OpenThreadToken, OpenProcessToken, GetTokenInformation, AllocateAndInitializeSid, EqualSid, FreeSid, RegEnumValueA, RegEnumKeyExA, RegCreateKeyExA, RegOpenKeyExA, RegDeleteKeyA, DeleteService, CreateServiceA, RegCreateKeyA, RegOpenKeyA, RegQueryValueExA, RegDeleteValueA, RegSetValueExA, RegCloseKey, ControlService, OpenSCManagerA, OpenServiceA, CloseServiceHandle, StartServiceA, QueryServiceStatus, RegQueryInfoKeyA

CompareStringA, CompareStringW, GetTimeZoneInformation, GetEnvironmentVariableA, GetCurrentThread, GetCurrentProcess, lstrlenA, GetModuleHandleA, GetProcAddress, LoadLibraryA, FreeLibrary, CreateEventA, DeviceIoControl, GetSystemDirectoryA, CreateThread, GetCurrentProcessId, GetVersionExA, CreateFileA, OpenFileMappingA, SetLastError, MapViewOfFile, CloseHandle, OpenMutexA, UnmapViewOfFile, WaitForSingleObject, ReleaseMutex, GetLastError, GetLocaleInfoW, Sleep, HeapFree, HeapAlloc, RaiseException, RtlUnwind, GetCurrentThreadId, GetCommandLineA, GetACP, GetOEMCP, GetCPInfo, TlsAlloc, TlsFree, TlsSetValue, TlsGetValue, HeapDestroy, HeapCreate, VirtualFree, DeleteCriticalSection, LeaveCriticalSection, FatalAppExitA, EnterCriticalSection, VirtualAlloc, HeapReAlloc, IsBadWritePtr, LCMapStringA, WideCharToMultiByte, MultiByteToWideChar, LCMapStringW, SetUnhandledExceptionFilter, ReadFile, SetHandleCount, GetStdHandle, GetFileType, GetStartupInfoA, SetFilePointer, ExitProcess, TerminateProcess, GetModuleFileNameA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, UnhandledExceptionFilter, WriteFile, HeapSize, GetStringTypeA, GetStringTypeW, InitializeCriticalSection, InterlockedExchange, VirtualQuery, GetLocaleInfoA, VirtualProtect, GetSystemInfo, IsBadReadPtr, IsBadCodePtr, SetStdHandle, FlushFileBuffers, QueryPerformanceCounter, GetTickCount, GetSystemTimeAsFileTime, GetTimeFormatA, GetDateFormatA, GetUserDefaultLCID, EnumSystemLocalesA, IsValidLocale, IsValidCodePage, SetConsoleCtrlHandler, SetEndOfFile, SetEnvironmentVariableA

EnumChildWindows, GetWindowThreadProcessId, EnumWindows