Extended Key Usages
ExtKeyUsageCodeSigning
Overview
overview
3Static
static
SSShim.dll
windows7-x64
3SSShim.dll
windows10-2004-x64
3Startup_Be...ll.cmd
windows7-x64
1Startup_Be...ll.cmd
windows10-2004-x64
1StateRepos...re.dll
windows7-x64
1StateRepos...re.dll
windows10-2004-x64
3StorageUsage.dll
windows7-x64
1StorageUsage.dll
windows10-2004-x64
1Storprop.dll
windows7-x64
1Storprop.dll
windows10-2004-x64
3StructuredQuery.dll
windows7-x64
1StructuredQuery.dll
windows10-2004-x64
1SwitchToAdmin.cmd
windows7-x64
1SwitchToAdmin.cmd
windows10-2004-x64
1SwitchToAd...em.cmd
windows7-x64
1SwitchToAd...em.cmd
windows10-2004-x64
1srvsvc.dll
windows7-x64
1srvsvc.dll
windows10-2004-x64
1sscore.dll
windows7-x64
1sscore.dll
windows10-2004-x64
1sscoreext.dll
windows7-x64
1sscoreext.dll
windows10-2004-x64
3ssdpapi.dll
windows7-x64
1ssdpapi.dll
windows10-2004-x64
1sspicli.dll
windows7-x64
1sspicli.dll
windows10-2004-x64
3sspisrv.dll
windows7-x64
1sspisrv.dll
windows10-2004-x64
3sstpsvc.dll
windows7-x64
1sstpsvc.dll
windows10-2004-x64
1start_vss.cmd
windows7-x64
1start_vss.cmd
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
SSShim.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
SSShim.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
Startup_BeforeShell.cmd
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
Startup_BeforeShell.cmd
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
StateRepository.Core.dll
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
StateRepository.Core.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
StorageUsage.dll
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
StorageUsage.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral9
Sample
Storprop.dll
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
Storprop.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
StructuredQuery.dll
Resource
win7-20220901-en
Behavioral task
behavioral12
Sample
StructuredQuery.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
SwitchToAdmin.cmd
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
SwitchToAdmin.cmd
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
SwitchToAdminSystem.cmd
Resource
win7-20220901-en
Behavioral task
behavioral16
Sample
SwitchToAdminSystem.cmd
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
srvsvc.dll
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
srvsvc.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
sscore.dll
Resource
win7-20220901-en
Behavioral task
behavioral20
Sample
sscore.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
sscoreext.dll
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
sscoreext.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral23
Sample
ssdpapi.dll
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
ssdpapi.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
sspicli.dll
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
sspicli.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
sspisrv.dll
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
sspisrv.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral29
Sample
sstpsvc.dll
Resource
win7-20220812-en
Behavioral task
behavioral30
Sample
sstpsvc.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
start_vss.cmd
Resource
win7-20220901-en
Behavioral task
behavioral32
Sample
start_vss.cmd
Resource
win10v2004-20220812-en
Target
f8406bce17b4d4394318e9213c6999a4623954005b8a66a0e5c7bf670553dc21
Size
2.7MB
MD5
8baa5961f644971b66da55b59277c023
SHA1
63fe071c6710d9205b22f3f6c7c4500cb25e23d6
SHA256
f8406bce17b4d4394318e9213c6999a4623954005b8a66a0e5c7bf670553dc21
SHA512
322d365ad5da53b80d3e4d0d15aea37aff0a26d62ab3bdaba7f626fe60403e9c7ad9307099140f5347a091367a7b36aa9338c61e451c6d23f58323b700c6a4cf
SSDEEP
49152:ILyz7/mp/yhoyg8eFyVKQMbEQoqiVMdviGNwwBd8vB6bTNOyh4eKEMksx:SILmZyhoz8e2KdkqrhNwcW8bFh4eqx
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
__C_specific_handler
LdrLockLoaderLock
LdrUnlockLoaderLock
NtQueryAttributesFile
RtlPcToFileHeader
NtOpenKey
NtQueryValueKey
LdrLoadDll
LdrUnloadDll
NtQueryPerformanceCounter
NtClose
RtlAllocateHeap
RtlFreeHeap
RtlRaiseStatus
NtOpenFile
NtQueryDirectoryFile
NtCreateFile
NtQueryInformationFile
NtReadFile
NtWriteFile
NtSetInformationFile
RtlRaiseException
NtQueryObject
NtQueryInformationProcess
NtOpenProcess
NtDelayExecution
RtlInitString
LdrGetProcedureAddress
RtlQueryEnvironmentVariable_U
NtTerminateProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlUnhandledExceptionFilter
DbgPrintEx
RtlDowncaseUnicodeChar
RtlUpcaseUnicodeChar
RtlReAllocateHeap
RtlNtStatusToDosErrorNoTeb
RtlTimeToTimeFields
strncmp
_snprintf_s
LdrGetDllHandle
RtlDosPathNameToNtPathName_U
wcstoul
DbgPrint
RtlCreateUnicodeStringFromAsciiz
NtQuerySystemTime
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
RtlWakeAllConditionVariable
RtlSleepConditionVariableSRW
memmove
memcmp
memcpy
memset
SssBindServicingStack
SssGetServicingStackFilePath
SssGetServicingStackFilePathLength
SssPreloadDownlevelDependencies
SssReleaseServicingStack
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
strcmp
strcspn
strncmp
memset
_initterm
_initterm_e
_o__configure_narrow_argv
_o__endthreadex
_o__execute_onexit_table
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__msize
_o__seh_filter_dll
memmove
_o_free
_o_malloc
_o_realloc
__C_specific_handler
_o__cexit
_o__beginthreadex
_o___std_type_info_destroy_list
memcmp
memcpy
AreFileApisANSI
GetTempPathA
WriteFile
GetDiskFreeSpaceW
GetFullPathNameW
LockFile
SetFilePointer
GetFileAttributesExW
CreateFileA
LockFileEx
GetFullPathNameA
GetFileAttributesA
FlushFileBuffers
SetEndOfFile
UnlockFileEx
ReadFile
CreateFileW
GetFileAttributesW
GetDiskFreeSpaceA
DeleteFileA
DeleteFileW
UnlockFile
GetFileSize
InitializeCriticalSection
LeaveCriticalSection
WaitForSingleObjectEx
CreateMutexW
WaitForSingleObject
EnterCriticalSection
DeleteCriticalSection
TryEnterCriticalSection
HeapValidate
HeapCreate
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
HeapCompact
HeapDestroy
HeapSize
OutputDebugStringA
IsDebuggerPresent
OutputDebugStringW
GetTempPathW
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
FlushViewOfFile
WideCharToMultiByte
MultiByteToWideChar
Sleep
FormatMessageA
FormatMessageW
UnhandledExceptionFilter
GetLastError
SetUnhandledExceptionFilter
LoadLibraryA
LoadLibraryW
CloseHandle
GetSystemTime
GetSystemInfo
GetTickCount
GetSystemTimeAsFileTime
FreeLibrary
DisableThreadLibraryCalls
GetProcAddress
LocalFree
SystemTimeToFileTime
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsProcessorFeaturePresent
InitializeSListHead
sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_blob64
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_pointer
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_text64
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_bind_zeroblob64
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_cancel_auto_extension
sqlite3_changes
sqlite3_clear_bindings
sqlite3_close
sqlite3_close_v2
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_data_count
sqlite3_db_cacheflush
sqlite3_db_config
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_readonly
sqlite3_db_release_memory
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_errstr
sqlite3_exec
sqlite3_expanded_sql
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_finalize
sqlite3_free
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_initialize
sqlite3_interrupt
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_malloc64
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_msize
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare16_v3
sqlite3_prepare_v2
sqlite3_prepare_v3
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_realloc64
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_blob64
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_pointer
sqlite3_result_subtype
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_text64
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_result_zeroblob64
sqlite3_rollback_hook
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_set_last_insert_rowid
sqlite3_shutdown
sqlite3_sleep
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_status64
sqlite3_step
sqlite3_stmt_busy
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_strglob
sqlite3_stricmp
sqlite3_strlike
sqlite3_strnicmp
sqlite3_system_errno
sqlite3_table_column_metadata
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_trace
sqlite3_trace_v2
sqlite3_transfer_bindings
sqlite3_update_hook
sqlite3_uri_boolean
sqlite3_uri_int64
sqlite3_uri_parameter
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_dup
sqlite3_value_free
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_nochange
sqlite3_value_numeric_type
sqlite3_value_pointer
sqlite3_value_subtype
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_vtab_collation
sqlite3_vtab_config
sqlite3_vtab_nochange
sqlite3_vtab_on_conflict
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_mbcs_to_utf8
sqlite3_win32_mbcs_to_utf8_v2
sqlite3_win32_set_directory
sqlite3_win32_sleep
sqlite3_win32_unicode_to_utf8
sqlite3_win32_utf8_to_mbcs
sqlite3_win32_utf8_to_mbcs_v2
sqlite3_win32_utf8_to_unicode
sqlite3_win32_write_debug
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_unlock
_amsg_exit
memmove
memcpy
_initterm
_CxxThrowException
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBQEBD@Z
_callnewh
malloc
free
__dllonexit
wcscpy_s
calloc
wcsnlen
time
_onexit
_vsnprintf_s
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@XZ
_XcptFilter
??1type_info@@UEAA@XZ
??1exception@@UEAA@XZ
_purecall
??3@YAXPEAX@Z
rand
memcpy_s
srand
_vsnwprintf
__CxxFrameHandler3
_wcsicmp
__C_specific_handler
_lock
memset
RpcBindingFree
RpcAsyncCancelCall
RpcStringFreeW
RpcStringBindingComposeW
RpcAsyncInitializeHandle
RpcBindingFromStringBindingW
RpcBindingSetAuthInfoExW
RpcAsyncCompleteCall
NdrClientCall3
I_RpcExceptionFilter
NdrOleFree
Ndr64AsyncClientCall
NdrOleAllocate
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
SetLastError
GetLastError
PathCchRemoveFileSpec
PathAllocCanonicalize
LocalFree
MoveFileExW
EventWriteTransfer
EventActivityIdControl
EventRegister
EventUnregister
EventSetInformation
GetModuleHandleW
GetModuleHandleExW
FreeLibrary
LoadLibraryExA
GetProcAddress
GetModuleFileNameA
QueryUnbiasedInterruptTime
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegDeleteKeyExW
RegSetValueExW
RegOpenKeyExW
CreateSemaphoreExW
InitializeCriticalSectionEx
ReleaseSRWLockExclusive
CreateMutexExW
SetEvent
AcquireSRWLockExclusive
WaitForSingleObjectEx
OpenSemaphoreW
CreateEventW
ReleaseSRWLockShared
DeleteCriticalSection
ReleaseMutex
AcquireSRWLockShared
WaitForSingleObject
ReleaseSemaphore
GetProcessHeap
HeapAlloc
HeapFree
CoTaskMemFree
CoCreateInstance
WaitForMultipleObjects
DecodePointer
EncodePointer
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
CreateThread
TerminateProcess
OpenProcessToken
FormatMessageW
IsDebuggerPresent
DebugBreak
OutputDebugStringW
CloseHandle
RoOriginateError
SystemTimeToFileTime
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemTime
GetTickCount
CompareFileTime
CreateFileW
ReadFile
GetFileAttributesW
BCryptDestroyHash
BCryptHashData
BCryptFinishHash
BCryptOpenAlgorithmProvider
BCryptCreateHash
BCryptCloseAlgorithmProvider
BCryptGetProperty
AdjustTokenPrivileges
LookupPrivilegeValueW
SleepConditionVariableSRW
Sleep
WakeAllConditionVariable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
QueryPerformanceCounter
NtClose
RtlDosPathNameToNtPathName_U_WithStatus
RtlGetDeviceFamilyInfoEnum
NtCreateFile
NtQueryDirectoryFile
VirtualQuery
VirtualProtect
CloseFindStorage
CloseFindStorageSearch
DismountVolume
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
FinalizeVolume
FindNextStorageType
FindNextStorageTypeEx
FindNextStorageTypeExAsync
FormatVolume
GetAppSize
GetStorageDebugInfo
GetStorageDeviceInfo
GetStorageExecutionInfo
GetStorageInstanceCount
GetStorageInstanceCountForMaps
GetStoragePolicySettings
GetStorageSettings
GetStorageStateName
GetStorageUsageInfo
GetTopFolders
MIDL_user_allocate
MIDL_user_free
MountVolume
MoveFileInheritSecurityW
OpenStorageTypeSearch
PredictStorageHealth
ProcessStorageCardChange
ProvisionForAppInstall
RebootToFlashingMode
RebootToUosFlashing
ResetPhoneEx
ResetStoragePolicySettings
ScanVolume
SelectStorageVolume
SelectStorageVolumeEx
SetStoragePolicySettings
SetStorageSettings
TriggerBlinkCleanup
TriggerDownloadsCleanup
TriggerLowStorageNotification
TriggerStorageCleanup
TriggerStoragePolicies
TriggerStorageTypeRefresh
TriggerTempFileCleanup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
memcpy
memset
_initterm
malloc
free
_amsg_exit
_XcptFilter
__C_specific_handler
_wcsnicmp
_wcsicmp
swscanf
mbstowcs
_wtoi
_vsnwprintf
strncmp
wcscmp
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
LocalAlloc
CreateFileW
LocalFree
DisableThreadLibraryCalls
GetCurrentProcess
GetLastError
CloseHandle
HeapAlloc
GetProcessHeap
SetLastError
DeactivateActCtx
LoadLibraryW
GetProcAddress
ActivateActCtx
FindActCtxSectionStringW
CreateActCtxW
GetModuleFileNameW
GetModuleHandleExW
QueryActCtxW
OutputDebugStringA
HeapFree
GetModuleHandleW
DefineDosDeviceW
DeviceIoControl
CreateThread
CreateMutexW
WaitForSingleObject
EnumSystemGeoID
ReleaseMutex
GetGeoInfoW
GetUserGeoID
TerminateProcess
lstrcmpW
GetSystemDirectoryW
lstrcmpiW
FormatMessageW
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FreeLibrary
CheckTokenMembership
WmiSetSingleInstanceW
WmiExecuteMethodW
WmiQueryAllDataW
WmiCloseBlock
WmiQuerySingleInstanceW
WmiOpenBlock
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
SetupDiSetDeviceRegistryPropertyW
CM_Reenumerate_DevNode_Ex
SetupDiGetDeviceInterfaceDetailW
CM_Get_DevNode_Status_Ex
SetupDiGetDeviceInfoListDetailW
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyW
SetupDiInstallDevice
SetupCloseInfFile
SetupGetIntField
SetupFindFirstLineW
SetupDiGetActualSectionToInstallW
SetupOpenInfFileW
SetupVerifyInfFileW
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiEnumDeviceInterfaces
SetupDiCallClassInstaller
SetupDiSetClassInstallParamsW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiGetClassDevsW
IsWindowEnabled
EndDialog
DialogBoxParamW
SetWindowTextW
IsDlgButtonChecked
SetFocus
GetSystemMetrics
GetClientRect
DestroyWindow
LoadCursorW
SetCursor
SetWindowLongW
MessageBoxW
GetWindowTextW
PeekMessageW
GetWindowLongPtrW
SetWindowLongPtrW
LoadIconW
SendDlgItemMessageW
EnableWindow
GetDlgItem
CheckDlgButton
LoadStringW
ShowWindow
SetDlgItemTextW
GetParent
MsgWaitForMultipleObjects
CheckRadioButton
SendMessageW
TranslateMessage
DispatchMessageW
GetWindowRect
MapWindowPoints
SetWindowPos
ord178
ShellExecuteExW
SetWindowTheme
AtaPropPageProvider
CdromDisableDigitalPlayback
CdromEnableDigitalPlayback
CdromIsDigitalPlaybackEnabled
CdromKnownGoodDigitalPlayback
CdromSetDefaultDvdRegion
DiskClassInstaller
DiskPropPageProvider
DvdClassInstaller
DvdLauncher
DvdPropPageProvider
HdcCoInstaller
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
wcsncmp
?what@exception@@UEBAPEBDXZ
_wcsnicmp
_wtoi
_CxxThrowException
iswspace
memcpy_s
??1exception@@UEAA@XZ
??0exception@@QEAA@XZ
??1type_info@@UEAA@XZ
_vsnprintf_s
??0exception@@QEAA@AEBQEBDH@Z
_wcsicmp
bsearch
?terminate@@YAXXZ
??0exception@@QEAA@AEBV0@@Z
memcmp
__CxxFrameHandler3
_onexit
__dllonexit
_unlock
_lock
__C_specific_handler
_initterm
_amsg_exit
_XcptFilter
_callnewh
malloc
free
swscanf_s
memmove
memmove_s
wcschr
??0exception@@QEAA@AEBQEBD@Z
swscanf
_vsnwprintf
_purecall
memcpy
memset
VarNumFromParseNum
VarParseNumFromStr
VarI4FromStr
LPSAFEARRAY_UserUnmarshal64
SysAllocStringLen
SysStringLen
VariantClear
VarUdateFromDate
VarDateFromUdate
SysFreeString
VarBstrFromDate
SysAllocString
VariantCopy
VariantInit
BSTR_UserMarshal
BSTR_UserFree64
BSTR_UserSize64
BSTR_UserUnmarshal
LPSAFEARRAY_UserMarshal64
LPSAFEARRAY_UserFree64
BSTR_UserSize
LPSAFEARRAY_UserSize64
BSTR_UserFree
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserFree
BSTR_UserMarshal64
LPSAFEARRAY_UserMarshal
BSTR_UserUnmarshal64
IUnknown_AddRef_Proxy
NdrDllCanUnloadNow
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
NdrOleFree
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
NdrCStdStubBuffer_Release
IUnknown_Release_Proxy
IUnknown_QueryInterface_Proxy
NdrStubForwardingFunction
CStdStubBuffer_Disconnect
NdrClientCall3
NdrStubCall3
NdrDllGetClassObject
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_QueryInterface
NdrOleAllocate
NdrCStdStubBuffer2_Release
ObjectStublessClient3
ObjectStublessClient4
NdrProxyForwardingFunction6
ObjectStublessClient12
ObjectStublessClient7
ObjectStublessClient11
ObjectStublessClient5
CStdStubBuffer2_CountRefs
ObjectStublessClient15
CStdStubBuffer2_Disconnect
CStdStubBuffer2_QueryInterface
NdrProxyForwardingFunction5
NdrProxyForwardingFunction7
CStdStubBuffer2_Connect
NdrProxyForwardingFunction4
NdrProxyForwardingFunction3
ObjectStublessClient6
ObjectStublessClient8
NdrProxyForwardingFunction10
ObjectStublessClient9
ObjectStublessClient10
ObjectStublessClient14
NdrProxyForwardingFunction9
SHUnicodeToAnsi
lstrlenW
lstrcmpW
GetUserDefaultLCID
FindNLSStringEx
GetLocaleInfoEx
GetCalendarInfoEx
IsValidLocaleName
GetSystemPreferredUILanguages
GetUserDefaultLocaleName
FormatMessageW
GetSystemDefaultLCID
ResolveLocaleName
GetLocaleInfoW
LocaleNameToLCID
LCMapStringW
GetSystemDefaultLangID
GetUserDefaultLangID
MultiByteToWideChar
GetStringTypeW
CompareStringW
CompareStringOrdinal
GetStringTypeExW
WideCharToMultiByte
CompareStringEx
StrStrW
StrCmpIW
StrChrW
StrStrIW
StrCmpNW
QISearch
StrToIntExW
StrTrimW
LocalFree
LocalAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
RaiseException
SetLastError
AcquireSRWLockShared
ReleaseSRWLockExclusive
CreateSemaphoreExW
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
LeaveCriticalSection
InitializeCriticalSectionEx
WaitForSingleObject
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
InitializeCriticalSection
EnterCriticalSection
CreateMutexExW
DeleteCriticalSection
InitializeSRWLock
WriteFile
CompareFileTime
GetFileTime
CreateDirectoryW
SetFilePointer
CreateFileW
GetFileAttributesExW
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
LCIDToLocaleName
EventRegister
EventSetInformation
EventUnregister
EventWriteTransfer
ConvertSystemTimeToCalDateTime
AdjustCalendarDate
GetCalendarSupportedDateRange
UpdateCalendarDayOfWeek
GetCalendarDateFormatEx
ConvertCalDateTimeToSystemTime
IsCalendarLeapYear
GetSystemTime
GetLocalTime
GetSystemDirectoryW
GetTickCount
GetSystemTimeAsFileTime
GetVersionExW
FreeLibrary
LoadStringW
LoadResource
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
FindResourceExW
GetModuleHandleExW
LoadLibraryExW
SetThreadpoolTimer
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
TlsFree
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
TlsGetValue
GetCurrentProcessId
OpenProcessToken
TlsAlloc
TlsSetValue
OutputDebugStringW
IsDebuggerPresent
DebugBreak
CloseHandle
GetTokenInformation
RegCreateKeyExW
RegCloseKey
RegGetValueW
RegQueryValueExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
PathCchAppend
GetDateFormatW
GetTimeFormatW
InitOnceExecuteOnce
InitOnceBeginInitialize
InitOnceComplete
Sleep
QueryPerformanceFrequency
QueryPerformanceCounter
SearchPathW
ExpandEnvironmentStringsW
GetTimeZoneInformation
FileTimeToSystemTime
SystemTimeToFileTime
TzSpecificLocalTimeToSystemTime
CoRevokeInitializeSpy
CoRegisterInitializeSpy
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
ord170
ord200
ord130
ord123
ord141
EnumTimeFormatsEx
EnumDateFormatsExEx
EnumCalendarInfoExEx
VerSetConditionMask
VerifyVersionInfoW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
RtlGetPersistedStateLocation
RtlIsStateSeparationEnabled
RtlNtStatusToDosError
ResolveDelayLoadedAPI
DelayLoadFailureHook
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
strcmp
wcsnlen
wcsncmp
memset
_initterm
_initterm_e
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__seh_filter_dll
_o__execute_onexit_table
memmove
_o__wcsicmp
_o__wcsnicmp
_o__wtoi
_o_free
_o_rand
_o_srand
_o_towupper
_o_wcscat_s
_o_wcscpy_s
_o_wcstok
_o__configure_narrow_argv
_o__cexit
_o___stdio_common_vswprintf_s
_o___std_type_info_destroy_list
__C_specific_handler
wcschr
memcmp
memcpy
IsValidSecurityDescriptor
GetAclInformation
ImpersonateSelf
RevertToSelf
CheckTokenMembership
GetSecurityDescriptorDacl
GetFileSecurityW
GetLengthSid
AccessCheck
AddAccessAllowedAceEx
CreateWellKnownSid
EqualSid
SetFileSecurityW
GetAce
UnhandledExceptionFilter
GetLastError
SetUnhandledExceptionFilter
RaiseException
SetLastError
RpcServerInqCallAttributesW
RpcImpersonateClient
RpcRevertToSelf
NdrAsyncServerCall
Ndr64AsyncServerCallAll
NdrServerCallAll
RpcServerUseProtseqEpW
RpcBindingToStringBindingW
RpcServerUnregisterIf
RpcStringFreeW
UuidCreate
RpcStringBindingParseW
RpcServerRegisterIfEx
NdrServerCall2
RpcRevertToSelfEx
RpcBindingVectorFree
RpcBindingServerFromClient
RpcBindingFree
RpcEpUnregister
RpcEpRegisterW
RpcServerInqBindings
RpcAsyncAbortCall
RpcAsyncCompleteCall
RpcServerTestCancel
LocalAlloc
LocalFree
GetModuleHandleW
LoadStringW
GetModuleHandleExW
DisableThreadLibraryCalls
GetProcAddress
LoadLibraryExW
FreeLibrary
GetCurrentProcess
CreateThread
CreateProcessW
OpenThreadToken
TerminateProcess
GetCurrentThreadId
GetCurrentProcessId
GetCurrentThread
CloseHandle
RegDeleteValueW
RegNotifyChangeKeyValue
RegSetValueExW
RegCloseKey
RegEnumValueW
RegOpenKeyExW
RegGetValueW
WaitForMultipleObjectsEx
CreateEventW
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
EnterCriticalSection
SetEvent
DeleteCriticalSection
GetSystemInfo
GetSystemTimeAsFileTime
GetVersionExW
GetComputerNameExW
GetSystemTime
GetSystemWindowsDirectoryW
GetTickCount
VerSetConditionMask
DeviceIoControl
Sleep
EventRegister
EventUnregister
EventWriteTransfer
RtlCompareMemory
RtlVirtualUnwind
RtlCaptureContext
RtlLookupFunctionEntry
CreateFileW
GetDriveTypeW
SetConsoleCtrlHandler
CM_MapCrToWin32Err
CM_Unregister_Notification
CM_Get_Device_Interface_List_SizeW
CM_Get_Device_Interface_ListW
TrySubmitThreadpoolCallback
CompareStringOrdinal
FormatMessageW
WSACleanup
GetAddrInfoW
WSAStartup
FreeAddrInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
InitializeSListHead
HeapAlloc
GetProcessHeap
HeapFree
lstrcmpW
CMP_Register_Notification
NtQuerySystemInformation
RtlCheckRegistryKey
RtlCreateRegistryKey
RtlFreeUnicodeString
RtlGetNtProductType
RtlVerifyVersionInfo
RtlQueryEnvironmentVariable_U
RtlValidSecurityDescriptor
RtlSetEnvironmentVariable
RtlCreateEnvironment
RtlIntegerToUnicodeString
RtlDestroyEnvironment
RtlCopyUnicodeString
NtCreateEvent
NtSetEvent
RtlxUnicodeStringToOemSize
RtlUpcaseUnicodeStringToOemString
RtlUnicodeStringToOemString
NtOpenFile
RtlMakeSelfRelativeSD
RtlSetDaclSecurityDescriptor
NtOpenKey
NtQueryValueKey
NtOpenSymbolicLinkObject
RtlUpcaseUnicodeChar
RtlInitializeResource
RtlDosPathNameToNtPathName_U
RtlNewSecurityObjectEx
RtlGetNtSystemRoot
NtQueryInformationFile
RtlDeleteRegistryValue
RtlDeleteResource
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwGetTraceEnableFlags
EtwUnregisterTraceGuids
RtlUpcaseUnicodeString
NtWaitForSingleObject
NtQuerySystemTime
RtlTimeToSecondsSince1970
RtlAnsiStringToUnicodeString
RtlInitAnsiString
RtlFreeHeap
RtlInitString
RtlFreeOemString
RtlOemStringToUnicodeString
RtlAcquireResourceShared
RtlAcquireResourceExclusive
RtlReleaseResource
NtCreateFile
NtFsControlFile
RtlUnicodeStringToInteger
RtlInitUnicodeString
EtwTraceMessage
RtlDeleteSecurityObject
RtlCreateSecurityDescriptor
RtlSetGroupSecurityDescriptor
NtOpenThreadToken
NtClose
RtlSetSecurityObject
RtlWriteRegistryValue
RtlQueryRegistryValuesEx
RtlLengthSecurityDescriptor
NtQueryVolumeInformationFile
RtlNtStatusToDosError
NtAccessCheckAndAuditAlarm
RtlAdjustPrivilege
RtlSetSaclSecurityDescriptor
NtOpenProcessToken
RtlAddAce
RtlLengthSid
RtlNewSecurityObject
RtlCopySid
RtlCreateAcl
RtlCopySecurityDescriptor
RtlValidRelativeSecurityDescriptor
EtwRegisterTraceGuidsW
RtlSetOwnerSecurityDescriptor
NtQuerySymbolicLinkObject
GetTimeZoneInformation
ResolveDelayLoadedAPI
DelayLoadFailureHook
LsaQueryInformationPolicy
LsaOpenPolicy
LsaClose
LsaFreeMemory
ApiSetQueryApiSetPresence
ServiceMain
SvchostPushServiceGlobals
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_initterm_e
_initterm
memset
_o__cexit
_o__configure_narrow_argv
_o__execute_onexit_table
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__seh_filter_dll
_o__wcsnicmp
_o___std_type_info_destroy_list
memcpy
__C_specific_handler
DisableThreadLibraryCalls
EventUnregister
EventRegister
LocalAlloc
LocalFree
UnhandledExceptionFilter
GetLastError
SetUnhandledExceptionFilter
SetLastError
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventW
SetEvent
WaitForSingleObject
CreateThread
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
TerminateProcess
CloseHandle
HeapFree
GetProcessHeap
HeapAlloc
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
DeviceIoControl
Sleep
ApiSetQueryApiSetPresence
NtFsControlFile
RtlStringFromGUID
NtCreateEvent
RtlAppendUnicodeStringToString
NtWaitForSingleObject
NtOpenFile
RtlNtStatusToDosError
RtlFreeUnicodeString
RtlDosPathNameToNtPathName_U
RtlInitUnicodeString
RtlReleaseResource
NtClose
RtlAcquireResourceExclusive
RtlDeleteResource
RtlInitializeResource
RtlInitString
ResolveDelayLoadedAPI
DelayLoadFailureHook
SsCoreAliasAdd
SsCoreAliasAddEx
SsCoreAliasDel
SsCoreAliasDelEx
SsCoreCloseInstance
SsCoreCompleteCsvVolumeDrain
SsCoreDeregisterNetnameForMultichannel
SsCoreFileDel
SsCoreFileDelForInstance
SsCoreFileEnum
SsCoreFileEnumForInstance
SsCoreFileNotifyClose
SsCoreFileNotifyCloseForInstance
SsCoreFreeBuffer
SsCoreInitialize
SsCoreInitializeEx
SsCoreInvalidationRequest
SsCoreLockVolumes
SsCoreMarkAsClusterSvc
SsCoreNodeResetInfo
SsCoreNodeSetInfo
SsCoreOpenInstance
SsCoreRefreshSrvCredentialHandle
SsCoreRegisterNetnameForMultichannel
SsCoreServerTransportSetInfo
SsCoreSessionDel
SsCoreSessionDelForInstance
SsCoreSessionEnlist
SsCoreSessionEnum
SsCoreSessionEnumForInstance
SsCoreSetMaxClusterDialect
SsCoreShareAdd
SsCoreShareAddEx
SsCoreShareAddForInstance
SsCoreShareCleanup
SsCoreShareDel
SsCoreShareDelForInstance
SsCoreShareGetInfo
SsCoreShareGetInfoForInstance
SsCoreShareSetInfo
SsCoreShareSetInfoForInstance
SsCoreShareShutdownForScope
SsCoreStartCsvVolumeDrain
SsCoreStartInstance
SsCoreStopInstance
SsCoreUninitialize
SsCoreUnlockVolumes
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_amsg_exit
__C_specific_handler
_initterm
malloc
free
_XcptFilter
DisableThreadLibraryCalls
Sleep
QueryPerformanceCounter
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
GetSystemTimeAsFileTime
GetTickCount
RtlVirtualUnwind
RtlCaptureContext
RtlLookupFunctionEntry
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ResolveDelayLoadedAPI
DelayLoadFailureHook
SsCoreExtMiApplicationClose
SsCoreExtMiApplicationInitialize
SsCoreExtMiApplicationNewOperationOptions
SsCoreExtMiApplicationNewParameterSet
SsCoreExtMiApplicationNewSession
SsCoreExtMiInstanceAddElement
SsCoreExtMiInstanceDelete
SsCoreExtMiOperationClose
SsCoreExtMiOperationGetInstance
SsCoreExtMiOperationOptionsDelete
SsCoreExtMiOperationOptionsSetResourceUriPrefix
SsCoreExtMiSessionClose
SsCoreExtMiSessionInvoke
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_amsg_exit
_XcptFilter
_initterm
memcpy
_lock
_unlock
strncmp
_atoi64
atoi
strchr
isdigit
strrchr
_purecall
_stricmp
strtoul
malloc
free
__C_specific_handler
_onexit
__dllonexit
memset
RtlLookupFunctionEntry
RtlCaptureContext
EtwUnregisterTraceGuids
RtlVirtualUnwind
EtwGetTraceLoggerHandle
EtwGetTraceEnableLevel
EtwRegisterTraceGuidsW
EtwTraceMessage
EtwGetTraceEnableFlags
UnhandledExceptionFilter
SetLastError
GetLastError
SetUnhandledExceptionFilter
DeleteCriticalSection
CreateMutexA
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObjectEx
CreateEventA
ResetEvent
WaitForSingleObject
ReleaseMutex
EnterCriticalSection
SetEvent
GetCurrentThreadId
TerminateProcess
ResumeThread
GetCurrentProcessId
GetCurrentProcess
CreateThread
CloseHandle
DuplicateHandle
DisableThreadLibraryCalls
Sleep
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
WideCharToMultiByte
MultiByteToWideChar
CoWaitForMultipleHandles
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
UnregisterWaitEx
DeleteTimerQueueEx
CreateTimerQueue
ResolveDelayLoadedAPI
DelayLoadFailureHook
BeginRegisterPropChangeNotificationEx
CleanupCache
DHSetICSInterfaces
DHSetICSOff
DeregisterNotification
DeregisterService
DisableFirewallRule
EnableFirewallRule
EndRegisterPropChangeNotificationEx
FindServices
FindServicesCallback
FindServicesCallbackEx
FindServicesCancel
FindServicesClose
FindServicesEx
FindServicesOnNetworkCallbackEx
FreeSsdpMessage
FreeSsdpMessageEx
GetFirstService
GetFirstServiceEx
GetNextService
GetNextServiceEx
RegisterAliveNotificationOnNetworkEx
RegisterNotification
RegisterNotificationEx
RegisterService
RegisterServiceEx
SsdpCleanup
SsdpStartup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
memcpy
memmove
memset
_wcsicmp
strncpy_s
_vsnprintf_s
strcpy_s
wcsstr
wcsrchr
wcschr
__C_specific_handler
memcmp
wcscmp
_initterm
_initterm_e
RtlInitializeGenericTableAvl
RtlDeleteElementGenericTableAvl
NtQueryEvent
RtlDeleteCriticalSection
RtlLookupElementGenericTableFullAvl
NtOpenThreadToken
RtlLeaveCriticalSection
NtDeviceIoControlFile
NtFreeVirtualMemory
RtlInitUnicodeString
NtOpenEvent
RtlGetElementGenericTableAvl
NtClose
NtOpenThreadTokenEx
NtSetInformationThread
RtlLengthSid
RtlCopySid
RtlCopyUnicodeString
NtQueryInformationThread
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlCreateUnicodeStringFromAsciiz
DbgPrintEx
RtlInitializeCriticalSection
NtAllocateLocallyUniqueId
RtlValidSid
RtlCheckTokenMembershipEx
RtlEqualSid
RtlInitString
NtWaitForSingleObject
NtDuplicateObject
RtlCompareUnicodeString
RtlDeleteResource
RtlInitializeResource
RtlGetNtProductType
RtlAcquireResourceShared
RtlReleaseResource
RtlAcquireResourceExclusive
RtlFreeHeap
RtlAllocateHeap
RtlCompareMemory
NtQueryInformationToken
RtlEnterCriticalSection
NtOpenProcessToken
RtlInsertElementGenericTableAvl
NtOpenFile
RtlStringFromGUID
RtlEqualUnicodeString
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlUnicodeStringToAnsiString
RtlNtStatusToDosError
RtlxAnsiStringToUnicodeSize
RtlxUnicodeStringToAnsiSize
RtlNtStatusToDosErrorNoTeb
RpcStringFreeW
I_RpcMapWin32Status
RpcBindingUnbind
RpcBindingFree
RpcSsDestroyClientContext
RpcStringBindingComposeW
RpcBindingFromStringBindingW
NdrClientCall3
NdrServerCall2
NdrServerCallAll
I_RpcExceptionFilter
RpcExceptionFilter
LsaOpenPolicy
LsaFreeMemory
LsaClose
LsaQueryInformationPolicy
GetLastError
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFileTime
CreateFileW
CloseHandle
GetProcessHeap
HeapFree
FreeLibrary
GetProcAddress
DisableThreadLibraryCalls
LoadLibraryExW
GetModuleFileNameW
RegDeleteKeyExW
RegQueryValueExW
RegEnumValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
Sleep
GetCurrentProcess
GetCurrentThread
TlsSetValue
TerminateProcess
TlsFree
TlsAlloc
GetCurrentThreadId
GetCurrentProcessId
TlsGetValue
LocalAlloc
LocalFree
LocalReAlloc
EventSetInformation
EventRegister
EventUnregister
EventWriteTransfer
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
DecodePointer
EncodePointer
QueryPerformanceCounter
ResolveDelayLoadedAPI
DelayLoadFailureHook
AcceptSecurityContext
AcquireCredentialsHandleA
AcquireCredentialsHandleW
AddCredentialsA
AddCredentialsW
AddSecurityPackageA
AddSecurityPackageW
ApplyControlToken
ChangeAccountPasswordA
ChangeAccountPasswordW
CompleteAuthToken
CredMarshalTargetInfo
CredUnmarshalTargetInfo
DecryptMessage
DeleteSecurityContext
DeleteSecurityPackageA
DeleteSecurityPackageW
EncryptMessage
EnumerateSecurityPackagesA
EnumerateSecurityPackagesW
ExportSecurityContext
FreeContextBuffer
FreeCredentialsHandle
GetSecurityUserInfo
GetUserNameExA
GetUserNameExW
ImpersonateSecurityContext
ImportSecurityContextA
ImportSecurityContextW
InitSecurityInterfaceA
InitSecurityInterfaceW
InitializeSecurityContextA
InitializeSecurityContextW
LogonUserExExW
LsaCallAuthenticationPackage
LsaConnectUntrusted
LsaDeregisterLogonProcess
LsaEnumerateLogonSessions
LsaFreeReturnBuffer
LsaGetLogonSessionData
LsaLogonUser
LsaLookupAuthenticationPackage
LsaRegisterLogonProcess
LsaRegisterPolicyChangeNotification
LsaUnregisterPolicyChangeNotification
MakeSignature
QueryContextAttributesA
QueryContextAttributesExA
QueryContextAttributesExW
QueryContextAttributesW
QueryCredentialsAttributesA
QueryCredentialsAttributesExA
QueryCredentialsAttributesExW
QueryCredentialsAttributesW
QuerySecurityContextToken
QuerySecurityPackageInfoA
QuerySecurityPackageInfoW
RevertSecurityContext
SaslAcceptSecurityContext
SaslEnumerateProfilesA
SaslEnumerateProfilesW
SaslGetContextOption
SaslGetProfilePackageA
SaslGetProfilePackageW
SaslIdentifyPackageA
SaslIdentifyPackageW
SaslInitializeSecurityContextA
SaslInitializeSecurityContextW
SaslSetContextOption
SealMessage
SecCacheSspiPackages
SecDeleteUserModeContext
SecInitUserModeContext
SeciAllocateAndSetCallFlags
SeciAllocateAndSetCallTarget
SeciAllocateAndSetIPAddress
SeciFreeCallContext
SeciIsProtectedUser
SetContextAttributesA
SetContextAttributesW
SetCredentialsAttributesA
SetCredentialsAttributesW
SspiCompareAuthIdentities
SspiCopyAuthIdentity
SspiDecryptAuthIdentity
SspiDecryptAuthIdentityEx
SspiEncodeAuthIdentityAsStrings
SspiEncodeStringsAsAuthIdentity
SspiEncryptAuthIdentity
SspiEncryptAuthIdentityEx
SspiExcludePackage
SspiFreeAuthIdentity
SspiGetComputerNameForSPN
SspiGetTargetHostName
SspiIsAuthIdentityEncrypted
SspiLocalFree
SspiMarshalAuthIdentity
SspiPrepareForCredRead
SspiPrepareForCredWrite
SspiUnmarshalAuthIdentity
SspiUnmarshalAuthIdentityInternal
SspiValidateAuthIdentity
SspiZeroAuthIdentity
UnsealMessage
VerifySignature
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
__C_specific_handler
_vsnprintf_s
memcpy
strcpy_s
memset
_initterm
_initterm_e
NtQueryInformationToken
RtlAllocateAndInitializeSid
RtlValidSid
DbgPrintEx
NtClose
RtlCreateAndSetSD
RtlFreeHeap
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
NtOpenThreadToken
RtlFreeSid
RtlDeriveCapabilitySidsFromName
RpcImpersonateClient
RpcServerUseProtseqEpW
I_RpcExceptionFilter
RpcServerRegisterIf3
RpcRevertToSelfEx
NdrServerCall2
NdrServerCallAll
NdrClientCall3
RpcServerInqCallAttributesW
I_RpcMapWin32Status
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapFree
GetProcessHeap
DisableThreadLibraryCalls
GetCurrentProcessId
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
DecodePointer
EncodePointer
SspiSrvClientCallback
SspiSrvInitialize
SspirAcquireCredentialsHandle
SspirDeleteSecurityContext
SspirProcessSecurityContext
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
wcstok_s
wcsstr
memcmp
memmove
wcscmp
memset
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
__C_specific_handler
_initterm
free
_amsg_exit
_XcptFilter
_CxxThrowException
_callnewh
??0exception@@QEAA@AEBQEBDH@Z
malloc
time
??0exception@@QEAA@AEBV0@@Z
memcpy
??0exception@@QEAA@AEBQEBD@Z
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
??3@YAXPEAX@Z
rand
wcscpy_s
_wcsicmp
srand
??_V@YAXPEAX@Z
__CxxFrameHandler3
_vsnprintf
_vsnwprintf
_stricmp
_strcmpi
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
RtlLookupFunctionEntry
ReadFile
MultiByteToWideChar
SetThreadpoolTimer
WideCharToMultiByte
GetModuleHandleW
RtlCompareMemory
LocalFree
WaitForThreadpoolIoCallbacks
CloseThreadpool
CloseThreadpoolCleanupGroup
CloseThreadpoolCleanupGroupMembers
CloseThreadpoolIo
CreateThreadpoolIo
CreateThreadpoolCleanupGroup
CreateThreadpool
CreateFileW
SubmitThreadpoolWork
CloseThreadpoolTimer
CreateThreadpoolWork
CreateThreadpoolTimer
InitializeCriticalSectionAndSpinCount
RtlCaptureContext
CancelThreadpoolIo
StartThreadpoolIo
DeviceIoControl
CloseThreadpoolWork
CancelIoEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
GetProcessHeap
HeapFree
UnregisterWaitEx
Sleep
SetEvent
CloseHandle
GetLastError
lstrcmpiW
SetFilePointerEx
DeleteFileW
GetCurrentThread
CreateEventW
GlobalAlloc
SetEndOfFile
ExpandEnvironmentStringsW
WriteFile
GetFileSizeEx
ReleaseMutex
CreateMutexW
WaitForSingleObject
InitializeSRWLock
RegQueryValueExW
EventWriteTransfer
RegisterServiceCtrlHandlerExW
RegOpenKeyExW
RegCloseKey
EventRegister
EventUnregister
OpenThreadToken
MapGenericMask
InitializeSecurityDescriptor
GetFileSecurityW
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
AccessCheck
SetSecurityDescriptorDacl
CryptAcquireContextW
SetServiceStatus
CryptReleaseContext
LoadStringW
RouterLogRegisterW
RouterLogDeregisterW
RouterGetErrorStringW
RouterLogEventStringW
RouterLogEventDataW
RouterLogEventW
HttpCloseUrlGroup
HttpReceiveHttpRequest
HttpSendResponseEntityBody
HttpSendHttpResponse
HttpWaitForDisconnect
HttpCloseServerSession
HttpInitialize
HttpCreateServerSession
HttpCreateUrlGroup
HttpAddUrlToUrlGroup
HttpCreateRequestQueue
HttpSetUrlGroupProperty
HttpCloseRequestQueue
HttpSetServiceConfiguration
HttpReceiveRequestEntityBody
HttpDeleteServiceConfiguration
HttpQueryServiceConfiguration
HttpTerminate
CryptHashCertificate
CertOpenStore
CertCompareCertificate
CertFindCertificateInStore
CertCloseStore
CertDuplicateCertificateContext
CertNameToStrW
CertEnumCertificatesInStore
CertGetEnhancedKeyUsage
CryptUnprotectMemory
CertFreeCertificateContext
CertGetCertificateContextProperty
WSAStartup
WSAStringToAddressW
WSACleanup
RpcServerUnregisterIf
I_RpcBindingIsClientLocal
RpcServerRegisterAuthInfoA
NdrServerCall2
NdrServerCallAll
RpcServerUseProtseqEpA
RpcRevertToSelf
RpcImpersonateClient
UuidCreate
UuidFromStringA
RpcServerRegisterIfEx
ord1
ord23
ord18
ord21
ord22
ord24
ord26
ord31
ord17
ord5
ord4
ord10
ord27
ord8
ord11
ord25
ord14
ord9
ord29
CoCreateGuid
LHashValOfNameSys
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
GetIfEntry2
GetAdaptersAddresses
ConvertInterfaceLuidToIndex
WinHttpGetDefaultProxyConfiguration
GlobalFree
FreeLibrary
GetProcAddress
LoadLibraryExW
CreateXmlReader
CreateXmlWriter
EtwTraceMessage
NsiSetAllParametersEx
NsiGetAllParametersEx
NsiEnumerateObjectsAllParametersEx
SwDeviceCreate
SwDeviceClose
CM_Get_Device_IDW
CM_Locate_DevNodeW
DnsValidateName_W
DevCreateObjectQuery
DevCloseObjectQuery
ServiceMain
SvchostPushServiceGlobals
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_amsg_exit
_initterm
_wcsicmp
memcpy
__CxxFrameHandler3
_purecall
_XcptFilter
wcscpy_s
realloc
wcscat_s
malloc
free
__C_specific_handler
?terminate@@YAXXZ
memcmp
memset
CoCreateInstanceEx
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoSetProxyBlanket
CoTaskMemRealloc
VarUI4FromStr
VariantClear
VariantInit
LoadTypeLi
SysAllocString
SysStringLen
SysStringByteLen
SysFreeString
RegisterTypeLi
NdrCStdStubBuffer_Release
CStdStubBuffer_DebugServerRelease
NdrDllGetClassObject
NdrDllRegisterProxy
NdrDllUnregisterProxy
CStdStubBuffer_Invoke
IUnknown_AddRef_Proxy
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_Connect
NdrOleFree
CStdStubBuffer_AddRef
IUnknown_Release_Proxy
CStdStubBuffer_CountRefs
CStdStubBuffer_QueryInterface
NdrOleAllocate
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Disconnect
IUnknown_QueryInterface_Proxy
ObjectStublessClient3
SizeofResource
DisableThreadLibraryCalls
GetModuleFileNameW
FindResourceExW
LoadResource
FreeLibrary
GetModuleHandleW
LoadLibraryExW
GetProcAddress
CharPrevW
CharNextW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
RegEnumValueW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegDeleteTreeW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
VirtualQuery
VirtualProtect
VirtualAlloc
GetTickCount
GetSystemInfo
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
HeapDestroy
Sleep
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
TerminateProcess
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetComputerNameW
lstrcpyW
lstrcpynW
lstrcmpiW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
strstr
_vsnprintf
_splitpath_s
_vscwprintf
memcmp
memcpy
memset
pow
__CxxFrameHandler3
sin
__C_specific_handler
__dllonexit
_unlock
_lock
_initterm
_amsg_exit
_XcptFilter
_callnewh
malloc
free
memcpy_s
_vsnwprintf
_wcsicmp
_wmakepath_s
_wsplitpath_s
_onexit
cos
floor
sqrt
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegEnumValueA
RegQueryValueExA
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW
RegQueryValueExW
VirtualProtect
RaiseException
lstrlenW
EnterCriticalSection
LeaveCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSectionAndSpinCount
GetCommandLineA
GetCurrentProcess
DeleteCriticalSection
LoadLibraryExW
GetProcAddress
GetLastError
FreeLibrary
GetModuleFileNameW
GetModuleFileNameA
InitOnceBeginInitialize
CreateSemaphoreExW
HeapFree
SetLastError
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
GetCurrentThreadId
ReleaseMutex
FormatMessageW
OutputDebugStringW
InitOnceComplete
GetSystemInfo
OpenSemaphoreW
CloseHandle
HeapAlloc
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
DebugBreak
IsDebuggerPresent
GetTempPathW
CreateFileW
DeleteFileW
GetTempFileNameW
GetFileType
LocalAlloc
LocalFree
FreeLibraryAndExitThread
CreateEventW
SetEvent
CreateThread
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
MulDiv
GetLocalTime
GetSystemDirectoryA
GetModuleHandleA
lstrcmpA
CreateMutexW
InitializeCriticalSection
LoadLibraryExA
CreateDirectoryW
SetCommMask
ClearCommError
EscapeCommFunction
PurgeComm
ExpandEnvironmentStringsW
WriteFile
ReadFile
lstrlenA
VirtualQuery
WaitForSingleObjectEx
GetExitCodeProcess
CreateProcessW
CreateActCtxW
ReleaseActCtx
ActivateActCtx
DeactivateActCtx
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
lstrcmpiW
GetExitCodeThread
FormatMessageA
GetDesktopWindow
GetMonitorInfoW
MonitorFromRect
SetWindowPos
GetWindowRect
GetWindowLongW
MessageBoxW
EndDialog
GetSystemMetrics
SetWindowTextW
DestroyIcon
SendDlgItemMessageW
LoadIconW
GetDlgItem
SetForegroundWindow
ReleaseDC
EnableWindow
CharNextA
IsWindow
DialogBoxParamW
ord2521
SendMessageW
GetMessageW
CreateDialogParamW
DestroyWindow
GetPropW
SetWindowLongPtrW
RemovePropW
MsgWaitForMultipleObjects
LoadStringW
ShowWindow
DispatchMessageW
IsDialogMessageW
PeekMessageW
SetDlgItemTextW
SetPropW
TranslateMessage
PostThreadMessageW
PostQuitMessage
LoadCursorW
SetCursor
IsImmersiveProcess
GetDC
CharUpperA
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrOleFree
NdrOleAllocate
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
NdrDllUnregisterProxy
CStdStubBuffer_Disconnect
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_QueryInterface
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
Ndr64AsyncClientCall
NdrClientCall3
CStdStubBuffer_Invoke
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcBindingSetAuthInfoExW
RpcStringFreeW
RpcBindingFree
RpcAsyncInitializeHandle
RpcAsyncGetCallStatus
RpcAsyncCompleteCall
NdrDllRegisterProxy
RpcAsyncCancelCall
EventSetInformation
EventUnregister
EventRegister
EventWriteTransfer
CreateFontIndirectW
GetDeviceCaps
DeleteObject
GetObjectW
GetStockObject
??0BUFFER@@QEAA@I@Z
??0BUFFER_CHAIN@@QEAA@XZ
??0BUFFER_CHAIN_ITEM@@QEAA@I@Z
??1BUFFER@@QEAA@XZ
??1BUFFER_CHAIN@@QEAA@XZ
??1BUFFER_CHAIN_ITEM@@QEAA@XZ
??_FBUFFER@@QEAAXXZ
??_FBUFFER_CHAIN_ITEM@@QEAAXXZ
?QueryPtr@BUFFER@@QEBAPEAXXZ
?QuerySize@BUFFER@@QEBAIXZ
?QueryUsed@BUFFER_CHAIN_ITEM@@QEBAKXZ
?SetUsed@BUFFER_CHAIN_ITEM@@QEAAXK@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
MigrateRegisteredSTIAppsForWIAEvents
SelectDeviceDialog2
StiCreateInstance
StiCreateInstanceW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
memmove
memcpy
memcmp
_vsnwprintf
memset
__CxxFrameHandler3
_onexit
__dllonexit
_unlock
_lock
__C_specific_handler
_initterm
malloc
free
_amsg_exit
_XcptFilter
_get_errno
_set_errno
_wcsicmp
memmove_s
_wtoi
memcpy_s
wcscmp
SHBindToObject
SHGetPathFromIDListW
SHGetKnownFolderPath
ord850
SHCreateItemFromIDList
ord102
SHChangeNotifyRegisterThread
Shell_NotifyIconW
ord727
SHBindToFolderIDListParent
SHCreateItemWithParent
ord25
ord19
ord16
SHCreateShellItemArrayFromShellItem
DuplicateIcon
Shell_NotifyIconGetRect
ord645
ord829
ord100
Shell_GetCachedImageIndexW
ord828
ord644
ShellExecuteExW
SHEnableServiceObject
SHCreateItemFromParsingName
SHGetIDListFromObject
ord89
ord2
ord4
ord155
ord615
SHSetThreadRef
ord197
ord260
ord635
ord618
PathFindNextComponentW
StrStrIW
ord219
PathParseIconLocationW
PathFileExistsW
SHCreateStreamOnFileEx
ord16
PathIsURLW
PathSkipRootW
ord437
SHGetThreadRef
PathIsUNCW
ord176
ord278
ord199
StrRetToStrW
LoadLibraryExW
GetModuleHandleExW
FreeResource
LoadStringW
SizeofResource
GetModuleFileNameW
LockResource
GetModuleFileNameA
LoadResource
GetModuleHandleW
DisableThreadLibraryCalls
FreeLibrary
GetProcAddress
InitializeCriticalSectionEx
WaitForSingleObject
ReleaseSRWLockShared
AcquireSRWLockShared
WaitForSingleObjectEx
ReleaseSemaphore
CreateSemaphoreExW
ReleaseSRWLockExclusive
CreateMutexExW
OpenSemaphoreW
EnterCriticalSection
AcquireSRWLockExclusive
LeaveCriticalSection
ResetEvent
InitializeCriticalSection
WaitForMultipleObjectsEx
CreateEventW
DeleteCriticalSection
SetEvent
ReleaseMutex
GetProcessHeap
HeapFree
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
SetLastError
RaiseException
GetCurrentProcessId
GetCurrentThreadId
CreateProcessW
TerminateProcess
GetCurrentProcess
FormatMessageW
FindNLSStringEx
GetFileMUIPath
GetLocaleInfoW
IsDebuggerPresent
DebugBreak
OutputDebugStringW
CloseHandle
CoMarshalInterThreadInterfaceInStream
CoTaskMemRealloc
CoGetApartmentType
CoReleaseMarshalData
CoWaitForMultipleHandles
CoInitializeEx
CLSIDFromString
CoGetInterfaceAndReleaseStream
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoGetMalloc
PropVariantClear
CoTaskMemFree
StringFromCLSID
CoUninitialize
LocalAlloc
LocalFree
PowerReadACValue
PowerSetActiveScheme
PowerReadDCValue
PowerGetActiveScheme
ExpandEnvironmentStringsW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
RegQueryInfoKeyW
RegLoadMUIStringW
RegOpenKeyExW
RegGetValueW
RegEnumKeyExW
GetPwrCapabilities
GetTickCount
GetSystemDirectoryW
GetVersionExW
GetTickCount64
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
CreateFileW
FindResourceW
LoadLibraryW
WindowsCreateStringReference
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
SetThreadpoolTimer
DeviceIoControl
GetOverlappedResult
CancelIo
CM_Get_Device_Interface_ListW
CM_Get_Device_Interface_List_SizeW
WakeAllConditionVariable
SleepConditionVariableSRW
InitOnceComplete
InitOnceBeginInitialize
Sleep
RoActivateInstance
RoGetActivationFactory
SetRestrictedErrorInfo
RoGetMatchingRestrictedErrorInfo
CompareStringOrdinal
RegSetKeyValueW
PathCchRemoveFileSpec
RoGetAgileReference
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
QueryPerformanceCounter
WmiReceiveNotificationsW
WmiCloseBlock
WmiOpenBlock
DevObjDestroyDeviceInfoList
DevObjGetClassDevs
DevObjCreateDeviceInfoList
DevGetObjects
DevFindProperty
DevCloseObjectQuery
DevCreateObjectQuery
DevFreeObjects
DevGetObjectProperties
DevFreeObjectProperties
AddAtomW
ActivateActCtx
ReleaseActCtx
CreateActCtxW
DeactivateActCtx
GetDefaultIdentityProvider
GetIdentityProviderInfoByGUID
EnumerateIdentityProviders
ReleaseIdentityProviderEnumContext
RegisterWaitForSingleObject
MulDiv
UnregisterWait
SetThreadExecutionState
lstrcmpW
lstrcmpiW
GetUserDefaultUILanguage
UnregisterWaitEx
QueueUserWorkItem
GetProcessReference
SetProcessReference
GetDpiForShellUIComponent
NtClose
NtQueryInformationToken
NtOpenProcessToken
RtlCheckPortableOperatingSystem
EtwUnregisterTraceGuids
EtwRegisterTraceGuidsW
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
WinSqmIncrementDWORD
EtwEventActivityIdControl
NtOpenThreadToken
EtwEventSetInformation
EtwEventUnregister
EtwEventRegister
RtlNtStatusToDosError
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlQueryWnfStateData
EtwEventWriteTransfer
RtlInitUnicodeStringEx
RtlUnicodeStringToInteger
NtPowerInformation
EtwTraceMessage
WinSqmEventEnabled
WinSqmAddToStream
RtlSubscribeWnfStateChangeNotification
NtQuerySystemInformation
CM_Is_Dock_Station_Present_Ex
GetPackagesByPackageFamily
PowerSettingAccessCheck
PowerReadDCDefaultIndex
PowerDeterminePlatformRole
PowerReadFriendlyName
PowerReadDescription
PropVariantToUInt32
PSPropertyBag_ReadGUID
PSPropertyBag_WriteGUID
VariantToBuffer
PSCreateMemoryPropertyStore
GetObjectW
CreateCompatibleDC
CreateBitmap
DeleteDC
SetPixel
GetPixel
SelectObject
BitBlt
GetDeviceCaps
CreateDIBSection
DeleteObject
GetSystemMetricsForDpi
GetWindowLongPtrW
DispatchMessageW
SetCursor
PeekMessageW
MsgWaitForMultipleObjectsEx
CalculatePopupWindowPosition
InflateRect
GetWindowRect
AdjustWindowRectEx
SetWindowLongPtrW
ReleaseDC
GetDesktopWindow
GetDC
SetWindowTextW
CreateWindowInBand
RegisterClassExW
LoadCursorW
DestroyWindow
NotifyWinEvent
SendNotifyMessageW
GetWindowBand
ShowWindow
TrackPopupMenu
SetMenuDefaultItem
PostQuitMessage
IsSETEnabled
GetMenuItemInfoW
DefWindowProcW
PostMessageW
IsWindowVisible
SetWindowPos
GetMenuItemCount
DeleteMenu
SendMessageW
GetSystemMetrics
CreatePopupMenu
RegisterDeviceNotificationW
SetTimer
ord2707
UnregisterPowerSettingNotification
GetDoubleClickTime
DestroyMenu
FindWindowW
InsertMenuW
TrackPopupMenuEx
AppendMenuW
KillTimer
RegisterPowerSettingNotification
UnregisterDeviceNotification
SetForegroundWindow
RegisterShellHookWindow
DeregisterShellHookWindow
GetIconInfo
DestroyIcon
CreateIconIndirect
SystemParametersInfoW
RegisterWindowMessageW
LoadImageW
PostThreadMessageW
GetMessageW
LoadIconW
IsDialogMessageW
SendMessageCallbackW
InsertMenuItemW
TranslateMessage
CreateWindowExW
ResolveDelayLoadedAPI
DelayLoadFailureHook
GetProcessMitigationPolicy
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_amsg_exit
_errno
_initterm
_lock
??1type_info@@UEAA@XZ
_XcptFilter
calloc
realloc
memmove_s
_unlock
_onexit
__dllonexit
__CxxFrameHandler3
_CxxThrowException
_purecall
_wcsupr
_callnewh
malloc
wcsncpy_s
wcscat_s
free
wcscpy_s
__C_specific_handler
_vsnprintf_s
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@XZ
??1exception@@UEAA@XZ
memcpy_s
_vsnwprintf
?terminate@@YAXXZ
memset
LoadStringW
LoadLibraryExW
FreeLibrary
GetModuleFileNameW
GetModuleFileNameA
GetModuleHandleW
SizeofResource
LoadResource
FindResourceExW
DisableThreadLibraryCalls
GetProcAddress
LockResource
GetModuleHandleExW
CreateEventW
CreateSemaphoreExW
ReleaseMutex
WaitForSingleObjectEx
ReleaseSemaphore
InitializeCriticalSection
OpenSemaphoreW
LeaveCriticalSection
CreateMutexExW
ResetEvent
DeleteCriticalSection
EnterCriticalSection
WaitForSingleObject
HeapSize
HeapReAlloc
HeapAlloc
HeapDestroy
HeapFree
GetProcessHeap
UnhandledExceptionFilter
SetLastError
RaiseException
SetUnhandledExceptionFilter
GetLastError
GetCurrentProcessId
TerminateProcess
GetProcessId
GetCurrentProcess
GetCurrentThreadId
GetThreadLocale
SetThreadLocale
FormatMessageW
OutputDebugStringW
DebugBreak
IsDebuggerPresent
OutputDebugStringA
CloseHandle
VarUI4FromStr
SysAllocString
VariantClear
VariantInit
RegisterTraceGuidsW
GetTraceEnableLevel
GetTraceLoggerHandle
GetTraceEnableFlags
UnregisterTraceGuids
TraceMessage
EventSetInformation
EventUnregister
EventRegister
EventWriteTransfer
CharNextW
RegCloseKey
RegCreateKeyExW
RegGetValueW
RegQueryInfoKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
StringFromGUID2
CoTaskMemAlloc
CoGetMalloc
CoTaskMemFree
CoCreateInstance
PropVariantClear
CoTaskMemRealloc
CLSIDFromString
CompareStringOrdinal
MultiByteToWideChar
CM_Get_Device_Interface_List_SizeW
CM_Get_Device_Interface_ListW
CM_Get_Device_IDW
CM_Locate_DevNodeW
LoadLibraryW
K32GetModuleFileNameExW
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateStringReference
RoGetActivationFactory
RoActivateInstance
DeviceIoControl
GetOverlappedResult
CancelIo
GetSystemTimeAsFileTime
GetTickCount
GetTickCount64
CreateFileW
GetDriveTypeW
GetVolumeNameForVolumeMountPointW
GetVolumePathNamesForVolumeNameW
Sleep
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
QueryPerformanceCounter
StrCmpNICW
QISearch
StrCmpICW
StrRChrIW
IUnknown_GetSite
IUnknown_Set
IUnknown_QueryService
lstrcmpiW
CM_Get_DevNode_Custom_PropertyW
CM_Get_DevNode_Registry_Property_ExW
CM_Get_Parent_Ex
GetApplicationUserModelId
ord348
IUnknown_GetWindow
WTSGetActiveConsoleSessionId
D3DKMTGetProcessDeviceRemovalSupport
D3DKMTGetProcessList
NtQueryInformationProcess
SHStrDupW
SHCreateItemFromParsingName
SHGetIDListFromObject
DevFreeObjects
DevGetObjects
D3DKMTQueryAdapterInfo
D3DKMTOpenAdapterFromDeviceName
PathGetDriveNumberW
SetupDiCreateDeviceInfoList
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiOpenDeviceInfoW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetDevicePropertyW
ord100
SHCreateItemInKnownFolder
ShellExecuteExW
UnregisterClassA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
??0exception@@QEAA@AEBQEBD@Z
memchr
abort
??0exception@@QEAA@XZ
memset
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
_onexit
localeconv
sprintf_s
__mb_cur_max
strcspn
towupper
_itow_s
setlocale
__pctype_func
__uncaught_exception
__crtLCMapStringW
___lc_handle_func
___lc_codepage_func
___mb_cur_max_func
memmove_s
_unlock
_errno
__crtGetStringTypeW
_lock
__C_specific_handler
_initterm
_amsg_exit
_XcptFilter
_CxxThrowException
memcpy_s
_callnewh
?what@exception@@UEBAPEBDXZ
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
wcsstr
_wtoi
swscanf_s
_vsnwprintf
wcstoul
toupper
iswalpha
_wcsnicmp
wcsrchr
wcsncmp
_wcsicmp
_purecall
__CxxFrameHandler3
malloc
__dllonexit
free
swprintf_s
wcscmp
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
QueryPerformanceCounter
QueryPerformanceFrequency
EventUnregister
EventWriteTransfer
EventRegister
EventSetInformation
EventActivityIdControl
GetSystemTimeAsFileTime
GetTickCount
GetSystemDirectoryW
GetComputerNameExW
SetUnhandledExceptionFilter
SetLastError
GetLastError
UnhandledExceptionFilter
DisableThreadLibraryCalls
LoadLibraryExW
LoadStringW
FreeLibrary
GetProcAddress
LeaveCriticalSection
ReleaseSRWLockExclusive
WaitForSingleObject
AcquireSRWLockExclusive
SetEvent
InitializeSRWLock
EnterCriticalSection
InitializeCriticalSection
CreateEventW
WaitForMultipleObjectsEx
DeleteCriticalSection
CoTaskMemFree
CoCreateInstance
CoUninitialize
CLSIDFromString
CoInitializeEx
CoTaskMemAlloc
CreateThread
TlsFree
TlsSetValue
TlsAlloc
GetCurrentThread
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
OpenThreadToken
GetCurrentProcess
TlsGetValue
VariantClear
SysFreeString
SysAllocString
CreateFileW
GetFinalPathNameByHandleW
SetFileAttributesW
GetFileInformationByHandle
DeviceIoControl
CloseHandle
GetVolumePathNamesForVolumeNameW
GetVolumeNameForVolumeMountPointW
PathCchStripToRoot
PathCchAddBackslash
PathCchSkipRoot
PathCchStripPrefix
LocalFree
LocalAlloc
FormatMessageW
GetFileInformationByHandleEx
OpenFileById
RegSetValueExW
RegQueryValueExW
RegGetValueW
RegOpenKeyExW
RegCloseKey
Sleep
DevObjOpenDevRegKey
DevObjOpenDeviceInfo
DevObjCreateDeviceInfoList
DevObjDestroyDeviceInfoList
DevObjGetClassDevs
DevObjGetDeviceInterfaceDetail
DevObjEnumDeviceInterfaces
DevObjEnumDeviceInfo
MI_Application_InitializeV1
mi_clientFT_V1
GetVirtualDiskPhysicalPath
OpenVirtualDisk
GetVirtualDiskInformation
AttachVirtualDisk
GetStorageDependencyInformation
DetachVirtualDisk
AllocateAndInitializeSid
FreeSid
CheckTokenMembership
QueryServiceStatusEx
CloseServiceHandle
OpenSCManagerW
StartServiceW
OpenServiceW
HeapAlloc
GetProcessHeap
HeapFree
MultiByteToWideChar
WideCharToMultiByte
ResolveDelayLoadedAPI
DelayLoadFailureHook
OutputDebugStringA
CM_Reenumerate_DevNode_Ex
ApiSetQueryApiSetPresence
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
GetProviderClassID
MI_Main
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
wcschr
malloc
__C_specific_handler
_initterm
_amsg_exit
_XcptFilter
free
__CxxFrameHandler3
_callnewh
wcscmp
EventRegister
EventSetInformation
EventWriteTransfer
EventUnregister
QueryPerformanceCounter
QueryPerformanceFrequency
SysAllocString
SysFreeString
VariantCopy
VariantClear
CoCreateInstance
Sleep
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
TerminateProcess
GetTickCount
GetSystemTimeAsFileTime
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreatePassThrough
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
wcschr
wcsstr
_XcptFilter
_amsg_exit
free
malloc
_initterm
__C_specific_handler
wcstok
memset
AdjustTokenPrivileges
RegCloseKey
OpenProcessToken
SetThreadToken
DuplicateTokenEx
OpenThreadToken
LookupPrivilegeValueW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
Sleep
GetOverlappedResult
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcessId
GetProcessHeap
HeapFree
GetCurrentProcess
DeviceIoControl
CreateFileW
CreateEventW
GetLastError
GetCurrentThread
CloseHandle
HeapAlloc
SetupDiDestroyDeviceInfoList
SetupDiRemoveDeviceInterface
SetupCloseInfFile
SetupDiGetClassInstallParamsW
SetupDiGetDeviceInterfaceDetailW
SetupDiInstallDevice
SetupDiGetClassDevsW
SetupDiCreateDeviceInterfaceRegKeyW
SetupOpenInfFileW
SetupDiSetClassInstallParamsW
SetupDiEnumDeviceInterfaces
CharLowerW
IIDFromString
StringFromGUID2
StreamingDeviceClassInstaller
StreamingDeviceRemove
StreamingDeviceRemoveA
StreamingDeviceRemoveW
StreamingDeviceSetup
StreamingDeviceSetupA
StreamingDeviceSetupW
SwEnumCoInstaller
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
QueryDosDeviceW
GetLastError
DefineDosDeviceW
HeapSetInformation
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Sleep
GetTickCount
_commode
?terminate@@YAXXZ
_amsg_exit
__getmainargs
__set_app_type
exit
_exit
_cexit
__setusermatherr
_initterm
_fmode
_XcptFilter
__C_specific_handler
?IsValueSet@ARGUMENT@@QEAAEXZ
?GetPattern@ARGUMENT@@QEAAPEAVWSTRING@@XZ
??1OBJECT@@UEAA@XZ
?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QEAAXE@Z
?PrepareToParse@ARGUMENT_LEXEMIZER@@QEAAEPEAVWSTRING@@@Z
?QueryInvalidArgument@ARGUMENT_LEXEMIZER@@QEAAPEAVWSTRING@@XZ
?Set@STREAM_MESSAGE@@UEAAEKW4MESSAGE_TYPE@@K@Z
?PutSeparators@ARGUMENT_LEXEMIZER@@QEAAXPEBD@Z
?GetLexemeAt@ARGUMENT_LEXEMIZER@@QEAAPEAVWSTRING@@K@Z
?DoParsing@ARGUMENT_LEXEMIZER@@QEAAEPEAVARRAY@@@Z
?Initialize@ARGUMENT_LEXEMIZER@@QEAAEPEAVARRAY@@@Z
??1ARGUMENT_LEXEMIZER@@UEAA@XZ
??0FLAG_ARGUMENT@@QEAA@XZ
?Initialize@STRING_ARGUMENT@@QEAAEPEAD@Z
??1STRING_ARGUMENT@@UEAA@XZ
??0STRING_ARGUMENT@@QEAA@XZ
??1PATH@@UEAA@XZ
?QueryDirectory@SYSTEM@@SAPEAVFSN_DIRECTORY@@PEBVPATH@@E@Z
??0PATH@@QEAA@XZ
?Display@MESSAGE@@QEAAEPEBDZZ
Get_Standard_Output_Stream
?QueryWSTR@WSTRING@@QEBAPEAGKKPEAGKE@Z
?DeleteChAt@WSTRING@@QEAAXKK@Z
?Initialize@WSTRING@@QEAAEPEBV1@KK@Z
?Initialize@WSTRING@@QEAAEPEBGK@Z
?Initialize@WSTRING@@QEAAEPEBDK@Z
??1FSTRING@@UEAA@XZ
?Initialize@FSTRING@@QEAAPEAVWSTRING@@PEAGK@Z
?Strstr@WSTRING@@QEBAKPEBV1@@Z
?Strupr@WSTRING@@QEAAPEAV1@XZ
?Initialize@FLAG_ARGUMENT@@QEAAEPEAD@Z
??0FSTRING@@QEAA@XZ
??0PATH_ARGUMENT@@QEAA@XZ
??1PATH_ARGUMENT@@UEAA@XZ
?Initialize@PATH_ARGUMENT@@QEAAEPEADE@Z
Get_Standard_Error_Stream
??0STREAM_MESSAGE@@QEAA@XZ
??1STREAM_MESSAGE@@UEAA@XZ
?Initialize@PATH@@QEAAEPEBV1@E@Z
??0ARRAY@@QEAA@XZ
??1ARRAY@@UEAA@XZ
?Initialize@ARRAY@@QEAAEKK@Z
?Put@ARRAY@@UEAAEPEAVOBJECT@@@Z
Get_Standard_Input_Stream
??0DSTRING@@QEAA@XZ
??1DSTRING@@UEAA@XZ
?Initialize@STREAM_MESSAGE@@QEAAEPEAVSTREAM@@00@Z
??0ARGUMENT_LEXEMIZER@@QEAA@XZ
?PutSwitches@ARGUMENT_LEXEMIZER@@QEAAXPEBD@Z
RtlLookupFunctionEntry
RtlCaptureContext
RtlFreeHeap
RtlDosPathNameToNtPathName_U
RtlFreeUnicodeString
RtlVirtualUnwind
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
free
_get_errno
_amsg_exit
_onexit
malloc
__dllonexit
_unlock
__C_specific_handler
_set_errno
calloc
__CxxFrameHandler3
_vsnprintf_s
_XcptFilter
_lock
_vsnwprintf
_initterm
_wcsupr
memcpy_s
memmove_s
memcmp
memcpy
_wcslwr
memset
ord102
ShellExecuteExW
ord71
ord848
ord866
ord704
ord4
SHGetFileInfoW
SHCreateItemInKnownFolder
ord727
ord764
SHParseDisplayName
ord18
ord25
SHBindToObject
SHGetStockIconInfo
ord155
Shell_GetCachedImageIndexW
ord2
ShellExecuteW
ord859
AssocCreate
ord538
ord176
ord199
ord388
ord172
SHStrDupW
ord629
StrCmpIW
ord16
ord278
PathParseIconLocationW
ord487
ord256
ord615
ord437
PathFindFileNameW
SHRegGetValueW
SHRegGetUSValueW
ord165
ord197
ord156
ord158
ord618
ord24
ord514
ord174
ord204
ord219
ord121
SetWindowTheme
ord120
LockResource
LoadResource
LoadLibraryExW
FindResourceExW
GetModuleHandleW
GetProcAddress
GetModuleFileNameA
GetModuleHandleExW
LoadStringW
DisableThreadLibraryCalls
GetModuleFileNameW
ReleaseSRWLockShared
ReleaseMutex
AcquireSRWLockExclusive
InitializeCriticalSectionEx
LeaveCriticalSection
InitializeCriticalSection
OpenSemaphoreW
ReleaseSemaphore
WaitForSingleObject
WaitForSingleObjectEx
EnterCriticalSection
CreateMutexExW
WaitForMultipleObjectsEx
AcquireSRWLockShared
DeleteCriticalSection
CreateSemaphoreExW
ReleaseSRWLockExclusive
HeapDestroy
GetProcessHeap
HeapReAlloc
HeapFree
HeapAlloc
HeapSize
GetLastError
UnhandledExceptionFilter
SetLastError
SetUnhandledExceptionFilter
RaiseException
CreateThreadpoolTimer
SetThreadpoolTimer
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
FormatMessageW
IsDebuggerPresent
OutputDebugStringW
DebugBreak
CloseHandle
RegGetValueW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumValueW
RegCreateKeyExW
RegCloseKey
CoCreateInstance
CoGetApartmentType
CoWaitForMultipleHandles
CoTaskMemAlloc
PropVariantClear
CoGetMalloc
CoTaskMemFree
CoTaskMemRealloc
EventSetInformation
EventRegister
EventWrite
EventUnregister
EventWriteTransfer
EventEnabled
EventActivityIdControl
OpenProcess
K32GetProcessImageFileNameW
Sleep
InitOnceComplete
InitOnceBeginInitialize
CompareStringW
CompareStringOrdinal
CharUpperW
LocalFree
LocalAlloc
VariantClear
WindowsCreateStringReference
WindowsGetStringRawBuffer
WindowsDeleteString
RoGetActivationFactory
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
RegEnumKeyW
RegInstallW
ActivateActCtx
ReleaseActCtx
CreateActCtxW
lstrlenW
DeactivateActCtx
EtwLogTraceEvent
WinSqmAddToStream
CoAllowSetForegroundWindow
PSPropertyBag_WriteUnknown
PSPropertyBag_ReadStr
?SetContentAlign@Element@DirectUI@@QEAAJH@Z
?GetAtomZero@Value@DirectUI@@SAPEAV12@XZ
?GetUnset@Value@DirectUI@@SAPEAV12@XZ
?SetActive@Element@DirectUI@@QEAAJH@Z
?GetStringNull@Value@DirectUI@@SAPEAV12@XZ
?CreateXBaby@XProvider@DirectUI@@UEAAJPEAVIXElementCP@2@PEAUHWND__@@PEAVElement@2@PEAKPEAPEAUIXBaby@2@@Z
?SetButtonClassAcceptsEnterKey@XProvider@DirectUI@@UEAAJ_N@Z
?SetRegisteredDefaultButton@XProvider@DirectUI@@UEAAJPEAVElement@2@@Z
?ClickDefaultButton@XProvider@DirectUI@@UEAAHXZ
?ForceThemeChange@XProvider@DirectUI@@UEAAJ_K_J@Z
?GetHostedElementID@XProvider@DirectUI@@UEAAJPEAG@Z
?FindElementWithShortcutAndDoDefaultAction@XProvider@DirectUI@@UEAAHGH@Z
?CanSetFocus@XProvider@DirectUI@@UEAAJPEA_N@Z
?Navigate@XProvider@DirectUI@@UEAAJHPEA_N@Z
?SetFocus@XProvider@DirectUI@@UEAAJPEAVElement@2@@Z
?IsDescendent@XProvider@DirectUI@@UEAAJPEAVElement@2@PEA_N@Z
?GetDesiredSize@XProvider@DirectUI@@UEAAJHHPEAUtagSIZE@@@Z
?SetParameter@XProvider@DirectUI@@UEAAJAEBU_GUID@@PEAX@Z
?AddRef@XProvider@DirectUI@@UEAAKXZ
?GetClassInfoPtr@HWNDElement@DirectUI@@SAPEAUIClassInfo@2@XZ
?SetDefaultButtonTracking@XProvider@DirectUI@@UEAAJ_N@Z
?SetHandleEnterKey@XProvider@DirectUI@@IEAAX_N@Z
?CreateDUI@XProvider@DirectUI@@UEAAJPEAVIXElementCP@2@PEAPEAUHWND__@@@Z
?GetRoot@XProvider@DirectUI@@IEAAPEAVElement@2@XZ
?Initialize@XProvider@DirectUI@@QEAAJPEAVElement@2@PEAVIXProviderCP@2@@Z
?Create@XResourceProvider@DirectUI@@SAJPEAUHINSTANCE__@@PEBG11PEAPEAV12@@Z
?QueryInterface@XProvider@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
??1XProvider@DirectUI@@UEAA@XZ
??0XProvider@DirectUI@@QEAA@XZ
?GetChildren@Element@DirectUI@@QEAAPEAV?$DynamicArray@PEAVElement@DirectUI@@$0A@@2@PEAPEAVValue@2@@Z
?Init@NavReference@DirectUI@@QEAAXPEAVElement@2@PEAUtagRECT@@@Z
?GetAtom@Value@DirectUI@@QEAAGXZ
?Register@Element@DirectUI@@SAJXZ
?GetString@Value@DirectUI@@QEAAPEBGXZ
?GetValue@Element@DirectUI@@QEAAPEAVValue@2@PEBUPropertyInfo@2@HPEAUUpdateCache@2@@Z
?GetClassInfoPtr@Element@DirectUI@@SAPEAUIClassInfo@2@XZ
?SetID@Element@DirectUI@@QEAAJPEBG@Z
?SetAccessible@Element@DirectUI@@QEAAJ_N@Z
?SetAccRole@Element@DirectUI@@QEAAJH@Z
?SetConstrainLayout@RichText@DirectUI@@QEAAJH@Z
UnInitThread
StartMessagePump
UnInitProcessPriv
InitThread
InitProcessPriv
?Create@RichText@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z
?CreateGraphic@Value@DirectUI@@SAPEAV12@PEAUHICON__@@_N11@Z
?CreateGraphic@Value@DirectUI@@SAPEAV12@PEAUHBITMAP__@@EI_N11@Z
?EndDefer@Element@DirectUI@@QEAAXK@Z
?StartDefer@Element@DirectUI@@QEAAXPEAK@Z
?ContentProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ
?SetValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZHPEAVValue@2@@Z
?SetLayoutPos@Element@DirectUI@@QEAAJH@Z
?SetEnabled@Element@DirectUI@@QEAAJ_N@Z
?GetEnabled@Element@DirectUI@@QEAA_NXZ
?IsContentProtected@Edit@DirectUI@@UEAA_NXZ
?GetMultiline@Edit@DirectUI@@QEAA_NXZ
?GetThemedBorder@Edit@DirectUI@@QEAA_NXZ
?SetMultiline@Edit@DirectUI@@QEAAJ_N@Z
?Initialize@Edit@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z
?CreateHWND@Edit@DirectUI@@MEAAPEAUHWND__@@PEAU3@_N@Z
?MessageCallback@Edit@DirectUI@@UEAAIPEAUtagGMSG@@@Z
?GetContentSize@Edit@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?OnInput@Edit@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?OnPropertyChanged@Edit@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?GetContentStringAsDisplayed@Edit@DirectUI@@UEAAPEBGPEAPEAVValue@2@@Z
?Register@Edit@DirectUI@@SAJXZ
?CreateAccNameLabel@HWNDHost@DirectUI@@IEAAPEAUHWND__@@PEAU3@@Z
??1Edit@DirectUI@@UEAA@XZ
??0Edit@DirectUI@@QEAA@XZ
?GetClassInfoPtr@Edit@DirectUI@@SAPEAUIClassInfo@2@XZ
?QueryInterface@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
?GetHWND@HWNDHost@DirectUI@@UEAAPEAUHWND__@@XZ
?DefaultAction@CCBase@DirectUI@@UEAAJXZ
?PostCreate@CCBase@DirectUI@@MEAAXPEAUHWND__@@@Z
?Initialize@CCListView@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z
??1CCListView@DirectUI@@UEAA@XZ
?OnReceivedDialogFocus@CCBase@DirectUI@@UEAA_NPEAUIDialogElement@2@@Z
?OnLostDialogFocus@CCBase@DirectUI@@UEAA_NPEAUIDialogElement@2@@Z
?OnCustomDraw@CCBase@DirectUI@@UEAA_NPEAUtagNMCUSTOMDRAWINFO@@PEA_J@Z
?EraseBkgnd@HWNDHost@DirectUI@@MEAA_NPEAUHDC__@@PEA_J@Z
?CreateHWND@CCBase@DirectUI@@UEAAPEAUHWND__@@PEAU3@@Z
?SetWindowDirection@HWNDHost@DirectUI@@UEAAXPEAUHWND__@@@Z
?OnAdjustWindowSize@HWNDHost@DirectUI@@UEAAHHHI@Z
?OnWindowStyleChanged@HWNDHost@DirectUI@@UEAAX_KPEBUtagSTYLESTRUCT@@@Z
?OnCtrlThemeChanged@HWNDHost@DirectUI@@UEAA_NI_K_JPEA_J@Z
?OnSinkThemeChanged@HWNDHost@DirectUI@@UEAA_NI_K_JPEA_J@Z
?OnSysChar@HWNDHost@DirectUI@@UEAA_NG@Z
?OnMessage@HWNDHost@DirectUI@@UEAA_NI_K_JPEA_J@Z
?GetAccessibleImpl@HWNDHost@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z
?GetKeyFocused@HWNDHost@DirectUI@@UEAA_NXZ
?OnUnHosted@HWNDHost@DirectUI@@MEAAXPEAVElement@2@@Z
?OnHosted@HWNDHost@DirectUI@@MEAAXPEAVElement@2@@Z
?MessageCallback@HWNDHost@DirectUI@@UEAAIPEAUtagGMSG@@@Z
?SetKeyFocus@HWNDHost@DirectUI@@UEAAXXZ
?GetContentSize@CCListView@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?Paint@HWNDHost@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z
?OnEvent@HWNDHost@DirectUI@@UEAAXPEAUEvent@2@@Z
?OnDestroy@HWNDHost@DirectUI@@UEAAXXZ
?OnInput@CCBase@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?OnPropertyChanged@CCBase@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?Register@CCListView@DirectUI@@SAJXZ
?OnNotify@CCBase@DirectUI@@UEAA_NI_K_JPEA_J@Z
?FireEvent@Element@DirectUI@@QEAAXPEAUEvent@2@_N1@Z
??0CCListView@DirectUI@@QEAA@XZ
?GetClassInfoPtr@CCListView@DirectUI@@SAPEAUIClassInfo@2@XZ
?Release@Value@DirectUI@@QEAAXXZ
??0CritSecLock@DirectUI@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z
??1CritSecLock@DirectUI@@QEAA@XZ
?IsRTLReading@Element@DirectUI@@UEAA_NXZ
?IsContentProtected@Element@DirectUI@@UEAA_NXZ
?UpdateTooltip@Element@DirectUI@@MEAAXPEAV12@@Z
?ActivateTooltip@Element@DirectUI@@MEAAXPEAV12@K@Z
?RemoveTooltip@Element@DirectUI@@MEAAXPEAV12@@Z
?GetKeyFocused@Element@DirectUI@@UEAA_NXZ
?GetID@Element@DirectUI@@QEAAGXZ
?GetSelected@Element@DirectUI@@QEAA_NXZ
?SetVisible@Element@DirectUI@@QEAAJ_N@Z
?SetContentString@Element@DirectUI@@QEAAJPEBG@Z
?SetAccName@Element@DirectUI@@QEAAJPEBG@Z
?AssertPIZeroRef@ClassInfoBase@DirectUI@@UEBAXXZ
?GetChildren@ClassInfoBase@DirectUI@@UEBAHXZ
?RemoveChild@ClassInfoBase@DirectUI@@UEAAXXZ
?AddChild@ClassInfoBase@DirectUI@@UEAAXXZ
?IsGlobal@ClassInfoBase@DirectUI@@UEBA_NXZ
?GetModule@ClassInfoBase@DirectUI@@UEBAPEAUHINSTANCE__@@XZ
?IsSubclassOf@ClassInfoBase@DirectUI@@UEBA_NPEAUIClassInfo@2@@Z
?IsValidProperty@ClassInfoBase@DirectUI@@UEBA_NPEBUPropertyInfo@2@@Z
?GetName@ClassInfoBase@DirectUI@@UEBAPEBGXZ
?GetGlobalIndex@ClassInfoBase@DirectUI@@UEBAIXZ
?GetPICount@ClassInfoBase@DirectUI@@UEBAIXZ
?GetByClassIndex@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z
?Release@ClassInfoBase@DirectUI@@UEAAHXZ
?AddRef@ClassInfoBase@DirectUI@@UEAAXXZ
?GetUiaFocusDelegate@Element@DirectUI@@UEAAPEAV12@XZ
?HandleUiaEventListener@Element@DirectUI@@UEAAXPEAUEvent@2@@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@@Z
?HandleUiaPropertyListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?HandleUiaDestroyListener@Element@DirectUI@@UEAAXXZ
?GetElementProviderImpl@Element@DirectUI@@UEAAJPEAVInvokeHelper@2@PEAPEAVElementProvider@2@@Z
?GetUIAElementProvider@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z
?DefaultAction@Element@DirectUI@@UEAAJXZ
?GetAccessibleImpl@Element@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z
?OnUnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
?OnHosted@Element@DirectUI@@MEAAXPEAV12@@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MEAAXHH@Z
?GetImmersiveFocusRectOffsets@Element@DirectUI@@UEAAXPEAUtagRECT@@@Z
?MessageCallback@Element@DirectUI@@UEAAIPEAUtagGMSG@@@Z
?RemoveBehavior@Element@DirectUI@@UEAAJPEAUIDuiBehavior@@@Z
?AddBehavior@Element@DirectUI@@UEAAJPEAUIDuiBehavior@@@Z
?SetKeyFocus@Element@DirectUI@@UEAAXXZ
?EnsureVisible@Element@DirectUI@@UEAA_NHHHH@Z
?GetAdjacent@Element@DirectUI@@UEAAPEAV12@PEAV12@HPEBUNavReference@2@K@Z
?Remove@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?Insert@Element@DirectUI@@UEAAJPEAPEAV12@II@Z
?Add@Element@DirectUI@@UEAAJPEAPEAV12@I@Z
?GetContentSize@Element@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z
?Paint@Element@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z
?OnDestroy@Element@DirectUI@@UEAAXXZ
?OnKeyFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?OnGroupChanged@Element@DirectUI@@UEAAXH_N@Z
?OnPropertyChanged@Element@DirectUI@@UEAAXPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanged@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEAUPropertyInfo@2@HPEAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z
?GetContentStringAsDisplayed@Element@DirectUI@@UEAAPEBGPEAPEAVValue@2@@Z
??1ClassInfoBase@DirectUI@@UEAA@XZ
??0ClassInfoBase@DirectUI@@QEAA@XZ
?Destroy@Element@DirectUI@@QEAAJ_N@Z
?Initialize@ClassInfoBase@DirectUI@@QEAAJPEAUHINSTANCE__@@PEBG_NPEBQEBUPropertyInfo@2@I@Z
?Register@ClassInfoBase@DirectUI@@QEAAJXZ
?OnNotify@Edit@DirectUI@@UEAA_NI_K_JPEA_J@Z
?OnMouseFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z
?ClassExist@ClassInfoBase@DirectUI@@SA_NPEAPEAUIClassInfo@2@PEBQEBUPropertyInfo@2@IPEAU32@PEAUHINSTANCE__@@PEBG_N@Z
?GetFactoryLock@Element@DirectUI@@SAPEAU_RTL_CRITICAL_SECTION@@XZ
?OnInput@Element@DirectUI@@UEAAXPEAUInputEvent@2@@Z
?OnEvent@Element@DirectUI@@UEAAXPEAUEvent@2@@Z
?GetContentString@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z
?Click@Button@DirectUI@@SA?AVUID@@XZ
StrToID
?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z
??1Element@DirectUI@@UEAA@XZ
??0Element@DirectUI@@QEAA@XZ
?Initialize@Element@DirectUI@@QEAAJIPEAV12@PEAK@Z
DeleteObject
CreateDIBSection
DeleteDC
CreateCompatibleDC
GetObjectW
StretchDIBits
SelectObject
GdiAlphaBlend
GetFocus
GetWindowThreadProcessId
IsWindowVisible
MonitorFromWindow
SendMessageW
GetSystemMetrics
DestroyWindow
DestroyIcon
GetWindowLongW
GetWindowLongPtrW
SetWindowLongPtrW
DefWindowProcW
CreateWindowExW
PostMessageW
SetWindowLongW
CopyImage
CopyRect
ReleaseDC
GetDC
PostQuitMessage
SetCursor
LoadCursorW
TranslateMessage
EnumWindows
GetWindowBand
MsgWaitForMultipleObjectsEx
PeekMessageW
GetMonitorInfoW
DispatchMessageW
ord65
ResolveDelayLoadedAPI
DelayLoadFailureHook
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_initterm
_initterm_e
__wgetmainargs
exit
QueryPerformanceCounter
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
OpenProcessToken
TerminateProcess
SetProcessAffinityUpdateMode
ExitProcess
GetSystemTimeAsFileTime
GetTickCount64
GetTickCount
RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind
GetLastError
SetErrorMode
SetUnhandledExceptionFilter
UnhandledExceptionFilter
I_RegisterSvchostNotificationCallback
qsort_s
memcpy
memset
_wcsicmp
GetProcAddress
FreeLibrary
LoadLibraryExW
HeapFree
GetProcessHeap
HeapAlloc
HeapSetInformation
LeaveCriticalSection
ReleaseSRWLockShared
AcquireSRWLockShared
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
RegisterServiceCtrlHandlerW
SetServiceStatus
StartServiceCtrlDispatcherW
MultiByteToWideChar
WideCharToMultiByte
CompareStringOrdinal
RegCloseKey
RegQueryValueExW
RegDisablePredefinedCacheEx
RegOpenKeyExW
RegGetValueW
RegEnumKeyExW
ExpandEnvironmentStringsW
GetCommandLineW
SetProcessMitigationPolicy
SetProtectedPolicy
RpcServerUnregisterIf
I_RpcMapWin32Status
RpcMgmtSetServerStackSize
I_RpcServerDisableExceptionFilter
RpcServerUseProtseqEpW
RpcServerUnregisterIfEx
RpcMgmtStopServerListening
RpcServerListen
RpcMgmtWaitServerListen
RpcServerRegisterIf
LCMapStringW
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
MakeAbsoluteSD
AddAccessAllowedAce
GetTokenInformation
GetLengthSid
InitializeAcl
SetSecurityDescriptorOwner
InitializeSecurityDescriptor
CloseHandle
EventRegister
EventSetInformation
EventWriteTransfer
bsearch_s
ActivateActCtx
DeactivateActCtx
ReleaseActCtx
CreateActCtxW
RegisterWaitForSingleObjectEx
RtlQueryHeapInformation
TpAllocTimer
_vsnwprintf
EtwEventEnabled
TpReleaseWait
RtlNtStatusToDosErrorNoTeb
TpSetWait
TpAllocWait
EtwEventRegister
RtlUnhandledExceptionFilter
NtSetInformationProcess
RtlSetProcessIsCritical
TpSetTimerEx
TpSetTimer
RtlImageNtHeader
RtlValidSecurityDescriptor
NtQuerySystemInformation
RtlRunOnceExecuteOnce
RtlNtStatusToDosError
RtlFreeHeap
EtwEventWrite
TpReleaseTimer
RtlInitializeCriticalSection
RtlInitializeSid
RtlSubAuthoritySid
RtlGetDeviceFamilyInfoEnum
RtlReleaseSRWLockExclusive
RtlSubAuthorityCountSid
RtlAcquireSRWLockExclusive
RtlLengthRequiredSid
RtlDeriveCapabilitySidsFromName
RtlCopySid
TpWaitForTimer
RtlAllocateHeap
LocalAlloc
LocalFree
ResolveDelayLoadedAPI
DelayLoadFailureHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
__C_specific_handler
_initterm
malloc
_amsg_exit
_XcptFilter
free
realloc
memset
LookupPrivilegeValueW
RegisterServiceCtrlHandlerExW
AdjustTokenPrivileges
RegCloseKey
SetServiceStatus
RegCreateKeyExW
RegSetValueExW
OpenProcessToken
RegOpenKeyExW
RegQueryValueExW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
WaitForSingleObject
GetCurrentProcess
DeviceIoControl
FreeLibrary
CreateFileW
CreateEventW
GetLastError
SetEvent
CloseHandle
LoadLibraryW
GetProcAddress
TerminateProcess
DbgPrint
ServiceCtrlHandler
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
wcschr
towupper
memcpy_s
_wcsicmp
_callnewh
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBV0@@Z
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
_CxxThrowException
_XcptFilter
_vsnprintf
_initterm
?terminate@@YAXXZ
??1type_info@@UEAA@XZ
_lock
memcmp
_unlock
memcpy
_vsnwprintf
_wcsnicmp
wcsncmp
__dllonexit
_onexit
memmove
iswdigit
wcscpy_s
wcscat_s
malloc
_purecall
realloc
free
??0exception@@QEAA@AEBQEBD@Z
__CxxFrameHandler3
_errno
_beginthreadex
memmove_s
??0exception@@QEAA@XZ
_wtoi64
__C_specific_handler
_amsg_exit
memset
CloseHandle
OpenProcessToken
TerminateProcess
GetCurrentProcess
GetCurrentThread
ResumeThread
SetThreadToken
GetCurrentThreadId
GetCurrentProcessId
OpenThreadToken
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RaiseException
LeaveCriticalSection
CreateEventW
CreateWaitableTimerExW
SetWaitableTimer
DeleteCriticalSection
ResetEvent
WaitForSingleObject
EnterCriticalSection
CancelWaitableTimer
InitializeCriticalSection
LocalFree
LocalAlloc
GetFileAttributesW
GetDriveTypeW
CreateFileW
FindVolumeClose
GetDiskFreeSpaceExW
ReadFile
GetVolumeInformationW
FindNextVolumeW
FindFirstVolumeW
GetVolumePathNameW
GetOverlappedResult
DeviceIoControl
Sleep
GetProcAddress
LoadLibraryExW
GetModuleHandleW
FreeLibrary
LoadResource
FindResourceExW
GetModuleFileNameW
DisableThreadLibraryCalls
LoadStringW
SizeofResource
CharPrevW
CharNextW
RegDeleteTreeW
RegOpenKeyExW
RegGetValueW
RegQueryValueExW
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegEnumValueW
RegQueryInfoKeyW
lstrcpynW
lstrcmpiW
VirtualAlloc
VirtualProtect
VirtualQuery
VirtualFree
GetSystemWindowsDirectoryW
GetTickCount
GetVersionExW
GetWindowsDirectoryW
GetComputerNameExW
GetSystemTimeAsFileTime
GetSystemDirectoryW
GetSystemInfo
MultiByteToWideChar
HeapAlloc
GetProcessHeap
HeapDestroy
HeapFree
RtlCompareMemory
NtQueryVolumeInformationFile
RtlInitializeBitMap
NtQuerySystemInformation
RtlNtStatusToDosError
RtlTimeToElapsedTimeFields
WinSqmAddToStream
RtlNtStatusToDosErrorNoTeb
GetVolumePathNamesForVolumeNameW
GetVolumeNameForVolumeMountPointW
DevObjGetDeviceRegistryProperty
DevObjEnumDeviceInterfaces
DevObjGetClassDevs
DevObjDestroyDeviceInfoList
DevObjCreateDeviceInfoList
DevObjGetDeviceInterfaceDetail
GetCommandLineW
ExpandEnvironmentStringsW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
QueryPerformanceCounter
ord9
ord3
ord4
ord11
ord2
ord10
ord8
ord1
ord6
ord7
ord5
AdjustTokenPrivileges
CopySid
SetSecurityDescriptorOwner
DuplicateTokenEx
GetLengthSid
SetSecurityDescriptorGroup
InitializeSecurityDescriptor
AllocateAndInitializeSid
FreeSid
SetSecurityDescriptorDacl
GetAclInformation
GetTokenInformation
CheckTokenMembership
IsValidSid
AddAccessAllowedAceEx
AddAccessDeniedAceEx
InitializeAcl
AddAce
GetAce
CreateWellKnownSid
ReportEventW
DeregisterEventSource
RegisterEventSourceW
FormatMessageW
ResolveDelayLoadedAPI
DelayLoadFailureHook
GetStorageDependencyInformation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
malloc
_initterm
__C_specific_handler
_amsg_exit
free
_XcptFilter
memcmp
DisableThreadLibraryCalls
IUnknown_Release_Proxy
CStdStubBuffer_CountRefs
NdrOleAllocate
CStdStubBuffer_AddRef
NdrOleFree
CStdStubBuffer_Connect
CStdStubBuffer_IsIIDSupported
IUnknown_QueryInterface_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
IUnknown_AddRef_Proxy
CStdStubBuffer_Invoke
ObjectStublessClient12
ObjectStublessClient14
ObjectStublessClient11
CStdAsyncStubBuffer_Release
ObjectStublessClient16
ObjectStublessClient21
ObjectStublessClient3
ObjectStublessClient27
ObjectStublessClient18
ObjectStublessClient20
ObjectStublessClient15
ObjectStublessClient23
ObjectStublessClient7
ObjectStublessClient13
CStdAsyncStubBuffer_Connect
ObjectStublessClient5
ObjectStublessClient24
CStdAsyncStubBuffer_AddRef
CStdAsyncStubBuffer_Invoke
ObjectStublessClient19
ObjectStublessClient4
ObjectStublessClient6
ObjectStublessClient25
CStdAsyncStubBuffer_QueryInterface
ObjectStublessClient8
ObjectStublessClient9
CStdAsyncStubBuffer_Disconnect
ObjectStublessClient26
ObjectStublessClient17
ObjectStublessClient10
ObjectStublessClient22
Sleep
QueryPerformanceCounter
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetTickCount
GetSystemTimeAsFileTime
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
DbgPrintEx
RtlRaiseStatus
RtlCaptureContext
RtlLookupFunctionEntry
RtlDowncaseUnicodeChar
EtwEventRegister
EtwEventUnregister
EtwEventWrite
__C_specific_handler
RtlCopyMappedMemory
LdrResSearchResource
RtlGetVersion
_wcsicmp
RtlUnhandledExceptionFilter
_vsnprintf_s
_snprintf_s
RtlGetFrame
wcsrchr
RtlHashUnicodeString
RtlNtStatusToDosError
_vsnwprintf_s
RtlDetermineDosPathNameType_U
wcsstr
RtlIsCloudFilesPlaceholder
wcsspn
wcscspn
RtlGetNtSystemRoot
RtlNtStatusToDosErrorNoTeb
RtlFindCharInUnicodeString
vsprintf_s
vDbgPrintEx
wcscat_s
swprintf_s
NtQueryDebugFilterState
sprintf_s
RtlCompareUnicodeString
RtlUpcaseUnicodeChar
qsort
bsearch
_lfind
RtlPopFrame
_i64tow
RtlVirtualUnwind
wcschr
RtlFreeUnicodeString
RtlLcidToLocaleName
wcscpy_s
RtlPushFrame
memmove
__chkstk
memcmp
memcpy
memset
IsDebuggerPresent
OutputDebugStringA
SetUnhandledExceptionFilter
GetLastError
SetLastError
RaiseException
UnhandledExceptionFilter
SetFileAttributesW
FindClose
RemoveDirectoryW
FindNextFileW
GetFileInformationByHandle
WriteFile
GetFileAttributesExW
GetFullPathNameW
CreateFileW
GetFileAttributesW
CreateDirectoryW
DeleteFileW
SetFilePointerEx
ReadFile
FlushFileBuffers
FindFirstFileW
CloseHandle
HeapAlloc
HeapFree
GetProcessHeap
DisableThreadLibraryCalls
GetModuleFileNameW
LoadLibraryExW
GetProcAddress
GetModuleHandleW
FreeLibrary
LoadLibraryW
FormatMessageA
FormatMessageW
GetThreadPreferredUILanguages
RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyExW
RegQueryValueExW
RegQueryInfoKeyW
ExpandEnvironmentStringsW
SearchPathW
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
MultiByteToWideChar
GetStringTypeW
Sleep
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
DelayLoadFailureHook
ResolveDelayLoadedAPI
GetSystemWow64DirectoryW
WerUnregisterFile
WerRegisterFile
LocalFree
SystemTimeToTzSpecificLocalTime
DeviceIoControl
FindActCtxSectionGuid
QueryActCtxW
FindActCtxSectionStringW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
QueryPerformanceCounter
LeaveCriticalSection
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSection
CreateAssemblyCache
CreateAssemblyNameObject
SxsBeginAssemblyInstall
SxsEndAssemblyInstall
SxsFindClrClassInformation
SxsFindClrSurrogateInformation
SxsGenerateActivationContext
SxsInstallW
SxsLookupClrGuid
SxsOleAut32MapConfiguredClsidToReferenceClsid
SxsOleAut32MapIIDOrCLSIDToTypeLibrary
SxsOleAut32MapIIDToProxyStubCLSID
SxsOleAut32MapIIDToTLBPath
SxsOleAut32MapReferenceClsidToConfiguredClsid
SxsOleAut32RedirectTypeLibrary
SxsProbeAssemblyInstallation
SxsQueryManifestInformation
SxsRunDllInstallAssembly
SxsRunDllInstallAssemblyW
SxsUninstallW
SxspGenerateManifestPathOnAssemblyIdentity
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
__C_specific_handler
_onexit
_unlock
_lock
_initterm
malloc
_amsg_exit
_XcptFilter
free
__dllonexit
RtlGetLastNtStatus
RtlNtStatusToDosError
EtwTraceMessage
EtwUnregisterTraceGuids
EtwGetTraceEnableFlags
EtwGetTraceLoggerHandle
EtwGetTraceEnableLevel
EtwRegisterTraceGuidsW
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryExA
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
Sleep
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetCurrentProcess
TlsGetValue
GetCurrentProcessId
TlsSetValue
TlsAlloc
TerminateProcess
GetCurrentThreadId
TlsFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetSystemInfo
GetTickCount
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
LocalFree
VirtualProtect
VirtualQuery
GetProcessHeap
HeapAlloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetLastFailureAsHRESULT
HRESULTFromNTSTATUS
SxTracerDebuggerBreak
SxTracerGetThreadContextDebug
SxTracerGetThreadContextRetail
SxTracerShouldTrackFailure
Win32FromHRESULT
Win32FromNTSTATUS
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ