RegOpenKeyExW, CreateProcessAsUserW, RegQueryValueExW, OpenProcessToken, RegCloseKey

GetLastError, Process32FirstW, CreateEventW, Process32NextW, lstrcmpiW, CreateToolhelp32Snapshot, CloseHandle, DisableThreadLibraryCalls, lstrlenW, WaitNamedPipeW, ReadFile, GetOverlappedResult, SetLastError, CreateFileW, ConnectNamedPipe, CreateNamedPipeW, DisconnectNamedPipe, lstrlenA, OutputDebugStringA, lstrcpyA, OutputDebugStringW, lstrcpyW, WriteConsoleW, SetStdHandle, Sleep, OpenProcess, WriteFile, SetEvent, WaitForMultipleObjects, WaitForSingleObject, ExitThread, GetCurrentThreadId, CreateThread, DecodePointer, EncodePointer, GetCommandLineA, RaiseException, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, InterlockedIncrement, GetModuleHandleW, InterlockedDecrement, GetProcAddress, ExitProcess, HeapFree, GetStdHandle, GetModuleFileNameW, HeapAlloc, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, IsProcessorFeaturePresent, SetHandleCount, InitializeCriticalSectionAndSpinCount, GetFileType, GetStartupInfoW, DeleteCriticalSection, GetModuleFileNameA, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, HeapCreate, HeapDestroy, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, LeaveCriticalSection, EnterCriticalSection, LoadLibraryW, RtlUnwind, HeapReAlloc, HeapSize, SetFilePointer, GetConsoleCP, GetConsoleMode, LCMapStringW, MultiByteToWideChar, GetStringTypeW, FlushFileBuffers

SetJobW, ClosePrinter, OpenPrinterW