kernel32
RtlUnwind
FreeLibrary
LoadLibraryW
GetTempPathA
HeapValidate
UnmapViewOfFile
UnlockFileEx
GetFullPathNameA
LockFile
UnregisterWaitEx
GetDiskFreeSpaceW
HeapCreate
WriteFile
FindFirstFileA
GetFileAttributesExA
GetModuleFileNameW
ReadFile
GetComputerNameExW
CreateFileW
GetProcessHeap
HeapAlloc
HeapFree
GetTickCount64
GetModuleFileNameA
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetProcAddress
GetNamedPipeServerProcessId
CreateEventW
TlsGetValue
TlsSetValue
GetModuleHandleA
GetCurrentThreadId
OutputDebugStringA
GetCurrentThread
CreateEventA
GetSystemTime
SystemTimeToFileTime
GetCurrentProcessId
ResetEvent
Process32FirstW
SetProcessInformation
SetPriorityClass
GetWindowsDirectoryW
FindFirstFileW
UnregisterWait
RegisterWaitForSingleObject
SetConsoleCtrlHandler
ProcessIdToSessionId
K32GetModuleFileNameExW
GetCurrentProcess
GetExitCodeProcess
CreateProcessW
WTSGetActiveConsoleSessionId
GetOverlappedResult
CancelIoEx
ExpandEnvironmentStringsA
GetQueuedCompletionStatusEx
SetFileCompletionNotificationModes
MoveFileExA
GetEnvironmentVariableA
VerifyVersionInfoW
MapViewOfFile
CreateFileMappingW
FindNextFileA
LockFileEx
UnlockFile
HeapDestroy
HeapCompact
DeleteFileA
FlushViewOfFile
GetDiskFreeSpaceA
SetThreadPriority
CompareFileTime
SetFilePointer
FileTimeToSystemTime
Process32NextW
CreateToolhelp32Snapshot
CancelIo
QueryFullProcessImageNameW
OpenProcess
FormatMessageA
TlsFree
WideCharToMultiByte
DeleteCriticalSection
LocalFree
QueueUserAPC
CloseHandle
TlsAlloc
TerminateThread
GetTickCount
FlushFileBuffers
Sleep
IsDebuggerPresent
GetComputerNameExA
DeviceIoControl
SetEvent
GetLastError
FormatMessageW
PostQueuedCompletionStatus
WaitForSingleObject
LeaveCriticalSection
WaitForMultipleObjects
GetFileSize
EnterCriticalSection
WriteConsoleW
HeapSize
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetEndOfFile
GetOEMCP
IsValidCodePage
CreatePipe
GetTimeZoneInformation
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetCurrentDirectoryW
FindClose
FindNextFileW
SetLastError
MultiByteToWideChar
VerSetConditionMask
GetStdHandle
CreateIoCompletionPort
GetQueuedCompletionStatus
InitializeCriticalSectionAndSpinCount
SleepEx
SetWaitableTimer
CreateWaitableTimerA
VerifyVersionInfoA
GetDynamicTimeZoneInformation
GetConsoleMode
WriteConsoleA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetFileAttributesA
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
GetModuleHandleExW
GetSystemDirectoryA
LoadLibraryA
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
VirtualLock
SwitchToFiber
DeleteFiber
CreateFiberEx
GetFileType
GetModuleHandleW
InitializeCriticalSection
TryEnterCriticalSection
ReleaseSemaphore
GetExitCodeThread
CreateSemaphoreA
GetEnvironmentVariableW
GetACP
ConvertFiberToThread
ConvertThreadToFiberEx
RtlVirtualUnwind
SetConsoleMode
ReadConsoleA
ReadConsoleW
GetVersionExW
CopyFileA
SetUnhandledExceptionFilter
ExpandEnvironmentStringsW
GetFileSizeEx
SetFileTime
GetFileAttributesW
lstrlenW
CreateFileA
SetNamedPipeHandleState
WaitNamedPipeA
ConnectNamedPipe
DisconnectNamedPipe
CreateNamedPipeA
GetNamedPipeClientProcessId
GetNamedPipeClientSessionId
GetSystemDirectoryW
CreateDirectoryW
GetNativeSystemInfo
CancelWaitableTimer
CreateWaitableTimerW
ReleaseMutex
CreateMutexW
QueryPerformanceFrequency
QueryPerformanceCounter
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
GetThreadPriority
WaitForSingleObjectEx
K32EnumProcesses
SetThreadDescription
RtlPcToFileHeader
RaiseException
TryAcquireSRWLockExclusive
SleepConditionVariableSRW
TryAcquireSRWLockShared
GetLocaleInfoEx
SetCurrentDirectoryW
FindFirstFileExW
GetFileAttributesExW
GetFileInformationByHandle
GetFinalPathNameByHandleW
GetFullPathNameW
SetFileAttributesW
SetFileInformationByHandle
GetTempPathW
AreFileApisANSI
CopyFileW
MoveFileExW
GetFileInformationByHandleEx
GetStringTypeW
InitOnceComplete
InitOnceBeginInitialize
LoadLibraryExW
IsProcessorFeaturePresent
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
UnhandledExceptionFilter
TerminateProcess
InitializeSListHead
GetStartupInfoW
WaitForMultipleObjectsEx
OpenEventA
ResumeThread
RtlUnwindEx
InterlockedPushEntrySList
CreateThread
ExitThread
FreeLibraryAndExitThread
DuplicateHandle
DeleteFileW
ExitProcess
SetEnvironmentVariableW
GetDriveTypeW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
GetConsoleOutputCP
SetStdHandle
SetFilePointerEx
GetCommandLineA
GetCommandLineW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
user32
DestroyWindow
UnregisterPowerSettingNotification
RegisterPowerSettingNotification
CharNextW
PostQuitMessage
GetWindowLongPtrA
RegisterClassExA
LoadIconA
TranslateMessage
CreateWindowExA
DefWindowProcA
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
RegisterDeviceNotificationA
PostMessageA
SetWindowLongPtrA
LoadCursorA
DispatchMessageA
GetMessageA
UnregisterDeviceNotification
WaitForInputIdle
advapi32
DeregisterEventSource
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptDestroyHash
CryptSignHashW
CryptEnumProvidersW
CryptGenRandom
CreateProcessAsUserW
RegCreateKeyExW
CryptEncrypt
ConvertSecurityDescriptorToStringSecurityDescriptorW
RegDeleteKeyExA
RegEnumKeyExA
RegEnumValueA
RegQueryValueExW
GetSecurityInfo
ChangeServiceConfigA
QueryServiceConfigW
StartServiceW
CopySid
CreateWellKnownSid
EqualSid
GetLengthSid
LookupAccountSidA
LookupAccountNameW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
OpenThreadToken
CheckTokenMembership
DuplicateTokenEx
ImpersonateSelf
RevertToSelf
OpenServiceA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetEntriesInAclA
RegisterEventSourceW
CreateServiceW
StartServiceCtrlDispatcherA
QueryServiceStatus
OpenSCManagerW
SetServiceStatus
ChangeServiceConfig2W
RegisterServiceCtrlHandlerExA
DeleteService
ControlService
OpenServiceW
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
GetTokenInformation
RegDeleteValueA
RegGetValueA
ConvertStringSidToSidA
RegSetValueExW
RegDeleteValueW
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
ConvertSidToStringSidA
CloseServiceHandle
RegQueryInfoKeyW
RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptImportKey
CryptHashData
CryptGetHashParam
CryptAcquireContextA
RegNotifyChangeKeyValue
SystemFunction036
RegGetValueW
ole32
CoInitializeSecurity
CoInitializeEx
CoSetProxyBlanket
StringFromGUID2
CoTaskMemFree
CoCreateInstance
CoUninitialize
oleaut32
VariantInit
SysStringLen
SysAllocString
SysFreeString
SafeArrayUnaccessData
SafeArrayAccessData
VariantClear
winhttp
WinHttpOpen
WinHttpConnect
WinHttpSendRequest
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpReceiveResponse
rpcrt4
UuidFromStringA
UuidToStringA
UuidCreate
UuidFromStringW
RpcStringFreeA
fwpuclnt
FwpmFilterDeleteById0
FwpmSessionEnum0
FwpmFilterGetById0
FwpmFilterAdd0
FwpmSubLayerDeleteByKey0
FwpmNetEventSubscribe1
FwpmSubLayerAdd0
FwpmGetAppIdFromFileName0
FwpmEngineOpen0
FwpmNetEventUnsubscribe0
FwpmFreeMemory0
FwpmSessionCreateEnumHandle0
FwpmEngineClose0
FwpmSessionDestroyEnumHandle0
version
GetFileVersionInfoA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoW
VerQueryValueA
setupapi
SetupDiCreateDeviceInfoListExW
SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInfoW
CM_Get_DevNode_Status
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInfoListDetailW
SetupDiCreateDeviceInfoW
SetupDiGetINFClassW
SetupDiCallClassInstaller
SetupDiGetClassDevsExW
SetupDiGetDeviceRegistryPropertyW
CM_Get_Device_ID_ExW
SetupDiSetDeviceRegistryPropertyW
SetupDiSetClassInstallParamsW
SetupSetNonInteractiveMode
SetupDiClassGuidsFromNameExW
SetupDiGetDeviceInstallParamsW
SetupDiGetClassDevsA
SetupDiGetDeviceInstanceIdA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
crypt32
CertEnumCertificatesInStore
CertOpenStore
CertCloseStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenSystemStoreW
CertGetNameStringA
CryptProtectData
CryptUnprotectData
CryptMsgOpenToDecode
CryptMsgClose
CertDeleteCertificateFromStore
CryptMsgUpdate
CryptMsgGetParam
CertAddCertificateContextToStore
CryptQueryObject
CryptHashCertificate
CertVerifyTimeValidity
CryptAcquireCertificatePrivateKey
CryptFindCertificateKeyProvInfo
CertGetNameStringW
CryptStringToBinaryA
PFXImportCertStore
CryptDecodeObjectEx
CertFindExtension
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CertFindCertificateInStore
wtsapi32
WTSEnumerateSessionsA
WTSEnumerateSessionsW
WTSQuerySessionInformationW
WTSFreeMemory
WTSQueryUserToken
ws2_32
WSACreateEvent
WSACloseEvent
inet_addr
getsockname
WSAIoctl
WSAWaitForMultipleEvents
WSAEventSelect
WSAEnumNetworkEvents
WSAStartup
WSACleanup
ntohl
htons
getprotobyname
getnameinfo
WSASocketA
socket
sendto
recvfrom
getpeername
send
recv
getservbyname
getservbyport
gethostbyaddr
inet_ntoa
gethostbyname
WSAStringToAddressW
ntohs
inet_pton
inet_ntop
WSARecvFrom
WSASendTo
shutdown
WSAGetLastError
InetNtopW
htonl
freeaddrinfo
getaddrinfo
WSASetLastError
WSAAddressToStringW
gethostname
__WSAFDIsSet
accept
bind
closesocket
connect
ioctlsocket
getsockopt
listen
select
setsockopt
WSARecv
WSASend
WSASocketW
WSAResetEvent
wininet
InternetSetOptionA
iphlpapi
InitializeIpInterfaceEntry
DeleteUnicastIpAddressEntry
AddIPAddress
GetUnicastIpAddressTable
ConvertInterfaceGuidToLuid
SetIpInterfaceEntry
CancelIPChangeNotify
GetBestRoute2
FlushIpNetTable
DeleteIpForwardEntry
NotifyAddrChange
GetIpInterfaceEntry
CreateIpForwardEntry
NotifyRouteChange
NotifyUnicastIpAddressChange
ConvertInterfaceLuidToIndex
if_nametoindex
if_indextoname
DeleteIPAddress
GetExtendedUdpTable
IcmpSendEcho2Ex
IcmpCloseHandle
IcmpCreateFile
NotifyRouteChange2
CancelMibChangeNotify2
NotifyIpInterfaceChange
ConvertInterfaceIndexToLuid
GetNetworkParams
GetIpForwardTable2
GetInterfaceInfo
IpRenewAddress
GetIfTable2Ex
GetAdaptersAddresses
IpReleaseAddress
FreeMibTable
GetIpForwardTable
GetBestRoute
GetIfEntry2
GetExtendedTcpTable
ConvertInterfaceLuidToGuid
wevtapi
EvtExportLog
EvtQuery
EvtNext
EvtClose
EvtRender
pdh
PdhCollectQueryData
PdhLookupPerfNameByIndexW
PdhAddEnglishCounterW
PdhAddCounterW
PdhCloseQuery
PdhOpenQueryW
PdhCalculateCounterFromRawValue
PdhGetRawCounterValue
fltlib
FilterUnload
FilterGetMessage
FilterSendMessage
FilterLoad
FilterConnectCommunicationPort
bcrypt
BCryptGenRandom
BCryptFinishHash
BCryptDestroyHash
BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptCloseAlgorithmProvider
BCryptHashData
BCryptCreateHash
powrprof
CallNtPowerInformation
ncrypt
NCryptEncrypt
NCryptDecrypt
NCryptFreeObject
NCryptGetProperty
shell32
SHGetKnownFolderPath
SHGetSpecialFolderPathW
wintrust
CryptCATAdminReleaseCatalogContext
WinVerifyTrust
CryptCATAdminAcquireContext2
CryptCATAdminReleaseContext
CryptCATAdminCalcHashFromFileHandle2
CryptCATAdminEnumCatalogFromHash
CryptCATCatalogInfoFromContext
userenv
DestroyEnvironmentBlock
CreateEnvironmentBlock
wldap32
ord22
ord143
ord217
ord26
ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord41
ord50
ord45
ord60
ord211
ord27
ord46
normaliz
IdnToUnicode
IdnToAscii
secur32
LsaGetLogonSessionData
LsaEnumerateLogonSessions
LsaFreeReturnBuffer
netapi32
DsRoleGetPrimaryDomainInformation
NetGetJoinInformation
NetApiBufferFree
DsRoleFreeMemory
libwaapi
wa_api_teardown
wa_api_invoke
wa_api_setup
wa_api_free
generic
count=235,
id=261,
version=33145,
count=24,
id=259,
version=33145,
count=15,
id=261,
version=31933,
count=11,
id=253,
version=35207,
count=19,
id=260,
version=35207,
count=12,
id=259,
version=35207,
count=123,
id=261,
version=35207,
count=17,
id=260,
version=35222,
count=39,
productName=Unmarked objects (old),
count=231,
id=261,
version=35222,
count=12,
id=260,
version=33808,
count=3,
id=260,
version=34435,
count=2,
id=257,
version=24247,
count=17,
id=260,
version=32822,
count=62,
id=261,
version=31937,
count=1,
id=260,
version=31937,
count=1094,
id=260,
version=33523,
count=56,
id=260,
version=33145,
count=1,
id=262,
version=33145,
count=61,
id=257,
version=33145,
count=699,
id=1,
productName=Unmarked objects,
count=200,
id=265,
version=35222,
count=1,
id=256,
version=35222,
count=1,
id=255,
version=35222,
count=1,
id=151,
count=1,
id=258,
version=35222,