Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
310c25c12372932fc581e5eedd0e334a5f17788dfa860e271bbc46a1c9704c49.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
310c25c12372932fc581e5eedd0e334a5f17788dfa860e271bbc46a1c9704c49.dll
Resource
win10v2004-20221111-en
Target
310c25c12372932fc581e5eedd0e334a5f17788dfa860e271bbc46a1c9704c49
Size
1.9MB
MD5
77e9788b0106ba9c237a9f961764db88
SHA1
4c3e48e973714b4846386d930d23dc9a4fb400ad
SHA256
310c25c12372932fc581e5eedd0e334a5f17788dfa860e271bbc46a1c9704c49
SHA512
e8f927dd5e364e2660671c0b5740013c6affa3baeb3b28c91b291757c7e709a67e0df4b33b916fc1dc011c265ff1b028c439e78a14226e68fb48f8ddd9830ca6
SSDEEP
24576:nUbfshPG3HL183eJrT88YXA7EAA08NBodGwO+DuAnVaTDJWzz2WsppjDKcRqeINA:PhPG3HL18orYpXLS8NEpID0ZStRCc7J5
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WChar2Char
?GetItemSize@CBaseArray@@UBEJXZ
?ConfigCloseIni@@YAHPAX@Z
GetVersionExW
IsDebuggerPresent
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
OpenClipboard
DeleteDC
RegCreateKeyExW
SHGetFolderPathW
CoCreateGuid
SetupDiDestroyDeviceInfoList
HidD_GetAttributes
??0?$CDynArray@J@@QAE@ABV0@@Z
??0?$CDynArray@J@@QAE@XZ
??0?$CDynArray@PAUtag_FATFileModifyInfo@@@@QAE@ABV0@@Z
??0?$CDynArray@PAUtag_FATFileModifyInfo@@@@QAE@XZ
??0?$CDynArray@PAUtag_FILEINFO_Attribute@@@@QAE@ABV0@@Z
??0?$CDynArray@PAUtag_FILEINFO_Attribute@@@@QAE@XZ
??0?$CDynArray@PAV?$CDynArray@Utag_DataRun@@@@@@QAE@ABV0@@Z
??0?$CDynArray@PAV?$CDynArray@Utag_DataRun@@@@@@QAE@XZ
??0?$CDynArray@PAVCDisk@@@@QAE@ABV0@@Z
??0?$CDynArray@PAVCDisk@@@@QAE@XZ
??0?$CDynArray@PAVCFileInfo@@@@QAE@ABV0@@Z
??0?$CDynArray@PAVCFileInfo@@@@QAE@XZ
??0?$CDynArray@PAVCFileRW@@@@QAE@ABV0@@Z
??0?$CDynArray@PAVCFileRW@@@@QAE@XZ
??0?$CDynArray@PAVCHDObject@@@@QAE@ABV0@@Z
??0?$CDynArray@PAVCHDObject@@@@QAE@XZ
??0?$CDynArray@PAVCIndexBlock@@@@QAE@ABV0@@Z
??0?$CDynArray@PAVCIndexBlock@@@@QAE@XZ
??0?$CDynArray@PAVCIndexNode@@@@QAE@ABV0@@Z
??0?$CDynArray@PAVCIndexNode@@@@QAE@XZ
??0?$CDynArray@PAVCIniCfg@@@@QAE@ABV0@@Z
??0?$CDynArray@PAVCPartition@@@@QAE@ABV0@@Z
??0?$CDynArray@PAVCPartition@@@@QAE@XZ
??0?$CDynArray@PAVCRecoveryBlock@@@@QAE@ABV0@@Z
??0?$CDynArray@PAVCRecoveryBlock@@@@QAE@XZ
??0?$CDynArray@UBATCH_OPERATION_PARAMETER@@@@QAE@ABV0@@Z
??0?$CDynArray@UBATCH_OPERATION_PARAMETER@@@@QAE@XZ
??0?$CDynArray@UCLONE_UNNECESSARYFOLDER@@@@QAE@ABV0@@Z
??0?$CDynArray@UCLONE_UNNECESSARYFOLDER@@@@QAE@XZ
??0?$CDynArray@UDESERTEDLOCKERID@@@@QAE@ABV0@@Z
??0?$CDynArray@UDESERTEDLOCKERID@@@@QAE@XZ
??0?$CDynArray@UHANDLEITEM@@@@QAE@ABV0@@Z
??0?$CDynArray@UHANDLEITEM@@@@QAE@XZ
??0?$CDynArray@ULDMPartitionSection@@@@QAE@ABV0@@Z
??0?$CDynArray@ULDMPartitionSection@@@@QAE@XZ
??0?$CDynArray@ULVM_Location@@@@QAE@ABV0@@Z
??0?$CDynArray@ULVM_Location@@@@QAE@XZ
??0?$CDynArray@UMFTPIECE@@@@QAE@ABV0@@Z
??0?$CDynArray@UMFTPIECE@@@@QAE@XZ
??0?$CDynArray@UPARTITIONHANDLEITEM@@@@QAE@ABV0@@Z
??0?$CDynArray@UPARTITIONHANDLEITEM@@@@QAE@XZ
??0?$CDynArray@Utag_AttrList@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_AttrList@@@@QAE@XZ
??0?$CDynArray@Utag_DataRun@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_DataRun@@@@QAE@XZ
??0?$CDynArray@Utag_ExtendFileReference@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_ExtendFileReference@@@@QAE@XZ
??0?$CDynArray@Utag_FATFileEntry@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_FATFileEntry@@@@QAE@XZ
??0?$CDynArray@Utag_FATFolderPosInfo@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_FATFolderPosInfo@@@@QAE@XZ
??0?$CDynArray@Utag_FATRecoveryPartitionInfo@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_FATRecoveryPartitionInfo@@@@QAE@XZ
??0?$CDynArray@Utag_FSError@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_FSError@@@@QAE@XZ
??0?$CDynArray@Utag_FileRecordInfo@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_FileRecordInfo@@@@QAE@XZ
??0?$CDynArray@Utag_FileTypeProperty@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_FrCache@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_FrCache@@@@QAE@XZ
??0?$CDynArray@Utag_FrOfFile@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_FrOfFile@@@@QAE@XZ
??0?$CDynArray@Utag_IOErrorItem@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_IOErrorItem@@@@QAE@XZ
??0?$CDynArray@Utag_IniSection@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_LVM_MetaInfo_LV@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_LVM_MetaInfo_LV@@@@QAE@XZ
??0?$CDynArray@Utag_LVM_MetaInfo_PV@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_LVM_MetaInfo_PV@@@@QAE@XZ
??0?$CDynArray@Utag_LVM_MetaInfo_Segment@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_LVM_MetaInfo_Segment@@@@QAE@XZ
??0?$CDynArray@Utag_LVM_MetaInfo_Stripes@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_LVM_MetaInfo_Stripes@@@@QAE@XZ
??0?$CDynArray@Utag_OriginPartInfo@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_OriginPartInfo@@@@QAE@XZ
??0?$CDynArray@Utag_PartitionTableError@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_PartitionTableError@@@@QAE@XZ
??0?$CDynArray@Utag_PendingHardlink@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_PendingHardlink@@@@QAE@XZ
??0?$CDynArray@Utag_PieceData@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_PieceData@@@@QAE@XZ
??0?$CDynArray@Utag_RecoveredNTFSPartitionInfo@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_RecoveredNTFSPartitionInfo@@@@QAE@XZ
??0?$CDynArray@Utag_SectorSection@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_SectorSection@@@@QAE@XZ
??0?$CDynArray@Utag_SectorsToSearch@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_SectorsToSearch@@@@QAE@XZ
??0?$CDynArray@Utag_UndoActionHeader@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_UndoActionHeader@@@@QAE@XZ
??0?$CDynArray@Utag_ext3_FileEntry@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_ext3_FileEntry@@@@QAE@XZ
??0?$CDynArray@Utag_reg_KeyInfo@@@@QAE@ABV0@@Z
??0?$CDynArray@Utag_reg_KeyInfo@@@@QAE@XZ
??0?$CDynArray@_J@@QAE@ABV0@@Z
??0?$CDynArray@_J@@QAE@XZ
??0?$CDynArray@_K@@QAE@ABV0@@Z
??0?$CDynArray@_K@@QAE@XZ
??0CAttributeList@@QAE@ABV0@@Z
??0CAttributeList@@QAE@G@Z
??0CBaseArray@@QAE@ABV0@@Z
??0CBaseList@@QAE@ABV0@@Z
??0CDisk@@QAE@ABV0@@Z
??0CDisk@@QAE@XZ
??0CDynTree@@QAE@ABV0@@Z
??0CDynTree@@QAE@XZ
??0CDynamicDisk@@QAE@ABV0@@Z
??0CDynamicDisk@@QAE@XZ
??0CEXT2@@QAE@ABV0@@Z
??0CEXT2@@QAE@PAVCDisk@@@Z
??0CEXT2Folder@@QAE@ABV0@@Z
??0CEXT2Folder@@QAE@PAVCPartition@@PAVCFileInfo@@@Z
??0CExtend@@QAE@ABV0@@Z
??0CExtend@@QAE@PAVCDisk@@@Z
??0CFAT12@@QAE@ABV0@@Z
??0CFAT12@@QAE@PAVCDisk@@@Z
??0CFAT16@@QAE@ABV0@@Z
??0CFAT16@@QAE@PAVCDisk@@@Z
??0CFAT32@@QAE@ABV0@@Z
??0CFAT32@@QAE@PAVCDisk@@@Z
??0CFAT@@QAE@ABV0@@Z
??0CFAT@@QAE@PAVCDisk@@@Z
??0CFATFolder@@QAE@ABV0@@Z
??0CFATFolder@@QAE@PAVCPartition@@PAVCFileInfo@@@Z
??0CFileIndex@@QAE@ABV0@@Z
??0CFileIndex@@QAE@PAVCNTFSFileInfo@@@Z
??0CFileInfo@@QAE@ABV0@@Z
??0CFileInfo@@QAE@PAVCPartition@@PAV0@@Z
??0CFileRW@@QAE@ABV0@@Z
??0CFileRW@@QAE@XZ
??0CFileTree@@QAE@ABV0@@Z
??0CFileTree@@QAE@XZ
??0CHDObject@@QAE@ABV0@@Z
??0CHDObject@@QAE@XZ
??0CIndexBlock@@QAE@ABV0@@Z
??0CIndexBlock@@QAE@PAVCNTFSFileInfo@@IPAV?$CDynArray@Utag_DataRun@@@@_K@Z
??0CIndexNode@@QAE@ABV0@@Z
??0CIndexNode@@QAE@PAVCNTFSFileInfo@@I@Z
??0CIndexRoot@@QAE@ABV0@@Z
??0CIndexRoot@@QAE@PAVCNTFSFileInfo@@I@Z
??0CInterfaceBase@@QAE@ABV0@@Z
??0CInterfaceBase@@QAE@XZ
??0CLVMVolumeGroup@@QAE@ABV0@@Z
??0CLVMVolumeGroup@@QAE@PAVCDisk@@PB_W@Z
??0CMFTFragment@@QAE@ABV0@@Z
??0CMFTFragment@@QAE@PAVCNTFS@@@Z
??0CNTFS@@QAE@ABV0@@Z
??0CNTFS@@QAE@PAVCDisk@@@Z
??0CNTFSFileInfo@@QAE@ABV0@@Z
??0CNTFSFileInfo@@QAE@PAVCNTFS@@PAVCFileInfo@@@Z
??0CNTFSFileMFT@@QAE@ABV0@@Z
??0CNTFSFileMFT@@QAE@PAVCNTFS@@PAVCFileInfo@@@Z
??0CNtfsIndex@@QAE@ABV0@@Z
??0CNtfsIndex@@QAE@PAVCNTFSFileInfo@@I@Z
??0CNtfsObject@@QAE@ABV0@@Z
??0CNtfsObject@@QAE@PAVCNTFSFileInfo@@I@Z
??0CObjectIdIndex@@QAE@ABV0@@Z
??0CObjectIdIndex@@QAE@PAVCNTFSFileInfo@@@Z
??0CPartition@@QAE@ABV0@@Z
??0CPartition@@QAE@PAVCDisk@@PB_W@Z
??0CReparseIndex@@QAE@ABV0@@Z
??0CReparseIndex@@QAE@PAVCNTFSFileInfo@@@Z
??0CSecurityIdIndex@@QAE@ABV0@@Z
??0CSecurityIdIndex@@QAE@PAVCNTFSFileInfo@@@Z
??0Hdrw_File@@QAE@ABV0@@Z
??0Hdrw_File@@QAE@PAVCPartition@@@Z
??1?$CDynArray@J@@UAE@XZ
??1?$CDynArray@PAUtag_FATFileModifyInfo@@@@UAE@XZ
??1?$CDynArray@PAUtag_FILEINFO_Attribute@@@@UAE@XZ
??1?$CDynArray@PAV?$CDynArray@Utag_DataRun@@@@@@UAE@XZ
??1?$CDynArray@PAVCDisk@@@@UAE@XZ
??1?$CDynArray@PAVCFileInfo@@@@UAE@XZ
??1?$CDynArray@PAVCFileRW@@@@UAE@XZ
??1?$CDynArray@PAVCHDObject@@@@UAE@XZ
??1?$CDynArray@PAVCIndexBlock@@@@UAE@XZ
??1?$CDynArray@PAVCIndexNode@@@@UAE@XZ
??1?$CDynArray@PAVCIniCfg@@@@UAE@XZ
??1?$CDynArray@PAVCPartition@@@@UAE@XZ
??1?$CDynArray@PAVCRecoveryBlock@@@@UAE@XZ
??1?$CDynArray@UBATCH_OPERATION_PARAMETER@@@@UAE@XZ
??1?$CDynArray@UCLONE_UNNECESSARYFOLDER@@@@UAE@XZ
??1?$CDynArray@UDESERTEDLOCKERID@@@@UAE@XZ
??1?$CDynArray@UHANDLEITEM@@@@UAE@XZ
??1?$CDynArray@ULDMPartitionSection@@@@UAE@XZ
??1?$CDynArray@ULVM_Location@@@@UAE@XZ
??1?$CDynArray@UMFTPIECE@@@@UAE@XZ
??1?$CDynArray@UPARTITIONHANDLEITEM@@@@UAE@XZ
??1?$CDynArray@Utag_AttrList@@@@UAE@XZ
??1?$CDynArray@Utag_DataRun@@@@UAE@XZ
??1?$CDynArray@Utag_ExtendFileReference@@@@UAE@XZ
??1?$CDynArray@Utag_FATFileEntry@@@@UAE@XZ
??1?$CDynArray@Utag_FATFolderPosInfo@@@@UAE@XZ
??1?$CDynArray@Utag_FATRecoveryPartitionInfo@@@@UAE@XZ
??1?$CDynArray@Utag_FSError@@@@UAE@XZ
??1?$CDynArray@Utag_FileRecordInfo@@@@UAE@XZ
??1?$CDynArray@Utag_FileTypeProperty@@@@UAE@XZ
??1?$CDynArray@Utag_FrCache@@@@UAE@XZ
??1?$CDynArray@Utag_FrOfFile@@@@UAE@XZ
??1?$CDynArray@Utag_IOErrorItem@@@@UAE@XZ
??1?$CDynArray@Utag_IniSection@@@@UAE@XZ
??1?$CDynArray@Utag_LVM_MetaInfo_LV@@@@UAE@XZ
??1?$CDynArray@Utag_LVM_MetaInfo_PV@@@@UAE@XZ
??1?$CDynArray@Utag_LVM_MetaInfo_Segment@@@@UAE@XZ
??1?$CDynArray@Utag_LVM_MetaInfo_Stripes@@@@UAE@XZ
??1?$CDynArray@Utag_OriginPartInfo@@@@UAE@XZ
??1?$CDynArray@Utag_PartitionTableError@@@@UAE@XZ
??1?$CDynArray@Utag_PendingHardlink@@@@UAE@XZ
??1?$CDynArray@Utag_PieceData@@@@UAE@XZ
??1?$CDynArray@Utag_RecoveredNTFSPartitionInfo@@@@UAE@XZ
??1?$CDynArray@Utag_SectorSection@@@@UAE@XZ
??1?$CDynArray@Utag_SectorsToSearch@@@@UAE@XZ
??1?$CDynArray@Utag_UndoActionHeader@@@@UAE@XZ
??1?$CDynArray@Utag_ext3_FileEntry@@@@UAE@XZ
??1?$CDynArray@Utag_reg_KeyInfo@@@@UAE@XZ
??1?$CDynArray@_J@@UAE@XZ
??1?$CDynArray@_K@@UAE@XZ
??1CAttributeList@@UAE@XZ
??1CDisk@@UAE@XZ
??1CDynTree@@UAE@XZ
??1CDynamicDisk@@UAE@XZ
??1CEXT2@@UAE@XZ
??1CEXT2Folder@@UAE@XZ
??1CExtend@@UAE@XZ
??1CFAT12@@UAE@XZ
??1CFAT16@@UAE@XZ
??1CFAT32@@UAE@XZ
??1CFAT@@UAE@XZ
??1CFATFolder@@UAE@XZ
??1CFileIndex@@UAE@XZ
??1CFileInfo@@UAE@XZ
??1CFileRW@@UAE@XZ
??1CFileTree@@UAE@XZ
??1CHDObject@@UAE@XZ
??1CIndexBlock@@UAE@XZ
??1CIndexNode@@UAE@XZ
??1CIndexRoot@@UAE@XZ
??1CLVMVolumeGroup@@UAE@XZ
??1CMFTFragment@@UAE@XZ
??1CNTFS@@UAE@XZ
??1CNTFSFileInfo@@UAE@XZ
??1CNTFSFileMFT@@UAE@XZ
??1CNtfsIndex@@UAE@XZ
??1CNtfsObject@@UAE@XZ
??1CObjectIdIndex@@UAE@XZ
??1CPartition@@UAE@XZ
??1CReparseIndex@@UAE@XZ
??1CSecurityIdIndex@@UAE@XZ
??1Hdrw_File@@UAE@XZ
??4?$CDynArray@J@@QAEAAV0@ABV0@@Z
??4?$CDynArray@PAUtag_FATFileModifyInfo@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@PAUtag_FILEINFO_Attribute@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@PAV?$CDynArray@Utag_DataRun@@@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@PAVCDisk@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@PAVCFileInfo@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@PAVCFileRW@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@PAVCHDObject@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@PAVCIndexBlock@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@PAVCIndexNode@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@PAVCIniCfg@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@PAVCPartition@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@PAVCRecoveryBlock@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@UBATCH_OPERATION_PARAMETER@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@UCLONE_UNNECESSARYFOLDER@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@UDESERTEDLOCKERID@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@UHANDLEITEM@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@ULDMPartitionSection@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@ULVM_Location@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@UMFTPIECE@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@UPARTITIONHANDLEITEM@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_AttrList@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_DataRun@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_ExtendFileReference@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_FATFileEntry@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_FATFolderPosInfo@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_FATRecoveryPartitionInfo@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_FSError@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_FileRecordInfo@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_FileTypeProperty@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_FrCache@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_FrOfFile@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_IOErrorItem@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_IniSection@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_LVM_MetaInfo_LV@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_LVM_MetaInfo_PV@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_LVM_MetaInfo_Segment@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_LVM_MetaInfo_Stripes@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_OriginPartInfo@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_PartitionTableError@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_PendingHardlink@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_PieceData@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_RecoveredNTFSPartitionInfo@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_SectorSection@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_SectorsToSearch@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_UndoActionHeader@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_ext3_FileEntry@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@Utag_reg_KeyInfo@@@@QAEAAV0@ABV0@@Z
??4?$CDynArray@_J@@QAEAAV0@ABV0@@Z
??4?$CDynArray@_K@@QAEAAV0@ABV0@@Z
??4CAttributeList@@QAEAAV0@ABV0@@Z
??4CBaseArray@@QAEAAV0@ABV0@@Z
??4CBaseList@@QAEAAV0@ABV0@@Z
??4CDisk@@QAEAAV0@ABV0@@Z
??4CDynTree@@QAEAAV0@ABV0@@Z
??4CDynamicDisk@@QAEAAV0@ABV0@@Z
??4CEXT2@@QAEAAV0@ABV0@@Z
??4CEXT2Folder@@QAEAAV0@ABV0@@Z
??4CExtend@@QAEAAV0@ABV0@@Z
??4CFAT12@@QAEAAV0@ABV0@@Z
??4CFAT16@@QAEAAV0@ABV0@@Z
??4CFAT32@@QAEAAV0@ABV0@@Z
??4CFAT@@QAEAAV0@ABV0@@Z
??4CFATFolder@@QAEAAV0@ABV0@@Z
??4CFileIndex@@QAEAAV0@ABV0@@Z
??4CFileInfo@@QAEAAV0@ABV0@@Z
??4CFileRW@@QAEAAV0@ABV0@@Z
??4CFileTree@@QAEAAV0@ABV0@@Z
??4CHDObject@@QAEAAV0@ABV0@@Z
??4CIndexBlock@@QAEAAV0@ABV0@@Z
??4CIndexNode@@QAEAAV0@ABV0@@Z
??4CIndexRoot@@QAEAAV0@ABV0@@Z
??4CInterfaceBase@@QAEAAV0@ABV0@@Z
??4CLVMVolumeGroup@@QAEAAV0@ABV0@@Z
??4CListItem@@QAEAAV0@ABV0@@Z
??4CMFTFragment@@QAEAAV0@ABV0@@Z
??4CNTFS@@QAEAAV0@ABV0@@Z
??4CNTFSFileInfo@@QAEAAV0@ABV0@@Z
??4CNTFSFileMFT@@QAEAAV0@ABV0@@Z
??4CNtfsIndex@@QAEAAV0@ABV0@@Z
??4CNtfsObject@@QAEAAV0@ABV0@@Z
??4CObjectIdIndex@@QAEAAV0@ABV0@@Z
??4CPartition@@QAEAAV0@ABV0@@Z
??4CReparseIndex@@QAEAAV0@ABV0@@Z
??4CSecurityIdIndex@@QAEAAV0@ABV0@@Z
??4Hdrw_File@@QAEAAV0@ABV0@@Z
??_7?$CDynArray@J@@6B@
??_7?$CDynArray@PAUtag_FATFileModifyInfo@@@@6B@
??_7?$CDynArray@PAUtag_FILEINFO_Attribute@@@@6B@
??_7?$CDynArray@PAV?$CDynArray@Utag_DataRun@@@@@@6B@
??_7?$CDynArray@PAVCDisk@@@@6B@
??_7?$CDynArray@PAVCFileInfo@@@@6B@
??_7?$CDynArray@PAVCFileRW@@@@6B@
??_7?$CDynArray@PAVCHDObject@@@@6B@
??_7?$CDynArray@PAVCIndexBlock@@@@6B@
??_7?$CDynArray@PAVCIndexNode@@@@6B@
??_7?$CDynArray@PAVCIniCfg@@@@6B@
??_7?$CDynArray@PAVCPartition@@@@6B@
??_7?$CDynArray@PAVCRecoveryBlock@@@@6B@
??_7?$CDynArray@UBATCH_OPERATION_PARAMETER@@@@6B@
??_7?$CDynArray@UCLONE_UNNECESSARYFOLDER@@@@6B@
??_7?$CDynArray@UDESERTEDLOCKERID@@@@6B@
??_7?$CDynArray@UHANDLEITEM@@@@6B@
??_7?$CDynArray@ULDMPartitionSection@@@@6B@
??_7?$CDynArray@ULVM_Location@@@@6B@
??_7?$CDynArray@UMFTPIECE@@@@6B@
??_7?$CDynArray@UPARTITIONHANDLEITEM@@@@6B@
??_7?$CDynArray@Utag_AttrList@@@@6B@
??_7?$CDynArray@Utag_DataRun@@@@6B@
??_7?$CDynArray@Utag_ExtendFileReference@@@@6B@
??_7?$CDynArray@Utag_FATFileEntry@@@@6B@
??_7?$CDynArray@Utag_FATFolderPosInfo@@@@6B@
??_7?$CDynArray@Utag_FATRecoveryPartitionInfo@@@@6B@
??_7?$CDynArray@Utag_FSError@@@@6B@
??_7?$CDynArray@Utag_FileRecordInfo@@@@6B@
??_7?$CDynArray@Utag_FileTypeProperty@@@@6B@
??_7?$CDynArray@Utag_FrCache@@@@6B@
??_7?$CDynArray@Utag_FrOfFile@@@@6B@
??_7?$CDynArray@Utag_IOErrorItem@@@@6B@
??_7?$CDynArray@Utag_IniSection@@@@6B@
??_7?$CDynArray@Utag_LVM_MetaInfo_LV@@@@6B@
??_7?$CDynArray@Utag_LVM_MetaInfo_PV@@@@6B@
??_7?$CDynArray@Utag_LVM_MetaInfo_Segment@@@@6B@
??_7?$CDynArray@Utag_LVM_MetaInfo_Stripes@@@@6B@
??_7?$CDynArray@Utag_OriginPartInfo@@@@6B@
??_7?$CDynArray@Utag_PartitionTableError@@@@6B@
??_7?$CDynArray@Utag_PendingHardlink@@@@6B@
??_7?$CDynArray@Utag_PieceData@@@@6B@
??_7?$CDynArray@Utag_RecoveredNTFSPartitionInfo@@@@6B@
??_7?$CDynArray@Utag_SectorSection@@@@6B@
??_7?$CDynArray@Utag_SectorsToSearch@@@@6B@
??_7?$CDynArray@Utag_UndoActionHeader@@@@6B@
??_7?$CDynArray@Utag_ext3_FileEntry@@@@6B@
??_7?$CDynArray@Utag_reg_KeyInfo@@@@6B@
??_7?$CDynArray@_J@@6B@
??_7?$CDynArray@_K@@6B@
??_7CAttributeList@@6B@
??_7CBaseArray@@6B@
??_7CBaseList@@6B@
??_7CDisk@@6B@
??_7CDynTree@@6B@
??_7CDynamicDisk@@6B@
??_7CEXT2@@6B@
??_7CEXT2Folder@@6B@
??_7CExtend@@6B@
??_7CFAT12@@6B@
??_7CFAT16@@6B@
??_7CFAT32@@6B@
??_7CFAT@@6B@
??_7CFATFolder@@6B@
??_7CFileIndex@@6B@
??_7CFileInfo@@6B@
??_7CFileRW@@6B@
??_7CFileTree@@6B@
??_7CHDObject@@6B@
??_7CIndexBlock@@6B@
??_7CIndexNode@@6B@
??_7CIndexRoot@@6B@
??_7CInterfaceBase@@6B@
??_7CLVMVolumeGroup@@6B@
??_7CMFTFragment@@6B@
??_7CNTFS@@6B@
??_7CNTFSFileInfo@@6B@
??_7CNTFSFileMFT@@6B@
??_7CNtfsIndex@@6B@
??_7CNtfsObject@@6B@
??_7CObjectIdIndex@@6B@
??_7CPartition@@6B@
??_7CReparseIndex@@6B@
??_7CSecurityIdIndex@@6B@
??_7Hdrw_File@@6B@
??_FCEXT2Folder@@QAEXXZ
??_FCFATFolder@@QAEXXZ
??_FCFileInfo@@QAEXXZ
?ActivePartition@CDisk@@QAE_JPAVCPartition@@_J@Z
?Add@?$CDynArray@J@@QAEJJ@Z
?Add@?$CDynArray@PAUtag_FATFileModifyInfo@@@@QAEJPAUtag_FATFileModifyInfo@@@Z
?Add@?$CDynArray@PAUtag_FILEINFO_Attribute@@@@QAEJPAUtag_FILEINFO_Attribute@@@Z
?Add@?$CDynArray@PAVCDisk@@@@QAEJPAVCDisk@@@Z
?Add@?$CDynArray@PAVCFileInfo@@@@QAEJPAVCFileInfo@@@Z
?Add@?$CDynArray@PAVCIndexBlock@@@@QAEJPAVCIndexBlock@@@Z
?Add@?$CDynArray@PAVCIndexNode@@@@QAEJPAVCIndexNode@@@Z
?Add@?$CDynArray@PAVCPartition@@@@QAEJPAVCPartition@@@Z
?Add@?$CDynArray@PAVCRecoveryBlock@@@@QAEJPAVCRecoveryBlock@@@Z
?Add@?$CDynArray@UBATCH_OPERATION_PARAMETER@@@@QAEJUBATCH_OPERATION_PARAMETER@@@Z
?Add@?$CDynArray@UCLONE_UNNECESSARYFOLDER@@@@QAEJUCLONE_UNNECESSARYFOLDER@@@Z
?Add@?$CDynArray@UDESERTEDLOCKERID@@@@QAEJUDESERTEDLOCKERID@@@Z
?Add@?$CDynArray@UHANDLEITEM@@@@QAEJUHANDLEITEM@@@Z
?Add@?$CDynArray@ULDMPartitionSection@@@@QAEJULDMPartitionSection@@@Z
?Add@?$CDynArray@ULVM_Location@@@@QAEJULVM_Location@@@Z
?Add@?$CDynArray@UMFTPIECE@@@@QAEJUMFTPIECE@@@Z
?Add@?$CDynArray@UPARTITIONHANDLEITEM@@@@QAEJUPARTITIONHANDLEITEM@@@Z
?Add@?$CDynArray@Utag_AttrList@@@@QAEJUtag_AttrList@@@Z
?Add@?$CDynArray@Utag_DataRun@@@@QAEJUtag_DataRun@@@Z
?Add@?$CDynArray@Utag_ExtendFileReference@@@@QAEJUtag_ExtendFileReference@@@Z
?Add@?$CDynArray@Utag_FATFileEntry@@@@QAEJUtag_FATFileEntry@@@Z
?Add@?$CDynArray@Utag_FATFolderPosInfo@@@@QAEJUtag_FATFolderPosInfo@@@Z
?Add@?$CDynArray@Utag_FSError@@@@QAEJUtag_FSError@@@Z
?Add@?$CDynArray@Utag_FileRecordInfo@@@@QAEJUtag_FileRecordInfo@@@Z
?Add@?$CDynArray@Utag_FrCache@@@@QAEJUtag_FrCache@@@Z
?Add@?$CDynArray@Utag_FrOfFile@@@@QAEJUtag_FrOfFile@@@Z
?Add@?$CDynArray@Utag_IOErrorItem@@@@QAEJUtag_IOErrorItem@@@Z
?Add@?$CDynArray@Utag_LVM_MetaInfo_LV@@@@QAEJUtag_LVM_MetaInfo_LV@@@Z
?Add@?$CDynArray@Utag_LVM_MetaInfo_PV@@@@QAEJUtag_LVM_MetaInfo_PV@@@Z
?Add@?$CDynArray@Utag_LVM_MetaInfo_Segment@@@@QAEJUtag_LVM_MetaInfo_Segment@@@Z
?Add@?$CDynArray@Utag_LVM_MetaInfo_Stripes@@@@QAEJUtag_LVM_MetaInfo_Stripes@@@Z
?Add@?$CDynArray@Utag_OriginPartInfo@@@@QAEJUtag_OriginPartInfo@@@Z
?Add@?$CDynArray@Utag_PartitionTableError@@@@QAEJUtag_PartitionTableError@@@Z
?Add@?$CDynArray@Utag_PendingHardlink@@@@QAEJUtag_PendingHardlink@@@Z
?Add@?$CDynArray@Utag_RecoveredNTFSPartitionInfo@@@@QAEJUtag_RecoveredNTFSPartitionInfo@@@Z
?Add@?$CDynArray@Utag_SectorSection@@@@QAEJUtag_SectorSection@@@Z
?Add@?$CDynArray@Utag_SectorsToSearch@@@@QAEJUtag_SectorsToSearch@@@Z
?Add@?$CDynArray@Utag_UndoActionHeader@@@@QAEJUtag_UndoActionHeader@@@Z
?Add@?$CDynArray@Utag_ext3_FileEntry@@@@QAEJUtag_ext3_FileEntry@@@Z
?Add@?$CDynArray@_J@@QAEJ_J@Z
?Add@?$CDynArray@_K@@QAEJ_K@Z
?Add@CAttributeList@@QAEGPAUtag_Attr_Attributelist@@PA_W@Z
?Add@CAttributeList@@QAEGPAUtag_FILEINFO_Attribute@@_K1@Z
?Add@CMFTFragment@@QAE_J_K00KK@Z
?AddAttribute@CNTFSFileInfo@@AAE_JPAUtag_AttributeHeader@@_KK@Z
?AddBadSector@CDisk@@AAEX_K_J@Z
?AddBatchOperation@CDisk@@QAEXUBATCH_OPERATION_PARAMETER@@@Z
?AddChild@CDynTree@@UAE_JPAV1@_J1H@Z
?AddChild@CFileTree@@UAE_JPAVCDynTree@@_J1H@Z
?AddFileToArray@CPartition@@QAEXPAVCFileInfo@@@Z
?AddInvisibleLV@CLVMVolumeGroup@@QAEHPAVCPartition@@@Z
?AddLDMPartition@CPartition@@QAEXPAV1@_K1@Z
?AddLVPartition@CLVMVolumeGroup@@QAEHPAVCPartition@@@Z
?AddNewEntry@CFATFolder@@QAEHPAUtag_FileAttribute@@@Z
?AddNewFile@CNTFSFileInfo@@QAE_JPA_WPAV1@_JK@Z
?AddPartition@CDisk@@QAEXPAVCPartition@@@Z
?AddPartitionTableError@CDisk@@AAEJPAVCPartition@@K0_K@Z
?AddPathtoHardlinkList@CNTFS@@QAEHPA_W_K@Z
?AddToLDMManager@CDisk@@QAEHHH@Z
?AddToPiece@CMFTFragment@@AAE_JUMFTPIECE@@AA_K11_J@Z
?AddtoMFTRunlistArray@CMFTFragment@@QAEXPAV?$CDynArray@Utag_DataRun@@@@@Z
?AdjustExtendSequence@CDisk@@AAEHXZ
?AdjustFATEntry@CFAT@@AAEXII_JJPAEJ1@Z
?AdjustLogfileSize@CNTFS@@AAE_K_K@Z
?AlignToCylinderOrSecondTrack@CDisk@@AAE_J_J0@Z
?AlignToCylinderStart@CDisk@@AAE_K_K_J@Z
?AlignToTrack@CDisk@@AAE_J_J0@Z
?AllWindowsSupportedPartitionsHaveDriveLetter@CDisk@@QAE_JXZ
?AllocateBitmapData@CNTFS@@QAE_JAA_K0@Z
?AllocateClusters@CNTFS@@QAE_J_JPAV?$CDynArray@Utag_DataRun@@@@0_K@Z
?AllocateClustersForAllBlocks@CNtfsIndex@@QAE_JXZ
?AllocateClustersForBlock@CNtfsIndex@@IAE_JJ@Z
?AllocateClustersForDeletedFile@CFAT@@AAEKPAVCFileTree@@KPAE1_J@Z
?AllocateMFTClusters@CNTFS@@QAE_J_JPAV?$CDynArray@Utag_DataRun@@@@_K@Z
?AllocateRunlistForLostFiles@CFAT@@IAEXPAE0PA_K@Z
?AnalyseFileRecord@CNTFS@@AAEPAVCFileTree@@PAPAV2@_K1AAHPAV2@HK@Z
?AnalyseFileRecord@CNTFSFileInfo@@SAHPAUtag_FileRecord@@KPA_KPAKPAV?$CDynArray@Utag_DataRun@@@@@Z
?ApplyTwinRelation@CPartition@@QAE_JPAV1@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ