kernel32
FindClose
GetFullPathNameW
FindNextFileW
GetCurrentProcess
SetLastError
GetFileAttributesW
GetTempPathW
GetTempFileNameW
MoveFileExW
GetVolumePathNameW
GetDriveTypeW
GetDiskFreeSpaceExW
WideCharToMultiByte
TryEnterCriticalSection
SetEvent
ResetEvent
SuspendThread
ResumeThread
SwitchToThread
QueryPerformanceFrequency
QueryPerformanceCounter
GetProcAddress
GetModuleHandleW
GetTimeZoneInformation
GetModuleHandleExA
GetModuleFileNameA
LoadLibraryA
GetDynamicTimeZoneInformation
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
OutputDebugStringW
GetModuleHandleA
GetSystemDirectoryW
GetWindowsDirectoryW
CreateIoCompletionPort
CancelIo
CreateNamedPipeW
ConnectNamedPipe
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateProcessW
OutputDebugStringA
CreateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
FreeLibrary
VerSetConditionMask
VerifyVersionInfoW
GlobalMemoryStatusEx
GetNativeSystemInfo
RtlCaptureStackBackTrace
GetModuleHandleExW
CopyFileW
DeviceIoControl
GetFileAttributesExW
LoadLibraryW
GetCommandLineW
OpenProcess
GetTickCount
CreateMutexW
ReleaseMutex
GetFileTime
CreateToolhelp32Snapshot
Thread32First
GetExitCodeThread
OpenThread
HeapSize
HeapLock
Thread32Next
HeapUnlock
LoadLibraryExA
ReadProcessMemory
WriteProcessMemory
VirtualAlloc
GetSystemInfo
VirtualFree
Process32FirstW
Process32NextW
SetDllDirectoryW
LoadLibraryExW
TerminateProcess
VirtualProtect
FlushInstructionCache
FindFirstFileW
CreateFileA
MoveFileW
ReleaseSemaphore
WaitForMultipleObjects
VirtualQuery
SetErrorMode
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
IsWow64Process
GlobalAlloc
GlobalFree
GetFileSizeEx
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
IsValidLocale
LCMapStringW
GetTimeFormatW
InterlockedPopEntrySList
GetCurrentDirectoryW
SetCurrentDirectoryW
RemoveDirectoryW
CreateDirectoryW
SystemTimeToTzSpecificLocalTime
SetEndOfFile
GetFileSize
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
HeapFree
GetProcessHeap
HeapAlloc
SystemTimeToFileTime
FileTimeToSystemTime
MultiByteToWideChar
GetLocaleInfoW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitProcess
CloseHandle
PulseEvent
TerminateThread
Sleep
CreateEventW
WaitForSingleObject
FormatMessageA
GetCurrentProcessId
DeleteCriticalSection
LocalFree
DecodePointer
RaiseException
GetLastError
CompareStringA
FormatMessageW
GetCurrentThreadId
InitializeCriticalSectionEx
GetModuleFileNameW
GetDateFormatW
CompareStringW
CreateDirectoryA
DeleteFileW
GetOverlappedResultEx
SetFileCompletionNotificationModes
CloseThreadpoolIo
WaitForThreadpoolIoCallbacks
CreateThreadpoolIo
StartThreadpoolIo
SetThreadpoolTimerEx
DebugBreak
GetLocalTime
GetCommandLineA
GetStdHandle
SetStdHandle
GetConsoleMode
GetConsoleOutputCP
GetExitCodeProcess
IsBadReadPtr
K32GetModuleBaseNameW
GetEnvironmentVariableW
MapViewOfFile
PeekNamedPipe
GetFileType
FreeLibraryAndExitThread
ExitThread
InterlockedPushEntrySList
RtlUnwind
CreateFileMappingW
UnmapViewOfFile
OpenFileMappingW
HeapDestroy
FindResourceW
LoadResource
FindResourceExW
LockResource
SizeofResource
WriteConsoleW
HeapQueryInformation
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
CreateSemaphoreW
SetConsoleCtrlHandler
IsValidCodePage
ReadConsoleW
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
GetStringTypeW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WaitForSingleObjectEx
InitOnceComplete
InitOnceBeginInitialize
FindFirstFileExW
GetFileInformationByHandle
SetFilePointerEx
EncodePointer
LCMapStringEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CreateEventExW
GetTickCount64
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CompareStringEx
GetCPInfo
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
GetStartupInfoW
user32
PostThreadMessageW
TranslateMessage
DispatchMessageW
LoadStringW
UnregisterClassW
LoadStringA
GetMessageW
CharLowerBuffW
CharUpperBuffW
SetTimer
KillTimer
CharUpperW
GetClassInfoExW
SetWindowLongW
EnumThreadWindows
LoadCursorW
MsgWaitForMultipleObjectsEx
PeekMessageW
wsprintfW
RegisterClassExW
CreateWindowExW
IsWindowVisible
DestroyWindow
SendMessageTimeoutW
CallWindowProcW
DefWindowProcW
GetWindowLongW
IsWindow
PostQuitMessage
GetQueueStatus
PostMessageW
MessageBoxW
GetProcessWindowStation
GetUserObjectInformationA
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryValueExW
RevertToSelf
ImpersonateLoggedOnUser
FreeSid
SetTokenInformation
CreateRestrictedToken
CreateWellKnownSid
AllocateAndInitializeSid
DuplicateTokenEx
DeregisterEventSource
ConvertSidToStringSidW
RegGetValueW
RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
GetTokenInformation
OpenProcessToken
EventWriteTransfer
EventSetInformation
EventRegister
ReportEventW
RegisterEventSourceW
shell32
ord92
CommandLineToArgvW
SHFileOperationW
SHGetSpecialFolderPathW
SHGetFolderPathW
SHGetSpecialFolderPathA
SHGetKnownFolderPath
ole32
CoCreateInstance
CoInitializeEx
CLSIDFromString
StringFromCLSID
CoCreateGuid
CoTaskMemFree
oleaut32
VariantClear
VariantChangeType
shlwapi
PathMatchSpecW
PathAppendW
PathIsRelativeW
PathFileExistsW
mapi32
ord11
ord21
ord23
ord140
ord19
ord17
psapi
EnumProcessModules
GetModuleFileNameExW
GetModuleInformation
winmm
timeEndPeriod
timeBeginPeriod
timeGetTime
wintrust
WTHelperGetProvCertFromChain
WinVerifyTrust
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
crypt32
CertGetNameStringW
rpcrt4
UuidToStringA
RpcStringFreeA
generic
count=17,
id=259,
version=33140,
count=204,
id=261,
version=33140,
count=1,
id=253,
version=28518,
count=20,
id=260,
version=30034,
count=24,
id=259,
version=30034,
count=112,
id=261,
version=30034,
count=2,
id=253,
version=23601,
count=26,
id=260,
version=33140,
count=1,
id=262,
version=33140,
count=33,
id=257,
version=33140,
count=420,
id=1,
productName=Unmarked objects,
count=135,
id=265,
version=30159,
count=1,
id=256,
version=30159,
count=1,
id=255,
version=30159,
count=1,
id=151,
count=1,
id=258,
version=30159,