Windows API.md

Packers

• CryptDecrypt
• RtlDecompressBuffer

Input/output Create:

• CreatefileA
• CreatePipe
• CreateNamedPipeA

Input/output Open

• OpenFile
• OpenFileMapping A

Input/output Write

• WriteFile
• WriteConsoleW
• WriteFileEx

Input/output Find

• FindFirstFileA
• FindNextFileW

Input/output Read

• ReadFile
• ReadFileEx
• ReadConsoleA

Input/output Access

• SetFileAttributesW
• SetConsoleMode

Loading Library

• LoadLibraryExW
• FreeLibrar

Registry Read

• RegOpenKeyExW
• RegQueryValueA

Registry Write

• RegSetValueA
• RegSetValueW

COM/OLE/DDE

• OleCreate
• OleLoad
• CoBuildVersion

Process Create

• CreateProcessA
• ShellExecute
• WinExec

Process Read

• GetCurrentThreadId
• ReadProcessMemory

Process Write

• WriteProcessMemory
• VirtualAllocEx

Process Change

• SetThreadContext
• SetProcessAffinityMask

Process Exit

• TerminateProcess
• ExitProcess

Hooking

• SetWindowsHookA
• CallNextHookEx

Anti-Debugging

• IsDebuggerPresent
• OutputDebugStringA

Synchronization

• CreateMutexA
• CreateSemaphoreW

Device Control

• DeviceIoControl
• GetDriveTypeW

Socket Comm.

• Send
• Recv
• WSARecv
• Connect

Network Information

• Gethostbyname
• InternetGetConnectedState

Internet Open/ Read

• InternetOpenUrlA
• InternetReadFile

Internet Write

• InternetWriteFile
• TransactNamedPipe

Win-Service Create

• CreateServiceW
• CreateServiceA

Win-Service Other

• StartServiceW
• ChangeServiceConfigA

System Information

• GetSystemDirectoryW
• GetSystemTime