RegEnumKeyExW GetUserNameW RegCloseKey CopySid GetLengthSid IsValidSid SystemFunction036 ConvertSidToStringSidW LookupAccountNameW RegSetValueExW RegCreateKeyExW GetTokenInformation OpenProcessToken RegQueryValueExW RegOpenKeyExW

FlushFileBuffers MoveFileExW SetFileInformationByHandle CreateProcessW VirtualAllocEx WriteProcessMemory CreateRemoteThread GetExitCodeThread LoadLibraryA GetProcAddress AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetProcessHeap HeapFree HeapReAlloc GetComputerNameExW SetLastError GetFinalPathNameByHandleW GetQueuedCompletionStatusEx CreateIoCompletionPort SetFileCompletionNotificationModes GetSystemInfo GetCurrentThreadId GetCurrentDirectoryW RtlCaptureContext RtlLookupFunctionEntry WaitForSingleObjectEx lstrlenW CreateMutexA ReleaseMutex WideCharToMultiByte RtlVirtualUnwind GetStdHandle GetConsoleMode GetConsoleOutputCP MultiByteToWideChar WriteConsoleW HeapAlloc GetEnvironmentVariableW ReadFileEx SleepEx WriteFileEx QueryPerformanceFrequency GetModuleHandleW FormatMessageW QueryPerformanceCounter SwitchToThread GetModuleHandleA GetFullPathNameW CreateFileW SetFileTime FindFirstFileExW GetFileInformationByHandle GetFileInformationByHandleEx GetSystemTimePreciseAsFileTime CreateDirectoryW CreateEventW CancelIo GetOverlappedResult ReadFile CompareStringOrdinal GetEnvironmentStringsW FreeEnvironmentStringsW GetSystemDirectoryW GetWindowsDirectoryW GetFileAttributesW GetModuleFileNameW DuplicateHandle WaitForMultipleObjects GetTempPathW DeleteFileW CopyFileExW CreateWaitableTimerExW SetWaitableTimer Sleep SetFilePointerEx FindNextFileW GetDriveTypeW GetVolumeInformationW GetVolumePathNamesForVolumeNameW GetDiskFreeSpaceExW DeviceIoControl GetSystemTimes GetProcessIoCounters GetProcessTimes ReadProcessMemory VirtualQueryEx OpenProcess GlobalMemoryStatusEx K32GetPerformanceInfo PostQueuedCompletionStatus LoadLibraryExA FreeLibrary LocalFree GetComputerNameW GetExitCodeProcess WaitForSingleObject GetCurrentProcess FindVolumeClose FindNextVolumeW FindFirstVolumeW CreateMutexW GetLastError SetHandleInformation GetCurrentProcessId TerminateProcess FindClose CreateThread CloseHandle GetStringTypeW GetFileType SetStdHandle SetEnvironmentVariableW GetCPInfo GetOEMCP GetACP IsValidCodePage LCMapStringW CompareStringW VirtualProtect InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc GetTimeZoneInformation GetCommandLineW GetCommandLineA FatalExit GetModuleHandleExW FreeLibraryAndExitThread ExitThread RtlPcToFileHeader LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount EncodePointer RtlUnwindEx GetStartupInfoW IsDebuggerPresent InitializeSListHead IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter DeleteCriticalSection TryEnterCriticalSection GetTickCount MapViewOfFile CreateFileMappingW FormatMessageA GetSystemTime GetSystemTimeAsFileTime SystemTimeToFileTime GetFileSize LockFileEx UnlockFile HeapDestroy HeapCompact LoadLibraryW DeleteFileA CreateFileA FlushViewOfFile OutputDebugStringW GetFileAttributesExW GetFileAttributesA GetDiskFreeSpaceA GetTempPathA HeapSize HeapValidate UnmapViewOfFile UnlockFileEx SetEndOfFile GetFullPathNameA SetFilePointer LockFile OutputDebugStringA GetDiskFreeSpaceW WriteFile LeaveCriticalSection AreFileApisANSI RaiseException InitializeCriticalSection EnterCriticalSection HeapCreate AreFileApisANSI

WaitOnAddress WakeByAddressSingle WakeByAddressAll FlsAlloc FlsSetValue InitializeCriticalSectionEx LCMapStringEx

BCryptGenRandom

ProcessPrng

CertCloseStore CertVerifyTimeValidity CertEnumCertificatesInStore CertGetEnhancedKeyUsage CertOpenStore CryptUnprotectData CertDuplicateCertificateContext CertFreeCertificateContext

NtWriteFile NtCreateFile NtReadFile NtQueryInformationProcess RtlNtStatusToDosError NtDeviceIoControlFile NtCancelIoFileEx NtOpenFile NtCreateNamedPipeFile NtQuerySystemInformation RtlGetVersion

CoUninitialize CoInitializeEx CoSetProxyBlanket CoCreateInstance

GetErrorInfo SysStringLen SysFreeString SysStringByteLen SysAllocStringByteLen

PdhAddEnglishCounterW PdhRemoveCounter PdhCollectQueryData PdhGetFormattedCounterValue PdhOpenQueryA PdhCloseQuery

CallNtPowerInformation

GetModuleFileNameExW GetProcessMemoryInfo

CommandLineToArgvW

GetSystemMetrics

WSAIoctl setsockopt bind recv WSAStartup getsockname getpeername WSACleanup shutdown freeaddrinfo getaddrinfo WSASend WSASocketW WSADuplicateSocketW getsockopt select connect WSAGetLastError ioctlsocket closesocket send