advapi32
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCloseKey
RegOpenKeyExW
RegQueryValueExA
RegQueryValueExW
ImpersonateNamedPipeClient
RevertToSelf
BuildSecurityDescriptorW
BuildExplicitAccessWithNameW
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptDestroyKey
CryptReleaseContext
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptAcquireContextW
CryptGetHashParam
RegOpenKeyExA
ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptEnumProvidersW
CryptSignHashW
CryptDecrypt
SystemFunction036
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptGenRandom
api-ms-win-core-synch-l1-2-0
WakeByAddressSingle
WaitOnAddress
kernel32
SetEvent
CreateEventA
GetCurrentThreadId
CreateThread
WaitForSingleObject
LocalFree
FormatMessageA
GetSystemTimeAsFileTime
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcessId
GetLocalTime
FormatMessageW
SetLastError
CreateDirectoryW
CreateFileW
DeleteFileW
GetFileAttributesW
LockFileEx
SetEndOfFile
UnlockFileEx
SetUnhandledExceptionFilter
SetProcessShutdownParameters
SetConsoleCtrlHandler
VerSetConditionMask
IsWow64Process
GetModuleHandleW
VerifyVersionInfoW
SuspendThread
ResumeThread
GetProcessId
GetThreadContext
Wow64GetThreadContext
IsProcessorFeaturePresent
GetTimeZoneInformation
GetThreadLocale
GetSystemDefaultLCID
GetUserDefaultLCID
FindClose
RemoveVectoredExceptionHandler
GetFileSizeEx
GetFileType
ReadFile
SetFilePointerEx
FindFirstFileExW
FindNextFileW
GetFileTime
RemoveDirectoryW
MoveFileExW
GetModuleFileNameW
DuplicateHandle
ConnectNamedPipe
DisconnectNamedPipe
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateEventW
TerminateProcess
OpenProcess
UnregisterWaitEx
RegisterWaitForSingleObject
GetFileInformationByHandleEx
VirtualQueryEx
ReadProcessMemory
LoadLibraryW
SetNamedPipeHandleState
TransactNamedPipe
CreateNamedPipeW
WaitNamedPipeW
GetVersion
ReleaseSemaphore
CreateSemaphoreW
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
UnhandledExceptionFilter
CreateSemaphoreA
WaitForSingleObjectEx
WaitForMultipleObjectsEx
GetTickCount
GetModuleHandleA
GetSystemTime
SystemTimeToFileTime
FileTimeToSystemTime
RaiseException
InitializeCriticalSectionEx
DeleteCriticalSection
DecodePointer
IsDebuggerPresent
FindFirstFileW
GetCurrentDirectoryW
OutputDebugStringA
WakeConditionVariable
InitializeConditionVariable
SleepConditionVariableSRW
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
SleepEx
GetFullPathNameW
MoveFileExA
CreateFileA
CompareFileTime
GetTickCount64
TryEnterCriticalSection
HeapCreate
HeapFree
GetDiskFreeSpaceW
LockFile
InitializeCriticalSection
SetFilePointer
GetTempPathW
CreateMutexW
UnmapViewOfFile
HeapValidate
HeapSize
GetTempPathA
VirtualQuery
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
DeleteFileA
HeapReAlloc
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
GetFileSize
GetProcessHeap
CreateFileMappingW
MapViewOfFile
FlushFileBuffers
GetModuleHandleExW
DebugBreak
GetVersionExA
K32GetProcessMemoryInfo
GlobalMemoryStatusEx
ReleaseMutex
OpenSemaphoreW
CreateToolhelp32Snapshot
Process32First
Process32Next
K32GetProcessImageFileNameA
CreateProcessW
CreateMutexExW
CreateSemaphoreExW
SwitchToThread
SleepConditionVariableCS
InitializeSListHead
GetStartupInfoW
GetExitCodeThread
GetNativeSystemInfo
WakeAllConditionVariable
RtlPcToFileHeader
InitOnceBeginInitialize
InitOnceComplete
ReleaseSRWLockShared
AcquireSRWLockShared
GetStringTypeW
GetLocaleInfoEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EncodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
RtlUnwindEx
InterlockedPushEntrySList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetDriveTypeW
GetFileInformationByHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
SetEnvironmentVariableW
ExitProcess
ExitThread
FreeLibraryAndExitThread
SetStdHandle
GetCommandLineA
GetCommandLineW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesW
GetCurrentThread
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
QueryPerformanceCounter
RtlUnwind
FreeLibrary
GetProcAddress
GetCurrentProcessorNumber
GetSystemInfo
CloseHandle
QueryPerformanceFrequency
LoadLibraryA
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetFinalPathNameByHandleW
GetDiskFreeSpaceExW
ConvertThreadToFiberEx
ConvertFiberToThread
GetSystemDirectoryA
CreateFiberEx
DeleteFiber
SwitchToFiber
ReadConsoleA
SetConsoleMode
GetEnvironmentVariableW
AddVectoredExceptionHandler
CopyFileW
SetFileTime
DeviceIoControl
CreateWaitableTimerA
GetLogicalProcessorInformation
ResetEvent
SetWaitableTimer
GetLastError
Sleep
GetEnvironmentVariableA
GetFullPathNameA
VirtualAlloc
WriteFile
WriteConsoleA
GetStdHandle
GetCurrentProcess
VirtualFree
GetConsoleScreenBufferInfo
VirtualProtect
GetProcessTimes
InitializeSRWLock
GetDiskFreeSpaceA
crypt32
CertGetCertificateContextProperty
CertOpenSystemStoreW
CertDuplicateCertificateContext
CertFindCertificateInStore
CertCloseStore
CertEnumCertificatesInStore
CertFreeCertificateContext
CertGetEnhancedKeyUsage
CertGetIntendedKeyUsage
CertOpenSystemStoreA
CertOpenStore
user32
GetWindowLongPtrW
SetWindowLongPtrW
EnumDisplayDevicesA
DestroyWindow
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
GetMessageW
TranslateMessage
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
PostMessageW
DispatchMessageW
winmm
timeGetDevCaps
timeEndPeriod
timeBeginPeriod
timeSetEvent
timeGetTime
ws2_32
gethostbyaddr
getservbyname
shutdown
inet_ntoa
WSACloseEvent
WSAResetEvent
send
WSAWaitForMultipleEvents
getsockopt
WSAEnumNetworkEvents
htonl
closesocket
socket
WSAGetLastError
setsockopt
freeaddrinfo
ntohl
getaddrinfo
ntohs
inet_ntop
getservbyport
inet_addr
gethostbyname
WSACreateEvent
WSASetEvent
sendto
getnameinfo
gethostname
ioctlsocket
bind
listen
accept
WSAIoctl
getpeername
getsockname
connect
recv
recvfrom
WSACleanup
WSAStartup
__WSAFDIsSet
select
WSASetLastError
htons
WSAEventSelect
WSASocketA
ole32
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoCreateGuid
CoUninitialize
CoInitializeEx
iphlpapi
GetAdaptersAddresses
if_nametoindex
shell32
SHGetFolderPathAndSubDirW
powrprof
CallNtPowerInformation
winhttp
WinHttpAddRequestHeaders
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpOpenRequest
WinHttpSetTimeouts
WinHttpSetOption
WinHttpCrackUrl
WinHttpOpen
WinHttpCloseHandle
WinHttpConnect
WinHttpReadData
WinHttpWriteData
WinHttpQueryHeaders
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
generic
count=1,
id=262,
version=29395,
count=4,
id=147,
productName=VS2008 SP1 build 30729,
version=30729,
count=31,
id=257,
version=29395,
count=456,
id=1,
productName=Unmarked objects,
count=13,
id=259,
version=29395,
count=197,
id=261,
version=29395,
count=30,
id=260,
version=29395,
count=2,
id=253,
version=28518,
count=97,
id=261,
version=30034,
count=18,
id=260,
version=30034,
count=10,
id=259,
version=30034,
count=908,
id=260,
version=30154,
count=5,
id=259,
version=30154,
count=134,
id=261,
version=30154,
count=697,
id=265,
version=30154,
count=40,
productName=Unmarked objects (old),
count=1,
id=258,
version=30154,