RegSetValueW, RegEnumKeyExW, GetUserNameW, RegNotifyChangeKeyValue, RegEnumValueW, RegQueryValueExA, RegOpenKeyExA, RegEnumKeyW, RegCloseKey, RegCreateKeyW, RegQueryInfoKeyW, RegOpenKeyExW, RegQueryValueExW, RegCreateKeyExW, RegSetValueExW, RegDeleteValueW, RegQueryValueW, RegGetValueW, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, EventRegister, EventUnregister, EventWrite, EventEnabled, GetLengthSid, GetTokenInformation, OpenProcessToken, TraceMessage, RegOpenKeyW, ConvertStringSidToSidW, CloseServiceHandle, OpenServiceW, OpenSCManagerW, QueryServiceStatus, CreateWellKnownSid, StartServiceW, CryptAcquireContextW, CryptCreateHash, CryptHashData, CryptGetHashParam, CryptDestroyHash, CryptReleaseContext, StartTraceW, EnableTraceEx, StopTraceW, LsaLookupSids, IsValidSid, GetSidSubAuthorityCount, GetSidSubAuthority, LsaOpenPolicy, LsaFreeMemory, LsaClose, OpenThreadToken, ConvertSidToStringSidW, ConvertStringSecurityDescriptorToSecurityDescriptorW, CheckTokenMembership

DwmEnableBlurBehindWindow, DwmIsCompositionEnabled, DwmSetWindowAttribute, DwmQueryThumbnailSourceSize, DwmUnregisterThumbnail, DwmUpdateThumbnailProperties

GetStockObject, CreatePatternBrush, OffsetViewportOrgEx, GetLayout, CombineRgn, CreateDIBSection, GetTextExtentPoint32W, StretchBlt, CreateRectRgnIndirect, CreateRectRgn, GetClipRgn, IntersectClipRect, GetViewportOrgEx, SetViewportOrgEx, SelectClipRgn, PatBlt, GetBkColor, CreateCompatibleDC, CreateCompatibleBitmap, OffsetWindowOrgEx, DeleteDC, SetBkColor, BitBlt, ExtTextOutW, GetTextExtentPointW, GetClipBox, GetObjectW, SetTextColor, SetBkMode, CreateFontIndirectW, DeleteObject, GetTextMetricsW, SelectObject, GetDeviceCaps, TranslateCharsetInfo, SetStretchBltMode, SetWindowOrgEx, LPtoDP, Polyline, CreatePen, GetTextColor, ExtCreateRegion, GetRegionData, SetLayout, GetRgnBox, GdiFlush, OffsetRgn, SetDIBits, CreateBitmap, GdiAlphaBlend

GdipFree, GdipAlloc, GdiplusStartup, GdiplusShutdown, GdipDeleteGraphics, GdipDisposeImage, GdipGetImageWidth, GdipGetImageHeight, GdipCreateBitmapFromHBITMAP, GdipCreateFromHDC, GdipSetCompositingMode, GdipSetInterpolationMode, GdipDrawImageRectI, GdipCloneImage

GetSystemDirectoryW, CreateThread, CreateJobObjectW, ExitProcess, SetProcessShutdownParameters, ReleaseMutex, CreateMutexW, SetPriorityClass, GetCurrentProcess, GetStartupInfoW, GetCommandLineW, SetErrorMode, LeaveCriticalSection, EnterCriticalSection, ResetEvent, LoadLibraryExA, CompareFileTime, GetSystemTimeAsFileTime, SetThreadPriority, GetCurrentThreadId, GetThreadPriority, GetCurrentThread, GetUserDefaultLangID, Sleep, GetBinaryTypeW, GetModuleHandleExW, SystemTimeToFileTime, GetLocalTime, GetCurrentProcessId, GetEnvironmentVariableW, UnregisterWait, GlobalGetAtomNameW, GetFileAttributesW, MoveFileW, lstrcmpW, LoadLibraryExW, FindClose, FindNextFileW, FindFirstFileW, lstrcmpiA, SetEvent, AssignProcessToJobObject, GetDateFormatW, GetTimeFormatW, FlushInstructionCache, lstrcpynW, GetSystemWindowsDirectoryW, SetLastError, GetProcessHeap, HeapFree, HeapReAlloc, HeapSize, HeapAlloc, GetUserDefaultLCID, ReadProcessMemory, OpenProcess, InterlockedCompareExchange, LoadLibraryA, QueryPerformanceCounter, UnhandledExceptionFilter, SetUnhandledExceptionFilter, VirtualFree, VirtualAlloc, ResumeThread, TerminateProcess, TerminateThread, GetSystemDefaultLCID, GetLocaleInfoW, CreateEventW, GetLastError, OpenEventW, DelayLoadFailureHook, WaitForSingleObject, GetTickCount, ExpandEnvironmentStringsW, GetModuleFileNameW, GetPrivateProfileStringW, lstrcmpiW, CreateProcessW, FreeLibrary, GetWindowsDirectoryW, LocalAlloc, CreateFileW, DeviceIoControl, LocalFree, GetQueuedCompletionStatus, CreateIoCompletionPort, SetInformationJobObject, CloseHandle, LoadLibraryW, GetModuleHandleW, ActivateActCtx, DeactivateActCtx, GetFileAttributesExW, GetProcAddress, DeleteCriticalSection, CreateEventA, HeapDestroy, InitializeCriticalSection, MulDiv, InitializeCriticalSectionAndSpinCount, lstrlenW, InterlockedDecrement, InterlockedIncrement, GlobalAlloc, InterlockedExchange, GetModuleHandleA, GetVersionExA, GlobalFree, GetProcessTimes, lstrcpyW, GetLongPathNameW, RegisterWaitForSingleObject, GetFileSize, ReadFile, RaiseException, OpenThread, GetSystemTime, GetPriorityClass, SearchPathW, GetSystemDefaultUILanguage, UnmapViewOfFile, MapViewOfFile, GetTimeZoneInformation, GetDynamicTimeZoneInformation, QueryPerformanceFrequency, GetTickCount64, MultiByteToWideChar, QueueUserWorkItem, GetProductInfo, DeleteFileW, GetProcessId, CompareStringW, QueryFullProcessImageNameW, CreateFileMappingW, WideCharToMultiByte, GlobalLock, GlobalUnlock, DuplicateHandle, GetCurrentDirectoryW, WaitForMultipleObjects, GetComputerNameW, ReleaseActCtx, CreateActCtxW, FindResourceExW, LoadResource, LockResource, QueryInformationJobObject, GetUserDefaultUILanguage, HeapSetInformation, GetVersionExW, RegisterApplicationRestart, SetProcessDEPPolicy, SetTermsrvAppInstallMode, CompareStringOrdinal

DllMain

RtlNtStatusToDosError, NtQueryInformationProcess, WinSqmSetString, NtSetInformationProcess, WinSqmIsOptedIn, WinSqmAddToStreamEx, NtOpenThreadToken, NtOpenProcessToken, NtSetSystemInformation, WinSqmAddToStream, WinSqmEventEnabled, EtwEventWrite, EtwEventEnabled, RtlGetProductInfo, NtClose, NtQueryInformationToken, WinSqmSetDWORD

CoFreeUnusedLibraries, RegisterDragDrop, CreateBindCtx, RevokeDragDrop, CoInitializeEx, CoUninitialize, OleInitialize, CoRevokeClassObject, CoRegisterClassObject, CoMarshalInterThreadInterfaceInStream, CoCreateInstance, OleUninitialize, DoDragDrop, StringFromGUID2, CoRegisterMessageFilter, CoCreateFreeThreadedMarshaler, PropVariantClear, ReleaseStgMedium, CreateStreamOnHGlobal, CoTaskMemFree, CoGetInterfaceAndReleaseStream, CoInitialize, CoGetMalloc, CoTaskMemAlloc, CLSIDFromString

CallNtPowerInformation, GetPwrCapabilities, PowerDeterminePlatformRole

PropVariantToStringAlloc, PropVariantToUInt32, PropVariantToUInt64, PropVariantToBoolean, VariantToStringAlloc, VariantToStringWithDefault, PropVariantToString, VariantToBooleanWithDefault, VariantToInt32WithDefault, PSCreateMemoryPropertyStore, PropVariantToInt64

RpcBindingFree, RpcBindingSetAuthInfoExW, RpcStringFreeW, RpcBindingFromStringBindingW, RpcStringBindingComposeW, I_RpcExceptionFilter, NdrClientCall2

GetUserNameExW

SHGetFolderPathW, ExtractIconExW, SHGetSpecialFolderLocation, ShellExecuteExW, SHGetSpecialFolderPathW, SHBindToParent, SHParseDisplayName, SHChangeNotify, SHGetDesktopFolder, SHAddToRecentDocs, DuplicateIcon, SHUpdateRecycleBinIcon, SHGetFolderLocation, SHGetPathFromIDListA, SHGetPathFromIDListW, SHGetPropertyStoreForWindow, SHGetStockIconInfo, Shell_GetCachedImageIndexW, SHGetLocalizedName, SHCreateDataObject, SHCreateShellItemArrayFromShellItem, SHGetKnownFolderPath, SHCreateShellItemArrayFromIDLists, SHBindToFolderIDListParentEx, SHGetFileInfoW, SHCreateItemWithParent, SHGetKnownFolderIDList, SHBindToObject, SHGetNameFromIDList, SHCreateShellItem, ShellExecuteW, SHEnableServiceObject, SHGetIDListFromObject, SHChangeNotifyRegisterThread, SHCreateItemFromIDList, SHFileOperationW, SHGetFolderPathEx, Shell_NotifyIconW, Shell_NotifyIconGetRect, SHEvaluateSystemCommandTemplate, SHCreateItemFromParsingName, DragQueryFileW, SHBindToFolderIDListParent

StrCpyNW, StrRetToBufW, StrRetToStrW, SHQueryValueExW, PathIsNetworkPathW, AssocCreate, StrCatW, StrCpyW, SHGetValueW, StrCmpNIW, PathRemoveBlanksW, PathRemoveArgsW, PathFindFileNameW, StrStrIW, PathGetArgsW, StrToIntW, SHRegGetBoolUSValueW, SHRegWriteUSValueW, SHRegCloseUSKey, SHRegCreateUSKeyW, SHRegGetUSValueW, SHSetValueW, PathAppendW, PathUnquoteSpacesW, PathQuoteSpacesW, SHSetThreadRef, SHCreateThreadRef, PathCombineW, SHStrDupW, PathIsPrefixW, PathParseIconLocationW, AssocQueryKeyW, AssocQueryStringW, StrCmpW, SHRegQueryUSValueW, SHRegOpenUSKeyW, SHRegSetUSValueW, PathIsDirectoryW, PathFileExistsW, PathGetDriveNumberW, StrChrW, PathFindExtensionW, PathRemoveFileSpecW, PathStripToRootW, SHOpenRegStream2W, StrDupW, SHDeleteValueW, StrCatBuffW, SHDeleteKeyW, StrCmpIW, wnsprintfW, StrCmpNW, SHStrDupA, PathCommonPrefixW, PathRemoveExtensionW, PathIsFileSpecW, StrChrIW, SHRegGetValueW, StrTrimW, SHQueryInfoKeyW, SHCreateStreamOnFileW, PathIsRootW, PathStripPathW, ChrCmpIW

SLGetWindowsInformationDWORD

DllMain

GetThemeBackgroundContentRect, GetThemeBool, GetThemePartSize, DrawThemeParentBackground, OpenThemeData, DrawThemeBackground, GetThemeTextExtent, DrawThemeText, CloseThemeData, SetWindowTheme, GetThemeBackgroundRegion, GetThemeMargins, GetThemeColor, GetThemeFont, GetThemeRect, IsAppThemed, BufferedPaintInit, IsCompositionActive, GetThemeMetric, GetWindowTheme, EndBufferedPaint, BeginBufferedPaint, DrawThemeTextEx, BufferedPaintUnInit, IsThemeActive, IsThemePartDefined, DrawThemeIcon, GetBufferedPaintBits, BufferedPaintClear, GetThemeBackgroundExtent