IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

NtTerminateProcess

LdrGetDllHandle

NtQueryInformationProcess

RtlUnwind

LdrLoadDll

lstrlenA

TryEnterCriticalSection

SetEvent

Sleep

CreateEventW

ResetEvent

GetExitCodeThread

SetThreadPriority

GetSystemTime

GetCommandLineW

GetNativeSystemInfo

GetDriveTypeW

GetSystemDefaultUILanguage

GetLogicalDrives

GetProcessTimes

GetModuleFileNameW

lstrcmpW

GlobalMemoryStatusEx

GetUserDefaultUILanguage

GetDiskFreeSpaceExW

GetVolumeInformationW

TlsGetValue

TlsSetValue

SetEndOfFile

SetFilePointerEx

SetFileTime

WriteFile

GetFileAttributesW

ReadFile

FlushFileBuffers

GetFileSizeEx

GetFileTime

DeleteFileW

GetFileInformationByHandle

LocalFree

CreateDirectoryW

ExpandEnvironmentStringsW

TlsAlloc

GetPrivateProfileStringW

GetPrivateProfileIntW

TlsFree

FindFirstFileW

FindClose

RemoveDirectoryW

GetThreadPriority

QueryPerformanceCounter

MapViewOfFile

UnmapViewOfFile

CreateFileMappingW

MoveFileExW

WideCharToMultiByte

MultiByteToWideChar

GetVersionExW

ExitProcess

GetSystemTimeAsFileTime

WTSGetActiveConsoleSessionId

GetHandleInformation

HeapAlloc

HeapFree

HeapDestroy

HeapCreate

HeapReAlloc

GetProcessId

UnregisterWait

RegisterWaitForSingleObject

SystemTimeToFileTime

GetTimeZoneInformation

GetLocalTime

InterlockedIncrement

InterlockedDecrement

IsBadReadPtr

VirtualAllocEx

WriteProcessMemory

CreateMutexW

OpenMutexW

ReleaseMutex

lstrcatW

GetComputerNameW

GetVolumeNameForVolumeMountPointW

SetErrorMode

OpenEventW

GetCurrentProcessId

GlobalLock

GlobalUnlock

FlushInstructionCache

GetCurrentThreadId

InterlockedCompareExchange

GetCurrentProcess

VirtualQuery

SetThreadContext

GetThreadContext

VirtualProtect

VirtualAlloc

VirtualFree

ResumeThread

DuplicateHandle

WaitForMultipleObjects

TerminateThread

GetTickCount

EnterCriticalSection

LeaveCriticalSection

lstrcmpiW

FindNextFileW

LoadLibraryA

Thread32Next

Thread32First

GetCurrentThread

CreateProcessW

GetEnvironmentVariableW

CloseHandle

CreateToolhelp32Snapshot

Process32NextW

Process32FirstW

VirtualFreeEx

OpenProcess

CreateRemoteThread

lstrcmpiA

lstrcpyA

lstrcpyW

SetFileAttributesW

FileTimeToLocalFileTime

GetProcAddress

GetTempPathW

lstrlenW

CreateFileW

LoadLibraryW

FreeLibrary

lstrcpynA

lstrcmpA

DosDateTimeToFileTime

GetTempFileNameW

FileTimeToDosDateTime

DeleteCriticalSection

GetLastError

InitializeCriticalSection

GetModuleHandleW

SetLastError

CreateThread

WaitForSingleObject

TerminateProcess

UnhandledExceptionFilter

SetUnhandledExceptionFilter

SetFilePointer

OutputDebugStringA

ExitWindowsEx

MsgWaitForMultipleObjects

PeekMessageW

DispatchMessageW

CharLowerW

CharLowerA

ToUnicode

GetKeyboardState

GetCursorPos

CharToOemW

TranslateMessage

PostQuitMessage

GetClipboardData

GetIconInfo

DrawIcon

LoadCursorW

GetSystemMetrics

GetLastInputInfo

CharUpperW

IsWellKnownSid

ConvertSidToStringSidW

InitiateSystemShutdownExW

RegSetValueExW

RegEnumKeyExW

RegFlushKey

RegOpenKeyExW

RegDeleteValueW

RegDeleteKeyW

RegQueryInfoKeyW

RegQueryValueExW

CryptHashData

CryptCreateHash

CryptReleaseContext

CryptAcquireContextW

CryptGetHashParam

EqualSid

RegCloseKey

RegCreateKeyExW

SetSecurityDescriptorSacl

GetSecurityDescriptorSacl

ConvertStringSecurityDescriptorToSecurityDescriptorW

SetSecurityDescriptorDacl

InitializeSecurityDescriptor

CryptDestroyHash

CryptDestroyKey

CryptImportKey

CryptGetKeyParam

CryptVerifySignatureW

AdjustTokenPrivileges

LookupPrivilegeValueW

CreateProcessAsUserW

GetTokenInformation

GetSidSubAuthorityCount

OpenThreadToken

GetSidSubAuthority

OpenProcessToken

GetLengthSid

PathGetDriveNumberW

ord14

PathIsDirectoryW

PathSkipRootW

PathUnquoteSpacesW

wvnsprintfW

wvnsprintfA

PathRenameExtensionW

StrChrA

PathMatchSpecW

PathIsURLW

UrlUnescapeA

PathAddBackslashW

StrStrIW

PathRemoveBackslashW

PathQuoteSpacesW

StrCmpNIA

StrCmpNW

StrCmpNIW

StrCmpW

PathFindFileNameW

PathRemoveExtensionW

StrChrW

StrCmpIW

StrRChrA

StrCmpNA

PathFindExtensionW

PathRemoveFileSpecW

CommandLineToArgvW

SHGetFolderPathW

ShellExecuteW

DecryptMessage

DeleteSecurityContext

GetUserNameExW

EncryptMessage

CoInitializeEx

CoSetProxyBlanket

CoInitializeSecurity

CoUninitialize

CoCreateInstance

CLSIDFromString

StringFromGUID2

CreateStreamOnHGlobal

CoTaskMemFree

BitBlt

DeleteDC

GetDeviceCaps

CreateDCW

DeleteObject

SelectObject

CreateCompatibleBitmap

CreateCompatibleDC

FreeAddrInfoW

getaddrinfo

accept

WSASend

recv

listen

bind

WSACleanup

getservbyname

WSACloseEvent

shutdown

WSAIoctl

WSAAddressToStringW

WSAEnumNetworkEvents

WSAEventSelect

setsockopt

WSACreateEvent

getsockopt

WSAAddressToStringA

WSAStringToAddressW

getpeername

recvfrom

getsockname

sendto

connect

WSAStartup

select

WSARecv

WSAGetOverlappedResult

freeaddrinfo

closesocket

GetAddrInfoW

gethostbyname

send

WSASetLastError

WSAGetLastError

socket

PFXImportCertStore

CryptUnprotectData

PFXExportCertStoreEx

CertDuplicateCertificateContext

CertEnumCertificatesInStore

CertCloseStore

CertOpenSystemStoreW

CertDeleteCertificateFromStore

InternetQueryOptionA

InternetCloseHandle

InternetOpenA

HttpAddRequestHeadersA

HttpEndRequestA

HttpOpenRequestA

InternetWriteFile

InternetSetOptionA

InternetReadFile

InternetCrackUrlA

InternetConnectA

HttpQueryInfoA

HttpSendRequestExA

SysFreeString

VariantClear

SysAllocString

VariantInit

NetApiBufferFree

NetUserEnum

NetUserGetInfo

GetAdaptersAddresses

GetFileVersionInfoW

VerQueryValueW

GetFileVersionInfoSizeW

_except_handler3

_errno

memcpy

memcmp

_purecall

memset

memchr

memmove

strcmp

_ultow

_vsnwprintf

_vsnprintf

strtoul

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ