Shell_NotifyIconW SHEmptyRecycleBinW SHQueryRecycleBinW SHAddToRecentDocs ShellExecuteW ord155 SHGetKnownFolderIDList SHQueryUserNotificationState ShellExecuteExW SHGetKnownFolderPath SHChangeNotify CommandLineToArgvW ord165

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

IdnToAscii

InternetCrackUrlW

ExpandEnvironmentStringsForUserW

RtlDllShutdownInProgress NtSystemDebugControl RtlLookupFunctionEntry RtlVirtualUnwind NtClose NtCreateWorkerFactory NtQueryInformationProcess NtQuerySystemInformation RtlUnwindEx RtlPcToFileHeader NtQueryInformationWorkerFactory NtSetInformationThread RtlCaptureContext NtDeleteKey NtQueryKey NtOpenKey RtlUnwind RtlNtStatusToDosError NtOpenFile RtlInitUnicodeString VerSetConditionMask

PathAppendW PathBuildRootW PathGetDriveNumberW PathIsUNCW PathIsRelativeW PathIsDirectoryW PathMatchSpecW PathFileExistsA AssocQueryStringW PathFindFileNameA PathFileExistsW SHCreateStreamOnFileEx UrlUnescapeW

BCryptSetProperty BCryptDeriveKey BCryptGenerateKeyPair BCryptFinalizeKeyPair BCryptOpenAlgorithmProvider BCryptDestroySecret BCryptDestroyKey BCryptSecretAgreement BCryptCloseAlgorithmProvider BCryptImportKeyPair BCryptGenerateSymmetricKey BCryptEncrypt BCryptExportKey

RpcMgmtEpEltInqNextW I_RpcBindingInqLocalClientPID RpcRevertToSelf RpcImpersonateClient RpcServerUnregisterIfEx RpcServerRegisterIf2 RpcObjectSetType RpcServerUseProtseqEpW RpcEpRegisterW RpcEpUnregister RpcBindingToStringBindingW RpcAsyncCompleteCall UuidToStringW RpcMgmtEpEltInqBegin Ndr64AsyncClientCall NdrServerCallAll NdrServerCall2 NdrAsyncServerCall Ndr64AsyncServerCallAll RpcStringBindingParseW UuidFromStringW RpcIfInqId RpcAsyncInitializeHandle NdrClientCall3 RpcBindingFree RpcStringFreeW RpcBindingFromStringBindingW RpcStringBindingComposeW UuidCreate RpcAsyncCancelCall RpcMgmtEpEltInqDone

WTSFreeMemory WTSQuerySessionInformationW

K32GetProcessImageFileNameW lstrlenW WideCharToMultiByte CreateFileW GetFileSizeEx ReadFile OutputDebugStringA GetModuleFileNameA CreateSemaphoreExW HeapFree ReleaseSemaphore GetModuleHandleExW WaitForSingleObject ReleaseMutex WaitForSingleObjectEx OpenSemaphoreW HeapAlloc CreateMutexExW GetProcessHeap DebugBreak LocalFree LocalAlloc InitializeCriticalSectionEx DeleteCriticalSection DecodePointer FindResourceW LoadResource SizeofResource LockResource GetWindowsDirectoryW Sleep GetCurrentProcess K32EnumProcesses K32GetModuleBaseNameW GetModuleFileNameW ProcessIdToSessionId QueryFullProcessImageNameW GetTickCount64 VerifyVersionInfoW HeapDestroy HeapReAlloc HeapSize TerminateProcess GetCurrentThread GetSystemInfo GetSystemDirectoryW GetVolumePathNameW CreateToolhelp32Snapshot Module32FirstW GetLogicalDrives RemoveDirectoryW FreeLibrary LoadLibraryW SetErrorMode GetPrivateProfileStringW SetFileInformationByHandle QueryDosDeviceW GetTempPathW GetDriveTypeW GetVolumeInformationW GetFileInformationByHandleEx CompareStringW LeaveCriticalSection EnterCriticalSection GetFileAttributesW SetFileAttributesW GetDiskFreeSpaceW GetDiskFreeSpaceExW GetFileSize DeviceIoControl SetFilePointer SetEndOfFile FlushFileBuffers FindFirstFileW FindNextFileW FindClose GetFileTime SetFileTime DeleteFileW MoveFileExW CreateDirectoryW GetFileInformationByHandle WriteFile InitializeCriticalSection SetEvent ResetEvent GetOverlappedResult GetSystemTime QueryPerformanceCounter GlobalMemoryStatusEx GetSystemDefaultLangID GetSystemDefaultLCID GetOEMCP GetACP GetTimeZoneInformation GetStartupInfoW AreFileApisANSI TryEnterCriticalSection HeapCreate GetFullPathNameW LockFile GetFullPathNameA UnlockFileEx GetVersionExW UnmapViewOfFile DuplicateHandle HeapValidate GetTempPathA GetDiskFreeSpaceA GetFileAttributesA GetFileAttributesExW FlushViewOfFile CreateFileA LoadLibraryA GetVersionExA MultiByteToWideChar RaiseException HeapCompact UnlockFile CreateFileMappingA LockFileEx SystemTimeToFileTime GetSystemTimeAsFileTime FormatMessageA CreateFileMappingW MapViewOfFile CreateDirectoryA FindFirstFileA FindNextFileA GetFileAttributesExA RemoveDirectoryA SetFilePointerEx GetLocalTime MoveFileA ReplaceFileA GetProcessId GetEnvironmentVariableW GetTickCount CreateThread CloseHandle GetExitCodeProcess InitializeProcThreadAttributeList UpdateProcThreadAttribute CheckRemoteDebuggerPresent GetCurrentThreadId FlushInstructionCache SetUnhandledExceptionFilter AddVectoredExceptionHandler RemoveVectoredExceptionHandler VirtualQuery GetPriorityClass OpenThread GetThreadPriority GetThreadTimes K32GetProcessMemoryInfo Process32FirstW Process32NextW GetProcessHandleCount CreateIoCompletionPort ReadProcessMemory TlsFree TlsAlloc TlsSetValue TlsGetValue GetNativeSystemInfo GetSystemTimes GetProcessTimes PostQueuedCompletionStatus GetQueuedCompletionStatus CancelIoEx VirtualAlloc WerRegisterMemoryBlock WerUnregisterMemoryBlock VirtualFree QueryPerformanceFrequency InitOnceExecuteOnce AcquireSRWLockExclusive ReleaseSRWLockExclusive CompareFileTime QueryUnbiasedInterruptTime UnregisterWaitEx ReadDirectoryChangesW GetLocaleInfoW LoadLibraryExW ResumeThread TerminateThread SetThreadPriority InitializeCriticalSectionAndSpinCount QueryThreadCycleTime FileTimeToSystemTime DeleteProcThreadAttributeList GetThreadId ExpandEnvironmentStringsW GetShortPathNameW GetSystemWindowsDirectoryW GetProcessAffinityMask GetLongPathNameW GetDateFormatW GetTimeFormatW GetExitCodeThread GetCurrentDirectoryW FindFirstFileExW CopyFileW FindFirstVolumeW GetProcAddress GetVolumePathNamesForVolumeNameW FindVolumeClose K32GetMappedFileNameW SetThreadpoolWait CreateThreadpoolWait CloseThreadpoolWait WaitForThreadpoolWaitCallbacks CancelIo SetNamedPipeHandleState WaitForMultipleObjectsEx WaitNamedPipeW WriteFileEx ReadFileEx GetModuleHandleW SleepConditionVariableSRW WakeAllConditionVariable GetLocaleInfoEx TryAcquireSRWLockExclusive SwitchToThread ReleaseSRWLockShared AcquireSRWLockShared GetStringTypeW WakeConditionVariable InitOnceBeginInitialize InitOnceComplete FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork IsProcessorFeaturePresent OpenProcess CreateMutexW CreateEventW SetEnvironmentVariableW EncodePointer WaitForMultipleObjects GetCurrentProcessId SetLastError GetLastError IsDebuggerPresent CreateProcessW LCMapStringEx CompareStringEx GetCPInfo UnhandledExceptionFilter InitializeSListHead InterlockedPushEntrySList FormatMessageW VirtualProtect ExitThread FreeLibraryAndExitThread GetStdHandle ExitProcess GetFileType OutputDebugStringW FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetConsoleOutputCP GetConsoleMode ReadConsoleW IsValidCodePage GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle HeapQueryInformation WriteConsoleW RegisterWaitForSingleObject DeleteFileA FindNextVolumeW

GetSysColor GetProcessWindowStation GetOpenClipboardWindow GetMessageTime GetMessagePos GetInputState GetFocus GetClipboardViewer GetClipboardOwner GetCapture GetActiveWindow GetCursorPos GetCaretPos CloseClipboard EmptyClipboard GetDesktopWindow OpenClipboard FindWindowExW GetClientRect SetWindowLongW AdjustWindowRect GetTitleBarInfo GetKeyboardLayout LoadCursorW MonitorFromRect EnableWindow GetKeyboardType GetDoubleClickTime GetCaretBlinkTime PeekMessageW IsHungAppWindow SendMessageCallbackW GetGUIThreadInfo LoadStringW IsWindow EnumWindows MonitorFromPoint GetDC GetSystemMetrics DispatchMessageW TranslateMessage GetMessageW MessageBoxA SystemParametersInfoW SetActiveWindow BringWindowToTop AttachThreadInput GetDialogBaseUnits IsIconic ShowWindow SendMessageTimeoutW InvalidateRect SetClassLongPtrW GetWindowPlacement GetClassInfoExW GetWindowLongW GetForegroundWindow RegisterWindowMessageW CreateWindowExW GetWindowRect MonitorFromWindow SetWindowPos GetMonitorInfoW MoveWindow SetFocus GetWindow SetTimer GetLastInputInfo IsWindowVisible AllowSetForegroundWindow GetWindowThreadProcessId PostQuitMessage SendMessageW FindWindowW SetWindowTextW PostMessageW DestroyWindow DestroyMenu TrackPopupMenu SetForegroundWindow SetMenuDefaultItem InsertMenuItemW CreatePopupMenu DefWindowProcW GetWindowLongPtrW SetWindowLongPtrW RegisterClassExW KillTimer LoadIconW

DeleteObject GetDeviceCaps CreateSolidBrush

RegLoadKeyW SetSecurityDescriptorDacl InitializeSecurityDescriptor RegCreateKeyExW EventUnregister EventRegister EventWriteTransfer QueryServiceStatus RevertToSelf DuplicateTokenEx ConvertStringSecurityDescriptorToSecurityDescriptorW ClearEventLogW OpenEventLogW CloseEventLog RegQueryValueExW RegEnumValueW RegQueryInfoKeyW InitializeAcl AddAce ConvertStringSidToSidW GetSidSubAuthorityCount GetSidSubAuthority RegDeleteValueW RegQueryMultipleValuesW RegNotifyChangeKeyValue RegDeleteKeyExW RegEnumKeyW CryptAcquireContextW CryptGenRandom CryptReleaseContext AdjustTokenPrivileges LookupPrivilegeValueW CheckTokenMembership ImpersonateSelf ImpersonateLoggedOnUser RegOpenCurrentUser RegSetValueExW RegSetKeyValueW RegDeleteKeyValueW RegDeleteTreeW RegEnumKeyExW RegOpenKeyExW RegCloseKey OpenProcessToken EqualSid GetTokenInformation AllocateAndInitializeSid FreeSid RegGetValueW GetUserNameW ConvertSidToStringSidW CloseServiceHandle OpenSCManagerW OpenServiceW QueryServiceStatusEx ControlService StartServiceW OpenThreadToken DuplicateToken LookupAccountSidW RegDeleteKeyW GetLengthSid

CoInitializeEx CoUninitialize CoTaskMemAlloc IIDFromString CLSIDFromString CoCreateGuid CoTaskMemFree CoCreateInstance

SysFreeString VariantClear VariantInit SysAllocString

ord345

CallNtPowerInformation

FilterLoad FilterSendMessage FilterGetMessage FilterReplyMessage FilterConnectCommunicationPort