RegQueryValueExW, RegCloseKey, CreateProcessAsUserW, AllocateAndInitializeSid, SetEntriesInAclW, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, FreeSid, ConvertStringSecurityDescriptorToSecurityDescriptorW, GetSecurityDescriptorSacl, SetSecurityInfo, RegOpenKeyExW, RegOpenCurrentUser, RevertToSelf, ImpersonateLoggedOnUser

RtlUnwind, InitializeCriticalSectionAndSpinCount, LoadLibraryA, HeapReAlloc, VirtualAlloc, HeapAlloc, GetLocaleInfoA, SetStdHandle, GetStringTypeW, GetStringTypeA, GetConsoleMode, GetConsoleCP, WriteFile, SetFilePointer, GetSystemTimeAsFileTime, GetTickCount, QueryPerformanceCounter, VirtualFree, HeapDestroy, HeapCreate, GetEnvironmentStringsW, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, HeapSize, CreateFileA, FlushFileBuffers, MapViewOfFileEx, lstrlenW, GetModuleFileNameW, GetCurrentThreadId, lstrcmpW, CloseHandle, SetEvent, OpenEventW, ResetEvent, InterlockedDecrement, InterlockedCompareExchange, WaitForSingleObject, CreateEventW, GetNativeSystemInfo, LocalFree, GetLastError, CreateFileMappingW, LocalAlloc, EnterCriticalSection, LeaveCriticalSection, Wow64RevertWow64FsRedirection, CreateProcessW, GetEnvironmentVariableW, Wow64DisableWow64FsRedirection, IsWow64Process, GetCurrentProcess, CreateThread, UnmapViewOfFile, DeleteCriticalSection, TryEnterCriticalSection, InitializeCriticalSection, Sleep, GetCurrentProcessId, GetVersionExW, GetCommandLineA, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCPInfo, InterlockedIncrement, GetACP, GetOEMCP, IsValidCodePage, GetModuleHandleW, GetProcAddress, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, SetLastError, LCMapStringA, WideCharToMultiByte, MultiByteToWideChar, LCMapStringW, HeapFree, ExitProcess, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, ProcessIdToSessionId

IsWindow, CharLowerW, GetWindowThreadProcessId, CopyRect, GetWindow, SetWindowPos, InvalidateRect, OffsetRect, InflateRect, IsMenu, GetCursorPos, CallWindowProcW, IsWindowUnicode, GetWindowLongW, GetWindowLongA, SetWindowLongW, SetWindowLongA, SendMessageW, EnumDisplaySettingsW, SystemParametersInfoW, EnumWindows, IsWindowVisible, SetWindowsHookExW, CallNextHookEx, ClientToScreen, GetWindowRect, FindWindowW, GetClassNameW, GetWindowPlacement, SetWindowPlacement, UnhookWindowsHookEx, PtInRect, MonitorFromWindow, EqualRect, UnionRect, MonitorFromRect, IsRectEmpty, IntersectRect, MonitorFromPoint, GetMonitorInfoW, EnumChildWindows, GetParent, PostMessageW

WTSQueryUserToken