sprintf NtMapViewOfSection NtUnmapViewOfSection ZwOpenProcess ZwClose ZwQueryInformationToken ZwOpenProcessToken strcpy RtlNtStatusToDosError NtQuerySystemInformation ZwQueryInformationProcess wcstombs _snprintf _strupr _wcsupr memmove wcscpy memset RtlFreeUnicodeString RtlUpcaseUnicodeString ZwQueryKey RtlAdjustPrivilege mbstowcs RtlImageNtHeader memcpy NtCreateSection _aulldiv _allmul RtlUnwind NtQueryVirtualMemory

GetDriveTypeW GetVersionExA VirtualProtectEx FileTimeToLocalFileTime QueueUserWorkItem CompareFileTime FindFirstFileA GetFileTime FindNextFileA ExpandEnvironmentStringsA QueryPerformanceCounter QueryPerformanceFrequency GetModuleFileNameW FileTimeToSystemTime GetModuleFileNameA HeapFree WaitForSingleObject CloseHandle GetLastError DeleteFileW CreateThread ResetEvent HeapAlloc CreateFileA lstrcatA WriteFile lstrlenA CreateDirectoryA RemoveDirectoryA DeleteFileA lstrcpyA LoadLibraryA SetEvent HeapReAlloc GetSystemTimeAsFileTime InterlockedIncrement InterlockedDecrement HeapDestroy HeapCreate TerminateProcess lstrcmpiW lstrcpyW GetModuleHandleA SwitchToThread CreateFileW lstrcatW ExitProcess GetCommandLineW SetWaitableTimer Sleep GetTickCount CopyFileW GetCurrentThreadId DuplicateHandle GetCurrentThread lstrlenW CreateEventA GetWindowsDirectoryA InterlockedExchange CreateDirectoryW GetTempPathA SuspendThread OpenProcess ResumeThread WaitForMultipleObjects SetLastError lstrcmpiA CreateMutexA lstrcmpA OpenWaitableTimerA OpenMutexA ReleaseMutex MapViewOfFile UnmapViewOfFile CreateWaitableTimerA InitializeCriticalSection EnterCriticalSection LeaveCriticalSection UnregisterWait TlsAlloc RegisterWaitForSingleObject TlsGetValue TlsSetValue LoadLibraryExW VirtualAlloc VirtualProtect GetProcAddress CreateProcessA GetFileSize WideCharToMultiByte OpenFileMappingA GetLogicalDriveStringsW GetFileAttributesA GetExitCodeProcess GetFileAttributesW CreateFileMappingA lstrcpynA GlobalLock GlobalUnlock LocalFree Thread32Next CreateToolhelp32Snapshot QueueUserAPC Thread32First OpenThread CallNamedPipeA WaitNamedPipeA ReadFile CancelIo ConnectNamedPipe GetOverlappedResult DisconnectNamedPipe GetSystemTime FlushFileBuffers CreateNamedPipeA SleepEx RemoveVectoredExceptionHandler ExitThread AddVectoredExceptionHandler OpenEventA LocalAlloc FreeLibrary RaiseException GetLocalTime VirtualFree DeleteCriticalSection FindNextFileW RemoveDirectoryW FindClose GetTempFileNameA SetEndOfFile ExpandEnvironmentStringsW SetFilePointer FindFirstFileW GetCurrentProcessId GetVersion GetComputerNameW