Unlimited-main[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Unlimited-main.zip
Size

7.6MB
MD5

c9eff7064828ed6307c80cfc1a12bdc7
SHA1

fd9f76567997da7f703e4384cc869ae25a4643e0
SHA256

34f355d0ad2c3fc9b79bbf8ca01e658c59b4609c3ba91f89ea2fb7766299a7fd
SHA512

40eb9da5b9e596dee030a9171b833fafe086727707e828eb251defe8402eeb33eb1f353ce256b9582ccde995cf20ce1d21fa3bb338d10bb1032d2532d820835b
SSDEEP

196608:4FuIb8H3GaXD2gjWawDtZqz1pmmmcboiF1oGjmgl6Oo/Tv5Xmul:Do23iBpsam4iLoGjmE6OITR5l

Score

1^/10

Malware Config

Signatures

Files

Unlimited-main.zip
.zip

Password: 1234
Unlimited-main/Readme.txt
Unlimited-main/Setup_x64b.zip
.zip

Password: 1234
Setup_x64b.exe
.exe windows x64

Password: 1234

4cea7ae85c87ddc7295d39ff9cda31d1

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

89:07:f5:1b:60:c3:ea:f3:80:f3:54:29:3c:61:b0:c4
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

07/02/2022, 00:00

Not After

07/02/2024, 23:59

Subject

CN=Balena Inc,O=Balena Inc,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

89:07:f5:1b:60:c3:ea:f3:80:f3:54:29:3c:61:b0:c4
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

07/02/2022, 00:00

Not After

07/02/2024, 23:59

Subject

CN=Balena Inc,O=Balena Inc,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

83:cc:3a:a8:cb:c7:dc:b4:c1:e7:9e:c6:7a:0b:81:9f:6d:6a:6f:91:79:e6:f1:32:bc:54:2c:bf:c5:b2:ed:5e
Signer

Actual PE Digest

83:cc:3a:a8:cb:c7:dc:b4:c1:e7:9e:c6:7a:0b:81:9f:6d:6a:6f:91:79:e6:f1:32:bc:54:2c:bf:c5:b2:ed:5e

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Balena Inc,O=Balena Inc,ST=Washington,C=US

22/04/2022, 13:24
Valid: true

Chain 1

CN=Balena Inc,O=Balena Inc,ST=Washington,C=US

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

68:ec:9e:01:23:23:6b:e9:e4:78:5c:60:70:e3:21:bd:10:37:e2:52
Signer

Actual PE Digest

68:ec:9e:01:23:23:6b:e9:e4:78:5c:60:70:e3:21:bd:10:37:e2:52

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Balena Inc,O=Balena Inc,ST=Washington,C=US

22/04/2022, 13:24
Valid: true

Chain 1

CN=Balena Inc,O=Balena Inc,ST=Washington,C=US

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

GetTokenInformation
RegDeleteValueA
RegOpenKeyExA
RegQueryInfoKeyA
FreeSid
OpenProcessToken
RegSetValueExA
RegCreateKeyExA
LookupPrivilegeValueA
AllocateAndInitializeSid
RegQueryValueExA
EqualSid
RegCloseKey
AdjustTokenPrivileges

kernel32

_lopen
_llseek
CompareStringA
GetLastError
GetFileAttributesA
GetSystemDirectoryA
LoadLibraryA
DeleteFileA
GlobalAlloc
GlobalFree
CloseHandle
WritePrivateProfileStringA
IsDBCSLeadByte
GetWindowsDirectoryA
SetFileAttributesA
GetProcAddress
GlobalLock
LocalFree
RemoveDirectoryA
FreeLibrary
_lclose
CreateDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
GlobalUnlock
ReadFile
SizeofResource
WriteFile
GetDriveTypeA
LoadLibraryExA
SetFileTime
SetFilePointer
FindResourceA
CreateMutexA
GetVolumeInformationA
WaitForSingleObject
GetCurrentDirectoryA
FreeResource
GetVersion
SetCurrentDirectoryA
GetTempPathA
LocalFileTimeToFileTime
CreateFileA
SetEvent
TerminateThread
GetVersionExA
LockResource
GetSystemInfo
CreateThread
ResetEvent
LoadResource
ExitProcess
GetModuleHandleW
CreateProcessA
FormatMessageA
GetTempFileNameA
DosDateTimeToFileTime
CreateEventA
GetExitCodeProcess
ExpandEnvironmentStringsA
LocalAlloc
lstrcmpA
FindNextFileA
GetCurrentProcess
FindFirstFileA
GetModuleFileNameA
GetShortPathNameA
Sleep
GetStartupInfoW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
EnumResourceLanguagesA
GetDiskFreeSpaceA
MulDiv
FindClose

gdi32

GetDeviceCaps

user32

ShowWindow
MsgWaitForMultipleObjects
SetWindowPos
GetDC
GetWindowRect
DispatchMessageA
GetSystemMetrics
CallWindowProcA
SetWindowTextA
MessageBoxA
SendDlgItemMessageA
SendMessageA
GetDlgItem
DialogBoxIndirectParamA
GetWindowLongPtrA
SetWindowLongPtrA
SetForegroundWindow
ReleaseDC
EnableWindow
CharNextA
LoadStringA
CharPrevA
EndDialog
MessageBeep
ExitWindowsEx
SetDlgItemTextA
CharUpperA
GetDesktopWindow
PeekMessageA
GetDlgItemTextA

msvcrt

?terminate@@YAXXZ
_commode
_fmode
_acmdln
__C_specific_handler
memset
__setusermatherr
_ismbblead
_cexit
_exit
exit
__set_app_type
__getmainargs
_amsg_exit
_XcptFilter
memcpy_s
_vsnprintf
_initterm
memcpy

comctl32

ord17

cabinet

ord20
ord21
ord23
ord22

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 628KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
citiz/fr/docs/perf/MapRouter.dll
.dll windows x64

Password: 1234

9898e0341c4df06bdb69c413f70eaa52

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcp_win

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
??Bid@locale@std@@QEAA_KXZ
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?_Xbad_function_call@std@@YAXXZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?uncaught_exception@std@@YA_NXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z
?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?_Incref@facet@locale@std@@UEAAXXZ
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA_N_N@Z
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAN@Z
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Xruntime_error@std@@YAXPEBD@Z
?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@HPEBD@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAI@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAM@Z
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?_Throw_C_error@std@@YAXH@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_K@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Xbad_alloc@std@@YAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Xlength_error@std@@YAXPEBD@Z

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e

api-ms-win-crt-private-l1-1-0

_o__gmtime64
_o__gmtime64_s
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__localtime64
_o__localtime64_s
_o__mktime64
_o__pclose
_o__popen
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o__wcsicmp
_o__wcsnicmp
__intrinsic_setjmp
_o__wstat64i32
_o__wtof_l
_o__wtoi
_o_acos
_o_asin
_o_atan
_o_atan2
_o_bsearch
_o_ceil
_o_clearerr
_o_cos
_o_cosh
_o_exit
_o_exp
_o_fclose
_o_feof
_o_ferror
_o_fflush
_o_fgets
_o_floor
_o_fmod
_o_fopen
_o_fputs
_o_fread
_o_free
_o_freopen
_o_frexp
_o_fseek
_o_ftell
_o_fwrite
_o_getc
_o_getenv
_o_isalnum
_o_isalpha
_o_iscntrl
_o_isdigit
_o_islower
_o_ispunct
_o_isspace
_o_isupper
_o_isxdigit
_o_ldexp
_o_localeconv
_o_log
_o_log10
_o_log2
_o_malloc
_o_mbstowcs_s
_o_modf
_o_nanf
_o_pow
_o_powf
_o_rand
_o_realloc
_o_remove
_o_rename
_o_round
_o_setlocale
_o_setvbuf
_o_sin
_o_sinh
_o_sqrt
_o_srand
_o_strcat_s
_o_strcoll
_o_strcpy_s
_o_strerror
_o_strftime
_o_strncat_s
_o_strncpy_s
_o_strtod
_o_strtoul
_o_system
_o_tan
_o_tanh
_o_terminate
_o_tolower
_o_toupper
_o_towlower
_o_towupper
_o_ungetc
_o_wcstod
_o_wcstol
_o_wcstoll
__C_specific_handler
strstr
_CxxThrowException
_o__dtest
_o__difftime64
_o__crt_atexit
_o__create_locale
_o__configure_narrow_argv
_o__cexit
_o__callnewh
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___stdio_common_vfscanf
_o___stdio_common_vfprintf
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
_o__execute_onexit_table
__std_type_info_compare
wcschr
__CxxFrameHandler3
_o___acrt_iob_func
__std_terminate
__CxxFrameHandler4
strchr
strrchr
longjmp
_o__errno
__RTDynamicCast
memchr
memcmp
memcpy
memmove

api-ms-win-crt-string-l1-1-0

wcscmp
strcspn
strcmp
memset
wcsncmp
strpbrk

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExW
GetProcAddress
LoadStringW
FindResourceExW
GetModuleHandleW
GetModuleFileNameA
GetModuleHandleExW
LoadResource
FreeLibrary
DisableThreadLibraryCalls

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-processthreads-l1-1-0

TerminateProcess
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId

api-ms-win-core-sysinfo-l1-1-0

GetVersionExW
GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureStackBackTrace
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-errorhandling-l1-1-0

SetLastError
UnhandledExceptionFilter
GetLastError
SetUnhandledExceptionFilter
RaiseException

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitializeEx

api-ms-win-core-localization-l1-2-0

FormatMessageA
FormatMessageW
GetLocaleInfoEx
GetLocaleInfoW

api-ms-win-core-synch-l1-1-0

OpenSemaphoreW
LeaveCriticalSection
ReleaseSRWLockExclusive
TryEnterCriticalSection
InitializeCriticalSectionEx
ReleaseMutex
DeleteCriticalSection
EnterCriticalSection
CreateSemaphoreExW
CreateMutexExW
InitializeCriticalSectionAndSpinCount
ReleaseSemaphore
WaitForSingleObject
WaitForSingleObjectEx
AcquireSRWLockShared
ReleaseSRWLockShared
CreateEventExW
AcquireSRWLockExclusive
InitializeSRWLock
SetEvent
CreateEventW
ResetEvent

ztrace_maps

ZTraceReportOrigination
ZTraceReportPropagation
ZTraceReportPropagationNoThis
ZTraceReportOriginationNoThis
ZTraceHelperNoThis
ZTraceHelper
ZTraceClose
ZTraceInit

api-ms-win-crt-math-l1-1-0

_finite
ceilf
sqrtf
trunc
floorf

api-ms-win-crt-utility-l1-1-0

ldiv

api-ms-win-crt-time-l1-1-0

_time64
clock

mapconfiguration

ConfigurationManager_Create

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegGetValueW

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapFree
GetProcessHeap

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-file-l1-1-0

GetFileSizeEx
ReadFile
CreateDirectoryW
FindFirstFileW
WriteFile
CreateFileW
RemoveDirectoryW
DeleteFileW
FindNextFileW
SetFileAttributesW
FindClose
FindFirstFileExW
GetFileAttributesExW

api-ms-win-core-file-l2-1-0

GetFileInformationByHandleEx

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsDeleteString

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventWrite
EventRegister

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-file-l1-2-0

CreateFile2

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime
FileTimeToSystemTime

api-ms-win-core-winrt-error-l1-1-1

RoGetMatchingRestrictedErrorInfo

api-ms-win-core-sysinfo-l1-2-0

GetNativeSystemInfo

api-ms-win-core-io-l1-1-0

CancelIoEx

api-ms-win-core-psapi-l1-1-0

K32GetPerformanceInfo

api-ms-win-core-kernel32-legacy-l1-1-0

BindIoCompletionCallback

api-ms-win-stateseparation-helpers-l1-1-0

GetPersistedRegistryLocationW

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory1

api-ms-win-core-processenvironment-l1-1-0

SearchPathW

api-ms-win-core-memory-l1-1-0

MapViewOfFile
UnmapViewOfFile
CreateFileMappingW

api-ms-win-core-localization-obsolete-l1-2-0

GetUserDefaultUILanguage
GetSystemDefaultUILanguage

moshostclient

MosHostOpen
MosGetDataAsyncOperation
MosHostClose
MosDeleteDataAsyncOperation

api-ms-win-crt-stdio-l1-1-0

tmpfile
tmpnam

Exports

Exports

??0?$Lockable@VSharedMutex@ngeo@Microsoft@@@ngeo@Microsoft@@IEAA@XZ
??0?$Lockable@VSharedMutex@ngeo@Microsoft@@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$ObjectHandle@VViewObject@ngeo@Microsoft@@$00@internal@ngeo@Microsoft@@QEAA@AEBV0123@@Z
??0?$ObjectHandle@VViewObject@ngeo@Microsoft@@$00@internal@ngeo@Microsoft@@QEAA@PEAVViewObject@23@@Z
??0?$Pimpl@VGuidanceOptions@ngeo@Microsoft@@VGuidanceOptionsImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VGuidanceOptions@ngeo@Microsoft@@VGuidanceOptionsImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VGuidanceOptions@ngeo@Microsoft@@VGuidanceOptionsImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VLanguageKeyValuePair@ngeo@Microsoft@@VLanguageKeyValuePairImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VLanguageKeyValuePair@ngeo@Microsoft@@VLanguageKeyValuePairImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VLanguageKeyValuePair@ngeo@Microsoft@@VLanguageKeyValuePairImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VLanguageMapping@ngeo@Microsoft@@VLanguageMappingImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VLanguageMapping@ngeo@Microsoft@@VLanguageMappingImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VLanguageMapping@ngeo@Microsoft@@VLanguageMappingImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VLocationSource@ngeo@Microsoft@@VLocationSourceImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VLocationSource@ngeo@Microsoft@@VLocationSourceImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VLocationSource@ngeo@Microsoft@@VLocationSourceImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VManeuverVoiceInfo@ngeo@Microsoft@@VManeuverVoiceInfoImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VManeuverVoiceInfo@ngeo@Microsoft@@VManeuverVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VManeuverVoiceInfo@ngeo@Microsoft@@VManeuverVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VMapMatcher@ngeo@Microsoft@@VMapMatcherImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VMapMatcher@ngeo@Microsoft@@VMapMatcherImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VMapMatcher@ngeo@Microsoft@@VMapMatcherImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VMapMatcherOptions@ngeo@Microsoft@@VMapMatcherOptionsImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VMapMatcherOptions@ngeo@Microsoft@@VMapMatcherOptionsImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VMapMatcherOptions@ngeo@Microsoft@@VMapMatcherOptionsImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VNaturalGuidanceVoiceInfo@ngeo@Microsoft@@VNaturalGuidanceVoiceInfoImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VNaturalGuidanceVoiceInfo@ngeo@Microsoft@@VNaturalGuidanceVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VNaturalGuidanceVoiceInfo@ngeo@Microsoft@@VNaturalGuidanceVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VPhonemeMapping@ngeo@Microsoft@@VPhonemeMappingImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VPhonemeMapping@ngeo@Microsoft@@VPhonemeMappingImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VPhonemeMapping@ngeo@Microsoft@@VPhonemeMappingImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VSideOfDestinationVoiceInfo@ngeo@Microsoft@@VSideOfDestinationVoiceInfoImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VSideOfDestinationVoiceInfo@ngeo@Microsoft@@VSideOfDestinationVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VSideOfDestinationVoiceInfo@ngeo@Microsoft@@VSideOfDestinationVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VSignpostLabelVoiceInfo@ngeo@Microsoft@@VSignpostLabelVoiceInfoImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VSignpostLabelVoiceInfo@ngeo@Microsoft@@VSignpostLabelVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VSignpostLabelVoiceInfo@ngeo@Microsoft@@VSignpostLabelVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VSignpostVoiceInfo@ngeo@Microsoft@@VSignpostVoiceInfoImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VSignpostVoiceInfo@ngeo@Microsoft@@VSignpostVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VSignpostVoiceInfo@ngeo@Microsoft@@VSignpostVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VStreetVoiceInfo@ngeo@Microsoft@@VStreetVoiceInfoImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VStreetVoiceInfo@ngeo@Microsoft@@VStreetVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VStreetVoiceInfo@ngeo@Microsoft@@VStreetVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VVoiceCommandInfo@ngeo@Microsoft@@VVoiceCommandInfoImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VVoiceCommandInfo@ngeo@Microsoft@@VVoiceCommandInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VVoiceCommandInfo@ngeo@Microsoft@@VVoiceCommandInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VVoiceSkin@ngeo@Microsoft@@VVoiceSkinImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VVoiceSkin@ngeo@Microsoft@@VVoiceSkinImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VVoiceSkin@ngeo@Microsoft@@VVoiceSkinImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0BaseEngine@nmacore@Microsoft@@IEAA@XZ
??0BaseEngine@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0BufferInputStream@nmacore@Microsoft@@QEAA@$$QEAV012@@Z
??0BufferInputStream@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0BufferInputStream@nmacore@Microsoft@@QEAA@PEAEI@Z
??0BufferOutputStream@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0BufferOutputStream@nmacore@Microsoft@@QEAA@XZ
??0Color@ngeo@Microsoft@@QEAA@AEBVHSV@012@E@Z
??0Color@ngeo@Microsoft@@QEAA@EEEE@Z
??0Color@ngeo@Microsoft@@QEAA@I@Z
??0Color@ngeo@Microsoft@@QEAA@XZ
??0Date@ngeo@Microsoft@@QEAA@FEE@Z
??0Date@ngeo@Microsoft@@QEAA@XZ
??0DateTime@ngeo@Microsoft@@QEAA@AEBVDate@12@@Z
??0DateTime@ngeo@Microsoft@@QEAA@AEBVDate@12@AEBVTime@12@@Z
??0DateTime@ngeo@Microsoft@@QEAA@XZ
??0DateTime@ngeo@Microsoft@@QEAA@_J@Z
??0DriveSimulator@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0DriveSimulator@ngeo@Microsoft@@QEAA@XZ
??0DriveSimulator@nmacore@Microsoft@@QEAA@AEAVISimulationObserver@12@@Z
??0DriveSimulator@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0DynamicPenalty@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0DynamicPenalty@ngeo@Microsoft@@QEAA@XZ
??0GeoArea@ngeo@Microsoft@@IEAA@XZ
??0GeoArea@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0GeoCoordinates@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0GeoCoordinates@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0GeoCoordinates@ngeo@Microsoft@@QEAA@AEBVIGeoCoordinates@msngeo@@@Z
??0GeoCoordinates@ngeo@Microsoft@@QEAA@NNM@Z
??0GeoCoordinates@ngeo@Microsoft@@QEAA@XZ
??0GeoPolygon@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0GeoPolygon@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0GeoPolygon@ngeo@Microsoft@@QEAA@AEBVGeoRect@12@@Z
??0GeoPolygon@ngeo@Microsoft@@QEAA@PEBVGeoCoordinates@12@_K@Z
??0GeoPolygon@ngeo@Microsoft@@QEAA@XZ
??0GeoPolyline@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0GeoPolyline@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0GeoPolyline@ngeo@Microsoft@@QEAA@PEBVGeoCoordinates@12@_K@Z
??0GeoPolyline@ngeo@Microsoft@@QEAA@XZ
??0GeoRect@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0GeoRect@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0GeoRect@ngeo@Microsoft@@QEAA@AEBVGeoCoordinates@12@0@Z
??0GeoRect@ngeo@Microsoft@@QEAA@AEBVIGeoRect@msngeo@@@Z
??0GeoRect@ngeo@Microsoft@@QEAA@NNNN@Z
??0GeoRect@ngeo@Microsoft@@QEAA@XZ
??0Guidance@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0Guidance@ngeo@Microsoft@@QEAA@XZ
??0Guidance@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0Guidance@nmacore@Microsoft@@QEAA@XZ
??0GuidanceListener@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0GuidanceListener@ngeo@Microsoft@@QEAA@XZ
??0GuidanceOptions@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0GuidanceOptions@ngeo@Microsoft@@QEAA@XZ
??0GuidanceVisualizer@nmacore@Microsoft@@QEAA@$$QEAV012@@Z
??0GuidanceVisualizer@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0GuidanceVisualizer@nmacore@Microsoft@@QEAA@XZ
??0ICompass@nmacore@Microsoft@@QEAA@$$QEAV012@@Z
??0ICompass@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0ICompass@nmacore@Microsoft@@QEAA@XZ
??0IGeoCoordinates@msngeo@@QEAA@AEBV01@@Z
??0IGeoCoordinates@msngeo@@QEAA@XZ
??0IGeoRect@msngeo@@QEAA@AEBV01@@Z
??0IGeoRect@msngeo@@QEAA@XZ
??0IGuidanceListener@nmacore@Microsoft@@QEAA@$$QEAV012@@Z
??0IGuidanceListener@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0IGuidanceListener@nmacore@Microsoft@@QEAA@XZ
??0IItineraryWarning@msnma@@QEAA@AEBV01@@Z
??0IItineraryWarning@msnma@@QEAA@XZ
??0IItineraryWarningAttributes@msngeo@@QEAA@AEBV01@@Z
??0IItineraryWarningAttributes@msngeo@@QEAA@XZ
??0IItineraryWarningAttributes@msnma@@QEAA@AEBV01@@Z
??0IItineraryWarningAttributes@msnma@@QEAA@XZ
??0IItineraryWarningDivChange@msnma@@QEAA@AEBV01@@Z
??0IItineraryWarningDivChange@msnma@@QEAA@XZ
??0IItineraryWarningTraffic@msngeo@@QEAA@AEBV01@@Z
??0IItineraryWarningTraffic@msngeo@@QEAA@XZ
??0IItineraryWarningTraffic@msnma@@QEAA@AEBV01@@Z
??0IItineraryWarningTraffic@msnma@@QEAA@XZ
??0IManeuver@msnma@@QEAA@AEBV01@@Z
??0IManeuver@msnma@@QEAA@XZ
??0IPositioning@nmacore@Microsoft@@QEAA@$$QEAV012@@Z
??0IPositioning@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0IPositioning@nmacore@Microsoft@@QEAA@XZ
??0IPositioningObserver@nmacore@Microsoft@@QEAA@$$QEAV012@@Z
??0IPositioningObserver@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0IPositioningObserver@nmacore@Microsoft@@QEAA@XZ
??0IRoute@msnma@@QEAA@AEBV01@@Z
??0IRoute@msnma@@QEAA@XZ
??0IRouterEngineListener@nmacore@Microsoft@@QEAA@$$QEAV012@@Z
??0IRouterEngineListener@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0IRouterEngineListener@nmacore@Microsoft@@QEAA@XZ
??0ISignpost@msngeo@@QEAA@AEBV01@@Z
??0ISignpost@msngeo@@QEAA@XZ
??0ITimerObserver@msnma@@QEAA@AEBV01@@Z
??0ITimerObserver@msnma@@QEAA@XZ
??0ITimerSource@msnma@@QEAA@AEBV01@@Z
??0ITimerSource@msnma@@QEAA@XZ
??0Icon@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0Icon@ngeo@Microsoft@@QEAA@XZ
??0ItineraryWarning@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0ItineraryWarning@ngeo@Microsoft@@QEAA@XZ
??0ItineraryWarning@nmacore@Microsoft@@QEAA@$$QEAV?$unique_ptr@VItineraryWarningAttributes@nmacore@Microsoft@@U?$default_delete@VItineraryWarningAttributes@nmacore@Microsoft@@@std@@@std@@@Z
??0ItineraryWarning@nmacore@Microsoft@@QEAA@$$QEAV?$unique_ptr@VItineraryWarningDivChange@nmacore@Microsoft@@U?$default_delete@VItineraryWarningDivChange@nmacore@Microsoft@@@std@@@std@@@Z
??0ItineraryWarning@nmacore@Microsoft@@QEAA@$$QEAV?$unique_ptr@VItineraryWarningTraffic@nmacore@Microsoft@@U?$default_delete@VItineraryWarningTraffic@nmacore@Microsoft@@@std@@@std@@@Z
??0ItineraryWarning@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0ItineraryWarning@nmacore@Microsoft@@QEAA@PEBV0ngeo@2@@Z
??0ItineraryWarning@nmacore@Microsoft@@QEAA@XZ
??0ItineraryWarningAdminDivChange@ngeo@Microsoft@@AEAA@AEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@0_N@Z
??0ItineraryWarningAdminDivChange@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0ItineraryWarningAttributes@ngeo@Microsoft@@AEAA@AEBV?$bitset@$0M@@std@@@Z
??0ItineraryWarningAttributes@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0ItineraryWarningAttributes@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0ItineraryWarningAttributes@nmacore@Microsoft@@QEAA@PEBV0ngeo@2@@Z
??0ItineraryWarningAttributes@nmacore@Microsoft@@QEAA@W4TAttribute@IItineraryWarningAttributes@msnma@@@Z
??0ItineraryWarningAttributes@nmacore@Microsoft@@QEAA@_K@Z
??0ItineraryWarningDivChange@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0ItineraryWarningDivChange@nmacore@Microsoft@@QEAA@AEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@0_N@Z
??0ItineraryWarningDivChange@nmacore@Microsoft@@QEAA@PEBVItineraryWarningAdminDivChange@ngeo@2@@Z
??0ItineraryWarningTraffic@ngeo@Microsoft@@AEAA@AEBV0smart5@2@@Z
??0ItineraryWarningTraffic@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0ItineraryWarningTraffic@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0ItineraryWarningTraffic@nmacore@Microsoft@@QEAA@PEBV0ngeo@2@@Z
??0ItineraryWarningTraffic@nmacore@Microsoft@@QEAA@W4TIncident@IItineraryWarningTraffic@msnma@@W4TSeverity@45@AEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AEBVIGeoCoordinates@msngeo@@3@Z
??0ItineraryWarningVisitor@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0ItineraryWarningVisitor@ngeo@Microsoft@@QEAA@XZ
??0LaneInfo@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0LaneInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0LaneInfo@ngeo@Microsoft@@QEAA@AEBV?$vector@W4DIRECTION@LaneInfo@ngeo@Microsoft@@V?$allocator@W4DIRECTION@LaneInfo@ngeo@Microsoft@@@std@@@std@@_N@Z
??0LaneInfo@ngeo@Microsoft@@QEAA@XZ
??0LanguageKeyValuePair@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0LanguageKeyValuePair@ngeo@Microsoft@@QEAA@XZ
??0LanguageMapping@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0LanguageMapping@ngeo@Microsoft@@QEAA@XZ
??0Location@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0Location@ngeo@Microsoft@@QEAA@AEBVGeoCoordinates@12@AEBVLocationInfo@12@@Z
??0Location@ngeo@Microsoft@@QEAA@XZ
??0LocationInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0LocationInfo@ngeo@Microsoft@@QEAA@AEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@0000000@Z
??0LocationInfo@ngeo@Microsoft@@QEAA@XZ
??0LocationSource@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0LocationSource@ngeo@Microsoft@@QEAA@XZ
??0LocationSourceListener@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0LocationSourceListener@ngeo@Microsoft@@QEAA@XZ
??0Maneuver@ngeo@Microsoft@@AEAA@XZ
??0Maneuver@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0Maneuver@nmacore@Microsoft@@IEAA@XZ
??0Maneuver@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0Maneuver@nmacore@Microsoft@@QEAA@AEBV0ngeo@2@AEBVRoute@32@@Z
??0ManeuverVoiceInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0ManeuverVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??0MapMatchedLocation@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0MapMatchedLocation@ngeo@Microsoft@@QEAA@AEBVLocation@12@0@Z
??0MapMatchedLocation@ngeo@Microsoft@@QEAA@AEBVLocation@12@0AEBVRoadElement@12@@Z
??0MapMatchedLocation@ngeo@Microsoft@@QEAA@AEBVLocation@12@@Z
??0MapMatchedLocation@ngeo@Microsoft@@QEAA@XZ
??0MapMatcher@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0MapMatcher@ngeo@Microsoft@@QEAA@XZ
??0MapMatcherListener@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0MapMatcherListener@ngeo@Microsoft@@QEAA@XZ
??0MapMatcherOptions@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0MapMatcherOptions@ngeo@Microsoft@@QEAA@XZ
??0MapMatcherProxy@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0MapMatcherProxy@nmacore@Microsoft@@QEAA@XZ
??0MapModel@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0MapModel@ngeo@Microsoft@@QEAA@AEBV?$PresentSharedPtr@$$CBVRoutingGridLoader@smart5@Microsoft@@@Core@@AEBV?$PresentSharedPtr@VLocaleMapConfiguration@MapControl@@@4@@Z
??0MapModel@ngeo@Microsoft@@QEAA@XZ
??0MapSensor@ngeo@Microsoft@@QEAA@XZ
??0MapSensor@nmacore@Microsoft@@QEAA@XZ
??0MicrosoftTtsVoiceInfo@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0MicrosoftTtsVoiceInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0MicrosoftTtsVoiceInfo@ngeo@Microsoft@@QEAA@AEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@0@Z
??0MicrosoftTtsVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??0Mutex@ngeo@Microsoft@@AEAA@AEBV012@@Z
??0Mutex@ngeo@Microsoft@@QEAA@XZ
??0NaturalGuidanceVoiceInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0NaturalGuidanceVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??0OperatingHours@ngeo@Microsoft@@QEAA@XZ
??0Output@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0Output@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0Output@ngeo@Microsoft@@QEAA@XZ
??0OutputEngine@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0OutputEngine@ngeo@Microsoft@@QEAA@XZ
??0PhonemeMapping@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0PhonemeMapping@ngeo@Microsoft@@QEAA@XZ
??0PixelCoordinates@ngeo@Microsoft@@QEAA@MM@Z
??0PixelCoordinates@ngeo@Microsoft@@QEAA@XZ
??0PixelRect@ngeo@Microsoft@@QEAA@AEBVPixelCoordinates@12@AEBVSizeInPixels@12@@Z
??0PixelRect@ngeo@Microsoft@@QEAA@MMMM@Z
??0PixelRect@ngeo@Microsoft@@QEAA@XZ
??0Poller@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0Poller@nmacore@Microsoft@@QEAA@XZ
??0ProxyObject@ngeo@Microsoft@@IEAA@XZ
??0ProxyObject@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0ProxyObjectHandle@ngeo@Microsoft@@QEAA@$$QEAU012@@Z
??0ProxyObjectHandle@ngeo@Microsoft@@QEAA@AEBU012@@Z
??0ProxyObjectHandle@ngeo@Microsoft@@QEAA@PEAVProxyObject@12@@Z
??0RefCountable@internal@ngeo@Microsoft@@QEAA@AEBV0123@@Z
??0RefCountable@internal@ngeo@Microsoft@@QEAA@XZ
??0RenderBuffer@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0RenderBuffer@ngeo@Microsoft@@QEAA@AEBVPixelRect@12@0W4RenderingMode@012@@Z
??0RenderBuffer@ngeo@Microsoft@@QEAA@AEBVPixelRect@12@W4RenderingMode@012@@Z
??0RoadElement@ngeo@Microsoft@@AEAA@AEBV?$SharedPointer@VRoadElementImpl@internal@ngeo@Microsoft@@$0A@@12@@Z
??0RoadElement@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0RoadElement@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0RoadElement@ngeo@Microsoft@@QEAA@XZ
??0RoadElementPenalty@DynamicPenalty@ngeo@Microsoft@@QEAA@AEBVEdgeId@smart5@3@W4DrivingDirection@23@E_N@Z
??0RoadElementPenalty@DynamicPenalty@ngeo@Microsoft@@QEAA@XZ
??0Route@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0Route@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0Route@ngeo@Microsoft@@QEAA@AEBVRoutePlan@12@AEBV?$PresentSharedPtr@$$CBVRoutingGridLoader@smart5@Microsoft@@@Core@@@Z
??0Route@ngeo@Microsoft@@QEAA@XZ
??0Route@nmacore@Microsoft@@IEAA@XZ
??0Route@nmacore@Microsoft@@IEAA@_N@Z
??0Route@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0Route@nmacore@Microsoft@@QEAA@AEBV0ngeo@2@W4TCalculationType@IRoute@msnma@@@Z
??0RouteElement@ngeo@Microsoft@@AEAA@AEBV?$SharedPointer@VRouteImpl@internal@ngeo@Microsoft@@$0A@@12@_K@Z
??0RouteElement@ngeo@Microsoft@@AEAA@XZ
??0RouteElement@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0RouteElement@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0RouteElements@ngeo@Microsoft@@AEAA@AEBV?$SharedPointer@VRouteImpl@internal@ngeo@Microsoft@@$0A@@12@@Z
??0RouteElements@ngeo@Microsoft@@AEAA@AEBV?$SharedPointer@VRouteImpl@internal@ngeo@Microsoft@@$0A@@12@_K1@Z
??0RouteElements@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0RouteElements@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0RouteElements@ngeo@Microsoft@@QEAA@XZ
??0RouteOptions@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0RouteOptions@ngeo@Microsoft@@QEAA@XZ
??0RouteOptions@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0RouteOptions@nmacore@Microsoft@@QEAA@AEBV0ngeo@2@@Z
??0RouteOptions@nmacore@Microsoft@@QEAA@XZ
??0RoutePlan@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0RoutePlan@ngeo@Microsoft@@QEAA@XZ
??0RouteWaypoint@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0RouteWaypoint@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0RouteWaypoint@ngeo@Microsoft@@QEAA@AEBVLocation@12@W4Type@012@@Z
??0RouteWaypoint@ngeo@Microsoft@@QEAA@XZ
??0Router@ngeo@Microsoft@@QEAA@AEBVMapModel@12@V?$bitset@$00@std@@@Z
??0RouterEngine@nmacore@Microsoft@@QEAA@AEBVMapModel@ngeo@2@@Z
??0RouterEngine@nmacore@Microsoft@@QEAA@XZ
??0RouterListener@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0RouterListener@ngeo@Microsoft@@QEAA@XZ
??0Runtime@nmacore@Microsoft@@QEAA@XZ
??0Sensors@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0Sensors@nmacore@Microsoft@@QEAA@XZ
??0SharedMutex@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0SharedMutex@ngeo@Microsoft@@QEAA@XZ
??0SideOfDestinationVoiceInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0SideOfDestinationVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??0Signpost@ngeo@Microsoft@@AEAA@XZ
??0Signpost@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0Signpost@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0SignpostLabelVoiceInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0SignpostLabelVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??0SignpostVoiceInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0SignpostVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??0SimpleGuidance@naviplayer@Microsoft@@QEAA@AEBV012@@Z
??0SimpleGuidance@naviplayer@Microsoft@@QEAA@XZ
??0SimpleGuidanceListener@naviplayer@Microsoft@@QEAA@AEBV012@@Z
??0SimpleGuidanceListener@naviplayer@Microsoft@@QEAA@XZ
??0SimpleGuidanceOptions@naviplayer@Microsoft@@QEAA@AEBV012@@Z
??0SimpleGuidanceOptions@naviplayer@Microsoft@@QEAA@W4TrafficAvoidanceMode@012@I@Z
??0SimpleGuidanceOptions@naviplayer@Microsoft@@QEAA@XZ
??0SizeInPixels@ngeo@Microsoft@@QEAA@MM@Z
??0SizeInPixels@ngeo@Microsoft@@QEAA@XZ
??0SpeedNotification@ngeo@Microsoft@@AEAA@XZ
??0SpeedNotification@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0SpeedNotification@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0SpeedWarner@ngeo@Microsoft@@QEAA@XZ
??0SpeedWarnerListener@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0SpeedWarnerListener@ngeo@Microsoft@@QEAA@XZ
??0SpeedWarnerOptions@ngeo@Microsoft@@QEAA@MMM@Z
??0StatRepository@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0StatRepository@nmacore@Microsoft@@QEAA@XZ
??0StatStartTiming@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0StatStartTiming@nmacore@Microsoft@@QEAA@V?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
??0StatStartTiming@nmacore@Microsoft@@QEAA@XZ
??0StreetVoiceInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0StreetVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??0Surface@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0Surface@ngeo@Microsoft@@QEAA@II@Z
??0Time@ngeo@Microsoft@@QEAA@EEEG@Z
??0Time@ngeo@Microsoft@@QEAA@XZ
??0TimeInterval@ngeo@Microsoft@@QEAA@AEBVTime@12@0@Z
??0TimeInterval@ngeo@Microsoft@@QEAA@XZ
??0Traffic@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0Traffic@ngeo@Microsoft@@QEAA@XZ
??0TrafficEngine@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0TrafficEngine@nmacore@Microsoft@@QEAA@XZ
??0TrafficEvent@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TrafficEvent@ngeo@Microsoft@@QEAA@XZ
??0TrafficEvent@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0TrafficEvent@nmacore@Microsoft@@QEAA@AEBV0ngeo@2@@Z
??0TrafficEventObject@ngeo@Microsoft@@AEAA@AEBVTrafficEvent@12@AEBVGeoCoordinates@12@@Z
??0TrafficEventObject@ngeo@Microsoft@@AEAA@XZ
??0TrafficEventObject@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TrafficListener@ngeo@Microsoft@@IEAA@XZ
??0TrafficListener@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TrafficNotification@ngeo@Microsoft@@AEAA@XZ
??0TrafficNotificationInfo@ngeo@Microsoft@@QEAA@XZ
??0TrafficPenaltySource@DynamicPenalty@ngeo@Microsoft@@QEAA@AEAVTraffic@23@W4MODE@0123@@Z
??0TrafficPenaltySource@DynamicPenalty@ngeo@Microsoft@@QEAA@AEBV0123@@Z
??0TrafficPenaltySource@DynamicPenalty@ngeo@Microsoft@@QEAA@XZ
??0TrafficVisitor@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TrafficVisitor@ngeo@Microsoft@@QEAA@XZ
??0TrafficWarner@ngeo@Microsoft@@QEAA@XZ
??0TrafficWarnerListener@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TrafficWarnerListener@ngeo@Microsoft@@QEAA@XZ
??0TrafficWarnerOptions@ngeo@Microsoft@@QEAA@IIII@Z
??0TrafficWarnerOptions@ngeo@Microsoft@@QEAA@XZ
??0TransitAccessInfo@ngeo@Microsoft@@QEAA@XZ
??0TransitDatabase@ngeo@Microsoft@@QEAA@XZ
??0TransitDatabase@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0TransitDatabase@nmacore@Microsoft@@QEAA@XZ
??0TransitDatabaseListener@ngeo@Microsoft@@IEAA@XZ
??0TransitDatabaseListener@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TransitDatabaseListener@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0TransitDatabaseListener@nmacore@Microsoft@@QEAA@XZ
??0TransitLineInfo@ngeo@Microsoft@@QEAA@XZ
??0TransitLineInfo@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0TransitLineInfo@nmacore@Microsoft@@QEAA@AEBV0ngeo@2@@Z
??0TransitLineInfo@nmacore@Microsoft@@QEAA@AEBVEdgeId@smart5@2@@Z
??0TransitLineInfo@nmacore@Microsoft@@QEAA@XZ
??0TransitRouteElement@ngeo@Microsoft@@AEAA@AEBV?$SharedPointer@VRouteImpl@internal@ngeo@Microsoft@@$0A@@12@_K@Z
??0TransitRouteElement@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0TransitRouteElement@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TransitRouteElement@ngeo@Microsoft@@QEAA@XZ
??0TransitRouteOptions@ngeo@Microsoft@@QEAA@XZ
??0TransitRouteStop@ngeo@Microsoft@@AEAA@AEBV?$SharedPointer@VRouteImpl@internal@ngeo@Microsoft@@$0A@@12@_K_N@Z
??0TransitRouteStop@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0TransitRouteStop@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TransitRouteStop@ngeo@Microsoft@@QEAA@XZ
??0TransitStopInfo@ngeo@Microsoft@@QEAA@XZ
??0TransitSystemInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TransitSystemInfo@ngeo@Microsoft@@QEAA@XZ
??0TtsEngine@ngeo@Microsoft@@AEAA@PEAVTtsEngineImpl@internal@12@@Z
??0TtsEngine@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TtsEngine@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0TtsEngine@nmacore@Microsoft@@QEAA@W4TtsEngineType@TtsEngineFactory@ngeo@2@@Z
??0TtsListener@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TtsListener@ngeo@Microsoft@@QEAA@XZ
??0TtsOptions@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0TtsOptions@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TtsOptions@ngeo@Microsoft@@QEAA@AEBVVoiceSkin@12@_K@Z
??0TtsOptions@ngeo@Microsoft@@QEAA@XZ
??0TtsVoiceInfo@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0TtsVoiceInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TtsVoiceInfo@ngeo@Microsoft@@QEAA@AEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AEBV?$vector@V?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@V?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@2@@4@@Z
??0TtsVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??0Version@ngeo@Microsoft@@QEAA@AEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
??0Version@ngeo@Microsoft@@QEAA@IIII@Z
??0Version@ngeo@Microsoft@@QEAA@XZ
??0Vicinity@Traffic@ngeo@Microsoft@@QEAA@$$QEAU0123@@Z
??0Vicinity@Traffic@ngeo@Microsoft@@QEAA@AEBU0123@@Z
??0Vicinity@Traffic@ngeo@Microsoft@@QEAA@AEBVGeoCoordinates@23@I@Z
??0ViewObject@ngeo@Microsoft@@IEAA@XZ
??0ViewObject@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0ViewObjectHandle@ngeo@Microsoft@@QEAA@$$QEAU012@@Z
??0ViewObjectHandle@ngeo@Microsoft@@QEAA@AEBU012@@Z
??0ViewObjectHandle@ngeo@Microsoft@@QEAA@PEAVViewObject@12@@Z
??0VoiceCommandInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0VoiceCommandInfo@ngeo@Microsoft@@QEAA@XZ
??0VoiceSkin@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0VoiceSkin@ngeo@Microsoft@@QEAA@XZ
??0iterator@RouteElements@ngeo@Microsoft@@QEAA@$$QEAV0123@@Z
??0iterator@RouteElements@ngeo@Microsoft@@QEAA@AEBV0123@@Z
??0iterator@RouteElements@ngeo@Microsoft@@QEAA@AEBV?$SharedPointer@VRouteImpl@internal@ngeo@Microsoft@@$0A@@23@_K@Z
??1?$Lockable@VSharedMutex@ngeo@Microsoft@@@ngeo@Microsoft@@IEAA@XZ
??1?$ObjectHandle@VViewObject@ngeo@Microsoft@@$00@internal@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VGuidanceOptions@ngeo@Microsoft@@VGuidanceOptionsImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VLanguageKeyValuePair@ngeo@Microsoft@@VLanguageKeyValuePairImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VLanguageMapping@ngeo@Microsoft@@VLanguageMappingImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VLocationSource@ngeo@Microsoft@@VLocationSourceImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VManeuverVoiceInfo@ngeo@Microsoft@@VManeuverVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VMapMatcher@ngeo@Microsoft@@VMapMatcherImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VMapMatcherOptions@ngeo@Microsoft@@VMapMatcherOptionsImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VNaturalGuidanceVoiceInfo@ngeo@Microsoft@@VNaturalGuidanceVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VPhonemeMapping@ngeo@Microsoft@@VPhonemeMappingImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VSideOfDestinationVoiceInfo@ngeo@Microsoft@@VSideOfDestinationVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VSignpostLabelVoiceInfo@ngeo@Microsoft@@VSignpostLabelVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VSignpostVoiceInfo@ngeo@Microsoft@@VSignpostVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VStreetVoiceInfo@ngeo@Microsoft@@VStreetVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VVoiceCommandInfo@ngeo@Microsoft@@VVoiceCommandInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VVoiceSkin@ngeo@Microsoft@@VVoiceSkinImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1BaseEngine@nmacore@Microsoft@@MEAA@XZ
??1BufferOutputStream@nmacore@Microsoft@@UEAA@XZ
??1DateTime@ngeo@Microsoft@@QEAA@XZ
??1DriveSimulator@ngeo@Microsoft@@QEAA@XZ
??1DriveSimulator@nmacore@Microsoft@@UEAA@XZ
??1DynamicPenalty@ngeo@Microsoft@@QEAA@XZ
??1GeoArea@ngeo@Microsoft@@UEAA@XZ
??1GeoCoordinates@ngeo@Microsoft@@UEAA@XZ
??1GeoPolygon@ngeo@Microsoft@@UEAA@XZ
??1GeoPolyline@ngeo@Microsoft@@UEAA@XZ
??1GeoRect@ngeo@Microsoft@@UEAA@XZ
??1Guidance@ngeo@Microsoft@@QEAA@XZ
??1Guidance@nmacore@Microsoft@@UEAA@XZ
??1GuidanceListener@ngeo@Microsoft@@UEAA@XZ
??1GuidanceOptions@ngeo@Microsoft@@QEAA@XZ
??1IGeoCoordinates@msngeo@@UEAA@XZ
??1IGeoRect@msngeo@@UEAA@XZ
??1IItineraryWarning@msnma@@UEAA@XZ
??1IItineraryWarningAttributes@msngeo@@UEAA@XZ
??1IItineraryWarningAttributes@msnma@@UEAA@XZ
??1IItineraryWarningDivChange@msnma@@UEAA@XZ
??1IItineraryWarningTraffic@msngeo@@UEAA@XZ
??1IItineraryWarningTraffic@msnma@@UEAA@XZ
??1IManeuver@msnma@@UEAA@XZ
??1IRoute@msnma@@UEAA@XZ
??1ISignpost@msngeo@@UEAA@XZ
??1ITimerObserver@msnma@@UEAA@XZ
??1ITimerSource@msnma@@UEAA@XZ
??1Icon@ngeo@Microsoft@@QEAA@XZ
??1ItineraryWarning@ngeo@Microsoft@@UEAA@XZ
??1ItineraryWarning@nmacore@Microsoft@@UEAA@XZ
??1ItineraryWarningAdminDivChange@ngeo@Microsoft@@UEAA@XZ
??1ItineraryWarningAttributes@ngeo@Microsoft@@UEAA@XZ
??1ItineraryWarningAttributes@nmacore@Microsoft@@UEAA@XZ
??1ItineraryWarningDivChange@nmacore@Microsoft@@UEAA@XZ
??1ItineraryWarningTraffic@ngeo@Microsoft@@UEAA@XZ
??1ItineraryWarningTraffic@nmacore@Microsoft@@UEAA@XZ
??1ItineraryWarningVisitor@ngeo@Microsoft@@UEAA@XZ
??1LaneInfo@ngeo@Microsoft@@QEAA@XZ
??1LanguageKeyValuePair@ngeo@Microsoft@@QEAA@XZ
??1LanguageMapping@ngeo@Microsoft@@QEAA@XZ
??1Location@ngeo@Microsoft@@UEAA@XZ
??1LocationInfo@ngeo@Microsoft@@QEAA@XZ
??1LocationSource@ngeo@Microsoft@@QEAA@XZ
??1LocationSourceListener@ngeo@Microsoft@@UEAA@XZ
??1Maneuver@ngeo@Microsoft@@QEAA@XZ
??1Maneuver@nmacore@Microsoft@@UEAA@XZ
??1ManeuverVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??1MapMatchedLocation@ngeo@Microsoft@@UEAA@XZ
??1MapMatcher@ngeo@Microsoft@@QEAA@XZ
??1MapMatcherListener@ngeo@Microsoft@@UEAA@XZ
??1MapMatcherOptions@ngeo@Microsoft@@QEAA@XZ
??1MapMatcherProxy@nmacore@Microsoft@@QEAA@XZ
??1MapModel@ngeo@Microsoft@@QEAA@XZ
??1MapSensor@ngeo@Microsoft@@QEAA@XZ
??1MapSensor@nmacore@Microsoft@@QEAA@XZ
??1MicrosoftTtsVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??1Mutex@ngeo@Microsoft@@QEAA@XZ
??1NaturalGuidanceVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??1OperatingHours@ngeo@Microsoft@@QEAA@XZ
??1Output@ngeo@Microsoft@@QEAA@XZ
??1OutputEngine@ngeo@Microsoft@@QEAA@XZ
??1PhonemeMapping@ngeo@Microsoft@@QEAA@XZ
??1Poller@nmacore@Microsoft@@UEAA@XZ
??1ProxyObject@ngeo@Microsoft@@MEAA@XZ
??1ProxyObjectHandle@ngeo@Microsoft@@QEAA@XZ
??1RefCountable@internal@ngeo@Microsoft@@UEAA@XZ
??1RenderBuffer@ngeo@Microsoft@@UEAA@XZ
??1RoadElement@ngeo@Microsoft@@QEAA@XZ

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 783KB - Virtual size: 783KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 114KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
citiz/fr/docs/perf/XblAuthManager.dll
.dll windows x64

Password: 1234

c9fe76fa00dbca05f5e9e8985d7ca489

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcp_win

?_Xbad_alloc@std@@YAXXZ
?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?tolower@?$ctype@G@std@@QEBAGG@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?is@?$ctype@G@std@@QEBA_NFG@Z
??1_Locinfo@std@@QEAA@XZ
??1_Lockit@std@@QEAA@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
??0_Lockit@std@@QEAA@H@Z
_Wcscoll
_Wcsxfrm
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?id@?$ctype@G@std@@2V0locale@2@A
??Bid@locale@std@@QEAA_KXZ
?id@?$collate@G@std@@2V0locale@2@A

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e

api-ms-win-crt-private-l1-1-0

_o__i64tow_s
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__mkgmtime64
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o__wcsicmp
_o__wcsnicmp
_o__wcstoui64
_o__wctime64_s
memmove
_o__wtoi64
_o_free
_o_iswdigit
_o_malloc
_o_realloc
_o_terminate
_o_towlower
_o_towupper
_o_wcstol
_o_wcstoul
__C_specific_handler
__CxxFrameHandler3
_CxxThrowException
_o__crt_atexit
_o__execute_onexit_table
_o__configure_narrow_argv
_o__errno
_o__cexit
_o__callnewh
strrchr
wcsstr
wcschr
strchr
wcsrchr
_o___stdio_common_vswprintf
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
__std_terminate
__CxxFrameHandler4
memcmp
memcpy

api-ms-win-crt-string-l1-1-0

wcscmp
wcsncmp
wcsnlen
memset

api-ms-win-core-com-l1-1-0

CoInitializeSecurity
CoRegisterClassObject
CoTaskMemFree
CoDecrementMTAUsage
CoGetCallContext
CoImpersonateClient
CoCreateInstance
CoCreateGuid
CoTaskMemAlloc
CoReleaseServerProcess
CoWaitForMultipleHandles
StringFromGUID2
CoAddRefServerProcess
CoRevertToSelf
CoDisconnectContext
CoRevokeClassObject
CoGetStandardMarshal
CoResumeClassObjects
CoCreateFreeThreadedMarshaler

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW
GetModuleHandleExW
GetProcAddress
GetModuleFileNameA
DisableThreadLibraryCalls

api-ms-win-power-setting-l1-1-0

PowerSettingUnregisterNotification
PowerSettingRegisterNotification

api-ms-win-security-base-l1-1-0

RevertToSelf
ImpersonateLoggedOnUser
MakeAbsoluteSD
GetTokenInformation
DuplicateTokenEx
AdjustTokenPrivileges
DuplicateToken

api-ms-win-core-synch-l1-2-0

Sleep
InitOnceExecuteOnce

api-ms-win-core-synch-l1-1-0

InitializeSRWLock
CreateSemaphoreExW
ReleaseSemaphore
OpenSemaphoreW
AcquireSRWLockExclusive
WaitForSingleObject
ReleaseMutex
CreateEventExW
ReleaseSRWLockShared
SetEvent
CreateMutexExW
AcquireSRWLockShared
ReleaseSRWLockExclusive
LeaveCriticalSection
EnterCriticalSection
CreateEventW
DeleteCriticalSection
ResetEvent
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeCriticalSection
WaitForMultipleObjectsEx
WaitForSingleObjectEx

api-ms-win-core-heap-l1-1-0

HeapAlloc
GetProcessHeap
HeapFree

api-ms-win-core-errorhandling-l1-1-0

GetLastError
UnhandledExceptionFilter
SetLastError
SetUnhandledExceptionFilter
RaiseException

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference
WindowsDuplicateString
WindowsIsStringEmpty
WindowsCompareStringOrdinal
WindowsStringHasEmbeddedNull
WindowsCreateString
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsGetStringLen

api-ms-win-security-sddl-l1-1-0

ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventRegister
EventSetInformation
EventUnregister

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess
TerminateProcess
GetCurrentThreadId
GetCurrentProcessId
GetCurrentThread
OpenProcessToken
SetThreadToken
OpenThreadToken

api-ms-win-core-winrt-l1-1-0

RoActivateInstance
RoInitialize
RoUninitialize
RoRevokeActivationFactories
RoGetActivationFactory
RoRegisterActivationFactories

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW
RoTransformError
RoOriginateError

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringW
DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-service-core-l1-1-0

SetServiceStatus
RegisterServiceCtrlHandlerExW

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent
OpenProcess

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount64
GetSystemTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

combase

ord66
ord68
ord69
ord67

appxalluserstore

FamilyMonikerStringToSid

wininet

InternetSetOptionW
InternetQueryOptionW

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-core-registry-l1-1-0

RegDeleteKeyExW
RegOpenCurrentUser
RegDeleteValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
RegCreateKeyExW
RegSetValueExW
RegGetValueW
RegEnumValueW
RegDeleteTreeW

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer

ntdll

RtlFreeSid
DbgPrintEx
NtQueryInformationToken
RtlIpv4AddressToStringW
RtlSubscribeWnfStateChangeNotification
RtlQueryWnfStateData
RtlPublishWnfStateData
RtlUnsubscribeWnfStateChangeNotification

api-ms-win-core-threadpool-legacy-l1-1-0

DeleteTimerQueueTimer
CreateTimerQueueTimer
ChangeTimerQueueTimer
QueueUserWorkItem

crypt32

CertAddEncodedCertificateToStore
CertFindCertificateInStore
CertOpenStore
CertAddCertificateContextToStore
CertCloseStore
CertEnumCertificatesInStore
CertFreeCertificateContext
CertCompareCertificate
CertDeleteCertificateFromStore
CertDuplicateCertificateContext
CryptQueryObject
CertGetCertificateContextProperty

winhttp

WinHttpSetTimeouts
WinHttpConnect
WinHttpOpenRequest
WinHttpOpen
WinHttpSetStatusCallback
WinHttpSetDefaultProxyConfiguration
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpReadData
WinHttpCloseHandle
WinHttpSetOption
WinHttpSendRequest
WinHttpCrackUrl

api-ms-win-security-capability-l1-1-0

CapabilityCheck

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
CompareStringOrdinal
MultiByteToWideChar

api-ms-win-core-psapi-l1-1-0

K32GetModuleFileNameExW

oleaut32

SysFreeString

api-ms-win-core-heap-l2-1-0

LocalFree

bcrypt

BCryptFinalizeKeyPair
BCryptGenerateKeyPair
BCryptOpenAlgorithmProvider
BCryptDestroyKey
BCryptSignHash
BCryptExportKey
BCryptGetProperty
BCryptCreateHash
BCryptHashData
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptFinishHash
BCryptImportKeyPair

api-ms-win-core-registry-l1-1-1

RegDeleteKeyValueW
RegSetKeyValueW

api-ms-win-security-lsalookup-l2-1-0

LookupPrivilegeValueW

api-ms-win-core-shutdown-l1-1-0

InitiateSystemShutdownExW

iphlpapi

GetAdaptersAddresses

ws2_32

htonl
WSAGetLastError
InetPtonW

api-ms-win-core-file-l1-1-0

GetFileAttributesExW
WriteFile
GetFileSize
GetFileAttributesW
CreateDirectoryW
DeleteFileW
CreateFileW
ReadFile
FindFirstFileW
FindClose
FindNextFileW

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-service-management-l2-1-0

QueryServiceStatusEx

api-ms-win-service-management-l1-1-0

StartServiceW
OpenServiceW
OpenSCManagerW
CloseServiceHandle

api-ms-win-service-winsvc-l1-1-0

QueryServiceStatus
ControlService

api-ms-win-core-memory-l1-1-0

UnmapViewOfFile
CreateFileMappingW
MapViewOfFile

userenv

ExpandEnvironmentStringsForUserW

api-ms-win-security-credentials-l1-1-0

CredWriteW
CredDeleteW
CredFree
CredReadW

api-ms-win-stateseparation-helpers-l1-1-0

GetPersistedRegistryLocationW

rpcrt4

RpcSsDestroyClientContext
RpcAsyncCompleteCall
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcAsyncInitializeHandle
RpcStringFreeW
RpcBindingFree
RpcBindingSetAuthInfoExW
RpcAsyncCancelCall
Ndr64AsyncClientCall

ncrypt

NCryptStreamOpenToUnprotect
NCryptCloseProtectionDescriptor
NCryptStreamClose
NCryptStreamUpdate
NCryptCreateProtectionDescriptor
NCryptStreamOpenToProtect

sspicli

LogonUserExExW

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-appmodel-identity-l1-2-0

AppContainerDeriveSidFromMoniker

api-ms-win-appmodel-runtime-l1-1-0

GetPackagesByPackageFamily
GetPackageFamilyName

urlmon

CreateUri

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

Exports

Exports

ServiceMain

Sections

.text
Size: 828KB - Virtual size: 827KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
citiz/fr/docs/perf/XpsPrint.dll
.dll windows x64

Password: 1234

6eca595c8c82f810b21eb481ad76799c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

tolower
_amsg_exit
_initterm
islower
_wsetlocale
__crtLCMapStringA
__crtLCMapStringW
_wcsdup
memchr
ldexp
__C_specific_handler
?terminate@@YAXXZ
abort
__dllonexit
_onexit
___mb_cur_max_func
_vsnwprintf
memcpy_s
??3@YAXPEAX@Z
_purecall
??1exception@@UEAA@XZ
??0exception@@QEAA@XZ
??0exception@@QEAA@AEBV0@@Z
__CxxFrameHandler3
_vsnprintf_s
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBQEBDH@Z
_XcptFilter
memcmp
isalnum
isdigit
??0exception@@QEAA@AEBQEBD@Z
??1bad_cast@@UEAA@XZ
??0bad_cast@@QEAA@PEBD@Z
memset
calloc
___lc_codepage_func
___lc_handle_func
isupper
__pctype_func
__uncaught_exception
setlocale
_unlock
_lock
_errno
wcsrchr
_vsnprintf
_finite
_vsnwprintf_l
wcstod
_isnan
memmove
memcpy
_CxxThrowException
_callnewh
strncmp
swprintf_s
_wtof
ldiv
malloc
memmove_s
wcscpy_s
??1type_info@@UEAA@XZ
??_V@YAXPEAX@Z
_wcsicmp
sprintf_s
isspace
free
localeconv
strcspn
??0bad_cast@@QEAA@AEBV0@@Z
_ismbblead

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameA
FreeLibraryAndExitThread
GetModuleHandleW
LoadLibraryExW
GetProcAddress
GetModuleHandleExW
FreeLibrary

api-ms-win-core-synch-l1-1-0

WaitForSingleObject
ReleaseSRWLockExclusive
SetEvent
InitializeCriticalSection
InitializeCriticalSectionEx
CreateEventW
DeleteCriticalSection
ReleaseSRWLockShared
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
AcquireSRWLockShared
EnterCriticalSection
ReleaseSemaphore
CreateSemaphoreExW
WaitForSingleObjectEx
ResetEvent
AcquireSRWLockExclusive
ReleaseMutex
OpenSemaphoreW
CreateMutexExW

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapFree
GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

GetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetLastError

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventSetInformation
EventRegister
EventWriteTransfer
EventEnabled
EventWrite

api-ms-win-eventing-classicprovider-l1-1-0

GetTraceEnableLevel
RegisterTraceGuidsW
UnregisterTraceGuids
GetTraceEnableFlags
GetTraceLoggerHandle
TraceMessage

api-ms-win-core-processthreads-l1-1-0

TerminateProcess
SetThreadToken
ResumeThread
GetCurrentThread
OpenThreadToken
CreateThread
ExitProcess
GetCurrentThreadId
GetCurrentProcess
GetProcessTimes
TlsSetValue
GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-handle-l1-1-0

DuplicateHandle
CloseHandle

api-ms-win-core-com-l1-1-0

CoTaskMemFree
CoCreateGuid
CoCreateInstanceEx
CoSetProxyBlanket
CreateStreamOnHGlobal
CoCreateInstance
CoInitializeEx
CoGetMalloc
CoUninitialize
StringFromCLSID
CoTaskMemAlloc

api-ms-win-core-synch-l1-2-0

WakeAllConditionVariable
InitOnceBeginInitialize
InitOnceComplete
Sleep
SleepConditionVariableSRW

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolTimer
CloseThreadpoolTimer
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-heap-l2-1-0

GlobalAlloc
GlobalFree
LocalFree

oleaut32

VariantInit
SysAllocStringLen
SysStringLen
VariantClear
SetErrorInfo
SysFreeString
SysAllocString

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-registry-l1-1-0

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

api-ms-win-core-string-l1-1-0

GetStringTypeW
CompareStringW
MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-file-l1-1-0

SetFilePointer
CreateFileW
GetFileAttributesW
FindNextFileW
FlushFileBuffers
FindFirstFileW
WriteFile
DeleteFileW
FindClose
ReadFile
CreateDirectoryW
SetFilePointerEx
SetEndOfFile

api-ms-win-security-base-l1-1-0

GetTokenInformation

rpcrt4

UuidCreateSequential
UuidToStringW
RpcServerInqCallAttributesW
RpcStringFreeW

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-core-version-l1-1-1

GetFileVersionInfoSizeW
GetFileVersionInfoW

api-ms-win-core-version-l1-1-0

VerQueryValueW

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount
GetTickCount64

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

ntdll

RtlReleaseSRWLockShared
RtlInitializeSRWLock
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
WinSqmIncrementDWORD
NtQueryInformationToken
RtlNtStatusToDosError
RtlGetAppContainerSidType
RtlAcquireSRWLockShared
WinSqmIsOptedIn

api-ms-win-shcore-stream-l1-1-0

SHCreateStreamOnFileW

api-ms-win-shlwapi-ie-l1-1-0

PathIsDirectoryW

xpsservices

ord8
ord9

winspool.drv

ord361
ord362
GetPrintExecutionData

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

urlmon

CreateUri

xmllite

CreateXmlReader

api-ms-win-core-kernel32-legacy-l1-1-0

RegisterWaitForSingleObject

api-ms-win-core-threadpool-legacy-l1-1-0

DeleteTimerQueueTimer
CreateTimerQueue
DeleteTimerQueueEx
CreateTimerQueueTimer
UnregisterWaitEx
QueueUserWorkItem

Exports

Exports

StartXpsPrintJob
StartXpsPrintJob1

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 323KB - Virtual size: 323KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
citiz/fr/docs/perf/migstore.dll
.dll windows x64

Password: 1234

d114f589d18689470f8720a61912fb22

Code Sign

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05/05/2022, 19:23

Not After

04/05/2023, 19:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d6:dc:52:ea:8e:61:4f:2c:93:21:97:c0:c4:a7:44:91:e5:44:c2:5e:cd:f5:20:d0:63:a8:b1:77:d4:26:48:cf
Signer

Actual PE Digest

d6:dc:52:ea:8e:61:4f:2c:93:21:97:c0:c4:a7:44:91:e5:44:c2:5e:cd:f5:20:d0:63:a8:b1:77:d4:26:48:cf

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

07/02/2023, 20:42
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

msvcrt

__RTDynamicCast
_setjmp
memcpy
memmove
_onexit
__dllonexit
_unlock
_lock
?terminate@@YAXXZ
??1type_info@@UEAA@XZ
__C_specific_handler
_initterm
_amsg_exit
_XcptFilter
_CxxThrowException
_callnewh
?what@exception@@UEBAPEBDXZ
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
iswlower
iswalpha
longjmp
swscanf_s
_wcsnicmp
_wtoi64
_purecall
malloc
calloc
memmove_s
free
?name@type_info@@QEBAPEBDXZ
wcschr
towlower
__CxxFrameHandler3
memset

kernel32

GetProcessHeap
HeapAlloc
HeapFree
CloseHandle
GetLastError
SetFilePointer
SetEndOfFile
CreateFileW
ReadFile
SetFileAttributesW
DeleteFileW
WriteFile
FlushFileBuffers
GetFileSize
DuplicateHandle
GetCurrentProcess
CreateEventW
SetEvent
ResetEvent
WaitForMultipleObjects
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
InitializeCriticalSection
DeleteCriticalSection
CreateDirectoryW
SetLastError
CreateThread
GetFileAttributesW
FindFirstFileW
FindClose
SetErrorMode
GetDriveTypeW
GetVolumeInformationW
CreateHardLinkW
DeviceIoControl
GetModuleHandleW
GetProcAddress
Sleep
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess

unbcl

?AddRef@Object@UnBCL@@QEAAXXZ
?GetCallingModule@SerializationStream@UnBCL@@SAPEAUHINSTANCE__@@XZ
?CanRegister@SerializationStream@UnBCL@@SAHXZ
?RegisterType@SerializationStream@UnBCL@@SAXPEBVString@2@HPEAUHINSTANCE__@@PEAUIInstanceFactory@2@@Z
?EnqueueSbRegistration@SbRegistrationList@UnBCL@@SAXPEBDHPEAUHINSTANCE__@@PEAUIInstanceFactory@2@@Z
??0NotSupportedException@UnBCL@@QEAA@PEBG@Z
??1NotSupportedException@UnBCL@@UEAA@XZ
??0InvalidOperationException@UnBCL@@QEAA@PEBVString@1@@Z
?SetLiteralStorage@_@UnBCL@@YAXPEAPEBVString@2@PEBG@Z
??1?$ICollection@G@UnBCL@@UEAA@XZ
?UnregisterType@SerializationStream@UnBCL@@SAXPEBVString@2@HPEAUHINSTANCE__@@@Z
?Clone@?$ArrayList@PEAVString@UnBCL@@@UnBCL@@UEBAPEAVObject@2@XZ
?Equals@?$ArrayList@PEAVString@UnBCL@@@UnBCL@@UEBAHPEBVObject@2@@Z
??0IInstanceFactory@UnBCL@@QEAA@XZ
??1?$IEnumerator@PEAVString@UnBCL@@@UnBCL@@UEAA@XZ
??0?$IEnumerator@PEAVString@UnBCL@@@UnBCL@@QEAA@XZ
??0?$ICollection@G@UnBCL@@QEAA@XZ
??0?$IEnumerable@G@UnBCL@@QEAA@XZ
??0?$ICollection@PEAVString@UnBCL@@@UnBCL@@QEAA@XZ
??0?$IEnumerable@PEAVString@UnBCL@@@UnBCL@@QEAA@XZ
??1InvalidCastException@UnBCL@@UEAA@XZ
??_DStringPtr@UnBCL@@QEAAXXZ
??_DFileStream@UnBCL@@QEAAXXZ
??_D?$ArrayList@PEAVString@UnBCL@@@UnBCL@@QEAAXXZ
??4SyncObject@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4MemoryStream@UnBCL@@QEAAAEAV01@AEBV01@@Z
??_DMemoryStream@UnBCL@@QEAAXXZ
??0MemoryStream@UnBCL@@QEAA@AEBV01@@Z
??0ISerializable@UnBCL@@QEAA@$$QEAU01@@Z
??0ISerializable@UnBCL@@QEAA@AEBU01@@Z
??4ISerializable@UnBCL@@QEAAAEAU01@AEBU01@@Z
??4ISerializable@UnBCL@@QEAAAEAU01@$$QEAU01@@Z
??1InvalidOperationException@UnBCL@@UEAA@XZ
??0ISerializable@UnBCL@@QEAA@XZ
??0Win32Exception@UnBCL@@QEAA@XZ
??0OutOfMemoryException@UnBCL@@QEAA@XZ
??1Stream@UnBCL@@UEAA@XZ
??_7Stream@UnBCL@@6B01@@
??_7Stream@UnBCL@@6BObject@1@@
??_7Stream@UnBCL@@6BIDisposable@1@@
??0NotSupportedException@UnBCL@@QEAA@XZ
?Concat@String@UnBCL@@SAPEAV12@PEBG0@Z
??0StringBuilder@UnBCL@@QEAA@XZ
??1StringBuilder@UnBCL@@UEAA@XZ
?Append@StringBuilder@UnBCL@@QEAAPEAV12@PEBVString@2@@Z
?Append@StringBuilder@UnBCL@@QEAAPEAV12@G@Z
?get_CString@StringBuilder@UnBCL@@QEBAPEBGXZ
?WithoutLongPrefix@Path@UnBCL@@SAPEAVString@2@PEBV32@@Z
?WithLongPrefix@Path@UnBCL@@SAPEAVString@2@PEBV32@H@Z
??B?$SmartPtr@VString@UnBCL@@@UnBCL@@QEBAPEAVNullTest@01@XZ
?set_Length@StringBuilder@UnBCL@@QEAAXH@Z
?get_Length@StringBuilder@UnBCL@@QEBAHXZ
??0FileStream@UnBCL@@QEAA@PEBVString@1@W4FileMode@1@W4FileAccess@1@W4FileShare@1@K@Z
??0?$SmartPtr@VStream@UnBCL@@@UnBCL@@QEAA@XZ
??1?$SmartPtr@VStream@UnBCL@@@UnBCL@@UEAA@XZ
??4?$SmartPtr@VStream@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??0?$SmartPtr@VStream@UnBCL@@@UnBCL@@QEAA@PEAVStream@1@@Z
?get_P@?$SmartPtr@VStream@UnBCL@@@UnBCL@@QEBAPEAVStream@2@XZ
??C?$SmartPtr@VStream@UnBCL@@@UnBCL@@QEBAPEAVStream@1@XZ
??B?$SmartPtr@VStream@UnBCL@@@UnBCL@@QEBAPEAVNullTest@01@XZ
??0ArgumentException@UnBCL@@QEAA@XZ
?Append@StringBuilder@UnBCL@@QEAAPEAV12@PEBG@Z
?Create@File@UnBCL@@SAPEAVFileStream@2@PEBVString@2@@Z
?GetTemporaryFileName@File@UnBCL@@SAPEAVString@2@PEBV32@@Z
?Delete@File@UnBCL@@SAXPEBVString@2@@Z
?Add@StreamCounter@UnBCL@@QEAAX_J@Z
??0Exception@UnBCL@@QEAA@PEBG@Z
??0IDisposable@UnBCL@@QEAA@XZ
??1IDisposable@UnBCL@@UEAA@XZ
??1OutOfMemoryException@UnBCL@@UEAA@XZ
?get_Length@String@UnBCL@@QEBAHXZ
?GetEnvironmentVar@Environment@UnBCL@@SAPEAVString@2@PEBV32@@Z
?MatchI@String@UnBCL@@SAHPEBG0@Z
?Steal@?$SmartPtr@VStream@UnBCL@@@UnBCL@@QEAAPEAVStream@2@XZ
?GetFileNameWithoutExtension@Path@UnBCL@@SAPEAVString@2@PEBV32@@Z
?Concat@String@UnBCL@@SAPEAV12@PEBG000@Z
?Exists@File@UnBCL@@SAHPEBVString@2@@Z
??0IDisposable@UnBCL@@QEAA@AEBU01@@Z
??4Stream@UnBCL@@QEAAAEAV01@$$QEAV01@@Z
??4Stream@UnBCL@@QEAAAEAV01@AEBV01@@Z
??0Stream@UnBCL@@QEAA@$$QEAV01@@Z
??0Stream@UnBCL@@QEAA@AEBV01@@Z
?Compare@String@UnBCL@@SAHPEBG0H@Z
?GetDirectoryRoot@Directory@UnBCL@@SAPEAVString@2@PEBV32@@Z
?ExpandEnvironmentVariables@Environment@UnBCL@@SAPEAVString@2@PEBV32@@Z
?GetPathRoot@Path@UnBCL@@SAPEAVString@2@PEBV32@@Z
??0IDisposable@UnBCL@@QEAA@$$QEAU01@@Z
?Clone@?$Array@E@UnBCL@@UEBAPEAVObject@2@XZ
?Equals@?$Array@E@UnBCL@@UEBAHPEBVObject@2@@Z
??0?$Hashtable@PEAVString@UnBCL@@PEAV12@@UnBCL@@QEAA@HH@Z
??0InvalidOperationException@UnBCL@@QEAA@XZ
?Join@String@UnBCL@@SAPEAV12@PEBGPEAV?$Array@PEAVString@UnBCL@@@2@@Z
?get_Chars@String@UnBCL@@QEBAAEBGH@Z
??0?$SmartPtr@V?$Array@E@UnBCL@@@UnBCL@@QEAA@PEAV?$Array@E@1@@Z
??1?$SmartPtr@V?$Array@E@UnBCL@@@UnBCL@@UEAA@XZ
?get_P@?$SmartPtr@V?$Array@E@UnBCL@@@UnBCL@@QEBAPEAV?$Array@E@2@XZ
??C?$SmartPtr@V?$Array@E@UnBCL@@@UnBCL@@QEBAPEAV?$Array@E@1@XZ
?Steal@?$SmartPtr@V?$Array@E@UnBCL@@@UnBCL@@QEAAPEAV?$Array@E@2@XZ
?GetFileName@Path@UnBCL@@SAPEAVString@2@PEBV32@@Z
?IsPathRooted@Path@UnBCL@@SAHPEBVString@2@@Z
?Clone@?$Hashtable@PEAVString@UnBCL@@PEAV12@@UnBCL@@UEBAPEAVObject@2@XZ
??_D?$Hashtable@PEAVString@UnBCL@@PEAV12@@UnBCL@@QEAAXXZ
??0String@UnBCL@@QEAA@PEBGHH@Z
?Exists@Directory@UnBCL@@SAHPEBVString@2@@Z
?IsDirectoryEmpty@Directory@UnBCL@@SAHPEBVString@2@@Z
??0Win32Exception@UnBCL@@QEAA@PEBG@Z
??0?$SmartPtr@VEncoding@UnBCL@@@UnBCL@@QEAA@PEAVEncoding@1@@Z
?GetASCII@Encoding@UnBCL@@SAPEAV12@XZ
??1?$SmartPtr@VEncoding@UnBCL@@@UnBCL@@UEAA@XZ
??0StreamReader@UnBCL@@QEAA@PEBVString@1@PEAVEncoding@1@@Z
?get_P@?$SmartPtr@VEncoding@UnBCL@@@UnBCL@@QEBAPEAVEncoding@2@XZ
?DeleteNE@Directory@UnBCL@@SAHPEBVString@2@H@Z
??0StreamWriter@UnBCL@@QEAA@PEBVString@1@HPEAVEncoding@1@HH@Z
?Combine@Path@UnBCL@@SAPEAVString@2@PEBV32@0@Z
??0String@UnBCL@@QEAA@XZ
?Delete@Directory@UnBCL@@SAXPEBVString@2@H@Z
?StartsWith@String@UnBCL@@QEBAHPEBGH@Z
?ReadByte@Stream@UnBCL@@UEAAHXZ
??_DStreamWriter@UnBCL@@QEAAXXZ
??_DStreamReader@UnBCL@@QEAAXXZ
??0InvalidCastException@UnBCL@@QEAA@XZ
??5SerializationStream@UnBCL@@QEAAAEAV01@AEAPEAUISerializable@1@@Z
??0String@UnBCL@@QEAA@AEBV01@@Z
??2Object@UnBCL@@SAPEAX_KI@Z
??D?$SmartPtr@VString@UnBCL@@@UnBCL@@QEBAAEAVString@1@XZ
?SanitizeTypeName@SerializationStream@UnBCL@@SAPEAVString@2@AEBV32@@Z
?DecRef@Object@UnBCL@@QEAAHXZ
?get_P@?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$Array@PEAVString@UnBCL@@@2@XZ
?Substring@String@UnBCL@@QEBAPEAV12@HH@Z
?LastIndexOf@String@UnBCL@@QEBAHG@Z
?FromASCII@String@UnBCL@@SAPEAV12@PEBD@Z
?FormatV@String@UnBCL@@SAPEAV12@PEBGPEAD@Z
?Concat@String@UnBCL@@SAPEAV12@PEBG00@Z
?Equals@?$Array@PEAVString@UnBCL@@@UnBCL@@UEBAHPEBVObject@2@@Z
?Clone@?$Array@PEAVString@UnBCL@@@UnBCL@@UEBAPEAVObject@2@XZ
??0?$Array@PEAVString@UnBCL@@@UnBCL@@QEAA@HH@Z
??5SerializationStream@UnBCL@@QEAAAEAV01@AEAK@Z
??0MemoryStream@UnBCL@@QEAA@PEAV?$Array@E@1@HH@Z
?get_Context@SerializationStream@UnBCL@@QEBAPEAVObject@2@XZ
?ReadBytes@SerializationStream@UnBCL@@QEAAXPEAEH@Z
??5SerializationStream@UnBCL@@QEAAAEAV01@AEAG@Z
??6SerializationStream@UnBCL@@QEAAAEAV01@K@Z
??0String@UnBCL@@QEAA@PEBG@Z
?WriteBytes@SerializationStream@UnBCL@@QEAAXPEBEH@Z
??6SerializationStream@UnBCL@@QEAAAEAV01@G@Z
??_D?$Array@E@UnBCL@@QEAAXXZ
??1String@UnBCL@@UEAA@XZ
??0StringPtr@UnBCL@@QEAA@PEAVString@1@@Z
??4?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
?Compare@String@UnBCL@@SAHPEBV12@0H@Z
??_D?$Array@PEAVString@UnBCL@@@UnBCL@@QEAAXXZ
??0FileStream@UnBCL@@QEAA@PEAXW4FileAccess@1@@Z
??1ScopedObjectLock@UnBCL@@QEAA@XZ
??0ScopedObjectLock@UnBCL@@QEAA@PEAVSyncObject@1@@Z
?set_Context@SerializationStream@UnBCL@@QEAAXPEAVObject@2@@Z
??1SerializationStream@UnBCL@@UEAA@XZ
??0SerializationStream@UnBCL@@QEAA@PEAVStream@1@W4Mode@01@PEAVObject@1@@Z
??1?$ICollection@PEAVString@UnBCL@@@UnBCL@@UEAA@XZ
?MemAllocFailed@Allocator@UnBCL@@SAHXZ
?Steal@?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAAPEAVString@2@XZ
?ToLower@String@UnBCL@@QEBAPEAV12@XZ
??C?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$ArrayList@PEAVString@UnBCL@@@1@XZ
??0?$ArrayList@PEAVString@UnBCL@@@UnBCL@@QEAA@XZ
?get_Win32ErrorCode@Win32Exception@UnBCL@@QEBAKXZ
?CreateDir@Directory@UnBCL@@SAPEAVDirectoryInfo@2@PEBVString@2@@Z
?GetParentPath@Path@UnBCL@@SAPEAVString@2@PEBV32@@Z
??0SyncObject@UnBCL@@QEAA@XZ
??0MemoryStream@UnBCL@@QEAA@XZ
??0Exception@UnBCL@@QEAA@XZ
??C?$SmartPtr@VString@UnBCL@@@UnBCL@@QEBAPEAVString@1@XZ
??5SerializationStream@UnBCL@@QEAAAEAV01@AEAH@Z
??6SerializationStream@UnBCL@@QEAAAEAV01@PEBUISerializable@1@@Z
??6SerializationStream@UnBCL@@QEAAAEAV01@H@Z
??5SerializationStream@UnBCL@@QEAAAEAV01@AEA_K@Z
??5SerializationStream@UnBCL@@QEAAAEAV01@AEAPEAVString@1@@Z
??6SerializationStream@UnBCL@@QEAAAEAV01@_K@Z
??6SerializationStream@UnBCL@@QEAAAEAV01@PEBVString@1@@Z
??C?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$Array@PEAVString@UnBCL@@@1@XZ
??1?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@UEAA@XZ
??0?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEAA@PEAV?$Array@PEAVString@UnBCL@@@1@@Z
?get_CString@String@UnBCL@@QEBAPEBGXZ
??1SyncObject@UnBCL@@UEAA@XZ
??0SyncObject@UnBCL@@QEAA@AEBV01@@Z
??0?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAA@AEBV01@@Z
??0Win32Exception@UnBCL@@QEAA@KPEBGPEAVException@1@@Z
??0Win32Exception@UnBCL@@QEAA@KPEBG@Z
?ReAlloc@Allocator@UnBCL@@SAPEAXPEAX_KI@Z
??0ArgumentNullException@UnBCL@@QEAA@PEBG@Z
??1Exception@UnBCL@@UEAA@XZ
??1Win32Exception@UnBCL@@UEAA@XZ
??1ArgumentException@UnBCL@@UEAA@XZ
??1ArgumentNullException@UnBCL@@UEAA@XZ
??0ArgumentNullException@UnBCL@@QEAA@XZ
??0?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAA@XZ
??0Object@UnBCL@@QEAA@AEBV01@@Z
?ToString@Object@UnBCL@@UEBAPEAVString@2@XZ
??0?$Array@E@UnBCL@@QEAA@HH@Z
?GetBuffer@?$Array@E@UnBCL@@UEAAPEAEH@Z
??0ArgumentException@UnBCL@@QEAA@PEBG@Z
??1ISerializable@UnBCL@@UEAA@XZ
??1Object@UnBCL@@UEAA@XZ
??0Object@UnBCL@@QEAA@XZ
?Equals@String@UnBCL@@UEBAHPEBVObject@2@@Z
?GetHashCode@String@UnBCL@@UEBAHXZ
?ToString@String@UnBCL@@UEBAPEAV12@XZ
?CompareTo@String@UnBCL@@UEBAHPEBVObject@2@@Z
?Clone@String@UnBCL@@UEBAPEAVObject@2@XZ
??0String@UnBCL@@QEAA@PEBV01@@Z
?Format@String@UnBCL@@SAPEAV12@PEBGZZ
??0Win32Exception@UnBCL@@QEAA@K@Z
??1?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@UEAA@XZ
??0?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEAA@PEAV?$ArrayList@PEAVString@UnBCL@@@1@@Z
?get_P@?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$ArrayList@PEAVString@UnBCL@@@2@XZ
??1?$SmartPtr@VString@UnBCL@@@UnBCL@@UEAA@XZ
??0?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAA@PEAVString@1@@Z
??4?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
?get_P@?$SmartPtr@VString@UnBCL@@@UnBCL@@QEBAPEAVString@2@XZ
?Free@Allocator@UnBCL@@SAXPEAXI@Z
??1ArgumentOutOfRangeException@UnBCL@@UEAA@XZ
?Equals@Object@UnBCL@@UEBAHPEBV12@@Z
?GetHashCode@Object@UnBCL@@UEBAHXZ
?GetType@Object@UnBCL@@UEBAPEAVType@2@XZ
?ToString@Exception@UnBCL@@UEBAPEAVString@2@XZ
?GetObjectID@Object@UnBCL@@UEBAIXZ
?WritePhantomObject@SerializationStream@UnBCL@@QEAAHPEBVObject@2@@Z
??0SerializationException@UnBCL@@QEAA@PEBG@Z
?ToArray@MemoryStream@UnBCL@@UEBAPEAV?$Array@E@2@XZ
?ReadPhantomObject@SerializationStream@UnBCL@@QEAAXAEAPEAVObject@2@@Z
??1SerializationException@UnBCL@@UEAA@XZ
??0InvalidOperationException@UnBCL@@QEAA@PEBG@Z
??0InvalidOperationException@UnBCL@@QEAA@PEBVString@1@PEAVException@1@@Z
?CompareTo@Object@UnBCL@@UEBAHPEBV12@@Z
?Clone@Object@UnBCL@@UEBAPEAV12@XZ
?get_InnerException@Exception@UnBCL@@UEBAPEBV12@XZ
?get_Message@Exception@UnBCL@@UEBAPEBVString@2@XZ
?get_Source@Exception@UnBCL@@UEBAPEBVString@2@XZ
?set_Source@Exception@UnBCL@@UEAAXPEBVString@2@@Z
?GetBaseException@Exception@UnBCL@@UEBAPEBV12@XZ
?get_HResult@Exception@UnBCL@@UEBAJXZ
?set_HResult@Exception@UnBCL@@MEAAXJ@Z
?SetMessage@Exception@UnBCL@@MEAAXPEAVString@2@@Z
??0ArgumentOutOfRangeException@UnBCL@@QEAA@PEBG@Z
??3Object@UnBCL@@SAXPEAX@Z
??2Object@UnBCL@@SAPEAX_K@Z
?AddStackTrace@Exception@UnBCL@@QEAAXPEBD@Z
?Alloc@Allocator@UnBCL@@SAPEAX_KI@Z
??4Object@UnBCL@@QEAAAEAV01@AEBV01@@Z

migcore

??1IFileStreamProxy@Mig@@UEAA@XZ
??4IOptimizedFileStreamProxy@Mig@@QEAAAEAU01@AEBU01@@Z
??1IOptimizedFileStreamProxy@Mig@@UEAA@XZ
??0IOptimizedFileStreamProxy@Mig@@QEAA@XZ
??1CAbortException@Mig@@UEAA@XZ
??1SideAwareWin32Exception@Mig@@UEAA@XZ
??0CAbortException@Mig@@QEAA@PEBG@Z
?get_Name@CStorageType@Mig@@QEAAPEAVString@UnBCL@@XZ
?CopyStream@Mig@@YAXPEAVStream@UnBCL@@0PEAUILocalProgress@@H_J@Z
??C?$SmartPtr@UIMigLocation@Mig@@@UnBCL@@QEBAPEAUIMigLocation@Mig@@XZ
?get_P@?$SmartPtr@UIMigLocation@Mig@@@UnBCL@@QEBAPEAUIMigLocation@Mig@@XZ
?GetTypeFromString@CStorageType@Mig@@SAPEAV12@PEAVString@UnBCL@@@Z
??0SideAwareWin32Exception@Mig@@QEAA@HK@Z
??1IStreamProxy@Mig@@UEAA@XZ
?MappedFileSystemPath@CFileSystemRootMapping@Mig@@QEAAPEAVString@UnBCL@@PEAV34@@Z
??0?$SmartPtr@UIMigLocation@Mig@@@UnBCL@@QEAA@PEAUIMigLocation@Mig@@@Z
??1?$SmartPtr@UIMigLocation@Mig@@@UnBCL@@UEAA@XZ
?Clone@CFileLocation@Mig@@UEBAPEAVObject@UnBCL@@XZ
?CompareTo@CFilePattern@Mig@@UEBAHPEBVObject@UnBCL@@@Z
?ToString@CFileLocation@Mig@@UEBAPEAVString@UnBCL@@XZ
?GetHashCode@CFilePattern@Mig@@UEBAHXZ
??0IStreamProxy@Mig@@QEAA@XZ
?CreateFolder@IOptimizedFileStreamProxy@Mig@@UEAAXPEAVString@UnBCL@@HPEAHPEAUILocalProgress@@@Z
?CanCreateFolder@IOptimizedFileStreamProxy@Mig@@UEAAHXZ
??0IDataStoreNavigator@Mig@@QEAA@AEBU01@@Z
??1IDataStoreNavigator@Mig@@UEAA@XZ
??4IDataStoreNavigator@Mig@@QEAAAEAU01@AEBU01@@Z
??0IDataStoreNavigator@Mig@@QEAA@XZ
?CreateInstance@CLocationFactory@Mig@@SAPEAUIMigLocation@2@PEAVCStorageType@2@PEAV?$Array@PEAVString@UnBCL@@@UnBCL@@@Z
??1NavigatorRootAbsentException@Mig@@UEAA@XZ
??0NavigatorRootAbsentException@Mig@@QEAA@PEAUIMigLocation@1@@Z
??0?$SmartPtr@VCFileLocation@Mig@@@UnBCL@@QEAA@PEAVCFileLocation@Mig@@@Z
??1?$SmartPtr@VCFileLocation@Mig@@@UnBCL@@UEAA@XZ
?get_IsDirectory@CFileLocation@Mig@@QEBAHXZ
??0CFileLocation@Mig@@QEAA@HPEAVString@UnBCL@@@Z
??0IFileStreamProxy@Mig@@QEAA@XZ
??4?$SmartPtr@VCFileLocation@Mig@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
?GetFullPath@CFileLocation@Mig@@QEBAPEAVString@UnBCL@@XZ
??0SideAwareWin32Exception@Mig@@QEAA@HKQEBGPEAVException@UnBCL@@@Z
?Equals@CFilePattern@Mig@@UEBAHPEBVObject@UnBCL@@@Z
?MakeSureDirectoryExists@CNativeFileUtils@Mig@@SAKPEAGPEAH@Z
?get_Location@CPhysicalFile@Mig@@QEAAPEAVCFileLocation@2@XZ
?CanCreateFile@IOptimizedFileStreamProxy@Mig@@UEAAHXZ
?CreateFileW@IOptimizedFileStreamProxy@Mig@@UEAAXPEAVString@UnBCL@@KPEAH1PEAUILocalProgress@@@Z
??_DCBlobStreamProxy@Mig@@QEAAXXZ
??1CPhysicalFile@Mig@@UEAA@XZ
??_DCEfsFileReadStream@Mig@@QEAAXXZ
?Clone@CBlobStreamProxy@Mig@@UEBAPEAVObject@UnBCL@@XZ
??0CEfsFileReadStream@Mig@@QEAA@PEBVString@UnBCL@@HW4FileMode@3@W4FileAccess@3@W4FileShare@3@K@Z
??0CPhysicalFile@Mig@@QEAA@PEAVCFileLocation@1@H@Z
?Clone@CPhysicalFile@Mig@@UEBAPEAVObject@UnBCL@@XZ
?Steal@?$SmartPtr@UIMigLocation@Mig@@@UnBCL@@QEAAPEAUIMigLocation@Mig@@XZ
??0CBlobStreamProxy@Mig@@QEAA@PEAV?$Array@E@UnBCL@@H@Z
?GetStateType@CStorageType@Mig@@SAPEAV12@XZ
?GetRegistryType@CStorageType@Mig@@SAPEAV12@XZ
?GetFileType@CStorageType@Mig@@SAPEAV12@XZ
??0SideAwareWin32Exception@Mig@@QEAA@HPEAVWin32Exception@UnBCL@@@Z
?GetTempDir@CFacadeState@Mig@@SAPEAVString@UnBCL@@XZ
?GetInitialized@CFacadeState@Mig@@SAHXZ
?GetIOBufferSet@CFacadeState@Mig@@SAAEAVCIOBufferSet@2@XZ
??C?$SmartPtr@VCFileLocation@Mig@@@UnBCL@@QEBAPEAVCFileLocation@Mig@@XZ
?get_P@?$SmartPtr@VCFileLocation@Mig@@@UnBCL@@QEBAPEAVCFileLocation@Mig@@XZ
??_DCFileLocation@Mig@@QEAAXXZ

wdscore

CurrentIP
ConstructPartialMsgVW
WdsSetupLogMessageW

user32

GetMessageW
PostThreadMessageW
PeekMessageW

advapi32

CryptEncrypt
CryptDuplicateKey
CryptDestroyKey
CryptDecrypt
CryptSetKeyParam
CryptGetKeyParam

rpcrt4

UuidToStringW
UuidCreate
RpcStringFreeW

Exports

Exports

??0?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@AEAA@AEBV01@@Z
??0?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@QEAA@HH@Z
??0?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@QEAA@PEBU?$ICollection@PEAVCCatalogUser@Mig@@@1@@Z
??0?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@QEAA@XZ
??0?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@QEAA@AEBV01@@Z
??0?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@QEAA@H@Z
??0?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@QEAA@HH@Z
??0?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@QEAA@PEBU?$IDictionary@IPEAUIDevice@Mig@@@1@@Z
??0?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@QEAA@XZ
??0?$ICollection@PEAVCCatalogUser@Mig@@@UnBCL@@QEAA@AEBU01@@Z
??0?$ICollection@PEAVCCatalogUser@Mig@@@UnBCL@@QEAA@XZ
??0?$ICollection@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@UnBCL@@QEAA@AEBU01@@Z
??0?$ICollection@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@UnBCL@@QEAA@XZ
??0?$IDictionary@IPEAUIDevice@Mig@@@UnBCL@@QEAA@AEBU01@@Z
??0?$IDictionary@IPEAUIDevice@Mig@@@UnBCL@@QEAA@XZ
??0?$IEnumerable@PEAVCCatalogUser@Mig@@@UnBCL@@QEAA@AEBU01@@Z
??0?$IEnumerable@PEAVCCatalogUser@Mig@@@UnBCL@@QEAA@XZ
??0?$IEnumerable@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@UnBCL@@QEAA@AEBU01@@Z
??0?$IEnumerable@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@UnBCL@@QEAA@XZ
??0?$IList@PEAVCCatalogUser@Mig@@@UnBCL@@QEAA@AEBU01@@Z
??0?$IList@PEAVCCatalogUser@Mig@@@UnBCL@@QEAA@XZ
??0?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@QEAA@AEBV012@@Z
??0?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@QEAA@XZ
??0?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@UnBCL@@IEAA@XZ
??0?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@UnBCL@@QEAA@AEBV01@@Z
??0?$SerializableBase@VCCatalogEntry@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogEntry@Mig@@@UnBCL@@@UnBCL@@IEAA@XZ
??0?$SerializableBase@VCCatalogEntry@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogEntry@Mig@@@UnBCL@@@UnBCL@@QEAA@AEBV01@@Z
??0?$SerializableBase@VCCatalogUser@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUser@Mig@@@UnBCL@@@UnBCL@@IEAA@XZ
??0?$SerializableBase@VCCatalogUser@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUser@Mig@@@UnBCL@@@UnBCL@@QEAA@AEBV01@@Z
??0?$SerializableBase@VCCatalogUserList@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUserList@Mig@@@UnBCL@@@UnBCL@@IEAA@XZ
??0?$SerializableBase@VCCatalogUserList@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUserList@Mig@@@UnBCL@@@UnBCL@@QEAA@AEBV01@@Z
??0?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@QEAA@AEBV01@@Z
??0?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@QEAA@PEAUITrimableStream@Mig@@@Z
??0?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@QEAA@XZ
??0?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@QEAA@AEBV01@@Z
??0?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@QEAA@PEAV?$ArrayList@G@1@@Z
??0?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@QEAA@XZ
??0?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@QEAA@AEBV01@@Z
??0?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@QEAA@PEAV?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@1@@Z
??0?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@QEAA@XZ
??0?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@QEAA@AEBV01@@Z
??0?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@QEAA@PEAVCLibrarian@Mig@@@Z
??0?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@QEAA@XZ
??0?$SmartPtr@VSendState@Mig@@@UnBCL@@QEAA@AEBV01@@Z
??0?$SmartPtr@VSendState@Mig@@@UnBCL@@QEAA@PEAVSendState@Mig@@@Z
??0?$SmartPtr@VSendState@Mig@@@UnBCL@@QEAA@XZ
??0CAlternateStreamHolder@Mig@@QEAA@AEBV01@@Z
??0CAlternateStreamHolder@Mig@@QEAA@PEAVStream@UnBCL@@@Z
??0CAlternateStreamHolder@Mig@@QEAA@PEAVString@UnBCL@@@Z
??0CCatalog@Mig@@QEAA@AEBV01@@Z
??0CCatalog@Mig@@QEAA@PEAVString@UnBCL@@HHPEAV?$Array@PEAVString@UnBCL@@@3@HHH@Z
??0CCatalogEntry@Mig@@IEAA@XZ
??0CCatalogEntry@Mig@@QEAA@AEAV?$CBitVector2D@$01@1@PEAVString@UnBCL@@PEAUIMigLocation@1@22PEAVStream@4@PEAV?$Array@E@4@41PEAU?$IDictionary@PEAVString@UnBCL@@PEAVCAlternateStreamHolder@Mig@@@4@K@Z
??0CCatalogEntry@Mig@@QEAA@AEBV01@@Z
??0CCatalogLinearIterator@Mig@@AEAA@AEAVCCatalog@1@@Z
??0CCatalogLinearIterator@Mig@@QEAA@AEBV01@@Z
??0CCatalogNavigator@Mig@@IEAA@PEAUIMigLocation@1@PEAVString@UnBCL@@PEBVCCatalogTreeData@1@PEAV?$CTreeNode@VCCatalogTreeData@Mig@@@1@@Z
??0CCatalogNavigator@Mig@@QEAA@AEBV01@@Z
??0CCatalogUser@Mig@@QEAA@$$QEAV01@@Z
??0CCatalogUser@Mig@@QEAA@AEBV01@@Z
??0CCatalogUser@Mig@@QEAA@PEAVString@UnBCL@@@Z
??0CCatalogUser@Mig@@QEAA@XZ
??0CCatalogUserList@Mig@@QEAA@XZ
??0CConnectionPipeTransportStreamProxy@Mig@@IEAA@AEBV01@@Z
??0CConnectionPipeTransportStreamProxy@Mig@@QEAA@PEAVCConnectionPipeTransport@1@PEAVString@UnBCL@@1PEAVCFileSystemRootMapping@1@PEAVCDeviceProgressAdapter@1@PEAX@Z
??0CDeviceLockedObject@Mig@@IEAA@AEBV01@@Z
??0CDeviceLockedObject@Mig@@QEAA@PEAVString@UnBCL@@H@Z
??0CDeviceProgressAdapter@Mig@@QEAA@$$QEAV01@@Z
??0CDeviceProgressAdapter@Mig@@QEAA@AEBV01@@Z
??0CDeviceProgressAdapter@Mig@@QEAA@XZ
??0CExternalTransport@Mig@@QEAA@AEBV01@@Z
??0CExternalTransport@Mig@@QEAA@XZ
??0CExternalTransportInitializationData@Mig@@QEAA@$$QEAV01@@Z
??0CExternalTransportInitializationData@Mig@@QEAA@AEBV01@@Z
??0CExternalTransportInitializationData@Mig@@QEAA@PEAVCPlatform@1@PEAUIExternalStore@@PEAVString@UnBCL@@@Z
??0CExternalTransportStreamProxy@Mig@@IEAA@AEBV01@@Z
??0CExternalTransportStreamProxy@Mig@@QEAA@PEAVCExternalTransport@1@PEAUIExternalStore@@PEAVString@UnBCL@@PEAVCFileSystemRootMapping@1@PEAVCDeviceProgressAdapter@1@@Z
??0CHardLinkTransportStreamProxy@Mig@@IEAA@AEBV01@@Z
??0CHardLinkTransportStreamProxy@Mig@@QEAA@PEAVCUNCTransport@1@PEAVString@UnBCL@@1PEAVCFileSystemRootMapping@1@PEAVCDeviceProgressAdapter@1@@Z
??0CIMGTransport@Mig@@QEAA@AEBV01@@Z
??0CIMGTransport@Mig@@QEAA@XZ
??0CLibTransport@Mig@@QEAA@$$QEAV01@@Z
??0CLibTransport@Mig@@QEAA@AEBV01@@Z
??0CLibTransport@Mig@@QEAA@XZ
??0CLibTransportInitializationData@Mig@@QEAA@$$QEAV01@@Z
??0CLibTransportInitializationData@Mig@@QEAA@AEBV01@@Z
??0CLibTransportInitializationData@Mig@@QEAA@PEBG0PEAUITransportUI@@PEAUIMigStreamSizeRecorder@@@Z
??0CLibrarian@Mig@@QEAA@AEBV01@@Z
??0CLibrarian@Mig@@QEAA@PEAUITrimableStream@1@HH_K@Z
??0CLibrarian@Mig@@QEAA@PEAUITrimableStream@1@HH_KPEAH2@Z
??0CMediaManager@Mig@@QEAA@AEBV01@@Z
??0CMediaManager@Mig@@QEAA@PEAVCPlatform@1@@Z
??0CMediaManagerStreamProxy@Mig@@IEAA@AEBV01@@Z
??0CMediaManagerStreamProxy@Mig@@QEAA@PEAUIDevice@1@PEAVString@UnBCL@@PEAVCDeviceProgressAdapter@1@@Z
??0CNonTrimableFileStream@Mig@@QEAA@AEBV01@@Z
??0CNonTrimableFileStream@Mig@@QEAA@PEBVString@UnBCL@@W4FileMode@3@W4FileAccess@3@W4FileShare@3@KPEAUIDevice@1@@Z
??0CSimulationTableStream@@QEAA@AEBV0@@Z
??0CSimulationTableStream@@QEAA@PEAUIMigStreamSizeRecorder@@PEBG@Z
??0CSimulationTrimableStream@Mig@@QEAA@$$QEAV01@@Z
??0CSimulationTrimableStream@Mig@@QEAA@AEBV01@@Z
??0CSimulationTrimableStream@Mig@@QEAA@PEAUIMigStreamSizeRecorder@@@Z
??0CSplitFileStream@Mig@@QEAA@AEBV01@@Z
??0CSplitFileStream@Mig@@QEAA@PEAVString@UnBCL@@IP6AXPEAEIH@ZP6AH1IH@Z_JHPEAUIDevice@1@@Z
??0CUNCTransport@Mig@@QEAA@AEBV01@@Z
??0CUNCTransport@Mig@@QEAA@XZ
??0CUNCTransportInitializationData@Mig@@QEAA@$$QEAV01@@Z
??0CUNCTransportInitializationData@Mig@@QEAA@AEBV01@@Z
??0CUNCTransportInitializationData@Mig@@QEAA@PEBGPEAUIMigHardLinkPolicy@@PEAV?$ArrayList@G@UnBCL@@PEAVCPlatform@1@PEAUIMigStreamSizeRecorder@@@Z
??0IDevice@Mig@@QEAA@$$QEAU01@@Z
??0IDevice@Mig@@QEAA@AEBU01@@Z
??0IDevice@Mig@@QEAA@XZ
??0IDeviceInitializationData@Mig@@QEAA@$$QEAU01@@Z
??0IDeviceInitializationData@Mig@@QEAA@AEBU01@@Z
??0IDeviceInitializationData@Mig@@QEAA@XZ
??0IStoreInterface@Mig@@QEAA@$$QEAU01@@Z
??0IStoreInterface@Mig@@QEAA@AEBU01@@Z
??0IStoreInterface@Mig@@QEAA@XZ
??0ITrimableStream@Mig@@QEAA@$$QEAU01@@Z
??0ITrimableStream@Mig@@QEAA@AEBU01@@Z
??0ITrimableStream@Mig@@QEAA@XZ
??0SendState@Mig@@QEAA@$$QEAV01@@Z
??0SendState@Mig@@QEAA@AEBV01@@Z
??0SendState@Mig@@QEAA@XZ
??1?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@UEAA@XZ
??1?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@UEAA@XZ
??1?$ICollection@PEAVCCatalogUser@Mig@@@UnBCL@@UEAA@XZ
??1?$ICollection@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@UnBCL@@UEAA@XZ
??1?$IDictionary@IPEAUIDevice@Mig@@@UnBCL@@UEAA@XZ
??1?$IList@PEAVCCatalogUser@Mig@@@UnBCL@@UEAA@XZ
??1?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@UEAA@XZ
??1?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@UnBCL@@UEAA@XZ
??1?$SerializableBase@VCCatalogEntry@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogEntry@Mig@@@UnBCL@@@UnBCL@@UEAA@XZ
??1?$SerializableBase@VCCatalogUser@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUser@Mig@@@UnBCL@@@UnBCL@@UEAA@XZ
??1?$SerializableBase@VCCatalogUserList@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUserList@Mig@@@UnBCL@@@UnBCL@@UEAA@XZ
??1?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@UEAA@XZ
??1?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@UEAA@XZ
??1?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@UEAA@XZ
??1?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@UEAA@XZ
??1?$SmartPtr@VSendState@Mig@@@UnBCL@@UEAA@XZ
??1CAlternateStreamHolder@Mig@@UEAA@XZ
??1CCatalog@Mig@@UEAA@XZ
??1CCatalogEntry@Mig@@UEAA@XZ
??1CCatalogLinearIterator@Mig@@UEAA@XZ
??1CCatalogNavigator@Mig@@UEAA@XZ
??1CCatalogUser@Mig@@UEAA@XZ
??1CCatalogUserList@Mig@@UEAA@XZ
??1CConnectionPipeTransportStreamProxy@Mig@@UEAA@XZ
??1CDeviceLockedObject@Mig@@UEAA@XZ
??1CDeviceProgressAdapter@Mig@@UEAA@XZ
??1CExternalTransport@Mig@@UEAA@XZ
??1CExternalTransportInitializationData@Mig@@UEAA@XZ
??1CExternalTransportStreamProxy@Mig@@UEAA@XZ
??1CHardLinkTransportStreamProxy@Mig@@UEAA@XZ
??1CIMGTransport@Mig@@UEAA@XZ
??1CLibTransport@Mig@@UEAA@XZ
??1CLibTransportInitializationData@Mig@@UEAA@XZ
??1CLibrarian@Mig@@UEAA@XZ
??1CMediaManager@Mig@@UEAA@XZ
??1CMediaManagerStreamProxy@Mig@@UEAA@XZ
??1CNonTrimableFileStream@Mig@@UEAA@XZ
??1CSimulationTableStream@@UEAA@XZ
??1CSimulationTrimableStream@Mig@@UEAA@XZ
??1CSplitFileStream@Mig@@UEAA@XZ
??1CUNCTransport@Mig@@UEAA@XZ
??1CUNCTransportInitializationData@Mig@@UEAA@XZ
??1IDevice@Mig@@UEAA@XZ
??1IDeviceInitializationData@Mig@@UEAA@XZ
??1IStoreInterface@Mig@@UEAA@XZ
??1ITrimableStream@Mig@@UEAA@XZ
??1SendState@Mig@@UEAA@XZ
??4?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4?$ICollection@PEAVCCatalogUser@Mig@@@UnBCL@@QEAAAEAU01@$$QEAU01@@Z
??4?$ICollection@PEAVCCatalogUser@Mig@@@UnBCL@@QEAAAEAU01@AEBU01@@Z
??4?$ICollection@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@UnBCL@@QEAAAEAU01@$$QEAU01@@Z
??4?$ICollection@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@UnBCL@@QEAAAEAU01@AEBU01@@Z
??4?$IDictionary@IPEAUIDevice@Mig@@@UnBCL@@QEAAAEAU01@$$QEAU01@@Z
??4?$IDictionary@IPEAUIDevice@Mig@@@UnBCL@@QEAAAEAU01@AEBU01@@Z
??4?$IEnumerable@PEAVCCatalogUser@Mig@@@UnBCL@@QEAAAEAU01@$$QEAU01@@Z
??4?$IEnumerable@PEAVCCatalogUser@Mig@@@UnBCL@@QEAAAEAU01@AEBU01@@Z
??4?$IEnumerable@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@UnBCL@@QEAAAEAU01@$$QEAU01@@Z
??4?$IEnumerable@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@UnBCL@@QEAAAEAU01@AEBU01@@Z
??4?$IList@PEAVCCatalogUser@Mig@@@UnBCL@@QEAAAEAU01@$$QEAU01@@Z
??4?$IList@PEAVCCatalogUser@Mig@@@UnBCL@@QEAAAEAU01@AEBU01@@Z
??4?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@QEAAAEAV012@$$QEAV012@@Z
??4?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@QEAAAEAV012@AEBV012@@Z
??4?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@UnBCL@@QEAAAEAV01@$$QEAV01@@Z
??4?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4?$SerializableBase@VCCatalogEntry@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogEntry@Mig@@@UnBCL@@@UnBCL@@QEAAAEAV01@$$QEAV01@@Z
??4?$SerializableBase@VCCatalogEntry@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogEntry@Mig@@@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4?$SerializableBase@VCCatalogUser@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUser@Mig@@@UnBCL@@@UnBCL@@QEAAAEAV01@$$QEAV01@@Z
??4?$SerializableBase@VCCatalogUser@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUser@Mig@@@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4?$SerializableBase@VCCatalogUserList@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUserList@Mig@@@UnBCL@@@UnBCL@@QEAAAEAV01@$$QEAV01@@Z
??4?$SerializableBase@VCCatalogUserList@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUserList@Mig@@@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4?$SmartPtr@VSendState@Mig@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4CAlternateStreamHolder@Mig@@QEAAAEAV01@AEBV01@@Z
??4CCatalog@Mig@@QEAAAEAV01@AEBV01@@Z
??4CCatalogEntry@Mig@@QEAAAEAV01@AEBV01@@Z
??4CCatalogNavigator@Mig@@QEAAAEAV01@AEBV01@@Z
??4CCatalogUser@Mig@@QEAAAEAV01@$$QEAV01@@Z
??4CCatalogUser@Mig@@QEAAAEAV01@AEBV01@@Z
??4CCatalogUserList@Mig@@QEAAAEAV01@$$QEAV01@@Z
??4CCatalogUserList@Mig@@QEAAAEAV01@AEBV01@@Z
??4CConnectionPipeTransportStreamProxy@Mig@@QEAAAEAV01@AEBV01@@Z
??4CDeviceLockedObject@Mig@@QEAAAEAV01@AEBV01@@Z
??4CDeviceProgressAdapter@Mig@@QEAAAEAV01@$$QEAV01@@Z
??4CDeviceProgressAdapter@Mig@@QEAAAEAV01@AEBV01@@Z
??4CExternalTransport@Mig@@QEAAAEAV01@AEBV01@@Z
??4CExternalTransportInitializationData@Mig@@QEAAAEAV01@$$QEAV01@@Z
??4CExternalTransportInitializationData@Mig@@QEAAAEAV01@AEBV01@@Z
??4CExternalTransportStreamProxy@Mig@@QEAAAEAV01@AEBV01@@Z
??4CHardLinkTransportStreamProxy@Mig@@QEAAAEAV01@AEBV01@@Z
??4CIMGTransport@Mig@@QEAAAEAV01@AEBV01@@Z
??4CLibTransport@Mig@@QEAAAEAV01@$$QEAV01@@Z
??4CLibTransport@Mig@@QEAAAEAV01@AEBV01@@Z
??4CLibTransportInitializationData@Mig@@QEAAAEAV01@$$QEAV01@@Z
??4CLibTransportInitializationData@Mig@@QEAAAEAV01@AEBV01@@Z
??4CLibrarian@Mig@@QEAAAEAV01@AEBV01@@Z
??4CMediaManager@Mig@@QEAAAEAV01@AEBV01@@Z
??4CMediaManagerStreamProxy@Mig@@QEAAAEAV01@AEBV01@@Z
??4CNonTrimableFileStream@Mig@@QEAAAEAV01@AEBV01@@Z
??4CSimulationTableStream@@QEAAAEAV0@AEBV0@@Z
??4CSimulationTrimableStream@Mig@@QEAAAEAV01@$$QEAV01@@Z
??4CSimulationTrimableStream@Mig@@QEAAAEAV01@AEBV01@@Z
??4CSplitFileStream@Mig@@QEAAAEAV01@AEBV01@@Z
??4CUNCTransport@Mig@@QEAAAEAV01@AEBV01@@Z
??4CUNCTransportInitializationData@Mig@@QEAAAEAV01@$$QEAV01@@Z
??4CUNCTransportInitializationData@Mig@@QEAAAEAV01@AEBV01@@Z
??4IDevice@Mig@@QEAAAEAU01@$$QEAU01@@Z
??4IDevice@Mig@@QEAAAEAU01@AEBU01@@Z
??4IDeviceInitializationData@Mig@@QEAAAEAU01@$$QEAU01@@Z
??4IDeviceInitializationData@Mig@@QEAAAEAU01@AEBU01@@Z
??4IStoreInterface@Mig@@QEAAAEAU01@$$QEAU01@@Z
??4IStoreInterface@Mig@@QEAAAEAU01@AEBU01@@Z
??4ITrimableStream@Mig@@QEAAAEAU01@$$QEAU01@@Z
??4ITrimableStream@Mig@@QEAAAEAU01@AEBU01@@Z
??4SendState@Mig@@QEAAAEAV01@$$QEAV01@@Z
??4SendState@Mig@@QEAAAEAV01@AEBV01@@Z
??7?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@QEBA_NXZ
??7?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@QEBA_NXZ
??7?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@QEBA_NXZ
??7?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@QEBA_NXZ
??7?$SmartPtr@VSendState@Mig@@@UnBCL@@QEBA_NXZ
??B?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@QEBAPEAVNullTest@01@XZ
??B?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@QEBAPEAVNullTest@01@XZ
??B?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAVNullTest@01@XZ
??B?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@QEBAPEAVNullTest@01@XZ
??B?$SmartPtr@VSendState@Mig@@@UnBCL@@QEBAPEAVNullTest@01@XZ
??C?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@QEBAPEAUITrimableStream@Mig@@XZ
??C?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@QEBAPEAV?$ArrayList@G@1@XZ
??C?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@1@XZ
??C?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@QEBAPEAVCLibrarian@Mig@@XZ
??C?$SmartPtr@VSendState@Mig@@@UnBCL@@QEBAPEAVSendState@Mig@@XZ
??D?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@QEBAAEAUITrimableStream@Mig@@XZ
??D?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@QEBAAEAV?$ArrayList@G@1@XZ
??D?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@QEBAAEAV?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@1@XZ
??D?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@QEBAAEAVCLibrarian@Mig@@XZ
??D?$SmartPtr@VSendState@Mig@@@UnBCL@@QEBAAEAVSendState@Mig@@XZ
??_7?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@6B01@@
??_7?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@6B?$ICollection@PEAVCCatalogUser@Mig@@@1@@
??_7?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@6B?$IEnumerable@PEAVCCatalogUser@Mig@@@1@@
??_7?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@6B?$IList@PEAVCCatalogUser@Mig@@@1@@
??_7?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@6B?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@1@@
??_7?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@6BISerializable@1@@
??_7?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@6BObject@1@@
??_7?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@6B01@@
??_7?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@6B?$ICollection@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@1@@
??_7?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@6B?$IDictionary@IPEAUIDevice@Mig@@@1@@
??_7?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@6B?$IEnumerable@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@1@@
??_7?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@6BObject@1@@
??_7?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@6B?$ICollection@PEAVCCatalogUser@Mig@@@2@@
??_7?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@6B?$IEnumerable@PEAVCCatalogUser@Mig@@@2@@
??_7?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@6B?$IList@PEAVCCatalogUser@Mig@@@2@@
??_7?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@6B?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@2@@
??_7?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@6BISerializable@2@@
??_7?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@6BObject@2@@
??_7?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@UnBCL@@6B01@@
??_7?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@UnBCL@@6BISerializable@1@@
??_7?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@UnBCL@@6BObject@1@@
??_7?$SerializableBase@VCCatalogEntry@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogEntry@Mig@@@UnBCL@@@UnBCL@@6B01@@
??_7?$SerializableBase@VCCatalogEntry@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogEntry@Mig@@@UnBCL@@@UnBCL@@6BISerializable@1@@
??_7?$SerializableBase@VCCatalogEntry@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogEntry@Mig@@@UnBCL@@@UnBCL@@6BObject@1@@
??_7?$SerializableBase@VCCatalogUser@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUser@Mig@@@UnBCL@@@UnBCL@@6B01@@
??_7?$SerializableBase@VCCatalogUser@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUser@Mig@@@UnBCL@@@UnBCL@@6BISerializable@1@@
??_7?$SerializableBase@VCCatalogUser@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUser@Mig@@@UnBCL@@@UnBCL@@6BObject@1@@
??_7?$SerializableBase@VCCatalogUserList@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUserList@Mig@@@UnBCL@@@UnBCL@@6B01@@
??_7?$SerializableBase@VCCatalogUserList@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUserList@Mig@@@UnBCL@@@UnBCL@@6BISerializable@1@@
??_7?$SerializableBase@VCCatalogUserList@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUserList@Mig@@@UnBCL@@@UnBCL@@6BObject@1@@
??_7?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@6B@
??_7?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@6B@
??_7?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@6B@
??_7?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@6B@
??_7?$SmartPtr@VSendState@Mig@@@UnBCL@@6B@
??_7CAlternateStreamHolder@Mig@@6B@
??_7CCatalog@Mig@@6B@
??_7CCatalogEntry@Mig@@6B?$SerializableBase@VCCatalogEntry@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogEntry@Mig@@@UnBCL@@@UnBCL@@@
??_7CCatalogEntry@Mig@@6B@
??_7CCatalogEntry@Mig@@6BISerializable@UnBCL@@@
??_7CCatalogLinearIterator@Mig@@6B@
??_7CCatalogNavigator@Mig@@6B@
??_7CCatalogNavigator@Mig@@6BIDataStoreNavigator@1@@
??_7CCatalogUser@Mig@@6B?$SerializableBase@VCCatalogUser@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUser@Mig@@@UnBCL@@@UnBCL@@@
??_7CCatalogUser@Mig@@6B@
??_7CCatalogUser@Mig@@6BISerializable@UnBCL@@@
??_7CCatalogUserList@Mig@@6B?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@
??_7CCatalogUserList@Mig@@6B?$ICollection@PEAVCCatalogUser@Mig@@@UnBCL@@@
??_7CCatalogUserList@Mig@@6B?$IEnumerable@PEAVCCatalogUser@Mig@@@UnBCL@@@
??_7CCatalogUserList@Mig@@6B?$IList@PEAVCCatalogUser@Mig@@@UnBCL@@@
??_7CCatalogUserList@Mig@@6B?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@UnBCL@@@
??_7CCatalogUserList@Mig@@6B?$SerializableBase@VCCatalogUserList@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUserList@Mig@@@UnBCL@@@UnBCL@@@
??_7CCatalogUserList@Mig@@6BISerializable@UnBCL@@@
??_7CCatalogUserList@Mig@@6BObject@UnBCL@@@
??_7CConnectionPipeTransportStreamProxy@Mig@@6B@
??_7CConnectionPipeTransportStreamProxy@Mig@@6BIFileStreamProxy@1@@
??_7CConnectionPipeTransportStreamProxy@Mig@@6BIOptimizedFileStreamProxy@1@@
??_7CConnectionPipeTransportStreamProxy@Mig@@6BIStreamProxy@1@@
??_7CConnectionPipeTransportStreamProxy@Mig@@6BObject@UnBCL@@@
??_7CDeviceLockedObject@Mig@@6B@
??_7CDeviceProgressAdapter@Mig@@6B@
??_7CExternalTransport@Mig@@6B@
??_7CExternalTransportInitializationData@Mig@@6B@
??_7CExternalTransportStreamProxy@Mig@@6B@
??_7CExternalTransportStreamProxy@Mig@@6BIFileStreamProxy@1@@
??_7CExternalTransportStreamProxy@Mig@@6BIOptimizedFileStreamProxy@1@@
??_7CExternalTransportStreamProxy@Mig@@6BIStreamProxy@1@@
??_7CExternalTransportStreamProxy@Mig@@6BObject@UnBCL@@@
??_7CHardLinkTransportStreamProxy@Mig@@6B@
??_7CHardLinkTransportStreamProxy@Mig@@6BIFileStreamProxy@1@@
??_7CHardLinkTransportStreamProxy@Mig@@6BIOptimizedFileStreamProxy@1@@
??_7CHardLinkTransportStreamProxy@Mig@@6BIStreamProxy@1@@
??_7CHardLinkTransportStreamProxy@Mig@@6BObject@UnBCL@@@
??_7CIMGTransport@Mig@@6B@
??_7CLibTransport@Mig@@6B@
??_7CLibTransportInitializationData@Mig@@6B@
??_7CLibrarian@Mig@@6B@
??_7CMediaManager@Mig@@6B@
??_7CMediaManager@Mig@@6BIStoreInterface@1@@
??_7CMediaManagerStreamProxy@Mig@@6B@
??_7CMediaManagerStreamProxy@Mig@@6BIFileStreamProxy@1@@
??_7CMediaManagerStreamProxy@Mig@@6BIOptimizedFileStreamProxy@1@@
??_7CMediaManagerStreamProxy@Mig@@6BIStreamProxy@1@@
??_7CMediaManagerStreamProxy@Mig@@6BObject@UnBCL@@@
??_7CNonTrimableFileStream@Mig@@6BIDisposable@UnBCL@@@
??_7CNonTrimableFileStream@Mig@@6BObject@UnBCL@@@
??_7CNonTrimableFileStream@Mig@@6BStream@UnBCL@@@
??_7CSimulationTableStream@@6BIDisposable@UnBCL@@@
??_7CSimulationTableStream@@6BObject@UnBCL@@@
??_7CSimulationTableStream@@6BStream@UnBCL@@@
??_7CSimulationTrimableStream@Mig@@6BIDisposable@UnBCL@@@
??_7CSimulationTrimableStream@Mig@@6BObject@UnBCL@@@
??_7CSimulationTrimableStream@Mig@@6BStream@UnBCL@@@
??_7CSplitFileStream@Mig@@6BIDisposable@UnBCL@@@
??_7CSplitFileStream@Mig@@6BObject@UnBCL@@@
??_7CSplitFileStream@Mig@@6BStream@UnBCL@@@
??_7CUNCTransport@Mig@@6B@
??_7CUNCTransportInitializationData@Mig@@6B@
??_7SendState@Mig@@6B@
??_8?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@7B?$ICollection@PEAVCCatalogUser@Mig@@@1@@
??_8?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@7B?$IList@PEAVCCatalogUser@Mig@@@1@@
??_8?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@7B?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@1@@
??_8?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@7B?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@1@@
??_8?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@7B@
??_8?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@7BISerializable@1@@
??_8?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@7B?$ICollection@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@1@@
??_8?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@7B?$IDictionary@IPEAUIDevice@Mig@@@1@@
??_8?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@7B@
??_8CCatalogEntry@Mig@@7B01@@
??_8CCatalogEntry@Mig@@7B?$SerializableBase@VCCatalogEntry@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogEntry@Mig@@@UnBCL@@@UnBCL@@@
??_8CCatalogEntry@Mig@@7BISerializable@UnBCL@@@
??_8CCatalogNavigator@Mig@@7B01@@
??_8CCatalogNavigator@Mig@@7BIDataStoreNavigator@1@@
??_8CCatalogUser@Mig@@7B?$SerializableBase@VCCatalogUser@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUser@Mig@@@UnBCL@@@UnBCL@@@
??_8CCatalogUser@Mig@@7B@
??_8CCatalogUser@Mig@@7BISerializable@UnBCL@@@
??_8CCatalogUserList@Mig@@7B01@@
??_8CCatalogUserList@Mig@@7B?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@
??_8CCatalogUserList@Mig@@7B?$ICollection@PEAVCCatalogUser@Mig@@@UnBCL@@@
??_8CCatalogUserList@Mig@@7B?$IList@PEAVCCatalogUser@Mig@@@UnBCL@@@
??_8CCatalogUserList@Mig@@7B?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@@
??_8CCatalogUserList@Mig@@7B?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@UnBCL@@@
??_8CCatalogUserList@Mig@@7B?$SerializableBase@VCCatalogUserList@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUserList@Mig@@@UnBCL@@@UnBCL@@@
??_8CCatalogUserList@Mig@@7BISerializable@UnBCL@@@
??_8CConnectionPipeTransportStreamProxy@Mig@@7B@
??_8CConnectionPipeTransportStreamProxy@Mig@@7BCMediaManagerStreamProxy@1@@
??_8CConnectionPipeTransportStreamProxy@Mig@@7BIFileStreamProxy@1@@
??_8CConnectionPipeTransportStreamProxy@Mig@@7BIOptimizedFileStreamProxy@1@@
??_8CConnectionPipeTransportStreamProxy@Mig@@7BIStreamProxy@1@@
??_8CExternalTransportStreamProxy@Mig@@7B@
??_8CExternalTransportStreamProxy@Mig@@7BCMediaManagerStreamProxy@1@@
??_8CExternalTransportStreamProxy@Mig@@7BIFileStreamProxy@1@@
??_8CExternalTransportStreamProxy@Mig@@7BIOptimizedFileStreamProxy@1@@
??_8CExternalTransportStreamProxy@Mig@@7BIStreamProxy@1@@
??_8CHardLinkTransportStreamProxy@Mig@@7B@
??_8CHardLinkTransportStreamProxy@Mig@@7BCMediaManagerStreamProxy@1@@
??_8CHardLinkTransportStreamProxy@Mig@@7BIFileStreamProxy@1@@
??_8CHardLinkTransportStreamProxy@Mig@@7BIOptimizedFileStreamProxy@1@@
??_8CHardLinkTransportStreamProxy@Mig@@7BIStreamProxy@1@@
??_8CMediaManager@Mig@@7B01@@
??_8CMediaManager@Mig@@7BIStoreInterface@1@@
??_8CMediaManagerStreamProxy@Mig@@7B01@@
??_8CMediaManagerStreamProxy@Mig@@7BIFileStreamProxy@1@@
??_8CMediaManagerStreamProxy@Mig@@7BIOptimizedFileStreamProxy@1@@
??_8CMediaManagerStreamProxy@Mig@@7BIStreamProxy@1@@
??_8CNonTrimableFileStream@Mig@@7BIDisposable@UnBCL@@@
??_8CNonTrimableFileStream@Mig@@7BStream@UnBCL@@@
??_8CSimulationTableStream@@7BIDisposable@UnBCL@@@
??_8CSimulationTableStream@@7BStream@UnBCL@@@
??_8CSimulationTrimableStream@Mig@@7BIDisposable@UnBCL@@@
??_8CSimulationTrimableStream@Mig@@7BStream@UnBCL@@@
??_8CSplitFileStream@Mig@@7BIDisposable@UnBCL@@@
??_8CSplitFileStream@Mig@@7BStream@UnBCL@@@
??_D?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@QEAAXXZ
??_D?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@QEAAXXZ
??_DCCatalogEntry@Mig@@QEAAXXZ
??_DCCatalogNavigator@Mig@@QEAAXXZ
??_DCCatalogUser@Mig@@QEAAXXZ
??_DCCatalogUserList@Mig@@QEAAXXZ
??_DCConnectionPipeTransportStreamProxy@Mig@@QEAAXXZ
??_DCExternalTransportStreamProxy@Mig@@QEAAXXZ
??_DCHardLinkTransportStreamProxy@Mig@@QEAAXXZ
??_DCMediaManager@Mig@@QEAAXXZ
??_DCMediaManagerStreamProxy@Mig@@QEAAXXZ
??_DCNonTrimableFileStream@Mig@@QEAAXXZ
??_DCSimulationTableStream@@QEAAXXZ
??_DCSimulationTrimableStream@Mig@@QEAAXXZ
??_DCSplitFileStream@Mig@@QEAAXXZ
?AbandonCommited@CNonTrimableFileStream@Mig@@UEAAXXZ
?AbandonCommited@CSimulationTrimableStream@Mig@@UEAAXXZ
?AbandonCommited@CSplitFileStream@Mig@@UEAAXXZ
?Add@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@UEAAHPEAVCCatalogUser@Mig@@@Z
?Add@?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@UEAAXIPEAUIDevice@Mig@@@Z
?AddComplexNode@CCatalog@Mig@@AEAAXPEAPEAV?$CTreeNode@VCCatalogTreeData@Mig@@@2@0PEAVString@UnBCL@@PEAUIMigLocation@2@2@Z
?AddDictionary@?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@AEAAXPEBU?$IDictionary@IPEAUIDevice@Mig@@@2@@Z
?AddNonExistEntry@CCatalog@Mig@@QEAAHW4CatalogNamespace@2@PEAVString@UnBCL@@PEAUIMigLocation@2@@Z
?AddObject@CCatalog@Mig@@QEAAHW4CatalogNamespace@2@PEAVString@UnBCL@@PEAUIMigLocation@2@22PEAVStream@5@PEAV?$Array@E@5@41KPEAU?$IDictionary@PEAVString@UnBCL@@PEAVCAlternateStreamHolder@Mig@@@5@@Z
?AddObject@CLibrarian@Mig@@QEAAXPEAVStream@UnBCL@@PEAVString@4@PEAUILocalProgress@@PEA_J@Z
?AddObject@CMediaManager@Mig@@UEAAXPEAVCUserContext@2@PEAVCFileSystemRootMapping@2@PEAVCDataUnit@2@PEAUIMigLocation@2@3PEAUILocalProgress@@HH@Z
?AddObjectNode@CCatalog@Mig@@AEAAPEAV?$CTreeNode@VCCatalogTreeData@Mig@@@2@PEAVString@UnBCL@@PEAUIMigLocation@2@@Z
?AddObjectToUserView@CCatalog@Mig@@QEAAHW4CatalogNamespace@2@PEAVString@UnBCL@@PEAUIMigLocation@2@@Z
?AddRange@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@UEAAXPEBU?$ICollection@PEAVCCatalogUser@Mig@@@2@@Z
?Assign@?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@AEAAXAEBV12@@Z
?Assign@?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@AEAAXPEAUITrimableStream@Mig@@@Z
?Assign@?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@AEAAXAEBV12@@Z
?Assign@?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@AEAAXPEAV?$ArrayList@G@2@@Z
?Assign@?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@AEAAXAEBV12@@Z
?Assign@?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@AEAAXPEAV?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@2@@Z
?Assign@?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@AEAAXAEBV12@@Z
?Assign@?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@AEAAXPEAVCLibrarian@Mig@@@Z
?Assign@?$SmartPtr@VSendState@Mig@@@UnBCL@@AEAAXAEBV12@@Z
?Assign@?$SmartPtr@VSendState@Mig@@@UnBCL@@AEAAXPEAVSendState@Mig@@@Z
?BeginContext@CDeviceProgressAdapter@Mig@@UEAAXPEAVString@UnBCL@@@Z
?BeginMigrationUnit@CDeviceProgressAdapter@Mig@@UEAAXPEAUIMigUnit@@W4EXECUTION_PHASE@@@Z
?BinarySearch@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@AEAAHHHPEAVCCatalogUser@Mig@@PEAU?$IComparer@PEAVCCatalogUser@Mig@@@2@@Z
?BinarySearch@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@SAHPEAV12@PEAVCCatalogUser@Mig@@PEAU?$IComparer@PEAVCCatalogUser@Mig@@@2@@Z
?BinarySearch@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@UEAAHPEAVCCatalogUser@Mig@@PEAU?$IComparer@PEAVCCatalogUser@Mig@@@2@@Z
?BuildObjectFilePath@CUNCTransport@Mig@@IEAAPEAVString@UnBCL@@PEBGGG@Z
?BuildObjectFilePath@CUNCTransport@Mig@@IEAAPEAVString@UnBCL@@PEBGHPEAPEAV34@@Z
?BuildSearchTree@CCatalog@Mig@@AEAAXT_ULARGE_INTEGER@@HPEAVString@UnBCL@@@Z
?BuildUserMap@CCatalog@Mig@@AEAAXPEAV?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@Z
?BuildUserMap@CCatalog@Mig@@AEAAXPEAVCCatalogUserList@2@@Z
?CanCreateFile@CConnectionPipeTransportStreamProxy@Mig@@UEAAHXZ
?CanCreateFile@CExternalTransportStreamProxy@Mig@@UEAAHXZ
?CanCreateFile@CHardLinkTransportStreamProxy@Mig@@UEAAHXZ
?CheckForDeviceErrors@CNonTrimableFileStream@Mig@@IEBAXPEAVException@UnBCL@@@Z
?CheckForDeviceErrors@CSplitFileStream@Mig@@IEBAXPEAVException@UnBCL@@@Z
?Clear@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@UEAAXXZ
?Clear@?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@UEAAXXZ
?Clone@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@UEBAPEAVObject@2@XZ
?Clone@?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@UEBAPEAVObject@2@XZ
?Clone@CConnectionPipeTransportStreamProxy@Mig@@UEBAPEAVObject@UnBCL@@XZ
?Clone@CDeviceLockedObject@Mig@@UEBAPEAVObject@UnBCL@@XZ
?Clone@CExternalTransportStreamProxy@Mig@@UEBAPEAVObject@UnBCL@@XZ
?Clone@CHardLinkTransportStreamProxy@Mig@@UEBAPEAVObject@UnBCL@@XZ
?Clone@CMediaManagerStreamProxy@Mig@@UEBAPEAVObject@UnBCL@@XZ
?Close@CExternalTransport@Mig@@UEAAXH@Z
?Close@CIMGTransport@Mig@@UEAAXH@Z
?Close@CLibTransport@Mig@@UEAAXH@Z
?Close@CLibrarian@Mig@@QEAAXH@Z
?Close@CNonTrimableFileStream@Mig@@UEAAXXZ
?Close@CSimulationTableStream@@UEAAXXZ
?Close@CSimulationTrimableStream@Mig@@UEAAXXZ
?Close@CSplitFileStream@Mig@@UEAAXXZ
?Close@CUNCTransport@Mig@@UEAAXH@Z
?CloseTransport@CMediaManager@Mig@@UEAAXH@Z
?Commit@CNonTrimableFileStream@Mig@@UEAAX_J@Z
?Commit@CSimulationTrimableStream@Mig@@UEAAX_J@Z
?Commit@CSplitFileStream@Mig@@UEAAX_J@Z
?CompressAndEncryptBuffer@CLibrarian@Mig@@IEAAXKH@Z
?Contains@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@UEBAHQEAVCCatalogUser@Mig@@@Z
?Contains@?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@UEBAHI@Z
?ContainsKey@?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@UEBAHI@Z
?ContainsValue@?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@UEBAHPEAUIDevice@Mig@@@Z
?Copy@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@SAXPEBV12@HPEAV12@HH@Z
?Copy@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@SAXPEBV12@PEAV12@H@Z
?CopyTo@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@UEBAXPEAV?$Array@PEAVCCatalogUser@Mig@@@2@H@Z
?CopyTo@?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@UEBAXPEAV?$Array@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@2@H@Z

Sections

.text
Size: 572KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 545KB - Virtual size: 545KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
citiz/fr/docs/perf/wbemess.dll
.dll regsvr32 windows x64

Password: 1234

a3991ce7a466ed742d17cdb3fd06e0de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

??1type_info@@UEAA@XZ
?terminate@@YAXXZ
_amsg_exit
_XcptFilter
free
_onexit
_unlock
_lock
memmove
memcpy
_CxxThrowException
?what@exception@@UEBAPEBDXZ
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBQEBD@Z
__C_specific_handler
swscanf
wcschr
wcsstr
_vsnwprintf
qsort
rand
__dllonexit
_initterm
malloc
wcsncmp
_purecall
__CxxFrameHandler3
sscanf_s
atol
_vsnprintf
iswspace
memcmp

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetComputerNameExW
GetSystemTimeAsFileTime
GetSystemInfo

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
SwitchToThread
TerminateProcess
CreateThread
OpenThreadToken
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetCurrentThread
TlsGetValue
TlsFree
GetCurrentProcess

api-ms-win-core-localization-l1-2-0

LCMapStringW

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
ResetEvent
CreateEventW
SetEvent
InitializeCriticalSectionEx
WaitForSingleObject

api-ms-win-core-com-l1-1-0

CoWaitForMultipleHandles
CoInitializeEx
StringFromGUID2
CoGetClassObject
CoRevertToSelf
CoImpersonateClient
CoCreateInstance
CLSIDFromString
CoDisconnectObject
CoGetCallContext
CoSwitchCallContext

api-ms-win-security-base-l1-1-0

FreeSid
AllocateAndInitializeSid
GetSecurityDescriptorLength
IsValidSid
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
EqualSid
GetSecurityDescriptorSacl
SetSecurityDescriptorDacl
RevertToSelf
GetSecurityDescriptorDacl
AccessCheck
InitializeSecurityDescriptor
CopySid
GetLengthSid
GetTokenInformation
IsValidSecurityDescriptor
SetSecurityDescriptorSacl
ImpersonateSelf

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
GetLastError
SetLastError
SetUnhandledExceptionFilter

api-ms-win-core-threadpool-legacy-l1-1-0

DeleteTimerQueueTimer
CreateTimerQueueTimer

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
RegDeleteKeyExW
RegEnumKeyExW

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-debug-l1-1-0

DebugBreak

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls
GetModuleFileNameW

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

ntdll

EtwGetTraceEnableFlags
EtwRegisterTraceGuidsW
EtwUnregisterTraceGuids
EtwGetTraceEnableLevel
EtwTraceMessage
EtwGetTraceLoggerHandle

esscli

?CompareRequestedToProvided@CQueryAnalyser@@SAHAEAVCClassInfoArray@@0@Z
?Free@CTempMemoryManager@@QEAAXPEAX_K@Z
?DecorateObject@CTimeKeeper@@QEAA_NPEAU_IWmiObject@@@Z
??1CTimeKeeper@@QEAA@XZ
??0CClassInformation@@QEAA@XZ
??0CTimeKeeper@@QEAA@XZ
??1CClassInformation@@QEAA@XZ
?Allocate@CTempMemoryManager@@QEAAPEAX_K@Z
?GetDefiniteInstanceClasses@CQueryAnalyser@@SAJPEAUQL_LEVEL_1_RPN_EXPRESSION@@AEAPEAVCClassInfoArray@@@Z
?IsLimited@CClassInfoArray@@QEAAHXZ
?GetNumClasses@CClassInfoArray@@QEAAHXZ
?GetClass@CClassInfoArray@@QEAAPEAUCClassInformation@@H@Z
??0CTempMemoryManager@@QEAA@XZ
??1CTempMemoryManager@@QEAA@XZ
?GetClass@CContextMetaData@@QEAAJPEBGPEAPEAU_IWmiObject@@@Z
??0CContextMetaData@@QEAA@PEAVCMetaData@@PEAUIWbemContext@@@Z
??1CContextMetaData@@QEAA@XZ
??0CEvalTree@@QEAA@XZ
?CreateFromQuery@CEvalTree@@QEAAJPEAVCContextMetaData@@PEAUQL_LEVEL_1_RPN_EXPRESSION@@JJ@Z
??1CEvalTree@@QEAA@XZ
?Evaluate@CEvalTree@@QEAAJPEAUIWbemObjectAccess@@AEAVCSortedArray@@@Z
?QueryInterface@CMetaData@@UEAAJAEBU_GUID@@PEAPEAX@Z
?AddRef@CMetaData@@UEAAKXZ
?Release@CMetaData@@UEAAKXZ
?GetClass@CMetaData@@UEAAJPEBGPEAUIWbemContext@@PEAPEAUIWbemClassObject@@@Z
??1CSortedArray@@QEAA@XZ
?Size@CSortedArray@@QEBAHXZ
??0CSortedArray@@QEAA@HH@Z
??1CMetaData@@UEAA@XZ
??0CMetaData@@QEAA@XZ
?GetPossibleInstanceClasses@CQueryAnalyser@@SAJPEAUQL_LEVEL_1_RPN_EXPRESSION@@AEAPEAVCClassInfoArray@@@Z
??0CClassInfoArray@@QEAA@XZ
??1CClassInfoArray@@QEAA@XZ
IsUserAdministrator
?GetLimitingQueryForInstanceClass@CQueryAnalyser@@SAJPEAUQL_LEVEL_1_RPN_EXPRESSION@@AEAUCClassInformation@@AEAPEAG@Z
?AddClass@CClassInfoArray@@QEAA_NPEAUCClassInformation@@@Z
?Clear@CClassInfoArray@@QEAAXXZ
?SetLimited@CClassInfoArray@@QEAAXH@Z

fastprox

?IsEmpty@CInternalString@@QEAA_NXZ
?ComputeNecessarySpace@CCompressedString@@SAHPEBG@Z
??0CWbemClassCache@@QEAA@K@Z
??1CWbemClassCache@@QEAA@XZ
??0CWbemMtgtDeliverEventPacket@@QEAA@PEAEK_N@Z
??1CWbemMtgtDeliverEventPacket@@QEAA@XZ
?UnmarshalPacket@CWbemMtgtDeliverEventPacket@@QEAAJAEAJAEAPEAPEAUIWbemClassObject@@AEAVCWbemClassCache@@@Z
?CreateWStringCopy@CCompressedString@@QEBA?AVWString@@XZ
?CreateBSTRCopy@CCompressedString@@QEBAPEAGXZ
?GetLength@CCompressedString@@QEBAHXZ
?CompareNoCase@CCompressedString@@QEBAHPEBD@Z
??4CInternalString@@QEAAHPEAVCCompressedString@@@Z
??0CInternalString@@QEAA@XZ
??1CInternalString@@QEAA@XZ
?SetFromUnicode@CCompressedString@@QEAAXPEBG@Z
?CreateLPWSTRCopy@CInternalString@@QEBAPEAGXZ

ncobjapi

WmiSetAndCommitObject
WmiIsObjectActive
WmiEventSourceConnect
WmiCreateObjectWithFormat
WmiDestroyObject
WmiEventSourceDisconnect

wbemcomn

??1CFlexQueue@@QEAA@XZ
?Enqueue@CFlexQueue@@QEAA_NPEAX@Z
??0CUnk@@QEAA@PEAVCLifeControl@@PEAUIUnknown@@@Z
??0CFlexArray@@QEAA@HH@Z
??0CBuffer@@QEAA@PEAEKH@Z
?Initialize@CUnk@@UEAAHXZ
IsNT
?CreateInst@CWbemCallSecurity@@SAPEAVIWbemCallSecurity@@XZ
?Requeue@CFlexQueue@@QEAA_NPEAX@Z
?Dequeue@CFlexQueue@@QEAAPEAXXZ
?GetQueueSize@CFlexQueue@@QEBAHXZ
?GetArrayPtr@CFlexArray@@QEAAPEAPEAXXZ
?Leave@CCritSec@@QEAAXXZ
?Enter@CCritSec@@QEAAXXZ
_ThrowMemoryException_
??0WString@@QEAA@PEAGH@Z
??0WString@@QEAA@PEBG@Z
??BWString@@QEBAPEBGXZ
??1WString@@QEAA@XZ
??0WString@@QEAA@AEBV0@@Z
?SetAt@CSmallArrayBlob@@QEAAPEAV1@HPEAXPEAPEAX@Z
?RemoveAt@CSmallArrayBlob@@QEAAPEAV1@HPEAPEAX@Z
?InsertAt@CSmallArrayBlob@@QEAAPEAV1@HPEAX@Z
?CreateBlob@CSmallArrayBlob@@SAPEAV1@H@Z
?CloneData@CSmallArrayBlob@@QEAAPEAPEAXXZ
??0WString@@QEAA@XZ
??0CBasicUnloadInstruction@@QEAA@VCWbemInterval@@@Z
?staticRead@CBasicUnloadInstruction@@SA?AVCWbemInterval@@PEAUIWbemServices@@PEAUIWbemContext@@PEBG@Z
?Terminate@CBasicUnloadInstruction@@QEAAXXZ
?Set@CTimerGenerator@@QEAAJPEAVCTimerInstruction@@VCWbemTime@@@Z
?ScheduleFreeUnusedLibraries@CTimerGenerator@@QEAAXXZ
?GetNextFiringTime@CBasicUnloadInstruction@@UEBA?AVCWbemTime@@V2@PEAJ@Z
?GetFirstFiringTime@CBasicUnloadInstruction@@UEBA?AVCWbemTime@@XZ
?GetInstructionType@CBasicUnloadInstruction@@UEAAHXZ
?Release@CBasicUnloadInstruction@@UEAAXXZ
?AddRef@CBasicUnloadInstruction@@UEAAXXZ
??1CBasicUnloadInstruction@@UEAA@XZ
?MarkForRemoval@CTimerInstruction@@UEAAJXZ
?GetZero@CWbemTime@@SA?AV1@XZ
??0CWbemInterval@@QEAA@XZ
??BWString@@QEAAPEAGXZ
?GetStringPointerByRef@WString@@QEBAAEBQEBGXZ
?Size@CSmallArrayBlob@@QEBAHXZ
?GetAt@CSmallArrayBlob@@QEBAPEAXH@Z
??0CWStringArray@@QEAA@HH@Z
??1CWStringArray@@QEAA@XZ
??1QL_LEVEL_1_RPN_EXPRESSION@@QEAA@XZ
?GetText@QL_LEVEL_1_RPN_EXPRESSION@@QEAAPEAGXZ
?Add@CWStringArray@@QEAAHPEBG@Z
?GetNumElements@CPropertyName@@QEBAJXZ
?GetArrayPtr@CWStringArray@@QEAAPEAPEBGXZ
?Size@CWStringArray@@QEBAHXZ
?SetVariant@CVar@@QEAAHPEAUtagVARIANT@@H@Z
??4CPropertyName@@QEAAXAEBV0@@Z
?GetTickCount@CWbemTime@@SA?AV1@XZ
?GetStringAt@CPropertyName@@QEBAPEBGJ@Z
??0QL_LEVEL_1_RPN_EXPRESSION@@QEAA@XZ
?SetClassName@QL_LEVEL_1_RPN_EXPRESSION@@UEAAXPEBG@Z
?AddToken@QL_LEVEL_1_RPN_EXPRESSION@@QEAAXAEBUQL_LEVEL_1_TOKEN@@@Z
??0CVarVector@@QEAA@XZ
??1CVarVector@@QEAA@XZ
?Add@CVarVector@@QEAAHPEAVCVar@@@Z
??1CVar@@QEAA@XZ
?Remove@CTimerGenerator@@QEAAJPEAVCInstructionTest@@@Z
?CompareTo@CVarVector@@QEAAHAEAV1@H@Z
??HCWbemTime@@QEBA?AV0@AEBVCWbemInterval@@@Z
?RemoveAt@CFlexArray@@QEAAHH@Z
??1CPropertyName@@QEAA@XZ
??0CPropertyName@@QEAA@XZ
??0CInstructionTest@@QEAA@XZ
??1CTimerInstruction@@UEAA@XZ
??0CTimerInstruction@@QEAA@XZ
?GetInfinity@CWbemTime@@SA?AV1@XZ
?SetMilliseconds@CWbemInterval@@QEAAXK@Z
??0CVar@@QEAA@XZ
?MakeInternalCopyOfThread@CWbemCallSecurity@@SAPEAV1@XZ
??MCWbemTime@@QEBAHAEBV0@@Z
??0CWbemTime@@QEAA@AEBV0@@Z
??DCWbemInterval@@QEBA?AV0@N@Z
?GetMilliseconds@CWbemInterval@@QEBAKXZ
?Empty@CWStringArray@@QEAAXXZ
??0QL1_Parser@@QEAA@PEAVCGenLexSource@@@Z
??1QL1_Parser@@UEAA@XZ
?Parse@QL1_Parser@@QEAAHPEAPEAUQL_LEVEL_1_RPN_EXPRESSION@@@Z
??0CEventLog@@QEAA@PEBGAEBU_GUID@@K@Z
??1CEventLog@@QEAA@XZ
?Open@CEventLog@@QEAAHXZ
?Report@CEventLog@@QEAAHGAEBU_EVENT_DESCRIPTOR@@VCInsertionString@@111111111@Z
?PublishEssStarted@CPublishWMIOperationEvent@@SAJPEAG00K0K0@Z
??1CInsertionString@@QEAA@XZ
??0CInsertionString@@QEAA@PEBG@Z
??0CInsertionString@@QEAA@XZ
??GCWbemTime@@QEBA?AVCWbemInterval@@AEBV0@@Z
??4CWbemTime@@QEAAXAEBV0@@Z
??OCWbemInterval@@QEAAHV0@@Z
??ACWStringArray@@QEBAPEAGH@Z
??4WString@@QEAAAEAV0@PEBG@Z
?GetCallerIdentity@CWbemCallSecurity@@QEAAPEBGXZ
??YWString@@QEAAAEAV0@AEBV0@@Z
??YWString@@QEAAAEAV0@PEBG@Z
?PublishESSDrop@CPublishWMIOperationEvent@@SAJPEAG0@Z
?CalcSitOutPenalty@CExecQueue@@MEAAKJ@Z
??1CExecQueue@@QEAA@XZ
??0CExecRequest@@QEAA@XZ
??1CExecRequest@@UEAA@XZ
??0CExecQueue@@QEAA@XZ
?SetThreadLimits@CExecQueue@@QEAAXJJJ@Z
?InitializeThread@CExecQueue@@MEAAJXZ
?UninitializeThread@CExecQueue@@MEAAXXZ
?ThreadMain@CExecQueue@@MEAAXPEAVCThreadRecord@1@@Z
??0CCritSec@@QEAA@XZ
?LogError@CExecQueue@@MEAAXPEAVCExecRequest@@H@Z
?CreateNewThread@CExecQueue@@MEAAHXZ
?ShutdownThread@CExecQueue@@MEAAXPEAVCThreadRecord@1@@Z
?IsSuitableThread@CExecQueue@@MEAAHPEAVCThreadRecord@1@PEAVCExecRequest@@@Z
?DoesNeedNewThread@CExecQueue@@MEAAHPEAVCExecRequest@@@Z
?IsIdleTooLong@CExecQueue@@MEAAHPEAVCThreadRecord@1@K@Z
?GetIdleTimeout@CExecQueue@@MEAAKPEAVCThreadRecord@1@@Z
?IsAppropriateThread@CExecQueue@@MEAAHXZ
?WaitForSingleObjectWhileBusy@CExecQueue@@MEAAKPEAXKPEAVCThreadRecord@1@@Z
?UnblockedWaitForSingleObject@CExecQueue@@MEAAKPEAXKPEAVCThreadRecord@1@@Z
?Execute@CExecQueue@@MEAAHPEAVCThreadRecord@1@@Z
?SearchForSuitableRequest@CExecQueue@@MEAAPEAVCExecRequest@@PEAVCThreadRecord@1@@Z
?SitOutPenalty@CExecQueue@@MEAAXJ@Z
?DumpError@CExecRequest@@UEAAXXZ
?GetType@CExecQueue@@UEAAPEBGXZ
?AdjustPriorityForPassing@CExecQueue@@MEAAXPEAVCExecRequest@@@Z
?AdjustInitialPriority@CExecQueue@@MEAAXPEAVCExecRequest@@@Z
?IsSTA@CExecQueue@@MEAAHXZ
?PublishEssToConsumer@CPublishWMIOperationEvent@@SAJPEAG0@Z
??YWString@@QEAAAEAV0@G@Z
??4WString@@QEAAAEAV0@AEBV0@@Z
?UnbindPtr@WString@@QEAAPEAGXZ
?BindPtr@WString@@QEAAXPEAG@Z
WbemSetDynamicCloaking
?EscapeQuotes@WString@@QEBA?AV1@XZ
??0CWbemTime@@QEAA@XZ
?Length@WString@@QEBAHXZ
??0CStaticCritSec@@QEAA@XZ
??1CStaticCritSec@@QEAA@XZ
?SetDMTF@CWbemTime@@QEAAHPEBG@Z
??0CTimerGenerator@@QEAA@XZ
??1CTimerGenerator@@UEAA@XZ
?Shutdown@CTimerGenerator@@UEAAJXZ
?Dequeue@CInstructionQueue@@QEAAJAEAPEAVCTimerInstruction@@AEAVCWbemTime@@@Z
?NotifyStoppingThread@CTimerGenerator@@MEAAXXZ
?NotifyStartingThread@CTimerGenerator@@MEAAXXZ
?IsZero@CWbemTime@@QEBAHXZ
?Set100nss@CWbemTime@@QEAAX_J@Z
?Get100nss@CWbemTime@@QEBA_JXZ
?IsZero@CWbemInterval@@QEBAHXZ
?SetFailure@CStaticCritSec@@SAXXZ
?Enter@CWbemCriticalSection@@QEAAHK@Z
?Leave@CWbemCriticalSection@@QEAAXXZ
??4CNtSid@@QEAAAEAV0@AEBV0@@Z
??0CNtSid@@QEAA@PEAX@Z
??1CNtSid@@QEAA@XZ
??0CWbemCriticalSection@@QEAA@XZ
??1CWbemCriticalSection@@QEAA@XZ
LoggingLevelEnabled
RetrieveSidFromCall
?GetTextSid@CNtSid@@QEAAJPEAPEAG@Z
?GetSize@CNtSid@@QEAAKXZ
?IsUserInGroup@CNtSecurity@@SAHPEAXAEAVCNtSid@@PEAH@Z
?IsEventEnabled@CPublishWMIOperationEvent@@SAJAEBU_EVENT_DESCRIPTOR@@@Z
??0WString2@@QEAA@PEBG@Z
??1WString2@@QEAA@XZ
??YWString2@@QEAAAEAV0@PEBG@Z
?PublishEssToConsumerBinding@CPublishWMIOperationEvent@@SAJPEAG000@Z
??0CInsertionString@@QEAA@VCHex@@@Z
??0WString2@@QEAA@XZ
??4WString2@@QEAAAEAV0@PEBG@Z
??0CHex@@QEAA@J@Z
?IsValid@CNtSid@@QEAAHXZ
?GetPtr@CNtSid@@QEAAPEAXXZ
??0CNtSid@@QEAA@XZ
??BWString2@@QEAAPEAGXZ
??1CNtAce@@UEAA@XZ
?Reread@CRegistryMinMaxLimitControl@@QEAAJXZ
?SetPersistentCfgValue@CPersistentConfig@@QEAAHKK@Z
?Close@CEventLog@@QEAAHXZ
?Shutdown@CExecQueue@@QEAAXXZ
??0Registry@@QEAA@PEBGK@Z
??1Registry@@QEAA@XZ
?SetBinary@Registry@@QEAAHPEBGPEAEK@Z
??0CNtSecurityDescriptor@@QEAA@XZ
??1CNtSecurityDescriptor@@QEAA@XZ
??0CNtAce@@QEAA@KKKAEAVCNtSid@@@Z
??0CNtAcl@@QEAA@K@Z
??1CNtAcl@@QEAA@XZ
?AddAce@CNtAcl@@QEAAHPEAVCNtAce@@@Z
?SetDacl@CNtSecurityDescriptor@@QEAAHPEAVCNtAcl@@@Z
??1CRegistryMinMaxLimitControl@@UEAA@XZ
??0CRegistryMinMaxLimitControl@@QEAA@HPEBG0000@Z
?SetSleepAtMax@CMinMaxLimitControl@@QEAAXK@Z
?SetMax@CMinMaxLimitControl@@QEAAXK@Z
?SetMin@CMinMaxLimitControl@@QEAAXK@Z
?GetPtr@CNtSecurityDescriptor@@QEAAPEAXXZ
?GetUnknown@CUnk@@QEAAPEAUIUnknown@@XZ
?InternalAddRef@CUnkInternal@@QEAAKXZ
?Release@CUnkInternal@@UEAAKXZ
?AddRef@CUnkInternal@@UEAAKXZ
?QueryInterface@CUnkInternal@@UEAAJAEBU_GUID@@PEAPEAX@Z
?GetUnknown@CUnkInternal@@QEAAPEAUIUnknown@@XZ
??1CUnkInternal@@UEAA@XZ
??0CUnkInternal@@QEAA@PEAVCLifeControl@@@Z
?GetInnerUnknown@CUnk@@QEAAPEAUIUnknown@@XZ
?anyFailure@CStaticCritSec@@SAHXZ
?InternalRelease@CUnkInternal@@QEAAKXZ
??1CCritSec@@QEAA@XZ
?Release@CUnk@@UEAAKXZ
?AddRef@CUnk@@UEAAKXZ
?QueryInterface@CUnk@@UEAAJAEBU_GUID@@PEAPEAX@Z
?SetAt@CFlexArray@@QEAAXHPEAX@Z
GetMemLogObject
?Write@CMemoryLog@@QEAAXJ@Z
?Empty@CFlexArray@@QEAAXXZ
?GetAt@CFlexArray@@QEBAPEAXH@Z
??1CFlexArray@@QEAA@XZ
??1CUnk@@UEAA@XZ
?WbemMemFree@CWin32DefaultArena@@SAHPEAX@Z
?WbemMemAlloc@CWin32DefaultArena@@SAPEAX_K@Z
??0CFlexQueue@@QEAA@H@Z
??0CInCritSec@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z
??1CInCritSec@@QEAA@XZ
?Add@CFlexArray@@QEAAHPEAX@Z
?Size@CFlexArray@@QEBAHXZ
?Enqueue@CExecQueue@@UEAAJPEAVCExecRequest@@PEAPEAX@Z
?OnInitialize@CUnk@@UEAAHXZ
??1CBuffer@@QEAA@XZ

api-ms-win-core-heap-l1-1-0

HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 340KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
citiz/fr/docs/perf/wmipdfs.dll
.dll regsvr32 windows x64

Password: 1234

029ec6412c032d107363ea4d5a9d1a39

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

??3@YAXPEAX@Z
_CxxThrowException
_wcsicmp
??1type_info@@UEAA@XZ
_onexit
__dllonexit
_unlock
_lock
__C_specific_handler
_initterm
free
_amsg_exit
_XcptFilter
memmove
memcpy
__CxxFrameHandler3
?what@exception@@UEBAPEBDXZ
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBQEBD@Z
_purecall
_callnewh
malloc
wcsncmp
??_V@YAXPEAX@Z
wcschr

kernel32

GetVersionExW
GetModuleFileNameW
GetCurrentThread
CloseHandle
GetComputerNameExW
SetLastError
DisableThreadLibraryCalls
SetUnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
Sleep
LocalFree
GetLastError
GetFileAttributesW
GetCurrentProcess

netapi32

NetDfsSetInfo
NetDfsAdd
NetDfsAddStdRoot
NetDfsRemove
NetDfsRemoveStdRoot
NetApiBufferFree
NetDfsEnum

oleaut32

VariantInit
VariantChangeType
VariantClear

framedynos

?Left@CHString@@QEBA?AV1@H@Z
??YCHString@@QEAAAEBV0@G@Z
?Right@CHString@@QEBA?AV1@H@Z
?BeginRead@CThreadBase@@QEAAHK@Z
?GetSize@CHPtrArray@@QEBAHXZ
?GetAt@CHPtrArray@@QEBAPEAXH@Z
?AddRef@CInstance@@QEAAJXZ
?EndRead@CThreadBase@@QEAAXXZ
?PutInstance@Provider@@MEAAJAEBVCInstance@@J@Z
?DeleteInstance@Provider@@MEAAJAEBVCInstance@@J@Z
?GetValuesForProp@CFrameworkQuery@@QEAAJPEBGAEAVCHStringArray@@@Z
?GetMethodContext@CInstance@@QEBAPEAVMethodContext@@XZ
?FindOneOf@CHString@@QEBAHPEBG@Z
?LocalLogMessage@ProviderLog@@QEAAXPEBGHW4LogLevel@1@0ZZ
?captainsLog@@3VProviderLog@@A
?LocalLogMessage@ProviderLog@@QEAAXPEBG0HW4LogLevel@1@@Z
??0Provider@@QEAA@PEBG0@Z
??1Provider@@UEAA@XZ
??0CHString@@QEAA@XZ
??1CHString@@QEAA@XZ
??4CHString@@QEAAAEBV0@AEBV0@@Z
?s_strComputerName@Provider@@0VCHString@@A
?GetCHString@CInstance@@QEBA_NPEBGAEAVCHString@@@Z
?GetDWORD@CInstance@@QEBA_NPEBGAEAK@Z
?GetBuffer@CHString@@QEAAPEAGH@Z
?CreateNewInstance@Provider@@IEAAPEAVCInstance@@PEAVMethodContext@@@Z
?Commit@CInstance@@QEAAJXZ
?SetWCHARSplat@CInstance@@QEAA_NPEBG0@Z
?Setbool@CInstance@@QEAA_NPEBG_N@Z
?SetDWORD@CInstance@@QEAA_NPEBGK@Z
?IsPropertyRequired@CFrameworkQuery@@QEAA_NPEBG@Z
?GetLength@CHString@@QEBAHXZ
?Release@CInstance@@QEAAJXZ
?RemoveAll@CHPtrArray@@QEAAXXZ
?GetObject@Provider@@MEAAJPEAVCInstance@@J@Z
?ExecQuery@Provider@@MEAAJPEAVMethodContext@@AEAVCFrameworkQuery@@J@Z
?Flush@Provider@@MEAAXXZ
?ValidateEnumerationFlags@Provider@@MEAAJJ@Z
?ValidateGetObjFlags@Provider@@MEAAJJ@Z
?ValidateMethodFlags@Provider@@MEAAJJ@Z
?ValidateQueryFlags@Provider@@MEAAJJ@Z
?ValidateDeletionFlags@Provider@@MEAAJJ@Z
?ValidatePutInstanceFlags@Provider@@MEAAJJ@Z
?SetCHString@CInstance@@QEAA_NPEBG0@Z
?ExecMethod@Provider@@MEAAJAEBVCInstance@@QEAGPEAV2@2J@Z
?Empty@CHString@@QEAAXXZ
?GetLocalInstancePath@Provider@@IEAA_NPEBVCInstance@@AEAVCHString@@@Z
?SetCHString@CInstance@@QEAA_NPEBGAEBVCHString@@@Z
??H@YA?AVCHString@@AEBV0@0@Z
??H@YA?AVCHString@@AEBV0@G@Z
??H@YA?AVCHString@@PEBGAEBV0@@Z
?GetInstanceKeysByPath@CWbemProviderGlue@@SAJPEBGPEAPEAVCInstance@@PEAVMethodContext@@@Z
?IsDerivedFrom@CWbemProviderGlue@@SA_NPEBG0PEAVMethodContext@@0@Z
??0CThreadBase@@QEAA@W4THREAD_SAFETY_MECHANISM@0@@Z
??1CThreadBase@@UEAA@XZ
??0CHPtrArray@@QEAA@XZ
??1CHPtrArray@@QEAA@XZ
?BeginWrite@CThreadBase@@QEAAHK@Z
?Add@CHPtrArray@@QEAAHPEAX@Z
?EndWrite@CThreadBase@@QEAAXXZ
??ACHPtrArray@@QEAAAEAPEAXH@Z
?OnFinalRelease@CThreadBase@@MEAAXXZ
?RemoveAt@CHStringArray@@QEAAXHH@Z
?RemoveAll@CHStringArray@@QEAAXXZ
?Create@CWbemGlueFactory@@SAPEAV1@PEAJ@Z
?Destroy@CWbemGlueFactory@@QEAAXXZ
?FrameworkLogoffDLL@CWbemProviderGlue@@SAHPEBGPEAJ@Z
?FrameworkLoginDLL@CWbemProviderGlue@@SAHPEBGPEAJ@Z
?initFailed@Provider@@SAHXZ
??0CHString@@QEAA@PEBG@Z
??0CHString@@QEAA@AEBV0@@Z
??4CHString@@QEAAAEBV0@PEBG@Z
?GetVariant@CInstance@@QEBA_NPEBGAEAUtagVARIANT@@@Z
?Format@CHString@@QEAAXPEBGZZ
??ACHStringArray@@QEBA?AVCHString@@H@Z
??YCHString@@QEAAAEBV0@AEBV0@@Z
?SetAt@CHString@@QEAAXHG@Z
?GetInstancesByQueryAsynch@CWbemProviderGlue@@SAJPEBGPEAVProvider@@P6AJ1PEAVCInstance@@PEAVMethodContext@@PEAX@Z034@Z
?GetInstancesByQuery@CWbemProviderGlue@@SAJPEBGPEAV?$TRefPointerCollection@VCInstance@@@@PEAVMethodContext@@0@Z
??0CHStringArray@@QEAA@XZ
??1CHStringArray@@QEAA@XZ
?Add@CHStringArray@@QEAAHPEBG@Z
?GetInstancePropertiesByPath@CWbemProviderGlue@@SAJPEBGPEAPEAVCInstance@@PEAVMethodContext@@AEAVCHStringArray@@@Z
?Free@CObjectPathParser@@QEAAXPEAUParsedObjectPath@@@Z
??0CObjectPathParser@@QEAA@W4ObjectParserFlags@@@Z
??1CObjectPathParser@@QEAA@XZ
?Parse@CObjectPathParser@@QEAAHPEBGPEAPEAUParsedObjectPath@@@Z

advapi32

ImpersonateLoggedOnUser
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
OpenThreadToken
RevertToSelf
RegDeleteKeyExW

ole32

StringFromGUID2

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 624B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
citiz/fr/docs/perf/xpsservices.dll
.dll windows x64

e0b363e910d853ca394061969e3b57c2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

memchr
_finite
tolower
__uncaught_exception
memmove_s
__crtGetStringTypeW
memcpy_s
??0exception@@QEAA@AEBQEBD@Z
__crtLCMapStringW
??0exception@@QEAA@XZ
abort
_wcsicmp
_vsnwprintf_l
wcstod
ldiv
wcsrchr
___mb_cur_max_func
isalnum
__mb_cur_max
___lc_codepage_func
___lc_handle_func
__pctype_func
isdigit
memcmp
_onexit
_errno
setlocale
__dllonexit
_itow_s
_unlock
_lock
_vsnwprintf
_strtoui64
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
__C_specific_handler
_strtoi64
_initterm
isspace
wcsncmp
_isnan
_wtoi
_amsg_exit
_XcptFilter
_CxxThrowException
_callnewh
?what@exception@@UEBAPEBDXZ
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
malloc
strcspn
sprintf_s
__CxxFrameHandler3
localeconv
free
_purecall
memset

api-ms-win-eventing-provider-l1-1-0

EventRegister
EventUnregister
EventWriteTransfer

api-ms-win-core-synch-l1-2-0

WakeAllConditionVariable
InitOnceComplete
InitOnceBeginInitialize
Sleep
SleepConditionVariableSRW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

CreateThread
TerminateProcess
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetSystemTimeAsFileTime

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
GetLastError
SetUnhandledExceptionFilter

oleaut32

GetErrorInfo
SysFreeString
SetErrorInfo
SysAllocString
SysAllocStringLen
SysStringLen
VariantClear
VariantInit

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
StringFromGUID2
CoCreateGuid
CoUninitialize
CoInitializeEx
CoCreateInstance
CreateStreamOnHGlobal

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress
GetModuleHandleW
GetModuleFileNameW

api-ms-win-core-synch-l1-1-0

InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
ReleaseSRWLockShared
AcquireSRWLockShared
CreateEventW
SetEvent
InitializeSRWLock

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
OutputDebugStringA

api-ms-win-core-version-l1-1-0

GetFileVersionInfoExW
VerQueryValueW
GetFileVersionInfoSizeExW

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

ntdll

WinSqmIncrementDWORD
WinSqmAddToStream
WinSqmIsOptedIn

opcservices

ord1
ord14
ord2
ord4
ord3

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime
SystemTimeToFileTime

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

xmllite

CreateXmlWriter

api-ms-win-core-fibers-l2-1-0

SwitchToFiber
ConvertThreadToFiber
CreateFiber
DeleteFiber

urlmon

CreateUri

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 726KB - Virtual size: 726KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
citiz/fr/dons/mig/msv/MSVidCtl.dll
.dll regsvr32 windows x64

dd5e8a87d388e7f0e0dcb3f9ea5a64ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

_wsplitpath_s
wcscspn
swscanf
_wcsicmp
wcsncmp
iswalpha
??0exception@@QEAA@AEBQEBDH@Z
_callnewh
_XcptFilter
_amsg_exit
_initterm
?terminate@@YAXXZ
_lock
_unlock
__dllonexit
_onexit
??1type_info@@UEAA@XZ
memset
memmove
memcpy
memcmp
floor
__CxxFrameHandler3
_ui64tow
_errno
wcstol
wcsstr
iswspace
??8type_info@@QEBAHAEBV0@@Z
wcstoul
_vsnprintf
_wcsnicmp
_vsnwprintf
_itow
_wtoi
iswdigit
_purecall
realloc
wcscat_s
malloc
??0exception@@QEAA@XZ
memmove_s
??0exception@@QEAA@AEBQEBD@Z
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
memcpy_s
??0exception@@QEAA@AEBV0@@Z
wcsnlen
free
wcscpy_s
__C_specific_handler
_CxxThrowException
wcscmp

ole32

GetRunningObjectTable
MkParseDisplayName
CreateBindCtx
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder
OleRegGetMiscStatus
CreateDataAdviseHolder
CoGetMalloc
CoInitializeEx
CoWaitForMultipleHandles
CoUninitialize
ProgIDFromCLSID
StringFromCLSID
OleSaveToStream
WriteClassStm
OleLoadFromStream
StringFromGUID2
CoCreateFreeThreadedMarshaler
CLSIDFromString
CreateItemMoniker
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
ReadClassStm
HDC_UserSize64
HDC_UserMarshal
HDC_UserUnmarshal64
HDC_UserFree
HDC_UserUnmarshal
HDC_UserMarshal64
HDC_UserSize
HDC_UserFree64
HWND_UserUnmarshal64
HWND_UserMarshal64
HWND_UserMarshal
HWND_UserSize
HWND_UserSize64
HWND_UserFree64
HWND_UserFree
HWND_UserUnmarshal
CoTaskMemAlloc

oleaut32

SafeArrayUnaccessData
SysStringByteLen
SysAllocStringLen
SafeArrayDestroy
LoadRegTypeLi
SafeArrayAccessData
CreateErrorInfo
VariantInit
VariantChangeTypeEx
VarCmp
OleCreatePictureIndirect
OleCreatePropertyFrame
SetErrorInfo
VariantChangeType
SysAllocStringByteLen
VarUI4FromStr
VariantClear
VariantCopy
LoadTypeLi
SysAllocString
SysStringLen
RegisterTypeLi
LPSAFEARRAY_UserSize64
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserUnmarshal64
LPSAFEARRAY_UserMarshal64
LPSAFEARRAY_UserFree64
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserSize
BSTR_UserMarshal64
BSTR_UserSize64
BSTR_UserFree64
VARIANT_UserUnmarshal64
VARIANT_UserFree64
BSTR_UserMarshal
VARIANT_UserMarshal
BSTR_UserUnmarshal
VARIANT_UserSize
VARIANT_UserUnmarshal
VARIANT_UserFree
BSTR_UserUnmarshal64
BSTR_UserFree
VARIANT_UserMarshal64
VARIANT_UserSize64
BSTR_UserSize
SysFreeString
SafeArrayCreate

kernel32

UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
GetProcessHeap
TerminateProcess
HeapAlloc
EncodePointer
LoadLibraryExA
VirtualFree
HeapFree
WriteFile
ExpandEnvironmentStringsW
OutputDebugStringA
GetTempPathW
GetLocalTime
SetLastError
GetCurrentThreadId
GlobalAlloc
GlobalLock
GlobalUnlock
GetTickCount64
GetCurrentProcessId
IsValidLocale
LoadLibraryW
GetSystemDirectoryW
WideCharToMultiByte
GetVersionExW
GetDriveTypeW
DeviceIoControl
CreateFileW
Sleep
GetLocaleInfoW
SetThreadExecutionState
DecodeSystemPointer
SizeofResource
GetCurrentProcess
DuplicateHandle
WaitForMultipleObjects
CreateThread
ResetEvent
SetEvent
SetUnhandledExceptionFilter
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
DecodePointer
CreateMutexW
LockResource
LoadResource
FindResourceW
ReleaseMutex
WaitForSingleObject
CloseHandle
CreateEventW
MultiByteToWideChar
FormatMessageW
lstrlenA
OutputDebugStringW
DebugBreak
GetSystemInfo
VirtualQuery
VirtualAlloc
VirtualProtect
GetModuleHandleW
lstrcpynW
lstrcmpiW
lstrlenW
lstrcpyW
HeapDestroy
DisableThreadLibraryCalls
FreeLibrary
EncodeSystemPointer
GetModuleFileNameW
LoadLibraryExW
GetProcAddress
GetLastError
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RaiseException

user32

SetWindowLongPtrW
FillRect
LoadCursorW
wsprintfW
GetWindowLongPtrW
CreateWindowExW
RegisterClassExW
DefWindowProcW
BeginPaint
EndPaint
UnionRect
OffsetRect
SetWindowRgn
GetClassInfoExW
SetWindowPos
GetClientRect
PtInRect
SendMessageW
DestroyWindow
SetCursor
LoadImageW
DestroyAcceleratorTable
ShowWindow
CallWindowProcW
CharNextW
LoadStringW
CharPrevW
wvsprintfW
MsgWaitForMultipleObjectsEx
PeekMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageW
IsWindow
CopyRect
MapWindowPoints
EqualRect
ReleaseDC
GetDC
SystemParametersInfoW
GetWindowRect
GetParent
IntersectRect
PostMessageW
GetKeyState
SetCapture
ReleaseCapture
SetTimer
KillTimer
GetDesktopWindow
InvalidateRect
SetFocus
GetFocus
IsChild

advapi32

RegQueryValueW
CryptGenRandom
CryptReleaseContext
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegEnumValueW
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CryptAcquireContextW
RegQueryValueExW
RegSetValueW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW

gdi32

DeleteDC
CreateCompatibleDC
SelectObject
CreateDIBitmap
DeleteMetaFile
CloseMetaFile
GetDeviceCaps
SetWindowOrgEx
SaveDC
SetWindowExtEx
CreateMetaFileW
CreateRectRgnIndirect
CreateSolidBrush
DeleteObject
RestoreDC

shlwapi

UrlIsW
PathCreateFromUrlW

rpcrt4

NdrCStdStubBuffer_Release
NdrStubForwardingFunction
NdrDllCanUnloadNow
IUnknown_AddRef_Proxy
NdrOleFree
IUnknown_Release_Proxy
NdrOleAllocate
IUnknown_QueryInterface_Proxy
NdrStubCall3
CStdStubBuffer_Invoke
NdrClientCall3
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_CountRefs
CStdStubBuffer_QueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Disconnect
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Connect
NdrCStdStubBuffer2_Release
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllGetClassObject

slc

SLGetWindowsInformationDWORD

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 266KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 314KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
citiz/fr/dons/mig/msv/winsetup.dll
.dll windows x64

13ac5715282cc532d7063b3f0eee1e63

Code Sign

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:23

Not After

01/09/2022, 18:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

76:49:eb:75:82:fc:24:8d:f5:60:7e:ba:e6:d8:06:1c:5a:f4:89:a4:7f:08:2f:ee:49:58:ce:e8:d8:b6:2c:bd
Signer

Actual PE Digest

76:49:eb:75:82:fc:24:8d:f5:60:7e:ba:e6:d8:06:1c:5a:f4:89:a4:7f:08:2f:ee:49:58:ce:e8:d8:b6:2c:bd

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

07/02/2023, 20:42
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

msvcrt

__crtLCMapStringW
setlocale
_wfsopen
__mb_cur_max
___lc_codepage_func
___lc_handle_func
__pctype_func
_errno
vswprintf_s
wcstol
iswalpha
wcscspn
rand
time
srand
getchar
wprintf
?name@type_info@@QEBAPEBDXZ
abort
fwrite
___mb_cur_max_func
fputwc
ungetwc
ungetc
fgetc
fgetwc
fgetpos
fseek
fsetpos
setvbuf
iswctype
_vscwprintf
_wtoi64
_purecall
_itow_s
fwprintf
fclose
__crtGetStringTypeW
iswdigit
fflush
swscanf_s
wcsspn
qsort
_snwscanf_s
strncmp
_wcsupr
wcsnlen
strcpy_s
wcsncpy_s
_vsnwprintf_s
wcscat_s
wcscpy_s
_ultow_s
bsearch
_wcsrev
_strnicmp
strncpy_s
_wcstoi64
wcstok_s
__iob_func
realloc
_wcslwr
__RTDynamicCast
memcmp
memcpy
memmove
memset
_onexit
__dllonexit
_unlock
_lock
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
_initterm
_amsg_exit
_XcptFilter
_CxxThrowException
towupper
swprintf_s
_callnewh
malloc
_stricmp
calloc
free
_wtoi
_wcsicmp
wcsncmp
_wcsnicmp
_vsnwprintf
wcsrchr
wcschr
??0exception@@QEAA@XZ
memmove_s
??0exception@@QEAA@AEBQEBD@Z
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBV0@@Z
memcpy_s
swscanf
_vsnprintf
__CxxFrameHandler3
_wcstoui64
wcstoul
_wtol
wcsstr
__C_specific_handler
wcscmp

kernel32

TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
OutputDebugStringA
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
GetSystemTimeAsFileTime
FlushFileBuffers
FindClose
FindNextFileW
FindFirstFileW
RtlCompareMemory
WritePrivateProfileStringW
GetSystemDirectoryW
Sleep
GetDiskFreeSpaceExW
SystemTimeToFileTime
GetVersionExW
GetProcAddress
GetModuleHandleW
FreeLibrary
GetModuleHandleExW
CreateEventW
CreateThread
VirtualQuery
LoadLibraryExA
VirtualProtect
AcquireSRWLockExclusive
WakeAllConditionVariable
GetCurrentThreadId
GetCurrentProcessId
ReleaseSRWLockExclusive
GetSystemPowerStatus
OpenEventW
CreateDirectoryW
FindResourceW
MulDiv
GetLocaleInfoEx
DebugBreak
WaitForMultipleObjects
LockFileEx
UnlockFileEx
SetEndOfFile
SetVolumeLabelW
MoveFileWithProgressW
RemoveDirectoryW
RaiseException
MapViewOfFileEx
DefineDosDeviceW
WaitForSingleObjectEx
ReleaseMutex
GetPrivateProfileStringW
SetComputerNameExW
GetStartupInfoW
SleepEx
ResetEvent
SetFileInformationByHandle
GetFileInformationByHandle
GetFileInformationByHandleEx
SetThreadPreferredUILanguages
GetFileTime
GetFinalPathNameByHandleW
GetLongPathNameW
IsWow64Process
HeapReAlloc
SetFilePointerEx
GetDiskFreeSpaceW
GetFileSize
LCMapStringW
GetVersionExA
CopyFileExW
ExpandEnvironmentStringsW
DeleteFileW
GetTempFileNameW
SetFilePointer
ReadFile
LocalAlloc
GetVersion
QueryPerformanceCounter
IsValidLocale
IsValidCodePage
lstrcmpW
GetFileAttributesExW
LockResource
SizeofResource
lstrcmpiW
GetCurrentThread
DeviceIoControl
GetFileSizeEx
FindNextVolumeW
DeleteVolumeMountPointW
FindVolumeClose
SetVolumeMountPointW
FormatMessageW
FindFirstVolumeW
GetVolumeNameForVolumeMountPointW
GetPrivateProfileSectionW
WriteFile
GetVolumeInformationW
QueryDosDeviceW
GetExitCodeProcess
CreateProcessW
LoadLibraryExW
MapViewOfFile
CreateFileMappingW
LoadResource
FindResourceExW
UnmapViewOfFile
GetLocaleInfoW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
SearchPathW
GetLocalTime
GetDateFormatW
FileTimeToSystemTime
GetEnvironmentVariableW
GetLogicalDrives
SetEnvironmentVariableW
GetDriveTypeW
GetNativeSystemInfo
GetLogicalDriveStringsW
CreateFileW
GetSystemDefaultLangID
GetUserDefaultLangID
GetPrivateProfileIntW
GetSystemWindowsDirectoryW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetExitCodeThread
GetVolumePathNamesForVolumeNameW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
Wow64RevertWow64FsRedirection
Wow64DisableWow64FsRedirection
CreateSemaphoreExW
WaitForMultipleObjectsEx
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
GetVolumeInformationByHandleW
CreateSemaphoreW
ReleaseSemaphore
DuplicateHandle
InitializeCriticalSectionAndSpinCount
OpenProcess
SetThreadIdealProcessor
GetOverlappedResult
GetHandleInformation
VirtualFree
VirtualAlloc
GetLastError
SetThreadExecutionState
CreateMutexW
GetModuleFileNameW
GetCommandLineW
CompareStringW
HeapFree
GetProcessHeap
SetEvent
WaitForSingleObject
CloseHandle
GetFileAttributesW
MoveFileW
HeapAlloc
LocalFree
SetLastError
GetWindowsDirectoryW
CopyFileW
LoadLibraryW
GetTickCount
GlobalFree
GetSystemInfo
VerifyVersionInfoW
GetTempPathW
GlobalMemoryStatusEx
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetVolumePathNameW
MoveFileExW
SetFileAttributesW
GetFullPathNameW
SleepConditionVariableSRW

advapi32

RegisterTraceGuidsW
GetTraceEnableLevel
GetTraceEnableFlags
GetTraceLoggerHandle
TraceEvent
UnregisterTraceGuids
ConvertStringSecurityDescriptorToSecurityDescriptorW
MakeAbsoluteSD
InitiateSystemShutdownExW
OpenSCManagerW
OpenServiceW
AllocateAndInitializeSid
FreeSid
NotifyServiceStatusChangeW
ControlService
EnumDependentServicesW
StartServiceW
RegDeleteKeyExW
RegDeleteTreeW
RegQueryInfoKeyW
EqualSid
RegEnumKeyExW
PrivilegeCheck
RegDeleteKeyW
RegEnumValueW
EventRegister
EventUnregister
EventWriteTransfer
LookupPrivilegeValueW
GetSecurityDescriptorSacl
AdjustTokenPrivileges
GetSecurityDescriptorGroup
GetSecurityDescriptorControl
GetSecurityDescriptorOwner
OpenProcessToken
ConvertSidToStringSidW
OpenThreadToken
GetTokenInformation
RegGetValueW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
QueryServiceStatus
CloseServiceHandle
GetSecurityDescriptorDacl
SetNamedSecurityInfoW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegRestoreKeyW
RegLoadKeyW
RegUnLoadKeyW
RegFlushKey
SetThreadToken
ReadEncryptedFileRaw
CloseEncryptedFileRaw
WriteEncryptedFileRaw
GetSecurityDescriptorLength
OpenEncryptedFileRawW
RevertToSelf
GetSecurityInfo
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetLengthSid
GetAclInformation
InitializeSecurityDescriptor
DuplicateTokenEx

dnsapi

DnsValidateName_W

ole32

CoSetProxyBlanket
CoCreateInstance
CLSIDFromString
StringFromCLSID
StringFromGUID2
CoTaskMemFree
CoInitializeSecurity
CoInitializeEx
CoUninitialize

oleaut32

VarUI4FromDec
VarBstrFromDate
VarI4FromDec
SysStringLen
SafeArrayGetElement
VariantClear
SysFreeString
SysAllocString

rpcrt4

RpcBindingFromStringBindingW
RpcStringBindingComposeW
NdrClientCall3
I_RpcMapWin32Status
RpcBindingSetAuthInfoW
UuidFromStringW
UuidToStringW
RpcStringFreeW
RpcBindingFree
UuidCreate

shell32

CommandLineToArgvW

shlwapi

PathFileExistsW
PathIsUNCW
PathRemoveBackslashW
StrStrW

user32

CharLowerW
MessageBoxW
CharNextW
LoadStringW
CharUpperBuffW
GetSystemMetrics
GetWindowTextW
EndPaint
GetKeyboardLayout
IsCharAlphaW
LoadBitmapW
FillRect
GetWindowLongW
GetMessageW
DefWindowProcW
BeginPaint
ReleaseDC
InvalidateRect
LoadImageW
UpdateWindow
PostQuitMessage
CharUpperW
DrawTextW
GetClientRect
SetCursor
TranslateMessage
SetPropW
SetFocus
MapWindowPoints
SetTimer
FindWindowExW
DispatchMessageW
ShowWindow
SetThreadDesktop
RegisterClassExW
NotifyWinEvent
SetClassLongPtrW
SetWindowTextW
SendMessageW
CreateWindowExW
GetPropW
SetWindowPos
IsWindowVisible
GetDC
DestroyWindow
KillTimer

wintrust

CryptCATAdminCalcHashFromFileHandle

imagehlp

CheckSumMappedFile

wdscore

WdsInitializeDataStringW
WdsFreeCollection
WdsPackCollection
WdsCollectionAddValue
WdsAllocCollection
WdsAddModule
WdsExitImmediatelyEx
ConstructPartialMsgVA
WdsDeleteBlackboardValue
WdsSetBlackboardValue
WdsInitializeDataUInt64
WdsSetNextExecutionGroup
WdsInitializeDataBinary
WdsPublishImmediateEx
WdsFreeData
WdsSetupLogMessageA
WdsCopyBlackboardItemsEx
WdsDestroyBlackboard
WdsUnpackCollection
WdsEnableExit
WdsInitializeDataUInt32
WdsGetBlackboardValue
WdsValidBlackboard
WdsInitialize
WdsSetupLogMessageW
CurrentIP
ConstructPartialMsgVW
WdsExecuteWorkQueueEx
WdsSetupLogDestroy
WdsTerminate
WdsEnumFirstBlackboardItem
WdsEnumNextBlackboardItem
WdsAbortBlackboardItemEnum
WdsInitializeCallbackArray
WdsPublish
WdsSubscribeEx
WdsCreateBlackboard
WdsCollectionGetValue

wdsutil

WdsPickTempDriveBasedOnInstallDrive
PublishMessage
SignalSetupComplianceBlock
GetDiskKey
GetRegionKey
IsCrossArchitectureInstall
CallbackGetArgumentInt32
?IsUpgrade@CUpgradeUserSetting@@SAHXZ
WdsValidateInstallDrive
GetApplicableDiskRegionReason
FreeReason
GetApplicableDiskReason
LogDiskRegionReasons
DiskRegionSupportsCapabilityForType
LogDiskReasons
DiskSupportsCapabilityForType
CallbackGetArgumentUInt64

ntdll

NtOpenFile
NtSetValueKey
NtDeviceIoControlFile
NtQuerySymbolicLinkObject
NtOpenKey
NtOpenSymbolicLinkObject
RtlImpersonateSelf
NtShutdownSystem
RtlAdjustPrivilege
RtlNtStatusToDosError
RtlInitUnicodeString
NtCreatePagingFile
ZwQuerySystemInformation
RtlGUIDFromString
RtlFreeUnicodeString
RtlStringFromGUID
RtlFreeHeap
RtlAllocateHeap
RtlAppendUnicodeToString
ZwQueryAttributesFile
ZwWaitForSingleObject
ZwQueryKey
ZwReleaseMutant
ZwOpenFile
ZwOpenMutant
ZwClose
RtlLengthSecurityDescriptor
NtPrivilegeCheck
RtlSetOwnerSecurityDescriptor
RtlSetDaclSecurityDescriptor
ZwCreateFile
ZwCreateKey
ZwLoadKey
RtlAddAccessAllowedAceEx
RtlAllocateAndInitializeSid
RtlLengthSid
ZwFlushKey
ZwDeleteValueKey
ZwSaveKey
RtlFreeSid
ZwDeleteKey
ZwEnumerateKey
ZwQueryValueKey
RtlCreateAcl
ZwSetSecurityObject
ZwUnloadKey
RtlCreateSecurityDescriptor
NtClose
RtlRaiseStatus
DbgPrintEx
LdrAccessResource
LdrFindResource_U
NtWaitForSingleObject
NtQueryInformationThread
NtQueryInformationFile
NtCreateEvent
RtlImageNtHeader
NtOpenProcess
NtQueryInformationProcess
NtSetInformationFile
NtCreateFile
NtQueryObject
RtlImageDirectoryEntryToData
RtlVerifyVersionInfo
VerSetConditionMask
LdrResSearchResource
ZwMapViewOfSection
ZwUnmapViewOfSection
RtlAnsiStringToUnicodeString
RtlxAnsiStringToUnicodeSize
RtlInitString
ZwSetInformationProcess
ZwCreateSection
RtlFormatCurrentUserKeyPath
RtlInitUnicodeStringEx
RtlNtPathNameToDosPathName
RtlpEnsureBufferSize
ZwQueryDirectoryFile
RtlDosPathNameToNtPathName_U_WithStatus
RtlGetNativeSystemInformation
RtlUpcaseUnicodeChar
NtReadFile
NtWriteFile
NtQueryValueKey
RtlRunOnceExecuteOnce
RtlAppendUnicodeStringToString
RtlReAllocateHeap
RtlGetVersion
NtCreateKey
NtEnumerateBootEntries
NtQueryDirectoryObject
NtOpenDirectoryObject
NtTranslateFilePath
NtSetSecurityObject
NtQueryBootOptions
NtQueryBootEntryOrder
NtDeleteKey
DbgPrint
NtDeleteFile
RtlGetThreadErrorMode
RtlSetThreadErrorMode
NtFsControlFile
NtQueryDirectoryFile
RtlDosPathNameToNtPathName_U
NtOpenEvent
RtlValidSid
EtwEventWrite
NtQueryKey
NtFlushKey
NtDeleteValueKey
NtSaveKeyEx
NtQuerySystemTime
RtlSetEnvironmentVariable
RtlCreateEnvironment
RtlDestroyEnvironment
RtlExpandEnvironmentStrings_U
RtlGetControlSecurityDescriptor
RtlConvertSidToUnicodeString
RtlSetControlSecurityDescriptor
NtQuerySecurityObject
NtQuerySystemEnvironmentValueEx
NtEnumerateKey
NtEnumerateValueKey
NtLoadKey
NtDelayExecution
NtUnloadKey
RtlGetAce
RtlAddAccessAllowedAce
NtRestoreKey
RtlEqualUnicodeString
NtQueryVolumeInformationFile
NtQueryAttributesFile
RtlDosPathNameToRelativeNtPathName_U_WithStatus
NtSetSystemInformation
RtlGetLastNtStatus
RtlFindAceByType
NtUnloadKey2
NtQueryEaFile
NtSetEaFile
RtlInitializeResource
RtlAcquireResourceExclusive
RtlAcquireResourceShared
RtlReleaseResource
RtlDeleteResource
RtlInitializeCriticalSection
ZwSetValueKey
ZwOpenKey
ZwAllocateUuids
ZwQuerySymbolicLinkObject
ZwDeviceIoControlFile
ZwQueryDirectoryObject
ZwOpenSymbolicLinkObject
ZwOpenDirectoryObject
LdrGetProcedureAddress
ZwQueryVolumeInformationFile
LdrGetDllHandle
ZwQueryInformationProcess
RtlInitAnsiString
ZwDeleteFile
ZwQueryInformationFile
ZwOpenProcess
NtQuerySystemInformation
NtAdjustPrivilegesToken
NtOpenProcessTokenEx
NtSetInformationThread
NtOpenThreadTokenEx

input

ord104
ord109
ord112
ord107
ord106
ord105

unbcl

??0?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEAA@PEAV?$Array@PEAVString@UnBCL@@@1@@Z
?GetFiles@Directory@UnBCL@@SAPEAV?$Array@PEAVString@UnBCL@@@2@PEBVString@2@0H@Z
??1?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@UEAA@XZ
??C?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$Array@PEAVString@UnBCL@@@1@XZ
?GetFileName@Path@UnBCL@@SAPEAVString@2@PEBV32@@Z
?Combine@Path@UnBCL@@SAPEAVString@2@PEBV32@0@Z
?get_P@?$SmartPtr@VString@UnBCL@@@UnBCL@@QEBAPEAVString@2@XZ
?Compare@String@UnBCL@@SAHPEBG0H@Z
?GetDirectoriesAndFiles@Directory@UnBCL@@SAPEAV?$Array@PEAVString@UnBCL@@@2@PEBVString@2@0W4EnumerationType@12@H@Z
?get_IsEmpty@String@UnBCL@@QEBAHXZ
??0Win32Exception@UnBCL@@QEAA@KPEBG@Z
??1Win32Exception@UnBCL@@UEAA@XZ
?CreateDir@Directory@UnBCL@@SAPEAVDirectoryInfo@2@PEBVString@2@@Z
??0?$Array@E@UnBCL@@QEAA@HH@Z
??_D?$Array@E@UnBCL@@QEAAXXZ
?GetBuffer@?$Array@E@UnBCL@@UEAAPEAEH@Z
?get_P@?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$Array@PEAVString@UnBCL@@@2@XZ
?get_Chars@String@UnBCL@@QEBAAEBGH@Z
?Steal@?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAAPEAVString@2@XZ
??0String@UnBCL@@QEAA@PEBV01@@Z
?EndsWith@String@UnBCL@@QEBAHPEBGH@Z
?StartsWith@String@UnBCL@@QEBAHPEBGH@Z
??1Exception@UnBCL@@UEAA@XZ
?get_Length@String@UnBCL@@QEBAHXZ
??1ISerializable@UnBCL@@UEAA@XZ
??1?$IList@E@UnBCL@@UEAA@XZ
??1?$ICollection@E@UnBCL@@UEAA@XZ
?Exists@File@UnBCL@@SAHPEBVString@2@@Z
?Nullify@?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAAAEAV12@XZ
??D?$SmartPtr@VString@UnBCL@@@UnBCL@@QEBAAEAVString@1@XZ
?SetCompressionState@File@UnBCL@@SAHPEBVString@2@G@Z
?Delete@File@UnBCL@@SAXPEBVString@2@@Z
??0?$Array@E@UnBCL@@QEAA@PEBU?$ICollection@E@1@@Z
?Clone@?$Array@E@UnBCL@@UEBAPEAVObject@2@XZ
?Equals@?$Array@E@UnBCL@@UEBAHPEBVObject@2@@Z
??6SerializationStream@UnBCL@@QEAAAEAV01@H@Z
?WriteBytes@SerializationStream@UnBCL@@QEAAXPEBEH@Z
??5SerializationStream@UnBCL@@QEAAAEAV01@AEAH@Z
?ReadBytes@SerializationStream@UnBCL@@QEAAXPEAEH@Z
?SanitizeTypeName@SerializationStream@UnBCL@@SAPEAVString@2@AEBV32@@Z
??2Object@UnBCL@@SAPEAX_KI@Z
??0String@UnBCL@@QEAA@AEBV01@@Z
?GetCallingModule@SerializationStream@UnBCL@@SAPEAUHINSTANCE__@@XZ
?CanRegister@SerializationStream@UnBCL@@SAHXZ
?RegisterType@SerializationStream@UnBCL@@SAXPEBVString@2@HPEAUHINSTANCE__@@PEAUIInstanceFactory@2@@Z
?EnqueueSbRegistration@SbRegistrationList@UnBCL@@SAXPEBDHPEAUHINSTANCE__@@PEAUIInstanceFactory@2@@Z
??0Exception@UnBCL@@QEAA@PEBG@Z
?UnregisterType@SerializationStream@UnBCL@@SAXPEBVString@2@HPEAUHINSTANCE__@@@Z
??0IInstanceFactory@UnBCL@@QEAA@XZ
??0ISerializable@UnBCL@@QEAA@XZ
??0?$IList@E@UnBCL@@QEAA@XZ
??0?$ICollection@E@UnBCL@@QEAA@XZ
??0?$IEnumerable@E@UnBCL@@QEAA@XZ
?ExpandEnvironmentVariables@Environment@UnBCL@@SAPEAVString@2@PEBV32@@Z
?Delete@Directory@UnBCL@@SAXPEBVString@2@H@Z
?Concat@String@UnBCL@@SAPEAV12@PEBG0@Z
?Substring@String@UnBCL@@QEBAPEAV12@HH@Z
?get_Win32ErrorCode@Win32Exception@UnBCL@@QEBAKXZ
?GetEnvironmentVar@Environment@UnBCL@@SAPEAVString@2@PEBV32@@Z
?Assign@?$SmartPtr@VString@UnBCL@@@UnBCL@@AEAAXPEAVString@2@@Z
?get_Item@XmlAttributeCollection@UnBCL@@QEAAPEAVXmlAttribute@2@PEAVString@2@@Z
?GetStackTrace@Exception@UnBCL@@QEBAPEAVString@2@XZ
?Clone@?$Hashtable@PEAVString@UnBCL@@PEAV12@@UnBCL@@UEBAPEAVObject@2@XZ
??0?$Hashtable@PEAVString@UnBCL@@PEAV12@@UnBCL@@QEAA@HH@Z
??0InvalidCastException@UnBCL@@QEAA@XZ
?SelectSingleNode@XmlNode@UnBCL@@QEAAPEAV12@PEAVString@2@@Z
?SelectNodes@XmlNode@UnBCL@@QEAAPEAVXmlNodeList@2@PEAVString@2@@Z
?get_Value@XmlNode@UnBCL@@QEAAPEAVString@2@XZ
?get_Attributes@XmlNode@UnBCL@@QEAAPEAVXmlAttributeCollection@2@XZ
?Load@XmlDocument@UnBCL@@QEAAXPEAVString@2@@Z
??1XmlDocument@UnBCL@@UEAA@XZ
??0XmlDocument@UnBCL@@QEAA@XZ
?get_P@?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$ArrayList@PEAVString@UnBCL@@@2@XZ
??C?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$ArrayList@PEAVString@UnBCL@@@1@XZ
??4?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??1?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@UEAA@XZ
??0?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEAA@XZ
??0?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEAA@PEAV?$ArrayList@PEAVString@UnBCL@@@1@@Z
??5SerializationStream@UnBCL@@QEAAAEAV01@AEAK@Z
??5SerializationStream@UnBCL@@QEAAAEAV01@AEAPEAVString@1@@Z
??5SerializationStream@UnBCL@@QEAAAEAV01@AEAPEAUISerializable@1@@Z
??6SerializationStream@UnBCL@@QEAAAEAV01@K@Z
??6SerializationStream@UnBCL@@QEAAAEAV01@PEBVString@1@@Z
??6SerializationStream@UnBCL@@QEAAAEAV01@PEBUISerializable@1@@Z
?Compare@String@UnBCL@@SAHPEBV12@0H@Z
?ToLower@String@UnBCL@@QEBAPEAV12@XZ
?Split@String@UnBCL@@QEBAPEAV?$ArrayList@PEAVString@UnBCL@@@2@PEBG@Z
?LastIndexOf@String@UnBCL@@QEBAHG@Z
?CompareTo@String@UnBCL@@QEBAHPEBG@Z
?CompareTo@String@UnBCL@@QEBAHPEBGH@Z
?get_Item@XmlNodeList@UnBCL@@QEAAPEAVXmlNode@2@H@Z
?get_Count@XmlNodeList@UnBCL@@QEAAHXZ
??0Object@UnBCL@@QEAA@AEBV01@@Z
??0Win32Exception@UnBCL@@QEAA@K@Z
??1InvalidCastException@UnBCL@@UEAA@XZ
??1?$IEnumerator@PEAVString@UnBCL@@@UnBCL@@UEAA@XZ
??0?$IEnumerator@PEAVString@UnBCL@@@UnBCL@@QEAA@XZ
??4Object@UnBCL@@QEAAAEAV01@AEBV01@@Z
??0?$ICollection@PEAVString@UnBCL@@@UnBCL@@QEAA@XZ
??0?$IEnumerable@PEAVString@UnBCL@@@UnBCL@@QEAA@XZ
??1?$ICollection@PEAVString@UnBCL@@@UnBCL@@UEAA@XZ
??_D?$Hashtable@PEAVString@UnBCL@@PEAV12@@UnBCL@@QEAAXXZ
?Append@MutableString@UnBCL@@QEAAXPEBG@Z
?Clone@MultiSz@UnBCL@@UEBAPEAVObject@2@XZ
?ToString@MultiSz@UnBCL@@UEBAPEAVString@2@XZ
?Add@MultiSz@UnBCL@@QEAAXPEBG@Z
?get_Buffer@MultiSz@UnBCL@@QEBAPEBGXZ
??0MultiSz@UnBCL@@QEAA@XZ
?Trim@String@UnBCL@@QEBAPEAV12@PEBG@Z
?Substring@String@UnBCL@@QEBAPEAV12@H@Z
?IndexOf@String@UnBCL@@QEBAHPEBGH@Z
??_DMultiSz@UnBCL@@QEAAXXZ
?MakeTrim@MutableString@UnBCL@@QEAAXPEBG@Z
??0MutableString@UnBCL@@QEAA@PEBG@Z
?IsEnvironmentVarSetTrue@Environment@UnBCL@@SAHPEBVString@2@H@Z
??0OutOfMemoryException@UnBCL@@QEAA@XZ
?IndexOf@String@UnBCL@@QEBAHG@Z
??0String@UnBCL@@QEAA@PEBGHH@Z
??1OutOfMemoryException@UnBCL@@UEAA@XZ
?get_ChildNodes@XmlNode@UnBCL@@QEAAPEAVXmlNodeList@2@XZ
?get_Name@XmlNode@UnBCL@@QEAAPEAVString@2@XZ
?get_Count@XmlAttributeCollection@UnBCL@@QEAAHXZ
?FormatV@String@UnBCL@@SAPEAV12@PEBGPEAD@Z
??4?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
?Concat@String@UnBCL@@SAPEAV12@PEBG00@Z
?Copy@Directory@UnBCL@@SAXPEBVString@2@0HPEAUICopyDelegate@12@@Z
?Exists@Directory@UnBCL@@SAHPEBVString@2@@Z
??C?$SmartPtr@VString@UnBCL@@@UnBCL@@QEBAPEAVString@1@XZ
??1?$SmartPtr@VString@UnBCL@@@UnBCL@@UEAA@XZ
?GetParentPath@Path@UnBCL@@SAPEAVString@2@PEBV32@@Z
??0?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAA@PEAVString@1@@Z
??4MutableString@UnBCL@@QEAAAEAV01@PEBG@Z
??0MutableString@UnBCL@@QEAA@XZ
?Tokenize@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEBA?AV12@PEBGAEAH@Z
??4?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAAEAV01@AEBV01@@Z
?Compare@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEBAHPEBG@Z
??1?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@XZ
??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@PEBD@Z
??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@PEBG@Z
??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@XZ
?SetAt@?$CSimpleStringT@G$0A@@ATL@@QEAAXHG@Z
?GetManager@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEBAPEAUIAtlStringMgr@2@XZ
??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@AEBV01@@Z
??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@PEAUIAtlStringMgr@1@@Z
?Concatenate@?$CSimpleStringT@G$0A@@ATL@@KAXAEAV12@PEBGH1H@Z
?Append@?$CSimpleStringT@G$0A@@ATL@@QEAAXPEBG@Z
?Empty@?$CSimpleStringT@G$0A@@ATL@@QEAAXXZ
??4?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAAEAV01@PEBG@Z
?Format@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAXPEBGZZ
??3Object@UnBCL@@SAXPEAX@Z
??1String@UnBCL@@UEAA@XZ
??0String@UnBCL@@QEAA@PEBG@Z
??0Object@UnBCL@@QEAA@XZ
??1Object@UnBCL@@UEAA@XZ
??2Object@UnBCL@@SAPEAX_K@Z
?AddStackTrace@Exception@UnBCL@@QEAAXPEBD@Z
?MemAllocFailed@Allocator@UnBCL@@SAHXZ
??0ArgumentOutOfRangeException@UnBCL@@QEAA@PEBG@Z
??0ArgumentNullException@UnBCL@@QEAA@PEBG@Z
??0ArgumentException@UnBCL@@QEAA@PEBG@Z
??0InvalidOperationException@UnBCL@@QEAA@PEBVString@1@PEAVException@1@@Z
??0InvalidOperationException@UnBCL@@QEAA@PEBG@Z
??0NotSupportedException@UnBCL@@QEAA@PEBG@Z
??0InvalidOperationException@UnBCL@@QEAA@PEBVString@1@@Z
?Equals@Object@UnBCL@@UEBAHPEBV12@@Z
?CompareTo@Object@UnBCL@@UEBAHPEBV12@@Z
?AddRef@Object@UnBCL@@QEAAXXZ
?DecRef@Object@UnBCL@@QEAAHXZ
?SetLiteralStorage@_@UnBCL@@YAXPEAPEBVString@2@PEBG@Z
?Equals@String@UnBCL@@UEBAHPEBVObject@2@@Z
?GetHashCode@String@UnBCL@@UEBAHXZ
?GetType@Object@UnBCL@@UEBAPEAVType@2@XZ
?ToString@String@UnBCL@@UEBAPEAV12@XZ
?GetObjectID@Object@UnBCL@@UEBAIXZ
?CompareTo@String@UnBCL@@UEBAHPEBVObject@2@@Z
?Clone@String@UnBCL@@UEBAPEAVObject@2@XZ
?GetHashCode@Object@UnBCL@@UEBAHXZ
?ToString@Exception@UnBCL@@UEBAPEAVString@2@XZ
?Clone@Object@UnBCL@@UEBAPEAV12@XZ
?get_InnerException@Exception@UnBCL@@UEBAPEBV12@XZ
?get_Message@Exception@UnBCL@@UEBAPEBVString@2@XZ
?get_Source@Exception@UnBCL@@UEBAPEBVString@2@XZ
?set_Source@Exception@UnBCL@@UEAAXPEBVString@2@@Z
?GetBaseException@Exception@UnBCL@@UEBAPEBV12@XZ
?get_HResult@Exception@UnBCL@@UEBAJXZ
?set_HResult@Exception@UnBCL@@MEAAXJ@Z
?SetMessage@Exception@UnBCL@@MEAAXPEAVString@2@@Z
?ToString@Object@UnBCL@@UEBAPEAVString@2@XZ
?FromASCII@String@UnBCL@@SAPEAV12@PEBD@Z
??1NotSupportedException@UnBCL@@UEAA@XZ
??1InvalidOperationException@UnBCL@@UEAA@XZ
??1ArgumentOutOfRangeException@UnBCL@@UEAA@XZ
??1ArgumentException@UnBCL@@UEAA@XZ
??1ArgumentNullException@UnBCL@@UEAA@XZ
??1MutableString@UnBCL@@UEAA@XZ
?get_CString@String@UnBCL@@QEBAPEBGXZ
??0ApplicationException@UnBCL@@QEAA@PEBG@Z
??1ApplicationException@UnBCL@@UEAA@XZ
?Format@String@UnBCL@@SAPEAV12@PEBGZZ
??0?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAA@XZ

unattend

UnattendEnumFree
UnattendCtxEnumGet
UnattendCtxEnumOrderedSubNodes
UnattendFreeNode
UnattendCtxOpenNode
UnattendCtxGetCount
UnattendFreeResults
UnattendCtxGetFlag
UnattendCtxGetString
UnattendCtxGetShowUI
UnattendCtxGetCountByNode
UnattendCtxCommitModify
UnattendCtxOpenNodeByNode
UnattendCtxGetUlongByNode
UnattendCtxDeserializeBuffer
UnattendCtxCleanup
UnattendCtxGetEnumValueByNode
UnattendCtxCancelModify
UnattendCtxSerializeSettingsStream
UnattendCtxGetRootNode
UnattendCtxSerializeToBuffer
UnattendCtxReplaceNode
UnattendCtxGetStringByNode
UnattendCtxSerialize
UnattendCtxGetUlong
UnattendCtxSetNodeName
UnattendCtxPrettyPrint
UnattendCtxGetLongByNode
UnattendCtxGetExpandedStringByNode
UnattendFindAnswerFileWithResults
UnattendGetImplicitContext
UnattendGetFirstFailingSetting
UnattendCleanup
UnattendCtxGetFlagByNode
UnattendFreeSetting
UnattendIsNodeValid
UnattendCtxSpliceTrees
UnattendCtxSetStringByNode
UnattendCtxSerializeToBufferFromNode
UnattendCtxSetString
UnattendCtxDeserializeString
UnattendAddResults
UnattendCtxDeserialize
UnattendMarkPassUsedInCtx
UnattendCtxBeginModify
UnattendDeserializeWithResults
UnattendCtxGetLong
UnattendFormatPath
UnattendCtxReplaceMatchedNodesWithText

gdi32

GdiAlphaBlend
CreateDIBitmap
GetTextMetricsW
SetBkColor
SetLayout
GetTextAlign
SetMapMode
SetTextAlign
SetWorldTransform
SetGraphicsMode
AddFontMemResourceEx
SetBrushOrgEx
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
StretchBlt
GetStockObject
GetDeviceCaps
GetTextExtentPoint32W
SetTextColor
SetBkMode
GetObjectW
TranslateCharsetInfo
DeleteDC
CreateDCW
EnumFontFamiliesExW
SetTextCharacterExtra
CreateFontIndirectW
RemoveFontMemResourceEx
CreateSolidBrush
DeleteObject
SetStretchBltMode
TextOutW

mpr

WNetCancelConnection2W
WNetAddConnection2W

version

GetFileVersionInfoExW
VerQueryValueW
GetFileVersionInfoSizeExW

wininet

InternetQueryOptionW
InternetGetConnectedState
InternetSetOptionW

cfgmgr32

CMP_WaitNoPendingInstallEvents
CM_Get_Parent
CM_Get_Device_ID_ExW
CM_Get_DevNode_Registry_PropertyW
CM_Get_Device_ID_Size_Ex

bcrypt

BCryptHashData
BCryptDestroyHash
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
BCryptGetProperty
BCryptCreateHash
BCryptDestroyKey
BCryptVerifySignature
BCryptImportKeyPair
BCryptFinishHash

fltlib

FilterAttach
FilterLoad

cabinet

ord23
ord20
ord22

Exports

Exports

??4DUMgr@@QEAAAEAV0@AEBV0@@Z
?GetModuleId@DUMgr@@QEAAAEBQEAXXZ
?Instance@DUMgr@@SAPEAV1@XZ
?IsCancelled@DUMgr@@AEAAHXZ
?SetModuleId@DUMgr@@QEAAXPEAX@Z
?SetPhase@DUMgr@@AEAAXW4DUPhase@@@Z
FreeResourceHandle
GetCleanInstallCheckpointSequence
GetSpaceNeededForWinPE
InstallCopyCodeUpdate
InstallSetupUpdates
InstallWindows
Module_Init_BootPrepare
Module_Init_Bootstrap
Module_Init_CBS
Module_Init_Cleanup
Module_Init_Compliance
Module_Init_ComputerName
Module_Init_ConfigOfflineImage
Module_Init_ConfigSet
Module_Init_CopyImages
Module_Init_CopyPrivates
Module_Init_CopySetupFiles
Module_Init_DU
Module_Init_DeployImages
Module_Init_DiskConfiguration
Module_Init_DiskSpace
Module_Init_Ems
Module_Init_Engine
Module_Init_ErrorHandler
Module_Init_ExternalDrivers
Module_Init_Finalize_Image
Module_Init_FixBBPaths
Module_Init_GatherDiskInfo
Module_Init_ImageInstall
Module_Init_ImageTransfer
Module_Init_Internal
Module_Init_LanguagePack
Module_Init_License
Module_Init_Locale
Module_Init_ModuleLoader
Module_Init_MountedDevices
Module_Init_MungeBootEntries
Module_Init_OnlineSettings
Module_Init_PageFile
Module_Init_ParseCmdLine
Module_Init_PickTempDrive
Module_Init_PrepareInstallDrive
Module_Init_Productkey
Module_Init_QFE
Module_Init_RestartSetup
Module_Init_Rollback
Module_Init_ScenarioDetect
Module_Init_SourceMedia
Module_Init_Sysprep
Module_Init_SystemRestore
Module_Init_Unattend
PublishDiskInfoOnBlackboard
SetFileCopyErrorResult
SetFileCopyErrorResultFromStruct
SetResourceHandle
Sysprep_Specialize_Offline_Pnp_Compat
Sysprep_Specialize_Pnp_Compat
UnattendErrorFromResults
g_hwCompatParams
g_pUnattendCtxIBS

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
citiz/tech/perf/pg/msoobeFirstLogonAnim.dll.mui
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.rdata
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
citiz/tech/perf/pg/msoobedui.dll.mui
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.rdata
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
citiz/tech/perf/pg/xpsservices.dll
.dll windows x64

e0b363e910d853ca394061969e3b57c2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

memchr
_finite
tolower
__uncaught_exception
memmove_s
__crtGetStringTypeW
memcpy_s
??0exception@@QEAA@AEBQEBD@Z
__crtLCMapStringW
??0exception@@QEAA@XZ
abort
_wcsicmp
_vsnwprintf_l
wcstod
ldiv
wcsrchr
___mb_cur_max_func
isalnum
__mb_cur_max
___lc_codepage_func
___lc_handle_func
__pctype_func
isdigit
memcmp
_onexit
_errno
setlocale
__dllonexit
_itow_s
_unlock
_lock
_vsnwprintf
_strtoui64
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
__C_specific_handler
_strtoi64
_initterm
isspace
wcsncmp
_isnan
_wtoi
_amsg_exit
_XcptFilter
_CxxThrowException
_callnewh
?what@exception@@UEBAPEBDXZ
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
malloc
strcspn
sprintf_s
__CxxFrameHandler3
localeconv
free
_purecall
memset

api-ms-win-eventing-provider-l1-1-0

EventRegister
EventUnregister
EventWriteTransfer

api-ms-win-core-synch-l1-2-0

WakeAllConditionVariable
InitOnceComplete
InitOnceBeginInitialize
Sleep
SleepConditionVariableSRW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

CreateThread
TerminateProcess
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetSystemTimeAsFileTime

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
GetLastError
SetUnhandledExceptionFilter

oleaut32

GetErrorInfo
SysFreeString
SetErrorInfo
SysAllocString
SysAllocStringLen
SysStringLen
VariantClear
VariantInit

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
StringFromGUID2
CoCreateGuid
CoUninitialize
CoInitializeEx
CoCreateInstance
CreateStreamOnHGlobal

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress
GetModuleHandleW
GetModuleFileNameW

api-ms-win-core-synch-l1-1-0

InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
ReleaseSRWLockShared
AcquireSRWLockShared
CreateEventW
SetEvent
InitializeSRWLock

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
OutputDebugStringA

api-ms-win-core-version-l1-1-0

GetFileVersionInfoExW
VerQueryValueW
GetFileVersionInfoSizeExW

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

ntdll

WinSqmIncrementDWORD
WinSqmAddToStream
WinSqmIsOptedIn

opcservices

ord1
ord14
ord2
ord4
ord3

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime
SystemTimeToFileTime

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

xmllite

CreateXmlWriter

api-ms-win-core-fibers-l2-1-0

SwitchToFiber
ConvertThreadToFiber
CreateFiber
DeleteFiber

urlmon

CreateUri

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 726KB - Virtual size: 726KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
citiz/tech/recover/en/audit.exe.mui
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.rdata
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
citiz/tech/recover/en/libpng16-16.dll
.dll windows x64

dd1d0a44672e02644fe93d783f634e1e

Code Sign

31:83:0c:37:0a:d7:e4:97:63:3b:6e:b3:a0:2d:69:e6
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

18/02/2022, 00:00

Not After

17/02/2025, 23:59

Subject

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:cb:34:fd:3d:ff:12:11:33:9f:f0:7c:4b:21:57:c7
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

30/08/2022, 00:00

Not After

29/08/2023, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

36:6d:e5:0a:83:93:58:15:b9:16:3f:15:35:e1:3c:0b:d6:aa:1e:2c:07:01:ce:22:96:2b:d3:63:6e:04:c1:97
Signer

Actual PE Digest

36:6d:e5:0a:83:93:58:15:b9:16:3f:15:35:e1:3c:0b:d6:aa:1e:2c:07:01:ce:22:96:2b:d3:63:6e:04:c1:97

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

19/09/2022, 09:20
Valid: true

Chain 1

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

zlib1

adler32
crc32
deflate
deflateEnd
deflateInit2_
deflateReset
inflate
inflateEnd
inflateInit2_
inflateReset
inflateReset2
inflateValidate

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
__setusermatherr
_amsg_exit
_errno
_gmtime64
_initterm
_lock
_setjmp
_unlock
abort
atof
calloc
fclose
ferror
fflush
fopen
fputc
fread
free
frexp
fwrite
localeconv
malloc
memcmp
memcpy
memset
realloc
remove
strerror
strlen
strncmp
vfprintf
wcslen
longjmp

Exports

Exports

png_access_version_number
png_benign_error
png_build_grayscale_palette
png_calloc
png_chunk_benign_error
png_chunk_error
png_chunk_warning
png_convert_from_struct_tm
png_convert_from_time_t
png_convert_to_rfc1123
png_convert_to_rfc1123_buffer
png_create_info_struct
png_create_read_struct
png_create_read_struct_2
png_create_write_struct
png_create_write_struct_2
png_data_freer
png_destroy_info_struct
png_destroy_read_struct
png_destroy_write_struct
png_error
png_free
png_free_data
png_free_default
png_get_IHDR
png_get_PLTE
png_get_bKGD
png_get_bit_depth
png_get_cHRM
png_get_cHRM_XYZ
png_get_cHRM_XYZ_fixed
png_get_cHRM_fixed
png_get_channels
png_get_chunk_cache_max
png_get_chunk_malloc_max
png_get_color_type
png_get_compression_buffer_size
png_get_compression_type
png_get_copyright
png_get_current_pass_number
png_get_current_row_number
png_get_eXIf
png_get_eXIf_1
png_get_error_ptr
png_get_filter_type
png_get_gAMA
png_get_gAMA_fixed
png_get_hIST
png_get_header_ver
png_get_header_version
png_get_iCCP
png_get_image_height
png_get_image_width
png_get_int_32
png_get_interlace_type
png_get_io_chunk_type
png_get_io_ptr
png_get_io_state
png_get_libpng_ver
png_get_mem_ptr
png_get_oFFs
png_get_pCAL
png_get_pHYs
png_get_pHYs_dpi
png_get_palette_max
png_get_pixel_aspect_ratio
png_get_pixel_aspect_ratio_fixed
png_get_pixels_per_inch
png_get_pixels_per_meter
png_get_progressive_ptr
png_get_rgb_to_gray_status
png_get_rowbytes
png_get_rows
png_get_sBIT
png_get_sCAL
png_get_sCAL_fixed
png_get_sCAL_s
png_get_sPLT
png_get_sRGB
png_get_signature
png_get_tIME
png_get_tRNS
png_get_text
png_get_uint_16
png_get_uint_31
png_get_uint_32
png_get_unknown_chunks
png_get_user_chunk_ptr
png_get_user_height_max
png_get_user_transform_ptr
png_get_user_width_max
png_get_valid
png_get_x_offset_inches
png_get_x_offset_inches_fixed
png_get_x_offset_microns
png_get_x_offset_pixels
png_get_x_pixels_per_inch
png_get_x_pixels_per_meter
png_get_y_offset_inches
png_get_y_offset_inches_fixed
png_get_y_offset_microns
png_get_y_offset_pixels
png_get_y_pixels_per_inch
png_get_y_pixels_per_meter
png_handle_as_unknown
png_image_begin_read_from_file
png_image_begin_read_from_memory
png_image_begin_read_from_stdio
png_image_finish_read
png_image_free
png_image_write_to_file
png_image_write_to_memory
png_image_write_to_stdio
png_info_init_3
png_init_io
png_longjmp
png_malloc
png_malloc_default
png_malloc_warn
png_permit_mng_features
png_process_data
png_process_data_pause
png_process_data_skip
png_progressive_combine_row
png_read_end
png_read_image
png_read_info
png_read_png
png_read_row
png_read_rows
png_read_update_info
png_reset_zstream
png_save_int_32
png_save_uint_16
png_save_uint_32
png_set_IHDR
png_set_PLTE
png_set_add_alpha
png_set_alpha_mode
png_set_alpha_mode_fixed
png_set_bKGD
png_set_background
png_set_background_fixed
png_set_benign_errors
png_set_bgr
png_set_cHRM
png_set_cHRM_XYZ
png_set_cHRM_XYZ_fixed
png_set_cHRM_fixed
png_set_check_for_invalid_index
png_set_chunk_cache_max
png_set_chunk_malloc_max
png_set_compression_buffer_size
png_set_compression_level
png_set_compression_mem_level
png_set_compression_method
png_set_compression_strategy
png_set_compression_window_bits
png_set_crc_action
png_set_eXIf
png_set_eXIf_1
png_set_error_fn
png_set_expand
png_set_expand_16
png_set_expand_gray_1_2_4_to_8
png_set_filler
png_set_filter
png_set_filter_heuristics
png_set_filter_heuristics_fixed
png_set_flush
png_set_gAMA
png_set_gAMA_fixed
png_set_gamma
png_set_gamma_fixed
png_set_gray_to_rgb
png_set_hIST
png_set_iCCP
png_set_interlace_handling
png_set_invalid
png_set_invert_alpha
png_set_invert_mono
png_set_keep_unknown_chunks
png_set_longjmp_fn
png_set_mem_fn
png_set_oFFs
png_set_option
png_set_pCAL
png_set_pHYs
png_set_packing
png_set_packswap
png_set_palette_to_rgb
png_set_progressive_read_fn
png_set_quantize
png_set_read_fn
png_set_read_status_fn
png_set_read_user_chunk_fn
png_set_read_user_transform_fn
png_set_rgb_to_gray
png_set_rgb_to_gray_fixed
png_set_rows
png_set_sBIT
png_set_sCAL
png_set_sCAL_fixed
png_set_sCAL_s
png_set_sPLT
png_set_sRGB
png_set_sRGB_gAMA_and_cHRM
png_set_scale_16
png_set_shift
png_set_sig_bytes
png_set_strip_16
png_set_strip_alpha
png_set_swap
png_set_swap_alpha
png_set_tIME
png_set_tRNS
png_set_tRNS_to_alpha
png_set_text
png_set_text_compression_level
png_set_text_compression_mem_level
png_set_text_compression_method
png_set_text_compression_strategy
png_set_text_compression_window_bits
png_set_unknown_chunk_location
png_set_unknown_chunks
png_set_user_limits
png_set_user_transform_info
png_set_write_fn
png_set_write_status_fn
png_set_write_user_transform_fn
png_sig_cmp
png_start_read_image
png_warning
png_write_chunk
png_write_chunk_data
png_write_chunk_end
png_write_chunk_start
png_write_end
png_write_flush
png_write_image
png_write_info
png_write_info_before_PLTE
png_write_png
png_write_row
png_write_rows
png_write_sig

Sections

.text
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 1234

Password: 1234

Password: 1234

4cea7ae85c87ddc7295d39ff9cda31d1

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

89:07:f5:1b:60:c3:ea:f3:80:f3:54:29:3c:61:b0:c4Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

89:07:f5:1b:60:c3:ea:f3:80:f3:54:29:3c:61:b0:c4Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

83:cc:3a:a8:cb:c7:dc:b4:c1:e7:9e:c6:7a:0b:81:9f:6d:6a:6f:91:79:e6:f1:32:bc:54:2c:bf:c5:b2:ed:5eSigner

Signature Validations

Verification

22/04/2022, 13:24 Valid: true

Chain 1

68:ec:9e:01:23:23:6b:e9:e4:78:5c:60:70:e3:21:bd:10:37:e2:52Signer

Signature Validations

Verification

22/04/2022, 13:24 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

comctl32

cabinet

version

Sections

.text Size: 31KB - Virtual size: 30KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 1024B - Virtual size: 7KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 628KB - Virtual size: 628KB

.reloc Size: 512B - Virtual size: 32B

Password: 1234

9898e0341c4df06bdb69c413f70eaa52

Headers

DLL Characteristics

File Characteristics

Imports

msvcp_win

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

89:07:f5:1b:60:c3:ea:f3:80:f3:54:29:3c:61:b0:c4
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

89:07:f5:1b:60:c3:ea:f3:80:f3:54:29:3c:61:b0:c4
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

83:cc:3a:a8:cb:c7:dc:b4:c1:e7:9e:c6:7a:0b:81:9f:6d:6a:6f:91:79:e6:f1:32:bc:54:2c:bf:c5:b2:ed:5e
Signer

22/04/2022, 13:24
Valid: true

68:ec:9e:01:23:23:6b:e9:e4:78:5c:60:70:e3:21:bd:10:37:e2:52
Signer

22/04/2022, 13:24
Valid: true

.text
Size: 31KB - Virtual size: 30KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 1024B - Virtual size: 7KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 628KB - Virtual size: 628KB

.reloc
Size: 512B - Virtual size: 32B

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 783KB - Virtual size: 783KB

.data
Size: 114KB - Virtual size: 127KB

.pdata
Size: 80KB - Virtual size: 79KB

.rsrc
Size: 1024B - Virtual size: 1008B

.reloc
Size: 14KB - Virtual size: 14KB