AccessCheck, RevertToSelf, QueryServiceConfigW, CloseServiceHandle, QueryServiceStatus, OpenServiceW, OpenSCManagerW, StartServiceW, FreeSid, AllocateAndInitializeSid, GetTokenInformation, LookupAccountSidW, OpenProcessToken, EqualSid, DuplicateTokenEx, CreateProcessAsUserW, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegisterServiceCtrlHandlerW, SetServiceStatus, RegOpenKeyExW, RegQueryValueExW, RegCloseKey, OpenThreadToken, CheckTokenMembership, CreateWellKnownSid, SetTraceCallback, OpenTraceW, ProcessTrace, CloseTrace, StartTraceW, EnableTrace, ControlTraceW, RemoveTraceCallback, QueryServiceConfigA, RegCreateKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegEnumValueW, RegDeleteValueW, RegNotifyChangeKeyValue, DuplicateToken, SetThreadToken, WmiOpenBlock, WmiSetSingleInstanceW, WmiCloseBlock

ApiSetQueryApiSetPresence

DelayLoadFailureHook, ResolveDelayLoadedAPI

SetUnhandledExceptionFilter, SetLastError, UnhandledExceptionFilter, GetLastError

ReadFile, CreateFileA, WriteFile

ReadFile, WriteFile, CreateFileA

DuplicateHandle, CloseHandle

GetProcessHeap, HeapAlloc, HeapFree, HeapSize, HeapDestroy

LocalFree, LocalAlloc

InterlockedExchangeAdd, InterlockedCompareExchange, InterlockedDecrement, InterlockedExchange, InterlockedIncrement

DeviceIoControl

FindResourceW, GetComputerNameW, LoadLibraryA, WaitForMultipleObjects, LoadLibraryW, BindIoCompletionCallback, UnregisterWait, RegisterWaitForSingleObject

RegisterWaitForSingleObject, BindIoCompletionCallback, GetComputerNameW, UnregisterWait, LoadLibraryW, FindResourceW, LoadLibraryA, WaitForMultipleObjects

DisableThreadLibraryCalls, LockResource, SizeofResource, FreeLibrary, LoadStringW, GetModuleHandleExW, GetProcAddress, LoadResource, LoadLibraryExW, GetModuleFileNameW, FreeLibraryAndExitThread, FreeResource

LoadResource, GetModuleHandleExW, SizeofResource, GetProcAddress, LockResource, GetModuleFileNameW, LoadStringW, DisableThreadLibraryCalls, FreeLibrary, FreeResource

FormatMessageW

FormatMessageW

ExpandEnvironmentStringsA

SetThreadToken, TerminateProcess, CreateThread, GetCurrentThreadId, GetCurrentProcessId, OpenProcessToken, GetCurrentProcess, OpenThreadToken, GetCurrentThread, OpenProcess

OpenProcessToken, SetThreadToken, TerminateProcess, OpenProcess, GetCurrentProcessId, GetCurrentThreadId, GetCurrentProcess, OpenThreadToken, GetCurrentThread

QueryPerformanceCounter

RegSetValueExW, RegDeleteValueW, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey

MultiByteToWideChar, WideCharToMultiByte

lstrlenA, lstrcmpiA, lstrcmpiW, lstrcmpW, lstrlenW

EnterCriticalSection, Sleep, WaitForSingleObjectEx, InitializeCriticalSection, LeaveCriticalSection, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, WaitForSingleObject, CreateEventW, SetEvent, CreateEventA, ResetEvent

GetSystemTimeAsFileTime, GetComputerNameExW, GetTickCount64, GetTickCount, GetSystemDirectoryW, GetVersionExW

GetVersionExW, GetComputerNameExW, GetTickCount64, GetSystemDirectoryW, GetTickCount, GetSystemTimeAsFileTime

CreateTimerQueue, UnregisterWaitEx, DeleteTimerQueueEx, QueueUserWorkItem

SystemTimeToFileTime, FileTimeToSystemTime

DuplicateToken, RevertToSelf, CreateWellKnownSid, CheckTokenMembership

AuthzInitializeResourceManager, AuthziLogAuditEvent, AuthzFreeAuditEvent, AuthzFreeResourceManager

Dhcpv6RenewPrefix, Dhcpv6RequestPrefix, Dhcpv6ReleasePrefix, Dhcpv6RequestPrefixEx, Dhcpv6ReleasePrefixEx, Dhcpv6RenewPrefixEx, Dhcpv6CancelOperation

Dns_BuildPacket, DnsUtf8ToUnicode, DnsGetBufferLengthForStringCopy, Dns_ParseMessage, DnsFreeConfigStructure, DnsQueryConfigAllocEx, DnsNameCompare_W, DnsGetPrimaryDomainName_A, DnsQuery_W, DnsRecordListFree, DnsQuery_UTF8, DnsFree

NhpAllocateAndGetInterfaceInfoFromStack, SetIpForwardEntryToStack, AllocateAndGetIpAddrTableFromStack, AllocateAndGetIfTableFromStack, GetIpNetTable, SendARP, NotifyAddrChange, GetPerAdapterInfo, GetAdaptersInfo, GetInterfaceInfo, UnenableRouter, EnableRouter, GetAdaptersAddresses, GetIfTable, GetIpAddrTable, ConvertInterfaceIndexToLuid, ConvertInterfaceLuidToNameW, ConvertInterfaceLuidToIndex, ConvertIpv4MaskToLength, ConvertInterfaceLuidToGuid, SetIpInterfaceEntry, InitializeIpInterfaceEntry, ConvertInterfaceGuidToLuid, GetIfEntry, GetAdapterIndex, CancelIPChangeNotify, CreateUnicastIpAddressEntry, DeleteIpNetEntry, DeleteUnicastIpAddressEntry, InitializeUnicastIpAddressEntry, GetIfEntry2

CreateTimerQueue, DeleteTimerQueueEx, UnregisterWaitEx, SystemTimeToFileTime, FileTimeToSystemTime, GetComputerNameExW, FormatMessageW, LocalAlloc, GetCurrentThread, DuplicateHandle, OpenProcess, GetSystemDirectoryW, MultiByteToWideChar, WideCharToMultiByte, SetLastError, QueueUserWorkItem, lstrcmpiW, lstrlenA, lstrcpyA, lstrcmpiA, LocalFree, SetEvent, FreeResource, SizeofResource, LockResource, LoadResource, FindResourceW, LoadLibraryW, lstrcmpW, CreateFileW, ExpandEnvironmentStringsA, InterlockedCompareExchange, ExpandEnvironmentStringsW, LoadLibraryExW, GetLongPathNameW, CreateDirectoryW, InitializeCriticalSectionAndSpinCount, MoveFileExW, lstrcatW, FileTimeToLocalFileTime, DeleteTimerQueueTimer, TerminateThread, GetFileSize, GetLocalTime, CreateTimerQueueTimer, CreateThread, GetComputerNameW, GetVersionExW, Sleep, ResumeThread, WTSGetActiveConsoleSessionId, DeviceIoControl, lstrcpyW, InterlockedExchange, WaitForSingleObject, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, BindIoCompletionCallback, CreateEventW, RegisterWaitForSingleObject, HeapAlloc, GetProcessHeap, InterlockedDecrement, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, HeapFree, InterlockedIncrement, DeleteCriticalSection, GetProcAddress, LoadLibraryA, CloseHandle, GetLastError, CreateEventA, FreeLibrary, DisableThreadLibraryCalls, lstrlenW, UnregisterWait, ReadFile, WriteFile, HeapSize, WaitForSingleObjectEx, GetModuleHandleExW

MprInfoDelete, MprInfoBlockAdd, MprInfoBlockFind, MprInfoCreate, MprInfoBlockSet

DllMain

AcceptEx

NcFreeNetconProperties

NsiSetAllParametersEx, NsiGetParameterEx, NsiAllocateAndGetTable, NsiSetAllParameters, NsiRequestChangeNotification, NsiCancelChangeNotification, NsiFreeTable, NsiGetAllParameters

RtlFindClearBitsAndSet, RtlClearBits, RtlFindSetBits, NtDeviceIoControlFile, RtlInitializeBitMap, RtlClearAllBits, NtCreateFile, RtlImpersonateSelf, NtUnloadDriver, NtLoadDriver, RtlQueueWorkItem, RtlRandom, RtlDeregisterWait, RtlRegisterWait, NtCreateEvent, RtlInitializeGenericTable, RtlDeleteElementGenericTable, RtlGetElementGenericTable, RtlNumberGenericTableElements, RtlLookupElementGenericTable, RtlEnumerateGenericTable, RtlAnsiStringToUnicodeString, NtOpenFile, RtlFreeHeap, RtlAllocateHeap, NtQuerySymbolicLinkObject, NtOpenSymbolicLinkObject, RtlIpv4StringToAddressW, RtlIpv4AddressToStringW, RtlNtStatusToDosError, RtlCreateTimerQueue, RtlCreateTimer, RtlUpdateTimer, RtlDeleteTimerQueue, RtlDeleteTimer, NtOpenKey, NtClose, RtlInitUnicodeString, NtQueryValueKey, RtlInsertElementGenericTable, NtQueryInformationProcess, RtlInitString, RtlAdjustPrivilege, NtSetEvent, RtlFreeUnicodeString, RtlStringFromGUID, RtlFreeAnsiString, RtlUnicodeStringToAnsiString, RtlInitAnsiString, RtlDeregisterWaitEx, NtNotifyChangeKey, RtlGUIDFromString, RtlPublishWnfStateData, RtlDeleteTimerQueueEx

CoTaskMemFree, CoUninitialize, CLSIDFromString, CoSwitchCallContext, CoImpersonateClient, CoRevertToSelf, StringFromGUID2, CoTaskMemAlloc, CoCreateInstance, CoInitializeEx, CoSetProxyBlanket, CoGetCallContext, CLSIDFromProgID, OleRun

RasQuerySharedConnection, RasGetCredentialsW, RasDialW, RasHangUpW, RasGetConnectionStatistics, RasConnectionNotificationW, RasGetEntryPropertiesW, RasQuerySharedAutoDial, RasGetAutodialAddressA, RasGetEntryHrasconnW, RasGetProjectionInfoA, RasAutoDialSharedConnection

RasInitialize, RasReferenceRasman

RpcServerUnregisterIfEx, RpcBindingVectorFree, RpcEpUnregister, RpcEpRegisterW, RpcServerInqBindings, RpcServerRegisterIfEx, RpcServerUseProtseqW, RpcBindingInqAuthClientW, RpcStringBindingParseW, RpcBindingToStringBindingW, I_RpcBindingIsClientLocal, I_RpcBindingInqLocalClientPID, NdrServerCall2, RpcServerRegisterAuthInfoW, RpcStringFreeW, RpcRaiseException, RpcRevertToSelf, RpcImpersonateClient, RpcServerInqDefaultPrincNameW

TracePrintfExA, TraceRegisterExW, RouterLogDeregisterW, RouterLogRegisterA, TraceVprintfExA, TraceDeregisterW, TraceRegisterExA, RouterLogEventValistExA

PathIsRelativeW, PathFindNextComponentW, PathCanonicalizeW, AssocQueryStringW, PathFindFileNameW, PathSkipRootW

SLGetWindowsInformationDWORD

LoadStringW

NsiConnectToServer, NsiRpcRegisterChangeNotification, NsiRpcDeregisterChangeNotification, NsiRpcSetAllParameters, NsiDisconnectFromServer

WmiCloseBlock, WmiSetSingleInstanceW, WmiOpenBlock

WSAProviderConfigChange, WSAIoctl, WSASendTo, WSARecvFrom, WSAAddressToStringA, WSAEnumProtocolsW, WSASocketW, WSAStringToAddressA, WSAAddressToStringW

WTSQuerySessionInformationW, WTSFreeMemory