LookupAccountNameW, GetSidIdentifierAuthority, GetSidSubAuthorityCount, GetSidSubAuthority, IsValidSid, RegOpenCurrentUser, RegQueryValueExW, RegEnumValueW, ReportEventA, RegisterEventSourceA, RegSetValueExA, RegCreateKeyExA, DeregisterEventSource, OpenProcessToken, GetTokenInformation, GetLengthSid, CopySid, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW

CreateCompatibleDC, GetDeviceCaps, CreateCompatibleBitmap, SelectObject, GetObjectA, BitBlt, GetBitmapBits, DeleteObject, DeleteDC, CreateDCA

SendARP

TlsAlloc, TlsFree, TlsGetValue, TlsSetValue, InterlockedCompareExchange, TerminateProcess, WideCharToMultiByte, OutputDebugStringA, GetProcessHeap, HeapFree, GetThreadLocale, SetThreadLocale, GetModuleHandleW, LoadLibraryExW, FindResourceW, LoadResource, SizeofResource, MultiByteToWideChar, FreeLibrary, InterlockedDecrement, InterlockedIncrement, GetModuleFileNameW, lstrcmpiW, GetLastError, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, GetFileInformationByHandle, GetShortPathNameW, FindNextFileW, SetFileTime, GetFileTime, CopyFileA, MoveFileA, FindFirstFileW, CopyFileW, EnterCriticalSection, CreateHardLinkA, CreateDirectoryA, DeleteFileA, RemoveDirectoryA, GetFullPathNameA, GetCurrentDirectoryA, GetDiskFreeSpaceExA, CreateFileA, GetFileAttributesExA, CreateHardLinkW, FormatMessageA, DeleteFileW, RemoveDirectoryW, GetFullPathNameW, GetDiskFreeSpaceExW, CreateFileW, GetFileAttributesExW, GetFileAttributesW, GetFileAttributesA, GetModuleHandleA, QueryPerformanceCounter, GetTickCount, GetCurrentProcessId, GetSystemTimeAsFileTime, GetACP, GetLocaleInfoA, GetVersionExA, LocalFree, FormatMessageW, GetVersion, GetFileType, GetStdHandle, GlobalFree, SleepEx, GetProcAddress, LoadLibraryA, SetLastError, ReleaseMutex, TerminateThread, GetExitCodeThread, WaitForMultipleObjects, CreateMutexA, DuplicateHandle, ExpandEnvironmentStringsA, ReadFile, PeekNamedPipe, lstrlenA, GetSystemDirectoryA, GlobalMemoryStatus, FindNextFileA, FindFirstFileA, FindClose, FlushConsoleInputBuffer, GetCurrentDirectoryW, GetTempPathW, GetModuleFileNameA, GetLocaleInfoW, GetSystemDefaultLangID, GetUserDefaultLangID, GetSystemDefaultUILanguage, GetUserDefaultUILanguage, LoadLibraryW, ResetEvent, SetEvent, CreateEventA, CreateThread, WaitForSingleObject, Sleep, GetCurrentThreadId, GetCurrentProcess, CloseHandle, CreateDirectoryW, HeapAlloc, RaiseException, lstrlenW, DebugBreak, MoveFileW, VirtualQuery, InterlockedExchange

DllMain

DllMain

NetWkstaUserGetInfo, NetApiBufferFree

CoTaskMemAlloc, CoTaskMemRealloc, CoTaskMemFree, HWND_UserSize, StringFromGUID2, CoCreateInstance, HWND_UserMarshal, HWND_UserFree, HWND_UserUnmarshal

CStdStubBuffer_Invoke, CStdStubBuffer_DebugServerQueryInterface, CStdStubBuffer_DebugServerRelease, CStdStubBuffer_IsIIDSupported, CStdStubBuffer_CountRefs, CStdStubBuffer_Disconnect, NdrDllRegisterProxy, NdrCStdStubBuffer_Release, NdrDllCanUnloadNow, NdrDllGetClassObject, NdrOleAllocate, NdrOleFree, IUnknown_QueryInterface_Proxy, IUnknown_AddRef_Proxy, CStdStubBuffer_Connect, CStdStubBuffer_AddRef, CStdStubBuffer_QueryInterface, IUnknown_Release_Proxy, NdrDllUnregisterProxy

SHGetFolderPathW, SHGetSpecialFolderPathW, SHCreateDirectoryExW, ShellExecuteW

UrlIsW, PathIsUNCW, UrlCombineW, PathIsURLW, UrlCreateFromPathW, UrlCanonicalizeW, PathCreateFromUrlW, UrlHashW

wsprintfW, UnregisterClassA, CharNextW, GetUserObjectInformationW, GetProcessWindowStation, GetDesktopWindow, MessageBoxA

GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueW

WinHttpOpen, WinHttpGetProxyForUrl, WinHttpGetDefaultProxyConfiguration, WinHttpGetIEProxyConfigForCurrentUser, WinHttpCloseHandle

InternetGetCookieA, InternetGetConnectedState, InternetSetCookieA