OpenProcessToken, RegDeleteKeyW, RegEnumKeyExW, DeregisterEventSource, ReportEventA, RegisterEventSourceA, LookupAccountNameW, IsValidSid, GetSidIdentifierAuthority, GetSidSubAuthorityCount, GetSidSubAuthority, OpenSCManagerW, OpenServiceW, QueryServiceStatus, CloseServiceHandle, RegNotifyChangeKeyValue, RegCreateKeyA, LsaOpenPolicy, LsaNtStatusToWinError, LsaRetrievePrivateData, LsaFreeMemory, LsaClose, RegCreateKeyW, RegQueryInfoKeyW, RegEnumKeyExA, RegOpenKeyExA, RegQueryValueExA, RegCreateKeyExW, RegSetValueExW, RegQueryValueExW, RegOpenKeyExW, RegCloseKey, OpenThreadToken, RegOpenCurrentUser

CredUIPromptForCredentialsW

CryptUnprotectData, CryptProtectData

GetBitmapBits, BitBlt, GetObjectA, CreateCompatibleBitmap, CreateDCA, DeleteObject, CreateFontIndirectW, CreateCompatibleDC, SetBkMode, DPtoLP, GetDeviceCaps, SetTextColor, GetObjectW, DeleteDC, SelectObject

GdipCreateBitmapFromScan0, GdipCreateBitmapFromStreamICM, GdipCreateBitmapFromStream, GdipSaveImageToFile, GdipLoadImageFromStreamICM, GdipLoadImageFromStream, GdipDeleteGraphics, GdiplusStartup, GdiplusShutdown, GdipCloneImage, GdipSetInterpolationMode, GdipGetImageEncoders, GdipGetImageEncodersSize, GdipCreateBitmapFromHBITMAP, GdipGetImageHeight, GdipGetImageWidth, GdipSaveImageToStream, GdipDisposeImage, GdipAlloc, GdipFree, GdipDrawImageRectRectI, GdipCloneBitmapAreaI, GdipSetCompositingMode, GdipGetImageGraphicsContext

IcmpCreateFile, GetIpForwardTable, GetPerAdapterInfo, GetAdaptersInfo, IcmpCloseHandle, IcmpSendEcho, GetIpAddrTable, SendARP, GetNetworkParams

GetComputerNameExA, InterlockedExchange, GetACP, GetLocaleInfoA, HeapDestroy, HeapSize, GetLocaleInfoW, GetUserDefaultUILanguage, GetEnvironmentVariableW, ResumeThread, IsBadReadPtr, GetModuleFileNameA, CreateSemaphoreW, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, QueryPerformanceCounter, CreateWaitableTimerA, CreateProcessW, GetExitCodeProcess, GetUserDefaultLCID, GetStringTypeExA, GetStringTypeExW, InterlockedCompareExchange, GetLastError, WideCharToMultiByte, lstrlenW, MultiByteToWideChar, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, lstrlenA, InterlockedIncrement, InterlockedDecrement, LocalFree, GetTickCount, HeapFree, GetProcessHeap, HeapAlloc, CreateEventA, CloseHandle, SetEvent, GetSystemTimeAsFileTime, WaitForSingleObject, MulDiv, SizeofResource, LockResource, LoadResource, FindResourceW, FindResourceExW, FindClose, FindNextFileW, FindFirstFileW, GetModuleFileNameW, CopyFileW, CreateSemaphoreA, DuplicateHandle, GetCurrentProcess, ReleaseSemaphore, GetCurrentThreadId, CreateEventW, WaitForMultipleObjects, FileTimeToSystemTime, FileTimeToLocalFileTime, SetThreadLocale, GetThreadLocale, FreeConsole, SetConsoleTitleW, AllocConsole, QueueUserWorkItem, FreeResource, SetThreadExecutionState, ResetEvent, CreateTimerQueueTimer, CreateTimerQueue, DeleteTimerQueueEx, DeleteTimerQueueTimer, GetFileAttributesW, FindFirstChangeNotificationW, FindCloseChangeNotification, CreateFileW, FindNextChangeNotification, Sleep, DeleteFileW, GetCurrentThread, LoadLibraryW, FreeLibrary, DeleteTimerQueue, GetVersionExW, CompareFileTime, SystemTimeToFileTime, GetSystemTime, RaiseException, GetCurrentProcessId, GlobalUnlock, GlobalFree, GlobalLock, GlobalAlloc, SetFileTime, GetFileTime, DeleteFileA, GetExitCodeThread, FormatMessageW, DeleteAtom, FindAtomW, AddAtomW, TerminateThread, IsDebuggerPresent, FormatMessageA, LCMapStringA, LocalAlloc, HeapReAlloc, SetLastError, GetFullPathNameW, GetProcAddress, LoadLibraryA, GetVersionExA, GetFileAttributesA, GetTempPathA, GetTempPathW, ReadFile, WriteFile, SetFilePointer, FlushFileBuffers, SetEndOfFile, GetFileSize, LockFile, LockFileEx, UnlockFile, GetFullPathNameA, TlsSetValue, TlsGetValue, TlsAlloc, CreateFileA, ReleaseMutex, CreateMutexA, SleepEx, PeekNamedPipe, GetFileType, GetStdHandle, ExpandEnvironmentStringsA, CancelWaitableTimer, SetWaitableTimer, CreateWaitableTimerW, LCMapStringW, GlobalMemoryStatus, GetVersion, FlushConsoleInputBuffer

WNetGetUserW, WNetCancelConnection2W, WNetGetUniversalNameW, WNetAddConnection2W

DllMain

DllMain

NetWkstaUserGetInfo, NetApiBufferFree

CoCreateInstance, StringFromGUID2, CoTaskMemFree, CreateStreamOnHGlobal, CoDisconnectObject, CoUninitialize, CoInitializeEx, CoTaskMemAlloc, CLSIDFromString, CoTaskMemRealloc, CoSetProxyBlanket, CoInitializeSecurity, CoCreateGuid

CStdStubBuffer_Invoke, CStdStubBuffer_Disconnect, CStdStubBuffer_Connect, CStdStubBuffer_AddRef, CStdStubBuffer_QueryInterface, UuidCreate, IUnknown_Release_Proxy, IUnknown_AddRef_Proxy, IUnknown_QueryInterface_Proxy, NdrOleFree, NdrOleAllocate, NdrDllGetClassObject, NdrDllCanUnloadNow, NdrCStdStubBuffer_Release, NdrDllRegisterProxy, NdrDllUnregisterProxy, CStdStubBuffer_IsIIDSupported, CStdStubBuffer_DebugServerRelease, CStdStubBuffer_DebugServerQueryInterface, CStdStubBuffer_CountRefs

SHGetFileInfoW, SHCreateDirectoryExW, SHGetFolderPathW

PathIsDirectoryW, PathAddBackslashW, PathFindExtensionW, PathFindFileNameW, PathIsNetworkPathW, PathRenameExtensionW, PathCreateFromUrlW, PathFileExistsW, PathRemoveFileSpecW, PathAppendW, PathRemoveExtensionW, PathIsURLW, PathIsRelativeW, UrlIsW, UrlCanonicalizeW, UrlCreateFromPathW, UrlCombineW, PathGetCharTypeW, PathIsUNCW

DefWindowProcW, ReleaseDC, DrawTextW, LoadStringW, CreateWindowExW, RegisterClassW, DestroyWindow, SetWindowLongW, GetWindowLongW, UnregisterClassW, UnregisterDeviceNotification, RegisterDeviceNotificationW, UnregisterClassA, LoadStringA, GetDesktopWindow, MessageBoxA, GetWindowTextW, GetProcessWindowStation, GetUserObjectInformationW, MessageBoxW, CharUpperBuffW, PostMessageW, GetMessageW, TranslateMessage, DispatchMessageW, LoadImageW, CharLowerBuffW, wsprintfW, InflateRect, GetDC, InvertRect

GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueW

WinHttpCloseHandle, WinHttpGetIEProxyConfigForCurrentUser, WinHttpGetDefaultProxyConfiguration, WinHttpGetProxyForUrl, WinHttpOpen

InternetOpenUrlW, HttpQueryInfoW, InternetReadFile, InternetCloseHandle, InternetOpenW

timeGetTime

WSASetEvent, WSACreateEvent, WSAEventSelect, WSAWaitForMultipleEvents, WSAResetEvent, WSAIoctl, WSACloseEvent, WSAStringToAddressA