CreateToolhelp32Snapshot Process32FirstW K32GetProcessMemoryInfo GetProcessTimes Process32NextW GetNativeSystemInfo GetVersionExW GetTickCount64 GetLogicalDriveStringsW GetDiskFreeSpaceExW SetLastError GetCurrentProcess LocalFree GetSystemInfo GetDiskFreeSpaceExA GetDriveTypeW GetFileAttributesW GetModuleHandleW CreateEventA GetLocalTime FindResourceW LoadResource LockResource SizeofResource GetStringTypeW SetStdHandle GetCPInfo GetOEMCP GetACP IsValidCodePage GlobalMemoryStatusEx LCMapStringW CompareStringW VirtualProtect InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc GetTimeZoneInformation GetCommandLineA GetModuleHandleExW FreeLibraryAndExitThread ExitThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount EncodePointer RtlPcToFileHeader RtlUnwindEx GetStartupInfoW IsDebuggerPresent InitializeSListHead IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetSystemTimes GetComputerNameExW TerminateProcess OpenProcess GetCurrentThreadId GetLastError CreateProcessW SetEvent CloseHandle SetNamedPipeHandleState RaiseException AreFileApisANSI ReadFile HeapCreate GetFullPathNameW WriteFile GetDiskFreeSpaceW OutputDebugStringA MapViewOfFile CreateFileMappingW FormatMessageA GetSystemTime GetSystemTimeAsFileTime FreeLibrary GetCurrentProcessId GetFileSize LockFileEx GetProcAddress SetHandleInformation UnlockFile HeapDestroy GetProcessHeap HeapAlloc HeapFree HeapCompact LoadLibraryW HeapReAlloc DeleteFileW FreeEnvironmentStringsW WriteFileEx DeleteFileA WaitForSingleObjectEx LoadLibraryA SleepEx GetOverlappedResult PostQueuedCompletionStatus CancelIoEx CreateIoCompletionPort GetQueuedCompletionStatusEx CreateFileA FlushFileBuffers GetTickCount SetFileCompletionNotificationModes ReadDirectoryChangesW ReleaseSemaphore CancelIo CreateSemaphoreW GetFileInformationByHandle GetConsoleMode CompareStringOrdinal LockFile WaitForMultipleObjectsEx CreateEventW MoveFileExW SetFilePointer GetFullPathNameA FindNextFileW SetEndOfFile GetModuleHandleA WaitForMultipleObjects UnlockFileEx GetTempPathW CreateMutexW GetFileType WaitForSingleObject CreateFileW LoadLibraryExA SetWaitableTimer UnmapViewOfFile CreateWaitableTimerExW FormatMessageW GetConsoleOutputCP WriteConsoleW GetModuleFileNameW SetEnvironmentVariableW GetFinalPathNameByHandleW ReleaseMutex CreateMutexA SwitchToThread ExitProcess FindClose FindFirstFileExW SystemTimeToFileTime HeapValidate HeapSize Sleep GetTempPathA GetDiskFreeSpaceA GetFileAttributesA GetFileAttributesExW OutputDebugStringW CopyFileExW lstrlenW GetCommandLineW GetEnvironmentVariableW GetCurrentDirectoryW GetCurrentThread SetThreadStackGuarantee SetThreadPriority AddVectoredExceptionHandler SetFilePointerEx CreateDirectoryW GetStdHandle GetProcessId GetExitCodeProcess GetWindowsDirectoryW GetSystemDirectoryW GetEnvironmentStringsW GetFileInformationByHandleEx GetSystemTimePreciseAsFileTime RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext DuplicateHandle ReadFileEx CreateThread QueryPerformanceCounter WideCharToMultiByte MultiByteToWideChar InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection SetFileInformationByHandle QueryPerformanceFrequency SetFileTime FlushViewOfFile

CoInitialize CoUninitialize CoInitializeEx PropVariantClear CoCreateInstance CoTaskMemFree

MFCreateAttributes MFCopyImage MFGetStrideForBitmapInfoHeader MFStartup

MFEnumDeviceSources

MFCreateSourceReaderFromMediaSource

ord219

ProcessPrng

AdjustTokenPrivileges LookupPrivilegeValueW GetUserNameW LookupAccountSidW SystemFunction036 GetTokenInformation RegDeleteValueW RegQueryValueExW RegSetValueExW RegDeleteTreeW RegOpenKeyExW RegCreateKeyExW RegCreateKeyTransactedW RegOpenKeyTransactedW RegEnumKeyExW RegEnumValueW RegCloseKey OpenProcessToken OpenSCManagerW CloseServiceHandle OpenServiceW ControlService CreateServiceW ChangeServiceConfig2W DeleteService StartServiceW EnumServicesStatusExW

SysFreeString SysStringLen GetErrorInfo

WaitOnAddress WakeByAddressAll WakeByAddressSingle

connect ioctlsocket setsockopt send WSASend recv getsockname getsockopt WSAIoctl getpeername shutdown WSASocketW WSAGetLastError bind freeaddrinfo WSACleanup WSAStartup getaddrinfo closesocket

CertDuplicateCertificateChain CertFreeCertificateContext CryptUnprotectData CertGetCertificateChain CertDuplicateStore CertCloseStore CertVerifyCertificateChainPolicy CertFreeCertificateChain CertEnumCertificatesInStore CertDuplicateCertificateContext CertOpenStore CertAddCertificateContextToStore

FreeContextBuffer ApplyControlToken InitializeSecurityContextW AcceptSecurityContext DecryptMessage EncryptMessage QueryContextAttributesW FreeCredentialsHandle AcquireCredentialsHandleA DeleteSecurityContext

CreateDesktopW GetThreadDesktop GetWindowThreadProcessId ClipCursor GetCursorPos PaintDesktop SendMessageW SystemParametersInfoW SwapMouseButton SetWindowsHookExW FindWindowExW SetThreadDesktop PostQuitMessage GetWindowRect SetTimer GetMessageW TranslateMessage PrintWindow SetFocus SetForegroundWindow DispatchMessageW UnhookWindowsHookEx GetAncestor SendInput EnumDesktopWindows FindWindowW GetSystemMetrics GetAsyncKeyState IsWindowVisible CloseDesktop LockWorkStation PostThreadMessageW ExitWindowsEx GetForegroundWindow GetWindowTextW EnumWindows WindowFromPoint ScreenToClient PostMessageW AttachThreadInput CallNextHookEx MessageBoxW ShowWindow

BCryptGenRandom

NtReadFile NtOpenFile NtCreateFile NtDeviceIoControlFile NtCreateNamedPipeFile NtWriteFile RtlNtStatusToDosError NtCancelIoFileEx

mciSendStringW

GetIfTable2 GetExtendedTcpTable FreeMibTable GetExtendedUdpTable

DeleteObject GetDIBits DeleteDC BitBlt SelectObject CreateCompatibleBitmap CreateCompatibleDC CreateDCW

ShellExecuteW