GetSidSubAuthorityCount, GetSidIdentifierAuthority, GetTokenInformation, OpenProcessToken, RegOpenKeyExW, RegCloseKey, RegSetValueExW, RegQueryValueExA, RegOpenKeyExA, RegQueryValueExW, RegEnumKeyExW, RegEnumValueW, CloseServiceHandle, QueryServiceStatus, OpenServiceW, OpenSCManagerW, StartServiceW, RegOpenKeyA, EqualSid, AllocateAndInitializeSid, RegCreateKeyExW, RegEnumKeyW, RegOpenKeyW, CryptGenRandom, CryptAcquireContextW, CryptCreateHash, CryptHashData, CryptGetHashParam, CryptDestroyHash, CryptReleaseContext, GetSidSubAuthority

ImageList_DrawEx

CryptUnprotectData, CryptProtectData

GetObjectW, CreateCompatibleBitmap, CreateCompatibleDC, CreatePolygonRgn, FillRgn, OffsetRgn, CombineRgn, SetRectRgn, CreateRectRgnIndirect, CreateRectRgn, StretchBlt, GetPixel, GetTextExtentPoint32W, SelectObject, DPtoLP, CreateBitmap, SetMapMode, SetBkColor, CreateSolidBrush, DeleteDC, DeleteObject, GetDeviceCaps, GetCurrentObject, BitBlt, GetMapMode, GetTextColor, GetBkMode, GetBkColor, CreateFontIndirectW

GdipBitmapGetPixel, GdiplusShutdown, GdipCreateBitmapFromResource, GdipCreateHBITMAPFromBitmap, GdipCreateBitmapFromHBITMAP, GdipCreateBitmapFromScan0, GdipCreateBitmapFromStreamICM, GdipLoadImageFromStream, GdipLoadImageFromStreamICM, GdiplusStartup, GdipCreateBitmapFromStream, GdipCloneImage, GdipDisposeImage, GdipDrawImageI, GdipGetImageGraphicsContext, GdipDeleteGraphics, GdipGetImageHeight, GdipCreateImageAttributes, GdipDisposeImageAttributes, GdipGetImageWidth, GdipDrawImageRectRect, GdipSetInterpolationMode, GdipCreateFromHDC, GdipAlloc, GdipFree, GdipSetImageAttributesColorKeys

ImmGetContext, ImmGetOpenStatus

GetVersionExA, GetLocaleInfoA, HeapDestroy, HeapFree, HeapReAlloc, HeapSize, GetSystemTimeAsFileTime, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, InterlockedCompareExchange, GetThreadLocale, SetThreadLocale, WritePrivateProfileSectionW, WritePrivateProfileStringW, GetPrivateProfileStringW, GetNumberFormatW, FileTimeToLocalFileTime, FileTimeToSystemTime, CreateDirectoryW, GetComputerNameW, SetFileAttributesW, CopyFileW, GetTempPathW, GetTempFileNameW, DeleteFileW, GetCurrentDirectoryW, SetCurrentDirectoryW, GetLocalTime, CompareFileTime, ResumeThread, ResetEvent, WaitForMultipleObjects, ReleaseSemaphore, SetEvent, WaitForSingleObject, CreateSemaphoreW, CreateEventW, DuplicateHandle, lstrcmpiW, lstrcmpW, OutputDebugStringA, GetDateFormatA, SystemTimeToFileTime, OpenProcess, GetDateFormatW, GetTimeFormatW, FindResourceW, SizeofResource, LoadResource, LockResource, GlobalAlloc, GlobalLock, GlobalUnlock, GlobalFree, GetCurrentProcessId, LocalAlloc, lstrcmpA, GetSystemDirectoryA, LoadLibraryA, VerSetConditionMask, CreateFileW, ReadFile, Sleep, lstrcatW, DebugBreak, GetTickCount, GetCurrentProcess, GetUserDefaultLangID, LocalFree, FindNextFileW, FindFirstFileW, FindClose, GetSystemDefaultLangID, GetSystemInfo, GetLocaleInfoW, GetCurrentThreadId, GetACP, GetOEMCP, GetVolumePathNameW, GetVolumeNameForVolumeMountPointW, MultiByteToWideChar, OutputDebugStringW, WideCharToMultiByte, lstrcpyA, lstrlenA, LoadLibraryExA, LoadLibraryExW, GetFileAttributesW, FormatMessageW, GetProcessHeap, HeapAlloc, RaiseException, GetVersionExW, InterlockedExchange, GetVersion, GetModuleHandleW, SetLastError, FreeLibrary, GetSystemDirectoryW, LoadLibraryW, GetProcAddress, GetLastError, CreateProcessW, CloseHandle, GetEnvironmentVariableW, GetStartupInfoW, MulDiv, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, GetModuleFileNameW, lstrlenW, InterlockedDecrement, InterlockedIncrement, InitializeCriticalSection, GetWindowsDirectoryW, TryEnterCriticalSection

DllMain

TransparentBlt

DllMain

DllMain

OleRun, CoCreateInstance, CoTaskMemFree, StringFromCLSID, CreateStreamOnHGlobal, CLSIDFromString, CoInitialize, CoUninitialize, StringFromGUID2, CoCreateGuid, CoTaskMemAlloc, CoInitializeEx, HWND_UserFree, HWND_UserUnmarshal, HWND_UserMarshal, HWND_UserSize

GetModuleBaseNameW, EnumProcessModules, EnumProcesses, GetModuleFileNameExW

IUnknown_Release_Proxy, IUnknown_AddRef_Proxy, IUnknown_QueryInterface_Proxy, NdrOleFree, NdrStubForwardingFunction, NdrDllGetClassObject, NdrDllCanUnloadNow, NdrDllUnregisterProxy, NdrDllRegisterProxy, NdrCStdStubBuffer2_Release, NdrCStdStubBuffer_Release, NdrOleAllocate, NdrStubCall2

SHGetMalloc, SHGetSpecialFolderPathA, SHGetFolderPathW, SHGetPathFromIDListW, ShellExecuteW, SHBrowseForFolderW

PathAddBackslashA, PathRemoveBackslashA, StrStrIW, PathAddBackslashW, SHDeleteKeyW

IsMenu, AdjustWindowRectEx, GetMenu, RegisterWindowMessageW, BeginDeferWindowPos, DeferWindowPos, EndDeferWindowPos, GetScrollInfo, GetClassLongW, GetWindowRgn, OffsetRect, GetDesktopWindow, LoadIconW, LoadMenuW, EnableMenuItem, CallWindowProcW, SetWindowLongW, SetWindowPos, GetDlgItem, SetWindowTextW, GetWindowThreadProcessId, SetWindowRgn, CharPrevW, EnumChildWindows, GetWindowLongW, GetWindow, GetSystemMetrics, TranslateMessage, LoadStringW, MsgWaitForMultipleObjects, PeekMessageW, DispatchMessageW, UnhookWindowsHookEx, SetWindowsHookExW, IsDialogMessageW, CallNextHookEx, CharUpperW, CharNextW, wsprintfA, SetMenuInfo, ModifyMenuW, GetSubMenu, GetMenuItemID, GetMenuItemCount, LoadImageW, CopyRect, GetNextDlgTabItem, KillTimer, SetTimer, ScreenToClient, SetRect, GetMessagePos, GetClassNameW, EnumWindows, GetCapture, GetFocus, SetCapture, PostMessageW, GetCursorPos, ReleaseCapture, LoadBitmapW, ReleaseDC, FillRect, GetSysColor, CharNextA, GetDC, GetParent, GetNextDlgGroupItem, RedrawWindow, IsWindowVisible, InvalidateRect, UpdateWindow, MapWindowPoints, GetClientRect, GetWindowRect, SendMessageW, DrawFocusRect, GetKeyState, GetCursorInfo, SetCursor, PtInRect, TrackMouseEvent, InflateRect, DestroyCursor, LoadCursorW, EnableWindow, UnregisterClassA, MessageBoxW, IsWindow, EndDialog

GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW

WTSSendMessageA