ntdll
NtQueryObject
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
NtQueryInformationProcess
kernel32
WideCharToMultiByte
GetFileInformationByHandleEx
WriteProcessMemory
SetConsoleTitleA
GetCurrentProcess
GetModuleHandleA
OpenProcess
Sleep
CloseHandle
VirtualProtectEx
GetProcAddress
VirtualAllocEx
ReadProcessMemory
DuplicateHandle
VirtualQueryEx
K32EnumProcessModulesEx
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
K32GetModuleBaseNameA
VirtualQuery
GetModuleFileNameA
MultiByteToWideChar
LocalFree
GetModuleHandleW
IsDebuggerPresent
FindClose
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FindFirstFileW
GetFileAttributesExW
AreFileApisANSI
GetLastError
CreateFileW
GetLocaleInfoEx
FormatMessageA
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
advapi32
SetNamedSecurityInfoW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorDacl
msvcp140
_Thrd_join
?_Throw_Cpp_error@std@@YAXH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Winerror_map@std@@YAHH@Z
?_Xout_of_range@std@@YAXPEBD@Z
_Thrd_id
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception_context
__current_exception
memset
__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memmove
__C_specific_handler
memcpy
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
free
_set_new_mode
api-ms-win-crt-runtime-l1-1-0
__p___argc
abort
_register_thread_local_exe_atexit_callback
_initterm
_seh_filter_exe
_set_app_type
_initterm_e
_c_exit
__p___argv
_get_initial_narrow_environment
_invoke_watson
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_exit
exit
terminate
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
_set_fmode
__p__commode
api-ms-win-crt-string-l1-1-0
_stricmp
_wcsicmp
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
_configthreadlocale
generic
count=14,
id=147,
productName=VS2008 SP1 build 30729,
version=30729,
count=6,
id=257,
version=35207,
count=4,
id=259,
version=35207,
count=10,
id=260,
version=35207,
count=36,
id=261,
version=35207,
count=11,
id=257,
version=35215,
count=225,
id=1,
productName=Unmarked objects,
count=7,
id=265,
version=35226,
count=1,
id=255,
version=35226,
count=1,
id=258,
version=35226,