RegQueryValueExW, RegOpenKeyExW, RegCloseKey, QueryServiceConfigW, OpenSCManagerW, EnumDependentServicesW, CloseServiceHandle, StopTraceW, CloseTrace, ProcessTrace, StartTraceW, OpenTraceW, EnumServicesStatusExW, QueryServiceConfig2W

GetProcAddress, RaiseException, LoadLibraryA, GetLastError, TlsSetValue, TlsGetValue, TlsFree, TlsAlloc, LocalFree, LocalAlloc, FreeLibrary, lstrlenA, WaitForSingleObject, VirtualFree, VirtualAlloc, UnmapViewOfFile, TerminateThread, TerminateProcess, SuspendThread, SetProcessAffinityMask, SetPriorityClass, SetEvent, SetErrorMode, ResumeThread, ResetEvent, ReleaseMutex, QueryDosDeviceW, OpenProcess, OpenFileMappingW, MapViewOfFile, LoadLibraryW, LeaveCriticalSection, InitializeCriticalSection, HeapFree, HeapAlloc, GlobalMemoryStatusEx, GetVersionExW, GetTickCount, GetSystemTimeAsFileTime, GetSystemInfo, GetProcessTimes, GetProcessHeap, GetProcessAffinityMask, GetPriorityClass, GetModuleHandleW, GetLogicalDrives, GetLogicalDriveStringsW, GetFileType, GetFileAttributesW, GetExitCodeProcess, GetDriveTypeW, GetCurrentProcessId, GetCurrentProcess, InterlockedIncrement, InterlockedDecrement, FindResourceW, EnterCriticalSection, DuplicateHandle, DeleteCriticalSection, CreateThread, CreateProcessW, CreateMutexW, CreateFileMappingW, CreateEventW, CloseHandle, Sleep, GetProcessIoCounters, OpenThread

ZwQueryObject, ZwQueryInformationFile, ZwQuerySystemInformation

OleUninitialize, OleInitialize

GetProcessImageFileNameW

@System@initialization$qqrv, @System@Finalization$qqrv, @System@LoadResString$qqrp20System@TResStringRec, @System@TInterfacedObject@_Release$qqsv, @System@TInterfacedObject@_AddRef$qqsv, @System@TInterfacedObject@QueryInterface$qqsrx5_GUIDpv, @System@TInterfacedObject@NewInstance$qqrv, @System@TInterfacedObject@BeforeDestruction$qqrv, @System@TInterfacedObject@AfterConstruction$qqrv, @System@@IntfAddRef$qqrx45System@%DelphiInterface$t17System@IInterface%, @System@@IntfCopy$qqrr45System@%DelphiInterface$t17System@IInterface%x45System@%DelphiInterface$t17System@IInterface%, @System@@IntfClear$qqrr45System@%DelphiInterface$t17System@IInterface%, @System@RegisterModule$qqrp17System@TLibModule, @System@@DynArrayAsg$qqrrpvpvt2, @System@@DynArrayClear$qqrrpvpv, @System@@DynArraySetLength$qqrv, @System@@DynArrayHigh$qqrpxv, @System@@DynArrayLength$qqrpxv, @System@@_llmul$qqrv, @System@@FinalizeArray$qqrpvt1ui, @System@Pos$qqrx20System@UnicodeStringt1, @System@@UStrDelete$qqrr20System@UnicodeStringii, @System@@UStrCopy$qqrx20System@UnicodeStringii, @System@@UStrEqual$qqrv, @System@@UStrCatN$qqrv, @System@@UStrCat3$qqrr20System@UnicodeStringx20System@UnicodeStringt2, @System@@UStrCat$qqrr20System@UnicodeStringx20System@UnicodeString, @System@@UStrSetLength$qqrr20System@UnicodeStringi, @System@@UStrFromWArray$qqrr20System@UnicodeStringpbi, @System@@UStrFromPWChar$qqrr20System@UnicodeStringpb, @System@@UStrFromWChar$qqrr20System@UnicodeStringb, @System@@UStrToPWChar$qqrx20System@UnicodeString, @System@@WStrToPWChar$qqrx17System@WideString, @System@@LStrToPChar$qqrx27System@%AnsiStringT$us$i0$%, @System@@LStrFromPWChar$qqrr27System@%AnsiStringT$us$i0$%pbus, @System@@UStrLen$qqrx20System@UnicodeString, @System@@UStrLAsg$qqrr20System@UnicodeStringx20System@UnicodeString, @System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString, @System@@UStrFromPCharLen$qqrr20System@UnicodeStringpci, @System@@UStrAddRef$qqrpv, @System@@UStrArrayClr$qqrpvi, @System@@LStrClr$qqrpv, @System@@UStrClr$qqrpv, @System@@Assert$qqrx20System@UnicodeStringt1i, @System@@RunError$qqruc, @System@@Halt0$qqrv, @System@@StartLib$qqrv, @System@@TryFinallyExit$qqrv, @System@@DoneExcept$qqrv, @System@@RaiseExcept$qqrv, @System@@HandleFinally$qqrv, @System@@HandleAnyException$qqrv, @System@@BeforeDestruction$qqrp14System@TObjectzc, @System@@AfterConstruction$qqrp14System@TObject, @System@@ClassDestroy$qqrp14System@TObject, @System@@ClassCreate$qqrpvzc, @System@TObject@Dispatch$qqrpv, @System@TObject@BeforeDestruction$qqrv, @System@TObject@AfterConstruction$qqrv, @System@TObject@DefaultHandler$qqrpv, @System@TObject@ToString$qqrv, @System@TObject@SafeCallException$qqrp14System@TObjectpv, @System@@AsClass$qqrp14System@TObjectp17System@TMetaClass, @System@@IsClass$qqrp14System@TObjectp17System@TMetaClass, @System@TObject@GetInterface$qqrrx5_GUIDpv, @System@TObject@GetHashCode$qqrv, @System@TObject@Equals$qqrp14System@TObject, @System@TObject@Free$qqrv, @System@TObject@$bdtr$qqrv, @System@TObject@$bctr$qqrv, @System@TObject@FreeInstance$qqrv, @System@TObject@NewInstance$qqrv, @System@@FillChar$qqrpvic, @System@@AbstractError$qqrv, @System@@TRUNC$qqrv, @System@@ROUND$qqrv, @System@Move$qqrpxvpvi, @System@@FreeMem$qqrpv, @System@@GetMem$qqri, @System@ShareMemoryManager$qqrv, @System@AttemptToUseSharedMemoryManager$qqrv, @$xp$24System@TInterfacedObject, @System@TInterfacedObject@, @$xp$17System@IInterface, @$xp$14System@TObject, @System@TObject@, @$xp$5TGUID, @$xp$17System@WideString, @$xp$13System@string, @$xp$6Double, @$xp$10NativeUInt, @$xp$5Int64, @$xp$8Cardinal, @$xp$7Pointer, @$xp$11System@Word, @$xp$7Integer, @$xp$7Boolean, @System@Internal@Excutils@initialization$qqrv, @System@Internal@Excutils@Finalization$qqrv, @System@Sysutils@initialization$qqrv, @System@Sysutils@Finalization$qqrv, @System@Sysutils@TOSVersion@$bcctr$qqrv, @System@Sysutils@TEncoding@$bcdtr$qqrv, @System@Sysutils@GetEnvironmentVariable$qqrx20System@UnicodeString, @System@Sysutils@TLanguages@$bcdtr$qqrv, @System@Sysutils@FreeAndNil$qqrpv, @System@Sysutils@StringReplace$qqrx20System@UnicodeStringt1t163System@%Set$t35System@Sysutils@System_Sysutils__85$iuc$0$iuc$1%, @System@Sysutils@SameFileName$qqrx20System@UnicodeStringt1, @System@Sysutils@ExcludeTrailingPathDelimiter$qqrx20System@UnicodeString, @System@Sysutils@IncludeTrailingPathDelimiter$qqrx20System@UnicodeString, @System@Sysutils@Exception@$bcdtr$qqrv, @System@Sysutils@Exception@$bcctr$qqrv, @System@Sysutils@Exception@ToString$qqrv, @System@Sysutils@Exception@RaisingException$qqrp23System@TExceptionRecord, @System@Sysutils@Exception@GetBaseException$qqrv, @System@Sysutils@Exception@$bdtr$qqrv, @System@Sysutils@Exception@$bctr$qqrx20System@UnicodeStringpx14System@TVarRecxi, @System@Sysutils@Exception@$bctr$qqrx20System@UnicodeString, @System@Sysutils@Format$qqrx20System@UnicodeStringpx14System@TVarRecxi, @System@Sysutils@ExtractFileExt$qqrx20System@UnicodeString, @System@Sysutils@ExtractFileName$qqrx20System@UnicodeString, @System@Sysutils@ExtractFilePath$qqrx20System@UnicodeString, @System@Sysutils@DeleteFile$qqrx20System@UnicodeString, @System@Sysutils@DirectoryExists$qqrx20System@UnicodeStringo, @System@Sysutils@FileExists$qqrx20System@UnicodeStringo, @System@Sysutils@Trim$qqrx20System@UnicodeString, @System@Sysutils@AnsiUpperCase$qqrx20System@UnicodeString, @System@Sysutils@SameText$qqrx20System@UnicodeStringt1, @System@Sysutils@CompareText$qqrx20System@UnicodeStringt1, @System@Sysutils@LowerCase$qqrx20System@UnicodeString, @System@Sysutils@UpperCase$qqrx20System@UnicodeString, @System@Sysutils@IsEqualGUID$qqrrx5_GUIDt1, @System@Sysutils@TOSVersion@$bcdtr$qqrv, @System@Sysutils@TEncoding@$bcctr$qqrv, @System@Sysutils@Win32MajorVersion, @System@Sysutils@EmptyStr, @$xp$25System@Sysutils@Exception, @System@Sysutils@Exception@, @System@Sysutils@TLanguages@$bcctr$qqrv, @System@Varutils@initialization$qqrv, @System@Varutils@Finalization$qqrv, @System@Variants@initialization$qqrv, @System@Variants@Finalization$qqrv, @System@Typinfo@initialization$qqrv, @System@Typinfo@Finalization$qqrv, @System@Classes@initialization$qqrv, @System@Classes@Finalization$qqrv, @System@Classes@TObserverMapping@$bcdtr$qqrv, @System@Classes@TLoginCredentialService@$bcdtr$qqrv, @System@Classes@TLoginCredentialService@$bcctr$qqrv, @System@Classes@TBinaryWriter@$bcdtr$qqrv, @System@Classes@TThread@WaitFor$qqrv, @System@Classes@TThread@Terminate$qqrv, @System@Classes@TThread@TerminatedSet$qqrv, @System@Classes@TThread@DoTerminate$qqrv, @System@Classes@TThread@AfterConstruction$qqrv, @System@Classes@TThread@$bcdtr$qqrv, @System@Classes@TThread@$bdtr$qqrv, @System@Classes@TThread@$bcctr$qqrv, @System@Classes@TThread@$bctr$qqrv, @System@Classes@TResourceStream@$bctr$qqruix20System@UnicodeStringpb, @System@Classes@TFileStream@$bctr$qqrx20System@UnicodeStringus, @System@Classes@TStream@CopyFrom$qqrp22System@Classes@TStreamj, @System@Classes@TStringList@$bctr$qqrv, @System@Classes@TStrings@EndUpdate$qqrv, @System@Classes@TStrings@BeginUpdate$qqrv, @System@Classes@TList@Pack$qqrv, @System@Classes@TList@Remove$qqrpv, @System@Classes@TList@Put$qqripv, @System@Classes@TList@Move$qqrii, @System@Classes@TList@IndexOf$qqrpv, @System@Classes@TList@Get$qqri, @System@Classes@TList@Exchange$qqrii, @System@Classes@TList@Delete$qqri, @System@Classes@TList@Add$qqrpv, @System@Classes@TBinaryWriter@$bcctr$qqrv, @$xp$22System@Classes@TThread, @System@Classes@TThread@, @System@Classes@TResourceStream@, @System@Classes@TFileStream@, @System@Classes@TStringList@, @$xp$23System@Classes@TStrings, @$xp$20System@Classes@TList, @System@Classes@TList@, @System@Classes@TObserverMapping@$bcctr$qqrv, @System@Strutils@PosEx$qqrx20System@UnicodeStringt1i, @System@Math@initialization$qqrv, @System@Math@Finalization$qqrv, @System@Timespan@TTimeSpan@$bcctr$qqrv, @System@Timespan@TTimeSpan@$bcdtr$qqrv, @System@Syncobjs@initialization$qqrv, @System@Syncobjs@Finalization$qqrv, @System@Dateutils@TTimeZone@$bcdtr$qqrv, @System@Dateutils@TTimeZone@$bcctr$qqrv, @System@Ioutils@initialization$qqrv, @System@Ioutils@Finalization$qqrv, @System@Ioutils@TPath@$bcctr$qqrv, @System@Ioutils@TPath@$bcdtr$qqrv, @System@Inifiles@initialization$qqrv, @System@Inifiles@Finalization$qqrv, @System@Win@Registry@initialization$qqrv, @System@Win@Registry@Finalization$qqrv, @System@Win@Registry@TRegistry@$bcctr$qqrv, @System@Win@Registry@TRegistry@$bcdtr$qqrv, @System@Uiconsts@initialization$qqrv, @System@Uiconsts@Finalization$qqrv, @System@Contnrs@TObjectList@GetItem$qqri, @System@Contnrs@TObjectList@$bctr$qqrv, @System@Contnrs@TObjectList@Add$qqrp14System@TObject, @$xp$26System@Contnrs@TObjectList, @System@Contnrs@TObjectList@, @Winapi@Uxtheme@initialization$qqrv, @Winapi@Uxtheme@Finalization$qqrv, @System@Win@Comobj@initialization$qqrv, @System@Win@Comobj@Finalization$qqrv, @System@Win@Comobj@TComServerObject@$bcctr$qqrv, @System@Win@Comobj@OleCheck$qqrl, @System@Win@Comobj@TComServerObject@$bcdtr$qqrv, @System@Helpintfs@initialization$qqrv, @System@Helpintfs@Finalization$qqrv, @Winapi@Flatsb@initialization$qqrv, @Winapi@Flatsb@Finalization$qqrv

SHGetFileInfoW, ShellExecuteExW, ExtractIconExW, DoEnvironmentSubstW, SHGetSpecialFolderLocation, SHGetMalloc, SHGetDesktopFolder

GetClassLongW, GetWindowLongW, ShowWindow, SetForegroundWindow, SendMessageTimeoutW, PostMessageW, MessageBoxW, IsWindowVisible, IsWindowEnabled, GetWindowThreadProcessId, GetWindowTextW, GetWindowPlacement, GetDesktopWindow, GetAncestor, EnumWindows, DestroyIcon

@Vcl@Graphics@initialization$qqrv, @Vcl@Graphics@Finalization$qqrv, @Vcl@Actnlist@initialization$qqrv, @Vcl@Actnlist@Finalization$qqrv, @Vcl@Graphutil@initialization$qqrv, @Vcl@Graphutil@Finalization$qqrv, @Vcl@Controls@initialization$qqrv, @Vcl@Controls@Finalization$qqrv, @Vcl@Stdctrls@TStaticText@$bcctr$qqrv, @Vcl@Stdctrls@TListBox@$bcctr$qqrv, @Vcl@Stdctrls@TCheckBox@$bcctr$qqrv, @Vcl@Stdctrls@TButton@$bcctr$qqrv, @Vcl@Stdctrls@TComboBox@$bcctr$qqrv, @Vcl@Stdctrls@TMemo@$bcctr$qqrv, @Vcl@Stdctrls@TEdit@$bcctr$qqrv, @Vcl@Stdctrls@TGroupBox@$bcctr$qqrv, @Vcl@Stdctrls@TCustomStaticText@$bcctr$qqrv, @Vcl@Stdctrls@TScrollBar@$bcctr$qqrv, @Vcl@Stdctrls@TCustomListBox@$bcctr$qqrv, @Vcl@Stdctrls@TRadioButton@$bcctr$qqrv, @Vcl@Stdctrls@TCustomCheckBox@$bcctr$qqrv, @Vcl@Stdctrls@TCustomButton@$bcctr$qqrv, @Vcl@Stdctrls@TCustomComboBox@$bcctr$qqrv, @Vcl@Stdctrls@TCustomMemo@$bcctr$qqrv, @Vcl@Stdctrls@TCustomEdit@$bcctr$qqrv, @Vcl@Stdctrls@TCustomGroupBox@$bcctr$qqrv, @Vcl@Stdctrls@TStaticText@$bcdtr$qqrv, @Vcl@Stdctrls@TCustomStaticText@$bcdtr$qqrv, @Vcl@Stdctrls@TScrollBar@$bcdtr$qqrv, @Vcl@Stdctrls@TListBox@$bcdtr$qqrv, @Vcl@Stdctrls@TCustomListBox@$bcdtr$qqrv, @Vcl@Stdctrls@TRadioButton@$bcdtr$qqrv, @Vcl@Stdctrls@TCheckBox@$bcdtr$qqrv, @Vcl@Stdctrls@TCustomCheckBox@$bcdtr$qqrv, @Vcl@Stdctrls@TButton@$bcdtr$qqrv, @Vcl@Stdctrls@TCustomButton@$bcdtr$qqrv, @Vcl@Stdctrls@TComboBox@$bcdtr$qqrv, @Vcl@Stdctrls@TCustomComboBox@$bcdtr$qqrv, @Vcl@Stdctrls@TMemo@$bcdtr$qqrv, @Vcl@Stdctrls@TCustomMemo@$bcdtr$qqrv, @Vcl@Stdctrls@TEdit@$bcdtr$qqrv, @Vcl@Stdctrls@TCustomEdit@$bcdtr$qqrv, @Vcl@Stdctrls@TGroupBox@$bcdtr$qqrv, @Vcl@Stdctrls@TCustomGroupBox@$bcdtr$qqrv, @Vcl@Printers@initialization$qqrv, @Vcl@Printers@Finalization$qqrv, @Vcl@Clipbrd@initialization$qqrv, @Vcl@Clipbrd@Finalization$qqrv, @Vcl@Comctrls@initialization$qqrv, @Vcl@Comctrls@Finalization$qqrv, @Vcl@Comctrls@THeaderControl@$bcctr$qqrv, @Vcl@Comctrls@TStatusBar@$bcctr$qqrv, @Vcl@Comctrls@TComboBoxEx@$bcctr$qqrv, @Vcl@Comctrls@TCustomComboBoxEx@$bcctr$qqrv, @Vcl@Comctrls@TPageScroller@$bcctr$qqrv, @Vcl@Comctrls@TDateTimePicker@$bcctr$qqrv, @Vcl@Comctrls@TCoolBar@$bcctr$qqrv, @Vcl@Comctrls@TToolBar@$bcctr$qqrv, @Vcl@Comctrls@TListView@$bcctr$qqrv, @Vcl@Comctrls@TCustomListView@$bcctr$qqrv, @Vcl@Comctrls@THotKey@$bcctr$qqrv, @Vcl@Comctrls@TCustomHotKey@$bcctr$qqrv, @Vcl@Comctrls@TUpDown@$bcctr$qqrv, @Vcl@Comctrls@TCustomUpDown@$bcctr$qqrv, @Vcl@Comctrls@TRichEdit@$bcctr$qqrv, @Vcl@Comctrls@TCustomRichEdit@$bcctr$qqrv, @Vcl@Comctrls@TProgressBar@$bcctr$qqrv, @Vcl@Comctrls@TTrackBar@$bcctr$qqrv, @Vcl@Comctrls@TTreeView@$bcctr$qqrv, @Vcl@Comctrls@TCustomTreeView@$bcctr$qqrv, @Vcl@Comctrls@TCustomHeaderControl@$bcctr$qqrv, @Vcl@Comctrls@TCustomStatusBar@$bcctr$qqrv, @Vcl@Comctrls@TTabControl@$bcctr$qqrv, @Vcl@Comctrls@TCustomTabControl@$bcctr$qqrv, @Vcl@Comctrls@TComboBoxEx@$bcdtr$qqrv, @Vcl@Comctrls@TCustomComboBoxEx@$bcdtr$qqrv, @Vcl@Comctrls@TPageScroller@$bcdtr$qqrv, @Vcl@Comctrls@TDateTimePicker@$bcdtr$qqrv, @Vcl@Comctrls@TCoolBar@$bcdtr$qqrv, @Vcl@Comctrls@TToolBar@$bcdtr$qqrv, @Vcl@Comctrls@TListView@$bcdtr$qqrv, @Vcl@Comctrls@TCustomListView@$bcdtr$qqrv, @Vcl@Comctrls@THotKey@$bcdtr$qqrv, @Vcl@Comctrls@TCustomHotKey@$bcdtr$qqrv, @Vcl@Comctrls@TUpDown@$bcdtr$qqrv, @Vcl@Comctrls@TCustomUpDown@$bcdtr$qqrv, @Vcl@Comctrls@TRichEdit@$bcdtr$qqrv, @Vcl@Comctrls@TCustomRichEdit@$bcdtr$qqrv, @Vcl@Comctrls@TProgressBar@$bcdtr$qqrv, @Vcl@Comctrls@TTrackBar@$bcdtr$qqrv, @Vcl@Comctrls@TTreeView@$bcdtr$qqrv, @Vcl@Comctrls@TCustomTreeView@$bcdtr$qqrv, @Vcl@Comctrls@THeaderControl@$bcdtr$qqrv, @Vcl@Comctrls@TCustomHeaderControl@$bcdtr$qqrv, @Vcl@Comctrls@TStatusBar@$bcdtr$qqrv, @Vcl@Comctrls@TCustomStatusBar@$bcdtr$qqrv, @Vcl@Comctrls@TTabControl@$bcdtr$qqrv, @Vcl@Comctrls@TCustomTabControl@$bcdtr$qqrv, @Vcl@Dialogs@initialization$qqrv, @Vcl@Dialogs@Finalization$qqrv, @Vcl@Extctrls@initialization$qqrv, @Vcl@Extctrls@Finalization$qqrv, @Vcl@Extctrls@TLinkLabel@$bcctr$qqrv, @Vcl@Extctrls@TCustomLinkLabel@$bcctr$qqrv, @Vcl@Extctrls@TCategoryPanelGroup@$bcctr$qqrv, @Vcl@Extctrls@TCustomCategoryPanelGroup@$bcctr$qqrv, @Vcl@Extctrls@TLinkLabel@$bcdtr$qqrv, @Vcl@Extctrls@TCustomLinkLabel@$bcdtr$qqrv, @Vcl@Extctrls@TCategoryPanelGroup@$bcdtr$qqrv, @Vcl@Extctrls@TCustomCategoryPanelGroup@$bcdtr$qqrv, @Vcl@Themes@initialization$qqrv, @Vcl@Themes@Finalization$qqrv, @Vcl@Themes@TCustomStyleEngine@$bcdtr$qqrv, @Vcl@Themes@TCustomStyleEngine@$bcctr$qqrv, @Vcl@Menus@initialization$qqrv, @Vcl@Menus@Finalization$qqrv, @Vcl@Forms@initialization$qqrv, @Vcl@Forms@Finalization$qqrv, @Vcl@Forms@TForm@$bcctr$qqrv, @Vcl@Forms@TCustomForm@$bcctr$qqrv, @Vcl@Forms@TScrollBox@$bcctr$qqrv, @Vcl@Forms@Application, @Vcl@Forms@TForm@$bcdtr$qqrv, @Vcl@Forms@TCustomForm@$bcdtr$qqrv, @Vcl@Forms@TScrollBox@$bcdtr$qqrv, @Vcl@Svcmgr@initialization$qqrv, @Vcl@Svcmgr@Finalization$qqrv, @$xp$25Vcl@Svcmgr@TCurrentStatus