GetTokenInformation SetSecurityDescriptorGroup MakeSelfRelativeSD RegQueryValueExW OpenThreadToken AddAccessAllowedAce DuplicateTokenEx SetSecurityDescriptorControl GetLengthSid RegDeleteValueW CreateProcessAsUserW RegOpenKeyExW InitializeAcl InitializeSecurityDescriptor CheckTokenMembership FreeSid OpenProcessToken RegSetValueExW RegSetKeySecurity CopySid RegCreateKeyExW RegFlushKey AllocateAndInitializeSid RegDeleteKeyW SetTokenInformation GetAce SetSecurityDescriptorOwner RegQueryInfoKeyW RegEnumKeyW RegCloseKey RegNotifyChangeKeyValue SetSecurityDescriptorDacl GetTraceEnableFlags GetTraceEnableLevel RegisterTraceGuidsW UnregisterTraceGuids StopTraceW GetTraceLoggerHandle QueryAllTracesW RegUnLoadKeyW SetSecurityInfo InitiateSystemShutdownExW RegEnumValueW AdjustTokenPrivileges

GetTimeZoneInformation LocalFileTimeToFileTime GetTickCount64 GetLastError ReleaseSRWLockExclusive OutputDebugStringW CreateFileA SetEvent CloseThreadpoolTimer GetCurrentThread AcquireSRWLockExclusive WaitForSingleObjectEx GetVersionExA LockResource DeleteFileW OpenSemaphoreW CloseHandle SetThreadpoolTimer ReleaseSRWLockShared GetNativeSystemInfo CreateThreadpoolTimer LoadLibraryW FindResourceExW ResetEvent LoadResource GetOverlappedResult SetFilePointerEx CreateMutexExW LocalFree MoveFileExW ReplaceFileW LockFileEx AcquireSRWLockShared DeleteCriticalSection GetCurrentProcessId GetFileInformationByHandle GetModuleHandleW FreeLibrary CopyFileW WideCharToMultiByte SystemTimeToTzSpecificLocalTime GetTempFileNameW GetSystemTime DebugBreak DosDateTimeToFileTime GetSystemWindowsDirectoryW MoveFileW GetDriveTypeW LoadLibraryExW IsDebuggerPresent FlushFileBuffers GetExitCodeProcess Sleep MultiByteToWideChar CreateEventW VerifyVersionInfoW IsValidLocale VerSetConditionMask IsValidCodePage MapViewOfFile CreateFileMappingW UnmapViewOfFile GetUserDefaultUILanguage GetSystemDefaultUILanguage SearchPathW OutputDebugStringA SleepConditionVariableSRW WakeAllConditionVariable GetLogicalDriveStringsW InitializeCriticalSectionAndSpinCount SetEnvironmentVariableW WaitForMultipleObjects LeaveCriticalSection SetFileAttributesW GetSystemDirectoryW ReleaseMutex FormatMessageW OpenEventW GetCurrentThreadId GetFileAttributesW CreateFileW WaitForSingleObject FindClose CreateHardLinkW WaitForThreadpoolTimerCallbacks InitializeCriticalSectionEx CreateMutexW UnlockFileEx SetEndOfFile SetFilePointer CreatePipe CreateProcessW GetVersionExW SetThreadPreferredUILanguages GetLocaleInfoW GetPrivateProfileIntW InitializeCriticalSection GlobalUnlock GlobalLock MulDiv FindResourceW SizeofResource QueryDosDeviceW RaiseException DuplicateHandle GetShortPathNameW HeapSize HeapReAlloc VirtualQuery GetPriorityClass GetThreadPriority GetExitCodeThread SetThreadPriority SetPriorityClass CreateThread GetPrivateProfileSectionW GetFileTime FileTimeToSystemTime CompareFileTime CopyFileExW SetFileInformationByHandle DeviceIoControl GetFileInformationByHandleEx SetCurrentDirectoryW GetCurrentDirectoryW GetFinalPathNameByHandleW GetLongPathNameW GetTickCount GetSystemTimeAsFileTime QueryPerformanceCounter SetUnhandledExceptionFilter UnhandledExceptionFilter GetStartupInfoW GetModuleFileNameW HeapFree GetModuleHandleExW HeapAlloc GetProcAddress GetProcessHeap CreateDirectoryW ReadFile GetModuleFileNameA FindFirstFileW GetFileSizeEx CompareStringW CreateSemaphoreExW SetLastError EnterCriticalSection GetCommandLineW GetFullPathNameW FindNextFileW GetCurrentProcess ReleaseSemaphore WriteFile ExpandEnvironmentStringsW SetFileTime TerminateProcess

GetFocus IsChild GetNextDlgTabItem GetWindowLongW RedrawWindow CopyRect DrawFocusRect GetKeyState GetDC GetSysColor GetClientRect GetParent InvalidateRect LoadStringW FillRect EnableMenuItem SetWindowLongW PostMessageW GetSystemMenu GetSysColorBrush GetSystemMetrics SystemParametersInfoW IsWindowVisible AdjustWindowRectEx SetCursor LoadCursorW TrackMouseEvent DrawTextW EnableWindow LoadImageW KillTimer PostThreadMessageW SetTimer SendMessageW MessageBoxW CharUpperW GetWindowRect

ord2408 ord1405 ord3783 ord2412 ord1066 ord3468 ord5722 ord5725 ord4368 ord5066 ord5730 ord6243 ord5711 ord6054 ord2903 ord4215 ord663 ord286 ord3535 ord4623 ord2665 ord4609 ord1646 ord336 ord6559 ord851 ord6127 ord525 ord984 ord3742 ord599 ord4481 ord6734 ord4826 ord4612 ord3174 ord4473 ord4557 ord1441 ord1812 ord4130 ord1966 ord2661 ord6351 ord5467 ord629 ord1043 ord337 ord1586 ord287 ord812 ord288 ord1082 ord3790 ord2427 ord1574 ord4770 ord4983 ord4371 ord3164 ord4077 ord4083 ord4082 ord3046 ord3166 ord3052 ord3366 ord3231 ord4815 ord3362 ord3243 ord3049 ord1505 ord1949 ord1479 ord4550 ord1463 ord3894 ord1035 ord2329 ord822 ord1430 ord3830 ord626 ord1126 ord2856 ord1040 ord5077 ord5406 ord5245 ord4771 ord1777 ord6437 ord5687 ord665 ord5699 ord2140 ord2457 ord5683 ord1736 ord6614 ord6612 ord6102 ord6632 ord5484 ord3933 ord6814 ord2060 ord2670 ord4789 ord5229 ord4017 ord5712 ord4694 ord6812 ord5586 ord2399 ord5663 ord4752 ord1067 ord1778 ord4365 ord4988 ord6440 ord2094 ord2193 ord4218 ord2517 ord4721 ord852 ord5702 ord3076 ord3177 ord342 ord6352 ord3286 ord4445 ord854 ord1799 ord2586 ord4741 ord4187 ord2394 ord4424 ord2900 ord1647 ord4599 ord1930 ord2898 ord2420 ord3754 ord6708 ord2393 ord4131 ord2906 ord4014 ord6705

_vsnprintf_s wcschr memset ??1type_info@@UEAA@XZ towlower ??1exception@@UEAA@XZ _purecall _wcstoui64 bsearch ?terminate@@YAXXZ _onexit __dllonexit memmove realloc _commode _fmode _wcmdln wcstoul towupper _vscwprintf _vsnprintf _wcsicmp wcsrchr wcsncmp iswspace _errno memcpy memcmp __RTDynamicCast _CxxThrowException _unlock ??0exception@@QEAA@AEBV0@@Z __C_specific_handler _initterm _wtoi _lock free ??0exception@@QEAA@XZ memcpy_s _vsnwprintf __setusermatherr _cexit _exit exit __set_app_type __wgetmainargs _amsg_exit _XcptFilter memmove_s __CxxFrameHandler3 _wcsnicmp wcsstr wcscmp

InitCommonControlsEx

CoUninitialize CoCreateInstance CoInitializeEx

CommandLineToArgvW

NtSetInformationThread NtShutdownSystem RtlAllocateHeap RtlNtStatusToDosError NtSetInformationFile RtlDosPathNameToNtPathName_U_WithStatus RtlFreeHeap NtDuplicateToken RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext NtCreateFile RtlGetVersion NtWriteFile NtReadFile RtlReAllocateHeap NtClose RtlExpandEnvironmentStrings NtQueryInformationFile NtWaitForSingleObject NtOpenFile RtlAdjustPrivilege RtlRaiseStatus NtYieldExecution RtlInitUnicodeString NtSetInformationProcess

DestroyEnvironmentBlock CreateEnvironmentBlock

WTSQueryUserToken

WdsGenericSetupLogInit WdsSetupLogDestroy CurrentIP ConstructPartialMsgVW WdsSetupLogMessageW

RpcStringFreeW UuidFromStringW I_RpcMapWin32Status UuidToStringW

SetTextColor DeleteDC CreateICW CreateSolidBrush SetBkMode CreateDIBSection StretchBlt CreateCompatibleDC BitBlt SetBrushOrgEx GetStockObject GetDeviceCaps GetObjectW DeleteObject TranslateCharsetInfo CreateDCW EnumFontFamiliesExW CreateFontIndirectW

ord23 ord20 ord22

SysFreeString SysAllocString VariantClear VariantInit

VerQueryValueW GetFileVersionInfoSizeExW GetFileVersionInfoExW

WIMUnmountImage WIMSetFileIOCallbackTemporaryPath WIMInitFileIOCallbacks

BCryptHashData BCryptDestroyHash BCryptCloseAlgorithmProvider BCryptFinishHash BCryptOpenAlgorithmProvider BCryptCreateHash

IsAppThemed