kernel32
MoveFileExA
CreateFileA
GetSystemDirectoryA
SetDllDirectoryA
LoadLibraryA
DeleteFileA
GlobalAlloc
Process32FirstW
GlobalFree
CloseHandle
GetSystemInfo
CreateThread
GetWindowsDirectoryA
HeapAlloc
GetLocalTime
VirtualProtectEx
GetProcAddress
GlobalLock
SetFilePointerEx
VirtualAllocEx
LocalFree
GetFileSize
RemoveDirectoryA
ExitProcess
ReadProcessMemory
GetCurrentProcessId
GetProcessHeap
CreateProcessW
GetLongPathNameA
FreeLibrary
WideCharToMultiByte
CreateRemoteThread
QueryFullProcessImageNameW
CreateProcessA
GetSystemTimeAsFileTime
GetFileType
CreateDirectoryA
GetSystemTime
GetTempFileNameA
GetTickCount
GlobalUnlock
ConnectNamedPipe
VirtualQueryEx
GetComputerNameA
GetExitCodeProcess
FlushFileBuffers
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
FormatMessageA
SystemTimeToFileTime
LockFileEx
UnlockFile
HeapDestroy
HeapCompact
HeapReAlloc
DeleteFileW
WaitForSingleObjectEx
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetDiskFreeSpaceA
FormatMessageW
HeapSize
HeapValidate
UnmapViewOfFile
CreateFileW
UnlockFileEx
SetEndOfFile
SetFilePointer
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
GetFullPathNameW
HeapCreate
AreFileApisANSI
GetFileAttributesA
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
FindNextFileW
FindFirstFileExW
GetOEMCP
GetACP
IsValidCodePage
SetStdHandle
GetCurrentDirectoryW
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
LoadLibraryExW
VirtualProtect
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
GetStdHandle
GetModuleFileNameW
IsProcessorFeaturePresent
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileInformationByHandle
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetLastError
RtlPcToFileHeader
RtlUnwindEx
RtlLookupFunctionEntry
InitializeSListHead
GetModuleHandleW
GetLastError
CopyFileA
GetTickCount64
GetTempPathA
GetFinalPathNameByHandleA
Sleep
ReadFile
MultiByteToWideChar
CreateEventW
CreateToolhelp32Snapshot
OpenProcess
GetModuleHandleA
Process32NextW
DuplicateHandle
GetSystemDirectoryW
ReleaseMutex
lstrcmpA
GetCurrentThreadId
GetFileAttributesW
WaitForSingleObject
GetVolumeInformationA
FindClose
GetEnvironmentVariableA
CreateMutexW
GetTempPathW
PeekNamedPipe
GetFullPathNameA
ExpandEnvironmentStringsA
CreatePipe
FindNextFileA
CreateNamedPipeW
TerminateProcess
WriteFile
GetCurrentProcess
HeapFree
FindFirstFileA
SetHandleInformation
WriteProcessMemory
GetStartupInfoW
SetUnhandledExceptionFilter
GetCPInfo
GetStringTypeW
LCMapStringEx
DecodePointer
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetFileSizeEx
CancelIo
GetModuleFileNameA
RaiseException
GetExitCodeThread
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
user32
PrintWindow
CreateDesktopA
wsprintfW
SetClipboardData
GetClipboardSequenceNumber
SendMessageA
EnumDesktopWindows
GetClipboardData
TranslateMessage
OpenInputDesktop
SetFocus
UnhookWindowsHookEx
GetForegroundWindow
ToUnicodeEx
MapVirtualKeyA
GetKeyboardLayout
RealGetWindowClassA
GetWindowTextA
PeekMessageW
SetWindowsHookExA
EmptyClipboard
CloseClipboard
GetCursorInfo
DispatchMessageW
OpenClipboard
CloseDesktop
GetAsyncKeyState
IsWindow
wsprintfA
GetKeyboardState
GetThreadDesktop
MenuItemFromPoint
SetForegroundWindow
GetAncestor
SetCursorPos
ReleaseDC
SetThreadDesktop
GetWindowPlacement
WindowFromPoint
ChildWindowFromPointEx
GetClassNameA
GetSystemMetrics
CallNextHookEx
PostThreadMessageW
SendInput
GetWindowLongA
ScreenToClient
GetWindowThreadProcessId
GetKeyState
MapVirtualKeyW
EnumDisplayDevicesA
GetLastInputInfo
GetWindowRect
GetDC
IsWindowVisible
PostMessageA
FillRect
GetIconInfo
gdi32
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
StretchBlt
GetDeviceCaps
DeleteDC
GetObjectW
SetStretchBltMode
DeleteObject
CreateSolidBrush
GetDIBits
advapi32
RegCreateKeyExA
RegEnumKeyExA
RegQueryValueExW
DuplicateTokenEx
RegEnumValueA
AdjustTokenPrivileges
CryptAcquireContextA
RevertToSelf
RegCloseKey
RegDeleteKeyA
RegQueryValueExA
CryptGenRandom
AllocateAndInitializeSid
LookupPrivilegeValueA
CryptReleaseContext
GetUserNameA
ImpersonateLoggedOnUser
RegSetValueExA
OpenProcessToken
FreeSid
RegQueryInfoKeyA
CheckTokenMembership
RegOpenKeyExA
RegOpenKeyExW
shell32
SHGetFolderPathA
SHGetFolderPathW
ole32
CreateStreamOnHGlobal
CoCreateInstance
CoSetProxyBlanket
CoInitializeEx
CoUninitialize
CoCreateGuid
oleaut32
VariantInit
VariantClear
SysAllocString
SysFreeString
crypt32
CryptBinaryToStringA
CryptUnprotectData
CryptStringToBinaryA
bcrypt
BCryptGenerateSymmetricKey
BCryptDecrypt
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
BCryptSetProperty
BCryptDestroyKey
ncrypt
NCryptDecrypt
NCryptOpenKey
NCryptFreeBuffer
NCryptOpenStorageProvider
NCryptFreeObject
NCryptEnumKeys
gdiplus
GdipCreateBitmapFromHBITMAP
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipGetImageEncoders
GdipSaveImageToStream
GdipGetImageEncodersSize
GdiplusShutdown
GdipFree
GdiplusStartup
ws2_32
WSAGetLastError
setsockopt
ioctlsocket
freeaddrinfo
htons
htonl
recv
connect
socket
send
WSAStartup
getaddrinfo
ntohl
select
closesocket
__WSAFDIsSet
WSACleanup
generic
count=185,
id=261,
version=35222,
count=9,
id=259,
version=35222,
count=10,
id=259,
version=35721,
count=19,
id=260,
version=35721,
count=1,
id=262,
version=35222,
count=1,
id=263,
version=35222,
count=19,
id=260,
version=35222,
count=94,
id=261,
version=35721,
count=27,
id=257,
version=35222,
count=357,
id=1,
productName=Unmarked objects,
count=2,
id=260,
version=36257,
count=2,
id=261,
version=36257,
count=1,
id=265,
version=36257,
count=1,
id=255,
version=36257,
count=1,
id=258,
version=36257,