IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

LdrGetDllHandle

LdrLoadDll

NtQueryInformationProcess

RtlUnwind

GetThreadContext

SetThreadContext

GetProcessId

GetCurrentThread

SetThreadPriority

lstrlenW

LoadLibraryW

GetExitCodeThread

CreateDirectoryW

WTSGetActiveConsoleSessionId

lstrcpyW

ResetEvent

DosDateTimeToFileTime

VirtualProtect

VirtualFree

VirtualAlloc

GetDriveTypeW

GetLogicalDrives

HeapReAlloc

HeapAlloc

HeapFree

HeapDestroy

HeapCreate

MapViewOfFile

UnmapViewOfFile

CreateProcessW

CreateFileMappingW

InterlockedIncrement

InterlockedDecrement

GetSystemTime

lstrcpyA

GetNativeSystemInfo

GetCurrentThreadId

ExpandEnvironmentStringsW

GetHandleInformation

SystemTimeToFileTime

GetTimeZoneInformation

GetLocalTime

CreateMutexW

WriteProcessMemory

ReleaseMutex

lstrcmpA

TryEnterCriticalSection

VirtualAllocEx

GetSystemDefaultUILanguage

GetProcessTimes

lstrcmpW

GlobalMemoryStatusEx

GetUserDefaultUILanguage

GetDiskFreeSpaceExW

GetVolumeInformationW

GlobalLock

GlobalUnlock

GetEnvironmentVariableW

OpenProcess

Thread32First

Thread32Next

CreateToolhelp32Snapshot

CreateRemoteThread

Process32FirstW

Process32NextW

GetTempFileNameW

MoveFileExW

GetTempPathW

RemoveDirectoryW

VirtualQuery

GetCurrentProcess

InterlockedCompareExchange

FlushInstructionCache

lstrcmpiA

FileTimeToDosDateTime

lstrcpynA

FileTimeToLocalFileTime

GetPrivateProfileStringW

GetPrivateProfileIntW

UnregisterWait

RegisterWaitForSingleObject

GetCurrentProcessId

LocalFree

OpenEventW

lstrcatW

GetModuleFileNameW

Sleep

VirtualFreeEx

SetErrorMode

GetCommandLineW

ExitProcess

FindNextFileW

FindClose

FindFirstFileW

IsBadReadPtr

MultiByteToWideChar

WideCharToMultiByte

GetVolumeNameForVolumeMountPointW

GetVersionExW

OpenMutexW

CreateEventW

SetEvent

QueryPerformanceCounter

TlsSetValue

TlsGetValue

lstrcmpiW

LoadLibraryA

FreeLibrary

lstrlenA

TlsFree

TlsAlloc

CreateThread

ResumeThread

DuplicateHandle

DeleteCriticalSection

WaitForMultipleObjects

EnterCriticalSection

GetLastError

LeaveCriticalSection

TerminateThread

InitializeCriticalSection

GetTickCount

WaitForSingleObject

SetFileAttributesW

GetFileInformationByHandle

DeleteFileW

CloseHandle

GetFileTime

GetProcAddress

SetLastError

GetFileSizeEx

FlushFileBuffers

CreateFileW

ReadFile

GetFileAttributesW

WriteFile

SetFileTime

GetModuleHandleW

SetFilePointerEx

SetEndOfFile

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetComputerNameW

SetFilePointer

OutputDebugStringA

TerminateProcess

GetSystemMetrics

MsgWaitForMultipleObjects

PeekMessageW

DispatchMessageW

GetLastInputInfo

TranslateMessage

GetClipboardData

CharToOemW

ToUnicode

GetIconInfo

GetKeyboardState

GetCursorPos

DrawIcon

LoadCursorW

CharLowerW

ExitWindowsEx

CharLowerA

CharUpperW

CryptHashData

CryptCreateHash

CryptReleaseContext

CryptAcquireContextW

CryptGetHashParam

CryptDestroyHash

CryptDestroyKey

CryptImportKey

CryptGetKeyParam

CryptVerifySignatureW

AdjustTokenPrivileges

LookupPrivilegeValueW

CreateProcessAsUserW

GetSidSubAuthorityCount

OpenThreadToken

GetSidSubAuthority

OpenProcessToken

RegSetValueExW

RegEnumKeyExW

RegOpenKeyExW

RegDeleteValueW

RegDeleteKeyW

RegQueryInfoKeyW

RegQueryValueExW

SetSecurityDescriptorSacl

GetSecurityDescriptorSacl

ConvertStringSecurityDescriptorToSecurityDescriptorW

SetSecurityDescriptorDacl

InitializeSecurityDescriptor

GetTokenInformation

RegCloseKey

RegCreateKeyExW

EqualSid

ConvertSidToStringSidW

GetLengthSid

IsWellKnownSid

InitiateSystemShutdownExW

PathUnquoteSpacesW

StrRChrA

StrCmpIW

StrChrW

PathSkipRootW

PathAddExtensionW

StrCmpNIA

PathRenameExtensionW

UrlUnescapeA

PathGetDriveNumberW

StrCmpNA

PathIsURLW

PathIsDirectoryW

StrCmpNW

PathFindExtensionW

StrCmpNIW

wvnsprintfA

ord14

PathRemoveBackslashW

PathAddBackslashW

PathRemoveFileSpecW

PathQuoteSpacesW

wvnsprintfW

PathFindFileNameW

PathRemoveExtensionW

StrChrA

PathMatchSpecW

CommandLineToArgvW

SHGetFolderPathW

ShellExecuteW

GetUserNameExW

DecryptMessage

EncryptMessage

DeleteSecurityContext

CoCreateInstance

CoUninitialize

CoInitializeSecurity

CLSIDFromString

CreateStreamOnHGlobal

CoSetProxyBlanket

CoInitializeEx

CoTaskMemFree

StringFromGUID2

BitBlt

DeleteDC

GetDeviceCaps

CreateDCW

DeleteObject

SelectObject

CreateCompatibleBitmap

CreateCompatibleDC

shutdown

WSACleanup

WSAGetLastError

bind

select

getaddrinfo

connect

gethostbyname

WSACloseEvent

GetAddrInfoW

WSAIoctl

WSAAddressToStringW

WSAEnumNetworkEvents

WSAEventSelect

setsockopt

WSACreateEvent

getsockopt

WSAAddressToStringA

WSAStringToAddressW

recvfrom

getsockname

sendto

FreeAddrInfoW

WSARecv

WSASend

WSAGetOverlappedResult

recv

socket

freeaddrinfo

closesocket

send

listen

accept

getpeername

WSASetLastError

getservbyname

WSAStartup

CryptUnprotectData

PFXExportCertStoreEx

CertDuplicateCertificateContext

CertEnumCertificatesInStore

CertCloseStore

CertOpenSystemStoreW

CertDeleteCertificateFromStore

PFXImportCertStore

InternetOpenA

HttpAddRequestHeadersA

HttpEndRequestA

HttpOpenRequestA

InternetWriteFile

InternetSetOptionA

InternetReadFile

InternetCrackUrlA

InternetConnectA

HttpQueryInfoA

HttpSendRequestExA

InternetQueryOptionA

InternetCloseHandle

VariantInit

VariantClear

SysFreeString

SysAllocString

NetApiBufferFree

NetUserGetInfo

NetUserEnum

GetAdaptersAddresses

GetFileVersionInfoW

VerQueryValueW

GetFileVersionInfoSizeW

_except_handler3

_errno

memcpy

memset

strcmp

strtoul

_purecall

memcmp

memmove

_vsnwprintf

_vsnprintf

memchr

_ultow

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ