RegDeleteValueW, RegOpenKeyExA, RegEnumKeyA, RegQueryValueExA, RegEnumValueW, SetSecurityInfo, GetSidSubAuthority, GetSidLengthRequired, InitializeSid, CryptDecrypt, SetSecurityDescriptorDacl, RegQueryInfoKeyW, InitializeAcl, AddAccessAllowedAceEx, GetAclInformation, GetAce, AddAce, InitializeSecurityDescriptor, EqualSid, IsValidSid, GetLengthSid, CopySid, RegSetValueExW, RegCreateKeyExW, RegDeleteKeyW, CryptReleaseContext, CryptDestroyKey, OpenThreadToken, GetTokenInformation, ImpersonateSelf, RevertToSelf, SetThreadToken, RegQueryValueExW, RegOpenKeyExW, RegEnumKeyExW, RegCloseKey

CertFreeCertificateContext, CryptEncodeObject, CryptDecodeObject, CertCreateCertificateContext

GetSystemDirectoryW, GetProcAddress, LoadLibraryW, RegisterWaitForSingleObject, UnregisterWait, HeapAlloc, GetProcessHeap, HeapFree, GetCurrentThread, lstrlenW, RaiseException, InitializeCriticalSection, DeleteCriticalSection, CreateEventW, GetVersionExW, GetModuleHandleW, GetModuleFileNameW, InterlockedIncrement, InterlockedDecrement, lstrcmpiW, lstrcpyW, UnregisterWaitEx, GetCurrentProcessId, FreeLibrary, MultiByteToWideChar, SizeofResource, LoadResource, FindResourceW, LoadLibraryExW, DisableThreadLibraryCalls, GetVersionExA, ProcessIdToSessionId, WriteFile, GetLocalTime, SetFilePointer, FindClose, FindFirstFileW, CreateDirectoryW, GetModuleFileNameA, InterlockedExchange, GetTickCount, GetComputerNameA, GetFileSize, CreateFileW, SetLastError, IsDebuggerPresent, WideCharToMultiByte, FlushFileBuffers, CreateFileA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, ReadFile, GetCurrentThreadId, GetSystemTimeAsFileTime, SetEvent, ResetEvent, Sleep, WaitForSingleObject, CloseHandle, LeaveCriticalSection, EnterCriticalSection, LocalFree, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetStartupInfoA, GetFileType, SetHandleCount, GetOEMCP, GetCPInfo, HeapSize, GetStdHandle, ExitProcess, VirtualFree, HeapCreate, HeapDestroy, TlsFree, TlsSetValue, TlsAlloc, TlsGetValue, GetCommandLineA, VirtualQuery, GetSystemInfo, GetModuleHandleA, VirtualAlloc, VirtualProtect, GetStringTypeW, GetStringTypeA, LCMapStringW, LCMapStringA, GetConsoleMode, GetConsoleCP, LoadLibraryA, HeapReAlloc, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, RtlUnwind, GetThreadLocale, GetLocaleInfoA, GetACP, GetLastError, GlobalSize, GlobalLock, GlobalUnlock

GetHGlobalFromStream, CreateStreamOnHGlobal, CoTaskMemFree, CoTaskMemAlloc, OleRun, CoCreateInstance, StringFromCLSID, CoTaskMemRealloc, StringFromGUID2, CoGetStandardMarshal

NdrAsyncClientCall, RpcImpersonateClient, RpcRevertToSelf, RpcAsyncCompleteCall, NdrAsyncServerCall, NdrServerCall2, RpcBindingFree, RpcMgmtIsServerListening, RpcEpResolveBinding, RpcBindingSetAuthInfoW, RpcStringFreeW, RpcBindingFromStringBindingW, RpcStringBindingComposeW, RpcAsyncInitializeHandle, RpcAsyncCancelCall, RpcServerUseProtseqEpW, RpcServerListen, RpcEpRegisterW, RpcServerRegisterIf, RpcServerUseProtseqW, RpcBindingVectorFree, RpcEpUnregister, RpcServerUnregisterIf, NdrClientCall2, RpcMgmtWaitServerListen, RpcMgmtStopServerListening, RpcServerInqBindings

IsWindow, SendMessageW, CloseDesktop, GetForegroundWindow, GetWindowThreadProcessId, GetGUIThreadInfo, SetThreadDesktop, GetUserObjectInformationW, OpenInputDesktop, GetThreadDesktop, CharNextW, UnregisterClassA, PeekMessageW