DuplicateTokenEx, GetSecurityDescriptorLength, RegCloseKey, RegisterEventSourceA, ReportEventA, DeregisterEventSource, CryptVerifySignatureA, CryptSignHashA, CryptExportKey, CryptGenKey, CryptGetKeyParam, CryptDestroyKey, RegQueryValueExA, CryptGenRandom, CryptReleaseContext, RegCreateKeyExA, RegSetValueExA, RegDeleteKeyA, CryptAcquireContextA, CryptImportKey, CryptHashData, CryptDestroyHash, RegOpenKeyExW, RegCreateKeyExW, RegSetValueExW, RegDeleteKeyW, RegQueryInfoKeyW, RegEnumKeyExW, RegDeleteValueW, OpenThreadToken, OpenProcessToken, GetTokenInformation, ConvertSidToStringSidW, RegQueryValueExW, CreateProcessAsUserW, ConvertStringSecurityDescriptorToSecurityDescriptorW, ImpersonateLoggedOnUser, CryptCreateHash, CryptGetHashParam, CryptDeriveKey, CryptSetKeyParam, CryptDecrypt, RegOpenCurrentUser, RegOpenKeyExA, IsValidSecurityDescriptor, GetSecurityDescriptorControl, MakeSelfRelativeSD, SetServiceStatus, RegisterServiceCtrlHandlerExW, RevertToSelf, RegEnumValueW, InitializeAcl, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, GetSecurityDescriptorSacl, SetSecurityInfo, AddAccessAllowedAce

CertOpenSystemStoreA, CertFindChainInStore, CertSetCertificateContextProperty, CertNameToStrA, CertGetIssuerCertificateFromStore, CertCreateCertificateContext, CertFreeCertificateContext, CryptMsgClose, CertFreeCertificateChain, CertGetSubjectCertificateFromStore, CryptMsgGetParam, CryptQueryObject, CertGetNameStringW, CertVerifyCertificateChainPolicy, CertGetCertificateChain, CertGetCertificateContextProperty, CryptDecodeObject, CertCloseStore, CertGetNameStringA

DnsQuery_A, DnsRecordListFree

GetAdaptersInfo

DllMain, MultiByteToWideChar, SizeofResource, LoadResource, FindResourceW, LoadLibraryExW, DisableThreadLibraryCalls, InitializeCriticalSection, LockResource, FindResourceExW, GetTickCount, OpenEventW, SetFilePointer, ReadFile, OutputDebugStringA, WriteFile, WideCharToMultiByte, DeleteFileW, GetCurrentThread, GetCurrentProcess, GetExitCodeThread, CreateDirectoryW, lstrlenW, CreateProcessW, OpenProcess, lstrcmpW, IsBadReadPtr, IsBadCodePtr, HeapFree, GetProcessHeap, LoadLibraryW, HeapAlloc, CreateThread, TerminateThread, InterlockedExchange, GetCurrentThreadId, GlobalFree, CreateEventA, Sleep, ResetEvent, MapViewOfFile, CreateFileMappingA, EnterCriticalSection, LoadLibraryA, GetSystemDirectoryA, GetTimeZoneInformation, GetSystemTime, GetSystemTimeAsFileTime, GetVersionExA, GetSystemInfo, FormatMessageA, ConnectNamedPipe, CreateNamedPipeA, QueryPerformanceCounter, QueryPerformanceFrequency, LocalAlloc, CreateFileA, WriteConsoleW, SetFilePointerEx, FlushFileBuffers, FreeEnvironmentStringsW, GetEnvironmentStringsW, GetCurrentProcessId, LeaveCriticalSection, lstrcmpiW, FreeLibrary, GetModuleFileNameW, GetModuleHandleW, GetProcAddress, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, InterlockedDecrement, InterlockedIncrement, LocalFree, GetLastError, RaiseException, GetFileAttributesW, WaitForMultipleObjects, ReadDirectoryChangesW, GetOverlappedResult, CreateFileW, WaitForSingleObject, SetEvent, CreateEventW, CloseHandle, OutputDebugStringW, CompareStringW, SetEndOfFile, InterlockedCompareExchange, GetFullPathNameW, SetEnvironmentVariableA, GetFullPathNameA, WaitForSingleObjectEx, UnlockFileEx, UnlockFile, SystemTimeToFileTime, LockFileEx, LockFile, HeapValidate, HeapCreate, GetTempPathW, GetTempPathA, GetFileSize, GetFileAttributesExW, GetFileAttributesA, GetDiskFreeSpaceW, GetDiskFreeSpaceA, FormatMessageW, DeleteFileA, GetModuleFileNameA, GetStringTypeW, GetCPInfo, GetOEMCP, GetACP, IsValidCodePage, RtlUnwind, GetStdHandle, GetStartupInfoW, TlsFree, TlsSetValue, TlsGetValue, TlsAlloc, TerminateProcess, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetModuleHandleExW, ExitProcess, AreFileApisANSI, ReadConsoleW, GetConsoleMode, GetConsoleCP, GetFileType, SetStdHandle, GetCommandLineA, VirtualQuery, VirtualProtect, VirtualAlloc, IsProcessorFeaturePresent, IsDebuggerPresent, ExitThread, LCMapStringW, EncodePointer, DecodePointer, HeapSize, CreateMutexW, CreateFileMappingW, UnmapViewOfFile, HeapReAlloc, HeapDestroy, SetLastError

CoInitializeEx, CoUninitialize, CoRevertToSelf, CoRegisterClassObject, CoCreateInstance, CoTaskMemAlloc, CoTaskMemRealloc, CoTaskMemFree, CoResumeClassObjects, CoImpersonateClient, StringFromGUID2, CoRevokeClassObject, CoCreateGuid, StringFromCLSID

UuidCreate, UuidToStringA, RpcStringFreeA

DeleteSecurityContext, FreeCredentialsHandle, AcquireCredentialsHandleA, QueryContextAttributesA, EncryptMessage, DecryptMessage, FreeContextBuffer, ApplyControlToken, InitializeSecurityContextA

SHGetSpecialFolderPathW

StrSpnW, PathAppendA, StrStrIW, UrlGetPartW, StrRChrW, StrCmpW

CoInternetParseUrl

CharLowerBuffW, CharNextW, wsprintfW, PostThreadMessageW, GetMessageW, DispatchMessageW, GetUserObjectInformationW, GetProcessWindowStation, GetDesktopWindow, MessageBoxA, TranslateMessage

CreateEnvironmentBlock

WinHttpConnect, WinHttpSetOption, WinHttpOpen, WinHttpAddRequestHeaders, WinHttpSendRequest, WinHttpReceiveResponse, WinHttpQueryHeaders, WinHttpQueryDataAvailable, WinHttpReadData, WinHttpCloseHandle, WinHttpCrackUrl, WinHttpGetProxyForUrl, WinHttpOpenRequest

WinVerifyTrust

WSAEventSelect, WSACloseEvent, WSAEnumNetworkEvents, WSACreateEvent

WTSFreeMemory, WTSEnumerateProcessesW