WriteFile RemoveDirectoryW GetModuleFileNameW LeaveCriticalSection InitializeCriticalSection CreateThread MoveFileExW CreateProcessW GetTickCount MoveFileW GetCurrentProcess TerminateProcess GetEnvironmentVariableW WaitForSingleObject GetSystemDirectoryW SetFileAttributesW GetFileAttributesExW GetWindowsDirectoryW FreeLibrary FlushFileBuffers GetExitCodeProcess SizeofResource LockResource GlobalAlloc GlobalFree LoadResource FindResourceW GlobalLock WideCharToMultiByte GlobalUnlock GetCommandLineW AttachConsole GetFileSize SetConsoleOutputCP AllocConsole SetUnhandledExceptionFilter GetComputerNameW CompareFileTime K32EnumDeviceDrivers K32GetDeviceDriverFileNameW ReadFile GetFileSizeEx ExpandEnvironmentStringsW OutputDebugStringW EnterCriticalSection DeleteCriticalSection WriteConsoleW SetEndOfFile HeapSize ReadConsoleW GetProcessHeap SetStdHandle SystemTimeToFileTime FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW GetProcessHandleCount LCMapStringW LoadLibraryExW VirtualProtect SetFilePointerEx GetConsoleMode GetConsoleOutputCP GetFileType HeapReAlloc HeapFree HeapAlloc UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext GetStringTypeW IsProcessorFeaturePresent GetModuleHandleExW ExitProcess GetStdHandle CreateDirectoryW GetFirmwareType GetFirmwareEnvironmentVariableExW GetLocalTime GetNativeSystemInfo lstrcpynW lstrlenW K32GetDeviceDriverBaseNameW GetProcessTimes GetCurrentProcessId DeleteFileW Sleep GetTempPathW QueryDosDeviceW FileTimeToLocalFileTime LoadLibraryW FileTimeToSystemTime MultiByteToWideChar GetLogicalDriveStringsW DeviceIoControl SetLastError GetVolumeInformationW GetSystemFirmwareTable GetFileTime GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress CloseHandle CreateFileW GetDriveTypeW GetLastError GetTickCount64 GetFileAttributesW GetLogicalDrives FindClose FindNextFileW FindFirstFileW RtlPcToFileHeader RaiseException EncodePointer RtlLookupFunctionEntry InitializeCriticalSectionEx FlsFree FlsSetValue FlsGetValue FlsAlloc RtlUnwindEx QueryFullProcessImageNameW GetSystemInfo Process32FirstW Process32NextW CreateToolhelp32Snapshot OpenProcess K32EnumProcessModulesEx K32GetModuleFileNameExW GetStartupInfoW InitializeSListHead GetCurrentThreadId QueryPerformanceCounter CopyFileW

EndPaint BeginPaint ReleaseDC InvalidateRect LoadImageW ReleaseCapture UpdateWindow PtInRect SystemParametersInfoW PostQuitMessage GetClientRect SetClipboardData SetCapture LoadCursorW LoadIconW TranslateMessage PeekMessageW EmptyClipboard CloseClipboard GetMonitorInfoW FillRect SetTimer DispatchMessageW OpenClipboard IsWindow ShowWindow RegisterClassExW GetSystemMetrics SendMessageW ScreenToClient CreateWindowExW MonitorFromWindow MessageBoxW SetWindowPos IsWindowVisible GetDC DestroyWindow GetWindowRect PostMessageW DefWindowProcW GetMessageW DestroyIcon

SelectObject CreateDIBSection CreateCompatibleDC DeleteDC DeleteObject CreateSolidBrush GetDeviceCaps BitBlt

GetUserNameW RegOpenKeyExW EnumServicesStatusExW GetTokenInformation RegDeleteKeyW LookupPrivilegeValueW AdjustTokenPrivileges DeleteService ControlService RegDeleteTreeW OpenProcessToken RegDeleteValueW RegCreateKeyExW RegSetValueExW QueryServiceConfigW RegLoadAppKeyW RegQueryInfoKeyW CloseServiceHandle OpenSCManagerW RegUnLoadKeyW RegLoadKeyW OpenServiceW QueryServiceStatusEx RegEnumValueW RegEnumKeyExW RegCloseKey RegQueryValueExW

SHGetFolderPathW ShellExecuteW ShellExecuteExW

CryptCATAdminCalcHashFromFileHandle WinVerifyTrust CryptCATAdminAcquireContext CryptCATAdminReleaseCatalogContext CryptCATAdminReleaseContext CryptCATCatalogInfoFromContext CryptCATAdminEnumCatalogFromHash

CertGetNameStringW CertFindCertificateInStore CryptMsgGetParam CertCloseStore CryptQueryObject CertEnumCertificatesInStore CertFreeCertificateContext CryptMsgClose

BCryptHashData BCryptDestroyHash BCryptGetProperty BCryptOpenAlgorithmProvider BCryptCreateHash BCryptCloseAlgorithmProvider BCryptFinishHash

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

EvtRender EvtClose EvtCreateRenderContext EvtNext EvtQuery

GetSaveFileNameW

GdipDeletePath GdipDeleteBrush GdipSetPenColor GdipSetClipRect GdipCreateFontFamilyFromName GdipResetClip GdipGetImageEncoders GdipDeleteFontFamily GdipSetClipPath GdipCreatePath GdipCreateLineBrushFromRectI GdipCreateFont GdipSetInterpolationMode GdipCreateSolidFill GdipSetStringFormatTrimming GdipCreateStringFormat GdipSetPenWidth GdipSetPixelOffsetMode GdipFillRectangle GdipSetPageUnit GdipSetSolidFillColor GdipClosePathFigure GdipGetGenericFontFamilySansSerif GdiplusStartup GdipDrawString GdiplusShutdown GdipSetPenLineJoin GdipCreateFromHDC GdipAddPathRectangle GdipSetTextRenderingHint GdipMeasureString GdipAddPathArc GdipGetImageEncodersSize GdipDeleteGraphics GdipDeleteStringFormat GdipDeleteFont GdipDrawLines GdipCreateBitmapFromScan0 GdipSetStringFormatAlign GdipSetStringFormatFlags GdipSaveImageToFile GdipDrawImageRectI GdipDisposeImage GdipDrawLine GdipCreateBitmapFromHICON GdipDeletePen GdipCreatePen1 GdipDrawPath GdipSetSmoothingMode GdipFillPath

DwmSetWindowAttribute

WinHttpReceiveResponse WinHttpOpen WinHttpQueryHeaders WinHttpReadData WinHttpOpenRequest WinHttpCloseHandle WinHttpSendRequest WinHttpSetTimeouts WinHttpConnect WinHttpCrackUrl WinHttpQueryDataAvailable