kernel32
lstrcpynA
LocalReAlloc
GetDiskFreeSpaceExA
CreateDirectoryA
GetTickCount
CancelIo
GetFileSizeEx
Process32First
WriteProcessMemory
OpenProcess
CreateToolhelp32Snapshot
GetTempPathA
OpenMutexA
GlobalAlloc
Process32Next
GlobalFree
SetFileAttributesA
GetProcAddress
VirtualAllocEx
CreateRemoteThread
VirtualFreeEx
IsWow64Process
GetExitCodeProcess
GlobalSize
LoadLibraryA
GetSystemInfo
GlobalMemoryStatusEx
FreeLibrary
GetProcessTimes
GetCurrentThreadId
GetWindowsDirectoryA
VirtualProtect
IsBadReadPtr
LocalSize
CopyFileA
lstrcmpA
QueryFullProcessImageNameA
IsProcessorFeaturePresent
GetModuleHandleW
FormatMessageA
PeekNamedPipe
DisconnectNamedPipe
GetSystemDirectoryA
InitializeProcThreadAttributeList
GetSystemDirectoryW
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
CreateProcessW
GetLogicalDriveStringsA
lstrcpyA
DeleteFileA
MultiByteToWideChar
GetCurrentDirectoryW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
HeapSize
HeapReAlloc
GetFileAttributesExW
ReadConsoleW
GetConsoleOutputCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
MoveFileExW
GetTimeZoneInformation
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileInformationByHandle
GetCommandLineW
GetCommandLineA
ExitProcess
FreeLibraryAndExitThread
WTSGetActiveConsoleSessionId
GetModuleHandleExW
GetFileType
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwindEx
GetThreadPriority
SetThreadPriority
LoadLibraryW
GetProcessAffinityMask
CreateSemaphoreW
ReleaseSemaphore
WriteConsoleW
GetConsoleMode
GetStdHandle
FlushFileBuffers
SetFilePointerEx
DeleteFileW
GetCurrentThread
RaiseFailFastException
GetFileAttributesW
lstrcatA
GetTempPathW
SetEndOfFile
FindNextFileW
FindFirstFileW
CreateDirectoryW
OpenEventA
GetModuleFileNameW
GetStartupInfoW
InitializeSListHead
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
ResetEvent
InitializeCriticalSectionAndSpinCount
OutputDebugStringW
IsDebuggerPresent
GetStringTypeW
GetCPInfo
CompareStringEx
GetSystemTimeAsFileTime
LocalAlloc
GetVolumeInformationA
lstrlenA
SetFilePointer
ExpandEnvironmentStringsA
GetDriveTypeA
GetFileAttributesExA
MoveFileA
GetPrivateProfileStringA
GetPrivateProfileIntA
LocalFree
GetLocalTime
CreateThread
WritePrivateProfileStringA
MoveFileExA
GetTickCount64
ProcessIdToSessionId
GetModuleHandleA
CreateMutexA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
SetConsoleCtrlHandler
GetModuleFileNameA
VirtualAlloc
VirtualFree
GetNativeSystemInfo
GetVersionExA
CreateEventA
GetCurrentProcessId
TerminateThread
SetEvent
ResumeThread
GetEnvironmentVariableA
CreateProcessA
GetProcessHeap
GetFileSize
HeapAlloc
CloseHandle
CreateFileA
Sleep
WaitForSingleObject
CreatePipe
TerminateProcess
WriteFile
GetCurrentProcess
HeapFree
ReadFile
GlobalUnlock
WideCharToMultiByte
DeleteCriticalSection
GlobalLock
DecodePointer
RaiseException
GetFileAttributesA
GetLastError
FindClose
InitializeCriticalSectionEx
FindNextFileA
RtlUnwind
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
LCMapStringEx
EncodePointer
RtlPcToFileHeader
InitOnceBeginInitialize
InitOnceComplete
QueryPerformanceFrequency
QueryPerformanceCounter
GetExitCodeThread
WaitForSingleObjectEx
TryEnterCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
RemoveDirectoryA
CreateFileW
SetThreadExecutionState
ExitThread
FindFirstFileA
user32
GetForegroundWindow
FindWindowExA
GetClassNameA
TranslateMessage
DispatchMessageA
GetMessageA
GetClientRect
CreateWindowExA
CharLowerA
wsprintfA
CharNextA
SendInput
SetClipboardData
GetClipboardData
OpenInputDesktop
GetWindowTextA
ExitWindowsEx
EmptyClipboard
CloseClipboard
OpenClipboard
CloseDesktop
SetSystemCursor
FindWindowW
SetLayeredWindowAttributes
DefWindowProcA
CreateCursor
SetWindowDisplayAffinity
RegisterClassW
GetLastInputInfo
PeekMessageW
DispatchMessageW
IsClipboardFormatAvailable
PeekMessageA
SendMessageA
BeginPaint
GetKeyState
MapVirtualKeyExA
UnhookWindowsHookEx
GetKeyboardLayout
SetWindowsHookExA
CallNextHookEx
GetWindowThreadProcessId
GetMonitorInfoA
GetSystemMetrics
EnumDisplayMonitors
SetProcessWindowStation
OpenDesktopA
OpenWindowStationA
GetThreadDesktop
GetCursorPos
ReleaseDC
ChildWindowFromPoint
SetCursorPos
IsIconic
GetAncestor
SetForegroundWindow
ReleaseCapture
PtInRect
GetParent
GetClassInfoW
DestroyCursor
UnregisterClassW
MenuItemFromPoint
GetDesktopWindow
DrawIconEx
RealGetWindowClassA
CreateDesktopA
mouse_event
EnumDesktopWindows
BringWindowToTop
EndPaint
LoadImageW
SetThreadDesktop
CreateWindowExW
CopyIcon
DestroyWindow
GetClassNameW
GetShellWindow
EnumDisplaySettingsA
BlockInput
MapVirtualKeyA
AttachThreadInput
GetWindowLongA
SetWindowLongA
GetCursorInfo
UpdateWindow
EnumWindows
FindWindowA
GetUserObjectInformationA
ShowWindow
EndDialog
DialogBoxParamA
SetTimer
MoveWindow
SetFocus
SetDlgItemTextA
LoadIconA
SystemParametersInfoA
GetWindowLongPtrA
KillTimer
SetWindowLongPtrA
IsZoomed
SendMessageTimeoutA
FillRect
RedrawWindow
GetTopWindow
PrintWindow
AllowSetForegroundWindow
GetWindow
GetWindowRect
GetMenuItemID
LoadCursorA
GetDC
IsWindowVisible
SetWindowPos
keybd_event
PostMessageA
GetIconInfo
ScreenToClient
WindowFromPoint
GetWindowPlacement
gdi32
CreateCompatibleDC
GetStockObject
BitBlt
CreateSolidBrush
CreateCompatibleBitmap
SelectObject
CreateDIBSection
StretchBlt
DeleteDC
DeleteObject
GetObjectA
SetStretchBltMode
advapi32
RegEnumValueA
CryptGetHashParam
CreateProcessAsUserA
SetTokenInformation
CreateServiceA
StartServiceCtrlDispatcherA
QueryServiceStatus
SetServiceStatus
RegisterServiceCtrlHandlerA
DeleteService
ChangeServiceConfig2A
QueryServiceStatusEx
EnumServicesStatusA
UnlockServiceDatabase
CloseServiceHandle
QueryServiceConfigA
OpenSCManagerA
LockServiceDatabase
ChangeServiceConfigA
ControlService
StartServiceA
OpenServiceA
CreateWellKnownSid
EqualSid
ConvertStringSidToSidW
RegQueryInfoKeyA
CryptReleaseContext
RegEnumKeyExA
RegOpenKeyA
GetUserNameA
AllocateAndInitializeSid
CreateProcessWithTokenW
FreeSid
CheckTokenMembership
DuplicateTokenEx
RegQueryValueA
AdjustTokenPrivileges
RegCloseKey
ConvertSidToStringSidA
RegQueryValueExA
LookupPrivilegeValueA
RegCreateKeyExA
RegSetValueExA
OpenProcessToken
RegOpenKeyExA
GetTokenInformation
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDestroyHash
shell32
SHGetFileInfoA
ord43
ShellExecuteExA
ShellExecuteA
SHCreateDirectoryExW
SHGetFolderPathA
SHGetPathFromIDListA
DragQueryFileA
ole32
CoCreateInstance
ReleaseStgMedium
CoInitialize
CoInitializeEx
CoTaskMemFree
CoUninitialize
oleaut32
VariantInit
SysAllocString
SysFreeString
VariantClear
shlwapi
PathRemoveFileSpecA
PathFileExistsA
bcrypt
BCryptHashData
BCryptImportKeyPair
BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptDestroyKey
BCryptGetProperty
BCryptVerifySignature
BCryptOpenAlgorithmProvider
BCryptCreateHash
BCryptFinishHash
winmm
waveInPrepareHeader
waveInStop
waveOutGetNumDevs
waveInGetNumDevs
timeEndPeriod
waveInReset
waveInUnprepareHeader
waveOutUnprepareHeader
waveOutClose
waveOutReset
waveInOpen
waveOutOpen
waveOutWrite
waveOutPrepareHeader
waveInStart
waveInAddBuffer
timeBeginPeriod
PlaySoundA
waveInClose
ws2_32
getaddrinfo
freeaddrinfo
WSAGetLastError
setsockopt
ioctlsocket
htons
getsockopt
recv
inet_ntoa
connect
socket
send
inet_addr
getsockname
gethostname
ntohl
ntohs
getnameinfo
recvfrom
sendto
WSACleanup
__WSAFDIsSet
WSAIoctl
closesocket
gethostbyname
select
inet_pton
WSAStartup
avicap32
capGetDriverDescriptionA
msvfw32
ICCompressorFree
ICSeqCompressFrameEnd
ICClose
ICSeqCompressFrameStart
ICSeqCompressFrame
ICOpen
ICSendMessage
wtsapi32
WTSFreeMemory
WTSEnumerateSessionsA
WTSQueryUserToken
iphlpapi
GetAdaptersAddresses
GetExtendedTcpTable
SetTcpEntry
dwmapi
DwmGetWindowAttribute
urlmon
URLDownloadToFileA
wininet
InternetReadFile
InternetSetOptionA
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
HttpQueryInfoA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
userenv
DestroyEnvironmentBlock
CreateEnvironmentBlock
psapi
EnumProcessModules
GetModuleFileNameExA
generic
count=205,
id=261,
version=33145,
count=22,
id=259,
version=33145,
count=28,
productName=Unmarked objects (old),
count=60,
id=260,
version=35219,
count=9,
id=261,
version=30159,
count=140,
id=260,
version=35725,
count=3,
id=261,
version=30157,
count=25,
id=260,
version=30159,
count=18,
id=260,
version=30034,
count=13,
id=259,
version=30034,
count=99,
id=261,
version=30034,
count=4,
id=253,
version=28518,
count=51,
id=260,
version=33145,
count=2,
id=262,
version=33145,
count=47,
id=257,
version=33145,
count=546,
id=1,
productName=Unmarked objects,
count=44,
id=265,
version=30159,
count=1,
id=256,
version=30159,
count=1,
id=255,
version=30159,
count=1,
id=151,
count=1,
id=258,
version=30159,