kernel32
GetLogicalDriveStringsW
MultiByteToWideChar
GetDiskFreeSpaceExW
DeleteFileW
SetFilePointerEx
LocalFree
WTSGetActiveConsoleSessionId
GetFileSize
CreateProcessW
lstrcpyW
LocalReAlloc
GetTickCount
MoveFileW
GetDriveTypeW
CancelIo
WritePrivateProfileStringW
GetModuleFileNameW
SetFileAttributesW
lstrlenA
lstrcatA
CreateFileA
DeleteFileA
GetWindowsDirectoryA
GetLocalTime
GetCurrentProcess
GetPrivateProfileStringW
GetVersionExA
GetSystemInfo
LoadLibraryW
GetProcAddress
GetComputerNameW
GetModuleHandleW
GetProcessTimes
GetVolumeInformationA
GetCurrentThreadId
VirtualProtect
HeapFree
LoadLibraryA
GetNativeSystemInfo
HeapAlloc
GetProcessHeap
FreeLibrary
IsBadReadPtr
LocalSize
lstrcmpA
GlobalSize
GlobalAlloc
GlobalFree
GlobalLock
CreateProcessA
FormatMessageA
GlobalUnlock
GetOEMCP
TerminateProcess
InitializeProcThreadAttributeList
CreatePipe
PeekNamedPipe
GetSystemDirectoryW
UpdateProcThreadAttribute
TerminateThread
DeleteProcThreadAttributeList
Thread32Next
SetFilePointer
Thread32First
SuspendThread
ResumeThread
Process32NextW
Process32FirstW
OpenThread
QueryFullProcessImageNameA
GetTempPathW
GetExitCodeProcess
OpenProcess
GetFileAttributesW
SetEndOfFile
HeapSize
GetCurrentDirectoryW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetACP
IsValidCodePage
FindFirstFileExW
HeapReAlloc
OutputDebugStringW
ReadConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
CreateFileW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetConsoleOutputCP
FlushFileBuffers
GetFileSizeEx
MoveFileExW
GetTimeZoneInformation
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileInformationByHandle
GetCommandLineW
GetCommandLineA
ExitProcess
GetFileAttributesExW
GetFileType
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwindEx
GetThreadPriority
SetThreadPriority
GetProcessAffinityMask
CreateSemaphoreW
ReleaseSemaphore
WriteConsoleW
GetConsoleMode
GetStdHandle
GetCurrentThread
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
ResetEvent
InitializeCriticalSectionAndSpinCount
GetCPInfo
CompareStringEx
LCMapStringEx
DecodePointer
EncodePointer
LocalAlloc
FindClose
GetEnvironmentVariableW
RemoveDirectoryW
ExpandEnvironmentStringsW
lstrcpynW
WriteFile
VirtualFree
lstrlenW
FindNextFileW
FindFirstFileW
GetVolumeInformationW
ReadFile
CreateDirectoryW
CreateEventA
WideCharToMultiByte
GetCurrentProcessId
DeleteCriticalSection
CreateThread
CloseHandle
Process32Next
SetEvent
GetLastError
GetTickCount64
Sleep
CreateToolhelp32Snapshot
GetModuleHandleA
WaitForSingleObject
CreateMutexA
GetEnvironmentVariableA
InitializeCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetStringTypeW
RaiseException
RtlPcToFileHeader
QueryPerformanceFrequency
QueryPerformanceCounter
GetExitCodeThread
WaitForSingleObjectEx
TryEnterCriticalSection
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
SleepConditionVariableSRW
EnterCriticalSection
SetLastError
Process32First
SetConsoleCtrlHandler
VirtualAlloc
GetLocaleInfoW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
RtlUnwind
user32
wsprintfW
EnumWindows
ShowWindow
GetShellWindow
WaitForInputIdle
GetWindowThreadProcessId
MapVirtualKeyExA
PeekMessageA
TranslateMessage
UnhookWindowsHookEx
ToUnicodeEx
GetKeyboardLayout
SetWindowsHookExA
CloseDesktop
GetKeyboardState
GetLastInputInfo
CallNextHookEx
GetUserObjectInformationA
GetForegroundWindow
GetKeyState
GetSystemMetrics
OpenInputDesktop
SetProcessWindowStation
OpenDesktopA
OpenWindowStationA
wsprintfA
GetThreadDesktop
CloseWindowStation
EndPaint
BeginPaint
GetCursorPos
ReleaseDC
ChildWindowFromPoint
SetCursorPos
UpdateWindow
RegisterClassExA
PtInRect
FindWindowA
DispatchMessageA
IsClipboardFormatAvailable
GetWindowTextW
SetThreadDesktop
SetWindowLongPtrA
GetWindow
SendMessageTimeoutA
IsWindowVisible
GetTopWindow
PrintWindow
IsIconic
GetWindowRect
GetMenuItemID
LoadCursorA
DestroyWindow
GetDC
keybd_event
PostMessageA
ScreenToClient
GetClassNameA
MsgWaitForMultipleObjects
WindowFromPoint
GetWindowPlacement
DestroyCursor
OpenClipboard
GetCursorInfo
SetWindowLongA
CloseClipboard
EmptyClipboard
GetWindowTextA
GetWindowLongA
MapVirtualKeyA
EnumDisplaySettingsA
MoveWindow
DefWindowProcA
CreateWindowExA
SetLayeredWindowAttributes
GetClipboardData
SendMessageA
mouse_event
SetCapture
SetClipboardData
SetCursor
CreateDesktopA
GetWindowLongPtrA
UnregisterClassA
RealGetWindowClassA
MenuItemFromPoint
gdi32
DeleteObject
DeleteDC
GetStockObject
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
CreateDIBSection
advapi32
RegEnumKeyExW
ImpersonateAnonymousToken
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
AdjustTokenPrivileges
LookupPrivilegeValueA
UnlockServiceDatabase
CloseServiceHandle
OpenSCManagerW
LockServiceDatabase
ControlService
StartServiceW
QueryServiceConfigW
ChangeServiceConfigW
OpenServiceW
EnumServicesStatusW
RegQueryInfoKeyW
RevertToSelf
RegOpenKeyExW
RegEnumValueW
OpenProcessToken
GetUserNameW
shell32
SHGetFileInfoW
SHGetFolderPathW
ord43
ShellExecuteW
winmm
timeEndPeriod
timeBeginPeriod
ws2_32
htons
recv
inet_ntoa
connect
socket
send
inet_addr
WSAStartup
WSAGetLastError
gethostbyname
closesocket
WSAIoctl
WSACleanup
gethostname
getsockname
shutdown
ntohs
setsockopt
select
avicap32
capGetDriverDescriptionA
iphlpapi
GetTcpTable2
SetTcpEntry
GetExtendedUdpTable
wtsapi32
WTSFreeMemory
WTSQueryUserToken
WTSEnumerateSessionsA
userenv
GetUserProfileDirectoryW
shlwapi
PathRemoveFileSpecA
psapi
EnumProcessModules
GetModuleFileNameExW
fwpuclnt
FwpmFreeMemory0
FwpmFilterDeleteById0
FwpmEngineOpen0
FwpmFilterDestroyEnumHandle0
FwpmEngineClose0
FwpmSubLayerAdd0
FwpmProviderGetByKey0
FwpmProviderAdd0
FwpmGetAppIdFromFileName0
FwpmFilterCreateEnumHandle0
FwpmFilterAdd0
FwpmFilterEnum0
FwpmSubLayerGetByKey0
generic
count=199,
id=261,
version=33140,
count=14,
id=259,
version=33140,
count=28,
productName=Unmarked objects (old),
count=9,
id=261,
version=30157,
count=2,
id=261,
version=30159,
count=87,
id=260,
version=30157,
count=3,
id=253,
version=28518,
count=18,
id=260,
version=30034,
count=10,
id=259,
version=30034,
count=91,
id=261,
version=30034,
count=34,
id=260,
version=33140,
count=31,
id=257,
version=33140,
count=402,
id=1,
productName=Unmarked objects,
count=23,
id=265,
version=30159,
count=1,
id=256,
version=30159,
count=1,
id=255,
version=30159,
count=1,
id=151,
count=1,
id=258,
version=30159,