RegEnumKeyExW, InitializeSecurityDescriptor, RegQueryInfoKeyW, RegCloseKey, RegQueryValueExW, RegEnumValueW, RegOpenKeyExW, RegOpenKeyW, OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, RegSetValueExW, RegCreateKeyExW, GetTokenInformation, LookupAccountSidW, RegDeleteValueW, RegDeleteKeyW, EnumServicesStatusW, OpenSCManagerW, CloseServiceHandle, OpenServiceW, QueryServiceConfigW, ControlService, ChangeServiceConfigW, ImpersonateLoggedOnUser, RevertToSelf, FreeSid, AllocateAndInitializeSid, GetLengthSid, GetKernelObjectSecurity, SetSecurityDescriptorDacl, EqualSid

ImageEnumerateCertificates, ImageGetCertificateData, ImageGetCertificateHeader

SetEvent, CloseHandle, GetModuleHandleW, GetProcAddress, DeleteCriticalSection, SetCurrentDirectoryW, GetCurrentDirectoryW, GetTickCount, CreateFileMappingW, InterlockedDecrement, QueryPerformanceCounter, ReleaseMutex, InterlockedIncrement, GetCurrentThreadId, MapViewOfFile, RaiseException, UnmapViewOfFile, GetCurrentThread, SetLastError, WaitForMultipleObjects, SetThreadPriority, FlushInstructionCache, GetFileAttributesExW, CreateFileW, CreateDirectoryW, WriteFile, GetFileSize, IsBadReadPtr, lstrcpynA, GetTempPathW, GetWindowsDirectoryW, GetSystemDirectoryW, WideCharToMultiByte, ReadFile, ExpandEnvironmentStringsW, OpenEventW, lstrlenW, OpenFileMappingW, FindNextFileW, TerminateProcess, LoadLibraryW, OpenProcess, GetSystemTime, GetLongPathNameW, ReadProcessMemory, InitializeCriticalSection, lstrcpynW, SystemTimeToTzSpecificLocalTime, GetThreadLocale, SetThreadLocale, GetDriveTypeW, GetPrivateProfileStringW, GetFileSizeEx, FileTimeToLocalFileTime, GetVersion, lstrcmpiW, CreateEventW, CreateRemoteThread, Thread32First, GetLastError, Module32FirstW, Module32NextW, Thread32Next, GetSystemInfo, VirtualQueryEx, GetLogicalDriveStringsW, QueryDosDeviceW, SuspendThread, VirtualAlloc, InterlockedExchange, VirtualFree, VirtualAllocEx, DuplicateHandle, WriteProcessMemory, VirtualFreeEx, LocalAlloc, LocalFree, GetThreadContext, ResumeThread, VirtualProtectEx, GetExitCodeThread, lstrcpyW, LoadLibraryA, lstrcatA, lstrcpyA, lstrlenA, ReleaseSemaphore, CreatePipe, CreateSemaphoreW, VirtualProtect, HeapAlloc, GetProcessHeap, HeapFree, GetModuleFileNameA, GetModuleHandleA, DeviceIoControl, CreateProcessW, ResetEvent, GetModuleFileNameW, WaitForSingleObject, Process32NextW, Process32FirstW, GetVersionExW, MultiByteToWideChar, GetCurrentProcessId, FindResourceExW, LoadResource, LockResource, SizeofResource, GetFileAttributesW, GetCurrentProcess, CreateMutexW, FindResourceW, lstrcmpA, TerminateThread, Sleep, EnterCriticalSection, LeaveCriticalSection, FindClose, CreateThread, OpenThread, FindFirstFileW, VirtualQuery, FileTimeToSystemTime, CreateToolhelp32Snapshot, GetVersionExA, HeapDestroy, HeapReAlloc, HeapSize, GetACP, GetLocaleInfoA, InterlockedCompareExchange, IsProcessorFeaturePresent, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetSystemTimeAsFileTime, FreeLibrary, DeleteFileW, CreateProcessA, IsBadWritePtr, OpenMutexW

DllMain

DllMain

CoCreateInstance, CoLoadLibrary, CoSetProxyBlanket, CLSIDFromString, CoCreateGuid, OleRun, CoFreeLibrary, CoInitialize, CoUninitialize, StringFromGUID2

GetModuleInformation, GetModuleFileNameExW, EnumProcessModules

SHGetSpecialFolderPathW, ExtractIconExW, ShellExecuteW

PathRemoveFileSpecW, PathStripPathW

GetWindowLongW, GetClassInfoExW, RegisterClassExW, LoadCursorW, UnregisterClassA, GetWindow, GetWindowTextW, GetDesktopWindow, EnumWindows, DispatchMessageW, TranslateMessage, PeekMessageW, IsWindowVisible, GetForegroundWindow, OpenInputDesktop, CloseDesktop, GetClassNameW, EnumDesktopWindows, GetWindowThreadProcessId, SetTimer, KillTimer, CreateWindowExW, PostMessageW, DestroyWindow, IsWindow, CallWindowProcW, DefWindowProcW, SetWindowLongW, GetUserObjectInformationA, GetThreadDesktop, MsgWaitForMultipleObjects

GetFileVersionInfoW, VerQueryValueW, GetFileVersionInfoSizeW