kernel32
CreateDirectoryW
ReadFile
FindFirstFileW
HeapFree
SetLastError
GetFullPathNameW
FindNextFileW
GetCurrentProcess
WriteFile
RemoveDirectoryW
SetFilePointer
SetEndOfFile
GetTempPathW
FindClose
CreateFileW
GetFileAttributesW
DeleteFileW
HeapAlloc
GetCurrentDirectoryW
SetCurrentDirectoryW
MoveFileExW
GetFileSize
GetProcessHeap
WideCharToMultiByte
SystemTimeToTzSpecificLocalTime
GetTempFileNameW
MoveFileW
FlushFileBuffers
TryEnterCriticalSection
SuspendThread
ResumeThread
SetEvent
ResetEvent
SwitchToThread
GetModuleFileNameA
GetDynamicTimeZoneInformation
GetModuleHandleExA
GetTimeZoneInformation
LocalFileTimeToFileTime
OutputDebugStringW
LoadLibraryA
QueryPerformanceFrequency
FileTimeToLocalFileTime
GetProcAddress
GetModuleHandleW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleHandleA
CancelIo
CreateNamedPipeW
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
ConnectNamedPipe
OutputDebugStringA
CreateProcessW
CreateThread
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
GetModuleHandleExW
RtlCaptureStackBackTrace
SystemTimeToFileTime
FreeLibrary
LoadLibraryW
CreateMutexW
ReleaseMutex
OpenProcess
GetTickCount
GetFileTime
GetExitCodeThread
OpenThread
HeapSize
WriteProcessMemory
VirtualFree
VirtualAlloc
HeapLock
LoadLibraryExA
Thread32Next
MultiByteToWideChar
CreateToolhelp32Snapshot
GetSystemInfo
ReadProcessMemory
HeapUnlock
VirtualProtect
ReleaseSemaphore
TerminateProcess
WaitForMultipleObjects
Process32NextW
CreateFileA
Process32FirstW
GetWindowsDirectoryW
VerSetConditionMask
CreateSemaphoreW
FlushInstructionCache
VerifyVersionInfoW
CreateDirectoryA
SetDllDirectoryW
VirtualQuery
LoadLibraryExW
SetErrorMode
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GlobalAlloc
GlobalFree
GetTimeFormatW
GetDateFormatW
RtlUnwind
InterlockedPopEntrySList
LCMapStringW
GetCommandLineW
GetCommandLineA
GetLocaleInfoW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitProcess
CloseHandle
PulseEvent
GlobalMemoryStatusEx
TerminateThread
Sleep
CreateEventW
WaitForSingleObject
FormatMessageA
GetCurrentProcessId
DeleteCriticalSection
LocalFree
DecodePointer
RaiseException
GetLastError
CompareStringA
FormatMessageW
GetCurrentThreadId
InitializeCriticalSectionEx
GetModuleFileNameW
CompareStringW
FileTimeToSystemTime
GetExitCodeProcess
IsBadReadPtr
K32GetModuleBaseNameW
GetEnvironmentVariableW
AddVectoredContinueHandler
MapViewOfFile
CreateFileMappingW
GetStdHandle
GetConsoleMode
GetConsoleCP
UnmapViewOfFile
OpenFileMappingW
HeapDestroy
FindResourceW
LoadResource
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
FreeLibraryAndExitThread
ExitThread
FindResourceExW
LockResource
SizeofResource
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
SetStdHandle
HeapReAlloc
SetFilePointerEx
GetFileSizeEx
Thread32First
SetConsoleCtrlHandler
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetStringTypeW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WaitForSingleObjectEx
InitOnceComplete
InitOnceBeginInitialize
EncodePointer
LCMapStringEx
GetTickCount64
GetCPInfo
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
InterlockedPushEntrySList
user32
LoadStringW
LoadStringA
GetMessageW
KillTimer
CharUpperW
wsprintfW
MessageBoxW
GetProcessWindowStation
UnregisterClassW
DispatchMessageW
SetTimer
TranslateMessage
PostThreadMessageW
GetClassInfoExW
EnumThreadWindows
LoadCursorW
MsgWaitForMultipleObjectsEx
PeekMessageW
GetUserObjectInformationA
RegisterClassExW
GetWindowLongPtrW
CreateWindowExW
SetWindowLongPtrW
IsWindow
DestroyWindow
SendMessageTimeoutW
CallWindowProcW
DefWindowProcW
IsWindowVisible
advapi32
RegCloseKey
RevertToSelf
SetTokenInformation
AllocateAndInitializeSid
CreateWellKnownSid
ImpersonateLoggedOnUser
CreateRestrictedToken
FreeSid
DuplicateTokenEx
ConvertSidToStringSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegEnumKeyExW
RegOpenKeyExW
RegGetValueW
OpenProcessToken
GetTokenInformation
shell32
SHGetSpecialFolderPathA
SHGetFolderPathW
SHGetSpecialFolderPathW
SHGetKnownFolderPath
ole32
CoInitializeEx
CoTaskMemFree
CoCreateInstance
CLSIDFromString
CoCreateGuid
StringFromCLSID
oleaut32
VariantChangeType
VariantClear
shlwapi
PathIsRelativeW
PathAppendW
PathFileExistsW
mapi32
ord11
ord21
ord23
ord140
ord19
ord17
psapi
GetModuleFileNameExW
GetModuleInformation
EnumProcessModules
winmm
timeGetTime
timeEndPeriod
timeBeginPeriod
wintrust
WinVerifyTrust
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
crypt32
CertGetNameStringW
rpcrt4
UuidToStringA
RpcStringFreeA
generic
count=11,
id=259,
version=26715,
count=194,
id=261,
version=26715,
count=19,
id=260,
version=30034,
count=10,
id=259,
version=30034,
count=108,
id=261,
version=30034,
count=3,
id=253,
version=28518,
count=30,
id=260,
version=26715,
count=2,
id=262,
version=26715,
count=31,
id=257,
version=26715,
count=356,
id=1,
productName=Unmarked objects,
count=55,
id=265,
version=30159,
count=1,
id=256,
version=30159,
count=1,
id=255,
version=30159,
count=1,
id=151,
count=1,
id=258,
version=30159,