CryptAcquireContextW, RegCloseKey, RegOpenKeyExW, RegQueryValueExW, CopySid, CryptSetProvParam, CryptReleaseContext, GetLengthSid, LookupAccountNameW, SetSecurityDescriptorSacl, RegEnumKeyExW, RegQueryInfoKeyW, GetSecurityDescriptorSacl, CryptSignHashW, CryptVerifySignatureW, RegGetKeySecurity, RegSetKeySecurity, ConvertStringSecurityDescriptorToSecurityDescriptorW, GetSidIdentifierAuthority, GetSidSubAuthorityCount, GetTokenInformation, QueryServiceStatus, SetThreadToken, ImpersonateSelf, GetSecurityDescriptorLength, MakeSelfRelativeSD, GetNamedSecurityInfoW, GetSecurityDescriptorOwner, RegOpenKeyW, AddAce, InitializeAcl, AddAccessAllowedAce, AddAccessDeniedAce, OpenThreadToken, CloseEventLog, GetEventLogInformation, OpenEventLogW, SetFileSecurityW, GetSidSubAuthority, InitializeSid, GetSidLengthRequired, GetSecurityDescriptorDacl, RegSetValueExW, GetAclInformation, CryptCreateHash, CryptSetHashParam, CryptHashData, CryptGetHashParam, CryptDestroyHash, CryptEncrypt, CryptImportKey, EqualSid, LookupAccountSidW, CryptGetKeyParam, QueryServiceStatusEx, CloseServiceHandle, OpenSCManagerW, OpenServiceW, CryptGenKey, CryptGetUserKey, CryptExportKey, AllocateAndInitializeSid, CheckTokenMembership, FreeSid, ConvertSidToStringSidW, ImpersonateLoggedOnUser, GetUserNameW, AllocateLocallyUniqueId, LsaNtStatusToWinError, AdjustTokenPrivileges, LookupPrivilegeValueW, CryptDecrypt, ImpersonateNamedPipeClient, CryptDestroyKey, RevertToSelf, InitializeSecurityDescriptor, GetSecurityDescriptorGroup, GetSecurityDescriptorControl, MakeAbsoluteSD, SetSecurityDescriptorControl, GetAce, OpenProcessToken, IsValidSid, RegDeleteKeyW, RegDeleteValueW, RegCreateKeyExW, SetSecurityDescriptorDacl

SetBiometricData

CryptUnprotectData, CryptProtectData, CertGetNameStringW, CertCreateCertificateContext, CertFreeCertificateContext

GetStockObject

CreateEventW, GetComputerNameW, ResetEvent, InterlockedIncrement, LocalAlloc, lstrlenW, FormatMessageW, InterlockedDecrement, LocalFree, GetLastError, CloseHandle, OpenProcess, OutputDebugStringA, UnmapViewOfFile, MapViewOfFile, CreateFileMappingW, SetEvent, VirtualFreeEx, WaitForSingleObject, CreateRemoteThread, WriteProcessMemory, VirtualAllocEx, GetWindowsDirectoryW, MultiByteToWideChar, lstrlenA, WideCharToMultiByte, GetModuleHandleW, GetProcAddress, DeleteCriticalSection, InitializeCriticalSection, GetFileType, RaiseException, GetVersionExW, GetLocaleInfoA, GetACP, InterlockedExchange, SetEnvironmentVariableA, CompareStringW, GetCommandLineA, IsBadReadPtr, RtlUnwind, HeapSize, HeapReAlloc, HeapFree, HeapDestroy, LeaveCriticalSection, EnterCriticalSection, GetVersionExA, ExitProcess, GetProcessHeap, HeapAlloc, GetCurrentProcessId, GetTickCount, FileTimeToSystemTime, SystemTimeToFileTime, GetSystemTimeAsFileTime, CreateDirectoryA, CreateFileW, ReadFile, GetCurrentThreadId, GetModuleFileNameA, LCMapStringW, GetCPInfo, CompareStringA, HeapCreate, VirtualFree, CreateFileA, GetLocaleInfoW, GetOEMCP, LoadLibraryA, GetTimeZoneInformation, IsBadCodePtr, IsValidCodePage, IsValidLocale, EnumSystemLocalesA, GetUserDefaultLCID, GetStringTypeW, GetStringTypeA, GetSystemInfo, VirtualProtect, SetEndOfFile, SetStdHandle, SetFilePointer, FlushFileBuffers, LCMapStringA, WriteFile, UnhandledExceptionFilter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetStartupInfoA, GetStdHandle, SetHandleCount, QueryPerformanceCounter, GetCurrentProcess, TerminateProcess, SetUnhandledExceptionFilter, GetModuleHandleA, TlsGetValue, TlsSetValue, TlsFree, SetLastError, TlsAlloc, VirtualAlloc, IsBadWritePtr, VirtualQuery, CopyFileW, FindFirstFileW, DeleteFileW, FindNextFileW, OpenEventW, MoveFileExW, CompareFileTime, SetDllDirectoryW, GetModuleFileNameW, LoadLibraryExW, FindResourceW, LoadResource, SizeofResource, FreeLibrary, Sleep, CreateNamedPipeW, ConnectNamedPipe, CreateThread, DisconnectNamedPipe, lstrcmpiW, FlushInstructionCache, WaitForMultipleObjects, OutputDebugStringW, CreateMutexW, ReleaseMutex, GetCurrentThread, GetComputerNameExW, OpenFileMappingW, MoveFileW, FormatMessageA, LoadLibraryW, CreateSemaphoreW, ReleaseSemaphore, InterlockedCompareExchange, IsProcessorFeaturePresent, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, InitializeCriticalSectionAndSpinCount, GetConsoleMode, GetConsoleCP, GetDateFormatA, IsDebuggerPresent, GetTimeFormatA, CreateDirectoryW, GetFileAttributesW, ExitThread

DsGetDcNameW, NetApiBufferFree, NetServerGetInfo, NetUserGetGroups, NetGetJoinInformation

CoCreateInstance, OleRun, CoUninitialize, CLSIDFromProgID, CLSIDFromString, CoInitialize, CoTaskMemRealloc, CoTaskMemFree, CoWaitForMultipleHandles, CoReleaseMarshalData, CoMarshalInterface, CreateStreamOnHGlobal, CoUnmarshalInterface, CoCreateGuid, StringFromGUID2, CoTaskMemAlloc

EnumProcesses, EnumProcessModules, GetModuleFileNameExW

LsaConnectUntrusted, LsaCallAuthenticationPackage, LsaLogonUser, LsaFreeReturnBuffer, LsaLookupAuthenticationPackage, LsaRegisterLogonProcess, LsaDeregisterLogonProcess, GetComputerObjectNameW, GetUserNameExW

SetupDiEnumDeviceInterfaces, SetupDiDestroyDeviceInfoList, SetupDiGetClassDevsExW, SetupDiCreateDeviceInfoList, SetupDiGetDeviceInstanceIdW, SetupDiGetDeviceInterfaceDetailW

SHGetFolderPathA, SHGetFolderPathW

PathAppendA, PathIsDirectoryA, PathFileExistsA, PathAppendW

wsprintfW, UnregisterDeviceNotification, RegisterDeviceNotificationW, DispatchMessageW, GetMessageW, UnregisterClassA, PostMessageW, SendMessageW, UnregisterClassW, RegisterClassW, ReplyMessage, RegisterClassExW, LoadCursorW, GetClassInfoExW, CreateWindowExW, CallWindowProcW, GetWindowLongW, SetWindowLongW, DefWindowProcW, IsWindow, DestroyWindow, PeekMessageW, MsgWaitForMultipleObjects, CharNextW, TranslateMessage

GetGPOListW, FreeGPOListW, UnloadUserProfile

HttpSendRequestA, HttpAddRequestHeadersA, HttpOpenRequestA, InternetOpenA, InternetSetStatusCallbackW, InternetReadFile, InternetCrackUrlA, InternetConnectA, InternetCloseHandle, HttpQueryInfoW, InternetSetOptionW

SCardGetStatusChangeW, SCardReleaseContext, SCardEstablishContext

WSASocketW