Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
c0d93f43bf4b91d4b979a97e6947deb475e8a80e8b132b1389c0b88fc5edec47.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c0d93f43bf4b91d4b979a97e6947deb475e8a80e8b132b1389c0b88fc5edec47.dll
Resource
win10v2004-20220812-en
Target
c0d93f43bf4b91d4b979a97e6947deb475e8a80e8b132b1389c0b88fc5edec47
Size
353KB
MD5
3f2d7b2860fdf8995f14948ce0a1a8ab
SHA1
45ee1b3e23b34f947628ab21d03d253336f233df
SHA256
c0d93f43bf4b91d4b979a97e6947deb475e8a80e8b132b1389c0b88fc5edec47
SHA512
02ebbfba64fbadf1889564620adc44e93af9a3131e471fc5e1407f62e8894e9c49aa9897a03911e583853c3587f05bbaf75321f9830c9b03de00333fb3ca6a0b
SSDEEP
6144:nakHfq0YL44I/s7lVvLnqHSjBbOYqxd5XyTVZDXLHYmf+tvfOtsR1BDfLI3L:aqqhkJ4lqHSMYq9yTVdXLHWRXDC3L
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InterlockedIncrement
ResetEvent
InterlockedDecrement
SetEvent
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetWindowsDirectoryW
GetModuleHandleW
QueryDosDeviceW
FindFirstFileW
FindClose
OutputDebugStringW
CreateProcessW
GetSystemInfo
CreateEventA
CreateFileMappingA
InterlockedExchange
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
OpenProcess
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
GetSystemDirectoryW
GetFileAttributesW
WaitForSingleObject
WriteProcessMemory
VirtualProtect
DeviceIoControl
CreateMutexW
OpenMutexW
OpenEventW
CreateSemaphoreW
OpenSemaphoreW
OpenFileMappingW
GetVolumeInformationW
GetLogicalDrives
GetDriveTypeW
ReadDirectoryChangesW
GetOverlappedResult
DisableThreadLibraryCalls
ExpandEnvironmentStringsW
SetEnvironmentVariableW
GetModuleFileNameW
SetFileTime
RaiseException
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
CreateEventW
SetLastError
GetFileSize
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
CreateFileW
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
CreateThread
GetCurrentProcess
DuplicateHandle
CloseHandle
ResumeThread
SuspendThread
Sleep
GetThreadTimes
QueryPerformanceCounter
SetThreadPriority
GetThreadPriority
GetCurrentThread
SetThreadAffinityMask
QueryPerformanceFrequency
FreeLibrary
GetProcAddress
LoadLibraryW
LocalFree
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalAlloc
lstrcmpiA
GetLastError
wsprintfW
FindWindowW
GetWindowThreadProcessId
RegisterDeviceNotificationW
UnregisterDeviceNotification
wsprintfA
SetServiceStatus
RegisterServiceCtrlHandlerExW
StartServiceW
ControlService
StartServiceCtrlDispatcherW
QueryServiceConfigW
DeleteService
CreateServiceW
QueryServiceStatus
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegEnumKeyExW
LogonUserW
ImpersonateLoggedOnUser
OpenProcessToken
RegQueryValueExW
RegSetValueExW
RegEnumValueW
RegCloseKey
RegSetKeySecurity
RegCreateKeyExW
FreeSid
SetSecurityDescriptorDacl
AddAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
InitializeSecurityDescriptor
RegOpenKeyExW
MakeSelfRelativeSD
GetSecurityDescriptorControl
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@II@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@II@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHIIPB_W@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II_W@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IPB_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
strncpy
??3@YAXPAX@Z
??_V@YAXPAX@Z
wcstoul
wcsncmp
_purecall
_wcsnicmp
wcsncpy
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
malloc
free
iswdigit
_wtoi
tolower
_wcsdup
_wcslwr
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
rand
_ultow
wcschr
wcsrchr
_wcsupr
_wcsicmp
swprintf_s
fgetwc
_wfopen
fclose
_itow
_snwprintf
_wunlink
fprintf
_wrename
memchr
_snprintf
memmove
_swprintf
_local_unwind4
strtoul
strncmp
realloc
qsort
isdigit
memmove_s
srand
wcsstr
strchr
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
__CxxFrameHandler3
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_CxxThrowException
memcpy
memset
_strnicmp
??0CGenericFile@@QAE@ABV0@@Z
??0CGenericFile@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HH_N@Z
??0CGenericFile@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@I@Z
??0CGenericFile@@QAE@I@Z
??0CGenericFile@@QAE@PBXI@Z
??0CGenericFile@@QAE@PB_WHH_N@Z
??0CGenericFile@@QAE@PB_WI@Z
??0CGenericFile@@QAE@XZ
??0CLock@@QAE@ABV0@@Z
??0CLock@@QAE@W4CLOCK_TYPE1@@@Z
??0CLockCS@@QAE@ABV0@@Z
??0CLockCS@@QAE@XZ
??0CLockEvent@@QAE@ABV0@@Z
??0CLockEvent@@QAE@ABVCStr@@_N1@Z
??0CLockEvent@@QAE@PB_W_N1@Z
??0CLockEvent@@QAE@_N@Z
??0CLockMutex@@QAE@ABV0@@Z
??0CLockMutex@@QAE@ABVCStr@@@Z
??0CLockMutex@@QAE@PB_W@Z
??0CMultiReadLock@@QAE@PB_WK@Z
??0CMultiReadLockLocal@@QAE@XZ
??0COptex@@QAE@PBDK@Z
??0COptex@@QAE@PB_WK@Z
??0CStr@@QAE@ABV0@@Z
??0CStr@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0CStr@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0CStr@@QAE@I_W@Z
??0CStr@@QAE@K@Z
??0CStr@@QAE@PAX@Z
??0CStr@@QAE@PBD@Z
??0CStr@@QAE@PB_W@Z
??0CStr@@QAE@XZ
??0CStr@@QAE@_W@Z
??1CGenericFile@@UAE@XZ
??1CLockCS@@UAE@XZ
??1CLockEvent@@UAE@XZ
??1CLockMutex@@UAE@XZ
??1CMultiReadLock@@QAE@XZ
??1CMultiReadLockLocal@@QAE@XZ
??1COptex@@QAE@XZ
??1CStr@@QAE@XZ
??4CGenericFile@@QAEAAV0@ABV0@@Z
??4CLock@@QAEAAV0@ABV0@@Z
??4CLockCS@@QAEAAV0@ABV0@@Z
??4CLockEvent@@QAEAAV0@ABV0@@Z
??4CLockMutex@@QAEAAV0@ABV0@@Z
??4CMultiReadLock@@QAEAAV0@ABV0@@Z
??4CMultiReadLockLocal@@QAEAAV0@ABV0@@Z
??4COptex@@QAEAAV0@ABV0@@Z
??4CStr@@QAEAAV0@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??4CStr@@QAEAAV0@ABV0@@Z
??4CStr@@QAEAAV0@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??4CStr@@QAEAAV0@F@Z
??4CStr@@QAEAAV0@H@Z
??4CStr@@QAEAAV0@I@Z
??4CStr@@QAEAAV0@J@Z
??4CStr@@QAEAAV0@K@Z
??4CStr@@QAEAAV0@PAX@Z
??4CStr@@QAEAAV0@PBD@Z
??4CStr@@QAEAAV0@PB_W@Z
??4CStr@@QAEAAV0@_J@Z
??4CStr@@QAEAAV0@_K@Z
??4CStr@@QAEAAV0@_W@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
??BCGenericFile@@QAEPADXZ
??BCGenericFile@@QAEPAEXZ
??BCGenericFile@@QAEPAFXZ
??BCGenericFile@@QAEPAGXZ
??BCGenericFile@@QAEPAHXZ
??BCGenericFile@@QAEPAIXZ
??BCGenericFile@@QAEPAJXZ
??BCGenericFile@@QAEPAKXZ
??BCGenericFile@@QAEPAXXZ
??BCGenericFile@@QAEPA_JXZ
??BCGenericFile@@QAEPA_KXZ
??BCGenericFile@@QAEPBDXZ
??BCGenericFile@@QAEPBEXZ
??BCGenericFile@@QAEPBFXZ
??BCGenericFile@@QAEPBGXZ
??BCGenericFile@@QAEPBHXZ
??BCGenericFile@@QAEPBIXZ
??BCGenericFile@@QAEPBJXZ
??BCGenericFile@@QAEPBKXZ
??BCGenericFile@@QAEPBXXZ
??BCGenericFile@@QAEPB_JXZ
??BCGenericFile@@QAEPB_KXZ
??BCStr@@QAEAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
??BCStr@@QAEABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
??BCStr@@QAEPBDXZ
??BCStr@@QBEABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
??BCStr@@QBEFXZ
??BCStr@@QBEHXZ
??BCStr@@QBEJXZ
??BCStr@@QBEKXZ
??BCStr@@QBEPB_WXZ
??BCStr@@QBE_JXZ
??BCStr@@QBE_NXZ
??BCStr@@QBE_WXZ
??ECGenericFile@@QAEAAV0@H@Z
??ECGenericFile@@QAEAAV0@XZ
??FCGenericFile@@QAEAAV0@H@Z
??FCGenericFile@@QAEAAV0@XZ
??YCGenericFile@@QAEAAV0@_J@Z
??YCStr@@QAEAAV0@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??YCStr@@QAEAAV0@ABU_SRawData@@@Z
??YCStr@@QAEAAV0@ABV0@@Z
??YCStr@@QAEAAV0@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??YCStr@@QAEAAV0@F@Z
??YCStr@@QAEAAV0@H@Z
??YCStr@@QAEAAV0@I@Z
??YCStr@@QAEAAV0@J@Z
??YCStr@@QAEAAV0@K@Z
??YCStr@@QAEAAV0@PA_W@Z
??YCStr@@QAEAAV0@PB_W@Z
??YCStr@@QAEAAV0@_J@Z
??YCStr@@QAEAAV0@_K@Z
??YCStr@@QAEAAV0@_N@Z
??YCStr@@QAEAAV0@_W@Z
??ZCGenericFile@@QAEAAV0@_J@Z
??_7CGenericFile@@6B@
??_7CLock@@6B@
??_7CLockCS@@6B@
??_7CLockEvent@@6B@
??_7CLockMutex@@6B@
??_FCLockEvent@@QAEXXZ
?AddFilePart@CStr@@QAEKPB_W0@Z
?AddTrailingFolderSeparator@CStr@@QAEKXZ
?AllocCachedBlock@CGenericFile@@AAEPAXPBXI@Z
?CacheThisBlock@CGenericFile@@AAE_N_KPBXI_J@Z
?ChangeNameOnlyInPath@CStr@@QAEKPB_W@Z
?ChangeSmallFileLimit@CGenericFile@@QAEK_K@Z
?ClearConversion@CStr@@QAEXXZ
?CloseFile@CGenericFile@@QAEKXZ
?CommonConstructor@COptex@@AAEHPAXHK@Z
?ConvertErrorToString@CStr@@QAEKK@Z
?ConvertToFolder@CStr@@QAEKXZ
?ConvertToFullPathName@CStr@@QAEKXZ
?ConvertToRealFile@CStr@@QAEK_N@Z
?CopyFileBlock@CGenericFile@@QAEK_K00AAV1@@Z
?CopyFileBlock@CGenericFile@@QAEK_K00PB_W@Z
?CountPathParts@CStr@@QBEHXZ
?CreateKernelObjectName@CStr@@QAEKABV1@_N@Z
?DelFilePart@CStr@@QAEKPB_W@Z
?DelStartup@CStr@@QAE_NABV1@@Z
?DelTrailingFolderSeparator@CStr@@QAEK_N00@Z
?DeleteFileW@CGenericFile@@QAEK_N0@Z
?Enter@COptex@@QAEXXZ
?EnterExclusive@CMultiReadLock@@QAEXXZ
?EnterExclusive@CMultiReadLockLocal@@QAEXXZ
?EnterShared@CMultiReadLock@@QAEXXZ
?EnterShared@CMultiReadLockLocal@@QAEXXZ
?EraseQuotes@CStr@@QAEK_N@Z
?ExpandEnvironment@CStr@@QAEKXZ
?FillFileBlock@CGenericFile@@QAEK_K0E@Z
?FillSimulatedMap@CGenericFile@@AAEKPAX_KI@Z
?FormFileName@CStr@@QAEKPB_W00@Z
?FreeBlockCache@CGenericFile@@AAEXXZ
?FreeCachedBlock@CGenericFile@@AAEXPAX@Z
?FreeDiskFileName@CGenericFile@@QAEXPA_W@Z
?GetAPIHandle@CGenericFile@@QBEPAXXZ
?GetCachedBlock@CGenericFile@@AAEPBX_K_J@Z
?GetContainer@CGenericFile@@QBEPAV1@XZ
?GetContainerOffset@CGenericFile@@QBE_JXZ
?GetCurFol@CStr@@QAEKXZ
?GetCurProcName@CStr@@QAEKXZ
?GetDate@CStr@@QAEK_N@Z
?GetDiskFileName@CGenericFile@@QAEKAAVCStr@@0_NPAPA_W@Z
?GetEnvVar@CStr@@QAEKPB_W@Z
?GetEnvVarS@CStr@@QAEKABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetFileHandle@CGenericFile@@QBEPAXXZ
?GetFileTimes@CGenericFile@@QAEKPA_K000@Z
?GetImageSize@CGenericFile@@QAEKXZ
?GetMapEndOff@CGenericFile@@QBE_KXZ
?GetMapOff@CGenericFile@@QBE_KXZ
?GetMapSize@CGenericFile@@QBEIXZ
?GetModName@CStr@@QAEKPAX_N@Z
?GetModPath@CStr@@QAEKPAX_N@Z
?GetName@CGenericFile@@QBEABVCStr@@XZ
?GetOffsetAddress@CGenericFile@@QAEPAX_KI@Z
?GetOffsetAddress@CGenericFile@@QAEPAX_KIPAI@Z
?GetPrivilegedAccess@CGenericFile@@QBEEXZ
?GetRawAddress@CGenericFile@@QBEQAXXZ
?GetRawEndAddress@CGenericFile@@QBEQAXXZ
?GetReadFilter@CGenericFile@@QBEP6AIPAXII_KK0@ZXZ
?GetReadParam@CGenericFile@@QBEPAXXZ
?GetReadSupplier@CGenericFile@@QBEP6AIPAX_KIPAK0@ZXZ
?GetRootName@CStr@@QAEKAAV1@_N@Z
?GetStringAddress@CGenericFile@@QAEPAD_KIPAI@Z
?GetSystemVariable@CStr@@QAEKPB_W@Z
?GetTempFile@CStr@@QAEKPAK@Z
?GetTempPathW@CStr@@QAEKPB_W@Z
?GetTime@CStr@@QAEKXZ
?GetUserFullName@CStr@@QAEKPAEK@Z
?HasWritableMap@CGenericFile@@QBE_NXZ
?Init1@CStr@@AAEXXZ
?Init@CStr@@AAEXXZ
?InitBlockCache@CGenericFile@@AAEKHH@Z
?InitContainer@CGenericFile@@QAEKP6AIPAX_KIPAK0@Z01@Z
?InitContainer@CGenericFile@@QAEKPAV1@_J_K@Z
?InitFile@CGenericFile@@QAEKABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?InitFile@CGenericFile@@QAEKABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z
?InitFile@CGenericFile@@QAEKHH_NKPAXI@Z
?InitFile@CGenericFile@@QAEKI@Z
?InitFile@CGenericFile@@QAEKKPAXPEBXI@Z
?InitFile@CGenericFile@@QAEKPAXH_NKI@Z
?InitFile@CGenericFile@@QAEKPBXI_N@Z
?InitFile@CGenericFile@@QAEKPB_W@Z
?InitTempFile@CGenericFile@@QAEKKPB_WPAKK@Z
?IsChar@CStr@@QBE_NI_W@Z
?IsCharArchiveSep@CStr@@QBE_NI@Z
?IsCharFolderSep@CStr@@QBE_NI@Z
?IsIterator@CGenericFile@@QBE_NXZ
?IsMemOnly@CGenericFile@@QBE_NXZ
?IsOK@CMultiReadLock@@QAEHXZ
?IsOK@COptex@@QAEHXZ
?IsOpen@CGenericFile@@QBE_NXZ
?IsPrivilegedAccess@CGenericFile@@QBE_NXZ
?IsSharingIgnored@CGenericFile@@QBE_NXZ
?IsSimulatedMap@CGenericFile@@QBE_NXZ
?IsUserMemory@CGenericFile@@QBE_NXZ
?IsWritableMap@CGenericFile@@QBEDXZ
?IsWrite@CGenericFile@@QBEDXZ
?IteratorCount@CGenericFile@@QBEHXZ
?LastChar@CStr@@QAEHXZ
?Leave@COptex@@QAEXXZ
?LeaveExclusive@CMultiReadLock@@QAEXXZ
?LeaveExclusive@CMultiReadLockLocal@@QAEXXZ
?LeaveShared@CMultiReadLock@@QAEXXZ
?LeaveShared@CMultiReadLockLocal@@QAEXXZ
?MoveFileW@CGenericFile@@QAEKPB_WH@Z
?Normalize@CStr@@QAEX_N@Z
?Reassign@CGenericFile@@QAEXAAV1@H@Z
?RegistryReadString@CStr@@QAEKPAUHKEY__@@PB_W@Z
?Remap@CGenericFile@@AAEK_J_N@Z
?ReopenFile@CGenericFile@@QAEKPAH@Z
?ResetFileTime@CGenericFile@@AAEKXZ
?SaveName@CStr@@QAEKPA_WI@Z
?SavePath@CStr@@QAEKPA_WI@Z
?SetBlockCache@CGenericFile@@QAEKHH@Z
?SetFileAttributesW@CGenericFile@@QAEKK@Z
?SetReadFilter@CGenericFile@@QAEXP6AIPAXII_KK0@Z0@Z
?SetSpinCount@COptex@@QAEXK@Z
?ShrinkBlockCache@CGenericFile@@AAEK_NH@Z
?SplitToRealAndVirtual@CStr@@QBEKAAV1@0_N@Z
?SyncContainer@CGenericFile@@AAEKK@Z
?TryEnter@COptex@@QAEHXZ
?UnlockFile@CGenericFile@@QAEKPAH@Z
?WasFileOpened@CGenericFile@@QBE_NXZ
?Write@CStr@@QBEKPAX@Z
?_Close@CGenericFile@@AAEKXZ
?attrib@CGenericFile@@QBEKXZ
?begindirectaccess@CGenericFile@@QAE_N_J@Z
?begindirectaccess_keepsize@CGenericFile@@QAE_N_J@Z
?begindirectaccessw@CGenericFile@@QAE_N_J@Z
?cleanerror@CGenericFile@@QAEXXZ
?closedirectaccess@CGenericFile@@QAE_NXZ
?compare_nocase@CStr@@QBEHABV1@I@Z
?compare_nocase@CStr@@QBEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@I@Z
?compare_nocase@CStr@@QBEHPB_WI@Z
?compare_path@CStr@@QBEHPB_W_N@Z
?crc32@CStr@@QAEK_N0@Z
?empty@CGenericFile@@QBE_NXZ
?error@CGenericFile@@QBEKXZ
?existsondisk@CGenericFile@@QAE_N_N0@Z
?fullinmemory@CGenericFile@@QBE_NXZ
?geof@CGenericFile@@QBE_NXZ
?ggetc@CGenericFile@@QAEHXZ
?gputc@CGenericFile@@QAEHH@Z
?hasattrib@CGenericFile@@QBE_NK@Z
?hashblock@CGenericFile@@QAEK_K0KPAX1@Z
?name@CLockEvent@@QBEABVCStr@@XZ
?name@CLockMutex@@QBEABVCStr@@XZ
?partcount@CGenericFile@@ABEIXZ
?partsize@CGenericFile@@ABEIXZ
?pulse@CLockEvent@@UBEKXZ
?read1@CGenericFile@@QAEHXZ
?read@CGenericFile@@QAE_NPAXAAI@Z
?readin@CGenericFile@@QAE_NPAXI@Z
?release@CLockCS@@UBEKXZ
?release@CLockEvent@@UBEKXZ
?release@CLockMutex@@UBEKXZ
?rename@CGenericFile@@QAE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?rename@CGenericFile@@QAE_NPB_W@Z
?resize@CGenericFile@@QAEK_J_N@Z
?rest@CGenericFile@@QBE_KXZ
?seek@CGenericFile@@QAE_N_J@Z
?seek@CGenericFile@@QAE_N_JH@Z
?seekin@CGenericFile@@QAE_N_J@Z
?seekin@CGenericFile@@QAE_N_JH@Z
?seekread@CGenericFile@@QAE_N_JPAXAAI@Z
?seekreadin@CGenericFile@@QAE_N_JPAXI@Z
?seekwritein@CGenericFile@@QAE_N_JPBXI@Z
?sfl@CGenericFile@@QBEIXZ
?sharemode@CGenericFile@@QBE_NXZ
?size@CGenericFile@@QBE_KXZ
?tell@CGenericFile@@QBE_KXZ
?wait@CLockCS@@UBEKK@Z
?wait@CLockEvent@@UBEKK@Z
?wait@CLockMutex@@UBEKK@Z
?write@CGenericFile@@QAE_NPBXAAI@Z
?writeaccess@CGenericFile@@QBE_NXZ
?writein@CGenericFile@@QAE_NPBXI@Z
?writesafe@CGenericFile@@QAE_NPBXAAIK@Z
CheckLzmaProperties
ConvertDosPathToNtPath
ConvertGuidPathToNtPath
ConvertNtPathToDosPath
ConvertNtPathToGuidPath
DSA_BlockVerify
DSA_FileGetSig
DSA_FileVerify
DSA_FileVerifyWithSigCompare
DSA_Verify
EncodeLzmaProperties
FreeCertificatesAndCache
GetFileSignDetails
GetFileSignatureDetails
GetFileSignatureStatus
GetLzmaAlloc
InitStoredCertificates
LZMA_close
LZMA_open
LZMA_read
LZMA_tellin
LimitCurrentThreadCPU
LimitThreadCPU
LzmaDecompress
StreamHashAdd
StreamHashClose
StreamHashGet
StreamHashInit
aswcmnbsDllMain
base64Decode
base64Encode
cmdlineAddParameterDefinition
cmdlineClose
cmdlineGetParameterCount
cmdlineGetParameterDetails
cmdlineGetParameterValid
cmdlineGetRawCount
cmdlineGetRawParameter
cmdlineGetValueLong
cmdlineGetValueShort
cmdlineGetWrongParameter
cmdlineGetWrongParameterCount
cmdlineInitFromConsole
cmdlineInitFromWindowApp
cmdlineInitialize
cmnbFree
cmnbInit
cmnsInitializeSecureStorage
cmnsReadSecureData
cmnsUpdateSecureStorageToV2
cmnsWriteSecureData
cyphSimpleCodeFile
cyphSimpleGetKey
dep_dbgGetDumpFileName
dep_dbgWriteDump
fsGetAmsCertFile
fsGetAvastDataPath
fsGetAvastEnginePath
fsGetAvastFwDataPath
fsGetAvastIntegrityPath
fsGetAvastJournalPath
fsGetAvastJournalPathUtf8
fsGetAvastKeyPath
fsGetAvastLicenseFile
fsGetAvastLogPath
fsGetAvastMovedPath
fsGetAvastOemString
fsGetAvastProgramPath
fsGetAvastRegistryKey
fsGetAvastReportPath
fsGetAvastSumpPath
fsGetAvastTempFileName
fsGetAvastTempPath
fsGetDriveStrings
fsIsCriticalSystemFile
fsReadFileFromName
fsReadFileLine
fsSetAvastDataPath
fsSetAvastEnginePath
fsSetAvastLicenseFile
fsSetAvastProgramPath
fsSetAvastRegistryKey
fsSetAvastTempPath
fsSetDefMappingSize
ggzappend
ggzclose
ggzcrc
ggzeof
ggzerr
ggzflush
ggzopen
ggzread
ggzrewind
ggzseek
ggzsetparams
ggztell
ggztellin
ggzwrite
iniExtractFromFile
iniExtractFromHandle
iniExtractFromMap
iniGetAvastIniString
iniGetAvastIniValue
iniGetPrivateProfileInt
iniGetPrivateProfileString
iniReadFile
iniSetAvastIniValue
iniWritePrivateProfileComment
iniWritePrivateProfileInt
iniWritePrivateProfileString
intfQueryInterfaceWithID
intfQueryInterfaceWithPath
intfReferenceInterface
intfReleaseInterface
mdaCheckDataFileValidity
mdaGenerateFromHandle
mdaGenerateFromName
mdaWriteDataFileValidity
osExecAndRetrieveConsoleOutput
regFixRegistryString
secCreateKernelObjectName
secCreateSharedEvent
secCreateSharedEventEx
secCreateSharedEventInSession
secCreateSharedEventInSessionEx
secCreateSharedFileMapping
secCreateSharedFileMappingInSession
secCreateSharedMutex
secCreateSharedMutexEx
secCreateSharedMutexInSession
secCreateSharedMutexInSessionEx
secCreateSharedSemaphore
secCreateSharedSemaphoreEx
secCreateSharedSemaphoreInSession
secCreateSharedSemaphoreInSessionEx
secImpersonateAsExplorer
secImpersonateAsUser
secIsAswSP
secIsProcessTrusted
secIsSelfDefenseEnabled
secOpenSharedEvent
secOpenSharedEventInSession
secOpenSharedFileMapping
secOpenSharedFileMappingInSession
secOpenSharedMutex
secOpenSharedMutexInSession
secOpenSharedSemaphore
secOpenSharedSemaphoreInSession
secPreventHookDllInjection
sha256GenerateFromHandle
sha256GenerateFromName
strAssignSpecialTempPath
strCountPathParts
strFindMemoryBuffer
strFindMemoryBytes
strGetDisplayFileName
strMatchesWildcards
strReplaceCharacter
strReplaceCharacterA
strReplaceCharacterAS
strReplaceCharacterS
svcIsServiceInstalled
svcIsServiceRunning
svcServiceGetBinaryName
svcServiceInstall
svcServiceInstallEx
svcServiceRun
svcServiceSetExitCode
svcServiceStart
svcServiceStop2
svcServiceUninstall
threadCheckAll
threadStart
threadStop
usnCheckVolume
usnClean
usnCleanObsoleteDBS
usnCloseTracker
usnCreateDirCheckpoint
usnCreateFileCheckpoint
usnDeleteFileCheckpoint
usnGetCommitedRecordsCount
usnGetMaskFileCheckpoint
usnOpenTracker
usnPurgeDatabase
usnSaveAll
usnSaveDatabase
usnSetWorkingFolder
usnUpdateDriveFlags
usnUpdateFlags
usnValidateDatabaseFile
usnValidateDatabaseFiles
usnValidateFileCheckpoint
uuDecode
uuEncode
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ