RegQueryInfoKeyW, RegEnumKeyExW, CryptDestroyKey, CryptDecrypt, CryptSetKeyParam, CryptImportKey, RegOpenKeyW, RegDeleteKeyW, DuplicateTokenEx, ImpersonateLoggedOnUser, RevertToSelf, GetTokenInformation, RegEnumValueW, OpenThreadToken, RegisterServiceCtrlHandlerExW, SetServiceStatus, CryptAcquireContextW, CryptGenRandom, CryptReleaseContext, RegCreateKeyExW, RegEnumKeyW, RegDeleteValueW, RegOpenKeyExW, RegCloseKey, RegSetValueExW, RegQueryValueExW

CryptProtectData, CryptUnprotectData

DhcpNotifyMediaReconnected, DhcpReleaseParameters, DhcpStaticRefreshParams

Dot3QueryGUIDNCSState

EapolQecInitialize, EapolQecGetSoH, EapolQecUninitialize, EapolQecCreateConnection, EapolQecDeleteConnection, EapolQecSetQuarantineEnabled, EapolQecIndicateSoHResponseList

JetInit, JetEndSession, JetTerm2, JetAttachDatabase, JetSetSystemParameter, JetCreateInstance, JetBeginTransaction, JetRollback, JetCommitTransaction, JetPrepareUpdate, JetOpenDatabase, JetCreateDatabase, JetSeek, JetMakeKey, JetSetCurrentIndex, JetUpdate, JetSetColumn, JetMove, JetCreateIndex, JetAddColumn, JetCreateTable, JetGetTableColumnInfo, JetBeginSession, JetDeleteTable, JetCloseTable, JetRetrieveColumn, JetOpenTable

WriteFile, LoadLibraryW, DeleteTimerQueue, ResetEvent, GetStringTypeExW, GetThreadLocale, lstrcmpW, lstrlenW, DebugBreak, CreateFileW, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetProcAddress, FreeLibrary, WaitForSingleObject, CreateEventW, UnregisterWait, Sleep, GetUserDefaultLCID, lstrlenA, OutputDebugStringW, CreateFileA, CloseHandle, GetLastError, SetEvent, GetSystemTimeAsFileTime, LocalAlloc, SetLastError, FormatMessageW, ExpandEnvironmentStringsW, LoadLibraryExW, WideCharToMultiByte, MultiByteToWideChar, LocalFree, ChangeTimerQueueTimer, CreateTimerQueueTimer, DeleteTimerQueueTimer, DeleteTimerQueueEx, CreateTimerQueue, BindIoCompletionCallback, HeapAlloc, InterlockedCompareExchange, InterlockedExchange, GetCurrentThread, ReadFile, GetProcessHeap, HeapFree, InterlockedIncrement, QueueUserWorkItem, InterlockedDecrement, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, DeviceIoControl, GetUserDefaultUILanguage, CompareFileTime, SystemTimeToFileTime, GetLocalTime, VerifyVersionInfoW, CreateThread, WaitForMultipleObjects, InitializeCriticalSection

DllMain

DsGetDcNameW, NetApiBufferFree

RtlInitUnicodeString, RtlNtStatusToDosError, VerSetConditionMask, NtDuplicateToken, NtOpenFile, RtlInitializeSid, RtlLengthRequiredSid, RtlSubAuthoritySid, RtlCopySid, RtlSubAuthorityCountSid, RtlDeleteSecurityObject, RtlLengthSid, RtlSetSaclSecurityDescriptor, RtlSetDaclSecurityDescriptor, RtlSetGroupSecurityDescriptor, RtlSetOwnerSecurityDescriptor, RtlCreateSecurityDescriptor, RtlAddAce, RtlCreateAcl, NtClose, RtlNewSecurityObject, NtOpenProcessToken, NtAccessCheckAndAuditAlarm, RtlAdjustPrivilege, RtlConvertSidToUnicodeString, NtConnectPort, NtCreateSection, NtRequestWaitReplyPort, RtlCompareMemory

CoInitializeEx, StringFromGUID2, CLSIDFromString, CoCreateInstance, CoUninitialize, CoTaskMemFree

RpcBindingSetAuthInfoExW, RpcBindingFromStringBindingW, NdrClientCall2, RpcRevertToSelf, RpcImpersonateClient, RpcRevertToSelfEx, RpcServerUseProtseqEpW, RpcBindingFree, NdrServerCall2, RpcStringFreeW, RpcStringBindingParseW, RpcBindingToStringBindingW, UuidToStringW, RpcServerRegisterIfEx, RpcServerRegisterAuthInfoW, RpcServerListen, RpcServerUnregisterIfEx

RouterLogRegisterW, TraceVprintfExA, TraceDeregisterW, TraceRegisterExW, TracePrintfExA, RouterLogDeregisterW, RouterLogEventW, TraceDumpExW, TraceDeregisterA, TraceDumpExA

GetUserNameExW

SHDeleteKeyW

UnregisterDeviceNotification, wsprintfW, CharNextW, RegisterDeviceNotificationA, GetSystemMetrics, OemToCharBuffA, CharLowerW, wvsprintfW, LoadStringW

WinStationQueryInformationW

WmiNotificationRegistrationW

WTSQueryUserToken, WTSFreeMemory, WTSEnumerateSessionsW