CloseEncryptedFileRaw, RegisterEventSourceW, RegQueryValueExW, RegOpenKeyExW, RegCloseKey, WriteEncryptedFileRaw, OpenEncryptedFileRawW, DeregisterEventSource, ReportEventW

UnhandledExceptionFilter, CreateFileA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetFileAttributesW, EnterCriticalSection, GetFileAttributesW, LeaveCriticalSection, DeleteCriticalSection, DeleteFileW, InitializeCriticalSection, CloseHandle, LocalFree, GetLastError, ReadFile, SetFilePointerEx, CreateFileW, DeviceIoControl, GetTickCount, GetCurrentThreadId, CreateDirectoryW, GetLocalTime, GetCurrentProcessId, GetVolumePathNameW, GetVolumeNameForVolumeMountPointW, GetVolumeInformationW, GetDriveTypeW, SetErrorMode, FreeLibrary, GetProcAddress, LoadLibraryW, SetEndOfFile, WriteFile, SetFilePointer, GetFileInformationByHandle, SetFileTime, WaitForSingleObject, RemoveDirectoryW, BackupRead, BackupSeek, BackupWrite, VirtualAlloc, FindClose, VirtualFree, GetSystemTime, FindNextFileW, FindFirstFileW, OutputDebugStringW, FormatMessageW, WideCharToMultiByte, HeapFree, TerminateProcess, GetCurrentProcess, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCommandLineA, GetVersionExA, HeapAlloc, GetProcessHeap, HeapReAlloc, RaiseException, RtlUnwind, GetStdHandle, GetModuleFileNameA, GetModuleHandleA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, InterlockedDecrement, SetEnvironmentVariableA, ExitProcess, SetEnvironmentVariableW, Sleep, MultiByteToWideChar, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, HeapDestroy, HeapCreate, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, HeapSize, SetHandleCount, GetFileType, GetStartupInfoA, QueryPerformanceCounter, GetSystemTimeAsFileTime, GetConsoleCP, GetConsoleMode, LoadLibraryA, GetLocaleInfoA, CompareStringA, CompareStringW, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW, SetStdHandle, FlushFileBuffers

CoGetCurrentProcess

SHCreateDirectoryExW

wsprintfW