CryptQueryObject CertFreeCertificateContext CertFindCertificateInStore CryptMsgGetParam CryptDecodeObjectEx CryptImportPublicKeyInfo CryptBinaryToStringA CryptStringToBinaryA CertGetNameStringW

InternetCrackUrlA InternetConnectA InternetReadFile HttpOpenRequestA HttpSendRequestA InternetOpenA InternetCloseHandle

PathCombineW StrSpnA StrPBrkA StrCmpNIA PathSkipRootW StrSpnW PathFindFileNameW StrStrIA StrChrIA StrCpyNW StrStrIW StrCmpIW PathUnquoteSpacesW StrToIntW StrChrA PathRemoveExtensionW StrChrW StrToInt64ExA StrCmpNIW StrCmpNW StrChrIW StrPBrkW PathMatchSpecW

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoSizeA

WNetOpenEnumW WNetCloseEnum WNetEnumResourceW

CheckSumMappedFile

gethostbyname inet_ntoa closesocket shutdown WSAStartup htons sendto socket inet_addr htonl

GetModuleFileNameExW

WTSQueryUserToken

Process32NextW lstrcmpiW CreateToolhelp32Snapshot CloseHandle IsBadWritePtr SearchPathW TlsAlloc MultiByteToWideChar Process32FirstW WideCharToMultiByte MoveFileExW HeapFree WaitForSingleObject GetProcessHeap GetSystemDirectoryW Sleep GetSystemWow64DirectoryW CreateDirectoryW FormatMessageW GetVersionExW TerminateProcess lstrlenW GetLastError MoveFileW IsBadStringPtrW IsBadReadPtr IsBadCodePtr IsBadStringPtrA WaitForMultipleObjects GetWindowsDirectoryW LocalFree lstrcpynA CreateThread ExpandEnvironmentStringsW RtlUnwind GetCurrentThreadId WTSGetActiveConsoleSessionId SetErrorMode GetSystemWindowsDirectoryW GetModuleHandleW CreateFileW OpenMutexW GetVolumeInformationW lstrcatW GetProcAddress GetDateFormatW SetFilePointer SetFilePointerEx OutputDebugStringW SetFileTime WriteFile InitializeCriticalSection LeaveCriticalSection GetTimeFormatW OpenProcess FileTimeToSystemTime ReadFile GetFileSizeEx EnterCriticalSection GetFileTime DeleteCriticalSection FileTimeToLocalFileTime lstrcpyW GetCurrentProcessId GetTempFileNameW GetFileSize MapViewOfFile UnmapViewOfFile FreeLibrary CreateProcessW LoadLibraryExW LoadLibraryW CopyFileW ReadProcessMemory lstrcpynW FlushInstructionCache FlushFileBuffers GetTempPathW VirtualAllocEx CreateFileMappingW WinExec DeleteFileW WriteProcessMemory ResumeThread FindFirstFileW GetModuleFileNameW FindClose SetFileAttributesW GetCommandLineW CreateMutexW VirtualProtect SetEvent GetTickCount GetCurrentThread GetModuleHandleA SetThreadPriority GetSystemInfo CreateEventW SetCurrentDirectoryW OutputDebugStringA SetProcessShutdownParameters ExitProcess GetCurrentProcess SetPriorityClass lstrcpyA GetEnvironmentVariableW LockResource SizeofResource lstrcmpiA LoadResource GetModuleFileNameA GetNativeSystemInfo GetDriveTypeW GetLogicalDrives VirtualFree VirtualAlloc QueryDosDeviceW FindNextFileW FindResourceW HeapValidate GetProcessHeaps HeapSetInformation HeapCreate SetLastError HeapAlloc HeapReAlloc lstrlenA GetComputerNameA FreeResource GetFileAttributesW GetHandleInformation GetExitCodeProcess

CreateProcessAsUserW EnumDependentServicesW SetKernelObjectSecurity RegSetValueExW RegOpenKeyW RegCreateKeyExW QueryServiceStatusEx ConvertStringSecurityDescriptorToSecurityDescriptorW ControlService CryptEncrypt CryptGetKeyParam CryptAcquireContextW CryptDestroyKey RegEnumKeyW RegisterServiceCtrlHandlerW SetServiceStatus GetTokenInformation StartServiceCtrlDispatcherW RegCloseKey RegFlushKey RegDeleteValueW InitiateSystemShutdownExW RegEnumKeyExW RegOpenKeyExW RegEnumValueW SetEntriesInAclW SetNamedSecurityInfoW CreateWellKnownSid CheckTokenMembership FreeSid RegDeleteKeyW AllocateAndInitializeSid DuplicateToken RegQueryValueExW RegSetValueW OpenServiceW GetLengthSid ConvertSidToStringSidW OpenSCManagerW DeleteService CloseServiceHandle CreateServiceW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken

_allmul NtQueryVirtualMemory _aulldvrm RtlFreeUnicodeString ZwOpenProcess memset memcpy ZwClose NtDeleteFile isspace RtlDosPathNameToNtPathName_U ZwSuspendProcess ZwQueryInformationProcess memmove _chkstk ZwOpenSection ZwOpenDirectoryObject _alldiv

GetProcessWindowStation ExitWindowsEx GetForegroundWindow CloseWindowStation SetProcessWindowStation wsprintfW GetPropW GetSystemMetrics SetPropW FindWindowW DispatchMessageW DefWindowProcW RegisterClassW MessageBoxW GetWindowThreadProcessId EnumWindowStationsW CreateWindowExW GetShellWindow PeekMessageW TranslateMessage wsprintfA CharLowerBuffA GetKeyboardLayoutList OpenInputDesktop OpenWindowStationW RegisterClassExW GetLastInputInfo UnregisterClassW GetUserObjectInformationW

SysFreeString SysAllocString VariantClear

CoCreateInstance CoSetProxyBlanket CoUninitialize CoInitializeEx CoInitializeSecurity CoInitialize

SHChangeNotify ShellExecuteExW SHGetFolderPathW ShellExecuteW CommandLineToArgvW

DestroyEnvironmentBlock CreateEnvironmentBlock

NetApiBufferFree NetUserGetInfo NetUserEnum