AdjustTokenPrivileges AllocateAndInitializeSid CheckTokenMembership CloseServiceHandle CryptAcquireContextA CryptCreateHash CryptDestroyHash CryptGenRandom CryptGetHashParam CryptHashData CryptReleaseContext DuplicateTokenEx EnumServicesStatusA FreeSid GetTokenInformation GetUserNameA ImpersonateLoggedOnUser LookupPrivilegeValueA OpenProcessToken OpenSCManagerA OpenSCManagerW OpenServiceA OpenServiceW QueryServiceConfigW QueryServiceStatus RegCloseKey RegCreateKeyExA RegDeleteKeyA RegDeleteValueA RegEnumKeyExA RegEnumKeyExW RegEnumValueA RegOpenKeyExA RegOpenKeyExW RegQueryValueExA RegQueryValueExW RegSetValueExA RevertToSelf SetThreadToken StartServiceA

BCryptCloseAlgorithmProvider BCryptCreateHash BCryptDecrypt BCryptDestroyHash BCryptDestroyKey BCryptEncrypt BCryptFinishHash BCryptGenRandom BCryptGenerateSymmetricKey BCryptGetProperty BCryptHashData BCryptImportKeyPair BCryptOpenAlgorithmProvider BCryptSetProperty

CryptBinaryToStringA CryptStringToBinaryA CryptUnprotectData

BitBlt CreateCompatibleBitmap CreateCompatibleDC DeleteDC DeleteObject GetStockObject SelectObject SetStretchBltMode StretchBlt

GdipAlloc GdipCloneImage GdipCreateBitmapFromHBITMAP GdipCreateBitmapFromHICON GdipDisposeImage GdipFree GdipGetImageEncoders GdipGetImageEncodersSize GdipSaveImageToStream GdiplusStartup

CloseHandle CopyFileA CreateDirectoryA CreateDirectoryW CreateFileA CreateFileW CreateMutexA CreatePipe CreateProcessA CreateProcessW CreateRemoteThread CreateSemaphoreW CreateThread CreateToolhelp32Snapshot DeleteCriticalSection DeleteFileA DeleteFileW EnterCriticalSection ExitProcess ExpandEnvironmentStringsA ExpandEnvironmentStringsW FileTimeToSystemTime FindClose FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW FreeLibrary GetComputerNameA GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDiskFreeSpaceExA GetDriveTypeA GetEnvironmentVariableA GetExitCodeProcess GetExitCodeThread GetFileAttributesA GetFileAttributesExA GetFileSize GetFinalPathNameByHandleW GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoA GetLogicalDrives GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetNativeSystemInfo GetProcAddress GetProcessId GetStartupInfoA GetTempPathA GetTickCount GetTickCount64 GetTimeZoneInformation GetUserDefaultLCID GlobalAlloc GlobalLock GlobalMemoryStatusEx GlobalSize GlobalUnlock InitializeCriticalSection IsDBCSLeadByteEx K32GetModuleFileNameExA LeaveCriticalSection LoadLibraryA LocalFree MoveFileA MoveFileW MultiByteToWideChar OpenMutexA OpenProcess PeekNamedPipe Process32FirstW Process32NextW RaiseException ReadFile ReadProcessMemory ReleaseSemaphore RemoveDirectoryA RemoveDirectoryW RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetCurrentDirectoryW SetEnvironmentVariableA SetFileAttributesA SetFilePointer SetHandleInformation SetLastError SetUnhandledExceptionFilter Sleep TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue VirtualAlloc VirtualAllocEx VirtualFree VirtualFreeEx VirtualProtect VirtualQuery VirtualQueryEx WaitForSingleObject WideCharToMultiByte WinExec WriteFile WriteProcessMemory lstrcpyA

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __argc __argv __getmainargs __initenv __iob_func __lconv_init __set_app_type __setusermatherr _acmdln _amsg_exit _cexit _commode _errno _exit _fmode _gmtime64 _initterm _onexit _strdup _stricmp _strnicmp _wcsdup _wcsicmp abort atof atoi atol calloc exit fclose fopen fprintf fputc fputs free fwrite getc getenv islower isspace isupper isxdigit localeconv malloc memcmp memcpy memmove memset rand realloc signal srand strchr strcmp strcpy strerror strftime strlen strncat strncmp strncpy strrchr strstr strtok strtol strtoul tolower ungetc vfprintf wcschr wcscmp wcscpy wcslen wcsncmp wcsncpy wcsrchr wcsstr _write _open _close

NCryptDecrypt NCryptFreeObject NCryptOpenKey NCryptOpenStorageProvider

CLSIDFromString CoCreateInstance CoInitializeEx CoUninitialize CreateStreamOnHGlobal GetHGlobalFromStream StringFromGUID2

SysAllocStringByteLen SysFreeString SysStringByteLen

SHCreateDirectoryExW SHFileOperationW SHGetFileInfoW SHGetFolderPathA SHGetFolderPathW ShellExecuteA ShellExecuteExA ShellExecuteW

BeginPaint CallNextHookEx CloseClipboard CreateWindowExA DefWindowProcA DestroyIcon DestroyWindow DispatchMessageA EmptyClipboard EndPaint EnumDisplayDevicesA EnumDisplaySettingsA EnumWindows FillRect FindWindowA GetAsyncKeyState GetClassNameA GetClientRect GetClipboardData GetDC GetKeyboardState GetMessageA GetSystemMetrics GetWindowRect GetWindowTextA GetWindowThreadProcessId IsWindow IsWindowVisible LockWorkStation MapVirtualKeyA MessageBoxW OpenClipboard PostMessageA PostQuitMessage RegisterClassA ReleaseDC SendInput SetClipboardData SetCursorPos SetForegroundWindow SetWindowPos SetWindowsHookExA ShowCursor ShowWindow SystemParametersInfoW ToUnicode TranslateMessage UnhookWindowsHookEx UnregisterClassA UpdateWindow VkKeyScanA wsprintfW

HttpOpenRequestA HttpQueryInfoA HttpSendRequestA InternetCloseHandle InternetConnectA InternetOpenA InternetOpenUrlA InternetReadFile

PlaySoundA waveInAddBuffer waveInClose waveInGetDevCapsA waveInGetNumDevs waveInOpen waveInPrepareHeader waveInStart waveInStop waveInUnprepareHeader

WSAIoctl WSAStartup closesocket connect freeaddrinfo getaddrinfo getsockopt htonl htons inet_addr ioctlsocket recv select send setsockopt socket