CreatePen
CreateBrushIndirect
CreateDIBPatternBrush
CreateDIBPatternBrushPt
CreateHatchBrush
CreatePatternBrush
CreateSolidBrush
CreateFont
CreateFontIndirect
CreateFontIndirectEx
CreateBitmap
CreateBitmapIndirect
CreateCompatibleBitmap
CreateDIBitmap
CreateDIBSection
CreateDiscardableBitmap
CreateEllipticRgn
CreateEllipticRgnIndirect
CreatePolygonRgn
CreatePolyPolygonRgn
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateHalftonePalette
CreatePalette
DeleteObject
closesocket
socket
CreateThread
CreateFile
OpenFile
CreateJobObject
CreateRemoteThread
CreateConsoleScreenBuffer
OpenBackupEventLog
OpenEventLog
CreateFileMapping
CreateFileMappingFromApp
CreateFileMappingNuma
CreateMemoryResourceNotification
OpenFileMapping
CreateNamedPipe
CreateEvent
CreateEventA
CreateEventW
CreateEventEx
CreateEventExA
CreateEventExW
CreateMutex
CreateMutexA
CreateMutexW
CreateMutexEx
CreateMutexExA
CreateMutexExW
CreateSemaphore
CreateSemaphoreA
CreateSemaphoreW
CreateSemaphoreEx
CreateSemaphoreExA
CreateSemaphoreExW
CreateTimerQueue
CreateWaitableTimer
OpenEvent
OpenEventA
OpenEventW
OpenMutex
OpenMutexA
OpenMutexW
OpenSemaphore
OpenSemaphoreA
OpenSemaphoreW
OpenWaitableTimer
OpenJobObject
OpenProcess
OpenThread
CreateMailslot
CloseHandle
FindFirstFile
FindFirstFileW
FindFirstFileA
FindFirstFileEx
FindFirstFileExW
FindFirstFileExA
FindFirstFileNameW
FindFirstFileNameTransactedW
FindFirstStreamTransactedW
FindFirstFileTransacted
FindFirstStreamW
FindClose
OpenSCManager
OpenService
CreateService
CloseServiceHandle
LockServiceDatabase
UnlockServiceDatabase
HeapCreate
HeapDestroy
_wfopen
_tfopen
_wfopen_s
_tfopen_s
fclose
_fcloseall
_open
_topen
_wopen
_close
_popen
_wpopen
_tpopen
_pclose
LoadLibrary
LoadLibraryA
LoadLibraryW
LoadLibraryEx
LoadLibraryExA
LoadLibraryExW
FreeLibrary
FreeLibraryAndExitThread
ExAllocatePool
ExAllocatePoolWithQuota
ExAllocatePoolWithQuotaTag
ExAllocatePoolWithTag
ExAllocatePoolWithTagPriority
ExFreePool
ExFreePoolWithTag
HeapAlloc
HeapReAlloc
HeapFree
IoAllocateErrorLogEntry
IoWriteErrorLogEntry
IoFreeErrorLogEntry
IoAllocateIrp
IoFreeIrp
IofCallDriver
IoCallDriver
IoAllocateMdl
IoFreeMdl
MmAllocateContiguousMemory
MmFreeContiguousMemory
MmAllocateContiguousMemorySpecifyCache
MmAllocateContiguousMemorySpecifyCacheNode
MmFreeContiguousMemorySpecifyCache
IoAllocateWorkItem
IoFreeWorkItem
RtlAllocateHeap
RtlFreeHeap
ExAllocateFromPagedLookasideList
ExFreeToPagedLookasideList
ExAllocateFromNPagedLookasideList
ExFreeToNPagedLookasideList
AllocateHeap
FreeHeap
AllocateLsaHeap
FreeLsaHeap
AllocatePrivateHeap
FreePrivateHeap
VirtualAlloc
VirtualFree
VirtualAllocEx
VirtualAllocExNuma
VirtualFreeEx
LocalAlloc
LocalFree
GlobalAlloc
GlobalFree
SetClipboardData
MapViewOfFile
MapViewOfFileEx
MapViewOfFileExNuma
MapViewOfFileFromApp
UnmapViewOfFile
RtlCreateHeap
RtlDestroyHeap
wcsdup
_strdup
_wcsdup
_mbsdup
_tcsdup
_malloc_dbg
_aligned_malloc
_aligned_malloc_dbg
_aligned_offset_malloc
_strdup_dbg
_wcsdup_dbg
_tcsdup_dbg
free
CoTaskMemAlloc
CoTaskMemFree
_malloca
_freea
AllocateAndInitializeSid
FreeSid
false
0:
false
0:
false
0:
false
0:
false
0:
true
true
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
0:
false
false
false
false
0:
false
0:
false
0:
0:
false
0:
0:
false
false
false
0:
false
false
0:
false
0:
false
false
false
false
false
false
false
0:
false
0:
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
arg1>0?arg1:-arg1
false
false
false
false
false
false
false
false
false
false
0:
false
false
false
false
false
0:
false
false
false
false
false
false
false
0:
0:
false
false
false
false
0:
false
0:
false
0:
false
0:
false
0:
false
strlen(arg1)
false
strlen(arg1)
false
false
false
0:
false
0:
false
false
false
0:
false
0:
false
false
false
false
false
false
false
false
false
false
false
false
0
false
false
false
true
false
false
false
false
false
false
false
false
false
false
false
false
false
false
Due to security concerns it is not recommended to use this function, see MSDN for details.
false
Due to security concerns it is not recommended to use this function, see MSDN for details.
false
1:
false
1:
0
false
false
1:
false
false
0,1
false
false
false
0:
false
0:
false
arg1
false
arg1
false
false
false
false
false
false
false
0:
false
0:
false
false
false
false
false
false
1:
false
false
false
false
0:
false
0:
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
false
0:
false
false
false
false
false
false
false
0:255
false
0:255
false
false
0:255
false
0:255
false
false
0:
false
0:
false
false
false
false
false
false
false
0:
false
false