RegCreateKeyExW RegQueryInfoKeyW RegDeleteValueW RegOpenKeyExW RegEnumKeyExW RegCloseKey RegSetValueExW TraceMessage DuplicateTokenEx RegQueryValueExW GetUserNameW GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags RegisterTraceGuidsW UnregisterTraceGuids SetServiceStatus GetSecurityDescriptorSacl GetSecurityDescriptorDacl GetSecurityDescriptorGroup GetSecurityDescriptorOwner GetSecurityDescriptorControl GetLengthSid IsValidSid CopySid GetSidSubAuthority InitializeSid GetSidLengthRequired SetSecurityDescriptorOwner InitializeSecurityDescriptor MakeAbsoluteSD SetSecurityDescriptorGroup SetSecurityDescriptorDacl AddAce InitializeAcl GetAclInformation IsValidSecurityDescriptor RegEnumValueW LookupAccountNameW RegisterServiceCtrlHandlerW StartServiceCtrlDispatcherW OpenSCManagerW OpenServiceW CloseServiceHandle CreateServiceW ControlService DeleteService InitiateShutdownW RegGetValueW TraceEvent RegUnLoadKeyW RegLoadKeyW CheckTokenMembership SetSecurityInfo GetSecurityDescriptorLength GetSecurityInfo EventRegister EventEnabled EventUnregister EventWrite SetThreadToken OpenThreadToken ControlTraceW LsaFreeMemory GetWindowsAccountDomainSid ConvertSidToStringSidW AdjustTokenPrivileges LsaNtStatusToWinError RevertToSelf ConvertStringSecurityDescriptorToSecurityDescriptorW ImpersonateLoggedOnUser LsaClose LookupPrivilegeValueW SetNamedSecurityInfoW EqualSid LsaOpenPolicy LogonUserW LsaQueryInformationPolicy OpenProcessToken QueryServiceStatus EnumDependentServicesW

CreateThread GetTickCount LocalAlloc HeapSetInformation CreateWaitableTimerW WaitForSingleObjectEx GetCommandLineW GetCurrentThreadId CopyFileW DeviceIoControl GetDriveTypeW GetFullPathNameW GetSystemWindowsDirectoryW GetVolumePathNameW TlsGetValue OutputDebugStringW GlobalAlloc GlobalLock GlobalFree GlobalUnlock SetErrorMode GetFileAttributesExW QueryDosDeviceW DeleteVolumeMountPointW CancelIoEx GetLogicalDrives SetVolumeMountPointW SetWaitableTimer GetLocalTime SetLastError GetFileSize GetLongPathNameW SetFileValidData SetFilePointerEx SetEndOfFile GetVolumeInformationW CancelIo RtlCompareMemory GetOverlappedResult GetCurrentThread SleepEx SetFilePointer CopyFileExW GetSystemDirectoryW ExpandEnvironmentStringsW GetTickCount64 GetWindowsDirectoryW GetSystemInfo GetProductInfo GetComputerNameExW GetTempPathW GetVersionExW SetFileAttributesW GetFileInformationByHandle GetVolumeNameForVolumeMountPointW FindNextFileW RemoveDirectoryW SetFileInformationByHandle GetFileInformationByHandleEx CreateDirectoryW FindFirstFileW GetVolumePathNamesForVolumeNameW GetDiskFreeSpaceExW GetFileAttributesW OutputDebugStringA UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentProcessId QueryPerformanceCounter SetUnhandledExceptionFilter GetStartupInfoW GetEnvironmentVariableW CompareStringW FindVolumeClose FindNextVolumeW FindFirstVolumeW GetTimeZoneInformation Sleep SetThreadExecutionState FileTimeToLocalFileTime SetVolumeLabelW FileTimeToSystemTime CompareFileTime FindClose MoveFileW ReadFile MoveFileExW FlushFileBuffers WriteFile DeleteFileW GetSystemTimeAsFileTime SystemTimeToFileTime GetSystemTime LocalFree GetFileSizeEx CreateFileW ResetEvent WaitForSingleObject SetEvent CloseHandle CreateEventW InitializeCriticalSectionAndSpinCount DeleteCriticalSection lstrcmpiW EnterCriticalSection GetProcAddress GetLastError RaiseException lstrlenW MultiByteToWideChar GetModuleFileNameW LeaveCriticalSection SizeofResource LoadLibraryW InitializeCriticalSection GetModuleHandleW LoadLibraryExW LoadResource FreeLibrary FindResourceW GetVersionExA HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap

UnregisterClassA CharNextW LoadStringW PostThreadMessageW MessageBoxW GetMessageW TranslateMessage DispatchMessageW CharUpperW

wcscat_s wcscpy_s realloc swscanf_s wcsncmp _vsnwprintf _wcsnicmp calloc memmove_s _errno _unlock __dllonexit _lock swprintf_s memmove _onexit __wgetmainargs _ultow_s strncmp wcsnlen _wcsupr _scwprintf _snwscanf_s _vsnprintf wcscspn towlower _wgetenv _wtol wcstok_s _wcstoi64 __CxxFrameHandler3 _wcsicmp _XcptFilter _exit _cexit exit _wcmdln _initterm _amsg_exit __setusermatherr _commode wcschr wcstoul ?terminate@@YAXXZ _CxxThrowException __C_specific_handler _resetstkoflw _wcslwr _fmode wcsstr __set_app_type ??1type_info@@UEAA@XZ ??2@YAPEAX_K@Z memcpy_s _purecall malloc memcpy memcmp free wcsncpy_s ??3@YAXPEAX@Z wcsrchr memset

NtQueryInformationFile LdrGetDllHandle NtWaitForSingleObject NtQueryVolumeInformationFile NtDeleteFile NtCreateEvent NtResetEvent RtlStringFromGUID RtlFreeUnicodeString RtlGUIDFromString NtAllocateUuids RtlNtStatusToDosError NtSetInformationKey RtlSetAllBits RtlSetBits RtlInitializeBitMap RtlNumberOfSetBits RtlAreBitsSet RtlClearAllBits RtlNumberOfClearBits RtlFindNextForwardRunClear RtlClearBits RtlDosPathNameToNtPathName_U RtlAreBitsClear WinSqmAddToStreamEx RtlCreateSystemVolumeInformationFolder RtlGetSetBootStatusData RtlUnlockBootStatusData NtQuerySymbolicLinkObject LdrGetProcedureAddress NtOpenSymbolicLinkObject RtlInitAnsiString NtDeviceIoControlFile RtlSetOwnerSecurityDescriptor RtlCreateSecurityDescriptor RtlLengthSid RtlAllocateAndInitializeSid NtDeleteKey NtAdjustPrivilegesToken NtSetValueKey NtQueryValueKey NtSetSecurityObject NtOpenProcessToken RtlAddAccessAllowedAceEx RtlLengthSecurityDescriptor NtCreateFile NtCreateKey NtOpenThreadToken NtLoadKey NtDeleteValueKey RtlFreeSid NtUnloadKey NtSaveKey RtlCreateAcl NtOpenKey NtQueryAttributesFile NtEnumerateKey NtQueryKey NtQuerySystemInformation NtOpenFile RtlAllocateHeap NtClose RtlFreeHeap RtlGetLastNtStatus WinSqmAddToStream RtlInitUnicodeString RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RtlSetDaclSecurityDescriptor

CoTaskMemAlloc StringFromGUID2 CoCreateInstance CoInitializeEx CoUninitialize CoInitializeSecurity CoSuspendClassObjects CoResumeClassObjects CoRevokeClassObject CoTaskMemRealloc CreateStreamOnHGlobal CoImpersonateClient CoRevertToSelf CoCreateGuid CoRegisterClassObject CoTaskMemFree

VariantInit VariantCopy VariantClear VarUI4FromStr SysFreeString SysAllocString VarBstrCat SysAllocStringLen UnRegisterTypeLi LoadTypeLi SysStringLen RegisterTypeLi SysAllocStringByteLen SysStringByteLen SystemTimeToVariantTime VarBstrCmp

UuidFromStringW RpcStringFreeW UuidToStringW UuidCreate

VssFreeSnapshotPropertiesInternal CreateVssExamineWriterMetadataInternal CreateVssBackupComponentsInternal

SetupDiDestroyDeviceInfoList SetupDiGetClassDevsW SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailW SetupGetInfDriverStoreLocationW SetupDiGetDeviceRegistryPropertyW SetupEnumPublishedInfW

NetShareAdd NetApiBufferFree NetShareDel NetShareGetInfo

CreateXmlReaderInputWithEncodingName CreateXmlReader

BCryptOpenAlgorithmProvider BCryptHashData BCryptFinishHash BCryptCloseAlgorithmProvider BCryptCreateHash BCryptGetProperty BCryptDestroyHash

GetVirtualDiskInformation GetVirtualDiskOperationProgress GetStorageDependencyInformation DetachVirtualDisk CompactVirtualDisk OpenVirtualDisk GetVirtualDiskPhysicalPath AttachVirtualDisk

GetNodeClusterState