userenv
CreateEnvironmentBlock
kernel32
GetWindowsDirectoryW
GetTickCount
GetCurrentThreadId
CreateThread
Sleep
CreateEventW
WaitForSingleObject
ReadConsoleA
SetEvent
LoadLibraryA
RaiseException
GetCommandLineW
QueryFullProcessImageNameW
GetLocalTime
MultiByteToWideChar
lstrcmpiW
FindResourceW
SizeofResource
LoadResource
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
OpenProcess
GetCurrentProcess
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetLastError
DuplicateHandle
CloseHandle
DecodePointer
PeekNamedPipe
SetConsoleMode
SetLastError
WriteFile
CreateFileW
OutputDebugStringW
DeleteFileW
GetCurrentDirectoryW
GetCurrentProcessId
GetFullPathNameW
GetLongPathNameW
LocalFree
CreateDirectoryW
ReadFile
RemoveDirectoryW
GetTempPathW
GetFileAttributesW
SetFileAttributesW
WideCharToMultiByte
ReleaseSRWLockExclusive
IsDebuggerPresent
GetFileSizeEx
SetEndOfFile
GetFileInformationByHandle
SetFilePointerEx
FlushFileBuffers
FileTimeToSystemTime
QueryPerformanceFrequency
SystemTimeToTzSpecificLocalTime
GetSystemTimeAsFileTime
QueryPerformanceCounter
FindFirstFileExW
FindNextFileW
FindClose
TerminateProcess
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
VirtualFree
VirtualAlloc
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
GetVersionExW
GetNativeSystemInfo
SetUnhandledExceptionFilter
ResetEvent
LoadLibraryW
ExitThread
FormatMessageW
GetFileSize
FindFirstFileW
GetSystemDirectoryW
GetFileTime
InitializeCriticalSectionAndSpinCount
CreateMutexW
ReleaseMutex
GetTickCount64
OpenMutexW
HeapFree
LocalAlloc
HeapAlloc
GetProcessHeap
InitializeSRWLock
EncodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
IsProcessorFeaturePresent
WaitForSingleObjectEx
GetStartupInfoW
InitializeSListHead
RtlUnwind
GetConsoleOutputCP
GetConsoleMode
SetStdHandle
GetFileType
ExitProcess
GetModuleHandleExW
ResumeThread
FreeLibraryAndExitThread
GetStdHandle
HeapSize
HeapReAlloc
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadConsoleW
GetDriveTypeW
GetTimeZoneInformation
IsValidCodePage
GetACP
GetOEMCP
SetConsoleCtrlHandler
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
GetEnvironmentVariableW
DeleteFiber
ConvertFiberToThread
user32
wsprintfW
SetRectEmpty
GetProcessWindowStation
GetUserObjectInformationW
GetSystemMetrics
CharNextW
LoadStringW
GetMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageW
CharUpperW
SetTimer
MessageBoxW
advapi32
CreateServiceW
CryptDecrypt
CryptCreateHash
CryptDestroyHash
CryptSignHashW
CryptEnumProvidersW
GetSidIdentifierAuthority
CryptGetUserKey
GetLengthSid
AddAccessAllowedAceEx
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
SetSecurityDescriptorSacl
SetNamedSecurityInfoW
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetSecurityDescriptorSacl
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
InitializeAcl
GetAclInformation
GetAce
GetSidSubAuthorityCount
GetSidSubAuthority
GetNamedSecurityInfoW
ConvertSidToStringSidW
LookupAccountSidW
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CreateProcessAsUserW
OpenProcessToken
AllocateAndInitializeSid
DuplicateTokenEx
EqualSid
FreeSid
GetTokenInformation
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegSetValueExW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegQueryValueExW
ChangeServiceConfig2W
CloseServiceHandle
ControlService
StartServiceCtrlDispatcherW
DeleteService
OpenSCManagerW
OpenServiceW
RegisterServiceCtrlHandlerW
SetServiceStatus
CryptExportKey
ole32
CoTaskMemRealloc
CoTaskMemFree
CoUninitialize
CoInitializeEx
CoRegisterClassObject
CoRevokeClassObject
CoTaskMemAlloc
CoResumeClassObjects
CoAddRefServerProcess
CoReleaseServerProcess
CoInitializeSecurity
CoCreateInstance
StringFromGUID2
oleaut32
SysAllocStringLen
SysFreeString
SysStringLen
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
UnRegisterTypeLi
RegisterTypeLi
SysAllocString
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
rpcrt4
RpcServerInqCallAttributesW
ws2_32
recv
closesocket
send
WSAGetLastError
WSASetLastError
WSACleanup
crypt32
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetCertificateContextProperty
shell32
SHFileOperationW
SHGetFolderPathW
CommandLineToArgvW
ShellExecuteW
SHGetKnownFolderPath
generic
count=26,
id=259,
version=30795,
count=205,
id=261,
version=30795,
count=4,
id=253,
version=31935,
count=19,
id=260,
version=31935,
count=24,
id=259,
version=31935,
count=97,
id=261,
version=31935,
count=279,
id=265,
version=32216,
count=30,
id=260,
version=30795,
count=1,
id=262,
version=30795,
count=21,
productName=Unmarked objects (old),
count=495,
id=260,
version=31937,
count=37,
id=257,
version=30795,
count=473,
id=1,
productName=Unmarked objects,
count=3,
id=261,
version=31937,
count=1,
id=260,
version=32216,
count=5,
id=261,
version=32216,
count=1,
id=255,
version=32216,
count=1,
id=151,
count=1,
id=258,
version=32216,
