SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc GetComputerNameExW SetLastError GetFinalPathNameByHandleW GetQueuedCompletionStatusEx CreateIoCompletionPort SetFileCompletionNotificationModes GetSystemInfo FindClose GetCurrentThreadId GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry WaitForSingleObjectEx LoadLibraryA GetProcAddress lstrlenW CreateMutexA ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW HeapAlloc GetEnvironmentVariableW CreateDirectoryW GetFullPathNameW FindFirstFileExW CreateFileW SetFileTime SetFileInformationByHandle GetFileInformationByHandle GetFileInformationByHandleEx GetModuleHandleW FormatMessageW AddVectoredExceptionHandler GetModuleFileNameW QueryPerformanceFrequency CreateThread WriteFileEx SleepEx ReadFileEx GetSystemTimePreciseAsFileTime QueryPerformanceCounter CreateWaitableTimerExW SetWaitableTimer Sleep CreateEventW CancelIo GetOverlappedResult ReadFile GetEnvironmentStringsW FreeEnvironmentStringsW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW DuplicateHandle WaitForMultipleObjects SetFilePointerEx FindNextFileW GetSystemTimes GetProcessIoCounters GetProcessTimes ReadProcessMemory VirtualQueryEx OpenProcess GetDriveTypeW GetVolumeInformationW GetVolumePathNamesForVolumeNameW GetDiskFreeSpaceExW DeviceIoControl GlobalMemoryStatusEx K32GetPerformanceInfo PostQueuedCompletionStatus LoadLibraryExA FreeLibrary LocalFree GetComputerNameW GetExitCodeProcess WaitForSingleObject CopyFileExW GetCurrentProcess FindVolumeClose FindNextVolumeW FindFirstVolumeW CreateMutexW CloseHandle SwitchToThread SetHandleInformation GetCurrentProcessId GetModuleHandleA GetLastError FlushFileBuffers HeapSize LCMapStringW CompareStringW LoadLibraryExW VirtualProtect GetStringTypeW GetFileType SetStdHandle SetEnvironmentVariableW GetCPInfo GetOEMCP GetACP IsValidCodePage UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineW GetCommandLineA GetModuleHandleExW TerminateProcess FatalExit WriteFile RtlPcToFileHeader DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection RaiseException EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc RtlUnwindEx GetStartupInfoW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime

RegEnumKeyExW GetUserNameW RegCloseKey CopySid GetLengthSid IsValidSid SystemFunction036 ConvertSidToStringSidW LookupAccountNameW RegSetValueExW RegCreateKeyExW GetTokenInformation OpenProcessToken RegQueryValueExW RegOpenKeyExW

recv bind send setsockopt WSASend WSAIoctl getaddrinfo freeaddrinfo WSAStartup WSACleanup getsockname getpeername shutdown WSASocketW WSADuplicateSocketW getsockopt select WSAGetLastError ioctlsocket closesocket connect

BCryptGenRandom

NtOpenFile NtQueryInformationProcess NtReadFile NtWriteFile NtCreateFile NtDeviceIoControlFile NtQuerySystemInformation RtlNtStatusToDosError NtCancelIoFileEx RtlGetVersion NtCreateNamedPipeFile

CertCloseStore CertVerifyTimeValidity CertDuplicateCertificateContext CertFreeCertificateContext CertEnumCertificatesInStore CertOpenStore CertGetEnhancedKeyUsage

ProcessPrng

GetErrorInfo SysStringLen SysFreeString

WakeByAddressSingle WakeByAddressAll WaitOnAddress

PdhCloseQuery PdhOpenQueryA PdhRemoveCounter PdhGetFormattedCounterValue PdhAddEnglishCounterW PdhCollectQueryData

GetSystemMetrics

GetProcessMemoryInfo GetModuleFileNameExW

CommandLineToArgvW

CallNtPowerInformation