PAGetGlobalDataObject PAShowRegisterDlg

IsSupportMakePE ClsWinrePath GetPOLoigcObject

ord12563 ord13568 ord12720 ord13569 ord6634 ord2006 ord4324 ord13199 ord3742 ord13745 ord357 ord12746 ord3776 ord1440 ord973 ord7182 ord6724 ord7394 ord7151 ord7233 ord446 ord6848 ord4510 ord4913 ord6287 ord8468 ord1667 ord4726 ord7551 ord6247 ord266 ord2475 ord2212 ord2187 ord6313 ord265 ord8058 ord12600 ord8451 ord4511 ord8167 ord8084 ord12544 ord8023 ord5183 ord2439 ord12222 ord12223 ord14210 ord7650 ord14216 ord9089 ord4011 ord3949 ord12625 ord7668 ord2011 ord11664 ord11665 ord14088 ord12212 ord7719 ord14288 ord6121 ord14290 ord6123 ord14289 ord6122 ord3731 ord5706 ord11921 ord11929 ord4445 ord7920 ord10124 ord11933 ord11901 ord12606 ord5555 ord9941 ord6614 ord1670 ord13864 ord13545 ord7054 ord13109 ord940 ord2178 ord8452 ord2903 ord6717 ord7716 ord1450 ord983 ord7393 ord10070 ord14027 ord4947 ord8731 ord10704 ord11855 ord8926 ord4335 ord8449 ord1489 ord4721 ord3713 ord12967 ord5237 ord9056 ord1369 ord878 ord13767 ord7235 ord6260 ord8901 ord5750 ord11854 ord8830 ord2697 ord13397 ord6000 ord3071 ord3308 ord3951 ord10163 ord11085 ord10703 ord8730 ord11813 ord3825 ord286 ord285 ord5709 ord2921 ord6098 ord5212 ord2473 ord1086 ord438 ord3965 ord894 ord3599 ord1091 ord6250 ord6320 ord2370 ord4656 ord2270 ord1641 ord1089 ord1424 ord990 ord1454 ord6588 ord8900 ord9946 ord7922 ord5227 ord7450 ord7461 ord7460 ord5916 ord5062 ord5229 ord5083 ord5582 ord5339 ord9041 ord5552 ord5363 ord5080 ord11850 ord3172 ord3278 ord3279 ord3812 ord11806 ord2629 ord5723 ord13354 ord11406 ord6631 ord14217 ord7651 ord14211 ord2967 ord1491 ord280 ord4352 ord9384 ord4360 ord4828 ord4767 ord4752 ord3266 ord3144 ord6555 ord1383 ord4078 ord3056 ord8817 ord6251 ord1053 ord4814 ord4859 ord4782 ord4837 ord4853 ord4794 ord4800 ord4806 ord4788 ord4843 ord4776 ord1755 ord1734 ord1748 ord1722 ord1700 ord11940 ord11944 ord1504 ord4181 ord8507 ord13513 ord3173 ord8947 ord10691 ord6729 ord11902 ord8656 ord14209 ord11625 ord3718 ord11771 ord8826 ord11415 ord11414 ord5451 ord9979 ord9975 ord9977 ord9978 ord9976 ord14360 ord2698 ord7913 ord3209 ord3212 ord13401 ord6002 ord3164 ord4095 ord450 ord6850 ord1501 ord5674 ord1503 ord296 ord1033 ord1665 ord1631 ord1499 ord6847 ord442 ord1088 ord10162 ord4218 ord13186 ord8510 ord7232 ord5340 ord3210 ord8694 ord7901 ord13809 ord5491 ord13860 ord7606 ord14178 ord4276 ord9178 ord9966 ord12525 ord14007 ord6019 ord5286 ord5361 ord14021 ord4505 ord2683 ord1953 ord12229 ord7453 ord7444 ord5520 ord7826 ord3850 ord5220 ord4343 ord9068 ord1039 ord323 ord7874 ord2686 ord13761 ord14220 ord9159 ord11081 ord4949 ord4948 ord12241 ord316 ord300 ord1034 ord1508 ord1511 ord4512 ord4513 ord8453 ord8454 ord6303 ord1111 ord12706 ord916 ord1390 ord962 ord1428 ord13596 ord13597 ord4946 ord12240 ord2344 ord5347 ord4722 ord12931 ord12932 ord2786 ord12443 ord8043 ord3307 ord3756 ord2372 ord2327 ord1040 ord324 ord1492

FindFirstFileW OutputDebugStringA GetPrivateProfileIntW GetPrivateProfileStringW IsBadWritePtr InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection CreateThread FlushFileBuffers FreeResource lstrcpyW FindResourceW LoadResource SizeofResource GetCurrentProcess LoadLibraryW SetUnhandledExceptionFilter CreateSemaphoreExW CreateMutexExW GetCurrentProcessId OpenSemaphoreW SetLastError OutputDebugStringW IsDebuggerPresent DebugBreak GetModuleHandleExW HeapFree HeapAlloc GetProcessHeap GetCurrentThreadId WaitForSingleObjectEx ReleaseSemaphore ReleaseMutex GetSystemPowerStatus TerminateThread CreateDirectoryW FormatMessageW WritePrivateProfileStringW SetFilePointer DeviceIoControl CreateFileW GetVolumeInformationW CopyFileW GetModuleFileNameW GetExitCodeThread GetExitCodeProcess WideCharToMultiByte SetThreadExecutionState GetFileAttributesW GlobalLock GlobalUnlock GetCommandLineW CloseHandle GetProcAddress GetModuleHandleW GetVersionExW GetSystemWindowsDirectoryA GetModuleFileNameA CopyFileA CreateProcessA WaitForSingleObject InitializeCriticalSection DeleteCriticalSection CreatePipe GetStartupInfoW GetWindowsDirectoryW CreateProcessW Sleep ReadFile WriteFile MultiByteToWideChar TerminateProcess GetTickCount64 GetDiskFreeSpaceExW GetLastError GetLogicalDriveStringsW GetDriveTypeW OpenEventW FindNextFileW GetSystemDirectoryW GetVersion CreateFileA WritePrivateProfileStringA GetPrivateProfileStringA FreeLibrary WinExec DeleteVolumeMountPointW GetVolumeNameForVolumeMountPointW GetSystemWindowsDirectoryW SetVolumeMountPointW CreateDirectoryA GlobalMemoryStatusEx GetLocalTime SetEvent OpenFileMappingW MapViewOfFile UnmapViewOfFile SetHandleInformation LoadLibraryA GetTickCount IsBadReadPtr DeleteFileW InitializeCriticalSectionAndSpinCount QueryDosDeviceW SetFileAttributesW MoveFileW RemoveDirectoryW LocalFree DefineDosDeviceW SetFilePointerEx AllocConsole GetStdHandle WriteConsoleW GetFileSizeEx GetSystemInfo GetVersionExA GetSystemWow64DirectoryW FindClose GetDiskFreeSpaceW GetLogicalDrives SetVolumeLabelW SystemTimeToFileTime CreateEventW VirtualAlloc VirtualFree LocalAlloc RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter IsProcessorFeaturePresent ResetEvent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead

TrackMouseEvent DefWindowProcW RegisterClassW CreateWindowExW ShowWindow MoveWindow CallNextHookEx IsZoomed GetDlgCtrlID IsWindowEnabled ExitWindowsEx SetWindowRgn ClientToScreen OffsetRect GetWindowLongPtrW GetCursorPos SetScrollInfo GetScrollInfo SystemParametersInfoW ScreenToClient DrawTextW GetIconInfo SetDlgItemTextW SetPropW UnhookWindowsHookEx SetWindowsHookExW SetCapture GetCapture ReleaseCapture GetSysColor IsWindow DestroyCursor FindWindowW CopyIcon GetKeyState DestroyIcon DrawIconEx LoadImageW MessageBoxW SetCursor LoadCursorW PostMessageW PtInRect SetLayeredWindowAttributes GetWindowLongW SetWindowLongW IsWindowVisible SetParent KillTimer SetTimer GetWindowRect InflateRect LoadBitmapW SetRectEmpty CopyRect InvalidateRect LoadIconW DispatchMessageW TranslateMessage PeekMessageW UpdateWindow ReleaseDC GetDC FillRect GetClientRect EnableWindow GetPropW SetWindowLongPtrW RemovePropW GetDlgItem SendMessageW GetParent GetWindowTextW EndDialog CallWindowProcW GetWindowDC RedrawWindow

CreatePatternBrush SetTextJustification SetBkColor GetStockObject LineTo MoveToEx SetBkMode CreateRectRgn ExcludeClipRect SetTextColor DeleteObject SelectObject CreateFontIndirectW GetObjectW GetCurrentObject GetTextColor ExtTextOutW CreatePen BitBlt CreateCompatibleBitmap DeleteDC GetTextExtentPoint32W StartDocW CreateCompatibleDC GetBkColor CreateFontW CreateSolidBrush GetDeviceCaps EndDoc EndPage TextOutW StartPage GetTextMetricsW

GetOpenFileNameW

ConvertStringSecurityDescriptorToSecurityDescriptorW RegQueryInfoKeyW RegEnumKeyExW RegEnumValueW RegCreateKeyExW RegDeleteKeyW RegSetValueExW RegGetKeySecurity ConvertSecurityDescriptorToStringSecurityDescriptorW RegSetKeySecurity RegDeleteValueW ConvertStringSidToSidW SetSecurityInfo RegFlushKey SetEntriesInAclW BuildExplicitAccessWithNameW RegSaveKeyW GetNamedSecurityInfoW RegUnLoadKeyW RegLoadKeyW CredWriteW CredReadW CredDeleteW RegQueryValueExW OpenServiceW RegGetValueW RegOpenKeyExW OpenProcessToken OpenSCManagerW RegQueryValueExA CloseServiceHandle RegOpenKeyA RegCloseKey AdjustTokenPrivileges LookupPrivilegeValueW RegQueryValueW RegOpenKeyW SetNamedSecurityInfoW

ShellExecuteA CommandLineToArgvW ShellExecuteW SHGetFolderPathW SHGetSpecialFolderPathW SHAppBarMessage

InitCommonControlsEx _TrackMouseEvent

PathFileExistsW PathAppendW StrStrIW

CoCreateGuid CreateStreamOnHGlobal CoSetProxyBlanket CoInitializeEx CoInitializeSecurity CoCreateInstance

VariantInit SysStringLen SysFreeString SysAllocString VariantClear

GdipDeletePath GdiplusShutdown GdipCreatePen1 GdipDeletePen GdipCreateFromHDC GdipDeleteGraphics GdipLoadImageFromStream GdipDrawPath GdipFillPath GdipSetSmoothingMode GdipCreateSolidFill GdipCloneBrush GdipDeleteBrush GdipClosePathFigure GdipAddPathArcI GdipAddPathLineI GdiplusStartup GdipCreatePath GdipGetImageWidth GdipGetImageHeight GdipDrawImageRectRect GdipDrawImageRect GdipDisposeImage GdipCloneImage GdipAlloc GdipFree

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Throw_C_error@std@@YAXH@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A _Mtx_unlock _Mtx_init_in_situ ?uncaught_exception@std@@YA_NXZ _Mtx_destroy_in_situ _Mtx_lock

EVP_CipherInit_ex EVP_aes_128_ecb EVP_CipherUpdate EVP_CipherFinal_ex EVP_CIPHER_CTX_free EVP_CIPHER_CTX_new

SetupDiGetClassDevsW SetupDiEnumDeviceInterfaces SetupDiDestroyDeviceInfoList SetupDiGetDeviceInterfaceDetailW

UuidCreate

__CxxFrameHandler4

memcpy memmove memset strchr _CxxThrowException wcsstr __current_exception __current_exception_context wcschr __C_specific_handler __std_exception_destroy __std_exception_copy __std_terminate strstr _purecall wcsrchr memcmp strrchr

_c_exit _cexit _register_thread_local_exe_atexit_callback _invalid_parameter_noinfo_noreturn _exit _initterm_e _initterm _get_wide_winmain_command_line _initialize_wide_environment _configure_wide_argv _set_app_type _seh_filter_exe exit _beginthreadex _register_onexit_function _invalid_parameter_noinfo _wassert _errno terminate _initialize_onexit_table _crt_atexit

_wtoi _wtoi64 mbstowcs atoi wcstombs wcstoul

_wfopen __p__commode _set_fmode fread fclose __stdio_common_vfprintf __acrt_iob_func __stdio_common_vswprintf_s __stdio_common_vswprintf fwrite __stdio_common_vsnprintf_s __stdio_common_vsprintf_s __stdio_common_vsprintf

isdigit isspace isalnum _strlwr wcsncpy _wcsnicmp strcmp _wcsicmp wcsncpy_s _wcslwr wcscpy_s wcsncmp strncmp strncpy wcscat_s strcat_s strcpy_s

realloc calloc free malloc _set_new_mode

_localtime64 _mktime64 _time64 _localtime64_s

__setusermatherr pow

srand rand qsort

_configthreadlocale

ZwOpenFile ZwSetInformationFile RtlNtStatusToDosError ZwUnloadKey NtQueryInformationFile NtQuerySystemTime RtlAnsiStringToUnicodeString NtReadFile NtWriteFile NtClose NtCreateFile NtDeviceIoControlFile NtFsControlFile RtlTimeToSecondsSince1970 RtlInitUnicodeString NtLoadDriver ZwQueryVolumeInformationFile ZwQueryDirectoryObject ZwOpenDirectoryObject ZwQuerySymbolicLinkObject ZwOpenSymbolicLinkObject ZwClose ZwCreateFile NtUnloadDriver