RegOpenKeyW, LookupAccountSidW, DuplicateTokenEx, GetTokenInformation, RevertToSelf, ImpersonateLoggedOnUser, RegOpenCurrentUser, RegCloseKey, RegEnumKeyExW, RegQueryValueExW, RegEnumValueW, RegSetValueExW, RegDeleteValueW, RegOpenKeyExW, RegCreateKeyExW

EnterCriticalSection, LeaveCriticalSection, RaiseException, GetCurrentThreadId, SetLastError, GetSystemTimeAsFileTime, GetProcessTimes, QueryPerformanceCounter, QueryPerformanceFrequency, CreateMutexW, CreateFileW, GetModuleFileNameW, ExpandEnvironmentStringsW, ReleaseMutex, WriteFile, WideCharToMultiByte, GetFileSizeEx, OutputDebugStringW, InterlockedExchange, OpenSemaphoreW, OpenEventW, WaitForMultipleObjects, FlushInstructionCache, ResetEvent, GetVersionExW, GetLocaleInfoW, LoadLibraryExW, FindResourceExW, LoadResource, LockResource, FreeLibrary, GetSystemDirectoryA, ProcessIdToSessionId, Sleep, GetSystemDefaultLCID, GetCurrentProcessId, GetUserDefaultUILanguage, FormatMessageW, LocalFree, OpenMutexW, WTSGetActiveConsoleSessionId, GetCurrentProcess, InterlockedExchangeAdd, CreateEventW, InterlockedCompareExchange, GetLastError, WaitForSingleObject, SetEvent, InterlockedDecrement, InterlockedIncrement, CreateEventA, CloseHandle, HeapFree, GetProcessHeap, HeapAlloc, EnumSystemLocalesA, IsValidLocale, IsValidCodePage, SetHandleCount, GetFileType, GetStartupInfoW, LoadLibraryW, WriteConsoleW, SetStdHandle, SetEndOfFile, SetEnvironmentVariableA, GetModuleHandleA, ReleaseSemaphore, GetLocaleInfoA, GetUserDefaultLCID, FlushFileBuffers, ReadFile, SetFilePointer, GetConsoleMode, GetConsoleCP, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetOEMCP, GetACP, GetTimeZoneInformation, HeapCreate, ExitProcess, GetModuleHandleW, LocalAlloc, GetProcAddress, LoadLibraryA, lstrcpyW, MultiByteToWideChar, GetStringTypeW, InitializeCriticalSection, DeleteCriticalSection, EncodePointer, DecodePointer, TlsAlloc, TlsFree, TlsGetValue, OpenEventA, TlsSetValue, ResumeThread, GetTickCount, SystemTimeToFileTime, SetWaitableTimer, CreateWaitableTimerA, GetFileAttributesA, GetFileAttributesW, CreateFileA, RemoveDirectoryW, DeleteFileW, CreateDirectoryW, MoveFileW, FormatMessageA, InitializeCriticalSectionAndSpinCount, InterlockedPushEntrySList, IsProcessorFeaturePresent, VirtualFree, VirtualAlloc, InterlockedPopEntrySList, HeapDestroy, HeapReAlloc, HeapSize, GetTimeFormatA, GetDateFormatA, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, TerminateProcess, GetCommandLineA, RtlUnwind, GetCPInfo, LCMapStringW, CompareStringW, ExitThread, CreateThread, GetStdHandle, GetModuleFileNameA, FindVolumeClose, FindNextVolumeW, GetVolumePathNamesForVolumeNameW, QueryDosDeviceW, FindFirstVolumeW, GetSystemDirectoryW

CoInitializeEx, CoUninitialize, CoCreateGuid, CoCreateInstance, CLSIDFromString, CoTaskMemFree, CoTaskMemAlloc, StringFromGUID2, CoTaskMemRealloc

SetupDiEnumDeviceInfo, SetupDiGetClassDevsW, SetupDiGetDeviceInstanceIdW, SetupDiDestroyDeviceInfoList

PathFindFileNameW, SHDeleteKeyW, PathCombineA

WTSQueryUserToken