WinHttpCrackUrl WinHttpSendRequest WinHttpCloseHandle WinHttpSetOption WinHttpOpenRequest WinHttpReadData WinHttpOpen WinHttpReceiveResponse WinHttpConnect WinHttpQueryDataAvailable

OpenSCManagerW CryptImportKey CopySid SetSecurityInfo RegDeleteKeyA IsValidSid CryptDestroyKey InitializeAcl GetLengthSid AddAccessAllowedAce GetTokenInformation RegEnumKeyExA RegQueryValueExW RegEnumValueW RegDeleteValueA OpenServiceW RegDeleteValueW RegEnumValueA RegOpenKeyExW RegOpenKeyExA OpenProcessToken RegSetValueExA RegDeleteTreeW RegEnumKeyExW ControlService DeleteService RegCreateKeyExA LookupPrivilegeValueA CryptEncrypt RegQueryValueExA CloseServiceHandle RegCloseKey AdjustTokenPrivileges RegEnumKeyA SystemFunction036 CryptDestroyHash CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext CryptAcquireContextW ConvertSidToStringSidA

ShellExecuteW ShellExecuteExA ShellExecuteA SHGetFolderPathW

GetAdaptersAddresses CreateIpNetEntry DeleteIpNetEntry GetAdaptersInfo GetIpNetTable

CreateVirtualDisk OpenVirtualDisk DetachVirtualDisk

GdiplusStartup GdiplusShutdown GdipAddPathLine GdipCreateStringFormat GdipDeleteFontFamily GdipResetClip GdipCreateFontFamilyFromName GdipSetStringFormatAlign GdipSetClipRect GdipSetPenStartCap GdipDeleteBrush GdipAlloc GdipDeletePath GdipSetSmoothingMode GdipCreateLineBrush GdipCreatePath GdipSaveGraphics GdipCreateFont GdipCreateSolidFill GdipSetStringFormatTrimming GdipFillPath GdipDrawLine GdipDrawRectangle GdipFillRectangle GdipSetClipRectI GdipClosePathFigure GdipFree GdipDrawPath GdipDrawString GdipCreateFromHDC GdipFillEllipse GdipSetPenEndCap GdipSetTextRenderingHint GdipDrawEllipse GdipRestoreGraphics GdipCloneBrush GdipFillRectangleI GdipAddPathArc GdipDeleteGraphics GdipDrawArc GdipDeleteStringFormat GdipDeleteFont GdipDeletePen GdipCreatePen1 GdipSetStringFormatLineAlign

DwmSetWindowAttribute

ord345

SetupDiGetDeviceRegistryPropertyA SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiGetClassDevsA SetupDiGetDeviceInstanceIdA

InitializeSListHead UnhandledExceptionFilter OutputDebugStringW GetSystemTimeAsFileTime SetUnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext IsDebuggerPresent WakeAllConditionVariable GetCurrentThreadId ReadFile GetModuleFileNameA GetVolumeInformationW GetLogicalDrives FindFirstFileW GetFileSizeEx FindFirstFileA VirtualProtect GetConsoleScreenBufferInfo SetConsoleTitleA FindNextFileW GetCurrentProcess GetStdHandle WriteFile ExpandEnvironmentStringsW SetConsoleMode DeviceIoControl TerminateProcess RemoveDirectoryW GetDriveTypeA GetCurrentDirectoryW Thread32Next ExpandEnvironmentStringsA SetFilePointer SetEndOfFile Thread32First FindClose GetVolumeInformationA WaitForSingleObject CreateFileW GetFileAttributesW GetSystemDirectoryW ResumeThread GetModuleHandleA SetFileAttributesW GetLogicalDriveStringsW CreateToolhelp32Snapshot MultiByteToWideChar Sleep GetConsoleMode GetTempPathA GetTickCount64 CopyFileA GetLastError GetFileAttributesA Process32NextW SetFileInformationByHandle CreateFileA GetCurrentThread GetSystemDirectoryA AreFileApisANSI CreateDirectoryW DeleteFileW Process32FirstW CloseHandle K32GetModuleInformation SetFileAttributesA GetLocalTime GetThreadContext GetProcAddress RemoveDirectoryA ExitProcess SetConsoleCP GetCurrentProcessId GetProcessHeap CreateProcessW GetModuleHandleW FreeLibrary WideCharToMultiByte GetConsoleWindow SetComputerNameExA CreateProcessA SetConsoleOutputCP GetDiskFreeSpaceExA CreateDirectoryA SetConsoleCursorPosition GetTickCount AllocConsole GetDriveTypeW OpenThread LoadLibraryExW FlushFileBuffers GetExitCodeProcess SetHandleInformation GetModuleFileNameW CreatePipe GetTempPathW IsProcessorFeaturePresent CopyFileW AddVectoredExceptionHandler HeapDestroy HeapAlloc HeapReAlloc HeapFree HeapSize InitializeCriticalSectionEx DeleteCriticalSection CreateThread CreateFileMappingW MapViewOfFile UnmapViewOfFile QueryFullProcessImageNameW SetLastError FormatMessageW ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeCriticalSection EnterCriticalSection LeaveCriticalSection LocalFree QueryPerformanceFrequency LoadLibraryW SleepEx GetSystemInfo QueryPerformanceCounter MoveFileExW WaitForSingleObjectEx GetEnvironmentVariableA GetFileType PeekNamedPipe WaitForMultipleObjects VerSetConditionMask VerifyVersionInfoW FindFirstFileExW GetFileAttributesExW GetFileInformationByHandle GetFinalPathNameByHandleW DeleteFileA GetFullPathNameW GetFileInformationByHandleEx FormatMessageA GetLocaleInfoEx LoadLibraryA SleepConditionVariableSRW FindNextFileA

PostMessageW EnumDisplayDevicesA GetWindowRect SetWindowPos MessageBoxW SetWindowRgn CreateWindowExW RegisterClassExW SetTimer DefWindowProcW SetCapture GetClientRect KillTimer ReleaseCapture MessageBoxA DestroyWindow PostQuitMessage FindWindowA RegisterClassExA UpdateWindow GetCursorPos SendMessageW GetSystemMetrics ShowWindow DispatchMessageW GetWindowTextA SetWindowTextA CreateWindowExA SetLayeredWindowAttributes TranslateMessage EndPaint InvalidateRect GetMessageW LoadCursorW EnumDisplaySettingsA UnregisterClassA BeginPaint

SetTextColor GetStockObject CreateFontA DeleteObject DeleteDC CreateRoundRectRgn CreateCompatibleDC SelectObject CreateCompatibleBitmap BitBlt SetBkMode CreateSolidBrush

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?id@?$ctype@D@std@@2V0locale@2@A ?_Random_device@std@@YAIXZ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??Bid@locale@std@@QEAA_KXZ _Query_perf_frequency _Query_perf_counter _Xtime_get_ticks ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?_Xbad_function_call@std@@YAXXZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z ?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z ?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Throw_Cpp_error@std@@YAXH@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?uncaught_exception@std@@YA_NXZ ?_Xbad_alloc@std@@YAXXZ ?id@?$ctype@_W@std@@2V0locale@2@A ?_Xinvalid_argument@std@@YAXPEBD@Z ?_Id_cnt@id@locale@std@@0HA ?_Xout_of_range@std@@YAXPEBD@Z ?_Winerror_map@std@@YAHH@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z ?_Xlength_error@std@@YAXPEBD@Z ?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A ?_Syserror_map@std@@YAPEBDH@Z _Mtx_lock _Cnd_do_broadcast_at_thread_exit _Thrd_id _Thrd_detach _Thrd_join _Mtx_unlock ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ ?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z ?widen@?$ctype@_W@std@@QEBA_WD@Z ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ?width@ios_base@std@@QEAA_J_J@Z ?width@ios_base@std@@QEBA_JXZ ?good@ios_base@std@@QEBA_NXZ ??7ios_base@std@@QEBA_NXZ ??Bios_base@std@@QEBA_NXZ ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

getsockname WSASetLastError getsockopt getpeername gethostname ioctlsocket sendto recvfrom freeaddrinfo getaddrinfo listen htonl accept select __WSAFDIsSet WSAIoctl connect send recv WSACloseEvent WSACreateEvent WSAEnumNetworkEvents WSAEventSelect bind WSAResetEvent WSAWaitForMultipleEvents closesocket setsockopt WSAGetLastError socket inet_pton ntohs WSACleanup WSAStartup inet_ntop htons

URLDownloadToFileA

PathFindFileNameW

UnloadUserProfile

BCryptGenRandom

__CxxFrameHandler4

wcsstr strstr strrchr __current_exception_context __current_exception __C_specific_handler wcschr strchr memset memmove memcpy memcmp memchr _CxxThrowException __std_exception_destroy __std_exception_copy __std_terminate

__sys_errlist __sys_nerr _register_onexit_function _errno _initialize_onexit_table abort _invalid_parameter_noinfo terminate _resetstkoflw _invalid_parameter_noinfo_noreturn _beginthreadex _invoke_watson _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _exit _initterm_e _initterm exit _get_initial_narrow_environment _crt_atexit _initialize_narrow_environment _configure_narrow_argv _set_app_type system _seh_filter_exe

_lseeki64 fgetc fgetwc fputc _wfopen _wopen fwrite _set_fmode __stdio_common_vsscanf __stdio_common_vsprintf fgetpos feof __stdio_common_vswprintf_s fputs setvbuf __p__commode ungetwc ungetc fsetpos __acrt_iob_func fread _popen _pclose _fseeki64 _read _write fgets _get_stream_buffer_pointers _fileno _close fclose fputwc ftell fflush _wfopen_s fseek __stdio_common_vsprintf_s

free calloc _set_new_mode _callnewh realloc malloc

rand srand qsort

strnlen isdigit _strdup _wcsicmp _wcsdup towlower strcspn _stricmp strncmp wcspbrk strspn strcmp wcsncmp strpbrk wcsncpy tolower wcscat_s

_getch

strtoul strtoll atoi strtod strtol strtoull wcstombs

_unlock_file _fstat64 _lock_file _unlink _wstat64

_time64 _gmtime64 _localtime64 strftime

_dsign __setusermatherr cosf sinf _fdopen

getenv

_configthreadlocale ___lc_codepage_func localeconv

CertGetNameStringW CertOpenStore CertFindExtension CertGetCertificateChain CertFreeCertificateChain CertAddCertificateContextToStore CryptDecodeObjectEx PFXImportCertStore CryptStringToBinaryW CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertFreeCertificateContext CertFreeCertificateChainEngine CertCreateCertificateChainEngine CryptQueryObject

GetModuleInformation