LookupAccountSidA, RegEnumKeyExA, OpenSCManagerA, OpenServiceA, CloseServiceHandle, QueryServiceStatus, RegQueryInfoKeyA, RegEnumValueA, RegSetValueExA, RegOpenKeyA, GetUserNameA, IsValidAcl, OpenThreadToken, OpenProcessToken, GetTokenInformation, GetAclInformation, EqualSid, InitializeSecurityDescriptor, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, GetLengthSid, InitializeAcl, AddAccessAllowedAce, GetAce, SetSecurityDescriptorDacl, GetSecurityDescriptorLength, MakeSelfRelativeSD, AllocateAndInitializeSid, FreeSid, RegOpenKeyExA, RegQueryValueExA, RegCloseKey

CreateFileA, lstrcatA, HeapCreate, DisableThreadLibraryCalls, InitializeCriticalSection, lstrcmpiA, CreateThread, OpenEventA, lstrlenA, ReleaseMutex, OpenMutexA, CreateMutexA, LeaveCriticalSection, EnterCriticalSection, WaitForSingleObject, CreateEventA, DeleteCriticalSection, lstrcmpA, WriteProfileStringA, GetProfileStringA, ResetEvent, SetEvent, WaitForMultipleObjects, GetCurrentThreadId, GetTickCount, TerminateThread, GetExitCodeThread, IsDBCSLeadByte, GetCurrentProcessId, SetLastError, GetModuleFileNameA, HeapDestroy, GetLastError, GetCurrentThread, GetCurrentProcess, CloseHandle, HeapAlloc, HeapFree, GlobalFree, GlobalAlloc, GetVersionExA, Sleep, CreateProcessA, WideCharToMultiByte, MultiByteToWideChar, GetStringTypeW, VirtualAlloc, SetEnvironmentVariableA, HeapReAlloc, IsBadWritePtr, GetProcAddress, LoadLibraryA, InterlockedDecrement, InterlockedIncrement, IsValidLocale, IsValidCodePage, GetLocaleInfoA, EnumSystemLocalesA, GetUserDefaultLCID, GetTimeZoneInformation, GetLocaleInfoW, CompareStringA, CompareStringW, lstrcpyA, GetStringTypeA, LCMapStringW, LCMapStringA, UnhandledExceptionFilter, WriteFile, VirtualFree, GetEnvironmentVariableA, GetModuleHandleA, GetEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsW, FreeEnvironmentStringsA, GetStartupInfoA, GetFileType, GetStdHandle, SetHandleCount, TerminateProcess, RtlUnwind, GetCommandLineA, GetVersion, TlsSetValue, TlsAlloc, TlsFree, TlsGetValue, ExitProcess, FatalAppExitA, GetCPInfo, GetACP, GetOEMCP

NdrConvert, NdrSendReceive, NdrConformantStringMarshall, NdrGetBuffer, NdrConformantStringBufferSize, NdrClientInitializeNew, NdrSimpleStructUnmarshall, NdrConformantArrayMarshall, NdrConformantArrayBufferSize, NdrConformantArrayUnmarshall, NdrSimpleStructMarshall, NdrSimpleStructBufferSize, RpcBindingFromStringBindingA, RpcStringBindingComposeA, RpcBindingFree, RpcStringFreeA, NdrFreeBuffer

IsWindow, SendMessageA, FindWindowA, GetUserObjectInformationA, GetProcessWindowStation, wsprintfA, PostMessageA, EnumWindows, GetClassNameA

ClosePrinter, GetPrinterA, OpenPrinterA, SetJobA, EnumJobsA, EnumPrintersA