RegQueryValueW, GetTokenInformation, OpenProcessToken, RegEnumKeyExW, RegQueryInfoKeyW, RegQueryValueA, RegOpenKeyA, SetSecurityInfo, GetSecurityDescriptorSacl, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegOpenKeyExW, RegQueryValueExA, RegCloseKey, RegOpenKeyExA, RegOpenKeyW, RegQueryValueExW, DuplicateTokenEx, RegDeleteKeyW, RegSetValueExW, RevertToSelf, RegCreateKeyExW, ImpersonateLoggedOnUser

_TrackMouseEvent

RestoreDC, SaveDC, CreateRectRgn, StretchBlt, GetTextExtentPoint32W, MoveToEx, CreateDIBSection, CreateRectRgnIndirect, RectInRegion, OffsetRgn, SetBkMode, CreateSolidBrush, SetStretchBltMode, CreateBitmap, DeleteObject, SetTextColor, GetObjectW, SelectClipRgn, Rectangle, GetStockObject, CreateFontIndirectW, CreatePen, CreateCompatibleDC, SelectObject, SetBkColor, ExtTextOutW, DeleteDC, BitBlt, GetCurrentObject, GetTextColor, CombineRgn, GetClipRgn, RoundRect, LineTo, CreateCompatibleBitmap, TextOutW

GdipSaveImageToFile, GdipCreateSolidFill, GdipCloneBrush, GdipDeletePen, GdipDeleteBrush, GdipCreatePen1, GdipDeleteFont, GdipSetStringFormatTrimming, GdipCreateFontFromLogfontW, GdipDrawLinesI, GdipSetStringFormatLineAlign, GdipSetStringFormatAlign, GdipDeleteStringFormat, GdipCreateStringFormat, GdipCreateBitmapFromHBITMAP, GdipDrawString, GdipSetTextRenderingHint, GdipFillRectangle, GdipGetImageHeight, GdipGetImageWidth, GdipDeleteGraphics, GdipAlloc, GdipFree, GdipCreateFromHDC, GdipCloneImage, GdipLoadImageFromStream, GdiplusShutdown, GdiplusStartup, GdipCreateHBITMAPFromBitmap, GdipDrawImageRectRectI, GdipCreateBitmapFromStream, GdipDisposeImage

DllMain

CoInitializeEx, CoGetInterfaceAndReleaseStream, CoUninitialize, CoInitialize, CreateStreamOnHGlobal, ProgIDFromCLSID, CoCreateInstance, CoTaskMemFree, CoTaskMemAlloc

ObjectFromLresult

GetModuleFileNameExW, GetModuleFileNameExA, GetModuleInformation

DragQueryFileW, SHGetPathFromIDListW, ShellExecuteW, CommandLineToArgvW, SHGetSpecialFolderPathA, SHBindToParent, SHGetSpecialFolderPathW, SHGetFolderPathW, ShellExecuteExW, SHFileOperationW

PathRemoveBlanksW, PathFileExistsA, PathAppendA, PathRemoveFileSpecA, PathMatchSpecW, StrCmpNIA, StrRetToBufW, StrToIntA, PathFindFileNameA, PathQuoteSpacesW, PathFileExistsW, PathAppendW, StrStrIA, StrCmpIW, PathIsDirectoryA, PathIsRootA, PathIsURLW, PathIsURLA, StrDupW, PathIsFileSpecW, PathFindExtensionW, StrCmpNIW, PathIsDirectoryW, StrToIntW, PathIsUNCW, StrCmpNA, StrStrA, SHRegGetUSValueW, PathRemoveFileSpecW, PathFindFileNameW, PathUnquoteSpacesW, PathRemoveArgsW, AssocCreate, StrStrIW

RegisterWindowMessageW, SendMessageTimeoutW, SetRect, SetWindowLongW, ShowWindow, DestroyIcon, SetCapture, SendMessageW, IsDialogMessageW, IsWindow, LoadIconW, OffsetRect, CharLowerBuffW, CharNextW, wsprintfA, wsprintfW, GetSystemMetrics, UnregisterClassA, EqualRect, IsWindowEnabled, GetActiveWindow, CreateWindowExW, ReleaseCapture, SetWindowPos, EnableWindow, GetWindowRect, DrawTextW, IsWindowVisible, GetForegroundWindow, GetWindowLongW, SetForegroundWindow, DrawFrameControl, InvalidateRect, SystemParametersInfoW, DestroyWindow, MapWindowPoints, CallWindowProcW, GetDlgItem, GetClassInfoExW, AttachThreadInput, GetClientRect, EndPaint, SetActiveWindow, GetWindowTextLengthW, ValidateRect, SetLayeredWindowAttributes, IsZoomed, CharLowerW, IsChild, GetFocus, GetWindowThreadProcessId, EnumChildWindows, EnumWindows, LoadImageW, LoadBitmapW, GetClassNameW, GetWindowTextW, InflateRect, GetDC, ReleaseDC, GetDesktopWindow, DefWindowProcW, SetFocus, RegisterClassExW, SetTimer, BeginPaint, UpdateLayeredWindow, GetNextDlgTabItem, GetDlgCtrlID, MoveWindow, PeekMessageW, CopyRect, GetMessageW, TranslateMessage, MonitorFromWindow, GetParent, DispatchMessageW, GetMonitorInfoW, GetWindow, GetKeyState, FindWindowA, ClientToScreen, WindowFromPoint, SetRectEmpty, FindWindowExA, GetScrollPos, PostMessageW, LoadCursorW, SetWindowRgn, SetCursor, DrawIconEx, PtInRect, PostThreadMessageW

GetFileVersionInfoW, VerQueryValueA, GetFileVersionInfoA, GetFileVersionInfoSizeA, VerQueryValueW, GetFileVersionInfoSizeW

InternetCrackUrlA, InternetCrackUrlW

WTSFreeMemory, WTSEnumerateSessionsW