SetNamedSecurityInfoW, CryptGenRandom, CryptAcquireContextW, CryptDestroyKey, CryptExportKey, CryptImportKey, CryptGenKey, CryptEncrypt, RegCloseKey, CryptAcquireContextA, InitiateSystemShutdownW, GetSidSubAuthority, ConvertSidToStringSidA, AllocateAndInitializeSid, EqualSid, LookupPrivilegeValueW, AdjustTokenPrivileges, GetNamedSecurityInfoW, FreeSid, GetEffectiveRightsFromAclW, SetEntriesInAclW, RegQueryValueExW, ConvertStringSecurityDescriptorToSecurityDescriptorA, DuplicateTokenEx, ConvertStringSidToSidW, GetLengthSid, SetTokenInformation, CreateProcessAsUserA, OpenProcessToken, GetTokenInformation, LookupAccountSidW, RegOpenKeyExW, CryptReleaseContext

CryptQueryObject, CryptMsgGetParam, CertFindCertificateInStore, CertGetNameStringW, CryptDecodeObject, CryptUnprotectData, CryptProtectData, CertFreeCertificateChain

DeleteObject, CreateCompatibleBitmap, DeleteDC, CreateCompatibleDC, SelectObject

GetCurrentThread, ResumeThread, GetThreadContext, SuspendThread, SearchPathW, GetSystemDirectoryW, QueryPerformanceCounter, GetModuleHandleA, QueryPerformanceFrequency, InterlockedCompareExchange, InterlockedDecrement, SleepEx, InitializeCriticalSectionAndSpinCount, CreateSemaphoreW, CloseHandle, WaitForSingleObject, ReleaseSemaphore, TlsFree, TlsSetValue, TlsGetValue, TlsAlloc, FreeLibrary, GetModuleFileNameA, MultiByteToWideChar, GetModuleFileNameW, GetFileTime, CreateFileA, GetFullPathNameA, DeleteFileW, MoveFileW, CopyFileW, CreateDirectoryW, GetVersionExW, FindClose, RemoveDirectoryW, FindNextFileW, FindFirstFileW, ExpandEnvironmentStringsA, FindNextFileA, FindFirstFileA, CompareFileTime, OpenProcess, ReadProcessMemory, ProcessIdToSessionId, GetConsoleWindow, SetConsoleScreenBufferSize, GetConsoleScreenBufferInfo, GetStdHandle, AllocConsole, Process32NextW, Process32FirstW, CreateToolhelp32Snapshot, Module32NextW, Module32FirstW, Thread32Next, Thread32First, GetCurrentProcess, CreateProcessA, DeleteFileA, GetProcessId, VirtualQuery, RtlCaptureContext, GetSystemInfo, TerminateProcess, DebugBreak, GetUserDefaultLangID, lstrcpynA, LockResource, LoadResource, FindResourceW, GetModuleHandleW, UnmapViewOfFile, QueryDosDeviceA, GetLogicalDriveStringsA, MapViewOfFile, CreateFileMappingW, GetFileSize, LoadLibraryExW, HeapSetInformation, CreateProcessW, lstrcmpA, CreateFileW, GetVersionExA, OpenSemaphoreA, CreateSemaphoreA, CreateEventW, SetEvent, ResetEvent, LockFileEx, UnlockFileEx, FlushInstructionCache, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, Sleep, RaiseException, LocalAlloc, GetSystemTimeAsFileTime, InterlockedExchangeAdd, GetLastError, LocalFree, InitializeCriticalSection, InterlockedIncrement, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, SetLastError, WideCharToMultiByte, OutputDebugStringA, GetCurrentProcessId, GetCurrentThreadId, GetSystemTime, FormatMessageA, GetTickCount, LoadLibraryA, GetProcAddress, InterlockedExchange, GetExitCodeProcess, GetFileAttributesW

DllMain

DllMain

CoCreateInstance

GetModuleBaseNameA, GetModuleInformation, EnumProcessModules, GetModuleFileNameExA, GetMappedFileNameA, EnumProcesses, EnumDeviceDrivers, GetProcessMemoryInfo, GetDeviceDriverBaseNameA

ShellExecuteExA

StrStrIA

SetForegroundWindow, GetSystemMenu, DeleteMenu, GetDesktopWindow, GetWindowThreadProcessId, ShowWindow, GetWindowTextA, MonitorFromPoint, EnumDisplayMonitors, GetForegroundWindow, GetParent, EnumWindows, MessageBoxExA, CloseDesktop, GetUserObjectInformationA, GetThreadDesktop, CloseClipboard, SetClipboardData, EmptyClipboard, OpenClipboard, PrintWindow, GetClientRect, GetWindowRect, GetDC, GetWindowDC, wsprintfW, MonitorFromWindow

GetFileVersionInfoSizeA, GetFileVersionInfoA, VerQueryValueA