kernel32
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
GetProcAddress
GetModuleHandleW
GetSystemDirectoryA
LoadLibraryA
VirtualAlloc
WideCharToMultiByte
MultiByteToWideChar
QueryFullProcessImageNameW
SetFilePointer
WriteFile
FlushFileBuffers
MoveFileExW
GetFileSize
ReadFile
GetModuleHandleA
VirtualQuery
GetSystemTimeAsFileTime
OpenProcess
lstrcatA
lstrcpyA
GlobalMemoryStatusEx
CreateEventW
LocalAlloc
LocalFree
WaitForDebugEvent
ContinueDebugEvent
HeapFree
ResumeThread
SetThreadContext
VirtualAllocEx
ReadProcessMemory
WriteProcessMemory
VirtualQueryEx
GetThreadContext
GetProcessHeap
HeapAlloc
DeleteFileW
GetTempPathW
CloseHandle
GetLastError
CreateFileW
Sleep
DeviceIoControl
GetSystemDirectoryW
CreateProcessW
TerminateProcess
WaitForSingleObject
GetCurrentProcess
GetCurrentProcessId
GetLongPathNameW
user32
EnumDisplayDevicesA
wsprintfW
advapi32
RegOpenKeyExW
OpenProcessToken
EnumServicesStatusExW
RegQueryValueExW
RegCloseKey
RegQueryValueExA
RegEnumKeyW
RegQueryInfoKeyW
LookupPrivilegeValueW
CreateProcessAsUserW
CloseServiceHandle
OpenSCManagerW
CreateWellKnownSid
ole32
CoInitializeEx
CoGetObject
CoCreateGuid
CoUninitialize
shlwapi
StrStrA
StrNCatA
StrStrIA
StrStrIW
StrChrA
StrCpyW
StrCmpNIW
StrCatW
PathAppendW
PathFileExistsW
PathAppendA
StrStrW
StrChrW
wininet
HttpOpenRequestW
InternetSetOptionW
HttpQueryInfoW
HttpSendRequestW
InternetReadFile
InternetCloseHandle
InternetCrackUrlW
InternetOpenW
InternetConnectW
InternetQueryOptionW
HttpAddRequestHeadersW
ntdll
NtClose
NtOpenSymbolicLinkObject
NtAllocateVirtualMemory
RtlAcquirePebLock
RtlReleasePebLock
LdrEnumerateLoadedModules
NtRemoveProcessDebug
DbgUiSetThreadDebugObject
NtDuplicateObject
NtQueryInformationToken
RtlSubAuthorityCountSid
RtlSubAuthoritySid
NtQueryInformationProcess
RtlGetVersion
NtQuerySymbolicLinkObject
rpcrt4
RpcAsyncInitializeHandle
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcStringFreeW
RpcBindingSetAuthInfoExW
RpcBindingFree
RpcAsyncCompleteCall
RpcRaiseException
NdrAsyncClientCall
generic
count=3,
id=259,
version=24123,
count=21,
id=203,
version=65501,
count=164,
id=1,
productName=Unmarked objects,
count=18,
id=265,
version=24215,
count=1,
id=255,
productName=VS2015 UPD3 build 24210,
version=24210,
count=1,
id=258,
productName=VS2015 UPD3.1 build 24215,
version=24215,