advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExA
RegQueryValueExW
ImpersonateNamedPipeClient
RevertToSelf
BuildSecurityDescriptorW
BuildExplicitAccessWithNameW
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
CryptAcquireContextW
CryptDestroyKey
SystemFunction036
CryptGenRandom
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptSignHashW
CryptEnumProvidersW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegOpenKeyExA
crypt32
CertEnumCertificatesInStore
CertFreeCertificateContext
CertGetEnhancedKeyUsage
CertGetIntendedKeyUsage
CertOpenSystemStoreA
CertOpenStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertGetCertificateContextProperty
CertOpenSystemStoreW
CertCloseStore
ws2_32
htonl
ntohl
closesocket
htons
send
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
shutdown
getservbyname
getservbyport
gethostbyname
gethostbyaddr
inet_ntoa
inet_addr
sendto
WSASocketA
getnameinfo
gethostname
ntohs
setsockopt
socket
WSAGetLastError
inet_ntop
WSAResetEvent
ioctlsocket
freeaddrinfo
getaddrinfo
listen
select
__WSAFDIsSet
WSAIoctl
WSASetLastError
recv
getsockname
getpeername
connect
bind
accept
WSACleanup
WSAStartup
recvfrom
WSAWaitForMultipleEvents
WSASetEvent
getsockopt
iphlpapi
GetAdaptersAddresses
if_nametoindex
winhttp
WinHttpReadData
WinHttpWriteData
WinHttpSetOption
WinHttpSetTimeouts
WinHttpConnect
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpCloseHandle
WinHttpOpen
WinHttpCrackUrl
WinHttpOpenRequest
shell32
SHGetFolderPathAndSubDirW
api-ms-win-core-synch-l1-2-0
WakeByAddressSingle
WaitOnAddress
kernel32
GetStartupInfoW
InitializeSListHead
UnhandledExceptionFilter
RtlCaptureContext
InitializeCriticalSectionAndSpinCount
GetCPInfo
CompareStringEx
InterlockedPushEntrySList
RtlUnwindEx
LCMapStringEx
EncodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetFinalPathNameByHandleW
GetDiskFreeSpaceExW
GetCurrentThreadId
QueryPerformanceFrequency
QueryPerformanceCounter
GetLastError
GetCurrentProcessorNumber
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
CreateThread
WaitForSingleObject
CloseHandle
CreateEventA
SetEvent
OutputDebugStringW
GetCurrentProcessId
GetLocalTime
FormatMessageW
SetLastError
SetUnhandledExceptionFilter
SetProcessShutdownParameters
SetConsoleCtrlHandler
Sleep
VerSetConditionMask
GetCurrentProcess
IsWow64Process
GetModuleHandleW
FormatMessageA
VerifyVersionInfoW
GetProcessTimes
SuspendThread
ResumeThread
GetProcessId
GetThreadContext
Wow64GetThreadContext
GetProcAddress
IsProcessorFeaturePresent
GetTimeZoneInformation
GetThreadLocale
GetSystemDefaultLCID
GetUserDefaultLCID
GetModuleFileNameW
DuplicateHandle
ConnectNamedPipe
DisconnectNamedPipe
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateEventW
TerminateProcess
OpenProcess
UnregisterWaitEx
RegisterWaitForSingleObject
GetFileInformationByHandleEx
VirtualQueryEx
ReadProcessMemory
GetSystemTimeAsFileTime
LoadLibraryW
FindClose
RemoveVectoredExceptionHandler
LocalFree
CreateFileW
SetNamedPipeHandleState
TransactNamedPipe
CreateNamedPipeW
WaitNamedPipeW
GetVersion
ReleaseSemaphore
CreateSemaphoreW
GetStdHandle
GetFileSizeEx
GetFileType
LockFileEx
ReadFile
SetEndOfFile
SetFilePointerEx
UnlockFileEx
WriteFile
CreateSemaphoreA
WaitForSingleObjectEx
GetModuleFileNameA
GetModuleHandleA
GetTickCount
WaitForMultipleObjectsEx
ReleaseSRWLockExclusive
GetLocaleInfoW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
SleepEx
CreateFileA
GetFullPathNameW
MoveFileExA
GetEnvironmentVariableA
CompareFileTime
HeapAlloc
HeapFree
GetProcessHeap
GlobalMemoryStatusEx
GetVersionExA
FreeLibraryAndExitThread
LoadLibraryA
K32GetProcessMemoryInfo
IsDebuggerPresent
ReleaseMutex
OpenSemaphoreW
CreateMutexExW
CreateSemaphoreExW
CreateProcessW
MultiByteToWideChar
K32GetProcessImageFileNameA
CreateToolhelp32Snapshot
Process32First
Process32Next
OutputDebugStringA
SwitchToThread
SetFilePointer
CreateFileMappingW
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
RtlLookupFunctionEntry
InitializeCriticalSection
InitializeConditionVariable
WakeConditionVariable
SleepConditionVariableCS
VirtualQuery
FlushFileBuffers
GetSystemTime
WideCharToMultiByte
SystemTimeToFileTime
RtlUnwind
UnlockFile
HeapDestroy
HeapCompact
HeapReAlloc
DeleteFileW
DeleteFileA
GetFileAttributesExW
GetFileAttributesA
GetDiskFreeSpaceA
GetTempPathA
HeapSize
HeapValidate
GetFileAttributesW
CreateMutexW
GetTempPathW
GetFullPathNameA
LockFile
GetDiskFreeSpaceW
HeapCreate
AreFileApisANSI
RaiseException
TryEnterCriticalSection
GetCurrentDirectoryW
FindFirstFileW
FindNextFileW
InitializeSRWLock
SleepConditionVariableSRW
FreeLibrary
GetLogicalProcessorInformation
WriteConsoleA
GetConsoleScreenBufferInfo
FileTimeToSystemTime
GetNativeSystemInfo
LoadLibraryExW
DecodePointer
GetCurrentThread
ResetEvent
SetWaitableTimer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateWaitableTimerA
CreateDirectoryW
GetFileInformationByHandle
GetFileTime
RemoveDirectoryW
SetFileTime
DeviceIoControl
CopyFileW
MoveFileExW
WriteConsoleW
GetEnvironmentVariableW
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
ReleaseSRWLockShared
AcquireSRWLockShared
SwitchToFiber
DeleteFiber
CreateFiberEx
GetSystemDirectoryA
GetExitCodeThread
GetACP
RtlVirtualUnwind
ConvertFiberToThread
ConvertThreadToFiberEx
FindFirstFileExW
GetStringTypeW
GetLocaleInfoEx
InitOnceComplete
InitOnceBeginInitialize
RtlPcToFileHeader
WakeAllConditionVariable
DebugBreak
GetDriveTypeW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
GetConsoleOutputCP
SetStdHandle
ExitProcess
SetEnvironmentVariableW
IsValidLocale
EnumSystemLocalesW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
AddVectoredExceptionHandler
ExitThread
GetCommandLineA
GetCommandLineW
GetDateFormatW
GetTimeFormatW
CompareStringW
GetModuleHandleExW
LCMapStringW
AcquireSRWLockExclusive
GetFileSize
user32
UnregisterClassW
DefWindowProcW
PostMessageW
TranslateMessage
GetMessageW
DispatchMessageW
RegisterClassW
CreateWindowExW
DestroyWindow
GetWindowLongPtrW
SetWindowLongPtrW
EnumDisplayDevicesA
GetProcessWindowStation
MessageBoxW
GetUserObjectInformationW
ole32
CoUninitialize
StringFromGUID2
CoCreateGuid
CoTaskMemFree
CoCreateInstance
CoInitializeEx
winmm
timeGetTime
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
timeSetEvent
powrprof
CallNtPowerInformation
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
generic
count=17,
id=259,
version=29395,
count=199,
id=261,
version=29395,
count=19,
id=260,
version=30034,
count=10,
id=259,
version=30034,
count=97,
id=261,
version=30034,
count=2,
id=253,
version=28518,
count=36,
id=260,
version=29395,
count=2,
id=147,
productName=VS2008 SP1 build 30729,
version=30729,
count=1,
id=262,
version=29395,
count=1214,
id=260,
version=30154,
count=5,
id=259,
version=30154,
count=33,
id=257,
version=29395,
count=455,
id=1,
productName=Unmarked objects,
count=527,
id=261,
version=30154,
count=40,
productName=Unmarked objects (old),
count=1,
id=256,
version=30154,
count=1,
id=258,
version=30154,