RegQueryValueExA, RegCloseKey, RegOpenKeyExA

SetServiceStatus

CloseServiceHandle

OpenServiceA, StartServiceA, QueryServiceStatus, RegisterServiceCtrlHandlerExA, OpenSCManagerA

GetCurrentProcess, TerminateProcess, lstrlenW, CloseThreadpoolWork, CreateThreadpoolWork, InterlockedExchange, SubmitThreadpoolWork, WaitForThreadpoolWorkCallbacks, ExpandEnvironmentStringsW, CreateDirectoryW, TryEnterCriticalSection, GetFileSizeEx, ReadFile, CreateFileA, WriteFile, ExpandEnvironmentStringsA, OpenEventW, GetCurrentProcessId, Sleep, WaitForMultipleObjects, GetOverlappedResult, CancelIoEx, LoadLibraryA, MultiByteToWideChar, DeviceIoControl, UnhandledExceptionFilter, GetModuleHandleW, InterlockedCompareExchange64, InterlockedIncrement, SetThreadPriorityBoost, GetCurrentThread, GetThreadPriority, SetThreadPriority, GetQueuedCompletionStatus, InitializeSListHead, CreateIoCompletionPort, InterlockedPushEntrySList, InterlockedFlushSList, PostQueuedCompletionStatus, QueryPerformanceCounter, LoadLibraryExA, InterlockedCompareExchange, GetProcAddress, DelayLoadFailureHook, TlsAlloc, TlsFree, CreateThread, SetLastError, TlsSetValue, CreateEventA, GetTickCount, QueryPerformanceFrequency, SetUnhandledExceptionFilter, VirtualProtect, GetSystemTimeAsFileTime, VirtualAlloc, ResetEvent, LeaveCriticalSection, GetSystemInfo, VirtualQuery, GetVersion, GetCurrentThreadId, SetEvent, WaitForSingleObjectEx, InterlockedDecrement, InterlockedExchangeAdd, GetModuleHandleExA, FreeLibrary, WaitForSingleObject, CloseHandle, HeapAlloc, HeapFree, FreeLibraryAndExitThread, TlsGetValue, SleepEx, QueueUserAPC, GetLastError, EnterCriticalSection, GetProcessHeap

DllMain

NtDeviceIoControlFile, RtlDeleteCriticalSection, NtCreateFile, RtlInitUnicodeString, RtlNtStatusToDosError, RtlInitializeCriticalSection, RtlLeaveCriticalSection, RtlEnterCriticalSection, RtlIsCriticalSectionLockedByThread, EtwEventUnregister, EtwEventRegister, EtwEventWrite, NtOpenFile, WinSqmStartSession, WinSqmEndSession, WinSqmSetIfMaxDWORD, WinSqmSetDWORD, WinSqmAddToStream, NtQueryTimerResolution, NtSetTimerResolution, RtlFreeHeap, RtlAllocateHeap, RtlImageNtHeader, NtClose, NtWaitForSingleObject

SLGetWindowsInformationDWORD

TcGetInterfaceList, TcCloseInterface, TcDeleteFlow, TcDeleteFilter, TcEnumerateInterfaces, TcRegisterClient, TcAddFlow, TcGetFlowNameA, TcOpenInterfaceW, TcDeregisterClient, TcQueryFlowA, TcQueryInterface, TcModifyFlow, TcSetSocketFlow

WmiExecuteMethodW, WmiOpenBlock, WmiCloseBlock

WSASend, WSAAddressToStringA, WSAStringToAddressA, WSAConnect, WSARecv, WSASocketA, WSARecvFrom, WSAIoctl, WSAGetOverlappedResult