CreateServiceW, RevertToSelf, OpenProcessToken, ImpersonateLoggedOnUser, RegisterServiceCtrlHandlerW, RegisterEventSourceW, ReportEventW, DeregisterEventSource, SetServiceStatus, ControlService, DeleteService, OpenSCManagerW, OpenServiceW, CloseServiceHandle, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW

lstrcmpiW, ExitProcess, MultiByteToWideChar, GetDriveTypeW, GetModuleFileNameW, FreeLibrary, LoadLibraryExW, WriteFile, ReadProcessMemory, SetFilePointer, GetCurrentProcess, CloseHandle, Module32NextW, Module32FirstW, CreateToolhelp32Snapshot, VirtualFree, GetTickCount, CreateFileW, GetTempPathW, GetTempFileNameW, VirtualAlloc, GetExitCodeThread, WaitForSingleObject, CreateThread, GetUserDefaultLangID, DeleteFileW, WideCharToMultiByte, SetUnhandledExceptionFilter, LoadLibraryW, InitializeCriticalSectionAndSpinCount, GetFileAttributesW, GetCurrentProcessId, GetCurrentThreadId, QueryPerformanceCounter, HeapCreate, lstrcpynW, HeapDestroy, HeapAlloc, GetModuleHandleW, lstrcpyW, LocalFree, LocalAlloc, LocalReAlloc, Sleep, LoadLibraryA, TerminateProcess, WriteProcessMemory, VirtualAllocEx, GetModuleHandleA, CreateProcessW, OpenProcess, InterlockedCompareExchange, GetVersion, CreateEventW, SetEvent, GetShortPathNameW, ReadFile, SetFilePointerEx, SetEndOfFile, SetThreadPriority, GetThreadPriority, GetCurrentThread, MapViewOfFile, OpenFileMappingW, UnmapViewOfFile, SetFileAttributesW, GetFileSize, lstrlenA, GetProcessHeap, GetStringTypeW, GetStringTypeA, GetLocaleInfoA, GetProcAddress, InterlockedDecrement, InterlockedIncrement, GetLastError, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, RaiseException, lstrlenW, LCMapStringA, LCMapStringW, WriteConsoleA, SetEnvironmentVariableA, GetConsoleOutputCP, WriteConsoleW, CompareStringA, CompareStringW, HeapFree, CreateFileA, FlushFileBuffers, SetStdHandle, GetConsoleMode, GetConsoleCP, IsValidCodePage, GetOEMCP, GetACP, GetCPInfo, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetTimeZoneInformation, GetStartupInfoA, GetFileType, SetHandleCount, HeapSize, SetLastError, TlsFree, TlsSetValue, TlsAlloc, TlsGetValue, GetModuleFileNameA, GetStdHandle, HeapReAlloc, GetCommandLineA, GetSystemTimeAsFileTime, IsDebuggerPresent, UnhandledExceptionFilter, VirtualQuery, GetSystemInfo, VirtualProtect, RtlUnwind, QueryPerformanceFrequency, DeviceIoControl, GetLocalTime, InterlockedExchange, OutputDebugStringW, OutputDebugStringA, ReleaseSemaphore, CreateSemaphoreW

CoCreateInstance, CoRegisterClassObject, CoResumeClassObjects, CoUninitialize, CoSuspendClassObjects, StringFromGUID2, CoImpersonateClient, CoTaskMemAlloc, CoTaskMemRealloc, CoTaskMemFree, CoInitializeEx, CoRevertToSelf, CoRevokeClassObject

NdrDllUnregisterProxy, NdrDllRegisterProxy, NdrCStdStubBuffer2_Release, NdrDllCanUnloadNow, NdrDllGetClassObject, NdrOleAllocate, NdrOleFree, IUnknown_QueryInterface_Proxy, IUnknown_AddRef_Proxy, IUnknown_Release_Proxy, NdrStubForwardingFunction, NdrStubCall2

PathIsNetworkPathW

GetMessageW, CharNextW, LoadStringW, MessageBoxW, TranslateMessage, DispatchMessageW, PostThreadMessageW

VerQueryValueW, GetFileVersionInfoW, GetFileVersionInfoSizeW

WTSSendMessageW