sprintf NtMapViewOfSection NtUnmapViewOfSection ZwOpenProcess ZwClose ZwQueryInformationToken ZwOpenProcessToken strcpy RtlNtStatusToDosError NtQuerySystemInformation ZwQueryInformationProcess wcstombs _snprintf _strupr _wcsupr memmove wcscpy memset RtlFreeUnicodeString RtlUpcaseUnicodeString ZwQueryKey RtlAdjustPrivilege mbstowcs RtlImageNtHeader memcpy NtCreateSection _aulldiv _allmul RtlUnwind NtQueryVirtualMemory WideCharToMultiByte GetVersionExA VirtualProtectEx FileTimeToLocalFileTime QueueUserWorkItem FindNextFileA CompareFileTime FindFirstFileA GetFileTime ExpandEnvironmentStringsA QueryPerformanceCounter QueryPerformanceFrequency GetModuleFileNameW FileTimeToSystemTime GetModuleFileNameA HeapFree WaitForSingleObject CloseHandle GetLastError DeleteFileW CreateThread ResetEvent HeapAlloc CreateFileA lstrcatA WriteFile lstrlenA CreateDirectoryA RemoveDirectoryA DeleteFileA lstrcpyA LoadLibraryA SetEvent HeapReAlloc GetSystemTimeAsFileTime InterlockedIncrement InterlockedDecrement HeapDestroy HeapCreate GetModuleHandleA SwitchToThread CreateFileW lstrcatW ExitProcess GetCommandLineW SetWaitableTimer Sleep GetTickCount GetCurrentThreadId CopyFileW DuplicateHandle GetCurrentThread lstrlenW CreateEventA GetWindowsDirectoryA InterlockedExchange CreateDirectoryW GetTempPathA SuspendThread ResumeThread OpenProcess TerminateProcess lstrcmpiW lstrcpyW WaitForMultipleObjects SetLastError lstrcmpiA CreateMutexA lstrcmpA OpenWaitableTimerA OpenMutexA ReleaseMutex MapViewOfFile UnmapViewOfFile CreateWaitableTimerA InitializeCriticalSection EnterCriticalSection LeaveCriticalSection UnregisterWait TlsAlloc RegisterWaitForSingleObject TlsGetValue TlsSetValue LoadLibraryExW VirtualAlloc VirtualProtect OpenEventA GetProcAddress GetDriveTypeW OpenFileMappingA GetLogicalDriveStringsW GetFileAttributesA GetExitCodeProcess GetFileAttributesW CreateFileMappingA CreateProcessA GetFileSize lstrcpynA GlobalLock GlobalUnlock LocalFree Thread32Next CreateToolhelp32Snapshot QueueUserAPC Thread32First OpenThread CallNamedPipeA WaitNamedPipeA ReadFile CancelIo ConnectNamedPipe GetOverlappedResult DisconnectNamedPipe GetSystemTime FlushFileBuffers CreateNamedPipeA RemoveVectoredExceptionHandler ExitThread AddVectoredExceptionHandler SleepEx LocalAlloc FreeLibrary RaiseException GetLocalTime VirtualFree DeleteCriticalSection FindNextFileW RemoveDirectoryW FindClose GetTempFileNameA SetEndOfFile ExpandEnvironmentStringsW SetFilePointer FindFirstFileW GetCurrentProcessId GetVersion GetComputerNameW