SHA256_Init SHA256_Final SHA256_Update

CreateFileMappingW MapViewOfFile UnmapViewOfFile GetModuleFileNameA GetModuleFileNameW GetModuleHandleExA AddDllDirectory SetDefaultDllDirectories QueryFullProcessImageNameW SetDllDirectoryW InitializeCriticalSection GetVolumeInformationA GetSystemInfo OutputDebugStringW AcquireSRWLockExclusive ReleaseSRWLockExclusive GetFileInformationByHandleEx OpenProcess GetSystemDirectoryW GetCurrentThreadId SetConsoleWindowInfo GetStdHandle SetConsoleScreenBufferSize GetCurrentProcess GlobalFindAtomA GetConsoleWindow SleepConditionVariableSRW GetTickCount64 AddVectoredExceptionHandler GetFileAttributesA SetConsoleTitleA GetModuleHandleW GetConsoleScreenBufferInfo Process32First QueryPerformanceCounter FreeLibrary VerSetConditionMask QueryPerformanceFrequency WakeAllConditionVariable GlobalUnlock WideCharToMultiByte GlobalLock VirtualProtect GlobalAlloc MultiByteToWideChar GetProcAddress LoadLibraryA GetModuleHandleA DeviceIoControl LoadLibraryExA GetCurrentProcessId LocalFree CreateThread CloseHandle GetTempPathW DeleteFileW GetFileAttributesExW CreateFileW VirtualAlloc Process32Next DeleteFileA CreateFileA AreFileApisANSI CreateFile2 SetFileInformationByHandle GetFullPathNameW GetFileAttributesW FindFirstFileW FindClose GetCurrentDirectoryW GetLocaleInfoEx GetFileSizeEx WaitForMultipleObjects PeekNamedPipe ReadFile GetFileType GetEnvironmentVariableA WaitForSingleObjectEx MoveFileExA GetTickCount FormatMessageA SetLastError VerifyVersionInfoA VirtualFree InitializeSListHead GetSystemTimeAsFileTime SetUnhandledExceptionFilter QueryFullProcessImageNameA lstrlenA CreateDirectoryW VirtualQuery GlobalFree GetSystemDirectoryA SleepEx DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection GetLastError Sleep GetLocaleInfoA IsDebuggerPresent SetConsoleTextAttribute CreateToolhelp32Snapshot GetSystemTimeAsFileTime CreateEventA GetModuleHandleA TerminateProcess GetCurrentProcess CreateToolhelp32Snapshot Thread32First GetCurrentProcessId GetCurrentThreadId OpenThread Thread32Next CloseHandle SuspendThread ResumeThread WriteProcessMemory GetSystemInfo VirtualAlloc VirtualProtect VirtualFree GetProcessAffinityMask SetProcessAffinityMask GetCurrentThread SetThreadAffinityMask Sleep LoadLibraryA FreeLibrary GetTickCount SystemTimeToFileTime FileTimeToSystemTime GlobalFree HeapAlloc HeapFree GetProcAddress ExitProcess EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection MultiByteToWideChar GetModuleHandleW LoadResource FindResourceExW FindResourceExA WideCharToMultiByte GetThreadLocale GetUserDefaultLCID GetSystemDefaultLCID EnumResourceNamesA EnumResourceNamesW EnumResourceLanguagesA EnumResourceLanguagesW EnumResourceTypesA EnumResourceTypesW CreateFileW LoadLibraryW GetLastError FlushFileBuffers FlsSetValue GetCommandLineA GetCPInfo GetACP GetOEMCP IsValidCodePage EncodePointer DecodePointer FlsGetValue FlsFree SetLastError FlsAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RaiseException RtlPcToFileHeader RtlUnwindEx LCMapStringA LCMapStringW SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize WriteFile SetFilePointer GetConsoleCP GetConsoleMode HeapReAlloc InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA

ReleaseDC GetWindowThreadProcessId DefWindowProcW GetClipboardData MonitorFromPoint DispatchMessageA GetWindowRect DestroyWindow SetWindowPos SetActiveWindow GetSystemMetrics ShowWindow GetAsyncKeyState SetWindowLongA GetWindowLongA SetWindowDisplayAffinity AttachThreadInput MessageBoxA SetClipboardData GetSystemMenu CreateWindowExA SetLayeredWindowAttributes SetFocus BringWindowToTop TranslateMessage LoadIconA PeekMessageA UnregisterClassA PostQuitMessage GetDesktopWindow FindWindowA RegisterClassExA UpdateWindow EmptyClipboard SetCursorPos ReleaseCapture IsWindowUnicode SetProcessDPIAware GetClientRect SetCursor SetCapture GetForegroundWindow GetKeyboardLayout TrackMouseEvent ClientToScreen GetCapture ScreenToClient GetDC LoadCursorA GetMessageExtraInfo GetKeyState CloseClipboard OpenClipboard SetForegroundWindow GetCursorPos

GetDeviceCaps DeleteDC CreateCompatibleDC SelectObject DeleteObject

IsValidSid SystemFunction036 ConvertSidToStringSidA SetSecurityInfo RegCreateKeyExA InitializeAcl RegSetKeyValueW RegDeleteTreeW RegCreateKeyW RegOpenKeyW RegCreateKeyA LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyA RegDeleteKeyA GetUserNameA RegSetValueExA OpenProcessToken RegCloseKey RegQueryValueExA RegOpenKeyExA GetTokenInformation GetLengthSid AddAccessAllowedAce CryptEncrypt CryptImportKey CryptDestroyKey CryptDestroyHash CryptHashData CryptCreateHash CryptGenRandom CryptGetHashParam CryptReleaseContext CryptAcquireContextA

ShellExecuteW SHGetFolderPathA ShellExecuteA

CoUninitialize CoInitialize CoCreateInstance StringFromGUID2

?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?_Xinvalid_argument@std@@YAXPEBD@Z ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A ?_Winerror_map@std@@YAHH@Z ?_Xbad_function_call@std@@YAXXZ ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?id@?$ctype@D@std@@2V0locale@2@A ?_Random_device@std@@YAIXZ ?_Syserror_map@std@@YAPEBDH@Z _Query_perf_counter _Thrd_detach ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z ?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z ?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??7ios_base@std@@QEBA_NXZ ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?always_noconv@codecvt_base@std@@QEBA_NXZ ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ _Query_perf_frequency ?id@?$ctype@_W@std@@2V0locale@2@A ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?widen@?$ctype@_W@std@@QEBA_WD@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z ?good@ios_base@std@@QEBA_NXZ ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z ??Bios_base@std@@QEBA_NXZ ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ _Xtime_get_ticks ?_Id_cnt@id@locale@std@@0HA ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?uncaught_exceptions@std@@YAHXZ ?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A ??0_Lockit@std@@QEAA@H@Z ??1_Lockit@std@@QEAA@XZ _Mtx_unlock _Thrd_join _Thrd_id _Cnd_do_broadcast_at_thread_exit _Mtx_lock ?_Throw_Cpp_error@std@@YAXH@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Xbad_alloc@std@@YAXXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

RtlInitAnsiString NtLoadDriver RtlAnsiStringToUnicodeString RtlInitUnicodeString NtQuerySystemInformation NtUnloadDriver RtlAdjustPrivilege

WinHttpConnect WinHttpSendRequest WinHttpCloseHandle WinHttpOpenRequest WinHttpGetDefaultProxyConfiguration WinHttpOpen WinHttpReceiveResponse WinHttpCrackUrl

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

D3DCompile

DwmExtendFrameIntoClientArea

ioctlsocket freeaddrinfo sendto listen accept select __WSAFDIsSet WSAIoctl gethostname WSASetLastError setsockopt ntohs getsockopt ntohl getsockname inet_pton getpeername bind WSAGetLastError WSACleanup closesocket WSAStartup send socket connect recv htonl getaddrinfo htons recvfrom

D3D11CreateDeviceAndSwapChain

CryptStringToBinaryA CertFreeCertificateContext CertFindCertificateInStore CertEnumCertificatesInStore CertCloseStore CertOpenStore CertAddCertificateContextToStore CertFindExtension CertGetNameStringA CryptQueryObject CryptDecodeObjectEx PFXImportCertStore CertCreateCertificateChainEngine CertFreeCertificateChainEngine CertGetCertificateChain CertFreeCertificateChain

URLDownloadToFileW

GdipFree GdipCreateBitmapFromHBITMAP GdipSaveImageToFile GdipAlloc GdipCloneImage GdiplusStartup GdipGetImageEncoders GdipDisposeImage GdipGetImageEncodersSize GdiplusShutdown

PathFindFileNameW

InternetOpenUrlA InternetOpenA InternetCloseHandle InternetReadFile

SymLoadModuleExW SymInitializeW SymFromName SymUnloadModule64 SymCleanup SymSetOptions

__CxxFrameHandler4

__current_exception_context __current_exception memchr memcmp memset memmove memcpy _CxxThrowException wcsstr strchr strstr __C_specific_handler __std_terminate __std_exception_copy __std_exception_destroy strrchr

calloc _callnewh free _set_new_mode realloc malloc

fputc _read _write _close _open __stdio_common_vsscanf _pclose _popen fseek fclose fwrite __p__commode _lseeki64 fflush fgets __stdio_common_vsprintf ftell _wfopen __stdio_common_vsprintf_s fputs fgetc fopen feof __stdio_common_vfprintf fread _get_stream_buffer_pointers _fseeki64 fsetpos ungetc __acrt_iob_func setvbuf fgetpos _set_fmode

_stricmp strncmp strncpy strpbrk strcmp tolower strspn isupper _wcsicmp towlower _strdup isxdigit isspace strlen wcslen strcpy_s strcspn

getenv _wgetenv

terminate _beginthreadex system strerror __sys_nerr _getpid abort _configure_narrow_argv exit _invoke_watson _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _crt_atexit _register_thread_local_exe_atexit_callback _c_exit __p___argv __p___argc _cexit _exit _initterm_e _initterm _get_initial_narrow_environment _set_app_type _seh_filter_exe _errno

strftime _gmtime64 _localtime64_s _localtime64 _gmtime64_s _time64

rand qsort srand

strtoull strtod wcstombs_s atoi strtoul strtol atof mbstowcs_s _itoa_s strtoll

pow powf sinf _dclass log fmodf floorf cosf ceilf acosf logf _dsign sqrtf __setusermatherr

_access remove _stat64 _unlink _unlock_file _lock_file _fstat64 _wremove

___lc_codepage_func localeconv _configthreadlocale

IdnToAscii

ord33 ord32 ord143 ord217 ord46 ord30 ord79 ord301 ord211 ord60 ord45 ord50 ord41 ord22 ord26 ord200 ord27 ord35

GetModuleInformation

WinVerifyTrust