ntdll
NtCreateNamedPipeFile
RtlNtStatusToDosError
NtCreateFile
NtCancelIoFileEx
NtDeviceIoControlFile
NtWriteFile
NtReadFile
NtOpenFile
RtlGetVersion
advapi32
RegGetValueA
SystemFunction036
CredDeleteW
CredFree
CredReadW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegQueryValueExW
CredWriteW
RegEnumKeyExW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegDeleteTreeW
RegCreateKeyTransactedW
RegCreateKeyExW
RegOpenKeyTransactedW
RegQueryInfoKeyW
LookupPrivilegeValueA
kernel32
GetNumberOfConsoleInputEvents
ReadConsoleInputW
GetConsoleCursorInfo
SetConsoleCursorInfo
CreateWaitableTimerExW
SetWaitableTimer
WaitForSingleObject
Sleep
ReleaseSemaphore
SwitchToThread
GetFileInformationByHandleEx
GetStringTypeW
GetCPInfo
LockFileEx
SetConsoleCursorPosition
FindNextFileW
ReadFile
GetOverlappedResult
PostQueuedCompletionStatus
WriteFile
CancelIoEx
CreateIoCompletionPort
SetFileCompletionNotificationModes
GetQueuedCompletionStatusEx
GetModuleHandleA
GetProcAddress
DeviceIoControl
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameW
GetCommandLineW
GetOEMCP
DeleteFileW
LocalFree
CreateProcessA
ExitProcess
GetCurrentProcess
DuplicateHandle
GetCurrentThreadId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetCurrentDirectoryW
WaitForSingleObjectEx
LoadLibraryA
lstrlenW
GetCurrentProcessId
CreateMutexA
WideCharToMultiByte
ReleaseMutex
GetConsoleOutputCP
MultiByteToWideChar
WriteConsoleW
GetEnvironmentVariableW
ReadFileEx
GetModuleHandleW
FormatMessageW
SetHandleInformation
CreateThread
GetCurrentThread
SetThreadStackGuarantee
GetFullPathNameW
SetFileTime
FindFirstFileExW
ReadConsoleW
CreateEventW
CreateDirectoryW
GetExitCodeProcess
WaitForMultipleObjects
CancelIo
TerminateProcess
GetProcessHeap
CreateProcessW
GetFileAttributesW
GetACP
GetTempPathW
RemoveDirectoryW
SetFileAttributesW
CopyFileExW
MoveFileExW
FillConsoleOutputAttribute
CreateHardLinkW
GetFileType
SetConsoleCtrlHandler
UnregisterWaitEx
RegisterWaitForSingleObject
FlushProcessWriteBuffers
SetCurrentDirectoryW
CreateSemaphoreA
SetUnhandledExceptionFilter
SetEnvironmentVariableW
AddVectoredExceptionHandler
UnlockFile
CloseHandle
FillConsoleOutputCharacterA
WriteFileEx
IsValidCodePage
GetSystemTimeAsFileTime
GetBinaryTypeW
GetLastError
SetStdHandle
SleepEx
CreateFileW
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
LoadLibraryExW
FreeLibrary
FindResourceW
SizeofResource
LoadResource
LockResource
GetModuleHandleExA
GetFileSizeEx
FlushFileBuffers
LoadLibraryExA
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
InitOnceExecuteOnce
TlsAlloc
TlsGetValue
TlsSetValue
LoadLibraryW
SetLastError
LCMapStringW
SetEndOfFile
GetSystemInfo
UnmapViewOfFile
CompareStringW
CreateFileMappingW
MapViewOfFile
VirtualProtect
OutputDebugStringW
UnhandledExceptionFilter
GetSystemTimePreciseAsFileTime
GetFinalPathNameByHandleW
SetConsoleTextAttribute
IsDebuggerPresent
GetCommandLineA
IsProcessorFeaturePresent
GetModuleHandleExW
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetConsoleScreenBufferInfo
SetConsoleMode
GetConsoleMode
GetStdHandle
GetFileInformationByHandle
SetNamedPipeHandleState
SetFilePointerEx
SetFileInformationByHandle
FindClose
GetDynamicTimeZoneInformation
HeapAlloc
EncodePointer
HeapReAlloc
FlsFree
FlsSetValue
FlsGetValue
GetSystemDirectoryW
GetWindowsDirectoryW
FlsAlloc
RaiseException
RtlPcToFileHeader
RtlUnwindEx
CreateSymbolicLinkW
HeapFree
HeapSize
CompareStringOrdinal
QueryPerformanceCounter
QueryPerformanceFrequency
GetEnvironmentVariableA
TryAcquireSRWLockExclusive
GetProcessTimes
GetCurrentProcessorNumber
VirtualAlloc
VirtualFree
VirtualQuery
WriteConsoleA
GetStartupInfoW
InitializeSListHead
bcryptprimitives
ProcessPrng
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressSingle
WakeByAddressAll
shell32
CommandLineToArgvW
SHGetKnownFolderPath
userenv
GetUserProfileDirectoryW
oleaut32
SysFreeString
SysStringLen
GetErrorInfo
user32
SendMessageTimeoutW
cfgmgr32
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_SizeW
ws2_32
WSAGetLastError
ioctlsocket
shutdown
getsockname
send
WSASocketW
bind
recv
closesocket
connect
setsockopt
getsockopt
WSAIoctl
freeaddrinfo
WSACleanup
WSAStartup
WSASend
getpeername
getaddrinfo
crypt32
CertFreeCertificateChain
CertAddEncodedCertificateToStore
CertOpenStore
CertFreeCertificateChainEngine
CertFreeCertificateContext
CertGetCertificateChain
CertCloseStore
CertCreateCertificateChainEngine
CertVerifyCertificateChainPolicy
CertSetCertificateContextProperty
generic
count=172,
id=261,
version=33145,
count=25,
id=260,
version=33145,
count=12,
id=259,
version=33145,
count=10,
id=259,
version=35721,
count=16,
id=260,
version=35721,
count=52,
id=261,
version=35721,
count=3,
id=257,
version=33145,
count=1,
id=261,
version=36252,
count=87,
id=260,
version=36252,
count=274,
id=1,
productName=Unmarked objects,
count=69,
productName=Unmarked objects (old),
count=1,
id=256,
version=36252,
count=1,
id=255,
version=36252,
count=1,
id=258,
version=36252,