CreateEventW CancelIo TerminateProcess GetSystemInfo GetProcessTimes GetSystemTimes GetProcessIoCounters WaitForMultipleObjects VirtualQueryEx GetExitCodeProcess ExitProcess CreateDirectoryW GetFileInformationByHandleEx LocalFree GetLogicalProcessorInformation GetProcessHeap GetFileInformationByHandle FindFirstFileExW SetFileInformationByHandle SetFileTime GetFullPathNameW FreeLibrary CreateThread TlsGetValue SetHandleInformation TlsSetValue TlsFree ReadFileEx SleepEx QueryDosDeviceW TlsAlloc WriteFileEx GetSystemDirectoryW GetProcAddress GetWindowsDirectoryW CreateMutexA CreateProcessW LoadLibraryExA GetFileAttributesW GetCurrentProcessId FormatMessageW GetCurrentProcess DuplicateHandle GetTempPathW WaitForSingleObjectEx GetModuleHandleA GetModuleHandleW RtlLookupFunctionEntry LoadLibraryA lstrlenW WideCharToMultiByte MultiByteToWideChar CompareStringOrdinal GetModuleFileNameW LoadLibraryW ReadProcessMemory GetStdHandle GetConsoleMode SetConsoleMode GetConsoleScreenBufferInfo SetConsoleTextAttribute DeleteFileW GetCurrentThreadId FindClose FindNextFileW EncodePointer IsWow64Process2 MoveFileExW GetFileType IsProcessorFeaturePresent OpenProcess QueryFullProcessImageNameW GetProcessAffinityMask GetSystemTimeAsFileTime IsDebuggerPresent RtlPcToFileHeader RaiseException LoadLibraryExW CreateFileW DeviceIoControl SetProcessAffinityMask GetProcessId GetTickCount64 SetThreadAffinityMask CancelIoEx WriteFile GetFinalPathNameByHandleW SetLastError GetConsoleOutputCP SetFileCompletionNotificationModes WriteConsoleW CreateIoCompletionPort GetOverlappedResult K32GetProcessImageFileNameW ResetEvent ReadFile PostQueuedCompletionStatus GetQueuedCompletionStatusEx HeapAlloc SwitchToThread Sleep QueryPerformanceFrequency CloseHandle WaitForSingleObject SetWaitableTimer CreateWaitableTimerExW QueryPerformanceCounter GetSystemTimePreciseAsFileTime GetLastError GetCurrentThread SetThreadStackGuarantee HeapReAlloc HeapFree ReleaseMutex InitializeCriticalSectionAndSpinCount UnhandledExceptionFilter SetUnhandledExceptionFilter FreeEnvironmentStringsW GetEnvironmentStringsW GetEnvironmentVariableW GetCurrentDirectoryW AddVectoredExceptionHandler GetCommandLineW DeleteCriticalSection InitializeSListHead

WakeByAddressAll WakeByAddressSingle WaitOnAddress

ControlTraceW CloseTrace RegQueryValueExW OpenTraceW OpenSCManagerW EnableTraceEx2 RegDeleteValueW StartTraceW GetTokenInformation OpenProcessToken OpenServiceW CloseServiceHandle ControlService DeleteService QueryServiceConfigW CreateServiceW ChangeServiceConfigW QueryServiceStatus StartServiceW RegEnumKeyExW RegOpenKeyExW RegCloseKey RegSetValueExW ProcessTrace RegQueryValueExA IsValidSid GetLengthSid CopySid RegCreateKeyExW SystemFunction036

WSADuplicateSocketW send getpeername freeaddrinfo getaddrinfo sendto recvfrom WSACleanup socket getsockopt connect WSAIoctl ioctlsocket WSASocketW recv shutdown setsockopt closesocket bind WSAStartup getsockname WSAGetLastError WSASend

NtCancelIoFileEx NtQueryInformationProcess NtQuerySystemInformation NtCreateNamedPipeFile RtlVirtualUnwind RtlCaptureContext RtlNtStatusToDosError NtOpenFile NtReadFile NtWriteFile RtlUnwindEx NtCreateFile RtlGetVersion NtDeviceIoControlFile

GetModuleFileNameExW GetProcessImageFileNameW EnumProcesses

CommandLineToArgvW SHGetKnownFolderPath

ConvertInterfaceAliasToLuid ConvertInterfaceGuidToLuid IcmpCloseHandle GetAdaptersInfo ConvertInterfaceLuidToGuid ConvertInterfaceIndexToLuid GetAdaptersAddresses GetIpForwardTable GetExtendedTcpTable GetExtendedUdpTable GetIpInterfaceEntry GetIfEntry2 IcmpSendEcho IcmpCreateFile ConvertInterfaceLuidToIndex GetBestInterfaceEx

FwpmFilterDestroyEnumHandle0 FwpmFreeMemory0 FwpmGetAppIdFromFileName0 FwpmFilterCreateEnumHandle0 FwpmEngineOpen0 FwpmEngineClose0 FwpmSubLayerDeleteByKey0 FwpmFilterDeleteById0 FwpmSubLayerAdd0 FwpmFilterEnum0 FwpmFilterAdd0

PdhRemoveCounter PdhCloseQuery

SysFreeString GetErrorInfo SysStringLen

CoIncrementMTAUsage CoTaskMemFree

RoGetActivationFactory

ProcessPrng

BCryptGenRandom

CertFreeCertificateChain CertDuplicateCertificateChain CertGetCertificateChain CertDuplicateStore CertVerifyTimeValidity CertGetEnhancedKeyUsage CertEnumCertificatesInStore CertAddCertificateContextToStore CertFreeCertificateContext CertDuplicateCertificateContext CertCloseStore CertOpenStore CertVerifyCertificateChainPolicy

FreeCredentialsHandle DeleteSecurityContext InitializeSecurityContextW QueryContextAttributesW DecryptMessage AcceptSecurityContext AcquireCredentialsHandleA EncryptMessage ApplyControlToken FreeContextBuffer

CallNtPowerInformation

strlen wcslen strcmp strcpy_s wcsncmp

round __setusermatherr pow floor

_set_app_type terminate _initialize_onexit_table _crt_atexit abort _seh_filter_exe _register_onexit_function _register_thread_local_exe_atexit_callback _configure_narrow_argv _c_exit _cexit __p___argv __p___argc _initialize_narrow_environment _exit exit _initterm_e _initterm _get_initial_narrow_environment

_set_fmode __p__commode

_configthreadlocale

_set_new_mode malloc calloc free