kernel32
GetExitCodeProcess
SetConsoleCtrlHandler
MoveFileA
WriteProcessMemory
WaitForMultipleObjects
GetModuleHandleA
OpenProcess
MoveFileExA
WritePrivateProfileStringA
SetFileAttributesA
VirtualAllocEx
DeleteCriticalSection
ExitProcess
SetThreadExecutionState
CreateRemoteThread
CreateProcessA
VirtualFreeEx
GetPrivateProfileIntA
GetPrivateProfileStringA
IsWow64Process
WriteConsoleW
SetEndOfFile
HeapSize
Process32Next
GetFileAttributesA
CreateToolhelp32Snapshot
InitializeCriticalSection
LeaveCriticalSection
TerminateProcess
EnterCriticalSection
Process32First
CreateEventA
CreateThread
SetEvent
Sleep
WaitForSingleObject
CreateDirectoryA
GetCurrentProcessId
LocalFree
CloseHandle
DeleteFileA
CreateFileA
GetLastError
CopyFileA
ProcessIdToSessionId
MultiByteToWideChar
GetEnvironmentVariableA
GetCurrentProcess
GetModuleFileNameA
IsBadReadPtr
FreeLibrary
GetProcessHeap
GetProcAddress
HeapAlloc
GetNativeSystemInfo
LoadLibraryA
VirtualAlloc
VirtualFree
SetLastError
HeapFree
WTSGetActiveConsoleSessionId
VirtualProtect
CreateFileW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileAttributesExW
GetConsoleOutputCP
FlushFileBuffers
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
RtlUnwind
GetFileSizeEx
HeapReAlloc
GetFileType
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetCommandLineW
GetCommandLineA
GetModuleFileNameW
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
GetCurrentThreadId
WideCharToMultiByte
WaitForSingleObjectEx
GetExitCodeThread
QueryPerformanceCounter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
ResetEvent
CreateEventW
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ReadFile
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
WriteFile
advapi32
AdjustTokenPrivileges
CryptAcquireContextA
RegCloseKey
ConvertSidToStringSidA
RegQueryValueExA
LookupPrivilegeValueA
RegCreateKeyExA
CreateProcessWithTokenW
CryptCreateHash
CryptHashData
RegSetValueExA
CryptDestroyHash
RegOpenKeyExA
CryptGetHashParam
CryptReleaseContext
CreateProcessAsUserA
SetTokenInformation
DuplicateTokenEx
CreateServiceA
StartServiceCtrlDispatcherA
QueryServiceStatus
CloseServiceHandle
QueryServiceConfigA
SetServiceStatus
RegisterServiceCtrlHandlerA
OpenSCManagerA
DeleteService
ControlService
StartServiceA
ChangeServiceConfig2A
QueryServiceStatusEx
OpenServiceA
EqualSid
AllocateAndInitializeSid
GetUserNameA
ConvertStringSidToSidW
OpenProcessToken
FreeSid
CheckTokenMembership
GetTokenInformation
shell32
ShellExecuteExA
ShellExecuteA
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
oleaut32
VariantClear
SysAllocString
SysFreeString
VariantInit
userenv
DestroyEnvironmentBlock
CreateEnvironmentBlock
wtsapi32
WTSFreeMemory
WTSQueryUserToken
WTSEnumerateSessionsA
ws2_32
setsockopt
send
inet_ntop
recv
htons
socket
WSAGetLastError
freeaddrinfo
inet_addr
WSAStartup
getaddrinfo
inet_pton
closesocket
WSACleanup
connect
iphlpapi
GetInterfaceInfo
generic
count=184,
id=261,
version=33145,
count=21,
id=260,
version=33145,
count=9,
id=259,
version=33145,
count=1,
productName=Unmarked objects (old),
count=1,
id=262,
version=33145,
count=17,
id=260,
version=30034,
count=10,
id=259,
version=30034,
count=88,
id=261,
version=30034,
count=21,
id=257,
version=33145,
count=252,
id=1,
productName=Unmarked objects,
count=6,
id=265,
version=30159,
count=1,
id=255,
version=30159,
count=1,
id=151,
count=1,
id=258,
version=30159,