kernel32
lstrcatA
MultiByteToWideChar
DeleteFileA
lstrcpyA
GetLogicalDriveStringsA
RemoveDirectoryA
lstrcpynA
LocalReAlloc
GetDiskFreeSpaceExA
CreateDirectoryA
GetTickCount
CancelIo
GetFileSizeEx
WriteProcessMemory
GetCurrentDirectoryA
SetCurrentDirectoryA
GetTempPathA
CopyFileA
OpenMutexA
MoveFileExA
GlobalAlloc
GlobalFree
SetFileAttributesA
GetProcAddress
VirtualAllocEx
CreateRemoteThread
VirtualFreeEx
IsWow64Process
GetExitCodeProcess
GlobalSize
OpenEventA
LoadLibraryA
GetSystemInfo
GlobalMemoryStatusEx
FreeLibrary
GetProcessTimes
GetCurrentThreadId
GetWindowsDirectoryA
VirtualProtect
IsBadReadPtr
LocalSize
lstrcmpA
IsProcessorFeaturePresent
GetModuleHandleW
FormatMessageA
PeekNamedPipe
DisconnectNamedPipe
GetSystemDirectoryA
InitializeProcThreadAttributeList
GetSystemDirectoryW
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
CreateProcessW
GetVolumeInformationA
lstrlenA
SetFilePointer
ExpandEnvironmentStringsA
GetCurrentDirectoryW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
HeapSize
HeapReAlloc
GetFileAttributesExW
ReadConsoleW
GetConsoleOutputCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
MoveFileExW
GetTimeZoneInformation
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileInformationByHandle
GetCommandLineW
QueryFullProcessImageNameA
FreeLibraryAndExitThread
ExitThread
GetModuleHandleExW
GetFileType
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwindEx
GetThreadPriority
SetThreadPriority
LoadLibraryW
GetProcessAffinityMask
CreateSemaphoreW
ReleaseSemaphore
WriteConsoleW
GetConsoleMode
GetStdHandle
FlushFileBuffers
SetFilePointerEx
DeleteFileW
GetDriveTypeA
RaiseFailFastException
GetFileAttributesW
CreateFileW
GetTempPathW
SetEndOfFile
FindNextFileW
FindFirstFileW
CreateDirectoryW
GetModuleFileNameW
GetStartupInfoW
InitializeSListHead
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
ResetEvent
InitializeCriticalSectionAndSpinCount
OutputDebugStringW
IsDebuggerPresent
GetStringTypeW
GetCPInfo
CompareStringEx
GetSystemTimeAsFileTime
GetFileAttributesExA
MoveFileA
GetPrivateProfileStringA
GetPrivateProfileIntA
SetThreadExecutionState
ExitProcess
WTSGetActiveConsoleSessionId
LocalFree
GetLocalTime
CreateThread
GetTickCount64
ProcessIdToSessionId
CreateToolhelp32Snapshot
OpenProcess
GetModuleHandleA
CreateMutexA
GetFullPathNameA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
Process32First
SetConsoleCtrlHandler
GetModuleFileNameA
VirtualAlloc
VirtualFree
GetNativeSystemInfo
GetVersionExA
CreateEventA
GetCurrentProcessId
TerminateThread
SetEvent
ResumeThread
GetEnvironmentVariableA
CreateProcessA
GetProcessHeap
GetFileSize
HeapAlloc
CloseHandle
CreateFileA
Sleep
WaitForSingleObject
CreatePipe
TerminateProcess
WriteFile
GetCurrentProcess
HeapFree
ReadFile
GlobalUnlock
WideCharToMultiByte
DeleteCriticalSection
GlobalLock
DecodePointer
RaiseException
GetFileAttributesA
GetLastError
FindFirstFileA
FindClose
InitializeCriticalSectionEx
FindNextFileA
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
LCMapStringEx
EncodePointer
RtlPcToFileHeader
InitOnceBeginInitialize
InitOnceComplete
QueryPerformanceFrequency
QueryPerformanceCounter
GetExitCodeThread
WaitForSingleObjectEx
TryEnterCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
LocalAlloc
WritePrivateProfileStringA
GetCurrentThread
Process32Next
GetCommandLineA
RtlUnwind
user32
GetClassNameA
TranslateMessage
DispatchMessageA
GetMessageA
GetClientRect
CreateWindowExA
CharLowerA
wsprintfA
CharNextA
SendInput
SetClipboardData
GetClipboardData
OpenInputDesktop
GetWindowTextA
ExitWindowsEx
EmptyClipboard
CloseClipboard
OpenClipboard
CloseDesktop
GetLastInputInfo
GetUserObjectInformationA
IsClipboardFormatAvailable
PeekMessageA
SendMessageA
SetThreadDesktop
GetClassNameW
GetShellWindow
EnumWindows
FindWindowA
LoadImageW
UpdateWindow
GetKeyState
GetForegroundWindow
FindWindowW
UnhookWindowsHookEx
GetKeyboardLayout
SetWindowsHookExA
CallNextHookEx
GetWindowThreadProcessId
GetMonitorInfoA
GetSystemMetrics
EnumDisplayMonitors
SetProcessWindowStation
OpenDesktopA
OpenWindowStationA
GetThreadDesktop
GetCursorPos
ReleaseDC
ChildWindowFromPoint
SetCursorPos
IsIconic
GetAncestor
SetForegroundWindow
ReleaseCapture
PtInRect
GetParent
MenuItemFromPoint
GetDesktopWindow
DrawIconEx
RealGetWindowClassA
CreateDesktopA
mouse_event
SetLayeredWindowAttributes
DefWindowProcA
CreateCursor
EnumDesktopWindows
BringWindowToTop
EnumDisplaySettingsA
FindWindowExA
EndPaint
SetSystemCursor
SetWindowDisplayAffinity
RegisterClassW
PeekMessageW
DispatchMessageW
GetClassInfoW
BlockInput
MapVirtualKeyA
AttachThreadInput
GetWindowLongA
SetWindowLongA
GetCursorInfo
ShowWindow
BeginPaint
DestroyCursor
UnregisterClassW
CreateWindowExW
CopyIcon
MapVirtualKeyExA
DestroyWindow
GetWindowPlacement
EndDialog
DialogBoxParamA
SetTimer
MoveWindow
SetFocus
SetDlgItemTextA
LoadIconA
SystemParametersInfoA
GetWindowLongPtrA
KillTimer
SetWindowLongPtrA
IsZoomed
SendMessageTimeoutA
FillRect
RedrawWindow
GetTopWindow
PrintWindow
AllowSetForegroundWindow
GetWindow
GetWindowRect
GetMenuItemID
LoadCursorA
GetDC
IsWindowVisible
SetWindowPos
keybd_event
PostMessageA
GetIconInfo
ScreenToClient
WindowFromPoint
gdi32
GetStockObject
SetStretchBltMode
BitBlt
CreateSolidBrush
CreateCompatibleBitmap
SelectObject
CreateDIBSection
CreateCompatibleDC
DeleteDC
DeleteObject
GetObjectA
StretchBlt
advapi32
CreateServiceA
CryptGetHashParam
CreateProcessAsUserA
SetTokenInformation
StartServiceCtrlDispatcherA
QueryServiceStatus
SetServiceStatus
RegisterServiceCtrlHandlerA
DeleteService
ChangeServiceConfig2A
QueryServiceStatusEx
EnumServicesStatusA
UnlockServiceDatabase
CloseServiceHandle
QueryServiceConfigA
OpenSCManagerA
LockServiceDatabase
ChangeServiceConfigA
ControlService
StartServiceA
OpenServiceA
CreateWellKnownSid
EqualSid
ConvertStringSidToSidW
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegOpenKeyA
GetUserNameA
AllocateAndInitializeSid
CreateProcessWithTokenW
FreeSid
CheckTokenMembership
DuplicateTokenEx
RegQueryValueA
AdjustTokenPrivileges
RegCloseKey
ConvertSidToStringSidA
RegQueryValueExA
LookupPrivilegeValueA
RegCreateKeyExA
RegSetValueExA
OpenProcessToken
RegOpenKeyExA
GetTokenInformation
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptReleaseContext
shell32
SHGetFolderPathA
SHGetFileInfoA
ShellExecuteExA
ord43
ShellExecuteA
DragQueryFileA
SHGetPathFromIDListA
SHCreateDirectoryExW
ole32
CoInitializeEx
CoInitialize
ReleaseStgMedium
CoUninitialize
CoTaskMemFree
CoCreateInstance
oleaut32
SysAllocString
VariantInit
SysFreeString
VariantClear
shlwapi
PathRemoveFileSpecA
PathFileExistsA
bcrypt
BCryptFinishHash
BCryptOpenAlgorithmProvider
BCryptDestroyHash
BCryptImportKeyPair
BCryptHashData
BCryptCreateHash
BCryptDestroyKey
BCryptGetProperty
BCryptCloseAlgorithmProvider
BCryptVerifySignature
winmm
waveInOpen
waveOutOpen
waveOutPrepareHeader
waveOutWrite
waveInAddBuffer
PlaySoundA
timeBeginPeriod
waveOutReset
waveOutGetNumDevs
waveInReset
waveInUnprepareHeader
waveOutUnprepareHeader
waveOutClose
waveInStart
waveInPrepareHeader
waveInStop
waveInClose
waveInGetNumDevs
timeEndPeriod
ws2_32
freeaddrinfo
getaddrinfo
WSAGetLastError
setsockopt
ioctlsocket
htons
getsockopt
recv
getsockname
gethostname
ntohl
ntohs
getnameinfo
recvfrom
sendto
WSACleanup
__WSAFDIsSet
WSAIoctl
closesocket
gethostbyname
select
inet_pton
WSAStartup
inet_addr
send
socket
connect
inet_ntoa
avicap32
capGetDriverDescriptionA
msvfw32
ICSendMessage
ICOpen
ICSeqCompressFrame
ICSeqCompressFrameStart
ICClose
ICSeqCompressFrameEnd
ICCompressorFree
wtsapi32
WTSFreeMemory
WTSEnumerateSessionsA
WTSQueryUserToken
iphlpapi
GetExtendedTcpTable
GetAdaptersAddresses
SetTcpEntry
dwmapi
DwmGetWindowAttribute
urlmon
URLDownloadToFileA
wininet
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
userenv
DestroyEnvironmentBlock
CreateEnvironmentBlock
psapi
GetModuleFileNameExA
EnumProcessModules
generic
count=21,
id=259,
version=29395,
count=205,
id=261,
version=29395,
count=27,
productName=Unmarked objects (old),
count=60,
id=260,
version=35219,
count=9,
id=261,
version=30159,
count=140,
id=260,
version=35725,
count=3,
id=261,
version=30157,
count=25,
id=260,
version=30159,
count=18,
id=260,
version=30034,
count=13,
id=259,
version=30034,
count=99,
id=261,
version=30034,
count=4,
id=253,
version=28518,
count=44,
id=260,
version=29395,
count=2,
id=262,
version=29395,
count=47,
id=257,
version=29395,
count=548,
id=1,
productName=Unmarked objects,
count=45,
id=265,
version=30154,
count=1,
id=256,
version=30154,
count=1,
id=255,
version=30154,
count=1,
id=151,
count=1,
id=258,
version=30154,