kernel32
GetFileSize
SetEndOfFile
SystemTimeToTzSpecificLocalTime
CreateDirectoryW
RemoveDirectoryW
SetCurrentDirectoryW
GetCurrentDirectoryW
MoveFileW
DeleteFileW
FindFirstFileW
FindClose
GetFullPathNameW
FindNextFileW
GetCurrentProcess
SetLastError
GetFileAttributesW
GetTempPathW
GetTempFileNameW
MoveFileExW
GetVolumePathNameW
GetDriveTypeW
GetDiskFreeSpaceExW
WideCharToMultiByte
TryEnterCriticalSection
SetEvent
ResetEvent
SuspendThread
ResumeThread
SwitchToThread
QueryPerformanceFrequency
QueryPerformanceCounter
GetProcAddress
GetModuleHandleW
GetTimeZoneInformation
GetModuleHandleExA
GetModuleFileNameA
LoadLibraryA
GetDynamicTimeZoneInformation
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
OutputDebugStringW
GetModuleHandleA
GetSystemDirectoryW
GetWindowsDirectoryW
CreateIoCompletionPort
CancelIo
CreateNamedPipeW
ConnectNamedPipe
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateProcessW
OutputDebugStringA
CreateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
FreeLibrary
VerSetConditionMask
VerifyVersionInfoW
GlobalMemoryStatusEx
GetNativeSystemInfo
RtlCaptureStackBackTrace
GetModuleHandleExW
LoadLibraryW
GetCommandLineW
OpenProcess
GetTickCount
CreateMutexW
ReleaseMutex
FlushFileBuffers
GetExitCodeThread
OpenThread
HeapSize
HeapLock
CreateToolhelp32Snapshot
Thread32First
Thread32Next
HeapUnlock
LoadLibraryExA
ReadProcessMemory
WriteProcessMemory
VirtualAlloc
GetSystemInfo
VirtualFree
Process32FirstW
Process32NextW
SetDllDirectoryW
LoadLibraryExW
TerminateProcess
VirtualProtect
FlushInstructionCache
CreateDirectoryA
WriteFile
CreateSemaphoreW
ReleaseSemaphore
WaitForMultipleObjects
VirtualQuery
SetErrorMode
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
IsWow64Process
GlobalAlloc
GlobalFree
SetThreadAffinityMask
GetCurrentThread
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
GetFileSizeEx
HeapReAlloc
SetStdHandle
InterlockedPopEntrySList
ReadFile
CreateFileW
HeapFree
GetProcessHeap
HeapAlloc
SystemTimeToFileTime
FileTimeToSystemTime
GetFileTime
SetFilePointer
GetOverlappedResultEx
MultiByteToWideChar
GetLocaleInfoW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitProcess
CloseHandle
PulseEvent
TerminateThread
Sleep
CreateEventW
WaitForSingleObject
FormatMessageA
GetCurrentProcessId
DeleteCriticalSection
LocalFree
DecodePointer
RaiseException
GetLastError
CompareStringA
FormatMessageW
GetCurrentThreadId
InitializeCriticalSectionEx
GetModuleFileNameW
CompareStringW
SetFileCompletionNotificationModes
CloseThreadpoolIo
WaitForThreadpoolIoCallbacks
CreateThreadpoolIo
StartThreadpoolIo
SetThreadpoolTimerEx
DebugBreak
GetLocalTime
GetVersionExW
EnumSystemLocalesW
DeleteFileA
FindNextFileA
GetUserDefaultLCID
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
FindFirstFileA
GetExitCodeProcess
IsBadReadPtr
K32GetModuleBaseNameW
GetEnvironmentVariableW
GetCommandLineA
GetStdHandle
GetConsoleMode
GetConsoleOutputCP
PeekNamedPipe
GetFileType
GetFileInformationByHandle
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
OpenFileMappingW
HeapDestroy
FindResourceW
LoadResource
FindResourceExW
LockResource
SizeofResource
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
CreateFileA
SetConsoleCtrlHandler
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
GetStringTypeW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WaitForSingleObjectEx
InitOnceComplete
InitOnceBeginInitialize
EncodePointer
LCMapStringEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CreateEventExW
GetTickCount64
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
GetCPInfo
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
GetStartupInfoW
RtlUnwind
InterlockedPushEntrySList
ExitThread
FreeLibraryAndExitThread
SetFilePointerEx
user32
SetTimer
wsprintfW
KillTimer
PostMessageW
GetQueueStatus
PostQuitMessage
GetSystemMetrics
MessageBoxW
GetMessageW
LoadStringA
UnregisterClassW
LoadStringW
DispatchMessageW
TranslateMessage
PostThreadMessageW
CharUpperW
GetUserObjectInformationA
GetProcessWindowStation
GetClassInfoExW
SetWindowLongW
EnumThreadWindows
LoadCursorW
MsgWaitForMultipleObjectsEx
PeekMessageW
IsWindow
RegisterClassExW
CreateWindowExW
IsWindowVisible
DestroyWindow
SendMessageTimeoutW
CallWindowProcW
DefWindowProcW
GetWindowLongW
advapi32
AllocateAndInitializeSid
RevertToSelf
ImpersonateLoggedOnUser
FreeSid
SetTokenInformation
CreateRestrictedToken
CreateWellKnownSid
DuplicateTokenEx
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
RegGetValueW
RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
GetTokenInformation
OpenProcessToken
shell32
SHGetKnownFolderPath
SHGetFolderPathW
CommandLineToArgvW
SHFileOperationW
ord92
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA
ole32
CLSIDFromString
CoTaskMemFree
StringFromCLSID
CoInitializeEx
CoCreateGuid
CoCreateInstance
oleaut32
VariantClear
VariantChangeType
shlwapi
PathAppendW
PathIsRelativeW
PathFileExistsW
mapi32
ord21
ord23
ord140
ord19
ord11
ord17
psapi
GetModuleInformation
GetModuleFileNameExW
EnumProcessModules
winmm
timeGetTime
timeEndPeriod
timeBeginPeriod
wintrust
WTHelperGetProvCertFromChain
WTHelperProvDataFromStateData
WinVerifyTrust
WTHelperGetProvSignerFromChain
crypt32
CertGetNameStringW
rpcrt4
UuidToStringA
UuidCreate
RpcStringFreeA
ws2_32
select
send
bind
accept
__WSAFDIsSet
getsockname
closesocket
listen
WSAStartup
ioctlsocket
htonl
recv
connect
socket
generic
count=17,
id=259,
version=33140,
count=198,
id=261,
version=33140,
count=1,
id=253,
version=28518,
count=20,
id=260,
version=30034,
count=24,
id=259,
version=30034,
count=110,
id=261,
version=30034,
count=2,
id=253,
version=23601,
count=26,
id=260,
version=33140,
count=1,
id=262,
version=33140,
count=37,
id=257,
version=33140,
count=427,
id=1,
productName=Unmarked objects,
count=144,
id=265,
version=30159,
count=1,
id=256,
version=30159,
count=1,
id=255,
version=30159,
count=1,
id=151,
count=1,
id=258,
version=30159,