GetComputerNameW LocalFree SwitchToThread CreateProcessW VirtualAllocEx WriteProcessMemory CreateRemoteThread GetExitCodeThread LoadLibraryA GetProcAddress AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc GetComputerNameExW SetLastError GetFinalPathNameByHandleW GetQueuedCompletionStatusEx CreateIoCompletionPort SetFileCompletionNotificationModes GetSystemInfo GetCurrentThreadId GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry WaitForSingleObjectEx lstrlenW CreateMutexA ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW HeapAlloc GetEnvironmentVariableW ReadFileEx SleepEx WriteFileEx QueryPerformanceFrequency GetModuleHandleW FormatMessageW GetExitCodeProcess CreateThread GetModuleHandleA GetFullPathNameW CreateFileW SetFileTime FindFirstFileExW GetFileInformationByHandle GetFileInformationByHandleEx GetSystemTimePreciseAsFileTime CreateDirectoryW CreateEventW CancelIo GetOverlappedResult ReadFile CompareStringOrdinal GetEnvironmentStringsW FreeEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW GetFileAttributesW GetModuleFileNameW DuplicateHandle WaitForMultipleObjects GetTempPathW CreateWaitableTimerExW SetWaitableTimer Sleep SetFilePointerEx FindNextFileW GetDriveTypeW GetVolumeInformationW GetVolumePathNamesForVolumeNameW GetDiskFreeSpaceExW DeviceIoControl GetSystemTimes GetProcessIoCounters GetProcessTimes ReadProcessMemory VirtualQueryEx OpenProcess GlobalMemoryStatusEx K32GetPerformanceInfo PostQueuedCompletionStatus LoadLibraryExA FreeLibrary WaitForSingleObject CopyFileExW GetCurrentProcess FindVolumeClose FindNextVolumeW FindFirstVolumeW CreateMutexW SetHandleInformation GetCurrentProcessId SetFileInformationByHandle GetLastError DeleteFileW TerminateProcess FindClose QueryPerformanceCounter CloseHandle GetStringTypeW GetFileType SetStdHandle SetEnvironmentVariableW GetCPInfo GetOEMCP GetACP IsValidCodePage LCMapStringW CompareStringW VirtualProtect InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc GetTimeZoneInformation GetCommandLineW GetCommandLineA ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread RtlPcToFileHeader LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount EncodePointer RtlUnwindEx GetStartupInfoW IsDebuggerPresent InitializeSListHead IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter DeleteCriticalSection TryEnterCriticalSection FlushFileBuffers GetTickCount MapViewOfFile CreateFileMappingW FormatMessageA GetSystemTime GetSystemTimeAsFileTime SystemTimeToFileTime GetFileSize LockFileEx UnlockFile HeapDestroy HeapCompact LoadLibraryW DeleteFileA CreateFileA FlushViewOfFile OutputDebugStringW GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceA GetTempPathA HeapSize HeapValidate UnmapViewOfFile UnlockFileEx SetEndOfFile GetFullPathNameA SetFilePointer LockFile OutputDebugStringA GetDiskFreeSpaceW WriteFile HeapCreate AreFileApisANSI RaiseException InitializeCriticalSection EnterCriticalSection LeaveCriticalSection

RegEnumKeyExW GetUserNameW RegCloseKey CopySid GetLengthSid IsValidSid SystemFunction036 ConvertSidToStringSidW LookupAccountNameW RegSetValueExW RegCreateKeyExW GetTokenInformation OpenProcessToken RegQueryValueExW RegOpenKeyExW

WSAIoctl WSASend setsockopt send shutdown getsockname getpeername WSACleanup getaddrinfo WSAStartup freeaddrinfo recv WSASocketW WSADuplicateSocketW getsockopt select connect WSAGetLastError ioctlsocket closesocket bind

SysStringLen GetErrorInfo SysFreeString SysAllocStringByteLen SysStringByteLen

CertGetEnhancedKeyUsage CertCloseStore CryptUnprotectData CertOpenStore CertFreeCertificateContext CertVerifyTimeValidity CertEnumCertificatesInStore CertDuplicateCertificateContext

BCryptGenRandom

NtReadFile RtlGetVersion NtWriteFile NtQuerySystemInformation NtCreateFile NtDeviceIoControlFile RtlNtStatusToDosError NtOpenFile NtCreateNamedPipeFile NtCancelIoFileEx NtQueryInformationProcess

ProcessPrng

WaitOnAddress WakeByAddressSingle WakeByAddressAll

PdhCollectQueryData PdhGetFormattedCounterValue PdhRemoveCounter PdhAddEnglishCounterW PdhCloseQuery PdhOpenQueryA

CoCreateInstance CoUninitialize CoSetProxyBlanket CoInitializeEx

GetSystemMetrics

GetModuleFileNameExW GetProcessMemoryInfo

CommandLineToArgvW

CallNtPowerInformation