kernel32
SetUnhandledExceptionFilter
WaitForSingleObject
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetFilePointerEx
WTSGetActiveConsoleSessionId
GlobalFree
Process32FirstW
GlobalAlloc
Process32NextW
CreateToolhelp32Snapshot
OpenProcess
GetVersionExW
GetCommandLineW
SetConsoleCtrlHandler
GetCurrentProcessId
ProcessIdToSessionId
CreateFileW
WriteFile
GetTickCount
FreeLibrary
GetProcessHeap
DeleteCriticalSection
GetProcAddress
DecodePointer
HeapAlloc
LoadLibraryW
RaiseException
CloseHandle
GetLastError
MultiByteToWideChar
InitializeCriticalSectionEx
lstrlenW
GetCurrentProcess
GetStringTypeW
SetStdHandle
LCMapStringW
CompareStringW
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
HeapSize
GetFileType
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
GetFileAttributesExW
LoadLibraryExW
TlsFree
SetLastError
HeapFree
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
user32
SystemParametersInfoW
wsprintfW
advapi32
RegCreateKeyExW
GetSidIdentifierAuthority
LookupAccountNameW
SetTokenInformation
CopySid
GetLengthSid
DuplicateTokenEx
RevertToSelf
EqualSid
AllocateAndInitializeSid
ImpersonateLoggedOnUser
OpenProcessToken
FreeSid
CreateProcessAsUserW
RegCloseKey
RegEnumKeyW
RegQueryInfoKeyW
GetSidSubAuthorityCount
RegDeleteKeyW
GetSidSubAuthority
CreateWellKnownSid
IsValidSid
RegSetValueExW
LogonUserW
RegOpenKeyExW
RegGetValueW
RegCreateKeyW
RegDeleteValueW
LookupAccountSidW
GetTokenInformation
shell32
SHFileOperationW
CommandLineToArgvW
wtsapi32
WTSEnumerateSessionsW
WTSQueryUserToken
netapi32
NetUserEnum
NetUserDel
NetUserAdd
NetLocalGroupAddMembers
NetApiBufferFree
userenv
DeleteProfileW
LoadUserProfileW
DestroyEnvironmentBlock
CreateEnvironmentBlock
UnloadUserProfile
bcrypt
BCryptHashData
BCryptCreateHash
BCryptDestroyHash
BCryptGenRandom
BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptCloseAlgorithmProvider
BCryptFinishHash
secur32
LsaLookupAuthenticationPackage
LsaFreeReturnBuffer
LsaLogonUser
LsaDeregisterLogonProcess
LsaRegisterLogonProcess
generic
count=10,
id=259,
version=26213,
count=143,
id=261,
version=26213,
count=22,
id=260,
version=26213,
count=18,
id=260,
version=26706,
count=18,
id=259,
version=26706,
count=43,
id=261,
version=26706,
count=23,
id=257,
version=26213,
count=166,
id=1,
productName=Unmarked objects,
count=4,
id=265,
version=27051,
count=1,
id=255,
version=27051,
count=1,
id=151,
count=1,
id=258,
version=27051,