AddVectoredExceptionHandler GetFinalPathNameByHandleW LCMapStringW LoadLibraryExW VirtualProtect FlsFree SetThreadErrorMode WaitForSingleObject GetLocaleInfoW FlsSetValue FlsGetValue FlsAlloc GetCommandLineA WriteFile GetFileType TlsFree TlsSetValue TlsGetValue TlsAlloc IsValidLocale GetExitCodeProcess CloseHandle GetSystemInfo InitializeCriticalSectionAndSpinCount GetProcessTimes GetUserDefaultLCID EnumSystemLocalesW CopyFileExW GetProcAddress GetModuleHandleW RtlUnwind GlobalFree Sleep GetModuleHandleA RtlUnwindEx GetNativeSystemInfo SetLastError FindClose GetEnvironmentStringsW GetCPInfo lstrlenW GetTimeZoneInformationForYear QueryFullProcessImageNameW GetStringTypeW SetHandleInformation RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetCurrentDirectoryW WaitForSingleObjectEx LoadLibraryA CreateMutexA WideCharToMultiByte SetThreadStackGuarantee GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW GetEnvironmentVariableW CreateWaitableTimerExW SetWaitableTimer QueryPerformanceFrequency GetTempPathW GetModuleFileNameW GetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW CreateFileW SetFileInformationByHandle FindNextFileW CreateDirectoryW FindFirstFileExW CreateThread ExitProcess QueryPerformanceCounter GetSystemTimePreciseAsFileTime DeleteFileW MoveFileExW PostQueuedCompletionStatus GetCurrentThread GetQueuedCompletionStatusEx SetFileCompletionNotificationModes CreateIoCompletionPort GetOEMCP GlobalAlloc GetACP FreeEnvironmentStringsW GetCommandLineW LoadLibraryExA FormatMessageW GetLastError SetEnvironmentVariableW SetStdHandle HeapSize HeapReAlloc IsValidCodePage FlushFileBuffers SetDefaultDllDirectories LocalFree SwitchToThread GetCurrentProcessId ReadFile ReadConsoleW GetFileSizeEx GetCurrentProcess LCMapStringEx DecodePointer EncodePointer ReleaseMutex DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection CompareStringW OpenProcess IsDebuggerPresent DebugBreak OutputDebugStringW GetCurrentThreadId GetModuleFileNameA GetModuleHandleExW HeapFree SetEvent ReleaseSemaphore OpenSemaphoreW CreateMutexExW CreateSemaphoreExW GetTickCount64 AcquireSRWLockShared ReleaseSRWLockShared SleepConditionVariableSRW WakeAllConditionVariable TryAcquireSRWLockExclusive AcquireSRWLockExclusive HeapAlloc CreateEventExW ReleaseSRWLockExclusive RtlPcToFileHeader InitOnceComplete InitOnceBeginInitialize FreeLibrary SetFilePointerEx DuplicateHandle GetProcessInformation GetProcessHeap VirtualQuery GetSystemTimeAsFileTime InitializeSListHead UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent TerminateProcess RaiseException SetEndOfFile

SysStringLen GetErrorInfo SysFreeString

ProcessPrng

WaitOnAddress WakeByAddressAll WakeByAddressSingle

CreateEnvironmentBlock DestroyEnvironmentBlock

NtCreateFile NtDeviceIoControlFile NtCancelIoFileEx RtlNtStatusToDosError NtWriteFile NtReadFile NtQueryInformationProcess RtlIpv4AddressToStringExW RtlIpv6AddressToStringExW NtOpenFile NtQuerySystemInformation

IsWellKnownSid ConvertStringSecurityDescriptorToSecurityDescriptorW EventWriteTransfer CryptVerifySignatureA CryptDestroyHash CryptHashData CryptCreateHash CryptDestroyKey CryptReleaseContext CryptAcquireContextA EqualSid ConvertStringSidToSidW RegEnumValueW LookupPrivilegeValueW LookupAccountNameW OpenProcessToken GetTokenInformation RegQueryValueExW RegCreateKeyExW RegCloseKey RegOpenKeyExW CreateProcessAsUserW LookupAccountSidW RegDeleteTreeW ControlTraceW StartTraceW RegSetValueExW EventSetInformation EventRegister CreateWellKnownSid ProcessTrace IsValidSid EventUnregister ConvertSidToStringSidW EventWriteEx OpenTraceW CloseTrace AdjustTokenPrivileges RegDeleteValueW EnableTraceEx2

TdhGetProperty TdhGetEventInformation TdhGetPropertySize

bind recv WSAIoctl setsockopt freeaddrinfo WSAStartup getsockopt closesocket WSACleanup send connect getsockname WSAGetLastError getpeername shutdown WSASend WSASocketW getaddrinfo ioctlsocket

WTSEnumerateSessionsW WTSQueryUserToken WTSFreeMemory WTSQuerySessionInformationW WTSLogoffSession

CryptBinaryToStringA CryptImportPublicKeyInfo CertEnumCertificatesInStore CertAddCertificateContextToStore CertCloseStore CertDuplicateCertificateChain CertCreateCertificateContext CryptStringToBinaryA CryptStringToBinaryW CertVerifyCertificateChainPolicy CertFreeCertificateChain CertGetCertificateChain CertDuplicateStore CertOpenStore CertDuplicateCertificateContext CertFreeCertificateContext

QueryContextAttributesW DeleteSecurityContext EncryptMessage FreeContextBuffer AcceptSecurityContext InitializeSecurityContextW AcquireCredentialsHandleA ApplyControlToken DecryptMessage FreeCredentialsHandle

GetProcessMemoryInfo

WinHttpGetDefaultProxyConfiguration

GetSystemMetrics

FwpmSubLayerEnum0 FwpmSubLayerDestroyEnumHandle0 FwpmSubLayerCreateEnumHandle0 FwpmEngineClose0 FwpmEngineOpen0 FwpmFreeMemory0

RpcServerRegisterIf3 RpcServerListen RpcAsyncCompleteCall RpcServerUnregisterIf NdrAsyncServerCall RpcServerUseProtseqEpW RpcMgmtStopServerListening RpcMgmtWaitServerListen RpcBindingFree RpcBindingFromStringBindingW RpcStringBindingComposeW RpcStringFreeW I_RpcOpenClientProcess RpcAsyncInitializeHandle RpcExceptionFilter Ndr64AsyncServerCallAll