CreateProcessAsUserW, ImpersonateLoggedOnUser, OpenProcessToken, RegCloseKey, RegOpenKeyExW, RegQueryValueExW, DuplicateTokenEx, OpenThreadToken, ImpersonateSelf, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, AdjustTokenPrivileges, LookupPrivilegeValueW, FreeSid, SetNamedSecurityInfoW, SetEntriesInAclW, AllocateAndInitializeSid, RegQueryValueExA, RegOpenKeyExA, RevertToSelf

DeleteEnhMetaFile, SetEnhMetaFileBits, LineTo, MoveToEx, CreatePen, Rectangle, SelectClipRgn, CreateRectRgn, SetTextColor, CreateFontW, GetDeviceCaps, SetBkMode, FillPath, CreateSolidBrush, EndPath, TextOutW, BeginPath, ModifyWorldTransform, SetWorldTransform, GetTextExtentPoint32W, SetROP2, CreateFontIndirectW, EnumFontFamiliesExW, SetGraphicsMode, PlayEnhMetaFile, GetBkColor, GetStockObject, IntersectClipRect, CreateCompatibleDC, SelectObject, GetObjectW, DPtoLP, CreateBitmap, CreateCompatibleBitmap, GetMapMode, SetMapMode, BitBlt, SetBkColor, DeleteObject, DeleteDC, ExtTextOutW, GetTextMetricsW

GetModuleHandleW, GetProcAddress, GetFileAttributesW, GetVersion, GetModuleFileNameW, MultiByteToWideChar, HeapFree, GetProcessHeap, HeapReAlloc, HeapAlloc, GetPrivateProfileStringW, LocalFree, GetPrivateProfileSectionW, LocalAlloc, InterlockedExchange, Sleep, InterlockedCompareExchange, OutputDebugStringA, RtlUnwind, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, LoadLibraryA, lstrlenA, ReleaseMutex, CreateMutexW, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, InitializeCriticalSection, GlobalLock, GlobalHandle, CopyFileW, DeleteFileW, GetUserDefaultLangID, FileTimeToSystemTime, GetWindowsDirectoryW, FindFirstFileW, FindNextFileW, FindClose, OutputDebugStringW, GetLocalTime, WideCharToMultiByte, GlobalAlloc, GlobalFree, CreateDirectoryW, CreateFileW, GetModuleHandleA, SetLastError, WTSGetActiveConsoleSessionId, GetCurrentThread, GetExitCodeThread, GetVersionExW, CreateThread, InterlockedDecrement, InterlockedIncrement, WaitForSingleObject, GetSystemDirectoryW, lstrcmpiW, GetNumberFormatW, lstrlenW, MulDiv, lstrcmpW, FindResourceW, LoadResource, LockResource, SizeofResource, GetSystemDefaultLCID, GetLastError, GetPrivateProfileIntW, OpenProcess, CloseHandle, CreateProcessW, LoadLibraryW, FreeLibrary

DllMain

CoUninitialize, CoInitialize, CoTaskMemAlloc, OleRun, CoCreateInstance

EnumProcesses, GetModuleBaseNameW, EnumProcessModules

ShellExecuteW, SHGetSpecialFolderPathW

StrRStrIW, StrCmpIW, StrStrIW

DrawFocusRect, LoadIconW, KillTimer, IsWindow, GetTopWindow, ShowWindow, SetDlgItemInt, PostMessageW, IsDlgButtonChecked, LoadBitmapW, UpdateWindow, SetWindowPos, BringWindowToTop, SetForegroundWindow, SetWindowTextW, WaitForInputIdle, FrameRect, EndDialog, DialogBoxParamW, ScreenToClient, CallWindowProcW, CreateWindowExW, InflateRect, GetDlgItemInt, DrawTextW, GetDlgItemTextW, ClientToScreen, SetRect, PtInRect, GetDlgCtrlID, IsWindowVisible, IsWindowEnabled, LoadStringW, SetCursor, FillRect, GetDialogBaseUnits, GetCursorPos, DispatchMessageW, TranslateMessage, SetFocus, PeekMessageW, EnableWindow, EnumChildWindows, SetWindowLongW, SendMessageW, GetParent, GetWindowLongW, ReleaseDC, GetWindowRect, GetClientRect, GetDC, SetDlgItemTextW, LoadCursorW, MoveWindow, CreateDialogParamW, TrackMouseEvent, MessageBoxW, SendDlgItemMessageW, GetDlgItem, DestroyIcon, DrawIconEx, LoadImageW, InvalidateRect

CreateEnvironmentBlock, DestroyEnvironmentBlock

GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW

DeviceCapabilitiesW, GetPrinterW, OpenPrinterW, ClosePrinter, GetPrinterDriverW, EnumPrintersW, AddPrinterW, AddPrinterDriverExW, AddMonitorW, EnumMonitorsW, AddFormW, DeleteFormW, DeletePrinterDataW, XcvDataW, SetPrinterW, EnumFormsW, GetFormW, SetPrinterDataW, GetPrinterDataW, GetJobW, GetPrinterDriverDirectoryW

WTSQueryUserToken