RegEnumValueW, CloseServiceHandle, OpenThreadToken, AccessCheck, StartServiceW, WmiNotificationRegistrationW, RegisterEventSourceW, OpenServiceW, OpenSCManagerW, RegCloseKey, RegQueryValueExW, StartTraceW, EnableTrace, ControlTraceW, SystemFunction036, ConvertStringSidToSidW, ReportEventW, DeregisterEventSource, GetLengthSid, InitializeAcl, AddAccessAllowedAce, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, RegQueryInfoKeyW, RegEnumKeyExW, RegDeleteKeyW, RegisterServiceCtrlHandlerExW, RegOpenKeyW, LsaNtStatusToWinError, SetServiceStatus, UnregisterTraceGuids, RegisterTraceGuidsW, GetTraceLoggerHandle, GetTraceEnableLevel, GetTraceEnableFlags, RegDeleteValueW, RegCreateKeyExW, RegSetValueExW, AllocateAndInitializeSid, FreeSid, RegOpenKeyExW, TraceMessage

DnsNotifyResolver, DnsQueryConfigDword, DnsDhcpRegisterInit, DnsDhcpRegisterTerm, DnsDhcpRegisterHostAddrs, DnsDhcpRemoveRegistrations

EnterCriticalSection, CreateEventW, CreateWaitableTimerW, GetComputerNameExW, DeleteCriticalSection, InitializeCriticalSection, GetProcessHeap, InterlockedDecrement, WaitForSingleObject, ReleaseSemaphore, DisableThreadLibraryCalls, Sleep, CreateThread, ResetEvent, WaitForMultipleObjects, LeaveCriticalSection, GetProcAddress, LoadLibraryW, CreateSemaphoreW, SetLastError, DeviceIoControl, CreateFileW, SystemTimeToFileTime, GetSystemTime, SetWaitableTimer, CancelWaitableTimer, MultiByteToWideChar, HeapReAlloc, WaitForSingleObjectEx, InterlockedExchange, GetLocalTime, InterlockedCompareExchange, LoadLibraryA, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, SetEvent, InterlockedIncrement, CreateEventA, OpenEventW, HeapFree, HeapAlloc, CloseHandle, GetCurrentProcessId, GetLastError, LocalFree, LocalAlloc, GetCurrentThread, MoveFileExW, ExpandEnvironmentStringsW, OpenEventA, WideCharToMultiByte, InitializeCriticalSectionAndSpinCount, DelayLoadFailureHook, FreeLibrary

DllMain

NsiGetParameter, NsiSetParameterEx, NsiGetAllParametersEx, NsiSetAllParametersEx

RtlSetSaclSecurityDescriptor, RtlSetDaclSecurityDescriptor, RtlSetGroupSecurityDescriptor, RtlSetOwnerSecurityDescriptor, RtlCreateSecurityDescriptor, RtlAddAce, RtlCreateAcl, NtClose, RtlNewSecurityObject, NtOpenProcessToken, RtlLengthSid, RtlDeleteSecurityObject, RtlCopySid, NtOpenFile, RtlFreeUnicodeString, RtlNtStatusToDosError, RtlStringFromGUID, RtlInitUnicodeString, RtlxUnicodeStringToOemSize, NlsMbOemCodePageTag, RtlGUIDFromString, RtlUnicodeStringToOemString, RtlOemStringToUnicodeString, RtlInitString, RtlxOemStringToUnicodeSize

RpcImpersonateClient, RpcBindingFromStringBindingW, RpcBindingSetAuthInfoW, RpcBindingFree, RpcServerUseProtseqEpW, RpcServerRegisterIfEx, RpcEpRegisterW, UuidToStringW, NdrServerCall2, RpcBindingSetOption, RpcBindingToStringBindingW, RpcRevertToSelf, RpcStringBindingComposeW, NdrClientCall2, UuidCreate, RpcServerRegisterAuthInfoW, RpcServerUnregisterIfEx, RpcBindingVectorFree, RpcEpUnregister, RpcServerInqBindings, RpcStringFreeW, RpcStringBindingParseW

LsaRegisterPolicyChangeNotification, LsaUnregisterPolicyChangeNotification

NsiDisconnectFromServer, NsiRpcDeregisterChangeNotificationEx, NsiRpcRegisterChangeNotificationEx, NsiConnectToServer

WSAWaitForMultipleEvents, WSAEnumNetworkEvents, WSAEventSelect, WSAIoctl, WSASetEvent, WSAResetEvent, WSACloseEvent, WSACreateEvent