offreg
ORCloseHive
ORGetValue
OROpenHive
ORCloseKey
OROpenKey
OREnumKey
ORQueryInfoKey
bcrypt
BCryptCloseAlgorithmProvider
BCryptImportKeyPair
BCryptSetProperty
BCryptGenerateSymmetricKey
BCryptFinalizeKeyPair
BCryptEncrypt
BCryptExportKey
BCryptDecrypt
BCryptGenerateKeyPair
BCryptDestroyKey
BCryptOpenAlgorithmProvider
BCryptGenRandom
user32
DispatchMessageW
GetMessageW
DefWindowProcW
PostMessageW
SetWindowPos
FillRect
CallNextHookEx
GetSystemMetrics
EndPaint
BeginPaint
InvalidateRect
SetForegroundWindow
FindWindowA
SystemParametersInfoW
PostQuitMessage
GetClientRect
wsprintfW
SetWindowsHookExW
ShowWindow
FindWindowW
TranslateMessage
SetFocus
CreateWindowExA
UnhookWindowsHookEx
RegisterClassA
SetTimer
GetAsyncKeyState
LoadCursorW
gdi32
CreateSolidBrush
DeleteObject
MoveToEx
SelectClipRgn
Rectangle
CreatePen
LineTo
SetBkMode
TextOutA
SetTextColor
GetStockObject
SelectObject
CreateFontA
IntersectClipRect
advapi32
GetUserNameA
OpenProcessToken
RegSetValueExA
ChangeServiceConfig2W
LookupPrivilegeValueA
CryptDestroyKey
CreateProcessWithLogonW
RevertToSelf
CryptAcquireContextW
LogonUserExW
SetTokenInformation
LsaLookupNames
CreateWellKnownSid
CryptDecrypt
DeleteService
ConvertStringSidToSidW
IsWellKnownSid
CryptCreateHash
CryptHashData
ImpersonateLoggedOnUser
CryptDestroyHash
StartServiceW
RegQueryInfoKeyA
CheckTokenMembership
RegOpenKeyExW
CryptSetKeyParam
CryptImportKey
OpenServiceW
LsaQueryInformationPolicy
GetLengthSid
CryptGetHashParam
LsaOpenPolicy
GetUserNameW
LsaClose
QueryServiceStatusEx
CryptReleaseContext
GetTokenInformation
LookupPrivilegeValueW
AdjustTokenPrivileges
CreateServiceW
RegCloseKey
CloseServiceHandle
OpenSCManagerW
RegOpenKeyExA
rpcrt4
NdrClientCall3
NdrServerCallAll
NdrServerCall2
UuidToStringW
UuidCreate
RpcBindingFromStringBindingW
RpcStringBindingComposeW
wininet
InternetCloseHandle
InternetReadFile
HttpQueryInfoW
InternetOpenW
InternetOpenUrlW
shlwapi
PathFindFileNameW
ntdll
RtlNtStatusToDosError
NtClose
RtlInitUnicodeString
RtlUnwindEx
RtlPcToFileHeader
NtCreateFile
cabinet
ord23
ord22
ord20
cldapi
CfConnectSyncRoot
CfUnregisterSyncRoot
CfExecute
CfRegisterSyncRoot
CfDisconnectSyncRoot
ole32
CoUninitialize
CoCreateInstance
CoCreateGuid
CoInitialize
CLSIDFromProgID
CoInitializeEx
StringFromGUID2
oleaut32
SysStringLen
VariantClear
SysAllocString
SysFreeString
netapi32
NetShareEnum
NetApiBufferFree
winhttp
WinHttpReadData
WinHttpOpen
WinHttpReceiveResponse
WinHttpOpenRequest
WinHttpSetOption
WinHttpQueryDataAvailable
WinHttpConnect
WinHttpSendRequest
WinHttpWriteData
WinHttpCloseHandle
ws2_32
htons
gethostname
connect
WSACleanup
socket
inet_addr
WSAStartup
select
gethostbyname
closesocket
ioctlsocket
kernel32
TlsFree
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetStdHandle
GetConsoleMode
ReadConsoleW
GetFileType
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
VirtualProtect
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
FlushFileBuffers
GetConsoleOutputCP
HeapSize
SetEndOfFile
WriteConsoleW
GetNativeSystemInfo
FormatMessageA
GetLocaleInfoEx
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCPInfo
GetStringTypeW
FindClose
TerminateProcess
GetSystemTimeAsFileTime
LCMapStringEx
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
SleepConditionVariableSRW
WakeAllConditionVariable
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceCounter
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetFileInformationByHandleEx
AreFileApisANSI
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
ReadFile
SizeofResource
GetFileSizeEx
SetPriorityClass
GetCurrentProcess
WriteFile
DeviceIoControl
WakeConditionVariable
GetDriveTypeA
GetModuleFileNameW
WaitForMultipleObjects
GetTempPathW
WaitForSingleObject
CreateFileW
OpenProcess
CreateToolhelp32Snapshot
Sleep
GetLastError
Process32NextW
MoveFileExA
CreateFileA
LoadLibraryA
LockResource
DeleteFileA
Process32FirstW
CloseHandle
CreateThread
GetWindowsDirectoryA
LoadResource
FindResourceW
GetLogicalDriveStringsA
GetProcAddress
SetFilePointerEx
CreateProcessW
FreeLibrary
CopyFileW
WideCharToMultiByte
GetComputerNameA
CreateDirectoryW
HeapFree
SetLastError
lstrlenW
ExpandEnvironmentStringsW
RemoveDirectoryW
GetCurrentThreadId
SuspendThread
ResumeThread
CreateEventW
MultiByteToWideChar
GetExitCodeThread
ProcessIdToSessionId
SetFileInformationByHandle
SetEvent
DeleteFileW
LoadLibraryW
HeapAlloc
GetOverlappedResult
UnlockFile
GetThreadContext
ReadDirectoryChangesW
LocalFree
LockFileEx
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
GetModuleHandleW
GetSystemTime
SetThreadContext
MoveFileW
OpenThread
FindFirstFileW
generic
count=177,
id=261,
version=33145,
count=8,
id=259,
version=33145,
count=10,
id=259,
version=35207,
count=17,
id=260,
version=35207,
count=18,
id=260,
version=33145,
count=94,
id=261,
version=35207,
count=1,
id=262,
version=33145,
count=35,
id=257,
version=33145,
count=361,
id=1,
productName=Unmarked objects,
count=4,
id=265,
version=35225,
count=1,
id=255,
version=35225,
count=1,
id=258,
version=35225,