wsock32
shutdown
getservbyname
getservbyport
gethostbyaddr
inet_addr
ioctlsocket
gethostbyname
gethostname
inet_ntoa
sendto
recvfrom
listen
htonl
select
__WSAFDIsSet
socket
setsockopt
recv
htons
getsockname
getpeername
connect
bind
accept
WSASetLastError
ntohs
WSAGetLastError
closesocket
send
getsockopt
WSACleanup
WSAStartup
ws2_32
freeaddrinfo
getaddrinfo
WSAIoctl
WSAWaitForMultipleEvents
WSASetEvent
WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
crypt32
CertFindCertificateInStore
CertFreeCertificateContext
CryptQueryObject
CryptMsgClose
CertCloseStore
CertOpenSystemStoreW
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CertGetNameStringA
CertFindExtension
CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryA
CertEnumCertificatesInStore
CertOpenStore
wldap32
ord46
ord143
ord211
ord60
ord50
ord41
ord22
ord26
ord27
ord32
ord33
ord35
ord79
ord30
ord200
ord301
ord217
ord45
shlwapi
PathGetDriveNumberW
PathRemoveFileSpecW
PathUnquoteSpacesW
PathIsUNCW
PathFileExistsW
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
WTSEnumerateSessionsW
WTSQueryUserToken
secur32
LsaFreeReturnBuffer
LsaEnumerateLogonSessions
LsaGetLogonSessionData
authz
AuthzInitializeContextFromSid
AuthzFreeResourceManager
AuthzInitializeResourceManager
AuthzAccessCheck
AuthzFreeContext
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
ntdll
RtlCaptureStackBackTrace
RtlCaptureContext
RtlUnwind
RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
VerSetConditionMask
RtlVirtualUnwind
kernel32
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
SetEnvironmentVariableW
FreeLibraryAndExitThread
InterlockedFlushSList
InterlockedPushEntrySList
WriteConsoleW
SetStdHandle
GetOEMCP
GetStartupInfoW
InitializeSListHead
UnhandledExceptionFilter
IsDebuggerPresent
ExitThread
CreateThread
SetConsoleCtrlHandler
ExitProcess
InitializeCriticalSectionAndSpinCount
DuplicateHandle
CloseThreadpoolWait
SetThreadpoolWait
WakeConditionVariable
TryAcquireSRWLockExclusive
GetTimeZoneInformation
EnumSystemLocalesW
IsValidLocale
GetLastError
FormatMessageA
FormatMessageW
WideCharToMultiByte
LocalFree
GetModuleFileNameW
DecodePointer
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
LoadLibraryW
FreeLibrary
CreateFileW
GetFileAttributesExW
GetFileSize
ReadFile
CloseHandle
LocalAlloc
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
MultiByteToWideChar
AreFileApisANSI
WriteFile
GetSystemDirectoryW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetHandleInformation
CreatePipe
WaitForSingleObject
TerminateProcess
GetExitCodeProcess
CreateProcessW
LoadLibraryExW
GetEnvironmentVariableA
GetFileAttributesA
GetFullPathNameA
GetCurrentProcess
GetCurrentProcessId
ProcessIdToSessionId
OpenProcess
GetSystemDirectoryA
GetWindowsDirectoryA
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetModuleHandleW
AddDllDirectory
GlobalAlloc
GetLocaleInfoEx
lstrcpyW
QueryFullProcessImageNameW
SetDllDirectoryW
WTSGetActiveConsoleSessionId
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
Module32FirstW
Module32NextW
K32EnumProcessModules
K32GetModuleFileNameExW
GetSystemInfo
GetDiskFreeSpaceExW
GetDriveTypeW
GetLogicalDriveStringsW
GetVolumeInformationW
QueryDosDeviceW
GetVolumeNameForVolumeMountPointW
SetErrorMode
GetSystemTime
SystemTimeToFileTime
GetTempPathW
RaiseException
SetUnhandledExceptionFilter
GetProcessTimes
GetCurrentThreadId
WriteProcessMemory
LocaleNameToLCID
LoadLibraryA
LCMapStringA
GetUserDefaultLCID
GetStringTypeExA
SetFilePointer
LockFile
SetEndOfFile
SetFilePointerEx
UnlockFile
CreateEventA
SetEvent
CreateFileA
InitializeSRWLock
ReleaseSRWLockShared
AcquireSRWLockShared
WaitForSingleObjectEx
GetModuleFileNameA
DeviceIoControl
QueryPerformanceCounter
QueryPerformanceFrequency
ResetEvent
ReleaseSemaphore
WaitForMultipleObjectsEx
OpenEventA
SetWaitableTimer
Sleep
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetLogicalProcessorInformation
GetModuleHandleA
CreateWaitableTimerA
GetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
DeleteFileW
FlushFileBuffers
GetFileAttributesW
GetFileInformationByHandle
GetFileTime
GetFullPathNameW
RemoveDirectoryW
SetFileAttributesW
SetFileTime
GetWindowsDirectoryW
CreateDirectoryExW
CopyFileExW
MoveFileExW
ReleaseSRWLockExclusive
FindFirstFileExW
GetSystemTimeAsFileTime
WakeAllConditionVariable
SleepConditionVariableSRW
GetLocaleInfoA
EnumSystemLocalesA
IsValidCodePage
FoldStringW
LCMapStringW
CompareStringW
GetDateFormatW
GetTimeFormatW
GetLocaleInfoW
GetCurrencyFormatW
IsDBCSLeadByteEx
FindClose
FindFirstFileW
FindNextFileW
SetLastError
lstrlenW
OutputDebugStringA
OutputDebugStringW
SleepEx
GetTickCount
MoveFileExA
GetStdHandle
GetFileType
PeekNamedPipe
WaitForMultipleObjects
VerifyVersionInfoW
GetFileSizeEx
GetModuleHandleExW
VirtualAlloc
VirtualProtect
VirtualFree
VirtualLock
GetACP
TryEnterCriticalSection
GetExitCodeThread
CreateSemaphoreA
SwitchToFiber
DeleteFiber
CreateFiberEx
ConvertFiberToThread
ConvertThreadToFiberEx
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
ConnectNamedPipe
DisconnectNamedPipe
GetOverlappedResult
CancelIo
CreateEventW
CreateNamedPipeA
WaitNamedPipeA
LockFileEx
UnlockFileEx
GetFinalPathNameByHandleW
SetFileInformationByHandle
CopyFileW
CreateHardLinkW
GetFileInformationByHandleEx
CreateSymbolicLinkW
GetStringTypeW
SwitchToThread
GetNativeSystemInfo
InitOnceBeginInitialize
InitOnceComplete
TryAcquireSRWLockShared
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetCurrentThread
GetCommandLineW
GetCommandLineA
GetConsoleOutputCP
IsProcessorFeaturePresent
InitOnceExecuteOnce
EncodePointer
CompareStringEx
GetCPInfo
LCMapStringEx
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetTickCount64
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
GlobalFree
AcquireSRWLockExclusive
CreateThreadpoolWait
user32
UnregisterClassW
MessageBoxW
GetUserObjectInformationW
ExitWindowsEx
GetShellWindow
LoadStringA
GetWindowThreadProcessId
EnumWindows
GetProcessWindowStation
shell32
ord51
SHGetFileInfoW
SHGetKnownFolderPath
ShellExecuteExW
ole32
CoUninitialize
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
CoInitialize
CoTaskMemFree
oleaut32
SysAllocString
CreateErrorInfo
GetErrorInfo
SysFreeString
VariantChangeType
VariantInit
VariantClear
SetErrorInfo
advapi32
DuplicateTokenEx
AllocateAndInitializeSid
AdjustTokenPrivileges
OpenProcessToken
CreateProcessAsUserW
GetUserNameW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
SetEntriesInAclW
CreateWellKnownSid
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
EqualSid
FreeSid
GetTokenInformation
ImpersonateLoggedOnUser
RevertToSelf
LookupAccountSidW
LookupPrivilegeValueW
CreateProcessWithTokenW
ConvertSidToStringSidW
LookupAccountNameW
RegGetValueW
RegCreateKeyExW
RegDeleteKeyExW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegRenameKey
RegDeleteTreeW
RegSetValueExW
CheckTokenMembership
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
CredWriteW
CredReadW
CredFree
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptEncrypt
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptSignHashW
CryptEnumProvidersW
CryptGenRandom
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
bcrypt
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
BCryptGenRandom
pdh
PdhCollectQueryData
PdhCloseQuery
PdhGetFormattedCounterValue
PdhAddEnglishCounterW
PdhOpenQueryW
winhttp
WinHttpQueryHeaders
WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpQueryAuthSchemes
WinHttpSetCredentials
WinHttpSendRequest
WinHttpOpenRequest
WinHttpSetOption
WinHttpConnect
WinHttpCloseHandle
WinHttpOpen
WinHttpGetDefaultProxyConfiguration
WinHttpCrackUrl
WinHttpReceiveResponse
credui
CredUIPromptForCredentialsW
CredUIParseUserNameW
generic
count=12,
id=259,
version=30795,
count=207,
id=261,
version=30795,
count=7,
id=253,
version=33731,
count=19,
id=260,
version=33731,
count=12,
id=259,
version=33731,
count=120,
id=261,
version=33731,
count=1,
id=262,
version=30795,
count=32,
id=260,
version=30795,
count=47,
id=257,
version=30795,
count=496,
id=1,
productName=Unmarked objects,
count=35,
productName=Unmarked objects (old),
count=877,
id=260,
version=33814,
count=5,
id=261,
productName=VS2017 v15.9.4 build 27025,
version=27025,
count=62,
id=261,
version=32534,
count=117,
id=261,
version=33814,
count=1,
id=256,
version=33814,
count=1,
id=255,
version=33814,
count=1,
id=151,
count=1,
id=258,
version=33814,