RegCloseKey, GetTokenInformation, RegOpenKeyExA, GetUserNameA, FreeSid, EqualSid, AllocateAndInitializeSid, RegQueryValueExA, OpenProcessToken, OpenThreadToken, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, RevertToSelf, ImpersonateNamedPipeClient

GetStockObject

CreateEventA, WaitForMultipleObjects, OpenEventA, SetEndOfFile, SetFilePointer, FlushViewOfFile, ResetEvent, UnmapViewOfFile, MapViewOfFile, CreateFileMappingA, ReleaseMutex, WaitForSingleObject, GetFileSize, CreateMutexA, CreateFileA, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, GetCurrentThreadId, TlsGetValue, TlsFree, InitializeCriticalSection, TlsSetValue, ResumeThread, FormatMessageA, SetEvent, TlsAlloc, SetThreadPriority, IsBadReadPtr, ReleaseSemaphore, CreateSemaphoreA, FindFirstFileA, GetCurrentProcessId, InterlockedDecrement, InterlockedIncrement, TerminateThread, Sleep, CreateProcessA, DuplicateHandle, GetCommandLineA, ConnectNamedPipe, CreateNamedPipeA, WaitNamedPipeA, DisconnectNamedPipe, FlushFileBuffers, ReadFile, WriteFile, FindNextFileA, LoadLibraryA, GetProcAddress, FindClose, GetFullPathNameA, GetDriveTypeA, GetVersionExA, GetCurrentThread, GetCurrentProcess, GetComputerNameA, OpenProcess, GetLastError, CloseHandle, GetTempPathA, GetModuleFileNameA, GetUserDefaultLangID, OpenFileMappingA, SuspendThread, SleepEx, OpenSemaphoreA

WNetCloseEnum, WNetEnumResourceA, WNetOpenEnumA, WNetGetUniversalNameA

DllMain

DllMain

PostMessageA, UpdateWindow, ShowWindow, LoadCursorA, CreateWindowExA, RegisterClassA, DestroyWindow, LoadIconA, PostQuitMessage, FindWindowA, DefWindowProcA, SendMessageA, MessageBoxA, TranslateMessage, DispatchMessageA, GetMessageA