AlphaBlend

SetUnhandledExceptionFilter FlushFileBuffers GetProcessIdOfThread GetThreadId CancelIoEx ReleaseSRWLockShared InitializeSListHead GetCurrentProcessId GetStartupInfoW WakeAllConditionVariable Sleep SleepConditionVariableSRW InitOnceBeginInitialize InitOnceComplete QueryPerformanceCounter MapViewOfFile CreateFileMappingW GetSystemTime GlobalMemoryStatusEx GetProcessHeap ExitProcess SetProcessDEPPolicy WriteConsoleW AddVectoredExceptionHandler SetStdHandle GetLocalTime GetFileSize AcquireSRWLockShared HeapSetInformation GetProcAddress ReadDirectoryChangesW VirtualQuery FreeConsole CreateProcessW GetDiskFreeSpaceExW SetEvent K32EnumDeviceDrivers K32GetDeviceDriverFileNameW ReadFile CancelIo GetFileSizeEx SetHandleInformation SetLastError GetFullPathNameW GetCurrentProcess WriteFile ExpandEnvironmentStringsW GetFinalPathNameByHandleW GetModuleFileNameW SetEnvironmentVariableW GetSystemInfo SetThreadPriority CreatePipe GetEnvironmentVariableW PeekNamedPipe WaitForSingleObject CreateFileW GetFileAttributesW DuplicateHandle CreateToolhelp32Snapshot CreateEventW MultiByteToWideChar GetLastError ReleaseSRWLockExclusive Process32NextW OutputDebugStringW K32GetDeviceDriverBaseNameW GetCurrentThread AcquireSRWLockExclusive Process32FirstW AttachConsole GetConsoleMode OpenEventW GetCurrentThreadId FindClose Thread32First Thread32Next K32GetModuleFileNameExW GetSystemTimes GetStdHandle FindNextFileW GetCommandLineW FindFirstFileW SetConsoleCtrlHandler VirtualQueryEx LoadLibraryExW GetDriveTypeW GetFirmwareEnvironmentVariableW OpenMutexW SetProcessWorkingSetSize GetSystemTimeAsFileTime QueryFullProcessImageNameW WideCharToMultiByte FlushInstructionCache FreeLibrary GetModuleHandleW LocalFree GetOverlappedResult K32EnumProcesses CreateThread LoadLibraryW K32GetModuleInformation CloseHandle

SetActiveWindow EnumChildWindows ScreenToClient SetWindowTextW CreatePopupMenu RegisterClassExW RedrawWindow ClientToScreen TrackMouseEvent FrameRect AttachThreadInput GetForegroundWindow MoveWindow AdjustWindowRect FlashWindow DestroyMenu SetLayeredWindowAttributes BringWindowToTop LoadIconW GetClassNameW AppendMenuW SetProcessDPIAware PtInRect SetForegroundWindow IsIconic IsWindowVisible ReleaseDC GetCursorPos EnableWindow GetWindowTextW GetWindowThreadProcessId GetDC GetKeyState PostMessageW DestroyWindow SetWindowPos GetWindowRect InvalidateRect UpdateWindow MessageBoxW GetClipboardOwner SetWindowLongPtrW FillRect CreateWindowExW SendMessageW CallNextHookEx GetSystemMetrics GetWindowLongPtrW ShowWindow PostQuitMessage KillTimer DrawTextW IsWindow GetAsyncKeyState GetClientRect SetWindowsHookExW LoadCursorW TranslateMessage CountClipboardFormats RegisterClassW PeekMessageW CloseClipboard IsDialogMessageW SetTimer DispatchMessageW OpenClipboard CallWindowProcW GetMessageW UnhookWindowsHookEx DefWindowProcW BeginPaint EndPaint ChildWindowFromPoint EnumWindows

MoveToEx Ellipse LPtoDP SetMapMode CombineRgn RoundRect FillRgn DPtoLP SelectClipRgn CreateFontW GetStockObject SetTextColor SetBkMode DeleteObject CreateSolidBrush SelectObject BitBlt CreateCompatibleBitmap Arc CreatePen LineTo DeleteDC SetViewportExtEx SetWindowExtEx CreateRoundRectRgn CreateCompatibleDC

GetOpenFileNameW

RegSetValueExW GetSecurityDescriptorDacl RegSetKeySecurity ConvertSidToStringSidW LookupPrivilegeValueW QueryAllTracesW StartTraceW RegCloseKey RegEnumKeyW CryptAcquireContextW RegQueryInfoKeyW QueryServiceStatus ProcessTrace CloseTrace SystemFunction036 CloseServiceHandle OpenSCManagerW AllocateAndInitializeSid SetEntriesInAclW SetNamedSecurityInfoW ControlService CryptCreateHash CryptHashData CryptReleaseContext AbortSystemShutdownW CryptDestroyHash OpenProcessToken FreeSid StartServiceW EnumServicesStatusExW RegOpenKeyExW ControlTraceW QueryServiceConfigW ChangeServiceConfigW RegDeleteValueW OpenServiceW ConvertStringSecurityDescriptorToSecurityDescriptorW CryptGetHashParam OpenTraceW RegEnumValueW RegQueryValueExW EnableTraceEx2 GetTokenInformation

SHCreateItemFromParsingName CommandLineToArgvW ShellExecuteExW SHGetFolderPathW Shell_NotifyIconW

CoSetProxyBlanket CoCreateInstance CoUninitialize CoTaskMemFree CoInitializeEx

VariantInit SysFreeString SysAllocString VariantClear

?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?is@?$ctype@_W@std@@QEBA_NF_W@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ ?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ ?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z ?id@?$ctype@_W@std@@2V0locale@2@A _Mtx_trylock ??1_Facet_base@std@@UEAA@XZ ?_Incref@facet@locale@std@@UEAAXXZ ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ??1facet@locale@std@@MEAA@XZ ?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z ?always_noconv@codecvt_base@std@@QEBA_NXZ ??1codecvt_base@std@@UEAA@XZ ?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z ?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z ??_7?$codecvt@_WDU_Mbstatet@@@std@@6B@ _Cnd_signal ??_7_Facet_base@std@@6B@ _Query_perf_frequency ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Throw_Cpp_error@std@@YAXH@Z ?uncaught_exceptions@std@@YAHXZ ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Xbad_alloc@std@@YAXXZ ?_Id_cnt@id@locale@std@@0HA ?_Xout_of_range@std@@YAXPEBD@Z ?_Xbad_function_call@std@@YAXXZ ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z ?id@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A ?_Xlength_error@std@@YAXPEBD@Z ?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A ??_7codecvt_base@std@@6B@ ??_7facet@locale@std@@6B@ ??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@ _Mtx_lock _Cnd_do_broadcast_at_thread_exit _Cnd_wait _Thrd_id _Query_perf_counter _Thrd_detach _Xtime_get_ticks _Thrd_join _Mtx_unlock _Cnd_broadcast ?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ ?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ ?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ ?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z ?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z ?put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEBUtm@@PEB_W4@Z ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ ?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z ?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z

RtlNtStatusToDosError

GetIfTable2 GetExtendedTcpTable FreeMibTable SetIfEntry

AmsiScanString AmsiUninitialize AmsiInitialize AmsiOpenSession

TdhGetPropertySize TdhGetProperty

InitCommonControlsEx

SymFunctionTableAccess64 SymGetModuleBase64 SymInitializeW SymSetOptions SymFromAddr StackWalk64

ntohl ntohs

EvtSubscribe EvtNext EvtClose EvtFormatMessage

SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyW SetupDiGetClassDevsW SetupDiSetDeviceRegistryPropertyW SetupDiCallClassInstaller SetupDiEnumDeviceInfo

CertFreeCertificateChain CryptMsgGetParam CertFindCertificateInStore CryptQueryObject CertFreeCertificateContext CertGetCertificateChain CryptMsgClose CertGetNameStringW CertCloseStore

__CxxFrameHandler4

_CxxThrowException memset memcmp __std_terminate memmove __current_exception __current_exception_context memcpy wcsrchr wcsstr __C_specific_handler __std_exception_destroy __std_exception_copy

_callnewh _set_new_mode free calloc malloc

__stdio_common_vswprintf_s _fseeki64 __stdio_common_vswscanf fsetpos __stdio_common_vsprintf_s __p__commode _set_fmode fputc fread fflush fclose ungetc fputwc setvbuf fgetpos ungetwc __stdio_common_vswprintf fwrite fgetwc __stdio_common_vsnwprintf_s fgetc _get_stream_buffer_pointers

rand srand

wcscat_s wcscpy_s tolower wcscmp wcslen iswalnum strncmp towupper strlen _wcsicmp towlower wcsncmp strnlen wcsncpy_s _wcsnicmp iswprint

_time64 wcsftime _localtime64_s

_initialize_wide_environment _set_app_type _seh_filter_exe _cexit terminate _exit _register_thread_local_exe_atexit_callback _crt_atexit _register_onexit_function _initialize_onexit_table _configure_wide_argv _initterm abort _beginthreadex _initterm_e _c_exit exit _get_wide_winmain_command_line

_unlock_file _lock_file

_wtoi wcstoul wcstol _wtol

ceilf cos sin log2 __setusermatherr

_configthreadlocale