LookupAccountSidW, CopySid, GetTokenInformation, GetSidSubAuthorityCount, IsWellKnownSid, GetSidSubAuthority, OpenProcessToken, RegCloseKey, RegOpenKeyExW, ConvertStringSecurityDescriptorToSecurityDescriptorW, SetNamedSecurityInfoW, RegQueryValueExW, GetLengthSid

CredUIPromptForWindowsCredentialsW, CredPackAuthenticationBufferW

GetStockObject

GetFileSize, SetFilePointer, CreateDirectoryW, OutputDebugStringW, GetModuleHandleW, WriteFile, WideCharToMultiByte, GetVersionExW, ReadFile, CreateFileW, GetTempPathW, SetLastError, GetProcAddress, GetLocalTime, GetSystemInfo, GetCurrentProcessId, GetCurrentProcess, GetComputerNameW, WaitNamedPipeW, ProcessIdToSessionId, SetNamedPipeHandleState, WTSGetActiveConsoleSessionId, FindResourceExW, FindResourceW, LoadResource, SizeofResource, lstrlenW, LockResource, ReleaseMutex, GetTickCount, GetConsoleWindow, CompareStringW, CompareStringA, CreateFileA, GetTimeZoneInformation, GetProcessHeap, SetEndOfFile, FlushFileBuffers, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, IsValidLocale, EnumSystemLocalesA, GetUserDefaultLCID, GetDateFormatA, GetTimeFormatA, GetStringTypeW, GetStringTypeA, LCMapStringA, GetLocaleInfoA, GetLocaleInfoW, HeapReAlloc, VirtualAlloc, InitializeCriticalSectionAndSpinCount, LoadLibraryA, InterlockedExchange, MultiByteToWideChar, GetCurrentThreadId, TerminateThread, CreateMutexW, CloseHandle, CreateEventW, ResetEvent, SetEvent, WaitForSingleObject, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, Sleep, InitializeCriticalSection, lstrcpyW, GetLastError, FreeLibrary, SetConsoleCtrlHandler, FatalAppExitA, GetSystemTimeAsFileTime, QueryPerformanceCounter, VirtualFree, HeapDestroy, HeapCreate, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, LCMapStringW, RaiseException, HeapAlloc, SetEnvironmentVariableA, GetStartupInfoA, GetFileType, SetHandleCount, GetConsoleMode, GetConsoleCP, IsValidCodePage, GetOEMCP, GetACP, GetCPInfo, RtlUnwind, HeapSize, GetModuleFileNameA, GetStdHandle, HeapFree, ExitProcess, GetCurrentThread, InterlockedDecrement, InterlockedIncrement, TlsFree, TlsSetValue, TlsAlloc, TlsGetValue, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, GetCommandLineA, CreateThread, ExitThread

CoTaskMemAlloc, CoTaskMemFree

SetupDiDestroyDeviceInfoList, SetupDiEnumDeviceInfo, SetupDiOpenDevRegKey, SetupDiGetClassDevsW, SetupDiGetDeviceRegistryPropertyW, SetupDiGetClassDescriptionW, SetupDiGetDeviceInstanceIdW

PathFileExistsW

LogEx

GetWindowLongW, LoadIconW, RegisterClassExW, LoadCursorW, PostMessageW, GetSystemMetrics, SetWindowLongW, UnregisterDeviceNotification, IsWindow, RegisterDeviceNotificationW, TranslateMessage, BeginPaint, KillTimer, UnregisterClassW, PostQuitMessage, GetMessageW, SetTimer, DestroyWindow, EndPaint, GetForegroundWindow, GetFocus, SetForegroundWindow, CreateWindowExW, DispatchMessageW, DefWindowProcW

WinBioLocateSensor, WinBioControlUnitPrivileged, WinBioLockUnit, WinBioUnlockUnit, WinBioEnumEnrollments, WinBioGetEnabledSetting, WinBioCloseSession, WinBioGetDomainLogonSetting, WinBioRegisterEventMonitor, WinBioEnumBiometricUnits, WinBioGetCredentialState, WinBioGetProperty, WinBioGetLogonSetting, WinBioOpenSession, WinBioRemoveCredential, WinBioSetCredential, WinBioEnrollBegin, WinBioEnrollDiscard, WinBioEnrollCommit, WinBioEnrollCaptureWithCallback, WinBioFree, WinBioUnregisterEventMonitor, WinBioLogonIdentifiedUser, WinBioCancel, WinBioDeleteTemplate, WinBioWait, WinBioVerifyWithCallback, WinBioControlUnit

WTSUnRegisterSessionNotification, WTSRegisterSessionNotification