OutputDebugStringA SetFilePointer WaitForSingleObject CreateFileW GetCurrentThreadId ReleaseMutex Sleep GetFileInformationByHandle OutputDebugStringW LockResource CloseHandle FindResourceExW LoadResource FindResourceW GetLocalTime GetCurrentProcessId lstrcmpiW lstrcmpW CreateDirectoryW FindFirstFileW FindNextFileW GetCurrentProcess RemoveDirectoryW WaitForMultipleObjects GetEnvironmentVariableW FindClose GetFileAttributesW DuplicateHandle FormatMessageW DeleteFileW LoadLibraryW GetCurrentDirectoryW GetProcAddress LocalFree GetModuleHandleW FreeLibrary GetTempFileNameW GetPrivateProfileIntW GetTickCount LoadLibraryExW GetExitCodeProcess ReadFile CompareFileTime SetEndOfFile SetFileAttributesW GetFileAttributesExW FileTimeToSystemTime MoveFileExW GetFileSize CopyFileW GetSystemTimeAsFileTime GetFileTime FlushFileBuffers lstrcpynW ExitProcess IsDebuggerPresent WideCharToMultiByte MultiByteToWideChar GetTimeZoneInformation FileTimeToLocalFileTime SystemTimeToFileTime SystemTimeToTzSpecificLocalTime GetModuleFileNameW GetTempPathW GetSystemDirectoryW GetCurrentThread GetComputerNameW VirtualQuery TryEnterCriticalSection EnterCriticalSection LeaveCriticalSection InitializeCriticalSection CreateMutexW CreateEventW SetEvent ResetEvent GetLongPathNameW WriteFile TerminateProcess WaitForMultipleObjectsEx OpenProcess DeviceIoControl ProcessIdToSessionId Process32NextW WaitForSingleObjectEx Process32FirstW ReadProcessMemory SetHandleInformation CreatePipe GetSystemPowerStatus GlobalMemoryStatusEx CreateProcessW SetProcessWorkingSetSize GetVersionExW VerSetConditionMask VerifyVersionInfoW LocalAlloc HeapSetInformation GlobalAlloc GlobalFree GlobalLock GlobalUnlock GetStdHandle QueryDosDeviceW GetLogicalDriveStringsW OpenEventW CreateThread SetCurrentDirectoryW OpenThread QueryPerformanceCounter lstrcmpA GetCommandLineW GetThreadLocale GetStringTypeExA SetFilePointerEx UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetStartupInfoW InitializeSListHead GetStringTypeW EncodePointer GetCPInfo SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree CompareStringW LCMapStringW GetLocaleInfoW RtlUnwind InterlockedPushEntrySList InterlockedFlushSList GetSystemInfo VirtualAlloc VirtualProtect GetModuleHandleExW GetFileType GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetFileSizeEx SetStdHandle GetConsoleOutputCP GetConsoleMode ReadConsoleW WriteConsoleW GetProcessShutdownParameters lstrlenW SetLastError SizeofResource GetProcessId ReleaseSemaphore RtlCaptureContext DeleteTimerQueueTimer CreateTimerQueueTimer GetPrivateProfileStringW GetComputerNameExW LoadLibraryExA VirtualFree FlushInstructionCache InterlockedPopEntrySList MulDiv GlobalHandle CreateTimerQueue DeleteTimerQueueEx GetSystemDefaultLangID SetPriorityClass CreateSemaphoreW VirtualQueryEx SetNamedPipeHandleState TransactNamedPipe GetProcessHeap DeleteCriticalSection HeapDestroy DecodePointer HeapAlloc RaiseException HeapReAlloc GetLastError HeapSize InitializeCriticalSectionAndSpinCount GetUserDefaultLangID GetSystemTime GetStringTypeExW QueryPerformanceFrequency UnregisterWaitEx RegisterWaitForSingleObject QueueUserWorkItem Thread32First Thread32Next CreateToolhelp32Snapshot SetProcessShutdownParameters OpenMutexW HeapFree WaitNamedPipeW

SafeArrayCopy SafeArrayGetVartype SafeArrayLock SafeArrayCreate VariantClear VariantInit SysAllocStringLen SysStringLen VarUI4FromStr SafeArrayUnlock LoadTypeLi LoadRegTypeLi SystemTimeToVariantTime SysAllocString SysReAllocStringLen VariantChangeType SysAllocStringByteLen SysStringByteLen SafeArrayGetLBound SafeArrayGetUBound SafeArrayDestroy SafeArrayRedim SysFreeString VarBstrCmp VariantTimeToSystemTime OleCreateFontIndirect

PostThreadMessageW GetWindowThreadProcessId IsWindowVisible SendMessageW GetSystemMetrics EnumWindows LoadImageW OpenClipboard CloseClipboard EmptyClipboard SetClipboardData FlashWindow GetMenuState InflateRect SetActiveWindow OffsetRect LoadStringW CopyRect FrameRect IsRectEmpty GetSysColorBrush SystemParametersInfoW UpdateWindow GetCursorPos EnumChildWindows EnableMenuItem EnableWindow IsDialogMessageW SendDlgItemMessageW GetWindowTextLengthW GetSystemMenu GetFocus GetDC FillRect ScreenToClient EndDialog SetWindowTextW ShowWindow InvalidateRgn RedrawWindow DestroyIcon ClientToScreen DestroyAcceleratorTable IsChild GetTopWindow GetSysColor MoveWindow CreateAcceleratorTableW SetLayeredWindowAttributes SetFocus SetWindowPos SetWindowContextHelpId CharNextW IsWindow CharLowerBuffA CharNextA MonitorFromWindow UnregisterClassW CreateWindowExW DispatchMessageW GetMonitorInfoW PeekMessageW SetForegroundWindow GetParent PostQuitMessage GetClientRect TranslateMessage IsMenu GetClassNameW SetCapture MapDialogRect RemoveMenu GetDlgItem GetDesktopWindow CreateDialogIndirectParamW RegisterWindowMessageW CharUpperW CharLowerW CharLowerBuffW MessageBoxW wvsprintfW wsprintfW GetWindowLongW GetMessageW AllowSetForegroundWindow GetWindow GetWindowRect DestroyWindow MapWindowPoints PostMessageW WaitForInputIdle GetClassInfoExW KillTimer SetWindowLongW LoadCursorW SetTimer RegisterClassExW CallWindowProcW DefWindowProcW CharUpperBuffW GetWindowTextW EndPaint BeginPaint ReleaseDC InvalidateRect ReleaseCapture

GetIfTable

NetGetJoinInformation NetApiBufferFree NetWkstaUserGetInfo NetWkstaGetInfo

EnumProcesses GetModuleFileNameExW EnumProcessModules

PathIsDirectoryW SHQueryValueExW PathStripPathW PathFindFileNameW PathCommonPrefixW PathFileExistsW PathAddExtensionW UrlCombineW PathFindExtensionW UrlIsW PathRemoveExtensionW PathRemoveFileSpecW PathAddBackslashW UrlUnescapeA UrlEscapeW PathAppendW PathCanonicalizeW PathAppendA PathCreateFromUrlW

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

UnloadUserProfile ExpandEnvironmentStringsForUserW EnterCriticalPolicySection LeaveCriticalPolicySection CreateEnvironmentBlock GetProfileType DestroyEnvironmentBlock

WTSFreeMemory WTSEnumerateSessionsW WTSQuerySessionInformationW

RegNotifyChangeKeyValue ControlService QueryServiceStatus SystemFunction036 DuplicateToken RegOverridePredefKey GetUserNameW CryptReleaseContext CryptDestroyHash CryptHashData CryptCreateHash CryptVerifySignatureW CryptDestroyKey RegEnumValueW LookupPrivilegeValueW RegOpenCurrentUser IsTextUnicode ImpersonateLoggedOnUser DeregisterEventSource GetSecurityInfo CryptGenRandom CryptAcquireContextW CreateServiceW SetServiceStatus ChangeServiceConfig2W DeleteService RegisterServiceCtrlHandlerW StartServiceCtrlDispatcherW QueryServiceConfigW ChangeServiceConfigW QueryServiceConfig2W RegisterEventSourceW ReportEventW TraceEvent GetTraceLoggerHandle GetTraceEnableFlags GetTraceEnableLevel RegisterTraceGuidsW UnregisterTraceGuids GetSidSubAuthorityCount GetSidIdentifierAuthority RevertToSelf AllocateAndInitializeSid ImpersonateSelf FreeSid CheckTokenMembership RegDeleteValueW RegQueryInfoKeyW RegDeleteKeyW RegCreateKeyExW RegEnumKeyExW RegSetValueExW MakeSelfRelativeSD RegQueryValueExW GetSecurityDescriptorLength GetLengthSid RegOpenKeyExW InitializeAcl AddAce IsValidSid GetSecurityDescriptorOwner InitializeSid CopySid GetSecurityDescriptorControl SetNamedSecurityInfoW GetSidLengthRequired GetSidSubAuthority GetSecurityDescriptorGroup RegCloseKey GetSecurityDescriptorDacl GetSecurityDescriptorSacl GetTokenInformation SetSecurityDescriptorGroup MakeAbsoluteSD OpenServiceW InitializeSecurityDescriptor StartServiceW OpenProcessToken ConvertStringSidToSidW GetNamedSecurityInfoW OpenSCManagerW CloseServiceHandle EqualSid GetAce SetSecurityDescriptorOwner GetAclInformation SetSecurityDescriptorDacl OpenThreadToken DuplicateTokenEx ConvertSidToStringSidW CreateProcessAsUserW AdjustTokenPrivileges

CoReleaseServerProcess CoTaskMemAlloc CoUninitialize CoRegisterClassObject CoInitializeSecurity CoSuspendClassObjects CoTaskMemRealloc CoInitializeEx CoSetProxyBlanket CoRegisterPSClsid OleSaveToStream ReadClassStm WriteClassStm OleUninitialize CoTaskMemFree CoRevertToSelf CoGetCallContext CoCreateInstance StringFromGUID2 CoCreateGuid CoGetClassObject CoImpersonateClient CoGetObject CoRevokeClassObject IIDFromString CreateStreamOnHGlobal CoResumeClassObjects CLSIDFromProgID OleInitialize CLSIDFromString CoAddRefServerProcess OleLockRunning

ord680 ShellExecuteExW CommandLineToArgvW SHGetFolderPathW

InitCommonControlsEx _TrackMouseEvent

CryptProtectData CryptDecodeObjectEx CryptImportPublicKeyInfo CertFreeCertificateContext CryptQueryObject CertDuplicateCertificateContext CertCloseStore CertFindCertificateInStore CertGetNameStringW CryptHashCertificate CryptUnprotectData

GradientFill

SetWindowTheme

InternetQueryDataAvailable InternetOpenW HttpQueryInfoW InternetCrackUrlW HttpSendRequestW InternetCloseHandle InternetConnectW InternetReadFile HttpAddRequestHeadersW HttpOpenRequestW

WinVerifyTrust

DPtoLP CreateFontIndirectW CreateSolidBrush DeleteObject GetObjectW DeleteDC GetDeviceCaps GetStockObject CreateCompatibleDC SelectObject CreateCompatibleBitmap BitBlt ExtTextOutW FillRgn CombineRgn SetBkColor SetViewportOrgEx GetRegionData SetTextColor CreateRectRgn OffsetRgn GetTextMetricsW CreateRectRgnIndirect