Extension for Financial Services (XFS) Extension for Financial Services (XFS) Meterpreter service Microsoft Virtual Basic Virtual Machine Microsoft C Runtime Library TLS/SSL Security provider SslFreeCertificate SslGenerateRandomBits SslGetServerIdentity LZRead LZCopy LZInit LZSeek LZStart LZClose CACloseCertType CAEnumNextC CAEnumFirstC CADeleteC CACloseC AccessibleObjectFromWindow CreateStdAccessibleObject NdisFreeMemory NdisAllocateBuffer NdisFreePacket NdisAllocateMemory NdisAllocatePacket NdisCopyFromPacketToPacket NdisDeregisterProtocol NdisRegisterProtocol NdisAllocateBufferPool NdisAllocatePacketPool NdisFreeBufferPool NdisFreePacketPool NdisCloseConfiguration NdisReadConfiguration NdisOpenConfiguration NdisMSetAttributesEx NdisAllocateMemoryWithTag NdisTerminateWrapper NdisMRegisterMiniport NdisInitializeWrapper BCryptOpenAlgorithmProvider BCryptSetProperty BCryptGetProperty BCryptGenerateSymmetricKey BCryptCloseAlgorithmProvider BCryptDecrypt BCryptDestroyKey ConnectionObjectSize ConnectionRead ConnectionWrite ConnectionClose ConnectionError ConnectionVer ConnectionTransact ConnectionWriteOOB ConnectionMode ConnectionStatus ConnectionOpen ConnectionServerEnum ConnectionCheckForData ConnectionOpen ConnectionError ConnectionServerEnum ADsGetLastError ADsGetObject ADsBuildEnumerator ADsFreeEnumerator ADsEnumerateNext ADsBuildVarArrayStr ADsBuildVarArrayInt ADsOpenObject FreeADsMem SamEnumerateDomainsInSamServer SamQueryInformationUser SamCloseHandle SamEnumerateUsersInDomain SamOpenUser SamLookupNamesInDomain SamLookupIdsInDomain SamOpenDomain SamConnect SamFreeMemory SamGetGroupsForUser SamRidToSid SamLookupDomainInSamServer SamGetAliasMembership WinDbgExtensionDllInit ExtensionApiVersion CheckVersion WABOpen WABCreateIProp WABOpenEx AtlComModuleGetClassObject AtlComModuleRegisterServer AtlComModuleUnregisterServer AtlUpdateRegistryFromResourceD AtlComPtrAssign AtlComQIPtrAssign AtlInternalQueryInterface AtlGetVersion AtlModuleAddTermFunc AtlCreateRegistrar AtlCallTermFunc HalDispatchTable Navigate Navigate2 ExecWB PasswordChangeNotif InstallHook GetRandomFileName GetProcessesByName DownloadFileAsync SaveToFile WriteText Scripting.FileSystemObject ServiceDllUnloadOnStop SvchostPushServiceGlobals System.Net.Sockets AVIFileWriteData SSL_CTX_check_private_key SSL_CTX_ctrl SSL_CTX_flush_sessions SSL_CTX_free SSL_CTX_get_client_CA_list SSL_CTX_get_verify_callback SSL_CTX_new SSL_CTX_set_cipher_list SSL_CTX_set_client_CA_list SSL_CTX_set_default_passwd_cb ssl3_ciphers SSL_CTX_set_ssl_version SSL_CTX_set_verify SSL_CTX_use_certificate_file SSL_SESSION_free SSL_SESSION_new SSL_SESSION_print SSL_SESSION_print_fp4 SSL_accept SSL_add_client_CA SSL_alert_desc_string SSL_alert_desc_string_long SSL_alert_type_string SSL_alert_type_string_long SSL_check_private_key SSL_clear SSL_connect SSL_copy_session_id SSL_ctrl SSL_dup SSL_dup_CA_list SSL_free SSL_get_certificate SSL_get_cipher_list SSL_get_ciphers SSL_get_client_CA_list SSL_get_default_timeout SSL_get_error SSL_get_fd SSL_get_peer_cert_chain SSL_get_peer_certificate SSL_get_rbio SSL_get_read_ahead SSL_get_shared_ciphers SSL_get_ssl_method SSL_get_verify_mode SSL_load_error_strings SSL_new SSL_peek SSL_pending SSL_read SSL_renegotiate SSL_rstate_string SSL_set_client_CA_list SSL_set_connect_state SSL_set_fd SSL_set_read_ahead SSL_set_rfd SSL_set_session SSL_shutdown SSL_write SSLv23_client_method SSL_get_SSL_CTX SSL_get_ex_data SSL_get_quiet_shutdown SSL_get_session SSL_get_shutdown SSL_get_verify_result SSL_set_ex_data SSL_set_info_callback SSL_CTX_set_timeout SSL_library_init SSL_get1_session ASN1_INTEGER_get BIO_free BIO_set BIO_set_cipher BIO_set_tcp_ndelay BIO_sock_cleanup BIO_sock_error BIO_sock_init BIO_sock_non_fatal_error BIO_sock_should_retry BIO_socket_ioctl BIO_write BN_CTX_free BN_CTX_new BN_MONT_CTX_free BN_MONT_CTX_new BN_MONT_CTX_set BN_add BN_add_word BN_hex2bn BN_bin2bn BN_bn2hex BN_bn2bin BN_clear BN_clear_bit BN_clear_free BN_cmp BN_copy BN_div BN_div_word BN_dup BN_free BN_from_montgomery BN_gcd BN_generate_prime BN_get_word BN_is_bit_set BN_is_prime BN_lshift BN_lshift1 BN_mask_bits BN_mod_exp BN_mod_mul_montgomery DSAparams_print DSAparams_print_fp ERR_clear_error ERR_error_string ERR_free_strings ERR_func_error_string ERR_get_err_state_table ERR_get_error ERR_get_error_line ERR_get_state ERR_print_errors ERR_print_errors_fp ERR_put_error ERR_reason_error_string ERR_remove_state EVP_BytesToKey EVP_idea_ecb EVP_idea_ofb EVP_md2 EVP_md5 EVP_md_null EVP_rc2_cbc EVP_rc2_cfb64 EVP_rc2_ecb EVP_rc2_ofb EVP_rc4 EVP_read_pw_string MD5 MD5_Final MD5_Init MD5_Update OBJ_obj2nid OBJ_nid2ln RAND_bytes RAND_cleanup RAND_file_name RAND_load_file RAND_screen RAND_seed RAND_write_file RC2_cbc_encrypt RC2_cfb64_encrypt RC2_ecb_encrypt RC2_encrypt RC2_ofb64_encrypt RC2_set_key RC4 RC4_options RC4_set_key RSAPrivateKey_asn1_meth SHA SHA1 SHA1_Final SHA1_Init SHA1_Update SHA_Final SHA_Init SHA_Update OpenSSL_add_all_ciphers OpenSSL_add_all_digests TXT_DB_create_index TXT_DB_free TXT_DB_get_by_index TXT_DB_insert TXT_DB_read TXT_DB_write X509_NAME_oneline X509_free X509_get_issuer_name X509_get_serialNumber0 X509_get_subject_name0 d2i_PKCS7_bio DES_cfb64_encrypt DES_cfb_encrypt DES_decrypt3 DES_ecb3_encrypt DES_ecb_encrypt DES_ede3_cbc_encrypt DES_ede3_cfb64_encrypt DES_ede3_ofb64_encrypt DES_enc_read DES_enc_write DES_encrypt1 DES_set_odd_parity sk_find sk_free HMAC BN_init sk_value sk_num BIO_new_mem_buf PKCS7_verify PKCS7_encrypt DES_set_key_unchecked SMIME_crlf_copy i2d_ASN1_PRINTABLESTRING PKCS7_get0_signers X509at_get_attr_by_OBJ RAND_add BIO_number_written BIO_number_read X509_STORE_CTX_get1_chain ERR_load_RAND_strings RAND_pseudo_bytes PEM_write_bio_X509_REQ_NEW PEM_write_X509_REQ_NEW BIO_callback_ctrl RAND_egd RAND_status MD4 MD4_Transform MD4_Final MD4_Update MD4_Init SHA256_Final SHA256_Init SHA256_Update PacketAllocatePacket PacketCloseAdapter PacketFreePacket PacketGetAdapterNames PacketGetAirPcapHandle PacketGetDriverVersion PacketGetNetInfoEx PacketGetNetType PacketGetReadEvent PacketGetStats PacketGetStatsEx PacketGetVersion PacketInitPacket PacketIsDumpEnded PacketLibraryVersion PacketOpenAdapter PacketReceivePacket PacketRequest PacketSendPacket PacketSendPackets PacketSetBpf PacketSetBuff PacketSetDumpLimits PacketSetDumpName PacketSetHwFilter PacketSetLoopbackBehavior PacketSetMinToCopy PacketSetMode PacketSetNumWrites PacketSetReadTimeout PacketSetSnapLen PacketStopDriver InetDialHandler CmCustomDialDlg AutoDialFunc CmReConnect JetGetCounter SQLAllocConnect SQLAllocEnv SQLAllocStmt SQLBindCol SQLCancel SQLConnect SQLDisconnect SQLExecDirect SQLExecute SQLFetch SQLFreeStmt SQLNumResultCols SQLPrepare SQLRowCount SQLTransact SQLAllocHandle SQLBindParam SQLCloseCursor SQLCopyDesc SQLEndTran SQLFetchScroll SQLFreeHandle SQLGetConnectAttr SQLGetDiagRec SQLSetConnectAttr SQLColumns SQLDriverConnect SQLGetConnectOption SQLGetData SQLGetFunctions SQLGetInfo SQLParamData SQLPutData SQLSetConnectOption SQLBrowseConnect SQLColumnPrivileges SQLMoreResults SQLNativeSql SQLNumParams SQLParamOptions SQLPrimaryKeys SQLProcedureColumns SQLProcedures SQLSetPos SQLSetScrollOptions SQLTablePrivileges SQLDrivers SQLBindParameter SQLSetDescField SQLSetDescRec SQLSetEnvAttr SQLSetStmtAttr SQLAllocHandleStd SQLBulkOperations CloseODBCPerfData CollectODBCPerfData DllBidEntryPoint GetODBCSharedData LockHandle ODBCInternalConnect OpenODBCPerfData PostComponentError PostODBCComponentError PostODBCError SQLCancelHandle SearchStatusCode SQLConnect SQLDescribeColW SQLExecDirect SQLGetCursorName SQLPrepare SQLColAttribute SQLGetConnectAttr SQLGetDescField SQLGetDescRec SQLGetDiagRecW SQLGetStmtAttr SQLSetConnectAttr SQLColumns SQLDriverConnect SQLGetConnectOption SQLGetInfo SQLGetTypeInfo SQLSetConnectOption SQLSpecialColumns SQLStatistics SQLTables SQLBrowseConnect SQLColumnPrivileges SQLDataSources SQLForeignKeys SQLNativeSql SQLTablePrivileges SQLDrivers SQLSetDescField SQLSetStmtAttr SQLConnect SQLDescribeCol SQLError SQLExecDirect SQLSetConnectAttr SQLDriverConnect SQLGetConnectOption SQLStatistics SQLBrowseConnect SQLColumnPrivileges SQLDataSources SQLNativeSql SQLTablePrivileges SQLDrivers EstimateFileRiskLevel PassportWizardRunDll ImageRecompress ldap_unbind ldap_err2string ldap_first_entry ldap_next_entry ldap_get_dn ldap_dn2ufn ldap_first_attribute ldap_next_attribute ldap_get_values ldap_get_values_len ldap_count_entries ldap_count_values ldap_value_free ldap_explode_dn ldap_result ldap_msgfree ldap_unbind_s ldap_search_s ldap_search_st ldap_compare_s LdapUnicodeToUTF8 ber_bvfree cldap_open ldap_add ldap_add_ext ldap_add_ext- ldap_simple_bind ldap_simple_bind_s ldap_bind ldap_add_extW ldap_add_ext_s ldap_add_ext_s- ldap_add_ext_s ldap_add_s ldap_modrdn2 ldap_modrdn2_s ldap_add_s ldap_bind ldap_bind ldap_bind_s ldap_bind_s ldap_close_extended_op ldap_compare ldap_compare ldap_count_values_len ldap_compare_ext ldap_value_free_len ldap_compare_ext ldap_connect ldap_delete_s ldap_escape_filter_element ldap_first_attribute ldap_get_dn ldap_get_next_page ldap_get_next_page_s ldap_get_option ldap_get_option ldap_get_paged_count ldap_get_values ldap_get_values ldap_get_values_len ldap_get_values_len ldap_init ldap_init ldap_init ldap_memfree ldap_memfree ldap_modify ldap_modify ldap_modify_ext ldap_modrdn2_s ldap_modrdn2_s ldap_modrdn ldap_modrdnW ldap_modrdn_s ldap_modrdn_s ldap_next_attribute ldap_next_attribute ldap_next_reference ldap_open ldap_open ldap_memfree ldap_startup ldap_cleanup ldap_search_ext_s ldap_search_init_page ldap_search_init_page ldap_search_init_page ldap_search_s ldap_search_s ldap_search_st ldap_search_st ldap_set_option GetOpenCardName GetOpenCardName SCardDlgExtendedError SCardUIDlgSelectCard SCardUIDlgSelectCard SCardListInterfaces SCardSetCardTypeProviderName NPLoadNameSpaces NPGetResourceParent NPAddConnection NPEnumResource NPGetResourceInformation EnumProtocols gethostbyname GetAddressByame GetNameByType GetTypeByName GetService SetService WinVerifyTrust CryptCATGetAttrInfo CryptCATCDFClose CryptCATCatalogInfoFromContext CryptCATAdminEnumCatalogFromHash CryptCATAdminCalcHashFromFileHandle CryptCATAdminReleaseCatalogContext CryptCATAdminReleaseContext CryptCATAdminAcquireContext LsaGetLogonSessionData LsaIRegisterNotification LsaICancelNotification LsaLookupSids LsaLookupNames LsaNtStatusToWinError LsaLookupPrivilegeName PasswordChangeNotify InitializeChangeNotify EngLoadModule CreateBitmap CICreateCommand PdhOpenQuery PdhAddCounter PdhCollectQueryData PdhGetFormattedCounterValue PdhCloseQuery PdhAdd009Counter PdhAdd009Counter PdhCreateSQLTables PdhCreateSQLTables PdhBindInputDataSource PdhBrowseCounters SetSoftwareUpdateAdvertisementState GetSoftwareUpdateInfo ThunRTMain __vbaCopyBytes ProcCallEngine DllFunctionCall MethCallEngine GetMem2 GetMem4 GetMem8 GetMemStr GetMemVar GetMemObj PutMem2 PutMem4 PutMem8 PutMemStr PutMemVar PutMemObj SetMemVar SetMemObj rtcLeftBstr rtcLeftVar rtcRightBstr rtcRightVar rtcAnsiValueBstr rtcLowerCaseBstr rtcLowerCaseVar rtcTrimBstr rtcTrimVar rtcLeftTrimBstr rtcLeftTrimVar rtcRightTrimBstr rtcRightTrimVar rtcSpaceBstr rtcSpaceVar rtcUpperCaseBstr rtcUpperCaseVar rtcKillFiles rtcChangeDir rtcMakeDir rtcRemoveDir rtcChangeDrive rtcBstrFromAnsi rtcPackDate rtcPackTime rtcGetDateValue rtcGetTimeValue rtcGetDayOfMonth rtcGetHourOfDay rtcGetMinuteOfHour rtcGetMonthOfYear rtcGetPresentDate rtcGetSecondOfMinute rtcSetDateVar rtcSetDateBstr rtcSetTimeVar rtcSetTimeBstr rtcGetDayOfWeek rtcGetYear rtcGetMinuteOfHour rtcGetMonthOfYear rtcGetPresentDate rtcIsArray rtcIsError rtcRgb rtcFileLength rtcEndOfFile rtcHexVarFromVar rtcFileCopy rtcFileLen rtcGetFileAttr rtcSetFileAttr rtcR8ValFromBstr rtcSin rtcCos rtcTan rtcAtn rtcExp rtcLog rtcQBColor rtcRandomNext rtcRandomize rtcMsgBox rtcAppActivate rtcDoEvents rtcSendKeys rtcShell rtcArray __vbaVargUnk __vbaVargUnkAddref __vbaVerifyVarObj rtcGetErl rtcStringBstr rtcStringVar rtcVarBstrFromAnsi rtcGetDateBstr rtcGetDateVar rtcGetTimeBstr rtcGetTimeVar rtcVarStrFromVar rtcSqr rtcIMEStatus rtcLeftCharBstr rtcLeftCharVar rtcRightCharBstr rtcRightCharVar rtcInputCharCount __vbaWriteFile rtcGetHostLCID rtcCreateObject rtcGetObject rtcAppleScript rtcMidBstr rtcMidVar rtcInStr rtcInStr rtcMidCharBstr rtcMidCharVar rtcInStrChar rtBstrFromErrVar rtBoolFromErrVar rtCyFromErrVar rtI2FromErrVar rtI4FromErrVar rtR4FromErrVar rtR8FromErrVar rtcDateFromVar rtcVarFromVar rtcCVErrFromVar VarPtr rtcDir rtcCurrentDirBstr rtcCurrentDir rtcFreeFile rtcCompareBstr rtcBstrFromFormatVar rtcFixVar rtcDateAdd rtcEnvironVar rtcEnvironBstr rtcCommandBstr rtcCommandVar rtcSYD rtcPPMT rtcSLN rtcPV rtcRate rtcImmediateIf rtcErrObj rtUI1FromErrVar rtcVarDateFromVar _adj_fdiv_m32 rtcGetSetting rtcSaveSetting rtcDeleteSetting rtcGetAllSettings rtcByteValueBstr rtcBstrFromByte rtcVarBstrFromByte rtcCharValueBstr rtcBstrFromChar rtcVarBstrFromChar rtcSetCurrentCalendar rtcGetCurrentCalendar _adj_fdiv_m32i rtcFormatNumber2 rtcFormatCurrency rtcFormatPercent rtcFormatDateTime rtcWeekdayName rtcMonthName rtcFilter rtcInStrRev rtcJoin rtcSplit rtcReplace rtcStrReverse rtcRound rtcCallByNameE1B6 rtcCreateObject2 rtcStrConvVar2 Microsoft Virtual Basic Virtual Machine SQLConfigDriver SQLConfigDriver SQLCreateDataSource SQLCreateDataSourceEx SQLCreateDataSource SQLGetAvailableDrivers SQLGetConfigMode SQLGetInstalledDrivers SQLGetPrivateProfileString SQLGetTranslator SQLInstallDriver SQLInstallDriverEx SQLInstallDriverManager SQLInstallODBC SQLInstallTranslator SQLInstallTranslatorEx SQLInstallerError SQLLoadDataSourcesListBox SQLLoadDriverListBox SQLManageDataSources SQLPostInstallerError SQLReadFileDSN SQLRemoveDSNFromIni SQLRemoveDefaultDataSource SQLRemoveDriver SQLRemoveDriverManager SQLRemoveTranslator SQLSetConfigMode SQLValidDSN SQLWriteDSNToIni SQLWriteFileDSN SQLWritePrivateProfileString SelectTransDlg CloseODBCPerfData CollectODBCPerfData GetODBCSharedData ODBCInternalConnectW ODBCQualifyFileDSNW OpenODBCPerfData SQLConnect SQLCopyDesc SQLDrivers SQLEndTran SQLExecDirect SQLExecute SQLGetConnectAttr SQLGetConnectOption SQLGetData SQLGetFunctions SQLNativeSql SQLProcedures SQLSetConnectAttr SQLTables SQLTransact RequestDeviceWakeup EnumerateLocalComputerNames GetVDMCurrentDirectories GetProcessIdOfThread SetThreadPriorityBoost GetNamedPipeClientProcessId LocalShrink MapUserPhysicalPages SetComPlusPackageInstallStatus HeapWalk QueryMemoryResourceNotification GetSystemRegistryQuota SetProcessPriorityBoost InitOnceExecuteOnce RegisterApplicationRestart RegisterApplicationRecoveryCallback ExpandEnvironmentStrings GetSystemWindowsDirectory CreateSymbolicLink GetStdHandle ReadConsoleOutputAttribute CreateConsoleScreenBuffer SetConsoleActiveScreenBuffer SetConsoleScreenBufferSize SetConsoleWindowInfo ScrollConsoleScreenBuffer GetConsoleProcessList GetConsoleCursorInfo SetConsoleCursorPosition SetConsoleTitle GetConsoleMode GetConsoleCP BaseFlushAppcompatCache BaseCheckAppcompatCache ReOpenFile ExpungeConsoleCommandHistory RequestWakeupLatency SetMessageWaitingIndicator GetThreadSelectorEntry GetThreadPriorityBoost QueueUserWorkItem IsWow64Process LocalUnlock LocalLock LocalSize GlobalWire InterlockedPopEntrySList InterlockedFlushSList QueryDepthSList CreateTimerQueueTimer InterlockedExchangeAdd CancelWaitableTimer OpenWaitableTimer DeleteTimerQueue DeleteTimerQueueTimer InterlockedIncrement InterlockedDecrement VerifyVersionInfo GetNumberOfConsoleInputEvents WriteConsoleOutputAttribute GlobalCompact SearchPath SetTimeZoneInformation FlushConsoleInputBuffer ReadConsoleOutputCharacter ReadConsoleOutput SetFileApisToOEM _hread _hwrite _lclose _lcreat _llseek _lopen _lread _lwrite EnumCalendarInfoEx SetHandleCount GetLocaleInfo GetPrivateProfileSection GetPrivateProfileSectionNames GetPrivateProfileStruct GetProfileInt GetProfileSection GetProfileString GetVersion GlobalFix GlobalAlloc GlobalFlags GlobalUnlock GlobalLock GetStringType GlobalHandle IsBadReadPtr LoadModule LoadPackageLibrary LCMapString WritePrivateProfileStruct WriteProfileSection WriteProfileString SetSystemTimeAdjustment IsSystemResumeAutomatic GetSystemDirectory GetProcessShutdownParameters GetProcessPriorityBoost OpenJobObject SetInformationJobObject SetProcessWorkingSetSize SetProcessWorkingSetSizeEx GetProcessIoCounters SetSystemPowerState GetProcessTimes SetProcessShutdownParameters GetProcessShutdownParameters MapUserPhysicalPagesScatter AllocateUserPhysicalPages FatalExit GlobalUnWire CeipIsOptedIn IsNativeVhdBoot DnsHostnameToComputerName AddLocalAlternateComputerName SetCommMask SetCommState SetCommTimeouts GetCommModemStatus GetCommTimeouts CreateSymbolicLink CreateSymbolicLinkTransacted CreateHardLink ConvertThreadToFiber CreateFiber CreateFiberEx DelayLoadFailureHook DeleteFiber EnumSystemFirmwareTables GetPhysicallyInstalledSystemMemory GetSystemFirmwareTable GetConsoleScreenBufferInfo FillConsoleOutputAttribute GetCurrentProcessorNumber GetCurrentProcessorNumberEx GetOEMCP GetDevicePowerState FindActCtxSectionString FindFirstVolumeMountPoint FindNextVolumeMountPoint FreeLibraryWhenCallbackReturns FreeUserPhysicalPages GetWriteWatch GetVolumeInformation GetLargestConsoleWindowSize GetLogicalDriveStrings GetGeoInfo GetUserGeoID GetProcessVersion GetLogicalDrives GetProductInfo GetCurrentPackageId GetConsoleWindow GetProcessId GetModuleHandleEx GetModuleFilepame GetThreadTimes GetSystemInfo GetLocalTime GetSystemTime GetSystemTimePreciseAsFileTime SetSystemTime GetNativeSystemInfo CreateJobObject GetExitCodeThread GetProcessAffinityMask GetTimeZoneInformation GetThreadLocale GetProcessWindowStation GetUserObjectInformation GetUserObjectSecurity GetDesktopWindow CreateDesktop GetThreadDesktop GetConsoleAlias GetConsoleAliasExes GetConsoleAliasExesLength GetConsoleAliases GetConsoleAliasesLength GetConsoleCommandHistory GetConsoleCommandHistoryLength GetConsoleDisplayMode GetConsoleFontInfo GetConsoleFontSize GetConsoleHardwareState GetConsoleInputWaitHandle GetCurrentConsoleFont GetNumberOfConsoleFonts CreateThreadpool CreateThreadpoolCleanupGroup CreateThreadpoolIo CreateThreadpoolTimer CreateThreadpoolWait CreateThreadpoolWork CloseThreadpoolTimer SetThreadpoolTimer CloseThreadpoolWait SetThreadpoolWait WaitForThreadpoolWaitCallbacks SubmitThreadpoolWork WTSGetActiveConsoleSessionId WTHelperGetProvCertFromChain VerSetConditionMask FreeEnvironmentStrings VirtualLock VirtualUnlock WriteConsoleInput OpenThread ApplicationRecoveryInProgress ApplicationRecoveryFinished AreFileApisANSI AssignProcessToJobObject HeapSummary ConsoleMenuControl NlsGetCacheUpdateCount QueryWorkingSet QueryFullProcessImageName AddVectoredExceptionHandler AddVectoredContinueHandler EnumCalendarInfo EnumResourceLanguages EnumResourceTypes SetThreadLocale NetScheduleJobAdd EnumDeviceDrivers HeapWalk CloseWindowStation GetOverlappedResult CreateSemaphore ReleaseSemaphore ReadDirectoryChanges RegisterConsoleVDM VDMOperationStarted CreateWindowStation EnumWindowStations OpenWindowStation CloseDesktop CreateDesktopEx EnumDesktops EnumDesktopWindows OpenDesktop SwitchDesktop OpenInputDesktop AttachConsole AddConsoleAlias WriteConsole SetConsoleCP SetConsoleOutputCP WriteConsoleOutput ReadConsole ReadConsoleInput AllocConsole FreeConsole GenerateConsoleCtrlEvent GetConsoleTitle FillConsoleOutputCharacter CloseConsoleHandle SetConsoleCursorMode ConsoleSubst ExpungeConsoleCommandHistory InvalidateConsoleDIBits OpenConsole ShowConsoleCursor VerifyConsoleIoHandle DuplicateConsoleHandle GetConsoleInputExeName GetConsoleKeyboardLayoutName AddClipboardFormatListener ChangeClipboardChain CloseClipboard CountClipboardFormats EmptyClipboard EnumClipboardFormats GetClipboardData GetClipboardFormatName GetClipboardOwner GetClipboardSequenceNumber GetClipboardViewer GetOpenClipboardWindow GetPriorityClipboardFormat GetUpdatedClipboardFormats IsClipboardFormatAvailable OpenClipboard RegisterClipboardFormat RemoveClipboardFormatListener RegisterClipboardFormat ResolveDelayLoadedAPI ResolveDelayLoadsFromDll PackDDElParam DdeAccessData DdeUnaccessData DdeEnableCallback ImpersonateDdeClientWindow DdeCmpStringHandles UnpackDDElParam FreeDDElParam ReuseDDElParam LockWorkStation LockSetForegroundWindow WinHelp RedrawWindow ShowOwnedPopups CallWindowProc RegisterClass CreateWindow CreateWindowEx UpdateWindow RegisterClassEx UnregisterClass GetWindowTextLength GetWindow ShowWindow MoveWindow DestroyWindow BringWindowToTop keybd_event mouse_event CreateAcceleratorTable DestroyAcceleratorTable LoadKeyboardLayout UnregisterHotKey SendInput SetActiveWindow SetFocus CopyAcceleratorTable GetDoubleClickTime EnumThreadWindows BroadcastSystemMessage BroadcastSystemMessageEx GetInputState GetMessageExtraInfo GetMessage GetMessagePos GetMessageTime GetQueueStatus PeekMessage PeekConsoleInput PostMessage PostQuitMessage PostThreadMessage InSendMessage InSendMessageEx RegisterWindowMessage ReplyMessage SendAsyncProc SendMessageTimeout SendMessage SendMessageCallback SendNotifyMessage WaitMessage GetKeyboardState GetKeyboardType GetKeyNameText GetCapture GetGUIThreadInfo BlockInput ChangeWindowMessageFilter ChangeWindowMessageFilterEx LockWorkStation BackupRead BackupSeek BackupWrite CreateTapePartition GetTapeParameters GetTapePosition GetTapeStatus PrepareTape WriteTapemark GetLogicalProcessorInformation OpenEvent ResetEvent GetSystemPowerStatus IsValidLanguageGroup EncodePointer DecodePointer EraseTape GetTapeStatus RtlIpv4StringToAddress RtlCaptureStackBackTrace RegisterEventSource RegisterHotKey GetProcessMitigationPolicy GetProcessDEPPolicy QueryPerformanceFrequency HeapQueryInformation InterlockedExchange InterlockedExchange16 InterlockedExchange64 InterlockedExchangePointer InterlockedPushEntrySList GetLogicalProcessorInformationEx SetThreadStackGuarantee SetEnvironmentVariable GetExitCodeThread SetProcessAffinityMask SetThreadAffinityMask SetEvent SetMessageExtraInfo SetKeyboardState UnloadKeyboardLayout SetClipboardData SetClipboardViewer SetConsoleIcon GetConsoleOutputCP SetConsoleInputExeName SetConsoleCursor SetConsoleCtrlHandler SetConsoleMode SetThreadDesktop SetUserObjectInformation SetUserObjectSecurity SetProcessWindowStation SetCurrentDirectory SetComputerName SetComputerNameEx SetDefaultDllDirectories RemoveDllDirectory SetFirmwareEnvironmentVariable SetFirmwareEnvironmentVariableEx SetConsoleDisplayMode SetConsoleFont SetConsoleHardwareState SetConsoleKeyShortcuts SetConsoleMaximumWindowSize SetConsoleMenuClose SetConsoleNumberOfCommands SetConsolePalette SetLastConsoleEventActive SetDllDirectory SetProcessDEPPolicy SetLastError SetThreadPriority SetErrorMode SetVDMCurrentDirectories RegisterWowBaseHandlers ZwCreateThreadEx ZwCreateThread ZwProtectVirtualMemory ZwQueueApcThread ZwDelayExecution SetCPGlobal BaseInitAppcompatCacheSupport SetStdHandleEx CheckElevationEnabled CheckAllowDecryptedRemoteDestinationPolicy CheckElevation CheckForReadOnlyResource CheckForReadOnlyResourceFilter Basep8BitStringToDynamicUnicodeString BaseGetNamedObjectDirectory BaseFormatTimeOut RtlAcquireResourceExclusive RtlQueueApcWow64Thread RtlAcquireResourceShared RtlDeleteResource RtlDumpResource RtlInitializeResource RtlLockCurrentThread RtlReleaseResource RtlTraceDatabaseAdd RtlTraceDatabaseCreate RtlTraceDatabaseDestroy RtlTraceDatabaseEnumerate RtlTraceDatabaseFind RtlTraceDatabaseLock RtlTraceDatabaseUnlock RtlTraceDatabaseValidate RtlUnlockCurrentThread AddCommasExport AppCompat_RunDLL CheckStagingArea CreateAutoListParser CreateInfoTipFromItem CreateInfoTipFromItem2 DisconnectWindowsDialog GetAppPathFromLink GetSqmableFileName Int64ToString IsElevationRequired IsSearchEnabled LargeIntegerToString LinkWindow_RegisterClass PathGetPathDisplayName PathIsTemporary RefreshBrowserLayout RunAsNewUser_RunDLL DesktopHasWatermarkText FrostCrashedWindow GetSendMessageReceiver GetWindowCompositionAttribute GhostWindowFromHungWindow HungWindowFromGhostWindow IsServerSideWindow IsSETEnabled IsThreadDesktopComposited IsWindowInDestroy NtUserSetChildWindowNoActivate SetWindowCompositionAttribute DupWideToAnsi IStream_WriteStrLong MapWin32ErrorToSTG ModeToCreateFileFlags PathUnExpandEnvStringsForUserW PathUnExpandSystemEnvStringsW QuerySourceCreateFromKey QuerySourceCreateFromKeyEx SetLocalPrimaryComputerName BaseQueryModuleData ExitVDM RemoveVectoredExceptionHandler RemoveVectoredContinueHandler RealShellExecute RealShellExecuteEx K32EnumProcessModules K32EnumProcesses K32GetModuleBaseName K32GetModuleFileNameEx K32GetProcessImageFileName K32GetProcessMemoryInfo SetThreadExecutionState SetStdHandle SwitchToFiber GetSystemDEPPolicy DisableThreadLibraryCalls RaiseException GetExceptionCode GetExceptionInformation RestoreLastError GetEnvironmentVariable GetOverlappedResult GetSystemWow64Directory GetDriveType GetDiskFreeSpace GetDiskFreeSpaceEx VirtualFreeEx ProcessIdToSessionId GetProcessWorkingSetSize BuildCommDCBAndTimeouts FindVolumeMountPointClose FatalAppExit ContinueDebugEvent DebugBreakProcess DebugActiveProcessStop SetDebugErrorLevel WaitForDebugEvent RegisterWaitForSingleObject ChangeTimerQueueTimer UnregisterWait UnregisterWaitEx DebugActiveProcess DebugBreak DuplicateHandle OpenSemaphore InitializeSListHead DefineDosDevice GetPrivateProfileInt FreeLibrary FreeLibraryAndExitThread AddAtom DeleteAtom FormatMessage FindAtom GetAtomName GlobalAddAtom GlobalDeleteAtom GlobalFindAtom GlobalGetAtomName InitAtomTable GetComputerName GetComputerNameEx IsProcessorFeaturePresent WritePrivateProfileSection InitializeCriticalSectionAndSpinCount TryEnterCriticalSection InitializeCriticalSection InitializeCriticalSectionEx CreateEventEx CreateSemaphoreEx CreateEvent ZwCreateEvent NtNotifyChangeDirectoryFile ZwNotifyChangeDirectoryFile PulseEvent MsgWaitForMultipleObjects MsgWaitForMultipleObjectsEx WaitForMultipleObjects WaitForMultipleObjectsEx WaitForSingleObject WaitForSingleObjectEx SignalObjectAndWait CreateWaitableTimer Sleep SleepEx InitializeProcThreadAttributeList UpdateProcThreadAttribute DeleteProcThreadAttributeList GetFirmwareEnvironmentVariable CreateMailslot GetMailslotInfo SetMailslotInfo SetVolumeLabel FlushInstructionCache FlushProcessWriteBuffers IsDebuggerPresent CheckRemoteDebuggerPresent GetThreadContext GetThreadId Wow64GetThreadContext Wow64SetThreadContext SuspendThread GetThreadPriority SetPriorityClass GetPriorityClass QueryPerformanceCounter DeleteTimerQueueEx QuerySecurityAccessMask QueryServiceObjectSecurity GetTickCount GetTickCount64 SetThreadContext QueueUserAPC RtlInitializeSid RtlIdentifierAuthoritySid RtlLengthRequiredSid RtlSubAuthoritySid RtlQueryInformationAcl RtlGetAce RtlCopySid RtlAddGrowableFunctionTable RtlDeleteGrowableFunctionTable RtlGrowFunctionTable RtlAddFunctionTable RtlCaptureContext RtlDeleteFunctionTable RtlInstallFunctionTableCallback RtlRestoreContext RtlLookupFunctionEntry RtlVirtualUnwind HeapCompact QueryDosDevice GetBinaryType PostQueuedCompletionStatus GetQueuedCompletionStatus FindExecutable FindFirstChangeNotification FindNextChangeNotification FindCloseChangeNotification LocalFlags CopyMemory GetProcessHeaps RtlGetProcessHeaps GlobalMemoryStatus GetLargePageMinimum GlobalMemoryStatusEx DeleteVolumeMountPoint SetVolumeMountPoint FindFirstVolume FindNextVolume FindVolumeClose GetVolumeNameForVolumeMountPoint GetVolumePathName GetVolumePathNamesForVolumeName GetShortPathName GlobalUnfix CancelDeviceWakeupRequest GetShellWindow RtlLeaveCriticalSection RtlEnterCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection InterlockedCompareExchange ReleaseSRWLockShared AcquireSRWLockShared ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeSRWLock DnsQueryEx DnsQuery_ InternetFindNextFile InternetGetCookieEx InternetGetLastResponseInfo commands httpshots formgrabber redirects httpinjects GetQueueStatus GetLastActivePopup DownloadRunModId DownloadUpdateMain Inject32End Inject32Normal Inject32Start InjectApcRoutine InjectNormRoutine SelfDelete SendLogs WriteConfigString DownloadRunExeId DownloadRunExeUrl TestingServ AttachThreadInput ObjectDeleteAuditAlarm ObjectPrivilegeAuditAlarm AuditComputeEffectivePolicyBySid AuditComputeEffectivePolicyByToken AuditEnumerateCategories AuditEnumeratePerUserPolicy AuditEnumerateSubCategories AuditFree AuditLookupCategoryGuidFromCategoryId AuditLookupCategoryIdFromCategoryGuid AuditLookupCategoryName AuditLookupSubCategoryName AuditQueryGlobalSacl AuditQueryPerUserPolicy AuditQuerySecurity AuditQuerySystemPolicy AuditSetGlobalSacl AuditSetPerUserPolicy AuditSetSecurity AuditSetSystemPolicy AuthzAccessCheck AuthzAccessCheckCallback AuthzAddSidsToContext AuthzCachedAccessCheck AuthzComputeGroupsCallback AuthzEnumerateSecurityEventSources AuthzFreeAuditEvent AuthzFreeCentralAccessPolicyCache AuthzFreeCentralAccessPolicyCallback AuthzFreeContext AuthzFreeGroupsCallback AuthzFreeHandle AuthzFreeResourceManager AuthzGetCentralAccessPolicyCallback AuthzGetInformationFromContext AuthzInitializeCompoundContext AuthzInitializeContextFromAuthzContext AuthzInitializeContextFromSid AuthzInitializeContextFromToken AuthzInitializeObjectAccessAuditEvent AuthzInitializeObjectAccessAuditEvent2 AuthzInitializeRemoteResourceManager AuthzInitializeResourceManager AuthzInitializeResourceManagerEx AuthzInstallSecurityEventSource AuthzModifyClaims AuthzModifySecurityAttributes AuthzModifySids AuthzOpenObjectAudit AuthzRegisterCapChangeNotification AuthzRegisterSecurityEventSource AuthzReportSecurityEvent AuthzReportSecurityEventFromParams AuthzSetAppContainerInformation AuthzUninstallSecurityEventSource AuthzUnregisterCapChangeNotification AuthzUnregisterSecurityEventSource bind BuildExplicitAccessWithName BuildImpersonateExplicitAccessWithName BuildImpersonateTrustee BuildSecurityDescriptor BuildTrusteeWithName BuildTrusteeWithObjectsAndName BuildTrusteeWithObjectsAndSid BuildTrusteeWithSid CheckTokenCapability CheckTokenMembership CheckTokenMembershipEx connect ConvertSecurityDescriptorToStringSecurityDescriptor ConvertSidToStringSid ConvertStringSecurityDescriptorToSecurityDescriptor ConvertStringSidToSid ConvertToAutoInheritPrivateObjectSecurity CopySid CreateEnvironmentBlock RegDeleteTree RegGetValue RegCloseKey RegUnLoadKey RegReplaceKey RegFlushKey RegCopyTree RegLoadKey RegEnumKey RegConnectRegistry RegDeleteKey RegDeleteValue RegEnumKeyEx RegGetKeySecurity RegOpenKey RegOpenKeyTransacted RegCreateKeyTransacted RegDeleteKeyTransacted RegDeleteKeyEx RegSetKeySecurity RegSetValue RegSetValueEx GetKeyValue RegNotifyChangeKeyValue RegRestoreKey RegOverridePredefKey RegSetValue RegQueryValue RegOpenKey RegCreateKeyEx RegCreateKey RegSaveKey RegDisablePredefinedCache RegDisablePredefinedCacheEx RegDisableReflectionKey RegEnableReflectionKey RegQueryMultipleValues RegDisablePredefinedCacheE RegEnumValue RegOpenCurrentUser RegOpenKeyEx RegOpenUserClassesRoot RegQueryInfoKey RegQueryValueEx RegSaveKeyEx SHDeleteKey SHDeleteValue SHDeleteEmptyKey SHOpenRegStream2 SHOpenRegStream SHRegGetBoolValueFromHKCUHKLM SHRegGetValue SHRegGetValueFromHKCUHKLM SHReplaceFromPropSheetExtArray SHQueryInfoKey SHQueryValueEx SHRegCloseUSKey SHRegCreateUSKey CreateProcessWithToken CreateProcess CreateProcessInternal CreateProcessAsUser CreateProcessWithLogon CreateRemoteThread CreateRestrictedToken GetNumaHighestNodeNumber GetNumaAvailableMemoryNode CreateThread _beginthread _beginthreadex _endthread _endthreadex ResumeThread NtAlertResumeThread IsProcessInJob TerminateProcess ExitProcess ExitThread ShellExecute ShellExecuteEx WinExec GetCurrentProcess PsGetCurrentProcess OpenProcessToken OpenThreadToken OpenProcess WriteProcessMemory GetCurrentProcessId GetProcessMemoryInfo GetWindowThreadProcessId Toolhelp32ReadProcessMemory CreateToolhelp32Snapshot CloseToolhelp32Snapshot SwitchToThread SuspendThread Wow64SuspendThread GetExitCodeProcess TerminateThread Process32First Process32Next Thread32First Thread32Next Module32First Module32Next CertConfigureTrust CertOpenSystemStore CertTrustCertPolicy CertTrustInit CryptCreateHash CryptHashData BCryptDestroyHash BCryptHashData BCryptFinishHash BCryptVerifySignature BCryptImportKeyPair BCryptCreateHash CryptGetHashParam CryptDestroyHash CryptReleaseContext CryptDecrypt CryptEncrypt CryptAcquireContext CryptGenRandom CryptDestroyKey CryptGetKeyParam CryptVerifySignature CryptImportKey CryptEnumProviders CryptEnumProviderTypes CryptDeriveKey CryptSetProvider CryptSetProviderEx CryptGetDefaultProvider CryptDuplicateHash CryptExportKey CryptGenKey CryptGetUserKey CryptContextAddRef CryptGetProvParam CryptDuplicateKey CryptSetKeyParam CryptSetProvParam CryptSetHashParam EncryptFile DecryptFile EncryptedFileKeyInfo EncryptionDisable CloseEncryptedFileRaw OpenEncryptedFileRaw ReadEncryptedFileRaw WriteEncryptedFileRaw DuplicateEncryptionInfoFile SetUserFileEncryptionKey HeapSize HeapAlloc HeapReAlloc HeapDestroy HeapFree HeapCreate HeapSetInformation VirtualAlloc VirtualAllocEx VirtualAllocExNuma VirtualFree VirtualProtect VirtualProtectEx GetProcessMemoryInfo ReadProcessMemory GetProcessHeap LocalAlloc LocalFree LocalReAlloc GlobalFree GlobalReAlloc VirtualQuery VirtualQueryEx Heap32ListFirst EnumSystemLocales EnumSystemLocalesEx Heap32ListNext Heap32Next Heap32First FindNextFile FindFirstFile FindFirstFileEx FindFirstFileTransacted FindFirstFileNameTransacted FindFirstFileName FindNextFileName FindNextStream FindFirstStream FindClose RemoveDirectory CreateDirectory CreateDirectoryEx CreateFile CreateFile2 CopyFile CopyFileEx DeleteFile WriteFile WriteAllBytes WriteAllText OpenFileById WriteFileEx FlushFileBuffers WriteFileGather CreateFileMapping DosDateTimeToFileTime FileTimeToDosDateTime FileTimeToLocalFileTime FileTimeToSystemTime FlushViewOfFile GetCPFileNameFromRegistry CopyLZFile GetCompressedFileSize GetFileAttributes GetFileAttributesEx CompareFileTime SetFileInformationByHandle GetFileSize GetFileSizeEx GetFileTime GetFileType GetSystemTimeAsFileTime GetTempFileName LZCloseFile LZCreateFile LZOpenFile LocalFileTimeToFileTime LockFile LockFileEx UnlockFile MapViewOfFile MapViewOfFileEx ReadFileScatter MoveFile MoveFileEx MoveFileWithProgress MoveFileTransacted DeleteFileTransacted CopyFileTransacted SetFileAttributesTransacted OpenDataFile OpenFile OpenFileMapping OpenProfileUserMapping PrivCopyFileEx PrivMoveFileIdentity ReadFile ReadFileEx ReplaceFile SetFilePointerEx SetFilePointer SetEndOfFile SetFileAttributes SetFileShortName SetFileSecurity SetFileTime SetFileValidData SystemTimeToFileTime TerminateJobObject GetFullPathName UnlockFileEx UnmapViewOfFile GetCurrentDirectory GetLastError GetFileSecurity GetFileInformationByHandle GetFileInformationByHandleEx GetTempPath CreateMutex CreateMutexEx OpenMutex ReleaseMutex CallNamedPipe ConnectNamedPipe CreateNamedPipe CreatePipe DisconnectNamedPipe GetNamedPipeHandleState GetNamedPipeInfo PeekNamedPipe SetNamedPipeHandleState TransactNamedPipe WaitNamedPipe StartServiceCtrlDispatcher GetServiceDisplayName ControlService LsaQueryTrustedDomainInfoByName LsaEnumerateTrustedDomainsEx LsaRemoveAccountRights LsaEnumerateLogonSessions LsaCallAuthenticationPackage LsaUnregisterPolicyChangeNotification FindResource LockResource FindResourceEx BeginUpdateResource EndUpdateResource LoadResource SizeofResource FreeResource EnumResourceNames UpdateResource DefWindowProc EnumWindows EnumChildWindows EnumThreadWindows AccessCheck AccessCheckAndAuditAlarm AccessCheckByType AccessCheckByTypeAndAuditAlarm AccessCheckByTypeResultList AccessCheckByTypeResultListAndAuditAlarm AccessCheckByTypeResultListAndAuditAlarmByHandle AddAccessAllowedAce AddAccessAllowedAceEx AddAccessAllowedObjectAce AddAccessDeniedAce AddAccessDeniedAceEx AddUsersToEncryptedFile AddAccessDeniedObjectAce AddAce AddAuditAccessAce AddAuditAccessAceEx AddAuditAccessObjectAce AddConditionalAce AddMandatoryAce AddResourceAttributeAce AddScopedPolicyIDAce AdjustTokenGroups AdjustTokenPrivileges AllocateAndInitializeSid AllocateLocallyUniqueId AreAllAccessesGranted AreAnyAccessesGranted LookupAccountName LookupAccountSid LookupPrivilegeDisplayName LookupPrivilegeName LookupPrivilegeValue LookupSecurityDescriptorParts CreatePrivateObjectSecurity CreatePrivateObjectSecurityEx CreatePrivateObjectSecurityWithMultipleInheritance CreateSecurityPage CreateWellKnownSid DeleteAce DestroyEnvironmentBlock DestroyPrivateObjectSecurity DeviceIoControl DllCanUnloadNow DllGetClassObject DllInstall DllRegisterServer DllRegisterServerEx DllUnregisterServer DllUnregisterServerEx DSCreateISecurityInfoObject DSCreateISecurityInfoObjectEx DSCreateSecurityPage DSEditSecurity DuplicateToken DuplicateTokenEx EditSecurity EditSecurityAdvanced EnableExecuteProtectionSupport FindWindow FindWindowEx EqualDomainSid EqualPrefixSid EqualSid FindFirstFreeAce FreeInheritedFromArray FreeSid GetAccessSecurityDescriptor GetAce GetAclInformation GetAdaptersInfo getaddrinfo GetAppContainerNamedObjectPath TranslateAccelerator LoadAccelerators GetAsyncKeyState GetKBCodePage GetKeyboardLayout GetKeyboardLayoutList GetKeyboardLayoutName GetFocus GetAuditedPermissionsFromAcl GetCalendarInfo GetCommandLine GetConfigurationSecurityDescriptor GetCurrentThread GetCurrentThreadId GetEffectiveRightsFromAcl GetEnvironmentStrings GetExplicitEntriesFromAcl GetForegroundWindow GetWindowPlacement SetWindowPos GetInheritanceSource GetKernelObjectSecurity GetKeyState GetMouseMovePointsEx GetLengthSid GetModuleBaseName GetModuleInformation GetModuleFileName GetModuleFilenameEx GetModuleHandle GetMonitorInfo GetMultipleTrustee GetMultipleTrusteeOperation GetNamedSecurityInfo GetPrivateProfileString GetPrivateObjectSecurity GetProcAddress GetSecurityDescriptorControl GetSecurityDescriptorDacl GetSecurityDescriptorGroup GetSecurityDescriptorLength GetSecurityDescriptorOwner GetSecurityDescriptorRMControl GetSecurityDescriptorSacl ZwSetSecurityObject ZwCreateKey SeCaptureSecurityDescriptor GetSecurityInfo GetSidIdentifierAuthority GetSidLengthRequired GetSidSubAuthority GetSidSubAuthorityCount GetStartupInfo GetSystemDefaultLangId GetTokenInformation GetTrusteeForm GetTrusteeName GetTrusteeType GetUserName GetVersionEx GetWindowsAccountDomainSid GetWindowsDirectory SystemTimeToTzSpecificLocalTime ImmGetContext ImpersonateAnonymousToken ImpersonateLoggedOnUser ImpersonateNamedPipeClient ImpersonateSelf inet_addr inet_pton InitializeAcl InitializeSecurityDescriptor InitializeSid InternetCloseHandle InternetConnect InternetOpen InternetOpen InternetOpenUrl InternetQueryDataAvailable InternetQueryOption InternetReadFile InternetReadFileEx InternetSetCookie InternetSetOption InternetWriteFile IsNTAdmin IsTokenRestricted IsValidAcl IsValidSecurityDescriptor IsValidSid IsWellKnownSid IsWindowVisible IsWindow EnableWindow GetActiveWindow IsWoW64Process WaitForInputIdle JournalPlaybackProc LoadLibrary LoadLibraryEx AddDllDirectory LoadUserProfile longjmp PsGetVersion RtlGetVersion NtBuildNumber MakeSelfRelativeSD MapGenericMask MapVirtualKey MmGetSystemRoutineAddress MmCreateMdl MmGetSystemAddressForMdl MmIsThisAnNtAsSystem MmMapLockedPages MonitorEnumProc MonitorFromPoint MonitorFromRect MonitorFromWindow ObjectCloseAuditAlarm ObjectDeleteAuditAlarm ObjectOpenAuditAlarm ObjectPrivilegeAuditAlarm OleInitialize OutputDebugString PrivilegeCheck NtPrivilegeCheck NtQueryValueKey PrivilegedServiceAuditAlarm RasEnumEntries recv RevertToSelf RtlConvertSidToUnicodeString RtlCreateRegistryKey RtlWriteRegistryValue RtlPcToFileHeader send SetAccessSecurityDescriptor SetAclInformation SetConfigurationSecurityDescriptor SetEntriesInAcl setjmp SetKernelObjectSecurity SetLaunchSecurityDescriptor SetNamedSecurityInfo SetPrivateObjectSecurity SetPrivateObjectSecurityEx SetSecurityAccessMask SetSecurityDescriptorControl SeSetSecurityDescriptorInfo SetSecurityDescriptorDacl SetSecurityDescriptorGroup SetSecurityDescriptorOwner SetSecurityDescriptorRMControl SetSecurityDescriptorSacl SetSecurityInfo SetServiceObjectSecurity SetThreadToken SetTokenInformation SetUnhandledExceptionFilter SfcTerminateWatcherThread StgCreateDocfile StgCreateStorageEx StgOpenStorage system TlsAlloc TlsFree TlsGetValue TlsSetValue TreeResetNamedSecurityInfo TreeSetNamedSecurityInfo UnhandledExceptionFilter UnloadUserProfile LocalCompact URLDownloadToFile Wow64RevertWow64FsRedirection Wow64DisableWow64FsRedirection WriteConsoleOutputCharacter SetConsoleTextAttribute SetConsoleCursorInfo WritePrivateProfileString WSAStartup PssCaptureSnapshot PssDuplicateSnapshot PssFreeSnapshot PssQuerySnapshot PssWalkMarkerCreate PssWalkMarkerFree PssWalkMarkerGetPosition PssWalkMarkerRewind PssWalkMarkerSeek PssWalkMarkerSeekToBeginning PssWalkMarkerSetPosition PssWalkMarkerTell PssWalkSnapshot DeviceProblemText DeviceProblemWizard DeviceCreateHardwarePage DeviceProperties SHUnlockShared SHEnumKeyEx SHEnumValue SHGetValue SHGetUnreadMailCount PathAddBackslash PathQuoteSpaces AssocCreate UrlHash UrlIsNoHistory UrlFixup StopWatchFlush StopWatchMode ConnectToConnectionPoint MLFreeLibrary MLHtmlHelp MLLoadLibrary MLWinHelp OutputDebugStringWrap SHCreateMemStream GetAcceptLanguages GetAcceptLanguages IsCharSpace PathRemoveExtension PathRemoveFileSpec PathCombine PathFileExists PathFindExtension PathGetDriveNumber PathFindFileName PathRenameExtension PathIsDirectory PathIsDirectoryEmpty kernel32.FindFirstFileW kernel32.FindResourceW kernel32.EnumResourceNames user32.FindWindow StrCmpIC IUnknown_QueryService IStream_Read IStream_Write IStream_Reset IStream_Size QISearch AssocQueryString PathIsURL UrlEscape SHCopyKey SHRegQueryInfoUSKey UrlCreateFromPath ShellMessageBox IStream_ReadPidl IStream_WritePidl IStream_Copy IStream_ReadStr IStream_WriteStr FreeCryptProvFromCert FreeCryptProvFromCertEx GetCryptProvFromCert GetCryptProvFromCertEx PvkFreeCryptProv PvkGetCryptProv PvkPrivateKeyAcquireContext PvkPrivateKeyAcquireContextFromMemory PvkPrivateKeyLoad PvkPrivateKeyLoadFromMemory PvkPrivateKeyReleaseContext PvkPrivateKeySave PvkPrivateKeySaveToMemory SignError SignerAddTimeStampResponse SignerAddTimeStampResponseEx SignerCreateTimeStampRequest SignerFreeSignerContext SignerSign SignerSignEx SignerTimeStamp SignerTimeStampEx SignerTimeStampEx2 SpcGetCertFromKey SpLsaModeInitialize SpUserModeInitialize CscSearchApiGetInterface URLOpenBlockingStream URLOpenPullStream URLOpenStream ZonesReInit URLDownloadToCacheFile URLOpenBlockingStream WriteHitLogging IsLoggingEnabled UrlMkSetSessionOption ObtainUserAgentString IsValidURL CoInternetCreateZoneManager WriteHitLogging CreateURLMoniker CreateURLMonikerEx CoInternetCreateSecurityManager RegisterBindStatusCallback HlinkClone HlinkCreateBrowseContext HlinkCreateExtensionServices HlinkCreateFromData HlinkCreateFromMoniker HlinkCreateFromString HlinkCreateShortcut HlinkCreateShortcutFromMoniker HlinkCreateShortcutFromString HlinkGetSpecialReference HlinkGetValueFromParams HlinkGoBack HlinkGoForward HlinkIsShortcut HlinkNavigate HlinkNavigateMoniker HlinkNavigateString HlinkNavigateToStringReference HlinkOnNavigate HlinkOnRenameDocument HlinkParseDisplayName HlinkPreprocessMoniker HlinkQueryCreateFromData HlinkResolveMonikerForData HlinkResolveShortcut HlinkResolveShortcutToMoniker HlinkResolveShortcutToString HlinkResolveStringForData HlinkSetSpecialReference HlinkSimpleNavigateToMoniker HlinkSimpleNavigateToString HlinkTranslateURL HlinkUpdateStackItem CreateUserProfileEx GetUserProfileDirectory GetAppliedGPOList GetAllUsersProfileDirectory GetProfilesDirectory CreateProfile DeleteProfile ExpandEnvironmentStringsForUser ForceSyncFgPolicy FreeGPOList RsopResetPolicySettingStatus RsopSetPolicySettingStatus RefreshPolicy UnregisterGPNotification IsNetworkAlive DeltaNotify InitializeChangeNotify SceConfigureConvertedFileSecurity SceGenerateGroupPolicy SceNotifyPolicyDelta SceOpenPolicy SceProcessSecurityPolicyGPO SceProcessSecurityPolicyGPOEx SceSysPrep SceAddToNameList SceAddToNameStatusList SceAddToObjectList SceAnalyzeSystem SceAppendSecurityProfileInfo SceBrowseDatabaseTable SceCloseProfile SceCommitTransaction SceCompareNameList SceCompareSecurityDescriptors SceConfigureSystem SceCopyBaseProfile SceCreateDirectory SceDcPromoCreateGPOsInSysvol SceDcPromoCreateGPOsInSysvolEx SceDcPromoteSecurity SceDcPromoteSecurityEx SceEnforceSecurityPolicyPropagation SceEnumerateServices SceFreeMemory SceFreeProfileMemory SceGenerateRollback SceGetAnalysisAreaSummary SceGetAreas SceGetDatabaseSetting SceGetDbTime SceGetObjectChildren SceGetObjectSecurity SceGetScpProfileDescription SceGetSecurityProfileInfo SceGetServerProductType SceGetTimeStamp SceIsSystemDatabase SceLookupPrivRightName SceOpenProfile SceRegisterRegValues SceRollbackTransaction SceSetDatabaseSetting SceSetupBackupSecurity SceSetupConfigureServices SceSetupGenerateTemplate SceSetupMoveSecurityFile SceSetupRootSecurity SceSetupSystemByInfName SceSetupUnwindSecurityFile SceSetupUpdateSecurityFile SceSetupUpdateSecurityKey SceSetupUpdateSecurityService SceStartTransaction SceSvcConvertSDToText SceSvcConvertTextToSD SceSvcFree SceSvcGetInformationTemplate SceSvcQueryInfo SceSvcSetInfo SceSvcSetInformationTemplate SceSvcUpdateInfo SceUpdateObjectInfo SceUpdateSecurityProfile SceWriteSecurityProfileInfo OleDuplicateData CoTaskMemFree CoTaskMemAlloc CLIPFORMAT_UserMarshal OleQueryLinkFromData CoRegisterPSClsid CoDosDateTimeToFileTime CoGetCurrentProcess StgOpenAsyncDocfileOnIFillLockBytes OleRegEnumVerbs OleIsCurrentClipboard StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes UrlUnescape CommandLineToArgv CoFreeUnusedLibraries CoFreeUnusedLibrariesEx OleLoad GetRunningObjectTable CoFileTimeNow SNB_UserFree CoRegisterChannelHook CoGetInstanceFromFile CoInitializeSecurity CoSetProxyBlanket CLSIDFromString StringFromGUID2 CoInitialize CoInitializeEx CoUninitialize CoUninitializeEx CoCreateInstance CoGetClassObject CoLoadLibrary CoCreateGuid CoQueryClientBlanket CoIsOle1Class CoAddRefServerProcess CoCreateInstanceEx CoReleaseServerProcess OleRun OleInitialize OleUninitialize OleRegEnumFormatEtc OleFlushClipboard OleSetClipboard OleGetClipboard connect recv send socket accept bind closesocket connect getpeervalue getsockvalue getsockopt htonl htons ioctlsocket inet_addr inet_ntoa listen ntohl ntohs recv recvfrom select send sendto setsockopt shutdown socket WSApSetPostRoutine FreeAddrInfoEx FreeAddrInfoExW FreeAddrInfo GetAddrInfoExA GetAddrInfoExCancel GetAddrInfoExOverlappedResult GetAddrInfoExW GetAddrInfoW GetHostNameW GetNameInfoW InetNtopW InetPtonW SetAddrInfoExA SetAddrInfoExW WPUCompleteOverlappedRequest WPUGetProviderPathEx WSAAccept WSAAddressToStringA WSAAddressToStringW WSAAdvertiseProvider WSACloseEvent WSAGetOverlappedResult WSAConnect WSAConnectByList WSAConnectByNameA WSAConnectByNameW WSACreateEvent WSAEventSelect gethostbyaddr gethostbyvalue getprotobyvalue getprotobynumber getservbyvalue getservbyport gethostvalue WSAInstallServiceClass WSAIoctl WSAJoinLeaf WSALookupServiceBegin WSALookupServiceEnd WSALookupServiceNext WSANSPIoctl WSANtohl WSANtohs WSAProviderConfigChange WSARecv WSARecvDisconnect WSARecvFrom WSARemoveServiceClass WSAResetEvent WSASend WSASendDisconnect WSASendTo WSASetEvent WSASetService WSASocket WSASocket WSAStringToAddress WSAWaitForMultipleEvents WSAEnumNetworkEvents WSCDeinstallProvider WSCEnableNSProvider WSCEnumProtocols WSCGetProviderPath WSCInstallvalueSpace WSCInstallProvider WSCUnInstallvalueSpace WSCUpdateProvider WSCWritevalueSpaceOrder WSCWriteProviderOrder freeaddrinfo getaddrinfo getvalueinfo WSAAsyncSelect WSAAsyncGetHostByAddr WSAAsyncGetHostByvalue WSAAsyncGetProtoByNumber WSAAsyncGetProtoByvalue WSAAsyncGetServByPort WSAAsyncGetServByvalue WSACancelAsyncRequest WSASetBlockingHook WSAUnhookBlockingHook WSAGetLastError WSASetLastError WSACancelBlockingCall WSAIsBlocking WSAStartup WSACleanup __WSAFDIsSet WEP accept bind closesocket connect getpeername getsockname getsockopt htonl htons inet_addr inet_ntoa ioctlsocket listen ntohl ntohs recv recvfrom select send sendto setsockopt shutdown socket gethostbyaddr gethostbyname getprotobyname getprotobynumber getservbyname getservbyport gethostname WSAAsyncSelect WSAAsyncGetHostByAddr WSAAsyncGetHostByName WSAAsyncGetProtoByNumber WSAAsyncGetProtoByName WSAAsyncGetServByPort WSAAsyncGetServByName WSACancelAsyncRequest WSASetBlockingHook WSAUnhookBlockingHook WSAGetLastError WSASetLastError WSACancelBlockingCall WSAIsBlocking WSAStartup WSACleanup __WSAFDIsSet timeGetTime WSHAddressToString WSHEnumProtocols WSHGetProviderGuid WSHGetSockaddrType WSHGetSocketInformation WSHGetWSAProtocolInfo WSHGetWildcardSockaddr WSHGetWinsockMapping WSHIoctl WSHJoinLeaf WSHNotify WSHOpenSocket2 WSHOpenSocket WSHSetSocketInformation WSHStringToAddress LoadPerfCounterTextStrings LoadPerfCounterTextStrings UnloadPerfCounterTextStrings UnloadPerfCounterTextStrings CheckMemoryGates IcmpCreateFile IcmpParseReplies IcmpCloseHandle IcmpSendEcho IcmpSendEcho2 do_echo_req register_icmp WTSDisconnectSession WTSQuerySessionInformation WTSEnumerateServers WTSUnRegisterSessionNotification WTHelperGetProvSignerFromChain WTHelperProvDataFromStateData WaitForThreadpoolTimerCallbacks WTSFreeMemory WTSQueryUserToken WTSSendMessage WTSLogoffSession WTSSetSessionInformation WTSEnumerateSessions WTSEnumerateProcesses WTSEnumerateProcessesEx WTSVirtualChannelOpen WTSCloseServer WTSConnectSession WTSCreateListener WTSRegisterSessionNotification WTSRegisterSessionNotificationEx WTSStartRemoteControlSession WTSVirtualChannelPurgeInput SCardControl SCardDisconnect SCardBeginTransaction SCardEndTransaction SCardEstablishContext SCardReconnect SCardStatus SCardTransmit SCardReleaseStartedEvent SCardAccessStartedEvent SCardReleaseContext SCardListReaders NtQueryEaFile NtSetEaFile CsrClientCallServer NtSaveKey NtSaveKeyEx NtSuspendThread NtTerminateThread NtQuerySystemTime NtRenameKey NtQueryAttributesFile NtQueryFullAttributesFile NtQueryMultipleValueKey NtReplaceKey NtOpenKey NtLoadKey2 NtLoadKeyEx NtCreateDirectoryObject NtQueryDirectoryObject NtOpenDirectoryObject CsrGetProcessId NtSetQuotaInformationFile NtSetInformationKey NtSetValueKey NtCreateKey NtFreeVirtualMemory NtCreateEvent NtSignalAndWaitForSingleObject NtClearEvent DbgUiConnectToDbg DbgUiDebugActiveProcess NtAdjustGroupsToken NtOpenKey NtReadFile NtEnumerateKey NtQueueApcThread NtEnumerateValueKey NtQueryLicenseValue NtQuerySecurityPolicy NtSetSystemInformation NtQueryKey NtUnloadKey NtLoadKey NtDeleteKey ZwEnumerateKey ZwGetContextThread ZwSetContextThread ZwOpenProcessTokenEx ZwWow64QueryInformationProcess64 ZwDeleteKey ZwDeleteValueKey ZwSetValueKey ZwOpenKey ZwQueryKey ZwQueryValueKey ZwSaveKey ZwSaveKeyEx KeQueryPerformanceCounter KeQuerySystemTime KeAttachProcess NtAcceptConnectPort NtCompleteConnectPort NtReplyPort NtCreateWaitablePort NtDeleteValueKey NtReplyWaitReceivePort NtSuspendProcess NtGetNextProcess NtResumeProcess NtResumeThread NtSetContextThread NtSetInformationToken NtQueryInformationProcess NtQueryInformationToken NtSetInformationProcess NtSetInformationThread NtCreateUserProcess NtTerminateProcess NtWow64CsrGetProcessId NtWow64GetCurrentProcessorNumberEx NtWow64QueryInformationProcess64 NtOpenThreadTokenEx NtOpenProcess NtCreateProcess NtCreateProcessEx NtDelayExecution NtOpenProcessToken NtQueryInformationThread RtlUserThreadStart RtlCreateUserProcess ZwQueryInformationProcess ZwTerminateProcess ZwSetInformationProcess ZwTerminateThread NtProtectVirtualMemory NtQueryVirtualMemory NtWow64QueryVirtualMemory64 NtWow64ReadVirtualMemory64 NtWow64WriteVirtualMemory64 NtWriteVirtualMemory NtAllocateVirtualMemory NtReadVirtualMemory RtlOpenCurrentUser RtlZeroMemory RtlFillMemory RtlMoveMemory ZwAllocateVirtualMemory ZwQueryVirtualMemory ZwReadVirtualMemory ZwWriteVirtualMemory ZwWow64ReadVirtualMemory64 ZwFreeVirtualMemory ZwOpenThread NtCreateFile NtQueryVolumeInformationFile NtQueryDirectoryFile NtDeleteFile NtSetInformationFile NtWriteFile NtCancelIoFileEx NtCancelIoFileEx NtQueryInformationFile NtOpenFile ZwQueryInformationFile DbgPrint DbgPrintEx EtwLogTraceEvent EtwEventWrite EtwEventEnabled EtwEventRegister EtwEventUnregister EtwUnregisterTraceGuids EtwRegisterTraceGuids EtwGetTraceLoggerHandle EtwGetTraceEnableLevel EtwGetTraceEnableFlags EtwTraceMessage LdrGetKnownDllSectionHandle LdrAccessResource LdrAddLoadAsDataTable LdrAddRefDll LdrDisableThreadCalloutsForDll LdrEnumResources LdrEnumerateLoadedModules LdrFindEntryForAddress LdrFindResourceDirectory_U LdrFindResourceEx_U LdrFindResource_U LdrFlushAlternateResourceModules LdrGetDllHandle LdrGetDllHandleByMapping LdrGetDllHandleByName LdrGetDllHandleEx LdrGetFailureData LdrGetFileNameFromLoadAsDataTable LdrGetProcedureAddress LdrGetProcedureAddressEx LdrHotPatchRoutine LdrInitShimEngineDynamic LdrInitializeThunk LdrLoadAlternateResourceModule LdrLoadAlternateResourceModuleEx LdrLoadDll LdrLockLoaderLock LdrOpenImageFileOptionsKey LdrProcessRelocationBlock LdrQueryImageFileExecutionOptions LdrQueryImageFileExecutionOptionsEx LdrQueryImageFileKeyOption LdrQueryModuleServiceTags LdrQueryProcessModuleInformation LdrRegisterDllNotification LdrRemoveLoadAsDataTable LdrResFindResource LdrResFindResourceDirectory LdrResGetRCConfig LdrResRelease LdrResSearchResource LdrRscIsTypeExist LdrSetAppCompatDllRedirectionCallback LdrSetDllManifestProber LdrSetMUICacheType LdrShutdownProcess LdrShutdownThread LdrSystemDllInitBlock LdrUnloadAlternateResourceModule LdrUnloadAlternateResourceModuleEx LdrUnloadDll LdrUnlockLoaderLock LdrUnregisterDllNotification LdrVerifyImageMatchesChecksum LdrVerifyImageMatchesChecksumEx LdrWx86FormatVirtualImage LdrpResGetMappingSize LdrpResGetResourceDirectory NtCreateNamedPipeFile NtDisplayString NtRaiseHardError NtClose NtDeviceIoControlFile NtWaitForSingleObject SetWaitableTimer SetWaitableTimerEx NtGetContextThread NtLoadDriver NtUnloadDriver NtShutdownSystem NtUnmapViewOfSection NtSetEvent NtOpenSection NtOpenEvent NtMapViewOfSection NtAddAtom NtFindAtom NtDeleteAtom NtQuerySystemInformation NtQueryInformationAtom ZwFindAtom NtAccessCheckByTypeResultListAndAuditAlarm NtCompareTokens NtQueryObject NtQuerySecurityObject NtContinue NtOpenMutant NtCreateMutant NtFsControlFile NtCreateThread NtCreateThreadEx NtImpersonateAnonymousToken NtOpenThreadToken NtOpenThread NtOpenSymbolicLinkObject NtSetSecurityObject NtVdmControl NtWow64CallFunction64 NtWow64CsrAllocateCaptureBuffer NtWow64CsrAllocateMessagePointer NtWow64CsrCaptureMessageBuffer NtWow64CsrCaptureMessageString NtWow64CsrClientCallServer NtWow64CsrClientConnectToServer NtWow64CsrFreeCaptureBuffer NtWow64CsrIdentifyAlertableThread NtWow64CsrVerifyRegion NtWow64DebuggerCall NtWow64GetNativeSystemInformation NtWow64InterlockedPopEntrySList NtQuerySymbolicLinkObject NtAdjustPrivilegesToken NtCreateSection RtlQueryRegistryValues RtlAdjustPrivilege RtlAbsoluteToSelfRelativeSD RtlAbsoluteToSelfRelativeSD RtlAddAccessAllowedAce RtlAddAccessAllowedAce RtlGetDaclSecurityDescriptor RtlGetGroupSecurityDescriptor RtlGetOwnerSecurityDescriptor RtlGetSaclSecurityDescriptor RtlSetSaclSecurityDescriptor RtlLengthSecurityDescriptor RtlSetDaclSecurityDescriptor RtlSetOwnerSecurityDescriptor RtlCreateSecurityDescriptor RtlSetControlSecurityDescriptor RtlAllocateAndInitializeSid RtlEqualSid RtlValidSid RtlCreateAcl RtlSubAuthorityCountSid RtlMakeSelfRelativeSD RtlFormatCurrentUserKeyPath RtlSetProcessIsCritical RtlQueryElevationFlags RtlCreateUserThread RtlGetCurrentPeb RtlDelete RtlNtStatusToDosError RtlRandom RtlRandomEx RtlCompressBuffer RtlComputeCrc32 RtlDecompressBuffer RtlDecompressFragment RtlGetCompressionWorkSpaceSize RtlTimeToSecondsSince1970 RtlExitUserThread SeTokenIsAdmin WerReportSQMEvent WerRegisterMemoryBlock WerUnregisterMemoryBlock WinSqmAddToAverageDWORD WinSqmAddToStream WinSqmAddToStreamEx WinSqmCheckEscalationAddToStreamEx WinSqmCheckEscalationSetDWORD64 WinSqmCheckEscalationSetDWORD WinSqmCheckEscalationSetString WinSqmCommonDatapointDelete WinSqmCommonDatapointSetDWORD64 WinSqmCommonDatapointSetDWORD WinSqmCommonDatapointSetStreamEx WinSqmCommonDatapointSetString WinSqmEndSession WinSqmEventEnabled WinSqmEventWrite WinSqmGetEscalationRuleStatus WinSqmGetInstrumentationProperty WinSqmIncrementDWORD WinSqmIsOptedIn WinSqmIsOptedInEx WinSqmSetDWORD64 WinSqmSetDWORD WinSqmSetEscalationInfo WinSqmSetIfMaxDWORD WinSqmSetIfMinDWORD WinSqmSetString WinSqmStartSession ZwClose ZwShutdownSystem ZwDisplayString ZwRequestPort ZwMapViewOfSection ZwUnmapViewOfSection ZwResumeThread ZwQuerySystemInformation ZwSetLdtEntries ZwDuplicateToken ZwCallbackReturn ZwQueryInformationThread ZwCreateSection ZwSetInformationFile KiUserExceptionDispatcher KiUserCallbackDispatcher KiUserApcDispatcher KiRaiseUserExceptionDispatcher KiIntSystemCall KiFastSystemCallRet KiFastSystemCall NetJoinDomain NetUseAdd NetUseDel NetUseEnum NetUseGetInfo NetIsServiceAccount NetApiBufferFree Netbios NetFileClose NetShareCheck NetShareDelSticky NetShareEnumSticky NetShareSetInfo NetGetJoinableOUs NetAuditRead NetConfigSet NetErrorLogWrite NetErrorLogClear NetAuditClear NetErrorLogRead NetConfigGet NetAuditWrite NetFileEnum NetWkstaUserGetInfo NetWkstaGetInfo NetpwNameValidate NetFileGetInfo NetSessionEnum NetShareGetInfo NetShareEnum NetShareAdd NetShareDel NetWkstaUserEnum NetServerGetInfo NetAccessEnum NetBrowserStatisticsGet NetConnectionEnum NetWkstaTransportEnum NetGetJoinInformation NetUserAdd NetUserEnum NetUserGetInfo NetUserSetInfo NetUserDel NetUserGetGroups NetUserSetGroups NetUserGetLocalGroups NetUserModalsGet NetUserModalsSet NetUserChangePassword NetGroupAdd NetGroupAddUser NetGroupEnum NetGroupGetInfo NetGroupSetInfo NetGroupDel NetGroupDelUser NetGroupGetUsers NetGroupSetUsers NetStatisticsGet NetLocalGroupAdd NetLocalGroupAddMember NetLocalGroupEnum NetLocalGroupGetInfo NetLocalGroupSetInfo NetLocalGroupDel NetLocalGroupDelMember NetLocalGroupGetMembers NetLocalGroupSetMembers NetLocalGroupAddMembers NetLocalGroupDelMembers NetQueryDisplayInformation NetGetDisplayInformationIndex NetAccessAdd NetAccessGetInfo NetAccessSetInfo NetAccessDel NetAccessGetUserPerms NetValidatePasswordPolicy NetValidatePasswordPolicyFree NetGetDCName NetGetAnyDCName I_NetLogonControl I_NetLogonControl2 NetEnumerateTrustedDomains NetRemoteTOD NetServerEnum NetServiceEnum EditSecurity EditSecurityAdvanced EditResourceCondition EditConditionalAceClaims MenuHelp GetEffectiveClientRect ShowHideMenuCtl CreateStatusWindow CreateToolbar CreateMappedBitmap DrawInsert CreateUpDownControl InitCommonControls CreateStatusWindow TrackMouseEvent Str_SetPtrW DPA_Destroy DPA_InsertPtr DPA_DeleteAllPtrs DPA_Sort DPA_CreateEx AddMRUStringW SystemFunction001 SystemFunction002 SystemFunction003 SystemFunction004 SystemFunction005 SystemFunction006 SystemFunction007 SystemFunction008 SystemFunction009 SystemFunction010 SystemFunction011 SystemFunction012 SystemFunction013 SystemFunction014 SystemFunction015 SystemFunction016 SystemFunction017 SystemFunction018 SystemFunction019 SystemFunction020 SystemFunction021 SystemFunction022 SystemFunction023 SystemFunction024 SystemFunction025 SystemFunction026 SystemFunction027 SystemFunction028 SystemFunction029 SystemFunction030 SystemFunction031 SystemFunction032 SystemFunction033 SystemFunction034 SystemFunction035 SystemFunction036 SystemFunction037 SystemFunction038 SystemFunction039 SystemFunction040 SystemFunction041 WinStationGetLoggedOnCount WinStationSendMessage WinStationQueryInformation LogonIdFromWinStationName RemoteAssistancePrepareSystemRestore ServerGetInternetConnectorStatus ServerLicensingClose ServerLicensingDeactivateCurrentPolicy ServerLicensingFreePolicyInformation ServerLicensingGetAvailablePolicyIds ServerLicensingGetPolicy ServerLicensingGetPolicyInformation ServerLicensingLoadPolicy ServerLicensingOpen ServerLicensingSetPolicy ServerLicensingUnloadPolicy ServerQueryInetConnectorInformation ServerSetInternetConnectorStatus WinStationActivateLicense WinStationAutoReconnect WinStationBroadcastSystemMessage WinStationCheckAccess WinStationCheckLoopBack WinStationCloseServer WinStationConnect WinStationConnectCallback WinStationConnectEx WinStationConnectW WinStationDisconnect WinStationEnumerate WinStationEnumerateExW WinStationEnumerateLicenses WinStationEnumerateProcesses WinStationEnumerateW WinStationEnumerate_Indexed WinStationFreeConsoleNotification WinStationFreeGAPMemory WinStationFreeMemory WinStationFreePropertyValue WinStationFreeUserCertificates WinStationFreeUserCredentials WinStationGenerateLicense WinStationGetAllProcesses WinStationGetAllSessionsW WinStationGetConnectionProperty WinStationGetDeviceId WinStationGetInitialApplication WinStationGetLanAdapterName WinStationGetLoggedOnCount WinStationGetMachinePolicy WinStationGetProcessSid WinStationGetRestrictedLogonInfo WinStationGetSessionIds WinStationGetTermSrvCountersValue WinStationGetUserCertificates WinStationGetUserCredentials WinStationGetUserProfile WinStationInstallLicense WinStationIsHelpAssistantSession WinStationIsSessionPermitted WinStationIsSessionRemoteable WinStationNameFromLogonId WinStationNegotiateSession WinStationNtsdDebug WinStationOpenServer WinStationOpenServerEx WinStationOpenServer WinStationQueryAllowConcurrentConnections WinStationQueryEnforcementCore WinStationQueryInformation WinStationQueryLicense WinStationQueryLogonCredentials WinStationQuerySessionVirtualIP WinStationQueryUpdateRequired WinStationRedirectErrorMessage WinStationRedirectLogonBeginPainting WinStationRedirectLogonError WinStationRedirectLogonMessage WinStationRedirectLogonStatus WinStationRegisterConsoleNotification WinStationRegisterConsoleNotificationEx WinStationRegisterNotificationEvent WinStationRemoveLicense WinStationRename WinStationReportUIResult WinStationReset WinStationRevertFromServicesSession WinStationSendMessage WinStationSendWindowMessage WinStationServerPing WinStationSetAutologonPassword WinStationSetInformation WinStationSetPoolCount WinStationShadow WinStationShadowStop WinStationShutdownSystem WinStationSwitchToServicesSession WinStationSystemShutdownStarted WinStationSystemShutdownWait WinStationTerminateProcess WinStationUnRegisterConsoleNotification WinStationUnRegisterNotificationEvent WinStationUserLoginAccessCheck WinStationVerify WinStationVirtualOpen WinStationVirtualOpenEx WinStationWaitSystemEvent _NWLogonQueryAdmin _NWLogonSetAdmin _WinStationAnnoyancePopup _WinStationBeepOpen _WinStationBreakPoint _WinStationCallback _WinStationCheckForApplicationName _WinStationFUSCanRemoteUserDisconnect _WinStationGetApplicationInfo _WinStationNotifyDisconnectPipe _WinStationNotifyLogoff _WinStationNotifyLogon _WinStationNotifyNewSession _WinStationOpenSessionDirectory _WinStationReInitializeSecurity _WinStationReadRegistry _WinStationSessionInitialized _WinStationShadowTarget _WinStationShadowTarget2 _WinStationShadowTargetSetup _WinStationUpdateClientCachedCredentials _WinStationUpdateSettings DeletePort MprAdminUserWrite MprAdminUserGetInfo MprAdminUserUserOpen MprAdminUserUserClose MprAdminUserRead MprAdminUserOpen MprAdminUserClose SfcIsFileProtected SfcIsKeyProtected SfcGetNextProtectedFile SfcGetFiles SFCDisable SFCScan SRSetRestorePoint SfpVerifyFile AtlComModuleRegisterClassObjects AtlComModuleRevokeClassObjects AtlUpdateRegistryFromResourceD AtlRegisterClassCategoriesHelper AtlLoadTypeLib AtlCreateRegistrar AtlCallTermFunc AtlSetPerUserRegistration AtlGetPerUserRegistration EnumMonitors GetDefaultPrinter GetDefaultPrinter AddPrintProcessor DeletePort DeletePrinter DeletePrinterConnection DeletePrintProcessor EnumPorts GetPrinterDriverDirectory GetPrintProcessorDirectory CreateDecryptor TripleDESCryptoServiceProvider AddFileSecurity FileSystemRights System.Security.AccessControl AccessControlType RemoveFileSecurity Encrypt FileSecurity GetAccessControl ObjectSecurity SetAccessControl FileSystemAccessRule FileSystemSecurity AddAccessRule RemoveAccessRule HttpWebResponse HttpWebRequest SaferCloseLevel SaferComputeTokenFromLevel SaferCreateLevel SaferGetLevelInformation SaferGetPolicyInformation SaferIdentifyLevel SaferIsExecutableFileType SaferRecordEventLogEntry SaferSetLevelInformation SaferSetPolicyInformation SaferiChangeRegistryScope SaferiCompareTokenLevels SaferiIsExecutableFileType ControlTrace EnableTrace EnableTraceEx EnableTraceEx2 EnumerateTraceGuids EnumerateTraceGuidsEx FlushTrace StartTrace CloseTrace ProcessTrace OpenTrace QueryAllTraces QueryTrace StopTrace TraceQueryInformation TraceSetInformation UpdateTrace EnableCallback EventActivityIdControl EventEnabled EventProviderEnabled EventWrite EventWriteString EventWriteEx EventRegister EventSetInformation EventUnregister EventWriteTransfer QueryRecoveryAgentsOnEncryptedFile RemoveUsersFromEncryptedFile FreeEncryptionCertificateHashList QueryUsersOnEncryptedFile RegisterServiceCtrlHandler RegisterServiceCtrlHandlerEx QueryServiceConfig2 QueryServiceStatus QueryServiceStatusEx GetServiceKeyName EnumServiceGroup QueryServiceConfig ChangeServiceConfig2 UnlockServiceDatabase ChangeServiceConfig StartService OpenSCManager DeleteService EnumDependentServices CreateService SetServiceStatus CloseServiceHandle EnumServicesStatus EnumServicesStatusEx OpenService LsaIQueryInformationPolicyTrusted LsaStorePrivateData LsaSetDomainInformationPolicy LsaCreateTrustedDomainEx LsaCreateAccount LsaCreateSecret LsaCreateTrustedDomain LsaEnumerateAccounts LsaEnumerateAccountsWithUserRight LsaRetrievePrivateData LsaSetInformationPolicy LsaSetInformationTrustedDomain LsaSetQuotasForAccount LsaOpenSecret LsaSetSecurityObject LsaQueryTrustedDomainInfo LsaQueryInformationPolicy LsaEnumerateTrustedDomains LsaAddAccountRights LsaSetSecret LsaEnumeratePrivilegesOfAccount LsaOpenPolicy LsaOpenPolicySce LsaClearAuditLog LsaEnumerateAccountRights LsaFreeMemory LsaClose LsaDeleteTrustedDomain LsaGetRemoteUserName LsaICLookupNamesWithCreds LsaOpenTrustedDomain LsaSetSystemAccessAccount LsaSetTrustedDomainInformation CreateMemoryResourceNotification CryptSignHash InstallApplication ConvertSecurityDescriptorToAccessNamed ConvertStringSDToSDRootDomain SetEntriesInAccessList SetNamedSecurityInfoEx MakeAbsoluteSD MakeAbsoluteSD2 GetOverlappedAccessResults TrusteeAccessToObject ConvertAccessToSecurityDescriptor SetEntriesInAuditList SetSecurityInfoEx SetEntriesInAuditList ConvertSecurityDescriptorToAccess ElfRegisterEventSource ElfBackupEventLogFile ElfChangeNotify ElfClearEventLogFile ElfCloseEventLog ElfDeregisterEventSource ElfFlushEventLog ElfNumberOfRecords ElfOldestRecord ElfOpenBackupEventLog ElfOpenEventLog ElfReadEventLog ElfReportEvent ElfReportEventAndSource WmiCloseBlock WmiFileHandleToInstanceName WmiCloseBlock WmiExecuteMethod WmiQueryAllData WmiQuerySingleInstance BackupEventLog ClearEventLog CloseEventLog DeregisterEventSource GetEventLogInformation GetNumberOfEventLogRecords GetOldestEventLogRecord NotifyChangeEventLog OpenBackupEventLog OpenEventLog ReadEventLog RegisterEventSource ReportEvent SaferRecordEventLogEntry GetCurrentHwProfile CredEnumerate CredFree CredDelete CredFindBestCredential CredGetSessionTypes CredGetTargetInfo CredIsMarshaledCredential CredIsProtected CredMarshalCredential CredPackAuthenticationBuffer CredProtect CredRead CredReadDomainCredentials CredRename CredUnmarshalCredential CredUnPackAuthenticationBuffer CredUnprotect CredWrite CredWriteDomainCredentials GetAuditedPermissionsFromAcl GetAuditedPermissionsFromAcl ConvertSecurityDescriptorToStringSecurityDescriptor SetEntriesInAcl LockServiceDatabase GetNumberOfEventLogRecords GetOldestEventLogRecord BackupEventLog NotifyChangeEventLog ConvertStringSecurityDescriptorToSecurityDescriptor DeregisterEventSource ConvertSidToStringSid ReportEvent GetTraceEnableLevel GetTraceLoggerHandle GetTraceEnableFlags RegisterTraceGuids UnregisterTraceGuids TraceMessage AbortSystemShutdown LookupPrivilegeValue NotifyBootConfigStatus SetNamedSecurityInfo LogonUser LogonUserEx InitiateSystemShutdown InitiateSystemShutdownEx SystemFunction001 SystemFunction002 SystemFunction003 SystemFunction004 SystemFunction005 SystemFunction006 SystemFunction007 SystemFunction008 SystemFunction009 SystemFunction010 SystemFunction011 SystemFunction012 SystemFunction013 SystemFunction014 SystemFunction015 SystemFunction016 SystemFunction017 SystemFunction018 SystemFunction019 SystemFunction020 SystemFunction021 SystemFunction022 SystemFunction023 SystemFunction024 SystemFunction025 SystemFunction026 SystemFunction027 SystemFunction028 SystemFunction029 SystemFunction030 SystemFunction031 SystemFunction032 SystemFunction033 SystemFunction034 SystemFunction035 SystemFunction036 SystemFunction037 SystemFunction038 SystemFunction039 SystemFunction040 SystemFunction041 EncryptMessage DecryptMessage QuerySecurityPackageInfo LsaLookupAuthenticationPackage LsaDeregisterLogonProcess LsaConnectUntrusted LsaFreeReturnBuffer GetUserNameEx DeleteSecurityContext DdeSetQualityOfService ApplyControlToken AcquireCredentialsHandle QueryCredentialsAttributes FreeCredentialsHandle SealMessage MakeSignature VerifySignature ImpersonateSecurityContext AcceptSecurityContext EnumerateSecurityPackages InitializeSecurityContext InitSecurityInterface ImportSecurityContext MultinetGetConnectionPerformance WNetAddConnection WNetAddConnection2 WNetAddConnection3 WNetCloseEnum WNetEnumResource WNetGetConnection WNetGetNetworkInformation WNetGetProviderName WNetGetResourceParent WNetGetResourceInformation WNetGetUniversalName WNetGetUser WNetOpenEnum WNetRestoreConnection WNetUseConnection WNetCancelConnection WNetAddConnection2 WNetCancelConnection2 WNetGetConnection WNetUseConnection WNetDirectoryNotify WinHttpCrackUrl WinHttpSetTimeouts WinHttpSetCredentials WinHttpQueryAuthSchemes WinHttpQueryHeaders WinHttpQueryOption WinHttpCloseHandle WinHttpCheckPlatform WinHttpConnect WinHttpGetIEProxyConfigForCurrentUser WinHttpGetProxyForUrl WinHttpOpen WinHttpOpenRequest WinHttpQueryDataAvailable WinHttpReadData WinHttpReceiveResponse WinHttpSendRequest WinHttpSetOption WinHttpWriteData WinHttpAddRequestHeaders WinHttpSetStatusCallback WinHttpCreateUrl ApphelpCheckShellObject DsListSites DsFreePasswordCredentials DsFreeNameResult DsUnBind DsBind DsMapSchemaGuids DsCrackSpn DsFreeDomainControllerInfo DsMakeSpn DsGetDomainControllerInfo DsQuoteRdnValue DsFreeSchemaGuidMap DsReplicaSync TraceDeregister TraceVprintfEx TraceRegisterEx NDdeShareAdd NDdeShareDel NDdeShareEnum NDdeShareGetInfo NDdeShareSetInfo NDdeGetErrorString NDdeIsValidShareName NDdeIsValidAppTopicList NDdeSpecialCommand NDdeGetShareSecurity NDdeSetShareSecurity NDdeGetTrustedShare NDdeSetTrustedShare NDdeTrustedShareEnum NDdeShareAdd NDdeShareDel NDdeShareEnum NDdeShareGetInfo NDdeShareSetInfo NDdeGetErrorString NDdeIsValidShareName NDdeIsValidAppTopicList NDdeSpecialCommand NDdeGetShareSecurity NDdeSetShareSecurity NDdeGetTrustedShare NDdeSetTrustedShare NDdeTrustedShareEnum SHGetMalloc SHGetKnownFolderPath LoadIcon LoadString LookupIconIdFromDirectory LookupIconIdFromDirectoryEx ExtractIcon ExtractIconEx CopyIcon CreateIcon CreateIconFromResource CreateIconFromResource CreateIconIndirect DestroyIcon DuplicateIcon SHGetDesktopFolder SHGetDiskFreeSpace SHGetDiskFreeSpaceEx SHCreateProcessAsUserW Shell_GetImageLists ShellExecute ShellExecCmdLine SHGetSpecialFolderLocation SHGetFileInfo SHFileOperation SHCreateDirectory SHBrowseForFolder SHGetPathFromIDList Win32DeleteFile FileOpen SHFindFiles FileEncryptionStatus SHQueryRecycleBin UpdateAllDesktopSubscriptions SHAlloc SHAllocShared SHAnsiToAnsi SHAnsiToUnicode SHChangeDWORDAsIDList SHChangeProductKeyAsIDList SHChangeUpdateImageIDList SHCloneSpecialIDList SHCLSIDFromString SHCoCreateInstance SHCreateFileExtractIcon SHCreateStreamOnFile Shell_GetCachedImageIndex Shell_GetImageLists Shell_MergeMenus ShellMessageBox SHExtractIconsW SHFlushClipboard SHFreeShared SHGetFolderLocation SHGetFolderPath SHGetFolderPathAndSubDir SHGetRealIDL SHGetSetFolderCustomSettings SHGetSetSettings SHGetSpecialFolderPath SHHandleUpdateImage SHLoadOLE SHLockShared SHRestricted SHSetFolderPath SHSendMessageBroadcast SHStartNetConnectionDialog SHValidateUNC RestartDialog RestartDialogEx OpenRegStream ParseField PathGetShortPath PathCleanupSpec PathGetShortPath PathIsExe PathIsSlow PathProcessCommand PathResolve PickIconDlg ILLoadFromStreamEx ILLoadFromStream GUIDFromString GetFileNameFromBrowse ExtractAssociatedIconEx DriveType CallCPLEntry16 SHChangeNotifySuspendResume SHParseDisplayName SHChangeNotifyRegister SHChangeNotifyDeregister ILSaveToStream SHILCreateFromPath DriveType IsNetDrive SignalFileOpen OpenAs_RunDLL PrintersGetCommand_RunDLLW ILFree ILCreateFromPath SHAutoComplete SHCreateDirectory SHSetInstanceExplorer SHGetInstanceExplorer SHGetNewLinkInfo ILCreateFromPath SHHelpShortcuts_RunDLL ShellExec_RunDLL SHFreeNameMappings SHFormatDrive SHCreateDirectoryEx RegenerateUserEnvironment RealShellExecuteW RealShellExecuteEx RealShellExecute Options_RunDLL GetCurrentProcessExplicitAppUserModelID GetProcessHandleCount FindExecutable DoEnvironmentSubst _DllUnregisterServer _DllRegisterServer DllInstall DllGetVersion WOWShellExecute WaitForExplorerRestartW RealDriveType SHFlushSFCache SHChangeNotification_Lock SHChangeNotification_Unlock WriteCabinetState ReadCabinetState IsUserAnAdmin DllGetClassObject DllCanUnloadNow Control_RunDLL Control_RunDLLAsUser SHTestTokenMembership AppCompat_RunDLLW SHHelpShortcuts_RunDLL SHChangeNotify SHChangeNotifyDeregister SHEmptyRecycleBin SHLoadInProc SHGetNoAssocIconIndex SHGetUserDisplayName SHGetUserPicturePath SHGetUserPicturePathEx SHHelpShortcut_RunDLL SHHelpShortcuts_RunDLL ShortSizeFormatExport SHResolveUserNames SHSettingsChanged SHSetUserPicturePath SHShouldShowWizards SHTestTokenPrivilegeW SHAnsiToUnicodeCPAlloc SHAreIconsEqual SHBoolSystemParametersInfo SHCreatePropertyBagOnMemory SHCreatePropertyStoreOnXML SHCreateStreamOnDllResourceW SHCreateStreamOnModuleResourceW SHExpandEnvironmentStringsAlloc SHForwardContextMenuMsg SHGetSizeShared SHInvokeCommandOnContextMenu SHInvokeCommandOnContextMenuEx SHInvokeCommandsOnContextMenuEx SHInvokeCommandWithFlagsAndSite SHRegSetValue SHUnicodeToAnsiCPAlloc EmptyWorkingSet EnumDeviceDrivers EnumPageFiles EnumProcesses EnumProcessModules EnumProcessModulesEx GetProcessImageFileName InitializeProcessForWsWatch GetModuleBaseName GetModuleFileNameEx GetMappedFileName GetDeviceDriverBaseName GetDeviceDriverFileName GetMappedFileName GetModuleInformation GetPerformanceInfo GetWsChanges GetWsChangesEx QueryWorkingSet QueryWorkingSetEx LoadStringByReference WSASetSocketPeerTargetName WSADeleteSocketPeerTargetName WSAImpersonateSocketPeer WSAQuerySocketSecurity WSARevertImpersonation MAPILogonEx MAPIAllocateBuffer MAPIFreeBuffer MAPIInitialize MAPIUninitialize MAPIOpenFormMgr BuildDisplayTable HrQueryAllRows SzFindLastCh@8 FreePadrlist FreeProws OpenStreamOnFile RTFSync BMAPISendMail BMAPISaveMail BMAPIReadMail BMAPIGetReadMail BMAPIFindNext BMAPIAddress BMAPIGetAddress BMAPIDetails BMAPIResolveName MAPIX WrapCompressedRTFStream RTFSync MAPIAdminProfiles CommitUrlCacheEntry InternetSetFilePointer InternetSecurityProtocolToString InternetAttemptConnect UrlZonesDetach InternetAutodial InternetAutodialHangup DeleteUrlCacheEntry RetrieveUrlCacheEntryFile FindFirstUrlCacheEntry FindFirstUrlCacheContainer FindNextUrlCacheContainer FindNextUrlCacheEntry FindCloseUrlCache GetUrlCacheEntryInfo GetUrlCacheEntryInfoEx HttpSendRequest HttpSendRequestEx HttpQueryInfo HttpAddRequestHeaders HttpEndRequest HttpOpenRequest InternetGetConnectedState InternetGetConnectedStateEx InternetWriteFile InternetOpenUrl InternetQueryDataAvailable InternetGetCookie InternetCheckConnection InternetQueryOption InternetSetStatusCallback InternetSetOption InternetErrorDlg InternetCloseHandle InternetOpen InternetConnect InternetCrackUrl InternetCreateUrl InternetCanonicalizeUrl InternetCombineUrl FtpDeleteFile FtpCommand FtpCreateDirectory FtpFindFirstFile FtpGetCurrentDirectory FtpGetFile FtpGetFileSize FtpOpenFile FtpPutFile FtpRemoveDirectory FtpRenameFile FtpSetCurrentDirectory ResumeSuspendedDownload I_RpcMapWin32Status UuidCreateSequential UuidToString RpcBindingSetAuthInfo RpcMgmtSetServerStackSize RpcServerUnregisterIf RpcMgmtWaitServerListen RpcMgmtStopServerListening RpcServerUnregisterIfEx RpcServerRegisterIf RpcServerUseProtseqEp RpcServerListen RpcStringFree RpcServerTestCancel RpcStringBindingParse RpcMgmtInqServerPrincName RpcNetworkIsProtseqValid UuidCreate NdrAsyncClientCall NdrClearOutParameters NdrClientCall NdrClientCall2 NdrConformantArrayUnmarshall NdrConformantStringBufferSize NdrConformantStringMarshall NdrConformantStringUnmarshall NdrContextHandleInitialize NdrContextHandleSize NdrContextHandleMemorySize NdrConvert NdrCStdStubBuffer_Release NdrCStdStubBuffer2_Release NdrDllCanUnloadNow NdrDllGetClassObject NdrDllRegisterProxy NdrDllUnregisterProxy NdrGetUserMarshalInfo NdrInterfacePointerBufferSize NdrInterfacePointerFree NdrInterfacePointerMarshall NdrInterfacePointerUnmarshall NdrOleAllocate NdrOleFree NdrPointerBufferSize NdrPointerFree NdrPointerMarshall NdrPointerUnmarshall NdrProxyErrorHandler NdrProxyFreeBuffer NdrProxyGetBuffer NdrProxyInitialize NdrProxySendReceive NdrSimpleTypeMarshall NdrSimpleTypeUnmarshall NdrStubCall2 NdrStubForwardingFunction NdrStubGetBuffer NdrStubInitialize NdrUserMarshalBufferSize NdrUserMarshalFree NdrUserMarshalMarshall SetupQuerySpaceRequiredOnDrive SetupDiGetSelectedDriver SetupDiCreateDeviceInfo SetupDiGetDriverInfoDetail SetupDiClassNameFromGuidEx SetupDiSetDeviceInstallParams SetupDiGetDeviceRegistryProperty SetupDiGetClassDevs SetupDiEnumDeviceInfo SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetail SetupDiDestroyDeviceInfoList SetupDiCallClassInstaller SetupDiCreateDeviceInfoList SetupDiOpenDevRegKey SetupDiClassGuidsFromNameEx SetupDiMoveDuplicateDevice SetupIterateCabinet SetupDecompressOrCopyFile SetupQueryInfFileInformation CallNtPowerInformation CanUserWritePwrScheme DeletePwrScheme DevicePowerClose DevicePowerEnumDevices DevicePowerOpen DevicePowerSetDeviceState EnumPwrSchemes GUIDFormatToGlobalPowerPolicy GUIDFormatToPowerPolicy GetActivePwrScheme GetCurrentPowerPolicies GetPwrCapabilities GetPwrDiskSpindownRange IsAdminOverrideActive IsPwrHibernateAllowed IsPwrShutdownAllowed IsPwrSuspendAllowed LoadCurrentPwrScheme MergeLegacyPwrScheme PowerApplyPowerRequestOverride PowerCanRestoreIndividualDefaultPowerScheme PowerCreatePossibleSetting PowerCreateSetting PowerCustomizePlatformPowerSettings PowerDebugDifPowerPolicies PowerDebugDifSystemPowerPolicies PowerDebugDumpPowerPolicy PowerDebugDumpPowerScheme PowerDebugDumpSystemPowerCapabilities PowerDebugDumpSystemPowerPolicy PowerDeleteScheme PowerDeterminePlatformRole PowerDuplicateScheme PowerEnumerate PowerGetActiveScheme PowerImportPowerScheme PowerOpenSystemPowerKey PowerOpenUserPowerKey PowerPolicyToGUIDFormat PowerReadACDefaultIndex PowerReadACValue PowerReadACValueIndex PowerReadDCDefaultIndex PowerReadDCValue PowerReadDCValueIndex PowerReadDescription PowerReadFriendlyName PowerReadIconResourceSpecifier PowerReadPossibleDescription PowerReadPossibleFriendlyName PowerReadPossibleValue PowerReadSecurityDescriptor PowerReadSettingAttributes PowerReadValueIncrement PowerReadValueMax PowerReadValueMin PowerReadValueUnitsSpecifier PowerRemovePowerSetting PowerReplaceDefaultPowerSchemes PowerRestoreDefaultPowerSchemes PowerRestoreIndividualDefaultPowerScheme PowerSetActiveScheme PowerSetAlsBrightnessOffset PowerSettingAccessCheck PowerSettingRegisterNotification PowerSettingUnregisterNotification PowerWriteACDefaultIndex PowerWriteACValueIndex PowerWriteDCDefaultIndex PowerWriteDCValueIndex PowerWriteDescription PowerWriteFriendlyName PowerWriteIconResourceSpecifier PowerWritePossibleDescription PowerWritePossibleFriendlyName PowerWritePossibleValue PowerWriteSecurityDescriptor PowerWriteSettingAttributes PowerWriteValueIncrement PowerWriteValueMax PowerWriteValueMin PowerWriteValueUnitsSpecifier ReadGlobalPwrPolicy ReadProcessorPwrScheme ReadPwrScheme SetActivePwrScheme SetSuspendState ValidatePowerPolicies WriteGlobalPwrPolicy WriteProcessorPwrScheme WritePwrScheme SePrivilegeCheck KeTickCount KeWaitForSingleObject KeWaitForMultipleObjects KeReleaseMutex KeInitializeMutex KeInitializeSemaphore KeStackAttachProcess KeUnstackDetachProcess KeDetachProcess KeInsertQueueApc KeGetCurrentThread KeDelayExecutionThread DbgPrint PsLookupProcessThreadByCid PsRemoveLoadImageNotifyRoutine PsGetCurrentProcessId PsGetProcessId PsGetProcessImageFileName PsCreateSystemThread PsSetLoadImageNotifyRoutine PsSetCreateProcessNotifyRoutine CreateProcessNotify PsTerminateSystemThread PsLookupProcessByProcess PsLookupProcessByProcessId PsChargePoolQuota PsDereferenceImpersonationToken PsDereferencePrimaryToken PsIsDiskCountersEnabled PsGetProcessExitTime PsImpersonateClient PsIsThreadTerminating PsLookupThreadByThreadId PsReferenceImpersonationToken PsReferencePrimaryToken PsReturnPoolQuota PsRevertToSelf PsUpdateDiskCounters PsInitialSystemProcess KeServiceDescriptorTable KeAddSystemServiceTable KeBugCheckEx IoCreateFile IoCreateDevice IoDeleteDevice IoGetCurrentProcess IoRegisterBootDriverReinitialization IoAllocateAdapterChannel IoAttachDeviceByPointer IoFlushAdapterBuffers IoFreeAdapterChannel IoFreeMapRegisters IoMapTransfer IoQueryDeviceDescription IoReportResourceUsage IoUnregisterPlugPlayNotification RtlCompareMemory RtlImageNtHeader RtlImageRvaToVa RtlImageDirectoryEntryToData ZwQueryInformationToken ZwEnumerateKey ZwFlushKey ZwOpenProcess ZwOpenProcessToken ZwOpenProcess ZwCreateFile ZwWriteFile ZwReadFile ZwOpenFile ZwDeleteFile ZwWaitForSingleObject ZwUnloadDriver ShutdownBlockReasonCreate ShutdownBlockReasonDestroy ShutdownBlockReasonQuery UserHandleGrantAccess EnumWindProc EnumChildWindProc SetCapture ReleaseCapture GetSystemMetrics LoadCursorFromFile LoadCursor IsHungAppWindow IsGUIThread PrivateExtractIcons AllowForegroundActivation GetCursorPos SetCursorPos ChangeDisplaySettings ChangeDisplaySettingsEx RegisterTouchWindow UnregisterTouchWindow IsWindowEnabled ActivateKeyboardLayout GetWindowLong GetWindowLongPtr GetWindowText VRipOutput UserRegisterWowHandlers VkKeyScanEx MapVirtualKeyEx GetLastInputInfo SystemParametersInfo RegisterLogonProcess SetDeskWallpaper SetProgmanWindow SetLogonNotifyWindow SetTaskmanWindow SendIMEMessageEx SendIMEMessage SetClipboardViewer KillSystemTimer SetWindowStationUser GetReasonTitleFromReasonCode ReasonCodeNeedsBugID RecordShutdownReason GetTaskmanWindow RegisterTasklist RegisterSystemThread SetShellWindowEx GetProgmanWindow UnlockWindowStation GetWinStationInfo GetAppCompatFlags GetAppCompatFlags2 ClientThreadSetup AllowForegroundActivation GetInternalWindowPos LockWindowStation QuerySendMessage OemKeyScan mouse_event AllowSetForegroundWindow DispatchMessage TranslateMessage GetAncestor GetWindowModuleFileName GetClassLong GetGuiResources GetRegisteredRawInputDevices GetRawInputDeviceInfo GetRawInputDeviceList OpenWindowStation DeregisterShellHookWindow SetWinEventHook SetWindowsHook SetWindowsHookEx SetWindowsHookW LowLevelKeyboardProc RegisterRawInputDevices GetNumberOfConsoleMouseButtons GetRawInputData NotifyWinEvent IsWinEventHookInstalled SwitchToThisWindow SetParent CopyImage CallMsgFilter CallNextHookEx DdeGetLastError DdeFreeStringHandle DdeQueryConvInfo DdeQueryString DdeCreateStringHandle DdeCreateDataHandle DdePostAdvise DdeGetData DdeFreeDataHandle DdeClientTransaction DdeDisconnect DdeConnect DdeNameService DdeUninitialize DdeInitialize DdeQueryNextServer EnumDisplayDevices EnumDisplayMonitors ExitWindowsEx RegisterDeviceNotification RegisterUserApiHook RegisterShellHookWindow SetWindowLong SetWindowLongPtr CloseWindow SetForegroundWindow SetDebugErrorLevel UnhookWinEvent UnhookWindowsHook UnhookWindowsHookEx UnregisterUserApiHook UnregisterDeviceNotification UnregisterPowerSettingNotification UnregisterMessagePumpHook SwapMouseButton VkKeyScan CreateLinkInfo DestroyLinkInfo DisconnectLinkInfo GetCanonicalPathInfo GetLinkInfoData ResolveLinkInfo CompareLinkInfoVolumes CompareLinkInfoReferents IsValidLinkInfo CredUnPackAuthenticationBuffer CredUIPromptForCredentials CredUICmdLinePromptForCredentials WlxActivateUserShell WlxDisconnectNotify WlxDisplayLockedNotice WlxDisplaySASNotice WlxDisplayStatusMessage WlxGetConsoleSwitchCredentials WlxGetStatusMessage WlxInitialize WlxIsLockOk WlxIsLogoffOk WlxLoggedOnSAS WlxLoggedOutSAS WlxLogoff WlxNegotiate WlxNetworkProviderLoad WlxReconnectNotify WlxRemoveStatusMessage WlxScreenSaverNotify WlxShutdown WlxStartApplication WlxWkstaLockedSAS GetFileVersionInfoSize GetFileVersionInfo VerInstallFile PDBOpenValidate5 _invoke_watson malloc memset _crt_debugger_hook _loaddll _getdllprocaddr _unloaddll _acmdln _tcmdln _wcmdln _amblksiz _daylight _dstbias _timezone _tzname errno _doserrno _sys_errlist _sys_nerr _environ _wenviron _fileinfo _fmode _iob _wcsrev getenv _resetstkoflw _wgetenv _wexecve _execve _execlpe wvsprintf wvsprintf wvsprintf wvnsprintf wsprintf printf _printf_l wprintf _wprintf_l wscanf write wnsprintf wmemmove wmemcpy wctomb wcsupr wcstombs wcstok wcsset wcsrtombs wcsrev wcsnset wcsnicmp wcsncpy wcsncat_l wcsncat wcslwr wcslen wcsicoll wcsicmp wcsdup wcscpy wcscat wcrtomb wcrtomb vswprintf vsprintf vsnprintf unlink ungetch umask ultoa tzset toascii tmpfile tempnam tell swscanf swprintf swab strupr strtok strtok strset strrev strnset strnicmp StrNCpy StrNCpy strncpy StrNCpy strncpy strncpy StrNCat strncat StrNCat strncat strncat strcat strlwr strlen StrLen stricmp strerrorv strdup StrCpy StrCpyN strcpyn StrCpy strcmpi StrCat StrCatN StrCatChainW StrCatBuff StrCat sscanf sprintf spawnvpe spawnvp spawnve spawnv spawnlpe spawnlp spawnle spawnl sopen snscanf snwscanf setmode setbuf scanf rmtmp rmdir read putw putenv putch outpw outp open OemToChar nsprintf mktemp mkdir memmove memicmp memcpy memccpy mbstowcs mbsrtowcs Makepath ltoa lstrncat lstrlen lstrcpy lstrcpyn lstrcpyn lstrcat lstrcatn lstrcatn lseek lsearch locking localtime lfind kbhit itoa iscsymf iscsym IsBadWritePtr IsBadStringPtr IsBadHugeWritePtr IsBadHugeReadPtr IsBadCodePtr isatty isascii inpw inp hypot gmtime getw gets getpid getenv getcwd getche _getch gcvt fwscanf fscanf freopen fputchar fputc fopen fseek fflush fread fwrite fprintf flushall fileno filelength fgetchar fdopen fcvt fclose ftell fcloseall execvpe execvp execve execv execlpe execlp execle execl eof ecvt dup2 dup cwait ctime cscanf creat cputs cprintf close chsize chmod chdir CharToOemW CharToOemBuff CharToOem vfprintf cgets cabs asctime alloca access _wstrtime _wstrdate _wsplitpath _wsopen _wsearchenv _wscanf_l _wscanf _wopen _wmktemp _wmakepath _wgetenv _wfreopen _wfopen _wctomb_l _wctime64 _wctime32 _wctime _wcsupr_l _wcsupr _wcstombs_l _wcstok_l _wcsset_l _wcsset _wcsnset_l _wcsnset _wcsncpy_l _wcsncpy _wcslwr_l _wcslwr _wcserror _wcreat _wasctime _vswprintf_l _vstprintf _vsprintf_l _vsnwprintf_l _vsntprintf _vsnprintf_l _vsnprintf _umask _ultow _ultot _ultoa _ui64tow _ui64tot _ui64toa _tsplitpath _tscanf _tmakepath _tcstok _tcsncpy _tcsncat _tcscpy _tcscat _tccpy _tccat _swscanf_l _swprintf_l _stscanf _strupr_l _strupr _strupr _strtok_l _strtime _strset_l _strset _strnset_l _strnset _strncpy_l _strncat_l _strlwr_l _strlwr _strerror _strdate _stprintf _sscanf_l _sprintf_l _splitpath _sopen _snwscanf_l _snwscanf _snwprintf_l _snwprintf _sntscanf _sntprintf _snscanf_l _snscanf _snprintf_l _snprintf _searchenv _scanf_l _open _mktemp _mbsupr_l _mbsupr _mbstrlen _mbstowcs_l _mbstowcs_l _mbstok_l _mbstok _mbsset_l _mbsset _mbsnset_l _mbsnset _mbsncpy_l _mbsncpy _mbsncat_l _mbsncat _mbsnbset_l _mbsnbset _mbsnbcpy_l _mbsnbcpy _mbsnbcat_l _mbsnbcat _mbslwr_l _mbslwr _mbslen _mbscpy _mbscat _mbccpy_l _mbccpy _mbccat _makepath _ltow _ltoa _localtime64 _localtime32 _itow _i64tow _i64toa _gmtime64 _gmtime32 _getws _gettws _getts _gcvt _fwscanf_l _fstrncpy _fstrncat _fscanf_l _fcvt _ecvt _cwscanf_l _cwscanf _ctime64 _ctime32 _cscanf_l _cscanf _creat _controlfp _controlfp __control87_2 _chsize _cgetws _cgets _alloca __wcserror __vswprintf_l __swprintf_l _ftccat _ftccpy makepath ualstrcpyW _ftcscpy _ftcscat _fstrcpy _fstrcat srand rand ASN1BERDecNull ASN1BERDecEoid ASN1BERDecBool ASN1BERDecCheck ASN1BERDecCharString GetNetResourceFromLocalPath CanShareFolderW UpdateDebugInfoFileEx CheckSumMappedFile EnumerateLoadedModulesW64 ImageNtHeader ImageRvaToVa StackWalk64 SymCleanup SymFromAddr SymFunctionTableAccess64 SymGetModuleInfo64 SymGetModuleBase64 SymGetModuleInfoW64 SymGetOptions SymGetSymFromName SymInitialize SymLoadModule64 SymRegisterCallback64 SymSetOptions SymUnloadModule64 SymAddSourceStream SymEnumSourceFileTokens SymEnumSourceFiles SymGetSourceFileFromToken SymGetSourceFileToken SymGetSourceVarFromToken SymMatchString SymRegisterCallbackW64 SymSetHomeDirectory SymSrvGetFileIndexes RemoveRelocations BindImage BindImageEx CheckSumMappedFile EnumerateLoadedModules64 EnumerateLoadedModules EnumerateLoadedModulesEx FindDebugInfoFile FindDebugInfoFileEx FindExecutableImage FindExecutableImageEx FindFileInPath FindFileInSearchPath GetImageConfigInformation GetImageUnusedHeaderBytes GetTimestampForLoadedLibrary ImageAddCertificate ImageDirectoryEntryToData ImageDirectoryEntryToDataEx ImageEnumerateCertificates ImageGetCertificateData ImageGetCertificateHeader ImageGetDigestStream ImageLoad ImageRemoveCertificate ImageRvaToSection ImageUnload ImagehlpApiVersion ImagehlpApiVersionEx MakeSureDirectoryPathExists MapAndLoad MapDebugInformation MapFileAndCheckSum ReBaseImage64 ReBaseImage RemovePrivateCvSymbolic RemovePrivateCvSymbolicEx SearchTreeForFile SetImageConfigInformation SplitSymbols StackWalk SymEnumSym TouchFileTimes UnDecorateSymbolName UnMapAndLoad UnmapDebugInformation UpdateDebugInfoFile SnmpGetTranslateMode SnmpSetTranslateMode SnmpGetRetransmitMode SnmpSetRetransmitMode SnmpGetTimeout SnmpSetTimeout SnmpGetRetry SnmpSetRetry SnmpConveyAgentAddress SnmpSetAgentAddress SnmpGetVendorInfo SnmpStartup SnmpCleanup SnmpOpen SnmpClose SnmpSendMsg SnmpRecvMsg SnmpRegister SnmpCreateSession SnmpListen SnmpCancelMsg SnmpStartupEx SnmpCleanupEx SnmpListenEx SnmpStrToEntity SnmpEntityToStr SnmpFreeEntity SnmpSetPort SnmpStrToContext SnmpContextToStr SnmpFreeContext SnmpCreatePdu SnmpGetPduData SnmpSetPduData SnmpDuplicatePdu SnmpFreePdu SnmpCreateVbl SnmpDuplicateVbl SnmpFreeVbl SnmpCountVbl SnmpGetVb SnmpSetVb SnmpDeleteVb SnmpFreeDescriptor SnmpEncodeMsg SnmpDecodeMsg SnmpStrToOid SnmpOidToStr SnmpOidCopy SnmpOidCompare SnmpGetLastError PFXImportCertStore PFXExportCertStoreEx PFXIsPFXBlob CryptProtectMemory PFXVerifyPassword CryptDecodeObject CryptDecodeObjectEx CryptBinaryToString CryptStringToBinary CryptAcquireCertificatePrivateKey CryptUnprotectData CryptEnumOIDInfo CryptMsgGetParam CryptUnprotectMemory CertVerifyTimeValidity CertVerifySubjectCertificateContext CertVerifyRevocation CertVerifyCertificateChainPolicy CertVerifyCTLUsage CertVerifyCRLTimeValidity CertVerifyCRLRevocation CertUnregisterSystemStore CertUnregisterPhysicalStore CertStrToName CertSetStoreProperty CertSetEnhancedKeyUsage CertSetCertificateContextProperty CertSetCertificateContextPropertiesFromCTLEntry CertSetCTLContextProperty CertSetCRLContextProperty CertSerializeCertificateStoreElement CertSerializeCTLStoreElement CertSerializeCRLStoreElement CertSelectCertificateChains CertSaveStore CertRetrieveLogoOrBiometricInfo CertResyncCertificateChainEngine CertRemoveStoreFromCollection CertRemoveEnhancedKeyUsageIdentifier CertRegisterSystemStore CertRegisterPhysicalStore CertRDNValueToStr CertOpenSystemStore CertOpenStore CertOpenServerOcspResponse CertOIDToAlgId CertNameToStr CertIsValidCRLForCertificate CertIsRDNAttrsInCertificateName CertGetValidUsages CertGetSubjectCertificateFromStore CertGetStoreProperty CertGetServerOcspResponseContext CertGetPublicKeyLength CertGetNameString CryptQueryObject CertGetIssuerCertificateFromStore CertGetIntendedKeyUsage CertGetEnhancedKeyUsage CertGetCertificateContextProperty CertGetCertificateChain CertGetCTLContextProperty CertGetCRLFromStore CertGetCRLContextProperty CertFreeServerOcspResponseContext CertFreeCertificateContext CertFreeCertificateChainList CertFreeCertificateChainEngine CertFreeCertificateChain CertFreeCTLContext CertFreeCRLContext CertFindSubjectInSortedCTL CertFindSubjectInCTL CertFindRDNAttr CertFindExtension CertFindChainInStore CertFindCertificateInStore CertFindCertificateInCRL CertFindCTLInStore CertFindCRLInStore CertFindAttribute CertEnumSystemStoreLocation CertEnumSystemStore CertEnumSubjectInSortedCTL CertEnumPhysicalStore CertEnumCertificatesInStore CertEnumCertificateContextProperties CertEnumCTLsInStore CertEnumCTLContextProperties CertEnumCRLsInStore CertEnumCRLContextProperties CertDuplicateStore CertDuplicateCertificateContext CertDuplicateCertificateChain CertDuplicateCTLContext CertDuplicateCRLContext CertDeleteCertificateFromStore CertDeleteCTLFromStore CertDeleteCRLFromStore CertCreateSelfSignCertificate CertCreateContext CertCreateCertificateContext CertCreateCertificateChainEngine CertCreateCTLEntryFromCertificateContextProperties CertCreateCTLContext CertCreateCRLContext CertControlStore CertComparePublicKeyInfo CertCompareIntegerBlob CertCompareCertificateName CertCompareCertificate CertCloseStore CertCloseServerOcspResponse CertAlgIdToOID CertAddStoreToCollection CertAddSerializedElementToStore CertAddRefServerOcspResponseContext CertAddRefServerOcspResponse CertAddEnhancedKeyUsageIdentifier CertAddEncodedCertificateToSystemStore CertAddEncodedCertificateToStore CertAddEncodedCTLToStore CertAddEncodedCRLToStore CertAddCertificateLinkToStore CertAddCertificateContextToStore CertAddCTLLinkToStore CertAddCTLContextToStore CertAddCRLLinkToStore CertAddCRLContextToStore MD5Init MD5Update MD5Final VideoForWindowsVersion MsiCloseAllHandles MsiCloseHandle MsiCollectUserInfo MsiConfigureFeature MsiConfigureProduct MsiCreateRecord MsiDatabaseApplyTransform MsiDatabaseApplyTransform MsiDatabaseCommit MsiDatabaseExport MsiDatabaseExport MsiDatabaseGenerateTransform MsiDatabaseGenerateTransform MsiDatabaseGetPrimaryKeys MsiDatabaseGetPrimaryKeys MsiDatabaseImport MsiDatabaseImport MsiDatabaseMerge MsiDatabaseMerge MsiDatabaseOpenView MsiDatabaseOpenView MsiDoAction MsiDoActionW MsiEnableUIPreview MsiEnumClients MsiEnumComponentQualifiers MsiEnumComponents MsiEnumFeatures MsiEnumProducts MsiEvaluateCondition MsiEvaluateConditionW MsiGetLastErrorRecord MsiGetActiveDatabase MsiGetComponentState MsiGetComponentStateW MsiGetDatabaseState MsiGetFeatureCost MsiGetFeatureInfo MsiGetFeatureState MsiGetFeatureStateW MsiGetFeatureUsage MsiGetFeatureValidStates MsiGetLanguage MsiGetMode MsiGetProductCode MsiGetProductInfo MsiGetProductInfoFromScript MsiGetProductInfo MsiGetProductProperty MsiGetProperty MsiGetPropertyW MsiGetSourcePath MsiGetSourcePath MsiGetSummaryInformation MsiGetSummaryInformationW MsiGetTargetPath MsiInstallProduct MsiLocateComponent MsiOpenDatabase MsiOpenPackage MsiOpenProduct MsiOpenProduct MsiPreviewBillboard MsiPreviewBillboard MsiPreviewDialog MsiPreviewDialog MsiProcessMessage MsiQueryFeatureState MsiQueryProductState MsiQueryProductState MsiRecordDataSize MsiRecordGetFieldCount MsiRecordGetInteger MsiRecordGetStringA MsiRecordGetString MsiRecordReadStream MsiRecordSetInteger MsiRecordSetString MsiRecordSetStrings MsiReinstallProduct MsiSetExternalUI MsiRecordGetFieldCount MsiReinstallFeatureW MsiSetFeatureStateW MsiSetInternalUI MsiSetPropertyW MsiSetTargetPathW MsiSummaryInfoGetPropertyW MsiSummaryInfoPersist MsiSummaryInfoSetProperty MsiSummaryInfoSetProperty MsiUseFeature MsiUseFeature MsiVerifyPackage MsiVerifyPackage MsiViewClose MsiViewExecute MsiViewFetch MsiViewGetError MsiViewGetError MsiViewModify MsiDatabaseIsTablePersistent MsiDatabaseIsTablePersistent MsiViewGetColumnInfo MsiRecordClearData MsiEnableLog MsiEnableLog MsiFormatRecord MsiFormatRecord MsiGetComponentPath MsiApplyPatch MsiApplyPatch MsiAdvertiseScript MsiAdvertiseScript MsiGetPatchInfo MsiGetPatchInfo MsiEnumPatches MsiEnumPatches DllGetVersion MsiGetProductCodeFromPackageCode MsiGetProductCodeFromPackageCodeW MsiCreateTransformSummaryInfo MsiCreateTransformSummaryInfo MsiQueryFeatureStateFromDescriptor MsiQueryFeatureStateFromDescriptor MsiConfigureProductEx MsiConfigureProductEx MsiInvalidateFeatureCache MsiUseFeatureEx MsiUseFeatureEx MsiGetFileVersion MsiGetFileVersionW MsiDecomposeDescriptor MsiDecomposeDescriptor MsiProvideQualifiedComponentEx MsiProvideQualifiedComponentEx MsiEnumRelatedProducts MsiEnumRelatedProducts MsiSetFeatureAttributes MsiSetFeatureAttributes MsiSourceListAddSource MsiSourceListAddSource MsiSourceListForceResolution MsiSourceListForceResolution MsiIsProductElevated MsiIsProductElevated MsiGetFileHash MsiGetFileHash MsiEnumComponentCosts MsiEnumComponentCosts MsiCreateAndVerifyInstallerDirectory MsiGetFileSignatureInformation MsiGetFileSignatureInformation MsiProvideAssembly MsiProvideAssembly MsiOpenPackageEx MsiOpenPackageEx MsiDeleteUserData MsiDeleteUserData MsiRemovePatches MsiApplyMultiplePatches MsiApplyMultiplePatches MsiExtractPatchXMLData MsiExtractPatchXMLData MsiGetPatchInfoEx MsiGetPatchInfoEx MsiEnumProductsEx MsiEnumProductsEx MsiGetProductInfoEx MsiGetProductInfoEx MsiQueryComponentState MsiQueryComponentState MsiQueryFeatureStateEx MsiQueryFeatureStateEx MsiDeterminePatchSequence MsiDeterminePatchSequence MsiSourceListAddSourceEx MsiSourceListAddSourceEx MsiSourceListClearSource MsiSourceListClearSource MsiSourceListClearAllEx MsiSourceListClearAllEx MsiSourceListAddMediaDisk MsiSourceListClearMediaDisk OleUIAddVerbMenu OleUIEditLinks OleUIConvert OleUIBusy ScriptBreak ScriptStringOut ScriptStringAnalyse ScriptLayout ScriptItemize ScriptShape ScriptFreeCache ScriptPlace CLRCreateInstance CorBindToRuntime CorBindToRuntimeEx set_UseShellExecute Get_Random Get_PSDrive CreateEncryptor DownloadFile SetTcpEntry AllocateAndGetTcpExTableFromStack AllocateAndGetUdpExTableFromStack GetIpErrorString GetIpForwardTable GetBestInterface NTPTimeToNTFileTime GetExtendedUdpTable GetExtendedTcpTable AllocateAndGetUdpExTable2FromStack AllocateAndGetTcpExTable2FromStack AllocateAndGetIpAddrTableFromStack Icmp6CreateFile Icmp6ParseReplies Icmp6SendEcho2 IcmpCloseHandle IcmpCreateFile IcmpSendEcho IcmpSendEcho2 IcmpSendEcho2Ex IcmpParseReplies CreateIpNetEntry DeleteIpAddress DeleteIpNetEntry DeleteIpNetEntry2 DeleteIpForwardEntry DeleteIpForwardEntry2 GetNetworkParams GetAdaptersAddresses GetTcpTable GetBestRoute GetIfTable GetTcpStatistics GetTcpStatisticsEx GetIpAddrTable GetAdapterIndex GetIpStatistics GetIfEntry GetIcmpStatistics GetUdpTable SetIpNetEntry SetIpTTL SendARP InternalSetIpStats SetIpForwardEntry InternalSetIpForwardEntry AddIPAddress FlushIpNetTable GetIpNetTable SetAdapterIpAddress NhpAllocateAndGetInterfaceInfoFromStack NhGetGuidFromInterfaceName InternalGetUdpTable UnenableRouter register_icmp _PfUnBindInterface@4 _PfDeleteInterface@4 _PfCreateInterface@24 _PfAddFiltersToInterface@24 EnumDirTree SymFromAddr SymGetModuleBase64 SymFunctionTableAccess64 SymCleanup StackWalk64 SymInitialize SymFunctionTableAccess64 SymGetModuleBase64 StackWalk64 ImageNtHeader SymUnloadModule64 SymLoadModule64 SymLoadModuleEx SymGetOptions SymSetOptions MiniDumpWriteDump SymGetSymFromName SymFromAddr SymCleanup SymGetModuleInfoW64 SymRegisterCallback64 EnumerateLoadedModules EnumerateLoadedModulesW64 SymInitialize ImageDirectoryEntryToData SymEnumSym SymEnumerateSymbolsW MapDebugInformation SymEnumerateSymbols64 SymGetSymFromAddr64 SymGetSymFromName64 SymGetSymNext64 SymGetSymPrev64 UnMapDebugInformation VaultAddItem VaultCloseVault VaultConfirmVaultAccess VaultCopyItem VaultCopyVault VaultCreateItemType VaultCreateVault VaultDeleteItemType VaultDeleteVault VaultEnumerateItemTypes VaultEnumerateItems VaultEnumerateVaults VaultFindItems VaultFree VaultGetInformation VaultGetItem VaultGetItemType VaultLoadVaults VaultLockVault VaultMoveItem VaultOpenVault VaultRegisterNotification VaultRemoveItem VaultSetInformation VaultUnRegisterNotification VaultUnloadVaults VaultUnlockVault PStoreCreateInstance PStoreEnumProviders AtlAdvise AtlUnadvise AtlFreeMarshalStream AtlMarshalPtrInProc AtlUnmarshalPtr AtlModuleGetClassObject AtlModuleInit AtlModuleRegisterClassObjects AtlModuleRegisterServer AtlModuleRegisterTypeLib AtlModuleRevokeClassObjects AtlModuleTerm AtlModuleUnregisterServer AtlModuleUpdateRegistryFromResourceD AtlWaitWithMessageLoop AtlSetErrorInfo AtlCreateTargetDC AtlHiMetricToPixel AtlPixelToHiMetric AtlDevModeW2 AtlComPtrAssign AtlComQIPtrAssign AtlInternalQueryInterface DllCanUnloadNow AtlGetVersion AtlAxDialogBox AtlAxDialogBox AtlAxCreateDialog AtlAxCreateControl AtlAxAttachControl AtlAxCreateControlEx AtlAxWinInit AtlModuleAddCreateWndData AtlModuleExtractCreateWndData AtlModuleRegisterWndClassInfo AtlModuleRegisterWndClassInfo AtlAxGetControl AtlAxGetHost AtlRegisterClassCategoriesHelper AtlIPersistStreamInit_Load AtlIPersistStreamInit_Save AtlIPersistPropertyBag_Load AtlIPersistPropertyBag_Save AtlGetObjectSourceInterface AtlModuleLoadTypeLib AtlModuleUnregisterServerEx AtlModuleAddTermFunc AtlSetErrorInfo2 AtlIPersistStreamInit_GetSizeMax DllGetClassObject _DllRegisterServer _DllUnregisterServer AtlAxCreateControlLic AtlAxCreateControlLicEx AtlAxGetControl AtlAxWinTerm RasEnumConnections SysAllocString SysReAllocString SysAllocStringLen SysReAllocStringLen SysFreeString SysStringLen VariantInit VariantClear VariantCopy VariantCopyInd VariantChangeType SafeArrayCreate SafeArrayDestroy SafeArrayGetDim SafeArrayGetElemsize SafeArrayGetUBound SafeArrayGetLBound SafeArrayLock SafeArrayUnlock SafeArrayAccessData SafeArrayUnaccessData SafeArrayGetElement SafeArrayPutElement SafeArrayCopy DispGetIDsOfNames DispInvoke CreateDispTypeInfo CreateStdDispatch GetActiveObject SafeArrayAllocData SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayRedim SafeArrayAllocDescriptorEx SafeArrayCreateVectorEx VarI2FromDate SafeArraySetIID VarI4FromDate VarI4FromBool VarR4FromI2 SafeArrayGetVartype VarR8FromUI1 VarR8FromI4 VarR8FromDate VarR8FromDisp VarDateFromI2 VarDateFromStr VarFormatNumber VarBstrFromUI1 VarBstrFromI2 VarBstrFromI4 VarBstrFromR8 VarBstrFromDate VarFormatPercent VarBoolFromUI1 VarBoolFromDate VarUI1FromR4 VarUI1FromCy VarDiv DllCanUnloadNow DllGetClassObject DispCallFunc VariantChangeTypeEx SafeArrayPtrOfIndex SysStringByteLen SysAllocStringByteLen DllRegisterServer VarIdiv CreateTypeLib LoadTypeLib LoadRegTypeLib RegisterTypeLib RegisterTypeLibForUser QueryPathOfRegTypeLib VarXor ClearCustData CreateTypeLib2 VarDecSub LoadTypeLibEx SystemTimeToVariantTime VariantTimeToSystemTime UnRegisterTypeLib VarDecFromUI1 VarDecFromBool GetErrorInfo SetErrorInfo CreateErrorInfo VarI4FromI1 VarI4FromUI4 VarR8FromDec VarDateFromI1 VarCyFromI1 VarCyFromUI4 VarBstrFromI1 VarBstrFromUI4 VarBoolFromDec VarUI1FromI1 VarI1FromR8 VarUI2FromStr VarUI4FromDate VarUI4FromStr VarUI4FromI1 VARIANT_UserFree LPSAFEARRAY_UserSize VarCyNeg VarBstrCmp VarCat GetRecordInfoFromGuids VarUdateFromDate VarI8FromR4 VarBstrFromUI8 SafeArrayCreateVector VectorFromBstr OleCreatePropertyFrame OleLoadPicture OleCreateFontIndirect OleTranslateColor OleLoadPictureFile OleSavePictureFile OleLoadPicturePath DnsAcquireContextHandle DnsCancelQuery DnsExtractRecordsFromMessage DnsFree DnsFreeProxyName DnsGetProxyInformation DnsModifyRecordsInSet DnsNameCompare DnsQuery_ DnsQueryConfig DnsQueryEx DnsRecordCompare DnsRecordCopyEx DnsRecordListFree DnsRecordSetCompare DnsRecordSetCopyEx DnsRecordSetDetach DnsReleaseContextHandle DnsReplaceRecordSet DnsValidateName DnsValidateServerStatus DnsWriteQuestionToBuffer capControlCallback capCreateCaptureWindow capErrorCallback capGetDriverDescription capStatusCallback capVideoStreamCallback capWaveStreamCallback capYieldCallback TraceReturn TraceVersion TraceSQLConnect TraceSQLCancel SamQueryInformationUse SamIConnect SamIFree_SAMPR_ENUMERATION_BUFFER SamIFree_SAMPR_USER_INFO_BUFFER SamIGetPrivateData SamrCloseHandle SamrEnumerateUsersInDomain SamrOpenDomain SamrOpenUser SamrQueryInformationUser GetDllVersion DllGetVersion Extract DeleteExtractedFiles FCICreate FCIAddFile FCIFlushFolder FCIFlushCabinet FCIDestroy FDICreate FDIIsCabinet FDICopy FDIDestroy FDITruncateCabinet AU3_GetPluginDetails WinDetectHiddenText WinSearchChildren WinTextMatchMode WinTitleMatchMode WinWaitDelay FileRecycle GUICtrlSendMsg GUICtrlSendToDummy GUICtrlSetBkColor GUICtrlSetColor GUICtrlSetCursor GUICtrlSetData Send SendKeyDelay SendKeyDownDelay SendKeepActive SendCommandID SendAttachMode SendCapslockMode ControlSend UDPSend _FTP_Command _INetSmtpMail _viExecCommand _WinAPI_BroadcastSystemMessage _WinAPI_SendMessageTimeout RmAddFilter RmCancelCurrentTask RmEndSession RmGetFilterList RmGetList RmJoinSession RmRegisterResources RmRemoveFilter RmReserveHeap RmRestart RmShutdown RmStartSession CArchiveStream CAsyncMonikerFile CAsyncSocket CCommandLineInfo CCriticalSection CDatabase CDBException CDBVariant CDockState CDocManager CDocObjectServer CDocObjectServerItem CEnumFormatEtc CEvent:SECURITY_ATTRIBUTES CException CException CFile CFile CFile CInternetSession CInternetFile CInternetException CInternetConnection CFrameWnd::ActivateFrame CMDIChildWnd::ActivateFrame CWinApp::AddToRecentFileList AfxEnableControlContainer AfxDllCanUnloadNow AfxGetInProcServer AfxGetModuleState AfxThrowOleException CGdiObject::Attach CWnd::CenterWindow CAsyncSocket::Close CDaoWorkspace::GetLoginTimeout CFile::CreateControl COleException::CreateDispatch CException::Delete CWinThread::Delete CDocument::DeleteContents CWnd::DestroyWindow COleFrameHook::DoEnableModeless CDocument::DoFileSave CDocument::DoSave CWinApp::Enable3dControls COleDataSource CDaoQueryDef::Execute CWinApp::ExitInstance CFrameWnd::GetActiveFrame GetClipBox CDaoDatabase::GetConnect CFrameWnd::GetActiveDocument CDatabase::GetConnectInfo ConnectionPoint::GetConnectionHook COleDateTime::GetDay CSimpleException::GetErrorMessage CDocObjectServer::GetExtent CCmdTarget::GetExtraConnectionPoints GetFile::CFileException COleIPFrameWnd::GetInPlaceMenu CGopherFileFind::GetLastWriteTime CMDIChildWnd::GetMessageBar CFrameWnd::GetMessageString CPictureHolder::GetType COleDispatchImpl::GetTypeInfoCount CDaoRecordset::IsFieldStatusNullable CDaoRecordset::IsFieldStatusNullableKnown CFrameWnd::IsFrameWnd CMDIChildWnd::LoadFrame CFrameWnd::NegotiateBorderSpace COleControl::OnCreate CDocument::OnFileSave COleServerDoc::OnFileUpdate CEnumUnknown::OnNext COleControl::OnOcmCtlColorEdit CFrameWnd::OnCreateClient COleControl::OnSetExtent CFrameWnd::OnSetPreviewMode CDaoWorkspace::Open CDataExchange::PrepareOleCtrl CSocket::ProcessAuxQueue CWinThread::ProcessWndProcException CFrameWnd::RecalcLayout CWnd::SetOccDialogInfo COleControlSite::ShowObject COleControl::WindowProc COlePropertyPage::WindowProc CParkingWnd::WindowProc OleIconToCursor OleCreatePropertyFrameIndirect OleCreatePropertyFrame OleLoadPicture OleCreatePictureIndirect OleCreateFontIndirect OleTranslateColor DllCanUnloadNow COOKIEBAG GREENCAT LONGRUN MACROMAIL MAPIGET NEWSREELS SWORD STARSYPOUND TABMSGSQL TARSIP-MOON TARSIP-ECLIPSE WARP WEBC2 WEBC2-ADSPACE WEBC2-BOLID WEBC2-CLOVER WEBC2-CSON WEBC2-GREENCAT WEBC2-KT3 WEBC2-RAVE WEBC2-YAHOO WEBC2-Y21K 2c26ec4a570a502ed3e8484295581989 b722c33458882a1ab65a13e99efe357e 2d24325daea16e770eb82fa6774d70f1 0d72b49ed68430225595cc1efb43ced9 959711e93a68941639fd8b7fba3ca28f 4cec0085b43f40b4743dc218c585f2ec 3b10d6b16f135c366fc8e88cba49bc6c 4f0aca83dfe82b02bbecce448ce8be00 ee22b62aa3a63b7c17316d219d555891 a1a42f57ff30983efda08b68fedd3cfc 7276a74b59de5761801b35c672c9ccb4