RegEnumValueW, RegSetValueExW, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, MakeAbsoluteSD, ConvertStringSidToSidW, OpenProcessToken, AdjustTokenPrivileges, LookupPrivilegeValueW, GetSecurityInfo, AddAccessAllowedAce, InitializeAcl, GetAce, SetKernelObjectSecurity, DuplicateTokenEx, LookupAccountNameW, EqualSid, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, CreateProcessAsUserW, RegOpenCurrentUser, RegCloseKey, RegEnumKeyW, RevertToSelf, ImpersonateLoggedOnUser, ImpersonateNamedPipeClient, OpenThreadToken, GetTokenInformation, GetSecurityDescriptorSacl, SetSecurityInfo, RegDeleteValueW

FileTimeToSystemTime, UnmapViewOfFile, CreateThread, GetCurrentProcess, CloseHandle, LoadLibraryW, ResetEvent, CreateFileMappingW, GetModuleFileNameW, WaitForMultipleObjects, FileTimeToLocalFileTime, GetExitCodeThread, CreateMutexW, LeaveCriticalSection, CreateEventW, GetCurrentProcessId, MapViewOfFile, FreeLibrary, GetExitCodeProcess, GetProcessTimes, OpenEventW, GetEnvironmentVariableW, GetProcAddress, SetLastError, ReleaseMutex, SetEvent, GetLastError, OpenMutexW, WaitForSingleObject, FreeLibraryAndExitThread, GetCurrentThreadId, EnterCriticalSection, Sleep, InitializeCriticalSectionAndSpinCount, QueryPerformanceCounter, HeapFree, GetCommandLineW, ExitThread, GetLocalTime, SetThreadPriority, WaitForSingleObjectEx, SetEndOfFile, DeleteFileW, HeapAlloc, HeapDestroy, HeapCreate, SystemTimeToFileTime, GetFileSizeEx, MoveFileExW, GetSystemTime, QueryPerformanceFrequency, LocalAlloc, LoadLibraryA, RaiseException, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetSystemTimeAsFileTime, GetTickCount, CreateProcessW, DeleteCriticalSection, SetFilePointerEx, InitializeCriticalSection, CompareFileTime, OpenThread, TlsAlloc, TlsFree, TlsGetValue, TlsSetValue, InterlockedCompareExchange, GetProcessAffinityMask, GetCurrentThread, GetFileAttributesW, SearchPathW, CreateFileW, WaitNamedPipeW, QueueUserAPC, WriteFile, ReadFile, GetModuleHandleW, GetComputerNameW, GetVersion, LocalFree, MultiByteToWideChar, FindClose, FindFirstFileW, DuplicateHandle, CopyFileW, VirtualAlloc, VirtualFree, GetCurrentDirectoryW, OutputDebugStringW, SetEnvironmentVariableW, GetWindowsDirectoryW, GetTempPathW, CreateDirectoryW, GetEnvironmentStringsW, GetVersionExW, GetPrivateProfileStringW, GetPrivateProfileIntW, WideCharToMultiByte, LoadLibraryExW, lstrcpynW, VerLanguageNameW, QueueUserWorkItem, InterlockedExchange, GetFileSize, GetShortPathNameW, VirtualQuery, OpenFileMappingW, GlobalFree, GlobalAlloc, GlobalUnlock, GlobalLock, GlobalSize, IsBadWritePtr, IsBadReadPtr

DllMain

DllMain

RtlGetVersion, ZwResetEvent, ZwOpenKey, ZwCreateFile, ZwOpenFile, ZwSetValueKey, ZwQueryValueKey, ZwQueryInformationFile, ZwFlushBuffersFile, ZwOpenEvent, ZwWaitForSingleObject, RtlFreeUnicodeString, ZwQueryInformationProcess, ZwDelayExecution, ZwCreateEvent, ZwReadFile, ZwWriteFile, ZwReleaseMutant, ZwCreateKey, RtlInitUnicodeString, RtlFormatCurrentUserKeyPath, ZwSetInformationFile, ZwYieldExecution, ZwQueryInformationThread, ZwOpenThread, _wcsicmp, wcsncpy, ZwCreateSection, ZwCreateMutant, wcsstr, wcslen, _snwprintf, ZwClose, ZwOpenMutant, _itow, ZwSetEvent, ZwQueryFullAttributesFile, ZwWaitForMultipleObjects, ZwQueryKey, memset, RtlUnwind, _alldiv, _allmul, _chkstk, _fltused, memcpy

CoInitialize, CoUninitialize

CommandLineToArgvW, SHGetSpecialFolderPathW

GetWindowThreadProcessId, AllowSetForegroundWindow, wsprintfW, WaitForInputIdle, FindWindowW, SendMessageW, CharUpperBuffW, CharUpperBuffA, CharLowerBuffA, LoadStringW, RegisterWindowMessageW, MessageBoxW, CharLowerBuffW, MsgWaitForMultipleObjects, DispatchMessageW, TranslateMessage, PeekMessageW

CreateEnvironmentBlock, DestroyEnvironmentBlock

GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW