Extended Key Usages
ExtKeyUsageTimeStamping
Overview
overview
10Static
static
10admin/en-u...es.dll
windows7-x64
1admin/en-u...es.dll
windows10-2004-x64
1admin/es-e...es.dll
windows7-x64
1admin/es-e...es.dll
windows10-2004-x64
1admin/fr-f...es.dll
windows7-x64
1admin/fr-f...es.dll
windows10-2004-x64
1admin/it-i...es.dll
windows7-x64
1admin/it-i...es.dll
windows10-2004-x64
1admin/ja-j...es.dll
windows7-x64
1admin/ja-j...es.dll
windows10-2004-x64
1admin/ko-k...es.dll
windows7-x64
1admin/ko-k...es.dll
windows10-2004-x64
1admin/oct.dll
windows7-x64
1admin/oct.dll
windows10-2004-x64
3admin/octca.dll
windows7-x64
1admin/octca.dll
windows10-2004-x64
1admin/pt-b...es.dll
windows7-x64
1admin/pt-b...es.dll
windows10-2004-x64
1admin/ru-r...es.dll
windows7-x64
1admin/ru-r...es.dll
windows10-2004-x64
1admin/zh-c...es.dll
windows7-x64
1admin/zh-c...es.dll
windows10-2004-x64
1admin/zh-t...es.dll
windows7-x64
1admin/zh-t...es.dll
windows10-2004-x64
1dcf.es-es/dcfmui.msi
windows7-x64
7dcf.es-es/dcfmui.msi
windows10-2004-x64
7excel.es-e...ui.msi
windows7-x64
7excel.es-e...ui.msi
windows10-2004-x64
7groove.es-...ui.msi
windows7-x64
7groove.es-...ui.msi
windows10-2004-x64
7infopath.e...ui.msi
windows7-x64
8infopath.e...ui.msi
windows10-2004-x64
8Behavioral task
behavioral1
Sample
admin/en-us/octres.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
admin/en-us/octres.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
admin/es-es/octres.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
admin/es-es/octres.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
admin/fr-fr/octres.dll
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
admin/fr-fr/octres.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
admin/it-it/octres.dll
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
admin/it-it/octres.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral9
Sample
admin/ja-jp/octres.dll
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
admin/ja-jp/octres.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
admin/ko-kr/octres.dll
Resource
win7-20220901-en
Behavioral task
behavioral12
Sample
admin/ko-kr/octres.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
admin/oct.dll
Resource
win7-20221111-en
Behavioral task
behavioral14
Sample
admin/oct.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
admin/octca.dll
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
admin/octca.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
admin/pt-br/octres.dll
Resource
win7-20221111-en
Behavioral task
behavioral18
Sample
admin/pt-br/octres.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral19
Sample
admin/ru-ru/octres.dll
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
admin/ru-ru/octres.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral21
Sample
admin/zh-cn/octres.dll
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
admin/zh-cn/octres.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
admin/zh-tw/octres.dll
Resource
win7-20221111-en
Behavioral task
behavioral24
Sample
admin/zh-tw/octres.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
dcf.es-es/dcfmui.msi
Resource
win7-20220901-en
Behavioral task
behavioral26
Sample
dcf.es-es/dcfmui.msi
Resource
win10v2004-20220812-en
Behavioral task
behavioral27
Sample
excel.es-es/excelmui.msi
Resource
win7-20221111-en
Behavioral task
behavioral28
Sample
excel.es-es/excelmui.msi
Resource
win10v2004-20220812-en
Behavioral task
behavioral29
Sample
groove.es-es/groovemui.msi
Resource
win7-20221111-en
Behavioral task
behavioral30
Sample
groove.es-es/groovemui.msi
Resource
win10v2004-20221111-en
Behavioral task
behavioral31
Sample
infopath.es-es/infopathmui.msi
Resource
win7-20220901-en
Behavioral task
behavioral32
Sample
infopath.es-es/infopathmui.msi
Resource
win10v2004-20220812-en
Target
Office_Professional_Plus_2016_32Bit_Spanish.ISO
Size
819.9MB
MD5
fe4ed7bad0a2cc5387858d64e0fa79af
SHA1
9e1f844ec69c2e0dd3332a3fda14f02a7ec3cd3a
SHA256
020048505e3e7ebc9b4f556b1a9925677922bfc4c6ed94cba0e96dd89f82a75a
SHA512
cf23a55d3ab318047a07c8e25c223ad887611b0740f0e87f48b3f04478302d44bce2aadf4732a4ce3850df5facd9ed146053d6c73474e3cbe2602d1c6627ffe1
SSDEEP
12582912:klEsp9udx1Pkuio37Iq8reEe1Z58pp4ipm+aTv+rfNr+Qc1PIs8Xow:kFpUdxdxHkdbeTup43B4FaQc1PIs8Yw
Processes:
resource | yara_rule |
---|---|
sample | BazarBackdoorVar3 |
Office document macro which triggers in special circumstances - often malicious.
Processes:
resource | yara_rule |
---|---|
static1/unpack001/proplus.ww/proplusww.msi | office_macro_on_action |
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreatePen
CreateSolidBrush
DeleteObject
Rectangle
CreateFontIndirectW
GetDeviceCaps
CreateCompatibleDC
DeleteDC
StretchBlt
SetStretchBltMode
GetObjectW
SelectObject
ExtTextOutW
CreateDCW
ExtFloodFill
SetBkMode
EnumFontFamiliesExW
CreateFontW
TextOutW
GetTextMetricsW
SetTextColor
SetBkColor
GetTextExtentPoint32W
HeapReAlloc
GetFileAttributesExW
GetSystemDirectoryW
SetErrorMode
GetUserDefaultLCID
SetFilePointerEx
CreateProcessW
GetSystemTime
GetSystemTimeAsFileTime
GetNativeSystemInfo
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
IsValidLocale
GetCurrentProcessId
GetCurrentThread
GetGeoInfoW
VirtualProtect
FlushInstructionCache
GetCurrentThreadId
GetCurrentProcess
LoadResource
LoadLibraryExW
FreeLibrary
WriteFile
SetFileAttributesW
ReadFile
FindNextFileW
DeleteFileW
SearchPathW
GetProcessHeap
HeapFree
CloseHandle
SetFilePointer
GetDateFormatW
FileTimeToSystemTime
lstrcmpiW
FindFirstFileExW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
lstrlenW
LocalFree
LocalAlloc
LoadLibraryW
LoadLibraryA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetTickCount
SetLastError
OutputDebugStringA
lstrcmpW
CompareStringEx
IsWow64Process
GetModuleFileNameW
GetLastError
HeapAlloc
GetUserGeoID
ExpandEnvironmentStringsW
WideCharToMultiByte
CompareStringW
RaiseException
GetVersionExA
GetTempPathW
RemoveDirectoryW
CreateDirectoryW
GetSystemDefaultLangID
GetLocaleInfoW
GlobalFree
GlobalAlloc
GetVersionExW
DecodePointer
InitializeCriticalSectionEx
TerminateProcess
IsDBCSLeadByte
GetModuleFileNameA
GetShortPathNameA
Sleep
WaitForSingleObject
OpenEventW
CreateFileW
GetStdHandle
GetTempPathA
HeapSize
LCIDToLocaleName
LocaleNameToLCID
GetLocaleInfoEx
GetUserDefaultLocaleName
GetSystemDefaultLocaleName
EnumSystemLocalesEx
GetFileType
SetEndOfFile
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
UnmapViewOfFile
FormatMessageW
WaitForSingleObjectEx
CreateWaitableTimerW
QueryDepthSList
TryEnterCriticalSection
CreateEventExW
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
QueryPerformanceCounter
QueryPerformanceFrequency
DuplicateHandle
GetStringTypeW
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
LCMapStringW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
SetEvent
ResetEvent
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
InterlockedFlushSList
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
OutputDebugStringW
GetThreadTimes
FreeLibraryAndExitThread
VirtualAlloc
VirtualFree
ReleaseSemaphore
UnregisterWaitEx
GetModuleHandleExW
ExitProcess
GetACP
FlushFileBuffers
GetConsoleCP
GetConsoleMode
EnumSystemLocalesW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetStdHandle
ReadConsoleW
WriteConsoleW
MulDiv
GetSystemInfo
VirtualQuery
LoadLibraryExA
DeleteFileA
FileTimeToDosDateTime
SystemTimeToFileTime
MultiByteToWideChar
GetFileSize
FindAtomA
AddAtomA
DeleteAtom
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetFileAttributesW
CopyFileW
EnumResourceNamesW
FindResourceA
FindResourceW
SizeofResource
LockResource
VariantClear
VariantInit
SysFreeString
VarI4FromStr
VarBstrFromI4
SysAllocString
CoCreateGuid
CoInitialize
StringFromIID
StgOpenStorage
StgCreateDocfile
CoTaskMemFree
CoCreateInstance
TransparentBlt
RegEnumKeyExW
RegGetValueW
EventRegister
EventUnregister
EventWrite
CloseServiceHandle
OpenSCManagerW
OpenServiceW
QueryServiceStatus
StartServiceW
EventWriteTransfer
ConvertSidToStringSidW
LookupAccountNameW
CreateWellKnownSid
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
ImmAssociateContext
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
WinVerifyTrust
NdrClientCall2
RpcBindingFree
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcStringFreeW
SetupIterateCabinetW
ord13
ord11
ord10
ord14
ShowCustomizationUI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RegCloseKey
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
StartServiceW
QueryServiceStatus
OpenServiceW
OpenSCManagerW
CloseServiceHandle
HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
lstrlenA
LoadLibraryExA
SetLastError
VirtualProtect
GetSystemInfo
WriteConsoleW
DecodePointer
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
SetStdHandle
GetCommandLineW
CreateProcessW
Sleep
OpenEventW
WaitForSingleObject
CloseHandle
lstrcmpW
lstrlenW
GetLastError
VirtualQuery
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
FindClose
FindFirstFileW
ExitProcess
GetStdHandle
WriteFile
HeapSize
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateEventW
GetModuleHandleW
GetProcAddress
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
InterlockedFlushSList
RaiseException
RtlUnwind
GetModuleHandleExW
GetACP
GetFileType
GetStringTypeW
LCMapStringW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCommandLineA
NdrClientCall2
RpcStringFreeW
RpcStringBindingComposeW
RpcBindingFree
RpcBindingFromStringBindingW
AddLISSources
CACertificatesAdd
CACertificatesScheduleCommit
EnablePerUserInstall
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
RegCloseKey
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExW
SetThreadToken
RegEnumValueW
RegQueryValueExW
RegSetValueExW
RegNotifyChangeKeyValue
SetServiceStatus
StartServiceCtrlDispatcherW
DuplicateToken
GetUserNameA
RegDeleteValueW
RegisterServiceCtrlHandlerW
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
LookupAccountNameW
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptAcquireContextW
CryptReleaseContext
SetFileSecurityW
RegDeleteKeyW
OpenThreadToken
CloseHandle
GetLastError
SetEvent
GetModuleFileNameW
GetDriveTypeW
GetLogicalDrives
lstrcmpW
lstrlenW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
ExitProcess
GetCommandLineW
SetErrorMode
ResetEvent
ReleaseMutex
WaitForMultipleObjectsEx
CreateMutexW
CreateEventW
CreateProcessW
GetSystemInfo
GetTickCount
MoveFileExW
CreateFileA
CreateFileW
ReadFile
SetFilePointer
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExW
DosDateTimeToFileTime
MultiByteToWideChar
WideCharToMultiByte
ReleaseSemaphore
WaitForSingleObject
WaitForMultipleObjects
CreateSemaphoreW
CreateThread
SetFilePointerEx
VirtualAlloc
VirtualFree
GlobalAlloc
GlobalFree
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
CompareStringW
SetEndOfFile
SetFileTime
WriteFile
GetSystemTime
SystemTimeToFileTime
LocalFree
FindClose
GetTempPathA
CreateDirectoryW
GetFileAttributesW
GetTempPathW
FindFirstFileW
GetFileSizeEx
QueryPerformanceCounter
DeleteFileW
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetStdHandle
lstrlenA
FindNextFileW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesExW
GetFileTime
CopyFileW
CreateHardLinkW
FormatMessageA
GetComputerNameW
GetCurrentThread
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
RtlUnwind
RaiseException
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleFileNameA
GetModuleHandleExW
GetACP
GetStringTypeW
GetFileType
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DecodePointer
WriteConsoleW
LoadLibraryExA
VirtualQuery
VirtualProtect
RpcServerUseProtseqEpW
RpcServerRegisterIfEx
RpcServerUnregisterIf
NdrServerCall2
RpcImpersonateClient
RpcRevertToSelf
WinVerifyTrust
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
SetTextColor
SetBkMode
RectVisible
GetStockObject
ExcludeClipRect
GetDIBColorTable
CreateFontW
GetTextExtentPoint32W
CreateSolidBrush
CreateFontIndirectW
SetLayout
SetDIBitsToDevice
CreateDIBSection
StretchDIBits
SelectObject
DeleteDC
GetTextExtentPointW
GetCharWidthW
CreateCompatibleDC
CreateCompatibleBitmap
ExtTextOutW
GetObjectW
SetPixel
SetBkColor
SaveDC
RestoreDC
OffsetClipRgn
IntersectClipRect
GetPixel
CreateRectRgn
BitBlt
ExtSelectClipRgn
GetRgnBox
GetObjectA
TranslateCharsetInfo
CreateFontIndirectA
SetAbortProc
ResetDCW
DeleteColorSpace
CreateColorSpaceW
ExtCreatePen
ExtCreateRegion
CreateRoundRectRgn
CreatePolyPolygonRgn
CreatePenIndirect
DeleteObject
CreateICW
CreateHatchBrush
CreateEllipticRgnIndirect
CreateEllipticRgn
CreateDIBPatternBrushPt
CreateDIBitmap
CreateBrushIndirect
CreateBitmapIndirect
SetColorSpace
ColorCorrectPalette
EnumICMProfilesW
ColorMatchToTarget
SetDeviceGammaRamp
GetDeviceGammaRamp
SetICMProfileW
GetICMProfileW
GetLogColorSpaceW
CheckColorsInGamut
SetICMMode
UnrealizeObject
GetDCOrgEx
GetKerningPairsW
SetBitmapDimensionEx
PolyTextOutW
ExtTextOutA
TextOutW
SelectClipPath
AbortDoc
EndPage
StartPage
EndDoc
StartDocW
GetColorAdjustment
SetColorAdjustment
SetWorldTransform
GdiComment
UpdateColors
SetTextJustification
SetTextAlign
SetTextCharacterExtra
SetSystemPaletteUse
SetROP2
SetPolyFillMode
SetPaletteEntries
GetLayout
SetMapperFlags
SetBoundsRect
SetDCPenColor
SetMetaRgn
ResizePalette
RoundRect
Rectangle
RectInRegion
PtVisible
PtInRegion
PolyPolygon
PaintRgn
Pie
PlgBlt
MaskBlt
InvertRgn
GetWindowOrgEx
GetCharABCWidthsI
GetCharWidthI
GetTextExtentExPointI
GetTextExtentPointI
GetGlyphIndicesW
GetFontUnicodeRanges
GetCharacterPlacementW
GetFontLanguageInfo
GetTextCharset
GetTextExtentExPointW
GetTextExtentExPointA
GetTextExtentPoint32A
GetTextAlign
GetTextCharacterExtra
GetSystemPaletteUse
GetSystemPaletteEntries
GetStretchBltMode
GetRegionData
GetRandomRgn
GetPolyFillMode
GetPaletteEntries
GetOutlineTextMetricsW
GetNearestPaletteIndex
GetNearestColor
GetMapMode
GetGlyphOutlineW
GetMetaRgn
GetCharABCWidthsFloatW
GetCharABCWidthsW
GetCharWidthFloatW
GetCharWidth32W
GetBoundsRect
GetBitmapDimensionEx
GetBkMode
GetDCPenColor
GetDCBrushColor
GetAspectRatioFilterEx
GetROP2
FrameRgn
FillRgn
ExtFloodFill
ExtEscape
Escape
EnumObjects
DrawEscape
Chord
CancelDC
AnimatePalette
GetObjectType
SetDIBits
CreateBitmap
GetTextFaceW
GetFontData
GetTextCharsetInfo
EnumFontFamiliesExW
CreateDCW
GetTextColor
GetBkColor
Polygon
CreatePolygonRgn
SetDCBrushColor
Ellipse
PatBlt
GetWindowExtEx
GetViewportExtEx
MoveToEx
LineTo
CreatePen
CreateRectRgnIndirect
SetViewportOrgEx
GetViewportOrgEx
CreatePalette
GetDeviceCaps
GetCurrentObject
GetClipRgn
SetBrushOrgEx
CreateHalftonePalette
SelectPalette
RealizePalette
GetBrushOrgEx
CreatePatternBrush
GetDIBits
SetRectRgn
OffsetRgn
EqualRgn
CombineRgn
GetTextMetricsW
SetMapMode
GdiFlush
SetWindowOrgEx
SelectClipRgn
SetStretchBltMode
SetDIBColorTable
StretchBlt
GetClipBox
AddAccessDeniedAce
AllocateAndInitializeSid
CreateProcessAsUserW
LookupPrivilegeValueW
AdjustTokenPrivileges
EventWriteTransfer
QueryServiceStatus
StartServiceW
IsTextUnicode
ConvertStringSecurityDescriptorToSecurityDescriptorW
QueryServiceConfigW
OpenServiceW
RegDeleteValueA
RegEnumValueA
GetSecurityDescriptorDacl
ConvertSidToStringSidA
LookupAccountSidW
RevertToSelf
GetSidSubAuthority
FreeSid
EqualSid
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
OpenProcessToken
OpenThreadToken
AddAccessAllowedAce
CreateWellKnownSid
AddAce
CopySid
GetAce
GetAclInformation
GetLengthSid
GetTokenInformation
InitializeAcl
InitializeSecurityDescriptor
IsValidSid
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
LookupAccountNameW
EventWrite
RegDeleteKeyW
RegGetValueW
EventRegister
EventUnregister
RegSetValueExW
RegDeleteKeyValueW
EventProviderEnabled
RegSetKeyValueW
ConvertSidToStringSidW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegDeleteTreeW
RegOpenKeyExA
RegQueryValueExA
ChangeServiceConfigW
CloseServiceHandle
OpenSCManagerW
OpenSemaphoreA
CreateSemaphoreA
OpenMutexA
OpenEventA
CreateEventA
CreateMutexA
WerUnregisterMemoryBlock
WerRegisterMemoryBlock
QueryFullProcessImageNameW
GetThreadIOPendingFlag
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateIoCompletionPort
GetFileInformationByHandleEx
SetFileInformationByHandle
GetLastError
FlsAlloc
FlsFree
InitializeCriticalSectionEx
DeleteCriticalSection
GetSystemDefaultLangID
GetUserDefaultUILanguage
GetSystemDefaultLCID
CancelIoEx
GetOverlappedResult
GetSystemPowerStatus
IsSystemResumeAutomatic
SystemTimeToFileTime
FileTimeToSystemTime
WriteFile
lstrcmpW
RemoveDirectoryW
FindNextFileW
FindFirstFileW
GlobalFree
SetEnvironmentVariableW
GetCommandLineW
OpenMutexW
GetComputerNameW
K32EnumProcessModulesEx
K32EnumProcessModules
K32EnumProcesses
GetPriorityClass
IsValidLocale
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
GetSystemTime
GetVolumeInformationW
CopyFileW
DeviceIoControl
GetFileSizeEx
GetFileAttributesW
CompareFileTime
GetSystemDirectoryW
GetTempFileNameW
GetNumberFormatW
ReadFile
lstrlenW
SetFilePointerEx
SetFileAttributesW
DeleteFileW
LocalFree
LocalAlloc
K32GetModuleFileNameExW
GetShortPathNameA
GetModuleFileNameA
GetTickCount64
GetSystemTimeAsFileTime
CreateProcessW
TerminateProcess
OpenProcess
CreateDirectoryW
GetDriveTypeW
GetDiskFreeSpaceExW
GetUserDefaultLCID
IsProcessorFeaturePresent
LoadLibraryA
MulDiv
QueryPerformanceFrequency
SetWaitableTimerEx
SetThreadPriority
CreateWaitableTimerW
SetWaitableTimer
WerRegisterRuntimeExceptionModule
WaitForMultipleObjects
GetFileAttributesExW
InitializeCriticalSection
CreateSemaphoreExW
WaitForSingleObjectEx
ReleaseSemaphore
CreateEventW
ResetEvent
FindResourceW
SizeofResource
LockResource
LoadResource
WaitForMultipleObjectsEx
OutputDebugStringW
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
InitializeSRWLock
RtlCaptureStackBackTrace
K32GetProcessImageFileNameW
QueryPerformanceCounter
LeaveCriticalSection
EnterCriticalSection
VerifyVersionInfoW
GetNativeSystemInfo
GetVersionExW
GetSystemDirectoryA
CreateProcessA
GetExitCodeProcess
WaitForSingleObject
GetFileAttributesA
VerSetConditionMask
LoadLibraryW
GetModuleHandleA
GetTickCount
GetCurrentThread
CreateThread
Sleep
CreateEventExW
CreateMutexW
ReleaseMutex
SetEvent
CreateFileMappingA
RaiseException
CloseHandle
DecodePointer
OutputDebugStringA
ExpandEnvironmentStringsW
GetCurrentProcessId
WideCharToMultiByte
LoadLibraryExW
GetProcAddress
GetModuleHandleW
FreeLibrary
SetErrorMode
FindFirstFileExW
FindClose
MultiByteToWideChar
LCIDToLocaleName
LocaleNameToLCID
GetLocaleInfoEx
GetUserDefaultLocaleName
GetSystemDefaultLocaleName
EnumSystemLocalesEx
GetDateFormatEx
GetCalendarInfoEx
HeapAlloc
HeapFree
GetProcessHeap
GetThreadUILanguage
CreateFileW
GetFileType
SetEndOfFile
CreateFileMappingW
FlsGetValue
FlsSetValue
GlobalAlloc
GlobalLock
GlobalUnlock
GetTempPathW
UnmapViewOfFile
MapViewOfFile
CancelWaitableTimer
QueryDepthSList
TryEnterCriticalSection
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
LoadLibraryExA
ExpandEnvironmentStringsA
OpenEventW
GetStdHandle
TlsGetValue
GetTimeFormatEx
GetAtomNameW
TlsAlloc
TlsSetValue
TlsFree
DeleteAtom
AddAtomW
FindAtomW
GetFileSize
GetAtomNameA
GetStringTypeExW
GetLocaleInfoW
HeapCreate
HeapDestroy
HeapReAlloc
InitializeCriticalSectionAndSpinCount
GlobalDeleteAtom
GlobalAddAtomW
InterlockedFlushSList
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrencyFormatW
VirtualAlloc
IsValidCodePage
CompareStringOrdinal
EncodePointer
GetStringTypeW
DuplicateHandle
GetCPInfo
CompareStringW
LCMapStringW
UnhandledExceptionFilter
GetStartupInfoW
RtlUnwind
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
VirtualFree
VirtualProtect
UnregisterWaitEx
HeapSize
ExitProcess
GetModuleHandleExW
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetSystemInfo
VirtualQuery
GetACP
EnumSystemLocalesW
SetStdHandle
FlushFileBuffers
WriteConsoleW
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetCommandLineA
WriteProcessMemory
lstrcmpiA
IsDBCSLeadByte
GetCPInfoExW
CreateMemoryResourceNotification
LCMapStringEx
GetLongPathNameW
GetUserDefaultLangID
GetCurrentProcess
IsWow64Process
CompareStringEx
GetCurrentThreadId
GetExitCodeThread
OpenFileMappingA
SetLastError
GetModuleFileNameW
FormatMessageW
CoTaskMemAlloc
RevokeDragDrop
CreateFileMoniker
CoDisconnectObject
CoRevokeClassObject
StringFromIID
CoCreateGuid
CLSIDFromString
OleDraw
CreateStreamOnHGlobal
CoRegisterClassObject
CoTaskMemFree
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
CoUninitialize
CoLockObjectExternal
OleUninitialize
CoRevokeInitializeSpy
CoRegisterInitializeSpy
VariantChangeTypeEx
VarDecFromI4
VarDecFromR8
VarCmp
VarDecCmp
VariantChangeType
VarDecFromR4
SysAllocStringLen
SysStringLen
OleCreateFontIndirect
SafeArrayGetDim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElement
SafeArrayCreate
SafeArrayDestroy
VariantCopy
VarDecAdd
VarDecDiv
VarDecMul
VarDecSu
VarDecInt
VarR8FromDec
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
VarDecRound
SysFreeString
SysAllocString
VariantInit
VariantClear
SysStringByteLen
SafeArrayPutElement
VariantTimeToSystemTime
WTSRegisterSessionNotificationEx
WTSUnRegisterSessionNotificationEx
WerReportSubmit
WerReportAddFile
WerReportSetParameter
WerReportCreate
WerReportCloseHandle
HidD_GetHidGuid
RpcStringFreeW
RpcStringBindingComposeW
NdrClientCall2
RpcBindingFromStringBindingW
RpcBindingFree
GradientFill
ImmAssociateContext
?AddRef@BaseValue@NetUI@@QAEXXZ
?AutomateDataSource@FlexUI@@YGXPAUIDataSource@1@@Z
?CreateAtom@FlexValue@FlexUI@@SG_NPB_WAAVFlexValueSP@2@@Z
?CreateBoolean@FlexValue@FlexUI@@SG_N_NAAVFlexValueSP@2@@Z
?CreateByte@FlexValue@FlexUI@@SG_NEAAVFlexValueSP@2@@Z
?CreateChar@FlexValue@FlexUI@@SG_NDAAVFlexValueSP@2@@Z
?CreateDataSource@FlexValue@FlexUI@@SG_NPAUIDataSource@2@AAVFlexValueSP@2@@Z
?CreateDataSourceProxy@FlexUI@@YGPAUIFlexUIDataSourceProxy@@PAUIDataSource@1@@Z
?CreateDecimal@FlexValue@FlexUI@@SG_NPBUtagDEC@@AAVFlexValueSP@2@@Z
?CreateDouble@FlexValue@FlexUI@@SG_NNAAVFlexValueSP@2@@Z
?CreateFlexEvent@FlexValue@FlexUI@@SG_NAAVFlexValueSP@2@@Z
?CreateFlexListProxy@FlexUI@@YGPAUIFlexListProxy@@PAUIFlexList@1@@Z
?CreateInt16@FlexValue@FlexUI@@SG_NFAAVFlexValueSP@2@@Z
?CreateInt32@FlexValue@FlexUI@@SG_NHAAVFlexValueSP@2@@Z
?CreateInt64@FlexValue@FlexUI@@SG_N_JAAVFlexValueSP@2@@Z
?CreateLength@FlexValue@FlexUI@@SG_NPBUtagDEC@@W4FlexLengthType@2@AAVFlexValueSP@2@@Z
?CreateSByte@FlexValue@FlexUI@@SG_NCAAVFlexValueSP@2@@Z
?CreateSingle@FlexValue@FlexUI@@SG_NMAAVFlexValueSP@2@@Z
?CreateString@FlexValue@FlexUI@@SG_NPB_WAAVFlexValueSP@2@@Z
?CreateUInt16@FlexValue@FlexUI@@SG_NGAAVFlexValueSP@2@@Z
?CreateUInt32@FlexValue@FlexUI@@SG_NIAAVFlexValueSP@2@@Z
?CreateUInt64@FlexValue@FlexUI@@SG_N_KAAVFlexValueSP@2@@Z
?EnsureDataSourceState@@YGXPAUIDataSource@FlexUI@@@Z
?GetAtom@FlexValue@FlexUI@@QBEGXZ
?GetBoolean@FlexValue@FlexUI@@QBE_NXZ
?GetByte@FlexValue@FlexUI@@QBEEXZ
?GetChar@FlexValue@FlexUI@@QBE_WXZ
?GetDataSource@FlexValue@FlexUI@@QBEPAUIDataSource@2@XZ
?GetDecimal@FlexValue@FlexUI@@QBE?AUtagDEC@@XZ
?GetDouble@FlexValue@FlexUI@@QBENXZ
?GetInt16@FlexValue@FlexUI@@QBEFXZ
?GetInt32@FlexValue@FlexUI@@QBEHXZ
?GetInt64@FlexValue@FlexUI@@QBE_JXZ
?GetLength@FlexValue@FlexUI@@QBE?AUFlexLength@2@XZ
?GetList@FlexValue@FlexUI@@QBEPAUIFlexList@2@XZ
?GetSByte@FlexValue@FlexUI@@QBECXZ
?GetSingle@FlexValue@FlexUI@@QBEMXZ
?GetString@FlexValue@FlexUI@@QBEPB_WXZ
?GetType@FlexValue@FlexUI@@QBE?AW4FlexValueType@2@XZ
?GetUInt16@FlexValue@FlexUI@@QBEGXZ
?GetUInt32@FlexValue@FlexUI@@QBEIXZ
?GetUInt64@FlexValue@FlexUI@@QBE_KXZ
?HAlloc@NetUI@@YGPAXK@Z
?HFree@NetUI@@YGXPAX@Z
?IsDataSourceSubclassOf@FlexUI@@YG_NPAUIDataSourceDescription@1@I@Z
?Release@BaseValue@NetUI@@QAEXXZ
?ReleaseDataSource@FlexUI@@YGXPAUIFlexUIDataSourceProxy@@@Z
?ReleaseFlexList@FlexUI@@YGXPAUIFlexListProxy@@@Z
RunDevSetup
RunSetup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_onexit
_lock
__dllonexit
_unlock
memmove
memcpy
_amsg_exit
_initterm
free
malloc
_XcptFilter
_wcsicmp
_purecall
_vsnwprintf
rand
srand
time
wcsncmp
_wtoi
_wcsnicmp
_ui64tow
_itow
wcsstr
wcschr
memset
InterlockedExchangeAdd
CreateEventW
CreateSemaphoreW
VirtualQuery
ReleaseSemaphore
SetEvent
WaitForSingleObject
GetModuleFileNameW
GetCurrentThread
GetThreadPriority
GetProcessAffinityMask
RaiseException
UnmapViewOfFile
GetSystemInfo
VirtualProtect
FreeLibrary
LoadLibraryW
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FreeLibraryAndExitThread
VirtualFree
VirtualAlloc
FileTimeToSystemTime
GetSystemDefaultLangID
GetVersionExW
HeapAlloc
GetProcessHeap
HeapFree
InterlockedIncrement
InterlockedDecrement
LocalFree
CloseHandle
GetLastError
GetVersionExA
LocalAlloc
WideCharToMultiByte
MultiByteToWideChar
SetFilePointer
ReadFile
GetFileSize
CreateFileW
SetLastError
InterlockedExchange
Sleep
InterlockedCompareExchange
RtlUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetVersion
SetThreadPriority
WaitForMultipleObjects
CreateThread
MapViewOfFile
CreateFileMappingW
SystemTimeToFileTime
GetLocalTime
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
TraceEvent
CryptGenKey
CryptExportKey
CryptVerifySignatureA
CryptSignHashA
CryptImportKey
CryptDecrypt
CryptEncrypt
CryptDestroyKey
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptAcquireContextW
CryptGenRandom
TraceMessage
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
CryptReleaseContext
UuidToStringW
I_RpcMapWin32Status
RpcStringFreeW
UuidFromStringW
PidGenX
PidGenX2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
EventRegister
EventUnregister
EventWrite
EventWriteTransfer
WideCharToMultiByte
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
RaiseException
RtlUnwind
EncodePointer
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EnterCriticalSection
LeaveCriticalSection
HeapSize
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
HeapFree
HeapAlloc
GetCurrentThread
GetACP
GetStdHandle
GetFileType
HeapReAlloc
GetProcessHeap
LCMapStringW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCommandLineA
GetCommandLineW
FreeLibrary
GetStringTypeW
SetStdHandle
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
DecodePointer
WriteConsoleW
CloseHandle
OutputDebugStringW
WaitForSingleObjectEx
CreateFileW
ExpandEnvironmentStringsW
FormatMessageW
DeleteFileW
FindFirstFileW
FindNextFileW
GetFileAttributesExW
RemoveDirectoryW
SetFileAttributesW
lstrcmpW
CopyFileW
SetProcessDEPPolicy
GetSystemDEPPolicy
SetCurrentDirectoryW
GlobalFree
GetFullPathNameW
VerSetConditionMask
VerifyVersionInfoW
GetTickCount64
GetModuleFileNameA
GetShortPathNameA
LocalFree
GetVersionExW
SetErrorMode
LoadLibraryExW
GetProcAddress
GetModuleHandleW
CreateDirectoryW
GetModuleFileNameW
FindFirstFileExW
FindClose
CompareStringEx
IsWow64Process
GetCurrentProcess
DeleteCriticalSection
InitializeCriticalSectionEx
FlsFree
FlsAlloc
GetLastError
FlsGetValue
FlsSetValue
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
FileTimeToSystemTime
GetTempPathW
GetSystemTime
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
Sleep
CreateWaitableTimerW
QueryDepthSList
TryEnterCriticalSection
CreateEventExW
InterlockedPopEntrySList
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
QueryPerformanceFrequency
CreateEventW
SetEvent
ResetEvent
GetThreadTimes
CoTaskMemFree
StringFromIID
CoCreateInstance
CoInitializeEx
CoUninitialize
SysAllocString
SysFreeString
VariantInit
VariantClear
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WinVerifyTrust
WinMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
GetLastError
SetLastError
GetModuleFileNameW
GetModuleHandleA
OutputDebugStringA
GetProcAddress
LoadLibraryW
FormatMessageW
VerifyVersionInfoW
GetModuleHandleW
VerSetConditionMask
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
RaiseException
RtlUnwind
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapSize
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetProcessHeap
CloseHandle
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
SetStdHandle
GetFileType
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
CreateFileW
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ