QueryServiceStatus, OpenThreadToken, OpenSCManagerW, OpenServiceW, ControlService, DeleteService, CloseServiceHandle, OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, CryptEncrypt, CryptDecrypt, CryptDeriveKey, CryptDestroyKey, CryptReleaseContext, CryptHashData, CryptDestroyHash, CryptCreateHash, RegCloseKey

OpenProcess, VirtualAlloc, FreeLibrary, WriteFile, MoveFileExW, GetCurrentThreadId, GetLocalTime, LocalFree, HeapAlloc, GetProcessHeap, GetFileSize, FlushFileBuffers, FindClose, lstrlenA, GetUserDefaultLangID, SetEndOfFile, SetFilePointer, MapViewOfFile, UnmapViewOfFile, ReadProcessMemory, GetCommandLineW, TerminateProcess, GetCurrentThread, HeapFree, GetVersion, GetSystemInfo, FileTimeToSystemTime, FileTimeToLocalFileTime, CompareStringA, GetModuleHandleA, GetModuleFileNameA, GetWindowsDirectoryA, GetSystemDirectoryA, InterlockedExchange, SetEnvironmentVariableA, VirtualFree, GetCurrentProcessId, ReadFile, DeviceIoControl, IsBadWritePtr, CreateThread, GetLastError, CloseHandle, Sleep, SetLastError, InterlockedDecrement, TlsSetValue, TlsGetValue, TlsAlloc, InitializeCriticalSection, LeaveCriticalSection, TlsFree, DeleteCriticalSection, LoadLibraryA, IsBadReadPtr, EnterCriticalSection, GetCurrentProcess, GetDriveTypeA, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetStringTypeA, GetTickCount, QueryPerformanceCounter, GetEnvironmentStrings, FreeEnvironmentStringsA, GetTimeZoneInformation, GetDateFormatA, GetTimeFormatA, GetConsoleMode, GetConsoleCP, HeapReAlloc, HeapCreate, HeapDestroy, GetCurrentDirectoryA, GetStartupInfoA, GetFileType, SetHandleCount, LCMapStringA, GetStdHandle, ExitProcess, CreateFileA, GetACP, GetLocaleInfoA, GetThreadLocale, GetVersionExA, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, RtlUnwind, RaiseException, GetSystemTimeAsFileTime, GetCommandLineA, InterlockedIncrement, VirtualQuery, GetOEMCP, HeapSize

CoGetClassObject, CoCreateInstance, CoInitializeEx, CoUninitialize, StringFromIID, StringFromGUID2, CoCreateGuid, CoTaskMemFree

SfcIsFileProtected

SHGetDesktopFolder, SHGetMalloc, SHGetSpecialFolderPathW

PathFindFileNameW, PathIsFileSpecW, PathRemoveFileSpecW, PathIsNetworkPathW, PathAppendW