I don't think Scanbin checks hard-coded address references. These require *32.dll and *.exe to be a matched set from the same build. I recall seeing such references in an NT User32.dll some years ago.
You really should be using versions of dlls that were released together and already match. Otherwise, early versions of ImportPatcher can update hints automatically. Binding the dlls is even better.
Even with a USB mouse attached, the PS/2 trackpad is still active and apparently malfunctioning. In Device Manager > Mouse, disable PS/2 Compatible Mouse Port and reboot to disable the trackpad.
Other googlebot UAs to try (and how YouTube violates Google anti-sniffing recommendations): https://webmasters.googleblog.com/2019/10/updating-user-agent-of-googlebot.html
Explorer works just fine if you don't intentionally break it. End of discussion.
DCFG1 is obsolete, use BASE instead.
What definitions are you using in stubs.ini?
Explorer.exe doesn't need kex, so set to disabled or Base at most. If extensions need kex, set them directly.
Don't use 4.5.2 core.ini with any kex files for which an updated core.ini has been supplied.
. = current folder
.. = parent folder
Another Msimg32 to try is from KernelEx (Win9x). It doesn't use forwarding and has fewer dependencies.
When upgrading Gdi32.dll / User32.dll, also upgrade with matching Gdi.exe / User.exe.