ntdll.dll,LdrLoadDll,log,pwchar,pulong,punicode_string,phandle
kernel32.dll,CreateProcessInternalW,log,lpvoid,lpwstr,lpwstr,lpsecurity_attributes,lpsecurity_attributes,bool,dword,lpvoid,lpwstr,lpstartupinfo,lpprocess_information,lpvoid
jscript.dll,COleScript_ParseScriptText,log,pvoid,pwchar,pvoid,pvoid,pvoid,pvoid,pvoid,pvoid,pvoid,pvoid
jscript.dll,JsEval,log,pvoid,pvoid,pvoid,index,dword
jscript9.dll,JsParseScript,log,wchar_t,pvoid,wchar_t,pvoid
jscript9.dll,JsRunScript,log,wchar_t,pvoid,wchar_t,pvoid
mshtml.dll,CDocument_write,log,pvoid,safearray
ole32.dll,CoCreateInstance,log,refclsid,lpunknown,dword,refiid,lpvoid
ole32.dll,CoCreateInstanceEx,log,refclsid,lpunknown,dword,coserverinfo,dword,multi_qi
ole32.dll,CoGetClassObject,log,refclsid,dword,coserverinfo,refiid,lpvoid
ntdll.dll,RtlDispatchException,log,pexception_record,pcontext
kernel32.dll,MoveFileWithProgressW,log,lpwstr,lpwstr,lpprogress_routine,lpvoid,dword
kernelbase.dll,MoveFileWithProgressTransactedW,log,lpwstr,lpwstr,lpprogress_routine,lpvoid,dword,handle
kernel32.dll,MoveFileWithProgressTransactedW,log,lpwstr,lpwstr,lpprogress_routine,lpvoid,dword,handle
kernel32.dll,CreateDirectoryW,log,lpctstr,lpsecurity_attributes
kernel32.dll,CreateDirectoryExW,log,lpwstr,lpwstr,lpsecurity_attributes
kernel32.dll,RemoveDirectoryA,log,lpctstr
kernel32.dll,RemoveDirectoryW,log,lpwstr
kernel32.dll,FindFirstFileExA,log,lpctstr,findex_info_levels,lpvoid,findex_search_ops,lpvoid,dword
kernel32.dll,FindFirstFileExW,log,lpwstr,findex_info_levels,lpvoid,findex_search_ops,lpvoid,dword
kernel32.dll,FindNextFileW,log,handle,lpwin32_find_dataw
kernel32.dll,CopyFileA,log,lpctstr,lpctstr,bool
kernel32.dll,CopyFileW,log,lpwstr,lpwstr,bool
kernel32.dll,CopyFileExW,log,lpwstr,lpwstr,lpprogress_routine,lpvoid,lpbool,dword
kernel32.dll,DeleteFileA,log,lpcstr
kernel32.dll,DeleteFileW,log,lpwstr
kernel32.dll,GetDiskFreeSpaceExA,log,pctstr,pularge_integer,pularge_integer,pularge_integer
kernel32.dll,GetDiskFreeSpaceExW,log,pcwstr,pularge_integer,pularge_integer,pularge_integer
kernel32.dll,GetDiskFreeSpaceA,log,pctstr,lpdword,lpdword,lpdword,lpdword
kernel32.dll,GetDiskFreeSpaceW,log,pcwstr,lpdword,lpdword,lpdword,lpdword
kernel32.dll,GetVolumeNameForVolumeMountPointW,log,lpcwstr,lpwstr,dword
kernel32.dll,GetVolumeInformationByHandleW,log,handle,lpwstr,dword,lpdword,lpdword,lpdword,lpwstr,dword
shell32.dll,SHGetFolderPathW,log,hwnd,int,handle,dword,lpwstr
shell32.dll,SHGetKnownFolderPath,log,guid,dword,handle,pwstr
shell32.dll,SHGetFileInfoW,log,lpcwstr,dword,shfileinfow,cbfileinfo,uflags
version.dll,GetFileVersionInfoW,log,lpcwstr,_reserved_,dword,lpvoid
version.dll,GetFileVersionInfoSizeW,log,lpcwstr,lpdword
kernel32.dll,FindFirstChangeNotificationW,log,lpcwstr,bool,dword
advapi32.dll,RegOpenKeyExA,log,hkey,lpctstr,dword,regsam,phkey
advapi32.dll,RegOpenKeyExW,log,hkey,lpwstr,dword,regsam,phkey
advapi32.dll,RegCreateKeyExA,log,hkey,lpctstr,dword,lptstr,dword,regsam,lpsecurity_attributes,phkey,lpdword
advapi32.dll,RegCreateKeyExW,log,hkey,lpwstr,dword,lpwstr,dword,regsam,lpsecurity_attributes,phkey,lpdword
advapi32.dll,RegDeleteKeyA,log,hkey,lpctstr
advapi32.dll,RegDeleteKeyW,log,hkey,lpwstr
advapi32.dll,RegEnumKeyW,log,hkey,dword,lpwstr,dword
advapi32.dll,RegEnumKeyExA,log,hkey,dword,lptstr,lpdword,lpdword,lptstr,lpdword,pfiletime
advapi32.dll,RegEnumKeyExW,log,hkey,dword,lpwstr,lpdword,lpdword,lpwstr,lpdword,pfiletime
advapi32.dll,RegEnumValueA,log,hkey,dword,lptstr,lpdword,lpdword,lpdword,lpbyte,lpdword
advapi32.dll,RegEnumValueW,log,hkey,dword,lpwstr,lpdword,lpdword,lpdword,lpbyte,lpdword
advapi32.dll,RegSetValueExA,log,hkey,lpctstr,dword,dword,byte,dword
advapi32.dll,RegSetValueExW,log,hkey,lpwstr,dword,dword,byte,dword
advapi32.dll,RegQueryValueExA,log,hkey,lpctstr,lpdword,lpdword,lpbyte,lpdword
advapi32.dll,RegQueryValueExW,log,hkey,lpwstr,lpdword,lpdword,lpbyte,lpdword
advapi32.dll,RegDeleteValueA,log,hkey,lpctstr
advapi32.dll,RegDeleteValueW,log,hkey,lpwstr
advapi32.dll,RegQueryInfoKeyA,log,hkey,lptstr,lpdword,_reserved_,lpdword,lpdword,lpdword,lpdword,lpdword,lpdword,lpdword,pfiletime
advapi32.dll,RegQueryInfoKeyW,log,hkey,lpwstr,lpdword,_reserved_,lpdword,lpdword,lpdword,lpdword,lpdword,lpdword,lpdword,pfiletime
advapi32.dll,RegCloseKey,log,hkey
advapi32.dll,RegNotifyChangeKeyValue,log,hkey,bool,dword,handle,bool
kernel32.dll,RegOpenKeyExA,log,hkey,lpctstr,dword,regsam,phkey
kernel32.dll,RegOpenKeyExW,log,hkey,lpwstr,dword,regsam,phkey
kernel32.dll,RegCreateKeyExA,log,hkey,lpctstr,dword,lptstr,dword,regsam,lpsecurity_attributes,phkey,lpdword
kernel32.dll,RegCreateKeyExW,log,hkey,lpwstr,dword,lpwstr,dword,regsam,lpsecurity_attributes,phkey,lpdword
kernel32.dll,RegDeleteKeyA,log,hkey,lpctstr
kernel32.dll,RegDeleteKeyW,log,hkey,lpwstr
kernel32.dll,RegEnumKeyW,log,hkey,dword,lpwstr,dword
kernel32.dll,RegEnumKeyExA,log,hkey,dword,lptstr,lpdword,lpdword,lptstr,lpdword,pfiletime
kernel32.dll,RegEnumKeyExW,log,hkey,dword,lpwstr,lpdword,lpdword,lpwstr,lpdword,pfiletime
kernel32.dll,RegEnumValueA,log,hkey,dword,lptstr,lpdword,lpdword,lpdword,lpbyte,lpdword
kernel32.dll,RegEnumValueW,log,hkey,dword,lpwstr,lpdword,lpdword,lpdword,lpbyte,lpdword
kernel32.dll,RegSetValueExA,log,hkey,lpctstr,dword,dword,byte,dword
kernel32.dll,RegSetValueExW,log,hkey,lpwstr,dword,dword,byte,dword
kernel32.dll,RegQueryValueExA,log,hkey,lpctstr,lpdword,lpdword,lpbyte,lpdword
kernel32.dll,RegQueryValueExW,log,hkey,lpwstr,lpdword,lpdword,lpbyte,lpdword
kernel32.dll,RegDeleteValueA,log,hkey,lpctstr
kernel32.dll,RegDeleteValueW,log,hkey,lpwstr
kernel32.dll,RegQueryInfoKeyA,log,hkey,lptstr,lpdword,_reserved_,lpdword,lpdword,lpdword,lpdword,lpdword,lpdword,lpdword,pfiletime
kernel32.dll,RegQueryInfoKeyW,log,hkey,lpwstr,lpdword,_reserved_,lpdword,lpdword,lpdword,lpdword,lpdword,lpdword,lpdword,pfiletime
kernel32.dll,RegCloseKey,log,hkey
kernel32.dll,RegNotifyChangeKeyValue,log,hkey,bool,dword,handle,bool
user32.dll,CreateWindowExA,log,dword,lpcstr,lpcstr,dword,int,int,int,int,hwnd,hmenu,hinstance,lpvoid
user32.dll,CreateWindowExW,log,dword,lpwstr,lpwstr,dword,int,int,int,int,hwnd,hmenu,hinstance,lpvoid
user32.dll,FindWindowA,log,lpctstr,lpctstr
user32.dll,FindWindowW,log,lpwstr,lpwstr
user32.dll,FindWindowExA,log,hwnd,hwnd,lpctstr,lpctstr
user32.dll,FindWindowExW,log,hwnd,hwnd,lpwstr,lpwstr
user32.dll,SendNotifyMessageA,log,hwnd,uint,wparam,lparam
user32.dll,SendNotifyMessageW,log,hwnd,uint,wparam,lparam
user32.dll,SetWindowLongA,log,hwnd,int,long
user32.dll,SetWindowLongW,log,hwnd,int,long
user32.dll,SetWindowLongPtrA,log,hwnd,int,long_ptr
user32.dll,SetWindowLongPtrW,log,hwnd,int,long_ptr
kernel32.dll,CreateToolhelp32Snapshot,log,dword,dword
kernel32.dll,Process32FirstW,log,handle,lpprocessentry32w
kernel32.dll,Process32NextW,log,handle,lpprocessentry32w
ntdll.dll,RtlCreateUserProcess,log,punicode_string,ulong,out,psecurity_descriptor,psecurity_descriptor,handle,boolean,handle,handle,prtl_user_process_information
kernel32.dll,WaitForDebugEvent,log,lpdebug_event,dword
ntdll.dll,DbgUiWaitStateChange,log,pdbgui_wait_state_change,plarge_integer
advapi32.dll,CreateProcessWithLogonW,log,lpcwstr,lpcwstr,lpcwstr,dword,lpcwstr,lpwstr,dword,lpvoid,lpcwstr,lpstartupinfow,lpprocess_information
advapi32.dll,CreateProcessWithTokenW,log,handle,dword,lpcwstr,lpwstr,dword,lpvoid,lpcwstr,lpstartupinfow,lpprocess_information
shell32.dll,ShellExecuteExW,log,shellexecuteinfow
kernel32.dll,ReadProcessMemory,log,handle,lpcvoid,lpvoid,size_t,psize_t
kernel32.dll,WriteProcessMemory,log,handle,lpvoid,lpcvoid,size_t,psize_t
kernel32.dll,VirtualProtectEx,log,handle,lpvoid,size_t,dword,pdword
msvcrt.dll,system,log,char
kernel32.dll,CreateThread,log,phandle,access_mask,pobject_attributes,handle,pclient_id,pcontext,pinitial_teb,boolean
kernel32.dll,CreateRemoteThread,log,handle,lpsecurity_attributes,size_t,lpthread_start_routine,lpvoid,dword,lpdword
ntdll.dll,RtlCreateUserThread,log,handle,psecurity_descriptor,boolean,ulong,out,out,pvoid,pvoid,phandle,pclient_id
user32.dll,SetWindowsHookExA,log,int,hookproc,hinstance,dword
user32.dll,SetWindowsHookExW,log,int,hookproc,hinstance,dword
user32.dll,UnhookWindowsHookEx,log,hhook
kernel32.dll,SetUnhandledExceptionFilter,log+stack,lptop_level_exception_filter
kernel32.dll,SetErrorMode,log,uint
ntdll.dll,LdrGetDllHandle,log,pword,pvoid,punicode_string,phandle
ntdll.dll,LdrGetProcedureAddress,log,hmodule,pansi_string,word,pvoid
kernel32.dll,DeviceIoControl,log,handle,handle,pio_apc_routine,pvoid,pio_status_block,ulong,pvoid,ulong,pvoid,ulong
user32.dll,ExitWindowsEx,log,uint,dword
advapi32.dll,InitiateShutdownW,log,lpwstr,lpwstr,dword,dword,dword
advapi32.dll,InitiateSystemShutdownW,log,lpwstr,lpwstr,dword,bool,bool
advapi32.dll,InitiateSystemShutdownExW,log,lpwstr,lpwstr,dword,bool,bool,dword
kernel32.dll,IsDebuggerPresent,log,void
advapi32.dll,LookupPrivilegeValueW,log,lpwstr,lpwstr,pluid
advapi32.dll,GetCurrentHwProfileW,log,lphw_profile_info
kernel32.dll,WriteConsoleA,log,handle,void,dword,lpdword,_reserved_
kernel32.dll,WriteConsoleW,log,handle,void,dword,lpdword,_reserved_
user32.dll,GetSystemMetrics,log,int
user32.dll,GetCursorPos,log,lppoint
kernel32.dll,GetComputerNameA,log,pctstr,lpdword
kernel32.dll,GetComputerNameW,log,pcwstr,lpdword
advapi32.dll,GetUserNameA,log,pctstr,lpdword
advapi32.dll,GetUserNameW,log,pcwstr,lpdword
user32.dll,GetAsyncKeyState,log,int
ntdll.dll,RtlDecompressBuffer,log,ushort,puchar,ulong,puchar,ulong,pulong
ntdll.dll,RtlCompressBuffer,log,ushort,puchar,ulong,puchar,ulong,ulong,pulong,pvoid
kernel32.dll,GetSystemInfo,log,lpsystem_info
setupapi.dll,SetupDiGetClassDevsA,log,guid,pcstr,hwnd,dword
setupapi.dll,SetupDiGetClassDevsW,log,guid,pcwstr,hwnd,dword
setupapi.dll,SetupDiGetDeviceRegistryPropertyA,log,hdevinfo,psp_devinfo_data,dword,pdword,pbyte,dword,pdword
setupapi.dll,SetupDiGetDeviceRegistryPropertyW,log,hdevinfo,psp_devinfo_data,dword,pdword,pbyte,dword,pdword
setupapi.dll,SetupDiBuildDriverInfoList,log,hdevinfo,psp_devinfo_data,dword
setupapi.dll,IsUserAdmin,log,void
imgutil.dll,DecodeImageEx,log,pvoid,pvoid,pvoid,lpcwstr
imgutil.dll,DecodeImage,log,pvoid,pvoid,pvoid,lpcwstr
advapi32.dll,LsaOpenPolicy,log,systemname,pvoid,access_mask,pvoid
mpr.dll,WNetGetProviderNameW,log,dword,lpwstr,lpdword
rasapi32.dll,RasValidateEntryNameW,log,lpcwstr,lpcwstr
rasapi32.dll,RasConnectionNotificationW,log,pvoid,handle,dword
kernel32.dll,SystemTimeToTzSpecificLocalTime,log,lptime_zone_information,lpsystemtime,lpsystemtime
ole32.dll,CLSIDFromProgID,log,lpcolestr,lpclsid
kernel32.dll,GlobalMemoryStatus,log,lpmemorystatus
kernel32.dll,GlobalMemoryStatusEx,log,lpmemorystatusex
user32.dll,SystemParametersInfoA,log,uint,uint,pvoid,uint
user32.dll,SystemParametersInfoW,log,uint,uint,pvoid,uint
pstorec.dll,PStoreCreateInstance,log,pvoid,void,void,dword
advapi32.dll,SaferIdentifyLevel,log,dword,pvoid,pvoid,_reserved_
netapi32.dll,NetUserGetInfo,log,lpcwstr,lpcwstr,dword,lpbyte
netapi32.dll,NetGetJoinInformation,log,lpcwstr,lpwstr,dword
netapi32.dll,NetUserGetLocalGroups,log,lpcwstr,lpcwstr,dword,dword,lpbyte,dword,lpdword,lpdword
urlmon.dll,URLDownloadToFileW,log,lpunknown,lpwstr,lpwstr,dword,lpvoid
urlmon.dll,URLDownloadToCacheFileW,log,lpunknown,lpcwstr,lpwstr,dword,_reserved_,void
urlmon.dll,ObtainUserAgentString,log,dword,lpstr,dword
wininet.dll,InternetGetConnectedState,log,lpdword,dword
wininet.dll,InternetOpenA,log,lpctstr,dword,lpctstr,lpctstr,dword
wininet.dll,InternetOpenW,log,lpwstr,dword,lpwstr,lpwstr,dword
wininet.dll,InternetConnectA,log,hinternet,lpctstr,internet_port,lpctstr,lpctstr,dword,dword,dword_ptr
wininet.dll,InternetConnectW,log,hinternet,lpwstr,internet_port,lpwstr,lpwstr,dword,dword,dword_ptr
wininet.dll,InternetOpenUrlA,log,hinternet,lpctstr,lpctstr,dword,dword,dword_ptr
wininet.dll,InternetOpenUrlW,log,hinternet,lpwstr,lpwstr,dword,dword,dword_ptr
wininet.dll,HttpOpenRequestA,log,hinternet,lpcstr,lpcstr,lpcstr,lpcstr,lpcstr,dword,dword_ptr
wininet.dll,HttpOpenRequestW,log,hinternet,lpcwstr,lpcwstr,lpcwstr,lpcwstr,lpcwstr,dword,dword_ptr
wininet.dll,HttpSendRequestA,log,hinternet,lpctstr,dword,lpvoid,dword
wininet.dll,HttpSendRequestW,log,hinternet,lpwstr,dword,lpvoid,dword
wininet.dll,HttpSendRequestExA,log,hinternet,lpinternet_buffersa,lpinternet_buffersa,dword,dword_ptr
wininet.dll,HttpSendRequestExW,log,hinternet,lpinternet_buffersw,lpinternet_buffersw,dword,dword_ptr
wininet.dll,HttpAddRequestHeadersA,log,hinternet,lpcstr,dword,dword
wininet.dll,HttpAddRequestHeadersW,log,hinternet,lpcwstr,dword,dword
wininet.dll,HttpQueryInfoA,log,hinternet,dword,lpvoid,lpdword,lpdword
wininet.dll,HttpQueryInfoW,log,hinternet,dword,lpvoid,lpdword,lpdword
wininet.dll,HttpEndRequestA,log,hinternet,lpinternet_buffersa,dword,dword_ptr
wininet.dll,HttpEndRequestW,log,hinternet,lpinternet_buffersw,dword,dword_ptr
wininet.dll,InternetReadFile,log,hinternet,lpvoid,dword,lpdword
wininet.dll,InternetWriteFile,log,hinternet,lpcvoid,dword,lpdword
wininet.dll,InternetCloseHandle,log,hinternet
wininet.dll,InternetCrackUrlA,log,lpcstr,dword,dword,lpurl_componentsa
wininet.dll,InternetCrackUrlW,log,lpcwstr,dword,dword,lpurl_componentsw
wininet.dll,InternetSetOptionA,log,hinternet,dword,lpvoid,dword
wininet.dll,InternetConfirmZoneCrossingA,log,hwnd,lptstr,lptstr,bool
wininet.dll,InternetConfirmZoneCrossingW,log,hwnd,lptstr,lptstr,bool
winhttp.dll,WinHttpOpen,log,lpcwstr,dword,lpcwstr,lpcwstr,dword
winhttp.dll,WinHttpGetIEProxyConfigForCurrentUser,log,lpvoid
winhttp.dll,WinHttpGetProxyForUrl,log,hinternet,lpcwstr,lpvoid,lpvoid
winhttp.dll,WinHttpSetOption,log,hinternet,dword,lpvoid,dword
winhttp.dll,WinHttpConnect,log,hinternet,lpcwstr,internet_port,_reserved_
winhttp.dll,WinHttpOpenRequest,log,hinternet,lpcwstr,lpcwstr,lpcwstr,lpcwstr,lpcwstr,dword
winhttp.dll,WinHttpSetTimeouts,log,hinternet,int,int,int,int
winhttp.dll,WinHttpQueryHeaders,log,hinternet,dword,lpcwstr,lpvoid,lpdword,lpdword
winhttp.dll,WinHttpSendRequest,log,hinternet,lpcwstr,dword,lpvoid,dword,dword,dword_ptr
winhttp.dll,WinHttpReceiveResponse,log,hinternet,_reserved_
dnsapi.dll,DnsQuery_A,log,pcstr,word,dword,pvoid,pdns_record,pvoid
dnsapi.dll,DnsQuery_UTF8,log,lpbyte,word,dword,pvoid,pdns_record,pvoid
dnsapi.dll,DnsQuery_W,log,pwstr,word,dword,pvoid,pdns_record,pvoid
ws2_32.dll,getaddrinfo,log,pcstr,pcstr,addrinfoa,paddrinfoa
ws2_32.dll,GetAddrInfoW,log,pcwstr,pcwstr,addrinfow,paddrinfow
mpr.dll,WNetUseConnectionW,log,hwnd,lpnetresourcew,lpcwstr,lpcwstr,dword,lpwstr,lpdword,lpdword
cryptnet.dll,CryptRetrieveObjectByUrlW,log,lpcwstr,lpcstr,dword,dword,lpvoid,hcryptasync,pcrypt_credentials,lpvoid,pcrypt_retrieve_aux_info
ncrypt.dll,SslEncryptPacket,log,ncrypt_prov_handle,ncrypt_key_handle,pbyte,dword,pbyte,dword,dword,ulonglong,dword,dword
ncrypt.dll,SslDecryptPacket,log,ncrypt_prov_handle,ncrypt_key_handle,pbyte,dword,pbyte,dword,dword,ulonglong,dword
iphlpapi.dll,GetAdaptersAddresses,log,ulong,ulong,pvoid,pvoid,pulong
iphlpapi.dll,GetAdaptersInfo,log,pvoid,pulong
urlmon.dll,CoInternetSetFeatureEnabled,log,featureentry,dword,bool
advapi32.dll,OpenSCManagerA,log,lpctstr,lpctstr,dword
advapi32.dll,OpenSCManagerW,log,lpwstr,lpwstr,dword
advapi32.dll,CreateServiceA,log,sc_handle,lpctstr,lpctstr,dword,dword,dword,dword,lpctstr,lpctstr,lpdword,lpctstr,lpctstr,lpctstr
advapi32.dll,CreateServiceW,log,sc_handle,lpwstr,lpwstr,dword,dword,dword,dword,lpwstr,lpwstr,lpdword,lpwstr,lpwstr,lpwstr
advapi32.dll,OpenServiceA,log,sc_handle,lpctstr,dword
advapi32.dll,OpenServiceW,log,sc_handle,lpwstr,dword
advapi32.dll,StartServiceA,log,sc_handle,dword,lpctstr
advapi32.dll,StartServiceW,log,sc_handle,dword,lpwstr
advapi32.dll,ControlService,log,sc_handle,dword,lpservice_status
advapi32.dll,DeleteService,log,sc_handle
kernel32.dll,GetLocalTime,log,lpsystemtime
kernel32.dll,GetSystemTime,log,lpsystemtime
kernel32.dll,GetSystemTimeAsFileTime,log,lpfiletime
kernel32.dll,GetTickCount,log,void
kernel32.dll,GetTickCount64,log,void
user32.dll,GetLastInputInfo,log,plastinputinfo
winmm.dll,timeGetTime,log,void
user32.dll,MsgWaitForMultipleObjectsEx,log,dword,handle,dword,dword,dword
ws2_32.dll,WSAStartup,log+stack,word,lpwsadata
ws2_32.dll,gethostname,log,char,int
ws2_32.dll,gethostbyname,log,char
ws2_32.dll,socket,log,int,int,int
ws2_32.dll,connect,log,socket,struct,int
ws2_32.dll,send,log,socket,char,int,int
ws2_32.dll,sendto,log,socket,char,int,int,struct,int
ws2_32.dll,recv,log,socket,char,int,int
ws2_32.dll,recvfrom,log,socket,char,int,int,struct,int
ws2_32.dll,accept,log,socket,struct,int
ws2_32.dll,bind,log,socket,struct,int
ws2_32.dll,listen,log,socket,int
ws2_32.dll,select,log,socket,fd_set,fd_set,fd_set,struct
ws2_32.dll,setsockopt,log,socket,int,int,char,int
ws2_32.dll,ioctlsocket,log,socket,long,u_long
ws2_32.dll,closesocket,log,socket
ws2_32.dll,shutdown,log,socket,int
ws2_32.dll,WSAAccept,log,socket,struct,lpint,lpconditionproc,dword_ptr
ws2_32.dll,WSAConnect,log,socket,struct,int,lpwsabuf,lpwsabuf,lpqos,lpqos
ws2_32.dll,WSAConnectByNameW,log,socket,lpwstr,lpwstr,lpdword,lpsockaddr,lpdword,lpsockaddr,pvoid,lpwsaoverlapped
ws2_32.dll,WSAConnectByList,log,socket,psocket_address_list,lpdword,lpsockaddr,lpdword,lpsockaddr,pvoid,lpwsaoverlapped
ws2_32.dll,WSARecv,log,socket,lpwsabuf,dword,lpdword,lpdword,lpwsaoverlapped,lpwsaoverlapped_completion_routine
ws2_32.dll,WSARecvFrom,log,socket,lpwsabuf,dword,lpdword,lpdword,struct,lpint,lpwsaoverlapped,lpwsaoverlapped_completion_routine
ws2_32.dll,WSASend,log,socket,lpwsabuf,dword,lpdword,dword,lpwsaoverlapped,lpwsaoverlapped_completion_routine
ws2_32.dll,WSASendTo,log,socket,lpwsabuf,dword,lpdword,dword,struct,int,lpwsaoverlapped,lpwsaoverlapped_completion_routine
ws2_32.dll,WSASendMsg,log,socket,lpwsamsg,dword,lpdword,lpwsaoverlapped,lpwsaoverlapped_completion_routine
ws2_32.dll,WSASocketA,log,int,int,int,lpwsaprotocol_info,group,dword
ws2_32.dll,WSASocketW,log,int,int,int,lpwsaprotocol_info,group,dword
mswsock.dll,ConnectEx,log,socket,struct,int,pvoid,dword,lpdword,lpoverlapped
mswsock.dll,TransmitFile,log,socket,handle,dword,dword,lpoverlapped,lptransmit_file_buffers,dword
mswsock.dll,NSPStartup,log,lpguid,pvoid
advapi32.dll,CryptAcquireContextA,log+stack,hcryptprov,lpcstr,lpcstr,dword,dword
advapi32.dll,CryptAcquireContextW,log+stack,hcryptprov,lpcwstr,lpcwstr,dword,dword
advapi32.dll,CryptProtectData,log,data_blob,lpcwstr,data_blob,pvoid,cryptprotect_promptstruct,dword,data_blob
advapi32.dll,CryptUnprotectData,log,data_blob,lpwstr,data_blob,_reserved_,cryptprotect_promptstruct,dword,data_blob
advapi32.dll,CryptProtectMemory,log,lpvoid,dword,dword
advapi32.dll,CryptUnprotectMemory,log,lpvoid,dword,dword
advapi32.dll,CryptDecrypt,log,hcryptkey,hcrypthash,bool,dword,byte,dword
advapi32.dll,CryptEncrypt,log,hcryptkey,hcrypthash,bool,dword,byte,dword,dword
advapi32.dll,CryptHashData,log,hcrypthash,byte,dword,dword
advapi32.dll,CryptDecodeMessage,log,dword,pcrypt_decrypt_message_para,pcrypt_verify_message_para,dword,byte,dword,dword,dword,dword,byte,dword,pccert_context,pccert_context
advapi32.dll,CryptDecryptMessage,log,pcrypt_decrypt_message_para,byte,dword,byte,dword,pccert_context
advapi32.dll,CryptEncryptMessage,log,pcrypt_encrypt_message_para,dword,pccert_context,byte,dword,byte,dword
advapi32.dll,CryptHashMessage,log,pcrypt_hash_message_para,bool,dword,byte,dword,byte,dword,byte,dword
advapi32.dll,CryptExportKey,log,hcryptkey,hcryptkey,dword,dword,byte,dword
advapi32.dll,CryptGenKey,log,hcryptprov,alg_id,dword,hcryptkey
advapi32.dll,CryptCreateHash,log,hcryptprov,alg_id,hcryptkey,dword,hcrypthash
advapi32.dll,CryptEnumProvidersA,log,dword,dword,dword,dword,lpstr,dword
advapi32.dll,CryptEnumProvidersW,log,dword,dword,dword,dword,lpwstr,dword
wintrust.dll,HTTPSCertificateTrust,log,pvoid
wintrust.dll,HTTPSFinalProv,log,pvoid
crypt32.dll,CryptDecodeObjectEx,log,dword,lpcstr,byte,dword,dword,pcrypt_decode_para,void,dword
crypt32.dll,CryptImportPublicKeyInfo,log,hcryptprov,dword,pcert_public_key_info,hcryptkey
cryptsp.dll,CryptAcquireContextA,log,hcryptprov,lpcstr,lpcstr,dword,dword
cryptsp.dll,CryptAcquireContextW,log,hcryptprov,lpcwstr,lpcwstr,dword,dword
cryptsp.dll,CryptProtectData,log,data_blob,lpcwstr,data_blob,pvoid,cryptprotect_promptstruct,dword,data_blob
cryptsp.dll,CryptUnprotectData,log,data_blob,lpwstr,data_blob,_reserved_,cryptprotect_promptstruct,dword,data_blob
cryptsp.dll,CryptProtectMemory,log,lpvoid,dword,dword
cryptsp.dll,CryptUnprotectMemory,log,lpvoid,dword,dword
cryptsp.dll,CryptDecrypt,log,hcryptkey,hcrypthash,bool,dword,byte,dword
cryptsp.dll,CryptEncrypt,log,hcryptkey,hcrypthash,bool,dword,byte,dword,dword
cryptsp.dll,CryptHashData,log,hcrypthash,byte,dword,dword
cryptsp.dll,CryptDecodeMessage,log,dword,pcrypt_decrypt_message_para,pcrypt_verify_message_para,dword,byte,dword,dword,dword,dword,byte,dword,pccert_context,pccert_context
cryptsp.dll,CryptDecryptMessage,log,pcrypt_decrypt_message_para,byte,dword,byte,dword,pccert_context
cryptsp.dll,CryptEncryptMessage,log,pcrypt_encrypt_message_para,dword,pccert_context,byte,dword,byte,dword
cryptsp.dll,CryptHashMessage,log,pcrypt_hash_message_para,bool,dword,byte,dword,byte,dword,byte,dword
cryptsp.dll,CryptExportKey,log,hcryptkey,hcryptkey,dword,dword,byte,dword
cryptsp.dll,CryptGenKey,log,hcryptprov,alg_id,dword,hcryptkey
cryptsp.dll,CryptCreateHash,log,hcryptprov,alg_id,hcryptkey,dword,hcrypthash
cryptsp.dll,CryptEnumProvidersA,log,dword,dword,dword,dword,lpstr,dword
cryptsp.dll,CryptEnumProvidersW,log,dword,dword,dword,dword,lpwstr,dword
kernel32.dll,VirtualFree,log,handle,lpvoid,size_t,dword
ntdll.dll,RtlSecureZeroMemory,log,lpvoid,size_t
kernel32.dll,CreateProcessA,log,lpcstr,lpstr,lpsecurity_attributes,lpsecurity_attributes,bool,dword,lpvoid,lpwstr,lpstartupinfo,lpprocess_information
