RegQueryValueExA, OpenProcessToken, GetTokenInformation, AdjustTokenPrivileges, RegCloseKey, RegOpenKeyExA, LookupPrivilegeValueW, CreateProcessAsUserW, DuplicateTokenEx

PKCS7_digest_from_attributes, ASN1_BIT_STRING_it, ASN1_INTEGER_free, EVP_VerifyFinal, ASN1_INTEGER_it, ASN1_BIT_STRING_free, EVP_DigestInit_ex, OBJ_find_sigid_algs, X509_NAME_free, X509_NAME_it, ASN1_INTEGER_get, BIO_s_mem, X509_digest, BIO_new, X509_get_serialNumber, BIO_printf, X509_NAME_print_ex, X509_PUBKEY_get, X509_PUBKEY_free, X509_PUBKEY_it, X509_ALGOR_it, X509_ALGOR_free, X509_SIG_it, ASN1_STRING_free, ASN1_STRING_type_new, OBJ_obj2nid, X509_get_issuer_name, sk_value, d2i_X509, sk_num, X509_free, X509_get_subject_name, PKCS7_get_attribute, ASN1_UTCTIME_free, PKCS7_free, X509_STORE_CTX_new, CONF_modules_unload, EVP_add_digest, BIO_free, X509_STORE_set_flags, EVP_sha1, X509_STORE_CTX_init, EVP_get_digestbyname, RSA_free, EVP_DigestInit, EVP_MD_CTX_init, EVP_PKEY_get1_RSA, PKCS7_ATTR_VERIFY_it, X509_NAME_cmp, EVP_DigestUpdate, EVP_DigestFinal, CRYPTO_set_mem_functions, ASN1_INTEGER_cmp, OPENSSL_add_all_algorithms_noconf, ASN1_item_d2i_bio, ASN1_item_i2d, BIO_new_mem_buf, EVP_sha256, RSA_size, PKCS7_SIGNER_INFO_it, CRYPTO_cleanup_all_ex_data, X509_ALGORS_it, PKCS7_get_signed_attribute, X509_STORE_free, ERR_free_strings, X509_SIG_free, X509_STORE_new, X509_it, X509_STORE_add_cert, CRYPTO_free, X509_STORE_CTX_set_time, EVP_MD_CTX_cleanup, PKCS7_SIGNER_INFO_free, ERR_remove_state, d2i_PKCS7_bio, X509_get_pubkey, X509_STORE_CTX_free, EVP_cleanup, EVP_PKEY_free, CRYPTO_malloc, EVP_md2, EVP_md5, OBJ_nid2sn, RSA_public_encrypt, sk_free, sk_push, X509_get_pubkey_parameters, sk_new_null, X509_verify, CRYPTO_add_lock, X509_cmp_time

DllMain

_TrackMouseEvent, ImageList_Draw, ImageList_GetImageInfo, InitCommonControlsEx, ImageList_AddMasked, ImageList_Copy, ImageList_GetImageCount, ImageList_GetIcon, ImageList_ReplaceIcon

GetSaveFileNameW, GetOpenFileNameW, CommDlgExtendedError

ExtTextOutW, DeleteDC, DPtoLP, GetStockObject, PtInRegion, BitBlt, CreateRoundRectRgn, StartDocW, AbortDoc, EndDoc, StartPage, EndPage, AddFontMemResourceEx, AddFontResourceExW, RemoveFontResourceExW, CreateEllipticRgnIndirect, GetBkColor, CreateEllipticRgn, OffsetRgn, ExtSelectClipRgn, CreateFontIndirectW, IntersectClipRect, SetTextJustification, SetBkMode, SetTextColor, MoveToEx, LineTo, TextOutW, GetDIBits, SetDIBits, GetClipRgn, SelectClipRgn, CreatePen, SetBkColor, GetTextExtentPoint32W, CreateDIBSection, SetPixel, GetTextMetricsW, CreateCompatibleBitmap, GetDeviceCaps, Ellipse, StretchBlt, SetDCPenColor, CreateFontW, GetClipBox, GetDCOrgEx, GetCurrentObject, DeleteObject, CreateRectRgn, SetBitmapBits, Rectangle, GetBitmapBits, GetObjectW, Polygon, CreateBitmap, CreateCompatibleDC, SelectObject, FrameRgn, ExcludeClipRect, CreateSolidBrush, Chord, GetPixel

GdiplusShutdown, GdiplusStartup, GdipGetImageEncoders, GdipGetImageEncodersSize, GdipCreateBitmapFromHBITMAP, GdipCreateBitmapFromScan0, GdipSaveImageToStream, GdipCloneImage, GdipDisposeImage, GdipFree, GdipAlloc

WaitForMultipleObjects, CreateFileW, GetOverlappedResult, GetCurrentProcessId, SetUnhandledExceptionFilter, GetTempFileNameW, DeviceIoControl, CancelIo, FindVolumeClose, GetModuleHandleW, FindNextVolumeW, GetVolumePathNamesForVolumeNameW, FindFirstVolumeW, ExpandEnvironmentStringsW, WaitForMultipleObjectsEx, FindResourceExW, FindResourceW, LoadResource, LockResource, SizeofResource, FindFirstFileW, FindNextFileW, FindClose, FileTimeToLocalFileTime, FileTimeToSystemTime, GetLocaleInfoW, GetDateFormatW, GetTimeFormatW, lstrlenW, SystemTimeToFileTime, LocalFileTimeToFileTime, GetVersion, GetDriveTypeW, GetVolumeInformationW, GetFileAttributesW, GetShortPathNameW, SetLastError, DeactivateActCtx, ActivateActCtx, GlobalFree, GetModuleFileNameW, GetLogicalDrives, FindFirstChangeNotificationW, FindNextChangeNotification, FindCloseChangeNotification, VirtualAlloc, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, VirtualFree, GetVersionExA, MultiByteToWideChar, FormatMessageW, FreeResource, IsProcessorFeaturePresent, EnterCriticalSection, LeaveCriticalSection, InterlockedExchange, ExpandEnvironmentStringsA, LoadLibraryA, InterlockedCompareExchange, HeapSetInformation, GetStartupInfoW, EncodePointer, DecodePointer, QueryPerformanceCounter, GetSystemTimeAsFileTime, CreateProcessW, GetTempPathW, GetCurrentThreadId, GetUserDefaultLangID, LocalFree, InterlockedDecrement, HeapFree, GetProcessHeap, HeapAlloc, VirtualAllocEx, GetProcAddress, lstrcpynW, ReadProcessMemory, LoadLibraryW, VirtualFreeEx, OpenProcess, GetTickCount, FreeLibrary, GetExitCodeThread, ReleaseMutex, SetProcessWorkingSetSize, GetCurrentProcess, GetLastError, CreateEventW, CloseHandle, SetEvent, SetThreadPriority, ResumeThread, WaitForSingleObject, Sleep, GetComputerNameW, MulDiv, CreateMutexW, GlobalAlloc, GlobalLock, GlobalUnlock, LCMapStringW, SetVolumeLabelW

DllMain

DllMain

WNetCloseEnum, WNetEnumResourceW, WNetOpenEnumW, WNetGetUniversalNameW

TransparentBlt, AlphaBlend

DllMain

DllMain

DllMain

DllMain

RtlFreeUnicodeString, ZwSetEvent, ZwWaitForSingleObject, LdrLoadDll, ZwFsControlFile, ZwReadFile, ZwMapViewOfSection, ZwFlushVirtualMemory, ZwQuerySystemInformation, ZwSetInformationFile, ZwUnmapViewOfSection, ZwFlushBuffersFile, ZwCreateSection, ZwQueryInformationFile, ZwWriteFile, ZwTerminateProcess, LdrGetDllHandle, LdrGetProcedureAddress, RtlInitAnsiString, LdrUnloadDll, ZwQueryInformationProcess, ZwOpenProcess, RtlNtStatusToDosError, ZwShutdownSystem, NtClose, RtlOpenCurrentUser, ZwQueryVirtualMemory, ZwCreateFile, ZwResumeThread, RtlCreateUserProcess, ZwCreateEvent, RtlInitUnicodeString, ZwClose, ZwDuplicateObject, ZwWaitForMultipleObjects, RtlRemoveVectoredExceptionHandler, ZwFreeVirtualMemory, ZwAllocateVirtualMemory, RtlAcquirePebLock, RtlReleasePebLock, ZwReadVirtualMemory, RtlAllocateHeap, RtlReAllocateHeap, RtlFreeHeap, RtlAddVectoredExceptionHandler, ZwOpenFile, RtlUpcaseUnicodeChar, ZwQueryVolumeInformationFile, ZwDeviceIoControlFile, ZwCancelIoFile, ZwOpenDirectoryObject, RtlGetFullPathName_U, ZwOpenSymbolicLinkObject, ZwQuerySymbolicLinkObject, RtlEqualUnicodeString

CoInitializeEx, StringFromGUID2, CoGetObject, CoCreateInstance, OleRun, CoUninitialize, CoTaskMemAlloc, CreateStreamOnHGlobal, PropVariantClear, CoTaskMemFree

SHBrowseForFolderW, SHGetMalloc, SHGetFolderPathW, SHGetPathFromIDListW, SHGetSpecialFolderLocation, ExtractIconExW, SHGetFileInfoW, DragQueryFileW, DragAcceptFiles, ShellExecuteW, Shell_NotifyIconW, ShellExecuteExW, SHChangeNotify, SHGetDiskFreeSpaceExW, SHGetFolderLocation

SHStrDupW

DllMain

SetWindowTheme, IsAppThemed

VerQueryValueW, GetFileVersionInfoW, GetFileVersionInfoSizeW

PlaySoundW