OpenProcessToken, LookupPrivilegeValueW, OpenThreadToken, DeleteService, ChangeServiceConfigW, ControlService, CloseServiceHandle, StartServiceW, OpenServiceW, OpenSCManagerW, AdjustTokenPrivileges, QueryServiceStatus, RegQueryValueExW, RegEnumKeyW, RegDeleteValueW, RegSetValueExW, RegCreateKeyW, RegDeleteKeyW, RegEnumValueW, RegEnumKeyExW, RegCloseKey, RegQueryInfoKeyW, RegOpenKeyExW

MoveFileW, GetWindowsDirectoryW, GetSystemDirectoryW, GetModuleHandleW, SetLastError, CreateDirectoryW, GetProcAddress, FlushFileBuffers, GetLongPathNameW, GetFullPathNameW, ExpandEnvironmentStringsW, TerminateProcess, LoadLibraryW, GetCurrentProcess, GetProcessHeap, FreeLibrary, HeapAlloc, HeapFree, CreateProcessW, RemoveDirectoryW, GetExitCodeProcess, OpenProcess, GetVersionExW, GetCurrentThread, GetCurrentThreadId, GetVersion, GetEnvironmentVariableW, GetLogicalDriveStringsW, DeviceIoControl, GetLocalTime, FormatMessageW, LocalFree, MultiByteToWideChar, lstrlenA, WideCharToMultiByte, GetDriveTypeA, WriteConsoleW, InterlockedDecrement, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, GetCurrentProcessId, FindNextFileW, FindClose, FindFirstFileW, GetLastError, CloseHandle, CreateFileW, SetFileAttributesW, SetFilePointer, DeleteFileW, WriteFile, ReadFile, GetTempFileNameW, GetTempPathW, SetEnvironmentVariableA, SetEndOfFile, GetFileAttributesW, CopyFileW, GetDriveTypeW, CreateFileA, CompareStringA, CompareStringW, WaitForSingleObject, GetConsoleOutputCP, WriteConsoleA, GetTimeZoneInformation, SetStdHandle, GetStringTypeW, GetStringTypeA, GetConsoleMode, GetConsoleCP, GetLocaleInfoA, LoadLibraryA, GetTickCount, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetCurrentDirectoryA, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetSystemTimeAsFileTime, FileTimeToSystemTime, FileTimeToLocalFileTime, GetCommandLineA, GetVersionExA, RtlUnwind, RaiseException, GetModuleHandleA, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, VirtualFree, VirtualAlloc, HeapReAlloc, HeapDestroy, HeapCreate, ExitProcess, GetStdHandle, GetModuleFileNameA, Sleep, HeapSize, GetCPInfo, GetACP, GetOEMCP, IsValidCodePage, LCMapStringA, LCMapStringW, SetHandleCount, GetFileType, GetStartupInfoA, GetSystemInfo

NetScheduleJobEnum, NetApiBufferFree, NetScheduleJobDel

CoCreateInstance, CoUninitialize, CoInitialize, CoTaskMemFree, StringFromGUID2

SfcIsFileProtected