ntdll
ZwClose
ZwOpenSymbolicLinkObject
ZwQuerySymbolicLinkObject
ZwCreateFile
ZwQueryDirectoryObject
ZwQueryVolumeInformationFile
NtLoadDriver
NtUnloadDriver
ZwOpenDirectoryObject
RtlTimeToSecondsSince1970
NtFsControlFile
NtDeviceIoControlFile
ZwOpenFile
ZwSetInformationFile
RtlNtStatusToDosError
ZwUnloadKey
NtQueryInformationFile
NtQuerySystemTime
RtlAnsiStringToUnicodeString
NtReadFile
NtWriteFile
NtClose
NtCreateFile
RtlInitUnicodeString
wimgapi
WIMLoadImage
WIMApplyImage
WIMUnregisterMessageCallback
WIMCreateFile
WIMSetTemporaryPath
WIMGetImageInformation
WIMGetImageCount
WIMGetAttributes
WIMRegisterMessageCallback
WIMCloseHandle
gptbcd
CreateGptBootQuickCfgObject
up
PAShowUpgradeDemo2
PAShowRegisterDlg
PAGetGlobalDataObject
mfc140u
ord6724
ord4516
ord1983
ord8471
ord13761
ord12706
ord2344
ord1333
ord812
ord10727
ord2187
ord4722
ord280
ord7550
ord4335
ord1111
ord6303
ord4510
ord1670
ord1667
ord4947
ord3505
ord3504
ord3208
ord12025
ord2527
ord2519
ord4250
ord13198
ord13197
ord4334
ord8042
ord13862
ord13760
ord8506
ord13131
ord5236
ord7549
ord13766
ord8470
ord8467
ord5346
ord6722
ord12611
ord13496
ord6128
ord7835
ord13499
ord7838
ord4006
ord3795
ord3201
ord3202
ord5749
ord9941
ord6256
ord7873
ord3229
ord3228
ord13894
ord11755
ord11779
ord3526
ord3195
ord9821
ord9159
ord5237
ord7874
ord1501
ord286
ord6313
ord7837
ord3203
ord2178
ord1490
ord1492
ord1343
ord823
ord2703
ord8449
ord12967
ord9068
ord7882
ord13864
ord5240
ord1383
ord6555
ord3144
ord3266
ord2475
ord1424
ord6588
ord8826
ord3164
ord4095
ord6320
ord3756
ord4656
ord2270
ord6250
ord4343
ord8507
ord12625
ord1503
ord1033
ord296
ord3599
ord1057
ord6258
ord8819
ord3058
ord4081
ord8439
ord2906
ord3746
ord1489
ord2212
ord6285
ord1053
ord990
ord1454
ord6251
ord8900
ord5916
ord11902
ord8817
ord12544
ord6002
ord3056
ord11813
ord8731
ord10704
ord11085
ord3951
ord3308
ord3307
ord3071
ord6000
ord13397
ord3212
ord3209
ord7913
ord2697
ord14360
ord9976
ord9978
ord9977
ord9975
ord9979
ord5451
ord11414
ord11415
ord8830
ord11771
ord3718
ord11625
ord14209
ord8656
ord11854
ord6729
ord10691
ord8947
ord3173
ord13513
ord11944
ord11940
ord1700
ord1722
ord1748
ord1734
ord1755
ord4776
ord4843
ord4788
ord4806
ord4800
ord4794
ord4853
ord4837
ord4782
ord4859
ord4814
ord4752
ord4767
ord4828
ord4360
ord9384
ord4352
ord2967
ord14211
ord7651
ord14217
ord6631
ord11406
ord13354
ord5723
ord2629
ord11806
ord3812
ord3279
ord3278
ord3172
ord11850
ord5080
ord5363
ord5552
ord9041
ord5339
ord5582
ord5083
ord5229
ord5062
ord7668
ord2011
ord11664
ord7460
ord7461
ord7450
ord5227
ord7922
ord9946
ord8901
ord3713
ord1369
ord878
ord4726
ord7233
ord10163
ord1089
ord446
ord6848
ord13767
ord1491
ord11665
ord14088
ord12212
ord7719
ord14288
ord6121
ord14290
ord6123
ord14289
ord6122
ord3731
ord5706
ord11921
ord11929
ord7920
ord8023
ord10124
ord11933
ord11901
ord12606
ord5555
ord6614
ord4445
ord13545
ord7716
ord5183
ord1450
ord983
ord2439
ord7393
ord10070
ord12222
ord1671
ord266
ord4511
ord12223
ord7394
ord7182
ord4461
ord14210
ord973
ord1440
ord7650
ord14216
ord4462
ord916
ord4459
ord1390
ord962
ord1039
ord323
ord2370
ord7209
ord4078
ord8058
ord9089
ord4011
ord265
ord8452
ord8451
ord12443
ord8167
ord2698
ord1499
ord8084
ord1631
ord2903
ord5709
ord285
ord2921
ord2786
ord1665
ord2006
ord12932
ord12931
ord13401
ord5347
ord7551
ord4181
ord3776
ord12240
ord3949
ord4946
ord13597
ord13596
ord1428
kernel32
GetSystemWindowsDirectoryW
DeleteCriticalSection
CreateFileA
GetPrivateProfileStringW
InitializeCriticalSectionEx
GetPrivateProfileIntW
CreateMutexW
IsBadWritePtr
lstrcpyW
WinExec
FreeLibrary
LoadLibraryW
GetWindowsDirectoryW
CreateSemaphoreExW
CreateMutexExW
GetCurrentProcessId
CreateDirectoryW
OpenSemaphoreW
WaitForSingleObject
SetLastError
CopyFileW
WritePrivateProfileStringW
GetTickCount
OutputDebugStringW
DebugBreak
GetModuleFileNameA
GetModuleHandleExW
HeapFree
GetProcAddress
GetModuleHandleW
HeapAlloc
GetProcessHeap
GetCurrentThreadId
FormatMessageW
WaitForSingleObjectEx
ReleaseSemaphore
ReleaseMutex
GetFileAttributesW
GetVersionExW
CloseHandle
CreateProcessW
GetSystemDirectoryW
GetLastError
GetCurrentProcess
CreateThread
GetModuleFileNameW
Sleep
WideCharToMultiByte
IsDebuggerPresent
IsBadReadPtr
FreeResource
LoadResource
SizeofResource
FindResourceW
GetSystemWow64DirectoryW
DeleteFileW
GetFileSizeEx
GetStdHandle
WriteFile
CreateFileW
GetVersionExA
GetSystemInfo
GetLocalTime
WriteConsoleW
SetFilePointerEx
AllocConsole
DeleteVolumeMountPointW
FlushFileBuffers
GetVolumeNameForVolumeMountPointW
DeviceIoControl
SetVolumeMountPointW
ReadFile
SetFilePointer
CreateDirectoryA
OutputDebugStringA
GlobalMemoryStatusEx
SetEvent
OpenEventW
TerminateProcess
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
SetHandleInformation
CreatePipe
GetExitCodeProcess
TerminateThread
LoadLibraryA
SystemTimeToFileTime
VirtualAlloc
VirtualFree
SetFileAttributesW
IsBadCodePtr
LocalFree
FindFirstFileW
FindNextFileW
MultiByteToWideChar
RemoveDirectoryW
FindClose
QueryDosDeviceW
GetLogicalDrives
DefineDosDeviceW
GetDiskFreeSpaceW
GetVolumeInformationW
SetVolumeLabelW
CreateEventW
InitializeCriticalSectionAndSpinCount
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
ResetEvent
LeaveCriticalSection
EnterCriticalSection
user32
GetAsyncKeyState
MessageBoxW
MoveWindow
DrawTextW
ScreenToClient
DrawIconEx
TrackMouseEvent
SetWindowPos
IsWindowEnabled
ReleaseDC
GetWindowLongPtrW
DefWindowProcW
CallWindowProcW
RegisterClassW
CreateWindowExW
ShowWindow
ChangeDisplaySettingsW
SetCursor
GetPropW
RemovePropW
SetWindowLongPtrW
SetParent
IsDlgButtonChecked
GetDlgCtrlID
IsZoomed
GetDC
SetWindowRgn
ClientToScreen
OffsetRect
FindWindowW
SetScrollInfo
GetScrollInfo
SystemParametersInfoW
DestroyIcon
LoadImageW
GetIconInfo
SetCapture
ReleaseCapture
EnumDisplaySettingsW
RedrawWindow
GetCursorPos
IsWindowVisible
GetSysColor
IsWindow
DestroyCursor
CopyIcon
LoadCursorW
GetKeyState
SetPropW
DrawIcon
GetSystemMetrics
IsIconic
LoadIconW
GetWindowDC
ExitWindowsEx
SetTimer
SetWindowTextW
GetWindowTextW
InvalidateRect
GetWindowRect
EnableWindow
PostMessageW
PtInRect
GetParent
SendMessageW
GetClientRect
UpdateWindow
GetWindowLongW
SetWindowLongW
FillRect
gdi32
GetGlyphOutlineW
TextOutW
SetTextJustification
LineTo
MoveToEx
CreatePen
GetTextExtentPoint32W
SetBkColor
SetBkMode
SetTextColor
ExtTextOutW
CreateFontIndirectW
GetStockObject
CreateRectRgn
ExcludeClipRect
GetDeviceCaps
GetCurrentObject
GetObjectW
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
SelectObject
CreateFontW
BitBlt
DeleteObject
CreateSolidBrush
GetTextMetricsW
comdlg32
GetOpenFileNameW
advapi32
AdjustTokenPrivileges
GetNamedSecurityInfoW
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetNamedSecurityInfoW
RegFlushKey
ConvertStringSidToSidW
SetSecurityInfo
RegGetKeySecurity
RegQueryInfoKeyW
RegDeleteKeyW
ConvertSecurityDescriptorToStringSecurityDescriptorW
RegCreateKeyExW
RegEnumKeyExW
RegSetKeySecurity
RegSetValueExW
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegEnumValueW
RegUnLoadKeyW
RegLoadKeyW
RegQueryValueExA
RegOpenKeyA
RegQueryValueExW
RegOpenKeyW
RegCloseKey
RegQueryValueW
RegOpenKeyExW
RegSaveKeyW
LookupPrivilegeValueW
OpenProcessToken
shell32
SHAppBarMessage
SHGetFolderPathW
ShellExecuteW
comctl32
_TrackMouseEvent
InitCommonControlsEx
ole32
CoCreateGuid
CreateStreamOnHGlobal
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
gdiplus
GdipCloneImage
GdipLoadImageFromStream
GdipDrawImageRectRect
GdipDrawImageRect
GdipFillPath
GdipDrawPath
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetImageHeight
GdipGetImageWidth
GdipDeletePen
GdipCreatePen1
GdipCreateLineBrushFromRect
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipAddPathArcI
GdipAddPathLineI
GdipClosePathFigure
GdipDeletePath
GdipCreatePath
GdipFree
GdipAlloc
GdiplusStartup
GdipDisposeImage
setupapi
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_terminate
__std_exception_copy
__std_exception_destroy
wcsrchr
_purecall
wcsstr
wcschr
strrchr
memset
memcpy
_CxxThrowException
memmove
strstr
strchr
memcmp
__C_specific_handler
__current_exception
__current_exception_context
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s
__stdio_common_vswprintf_s
__stdio_common_vswprintf
__p__commode
_set_fmode
api-ms-win-crt-runtime-l1-1-0
_set_app_type
_configure_wide_argv
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_invalid_parameter_noinfo_noreturn
_seh_filter_exe
_invalid_parameter_noinfo
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
exit
_exit
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_errno
terminate
_beginthreadex
_wassert
api-ms-win-crt-convert-l1-1-0
wcstombs
_wtoi
atoi
wcstoul
_wtoi64
mbstowcs
api-ms-win-crt-string-l1-1-0
isdigit
_strlwr
strncmp
wcsncmp
strncpy
_wcslwr
wcsncpy_s
strcpy_s
_wcsicmp
wcsncpy
_wcsnicmp
wcscat_s
wcscpy_s
strcmp
api-ms-win-crt-time-l1-1-0
_localtime64
_time64
_mktime64
_localtime64_s
api-ms-win-crt-heap-l1-1-0
malloc
_set_new_mode
calloc
free
realloc
api-ms-win-crt-utility-l1-1-0
qsort
rand
srand
api-ms-win-crt-math-l1-1-0
__setusermatherr
pow
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
generic
count=2,
id=253,
version=28518,
count=3,
id=260,
version=27412,
count=10,
id=260,
version=30034,
count=4,
id=259,
version=30034,
count=34,
id=261,
version=30034,
count=8,
id=257,
version=30034,
count=2,
id=257,
version=30148,
count=2,
id=123,
productName=VS2005 build 50727,
version=50727,
count=20,
id=147,
productName=VS2008 SP1 build 30729,
version=30729,
count=1,
id=260,
version=30148,
count=28,
id=257,
version=27412,
count=138,
id=261,
version=30148,
count=3,
productName=Unmarked objects (old),
count=871,
id=1,
productName=Unmarked objects,
count=52,
id=265,
version=30148,
count=1,
id=256,
version=30148,
count=1,
id=255,
version=30148,
count=1,
id=151,
count=1,
id=258,
version=30148,