VirtualProtectEx TerminateProcess ReadProcessMemory WriteProcessMemory GetThreadContext ResumeThread CreateProcessA GetCurrentDirectoryW GetFullPathNameA GetLogicalDrives FindClose SystemTimeToTzSpecificLocalTime FileTimeToSystemTime ExpandEnvironmentStringsA GetFileAttributesA FindFirstFileA FindNextFileA CopyFileA MoveFileA VirtualProtect OpenProcess GetCurrentProcessId VirtualAllocEx CreateThread OpenThread CreateToolhelp32Snapshot Thread32First Thread32Next CreateRemoteThread SetThreadContext MapViewOfFile UnmapViewOfFile CreateFileMappingA Wow64GetThreadContext Wow64SetThreadContext SetLastError SetNamedPipeHandleState PeekNamedPipe CreateFileA WaitNamedPipeA GetModuleFileNameA GetComputerNameA GetVersionExA GetACP GetOEMCP HeapAlloc CreateNamedPipeA GetProcessHeap InitializeProcThreadAttributeList DeleteProcThreadAttributeList SetErrorMode UpdateProcThreadAttribute DuplicateHandle ProcessIdToSessionId Process32First Process32Next VirtualQuery ExitProcess ExitThread ConnectNamedPipe ReadFile GetCurrentThread GetCurrentProcess MultiByteToWideChar GetCurrentDirectoryA SetCurrentDirectoryA GetStartupInfoA DisconnectNamedPipe CreatePipe GetTickCount GetLocalTime CloseHandle FlushFileBuffers WriteFile WaitForSingleObject GetLastError Sleep GetModuleHandleA RaiseException SetEnvironmentVariableW SetEnvironmentVariableA LoadLibraryA VirtualFree VirtualAlloc SetEndOfFile CreateFileW WriteConsoleW SetStdHandle GetStringTypeW LCMapStringW CompareStringW HeapReAlloc HeapSize LoadLibraryW OutputDebugStringW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter RemoveDirectoryW CreateDirectoryW DeleteFileW GetFileType SetFilePointerEx SetFilePointer ReadConsoleW GetConsoleMode GetConsoleCP GetProcAddress HeapFree FreeLibrary EncodePointer DecodePointer GetModuleHandleExW AreFileApisANSI GetSystemTimeAsFileTime GetCommandLineA GetCurrentThreadId GetStdHandle GetModuleFileNameW IsDebuggerPresent IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW LoadLibraryExW RtlUnwindEx IsValidCodePage GetCPInfo WideCharToMultiByte

RevertToSelf OpenProcessToken CryptReleaseContext CryptAcquireContextA CryptGenRandom CheckTokenMembership LogonUserA LookupAccountSidA FreeSid AllocateAndInitializeSid GetTokenInformation ImpersonateNamedPipeClient GetUserNameA DuplicateTokenEx CreateProcessWithTokenW CreateProcessWithLogonW CreateProcessAsUserA ImpersonateLoggedOnUser LookupPrivilegeValueA AdjustTokenPrivileges OpenThreadToken

connect closesocket inet_pton WSACleanup send gethostname gethostbyname ntohl htons htonl socket ntohs ioctlsocket recv shutdown WSAGetLastError __WSAFDIsSet accept bind listen select WSAStartup

DnsFree DnsQuery_A