ImpersonateLoggedOnUser, RevertToSelf, OpenProcessToken, RegisterServiceCtrlHandlerW, CreateServiceW, RegisterEventSourceW, ReportEventW, DeregisterEventSource, SetServiceStatus, ControlService, DeleteService, OpenSCManagerW, OpenServiceW, CloseServiceHandle, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW

MultiByteToWideChar, GetDriveTypeW, GetModuleFileNameW, FreeLibrary, LoadLibraryExW, GetModuleHandleW, WriteFile, ReadProcessMemory, SetFilePointer, GetCurrentProcess, CloseHandle, Module32NextW, Module32FirstW, CreateToolhelp32Snapshot, VirtualFree, GetTickCount, CreateFileW, GetTempPathW, GetTempFileNameW, VirtualAlloc, GetExitCodeThread, WaitForSingleObject, CreateThread, GetUserDefaultLangID, DeleteFileW, WideCharToMultiByte, SetUnhandledExceptionFilter, GetProcAddress, LoadLibraryW, GetFileAttributesW, GetCurrentProcessId, GetCurrentThreadId, QueryPerformanceCounter, HeapCreate, lstrcpynW, HeapDestroy, HeapAlloc, HeapFree, lstrcpyW, LocalFree, LocalAlloc, LocalReAlloc, Sleep, LoadLibraryA, TerminateProcess, WriteProcessMemory, VirtualAllocEx, GetModuleHandleA, CreateProcessW, OpenProcess, InterlockedCompareExchange, GetVersion, CreateEventW, SetEvent, GetShortPathNameW, ReadFile, SetFilePointerEx, SetEndOfFile, SetThreadPriority, GetThreadPriority, GetCurrentThread, MapViewOfFile, OpenFileMappingW, UnmapViewOfFile, SetFileAttributesW, GetFileSize, lstrlenA, GetProcessHeap, LCMapStringW, LCMapStringA, GetStringTypeW, GetStringTypeA, ExitProcess, lstrcmpiW, InterlockedDecrement, InterlockedIncrement, GetLastError, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, RaiseException, lstrlenW, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, CompareStringA, CompareStringW, SetEnvironmentVariableA, GetStartupInfoA, CreateFileA, FlushFileBuffers, SetStdHandle, GetConsoleMode, GetConsoleCP, IsValidCodePage, GetOEMCP, GetCPInfo, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetFileType, SetHandleCount, SetLastError, TlsFree, TlsSetValue, TlsAlloc, TlsGetValue, GetModuleFileNameA, GetStdHandle, GetCommandLineA, GetSystemTimeAsFileTime, IsDebuggerPresent, UnhandledExceptionFilter, VirtualQuery, GetSystemInfo, VirtualProtect, RtlUnwind, HeapSize, HeapReAlloc, GetVersionExA, GetThreadLocale, GetLocaleInfoA, GetACP, InterlockedExchange, GetTimeZoneInformation

CoRegisterClassObject, CoInitializeEx, CoUninitialize, CoRevokeClassObject, StringFromGUID2, CoCreateInstance, CoResumeClassObjects, CoTaskMemAlloc, CoTaskMemRealloc, CoTaskMemFree, CoRevertToSelf, CoSuspendClassObjects, CoImpersonateClient

RpcMgmtSetServerStackSize, NdrDllUnregisterProxy, NdrDllRegisterProxy, NdrCStdStubBuffer2_Release, NdrDllCanUnloadNow, NdrDllGetClassObject, NdrOleAllocate, NdrOleFree, IUnknown_QueryInterface_Proxy, IUnknown_AddRef_Proxy, IUnknown_Release_Proxy, NdrStubForwardingFunction, NdrStubCall2

PathIsNetworkPathW

CharNextW, LoadStringW, MessageBoxW, TranslateMessage, DispatchMessageW, GetMessageW, PostThreadMessageW, UnregisterClassA

VerQueryValueW, GetFileVersionInfoW, GetFileVersionInfoSizeW

WTSSendMessageW