ntdll
RtlLookupFunctionEntry
RtlUnwindEx
RtlGetVersion
VerSetConditionMask
RtlPcToFileHeader
RtlCaptureContext
RtlVirtualUnwind
RtlUnwind
tbs
Tbsip_Context_Close
Tbsi_Context_Create
Tbsip_Submit_Command
crypt32
CertFindExtension
CertFreeCTLContext
CertAddCertificateContextToStore
CertFreeCRLContext
PFXImportCertStore
CryptStringToBinaryW
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CryptDecodeObjectEx
CertFreeCertificateContext
CryptHashPublicKeyInfo
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CryptQueryObject
CryptUnprotectData
CryptProtectData
CertGetNameStringW
bcrypt
BCryptFinalizeKeyPair
BCryptCreateHash
BCryptHashData
BCryptDestroyHash
BCryptFinishHash
BCryptGenRandom
BCryptGenerateSymmetricKey
BCryptSetProperty
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
BCryptDestroyKey
BCryptEncrypt
BCryptGenerateKeyPair
BCryptImportKeyPair
BCryptExportKey
BCryptDecrypt
shell32
SHGetFolderPathW
SHGetKnownFolderPath
SHGetFolderPathA
ShellExecuteW
kernel32
DeleteFileA
CloseHandle
CreateThread
LoadResource
FindResourceW
SetFileAttributesA
GetLocalTime
GetProcAddress
LocalFree
ExitProcess
GetModuleHandleW
GetSystemTimeAsFileTime
CreateDirectoryA
FlushFileBuffers
SetFilePointer
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
OpenProcess
MoveFileExA
GetCurrentProcess
lstrcpynW
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
Module32FirstW
lstrcpynA
WideCharToMultiByte
Module32NextW
QueryFullProcessImageNameW
GetTickCount
K32GetModuleInformation
K32EnumProcessModules
SetUnhandledExceptionFilter
WriteProcessMemory
GetModuleFileNameW
GetTempPathW
GetEnvironmentVariableA
WaitForSingleObject
FreeEnvironmentStringsW
ResumeThread
SetDllDirectoryA
DeleteFileW
LoadLibraryW
VirtualProtectEx
GetThreadContext
VirtualAllocEx
ReadProcessMemory
SetEnvironmentVariableA
CreateProcessW
CreateProcessA
SetThreadContext
GetEnvironmentStringsW
GetFileAttributesW
MoveFileExW
GetSystemFirmwareTable
GetVolumeInformationA
SetFileAttributesW
FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryA
FreeLibrary
GetModuleHandleA
GetProcessHeap
HeapAlloc
HeapFree
SetFilePointerEx
VirtualAlloc
VirtualFree
EnumSystemFirmwareTables
K32EnumDeviceDrivers
K32GetDeviceDriverBaseNameA
OpenMutexA
GetLogicalProcessorInformationEx
IsProcessorFeaturePresent
LoadLibraryA
GetTickCount64
InitializeCriticalSection
LockResource
LeaveCriticalSection
GetSystemInfo
OutputDebugStringA
OutputDebugStringW
LoadLibraryExW
GetEnvironmentVariableW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
WriteConsoleW
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileInformationByHandle
GetDriveTypeW
UnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
RaiseException
InterlockedPushEntrySList
GetStartupInfoW
InitializeSListHead
GetCPInfo
CreateFileA
GetFileAttributesA
GetStringTypeW
WakeAllConditionVariable
LCMapStringEx
DecodePointer
EncodePointer
GetExitCodeThread
SleepConditionVariableSRW
TryAcquireSRWLockExclusive
GetLastError
GetTempPathA
Sleep
GetACP
GetOEMCP
SetStdHandle
GetCommandLineW
SetEnvironmentVariableW
MultiByteToWideChar
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetTimeZoneInformation
SetEndOfFile
GetSystemTimePreciseAsFileTime
WaitForSingleObjectEx
SleepConditionVariableCS
WakeConditionVariable
WaitForMultipleObjects
PeekNamedPipe
GetFileType
GetStdHandle
VerifyVersionInfoW
GetFullPathNameW
InitializeConditionVariable
FormatMessageA
DeleteCriticalSection
InitializeCriticalSectionEx
SleepEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
QueryPerformanceFrequency
SetLastError
EnterCriticalSection
CopyFileA
CreateFileW
WriteFile
GetFileAttributesExA
GetFileSizeEx
SizeofResource
GetModuleFileNameA
ReadFile
CreateDirectoryW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
HeapSize
HeapQueryInformation
GetCurrentDirectoryW
VirtualProtect
GetCommandLineA
user32
RegisterClassExW
GetSystemMetrics
CreateWindowExW
PostMessageA
MessageBoxW
DestroyWindow
LoadCursorA
DispatchMessageW
GetMessageW
GetWindowTextW
EnumWindows
IsWindowVisible
GetWindowThreadProcessId
EnumDisplayDevicesA
wsprintfA
ShowWindow
MessageBoxA
TranslateMessage
SendMessageA
GetClientRect
PostQuitMessage
UpdateWindow
DefWindowProcW
ReleaseCapture
advapi32
RegGetValueW
EventUnregister
EventWriteTransfer
EventSetInformation
EventRegister
SystemFunction036
RegEnumKeyExA
RegGetValueA
RegOpenKeyExA
RegSetValueExW
RegCreateKeyExW
CryptAcquireContextA
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptReleaseContext
ole32
CoTaskMemFree
CoUninitialize
CoInitializeEx
ncrypt
BCryptSignHash
BCryptKeyDerivation
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
winhttp
WinHttpCloseHandle
WinHttpOpen
WinHttpSetOption
WinHttpOpenRequest
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpQueryOption
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpConnect
ws2_32
ioctlsocket
gethostname
sendto
recvfrom
htonl
getsockopt
listen
freeaddrinfo
getaddrinfo
select
__WSAFDIsSet
WSAIoctl
send
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAResetEvent
bind
WSAWaitForMultipleEvents
WSAGetLastError
ntohs
WSAStartup
WSACleanup
WSASetLastError
socket
setsockopt
recv
htons
getsockname
getpeername
connect
closesocket
accept
secur32
InitSecurityInterfaceW
generic
count=201,
id=261,
version=33145,
count=8,
id=259,
version=35403,
count=18,
id=260,
version=35403,
count=103,
id=261,
version=35403,
count=37,
id=261,
version=35728,
count=2,
id=259,
version=35728,
count=12,
id=259,
version=33145,
count=26,
id=260,
version=33145,
count=229,
id=260,
version=35728,
count=11,
productName=Unmarked objects (old),
count=1,
id=262,
version=33145,
count=35,
id=257,
version=33145,
count=356,
id=1,
productName=Unmarked objects,
count=19,
id=265,
version=35728,
count=1,
id=255,
version=35728,
count=1,
id=151,
count=1,
id=258,
version=35728,