Denis used the "IsDebuggerPresent", "OutputDebugString", and "SetLastError" APIs to avoid debugging. Denis used "GetProcAddress" and "LoadLibrary" to dynamically resolve APIs. Denis also used the "Wow64SetThreadContext" API as part of a process hollowing process.