WSASend WSAStringToAddressW inet_ntoa ntohl getsockname recvfrom htonl getsockopt recv WSASendTo send socket htons __WSAFDIsSet select accept closesocket shutdown WSACloseEvent ioctlsocket WSASocketW WSAGetLastError WSASetLastError listen getpeername WSACreateEvent WSAEnumNetworkEvents WSAAddressToStringW WSARecv bind connect WSAEventSelect WSAResetEvent WSAWaitForMultipleEvents ntohs WSAIoctl sendto inet_pton WSACleanup WSAStartup gethostname getnameinfo freeaddrinfo setsockopt getaddrinfo

GetUserNameExW

PostQueuedCompletionStatus WaitForMultipleObjects QueueUserAPC CreateEventW TlsAlloc FormatMessageW ExitProcess ReleaseSemaphore WaitForSingleObjectEx CreateSemaphoreA CreateEventA DuplicateHandle ReleaseSRWLockShared AcquireSRWLockShared InitializeSRWLock GetDriveTypeW UnmapViewOfFile MapViewOfFile CreateFileMappingA OpenFileMappingA OutputDebugStringA WTSGetActiveConsoleSessionId GetEnvironmentVariableW HeapAlloc HeapFree GetProcessHeap RaiseException GetSystemInfo VirtualProtect VirtualQuery GetComputerNameExA LoadLibraryExA DeviceIoControl GetSystemTimeAsFileTime SetErrorMode GetFileInformationByHandle GetFileAttributesW GetVolumeInformationW GetFileSize CreateDirectoryW GetDiskFreeSpaceW SetWaitableTimer QueryDosDeviceW GetLogicalDriveStringsA SetFilePointerEx GetDiskFreeSpaceExW MoveFileExW FindFirstFileW GetLogicalProcessorInformation WaitForMultipleObjectsEx InitializeCriticalSectionAndSpinCount GetProfileStringA GlobalFree GetFileTime GetFileSizeEx SetEndOfFile FlushFileBuffers SetFilePointer ReadFile WriteFile FileTimeToSystemTime GetTimeZoneInformation SystemTimeToFileTime GetSystemTime GetExitCodeThread TerminateThread Sleep GetCurrentThread GetCurrentThreadId ExitThread SetFileTime DeleteFileA CreateDirectoryA CreateFileA CopyFileA RemoveDirectoryA SetFileAttributesA MoveFileA CreateIoCompletionPort EnterCriticalSection InitializeCriticalSection TlsSetValue TlsGetValue SleepEx GetLogicalDriveStringsW GetQueuedCompletionStatus LeaveCriticalSection DeleteCriticalSection GetModuleHandleA GetEnvironmentVariableA GetTempPathA GetFileAttributesA VirtualUnlock GetFullPathNameA GetCurrentDirectoryA ExpandEnvironmentStringsA SetCurrentDirectoryA WaitForSingleObject OpenMutexA VirtualLock VirtualFree VirtualAlloc IsBadWritePtr OpenSemaphoreA FindNextFileA FindFirstFileA VerifyVersionInfoA TlsFree CreateFileW DeleteFileW SetFileAttributesW lstrcmpiA GetDriveTypeA LocalAlloc LocalFree SetEvent VerifyVersionInfoW IsWow64Process FormatMessageA SetLastError GetTickCount GetCurrentProcess MoveFileExA VerSetConditionMask TerminateProcess GetExitCodeProcess OpenProcess GetCurrentProcessId CreateProcessA CloseHandle GetLastError GetSystemDirectoryA GetProcAddress FreeLibrary GetConsoleScreenBufferInfo GetConsoleMode SetConsoleCtrlHandler GetStdHandle ReadConsoleInputA GetNumberOfConsoleInputEvents FlushConsoleInputBuffer SetConsoleMode MultiByteToWideChar WideCharToMultiByte AreFileApisANSI SetFileApisToANSI GetUserDefaultUILanguage GetModuleFileNameA LoadLibraryA GetWindowsDirectoryW RemoveDirectoryW CreateDirectoryExW GetFileAttributesExW GetSystemFirmwareTable EnumSystemFirmwareTables GetLogicalDrives GetModuleHandleW GetModuleHandleExA Process32Next Process32First CreateToolhelp32Snapshot ResetEvent InitializeSListHead IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetStringTypeW ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeCriticalSectionEx TryEnterCriticalSection InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableCS SleepConditionVariableSRW QueryPerformanceFrequency FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW InitOnceBeginInitialize InitOnceComplete EncodePointer DecodePointer LCMapStringEx GetLocaleInfoEx CompareStringEx GetCPInfo RtlUnwind InterlockedPushEntrySList LoadLibraryExW GetFileType PeekNamedPipe SystemTimeToTzSpecificLocalTime CreateThread FreeLibraryAndExitThread GetModuleFileNameW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleCP GetCurrentDirectoryW GetFullPathNameW SetStdHandle ReadConsoleW HeapReAlloc HeapSize FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW WriteConsoleW CopyFileW ReplaceFileA GetWindowsDirectoryA FileTimeToLocalFileTime IsBadReadPtr CancelIo GetOverlappedResult GetStartupInfoA CreateWaitableTimerA GetPrivateProfileSectionA GetPrivateProfileStringA WritePrivateProfileStringA WritePrivateProfileSectionA GetPrivateProfileIntA OpenEventA PulseEvent GetComputerNameA

ShellExecuteExA SHGetFolderLocation SHGetPathFromIDListA SHGetFolderPathA SHGetSpecialFolderLocation SHGetPathFromIDListW

OpenServiceA QueryServiceStatusEx LsaOpenPolicy LsaQueryInformationPolicy ConvertSidToStringSidA LsaFreeMemory LsaClose RegisterServiceCtrlHandlerExA SetServiceStatus StartServiceCtrlDispatcherA QueryServiceStatus QueryServiceConfigA LookupPrivilegeNameA CreateServiceA CloseServiceHandle EnumDependentServicesA StartServiceA ControlService DeleteService QueryServiceObjectSecurity GetSecurityDescriptorDacl SetEntriesInAclA SetServiceObjectSecurity RegFlushKey DeregisterEventSource RegisterEventSourceA RegConnectRegistryA ReportEventA ConvertStringSecurityDescriptorToSecurityDescriptorA SetSecurityDescriptorSacl OpenSCManagerA ReadEventLogA OpenEventLogA ChangeServiceConfig2A RegDeleteKeyA GetSecurityDescriptorSacl SystemFunction036 CryptAcquireContextA CryptReleaseContext CryptGetHashParam CryptGenRandom CryptCreateHash CryptHashData CryptDestroyHash ImpersonateSelf AdjustTokenPrivileges LookupPrivilegeValueA ConvertSidToStringSidW InitializeSecurityDescriptor SetSecurityDescriptorDacl RegQueryValueExW RegOpenKeyExW RegOpenKeyA RegEnumKeyExA RegEnumValueA RegSetValueExA RegDeleteValueA RegQueryValueExA RegCreateKeyExA RegOpenKeyExA RegCloseKey OpenThreadToken FreeSid AllocateAndInitializeSid LookupAccountNameA GetUserNameA LookupAccountSidA EqualSid CopySid GetLengthSid GetTokenInformation OpenProcessToken CloseEventLog

SHDeleteKeyA

CancelMibChangeNotify2 NotifyIpInterfaceChange GetIpAddrTable GetAdaptersAddresses

WinHttpGetIEProxyConfigForCurrentUser WinHttpGetProxyForUrl WinHttpCloseHandle WinHttpOpen WinHttpGetDefaultProxyConfiguration

WTSWaitSystemEvent

ord13 ord9 ord15 ord3

NetServerEnum DsGetDcNameW NetGroupEnum NetUserEnum NetUserGetLocalGroups DsEnumerateDomainTrustsA NetApiBufferFree

CertGetCertificateChain CertFreeCertificateChainEngine CertCreateCertificateChainEngine CryptQueryObject CertGetNameStringA CertFindExtension CertAddCertificateContextToStore CryptDecodeObjectEx PFXImportCertStore CryptStringToBinaryA CertFreeCertificateContext CertFindCertificateInStore CertEnumCertificatesInStore CertCloseStore CertOpenStore CryptUnprotectMemory CryptProtectMemory CertFreeCertificateChain

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

GetModuleFileNameExA

SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailA SetupDiDestroyDeviceInfoList CM_Get_DevNode_Registry_PropertyA CMP_WaitNoPendingInstallEvents SetupDiGetClassDevsA SetupDiOpenDeviceInfoA SetupDiEnumDeviceInfo CM_Get_Device_IDA CM_Get_Parent CM_Get_Sibling CM_Get_Child CM_Get_Device_ID_Size