OutputDebugStringW, OutputDebugStringA

SetLastError, SetErrorMode, RaiseException, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetLastError

GetFileAttributesExW, GetVolumeInformationW, GetLogicalDrives, GetFileSize, GetShortPathNameW, GetFileAttributesA, GetDriveTypeW, ReadFile, SetFilePointer, CompareFileTime, WriteFile, RemoveDirectoryW, CreateDirectoryW, DeleteFileW, SetFileAttributesW, GetFileAttributesW, QueryDosDeviceW, CreateFileW, GetFileSizeEx, SetFileTime, GetDiskFreeSpaceW, GetLongPathNameW, FindClose, FindNextFileW, GetDiskFreeSpaceExW, FindFirstFileW, FindCloseChangeNotification, GetFullPathNameW, FindNextChangeNotification, FindFirstChangeNotificationW, FlushFileBuffers, GetVolumePathNameW, GetFileInformationByHandle, GetTempFileNameW, FileTimeToSystemTime, FindFirstFileExW, FindVolumeClose, FindNextVolumeW, FindFirstVolumeW, SetEndOfFile

CloseHandle, DuplicateHandle

HeapAlloc, GetProcessHeap, HeapDestroy, HeapReAlloc, HeapFree

InterlockedExchange, InterlockedDecrement, InterlockedIncrement, InterlockedCompareExchange, InterlockedCompareExchange64

CancelIoEx, GetOverlappedResult, DeviceIoControl

GetModuleFileNameW, FreeResource, LoadResource, LoadStringW, FreeLibrary, GetModuleHandleW, LoadStringA, GetProcAddress, LoadLibraryExA, FreeLibraryAndExitThread, DisableThreadLibraryCalls, LoadLibraryExW, SizeofResource, GetModuleHandleExW, LockResource

FindNLSString, GetCPInfoExW, GetLocaleInfoEx, GetSystemDefaultLangID, GetCPInfo, GetLocaleInfoW, GetACP, LCMapStringW, GetThreadLocale, GetUserDefaultLCID, GetThreadUILanguage, GetSystemDefaultLCID, VerLanguageNameW, GetOEMCP

RegCloseKey, RegOpenKeyExW, RegSetValueExW, RegCreateKeyExW, RegEnumValueW, RegDeleteKeyExW, RegDeleteValueW, RegGetValueW, RegQueryInfoKeyW, RegQueryInfoKeyA, RegEnumKeyExW, RegDeleteTreeW, RegOpenKeyExA, RegOpenCurrentUser, RegQueryValueExA, RegQueryValueExW

UnmapViewOfFile, VirtualProtect, CreateFileMappingW, OpenFileMappingW, ReadProcessMemory, VirtualFree, VirtualAlloc, VirtualQuery, MapViewOfFile

lstrlenA, Wow64DisableWow64FsRedirection, GlobalAlloc, GlobalFree, Sleep, IsWow64Process, lstrcmpiA, lstrcmpA, LocalReAlloc, FormatMessageW, LocalFree, LocalAlloc, lstrlenW, lstrcmpiW, lstrcmpW, Wow64RevertWow64FsRedirection

ExpandEnvironmentStringsW, FreeEnvironmentStringsW, GetCurrentDirectoryW, GetEnvironmentVariableW, SearchPathW, SetEnvironmentVariableW, SetCurrentDirectoryW, GetEnvironmentStringsW

ExitProcess, TerminateProcess, GetExitCodeProcess, GetCurrentThread, OpenThreadToken, GetExitCodeThread, GetThreadId, OpenThread, SetThreadPriority, GetThreadPriority, InitializeProcThreadAttributeList, ResumeThread, GetStartupInfoW, GetProcessTimes, TlsAlloc, TlsFree, ProcessIdToSessionId, GetCurrentProcessId, TlsGetValue, TlsSetValue, CreateThread, GetCurrentProcess, OpenProcessToken, GetCurrentThreadId, DeleteProcThreadAttributeList, CreateProcessAsUserW, SetThreadToken, CreateProcessW

QueryPerformanceFrequency, QueryPerformanceCounter

WideCharToMultiByte, MultiByteToWideChar, CompareStringOrdinal, GetStringTypeExW, CompareStringEx, GetStringTypeW, CompareStringW

ReleaseSRWLockExclusive, CreateEventW, ResetEvent, WaitForSingleObject, ReleaseSemaphore, SetEvent, DeleteCriticalSection, InitializeCriticalSection, EnterCriticalSection, LeaveCriticalSection, CreateMutexW, TryEnterCriticalSection, InitializeSRWLock, OpenMutexW, OpenProcess, AcquireSRWLockShared, ReleaseSRWLockShared, ReleaseMutex, OpenEventW, AcquireSRWLockExclusive, SetWaitableTimer

GetVersionExW, SystemTimeToFileTime, GetSystemInfo, GetSystemTime, GetTickCount, GetSystemTimeAsFileTime, GetSystemDirectoryW, GetTickCount64, GetSystemWindowsDirectoryW, GetLocalTime, GlobalMemoryStatusEx, GetComputerNameExW, GetWindowsDirectoryW

AddAccessAllowedAce, GetSecurityDescriptorControl, GetLengthSid, InitializeAcl, AddAce, GetAclInformation, GetAce, DeleteAce, QuerySecurityAccessMask, GetKernelObjectSecurity, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, GetSidSubAuthorityCount, GetSidLengthRequired, AdjustTokenPrivileges, GetSidSubAuthority, GetSidIdentifierAuthority, GetSecurityDescriptorOwner, GetSecurityDescriptorGroup, IsWellKnownSid, GetSecurityDescriptorDacl, GetSecurityDescriptorSacl, ImpersonateSelf, RevertToSelf, AllocateAndInitializeSid, FreeSid, CreateWellKnownSid, CheckTokenMembership, GetFileSecurityW, AccessCheck, EqualSid, GetTokenInformation, SetFileSecurityW, SetSecurityDescriptorOwner, DuplicateTokenEx, CopySid, IsValidSid, DuplicateToken, AddAccessAllowedAceEx, AddAccessDeniedAceEx, SetTokenInformation, InitializeSid

GetViewportOrgEx, GetClipBox, CreateRectRgn, GetClipRgn, IntersectClipRect, SelectClipRgn, SetMetaFileBitsEx, PlayMetaFile, DeleteMetaFile, LPtoDP, SetStretchBltMode, StretchBlt, GetTextAlign, SetTextAlign, SetMapMode, SetViewportOrgEx, SetWindowExtEx, SetViewportExtEx, CreatePolygonRgn, MoveToEx, LineTo, GetCurrentObject, CreatePen, Rectangle, GetTextColor, GdiTransparentBlt, CreateBitmap, TextOutW, CreateDIBSection, GdiFlush, GetPixel, GdiAlphaBlend, GetDeviceCaps, GetTextExtentPointW, SetBkMode, OffsetWindowOrgEx, SetWindowOrgEx, EnumFontFamiliesA, AddFontResourceW, CreateFontA, GetLayout, SetLayout, CreateCompatibleBitmap, SetFontEnumeration, GetTextFaceW, CreateDCW, EnumFontFamiliesExW, GetTextExtentPoint32W, CreateFontIndirectW, GetObjectW, GetTextMetricsW, PatBlt, CreateCompatibleDC, BitBlt, DeleteDC, SetTextColor, SetBkColor, SelectObject, GetNearestColor, PlgBlt, GetObjectType, GetWindowOrgEx, CreateRectRgnIndirect, RestoreDC, SaveDC, GetDIBColorTable, ExtTextOutW, CreateFontW, TextOutA, GetTextExtentPoint32A, CreateSolidBrush, GetStockObject, TranslateCharsetInfo, DeleteObject

ResolveLocaleName, LocaleNameToLCID, AssignProcessToJobObject, TerminateThread, GetProcessId, CreateIoCompletionPort, SetInformationJobObject, GetQueuedCompletionStatus, IsProcessInJob, CreateJobObjectW, ExpandEnvironmentStringsA, GetAtomNameW, FindResourceExW, SystemTimeToTzSpecificLocalTime, TzSpecificLocalTimeToSystemTime, LocalFileTimeToFileTime, FileTimeToLocalFileTime, LoadLibraryA, GetPhysicallyInstalledSystemMemory, FlushInstructionCache, QueueUserWorkItem, CloseThreadpoolTimer, CreateThreadpoolTimer, SetThreadpoolTimer, CreateHardLinkW, CreateTimerQueueTimer, DeleteTimerQueueTimer, GetSystemWow64DirectoryW, GetProductInfo, FindAtomW, CancelSynchronousIo, UnregisterWait, GlobalFlags, SetVolumeLabelW, WaitForMultipleObjects, CreateSemaphoreW, LocalSize, RegisterWaitForSingleObject, UnregisterWaitEx, WritePrivateProfileStringW, WritePrivateProfileSectionW, QueryFullProcessImageNameW, GetPrivateProfileSectionNamesW, ActivateActCtx, DeactivateActCtx, DosDateTimeToFileTime, FileTimeToDosDateTime, GlobalGetAtomNameW, FindResourceW, GetComputerNameW, MoveFileExW, EnumResourceNamesW, LoadLibraryW, GetPrivateProfileStringW, MulDiv, GetPrivateProfileIntW, GetProfileIntW, GetShortPathNameA, GlobalUnlock, GlobalLock, GlobalReAlloc, DelayLoadFailureHook, GetTempPathW, GetDateFormatW, PowerClearRequest, PowerSetRequest, PowerCreateRequest, CheckElevationEnabled, GetProfileSectionW, GetVolumeNameForVolumeMountPointW, GlobalSize, ReplaceFileW, MoveFileW, QueryActCtxW, GlobalDeleteAtom, GlobalAddAtomW, GetNativeSystemInfo, CreateActCtxW, ReleaseActCtx, CheckElevation, Wow64EnableWow64FsRedirection, GetBinaryTypeW, GetCompressedFileSizeW, CopyFileW, WerpNotifyUseStringResource, CreateWaitableTimerW, ReadDirectoryChangesW, GetFileInformationByHandleEx, WTSGetActiveConsoleSessionId, GetPrivateProfileSectionW, GetVolumePathNamesForVolumeNameW, InitOnceExecuteOnce, GetSystemPreferredUILanguages

EnumSystemLocalesEx, GetNumberFormatW, LCIDToLocaleName, GetUserDefaultUILanguage, EnumUILanguagesW, NotifyRedirectedStringChange, IsDBCSLeadByte

DllMain

RtlFreeHeap, RtlUnicodeStringToOemString, NtSetInformationFile, NtOpenFile, RtlInitUnicodeString, RtlDosPathNameToNtPathName_U_WithStatus, NtQueryInformationFile, RtlNtStatusToDosError, NtCreateFile, NtClose, NtFsControlFile, EtwEventWrite, RtlGetLastNtStatus, RtlExpandEnvironmentStrings_U, RtlInitUnicodeStringEx, RtlSetEnvironmentVariable, RtlQueryEnvironmentVariable_U, RtlDestroyEnvironment, RtlSetCurrentEnvironment, RtlCreateEnvironment, NtQueryLicenseValue, WinSqmIncrementDWORD, EtwTraceMessage, EtwEventEnabled, WinSqmAddToStream, RtlMapGenericMask, NtQueryInformationProcess, NtQueryInformationToken, NtOpenProcessToken, NtSetInformationToken, EtwGetTraceEnableFlags, EtwGetTraceEnableLevel, EtwGetTraceLoggerHandle, EtwRegisterTraceGuidsW, EtwUnregisterTraceGuids, EtwEventRegister, EtwEventUnregister, NtQuerySystemInformation, RtlGetNtProductType, WinSqmIsOptedIn, NtQueryVolumeInformationFile, NtSetInformationThread, NtQueryInformationThread, WinSqmSetDWORD, wcsncpy_s, wcscat_s, RtlFreeUnicodeString, RtlCreateUnicodeString, RtlRandomEx, NtQueryDirectoryFile, RtlFreeAnsiString, RtlUnicodeStringToAnsiString, RtlReleaseRelativeName, RtlDosPathNameToRelativeNtPathName_U, NtSetSecurityObject, NtSetEaFile, NtQuerySecurityObject, NtQueryEaFile, RtlDowncaseUnicodeString, RtlOemStringToUnicodeString, RtlInitString, RtlDosPathNameToNtPathName_U, ShipAssert, NtQueryObject, EtwLogTraceEvent, NtOpenThreadToken, RtlPrefixString

DllMain

DllMain