crypt32
CryptDecodeObjectEx
CryptMsgGetParam
CertGetNameStringW
CryptQueryObject
CryptDecodeObject
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
CertGetCertificateChain
CertGetIssuerCertificateFromStore
CertCreateCertificateContext
CertFreeCertificateContext
CertCompareCertificateName
CertDuplicateCertificateContext
CertAddCertificateContextToStore
CertFindCertificateInStore
CryptMsgClose
CertAddEncodedCertificateToStore
CertOpenStore
CertCloseStore
CertGetCertificateContextProperty
CertEnumCertificatesInStore
CertOpenSystemStoreW
CryptStringToBinaryA
kernel32
GetFileInformationByHandle
GetFullPathNameW
FlushFileBuffers
SetFileAttributesW
OpenThread
SetThreadPriority
SetFileInformationByHandle
QueryPerformanceFrequency
QueryPerformanceCounter
GetSystemTime
SystemTimeToFileTime
GetTimeZoneInformation
SetFileTime
GlobalAlloc
GlobalFree
OutputDebugStringW
FindNextFileW
FindClose
GetSystemFirmwareTable
DeviceIoControl
GetFileSize
lstrcmpA
FindFirstFileW
GetFileAttributesExW
GetStdHandle
GetModuleHandleA
ExpandEnvironmentStringsW
GetDriveTypeW
GetLogicalDrives
GetSystemWindowsDirectoryW
GetCurrentDirectoryW
GetVersionExA
GetHandleInformation
CreateIoCompletionPort
GetQueuedCompletionStatusEx
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
InitializeCriticalSection
InitOnceExecuteOnce
SetFileCompletionNotificationModes
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
ResetEvent
ReleaseMutex
CreateMutexW
GetStartupInfoW
GetExitCodeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
SetEnvironmentVariableW
VirtualFree
SwitchToFiber
DeleteFiber
CreateFiberEx
GetSystemDirectoryA
LoadLibraryA
FormatMessageA
ReleaseSemaphore
CreateSemaphoreA
GetACP
GetFileType
ConvertFiberToThread
ConvertThreadToFiberEx
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
DuplicateHandle
LockResource
LoadResource
SizeofResource
FindResourceW
GetCurrentThread
QueryDosDeviceW
GetLogicalDriveStringsW
Process32NextW
Process32FirstW
SetLastError
GetNativeSystemInfo
IsWow64Process
GetSystemInfo
GetVersionExW
VirtualQueryEx
Module32FirstW
CreateToolhelp32Snapshot
CopyFileW
GetFileAttributesW
GetFileSizeEx
MultiByteToWideChar
WideCharToMultiByte
GetLocalTime
VerifyVersionInfoW
VerSetConditionMask
CreateHardLinkW
MoveFileExW
FileTimeToSystemTime
GetFileTime
ProcessIdToSessionId
GetCurrentProcess
MoveFileW
DeleteCriticalSection
DecodePointer
InitializeCriticalSectionEx
CreateThread
GetSystemDirectoryW
GetProcessId
GetCurrentThreadId
GetProcessHeap
FormatMessageW
LocalAlloc
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetTickCount
CreateRemoteThread
DebugBreak
OpenEventW
WaitForMultipleObjects
CreateEventW
SetEvent
CallNamedPipeW
LoadLibraryW
FreeLibrary
GetProcAddress
GetNamedPipeServerProcessId
WriteFile
GetModuleFileNameW
GetModuleHandleW
DeleteFileW
RemoveDirectoryW
GetEnvironmentVariableW
GetWindowsDirectoryW
CreateDirectoryW
CreateFileW
SetFilePointer
SetEndOfFile
GetTickCount64
CreateNamedPipeW
LocalFree
GetCurrentProcessId
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
CreateProcessW
OpenProcess
GetProcessTimes
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
CloseHandle
ResumeThread
WaitForSingleObject
TerminateProcess
PeekNamedPipe
ReadFile
GetLastError
GetExitCodeProcess
SwitchToThread
EnterCriticalSection
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetCommandLineW
GetCommandLineA
RtlUnwind
SetConsoleCtrlHandler
GetConsoleOutputCP
SetFilePointerEx
SystemTimeToTzSpecificLocalTime
FreeLibraryAndExitThread
ExitThread
GetModuleHandleExW
ExitProcess
RtlPcToFileHeader
InterlockedPushEntrySList
RtlUnwindEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
InitializeSListHead
RaiseException
IsDebuggerPresent
GetCPInfo
LCMapStringEx
EncodePointer
FindFirstFileExW
GetStringTypeW
GetLongPathNameW
Sleep
GetTempPathW
LeaveCriticalSection
user32
CloseWindowStation
OpenInputDesktop
CloseDesktop
MessageBoxW
GetUserObjectInformationW
CharUpperW
SetProcessWindowStation
OpenWindowStationW
GetProcessWindowStation
wsprintfW
advapi32
IsTextUnicode
CloseServiceHandle
OpenServiceW
OpenSCManagerW
DeleteService
ControlService
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyW
QueryServiceStatusEx
StartServiceW
QueryServiceStatus
CreateServiceW
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExW
SetServiceStatus
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyW
RegCreateKeyExW
RegSetValueExW
ChangeServiceConfigA
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
DuplicateTokenEx
CreateProcessAsUserW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptEnumProvidersW
CryptSignHashW
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptGenRandom
CryptAcquireContextA
RegSaveKeyW
RegRestoreKeyW
RegQueryInfoKeyW
RegLoadAppKeyW
RegEnumValueW
RegEnumKeyW
TreeSetNamedSecurityInfoW
SetSecurityInfo
GetSecurityInfo
DeleteAce
GetExplicitEntriesFromAclW
CreateWellKnownSid
LookupAccountNameW
InitializeSid
AllocateLocallyUniqueId
GetSidSubAuthority
GetSidSubAuthorityCount
RegSetKeyValueW
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextW
CryptReleaseContext
AreAllAccessesGranted
MapGenericMask
GetNamedSecurityInfoW
ConvertStringSidToSidW
ConvertSidToStringSidW
RegDeleteValueW
RegUnLoadKeyW
RegLoadKeyW
QueryServiceConfigW
SetEntriesInAclW
SetServiceObjectSecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RevertToSelf
ImpersonateLoggedOnUser
IsWellKnownSid
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
GetTokenInformation
OpenThreadToken
RegGetValueW
RegFlushKey
SetNamedSecurityInfoW
ChangeServiceConfig2A
ole32
CoGetClassObject
CoCreateInstance
PropVariantClear
CoSetProxyBlanket
CoInitializeEx
CoUninitialize
CoInitializeSecurity
oleaut32
VariantInit
SysAllocString
SysFreeString
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysStringLen
shlwapi
PathIsRootW
StrDupW
rpcrt4
RpcStringFreeW
UuidToStringW
UuidCreate
wtsapi32
WTSQuerySessionInformationW
WTSEnumerateSessionsW
WTSQueryUserToken
WTSFreeMemory
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
winhttp
WinHttpOpen
WinHttpSetOption
WinHttpCloseHandle
WinHttpSetTimeouts
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpQueryDataAvailable
WinHttpReadData
bcrypt
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
BCryptDestroyHash
BCryptHashData
BCryptFinishHash
BCryptDestroyKey
BCryptVerifySignature
BCryptGetProperty
BCryptImportKeyPair
BCryptCreateHash
netapi32
NetApiBufferFree
NetWkstaGetInfo
psapi
GetProcessImageFileNameW
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
setupapi
SetupCloseInfFile
SetupFindFirstLineW
SetupGetStringFieldW
SetupGetIntField
SetupGetMultiSzFieldW
SetupFindNextLine
SetupOpenInfFileW
SetupGetLineTextW
wintrust
CryptCATAdminAcquireContext
CryptCATAdminAddCatalog
CryptCATAdminRemoveCatalog
WinVerifyTrust
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminEnumCatalogFromHash
CryptCATCatalogInfoFromContext
CryptCATAdminReleaseCatalogContext
CryptCATAdminReleaseContext
authz
AuthzInitializeContextFromSid
AuthzAccessCheck
AuthzFreeContext
AuthzFreeResourceManager
AuthzInitializeResourceManager
ws2_32
bind
accept
gethostbyname
freeaddrinfo
closesocket
ntohl
inet_addr
WSASendTo
WSASend
WSARecvFrom
WSARecv
gethostbyaddr
shutdown
setsockopt
sendto
send
recvfrom
recv
getservbyname
ntohs
htons
WSACleanup
WSAStartup
WSAGetLastError
getservbyport
inet_ntoa
WSASetLastError
WSASocketA
htonl
select
WSAIoctl
socket
listen
getsockopt
getsockname
connect
ioctlsocket
getpeername
getaddrinfo
generic
count=7,
id=259,
version=30795,
count=198,
id=261,
version=30795,
count=1,
productName=Unmarked objects (old),
count=19,
id=260,
version=33030,
count=18,
id=259,
version=33030,
count=111,
id=261,
version=33030,
count=32,
id=260,
version=30795,
count=965,
id=260,
version=33134,
count=283,
id=261,
version=33134,
count=562,
id=1,
productName=Unmarked objects,
count=47,
id=257,
version=30795,
count=97,
id=265,
version=33136,
count=1,
id=255,
version=33136,
count=2,
id=151,
count=1,
id=258,
version=33136,