OpenServiceW, GetKernelObjectSecurity, AdjustTokenPrivileges, OpenProcessToken, IsValidSecurityDescriptor, GetSecurityDescriptorOwner, GetSecurityDescriptorGroup, GetSecurityDescriptorDacl, ConvertStringSecurityDescriptorToSecurityDescriptorW, GetSecurityDescriptorSacl, SetNamedSecurityInfoW, DuplicateTokenEx, MD5Init, MD5Update, MD5Final, SystemFunction036, RegOpenKeyExA, RegQueryValueExA, GetTokenInformation, RegEnumValueW, QueryServiceStatusEx, QueryServiceConfigW, OpenSCManagerW, EnumServicesStatusW, CloseServiceHandle, ConvertStringSidToSidW, GetNamedSecurityInfoW, GetAce, EqualSid, RegOpenKeyExW, RegQueryValueExW, RegQueryInfoKeyW, RegEnumKeyW, RegDeleteKeyW, RegCloseKey, RegCreateKeyExW, RegCreateKeyW, SetThreadToken, RegisterServiceCtrlHandlerExW, SetServiceStatus, OpenThreadToken, AllocateAndInitializeSid, CheckTokenMembership, FreeSid, RegisterEventSourceW, ReportEventW, DeregisterEventSource

ResolveDelayLoadedAPI, DelayLoadFailureHook

SetLastError, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetLastError

ReadFile, SetEndOfFile, DeleteFileW, CreateFileW, FindFirstFileW, SetFileAttributesW, FindNextFileW, FindClose, SetFilePointer, GetFileSize, FindNextChangeNotification, FindFirstChangeNotificationW, FindCloseChangeNotification, GetFileAttributesW, WriteFile, CompareFileTime, CreateDirectoryW

DuplicateHandle, CloseHandle

LocalSize, LocalReAlloc, LocalFree, LocalAlloc

InterlockedDecrement, InterlockedIncrement, InterlockedExchange, InterlockedCompareExchange

FreeLibraryAndExitThread, FreeLibrary, DisableThreadLibraryCalls, GetModuleHandleExW

VirtualQuery, VirtualAlloc, VirtualProtect

ExpandEnvironmentStringsW

OpenThreadToken, SetThreadStackGuarantee, GetCurrentThread, SetThreadToken, OpenProcessToken, GetCurrentThreadId, GetCurrentProcessId, ExitThread, TerminateProcess, GetCurrentProcess, CreateThread, OpenProcess

QueryPerformanceCounter

RegQueryValueExW, RegQueryValueExA, RegCloseKey, RegOpenKeyExW, RegOpenKeyExA

AcquireSRWLockExclusive, ReleaseSRWLockShared, InitializeSRWLock, AcquireSRWLockShared, ReleaseSRWLockExclusive, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection, Sleep, SetEvent, CreateEventA, WaitForSingleObjectEx, CreateEventW

GetTickCount, GetSystemInfo, GetSystemTimeAsFileTime

UnregisterWaitEx

RegisterWaitForSingleObjectEx

SetFileSecurityW, IsValidSid, FreeSid, CopySid, GetSidSubAuthorityCount, GetSidIdentifierAuthority, GetSidSubAuthority, GetFileSecurityW, EqualSid, GetLengthSid, GetTokenInformation, RevertToSelf, GetSecurityDescriptorSacl, ImpersonateSelf, GetAce, AllocateAndInitializeSid

CryptMemAlloc, I_CertSrvProtectFunction, CryptStringToBinaryW, CryptDecodeObjectEx, CryptQueryObject, CertEnumCRLsInStore, CertFreeCRLContext, CertCloseStore, I_CryptFindLruEntry, I_CryptGetLruEntryData, I_CryptEnumMatchingLruEntries, CryptMemFree, I_CryptRemoveLruEntry, I_CryptCreateLruEntry, I_CryptInsertLruEntry, I_CryptReleaseLruEntry, I_CryptFreeLruCache, I_CryptCreateLruCache, CryptHashCertificate, CertCreateContext, CertFreeCTLContext, CryptDecodeObject, RegOpenHKCUKeyExU, CryptInitOIDFunctionSet, CryptGetDefaultOIDDllList, CryptGetDefaultOIDFunctionAddress, CryptFreeOIDFunctionAddress

I_CryptNetSetUrlCachePreFetchInfo, I_CryptNetSetUrlCacheFlushInfo, CryptRetrieveObjectByUrlW

WaitForMultipleObjectsEx, lstrlenW, CompareStringW, LCMapStringW, SetUnhandledExceptionFilter, ReleaseMutex, TerminateProcess, GetCurrentProcessId, GetCurrentThreadId, HeapFree, GetThreadLocale, RaiseException, FileTimeToSystemTime, FileTimeToLocalFileTime, GetSystemWindowsDirectoryW, GetModuleHandleW, GetFullPathNameW, FlushFileBuffers, GetVersionExW, UnhandledExceptionFilter, GetFileAttributesExW, DisableThreadLibraryCalls, CloseHandle, GetCurrentThread, SetEvent, LocalAlloc, LocalFree, LocalSize, LocalReAlloc, GetLastError, UnregisterWaitEx, RegisterWaitForSingleObject, CreateEventW, FreeLibrary, GetProcAddress, LoadLibraryW, SetLastError, WideCharToMultiByte, GetACP, CreateFileW, MoveFileW, DeleteFileW, GetTempFileNameW, LeaveCriticalSection, EnterCriticalSection, GetSystemDirectoryA, GetSystemDirectoryW, FindClose, FindNextFileW, FindFirstFileW, GetFileAttributesW, QueryPerformanceCounter, QueryPerformanceFrequency, LoadLibraryExW, GetModuleFileNameW, WaitForSingleObject, SetThreadPriority, FormatMessageW, SetFileAttributesW, CreateDirectoryW, DeleteFileA, UnmapViewOfFile, CompareFileTime, InterlockedExchange, HeapReAlloc, CopyFileW, GetFileSize, ExitThread, FreeLibraryAndExitThread, ResumeThread, CreateThread, GetTickCount, InitializeCriticalSection, DeleteCriticalSection, GetWindowsDirectoryW, ExpandEnvironmentStringsW, Sleep, DelayLoadFailureHook, InterlockedCompareExchange, LoadLibraryExA, WriteFile, SetEndOfFile, SetFilePointer, OutputDebugStringA, GetDateFormatA, GetTimeFormatA, GetLocalTime, ReadFile, GetModuleHandleExW, InterlockedIncrement, InterlockedDecrement, FindNextChangeNotification, GetSystemTimeAsFileTime, FindCloseChangeNotification, FindFirstChangeNotificationW, WaitForSingleObjectEx, CreateEventA, DuplicateHandle, GetCurrentProcess, OpenProcess, CreateMutexW, MapViewOfFile, CreateFileMappingW, HeapAlloc, GetProcessHeap, CreateFileMappingA, WaitForMultipleObjects, LoadLibraryA

DllMain

ShipAssert, EtwEventRegister, EvtIntReportEventAndSourceAsync, EtwEventUnregister, RtlNtStatusToDosError, RtlAllocateHeap, RtlFreeHeap, RtlReAllocateHeap, RtlRaiseStatus, DbgUserBreakPoint, RtlImageNtHeader

CoInitialize, CoInitializeEx, CoCreateInstance, CoUninitialize

NdrServerCall2, I_RpcBindingInqLocalClientPID, RpcRevertToSelf, RpcServerUseProtseqEpW, RpcServerRegisterIfEx, RpcServerUnregisterIf, RpcImpersonateClient, RpcRevertToSelfEx, I_RpcBindingIsClientLocal, RpcServerRegisterIf3

CharNextW, CharPrevW, CharLowerW

CreateWriterEx