GetModuleHandleA FindFirstFileW GetCurrentThread FileTimeToSystemTime SetThreadPriority FindClose FindNextFileW GetWindowsDirectoryW GetCommandLineW CreateDirectoryW LoadLibraryW lstrcmpiA WTSGetActiveConsoleSessionId MoveFileExW SetFilePointer SetEndOfFile WriteFile ExpandEnvironmentStringsW GetPrivateProfileStringW FlushFileBuffers GetPrivateProfileIntW GetUserDefaultUILanguage CreateMutexW SetErrorMode GetComputerNameW TerminateThread WriteProcessMemory CreateThread SetHandleInformation GetExitCodeProcess ReadFile GetExitCodeThread CreatePipe GetEnvironmentVariableW FileTimeToDosDateTime GetTempFileNameW VirtualFree GetTickCount SystemTimeToFileTime SetFilePointerEx GetLogicalDriveStringsW HeapFree GetProcessHeap SetFileTime VirtualQueryEx Thread32First WideCharToMultiByte ReadProcessMemory HeapDestroy HeapCreate lstrcpynW Thread32Next GetTimeZoneInformation MultiByteToWideChar lstrlenW GetTempPathW GetFileSizeEx OpenMutexW VirtualProtectEx VirtualAllocEx RemoveDirectoryW QueryDosDeviceW GetFileTime ReleaseMutex FileTimeToLocalFileTime GetVolumeNameForVolumeMountPointW GetFileInformationByHandle GetSystemTime InterlockedExchange GetLocalTime ResetEvent SetLastError GetLastError CreateEventA SetFileAttributesW GetLogicalDrives GetDriveTypeW lstrcmpiW LoadLibraryA FreeLibrary GetFileAttributesW GlobalUnlock GlobalLock GetCurrentProcessId HeapReAlloc OpenEventW SetEvent LocalFree GetVersionExW GetNativeSystemInfo WaitForMultipleObjects CreateEventW Sleep ResumeThread DeleteFileW DuplicateHandle CreateToolhelp32Snapshot VirtualProtect Process32NextW CreateFileMappingA Process32FirstW GetProcAddress CreateFileW TerminateProcess CopyFileW OpenProcess CreateRemoteThread IsBadReadPtr GetModuleHandleW GetCurrentProcess CreateProcessW WaitForSingleObject UnmapViewOfFile MapViewOfFile GetFileSize CloseHandle GetFileAttributesExW GetProcessId EnterCriticalSection VirtualAlloc LeaveCriticalSection VirtualFreeEx InitializeCriticalSection SetThreadContext GetThreadContext ExitProcess ExitThread GetModuleFileNameW HeapAlloc

CharUpperW CharLowerA GetDC CharLowerW MsgWaitForMultipleObjects LoadImageW ToUnicode PeekMessageW DispatchMessageW GetForegroundWindow CharLowerBuffA GetKeyboardState TranslateMessage GetMessageW GetCursorPos GetIconInfo DrawIcon MessageBoxA CharToOemW ExitWindowsEx GetClipboardData

InitiateSystemShutdownExW CryptCreateHash AllocateAndInitializeSid LookupPrivilegeValueW SetNamedSecurityInfoW SetSecurityDescriptorDacl InitializeSecurityDescriptor CryptReleaseContext RegCreateKeyExW GetTokenInformation GetSidSubAuthorityCount OpenThreadToken CryptAcquireContextW GetSidSubAuthority OpenProcessToken CryptGetHashParam IsWellKnownSid RegCloseKey RegEnumValueW RegDeleteValueW RegQueryInfoKeyW RegCreateKeyW EqualSid RegQueryValueExW RegQueryValueExA ConvertSidToStringSidW GetLengthSid CreateProcessAsUserW CreateProcessAsUserA SetSecurityInfo FreeSid RegOpenKeyExW GetSecurityDescriptorSacl CheckTokenMembership SetSecurityDescriptorSacl CryptDestroyHash AdjustTokenPrivileges RegSetValueExW GetSecurityDescriptorDacl CryptHashData RegEnumKeyExW RegEnumKeyW ConvertStringSecurityDescriptorToSecurityDescriptorW

PathUnquoteSpacesW PathRemoveBackslashW PathQuoteSpacesW PathRenameExtensionW StrCmpNIA UrlUnescapeA wvnsprintfW PathIsDirectoryW PathAddBackslashW SHDeleteValueW PathSkipRootW SHDeleteKeyW PathCombineW PathAddExtensionW PathMatchSpecW wvnsprintfA StrStrIA StrStrIW StrCmpNIW PathRemoveFileSpecW PathFindFileNameW PathIsURLW

CommandLineToArgvW ShellExecuteW SHGetFolderPathW ShellExecuteExW

GetUserNameExW

StringFromGUID2 CoInitializeEx CoInitialize CoGetObject CLSIDFromString CoUninitialize CoSetProxyBlanket CoCreateInstance CoInitializeSecurity

GetDeviceCaps

WSAGetOverlappedResult WSARecv WSAEventSelect WSAEnumNetworkEvents WSAConnect WSAGetLastError inet_addr gethostbyname getpeername recvfrom WSAIoctl connect WSAAddressToStringW WSAStartup getaddrinfo WSASocketA shutdown setsockopt sendto recv bind socket freeaddrinfo WSASetLastError send listen WSAWaitForMultipleEvents getsockname accept WSACloseEvent WSAResetEvent closesocket select WSACreateEvent WSASend

PFXImportCertStore CertDeleteCertificateFromStore CryptUnprotectData CertCloseStore CertEnumCertificatesInStore CertDuplicateCertificateContext PFXExportCertStoreEx CertOpenSystemStoreW

HttpQueryInfoA InternetSetStatusCallbackA InternetOpenA InternetSetOptionA InternetCrackUrlW InternetCrackUrlA InternetQueryOptionW InternetConnectA InternetQueryOptionA InternetCloseHandle HttpEndRequestW HttpSendRequestA HttpAddRequestHeadersA HttpEndRequestA InternetSetFilePointer InternetGetCookieA HttpOpenRequestW HttpOpenRequestA HttpAddRequestHeadersW InternetSetStatusCallbackW GetUrlCacheEntryInfoW HttpSendRequestW InternetReadFile InternetReadFileExA InternetQueryDataAvailable HttpSendRequestExW HttpSendRequestExA

SysAllocString VariantClear VariantInit SysFreeString

NetApiBufferFree NetUserEnum NetUserGetInfo

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

NtQueryKey