GetSecurityDescriptorControl, QueryServiceStatus, OpenServiceW, OpenSCManagerW, CloseServiceHandle, CryptDecrypt, CryptDestroyKey, CryptEncrypt, CryptDeriveKey, CryptHashData, CryptDestroyHash, CryptCreateHash, CryptReleaseContext, CryptAcquireContextW, CryptGetHashParam, RegEnumKeyExW, RegDeleteValueW, RegSetValueExW, ConvertSidToStringSidW, RegDeleteKeyW, RegOpenKeyExW, RegQueryValueExW, RegDeleteValueA, RegCreateKeyExA, RegQueryValueExA, RegSetValueExA, OpenProcessToken, GetTokenInformation, AllocateAndInitializeSid, EqualSid, FreeSid, RegEnumKeyExA, RegOpenKeyExA, RegCloseKey, QueryServiceConfigW, StartServiceW, RegCreateKeyExW

GlobalAlloc, GetCurrentProcess, GetPrivateProfileStringA, GetPrivateProfileStructA, WritePrivateProfileStringA, WritePrivateProfileStructA, GetShortPathNameW, lstrlenW, GetModuleHandleW, SearchPathW, FindFirstFileA, SearchPathA, LoadLibraryA, SetEvent, OpenEventW, MoveFileExW, DeleteFileW, RemoveDirectoryW, SetFileAttributesW, GetFileAttributesW, SetCurrentDirectoryW, GetCurrentDirectoryW, SetCurrentDirectoryA, GetCurrentDirectoryA, CreateProcessW, CreateProcessA, GlobalFree, ProcessIdToSessionId, GetCurrentProcessId, GetCurrentThreadId, CreateDirectoryW, WriteFile, SetFilePointer, ReadFile, GetFileSize, CreateFileA, GetWindowsDirectoryA, InterlockedDecrement, CreateFileW, GlobalMemoryStatusEx, DeviceIoControl, InterlockedIncrement, lstrlenA, GetTickCount, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetModuleFileNameA, CloseHandle, GetModuleFileNameW, FindFirstFileW, FindNextFileW, FindClose, IsBadReadPtr, GetThreadLocale, GetLocaleInfoA, GetACP, MultiByteToWideChar, WideCharToMultiByte, GetLastError, LocalAlloc, LocalFree, EnterCriticalSection, GetSystemDirectoryW, LoadLibraryW, LeaveCriticalSection, SetEnvironmentVariableA, GetProcAddress, FreeLibrary, DeleteCriticalSection, GetVersionExW, InitializeCriticalSection, GetConsoleCP, GetConsoleMode, CompareStringW, SetEnvironmentVariableW, SetStdHandle, WriteConsoleW, FlushFileBuffers, WaitForSingleObject, GetStartupInfoW, GetFileType, InitializeCriticalSectionAndSpinCount, SetHandleCount, GetStringTypeW, HeapSize, Sleep, LCMapStringW, GetTimeZoneInformation, IsValidCodePage, GetOEMCP, GetCPInfo, SetLastError, TlsFree, TlsSetValue, TlsGetValue, TlsAlloc, GetStdHandle, ExitProcess, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, IsProcessorFeaturePresent, HeapDestroy, HeapCreate, GetCommandLineA, DecodePointer, EncodePointer, HeapFree, HeapAlloc, RtlUnwind, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, HeapReAlloc, GetSystemTimeAsFileTime, RaiseException, GetProcessHeap, GetStringTypeA, LCMapStringA, CompareStringA, WriteConsoleA, GetConsoleOutputCP, GetModuleHandleA, GetEnvironmentStrings, FreeEnvironmentStringsA, GetStartupInfoA, VirtualFree, CopyFileW, GetTempFileNameW, CreateMutexW, OutputDebugStringW, GetLocalTime, ReleaseMutex, FormatMessageW, GetExitCodeThread, GetUserDefaultLCID, GetLocaleInfoW, EnumSystemLocalesA, IsValidLocale, CreateThread, ExitThread, InterlockedCompareExchange, InterlockedExchange, GetVersionExA, CreateEventW

StringFromGUID2, CoCreateGuid, CoInitialize, CoCreateInstance, CoSetProxyBlanket, CoInitializeEx, CoUninitialize, CoInitializeSecurity, CoTaskMemFree, StringFromCLSID

CallNtPowerInformation

SetupDiDestroyDeviceInfoList, SetupDiCreateDeviceInfoList, SetupDiOpenDeviceInterfaceW, SetupDiGetDeviceRegistryPropertyW, SetupDiGetDeviceInterfaceDetailW, SetupDiGetClassDevsW, SetupDiEnumDeviceInterfaces

SHGetPathFromIDListW, SHGetMalloc, SHFileOperationW, SHCreateDirectoryExW, ShellExecuteW, SHGetSpecialFolderLocation, SHGetFolderPathW

StrTrimW, AssocQueryStringW

GetProcessWindowStation, OpenWindowStationW, SetProcessWindowStation, OpenDesktopW, GetUserObjectInformationW, CloseDesktop, CloseWindowStation, wsprintfW, MsgWaitForMultipleObjects, TranslateMessage, PeekMessageW, DispatchMessageW

InternetCrackUrlW