WSASetLastError WSAStringToAddressW WSASocketW WSASend ntohl getsockname recvfrom htonl WSACreateEvent WSASendTo listen WSAAddressToStringW bind setsockopt __WSAFDIsSet select accept closesocket shutdown WSAResetEvent WSAGetLastError ioctlsocket inet_ntoa send recv getpeername WSAEventSelect WSASetEvent WSAEnumNetworkEvents WSAWaitForMultipleEvents WSARecv connect htons getsockopt WSACloseEvent inet_pton inet_ntop ntohs sendto WSAIoctl WSACleanup WSAStartup getnameinfo getaddrinfo gethostname socket freeaddrinfo

GetUserNameExW

CertGetEnhancedKeyUsage CertGetIntendedKeyUsage CertEnumCertificatesInStore CertCloseStore CryptProtectMemory CertOpenSystemStoreA CertFreeCertificateContext CryptUnprotectMemory

FormatMessageA IsWow64Process GetCurrentProcess SetLastError SetEvent LocalFree GetDriveTypeA LocalAlloc lstrcmpiA SetFileAttributesW DeleteFileW CreateFileW TlsFree VerifyVersionInfoA CreateIoCompletionPort InitializeCriticalSectionAndSpinCount GetQueuedCompletionStatus SleepEx TlsGetValue TlsSetValue PostQueuedCompletionStatus SetWaitableTimer WaitForMultipleObjects QueueUserAPC TlsAlloc CreateEventW FormatMessageW ExitProcess WaitForSingleObjectEx ReleaseSemaphore CreateSemaphoreA DuplicateHandle CreateEventA ReleaseSRWLockShared AcquireSRWLockShared InitializeSRWLock GetDriveTypeW UnmapViewOfFile MapViewOfFile CreateFileMappingA OpenFileMappingA OutputDebugStringA WTSGetActiveConsoleSessionId GetEnvironmentVariableW HeapAlloc GetProcessHeap HeapFree RaiseException GlobalFree VirtualProtect VirtualQuery GetModuleHandleW LoadLibraryExA DeviceIoControl GetSystemTimeAsFileTime SetErrorMode GetTickCount GetFileAttributesW GetVolumeInformationW GetFileSize CreateDirectoryW GetDiskFreeSpaceW GetLogicalDriveStringsW QueryDosDeviceW GetLogicalDriveStringsA SetFilePointerEx ReleaseSRWLockExclusive AcquireSRWLockExclusive QueryPerformanceFrequency GetSystemDirectoryA InitializeCriticalSectionEx QueryPerformanceCounter MoveFileExA CompareFileTime InitOnceExecuteOnce VirtualAlloc IsBadWritePtr OpenSemaphoreA FindNextFileA FindFirstFileA GetFileSizeEx GetFileTime FlushFileBuffers ReadFile SetFilePointer SetEndOfFile WriteFile GetSystemTime SystemTimeToFileTime GetTimeZoneInformation FileTimeToSystemTime Sleep TerminateThread GetExitCodeThread GetCurrentThread GetCurrentThreadId ExitThread RemoveDirectoryA CopyFileA CreateFileA DeleteFileA CreateDirectoryA SetFileTime GetTempFileNameA SetFileAttributesA MoveFileA EnterCriticalSection InitializeCriticalSection LeaveCriticalSection DeleteCriticalSection GetModuleHandleA GetCurrentDirectoryA GetTempPathA GetModuleHandleExA VerSetConditionMask GetProfileIntA VerifyVersionInfoW GetComputerNameExA GetFileInformationByHandle SearchPathA GetFileAttributesA GetEnvironmentVariableA GetFullPathNameA ExpandEnvironmentStringsA SetCurrentDirectoryA OpenProcess GetComputerNameA GetCurrentProcessId TerminateProcess GetExitCodeProcess WaitForSingleObject CreateProcessA PulseEvent OpenEventA WritePrivateProfileSectionA GetPrivateProfileIntA WritePrivateProfileStringA GetPrivateProfileStringA GetPrivateProfileSectionA CreateWaitableTimerA GetStartupInfoA GetOverlappedResult CloseHandle GetProcAddress GetLastError FreeLibrary GetConsoleMode CancelIo SetConsoleCtrlHandler GetStdHandle GetConsoleScreenBufferInfo ReadConsoleA ReadConsoleInputA GetNumberOfConsoleInputEvents FlushConsoleInputBuffer SetConsoleMode MultiByteToWideChar WideCharToMultiByte GetUserDefaultUILanguage AreFileApisANSI GetModuleFileNameA LoadLibraryA GetProfileStringA VirtualFree VirtualLock K32EnumProcessModules VirtualUnlock WaitForMultipleObjectsEx FindFirstFileW CreateToolhelp32Snapshot Process32First Process32Next OpenMutexA GetLogicalDrives EnumSystemFirmwareTables GetSystemFirmwareTable RemoveDirectoryW CreateDirectoryExW MoveFileExW CopyFileExW GetDiskFreeSpaceExW GetSystemInfo ResetEvent IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW InitializeSListHead TryEnterCriticalSection SwitchToThread GetStringTypeW InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableCS SleepConditionVariableSRW FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW InitOnceBeginInitialize InitOnceComplete EncodePointer DecodePointer LCMapStringEx GetLocaleInfoEx CompareStringEx GetCPInfo RtlUnwind InterlockedPushEntrySList LoadLibraryExW GetFileType PeekNamedPipe SystemTimeToTzSpecificLocalTime CreateThread ResumeThread FreeLibraryAndExitThread ReadConsoleW GetConsoleCP GetModuleFileNameW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW SetCurrentDirectoryW GetCurrentDirectoryW GetFullPathNameW SetStdHandle HeapReAlloc HeapSize GetFileAttributesExW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW WriteConsoleW CopyFileW ReplaceFileA GetWindowsDirectoryA MapViewOfFileEx FlushViewOfFile FileTimeToLocalFileTime BackupRead lstrcpyW BackupSeek IsBadReadPtr CreateMutexA ReleaseMutex GetThreadContext SetThreadContext

SHFileOperationA SHGetFolderPathA SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetFolderLocation SHGetPathFromIDListA

ReadEventLogA OpenEventLogA CloseServiceHandle QueryServiceStatusEx OpenProcessToken GetTokenInformation GetLengthSid CopySid LookupAccountNameA LookupAccountSidA OpenServiceA OpenSCManagerA LsaQueryInformationPolicy LsaOpenPolicy ConvertSidToStringSidA RegFlushKey LsaClose RegisterServiceCtrlHandlerExA SetServiceStatus StartServiceCtrlDispatcherA QueryServiceStatus QueryServiceConfigA LookupPrivilegeNameA CreateServiceA ChangeServiceConfig2A EnumDependentServicesA SetServiceObjectSecurity GetSecurityDescriptorDacl DeleteService StartServiceA QueryServiceObjectSecurity ControlService CloseEventLog RegDeleteKeyA CryptAcquireContextA LsaFreeMemory ConvertStringSecurityDescriptorToSecurityDescriptorA SetEntriesInAclA ReportEventA RegConnectRegistryA DeregisterEventSource RegisterEventSourceA GetSecurityDescriptorSacl SetSecurityDescriptorSacl CryptGenRandom EqualSid SystemFunction036 AdjustTokenPrivileges LookupPrivilegeValueA ImpersonateSelf ConvertSidToStringSidW SetSecurityDescriptorDacl InitializeSecurityDescriptor RegOpenKeyExW RegQueryValueExW RegOpenKeyA RegSetValueExA RegEnumKeyExA RegEnumValueA RegDeleteValueA RegQueryValueExA RegCreateKeyExA RegOpenKeyExA RegCloseKey OpenThreadToken AllocateAndInitializeSid FreeSid GetUserNameA CryptReleaseContext

SHDeleteKeyA

CancelMibChangeNotify2 NotifyIpInterfaceChange GetIpAddrTable GetAdaptersAddresses

WinHttpGetIEProxyConfigForCurrentUser WinHttpGetProxyForUrl WinHttpCloseHandle WinHttpOpen WinHttpGetDefaultProxyConfiguration

WTSWaitSystemEvent

ord13 ord9 ord15 ord3

NetApiBufferFree DsEnumerateDomainTrustsA DsGetDcNameW NetGroupEnum NetUserEnum NetUserGetLocalGroups

BCryptGenRandom

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

GetModuleFileNameExA

CM_Get_Device_IDA CM_Get_Sibling CMP_WaitNoPendingInstallEvents SetupDiEnumDeviceInterfaces CM_Get_Parent SetupDiGetDeviceInterfaceDetailA SetupDiDestroyDeviceInfoList SetupDiGetClassDevsA SetupDiEnumDeviceInfo SetupDiOpenDeviceInfoA CM_Get_Device_ID_Size CM_Get_DevNode_Registry_PropertyA CM_Get_Child

RtlAddVectoredExceptionHandler RtlRemoveVectoredExceptionHandler