kernel32
SetTimeZoneInformation
GetNumaProcessorNode
GetNumaNodeProcessorMask
GetNumaAvailableMemoryNode
GetDateFormatW
GetTimeFormatW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
GetLocaleInfoW
GetCalendarInfoW
GetNumberFormatW
GetCurrencyFormatW
EnumCalendarInfoExW
EnumTimeFormatsW
EnumDateFormatsExW
GetThreadLocale
GetUserDefaultLangID
GetSystemDefaultLangID
GetSystemDefaultLCID
GetUserDefaultLCID
EnumSystemLocalesW
GetDllDirectoryW
EnumResourceLanguagesW
Wow64RevertWow64FsRedirection
Wow64EnableWow64FsRedirection
Wow64DisableWow64FsRedirection
WTSGetActiveConsoleSessionId
SetThreadStackGuarantee
SetProcessWorkingSetSizeEx
RtlCaptureStackBackTrace
ReOpenFile
QueryDepthSList
IsNLSDefinedString
InterlockedPopEntrySList
GetProcessWorkingSetSizeEx
GetProcessIdOfThread
GetNumaHighestNodeNumber
GetNativeSystemInfo
GetModuleHandleExA
GetLargePageMinimum
DecodePointer
ConvertThreadToFiberEx
WriteConsoleW
EnumResourceLanguagesA
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
TzSpecificLocalTimeToSystemTime
CreateFileMappingA
SetThreadExecutionState
SetThreadAffinityMask
LocalFree
BindIoCompletionCallback
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
IsWow64Process
DeleteTimerQueueTimer
CreateTimerQueueTimer
UnregisterWaitEx
QueueUserWorkItem
AllocateUserPhysicalPages
UnmapViewOfFile
MapViewOfFileEx
MapViewOfFile
OpenFileMappingW
CreateFileMappingW
SetStdHandle
GetStringTypeW
GetFileType
GetStdHandle
GetProcessHeap
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindClose
GetModuleHandleExW
ExitProcess
RtlPcToFileHeader
CreateFileW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
EncodePointer
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwindEx
InitializeSListHead
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetTimeZoneInformation
UnregisterWait
LocalAlloc
RegisterWaitForSingleObject
VirtualAllocEx
VirtualQuery
VirtualFree
VirtualProtect
VirtualAlloc
GetLogicalProcessorInformation
GetVersionExW
GetSystemDirectoryW
GetTickCount
GetSystemTimeAsFileTime
GetSystemInfo
SetThreadIdealProcessor
GetCurrentProcessorNumber
IsProcessorFeaturePresent
GetThreadTimes
GetThreadId
GetProcessId
GetExitCodeThread
GetCurrentThreadId
CreateThread
SwitchToThread
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
GetProcessTimes
QueueUserAPC
CreateWaitableTimerW
CreateSemaphoreW
WaitForMultipleObjects
Sleep
SetWaitableTimer
CreateEventW
CreateEventA
CreateMutexW
CreateMutexA
WaitForSingleObjectEx
SleepEx
WaitForSingleObject
ReleaseMutex
ReleaseSemaphore
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetQueuedCompletionStatus
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
QueryPerformanceCounter
SetErrorMode
SetLastError
GetLastError
RaiseException
AreFileApisANSI
GetVolumePathNamesForVolumeNameW
GetVolumeNameForVolumeMountPointW
GetLongPathNameW
FindFirstFileW
FindFirstFileA
user32
GetMessageW
TranslateMessage
DispatchMessageW
SendMessageW
PostMessageW
DefWindowProcW
PostQuitMessage
RegisterClassW
CreateWindowExW
DestroyWindow
SetTimer
GetWindowLongPtrW
SetWindowLongPtrW
advapi32
RegGetValueW
RegDeleteKeyExW
RegDeleteKeyExA
RegCreateKeyExA
RegCreateKeyExW
RegDeleteValueA
RegDeleteValueW
RegEnumKeyW
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExW
RegSetValueExA
RegSetValueExW
RegGetValueA
ole32
CoUninitialize
CoInitializeEx
shlwapi
SHCopyKeyA
SHDeleteKeyA
SHDeleteKeyW
SHCopyKeyW
psapi
EnumProcessModules
GetModuleFileNameExA
GetModuleFileNameExW
GetModuleInformation
EnumProcesses
GetProcessMemoryInfo
EnumPageFilesA
EnumPageFilesW
GetPerformanceInfo
GetDeviceDriverFileNameW
GetDeviceDriverFileNameA
GetDeviceDriverBaseNameW
GetDeviceDriverBaseNameA
EnumDeviceDrivers
GetMappedFileNameA
GetMappedFileNameW
InitializeProcessForWsWatch
QueryWorkingSetEx
QueryWorkingSet
EmptyWorkingSet
GetModuleBaseNameW
GetModuleBaseNameA
GetProcessImageFileNameW
GetProcessImageFileNameA
GetWsChanges
generic
count=137,
id=261,
version=33145,
count=8,
id=259,
version=33145,
count=9,
id=259,
version=35207,
count=15,
id=260,
version=35207,
count=33,
id=261,
version=35207,
count=14,
id=260,
version=33145,
count=39,
id=257,
version=33145,
count=404,
id=1,
productName=Unmarked objects,
count=1,
id=261,
version=35219,
count=2,
id=265,
version=35220,
count=1,
id=256,
version=35220,
count=1,
id=255,
version=35220,
count=1,
id=151,
count=1,
id=258,
version=35220,