RegQueryValueExA, RegOpenKeyExA, RegSetValueExA, RegCreateKeyExA, RegDeleteValueA, RegOpenKeyA, RegQueryValueA, RegQueryValueW, RegSetValueA, RegCreateKeyA, RegDeleteKeyA, RegEnumKeyA, RegOpenKeyW, RegSetValueW, RegCreateKeyW, RegEnumKeyExA, RegQueryValueExW, RegOpenKeyExW, GetTokenInformation, RegCloseKey, GetSidSubAuthority, OpenProcessToken

GetSaveFileNameA

CreateCompatibleBitmap, CreateCompatibleDC, StretchBlt, GetStockObject, CreateFontW, SelectObject, SetTextColor, SetBkMode, GetTextExtentPoint32W, GetObjectA, BitBlt, DeleteObject, GetDeviceCaps, DeleteDC, GetDIBits, GetClipBox, GetDCOrgEx

GdiplusStartup, GdipCloneImage, GdipCreateHBITMAPFromBitmap, GdipCreateBitmapFromStream, GdipDisposeImage, GdipAlloc, GdipFree, GdiplusShutdown

SetErrorMode, GetProcessHeap, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, HeapDestroy, IsProcessorFeaturePresent, GetSystemTimeAsFileTime, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, InterlockedCompareExchange, DecodePointer, EncodePointer, OpenMutexA, Sleep, LocalAlloc, GetCurrentProcess, GetEnvironmentVariableW, SetEnvironmentVariableW, GetLocaleInfoW, IsBadWritePtr, VirtualProtect, IsBadReadPtr, GlobalSize, GlobalAlloc, GlobalLock, GlobalUnlock, GlobalFree, GetVersion, GetSystemInfo, CreateDirectoryA, GetFileAttributesA, GetVersionExA, LoadLibraryA, SetLastError, WaitNamedPipeA, CreateNamedPipeA, ConnectNamedPipe, WaitForMultipleObjectsEx, GetOverlappedResult, CreateThread, ResumeThread, WaitForMultipleObjects, FlushFileBuffers, DisconnectNamedPipe, ResetEvent, WriteFile, ReadFile, CreateProcessA, VirtualQuery, CreateFileMappingA, MapViewOfFile, UnmapViewOfFile, GetEnvironmentVariableA, SetEnvironmentVariableA, GetModuleHandleExA, InitializeCriticalSection, DisableThreadLibraryCalls, GetModuleHandleW, GetModuleFileNameA, RaiseException, InterlockedIncrement, InterlockedDecrement, GetLastError, WideCharToMultiByte, lstrlenW, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, SizeofResource, LockResource, LoadResource, FindResourceW, FindResourceExW, GetCurrentThreadId, GetTickCount, GetModuleHandleA, CloseHandle, WaitForSingleObject, SetEvent, MultiByteToWideChar, lstrlenA, GetProcAddress, CreateEventA, GetCurrentProcessId, InterlockedExchange, MulDiv, LocalFree, FormatMessageW, GetDriveTypeW, CreateFileA, GetModuleFileNameW, FreeLibrary, LoadLibraryW, OutputDebugStringA

DllMain

DllMain

CreateStreamOnHGlobal, CoCreateGuid, CoCreateInstance, StringFromGUID2, CoTaskMemFree, CoInitialize, CoUninitialize

SHGetFolderPathW, SHCreateDirectoryExW, SHGetFolderPathA

PathRemoveFileSpecW, PathAppendW, PathStripPathW, PathFindFileNameW, UrlCombineA, PathFileExistsW

SendMessageTimeoutA, UnregisterClassW, SetLastErrorEx, CharPrevA, CharNextA, LoadCursorA, GetSystemMetrics, CharLowerA, FindWindowW, RegisterWindowMessageA, SendMessageW, FindWindowExW, SetWindowsHookExA, GetClassNameA, UnhookWindowsHookEx, CallNextHookEx, LoadImageA, CallWindowProcW, IsWindowUnicode, GetCapture, ScreenToClient, WindowFromPoint, IsChild, ChildWindowFromPoint, GetMenuItemCount, RemoveMenu, InsertMenuItemW, GetWindowLongW, SetWindowLongW, GetSysColor, DrawTextW, TrackMouseEvent, SetCursor, BeginPaint, IsRectEmpty, GetDlgItem, GetSubMenu, SetFocus, TrackPopupMenu, DestroyMenu, SetWindowPos, AnimateWindow, SendMessageA, AppendMenuA, PeekMessageA, SetTimer, GetClassInfoExA, RegisterClassExA, CreateWindowExA, DefWindowProcA, CallWindowProcA, GetAncestor, InvalidateRect, UpdateWindow, IsIconic, ShowWindow, GetCursorPos, PtInRect, KillTimer, IsWindowEnabled, MapWindowPoints, GetDC, ReleaseDC, GetClientRect, EnumWindows, GetAsyncKeyState, GetWindowRect, IntersectRect, GetPropA, SetPropA, RemovePropA, GetMessageA, DispatchMessageA, PostThreadMessageA, DestroyWindow, UnregisterClassA, GetWindowThreadProcessId, IsWindowVisible, PostMessageA, GetWindowLongA, SetWindowLongA, GetParent, LoadMenuA, EndPaint, GetMenuItemID, LoadBitmapW, SystemParametersInfoA, OffsetRect, EnableWindow

VerQueryValueA, GetFileVersionInfoA, GetFileVersionInfoSizeA

InternetCrackUrlA