RegCloseKey, RegQueryValueExW, RegOpenKeyExW, DeregisterEventSource, ReportEventA, RegisterEventSourceA, RegSetValueExW, RegCreateKeyW, RegisterEventSourceW, ReportEventW, FreeSid, AllocateAndInitializeSid, SetSecurityDescriptorDacl, LookupAccountSidW, OpenProcessToken, GetTokenInformation, RevertToSelf, SetThreadToken, ImpersonateLoggedOnUser, DuplicateTokenEx, LogonUserW, CreateProcessAsUserW, InitializeSecurityDescriptor

GetDeviceCaps, CreateCompatibleBitmap, SelectObject, GetObjectA, BitBlt, GetBitmapBits, DeleteObject, DeleteDC, CreateDCA, CreateCompatibleDC

GetDriveTypeW, GetFullPathNameA, GetCurrentDirectoryA, GetCurrentDirectoryW, SetCurrentDirectoryA, SetCurrentDirectoryW, GetEnvironmentVariableA, GetEnvironmentVariableW, SetEnvironmentVariableA, SetEnvironmentVariableW, LocalFree, MoveFileExW, TlsSetValue, IsProcessorFeaturePresent, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, DisableThreadLibraryCalls, DecodePointer, EncodePointer, CreateNamedPipeA, CreatePipe, UnlockFileEx, UnlockFile, LockFileEx, LockFile, InterlockedCompareExchange, InterlockedDecrement, InterlockedExchangeAdd, GetHandleInformation, CreateProcessA, InterlockedIncrement, GetModuleFileNameA, ReleaseSemaphore, CreateSemaphoreA, InterlockedExchange, TlsGetValue, GetCurrentThread, GetCommandLineW, GetEnvironmentStringsW, FreeEnvironmentStringsW, TlsFree, TlsAlloc, SystemTimeToTzSpecificLocalTime, SystemTimeToFileTime, FileTimeToLocalFileTime, FileTimeToSystemTime, GetSystemTimeAsFileTime, GetTimeZoneInformation, SetEndOfFile, LeaveCriticalSection, SetEvent, ReleaseMutex, EnterCriticalSection, InitializeCriticalSection, CreateMutexA, DeleteCriticalSection, CreateEventA, WriteFile, DuplicateHandle, MoveFileA, DeleteFileW, DeleteFileA, CreateFileA, SetFilePointer, SetStdHandle, DeviceIoControl, GetFullPathNameW, GetDriveTypeA, GetFileTime, SetFileTime, GetFileAttributesW, GetFileAttributesA, SetFileAttributesW, SetFileAttributesA, GetFileInformationByHandle, RemoveDirectoryW, RemoveDirectoryA, CreateDirectoryW, CreateDirectoryA, FindFirstFileW, FindNextFileW, GetTimeFormatW, GetLocalTime, GetDateFormatW, OutputDebugStringW, GetTempFileNameW, GetConsoleScreenBufferInfo, GetTempPathW, CreateHardLinkW, GetOEMCP, GetACP, WideCharToMultiByte, GetVersionExA, GlobalMemoryStatus, QueryPerformanceCounter, FindClose, FindFirstFileA, FindNextFileA, FlushConsoleInputBuffer, GetVersion, GetModuleHandleA, MultiByteToWideChar, ExpandEnvironmentStringsA, GetTickCount, Sleep, GetStdHandle, GetFileType, WaitForMultipleObjects, PeekNamedPipe, GetSystemDirectoryA, SleepEx, FormatMessageA, SetLastError, LoadLibraryA, GetWindowsDirectoryW, GetSystemDirectoryW, GetCurrentProcess, GetModuleHandleW, GetModuleFileNameW, GetVersionExW, GetCurrentProcessId, GetComputerNameW, LoadLibraryW, FormatMessageW, GetProcAddress, OpenProcess, GlobalAlloc, GlobalFree, FreeLibrary, CreateProcessW, TerminateProcess, GetExitCodeProcess, CreateEventW, ReadFile, WaitForSingleObject, GetOverlappedResult, ResetEvent, CreateNamedPipeW, GetLastError, CreateFileW, SetHandleInformation, CloseHandle, GetCurrentThreadId

WNetAddConnection2W, WNetCancelConnection2W

DllMain

SHGetFolderPathW

SetProcessWindowStation, CloseDesktop, GetDesktopWindow, GetProcessWindowStation, GetThreadDesktop, GetUserObjectInformationW, OpenWindowStationW, OpenDesktopW, SetThreadDesktop, CloseWindowStation, MessageBoxA

GetFileVersionInfoSizeW, VerQueryValueW, GetFileVersionInfoW