RegQueryValueExW OpenProcessToken IsValidSid GetLengthSid GetTokenInformation CopySid RegCreateKeyExW RegCreateKeyTransactedW RegOpenKeyTransactedW RegOpenKeyExW RegCloseKey

Process32FirstW Process32NextW DeviceIoControl CreateToolhelp32Snapshot FormatMessageW SystemTimeToFileTime FreeLibrary CreateFileW GetProcAddress GetSystemInfo GlobalMemoryStatusEx LocalFree K32GetPerformanceInfo CreateEventW GetFileInformationByHandle GetTimeZoneInformationForYear GetDiskFreeSpaceExW SetUnhandledExceptionFilter InitializeSListHead VirtualQueryEx HeapFree MultiByteToWideChar GetStdHandle WideCharToMultiByte HeapAlloc GetProcessHeap ReadConsoleW ReadProcessMemory SetConsoleTextAttribute GetCurrentProcessId GetExitCodeProcess GetProcessTimes GetSystemTimes OpenProcess CloseHandle LoadLibraryW FlushFileBuffers SetHandleInformation GetFullPathNameW WakeAllConditionVariable SleepConditionVariableSRW FindFirstFileW GetTickCount CreateFile2 FormatMessageA GetSystemTime GetSystemTimeAsFileTime GetModuleHandleW GetFileSize LockFileEx UnlockFile DeleteFileW DeleteFileA DuplicateHandle GetConsoleScreenBufferInfo WaitForSingleObjectEx GetConsoleMode LoadLibraryA SetConsoleMode CreateFileA OutputDebugStringW GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceA GetTempPathA Sleep GetFileAttributesW WaitForSingleObject CreateMutexW GetTempPathW UnlockFileEx SetEndOfFile GetCurrentProcess GetFullPathNameA SetFilePointer SetNamedPipeHandleState MoveFileExW LockFile OutputDebugStringA SetFileAttributesW GetDiskFreeSpaceW WriteFile GetCurrentThreadId GetLastError SetLastError GetModuleHandleA RtlVirtualUnwind GetProcessIoCounters TlsSetValue CancelIoEx GetOverlappedResult GetQueuedCompletionStatusEx PostQueuedCompletionStatus CreateIoCompletionPort RaiseException AreFileApisANSI SetFileCompletionNotificationModes ReadFile TlsGetValue TlsAlloc InitOnceExecuteOnce TryAcquireSRWLockShared AcquireSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockShared ReleaseSRWLockExclusive CompareFileTime InitializeSRWLock GetLocaleInfoEx FreeEnvironmentStringsW MapViewOfFile CreateFileMappingW HeapDestroy HeapCompact HeapReAlloc FlushViewOfFile HeapSize HeapValidate UnmapViewOfFile HeapCreate InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection CompareStringOrdinal WriteFileEx SleepEx SetFileInformationByHandle SetFileTime QueryPerformanceFrequency CreateThread ReadFileEx RtlCaptureContext RtlLookupFunctionEntry GetSystemTimePreciseAsFileTime CancelIo GetFileInformationByHandleEx GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetEnvironmentStringsW CreateDirectoryW SetFilePointerEx AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW CopyFileExW FindFirstFileExW FindClose ExitProcess SwitchToThread CreateMutexA ReleaseMutex GetFinalPathNameByHandleW CreateSymbolicLinkW GetModuleFileNameW WriteConsoleW GetConsoleOutputCP GetFileType WaitForMultipleObjects FindNextFileW QueryPerformanceCounter

WakeByAddressAll WakeByAddressSingle WaitOnAddress

GetErrorInfo SysStringLen SysAllocString SysAllocStringLen SysFreeString SysStringByteLen SysAllocStringByteLen

PdhCollectQueryData PdhEnumObjectsW PdhOpenQueryW PdhRemoveCounter PdhCloseQuery PdhAddEnglishCounterW PdhGetFormattedCounterValue

CallNtPowerInformation

RtlNtStatusToDosError NtCancelIoFileEx NtCreateFile NtWriteFile NtOpenFile NtCreateNamedPipeFile NtQueryInformationProcess NtReadFile RtlGetVersion NtDeviceIoControlFile

GetProcessMemoryInfo GetModuleFileNameExW

CommandLineToArgvW

ProcessPrng

CertCreateCertificateChainEngine CertSetCertificateContextProperty CertOpenStore CertFreeCertificateContext CertVerifyCertificateChainPolicy CertGetCertificateChain CertAddEncodedCertificateToStore CertFreeCertificateChain CertCloseStore CertFreeCertificateChainEngine

connect WSASocketW send recv bind WSAIoctl closesocket WSAGetLastError WSASend getsockopt shutdown ioctlsocket getsockname getpeername setsockopt getaddrinfo WSAStartup WSACleanup freeaddrinfo

GetUserProfileDirectoryW

?__ExceptionPtrAssign@@YAXPEAXPEBX@Z ?__ExceptionPtrCreate@@YAXPEAX@Z _Xtime_get_ticks ?_Winerror_map@std@@YAHH@Z ?_Xbad_function_call@std@@YAXXZ ?__ExceptionPtrRethrow@@YAXPEBX@Z ?__ExceptionPtrToBool@@YA_NPEBX@Z ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z ?__ExceptionPtrDestroy@@YAXPEAX@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Xout_of_range@std@@YAXPEBD@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Throw_Cpp_error@std@@YAXH@Z _Cnd_signal _Cnd_wait _Mtx_unlock _Mtx_lock ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?bad@ios_base@std@@QEBA_NXZ ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?_Xlength_error@std@@YAXPEBD@Z ?_Xbad_alloc@std@@YAXXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ?good@ios_base@std@@QEBA_NXZ ?uncaught_exception@std@@YA_NXZ ??7ios_base@std@@QEBA_NXZ ?fail@ios_base@std@@QEBA_NXZ ?flags@ios_base@std@@QEBAHXZ ?width@ios_base@std@@QEBA_JXZ ?width@ios_base@std@@QEAA_J_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

__current_exception __C_specific_handler strrchr __current_exception_context _purecall __CxxFrameHandler3 memcpy memmove memset memcmp __std_exception_copy __std_exception_destroy _CxxThrowException memchr strchr

__CxxFrameHandler4

trunc fmod exp fmodf fabs log pow __setusermatherr _dclass floor

strncmp strcspn strspn strncpy wcslen strlen wcscmp strcmp

malloc free realloc _set_new_mode _callnewh _msize

_errno terminate _crt_atexit _register_onexit_function _initialize_onexit_table strerror _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc signal _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _set_app_type _seh_filter_exe _endthreadex _beginthreadex abort _wassert

strtol

getenv

fwrite ftell fseek fread _fileno _set_fmode _setmode fgets ferror feof fclose clearerr __p__commode fputs fopen fflush __stdio_common_vfprintf __acrt_iob_func __stdio_common_vsscanf __stdio_common_vsprintf

bsearch qsort_s qsort

_localtime64_s

___lc_codepage_func _configthreadlocale

CharUpperBuffW