AllocateAndInitializeSid CheckTokenMembership CryptAcquireContextW CryptGenRandom CryptReleaseContext DeregisterEventSource FreeSid RegCloseKey RegCreateKeyExA RegDeleteTreeA RegOpenKeyExA RegQueryValueExA RegSetValueExA RegisterEventSourceW ReportEventW

BCryptCloseAlgorithmProvider BCryptDecrypt BCryptDestroyKey BCryptGenerateSymmetricKey BCryptOpenAlgorithmProvider BCryptSetProperty

CertCloseStore CertFindCertificateInStore CertFreeCertificateContext CertOpenSystemStoreW CryptBinaryToStringA CryptStringToBinaryA CryptUnprotectData

BitBlt CreateCompatibleBitmap CreateCompatibleDC DeleteDC DeleteObject SelectObject

GdipAlloc GdipCloneImage GdipCreateBitmapFromHBITMAP GdipDisposeImage GdipFree GdipGetImageEncoders GdipGetImageEncodersSize GdipSaveImageToFile GdipSaveImageToStream GdiplusShutdown GdiplusStartup

AcquireSRWLockExclusive AcquireSRWLockShared AreFileApisANSI CheckRemoteDebuggerPresent CloseHandle ConvertFiberToThread ConvertThreadToFiberEx CopyFileA CreateEventA CreateFiberEx CreateFileA CreateFileMappingA CreateFileMappingW CreateFileW CreateHardLinkW CreateMutexW CreateProcessA CreateProcessW CreateSemaphoreA CreateToolhelp32Snapshot DeleteCriticalSection DeleteFiber DeleteFileA DeleteFileW DuplicateHandle EnterCriticalSection FindClose FindFirstFileW FindFirstVolumeW FindNextFileW FindNextVolumeW FindVolumeClose FlushFileBuffers FlushViewOfFile FormatMessageA FormatMessageW FreeConsole FreeLibrary GetACP GetConsoleMode GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDiskFreeSpaceA GetDiskFreeSpaceExA GetDiskFreeSpaceExW GetDiskFreeSpaceW GetDriveTypeA GetEnvironmentVariableW GetExitCodeProcess GetExitCodeThread GetFileAttributesA GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileSize GetFileSizeEx GetFileType GetFullPathNameA GetFullPathNameW GetHandleInformation GetLastError GetLogicalDrives GetModuleFileNameA GetModuleHandleA GetModuleHandleExA GetModuleHandleExW GetModuleHandleW GetProcAddress GetProcessAffinityMask GetProcessHeap GetStartupInfoA GetStdHandle GetSystemDirectoryA GetSystemInfo GetSystemTime GetSystemTimeAsFileTime GetTempPathA GetTempPathW GetThreadContext GetThreadPriority GetTickCount GetVersion GetVersionExA GetVersionExW GetVolumeInformationW GlobalAlloc GlobalLock GlobalUnlock HeapAlloc HeapCompact HeapCreate HeapDestroy HeapFree HeapReAlloc HeapSize HeapValidate InitializeConditionVariable InitializeCriticalSection InitializeSRWLock IsDBCSLeadByteEx IsDebuggerPresent IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryA LoadLibraryW LocalFree LockFile LockFileEx MapViewOfFile MoveFileExW MultiByteToWideChar OpenProcess OutputDebugStringA OutputDebugStringW Process32First Process32Next QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleA ReadConsoleW ReadFile ReadProcessMemory ReleaseSRWLockExclusive ReleaseSRWLockShared ReleaseSemaphore RemoveDirectoryW ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx SetConsoleMode SetEndOfFile SetEvent SetFileAttributesA SetFilePointer SetLastError SetProcessAffinityMask SetThreadContext SetThreadPriority SetUnhandledExceptionFilter Sleep SleepConditionVariableCS SuspendThread SwitchToFiber SystemTimeToFileTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection UnlockFile UnlockFileEx UnmapViewOfFile VirtualAlloc VirtualAllocEx VirtualFree VirtualLock VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteFile WriteProcessMemory

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _acmdln _amsg_exit _assert _beginthreadex _cexit _close _commode _endthreadex _errno _exit _fdopen _fileno _fileno _findclose _fmode _fstat64 _get_osfhandle _gmtime64 _initterm _ismbblead _localtime64 _lock _lseeki64 _lseeki64 _msize _pclose _popen _read _setjmp _setmode _stat _strdup _stricmp _strdup _strtoi64 _strtoui64 _telli64 _time64 _unlock _vscprintf _vsnprintf _vsnwprintf _wchdir _wchmod _wfindfirst64 _wfindnext64 _wfopen _wfullpath atexit _wgetcwd _wmkdir _wopen _write _wstat64 _wutime64 abort acos asin atan atoi calloc cosh exit fclose feof ferror fflush fgets fopen fprintf fputc fputs fread free fseek ftell fwrite getc getenv isalnum isdigit isspace iswctype isxdigit ldexp localeconv log10 longjmp malloc memchr memcmp memcpy memmove memset qsort raise rand realloc setlocale setvbuf signal sinh sprintf strcat strchr strcmp strcoll strcpy strcspn strerror strftime strlen strncmp strncpy strpbrk strrchr strspn strstr strtol strtoul strxfrm system tan tanh tolower towlower towupper ungetc vfprintf wcscat wcscmp wcscoll wcscpy wcsftime wcslen wcsstr wcstombs wcsxfrm

NetApiBufferFree NetLocalGroupAddMembers NetServerEnum NetUserAdd NetUserDel

RtlVirtualUnwind

CoCreateInstance CoInitialize CoInitializeEx CoSetProxyBlanket CoUninitialize CreateStreamOnHGlobal

SysAllocString SysFreeString VariantClear

SHChangeNotify SHGetFolderPathA ShellExecuteA

URLDownloadToFileA

AddClipboardFormatListener CallNextHookEx CloseClipboard CreateWindowExA DefWindowProcA EmptyClipboard GetClipboardData GetDC GetDesktopWindow GetForegroundWindow GetKeyboardState GetMessageA GetProcessWindowStation GetSystemMetrics GetUserObjectInformationW GetWindowTextA MessageBoxW OpenClipboard ReleaseDC SetClipboardData SetCursorPos SetWindowsHookExA SystemParametersInfoA ToUnicode UnhookWindowsHookEx keybd_event mouse_event

HttpAddRequestHeadersA HttpOpenRequestA HttpQueryInfoA HttpSendRequestA InternetCloseHandle InternetConnectA InternetCrackUrlA InternetOpenA InternetOpenUrlA InternetReadFile

WSACleanup WSAGetLastError WSASetLastError WSAStartup accept bind closesocket connect gethostbyaddr gethostbyname gethostname getpeername getservbyname getservbyport getsockname getsockopt htonl htons inet_addr inet_ntoa ioctlsocket listen ntohs recv recvfrom select send sendto setsockopt shutdown socket