ntdll
NtCreateNamedPipeFile
RtlNtStatusToDosError
NtCreateFile
NtCancelIoFileEx
NtDeviceIoControlFile
NtWriteFile
NtReadFile
NtOpenFile
RtlGetVersion
advapi32
RegOpenKeyExW
RegCloseKey
RegDeleteTreeW
RegSetValueExW
RegQueryInfoKeyW
RegCreateKeyTransactedW
RegCreateKeyExW
RegOpenKeyTransactedW
RegDeleteValueW
RegEnumKeyExW
RegGetValueA
RegQueryValueExW
SystemFunction036
CredWriteW
CredFree
CredReadW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CredDeleteW
LookupPrivilegeValueA
kernel32
FindNextFileW
ReadFile
GetOverlappedResult
PostQueuedCompletionStatus
WriteFile
CancelIoEx
GetCPInfo
CreateIoCompletionPort
SetFileCompletionNotificationModes
GetQueuedCompletionStatusEx
GetModuleHandleA
GetProcAddress
DeviceIoControl
SetFileInformationByHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateFileW
GetModuleFileNameW
GetCommandLineW
GetOEMCP
DeleteFileW
LocalFree
CreateProcessA
ExitProcess
GetCurrentProcess
DuplicateHandle
GetCurrentThreadId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetLastError
GetCurrentDirectoryW
WaitForSingleObjectEx
LoadLibraryA
lstrlenW
CreateMutexA
WideCharToMultiByte
ReleaseMutex
GetConsoleOutputCP
MultiByteToWideChar
WriteConsoleW
GetEnvironmentVariableW
ReadFileEx
GetModuleHandleW
FormatMessageW
SetHandleInformation
CreateThread
GetCurrentThread
SetThreadStackGuarantee
GetFullPathNameW
SetFileTime
FindFirstFileExW
ReadConsoleW
CreateEventW
CreateDirectoryW
GetExitCodeProcess
WaitForMultipleObjects
CancelIo
TerminateProcess
CompareStringOrdinal
CreateProcessW
GetFileAttributesW
GetACP
GetTempPathW
RemoveDirectoryW
SetConsoleTextAttribute
SetFileAttributesW
CopyFileExW
MoveFileExW
CreateSymbolicLinkW
CreateHardLinkW
GetFileType
SetConsoleCtrlHandler
UnregisterWaitEx
RegisterWaitForSingleObject
SetCurrentDirectoryW
CreateSemaphoreA
SetUnhandledExceptionFilter
SetEnvironmentVariableW
GetNumberOfConsoleInputEvents
UnlockFile
GetConsoleScreenBufferInfo
SetConsoleMode
GetConsoleMode
IsValidCodePage
GetStdHandle
GetCurrentProcessId
SetConsoleCursorPosition
SetStdHandle
GetFileInformationByHandle
SetFilePointerEx
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
LoadLibraryExW
FreeLibrary
FindResourceW
SizeofResource
LoadResource
LockResource
GetModuleHandleExA
GetFileSizeEx
FlushFileBuffers
LoadLibraryExA
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
InitOnceExecuteOnce
TlsAlloc
TlsGetValue
TlsSetValue
LoadLibraryW
FillConsoleOutputAttribute
LCMapStringW
LockFileEx
GetSystemTimePreciseAsFileTime
CompareStringW
CreateFileMappingW
MapViewOfFile
VirtualProtect
OutputDebugStringW
UnhandledExceptionFilter
GetSystemInfo
FillConsoleOutputCharacterA
FlushProcessWriteBuffers
IsDebuggerPresent
GetCommandLineA
GetStringTypeW
SetNamedPipeHandleState
SetEndOfFile
ReadConsoleInputW
SwitchToThread
ReleaseSemaphore
IsProcessorFeaturePresent
GetModuleHandleExW
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
Sleep
WaitForSingleObject
SetWaitableTimer
CreateWaitableTimerExW
SetConsoleCursorInfo
EncodePointer
HeapReAlloc
FlsFree
FlsSetValue
FlsGetValue
GetSystemDirectoryW
GetWindowsDirectoryW
FlsAlloc
RaiseException
RtlPcToFileHeader
RtlUnwindEx
UnmapViewOfFile
WriteFileEx
GetFileInformationByHandleEx
FindClose
GetDynamicTimeZoneInformation
HeapFree
HeapAlloc
GetProcessHeap
CloseHandle
GetConsoleCursorInfo
AddVectoredExceptionHandler
GetSystemTimeAsFileTime
GetBinaryTypeW
GetLastError
SleepEx
HeapSize
GetFinalPathNameByHandleW
GetStartupInfoW
InitializeSListHead
WriteConsoleA
VirtualQuery
VirtualFree
VirtualAlloc
GetCurrentProcessorNumber
GetProcessTimes
TryAcquireSRWLockExclusive
QueryPerformanceCounter
GetEnvironmentVariableA
QueryPerformanceFrequency
bcryptprimitives
ProcessPrng
api-ms-win-core-synch-l1-2-0
WakeByAddressAll
WakeByAddressSingle
WaitOnAddress
shell32
CommandLineToArgvW
SHGetKnownFolderPath
userenv
GetUserProfileDirectoryW
oleaut32
SysFreeString
SysStringLen
GetErrorInfo
user32
SendMessageTimeoutW
cfgmgr32
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_SizeW
ws2_32
getsockname
WSASocketW
getpeername
shutdown
send
setsockopt
WSAIoctl
recv
bind
connect
closesocket
getsockopt
ioctlsocket
freeaddrinfo
WSASend
WSACleanup
WSAStartup
WSAGetLastError
getaddrinfo
crypt32
CertSetCertificateContextProperty
CertOpenStore
CertCloseStore
CertGetCertificateChain
CertFreeCertificateContext
CertAddEncodedCertificateToStore
CertFreeCertificateChainEngine
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
CertCreateCertificateChainEngine
generic
count=172,
id=261,
version=33145,
count=25,
id=260,
version=33145,
count=12,
id=259,
version=33145,
count=10,
id=259,
version=35721,
count=16,
id=260,
version=35721,
count=52,
id=261,
version=35721,
count=5,
id=257,
version=33145,
count=1,
id=261,
version=36248,
count=87,
id=260,
version=36248,
count=274,
id=1,
productName=Unmarked objects,
count=69,
productName=Unmarked objects (old),
count=1,
id=256,
version=36248,
count=1,
id=255,
version=36248,
count=1,
id=258,
version=36248,