advapi32
EventWrite
EventRegister
RegOpenKeyExW
RegCloseKey
EventUnregister
DuplicateEncryptionInfoFile
EventSetInformation
EventWriteTransfer
RegQueryValueExW
RegGetValueW
RegDeleteKeyW
RegEnumKeyExW
RegEnumValueW
RegCreateKeyExW
RegSetValueExW
RegQueryInfoKeyW
kernel32
SetCurrentDirectoryW
GlobalAddAtomW
DeleteAtom
WideCharToMultiByte
SetThreadPriority
Sleep
CreateFileW
ReadFile
GetShortPathNameW
GetModuleHandleA
GetFileSize
GetTempPathW
GetTempFileNameW
GetProcAddress
ResumeThread
AddAtomW
HeapSetInformation
GlobalDeleteAtom
GetVersion
lstrcmpA
GlobalSize
FindResourceW
GlobalGetAtomNameW
GetNumberFormatEx
GetFileAttributesW
GetModuleFileNameW
GetTimeFormatW
GetDateFormatW
EnumTimeFormatsW
EnumDateFormatsExW
GetLocaleInfoEx
GetLocalTime
GetLocaleInfoW
FreeLibrary
GetLongPathNameW
lstrcmpiW
lstrcmpW
GlobalFree
GlobalUnlock
CloseHandle
GlobalLock
GlobalAlloc
LoadLibraryW
LocalAlloc
LocalFree
CompareStringOrdinal
DeleteFileW
MoveFileW
lstrlenW
MulDiv
IsDebuggerPresent
DebugBreak
GetModuleHandleW
OpenSemaphoreW
WaitForSingleObjectEx
OutputDebugStringW
GetLastError
FormatMessageW
ReleaseMutex
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
SetLastError
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
GetCurrentThreadId
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
OutputDebugStringA
HeapAlloc
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
ApplicationRecoveryFinished
ApplicationRecoveryInProgress
CreateThread
RegisterApplicationRecoveryCallback
RegisterApplicationRestart
CompareFileTime
FileTimeToSystemTime
SystemTimeToFileTime
GetSystemTime
GetProcessHeap
GetCurrentProcessId
CreateMutexExW
VirtualQuery
GetSystemInfo
RaiseException
LoadLibraryExA
VirtualProtect
GetProcessMitigationPolicy
CopyFileW
MultiByteToWideChar
FileTimeToDosDateTime
WriteFile
SetFilePointer
LeaveCriticalSection
EnterCriticalSection
CreateDirectoryW
DeleteCriticalSection
InitializeCriticalSection
gdi32
DeleteDC
EnumFontFamiliesExW
CreateFontW
GetTextFaceW
DeleteEnhMetaFile
Rectangle
GetViewportOrgEx
GetMetaFileBitsEx
DeleteMetaFile
CloseMetaFile
SetWindowExtEx
SetWindowOrgEx
CreateMetaFileA
CombineRgn
CreateRectRgnIndirect
CreateRectRgn
CloseEnhMetaFile
CreateEnhMetaFileW
GetTextMetricsW
CreateSolidBrush
BitBlt
CreateCompatibleDC
GetObjectW
Polyline
DeleteObject
SelectObject
CreatePen
GdiGradientFill
PtVisible
RectVisible
ExtTextOutW
Escape
CreateICW
SetMetaFileBitsEx
ScaleWindowExtEx
TextOutW
GetTextExtentPoint32W
CreateFontIndirectW
DPtoLP
CreateDCW
GetDeviceCaps
user32
PostMessageW
GetFocus
IsDlgButtonChecked
GetDlgItem
SetWindowLongW
GetWindowLongW
SetGestureConfig
GetGestureInfo
UnhookWindowsHookEx
SetWindowsHookExW
IntersectRect
MonitorFromRect
ScreenToClient
GetSysColor
IsRectEmpty
LoadImageW
TrackMouseEvent
GetKeyboardLayout
TabbedTextOutW
CloseGestureInfoHandle
PostQuitMessage
IsWindowVisible
OffsetRect
GetWindowRect
ClientToScreen
IsClipboardFormatAvailable
CountClipboardFormats
UpdateWindow
GetParent
GetClientRect
ReleaseCapture
SetCapture
SendMessageW
GetDC
ReleaseDC
RegisterWindowMessageW
RegisterClipboardFormatW
DrawTextW
GrayStringW
PtInRect
GetWindow
OemToCharBuffA
CharToOemBuffA
GetPropW
SendDlgItemMessageW
GetClassInfoW
DestroyMenu
SetRectEmpty
LoadIconW
IsWindow
SetWindowTextW
GetWindowTextW
SetWindowLongPtrW
GetWindowLongPtrW
EnableWindow
CopyRect
SetActiveWindow
MonitorFromWindow
ShowWindow
GetDlgCtrlID
LoadBitmapW
SystemParametersInfoW
LoadCursorW
DialogBoxParamW
FillRect
DrawEdge
FindWindowW
DefWindowProcW
GetMenuItemInfoW
GetCapture
GetKeyState
GetSystemMetrics
SetRect
InvalidateRect
ShowCaret
HideCaret
CallNextHookEx
SetCursor
DestroyCursor
ShowScrollBar
GetCursorPos
GetMonitorInfoW
EnumWindows
GetClassNameW
SendMessageTimeoutW
IsIconic
SetForegroundWindow
EndDialog
InsertMenuW
DeleteMenu
GetMenuItemID
GetSubMenu
GetMenuStringW
GetMenuItemCount
IsMenu
CreatePopupMenu
CreateMenu
SetWindowRgn
SetFocus
SetTimer
KillTimer
LoadStringW
mfc42u
ord1859
ord1945
ord4589
ord1726
ord1036
ord3639
ord6455
ord6379
ord2133
ord613
ord1931
ord4599
ord650
ord1055
ord3889
ord1029
ord2132
ord2129
ord2138
ord1387
ord4609
ord5700
ord4860
ord3920
ord408
ord904
ord2105
ord2087
ord6130
ord3099
ord1584
ord312
ord2900
ord528
ord3879
ord1035
ord3894
ord3593
ord3280
ord6887
ord6886
ord3007
ord626
ord1040
ord1126
ord620
ord1122
ord624
ord6050
ord6021
ord2187
ord6772
ord2409
ord4436
ord2846
ord1284
ord622
ord625
ord1264
ord2781
ord2975
ord5887
ord2925
ord4601
ord5980
ord1287
ord4521
ord2783
ord1425
ord2909
ord4375
ord1422
ord2393
ord3166
ord3830
ord328
ord1061
ord311
ord827
ord4556
ord336
ord851
ord354
ord865
ord5672
ord6851
ord4813
ord2565
ord4473
ord5090
ord6614
ord1463
ord1677
ord2408
ord2676
ord1574
ord286
ord2262
ord1646
ord3647
ord1838
ord6416
ord2827
ord6415
ord1559
ord6221
ord4296
ord3783
ord2427
ord3790
ord1647
ord1471
ord6880
ord6541
ord4273
ord4295
ord4294
ord451
ord946
ord3416
ord287
ord488
ord966
ord2525
ord2199
ord1562
ord1566
ord3962
ord2553
ord1498
ord2517
ord464
ord5880
ord1662
ord2270
ord1499
ord465
ord955
ord1712
ord3361
ord1653
ord2468
ord4859
ord495
ord852
ord2212
ord494
ord972
ord1375
ord1344
ord2527
ord2906
ord3963
ord6705
ord1442
ord6773
ord2202
ord2186
ord3306
ord6374
ord6331
ord4328
ord4623
ord6632
ord2801
ord376
ord2098
ord3604
ord504
ord977
ord3282
ord3601
ord6464
ord6586
ord3994
ord3595
ord2417
ord4014
ord3586
ord1991
ord4843
ord4840
ord4678
ord4686
ord1428
ord1874
ord1410
ord1893
ord1810
ord3114
ord1073
ord1082
ord270
ord799
ord4780
ord4988
ord4371
ord3164
ord4077
ord4083
ord4082
ord3046
ord3052
ord3231
ord4815
ord3362
ord3243
ord3049
ord5699
ord2140
ord2457
ord1735
ord5484
ord3932
ord6814
ord2060
ord2670
ord4789
ord5229
ord4017
ord5712
ord4694
ord6812
ord5586
ord2399
ord5662
ord4752
ord1778
ord4365
ord6440
ord5367
ord5370
ord4879
ord4884
ord4881
ord4899
ord4901
ord4886
ord4690
ord4682
ord5496
ord4887
ord5288
ord4946
ord4777
ord4984
ord3386
ord3365
ord4732
ord5215
ord5252
ord5362
ord4769
ord5989
ord5894
ord1753
ord2513
ord6769
ord3147
ord3142
ord5064
ord1361
ord5956
ord5436
ord3556
ord3059
ord4467
ord6092
ord5021
ord4989
ord5871
ord5511
ord4762
ord5408
ord4964
ord3191
ord5432
ord4841
ord4844
ord5410
ord5317
ord5001
ord4870
ord5431
ord2195
ord2448
ord5354
ord3270
ord5216
ord5253
ord5363
ord6174
ord4770
ord4983
ord3484
ord3373
ord4319
ord5878
ord5007
ord4727
ord5018
ord5368
ord4864
ord4842
ord5433
ord5009
ord5034
ord5100
ord5411
ord5324
ord5527
ord5430
ord5987
ord2895
ord2812
ord1783
ord4833
ord3414
ord5821
ord6834
ord2014
ord3748
ord3366
ord5663
ord3933
ord1736
ord5683
ord3535
ord1067
ord995
ord337
ord338
ord4557
ord5077
ord3761
ord4771
ord5702
ord1777
ord6437
ord5406
ord5245
ord4721
ord5687
ord1774
ord6801
ord2425
ord2024
ord4543
ord2592
ord4746
ord3805
ord665
ord911
ord2329
ord2351
ord5694
ord2764
ord1443
ord2629
ord1436
ord371
ord877
ord5602
ord3997
ord1977
ord1803
ord2754
ord2757
ord2756
ord2647
ord3928
ord2325
ord4344
ord3177
ord2661
ord1781
ord2665
ord2586
ord4741
ord3743
ord822
ord2422
ord2023
ord4542
ord2589
ord4743
ord3751
ord832
ord331
ord6351
ord4424
ord4127
ord4565
ord5509
ord387
ord890
ord1441
ord5674
ord1536
ord3038
ord6099
ord6607
ord6096
ord6599
ord4668
ord6603
ord6407
ord6577
ord6238
ord6133
ord6138
ord6015
ord6076
ord5896
ord5886
ord6448
ord6228
ord3760
ord4806
ord2644
ord6612
ord6815
ord4862
ord5467
ord4124
ord6610
ord1316
ord5441
ord4703
ord4952
ord3234
ord1966
ord6102
ord2775
ord4774
ord3174
ord5091
ord2919
ord5615
ord5068
ord2405
ord524
ord3675
ord2530
ord6136
ord5306
ord4947
ord5839
ord4784
ord1674
ord2671
ord5704
ord5659
ord4364
ord4461
ord2920
ord3536
ord5420
ord3481
ord4633
ord4817
ord5524
ord5521
ord3141
ord2750
ord5807
ord3662
ord6823
ord3778
ord3258
ord3266
ord3262
ord2613
ord6114
ord6398
ord3440
ord4491
ord6739
ord1297
ord2829
ord2977
ord1489
ord4621
ord4442
ord660
ord6131
ord6511
ord4554
ord321
ord837
ord3862
ord3742
ord3939
ord3936
ord1537
ord6235
ord525
ord984
ord1719
ord1725
ord4612
ord2535
ord6243
ord5425
ord5575
ord5453
ord3753
ord2455
ord5670
ord5701
ord6806
ord5656
ord1716
ord2404
ord4422
ord5838
ord4345
ord4705
ord6556
ord3892
ord1033
ord2376
ord2318
ord6767
ord2657
ord3180
ord6328
ord2845
ord5249
ord1894
ord505
ord978
ord2401
ord3540
ord433
ord927
ord6229
ord4893
ord2461
ord6821
ord5331
ord5016
ord310
ord826
ord4987
ord3387
ord4320
ord5495
ord5400
ord4875
ord5386
ord5008
ord5312
ord5529
ord5055
ord5084
ord5341
ord5336
ord5397
ord5364
ord318
ord834
ord4598
ord5636
ord659
ord1063
ord507
ord971
ord598
ord1027
ord5630
ord6510
ord4472
ord6538
ord2036
ord1404
ord5870
ord1519
ord3468
ord5723
ord1447
ord6841
ord6840
ord2939
ord3681
ord3680
ord2752
ord5986
ord3222
ord3780
ord367
ord5614
ord6813
ord5711
ord6780
ord4368
ord6888
ord6832
ord5815
ord2876
ord5804
ord2121
ord5637
ord3916
ord6053
ord5730
ord5065
ord5724
ord5722
ord2412
ord1388
ord4191
ord6071
ord2515
ord2559
ord2328
ord4578
ord5513
ord1831
ord508
ord3597
ord509
ord981
ord2767
ord6760
ord1483
ord6078
ord4981
ord5519
ord491
ord3732
ord969
ord2526
ord3491
ord542
ord5690
ord1575
ord1472
ord5654
ord6661
ord1904
ord2540
ord6123
ord4063
ord3068
ord5149
ord3030
ord506
ord979
ord5622
ord292
ord815
ord4974
ord544
ord2543
ord5582
ord4187
ord3516
ord5244
ord4720
ord1665
ord2979
ord2856
ord6704
ord1286
ord3638
ord6456
ord5680
ord4749
ord1723
ord5506
ord4706
ord2596
ord1448
ord4580
ord540
ord992
ord6299
ord5232
ord5567
ord5058
ord5293
ord2802
ord6520
ord6524
ord1769
ord1729
ord1730
ord6474
ord994
ord6518
ord6525
ord6634
ord5282
ord3159
ord6609
ord4867
ord6517
ord5714
ord6593
ord1968
ord1903
ord4405
ord4712
ord5297
ord4945
ord5682
ord1734
ord5366
ord5369
ord1972
msvcrt
wcscmp
wcscpy_s
___lc_handle_func
___lc_codepage_func
__mb_cur_max
setlocale
__crtGetStringTypeW
__crtLCMapStringW
___mb_cur_max_func
abort
__RTDynamicCast
memcmp
memcpy
memset
??1type_info@@UEAA@XZ
_onexit
__dllonexit
_unlock
_lock
?terminate@@YAXXZ
_commode
_fmode
_wcmdln
__C_specific_handler
_initterm
__setusermatherr
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
_XcptFilter
_CxxThrowException
_callnewh
??0exception@@QEAA@AEBQEBDH@Z
malloc
wcstol
_wcsicmp
_wcsdup
free
memmove
iswspace
_itow
_itow_s
_purecall
_errno
_wtoi
wcstoul
_wtol
wcstok_s
wcstod
memmove_s
??0exception@@QEAA@AEBQEBD@Z
?what@exception@@UEBAPEBDXZ
_vsnprintf_s
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@XZ
??1exception@@UEAA@XZ
memcpy_s
_vsnwprintf
__CxxFrameHandler3
__pctype_func
swprintf_s
comdlg32
GetFileTitleW
CommDlgExtendedError
shell32
ShellAboutW
DragFinish
ShellExecuteW
SHCreateItemInKnownFolder
SHCreateItemFromParsingName
SHAddToRecentDocs
SHGetSpecialFolderPathW
ord165
DragQueryFileW
ole32
CoTaskMemFree
CLSIDFromString
StringFromCLSID
StgOpenStorageEx
CoTaskMemAlloc
PropVariantClear
OleDuplicateData
PropVariantCopy
CreateStreamOnHGlobal
CoCreateGuid
StringFromGUID2
CoCreateInstance
OleSave
CoGetMalloc
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoRegisterActivationFilter
OleInitialize
CoUninitialize
CoInitialize
OleRegGetUserType
ReleaseStgMedium
OleLoad
ReadClassStg
StgOpenStorage
IIDFromString
ProgIDFromCLSID
WriteClassStg
shlwapi
SHCreateStreamOnFileW
PathFindExtensionW
PathAddBackslashW
StrCmpNIW
SHCreateStreamOnFileEx
ord231
ord158
PathFindFileNameW
PathIsFileSpecW
StrCmpIW
PathFileExistsW
ord628
SHStrDupW
ntdll
WinSqmStartSession
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WinSqmAddToStream
WinSqmEndSession
WinSqmSetDWORD
WinSqmIncrementDWORD
comctl32
ord345
ImageList_Draw
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_Remove
ord381
oleaut32
VarDecFromR8
VarR8FromDec
SafeArrayCopy
SafeArrayDestroy
VariantInit
VariantClear
SafeArrayPutElement
SafeArrayCreateVector
VarDecFromI4
SysStringLen
SysAllocString
SysStringByteLen
SysFreeString
propsys
PropVariantToUInt32WithDefault
PropVariantToUInt32
PropVariantToString
rpcrt4
UuidCreate
UuidToStringW
RpcStringFreeW
generic
count=3,
id=259,
version=25711,
count=30,
id=260,
version=25711,
count=23,
id=261,
version=25711,
count=37,
id=257,
version=25711,
count=1212,
id=1,
productName=Unmarked objects,
count=112,
id=265,
version=25711,
count=1,
id=255,
version=25711,
count=1,
id=258,
version=25711,