kernel32
lstrcmpA
MultiByteToWideChar
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTickCount64
HeapFree
HeapAlloc
GetProcessHeap
SizeofResource
FreeResource
LockResource
LoadResource
FindResourceW
GetFirmwareEnvironmentVariableW
WaitForMultipleObjects
Thread32Next
Thread32First
OpenThread
WriteConsoleW
HeapSize
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
ExpandEnvironmentStringsW
GetExitCodeProcess
CreateTimerQueue
GetFileTime
MoveFileW
GetSystemTimeAsFileTime
WaitForSingleObject
FindClose
SetFileTime
RemoveDirectoryW
DeleteTimerQueue
FindNextFileW
CreateTimerQueueTimer
FindFirstFileW
CreateDirectoryW
GetLocalTime
GetCurrentThreadId
GetPrivateProfileStringW
GetPrivateProfileIntW
QueueUserWorkItem
GetFileAttributesW
GetCurrentProcess
FlushFileBuffers
LocalFree
DeleteFileW
FormatMessageW
SetEndOfFile
SetFilePointer
WriteFile
SetLastError
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionEx
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryW
GetLocaleInfoW
IsValidCodePage
FindFirstFileExW
HeapReAlloc
ReadConsoleW
GetTimeZoneInformation
ReadFile
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
GetFileType
GetCommandLineW
DeviceIoControl
WTSGetActiveConsoleSessionId
ProcessIdToSessionId
TerminateProcess
OOBEComplete
RegisterWaitUntilOOBECompleted
GetProductInfo
GetCurrentProcessId
Process32FirstW
SetEvent
Process32NextW
CreateEventW
CreateToolhelp32Snapshot
Sleep
GetCommandLineA
GetStdHandle
ExitProcess
FreeLibraryAndExitThread
ExitThread
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwindEx
GetModuleFileNameW
CloseHandle
CreateFileW
OpenProcess
OutputDebugStringW
GetLocaleInfoEx
GetCPInfo
CompareStringEx
LCMapStringEx
InitializeCriticalSectionAndSpinCount
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
WideCharToMultiByte
QueryPerformanceFrequency
GetStringTypeW
RtlPcToFileHeader
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
InitOnceComplete
InitOnceBeginInitialize
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryEnterCriticalSection
EncodePointer
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
RtlUnwind
user32
PostThreadMessageW
wsprintfW
TranslateMessage
GetMessageW
DispatchMessageW
advapi32
AdjustTokenPrivileges
RegGetValueW
RegOpenKeyExW
OpenProcessToken
RegCloseKey
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
GetUserNameW
RegCreateKeyExW
RegSetValueExW
StartServiceW
QueryServiceStatusEx
CreateServiceW
QueryServiceStatus
DeleteService
ControlService
CloseServiceHandle
OpenSCManagerW
ChangeServiceConfig2W
OpenServiceW
DeregisterEventSource
RegisterServiceCtrlHandlerExW
SetServiceStatus
StartServiceCtrlDispatcherW
RegisterEventSourceW
ReportEventW
SetTokenInformation
CreateProcessAsUserW
DuplicateTokenEx
LookupAccountSidW
GetTokenInformation
StartTraceW
FlushTraceW
ControlTraceW
EnableTraceEx2
EventWriteTransfer
EventRegister
EventSetInformation
EventUnregister
LookupPrivilegeValueW
RegQueryValueExW
shell32
ShellExecuteExW
SHGetFolderPathW
ole32
CoInitializeSecurity
CoSetProxyBlanket
CoInitialize
CoInitializeEx
CoCreateInstance
CoUninitialize
oleaut32
VariantInit
SysFreeString
SysStringLen
SysAllocString
VariantClear
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
crypt32
CryptDecodeObject
CertOpenStore
CertGetNameStringW
CertFindCertificateInStore
CryptMsgGetParam
CertCloseStore
CryptQueryObject
CryptMsgOpenToDecode
CryptFindOIDInfo
CryptMsgUpdate
CryptMsgClose
CryptDecodeObjectEx
winhttp
WinHttpReceiveResponse
WinHttpOpen
WinHttpQueryDataAvailable
WinHttpCrackUrl
WinHttpConnect
WinHttpQueryHeaders
WinHttpReadData
WinHttpOpenRequest
WinHttpSetOption
WinHttpCloseHandle
WinHttpSendRequest
WinHttpSetTimeouts
wtsapi32
WTSEnumerateSessionsW
WTSQueryUserToken
WTSFreeMemory
userenv
DestroyEnvironmentBlock
CreateEnvironmentBlock
wldp
WldpQueryWindowsLockdownMode
generic
count=10,
id=259,
version=30795,
count=183,
id=261,
version=30795,
count=2,
id=253,
version=28518,
count=104,
id=261,
version=30034,
count=18,
id=260,
version=30034,
count=10,
id=259,
version=30034,
count=26,
id=260,
version=30795,
count=31,
id=257,
version=30795,
count=294,
id=1,
productName=Unmarked objects,
count=25,
id=265,
version=30153,
count=1,
id=256,
version=30153,
count=1,
id=255,
version=30153,
count=1,
id=151,
count=1,
id=258,
version=30153,