RevertToSelf, OpenProcessToken, ImpersonateLoggedOnUser, RegisterServiceCtrlHandlerW, CreateServiceW, RegisterEventSourceW, ReportEventW, DeregisterEventSource, SetServiceStatus, ControlService, DeleteService, OpenSCManagerW, OpenServiceW, CloseServiceHandle, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW

WriteFile, CloseHandle, Module32NextW, Module32FirstW, CreateToolhelp32Snapshot, GetTickCount, CreateFileW, GetTempFileNameW, GetTempPathW, GetExitCodeThread, WaitForSingleObject, CreateThread, GetProcAddress, LoadLibraryW, SetUnhandledExceptionFilter, DeleteFileW, GetFileAttributesW, GetCurrentProcess, GetCurrentProcessId, GetCurrentThreadId, QueryPerformanceCounter, Sleep, GetVersion, lstrcpyW, CreateEventW, SetEvent, VirtualQuery, GetShortPathNameW, ReadFile, SetFilePointerEx, SetEndOfFile, OutputDebugStringW, OpenProcess, MapViewOfFile, OpenFileMappingW, UnmapViewOfFile, SetFileAttributesW, SetThreadPriority, GetThreadPriority, GetCurrentThread, GetFileSize, lstrlenA, HeapFree, GetProcessHeap, IsValidCodePage, GetOEMCP, GetCPInfo, LoadLibraryA, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetModuleHandleW, LoadLibraryExW, FreeLibrary, GetModuleFileNameW, GetDriveTypeW, MultiByteToWideChar, ExitProcess, lstrcmpiW, InterlockedDecrement, InterlockedIncrement, GetLastError, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, RaiseException, lstrlenW, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, CompareStringA, GetConsoleMode, CompareStringW, SetEnvironmentVariableA, GetConsoleCP, WideCharToMultiByte, LCMapStringW, LCMapStringA, GetStringTypeW, GetStringTypeA, GetTimeZoneInformation, CreateFileA, FlushFileBuffers, SetStdHandle, SetFilePointer, GetStartupInfoA, GetFileType, SetHandleCount, SetLastError, TlsFree, TlsSetValue, TlsAlloc, TlsGetValue, GetModuleFileNameA, GetStdHandle, HeapCreate, VirtualFree, GetCommandLineA, GetSystemTimeAsFileTime, IsDebuggerPresent, UnhandledExceptionFilter, TerminateProcess, GetSystemInfo, GetModuleHandleA, VirtualAlloc, VirtualProtect, RtlUnwind, HeapSize, HeapReAlloc, HeapAlloc, HeapDestroy, GetVersionExA, GetThreadLocale, GetLocaleInfoA, GetACP, InterlockedExchange, MoveFileExW

CoInitializeEx, CoRegisterClassObject, CoImpersonateClient, CoUninitialize, CoTaskMemFree, CoTaskMemRealloc, CoTaskMemAlloc, CoSuspendClassObjects, StringFromGUID2, CoCreateInstance, CoResumeClassObjects, CoRevertToSelf, CoRevokeClassObject

RpcMgmtSetServerStackSize, NdrDllUnregisterProxy, NdrDllRegisterProxy, NdrCStdStubBuffer2_Release, NdrDllCanUnloadNow, NdrDllGetClassObject, NdrOleAllocate, NdrOleFree, IUnknown_QueryInterface_Proxy, IUnknown_AddRef_Proxy, IUnknown_Release_Proxy, NdrStubForwardingFunction, NdrStubCall2

PathIsNetworkPathW

GetMessageW, DispatchMessageW, MessageBoxW, LoadStringW, CharNextW, TranslateMessage, PostThreadMessageW, UnregisterClassA

VerQueryValueW, GetFileVersionInfoW, GetFileVersionInfoSizeW

WTSSendMessageW