bcryptprimitives
ProcessPrng
kernel32
LCMapStringW
GetCurrentProcessId
CompareStringW
InitializeCriticalSectionEx
SetConsoleCursorPosition
FillConsoleOutputCharacterA
FillConsoleOutputAttribute
GetConsoleCursorInfo
SetConsoleCursorInfo
GetNumberOfConsoleInputEvents
GetFileInformationByHandleEx
SetFileTime
GetComputerNameExW
GetCommandLineA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
VirtualUnlock
SwitchToThread
PostQueuedCompletionStatus
LockFileEx
LocalFree
SetStdHandle
CreateIoCompletionPort
CancelIoEx
ReadFile
GetOverlappedResult
WriteFile
LeaveCriticalSection
EnterCriticalSection
GetQueuedCompletionStatusEx
RtlUnwindEx
InitializeSListHead
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetFileCompletionNotificationModes
SetEndOfFile
HeapSize
GetTimeZoneInformation
GetSystemTimePreciseAsFileTime
CreateMutexA
GetModuleHandleA
GetProcAddress
GetSystemInfo
GetNativeSystemInfo
Sleep
FlsFree
VirtualLock
GetModuleHandleW
FlsSetValue
FlsGetValue
FlsAlloc
SetThreadStackGuarantee
GetCurrentThread
SetLastError
GetFileSizeEx
WaitForSingleObject
FlushFileBuffers
FileTimeToSystemTime
WaitForMultipleObjects
SleepEx
TerminateProcess
SystemTimeToTzSpecificLocalTime
RtlLookupFunctionEntry
ReadFileEx
FindFirstFileExW
MoveFileExW
CreateHardLinkW
SetFileAttributesW
CopyFileExW
PeekNamedPipe
GetModuleFileNameW
ExitProcess
CreateEventW
CancelIo
CreateThread
GetFullPathNameW
GetTempPathW
LoadLibraryExW
FindNextFileW
GetFileInformationByHandle
CreateDirectoryW
DeleteFileW
CreateSymbolicLinkW
GetFinalPathNameByHandleW
GetFileType
EncodePointer
RaiseException
SetHandleInformation
GetSystemDirectoryW
GetWindowsDirectoryW
CreateProcessW
GetFileAttributesW
GetCurrentProcess
DuplicateHandle
GetConsoleOutputCP
WriteConsoleW
ReadConsoleW
WriteFileEx
WaitForSingleObjectEx
LoadLibraryA
ReleaseMutex
SetNamedPipeHandleState
OpenProcess
LocalAlloc
GetProcessTimes
GetSystemTimes
GetProcessIoCounters
VirtualQueryEx
ReadProcessMemory
GetTickCount64
GlobalMemoryStatusEx
GetLogicalDrives
GetDiskFreeSpaceExW
CreateFileW
CreateNamedPipeW
SetFileInformationByHandle
GetDriveTypeW
GetVolumeInformationW
DeviceIoControl
RtlPcToFileHeader
ReadConsoleInputW
SetFilePointerEx
ConnectNamedPipe
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
RegisterWaitForSingleObject
UnregisterWaitEx
SetConsoleCtrlHandler
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetACP
VirtualProtect
VirtualFree
GetModuleHandleExW
GetSystemTimeAsFileTime
IsValidCodePage
FindClose
GetProcessId
GetSystemDirectoryA
FreeLibrary
FormatMessageA
WideCharToMultiByte
MultiByteToWideChar
RtlVirtualUnwind
RtlCaptureContext
QueryPerformanceFrequency
GetCommandLineW
GetEnvironmentVariableW
GetCurrentDirectoryW
ReadConsoleA
GetOEMCP
UnlockFileEx
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
SetConsoleMode
GetConsoleMode
GetStdHandle
HeapReAlloc
FormatMessageW
GetLastError
GetCPInfo
SetEnvironmentVariableW
GetStringTypeW
HeapAlloc
LoadLibraryW
FindFirstFileW
GetSystemTime
SystemTimeToFileTime
CloseHandle
AddVectoredExceptionHandler
HeapFree
CompareStringOrdinal
GetProcessHeap
GetExitCodeProcess
PowerClearRequest
PowerSetRequest
QueryPerformanceCounter
PowerCreateRequest
FreeEnvironmentStringsW
GetEnvironmentStringsW
lstrlenW
advapi32
RegisterEventSourceW
OpenProcessToken
CredDeleteW
SystemFunction036
IsValidSid
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegDeleteValueW
RegSetValueExW
CredWriteW
RegCreateKeyTransactedW
RegOpenKeyTransactedW
RegEnumValueW
RegEnumKeyExW
CredReadW
CredFree
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
GetLengthSid
CryptReleaseContext
CryptAcquireContextW
DeregisterEventSource
CopySid
ReportEventW
LookupAccountSidW
GetTokenInformation
oleaut32
SysAllocString
VariantClear
SysFreeString
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
ws2_32
freeaddrinfo
accept
WSAStartup
WSACleanup
listen
getsockname
socket
ntohs
send
WSASend
recv
WSAIoctl
select
gethostbyname
getaddrinfo
bind
ioctlsocket
WSASocketW
connect
htonl
htons
inet_addr
inet_ntoa
gethostbyaddr
setsockopt
getservbyport
shutdown
WSAGetLastError
getsockopt
closesocket
getservbyname
WSASetLastError
getpeername
crypt32
CertEnumCertificatesInStore
CertDuplicateCertificateChain
CertFreeCertificateChain
CertOpenStore
CertGetCertificateChain
CertCloseStore
CertFreeCertificateContext
CertFindCertificateInStore
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertAddCertificateContextToStore
CertVerifyCertificateChainPolicy
CertDuplicateStore
secur32
AcquireCredentialsHandleA
DecryptMessage
QueryContextAttributesW
EncryptMessage
DeleteSecurityContext
FreeCredentialsHandle
AcceptSecurityContext
ApplyControlToken
LsaGetLogonSessionData
LsaFreeReturnBuffer
InitializeSecurityContextW
FreeContextBuffer
LsaEnumerateLogonSessions
iphlpapi
GetIfEntry2
GetIfTable2
FreeMibTable
GetAdaptersAddresses
ntdll
NtOpenFile
NtQueryInformationProcess
NtWriteFile
NtReadFile
NtCreateFile
NtDeviceIoControlFile
RtlNtStatusToDosError
RtlGetVersion
NtCancelIoFileEx
NtQuerySystemInformation
user32
GetUserObjectInformationW
GetProcessWindowStation
MessageBoxW
GetSystemMetrics
ole32
CoTaskMemFree
CoUninitialize
CoSetProxyBlanket
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
pdh
PdhGetFormattedCounterValue
PdhOpenQueryA
PdhCollectQueryData
PdhCloseQuery
PdhAddEnglishCounterW
PdhRemoveCounter
shell32
SHGetKnownFolderPath
CommandLineToArgvW
psapi
GetProcessMemoryInfo
GetModuleFileNameExW
GetPerformanceInfo
powrprof
CallNtPowerInformation
netapi32
NetApiBufferFree
NetUserGetLocalGroups
NetUserGetInfo
NetUserEnum
generic
count=180,
id=261,
version=33145,
count=23,
id=260,
version=33145,
count=10,
id=259,
version=33145,
count=10,
id=259,
version=35207,
count=19,
id=260,
version=35207,
count=41,
id=261,
version=35207,
count=13,
id=257,
version=30151,
count=788,
id=260,
version=30152,
count=8,
id=260,
version=35222,
count=351,
id=1,
productName=Unmarked objects,
count=860,
productName=Unmarked objects (old),
count=1,
id=255,
version=35222,
count=1,
id=258,
version=35222,