CloseHandle GetSystemInfo SetFileAttributesA GetLocalTime FillConsoleOutputAttribute WriteConsoleW Beep GetProcAddress CreateFileMappingA LocalFree ExitProcess SystemTimeToFileTime FreeLibrary GetConsoleWindow CreateProcessA GetSystemTime SetConsoleCursorPosition SetConsoleTitleW ConnectNamedPipe Process32FirstW GetExitCodeProcess GetLocaleInfoEx DeleteFileA LoadLibraryA FileTimeToSystemTime CreateFileA MoveFileExA Process32NextW GetFileAttributesA GetLastError GetTickCount64 Sleep CreateToolhelp32Snapshot OpenProcess CreateFileW WaitForSingleObject CreateMutexA GetEnvironmentVariableA CreateNamedPipeW TerminateProcess DeviceIoControl OutputDebugStringA OutputDebugStringW InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter SetUnhandledExceptionFilter WakeAllConditionVariable UnmapViewOfFile MapViewOfFile GetFileSize VirtualProtect VirtualQuery VirtualFree VirtualAlloc WriteFile GetStdHandle GetCurrentProcess SetLocalTime SetConsoleTextAttribute GetConsoleScreenBufferInfo SetConsoleCtrlHandler FillConsoleOutputCharacterA GetModuleFileNameA FlushFileBuffers ReadFile FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW SetFileInformationByHandle CreateFile2 AreFileApisANSI GetModuleHandleW GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte ReleaseSRWLockExclusive AcquireSRWLockExclusive SleepConditionVariableSRW GetCurrentThreadId InitializeCriticalSectionEx DeleteCriticalSection DecodePointer K32GetModuleInformation AddVectoredExceptionHandler RaiseException GetProcessHeap HeapDestroy FormatMessageA HeapAlloc HeapFree HeapReAlloc HeapSize DuplicateHandle GetModuleHandleA IsWow64Process VirtualFreeEx GetSystemDirectoryA SetFilePointer VirtualAllocEx GetTickCount IsDebuggerPresent CheckRemoteDebuggerPresent GetThreadContext RemoveVectoredExceptionHandler

GetWindowLongW GetAsyncKeyState SetLayeredWindowAttributes SetWindowLongW UnregisterClassA

AdjustTokenPrivileges CopySid GetLengthSid IsValidSid CryptReleaseContext CryptGetHashParam OpenProcessToken CryptDestroyHash ConvertSidToStringSidA OpenThreadToken GetTokenInformation CryptHashData LookupPrivilegeValueW LookupAccountSidA CryptAcquireContextW CryptCreateHash

ShellExecuteW

BCryptSetProperty BCryptHashData BCryptImportKeyPair BCryptGenerateSymmetricKey BCryptCreateHash BCryptFinishHash BCryptExportKey BCryptGenRandom BCryptOpenAlgorithmProvider BCryptDestroyHash BCryptDecrypt BCryptFinalizeKeyPair BCryptGetProperty BCryptDestroyKey BCryptCloseAlgorithmProvider BCryptEncrypt BCryptGenerateKeyPair

CryptDecodeObjectEx CertCreateSelfSignCertificate CertFreeCertificateContext CryptStringToBinaryA CryptBinaryToStringA PFXExportCertStore CertCloseStore CertStrToNameA CryptImportPublicKeyInfoEx2 CertOpenStore

?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ?good@ios_base@std@@QEBA_NXZ ??Bios_base@std@@QEBA_NXZ ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?tolower@?$ctype@D@std@@QEBADD@Z ?always_noconv@codecvt_base@std@@QEBA_NXZ ??1facet@locale@std@@MEAA@XZ ??0facet@locale@std@@IEAA@_K@Z ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ?_Incref@facet@locale@std@@UEAAXXZ ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ ??1_Locinfo@std@@QEAA@XZ ??0_Locinfo@std@@QEAA@PEBD@Z __crtLCMapStringA ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?uncaught_exception@std@@YA_NXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ _Mtx_unlock _Thrd_join _Xtime_get_ticks _Thrd_detach _Query_perf_counter _Thrd_id _Cnd_do_broadcast_at_thread_exit _Strcoll _Mtx_lock ?_Syserror_map@std@@YAPEBDH@Z ?id@?$collate@D@std@@2V0locale@2@A ?_Xlength_error@std@@YAXPEBD@Z ?id@?$ctype@D@std@@2V0locale@2@A ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Winerror_map@std@@YAHH@Z ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xout_of_range@std@@YAXPEBD@Z ?_Id_cnt@id@locale@std@@0HA ?_Xbad_alloc@std@@YAXXZ ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?uncaught_exceptions@std@@YAHXZ ?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A ?_Throw_Cpp_error@std@@YAXH@Z ??0_Lockit@std@@QEAA@H@Z ??1_Lockit@std@@QEAA@XZ _Query_perf_frequency _Strxfrm ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ

NtCreateSection NtUnmapViewOfSection NtClose RtlImageNtHeader NtMapViewOfSection

WinHttpReadData WinHttpOpenRequest WinHttpSetOption WinHttpQueryHeaders WinHttpSendRequest WinHttpSetTimeouts WinHttpConnect WinHttpQueryDataAvailable WinHttpOpen WinHttpCloseHandle WinHttpReceiveResponse WinHttpCrackUrl

bind closesocket listen accept WSAStartup WSAGetLastError setsockopt htons htonl recv connect socket send inet_pton

DecryptMessage QueryContextAttributesW AcquireCredentialsHandleW FreeCredentialsHandle InitializeSecurityContextW AcceptSecurityContext EncryptMessage DeleteSecurityContext FreeContextBuffer

ord215

UnloadUserProfile

__CxxFrameHandler4

__std_exception_destroy __std_exception_copy __std_type_info_compare __std_terminate _CxxThrowException strchr memcmp memcpy memmove memset __C_specific_handler __current_exception_context __current_exception __RTtypeid

ungetc _set_fmode fsetpos fread _fseeki64 _get_stream_buffer_pointers fclose __stdio_common_vsscanf fflush fputc __stdio_common_vswprintf_s __stdio_common_vsprintf_s fgetc __p__commode setvbuf fgetpos __stdio_common_vsprintf fwrite

malloc realloc _set_new_mode _recalloc calloc _callnewh free

strcat isalnum strcpy strcpy_s strnlen _wcsicmp tolower wcslen strlen strncmp

_localtime64_s _time64

_initialize_narrow_environment _initialize_onexit_table _register_onexit_function _crt_atexit _invalid_parameter_noinfo terminate _resetstkoflw system _cexit _seh_filter_exe _set_app_type _configure_narrow_argv _invoke_watson _get_initial_narrow_environment _beginthreadex _register_thread_local_exe_atexit_callback abort _errno _initterm _initterm_e exit _exit __p___argc _c_exit __p___argv

_unlock_file _lock_file

___lc_collate_cp_func ___lc_locale_name_func _configthreadlocale ___lc_codepage_func

rand srand

strtol

__setusermatherr