ControlService, AdjustTokenPrivileges, QueryServiceStatus, LookupPrivilegeValueW, OpenThreadToken, DeleteService, ChangeServiceConfigW, OpenProcessToken, CloseServiceHandle, StartServiceW, OpenServiceW, OpenSCManagerW, RegCreateKeyW, RegQueryValueExW, RegEnumKeyW, RegDeleteValueW, RegSetValueExW, RegDeleteKeyW, RegEnumValueW, RegEnumKeyExW, RegCloseKey, RegQueryInfoKeyW, RegOpenKeyExW

GetSystemDirectoryW, GetModuleHandleW, SetLastError, CreateDirectoryW, GetProcAddress, FlushFileBuffers, GetLongPathNameW, GetFullPathNameW, RemoveDirectoryW, MoveFileW, ExpandEnvironmentStringsW, LoadLibraryW, GetCurrentProcess, GetProcessHeap, FreeLibrary, HeapAlloc, HeapFree, CreateProcessW, WaitForSingleObject, GetWindowsDirectoryW, OpenProcess, GetVersionExW, GetCurrentThread, TerminateProcess, GetVersion, GetEnvironmentVariableW, GetLogicalDriveStringsW, DeviceIoControl, GetSystemInfo, GetCurrentThreadId, FormatMessageW, LocalFree, GetLocalTime, MultiByteToWideChar, lstrlenA, WideCharToMultiByte, GetDriveTypeA, WriteConsoleW, InterlockedDecrement, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, GetCurrentProcessId, FindNextFileW, FindClose, FindFirstFileW, GetLastError, CloseHandle, CreateFileW, SetFileAttributesW, SetFilePointer, DeleteFileW, WriteFile, ReadFile, GetTempFileNameW, GetTempPathW, SetEnvironmentVariableA, SetEndOfFile, GetFileAttributesW, CopyFileW, GetDriveTypeW, CreateFileA, CompareStringA, CompareStringW, GetExitCodeProcess, GetConsoleOutputCP, WriteConsoleA, GetTimeZoneInformation, SetStdHandle, GetStringTypeW, GetStringTypeA, GetConsoleMode, GetConsoleCP, GetLocaleInfoA, LoadLibraryA, GetTickCount, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetCurrentDirectoryA, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetSystemTimeAsFileTime, FileTimeToSystemTime, FileTimeToLocalFileTime, GetCommandLineA, GetVersionExA, RtlUnwind, RaiseException, GetModuleHandleA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, VirtualFree, VirtualAlloc, HeapReAlloc, HeapDestroy, HeapCreate, ExitProcess, GetStdHandle, GetModuleFileNameA, Sleep, HeapSize, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, LCMapStringA, LCMapStringW, SetHandleCount, GetFileType, GetStartupInfoA

NetScheduleJobEnum, NetApiBufferFree, NetScheduleJobDel

CoCreateInstance, CoUninitialize, CoInitialize, CoTaskMemFree, StringFromGUID2

SfcIsFileProtected