RegCloseKey, RegDeleteValueW, MapGenericMask, ImpersonateSelf, AccessCheck, GetFileSecurityW, RevertToSelf, OpenThreadToken, ImpersonateLoggedOnUser, RegQueryInfoKeyW, RegEnumKeyExW, RegSetValueExW, RegDeleteKeyW, RegCreateKeyExW, RegQueryValueExW, RegOpenKeyExW

MultiByteToWideChar, CreateDirectoryW, GetModuleFileNameW, GetTempPathW, GetCurrentProcessId, WideCharToMultiByte, InterlockedDecrement, RaiseException, SetFileTime, MoveFileExW, GetFileTime, SetThreadLocale, GetThreadLocale, GetCurrentThread, WTSGetActiveConsoleSessionId, lstrcpyW, HeapDestroy, HeapReAlloc, HeapSize, GetProcessHeap, EncodePointer, LCMapStringW, CompareStringW, GetFileAttributesA, GetFileSize, GetFileAttributesW, CreateWaitableTimerW, WaitForMultipleObjectsEx, WaitForMultipleObjects, SetWaitableTimer, GetCurrentProcess, DuplicateHandle, Sleep, GetTickCount, GetCurrentThreadId, TerminateThread, GetFileSizeEx, DeleteFileW, RemoveDirectoryW, CreateEventW, WaitForSingleObject, OpenEventW, ResetEvent, SetEvent, SetFilePointer, ReadFile, LoadLibraryExW, CreateFileW, lstrlenW, CloseHandle, FreeLibrary, GetModuleHandleW, HeapFree, GetProcAddress, FindResourceExW, DecodePointer, InterlockedExchange, InterlockedCompareExchange, FindResourceW, LoadResource, LockResource, SizeofResource, DeleteCriticalSection, GetSystemTimeAsFileTime, QueryPerformanceCounter, IsProcessorFeaturePresent, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, InitializeCriticalSectionAndSpinCount, GetLastError, LeaveCriticalSection, EnterCriticalSection, HeapAlloc, InterlockedIncrement

DllMain

CoInitializeEx, CoUninitialize, CoWaitForMultipleHandles, CoTaskMemAlloc, CoTaskMemFree, CoCreateGuid, CoCreateInstance, StringFromGUID2

PathFindExtensionW, PathRemoveFileSpecW, PathFindFileNameW

CharNextW

WMIsContentProtected

WTSFreeMemory, WTSEnumerateSessionsW, WTSQueryUserToken