RegQueryInfoKeyW, SetThreadToken, CryptAcquireContextW, CryptGenRandom, CryptReleaseContext, RegSetValueExW, RegCreateKeyExW, RegisterServiceCtrlHandlerW, RegDeleteValueW, DeleteService, OpenSCManagerW, OpenServiceW, ChangeServiceConfigW, CreateServiceW, ChangeServiceConfig2W, CloseServiceHandle, ControlService, QueryServiceStatus, SetServiceStatus, RegEnumKeyExW, ConvertStringSecurityDescriptorToSecurityDescriptorW, MakeAbsoluteSD, MakeSelfRelativeSD, IsValidSecurityDescriptor, OpenThreadToken, OpenProcessToken, GetTokenInformation, GetLengthSid, InitializeAcl, AddAccessAllowedAce, GetSecurityDescriptorLength, RegDeleteKeyW, RegOpenKeyExW, RegQueryValueExW, DeregisterEventSource, ReportEventW, RegisterEventSourceW, RegOpenKeyW, AllocateAndInitializeSid, FreeSid, SetSecurityDescriptorDacl, SetSecurityDescriptorSacl, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, InitializeSecurityDescriptor, CheckTokenMembership, GetSidSubAuthority, GetSidSubAuthorityCount, GetSidIdentifierAuthority, IsValidSid, LookupAccountSidW, AdjustTokenPrivileges, LookupPrivilegeValueW, RegUnLoadKeyW, RegLoadKeyW, RegEnumValueW, RegCloseKey, EqualSid, GetUserNameW

COMResModuleInstance

GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, MultiByteToWideChar, ReleaseMutex, DebugBreak, RaiseException, CreateFileW, GetWindowsDirectoryW, CreateMutexW, GetLocalTime, WriteFile, SetFilePointer, lstrcatA, lstrcpyA, lstrlenA, InterlockedCompareExchange, GetModuleHandleW, LocalFree, GetSystemInfo, CreateSemaphoreW, Sleep, ReleaseSemaphore, SetLastError, GetComputerNameW, GetCurrentThread, WideCharToMultiByte, GetSystemDirectoryW, SearchPathW, GlobalFree, GlobalAlloc, GlobalMemoryStatusEx, ResetEvent, CreateThread, DuplicateHandle, CreateEventA, InitializeCriticalSection, PostQueuedCompletionStatus, InterlockedExchangeAdd, QueryPerformanceFrequency, CreateIoCompletionPort, InterlockedExchange, FreeLibraryAndExitThread, GetQueuedCompletionStatus, SetThreadPriority, OutputDebugStringA, GetTickCount, lstrcmpA, lstrcmpiW, GetModuleFileNameA, VirtualQueryEx, lstrcpynW, LockResource, LoadResource, FindResourceW, FindClose, DeleteFileW, SetFileAttributesW, FindNextFileW, FindFirstFileW, GetExitCodeProcess, CreateProcessW, ExpandEnvironmentStringsW, CreateDirectoryW, GetThreadContext, IsDebuggerPresent, LoadLibraryExW, GetModuleHandleA, FormatMessageW, GetFileAttributesW, GetModuleFileNameW, GetLastError, DisableThreadLibraryCalls, GetVersionExA, LoadLibraryW, GetProcAddress, FreeLibrary, lstrcatW, lstrcpyW, CreateEventW, WaitForSingleObject, CloseHandle, GetCurrentThreadId, SetEvent, GetUserDefaultLCID, InterlockedDecrement, CompareStringW, lstrcmpW, InterlockedIncrement, lstrlenW, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, LoadLibraryA, QueryPerformanceCounter, GetVersionExW

DllMain

RtlDelete, RtlSplay, RtlInitializeCriticalSectionAndSpinCount, RtlDeleteCriticalSection, RtlInitializeCriticalSection

StringFromCLSID, CoGetMalloc, CoGetObjectContext, FreePropVariantArray, PropVariantClear, PropVariantCopy, CoUnmarshalInterface, IIDFromString, StringFromIID, CoUninitialize, CoRevokeClassObject, CoRegisterClassObject, CoRevertToSelf, CoImpersonateClient, CoMarshalInterface, CreateStreamOnHGlobal, CoGetInterceptorFromTypeInfo, CoCreateInstance, CoEnableCallCancellation, CoDisableCallCancellation, StringFromGUID2, CoGetObject, CoCreateGuid, CLSIDFromString, CoGetClassObject, CoSetProxyBlanket, CoCancelCall, CoTaskMemFree, CoTaskMemAlloc, CoInitializeEx

NdrCStdStubBuffer_Release, NdrCStdStubBuffer2_Release, NdrDllUnregisterProxy, CStdStubBuffer_DebugServerRelease, CStdStubBuffer_DebugServerQueryInterface, NdrDllRegisterProxy, CStdStubBuffer_CountRefs, CStdStubBuffer_IsIIDSupported, CStdStubBuffer_Invoke, CStdStubBuffer_Disconnect, CStdStubBuffer_Connect, CStdStubBuffer_AddRef, CStdStubBuffer_QueryInterface, NdrStubCall2, NdrStubForwardingFunction, IUnknown_Release_Proxy, IUnknown_AddRef_Proxy, IUnknown_QueryInterface_Proxy, NdrOleFree, NdrOleAllocate, I_RpcBindingInqTransportType, NdrDllGetClassObject

wsprintfW, LoadStringW, DialogBoxParamW, EndDialog, SetDlgItemTextW, CloseWindowStation, GetProcessWindowStation, OpenWindowStationW, SetProcessWindowStation, GetDesktopWindow, GetWindowRect, GetClientRect, MapWindowPoints, SetWindowPos, OpenDesktopW, SetThreadDesktop, GetThreadDesktop, CloseDesktop, PeekMessageW, MsgWaitForMultipleObjects, PostThreadMessageW, wsprintfA

VerQueryValueW