RegSetValueExW, RegOpenKeyExA, RegEnumKeyA, RegQueryValueExA, RegEnumValueW, SetSecurityInfo, GetSidSubAuthority, GetSidLengthRequired, InitializeSid, CryptDecrypt, RegQueryInfoKeyW, SetSecurityDescriptorDacl, RegEnumKeyExW, InitializeAcl, AddAccessAllowedAceEx, GetAclInformation, GetAce, AddAce, InitializeSecurityDescriptor, EqualSid, IsValidSid, GetLengthSid, CopySid, RegCreateKeyExW, RegDeleteValueW, RegDeleteKeyW, CryptReleaseContext, CryptDestroyKey, OpenThreadToken, GetTokenInformation, ImpersonateSelf, RevertToSelf, SetThreadToken, RegQueryValueExW, RegOpenKeyExW, RegCloseKey

CertFreeCertificateContext, CryptEncodeObject, CryptDecodeObject, CertCreateCertificateContext

GetProcAddress, LoadLibraryW, RegisterWaitForSingleObject, UnregisterWait, HeapAlloc, GetProcessHeap, HeapFree, GetCurrentThread, lstrlenW, RaiseException, InitializeCriticalSection, DeleteCriticalSection, CreateEventW, GetVersionExW, GetModuleHandleW, GetModuleFileNameW, InterlockedIncrement, InterlockedDecrement, lstrcmpiW, lstrcpyW, GetCurrentProcessId, FreeLibrary, MultiByteToWideChar, SizeofResource, LoadResource, FindResourceW, LoadLibraryExW, DisableThreadLibraryCalls, GetVersionExA, ProcessIdToSessionId, WriteFile, GetLocalTime, SetFilePointer, FindClose, FindFirstFileW, CreateDirectoryW, GetModuleFileNameA, InterlockedExchange, GetTickCount, GetComputerNameA, GetFileSize, CreateFileW, SetLastError, IsDebuggerPresent, WideCharToMultiByte, FlushFileBuffers, CreateFileA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, ReadFile, GetSystemDirectoryW, LocalUnlock, GetSystemTimeAsFileTime, SetEvent, ResetEvent, Sleep, CloseHandle, LeaveCriticalSection, EnterCriticalSection, LocalFree, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetStartupInfoA, GetFileType, SetHandleCount, GetOEMCP, GetCPInfo, HeapSize, GetStdHandle, ExitProcess, VirtualFree, HeapCreate, HeapDestroy, TlsFree, TlsSetValue, TlsAlloc, TlsGetValue, GetCommandLineA, VirtualQuery, GetSystemInfo, GetModuleHandleA, VirtualAlloc, GetStringTypeW, GetStringTypeA, LCMapStringW, LCMapStringA, GetConsoleMode, GetConsoleCP, LoadLibraryA, VirtualProtect, HeapReAlloc, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, RtlUnwind, GetThreadLocale, GetLocaleInfoA, GetACP, GetCurrentThreadId, GetLastError, LocalSize, LocalLock

GetHGlobalFromStream, CreateStreamOnHGlobal, CoTaskMemFree, CoTaskMemAlloc, OleRun, CoCreateInstance, StringFromCLSID, CoTaskMemRealloc, StringFromGUID2, CoGetStandardMarshal

NdrAsyncClientCall, RpcImpersonateClient, RpcRevertToSelf, RpcAsyncCompleteCall, NdrAsyncServerCall, NdrServerCall2, RpcBindingFree, RpcMgmtIsServerListening, RpcEpResolveBinding, RpcBindingSetAuthInfoW, RpcStringFreeW, RpcBindingFromStringBindingW, RpcStringBindingComposeW, RpcAsyncInitializeHandle, RpcAsyncCancelCall, RpcServerUseProtseqEpW, RpcServerListen, RpcServerInqBindings, RpcServerRegisterIf, RpcServerUseProtseqW, RpcBindingVectorFree, RpcEpUnregister, NdrClientCall2, RpcMgmtWaitServerListen, RpcMgmtStopServerListening, RpcEpRegisterW

IsWindow, SendMessageW, CloseDesktop, GetForegroundWindow, GetWindowThreadProcessId, GetGUIThreadInfo, SetThreadDesktop, GetUserObjectInformationW, OpenInputDesktop, GetThreadDesktop, CharNextW, UnregisterClassA, PeekMessageW