AllocateAndInitializeSid CheckTokenMembership FreeSid RegCloseKey RegOpenKeyExA RegQueryValueExA RegSetValueExA

AssignProcessToJobObject CloseHandle CopyFileA CreateEventA CreateEventW CreateFileMappingW CreateFileW CreateJobObjectW CreateMutexW CreateProcessW CreateSemaphoreA CreateToolhelp32Snapshot DeleteCriticalSection DeleteProcThreadAttributeList DuplicateHandle EnterCriticalSection FileTimeToSystemTime FindResourceW FlushInstructionCache FlushViewOfFile FormatMessageA GetACP GetCPInfo GetCommandLineW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetExitCodeProcess GetFileInformationByHandle GetFileSize GetLastError GetModuleFileNameA GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessAffinityMask GetProcessHeap GetProcessTimes GetSystemTime GetTempFileNameW GetTempPathW GetThreadContext GetThreadPriority GetThreadTimes GetTickCount GetTickCount64 HeapAlloc HeapFree InitializeCriticalSection InitializeProcThreadAttributeList IsProcessorFeaturePresent LeaveCriticalSection LoadLibraryW LoadResource LocalFree LockResource MapViewOfFile MultiByteToWideChar OpenFileMappingA OpenProcess OutputDebugStringA Process32FirstW Process32NextW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReleaseMutex ReleaseSemaphore ResetEvent ResumeThread RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetConsoleCtrlHandler SetEvent SetInformationJobObject SetLastError SetProcessAffinityMask SetSystemTime SetThreadContext SetThreadPriority SetUnhandledExceptionFilter SizeofResource Sleep SuspendThread SystemTimeToFileTime TerminateProcess TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection UnmapViewOfFile UpdateProcThreadAttribute VirtualAlloc VirtualAllocEx VirtualFree VirtualFreeEx VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte Wow64GetThreadContext Wow64SetThreadContext WriteFile WriteProcessMemory

_XcptFilter ___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _assert _beginthreadex _cexit _commode _endthreadex _errno _exit _fdopen _filelengthi64 _fileno _fileno _fmode _fstat64 _get_osfhandle _initterm _lock _lseeki64 _read _setjmp _strdup _strtoi64 _strtoui64 _time64 _unlock _vscprintf _vsnprintf _wcsicmp _wfopen atexit _write abort calloc exit fclose fflush fgetpos fopen fprintf fputc fputs fread free fsetpos fwrite getenv getwc getc iswctype localeconv longjmp malloc memchr memcmp memcpy memmove memset putc putwc realloc setlocale setvbuf strchr strcmp strcoll strerror strftime strlen strncmp strtoul strxfrm ungetwc tolower vfprintf towlower towupper ungetc vswprintf_s wcschr wcscoll wcscpy_s wcsftime wcslen wcsstr wcsxfrm

NtClose NtCreateSection NtMapViewOfSection NtOpenFile NtQueryInformationProcess NtReadVirtualMemory NtResumeProcess NtSetInformationFile NtSuspendProcess NtWriteFile NtWriteVirtualMemory RtlInitUnicodeString

CoCreateInstance CoInitializeEx CoInitializeSecurity CoSetProxyBlanket CoUninitialize

SysAllocString SysFreeString VariantClear VariantInit

CommandLineToArgvW SHGetFolderPathA

WinHttpCloseHandle WinHttpConnect WinHttpCrackUrl WinHttpOpen WinHttpOpenRequest WinHttpQueryDataAvailable WinHttpQueryHeaders WinHttpReadData WinHttpReceiveResponse WinHttpSendRequest