OpenProcessToken, GetUserNameW, ImpersonateLoggedOnUser, RegEnumValueW, RegQueryInfoKeyW, RegEnumKeyW, RegDeleteValueW, RegSetValueExW, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RevertToSelf

InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, ReadFile, WriteFile, SetFilePointer, SetEndOfFile, GetFileSize, IsBadCodePtr, CreateFileW, GetProcAddress, GetModuleHandleW, CloseHandle, MultiByteToWideChar, DeleteFileW, lstrlenW, GetCurrentProcess, HeapFree, GetProcessHeap, TerminateThread, WaitForSingleObject, SetEvent, ExitThread, GetCurrentThreadId, ResetEvent, GetLastError, WaitForMultipleObjects, CreateProcessW, GetModuleFileNameW, Process32NextW, Process32FirstW, CreateToolhelp32Snapshot, OpenProcess, HeapAlloc, HeapReAlloc, CreateThread, CreateEventW, CreateDirectoryW, OutputDebugStringA, GetModuleHandleA, GetConsoleMode, GetConsoleCP, LoadLibraryW, IsValidCodePage, GetOEMCP, GetACP, GetCPInfo, LeaveCriticalSection, EnterCriticalSection, GetStringTypeW, LCMapStringW, SetStdHandle, WriteConsoleW, FlushFileBuffers, GetExitCodeProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, GetEnvironmentStringsW, WideCharToMultiByte, FreeEnvironmentStringsW, GetModuleFileNameA, GetStartupInfoW, GetFileType, SetHandleCount, ExitProcess, HeapSize, Sleep, RtlUnwind, RaiseException, DecodePointer, EncodePointer, MoveFileW, GetFileAttributesW, GetCommandLineA, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, InterlockedDecrement, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapCreate, HeapDestroy, GetStdHandle, IsProcessorFeaturePresent

CoTaskMemFree, CoTaskMemAlloc

SHGetFolderPathW

SHDeleteKeyW, PathAppendW

wsprintfW, MsgWaitForMultipleObjects, PeekMessageW, DispatchMessageW, FindWindowW, FindWindowExW, SendMessageW, CharUpperBuffW

GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW

WTSFreeMemory, WTSEnumerateProcessesW, WTSEnumerateSessionsW