GetUserNameA, RegCloseKey, RegQueryValueExA, RegOpenKeyExA, RegQueryValueExW, RegOpenKeyExW, RegEnumKeyExW, RegDeleteKeyW, RegSetValueExW, RegCreateKeyExW, RegSetValueExA, SetServiceStatus, DeregisterEventSource, RegNotifyChangeKeyValue, RegCreateKeyExA, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, AddAccessAllowedAce, InitializeAcl, GetLengthSid, RegisterEventSourceA, ReportEventA, RegDeleteValueW, RegOpenCurrentUser, RegQueryInfoKeyA, RegEnumValueW, OpenSCManagerA, OpenServiceA, StartServiceA, QueryServiceStatus, CloseServiceHandle, RegisterServiceCtrlHandlerA, RevertToSelf

LocalAlloc, LocalFree, FormatMessageA, ReadFile, WriteFile, SetConsoleMode, GetConsoleMode, CreateFileA, ExpandEnvironmentStringsA, QueryPerformanceCounter, GetSystemTimeAsFileTime, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, DelayLoadFailureHook, GetComputerNameExA, WriteProcessMemory, GetCurrentThreadId, IsBadWritePtr, IsBadCodePtr, ResetEvent, SwitchToThread, HeapCreate, HeapAlloc, CreateFileMappingA, MapViewOfFile, GetProcessHeap, HeapDestroy, HeapFree, UnmapViewOfFile, VirtualFree, GetSystemInfo, FormatMessageW, lstrcmpW, TerminateThread, CreateEventW, ResumeThread, SetEvent, lstrlenW, lstrcpyW, VirtualAlloc, CreateEventA, WaitForMultipleObjects, MultiByteToWideChar, LCMapStringW, WideCharToMultiByte, GetOverlappedResult, OpenProcess, GetCurrentProcess, DuplicateHandle, IsBadReadPtr, WaitForSingleObject, GetTickCount, InterlockedExchange, CreateThread, InterlockedExchangeAdd, GetCurrentThread, SetThreadPriority, GetCurrentProcessId, FreeLibraryAndExitThread, GetProcAddress, FreeLibrary, InterlockedCompareExchange, LoadLibraryA, GetLastError, Sleep, SetLastError, LeaveCriticalSection, EnterCriticalSection, GetModuleFileNameA, LoadLibraryW, ExpandEnvironmentStringsW, InterlockedDecrement, GetEnvironmentVariableA, CloseHandle, InitializeCriticalSection, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, PostQueuedCompletionStatus, CreateIoCompletionPort, InterlockedIncrement, SleepEx, OutputDebugStringA

DllMain

NtSetIoCompletion, NtRemoveIoCompletion, NtClose, NtSetInformationFile, NtCreateEvent, NtSetInformationObject, NtCreateIoCompletion, RtlFreeHeap, RtlRegisterSecureMemoryCacheCallback, RtlAllocateHeap, DbgPrint, NtOpenKey, RtlInitUnicodeString, RtlQueryRegistryValues, RtlGetNtProductType, NtDeviceIoControlFile, NtCreateFile, NtCancelIoFile, RtlInitializeCriticalSectionAndSpinCount, RtlDeleteCriticalSection, NtSetEvent, RtlRaiseStatus, NtWaitForSingleObject, NtDelayExecution, NtLoadDriver, RtlAdjustPrivilege, RtlImpersonateSelf, NtQuerySystemTime, NtAlertThread, NtQueueApcThread, NtClearEvent, NtReadFile, NtWaitForMultipleObjects, RtlNtStatusToDosError, NtQueryEvent, RtlUnicodeStringToAnsiString, RtlFreeUnicodeString, RtlAnsiStringToUnicodeString, RtlInitAnsiString, RtlFreeAnsiString, RtlDestroyHeap, RtlCreateHeap, RtlDeregisterWaitEx, RtlQueueWorkItem, RtlRegisterWait, NtCreateWaitablePort, NtRequestWaitReplyPort, NtConnectPort, NtReplyPort, RtlIpv6StringToAddressA, RtlIpv6StringToAddressW, RtlInitString, NtQueryValueKey, NtDuplicateObject, NtResetEvent, NtAcceptConnectPort, NtReplyWaitReceivePortEx, NtCompleteConnectPort

UuidFromStringW, UuidCreate, UuidToStringW, RpcStringFreeW

WSAProviderConfigChange, WSARecv, WSCInstallProvider, WSCUpdateProvider, WSCDeinstallProvider, WSAEnumProtocolsW, WSAIoctl, WSCEnumProtocols, WSCGetProviderPath, WSASocketW

WahEnumerateHandleContexts, WahRemoveHandleContext, WahReferenceContextByHandle, WahInsertHandleContext, WahDestroyHandleContextTable, WahCreateHandleContextTable