RegDeleteValueA, SetEntriesInAclA, GetSecurityInfo, CopySid, GetLengthSid, GetTokenInformation, RevertToSelf, ImpersonateLoggedOnUser, DuplicateTokenEx, LookupAccountSidA, ConvertSecurityDescriptorToStringSecurityDescriptorA, DuplicateToken, RegEnumValueA, RegOpenCurrentUser, RegSetValueExA, RegQueryInfoKeyW, RegDeleteKeyA, RegEnumKeyExA, RegCreateKeyExA, RegOpenKeyExA, RegQueryInfoKeyA, SetSecurityInfo, RegCloseKey, OpenThreadToken, SetThreadToken

MiniDumpWriteDump

DeleteCriticalSection, LoadLibraryExA, GetModuleHandleA, GetModuleFileNameA, EnterCriticalSection, GetProcAddress, GetThreadLocale, lstrcmpiA, GetLastError, SetThreadLocale, RaiseException, lstrlenW, MultiByteToWideChar, IsDBCSLeadByte, LeaveCriticalSection, SizeofResource, InitializeCriticalSectionAndSpinCount, WideCharToMultiByte, GetModuleHandleW, InterlockedDecrement, InterlockedIncrement, LoadResource, FreeLibrary, lstrlenA, FindResourceA, WinExec, SetEnvironmentVariableA, CompareStringW, GetProcessHeap, SetEndOfFile, CreateFileW, WriteConsoleW, SetStdHandle, LoadLibraryW, IsValidLocale, EnumSystemLocalesA, GetLocaleInfoA, GetUserDefaultLCID, SetFilePointer, FlushFileBuffers, GetConsoleMode, GetConsoleCP, GetTimeZoneInformation, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetStartupInfoW, GetFileType, SetHandleCount, HeapReAlloc, IsValidCodePage, GetOEMCP, GetACP, ExitProcess, HeapSize, GetLocaleInfoW, GetStdHandle, HeapDestroy, GetCurrentProcess, GetVersionExA, LocalFree, SetLastError, LocalAlloc, CloseHandle, GetModuleFileNameW, GetCurrentThreadId, GetCurrentProcessId, WaitForSingleObject, InterlockedExchange, InitializeCriticalSection, SetEvent, ResetEvent, Sleep, GetCurrentThread, TlsAlloc, TlsFree, TlsSetValue, TlsGetValue, CreateEventA, CreateThread, ResumeThread, WaitNamedPipeA, CreateFileA, GetTempPathA, DeviceIoControl, QueryPerformanceFrequency, QueryPerformanceCounter, GetTickCount, GetLocalTime, DebugBreak, IsDebuggerPresent, FormatMessageW, OutputDebugStringA, ReadFile, GetOverlappedResult, PeekNamedPipe, WriteFile, CancelIo, SetNamedPipeHandleState, InterlockedCompareExchange, GetStringTypeW, EncodePointer, DecodePointer, HeapFree, HeapAlloc, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, GetCommandLineA, RtlUnwind, SetConsoleCtrlHandler, GetSystemTimeAsFileTime, GetTimeFormatA, GetDateFormatA, MoveFileA, DeleteFileA, UnhandledExceptionFilter, SetUnhandledExceptionFilter, TerminateProcess, GetCPInfo, LCMapStringW, IsProcessorFeaturePresent, HeapCreate

CoTaskMemAlloc, CoTaskMemFree, StringFromGUID2, CoCreateInstance, CoTaskMemRealloc

SetupDiGetDeviceInstanceIdA, CM_Get_Device_IDW, SetupDiCreateDeviceInfoList, SetupDiOpenDeviceInterfaceW, SetupDiEnumDeviceInfo, SetupDiOpenDeviceInterfaceA, SetupDiEnumDeviceInterfaces, SetupDiGetClassDevsA, SetupDiDestroyDeviceInfoList, SetupPromptReboot, SetupDiGetDeviceInterfaceDetailA, CM_Get_Device_IDA, CM_Get_Device_ID_Size, CM_Get_Parent

SHDeleteKeyA

GetClassInfoExW, ChangeDisplaySettingsExA, EnumDisplayDevicesA, EnumDisplaySettingsA, IsWindowVisible, GetDesktopWindow, OpenDesktopA, CloseDesktop, GetThreadDesktop, SetThreadDesktop, GetWindowPlacement, MessageBoxA, SetWindowPlacement, GetUserObjectInformationA, SetWindowLongA, DestroyWindow, PostThreadMessageA, GetMessageA, OpenInputDesktop, PostQuitMessage, DefWindowProcA, GetWindowLongA, RegisterClassExW, CreateWindowExW, UnregisterClassW, EnumWindows, DispatchMessageA, CharNextA, CharNextW

LoadUserProfileA, UnloadUserProfile