter _crt_debugger_hook _CxxThrowException _except_handler4_common __clean_type_info_names_internal memset memcpy ?_type_info_dtor_internal_method@type_info@@QAEXXZ

FindNextFileW CreateFileMappingW MapViewOfFile UnmapViewOfFile CloseHandle InterlockedExchange WaitForSingleObject GetPrivateProfileStringW MultiByteToWideChar LoadLibraryW FreeLibrary InterlockedExchangeAdd GetTempFileNameW lstrlenA lstrlenW WideCharToMultiByte GetVersionExW CreatePipe CreateProcessW ResumeThread ReadFile TerminateProcess GetExitCodeProcess OpenProcess GetTickCount CreateFileW DeviceIoControl GetDriveTypeW LocalAlloc ExpandEnvironmentStringsW QueryPerformanceCounter GetCurrentThreadId QueryPerformanceFrequency GetLogicalDrives GetDiskFreeSpaceExW Sleep WaitForMultipleObjects LoadLibraryA MoveFileExW FileTimeToSystemTime SystemTimeToFileTime MoveFileW GetFileAttributesW GetFileTime SetFileAttributesW SetFileTime GetPrivateProfileSectionNamesW GetPrivateProfileSectionW GetFileType SetFilePointer GetCurrentDirectoryW DosDateTimeToFileTime CreateDirectoryW WriteFile GetFileInformationByHandle EnterCriticalSection GetLocalTime GetFullPathNameW GetFullPathNameA HeapReAlloc CreateFileA CreateMutexW SetEndOfFile HeapAlloc HeapFree InterlockedCompareExchange UnlockFile LockFile OutputDebugStringW UnlockFileEx GetProcessHeap GetProcAddress GetLastError GetSystemTimeAsFileTime DeleteFileW LocalFree FormatMessageW GetModuleFileNameW GetLongPathNameW GetCurrentProcess GetModuleHandleW FindClose CreateThread FindFirstFileW LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection DuplicateHandle GetFileSize IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetVolumeInformationW QueryDosDeviceW GetOverlappedResult ReadDirectoryChangesW CreateEventW SetEvent Process32NextW Process32FirstW Module32NextW Module32FirstW CreateToolhelp32Snapshot GetVersion DeleteFileA AreFileApisANSI GetSystemTime GetTempPathA GetCurrentProcessId GetVersionExA OutputDebugStringA GetFileAttributesExW GetSystemInfo GetDiskFreeSpaceA CreateFileMappingA GetDiskFreeSpaceW LockFileEx HeapSize GetTempPathW FlushFileBuffers HeapValidate HeapCreate GetFileAttributesA HeapDestroy FormatMessageA

CreateWindowExW PeekMessageW DispatchMessageW wsprintfW DefWindowProcW LoadIconW LoadCursorW EnableWindow TranslateAcceleratorW GetMessageW MsgWaitForMultipleObjects RegisterClassExW GetDesktopWindow TranslateMessage

RegCloseKey RegEnumKeyW CryptAcquireContextW CryptCreateHash CryptHashData CryptDeriveKey CryptDestroyHash CryptEncrypt CryptDestroyKey CryptReleaseContext CryptDecrypt CryptGetHashParam RegQueryValueExW RegOpenKeyExW RegEnumValueW RegOpenKeyW RegQueryInfoKeyW

ord165 SHGetSpecialFolderPathW ShellExecuteW SHFileOperationW CommandLineToArgvW

PathRemoveFileSpecW SHGetValueW PathFindExtensionW StrCmpLogicalW PathFileExistsW PathUnExpandEnvStringsW StrFormatByteSizeW

CoTaskMemFree CoInitialize CoUninitialize CoCreateInstance CoInitializeEx CoInitializeSecurity CoSetProxyBlanket

VariantTimeToSystemTime SystemTimeToVariantTime VarBstrFromDate SysAllocString SysStringLen VariantClear SysAllocStringLen VariantInit SysFreeString

URLDownloadToFileW

??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ ?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ ??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z ?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ ?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ ?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IPB_WI@Z ??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@D@Z ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z ?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ ?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z ?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z ?setw@std@@YA?AU?$_Smanip@H@1@H@Z ??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z ?uncaught_exception@std@@YA_NXZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ ??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z ??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ ?width@ios_base@std@@QAEHH@Z ?width@ios_base@std@@QBEHXZ ?setf@ios_base@std@@QAEHHH@Z ?setf@ios_base@std@@QAEHH@Z ?flags@ios_base@std@@QBEHXZ ?good@ios_base@std@@QBE_NXZ ?rdstate@ios_base@std@@QBEHXZ ?eof@?$char_traits@D@std@@SAHXZ ?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z ?length@?$char_traits@D@std@@SAIPBD@Z ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z ??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z ??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z ?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ ?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z ?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ ??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ ?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ ?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ ?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IBEPBDXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z ?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IBEPB_WXZ

_SetBlacklistFile@12 _SetFilterRegKey@16 _SetProcessProtectReg@12 _SetProcessProtectFile@8 _UpdateFileLastOpenMask@0 _SetFilterExcludePID@12 _SetProcessProtectPID@12 _UnregisterMHFilterCallback@8 _RegisterMHFilterCallback@12 ord5 ord4 ord3 ord2 ord1 _QueryRegPath@16

GetDLFileInfo

GAGetThreadStackModule GAUninit GAInit

DeleteUrlCacheEntryW

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

GetProcessImageFileNameW EnumProcesses

WinVerifyTrust

CertFreeCertificateContext CryptMsgClose CertCloseStore CryptQueryObject CertGetNameStringW CertFindCertificateInStore CryptMsgGetParam

uncompress

CloseShortcuts GetShortcutsTargetPath CreateShortcuts

GetModuleUpdateInfo

SfcIsFileProtected