RegQueryInfoKeyW, RegGetKeySecurity, RegSetKeySecurity, RegEnumValueW, RegDeleteValueW, RegCreateKeyExW, RegSetValueExW, RegEnumKeyExW, RegDeleteKeyExW, RegOpenCurrentUser, RegQueryValueExW, RegOpenKeyExW, RegCloseKey, RegGetValueW

SetServiceStatus, RegisterServiceCtrlHandlerExW, StartServiceCtrlDispatcherW

DnsQuery_W, DnsFree

lstrcmpiW, QueueUserWorkItem, AcquireSRWLockExclusive, ReleaseSRWLockExclusive, AcquireSRWLockShared, ReleaseSRWLockShared, InitializeSRWLock, GetSystemTime, MoveFileExW, IsDebuggerPresent, AddVectoredExceptionHandler, DeleteFileW, GetCurrentProcessId, GetComputerNameW, WideCharToMultiByte, lstrlenW, LoadLibraryW, GetCurrentThread, LoadLibraryExW, SetErrorMode, SetPriorityClass, HeapDestroy, TlsFree, DisableThreadLibraryCalls, HeapCreate, TlsGetValue, SetConsoleCtrlHandler, InitializeCriticalSection, DuplicateHandle, ReadFile, CreateFileW, GetTempFileNameW, CompareStringW, ExitThread, GetLastError, CloseHandle, WaitForSingleObject, GetModuleHandleW, CreateEventW, CreateThread, GetTickCount, ExitProcess, Sleep, OpenEventW, HeapSetInformation, GetProcessHeap, InitializeCriticalSectionAndSpinCount, TlsAlloc, GetVersionExW, LeaveCriticalSection, EnterCriticalSection, SetEvent, SetLastError, TlsSetValue, InterlockedDecrement, OpenProcess, InterlockedIncrement, RaiseException, GetProcAddress, FreeLibrary, InterlockedCompareExchange, LoadLibraryExA, InterlockedExchange, SetUnhandledExceptionFilter, GetModuleHandleA, QueryPerformanceCounter, GetCurrentThreadId, DebugBreak, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetThreadpoolTimer, HeapAlloc, HeapFree, DeleteCriticalSection, ResetEvent, LocalFree

DllMain

RtlIpv6AddressToStringW, RtlIpv4AddressToStringW, NtClose, NtOpenThreadToken, NtSetInformationThread, NtOpenProcessToken, RtlReportException, EtwEventEnabled, TpReleasePool, TpAllocTimer, TpSetTimer, TpAllocWork, TpPostWork, TpSimpleTryPost, TpAllocWait, TpAllocPool, TpSetPoolMaxThreads, TpSetPoolMinThreads, TpAllocAlpcCompletion, TpAllocIoCompletion, TpStartAsyncIoOperation, RtlNtStatusToDosError, TpCallbackMayRunLong, TpWaitForAlpcCompletion, TpReleaseAlpcCompletion, TpWaitForIoCompletion, TpReleaseIoCompletion, TpWaitForTimer, TpReleaseTimer, TpSetWait, TpWaitForWait, TpReleaseWait, TpWaitForWork, TpReleaseWork, RtlValidRelativeSecurityDescriptor, EtwEventWrite, EtwUnregisterTraceGuids, EtwRegisterTraceGuidsW, EtwGetTraceLoggerHandle, EtwGetTraceEnableLevel, EtwGetTraceEnableFlags, EtwTraceMessage, EtwEventUnregister, EtwEventRegister, WinSqmIsOptedIn, WinSqmAddToStreamEx, WinSqmSetDWORD, WinSqmIncrementDWORD

PowerDeterminePlatformRole, GetPwrCapabilities

RpcServerInqBindings, RpcBindingToStringBindingW, RpcBindingVectorFree, RpcEpRegisterW, RpcServerRegisterIf, RpcServerRegisterIf2, RpcObjectSetType, RpcServerUseProtseqW, RpcServerUseProtseqEpA, RpcStringBindingComposeW, RpcBindingFromStringBindingW, RpcBindingFree, RpcSmDestroyClientContext, I_RpcBindingInqTransportType, NdrAsyncClientCall, NdrClientCall2, RpcServerTestCancel, I_RpcExceptionFilter, RpcServerUnsubscribeForNotification, RpcServerSubscribeForNotification, RpcAsyncAbortCall, RpcSsContextLockExclusive, RpcStringFreeW, RpcRevertToSelfEx, RpcAsyncCompleteCall, RpcImpersonateClient, RpcRevertToSelf, RpcServerInqBindingHandle, I_RpcBindingIsClientLocal, I_RpcSessionStrictContextHandle, RpcRaiseException, NdrAsyncServerCall, NdrServerCall2, RpcMgmtSetServerStackSize, RpcServerInqDefaultPrincNameW, RpcServerRegisterAuthInfoW, RpcServerListen, RpcStringBindingParseW

SendNotifyMessageW, MsgWaitForMultipleObjects, TranslateMessage, DispatchMessageW, PeekMessageW, UnregisterDeviceNotification, RegisterDeviceNotificationW