ntdll
NtCreateNamedPipeFile
RtlNtStatusToDosError
RtlGetVersion
NtCancelIoFileEx
NtDeviceIoControlFile
NtCreateFile
NtWriteFile
NtOpenFile
NtReadFile
advapi32
RegDeleteTreeW
RegOpenKeyExW
RegCloseKey
RegQueryInfoKeyW
RegCreateKeyTransactedW
RegCreateKeyExW
RegOpenKeyTransactedW
RegSetValueExW
RegDeleteValueW
RegEnumKeyExW
RegGetValueA
RegQueryValueExW
SystemFunction036
CredWriteW
CredFree
CredReadW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CredDeleteW
LookupPrivilegeValueA
kernel32
GetFileInformationByHandle
SleepEx
GetCPInfo
ReadFile
GetOverlappedResult
PostQueuedCompletionStatus
WriteFile
CancelIoEx
GetQueuedCompletionStatusEx
CreateIoCompletionPort
SetFileCompletionNotificationModes
GetModuleHandleA
GetProcAddress
DeviceIoControl
SetFileInformationByHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateFileW
GetModuleFileNameW
GetCommandLineW
GetOEMCP
DeleteFileW
LocalFree
CreateProcessA
ExitProcess
GetCurrentProcess
DuplicateHandle
GetCurrentThreadId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetLastError
GetCurrentDirectoryW
WaitForSingleObjectEx
LoadLibraryA
lstrlenW
GetCurrentProcessId
CreateMutexA
WideCharToMultiByte
ReleaseMutex
GetConsoleOutputCP
MultiByteToWideChar
WriteConsoleW
GetEnvironmentVariableW
ReadFileEx
GetModuleHandleW
FormatMessageW
SetHandleInformation
CreateThread
GetCurrentThread
SetThreadStackGuarantee
GetFullPathNameW
SetFileTime
FindFirstFileExW
ReadConsoleW
CreateEventW
CreateDirectoryW
WaitForMultipleObjects
CancelIo
CompareStringOrdinal
CreateProcessW
GetFileAttributesW
GetACP
GetTempPathW
RemoveDirectoryW
SetConsoleTextAttribute
SetFileAttributesW
CopyFileExW
MoveFileExW
CreateSymbolicLinkW
CreateHardLinkW
SetFilePointerEx
TerminateProcess
RegisterWaitForSingleObject
SetConsoleCtrlHandler
FlushProcessWriteBuffers
CreateSemaphoreA
SetUnhandledExceptionFilter
SetEnvironmentVariableW
AddVectoredExceptionHandler
ReadConsoleInputW
WriteFileEx
SetConsoleMode
GetConsoleMode
IsValidCodePage
GetStdHandle
SetCurrentDirectoryW
UnregisterWaitEx
SetStdHandle
LockFileEx
GetStringTypeW
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
LoadLibraryExW
FreeLibrary
FindResourceW
SizeofResource
LoadResource
LockResource
GetModuleHandleExA
GetFileSizeEx
OutputDebugStringW
LoadLibraryExA
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
InitOnceExecuteOnce
TlsAlloc
TlsGetValue
TlsSetValue
LoadLibraryW
GetNumberOfConsoleInputEvents
FlushFileBuffers
SetEndOfFile
LCMapStringW
CompareStringW
UnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetModuleHandleExW
GetSystemTimePreciseAsFileTime
CreateFileMappingW
MapViewOfFile
VirtualProtect
GetSystemInfo
UnmapViewOfFile
IsProcessorFeaturePresent
DeleteCriticalSection
InitializeCriticalSectionEx
GetFileInformationByHandleEx
GetExitCodeProcess
LeaveCriticalSection
EnterCriticalSection
FillConsoleOutputCharacterA
FindClose
FindNextFileW
SwitchToThread
ReleaseSemaphore
SetNamedPipeHandleState
Sleep
SetWaitableTimer
CreateWaitableTimerExW
SetConsoleCursorInfo
GetFileType
EncodePointer
HeapReAlloc
FlsFree
FlsSetValue
FlsGetValue
GetSystemDirectoryW
GetWindowsDirectoryW
FlsAlloc
RaiseException
RtlPcToFileHeader
RtlUnwindEx
SetConsoleCursorPosition
GetConsoleCursorInfo
WaitForSingleObject
GetDynamicTimeZoneInformation
HeapFree
HeapAlloc
GetProcessHeap
CloseHandle
UnlockFile
FillConsoleOutputAttribute
GetSystemTimeAsFileTime
GetBinaryTypeW
GetLastError
GetConsoleScreenBufferInfo
HeapSize
GetFinalPathNameByHandleW
GetStartupInfoW
InitializeSListHead
WriteConsoleA
VirtualQuery
VirtualFree
VirtualAlloc
GetCurrentProcessorNumber
GetProcessTimes
TryAcquireSRWLockExclusive
QueryPerformanceCounter
QueryPerformanceFrequency
GetEnvironmentVariableA
bcryptprimitives
ProcessPrng
api-ms-win-core-synch-l1-2-0
WakeByAddressSingle
WaitOnAddress
WakeByAddressAll
shell32
SHGetKnownFolderPath
CommandLineToArgvW
userenv
GetUserProfileDirectoryW
oleaut32
GetErrorInfo
SysFreeString
SysStringLen
user32
SendMessageTimeoutW
cfgmgr32
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_ListW
ws2_32
setsockopt
ioctlsocket
closesocket
WSACleanup
getpeername
WSAIoctl
WSAGetLastError
getsockname
send
recv
freeaddrinfo
connect
shutdown
getsockopt
WSASend
getaddrinfo
WSAStartup
WSASocketW
bind
crypt32
CertSetCertificateContextProperty
CertOpenStore
CertFreeCertificateChainEngine
CertGetCertificateChain
CertCreateCertificateChainEngine
CertFreeCertificateContext
CertAddEncodedCertificateToStore
CertFreeCertificateChain
CertCloseStore
CertVerifyCertificateChainPolicy
generic
count=172,
id=261,
version=33145,
count=25,
id=260,
version=33145,
count=12,
id=259,
version=33145,
count=10,
id=259,
version=35721,
count=16,
id=260,
version=35721,
count=52,
id=261,
version=35721,
count=5,
id=257,
version=33145,
count=1,
id=261,
version=36248,
count=147,
id=260,
version=36248,
count=274,
id=1,
productName=Unmarked objects,
count=69,
productName=Unmarked objects (old),
count=1,
id=256,
version=36248,
count=1,
id=255,
version=36248,
count=1,
id=258,
version=36248,