advapi32
RegisterServiceCtrlHandlerExW
SetServiceStatus
StartServiceCtrlDispatcherW
RegGetValueW
CryptEncrypt
CryptImportKey
CryptHashData
CryptGetHashParam
CryptGenRandom
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenProcessToken
AdjustTokenPrivileges
AllocateAndInitializeSid
CheckTokenMembership
DuplicateTokenEx
FreeSid
GetTokenInformation
SetTokenInformation
LookupPrivilegeValueW
CreateProcessWithTokenW
CloseServiceHandle
OpenSCManagerW
OpenServiceW
QueryServiceConfigW
ConvertSidToStringSidW
ChangeServiceConfigW
ControlService
CreateServiceW
DeleteService
QueryServiceStatus
StartServiceW
OpenThreadToken
AccessCheck
DuplicateToken
EqualSid
GetFileSecurityW
GetSecurityDescriptorDacl
InitializeSecurityDescriptor
MapGenericMask
SetSecurityDescriptorDacl
RegCloseKey
RegOpenKeyExW
QueryServiceObjectSecurity
SetServiceObjectSecurity
SetEntriesInAclW
GetExplicitEntriesFromAclW
GetNamedSecurityInfoW
GetSecurityInfo
SetNamedSecurityInfoW
SetSecurityInfo
BuildTrusteeWithSidW
ConvertStringSidToSidW
RegCreateKeyExW
RegDeleteKeyW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegDeleteValueW
RegQueryValueExW
RegDeleteTreeW
GetAce
InitializeAcl
DeregisterEventSource
RegisterEventSourceW
ReportEventW
kernel32
GetCommandLineA
ExitThread
FindFirstFileExW
GetFullPathNameW
RtlUnwind
FreeLibraryAndExitThread
SetStdHandle
GetCommandLineW
SetConsoleCtrlHandler
GetFileInformationByHandle
PeekNamedPipe
GetConsoleOutputCP
HeapSize
GetLastError
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
ExitProcess
CreateThread
IsValidCodePage
GetProcessHeap
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapFree
SystemTimeToTzSpecificLocalTime
HeapAlloc
DecodePointer
InitializeCriticalSectionEx
DeleteCriticalSection
ExpandEnvironmentStringsW
CreateDirectoryW
CreateFileW
GetDriveTypeW
GetFileAttributesExW
GetVolumePathNameW
ReadFile
SetFileAttributesW
SetFilePointer
WriteFile
CloseHandle
CopyFileW
MoveFileExW
FileTimeToSystemTime
WaitForSingleObject
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
GetProcessId
OpenProcess
GetVersionExW
CreateJobObjectW
OpenJobObjectW
AssignProcessToJobObject
SetInformationJobObject
QueryInformationJobObject
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LocalAlloc
LocalFree
QueryFullProcessImageNameW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
MultiByteToWideChar
WideCharToMultiByte
GetVolumeInformationW
GetCurrentThread
GetTempPathW
WriteConsoleW
SetLastError
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
Sleep
GetSystemDirectoryA
FreeLibrary
LoadLibraryA
FormatMessageA
GetStdHandle
GetFileType
GetSystemInfo
VirtualFree
GetModuleHandleExW
GetEnvironmentVariableW
GetACP
GetSystemTimeAsFileTime
LoadLibraryW
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
FindClose
FindFirstFileW
FindNextFileW
GetSystemTime
SystemTimeToFileTime
QueryPerformanceCounter
GetTickCount
EnterCriticalSection
LeaveCriticalSection
VerSetConditionMask
QueryPerformanceFrequency
GetSystemDirectoryW
VerifyVersionInfoW
FormatMessageW
WaitForSingleObjectEx
GetEnvironmentVariableA
SleepEx
GetModuleHandleA
GetFileSizeEx
DeleteFileW
GetFileAttributesW
GetLongPathNameW
SetHandleInformation
RaiseException
InitializeCriticalSection
SetEvent
CreateEventW
GetProcessTimes
SetThreadPriority
GetThreadTimes
GetVersion
IsWow64Process
GetCurrentDirectoryW
GetLogicalProcessorInformationEx
GetNativeSystemInfo
RemoveDirectoryW
FlushFileBuffers
SetEndOfFile
SetFilePointerEx
TryAcquireSRWLockExclusive
IsDebuggerPresent
CreateActCtxW
ActivateActCtx
DeactivateActCtx
GetTimeZoneInformation
WakeConditionVariable
SleepConditionVariableSRW
OutputDebugStringW
LoadLibraryExW
SetEnvironmentVariableW
InitializeConditionVariable
WakeAllConditionVariable
GetExitCodeThread
EncodePointer
LCMapStringEx
GetCPInfo
GetStringTypeW
InitializeCriticalSectionAndSpinCount
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
GetStartupInfoW
iphlpapi
GetExtendedTcpTable
user32
EnumChildWindows
GetDesktopWindow
ShowWindow
GetWindow
GetForegroundWindow
GetShellWindow
MessageBoxW
GetWindowThreadProcessId
IsWindowVisible
SetWindowTextW
GetWindowTextW
GetProcessWindowStation
GetUserObjectInformationW
EnumThreadWindows
crypt32
CertCreateCertificateChainEngine
CertFindExtension
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryW
CertOpenSystemStoreW
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CryptStringToBinaryA
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertGetCertificateChain
CertGetNameStringA
CertDeleteCertificateFromStore
CertAddCertificateContextToStore
CertCreateCertificateContext
CertEnumCertificatesInStore
CertOpenStore
CertFreeCertificateChainEngine
CryptQueryObject
CertGetNameStringW
CertFreeCertificateContext
CertFindCertificateInStore
CertCloseStore
CryptMsgGetParam
CryptMsgClose
CryptUnprotectData
CryptProtectData
shell32
SHGetKnownFolderPath
ShellExecuteExW
CommandLineToArgvW
SHChangeNotify
ws2_32
setsockopt
listen
ntohl
ntohs
ioctlsocket
WSAStartup
WSACleanup
getsockname
gethostbyname
inet_addr
inet_ntoa
gethostbyaddr
getservbyport
getservbyname
WSASetLastError
recv
send
connect
shutdown
getpeername
recvfrom
sendto
WSACloseEvent
WSAIoctl
__WSAFDIsSet
getaddrinfo
freeaddrinfo
getnameinfo
select
WSAGetLastError
accept
bind
closesocket
getsockopt
htonl
htons
socket
ole32
CoUninitialize
CoSetProxyBlanket
CoCreateInstance
CoInitializeEx
CoTaskMemFree
oleaut32
SysFreeString
VariantInit
VariantClear
VariantChangeType
SysAllocString
generic
count=16,
id=259,
version=30795,
count=211,
id=261,
version=30795,
count=20,
id=260,
version=31935,
count=27,
id=259,
version=31935,
count=98,
id=261,
version=31935,
count=877,
id=260,
version=32216,
count=7,
id=253,
version=31935,
count=29,
id=260,
version=30795,
count=29,
id=257,
version=30795,
count=441,
id=1,
productName=Unmarked objects,
count=166,
id=261,
version=32216,
count=1,
id=255,
version=32216,
count=1,
id=151,
count=1,
id=258,
version=32216,