ResumeThread VirtualQueryEx CreateFileMappingW MapViewOfFile VirtualProtect GetFileAttributesW SetErrorMode OpenFileMappingW SetFilePointer SetEndOfFile GlobalLock GetLocalTime GlobalUnlock QueryDosDeviceW GetDriveTypeW GetVolumeInformationW GetDiskFreeSpaceExW FindFirstFileW FindClose FindNextFileW FlushFileBuffers SetFileTime GetFileTime CreateDirectoryW ExpandEnvironmentStringsW GetProcessHeap HeapFree lstrcpyW QueryPerformanceFrequency QueryPerformanceCounter CreateNamedPipeW ConnectNamedPipe GetOverlappedResult GetConsoleCP FreeConsole GetConsoleOutputCP GetConsoleWindow AllocConsole SetConsoleCtrlHandler GetModuleHandleA GetStdHandle WriteConsoleInputW GenerateConsoleCtrlEvent GetConsoleMode GetConsoleDisplayMode GetConsoleCursorInfo GetConsoleScreenBufferInfo ReadConsoleOutputW GetSystemDirectoryW GetWindowsDirectoryW GetModuleFileNameW GetModuleHandleW RemoveDirectoryW GetComputerNameW ProcessIdToSessionId lstrcpynA ResetEvent VirtualProtectEx CreateThread lstrcmpA ExitThread LocalAlloc lstrcatW OutputDebugStringA LocalFree LocalLock LocalUnlock PostQueuedCompletionStatus LocalReAlloc CreateIoCompletionPort TerminateThread GetCurrentThread GetQueuedCompletionStatus QueueUserAPC GlobalMemoryStatus DeleteFileW WriteProcessMemory ReadProcessMemory OpenProcess GetVersionExW GetCurrentThreadId SetUnhandledExceptionFilter DeleteCriticalSection InitializeCriticalSection MultiByteToWideChar WideCharToMultiByte lstrlenA lstrlenW WriteFile SetFileAttributesW ReadFile GetFileSize CreateFileW lstrcpyA lstrcmpW lstrcpynW WaitForMultipleObjects GetTickCount CreateEventW CreateProcessW GetCurrentProcessId lstrcmpiW ExitProcess GetCurrentProcess TerminateProcess GetLastError CreateMutexW GetCommandLineW VirtualFreeEx VirtualAllocEx GetExitCodeThread VirtualFree VirtualAlloc LeaveCriticalSection EnterCriticalSection GetSystemDefaultLCID GetSystemInfo DisconnectNamedPipe GetSystemTime CloseHandle WaitForSingleObject SetEvent GetProcAddress LoadLibraryA SetConsoleScreenBufferSize Sleep

GetAsyncKeyState GetWindowThreadProcessId GetClassNameW GetWindowTextW GetForegroundWindow CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW CloseDesktop CreateDesktopW GetKeyState DispatchMessageW TranslateMessage GetMessageW SetTimer ExitWindowsEx GetIconInfo DestroyIcon SetWindowLongW CloseClipboard GetClipboardData OpenClipboard GetPriorityClipboardFormat DefWindowProcW LoadCursorW WindowFromPoint SetCapture SetCursorPos mouse_event keybd_event OpenWindowStationW GetProcessWindowStation SetProcessWindowStation OpenInputDesktop GetThreadDesktop SetThreadDesktop CloseWindowStation PostMessageA ShowWindow KillTimer EndPaint BeginPaint PostQuitMessage ChangeClipboardChain SetClipboardViewer DefWindowProcA GetSystemMetrics wsprintfA MessageBoxW wsprintfW CreateWindowExW

CreateDIBSection CreateCompatibleDC CreateCompatibleBitmap GdiFlush BitBlt GetDeviceCaps DeleteDC DeleteObject GetDIBits CreateDCW SelectObject

QueryServiceStatusEx StartServiceW ChangeServiceConfig2W CreateServiceW OpenServiceW OpenSCManagerW DeleteService InitiateSystemShutdownA DuplicateTokenEx CreateProcessAsUserW RegOpenKeyExW RegCloseKey RegCreateKeyExW RegSetValueExW RegEnumKeyExW RegQueryValueExW EnumServicesStatusExW QueryServiceConfigW QueryServiceConfig2W ControlService ChangeServiceConfigW OpenProcessToken GetTokenInformation AllocateAndInitializeSid EqualSid FreeSid RegDeleteValueW LookupPrivilegeValueW AdjustTokenPrivileges GetUserNameW LookupAccountSidW GetLengthSid SetTokenInformation RegEnumValueA ImpersonateLoggedOnUser RegOpenCurrentUser RegOverridePredefKey RevertToSelf RegEnumValueW CloseServiceHandle

ExtractIconExW CommandLineToArgvW SHFileOperationW

CoSetProxyBlanket CoCreateInstance CoInitializeSecurity CoInitializeEx CoUninitialize

VariantClear

ord136 ord43 ord13 ord127 ord18 ord61 ord111 ord9 ord141 ord75 ord24 ord171 ord31 ord157 ord2

WTSEnumerateProcessesW

setsockopt closesocket WSARecvFrom WSASocketA getsockname bind WSASendTo WSACleanup WSAGetLastError WSAStartup WSAIoctl