kernel32
ExitProcess
SetThreadExecutionState
GetPrivateProfileIntA
GetPrivateProfileStringA
MoveFileA
GetDriveTypeA
ExpandEnvironmentStringsA
SetFilePointer
lstrlenA
GetVolumeInformationA
LocalAlloc
lstrcatA
lstrcpyA
GetLogicalDriveStringsA
RemoveDirectoryA
lstrcpynA
LocalReAlloc
GetDiskFreeSpaceExA
GetTickCount
CancelIo
SetCurrentDirectoryA
CopyFileA
OpenMutexA
MoveFileExA
LoadLibraryA
GlobalAlloc
GlobalFree
SetFileAttributesA
GetProcAddress
FreeLibrary
GetExitCodeProcess
GetSystemInfo
GlobalMemoryStatusEx
GetProcessTimes
GetCurrentThreadId
GetWindowsDirectoryA
LocalSize
lstrcmpA
IsProcessorFeaturePresent
GetModuleHandleW
FormatMessageA
PeekNamedPipe
DisconnectNamedPipe
GetSystemDirectoryA
InitializeProcThreadAttributeList
GetSystemDirectoryW
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
CreateProcessW
IsWow64Process
LocalFree
GetLocalTime
CreateThread
SetEndOfFile
GetCurrentDirectoryW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
HeapSize
HeapReAlloc
GetFileAttributesExW
ReadConsoleW
GetConsoleOutputCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
MoveFileExW
DeleteFileW
GetTimeZoneInformation
EnterCriticalSection
SystemTimeToTzSpecificLocalTime
GetFileInformationByHandle
CreateFileW
GetCommandLineW
GetCommandLineA
FreeLibraryAndExitThread
ExitThread
GetModuleHandleExW
GetFileType
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwindEx
GetThreadPriority
SetThreadPriority
LoadLibraryW
GetProcessAffinityMask
GetCurrentThread
CreateSemaphoreW
WritePrivateProfileStringA
WriteConsoleW
GetConsoleMode
GetStdHandle
GetModuleFileNameW
GetStartupInfoW
InitializeSListHead
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
ResetEvent
InitializeCriticalSectionAndSpinCount
OutputDebugStringW
IsDebuggerPresent
GetCPInfo
GetStringTypeW
LCMapStringEx
EncodePointer
Process32Next
QueryFullProcessImageNameA
GetTickCount64
ProcessIdToSessionId
CreateToolhelp32Snapshot
OpenProcess
GetModuleHandleA
CreateMutexA
GetFullPathNameA
InitializeCriticalSection
SetLastError
Process32First
SetConsoleCtrlHandler
GetModuleFileNameA
VirtualAlloc
VirtualFree
GetNativeSystemInfo
GetVersionExA
TerminateThread
SetEvent
GetEnvironmentVariableA
CreateProcessA
GetProcessHeap
GetFileSize
HeapAlloc
Sleep
WaitForSingleObject
CreatePipe
TerminateProcess
GetCurrentProcess
HeapFree
FlushFileBuffers
GlobalUnlock
CreateEventA
CreateDirectoryA
GetSystemTimeAsFileTime
WideCharToMultiByte
GetCurrentProcessId
DeleteCriticalSection
SetFilePointerEx
GlobalLock
DecodePointer
RaiseException
CloseHandle
DeleteFileA
CreateFileA
GetFileAttributesA
GetLastError
GetTempPathA
MultiByteToWideChar
GetCurrentDirectoryA
FindClose
InitializeCriticalSectionEx
FindNextFileA
OutputDebugStringA
ReadFile
WriteFile
FindFirstFileA
GetFileAttributesExA
GetFileSizeEx
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
RtlPcToFileHeader
GetExitCodeThread
WaitForSingleObjectEx
QueryPerformanceFrequency
QueryPerformanceCounter
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
TryEnterCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
WTSGetActiveConsoleSessionId
LeaveCriticalSection
ReleaseSemaphore
FileTimeToSystemTime
RtlUnwind
user32
DrawIconEx
FindWindowA
DestroyWindow
CopyIcon
CreateWindowExW
UnregisterClassW
DestroyCursor
GetClassInfoW
DispatchMessageW
PeekMessageW
RegisterClassW
SetWindowDisplayAffinity
CreateCursor
DefWindowProcA
SetLayeredWindowAttributes
FindWindowW
SetSystemCursor
UpdateWindow
LoadImageW
BeginPaint
EndPaint
GetClipboardData
EnumWindows
GetForegroundWindow
CloseClipboard
FindWindowExA
OpenClipboard
GetClassNameA
TranslateMessage
RealGetWindowClassA
CreateDesktopA
mouse_event
MenuItemFromPoint
EnumDesktopWindows
BringWindowToTop
EnumDisplaySettingsA
BlockInput
GetClientRect
CharLowerA
wsprintfA
GetDesktopWindow
GetParent
CharNextA
SendInput
SetClipboardData
OpenInputDesktop
MapVirtualKeyA
AttachThreadInput
GetWindowLongA
SetWindowLongA
GetCursorInfo
ShowWindow
GetWindowPlacement
WindowFromPoint
ScreenToClient
GetIconInfo
PostMessageA
keybd_event
SetWindowPos
IsWindowVisible
GetWindowTextA
ExitWindowsEx
EmptyClipboard
CloseDesktop
GetDC
LoadCursorA
ReleaseCapture
PtInRect
SendMessageA
GetMenuItemID
GetWindowRect
GetLastInputInfo
GetUserObjectInformationA
GetMonitorInfoA
GetSystemMetrics
EnumDisplayMonitors
SetProcessWindowStation
OpenDesktopA
OpenWindowStationA
GetThreadDesktop
SetThreadDesktop
SystemParametersInfoA
GetCursorPos
ReleaseDC
ChildWindowFromPoint
SetCursorPos
IsIconic
GetAncestor
SetForegroundWindow
GetWindow
EndDialog
DialogBoxParamA
SetTimer
MoveWindow
SetFocus
SetDlgItemTextA
LoadIconA
AllowSetForegroundWindow
GetWindowLongPtrA
KillTimer
SetWindowLongPtrA
IsZoomed
SendMessageTimeoutA
FillRect
RedrawWindow
GetTopWindow
PrintWindow
GetWindowThreadProcessId
gdi32
GetStockObject
SetStretchBltMode
BitBlt
CreateSolidBrush
CreateCompatibleBitmap
SelectObject
CreateDIBSection
CreateCompatibleDC
DeleteDC
DeleteObject
GetObjectA
StretchBlt
advapi32
CreateServiceA
CryptGetHashParam
CreateProcessAsUserA
SetTokenInformation
DuplicateTokenEx
StartServiceCtrlDispatcherA
QueryServiceStatus
SetServiceStatus
RegisterServiceCtrlHandlerA
DeleteService
ChangeServiceConfig2A
QueryServiceStatusEx
EnumServicesStatusA
UnlockServiceDatabase
CloseServiceHandle
QueryServiceConfigA
OpenSCManagerA
LockServiceDatabase
ChangeServiceConfigA
ControlService
StartServiceA
OpenServiceA
CreateWellKnownSid
EqualSid
ConvertStringSidToSidW
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegOpenKeyA
GetUserNameA
AllocateAndInitializeSid
FreeSid
CheckTokenMembership
RegQueryValueA
AdjustTokenPrivileges
RegCloseKey
ConvertSidToStringSidA
RegQueryValueExA
LookupPrivilegeValueA
RegCreateKeyExA
RegSetValueExA
OpenProcessToken
RegOpenKeyExA
GetTokenInformation
CryptAcquireContextA
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptReleaseContext
shell32
ord43
SHGetFolderPathA
SHGetFileInfoA
ShellExecuteA
SHCreateDirectoryExA
DragQueryFileA
ShellExecuteExA
ole32
ReleaseStgMedium
CoCreateInstance
CoTaskMemFree
CoInitializeEx
CoUninitialize
oleaut32
SysFreeString
VariantInit
VariantClear
SysAllocString
shlwapi
PathFileExistsA
PathRemoveFileSpecA
PathCreateFromUrlW
bcrypt
BCryptVerifySignature
BCryptGetProperty
BCryptDestroyKey
BCryptCreateHash
BCryptHashData
BCryptImportKeyPair
BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptFinishHash
BCryptOpenAlgorithmProvider
winmm
PlaySoundA
timeBeginPeriod
timeEndPeriod
ws2_32
closesocket
WSAIoctl
__WSAFDIsSet
WSACleanup
sendto
recvfrom
getnameinfo
inet_pton
WSAGetLastError
setsockopt
ioctlsocket
htons
getsockopt
recv
inet_ntoa
connect
socket
send
inet_addr
WSAStartup
gethostbyname
select
ntohl
gethostname
getsockname
avicap32
capGetDriverDescriptionA
wtsapi32
WTSEnumerateSessionsA
WTSFreeMemory
WTSQueryUserToken
iphlpapi
GetAdaptersAddresses
dwmapi
DwmGetWindowAttribute
urlmon
URLDownloadToFileA
wininet
InternetOpenA
InternetSetOptionA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
psapi
EnumProcessModules
GetModuleFileNameExA
generic
count=21,
id=259,
version=29395,
count=204,
id=261,
version=29395,
count=27,
productName=Unmarked objects (old),
count=60,
id=260,
version=35219,
count=9,
id=261,
version=30159,
count=140,
id=260,
version=35725,
count=3,
id=261,
version=30157,
count=25,
id=260,
version=30159,
count=2,
id=253,
version=28518,
count=18,
id=260,
version=30034,
count=13,
id=259,
version=30034,
count=96,
id=261,
version=30034,
count=43,
id=260,
version=29395,
count=2,
id=262,
version=29395,
count=47,
id=257,
version=29395,
count=521,
id=1,
productName=Unmarked objects,
count=40,
id=265,
version=30154,
count=1,
id=256,
version=30154,
count=1,
id=255,
version=30154,
count=1,
id=151,
count=1,
id=258,
version=30154,