OpenProcessToken, GetSidSubAuthority, GetSidSubAuthorityCount, GetTokenInformation, OpenThreadToken, LookupAccountSidW, ConvertSidToStringSidW, RegQueryValueExW, RegQueryInfoKeyW, RegDeleteValueW, RegGetValueW, RegEnumValueW, RegOpenKeyExW, RegEnumKeyExW, LogonUserW, CopySid, RegCreateKeyExW, GetLengthSid, RegSetValueExW, GetUserNameW, CryptAcquireContextW, CryptSetKeyParam, CryptReleaseContext, CryptImportKey, CryptEncrypt, CryptDestroyKey, CryptDecrypt, CryptCreateHash, CryptDestroyHash, CryptHashData, CryptGetHashParam, DeregisterEventSource, ReportEventA, RegCloseKey, RegNotifyChangeKeyValue, RegOpenKeyExA, RegCreateKeyExA, CryptGenRandom, RegisterEventSourceA, RegSetValueExA, RegQueryValueExA

CredPackAuthenticationBufferW, CredUIPromptForWindowsCredentialsW

CryptMsgClose, CryptQueryObject, CertGetNameStringW, CertFreeCertificateContext, CryptBinaryToStringA, CryptStringToBinaryA, CertFindCertificateInStore, CertCloseStore, CryptMsgGetParam, CryptProtectData, CryptUnprotectData, PFXImportCertStore

SelectObject, GetBitmapBits, BitBlt, GetObjectA, CreateCompatibleBitmap, CreateDCA, CreateCompatibleDC, CreateFontW, GetObjectW, SetStretchBltMode, DeleteObject, SetBkMode, StretchBlt, GetDeviceCaps, DeleteDC, SetTextColor, GetStockObject

SetLastError, GetLastError, GetFileSizeEx, MultiByteToWideChar, LeaveCriticalSection, GetVersionExW, CreateEventA, InterlockedExchange, Sleep, InterlockedCompareExchange, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, EnterCriticalSection, IsDebuggerPresent, QueryPerformanceCounter, GetSystemTimeAsFileTime, WideCharToMultiByte, TlsSetValue, InitializeCriticalSection, WriteFile, FormatMessageA, ExpandEnvironmentStringsA, IsBadReadPtr, GetTickCount, OutputDebugStringW, GetTimeFormatA, WaitForSingleObject, VirtualQuery, UnmapViewOfFile, MapViewOfFile, TlsGetValue, SetFilePointer, CreateFileA, ResetEvent, CreateFileMappingA, GetModuleFileNameA, GetModuleHandleA, CreateMutexA, DeleteCriticalSection, RaiseException, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, GetFileType, GetStdHandle, GlobalMemoryStatus, GetVersionExA, GetCurrentThreadId, ReleaseMutex, TlsAlloc, CloseHandle, GetCurrentProcessId, TlsFree, SetUnhandledExceptionFilter, GlobalFree, K32GetModuleBaseNameA, ExpandEnvironmentStringsW, LCIDToLocaleName, OpenEventW, CreateToolhelp32Snapshot, Process32NextW, Process32FirstW, FindResourceExW, FindResourceW, LoadResource, CreateDirectoryW, SetEvent, SizeofResource, LockResource, GetModuleHandleW, FormatMessageW, lstrlenW, GetProcAddress, LocalAlloc, CreateEventW, MoveFileW, GetLocalTime, AreFileApisANSI, ReadFile, SetEndOfFile, FlushFileBuffers, GetFileSize, UnlockFile, LockFile, GetFileAttributesA, DeleteFileA, GetFileAttributesW, DeleteFileW, LoadLibraryA, LoadLibraryW, FreeLibrary, GetSystemTime, GetTempPathA, GetTempPathW, LocalFree, GetFullPathNameA, GetFullPathNameW, GetDiskFreeSpaceA, GetDiskFreeSpaceW, CreateFileW, LockFileEx, lstrcpynW, QueryPerformanceFrequency, GetModuleFileNameW, GetCurrentThread, InterlockedIncrement, InterlockedDecrement, GetConsoleWindow, CreateMutexW, TryEnterCriticalSection, TerminateThread, VerSetConditionMask, VerifyVersionInfoW, CreateProcessW, MulDiv, GetUserDefaultUILanguage, OutputDebugStringA, GetVersion, OpenProcess

TransparentBlt

DllMain

DllMain

ProgIDFromCLSID, CoTaskMemAlloc, CoInitialize, CoGetObject, StringFromGUID2, CoInitializeEx, OleRun, CoGetInterfaceAndReleaseStream, CoUninitialize, CoCreateInstance, CoTaskMemFree, CoMarshalInterThreadInterfaceInStream

EnumProcessModules, GetModuleInformation, GetModuleBaseNameA, GetModuleFileNameExA

GetUserNameExW

SHGetFolderPathW, SHGetKnownFolderPath, SHCreateAssociationRegistration, ShellExecuteW, ExtractIconExW

PathAppendW

GetClassInfoW, wsprintfW, RegisterClassW, LoadImageW, DestroyIcon, SetCursor, GetMessageW, LoadCursorW, MessageBoxA, GetParent, PostQuitMessage, DestroyWindow, GetIconInfo, PostMessageW, MoveWindow, GetWindowThreadProcessId, GetDesktopWindow, GetUserObjectInformationW, CopyRect, DefWindowProcW, CallWindowProcW, PhysicalToLogicalPoint, SetWindowTextW, UpdateWindow, MapWindowPoints, SendMessageW, GetDlgItemTextW, IsWindowVisible, GetSystemMetrics, IsWindowEnabled, EnumWindows, FillRect, IsDlgButtonChecked, GetCursor, SetProcessWindowStation, TranslateMessage, GetProcessWindowStation, OpenDesktopW, CloseDesktop, SwitchDesktop, OpenWindowStationW, EnableWindow, MessageBoxW, GetWindowTextLengthW, SetTimer, ScreenToClient, GetWindowRect, GetWindowDC, IsIconic, IsChild, DrawTextW, KillTimer, DialogBoxIndirectParamW, SetForegroundWindow, DialogBoxParamW, AttachThreadInput, CallNextHookEx, GetWindowInfo, SubtractRect, GetClientRect, SetFocus, IsProcessDPIAware, BeginPaint, GetUpdateRect, GetDC, GetForegroundWindow, LoadIconW, CreateDialogIndirectParamW, IntersectRect, GetWindowLongW, GetWindowTextW, SystemParametersInfoW, GetClassNameW, ReleaseDC, GetDlgItem, SetWindowLongW, EndDialog, RedrawWindow, SetWindowPos, LoadStringW, ShowWindow, CreateDialogParamW, GetActiveWindow, CreateWindowExW, SetWindowsHookExW, EqualRect, UnhookWindowsHookEx, EndPaint, IsWindow, IsDialogMessageW, PeekMessageW, PostThreadMessageW, DispatchMessageW, CloseWindowStation

VerQueryValueW, GetFileVersionInfoW, GetFileVersionInfoSizeW

WinBioLockUnit, WinBioControlUnit, WinBioEnrollDiscard, WinBioUnlockUnit, WinBioEnumEnrollments, WinBioCloseSession, WinBioDeleteTemplate, WinBioEnumBiometricUnits, WinBioEnrollCommit, WinBioRemoveCredential, WinBioSetCredential, WinBioEnrollBegin, WinBioEnrollCaptureWithCallback, WinBioVerifyWithCallback, WinBioRegisterEventMonitor, WinBioCancel, WinBioWait, WinBioFree, WinBioOpenSession

WinHttpSendRequest, WinHttpReadData, WinHttpQueryHeaders, WinHttpOpenRequest, WinHttpWriteData, WinHttpOpen, WinHttpSetOption, WinHttpGetProxyForUrl, WinHttpGetIEProxyConfigForCurrentUser, WinHttpCloseHandle, WinHttpReceiveResponse, WinHttpConnect

InternetCheckConnectionW

WinVerifyTrust

WTSRegisterSessionNotification, WTSUnRegisterSessionNotification