kernel32
WaitForSingleObjectEx
GetFileSizeEx
InitializeConditionVariable
VerifyVersionInfoW
MoveFileExA
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
LoadLibraryExW
GetStartupInfoW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
CloseHandle
GetSystemTimeAsFileTime
SleepEx
CancelIo
GetOverlappedResult
CreateEventA
WaitNamedPipeA
CreateFileA
IsProcessorFeaturePresent
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetSystemDirectoryA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetTimeZoneInformation
GetCurrentProcessId
SetEvent
CreateEventW
GetCurrentThread
GetCurrentThreadId
VirtualProtect
CreateFileMappingW
DuplicateHandle
FlushViewOfFile
ExitThread
FlsGetValue
AreFileApisANSI
CreateMutexW
DeleteFileA
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFileSize
GetFullPathNameA
GetTempPathA
GetTickCount
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
HeapCompact
LoadLibraryW
LockFile
LockFileEx
SetEndOfFile
UnlockFile
UnlockFileEx
GetProcessHeap
SetConsoleCtrlHandler
CreateIoCompletionPort
GetQueuedCompletionStatusEx
GetExitCodeThread
WaitForMultipleObjects
ReleaseSemaphore
OpenSemaphoreA
CreateSemaphoreA
SetConsoleTextAttribute
GetDynamicTimeZoneInformation
WaitForSingleObject
FlsSetValue
CreateThread
FlsFree
FlsAlloc
DeviceIoControl
MoveFileExW
GetFinalPathNameByHandleW
SystemTimeToFileTime
GetSystemTime
SetFileTime
CreateSymbolicLinkW
FlushFileBuffers
SetFileAttributesW
RemoveDirectoryW
GetFileAttributesExW
GetFileAttributesW
DeleteFileW
GetTempPathW
WriteFile
ReadFile
SetFilePointer
FindFirstFileExW
VerifyVersionInfoA
VerSetConditionMask
FindClose
FindNextFileW
FindFirstFileW
GetTickCount64
GetConsoleScreenBufferInfo
GetStdHandle
AssignProcessToJobObject
GetCurrentProcess
SetInformationJobObject
CreateJobObjectW
GetSystemTimes
SetConsoleMode
GetConsoleMode
CreateFileW
GetNativeSystemInfo
GetSystemInfo
Sleep
WakeConditionVariable
SetHandleInformation
LoadLibraryA
FreeLibrary
GetModuleHandleW
LocalFree
SetLastError
GetProcAddress
GetModuleHandleA
GetBinaryTypeW
GetShortPathNameW
GetLongPathNameW
GetFullPathNameW
GetFileInformationByHandle
GetLastError
SetStdHandle
QueryPerformanceFrequency
InitializeCriticalSectionEx
MultiByteToWideChar
WideCharToMultiByte
FormatMessageA
GetStringTypeW
FormatMessageW
LeaveCriticalSection
GetModuleFileNameW
ReadConsoleW
EnterCriticalSection
DeleteCriticalSection
WriteConsoleW
GetConsoleOutputCP
CreateWaitableTimerExW
SetWaitableTimer
GetFileType
SetEnvironmentVariableW
ReleaseMutex
InitializeCriticalSection
CreateMutexA
SwitchToThread
ExitProcess
ExpandEnvironmentStringsW
GetCurrentDirectoryW
CreateHardLinkW
CopyFileExW
lstrlenW
GetCommandLineW
GetEnvironmentVariableW
SetThreadStackGuarantee
AddVectoredExceptionHandler
SetFilePointerEx
CreateDirectoryW
QueryPerformanceCounter
SetUnhandledExceptionFilter
EncodePointer
GetCommandLineA
GetEnvironmentStringsW
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetWindowsDirectoryW
GetSystemDirectoryW
GetFileInformationByHandleEx
IsDebuggerPresent
UnhandledExceptionFilter
GetDateFormatW
GetTimeFormatW
GetSystemTimePreciseAsFileTime
CompareStringW
LCMapStringW
IsValidCodePage
SetCurrentDirectoryW
ReadFileEx
SetFileInformationByHandle
GetACP
WriteFileEx
FreeEnvironmentStringsW
CompareStringOrdinal
OutputDebugStringW
OutputDebugStringA
InitializeSListHead
GetEnvironmentVariableA
GetOEMCP
RaiseException
TryEnterCriticalSection
SleepConditionVariableCS
GetCPInfo
bcryptprimitives
ProcessPrng
bcrypt
BCryptFinalizeKeyPair
BCryptGenerateKeyPair
BCryptDecrypt
BCryptExportKey
BCryptEncrypt
BCryptSecretAgreement
BCryptImportKey
BCryptDeriveKey
BCryptDestroySecret
BCryptVerifySignature
BCryptGenRandom
BCryptDestroyKey
BCryptImportKeyPair
BCryptDestroyHash
BCryptFinishHash
BCryptHashData
BCryptCreateHash
BCryptGetProperty
BCryptCloseAlgorithmProvider
BCryptSetProperty
BCryptOpenAlgorithmProvider
BCryptSignHash
advapi32
CryptHashData
IsWellKnownSid
GetTokenInformation
GetNamedSecurityInfoW
OpenProcessToken
GetLengthSid
SystemFunction036
CopySid
IsValidSid
EqualSid
CredFree
CredWriteW
CredDeleteW
CredReadW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
CheckTokenMembership
CryptAcquireContextA
OpenThreadToken
CryptDestroyHash
CryptCreateHash
CryptGenRandom
CryptReleaseContext
CryptGetHashParam
crypt32
CertCloseStore
CertFreeCertificateContext
CertFindCertificateInStore
PFXImportCertStore
CertGetEnhancedKeyUsage
CertFreeCTLContext
CertFreeCRLContext
CertAddCertificateContextToStore
CertEnumCertificatesInStore
CertOpenStore
CryptStringToBinaryA
CryptQueryObject
CertFreeCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CertGetCertificateChain
CryptDecodeObjectEx
CertGetNameStringA
CertDuplicateCertificateContext
CertFindExtension
api-ms-win-core-synch-l1-2-0
WakeByAddressSingle
WaitOnAddress
WakeByAddressAll
user32
FindWindowA
GetSystemMetrics
SendMessageA
ws2_32
getpeername
bind
getsockname
accept
WSASend
WSAIoctl
WSASetLastError
WSAResetEvent
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSACloseEvent
WSACreateEvent
__WSAFDIsSet
select
freeaddrinfo
getsockopt
WSAPoll
WSASocketW
listen
connect
ioctlsocket
socket
getaddrinfo
WSACleanup
WSAStartup
WSAGetLastError
send
recv
shutdown
WSADuplicateSocketW
htons
ntohs
ntohl
htonl
WSAEventSelect
closesocket
setsockopt
shell32
SHGetKnownFolderPath
ShellExecuteW
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
secur32
InitSecurityInterfaceA
winhttp
WinHttpQueryOption
WinHttpCloseHandle
WinHttpOpen
WinHttpSetOption
WinHttpSetTimeouts
WinHttpConnect
WinHttpSetStatusCallback
WinHttpSetCredentials
WinHttpQueryHeaders
WinHttpWriteData
WinHttpReadData
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpQueryAuthSchemes
WinHttpReceiveResponse
ntdll
NtWriteFile
RtlVirtualUnwind
RtlLookupFunctionEntry
NtCreateNamedPipeFile
RtlNtStatusToDosError
NtReadFile
NtOpenFile
RtlCaptureContext
RtlPcToFileHeader
RtlUnwindEx
RtlUnwind
userenv
GetUserProfileDirectoryW
generic
count=203,
id=261,
version=33145,
count=16,
id=259,
version=33145,
count=26,
id=260,
version=33145,
count=3,
id=253,
version=35721,
count=10,
id=259,
version=35721,
count=18,
id=260,
version=35721,
count=40,
id=261,
version=35721,
count=15,
id=257,
version=33145,
count=408,
id=1,
productName=Unmarked objects,
count=4,
id=259,
version=36248,
count=613,
productName=Unmarked objects (old),
count=1,
id=256,
version=36248,
count=1,
id=255,
version=36248,
count=1,
id=258,
version=36248,