'''
Copyright (c) 2013-2015, Joshua Pitts
All rights reserved.

Redistribution and use in source and binary forms, with or without modification,
are permitted provided that the following conditions are met:

    1. Redistributions of source code must retain the above copyright notice,
    this list of conditions and the following disclaimer.

    2. Redistributions in binary form must reproduce the above copyright notice,
    this list of conditions and the following disclaimer in the documentation
    and/or other materials provided with the distribution.

    3. Neither the name of the copyright holder nor the names of its contributors
    may be used to endorse or promote products derived from this software without
    specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
POSSIBILITY OF SUCH DAMAGE.

'''

'''
This is the start of a super dict of winapis.  I will add them as needed
for payloads.
'''

winapi = {
          'kernel32.dll': ['AcquireSRWLockExclusive',
                           'AcquireSRWLockShared',
                           'ActivateActCtx',
                           'AddAtomA',
                           'AddAtomW',
                           'AddConsoleAliasA',
                           'AddConsoleAliasW',
                           'AddDllDirectory',
                           'AddIntegrityLabelToBoundaryDescriptor',
                           'AddLocalAlternateComputerNameA',
                           'AddLocalAlternateComputerNameW',
                           'AddRefActCtx',
                           'AddSIDToBoundaryDescriptor',
                           'AddSecureMemoryCacheCallback',
                           'AddVectoredContinueHandler',
                           'AddVectoredExceptionHandler',
                           'AdjustCalendarDate',
                           'AllocConsole',
                           'AllocateUserPhysicalPages',
                           'AllocateUserPhysicalPagesNuma',
                           'ApplicationRecoveryFinished',
                           'ApplicationRecoveryInProgress',
                           'AreFileApisANSI',
                           'AssignProcessToJobObject',
                           'AttachConsole',
                           'BackupRead',
                           'BackupSeek',
                           'BackupWrite',
                           'BaseCheckAppcompatCache',
                           'BaseCheckAppcompatCacheEx',
                           'BaseCheckRunApp',
                           'BaseCleanupAppcompatCacheSupport',
                           'BaseDllReadWriteIniFile',
                           'BaseDumpAppcompatCache',
                           'BaseFlushAppcompatCache',
                           'BaseFormatObjectAttributes',
                           'BaseFormatTimeOut',
                           'BaseGenerateAppCompatData',
                           'BaseGetNamedObjectDirectory',
                           'BaseInitAppcompatCacheSupport',
                           'BaseIsAppcompatInfrastructureDisabled',
                           'BaseQueryModuleData',
                           'BaseSetLastNTError',
                           'BaseThreadInitThunk',
                           'BaseUpdateAppcompatCache',
                           'BaseVerifyUnicodeString',
                           'Basep8BitStringToDynamicUnicodeString',
                           'BasepAllocateActivationContextActivationBlock',
                           'BasepAnsiStringToDynamicUnicodeString',
                           'BasepCheckAppCompat',
                           'BasepCheckBadapp',
                           'BasepCheckWinSaferRestrictions',
                           'BasepFreeActivationContextActivationBlock',
                           'BasepFreeAppCompatData',
                           'BasepMapModuleHandle',
                           'Beep',
                           'BeginUpdateResourceA',
                           'BeginUpdateResourceW',
                           'BindIoCompletionCallback',
                           'BuildCommDCBA',
                           'BuildCommDCBAndTimeoutsA',
                           'BuildCommDCBAndTimeoutsW',
                           'BuildCommDCBW',
                           'CallNamedPipeA',
                           'CallNamedPipeW',
                           'CallbackMayRunLong',
                           'CancelDeviceWakeupRequest',
                           'CancelIo',
                           'CancelIoEx',
                           'CancelSynchronousIo',
                           'CancelThreadpoolIo',
                           'CancelTimerQueueTimer',
                           'CancelWaitableTimer',
                           'ChangeTimerQueueTimer',
                           'CheckElevation',
                           'CheckElevationEnabled',
                           'CheckForReadOnlyResource',
                           'CheckNameLegalDOS8Dot3A',
                           'CheckNameLegalDOS8Dot3W',
                           'CheckRemoteDebuggerPresent',
                           'ClearCommBreak',
                           'ClearCommError',
                           'CloseConsoleHandle',
                           'CloseHandle',
                           'ClosePrivateNamespace',
                           'CloseProfileUserMapping',
                           'CloseThreadpool',
                           'CloseThreadpoolCleanupGroup',
                           'CloseThreadpoolCleanupGroupMembers',
                           'CloseThreadpoolIo',
                           'CloseThreadpoolTimer',
                           'CloseThreadpoolWait',
                           'CloseThreadpoolWork',
                           'CmdBatNotification',
                           'CommConfigDialogA',
                           'CommConfigDialogW',
                           'CompareCalendarDates',
                           'CompareFileTime',
                           'CompareStringA',
                           'CompareStringEx',
                           'CompareStringOrdinal',
                           'CompareStringW',
                           'ConnectNamedPipe',
                           'ConsoleMenuControl',
                           'ContinueDebugEvent',
                           'ConvertCalDateTimeToSystemTime',
                           'ConvertDefaultLocale',
                           'ConvertFiberToThread',
                           'ConvertNLSDayOfWeekToWin32DayOfWeek',
                           'ConvertSystemTimeToCalDateTime',
                           'ConvertThreadToFiber',
                           'ConvertThreadToFiberEx',
                           'CopyContext',
                           'CopyFileA',
                           'CopyFileExA',
                           'CopyFileExW',
                           'CopyFileTransactedA',
                           'CopyFileTransactedW',
                           'CopyFileW',
                           'CopyLZFile',
                           'CreateActCtxA',
                           'CreateActCtxW',
                           'CreateBoundaryDescriptorA',
                           'CreateBoundaryDescriptorW',
                           'CreateConsoleScreenBuffer',
                           'CreateDirectoryA',
                           'CreateDirectoryExA',
                           'CreateDirectoryExW',
                           'CreateDirectoryTransactedA',
                           'CreateDirectoryTransactedW',
                           'CreateDirectoryW',
                           'CreateEventA',
                           'CreateEventExA',
                           'CreateEventExW',
                           'CreateEventW',
                           'CreateFiber',
                           'CreateFiberEx',
                           'CreateFileA',
                           'CreateFileMappingA',
                           'CreateFileMappingNumaA',
                           'CreateFileMappingNumaW',
                           'CreateFileMappingW',
                           'CreateFileTransactedA',
                           'CreateFileTransactedW',
                           'CreateFileW',
                           'CreateHardLinkA',
                           'CreateHardLinkTransactedA',
                           'CreateHardLinkTransactedW',
                           'CreateHardLinkW',
                           'CreateIoCompletionPort',
                           'CreateJobObjectA',
                           'CreateJobObjectW',
                           'CreateJobSet',
                           'CreateMailslotA',
                           'CreateMailslotW',
                           'CreateMemoryResourceNotification',
                           'CreateMutexA',
                           'CreateMutexExA',
                           'CreateMutexExW',
                           'CreateMutexW',
                           'CreateNamedPipeA',
                           'CreateNamedPipeW',
                           'CreatePipe',
                           'CreatePrivateNamespaceA',
                           'CreatePrivateNamespaceW',
                           'CreateProcessA',
                           'CreateProcessAsUserW',
                           'CreateProcessInternalA',
                           'CreateProcessInternalW',
                           'CreateProcessW',
                           'CreateRemoteThread',
                           'CreateRemoteThreadEx',
                           'CreateSemaphoreA',
                           'CreateSemaphoreExA',
                           'CreateSemaphoreExW',
                           'CreateSemaphoreW',
                           'CreateSocketHandle',
                           'CreateSymbolicLinkA',
                           'CreateSymbolicLinkTransactedA',
                           'CreateSymbolicLinkTransactedW',
                           'CreateSymbolicLinkW',
                           'CreateTapePartition',
                           'CreateThread',
                           'CreateThreadpool',
                           'CreateThreadpoolCleanupGroup',
                           'CreateThreadpoolIo',
                           'CreateThreadpoolTimer',
                           'CreateThreadpoolWait',
                           'CreateThreadpoolWork',
                           'CreateTimerQueue',
                           'CreateTimerQueueTimer',
                           'CreateToolhelp32Snapshot',
                           'CreateWaitableTimerA',
                           'CreateWaitableTimerExA',
                           'CreateWaitableTimerExW',
                           'CreateWaitableTimerW',
                           'CtrlRoutine',
                           'DeactivateActCtx',
                           'DebugActiveProcess',
                           'DebugActiveProcessStop',
                           'DebugBreak',
                           'DebugBreakProcess',
                           'DebugSetProcessKillOnExit',
                           'DecodePointer',
                           'DecodeSystemPointer',
                           'DefineDosDeviceA',
                           'DefineDosDeviceW',
                           'DelayLoadFailureHook',
                           'DeleteAtom',
                           'DeleteBoundaryDescriptor',
                           'DeleteCriticalSection',
                           'DeleteFiber',
                           'DeleteFileA',
                           'DeleteFileTransactedA',
                           'DeleteFileTransactedW',
                           'DeleteFileW',
                           'DeleteProcThreadAttributeList',
                           'DeleteTimerQueue',
                           'DeleteTimerQueueEx',
                           'DeleteTimerQueueTimer',
                           'DeleteVolumeMountPointA',
                           'DeleteVolumeMountPointW',
                           'DeviceIoControl',
                           'DisableThreadLibraryCalls',
                           'DisableThreadProfiling',
                           'DisassociateCurrentThreadFromCallback',
                           'DisconnectNamedPipe',
                           'DnsHostnameToComputerNameA',
                           'DnsHostnameToComputerNameW',
                           'DosDateTimeToFileTime',
                           'DosPathToSessionPathA',
                           'DosPathToSessionPathW',
                           'DuplicateConsoleHandle',
                           'DuplicateHandle',
                           'EnableThreadProfiling',
                           'EncodePointer',
                           'EncodeSystemPointer',
                           'EndUpdateResourceA',
                           'EndUpdateResourceW',
                           'EnterCriticalSection',
                           'EnumCalendarInfoA',
                           'EnumCalendarInfoExA',
                           'EnumCalendarInfoExEx',
                           'EnumCalendarInfoExW',
                           'EnumCalendarInfoW',
                           'EnumDateFormatsA',
                           'EnumDateFormatsExA',
                           'EnumDateFormatsExEx',
                           'EnumDateFormatsExW',
                           'EnumDateFormatsW',
                           'EnumLanguageGroupLocalesA',
                           'EnumLanguageGroupLocalesW',
                           'EnumResourceLanguagesA',
                           'EnumResourceLanguagesExA',
                           'EnumResourceLanguagesExW',
                           'EnumResourceLanguagesW',
                           'EnumResourceNamesA',
                           'EnumResourceNamesExA',
                           'EnumResourceNamesExW',
                           'EnumResourceNamesW',
                           'EnumResourceTypesA',
                           'EnumResourceTypesExA',
                           'EnumResourceTypesExW',
                           'EnumResourceTypesW',
                           'EnumSystemCodePagesA',
                           'EnumSystemCodePagesW',
                           'EnumSystemFirmwareTables',
                           'EnumSystemGeoID',
                           'EnumSystemLanguageGroupsA',
                           'EnumSystemLanguageGroupsW',
                           'EnumSystemLocalesA',
                           'EnumSystemLocalesEx',
                           'EnumSystemLocalesW',
                           'EnumTimeFormatsA',
                           'EnumTimeFormatsEx',
                           'EnumTimeFormatsW',
                           'EnumUILanguagesA',
                           'EnumUILanguagesW',
                           'EnumerateLocalComputerNamesA',
                           'EnumerateLocalComputerNamesW',
                           'EraseTape',
                           'EscapeCommFunction',
                           'ExitProcess',
                           'ExitThread',
                           'ExitVDM',
                           'ExpandEnvironmentStringsA',
                           'ExpandEnvironmentStringsW',
                           'ExpungeConsoleCommandHistoryA',
                           'ExpungeConsoleCommandHistoryW',
                           'FatalAppExitA',
                           'FatalAppExitW',
                           'FatalExit',
                           'FileTimeToDosDateTime',
                           'FileTimeToLocalFileTime',
                           'FileTimeToSystemTime',
                           'FillConsoleOutputAttribute',
                           'FillConsoleOutputCharacterA',
                           'FillConsoleOutputCharacterW',
                           'FindActCtxSectionGuid',
                           'FindActCtxSectionStringA',
                           'FindActCtxSectionStringW',
                           'FindAtomA',
                           'FindAtomW',
                           'FindClose',
                           'FindCloseChangeNotification',
                           'FindFirstChangeNotificationA',
                           'FindFirstChangeNotificationW',
                           'FindFirstFileA',
                           'FindFirstFileExA',
                           'FindFirstFileExW',
                           'FindFirstFileNameTransactedW',
                           'FindFirstFileNameW',
                           'FindFirstFileTransactedA',
                           'FindFirstFileTransactedW',
                           'FindFirstFileW',
                           'FindFirstStreamTransactedW',
                           'FindFirstStreamW',
                           'FindFirstVolumeA',
                           'FindFirstVolumeMountPointA',
                           'FindFirstVolumeMountPointW',
                           'FindFirstVolumeW',
                           'FindNLSString',
                           'FindNLSStringEx',
                           'FindNextChangeNotification',
                           'FindNextFileA',
                           'FindNextFileNameW',
                           'FindNextFileW',
                           'FindNextStreamW',
                           'FindNextVolumeA',
                           'FindNextVolumeMountPointA',
                           'FindNextVolumeMountPointW',
                           'FindNextVolumeW',
                           'FindResourceA',
                           'FindResourceExA',
                           'FindResourceExW',
                           'FindResourceW',
                           'FindStringOrdinal',
                           'FindVolumeClose',
                           'FindVolumeMountPointClose',
                           'FlsAlloc',
                           'FlsFree',
                           'FlsGetValue',
                           'FlsSetValue',
                           'FlushConsoleInputBuffer',
                           'FlushFileBuffers',
                           'FlushInstructionCache',
                           'FlushProcessWriteBuffers',
                           'FlushViewOfFile',
                           'FoldStringA',
                           'FoldStringW',
                           'FormatMessageA',
                           'FormatMessageW',
                           'FreeConsole',
                           'FreeEnvironmentStringsA',
                           'FreeEnvironmentStringsW',
                           'FreeLibrary',
                           'FreeLibraryAndExitThread',
                           'FreeLibraryWhenCallbackReturns',
                           'FreeResource',
                           'FreeUserPhysicalPages',
                           'GenerateConsoleCtrlEvent',
                           'GetACP',
                           'GetActiveProcessorCount',
                           'GetActiveProcessorGroupCount',
                           'GetApplicationRecoveryCallback',
                           'GetApplicationRestartSettings',
                           'GetAtomNameA',
                           'GetAtomNameW',
                           'GetBinaryType',
                           'GetBinaryTypeA',
                           'GetBinaryTypeW',
                           'GetCPInfo',
                           'GetCPInfoExA',
                           'GetCPInfoExW',
                           'GetCalendarDateFormat',
                           'GetCalendarDateFormatEx',
                           'GetCalendarDaysInMonth',
                           'GetCalendarDifferenceInDays',
                           'GetCalendarInfoA',
                           'GetCalendarInfoEx',
                           'GetCalendarInfoW',
                           'GetCalendarMonthsInYear',
                           'GetCalendarSupportedDateRange',
                           'GetCalendarWeekNumber',
                           'GetComPlusPackageInstallStatus',
                           'GetCommConfig',
                           'GetCommMask',
                           'GetCommModemStatus',
                           'GetCommProperties',
                           'GetCommState',
                           'GetCommTimeouts',
                           'GetCommandLineA',
                           'GetCommandLineW',
                           'GetCompressedFileSizeA',
                           'GetCompressedFileSizeTransactedA',
                           'GetCompressedFileSizeTransactedW',
                           'GetCompressedFileSizeW',
                           'GetComputerNameA',
                           'GetComputerNameExA',
                           'GetComputerNameExW',
                           'GetComputerNameW',
                           'GetConsoleAliasA',
                           'GetConsoleAliasExesA',
                           'GetConsoleAliasExesLengthA',
                           'GetConsoleAliasExesLengthW',
                           'GetConsoleAliasExesW',
                           'GetConsoleAliasW',
                           'GetConsoleAliasesA',
                           'GetConsoleAliasesLengthA',
                           'GetConsoleAliasesLengthW',
                           'GetConsoleAliasesW',
                           'GetConsoleCP',
                           'GetConsoleCharType',
                           'GetConsoleCommandHistoryA',
                           'GetConsoleCommandHistoryLengthA',
                           'GetConsoleCommandHistoryLengthW',
                           'GetConsoleCommandHistoryW',
                           'GetConsoleCursorInfo',
                           'GetConsoleCursorMode',
                           'GetConsoleDisplayMode',
                           'GetConsoleFontInfo',
                           'GetConsoleFontSize',
                           'GetConsoleHardwareState',
                           'GetConsoleHistoryInfo',
                           'GetConsoleInputExeNameA',
                           'GetConsoleInputExeNameW',
                           'GetConsoleInputWaitHandle',
                           'GetConsoleKeyboardLayoutNameA',
                           'GetConsoleKeyboardLayoutNameW',
                           'GetConsoleMode',
                           'GetConsoleNlsMode',
                           'GetConsoleOriginalTitleA',
                           'GetConsoleOriginalTitleW',
                           'GetConsoleOutputCP',
                           'GetConsoleProcessList',
                           'GetConsoleScreenBufferInfo',
                           'GetConsoleScreenBufferInfoEx',
                           'GetConsoleSelectionInfo',
                           'GetConsoleTitleA',
                           'GetConsoleTitleW',
                           'GetConsoleWindow',
                           'GetCurrencyFormatA',
                           'GetCurrencyFormatEx',
                           'GetCurrencyFormatW',
                           'GetCurrentActCtx',
                           'GetCurrentConsoleFont',
                           'GetCurrentConsoleFontEx',
                           'GetCurrentDirectoryA',
                           'GetCurrentDirectoryW',
                           'GetCurrentProcess',
                           'GetCurrentProcessId',
                           'GetCurrentProcessorNumber',
                           'GetCurrentProcessorNumberEx',
                           'GetCurrentThread',
                           'GetCurrentThreadId',
                           'GetDateFormatA',
                           'GetDateFormatEx',
                           'GetDateFormatW',
                           'GetDefaultCommConfigA',
                           'GetDefaultCommConfigW',
                           'GetDevicePowerState',
                           'GetDiskFreeSpaceA',
                           'GetDiskFreeSpaceExA',
                           'GetDiskFreeSpaceExW',
                           'GetDiskFreeSpaceW',
                           'GetDllDirectoryA',
                           'GetDllDirectoryW',
                           'GetDriveTypeA',
                           'GetDriveTypeW',
                           'GetDurationFormat',
                           'GetDurationFormatEx',
                           'GetDynamicTimeZoneInformation',
                           'GetEnabledXStateFeatures',
                           'GetEnvironmentStrings',
                           'GetEnvironmentStringsA',
                           'GetEnvironmentStringsW',
                           'GetEnvironmentVariableA',
                           'GetEnvironmentVariableW',
                           'GetEraNameCountedString',
                           'GetErrorMode',
                           'GetExitCodeProcess',
                           'GetExitCodeThread',
                           'GetExpandedNameA',
                           'GetExpandedNameW',
                           'GetFileAttributesA',
                           'GetFileAttributesExA',
                           'GetFileAttributesExW',
                           'GetFileAttributesTransactedA',
                           'GetFileAttributesTransactedW',
                           'GetFileAttributesW',
                           'GetFileBandwidthReservation',
                           'GetFileInformationByHandle',
                           'GetFileInformationByHandleEx',
                           'GetFileMUIInfo',
                           'GetFileMUIPath',
                           'GetFileSize',
                           'GetFileSizeEx',
                           'GetFileTime',
                           'GetFileType',
                           'GetFinalPathNameByHandleA',
                           'GetFinalPathNameByHandleW',
                           'GetFirmwareEnvironmentVariableA',
                           'GetFirmwareEnvironmentVariableW',
                           'GetFullPathNameA',
                           'GetFullPathNameTransactedA',
                           'GetFullPathNameTransactedW',
                           'GetFullPathNameW',
                           'GetGeoInfoA',
                           'GetGeoInfoW',
                           'GetHandleContext',
                           'GetHandleInformation',
                           'GetLargePageMinimum',
                           'GetLargestConsoleWindowSize',
                           'GetLastError',
                           'GetLocalTime',
                           'GetLocaleInfoA',
                           'GetLocaleInfoEx',
                           'GetLocaleInfoW',
                           'GetLogicalDriveStringsA',
                           'GetLogicalDriveStringsW',
                           'GetLogicalDrives',
                           'GetLogicalProcessorInformation',
                           'GetLogicalProcessorInformationEx',
                           'GetLongPathNameA',
                           'GetLongPathNameTransactedA',
                           'GetLongPathNameTransactedW',
                           'GetLongPathNameW',
                           'GetMailslotInfo',
                           'GetMaximumProcessorCount',
                           'GetMaximumProcessorGroupCount',
                           'GetModuleFileNameA',
                           'GetModuleFileNameW',
                           'GetModuleHandleA',
                           'GetModuleHandleExA',
                           'GetModuleHandleExW',
                           'GetModuleHandleW',
                           'GetNLSVersion',
                           'GetNLSVersionEx',
                           'GetNamedPipeAttribute',
                           'GetNamedPipeClientComputerNameA',
                           'GetNamedPipeClientComputerNameW',
                           'GetNamedPipeClientProcessId',
                           'GetNamedPipeClientSessionId',
                           'GetNamedPipeHandleStateA',
                           'GetNamedPipeHandleStateW',
                           'GetNamedPipeInfo',
                           'GetNamedPipeServerProcessId',
                           'GetNamedPipeServerSessionId',
                           'GetNativeSystemInfo',
                           'GetNextVDMCommand',
                           'GetNumaAvailableMemoryNode',
                           'GetNumaAvailableMemoryNodeEx',
                           'GetNumaHighestNodeNumber',
                           'GetNumaNodeNumberFromHandle',
                           'GetNumaNodeProcessorMask',
                           'GetNumaNodeProcessorMaskEx',
                           'GetNumaProcessorNode',
                           'GetNumaProcessorNodeEx',
                           'GetNumaProximityNode',
                           'GetNumaProximityNodeEx',
                           'GetNumberFormatA',
                           'GetNumberFormatEx',
                           'GetNumberFormatW',
                           'GetNumberOfConsoleFonts',
                           'GetNumberOfConsoleInputEvents',
                           'GetNumberOfConsoleMouseButtons',
                           'GetOEMCP',
                           'GetOverlappedResult',
                           'GetPhysicallyInstalledSystemMemory',
                           'GetPriorityClass',
                           'GetPrivateProfileIntA',
                           'GetPrivateProfileIntW',
                           'GetPrivateProfileSectionA',
                           'GetPrivateProfileSectionNamesA',
                           'GetPrivateProfileSectionNamesW',
                           'GetPrivateProfileSectionW',
                           'GetPrivateProfileStringA',
                           'GetPrivateProfileStringW',
                           'GetPrivateProfileStructA',
                           'GetPrivateProfileStructW',
                           'GetProcAddress',
                           'GetProcessAffinityMask',
                           'GetProcessDEPPolicy',
                           'GetProcessGroupAffinity',
                           'GetProcessHandleCount',
                           'GetProcessHeap',
                           'GetProcessHeaps',
                           'GetProcessId',
                           'GetProcessIdOfThread',
                           'GetProcessIoCounters',
                           'GetProcessPreferredUILanguages',
                           'GetProcessPriorityBoost',
                           'GetProcessShutdownParameters',
                           'GetProcessTimes',
                           'GetProcessUserModeExceptionPolicy',
                           'GetProcessVersion',
                           'GetProcessWorkingSetSize',
                           'GetProcessWorkingSetSizeEx',
                           'GetProcessorSystemCycleTime',
                           'GetProductInfo',
                           'GetProfileIntA',
                           'GetProfileIntW',
                           'GetProfileSectionA',
                           'GetProfileSectionW',
                           'GetProfileStringA',
                           'GetProfileStringW',
                           'GetQueuedCompletionStatus',
                           'GetQueuedCompletionStatusEx',
                           'GetShortPathNameA',
                           'GetShortPathNameW',
                           'GetStartupInfoA',
                           'GetStartupInfoW',
                           'GetStdHandle',
                           'GetStringScripts',
                           'GetStringTypeA',
                           'GetStringTypeExA',
                           'GetStringTypeExW',
                           'GetStringTypeW',
                           'GetSystemDEPPolicy',
                           'GetSystemDefaultLCID',
                           'GetSystemDefaultLangID',
                           'GetSystemDefaultLocaleName',
                           'GetSystemDefaultUILanguage',
                           'GetSystemDirectoryA',
                           'GetSystemDirectoryW',
                           'GetSystemFileCacheSize',
                           'GetSystemFirmwareTable',
                           'GetSystemInfo',
                           'GetSystemPowerStatus',
                           'GetSystemPreferredUILanguages',
                           'GetSystemRegistryQuota',
                           'GetSystemTime',
                           'GetSystemTimeAdjustment',
                           'GetSystemTimeAsFileTime',
                           'GetSystemTimes',
                           'GetSystemWindowsDirectoryA',
                           'GetSystemWindowsDirectoryW',
                           'GetSystemWow64DirectoryA',
                           'GetSystemWow64DirectoryW',
                           'GetTapeParameters',
                           'GetTapePosition',
                           'GetTapeStatus',
                           'GetTempFileNameA',
                           'GetTempFileNameW',
                           'GetTempPathA',
                           'GetTempPathW',
                           'GetThreadContext',
                           'GetThreadErrorMode',
                           'GetThreadGroupAffinity',
                           'GetThreadIOPendingFlag',
                           'GetThreadId',
                           'GetThreadIdealProcessorEx',
                           'GetThreadLocale',
                           'GetThreadPreferredUILanguages',
                           'GetThreadPriority',
                           'GetThreadPriorityBoost',
                           'GetThreadSelectorEntry',
                           'GetThreadTimes',
                           'GetThreadUILanguage',
                           'GetTickCount',
                           'GetTickCount64',
                           'GetTimeFormatA',
                           'GetTimeFormatEx',
                           'GetTimeFormatW',
                           'GetTimeZoneInformation',
                           'GetTimeZoneInformationForYear',
                           'GetUILanguageInfo',
                           'GetUserDefaultLCID',
                           'GetUserDefaultLangID',
                           'GetUserDefaultLocaleName',
                           'GetUserDefaultUILanguage',
                           'GetUserGeoID',
                           'GetUserPreferredUILanguages',
                           'GetVDMCurrentDirectories',
                           'GetVersion',
                           'GetVersionExA',
                           'GetVersionExW',
                           'GetVolumeInformationA',
                           'GetVolumeInformationByHandleW',
                           'GetVolumeInformationW',
                           'GetVolumeNameForVolumeMountPointA',
                           'GetVolumeNameForVolumeMountPointW',
                           'GetVolumePathNameA',
                           'GetVolumePathNameW',
                           'GetVolumePathNamesForVolumeNameA',
                           'GetVolumePathNamesForVolumeNameW',
                           'GetWindowsDirectoryA',
                           'GetWindowsDirectoryW',
                           'GetWriteWatch',
                           'GetXStateFeaturesMask',
                           'GlobalAddAtomA',
                           'GlobalAddAtomW',
                           'GlobalAlloc',
                           'GlobalCompact',
                           'GlobalDeleteAtom',
                           'GlobalFindAtomA',
                           'GlobalFindAtomW',
                           'GlobalFix',
                           'GlobalFlags',
                           'GlobalFree',
                           'GlobalGetAtomNameA',
                           'GlobalGetAtomNameW',
                           'GlobalHandle',
                           'GlobalLock',
                           'GlobalMemoryStatus',
                           'GlobalMemoryStatusEx',
                           'GlobalReAlloc',
                           'GlobalSize',
                           'GlobalUnWire',
                           'GlobalUnfix',
                           'GlobalUnlock',
                           'GlobalWire',
                           'Heap32First',
                           'Heap32ListFirst',
                           'Heap32ListNext',
                           'Heap32Next',
                           'HeapAlloc',
                           'HeapCompact',
                           'HeapCreate',
                           'HeapDestroy',
                           'HeapFree',
                           'HeapLock',
                           'HeapQueryInformation',
                           'HeapReAlloc',
                           'HeapSetInformation',
                           'HeapSize',
                           'HeapSummary',
                           'HeapUnlock',
                           'HeapValidate',
                           'HeapWalk',
                           'IdnToAscii',
                           'IdnToNameprepUnicode',
                           'IdnToUnicode',
                           'InitAtomTable',
                           'InitOnceBeginInitialize',
                           'InitOnceComplete',
                           'InitOnceExecuteOnce',
                           'InitOnceInitialize',
                           'InitializeConditionVariable',
                           'InitializeContext',
                           'InitializeCriticalSection',
                           'InitializeCriticalSectionAndSpinCount',
                           'InitializeCriticalSectionEx',
                           'InitializeProcThreadAttributeList',
                           'InitializeSListHead',
                           'InitializeSRWLock',
                           'InterlockedCompareExchange',
                           'InterlockedCompareExchange64',
                           'InterlockedDecrement',
                           'InterlockedExchange',
                           'InterlockedExchangeAdd',
                           'InterlockedFlushSList',
                           'InterlockedIncrement',
                           'InterlockedPopEntrySList',
                           'InterlockedPushEntrySList',
                           'InterlockedPushListSList',
                           'InvalidateConsoleDIBits',
                           'IsBadCodePtr',
                           'IsBadHugeReadPtr',
                           'IsBadHugeWritePtr',
                           'IsBadReadPtr',
                           'IsBadStringPtrA',
                           'IsBadStringPtrW',
                           'IsBadWritePtr',
                           'IsCalendarLeapDay',
                           'IsCalendarLeapMonth',
                           'IsCalendarLeapYear',
                           'IsDBCSLeadByte',
                           'IsDBCSLeadByteEx',
                           'IsDebuggerPresent',
                           'IsNLSDefinedString',
                           'IsNormalizedString',
                           'IsProcessInJob',
                           'IsProcessorFeaturePresent',
                           'IsSystemResumeAutomatic',
                           'IsThreadAFiber',
                           'IsThreadpoolTimerSet',
                           'IsTimeZoneRedirectionEnabled',
                           'IsValidCalDateTime',
                           'IsValidCodePage',
                           'IsValidLanguageGroup',
                           'IsValidLocale',
                           'IsValidLocaleName',
                           'IsWow64Process',
                           'K32EmptyWorkingSet',
                           'K32EnumDeviceDrivers',
                           'K32EnumPageFilesA',
                           'K32EnumPageFilesW',
                           'K32EnumProcessModules',
                           'K32EnumProcessModulesEx',
                           'K32EnumProcesses',
                           'K32GetDeviceDriverBaseNameA',
                           'K32GetDeviceDriverBaseNameW',
                           'K32GetDeviceDriverFileNameA',
                           'K32GetDeviceDriverFileNameW',
                           'K32GetMappedFileNameA',
                           'K32GetMappedFileNameW',
                           'K32GetModuleBaseNameA',
                           'K32GetModuleBaseNameW',
                           'K32GetModuleFileNameExA',
                           'K32GetModuleFileNameExW',
                           'K32GetModuleInformation',
                           'K32GetPerformanceInfo',
                           'K32GetProcessImageFileNameA',
                           'K32GetProcessImageFileNameW',
                           'K32GetProcessMemoryInfo',
                           'K32GetWsChanges',
                           'K32GetWsChangesEx',
                           'K32InitializeProcessForWsWatch',
                           'K32QueryWorkingSet',
                           'K32QueryWorkingSetEx',
                           'LCIDToLocaleName',
                           'LCMapStringA',
                           'LCMapStringEx',
                           'LCMapStringW',
                           'LZClose',
                           'LZCloseFile',
                           'LZCopy',
                           'LZCreateFileW',
                           'LZDone',
                           'LZInit',
                           'LZOpenFileA',
                           'LZOpenFileW',
                           'LZRead',
                           'LZSeek',
                           'LZStart',
                           'LeaveCriticalSection',
                           'LeaveCriticalSectionWhenCallbackReturns',
                           'LoadAppInitDlls',
                           'LoadLibraryA',
                           'LoadLibraryExA',
                           'LoadLibraryExW',
                           'LoadLibraryW',
                           'LoadModule',
                           'LoadResource',
                           'LoadStringBaseExW',
                           'LoadStringBaseW',
                           'LocalAlloc',
                           'LocalCompact',
                           'LocalFileTimeToFileTime',
                           'LocalFlags',
                           'LocalFree',
                           'LocalHandle',
                           'LocalLock',
                           'LocalReAlloc',
                           'LocalShrink',
                           'LocalSize',
                           'LocalUnlock',
                           'LocaleNameToLCID',
                           'LocateXStateFeature',
                           'LockFile',
                           'LockFileEx',
                           'LockResource',
                           'MapUserPhysicalPages',
                           'MapUserPhysicalPagesScatter',
                           'MapViewOfFile',
                           'MapViewOfFileEx',
                           'MapViewOfFileExNuma',
                           'Module32First',
                           'Module32FirstW',
                           'Module32Next',
                           'Module32NextW',
                           'MoveFileA',
                           'MoveFileExA',
                           'MoveFileExW',
                           'MoveFileTransactedA',
                           'MoveFileTransactedW',
                           'MoveFileW',
                           'MoveFileWithProgressA',
                           'MoveFileWithProgressW',
                           'MulDiv',
                           'MultiByteToWideChar',
                           'NeedCurrentDirectoryForExePathA',
                           'NeedCurrentDirectoryForExePathW',
                           'NlsCheckPolicy',
                           'NlsEventDataDescCreate',
                           'NlsGetCacheUpdateCount',
                           'NlsUpdateLocale',
                           'NlsUpdateSystemLocale',
                           'NlsWriteEtwEvent',
                           'NormalizeString',
                           'NotifyMountMgr',
                           'NotifyUILanguageChange',
                           'OpenConsoleW',
                           'OpenEventA',
                           'OpenEventW',
                           'OpenFile',
                           'OpenFileById',
                           'OpenFileMappingA',
                           'OpenFileMappingW',
                           'OpenJobObjectA',
                           'OpenJobObjectW',
                           'OpenMutexA',
                           'OpenMutexW',
                           'OpenPrivateNamespaceA',
                           'OpenPrivateNamespaceW',
                           'OpenProcess',
                           'OpenProcessToken',
                           'OpenProfileUserMapping',
                           'OpenSemaphoreA',
                           'OpenSemaphoreW',
                           'OpenThread',
                           'OpenThreadToken',
                           'OpenWaitableTimerA',
                           'OpenWaitableTimerW',
                           'OutputDebugStringA',
                           'OutputDebugStringW',
                           'PeekConsoleInputA',
                           'PeekConsoleInputW',
                           'PeekNamedPipe',
                           'PostQueuedCompletionStatus',
                           'PowerClearRequest',
                           'PowerCreateRequest',
                           'PowerSetRequest',
                           'PrepareTape',
                           'PrivCopyFileExW',
                           'PrivMoveFileIdentityW',
                           'Process32First',
                           'Process32FirstW',
                           'Process32Next',
                           'Process32NextW',
                           'ProcessIdToSessionId',
                           'PulseEvent',
                           'PurgeComm',
                           'QueryActCtxSettingsW',
                           'QueryActCtxW',
                           'QueryDepthSList',
                           'QueryDosDeviceA',
                           'QueryDosDeviceW',
                           'QueryFullProcessImageNameA',
                           'QueryFullProcessImageNameW',
                           'QueryIdleProcessorCycleTime',
                           'QueryIdleProcessorCycleTimeEx',
                           'QueryInformationJobObject',
                           'QueryMemoryResourceNotification',
                           'QueryPerformanceCounter',
                           'QueryPerformanceFrequency',
                           'QueryProcessAffinityUpdateMode',
                           'QueryProcessCycleTime',
                           'QueryThreadCycleTime',
                           'QueryThreadProfiling',
                           'QueryThreadpoolStackInformation',
                           'QueryUnbiasedInterruptTime',
                           'QueueUserAPC',
                           'QueueUserWorkItem',
                           'RaiseException',
                           'RaiseFailFastException',
                           'ReOpenFile',
                           'ReadConsoleA',
                           'ReadConsoleInputA',
                           'ReadConsoleInputExA',
                           'ReadConsoleInputExW',
                           'ReadConsoleInputW',
                           'ReadConsoleOutputA',
                           'ReadConsoleOutputAttribute',
                           'ReadConsoleOutputCharacterA',
                           'ReadConsoleOutputCharacterW',
                           'ReadConsoleOutputW',
                           'ReadConsoleW',
                           'ReadDirectoryChangesW',
                           'ReadFile',
                           'ReadFileEx',
                           'ReadFileScatter',
                           'ReadProcessMemory',
                           'ReadThreadProfilingData',
                           'RegCloseKey',
                           'RegCreateKeyExA',
                           'RegCreateKeyExW',
                           'RegDeleteKeyExA',
                           'RegDeleteKeyExW',
                           'RegDeleteTreeA',
                           'RegDeleteTreeW',
                           'RegDeleteValueA',
                           'RegDeleteValueW',
                           'RegDisablePredefinedCacheEx',
                           'RegEnumKeyExA',
                           'RegEnumKeyExW',
                           'RegEnumValueA',
                           'RegEnumValueW',
                           'RegFlushKey',
                           'RegGetKeySecurity',
                           'RegGetValueA',
                           'RegGetValueW',
                           'RegKrnGetGlobalState',
                           'RegKrnInitialize',
                           'RegLoadKeyA',
                           'RegLoadKeyW',
                           'RegLoadMUIStringA',
                           'RegLoadMUIStringW',
                           'RegNotifyChangeKeyValue',
                           'RegOpenCurrentUser',
                           'RegOpenKeyExA',
                           'RegOpenKeyExW',
                           'RegOpenUserClassesRoot',
                           'RegQueryInfoKeyA',
                           'RegQueryInfoKeyW',
                           'RegQueryValueExA',
                           'RegQueryValueExW',
                           'RegRestoreKeyA',
                           'RegRestoreKeyW',
                           'RegSaveKeyExA',
                           'RegSaveKeyExW',
                           'RegSetKeySecurity',
                           'RegSetValueExA',
                           'RegSetValueExW',
                           'RegUnLoadKeyA',
                           'RegUnLoadKeyW',
                           'RegisterApplicationRecoveryCallback',
                           'RegisterApplicationRestart',
                           'RegisterConsoleIME',
                           'RegisterConsoleOS2',
                           'RegisterConsoleVDM',
                           'RegisterWaitForInputIdle',
                           'RegisterWaitForSingleObject',
                           'RegisterWaitForSingleObjectEx',
                           'RegisterWowBaseHandlers',
                           'RegisterWowExec',
                           'ReleaseActCtx',
                           'ReleaseMutex',
                           'ReleaseMutexWhenCallbackReturns',
                           'ReleaseSRWLockExclusive',
                           'ReleaseSRWLockShared',
                           'ReleaseSemaphore',
                           'ReleaseSemaphoreWhenCallbackReturns',
                           'RemoveDirectoryA',
                           'RemoveDirectoryTransactedA',
                           'RemoveDirectoryTransactedW',
                           'RemoveDirectoryW',
                           'RemoveDllDirectory',
                           'RemoveLocalAlternateComputerNameA',
                           'RemoveLocalAlternateComputerNameW',
                           'RemoveSecureMemoryCacheCallback',
                           'RemoveVectoredContinueHandler',
                           'RemoveVectoredExceptionHandler',
                           'ReplaceFile',
                           'ReplaceFileA',
                           'ReplaceFileW',
                           'ReplacePartitionUnit',
                           'RequestDeviceWakeup',
                           'RequestWakeupLatency',
                           'ResetEvent',
                           'ResetWriteWatch',
                           'ResolveLocaleName',
                           'RestoreLastError',
                           'ResumeThread',
                           'RtlCaptureContext',
                           'RtlCaptureStackBackTrace',
                           'RtlFillMemory',
                           'RtlMoveMemory',
                           'RtlUnwind',
                           'RtlZeroMemory',
                           'ScrollConsoleScreenBufferA',
                           'ScrollConsoleScreenBufferW',
                           'SearchPathA',
                           'SearchPathW',
                           'SetCalendarInfoA',
                           'SetCalendarInfoW',
                           'SetClientTimeZoneInformation',
                           'SetComPlusPackageInstallStatus',
                           'SetCommBreak',
                           'SetCommConfig',
                           'SetCommMask',
                           'SetCommState',
                           'SetCommTimeouts',
                           'SetComputerNameA',
                           'SetComputerNameExA',
                           'SetComputerNameExW',
                           'SetComputerNameW',
                           'SetConsoleActiveScreenBuffer',
                           'SetConsoleCP',
                           'SetConsoleCtrlHandler',
                           'SetConsoleCursor',
                           'SetConsoleCursorInfo',
                           'SetConsoleCursorMode',
                           'SetConsoleCursorPosition',
                           'SetConsoleDisplayMode',
                           'SetConsoleFont',
                           'SetConsoleHardwareState',
                           'SetConsoleHistoryInfo',
                           'SetConsoleIcon',
                           'SetConsoleInputExeNameA',
                           'SetConsoleInputExeNameW',
                           'SetConsoleKeyShortcuts',
                           'SetConsoleLocalEUDC',
                           'SetConsoleMaximumWindowSize',
                           'SetConsoleMenuClose',
                           'SetConsoleMode',
                           'SetConsoleNlsMode',
                           'SetConsoleNumberOfCommandsA',
                           'SetConsoleNumberOfCommandsW',
                           'SetConsoleOS2OemFormat',
                           'SetConsoleOutputCP',
                           'SetConsolePalette',
                           'SetConsoleScreenBufferInfoEx',
                           'SetConsoleScreenBufferSize',
                           'SetConsoleTextAttribute',
                           'SetConsoleTitleA',
                           'SetConsoleTitleW',
                           'SetConsoleWindowInfo',
                           'SetCriticalSectionSpinCount',
                           'SetCurrentConsoleFontEx',
                           'SetCurrentDirectoryA',
                           'SetCurrentDirectoryW',
                           'SetDefaultCommConfigA',
                           'SetDefaultCommConfigW',
                           'SetDefaultDllDirectories',
                           'SetDllDirectoryA',
                           'SetDllDirectoryW',
                           'SetDynamicTimeZoneInformation',
                           'SetEndOfFile',
                           'SetEnvironmentStringsA',
                           'SetEnvironmentStringsW',
                           'SetEnvironmentVariableA',
                           'SetEnvironmentVariableW',
                           'SetErrorMode',
                           'SetEvent',
                           'SetEventWhenCallbackReturns',
                           'SetFileApisToANSI',
                           'SetFileApisToOEM',
                           'SetFileAttributesA',
                           'SetFileAttributesTransactedA',
                           'SetFileAttributesTransactedW',
                           'SetFileAttributesW',
                           'SetFileBandwidthReservation',
                           'SetFileCompletionNotificationModes',
                           'SetFileInformationByHandle',
                           'SetFileIoOverlappedRange',
                           'SetFilePointer',
                           'SetFilePointerEx',
                           'SetFileShortNameA',
                           'SetFileShortNameW',
                           'SetFileTime',
                           'SetFileValidData',
                           'SetFirmwareEnvironmentVariableA',
                           'SetFirmwareEnvironmentVariableW',
                           'SetHandleContext',
                           'SetHandleCount',
                           'SetHandleInformation',
                           'SetInformationJobObject',
                           'SetLastConsoleEventActive',
                           'SetLastError',
                           'SetLocalPrimaryComputerNameA',
                           'SetLocalPrimaryComputerNameW',
                           'SetLocalTime',
                           'SetLocaleInfoA',
                           'SetLocaleInfoW',
                           'SetMailslotInfo',
                           'SetMessageWaitingIndicator',
                           'SetNamedPipeAttribute',
                           'SetNamedPipeHandleState',
                           'SetPriorityClass',
                           'SetProcessAffinityMask',
                           'SetProcessAffinityUpdateMode',
                           'SetProcessDEPPolicy',
                           'SetProcessPreferredUILanguages',
                           'SetProcessPriorityBoost',
                           'SetProcessShutdownParameters',
                           'SetProcessUserModeExceptionPolicy',
                           'SetProcessWorkingSetSize',
                           'SetProcessWorkingSetSizeEx',
                           'SetSearchPathMode',
                           'SetStdHandle',
                           'SetStdHandleEx',
                           'SetSystemFileCacheSize',
                           'SetSystemPowerState',
                           'SetSystemTime',
                           'SetSystemTimeAdjustment',
                           'SetTapeParameters',
                           'SetTapePosition',
                           'SetTermsrvAppInstallMode',
                           'SetThreadAffinityMask',
                           'SetThreadContext',
                           'SetThreadErrorMode',
                           'SetThreadExecutionState',
                           'SetThreadGroupAffinity',
                           'SetThreadIdealProcessor',
                           'SetThreadIdealProcessorEx',
                           'SetThreadLocale',
                           'SetThreadPreferredUILanguages',
                           'SetThreadPriority',
                           'SetThreadPriorityBoost',
                           'SetThreadStackGuarantee',
                           'SetThreadToken',
                           'SetThreadUILanguage',
                           'SetThreadpoolStackInformation',
                           'SetThreadpoolThreadMaximum',
                           'SetThreadpoolThreadMinimum',
                           'SetThreadpoolTimer',
                           'SetThreadpoolWait',
                           'SetTimeZoneInformation',
                           'SetTimerQueueTimer',
                           'SetUnhandledExceptionFilter',
                           'SetUserGeoID',
                           'SetVDMCurrentDirectories',
                           'SetVolumeLabelA',
                           'SetVolumeLabelW',
                           'SetVolumeMountPointA',
                           'SetVolumeMountPointW',
                           'SetWaitableTimer',
                           'SetWaitableTimerEx',
                           'SetXStateFeaturesMask',
                           'SetupComm',
                           'ShowConsoleCursor',
                           'SignalObjectAndWait',
                           'SizeofResource',
                           'Sleep',
                           'SleepConditionVariableCS',
                           'SleepConditionVariableSRW',
                           'SleepEx',
                           'SortCloseHandle',
                           'SortGetHandle',
                           'StartThreadpoolIo',
                           'SubmitThreadpoolWork',
                           'SuspendThread',
                           'SwitchToFiber',
                           'SwitchToThread',
                           'SystemTimeToFileTime',
                           'SystemTimeToTzSpecificLocalTime',
                           'SystemTimeToTzSpecificLocalTimeEx',
                           'TerminateJobObject',
                           'TerminateProcess',
                           'TerminateThread',
                           'TermsrvAppInstallMode',
                           'Thread32First',
                           'Thread32Next',
                           'TlsAlloc',
                           'TlsFree',
                           'TlsGetValue',
                           'TlsSetValue',
                           'Toolhelp32ReadProcessMemory',
                           'TransactNamedPipe',
                           'TransmitCommChar',
                           'TryAcquireSRWLockExclusive',
                           'TryAcquireSRWLockShared',
                           'TryEnterCriticalSection',
                           'TrySubmitThreadpoolCallback',
                           'TzSpecificLocalTimeToSystemTime',
                           'TzSpecificLocalTimeToSystemTimeEx',
                           'UTRegister',
                           'UTUnRegister',
                           'UnhandledExceptionFilter',
                           'UnlockFile',
                           'UnlockFileEx',
                           'UnmapViewOfFile',
                           'UnregisterApplicationRecoveryCallback',
                           'UnregisterApplicationRestart',
                           'UnregisterConsoleIME',
                           'UnregisterWait',
                           'UnregisterWaitEx',
                           'UpdateCalendarDayOfWeek',
                           'UpdateProcThreadAttribute',
                           'UpdateResourceA',
                           'UpdateResourceW',
                           'VDMConsoleOperation',
                           'VDMOperationStarted',
                           'VerLanguageNameA',
                           'VerLanguageNameW',
                           'VerSetConditionMask',
                           'VerifyConsoleIoHandle',
                           'VerifyScripts',
                           'VerifyVersionInfoA',
                           'VerifyVersionInfoW',
                           'VirtualAlloc',
                           'VirtualAllocEx',
                           'VirtualAllocExNuma',
                           'VirtualFree',
                           'VirtualFreeEx',
                           'VirtualLock',
                           'VirtualProtect',
                           'VirtualProtectEx',
                           'VirtualQuery',
                           'VirtualQueryEx',
                           'VirtualUnlock',
                           'WTSGetActiveConsoleSessionId',
                           'WaitCommEvent',
                           'WaitForDebugEvent',
                           'WaitForMultipleObjects',
                           'WaitForMultipleObjectsEx',
                           'WaitForSingleObject',
                           'WaitForSingleObjectEx',
                           'WaitForThreadpoolIoCallbacks',
                           'WaitForThreadpoolTimerCallbacks',
                           'WaitForThreadpoolWaitCallbacks',
                           'WaitForThreadpoolWorkCallbacks',
                           'WaitNamedPipeA',
                           'WaitNamedPipeW',
                           'WakeAllConditionVariable',
                           'WakeConditionVariable',
                           'WerGetFlags',
                           'WerRegisterFile',
                           'WerRegisterMemoryBlock',
                           'WerRegisterRuntimeExceptionModule',
                           'WerSetFlags',
                           'WerUnregisterFile',
                           'WerUnregisterMemoryBlock',
                           'WerUnregisterRuntimeExceptionModule',
                           'WerpCleanupMessageMapping',
                           'WerpInitiateRemoteRecovery',
                           'WerpNotifyLoadStringResource',
                           'WerpNotifyLoadStringResourceEx',
                           'WerpNotifyUseStringResource',
                           'WerpStringLookup',
                           'WideCharToMultiByte',
                           'WinExec',
                           'Wow64DisableWow64FsRedirection',
                           'Wow64EnableWow64FsRedirection',
                           'Wow64GetThreadContext',
                           'Wow64GetThreadSelectorEntry',
                           'Wow64RevertWow64FsRedirection',
                           'Wow64SetThreadContext',
                           'Wow64SuspendThread',
                           'WriteConsoleA',
                           'WriteConsoleInputA',
                           'WriteConsoleInputVDMA',
                           'WriteConsoleInputVDMW',
                           'WriteConsoleInputW',
                           'WriteConsoleOutputA',
                           'WriteConsoleOutputAttribute',
                           'WriteConsoleOutputCharacterA',
                           'WriteConsoleOutputCharacterW',
                           'WriteConsoleOutputW',
                           'WriteConsoleW',
                           'WriteFile',
                           'WriteFileEx',
                           'WriteFileGather',
                           'WritePrivateProfileSectionA',
                           'WritePrivateProfileSectionW',
                           'WritePrivateProfileStringA',
                           'WritePrivateProfileStringW',
                           'WritePrivateProfileStructA',
                           'WritePrivateProfileStructW',
                           'WriteProcessMemory',
                           'WriteProfileSectionA',
                           'WriteProfileSectionW',
                           'WriteProfileStringA',
                           'WriteProfileStringW',
                           'WriteTapemark',
                           'ZombifyActCtx',
                           '_hread',
                           '_hwrite',
                           '_lclose',
                           '_lcreat',
                           '_llseek',
                           '_lopen',
                           '_lread',
                           '_lwrite',
                           'lstrcat',
                           'lstrcatA',
                           'lstrcatW',
                           'lstrcmp',
                           'lstrcmpA',
                           'lstrcmpW',
                           'lstrcmpi',
                           'lstrcmpiA',
                           'lstrcmpiW',
                           'lstrcpy',
                           'lstrcpyA',
                           'lstrcpyW',
                           'lstrcpyn',
                           'lstrcpynA',
                           'lstrcpynW',
                           'lstrlen',
                           'lstrlenA',
                           'lstrlenW',
                           ],
          'ws2_32.dll': ['FreeAddrInfoEx',
                         'FreeAddrInfoExW',
                         'FreeAddrInfoW',
                         'GetAddrInfoExA',
                         'GetAddrInfoExW',
                         'GetAddrInfoW',
                         'GetNameInfoW',
                         'InetNtopW',
                         'InetPtonW',
                         'SetAddrInfoExA',
                         'SetAddrInfoExW',
                         'WEP',
                         'WPUCompleteOverlappedRequest',
                         'WSAAccept',
                         'WSAAddressToStringA',
                         'WSAAddressToStringW',
                         'WSAAdvertiseProvider',
                         'WSAAsyncGetHostByAddr',
                         'WSAAsyncGetHostByName',
                         'WSAAsyncGetProtoByName',
                         'WSAAsyncGetProtoByNumber',
                         'WSAAsyncGetServByName',
                         'WSAAsyncGetServByPort',
                         'WSAAsyncSelect',
                         'WSACancelAsyncRequest',
                         'WSACancelBlockingCall',
                         'WSACleanup',
                         'WSACloseEvent',
                         'WSAConnect',
                         'WSAConnectByList',
                         'WSAConnectByNameA',
                         'WSAConnectByNameW',
                         'WSACreateEvent',
                         'WSADuplicateSocketA',
                         'WSADuplicateSocketW',
                         'WSAEnumNameSpaceProvidersA',
                         'WSAEnumNameSpaceProvidersExA',
                         'WSAEnumNameSpaceProvidersExW',
                         'WSAEnumNameSpaceProvidersW',
                         'WSAEnumNetworkEvents',
                         'WSAEnumProtocolsA',
                         'WSAEnumProtocolsW',
                         'WSAEventSelect',
                         'WSAGetLastError',
                         'WSAGetOverlappedResult',
                         'WSAGetQOSByName',
                         'WSAGetServiceClassInfoA',
                         'WSAGetServiceClassInfoW',
                         'WSAGetServiceClassNameByClassIdA',
                         'WSAGetServiceClassNameByClassIdW',
                         'WSAHtonl',
                         'WSAHtons',
                         'WSAInstallServiceClassA',
                         'WSAInstallServiceClassW',
                         'WSAIoctl',
                         'WSAIsBlocking',
                         'WSAJoinLeaf',
                         'WSALookupServiceBeginA',
                         'WSALookupServiceBeginW',
                         'WSALookupServiceEnd',
                         'WSALookupServiceNextA',
                         'WSALookupServiceNextW',
                         'WSANSPIoctl',
                         'WSANtohl',
                         'WSANtohs',
                         'WSAPoll',
                         'WSAProviderCompleteAsyncCall',
                         'WSAProviderConfigChange',
                         'WSARecv',
                         'WSARecvDisconnect',
                         'WSARecvFrom',
                         'WSARemoveServiceClass',
                         'WSAResetEvent',
                         'WSASend',
                         'WSASendDisconnect',
                         'WSASendMsg',
                         'WSASendTo',
                         'WSASetBlockingHook',
                         'WSASetEvent',
                         'WSASetLastError',
                         'WSASetServiceA',
                         'WSASetServiceW',
                         'WSASocketA',
                         'WSASocketW',
                         'WSAStartup',
                         'WSAStringToAddressA',
                         'WSAStringToAddressW',
                         'WSAUnadvertiseProvider',
                         'WSAUnhookBlockingHook',
                         'WSAWaitForMultipleEvents',
                         'WSApSetPostRoutine',
                         'WSCDeinstallProvider',
                         'WSCEnableNSProvider',
                         'WSCEnumProtocols',
                         'WSCGetApplicationCategory',
                         'WSCGetProviderInfo',
                         'WSCGetProviderPath',
                         'WSCInstallNameSpace',
                         'WSCInstallNameSpaceEx',
                         'WSCInstallProvider',
                         'WSCInstallProviderAndChains',
                         'WSCSetApplicationCategory',
                         'WSCSetProviderInfo',
                         'WSCUnInstallNameSpace',
                         'WSCUpdateProvider',
                         'WSCWriteNameSpaceOrder',
                         'WSCWriteProviderOrder',
                         'WahCloseApcHelper',
                         'WahCloseHandleHelper',
                         'WahCloseNotificationHandleHelper',
                         'WahCloseSocketHandle',
                         'WahCloseThread',
                         'WahCompleteRequest',
                         'WahCreateHandleContextTable',
                         'WahCreateNotificationHandle',
                         'WahCreateSocketHandle',
                         'WahDestroyHandleContextTable',
                         'WahDisableNonIFSHandleSupport',
                         'WahEnableNonIFSHandleSupport',
                         'WahEnumerateHandleContexts',
                         'WahInsertHandleContext',
                         'WahNotifyAllProcesses',
                         'WahOpenApcHelper',
                         'WahOpenCurrentThread',
                         'WahOpenHandleHelper',
                         'WahOpenNotificationHandleHelper',
                         'WahQueueUserApc',
                         'WahReferenceContextByHandle',
                         'WahRemoveHandleContext',
                         'WahWaitForNotification',
                         'WahWriteLSPEvent',
                         '__WSAFDIsSet',
                         'accept',
                         'bind',
                         'closesocket',
                         'connect',
                         'freeaddrinfo',
                         'getaddrinfo',
                         'gethostbyaddr',
                         'gethostbyname',
                         'gethostname',
                         'getnameinfo',
                         'getpeername',
                         'getprotobyname',
                         'getprotobynumber',
                         'getservbyname',
                         'getservbyport',
                         'getsockname',
                         'getsockopt',
                         'htonl',
                         'htons',
                         'inet_addr',
                         'inet_ntoa',
                         'inet_ntop',
                         'inet_pton',
                         'ioctlsocket',
                         'listen',
                         'ntohl',
                         'ntohs',
                         'recv',
                         'recvfrom',
                         'select',
                         'send',
                         'sendto',
                         'setsockopt',
                         'shutdown',
                         'socket',
                         ],
          'user32.dll': ['ActivateKeyboardLayout',
                         'AddClipboardFormatListener',
                         'AdjustWindowRect',
                         'AdjustWindowRectEx',
                         'AlignRects',
                         'AllowForegroundActivation',
                         'AllowSetForegroundWindow',
                         'AnimateWindow',
                         'AnyPopup',
                         'AppendMenuA',
                         'AppendMenuW',
                         'ArrangeIconicWindows',
                         'AttachThreadInput',
                         'BeginDeferWindowPos',
                         'BeginPaint',
                         'BlockInput',
                         'BringWindowToTop',
                         'BroadcastSystemMessage',
                         'BroadcastSystemMessageA',
                         'BroadcastSystemMessageExA',
                         'BroadcastSystemMessageExW',
                         'BroadcastSystemMessageW',
                         'BuildReasonArray',
                         'CalcMenuBar',
                         'CalculatePopupWindowPosition',
                         'CallMsgFilter',
                         'CallMsgFilterA',
                         'CallMsgFilterW',
                         'CallNextHookEx',
                         'CallWindowProcA',
                         'CallWindowProcW',
                         'CancelShutdown',
                         'CascadeChildWindows',
                         'CascadeWindows',
                         'ChangeClipboardChain',
                         'ChangeDisplaySettingsA',
                         'ChangeDisplaySettingsExA',
                         'ChangeDisplaySettingsExW',
                         'ChangeDisplaySettingsW',
                         'ChangeMenuA',
                         'ChangeMenuW',
                         'ChangeWindowMessageFilter',
                         'ChangeWindowMessageFilterEx',
                         'CharLowerA',
                         'CharLowerBuffA',
                         'CharLowerBuffW',
                         'CharLowerW',
                         'CharNextA',
                         'CharNextExA',
                         'CharNextW',
                         'CharPrevA',
                         'CharPrevExA',
                         'CharPrevW',
                         'CharToOemA',
                         'CharToOemBuffA',
                         'CharToOemBuffW',
                         'CharToOemW',
                         'CharUpperA',
                         'CharUpperBuffA',
                         'CharUpperBuffW',
                         'CharUpperW',
                         'CheckDesktopByThreadId',
                         'CheckDlgButton',
                         'CheckMenuItem',
                         'CheckMenuRadioItem',
                         'CheckRadioButton',
                         'CheckWindowThreadDesktop',
                         'ChildWindowFromPoint',
                         'ChildWindowFromPointEx',
                         'CliImmSetHotKey',
                         'ClientThreadSetup',
                         'ClientToScreen',
                         'ClipCursor',
                         'CloseClipboard',
                         'CloseDesktop',
                         'CloseGestureInfoHandle',
                         'CloseTouchInputHandle',
                         'CloseWindow',
                         'CloseWindowStation',
                         'ConsoleControl',
                         'ControlMagnification',
                         'CopyAcceleratorTableA',
                         'CopyAcceleratorTableW',
                         'CopyIcon',
                         'CopyImage',
                         'CopyRect',
                         'CountClipboardFormats',
                         'CreateAcceleratorTableA',
                         'CreateAcceleratorTableW',
                         'CreateCaret',
                         'CreateCursor',
                         'CreateDesktopA',
                         'CreateDesktopExA',
                         'CreateDesktopExW',
                         'CreateDesktopW',
                         'CreateDialogIndirectParamA',
                         'CreateDialogIndirectParamAorW',
                         'CreateDialogIndirectParamW',
                         'CreateDialogParamA',
                         'CreateDialogParamW',
                         'CreateIcon',
                         'CreateIconFromResource',
                         'CreateIconFromResourceEx',
                         'CreateIconIndirect',
                         'CreateMDIWindowA',
                         'CreateMDIWindowW',
                         'CreateMenu',
                         'CreatePopupMenu',
                         'CreateSystemThreads',
                         'CreateWindowExA',
                         'CreateWindowExW',
                         'CreateWindowStationA',
                         'CreateWindowStationW',
                         'CsrBroadcastSystemMessageExW',
                         'CtxInitUser32',
                         'DdeAbandonTransaction',
                         'DdeAccessData',
                         'DdeAddData',
                         'DdeClientTransaction',
                         'DdeCmpStringHandles',
                         'DdeConnect',
                         'DdeConnectList',
                         'DdeCreateDataHandle',
                         'DdeCreateStringHandleA',
                         'DdeCreateStringHandleW',
                         'DdeDisconnect',
                         'DdeDisconnectList',
                         'DdeEnableCallback',
                         'DdeFreeDataHandle',
                         'DdeFreeStringHandle',
                         'DdeGetData',
                         'DdeGetLastError',
                         'DdeGetQualityOfService',
                         'DdeImpersonateClient',
                         'DdeInitializeA',
                         'DdeInitializeW',
                         'DdeKeepStringHandle',
                         'DdeNameService',
                         'DdePostAdvise',
                         'DdeQueryConvInfo',
                         'DdeQueryNextServer',
                         'DdeQueryStringA',
                         'DdeQueryStringW',
                         'DdeReconnect',
                         'DdeSetQualityOfService',
                         'DdeSetUserHandle',
                         'DdeUnaccessData',
                         'DdeUninitialize',
                         'DefDlgProcA',
                         'DefDlgProcW',
                         'DefFrameProcA',
                         'DefFrameProcW',
                         'DefMDIChildProcA',
                         'DefMDIChildProcW',
                         'DefRawInputProc',
                         'DefWindowProcA',
                         'DefWindowProcW',
                         'DeferWindowPos',
                         'DeleteMenu',
                         'DeregisterShellHookWindow',
                         'DestroyAcceleratorTable',
                         'DestroyCaret',
                         'DestroyCursor',
                         'DestroyIcon',
                         'DestroyMenu',
                         'DestroyReasons',
                         'DestroyWindow',
                         'DeviceEventWorker',
                         'DialogBoxIndirectParamA',
                         'DialogBoxIndirectParamAorW',
                         'DialogBoxIndirectParamW',
                         'DialogBoxParamA',
                         'DialogBoxParamW',
                         'DisableProcessWindowsGhosting',
                         'DispatchMessageA',
                         'DispatchMessageW',
                         'DisplayConfigGetDeviceInfo',
                         'DisplayConfigSetDeviceInfo',
                         'DisplayExitWindowsWarnings',
                         'DlgDirListA',
                         'DlgDirListComboBoxA',
                         'DlgDirListComboBoxW',
                         'DlgDirListW',
                         'DlgDirSelectComboBoxExA',
                         'DlgDirSelectComboBoxExW',
                         'DlgDirSelectExA',
                         'DlgDirSelectExW',
                         'DoSoundConnect',
                         'DoSoundDisconnect',
                         'DragDetect',
                         'DragObject',
                         'DrawAnimatedRects',
                         'DrawCaption',
                         'DrawCaptionTempA',
                         'DrawCaptionTempW',
                         'DrawEdge',
                         'DrawFocusRect',
                         'DrawFrame',
                         'DrawFrameControl',
                         'DrawIcon',
                         'DrawIconEx',
                         'DrawMenuBar',
                         'DrawMenuBarTemp',
                         'DrawStateA',
                         'DrawStateW',
                         'DrawTextA',
                         'DrawTextExA',
                         'DrawTextExW',
                         'DrawTextW',
                         'DwmGetDxSharedSurface',
                         'DwmStartRedirection',
                         'DwmStopRedirection',
                         'EditWndProc',
                         'EmptyClipboard',
                         'EnableMenuItem',
                         'EnableScrollBar',
                         'EnableWindow',
                         'EndDeferWindowPos',
                         'EndDialog',
                         'EndMenu',
                         'EndPaint',
                         'EndTask',
                         'EnterReaderModeHelper',
                         'EnumChildWindows',
                         'EnumClipboardFormats',
                         'EnumDesktopWindows',
                         'EnumDesktopsA',
                         'EnumDesktopsW',
                         'EnumDisplayDevicesA',
                         'EnumDisplayDevicesW',
                         'EnumDisplayMonitors',
                         'EnumDisplaySettingsA',
                         'EnumDisplaySettingsExA',
                         'EnumDisplaySettingsExW',
                         'EnumDisplaySettingsW',
                         'EnumPropsA',
                         'EnumPropsExA',
                         'EnumPropsExW',
                         'EnumPropsW',
                         'EnumThreadWindows',
                         'EnumWindowStationsA',
                         'EnumWindowStationsW',
                         'EnumWindows',
                         'EqualRect',
                         'ExcludeUpdateRgn',
                         'ExitWindowsEx',
                         'FillRect',
                         'FindWindowA',
                         'FindWindowExA',
                         'FindWindowExW',
                         'FindWindowW',
                         'FlashWindow',
                         'FlashWindowEx',
                         'FrameRect',
                         'FreeDDElParam',
                         'FrostCrashedWindow',
                         'GetActiveWindow',
                         'GetAltTabInfo',
                         'GetAltTabInfoA',
                         'GetAltTabInfoW',
                         'GetAncestor',
                         'GetAppCompatFlags',
                         'GetAppCompatFlags2',
                         'GetAsyncKeyState',
                         'GetCapture',
                         'GetCaretBlinkTime',
                         'GetCaretPos',
                         'GetClassInfoA',
                         'GetClassInfoExA',
                         'GetClassInfoExW',
                         'GetClassInfoW',
                         'GetClassLongA',
                         'GetClassLongW',
                         'GetClassNameA',
                         'GetClassNameW',
                         'GetClassWord',
                         'GetClientRect',
                         'GetClipCursor',
                         'GetClipboardData',
                         'GetClipboardFormatNameA',
                         'GetClipboardFormatNameW',
                         'GetClipboardOwner',
                         'GetClipboardSequenceNumber',
                         'GetClipboardViewer',
                         'GetComboBoxInfo',
                         'GetCursor',
                         'GetCursorFrameInfo',
                         'GetCursorInfo',
                         'GetCursorPos',
                         'GetDC',
                         'GetDCEx',
                         'GetDesktopWindow',
                         'GetDialogBaseUnits',
                         'GetDisplayConfigBufferSizes',
                         'GetDlgCtrlID',
                         'GetDlgItem',
                         'GetDlgItemInt',
                         'GetDlgItemTextA',
                         'GetDlgItemTextW',
                         'GetDoubleClickTime',
                         'GetFocus',
                         'GetForegroundWindow',
                         'GetGUIThreadInfo',
                         'GetGestureConfig',
                         'GetGestureExtraArgs',
                         'GetGestureInfo',
                         'GetGuiResources',
                         'GetIconInfo',
                         'GetIconInfoExA',
                         'GetIconInfoExW',
                         'GetInputDesktop',
                         'GetInputLocaleInfo',
                         'GetInputState',
                         'GetInternalWindowPos',
                         'GetKBCodePage',
                         'GetKeyNameTextA',
                         'GetKeyNameTextW',
                         'GetKeyState',
                         'GetKeyboardLayout',
                         'GetKeyboardLayoutList',
                         'GetKeyboardLayoutNameA',
                         'GetKeyboardLayoutNameW',
                         'GetKeyboardState',
                         'GetKeyboardType',
                         'GetLastActivePopup',
                         'GetLastInputInfo',
                         'GetLayeredWindowAttributes',
                         'GetListBoxInfo',
                         'GetMagnificationDesktopColorEffect',
                         'GetMagnificationDesktopMagnification',
                         'GetMagnificationLensCtxInformation',
                         'GetMenu',
                         'GetMenuBarInfo',
                         'GetMenuCheckMarkDimensions',
                         'GetMenuContextHelpId',
                         'GetMenuDefaultItem',
                         'GetMenuInfo',
                         'GetMenuItemCount',
                         'GetMenuItemID',
                         'GetMenuItemInfoA',
                         'GetMenuItemInfoW',
                         'GetMenuItemRect',
                         'GetMenuState',
                         'GetMenuStringA',
                         'GetMenuStringW',
                         'GetMessageA',
                         'GetMessageExtraInfo',
                         'GetMessagePos',
                         'GetMessageTime',
                         'GetMessageW',
                         'GetMonitorInfoA',
                         'GetMonitorInfoW',
                         'GetMouseMovePointsEx',
                         'GetNextDlgGroupItem',
                         'GetNextDlgTabItem',
                         'GetOpenClipboardWindow',
                         'GetParent',
                         'GetPhysicalCursorPos',
                         'GetPriorityClipboardFormat',
                         'GetProcessDefaultLayout',
                         'GetProcessWindowStation',
                         'GetProgmanWindow',
                         'GetPropA',
                         'GetPropW',
                         'GetQueueStatus',
                         'GetRawInputBuffer',
                         'GetRawInputData',
                         'GetRawInputDeviceInfoA',
                         'GetRawInputDeviceInfoW',
                         'GetRawInputDeviceList',
                         'GetReasonTitleFromReasonCode',
                         'GetRegisteredRawInputDevices',
                         'GetScrollBarInfo',
                         'GetScrollInfo',
                         'GetScrollPos',
                         'GetScrollRange',
                         'GetSendMessageReceiver',
                         'GetShellWindow',
                         'GetSubMenu',
                         'GetSysColor',
                         'GetSysColorBrush',
                         'GetSystemMenu',
                         'GetSystemMetrics',
                         'GetTabbedTextExtentA',
                         'GetTabbedTextExtentW',
                         'GetTaskmanWindow',
                         'GetThreadDesktop',
                         'GetTitleBarInfo',
                         'GetTopLevelWindow',
                         'GetTopWindow',
                         'GetTouchInputInfo',
                         'GetUpdateRect',
                         'GetUpdateRgn',
                         'GetUpdatedClipboardFormats',
                         'GetUserObjectInformationA',
                         'GetUserObjectInformationW',
                         'GetUserObjectSecurity',
                         'GetWinStationInfo',
                         'GetWindow',
                         'GetWindowCompositionAttribute',
                         'GetWindowCompositionInfo',
                         'GetWindowContextHelpId',
                         'GetWindowDC',
                         'GetWindowDisplayAffinity',
                         'GetWindowInfo',
                         'GetWindowLongA',
                         'GetWindowLongW',
                         'GetWindowMinimizeRect',
                         'GetWindowModuleFileName',
                         'GetWindowModuleFileNameA',
                         'GetWindowModuleFileNameW',
                         'GetWindowPlacement',
                         'GetWindowRect',
                         'GetWindowRgn',
                         'GetWindowRgnBox',
                         'GetWindowRgnEx',
                         'GetWindowTextA',
                         'GetWindowTextLengthA',
                         'GetWindowTextLengthW',
                         'GetWindowTextW',
                         'GetWindowThreadProcessId',
                         'GetWindowWord',
                         'GhostWindowFromHungWindow',
                         'GrayStringA',
                         'GrayStringW',
                         'HideCaret',
                         'HiliteMenuItem',
                         'HungWindowFromGhostWindow',
                         'IMPGetIMEA',
                         'IMPGetIMEW',
                         'IMPQueryIMEA',
                         'IMPQueryIMEW',
                         'IMPSetIMEA',
                         'IMPSetIMEW',
                         'ImpersonateDdeClientWindow',
                         'InSendMessage',
                         'InSendMessageEx',
                         'InflateRect',
                         'InitializeLpkHooks',
                         'InsertMenuA',
                         'InsertMenuItemA',
                         'InsertMenuItemW',
                         'InsertMenuW',
                         'InternalGetWindowIcon',
                         'InternalGetWindowText',
                         'IntersectRect',
                         'InvalidateRect',
                         'InvalidateRgn',
                         'InvertRect',
                         'IsCharAlphaA',
                         'IsCharAlphaNumericA',
                         'IsCharAlphaNumericW',
                         'IsCharAlphaW',
                         'IsCharLowerA',
                         'IsCharLowerW',
                         'IsCharUpperA',
                         'IsCharUpperW',
                         'IsChild',
                         'IsClipboardFormatAvailable',
                         'IsDialogMessage',
                         'IsDialogMessageA',
                         'IsDialogMessageW',
                         'IsDlgButtonChecked',
                         'IsGUIThread',
                         'IsHungAppWindow',
                         'IsIconic',
                         'IsMenu',
                         'IsProcessDPIAware',
                         'IsRectEmpty',
                         'IsSETEnabled',
                         'IsServerSideWindow',
                         'IsThreadDesktopComposited',
                         'IsTopLevelWindow',
                         'IsTouchWindow',
                         'IsWinEventHookInstalled',
                         'IsWindow',
                         'IsWindowEnabled',
                         'IsWindowInDestroy',
                         'IsWindowRedirectedForPrint',
                         'IsWindowUnicode',
                         'IsWindowVisible',
                         'IsWow64Message',
                         'IsZoomed',
                         'KillTimer',
                         'LoadAcceleratorsA',
                         'LoadAcceleratorsW',
                         'LoadBitmapA',
                         'LoadBitmapW',
                         'LoadCursorA',
                         'LoadCursorFromFileA',
                         'LoadCursorFromFileW',
                         'LoadCursorW',
                         'LoadIconA',
                         'LoadIconW',
                         'LoadImageA',
                         'LoadImageW',
                         'LoadKeyboardLayoutA',
                         'LoadKeyboardLayoutEx',
                         'LoadKeyboardLayoutW',
                         'LoadLocalFonts',
                         'LoadMenuA',
                         'LoadMenuIndirectA',
                         'LoadMenuIndirectW',
                         'LoadMenuW',
                         'LoadRemoteFonts',
                         'LoadStringA',
                         'LoadStringW',
                         'LockSetForegroundWindow',
                         'LockWindowStation',
                         'LockWindowUpdate',
                         'LockWorkStation',
                         'LogicalToPhysicalPoint',
                         'LookupIconIdFromDirectory',
                         'LookupIconIdFromDirectoryEx',
                         'MBToWCSEx',
                         'MB_GetString',
                         'MapDialogRect',
                         'MapVirtualKeyA',
                         'MapVirtualKeyExA',
                         'MapVirtualKeyExW',
                         'MapVirtualKeyW',
                         'MapWindowPoints',
                         'MenuItemFromPoint',
                         'MenuWindowProcA',
                         'MenuWindowProcW',
                         'MessageBeep',
                         'MessageBoxA',
                         'MessageBoxExA',
                         'MessageBoxExW',
                         'MessageBoxIndirectA',
                         'MessageBoxIndirectW',
                         'MessageBoxTimeoutA',
                         'MessageBoxTimeoutW',
                         'MessageBoxW',
                         'ModifyMenuA',
                         'ModifyMenuW',
                         'MonitorFromPoint',
                         'MonitorFromRect',
                         'MonitorFromWindow',
                         'MoveWindow',
                         'MsgWaitForMultipleObjects',
                         'MsgWaitForMultipleObjectsEx',
                         'NotifyOverlayWindow',
                         'NotifyWinEvent',
                         'OemKeyScan',
                         'OemToCharA',
                         'OemToCharBuffA',
                         'OemToCharBuffW',
                         'OemToCharW',
                         'OffsetRect',
                         'OpenClipboard',
                         'OpenDesktopA',
                         'OpenDesktopW',
                         'OpenIcon',
                         'OpenInputDesktop',
                         'OpenThreadDesktop',
                         'OpenWindowStationA',
                         'OpenWindowStationW',
                         'PackDDElParam',
                         'PaintDesktop',
                         'PaintMenuBar',
                         'PaintMonitor',
                         'PeekMessageA',
                         'PeekMessageW',
                         'PhysicalToLogicalPoint',
                         'PostMessageA',
                         'PostMessageW',
                         'PostQuitMessage',
                         'PostThreadMessageA',
                         'PostThreadMessageW',
                         'PrintWindow',
                         'PrivateExtractIconExA',
                         'PrivateExtractIconExW',
                         'PrivateExtractIconsA',
                         'PrivateExtractIconsW',
                         'PrivateRegisterICSProc',
                         'PtInRect',
                         'QueryDisplayConfig',
                         'QuerySendMessage',
                         'RealChildWindowFromPoint',
                         'RealGetWindowClass',
                         'RealGetWindowClassA',
                         'RealGetWindowClassW',
                         'ReasonCodeNeedsBugID',
                         'ReasonCodeNeedsComment',
                         'RecordShutdownReason',
                         'RedrawWindow',
                         'RegisterClassA',
                         'RegisterClassExA',
                         'RegisterClassExW',
                         'RegisterClassW',
                         'RegisterClipboardFormatA',
                         'RegisterClipboardFormatW',
                         'RegisterDeviceNotificationA',
                         'RegisterDeviceNotificationW',
                         'RegisterErrorReportingDialog',
                         'RegisterFrostWindow',
                         'RegisterGhostWindow',
                         'RegisterHotKey',
                         'RegisterLogonProcess',
                         'RegisterMessagePumpHook',
                         'RegisterPowerSettingNotification',
                         'RegisterRawInputDevices',
                         'RegisterServicesProcess',
                         'RegisterSessionPort',
                         'RegisterShellHookWindow',
                         'RegisterSystemThread',
                         'RegisterTasklist',
                         'RegisterTouchWindow',
                         'RegisterUserApiHook',
                         'RegisterWindowMessageA',
                         'RegisterWindowMessageW',
                         'ReleaseCapture',
                         'ReleaseDC',
                         'RemoveClipboardFormatListener',
                         'RemoveMenu',
                         'RemovePropA',
                         'RemovePropW',
                         'ReplyMessage',
                         'ResolveDesktopForWOW',
                         'ReuseDDElParam',
                         'ScreenToClient',
                         'ScrollChildren',
                         'ScrollDC',
                         'ScrollWindow',
                         'ScrollWindowEx',
                         'SendDlgItemMessageA',
                         'SendDlgItemMessageW',
                         'SendIMEMessageExA',
                         'SendIMEMessageExW',
                         'SendInput',
                         'SendMessageA',
                         'SendMessageCallbackA',
                         'SendMessageCallbackW',
                         'SendMessageTimeoutA',
                         'SendMessageTimeoutW',
                         'SendMessageW',
                         'SendNotifyMessageA',
                         'SendNotifyMessageW',
                         'SetActiveWindow',
                         'SetCapture',
                         'SetCaretBlinkTime',
                         'SetCaretPos',
                         'SetClassLongA',
                         'SetClassLongW',
                         'SetClassWord',
                         'SetClipboardData',
                         'SetClipboardViewer',
                         'SetCursor',
                         'SetCursorContents',
                         'SetCursorPos',
                         'SetDebugErrorLevel',
                         'SetDeskWallpaper',
                         'SetDisplayConfig',
                         'SetDlgItemInt',
                         'SetDlgItemTextA',
                         'SetDlgItemTextW',
                         'SetDoubleClickTime',
                         'SetFocus',
                         'SetForegroundWindow',
                         'SetGestureConfig',
                         'SetInternalWindowPos',
                         'SetKeyboardState',
                         'SetLastErrorEx',
                         'SetLayeredWindowAttributes',
                         'SetMagnificationDesktopColorEffect',
                         'SetMagnificationDesktopMagnification',
                         'SetMagnificationLensCtxInformation',
                         'SetMenu',
                         'SetMenuContextHelpId',
                         'SetMenuDefaultItem',
                         'SetMenuInfo',
                         'SetMenuItemBitmaps',
                         'SetMenuItemInfoA',
                         'SetMenuItemInfoW',
                         'SetMessageExtraInfo',
                         'SetMessageQueue',
                         'SetMirrorRendering',
                         'SetParent',
                         'SetPhysicalCursorPos',
                         'SetProcessDPIAware',
                         'SetProcessDefaultLayout',
                         'SetProcessWindowStation',
                         'SetProgmanWindow',
                         'SetPropA',
                         'SetPropW',
                         'SetRect',
                         'SetRectEmpty',
                         'SetScrollInfo',
                         'SetScrollPos',
                         'SetScrollRange',
                         'SetShellWindow',
                         'SetShellWindowEx',
                         'SetSysColors',
                         'SetSysColorsTemp',
                         'SetSystemCursor',
                         'SetSystemMenu',
                         'SetTaskmanWindow',
                         'SetThreadDesktop',
                         'SetTimer',
                         'SetUserObjectInformationA',
                         'SetUserObjectInformationW',
                         'SetUserObjectSecurity',
                         'SetWinEventHook',
                         'SetWindowCompositionAttribute',
                         'SetWindowContextHelpId',
                         'SetWindowDisplayAffinity',
                         'SetWindowLongA',
                         'SetWindowLongW',
                         'SetWindowPlacement',
                         'SetWindowPos',
                         'SetWindowRgn',
                         'SetWindowRgnEx',
                         'SetWindowStationUser',
                         'SetWindowTextA',
                         'SetWindowTextW',
                         'SetWindowWord',
                         'SetWindowsHookA',
                         'SetWindowsHookExA',
                         'SetWindowsHookExW',
                         'SetWindowsHookW',
                         'SfmDxBindSwapChain',
                         'SfmDxGetSwapChainStats',
                         'SfmDxOpenSwapChain',
                         'SfmDxQuerySwapChainBindingStatus',
                         'SfmDxReleaseSwapChain',
                         'SfmDxReportPendingBindingsToDwm',
                         'SfmDxSetSwapChainBindingStatus',
                         'SfmDxSetSwapChainStats',
                         'ShowCaret',
                         'ShowCursor',
                         'ShowOwnedPopups',
                         'ShowScrollBar',
                         'ShowStartGlass',
                         'ShowSystemCursor',
                         'ShowWindow',
                         'ShowWindowAsync',
                         'ShutdownBlockReasonCreate',
                         'ShutdownBlockReasonDestroy',
                         'ShutdownBlockReasonQuery',
                         'SoftModalMessageBox',
                         'SoundSentry',
                         'SubtractRect',
                         'SwapMouseButton',
                         'SwitchDesktop',
                         'SwitchDesktopWithFade',
                         'SwitchToThisWindow',
                         'SystemParametersInfoA',
                         'SystemParametersInfoW',
                         'TabbedTextOutA',
                         'TabbedTextOutW',
                         'TileChildWindows',
                         'TileWindows',
                         'ToAscii',
                         'ToAsciiEx',
                         'ToUnicode',
                         'ToUnicodeEx',
                         'TrackMouseEvent',
                         'TrackPopupMenu',
                         'TrackPopupMenuEx',
                         'TranslateAccelerator',
                         'TranslateAcceleratorA',
                         'TranslateAcceleratorW',
                         'TranslateMDISysAccel',
                         'TranslateMessage',
                         'TranslateMessageEx',
                         'UnhookWinEvent',
                         'UnhookWindowsHook',
                         'UnhookWindowsHookEx',
                         'UnionRect',
                         'UnloadKeyboardLayout',
                         'UnlockWindowStation',
                         'UnpackDDElParam',
                         'UnregisterClassA',
                         'UnregisterClassW',
                         'UnregisterDeviceNotification',
                         'UnregisterHotKey',
                         'UnregisterMessagePumpHook',
                         'UnregisterPowerSettingNotification',
                         'UnregisterSessionPort',
                         'UnregisterTouchWindow',
                         'UnregisterUserApiHook',
                         'UpdateLayeredWindow',
                         'UpdateLayeredWindowIndirect',
                         'UpdatePerUserSystemParameters',
                         'UpdateWindow',
                         'UpdateWindowTransform',
                         'User32InitializeImmEntryTable',
                         'UserClientDllInitialize',
                         'UserHandleGrantAccess',
                         'UserLpkPSMTextOut',
                         'UserLpkTabbedTextOut',
                         'UserRealizePalette',
                         'UserRegisterWowHandlers',
                         'VRipOutput',
                         'VTagOutput',
                         'ValidateRect',
                         'ValidateRgn',
                         'VkKeyScanA',
                         'VkKeyScanExA',
                         'VkKeyScanExW',
                         'VkKeyScanW',
                         'WCSToMBEx',
                         'WINNLSEnableIME',
                         'WINNLSGetEnableStatus',
                         'WINNLSGetIMEHotkey',
                         'WaitForInputIdle',
                         'WaitMessage',
                         'WinHelpA',
                         'WinHelpW',
                         'WindowFromDC',
                         'WindowFromPhysicalPoint',
                         'WindowFromPoint',
                         '_UserTestTokenForInteractive',
                         'gSharedInfo',
                         'gapfnScSendMessage',
                         'keybd_event',
                         'mouse_event',
                         'wsprintfA',
                         'wsprintfW',
                         'wvsprintfA',
                         'wvsprintfW'
                         ]
}
