python-3[.]11[.]2-amd64[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

python-3.11.2-amd64.zip
Size

9.1MB
MD5

06b70af076015c0cef59c33426175f9a
SHA1

a4dbfacca9104f705f930c04a8198a8a54407dd9
SHA256

c2e71baefc4efbdb667f3a5c153be3d3d2521d4b856f5381a96a6a272bc21ee8
SHA512

96bafec5da007054101ac1dc4236edc7727ff34df9ac5417ab9869c8561b07f2aa36586f1342b287ddff0f2866065b69eca51dc3e34960047468e7d9edbac1fa
SSDEEP

196608:oRtXp30sEfV2thY+PF2AMpzRsEs0lg3MY+qKRwhfeX4tJR/dlt:s30dV+lPF2AMwEsd3cFw1eQxlt

Score

1^/10

Malware Config

Signatures

Files

python-3.11.2-amd64.zip
.zip
python-3.11.2-amd64/pres/fr/FaceBootstrapAdapter.dll
.dll windows x64

b86b775ded6e4965bc085ca37be2cd29

Code Sign

33:00:00:03:80:e4:bb:91:f3:18:fd:8e:9a:00:00:00:00:03:80
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10-03-2022 19:24

Not After

08-03-2023 19:24

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b5:17:8b:e9:76:24:2e:50:7e:df:0d:b2:a6:e7:c1:9c:97:80:b0:b3:e8:c6:10:93:b4:a7:71:8d:45:c9:cd:98
Signer

Actual PE Digest

b5:17:8b:e9:76:24:2e:50:7e:df:0d:b2:a6:e7:c1:9c:97:80:b0:b3:e8:c6:10:93:b4:a7:71:8d:45:c9:cd:98

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

07-02-2023 20:40
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

api-ms-win-crt-locale-l1-1-0

_lock_locales
_unlock_locales

api-ms-win-crt-string-l1-1-0

__strncnt
wcsnlen
strcspn
memset

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-private-l1-1-0

_o__free_base
_o__fseeki64
_o__Getdays
_o__Getmonths
_o__Gettnames
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__lock_file
_o__malloc_base
_o__purecall
_o__realloc_base
_o__register_onexit_function
_o__seh_filter_dll
_o__Strftime
_o__unlock_file
_o__W_Getdays
_o__W_Getmonths
_o__W_Gettnames
_o__wcsdup
_o__Wcsftime
_o__wfsopen
_o_abort
_o_calloc
_o_fclose
_o_fflush
_o_fgetc
_o_fgetpos
_o_fgetwc
_o_fputwc
_o_free
_o_frexp
_o_fsetpos
_o_fwrite
_o_islower
_o_isspace
_o_isupper
_o_ldexp
_o_localeconv
_o_malloc
_o_pow
_o_powf
_o_realloc
_o_setlocale
_o_setvbuf
_o_strtod
_o_strtof
_o_terminate
_o_tolower
_o_towupper
_o_ungetc
_o_ungetwc
_o_wcscpy_s
__uncaught_exception
__C_specific_handler
_CxxThrowException
_o__execute_onexit_table
_o__errno
_o__crt_atexit
_o__configure_narrow_argv
_o__cexit
_o__calloc_base
_o__callnewh
_o__beginthreadex
_o___stdio_common_vswprintf
_o___stdio_common_vsprintf_s
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
_o___pctype_func
_o____mb_cur_max_func
_o____lc_locale_name_func
_o____lc_collate_cp_func
_o____lc_codepage_func
__CxxFrameHandler3
memchr
memcmp
memcpy
memmove

api-ms-win-core-shlwapi-legacy-l1-1-0

PathFileExistsW

ext-ms-win-rtcore-ntuser-cursor-l1-1-0

SetCursor
LoadCursorW

api-ms-win-rtcore-ntuser-window-l1-1-0

PeekMessageW
TranslateMessage
PostQuitMessage
DispatchMessageW

api-ms-win-rtcore-ntuser-synch-l1-1-0

MsgWaitForMultipleObjectsEx

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress
GetModuleFileNameA
GetModuleHandleExW
DisableThreadLibraryCalls
GetModuleHandleW

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection
SetEvent
WaitForSingleObjectEx
ReleaseMutex
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
CreateMutexExW
ReleaseSRWLockShared
ResetEvent
InitializeCriticalSection
AcquireSRWLockExclusive
ReleaseSemaphore
WaitForMultipleObjectsEx
InitializeCriticalSectionEx
CreateEventW
ReleaseSRWLockExclusive
CreateEventExW
LeaveCriticalSection
CreateSemaphoreExW
EnterCriticalSection
OpenSemaphoreW
AcquireSRWLockShared
InitializeSRWLock

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapFree
HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
GetLastError
SetLastError
SetUnhandledExceptionFilter
RaiseException

api-ms-win-stateseparation-helpers-l1-1-0

GetPersistedRegistryLocationW
GetPersistedFileLocationW

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
GetExitCodeThread

api-ms-win-core-localization-l1-2-0

GetCPInfo
LCMapStringEx
GetLocaleInfoEx
FormatMessageW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
DebugBreak
OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-eventing-provider-l1-1-0

EventRegister
EventUnregister
EventActivityIdControl
EventWriteTransfer
EventSetInformation

api-ms-win-devices-config-l1-1-1

CM_MapCrToWin32Err
CM_Open_DevNode_Key
CM_Open_Device_Interface_KeyW
CM_Get_Device_Interface_PropertyW
CM_Get_Device_Interface_List_SizeW
CM_Locate_DevNodeW
CM_Get_Device_Interface_ListW

api-ms-win-core-com-l1-1-0

CoTaskMemFree
CoCreateFreeThreadedMarshaler
CoUninitialize
StringFromGUID2
CoGetApartmentType
StringFromCLSID
CoTaskMemAlloc
CoWaitForMultipleHandles

api-ms-win-core-registry-l1-1-0

RegCloseKey
RegSetValueExW
RegGetValueW
RegCreateKeyExW

api-ms-win-core-winrt-string-l1-1-0

WindowsCompareStringOrdinal
WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDuplicateString

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory
RoUninitialize
RoInitialize

api-ms-win-core-file-l1-1-0

GetFileAttributesW

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetSystemDirectoryW
GetSystemTimeAsFileTime

api-ms-win-core-path-l1-1-0

PathCchCombine

api-ms-win-core-string-l1-1-0

GetStringTypeW
WideCharToMultiByte
MultiByteToWideChar
CompareStringEx

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks

rpcrt4

UuidCreate

api-ms-win-core-winrt-error-l1-1-0

GetRestrictedErrorInfo
RoTransformError
SetRestrictedErrorInfo
RoOriginateError
RoOriginateErrorW

api-ms-win-core-winrt-error-l1-1-1

RoGetMatchingRestrictedErrorInfo
IsErrorPropagationEnabled
RoReportFailedDelegate

newdev

UpdateDriverForPlugAndPlayDevicesW
DiInstallDriverW

ole32

CoInitialize
CoGetObject

winbio

WinBioGetEnrolledFactors

Exports

Exports

WbioQueryEngineInterface
WbioQuerySensorInterface
WbioQueryStorageInterface

Sections

.text
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
python-3.11.2-amd64/pres/fr/FaceTrackerInternal.dll
.dll windows x64

47e80c5ce159d30e288fb9dea6aede71

Code Sign

33:00:00:03:7f:c0:e0:39:ce:f3:f0:06:bb:00:00:00:00:03:7f
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10-03-2022 19:24

Not After

08-03-2023 19:24

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:5c:8d:1c:65:fb:85:43:1b:b9:c5:fd:12:03:2e:37:0b:30:ce:19:3c:9c:93:5a:43:2f:70:5f:b8:cb:2c:47
Signer

Actual PE Digest

33:5c:8d:1c:65:fb:85:43:1b:b9:c5:fd:12:03:2e:37:0b:30:ce:19:3c:9c:93:5a:43:2f:70:5f:b8:cb:2c:47

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

07-02-2023 20:40
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-private-l1-1-0

_o__errno
_o__execute_onexit_table
_o__free_base
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__malloc_base
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
memmove
_o__wcsdup
_o_abort
_o_exp
_o_free
_o_islower
_o_isupper
_o_malloc
_o_powf
_o_setlocale
_o_sqrt
_o_terminate
__C_specific_handler
_o__crt_atexit
__uncaught_exception
_o__configure_narrow_argv
_o__cexit
_o__calloc_base
_o__callnewh
_o____lc_locale_name_func
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
_o____lc_codepage_func
_o___pctype_func
memcpy
__CxxFrameHandler3
_CxxThrowException

api-ms-win-crt-string-l1-1-0

memset
__strncnt

api-ms-win-downlevel-advapi32-l1-1-0

EventWriteTransfer
EventActivityIdControl
EventRegister
EventUnregister

api-ms-win-core-shlwapi-legacy-l1-1-0

PathFileExistsW

api-ms-win-eventing-provider-l1-1-0

EventSetInformation

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW
SizeofResource
FreeResource
DisableThreadLibraryCalls
FindResourceExW
LoadResource
FreeLibrary
LoadLibraryExW
GetModuleFileNameW
LockResource
GetProcAddress

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
TerminateProcess

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo
GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

api-ms-win-core-errorhandling-l1-1-0

GetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpool
CreateThreadpoolCleanupGroup
SetThreadpoolThreadMaximum
CloseThreadpoolCleanupGroupMembers
SetThreadpoolThreadMinimum
CreateThreadpool

api-ms-win-core-synch-l1-1-0

CreateSemaphoreExW
EnterCriticalSection
SetEvent
ReleaseSemaphore
LeaveCriticalSection
ResetEvent
InitializeCriticalSectionEx
DeleteCriticalSection
WaitForSingleObjectEx
WaitForSingleObject
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
CreateEventW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-path-l1-1-0

PathCchCombine

api-ms-win-core-memory-l1-1-0

VirtualQuery

api-ms-win-crt-locale-l1-1-0

_unlock_locales
_lock_locales

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce

api-ms-win-core-localization-l1-2-0

LCMapStringEx

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-crt-math-l1-1-0

atan2f
sinf
sqrtf
cosf

Exports

Exports

CreateFaceTrackerInternal

Sections

.text
Size: 698KB - Virtual size: 698KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
python-3.11.2-amd64/pres/fr/docs/perf/MapRouter.dll
.dll windows x64

9898e0341c4df06bdb69c413f70eaa52

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcp_win

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
??Bid@locale@std@@QEAA_KXZ
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?_Xbad_function_call@std@@YAXXZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?uncaught_exception@std@@YA_NXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z
?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?_Incref@facet@locale@std@@UEAAXXZ
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA_N_N@Z
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAN@Z
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Xruntime_error@std@@YAXPEBD@Z
?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@HPEBD@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAI@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAM@Z
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?_Throw_C_error@std@@YAXH@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_K@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Xbad_alloc@std@@YAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Xlength_error@std@@YAXPEBD@Z

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e

api-ms-win-crt-private-l1-1-0

_o__gmtime64
_o__gmtime64_s
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__localtime64
_o__localtime64_s
_o__mktime64
_o__pclose
_o__popen
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o__wcsicmp
_o__wcsnicmp
__intrinsic_setjmp
_o__wstat64i32
_o__wtof_l
_o__wtoi
_o_acos
_o_asin
_o_atan
_o_atan2
_o_bsearch
_o_ceil
_o_clearerr
_o_cos
_o_cosh
_o_exit
_o_exp
_o_fclose
_o_feof
_o_ferror
_o_fflush
_o_fgets
_o_floor
_o_fmod
_o_fopen
_o_fputs
_o_fread
_o_free
_o_freopen
_o_frexp
_o_fseek
_o_ftell
_o_fwrite
_o_getc
_o_getenv
_o_isalnum
_o_isalpha
_o_iscntrl
_o_isdigit
_o_islower
_o_ispunct
_o_isspace
_o_isupper
_o_isxdigit
_o_ldexp
_o_localeconv
_o_log
_o_log10
_o_log2
_o_malloc
_o_mbstowcs_s
_o_modf
_o_nanf
_o_pow
_o_powf
_o_rand
_o_realloc
_o_remove
_o_rename
_o_round
_o_setlocale
_o_setvbuf
_o_sin
_o_sinh
_o_sqrt
_o_srand
_o_strcat_s
_o_strcoll
_o_strcpy_s
_o_strerror
_o_strftime
_o_strncat_s
_o_strncpy_s
_o_strtod
_o_strtoul
_o_system
_o_tan
_o_tanh
_o_terminate
_o_tolower
_o_toupper
_o_towlower
_o_towupper
_o_ungetc
_o_wcstod
_o_wcstol
_o_wcstoll
__C_specific_handler
strstr
_CxxThrowException
_o__dtest
_o__difftime64
_o__crt_atexit
_o__create_locale
_o__configure_narrow_argv
_o__cexit
_o__callnewh
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___stdio_common_vfscanf
_o___stdio_common_vfprintf
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
_o__execute_onexit_table
__std_type_info_compare
wcschr
__CxxFrameHandler3
_o___acrt_iob_func
__std_terminate
__CxxFrameHandler4
strchr
strrchr
longjmp
_o__errno
__RTDynamicCast
memchr
memcmp
memcpy
memmove

api-ms-win-crt-string-l1-1-0

wcscmp
strcspn
strcmp
memset
wcsncmp
strpbrk

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExW
GetProcAddress
LoadStringW
FindResourceExW
GetModuleHandleW
GetModuleFileNameA
GetModuleHandleExW
LoadResource
FreeLibrary
DisableThreadLibraryCalls

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-processthreads-l1-1-0

TerminateProcess
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId

api-ms-win-core-sysinfo-l1-1-0

GetVersionExW
GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureStackBackTrace
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-errorhandling-l1-1-0

SetLastError
UnhandledExceptionFilter
GetLastError
SetUnhandledExceptionFilter
RaiseException

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitializeEx

api-ms-win-core-localization-l1-2-0

FormatMessageA
FormatMessageW
GetLocaleInfoEx
GetLocaleInfoW

api-ms-win-core-synch-l1-1-0

OpenSemaphoreW
LeaveCriticalSection
ReleaseSRWLockExclusive
TryEnterCriticalSection
InitializeCriticalSectionEx
ReleaseMutex
DeleteCriticalSection
EnterCriticalSection
CreateSemaphoreExW
CreateMutexExW
InitializeCriticalSectionAndSpinCount
ReleaseSemaphore
WaitForSingleObject
WaitForSingleObjectEx
AcquireSRWLockShared
ReleaseSRWLockShared
CreateEventExW
AcquireSRWLockExclusive
InitializeSRWLock
SetEvent
CreateEventW
ResetEvent

ztrace_maps

ZTraceReportOrigination
ZTraceReportPropagation
ZTraceReportPropagationNoThis
ZTraceReportOriginationNoThis
ZTraceHelperNoThis
ZTraceHelper
ZTraceClose
ZTraceInit

api-ms-win-crt-math-l1-1-0

_finite
ceilf
sqrtf
trunc
floorf

api-ms-win-crt-utility-l1-1-0

ldiv

api-ms-win-crt-time-l1-1-0

_time64
clock

mapconfiguration

ConfigurationManager_Create

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegGetValueW

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapFree
GetProcessHeap

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-file-l1-1-0

GetFileSizeEx
ReadFile
CreateDirectoryW
FindFirstFileW
WriteFile
CreateFileW
RemoveDirectoryW
DeleteFileW
FindNextFileW
SetFileAttributesW
FindClose
FindFirstFileExW
GetFileAttributesExW

api-ms-win-core-file-l2-1-0

GetFileInformationByHandleEx

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsDeleteString

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventWrite
EventRegister

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-file-l1-2-0

CreateFile2

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime
FileTimeToSystemTime

api-ms-win-core-winrt-error-l1-1-1

RoGetMatchingRestrictedErrorInfo

api-ms-win-core-sysinfo-l1-2-0

GetNativeSystemInfo

api-ms-win-core-io-l1-1-0

CancelIoEx

api-ms-win-core-psapi-l1-1-0

K32GetPerformanceInfo

api-ms-win-core-kernel32-legacy-l1-1-0

BindIoCompletionCallback

api-ms-win-stateseparation-helpers-l1-1-0

GetPersistedRegistryLocationW

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory1

api-ms-win-core-processenvironment-l1-1-0

SearchPathW

api-ms-win-core-memory-l1-1-0

MapViewOfFile
UnmapViewOfFile
CreateFileMappingW

api-ms-win-core-localization-obsolete-l1-2-0

GetUserDefaultUILanguage
GetSystemDefaultUILanguage

moshostclient

MosHostOpen
MosGetDataAsyncOperation
MosHostClose
MosDeleteDataAsyncOperation

api-ms-win-crt-stdio-l1-1-0

tmpfile
tmpnam

Exports

Exports

??0?$Lockable@VSharedMutex@ngeo@Microsoft@@@ngeo@Microsoft@@IEAA@XZ
??0?$Lockable@VSharedMutex@ngeo@Microsoft@@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$ObjectHandle@VViewObject@ngeo@Microsoft@@$00@internal@ngeo@Microsoft@@QEAA@AEBV0123@@Z
??0?$ObjectHandle@VViewObject@ngeo@Microsoft@@$00@internal@ngeo@Microsoft@@QEAA@PEAVViewObject@23@@Z
??0?$Pimpl@VGuidanceOptions@ngeo@Microsoft@@VGuidanceOptionsImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VGuidanceOptions@ngeo@Microsoft@@VGuidanceOptionsImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VGuidanceOptions@ngeo@Microsoft@@VGuidanceOptionsImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VLanguageKeyValuePair@ngeo@Microsoft@@VLanguageKeyValuePairImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VLanguageKeyValuePair@ngeo@Microsoft@@VLanguageKeyValuePairImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VLanguageKeyValuePair@ngeo@Microsoft@@VLanguageKeyValuePairImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VLanguageMapping@ngeo@Microsoft@@VLanguageMappingImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VLanguageMapping@ngeo@Microsoft@@VLanguageMappingImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VLanguageMapping@ngeo@Microsoft@@VLanguageMappingImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VLocationSource@ngeo@Microsoft@@VLocationSourceImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VLocationSource@ngeo@Microsoft@@VLocationSourceImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VLocationSource@ngeo@Microsoft@@VLocationSourceImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VManeuverVoiceInfo@ngeo@Microsoft@@VManeuverVoiceInfoImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VManeuverVoiceInfo@ngeo@Microsoft@@VManeuverVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VManeuverVoiceInfo@ngeo@Microsoft@@VManeuverVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VMapMatcher@ngeo@Microsoft@@VMapMatcherImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VMapMatcher@ngeo@Microsoft@@VMapMatcherImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VMapMatcher@ngeo@Microsoft@@VMapMatcherImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VMapMatcherOptions@ngeo@Microsoft@@VMapMatcherOptionsImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VMapMatcherOptions@ngeo@Microsoft@@VMapMatcherOptionsImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VMapMatcherOptions@ngeo@Microsoft@@VMapMatcherOptionsImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VNaturalGuidanceVoiceInfo@ngeo@Microsoft@@VNaturalGuidanceVoiceInfoImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VNaturalGuidanceVoiceInfo@ngeo@Microsoft@@VNaturalGuidanceVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VNaturalGuidanceVoiceInfo@ngeo@Microsoft@@VNaturalGuidanceVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VPhonemeMapping@ngeo@Microsoft@@VPhonemeMappingImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VPhonemeMapping@ngeo@Microsoft@@VPhonemeMappingImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VPhonemeMapping@ngeo@Microsoft@@VPhonemeMappingImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VSideOfDestinationVoiceInfo@ngeo@Microsoft@@VSideOfDestinationVoiceInfoImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VSideOfDestinationVoiceInfo@ngeo@Microsoft@@VSideOfDestinationVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VSideOfDestinationVoiceInfo@ngeo@Microsoft@@VSideOfDestinationVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VSignpostLabelVoiceInfo@ngeo@Microsoft@@VSignpostLabelVoiceInfoImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VSignpostLabelVoiceInfo@ngeo@Microsoft@@VSignpostLabelVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VSignpostLabelVoiceInfo@ngeo@Microsoft@@VSignpostLabelVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VSignpostVoiceInfo@ngeo@Microsoft@@VSignpostVoiceInfoImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VSignpostVoiceInfo@ngeo@Microsoft@@VSignpostVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VSignpostVoiceInfo@ngeo@Microsoft@@VSignpostVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VStreetVoiceInfo@ngeo@Microsoft@@VStreetVoiceInfoImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VStreetVoiceInfo@ngeo@Microsoft@@VStreetVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VStreetVoiceInfo@ngeo@Microsoft@@VStreetVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VVoiceCommandInfo@ngeo@Microsoft@@VVoiceCommandInfoImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VVoiceCommandInfo@ngeo@Microsoft@@VVoiceCommandInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VVoiceCommandInfo@ngeo@Microsoft@@VVoiceCommandInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0?$Pimpl@VVoiceSkin@ngeo@Microsoft@@VVoiceSkinImpl@internal@23@@ngeo@Microsoft@@IEAA@XZ
??0?$Pimpl@VVoiceSkin@ngeo@Microsoft@@VVoiceSkinImpl@internal@23@@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0?$Pimpl@VVoiceSkin@ngeo@Microsoft@@VVoiceSkinImpl@internal@23@@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0BaseEngine@nmacore@Microsoft@@IEAA@XZ
??0BaseEngine@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0BufferInputStream@nmacore@Microsoft@@QEAA@$$QEAV012@@Z
??0BufferInputStream@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0BufferInputStream@nmacore@Microsoft@@QEAA@PEAEI@Z
??0BufferOutputStream@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0BufferOutputStream@nmacore@Microsoft@@QEAA@XZ
??0Color@ngeo@Microsoft@@QEAA@AEBVHSV@012@E@Z
??0Color@ngeo@Microsoft@@QEAA@EEEE@Z
??0Color@ngeo@Microsoft@@QEAA@I@Z
??0Color@ngeo@Microsoft@@QEAA@XZ
??0Date@ngeo@Microsoft@@QEAA@FEE@Z
??0Date@ngeo@Microsoft@@QEAA@XZ
??0DateTime@ngeo@Microsoft@@QEAA@AEBVDate@12@@Z
??0DateTime@ngeo@Microsoft@@QEAA@AEBVDate@12@AEBVTime@12@@Z
??0DateTime@ngeo@Microsoft@@QEAA@XZ
??0DateTime@ngeo@Microsoft@@QEAA@_J@Z
??0DriveSimulator@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0DriveSimulator@ngeo@Microsoft@@QEAA@XZ
??0DriveSimulator@nmacore@Microsoft@@QEAA@AEAVISimulationObserver@12@@Z
??0DriveSimulator@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0DynamicPenalty@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0DynamicPenalty@ngeo@Microsoft@@QEAA@XZ
??0GeoArea@ngeo@Microsoft@@IEAA@XZ
??0GeoArea@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0GeoCoordinates@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0GeoCoordinates@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0GeoCoordinates@ngeo@Microsoft@@QEAA@AEBVIGeoCoordinates@msngeo@@@Z
??0GeoCoordinates@ngeo@Microsoft@@QEAA@NNM@Z
??0GeoCoordinates@ngeo@Microsoft@@QEAA@XZ
??0GeoPolygon@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0GeoPolygon@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0GeoPolygon@ngeo@Microsoft@@QEAA@AEBVGeoRect@12@@Z
??0GeoPolygon@ngeo@Microsoft@@QEAA@PEBVGeoCoordinates@12@_K@Z
??0GeoPolygon@ngeo@Microsoft@@QEAA@XZ
??0GeoPolyline@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0GeoPolyline@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0GeoPolyline@ngeo@Microsoft@@QEAA@PEBVGeoCoordinates@12@_K@Z
??0GeoPolyline@ngeo@Microsoft@@QEAA@XZ
??0GeoRect@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0GeoRect@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0GeoRect@ngeo@Microsoft@@QEAA@AEBVGeoCoordinates@12@0@Z
??0GeoRect@ngeo@Microsoft@@QEAA@AEBVIGeoRect@msngeo@@@Z
??0GeoRect@ngeo@Microsoft@@QEAA@NNNN@Z
??0GeoRect@ngeo@Microsoft@@QEAA@XZ
??0Guidance@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0Guidance@ngeo@Microsoft@@QEAA@XZ
??0Guidance@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0Guidance@nmacore@Microsoft@@QEAA@XZ
??0GuidanceListener@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0GuidanceListener@ngeo@Microsoft@@QEAA@XZ
??0GuidanceOptions@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0GuidanceOptions@ngeo@Microsoft@@QEAA@XZ
??0GuidanceVisualizer@nmacore@Microsoft@@QEAA@$$QEAV012@@Z
??0GuidanceVisualizer@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0GuidanceVisualizer@nmacore@Microsoft@@QEAA@XZ
??0ICompass@nmacore@Microsoft@@QEAA@$$QEAV012@@Z
??0ICompass@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0ICompass@nmacore@Microsoft@@QEAA@XZ
??0IGeoCoordinates@msngeo@@QEAA@AEBV01@@Z
??0IGeoCoordinates@msngeo@@QEAA@XZ
??0IGeoRect@msngeo@@QEAA@AEBV01@@Z
??0IGeoRect@msngeo@@QEAA@XZ
??0IGuidanceListener@nmacore@Microsoft@@QEAA@$$QEAV012@@Z
??0IGuidanceListener@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0IGuidanceListener@nmacore@Microsoft@@QEAA@XZ
??0IItineraryWarning@msnma@@QEAA@AEBV01@@Z
??0IItineraryWarning@msnma@@QEAA@XZ
??0IItineraryWarningAttributes@msngeo@@QEAA@AEBV01@@Z
??0IItineraryWarningAttributes@msngeo@@QEAA@XZ
??0IItineraryWarningAttributes@msnma@@QEAA@AEBV01@@Z
??0IItineraryWarningAttributes@msnma@@QEAA@XZ
??0IItineraryWarningDivChange@msnma@@QEAA@AEBV01@@Z
??0IItineraryWarningDivChange@msnma@@QEAA@XZ
??0IItineraryWarningTraffic@msngeo@@QEAA@AEBV01@@Z
??0IItineraryWarningTraffic@msngeo@@QEAA@XZ
??0IItineraryWarningTraffic@msnma@@QEAA@AEBV01@@Z
??0IItineraryWarningTraffic@msnma@@QEAA@XZ
??0IManeuver@msnma@@QEAA@AEBV01@@Z
??0IManeuver@msnma@@QEAA@XZ
??0IPositioning@nmacore@Microsoft@@QEAA@$$QEAV012@@Z
??0IPositioning@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0IPositioning@nmacore@Microsoft@@QEAA@XZ
??0IPositioningObserver@nmacore@Microsoft@@QEAA@$$QEAV012@@Z
??0IPositioningObserver@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0IPositioningObserver@nmacore@Microsoft@@QEAA@XZ
??0IRoute@msnma@@QEAA@AEBV01@@Z
??0IRoute@msnma@@QEAA@XZ
??0IRouterEngineListener@nmacore@Microsoft@@QEAA@$$QEAV012@@Z
??0IRouterEngineListener@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0IRouterEngineListener@nmacore@Microsoft@@QEAA@XZ
??0ISignpost@msngeo@@QEAA@AEBV01@@Z
??0ISignpost@msngeo@@QEAA@XZ
??0ITimerObserver@msnma@@QEAA@AEBV01@@Z
??0ITimerObserver@msnma@@QEAA@XZ
??0ITimerSource@msnma@@QEAA@AEBV01@@Z
??0ITimerSource@msnma@@QEAA@XZ
??0Icon@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0Icon@ngeo@Microsoft@@QEAA@XZ
??0ItineraryWarning@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0ItineraryWarning@ngeo@Microsoft@@QEAA@XZ
??0ItineraryWarning@nmacore@Microsoft@@QEAA@$$QEAV?$unique_ptr@VItineraryWarningAttributes@nmacore@Microsoft@@U?$default_delete@VItineraryWarningAttributes@nmacore@Microsoft@@@std@@@std@@@Z
??0ItineraryWarning@nmacore@Microsoft@@QEAA@$$QEAV?$unique_ptr@VItineraryWarningDivChange@nmacore@Microsoft@@U?$default_delete@VItineraryWarningDivChange@nmacore@Microsoft@@@std@@@std@@@Z
??0ItineraryWarning@nmacore@Microsoft@@QEAA@$$QEAV?$unique_ptr@VItineraryWarningTraffic@nmacore@Microsoft@@U?$default_delete@VItineraryWarningTraffic@nmacore@Microsoft@@@std@@@std@@@Z
??0ItineraryWarning@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0ItineraryWarning@nmacore@Microsoft@@QEAA@PEBV0ngeo@2@@Z
??0ItineraryWarning@nmacore@Microsoft@@QEAA@XZ
??0ItineraryWarningAdminDivChange@ngeo@Microsoft@@AEAA@AEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@0_N@Z
??0ItineraryWarningAdminDivChange@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0ItineraryWarningAttributes@ngeo@Microsoft@@AEAA@AEBV?$bitset@$0M@@std@@@Z
??0ItineraryWarningAttributes@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0ItineraryWarningAttributes@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0ItineraryWarningAttributes@nmacore@Microsoft@@QEAA@PEBV0ngeo@2@@Z
??0ItineraryWarningAttributes@nmacore@Microsoft@@QEAA@W4TAttribute@IItineraryWarningAttributes@msnma@@@Z
??0ItineraryWarningAttributes@nmacore@Microsoft@@QEAA@_K@Z
??0ItineraryWarningDivChange@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0ItineraryWarningDivChange@nmacore@Microsoft@@QEAA@AEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@0_N@Z
??0ItineraryWarningDivChange@nmacore@Microsoft@@QEAA@PEBVItineraryWarningAdminDivChange@ngeo@2@@Z
??0ItineraryWarningTraffic@ngeo@Microsoft@@AEAA@AEBV0smart5@2@@Z
??0ItineraryWarningTraffic@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0ItineraryWarningTraffic@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0ItineraryWarningTraffic@nmacore@Microsoft@@QEAA@PEBV0ngeo@2@@Z
??0ItineraryWarningTraffic@nmacore@Microsoft@@QEAA@W4TIncident@IItineraryWarningTraffic@msnma@@W4TSeverity@45@AEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AEBVIGeoCoordinates@msngeo@@3@Z
??0ItineraryWarningVisitor@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0ItineraryWarningVisitor@ngeo@Microsoft@@QEAA@XZ
??0LaneInfo@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0LaneInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0LaneInfo@ngeo@Microsoft@@QEAA@AEBV?$vector@W4DIRECTION@LaneInfo@ngeo@Microsoft@@V?$allocator@W4DIRECTION@LaneInfo@ngeo@Microsoft@@@std@@@std@@_N@Z
??0LaneInfo@ngeo@Microsoft@@QEAA@XZ
??0LanguageKeyValuePair@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0LanguageKeyValuePair@ngeo@Microsoft@@QEAA@XZ
??0LanguageMapping@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0LanguageMapping@ngeo@Microsoft@@QEAA@XZ
??0Location@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0Location@ngeo@Microsoft@@QEAA@AEBVGeoCoordinates@12@AEBVLocationInfo@12@@Z
??0Location@ngeo@Microsoft@@QEAA@XZ
??0LocationInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0LocationInfo@ngeo@Microsoft@@QEAA@AEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@0000000@Z
??0LocationInfo@ngeo@Microsoft@@QEAA@XZ
??0LocationSource@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0LocationSource@ngeo@Microsoft@@QEAA@XZ
??0LocationSourceListener@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0LocationSourceListener@ngeo@Microsoft@@QEAA@XZ
??0Maneuver@ngeo@Microsoft@@AEAA@XZ
??0Maneuver@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0Maneuver@nmacore@Microsoft@@IEAA@XZ
??0Maneuver@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0Maneuver@nmacore@Microsoft@@QEAA@AEBV0ngeo@2@AEBVRoute@32@@Z
??0ManeuverVoiceInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0ManeuverVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??0MapMatchedLocation@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0MapMatchedLocation@ngeo@Microsoft@@QEAA@AEBVLocation@12@0@Z
??0MapMatchedLocation@ngeo@Microsoft@@QEAA@AEBVLocation@12@0AEBVRoadElement@12@@Z
??0MapMatchedLocation@ngeo@Microsoft@@QEAA@AEBVLocation@12@@Z
??0MapMatchedLocation@ngeo@Microsoft@@QEAA@XZ
??0MapMatcher@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0MapMatcher@ngeo@Microsoft@@QEAA@XZ
??0MapMatcherListener@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0MapMatcherListener@ngeo@Microsoft@@QEAA@XZ
??0MapMatcherOptions@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0MapMatcherOptions@ngeo@Microsoft@@QEAA@XZ
??0MapMatcherProxy@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0MapMatcherProxy@nmacore@Microsoft@@QEAA@XZ
??0MapModel@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0MapModel@ngeo@Microsoft@@QEAA@AEBV?$PresentSharedPtr@$$CBVRoutingGridLoader@smart5@Microsoft@@@Core@@AEBV?$PresentSharedPtr@VLocaleMapConfiguration@MapControl@@@4@@Z
??0MapModel@ngeo@Microsoft@@QEAA@XZ
??0MapSensor@ngeo@Microsoft@@QEAA@XZ
??0MapSensor@nmacore@Microsoft@@QEAA@XZ
??0MicrosoftTtsVoiceInfo@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0MicrosoftTtsVoiceInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0MicrosoftTtsVoiceInfo@ngeo@Microsoft@@QEAA@AEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@0@Z
??0MicrosoftTtsVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??0Mutex@ngeo@Microsoft@@AEAA@AEBV012@@Z
??0Mutex@ngeo@Microsoft@@QEAA@XZ
??0NaturalGuidanceVoiceInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0NaturalGuidanceVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??0OperatingHours@ngeo@Microsoft@@QEAA@XZ
??0Output@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0Output@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0Output@ngeo@Microsoft@@QEAA@XZ
??0OutputEngine@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0OutputEngine@ngeo@Microsoft@@QEAA@XZ
??0PhonemeMapping@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0PhonemeMapping@ngeo@Microsoft@@QEAA@XZ
??0PixelCoordinates@ngeo@Microsoft@@QEAA@MM@Z
??0PixelCoordinates@ngeo@Microsoft@@QEAA@XZ
??0PixelRect@ngeo@Microsoft@@QEAA@AEBVPixelCoordinates@12@AEBVSizeInPixels@12@@Z
??0PixelRect@ngeo@Microsoft@@QEAA@MMMM@Z
??0PixelRect@ngeo@Microsoft@@QEAA@XZ
??0Poller@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0Poller@nmacore@Microsoft@@QEAA@XZ
??0ProxyObject@ngeo@Microsoft@@IEAA@XZ
??0ProxyObject@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0ProxyObjectHandle@ngeo@Microsoft@@QEAA@$$QEAU012@@Z
??0ProxyObjectHandle@ngeo@Microsoft@@QEAA@AEBU012@@Z
??0ProxyObjectHandle@ngeo@Microsoft@@QEAA@PEAVProxyObject@12@@Z
??0RefCountable@internal@ngeo@Microsoft@@QEAA@AEBV0123@@Z
??0RefCountable@internal@ngeo@Microsoft@@QEAA@XZ
??0RenderBuffer@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0RenderBuffer@ngeo@Microsoft@@QEAA@AEBVPixelRect@12@0W4RenderingMode@012@@Z
??0RenderBuffer@ngeo@Microsoft@@QEAA@AEBVPixelRect@12@W4RenderingMode@012@@Z
??0RoadElement@ngeo@Microsoft@@AEAA@AEBV?$SharedPointer@VRoadElementImpl@internal@ngeo@Microsoft@@$0A@@12@@Z
??0RoadElement@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0RoadElement@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0RoadElement@ngeo@Microsoft@@QEAA@XZ
??0RoadElementPenalty@DynamicPenalty@ngeo@Microsoft@@QEAA@AEBVEdgeId@smart5@3@W4DrivingDirection@23@E_N@Z
??0RoadElementPenalty@DynamicPenalty@ngeo@Microsoft@@QEAA@XZ
??0Route@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0Route@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0Route@ngeo@Microsoft@@QEAA@AEBVRoutePlan@12@AEBV?$PresentSharedPtr@$$CBVRoutingGridLoader@smart5@Microsoft@@@Core@@@Z
??0Route@ngeo@Microsoft@@QEAA@XZ
??0Route@nmacore@Microsoft@@IEAA@XZ
??0Route@nmacore@Microsoft@@IEAA@_N@Z
??0Route@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0Route@nmacore@Microsoft@@QEAA@AEBV0ngeo@2@W4TCalculationType@IRoute@msnma@@@Z
??0RouteElement@ngeo@Microsoft@@AEAA@AEBV?$SharedPointer@VRouteImpl@internal@ngeo@Microsoft@@$0A@@12@_K@Z
??0RouteElement@ngeo@Microsoft@@AEAA@XZ
??0RouteElement@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0RouteElement@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0RouteElements@ngeo@Microsoft@@AEAA@AEBV?$SharedPointer@VRouteImpl@internal@ngeo@Microsoft@@$0A@@12@@Z
??0RouteElements@ngeo@Microsoft@@AEAA@AEBV?$SharedPointer@VRouteImpl@internal@ngeo@Microsoft@@$0A@@12@_K1@Z
??0RouteElements@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0RouteElements@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0RouteElements@ngeo@Microsoft@@QEAA@XZ
??0RouteOptions@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0RouteOptions@ngeo@Microsoft@@QEAA@XZ
??0RouteOptions@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0RouteOptions@nmacore@Microsoft@@QEAA@AEBV0ngeo@2@@Z
??0RouteOptions@nmacore@Microsoft@@QEAA@XZ
??0RoutePlan@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0RoutePlan@ngeo@Microsoft@@QEAA@XZ
??0RouteWaypoint@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0RouteWaypoint@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0RouteWaypoint@ngeo@Microsoft@@QEAA@AEBVLocation@12@W4Type@012@@Z
??0RouteWaypoint@ngeo@Microsoft@@QEAA@XZ
??0Router@ngeo@Microsoft@@QEAA@AEBVMapModel@12@V?$bitset@$00@std@@@Z
??0RouterEngine@nmacore@Microsoft@@QEAA@AEBVMapModel@ngeo@2@@Z
??0RouterEngine@nmacore@Microsoft@@QEAA@XZ
??0RouterListener@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0RouterListener@ngeo@Microsoft@@QEAA@XZ
??0Runtime@nmacore@Microsoft@@QEAA@XZ
??0Sensors@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0Sensors@nmacore@Microsoft@@QEAA@XZ
??0SharedMutex@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0SharedMutex@ngeo@Microsoft@@QEAA@XZ
??0SideOfDestinationVoiceInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0SideOfDestinationVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??0Signpost@ngeo@Microsoft@@AEAA@XZ
??0Signpost@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0Signpost@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0SignpostLabelVoiceInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0SignpostLabelVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??0SignpostVoiceInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0SignpostVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??0SimpleGuidance@naviplayer@Microsoft@@QEAA@AEBV012@@Z
??0SimpleGuidance@naviplayer@Microsoft@@QEAA@XZ
??0SimpleGuidanceListener@naviplayer@Microsoft@@QEAA@AEBV012@@Z
??0SimpleGuidanceListener@naviplayer@Microsoft@@QEAA@XZ
??0SimpleGuidanceOptions@naviplayer@Microsoft@@QEAA@AEBV012@@Z
??0SimpleGuidanceOptions@naviplayer@Microsoft@@QEAA@W4TrafficAvoidanceMode@012@I@Z
??0SimpleGuidanceOptions@naviplayer@Microsoft@@QEAA@XZ
??0SizeInPixels@ngeo@Microsoft@@QEAA@MM@Z
??0SizeInPixels@ngeo@Microsoft@@QEAA@XZ
??0SpeedNotification@ngeo@Microsoft@@AEAA@XZ
??0SpeedNotification@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0SpeedNotification@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0SpeedWarner@ngeo@Microsoft@@QEAA@XZ
??0SpeedWarnerListener@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0SpeedWarnerListener@ngeo@Microsoft@@QEAA@XZ
??0SpeedWarnerOptions@ngeo@Microsoft@@QEAA@MMM@Z
??0StatRepository@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0StatRepository@nmacore@Microsoft@@QEAA@XZ
??0StatStartTiming@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0StatStartTiming@nmacore@Microsoft@@QEAA@V?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
??0StatStartTiming@nmacore@Microsoft@@QEAA@XZ
??0StreetVoiceInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0StreetVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??0Surface@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0Surface@ngeo@Microsoft@@QEAA@II@Z
??0Time@ngeo@Microsoft@@QEAA@EEEG@Z
??0Time@ngeo@Microsoft@@QEAA@XZ
??0TimeInterval@ngeo@Microsoft@@QEAA@AEBVTime@12@0@Z
??0TimeInterval@ngeo@Microsoft@@QEAA@XZ
??0Traffic@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0Traffic@ngeo@Microsoft@@QEAA@XZ
??0TrafficEngine@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0TrafficEngine@nmacore@Microsoft@@QEAA@XZ
??0TrafficEvent@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TrafficEvent@ngeo@Microsoft@@QEAA@XZ
??0TrafficEvent@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0TrafficEvent@nmacore@Microsoft@@QEAA@AEBV0ngeo@2@@Z
??0TrafficEventObject@ngeo@Microsoft@@AEAA@AEBVTrafficEvent@12@AEBVGeoCoordinates@12@@Z
??0TrafficEventObject@ngeo@Microsoft@@AEAA@XZ
??0TrafficEventObject@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TrafficListener@ngeo@Microsoft@@IEAA@XZ
??0TrafficListener@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TrafficNotification@ngeo@Microsoft@@AEAA@XZ
??0TrafficNotificationInfo@ngeo@Microsoft@@QEAA@XZ
??0TrafficPenaltySource@DynamicPenalty@ngeo@Microsoft@@QEAA@AEAVTraffic@23@W4MODE@0123@@Z
??0TrafficPenaltySource@DynamicPenalty@ngeo@Microsoft@@QEAA@AEBV0123@@Z
??0TrafficPenaltySource@DynamicPenalty@ngeo@Microsoft@@QEAA@XZ
??0TrafficVisitor@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TrafficVisitor@ngeo@Microsoft@@QEAA@XZ
??0TrafficWarner@ngeo@Microsoft@@QEAA@XZ
??0TrafficWarnerListener@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TrafficWarnerListener@ngeo@Microsoft@@QEAA@XZ
??0TrafficWarnerOptions@ngeo@Microsoft@@QEAA@IIII@Z
??0TrafficWarnerOptions@ngeo@Microsoft@@QEAA@XZ
??0TransitAccessInfo@ngeo@Microsoft@@QEAA@XZ
??0TransitDatabase@ngeo@Microsoft@@QEAA@XZ
??0TransitDatabase@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0TransitDatabase@nmacore@Microsoft@@QEAA@XZ
??0TransitDatabaseListener@ngeo@Microsoft@@IEAA@XZ
??0TransitDatabaseListener@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TransitDatabaseListener@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0TransitDatabaseListener@nmacore@Microsoft@@QEAA@XZ
??0TransitLineInfo@ngeo@Microsoft@@QEAA@XZ
??0TransitLineInfo@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0TransitLineInfo@nmacore@Microsoft@@QEAA@AEBV0ngeo@2@@Z
??0TransitLineInfo@nmacore@Microsoft@@QEAA@AEBVEdgeId@smart5@2@@Z
??0TransitLineInfo@nmacore@Microsoft@@QEAA@XZ
??0TransitRouteElement@ngeo@Microsoft@@AEAA@AEBV?$SharedPointer@VRouteImpl@internal@ngeo@Microsoft@@$0A@@12@_K@Z
??0TransitRouteElement@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0TransitRouteElement@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TransitRouteElement@ngeo@Microsoft@@QEAA@XZ
??0TransitRouteOptions@ngeo@Microsoft@@QEAA@XZ
??0TransitRouteStop@ngeo@Microsoft@@AEAA@AEBV?$SharedPointer@VRouteImpl@internal@ngeo@Microsoft@@$0A@@12@_K_N@Z
??0TransitRouteStop@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0TransitRouteStop@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TransitRouteStop@ngeo@Microsoft@@QEAA@XZ
??0TransitStopInfo@ngeo@Microsoft@@QEAA@XZ
??0TransitSystemInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TransitSystemInfo@ngeo@Microsoft@@QEAA@XZ
??0TtsEngine@ngeo@Microsoft@@AEAA@PEAVTtsEngineImpl@internal@12@@Z
??0TtsEngine@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TtsEngine@nmacore@Microsoft@@QEAA@AEBV012@@Z
??0TtsEngine@nmacore@Microsoft@@QEAA@W4TtsEngineType@TtsEngineFactory@ngeo@2@@Z
??0TtsListener@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TtsListener@ngeo@Microsoft@@QEAA@XZ
??0TtsOptions@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0TtsOptions@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TtsOptions@ngeo@Microsoft@@QEAA@AEBVVoiceSkin@12@_K@Z
??0TtsOptions@ngeo@Microsoft@@QEAA@XZ
??0TtsVoiceInfo@ngeo@Microsoft@@QEAA@$$QEAV012@@Z
??0TtsVoiceInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0TtsVoiceInfo@ngeo@Microsoft@@QEAA@AEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AEBV?$vector@V?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@V?$allocator@V?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@2@@4@@Z
??0TtsVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??0Version@ngeo@Microsoft@@QEAA@AEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@Z
??0Version@ngeo@Microsoft@@QEAA@IIII@Z
??0Version@ngeo@Microsoft@@QEAA@XZ
??0Vicinity@Traffic@ngeo@Microsoft@@QEAA@$$QEAU0123@@Z
??0Vicinity@Traffic@ngeo@Microsoft@@QEAA@AEBU0123@@Z
??0Vicinity@Traffic@ngeo@Microsoft@@QEAA@AEBVGeoCoordinates@23@I@Z
??0ViewObject@ngeo@Microsoft@@IEAA@XZ
??0ViewObject@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0ViewObjectHandle@ngeo@Microsoft@@QEAA@$$QEAU012@@Z
??0ViewObjectHandle@ngeo@Microsoft@@QEAA@AEBU012@@Z
??0ViewObjectHandle@ngeo@Microsoft@@QEAA@PEAVViewObject@12@@Z
??0VoiceCommandInfo@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0VoiceCommandInfo@ngeo@Microsoft@@QEAA@XZ
??0VoiceSkin@ngeo@Microsoft@@QEAA@AEBV012@@Z
??0VoiceSkin@ngeo@Microsoft@@QEAA@XZ
??0iterator@RouteElements@ngeo@Microsoft@@QEAA@$$QEAV0123@@Z
??0iterator@RouteElements@ngeo@Microsoft@@QEAA@AEBV0123@@Z
??0iterator@RouteElements@ngeo@Microsoft@@QEAA@AEBV?$SharedPointer@VRouteImpl@internal@ngeo@Microsoft@@$0A@@23@_K@Z
??1?$Lockable@VSharedMutex@ngeo@Microsoft@@@ngeo@Microsoft@@IEAA@XZ
??1?$ObjectHandle@VViewObject@ngeo@Microsoft@@$00@internal@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VGuidanceOptions@ngeo@Microsoft@@VGuidanceOptionsImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VLanguageKeyValuePair@ngeo@Microsoft@@VLanguageKeyValuePairImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VLanguageMapping@ngeo@Microsoft@@VLanguageMappingImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VLocationSource@ngeo@Microsoft@@VLocationSourceImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VManeuverVoiceInfo@ngeo@Microsoft@@VManeuverVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VMapMatcher@ngeo@Microsoft@@VMapMatcherImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VMapMatcherOptions@ngeo@Microsoft@@VMapMatcherOptionsImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VNaturalGuidanceVoiceInfo@ngeo@Microsoft@@VNaturalGuidanceVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VPhonemeMapping@ngeo@Microsoft@@VPhonemeMappingImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VSideOfDestinationVoiceInfo@ngeo@Microsoft@@VSideOfDestinationVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VSignpostLabelVoiceInfo@ngeo@Microsoft@@VSignpostLabelVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VSignpostVoiceInfo@ngeo@Microsoft@@VSignpostVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VStreetVoiceInfo@ngeo@Microsoft@@VStreetVoiceInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VVoiceCommandInfo@ngeo@Microsoft@@VVoiceCommandInfoImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1?$Pimpl@VVoiceSkin@ngeo@Microsoft@@VVoiceSkinImpl@internal@23@@ngeo@Microsoft@@QEAA@XZ
??1BaseEngine@nmacore@Microsoft@@MEAA@XZ
??1BufferOutputStream@nmacore@Microsoft@@UEAA@XZ
??1DateTime@ngeo@Microsoft@@QEAA@XZ
??1DriveSimulator@ngeo@Microsoft@@QEAA@XZ
??1DriveSimulator@nmacore@Microsoft@@UEAA@XZ
??1DynamicPenalty@ngeo@Microsoft@@QEAA@XZ
??1GeoArea@ngeo@Microsoft@@UEAA@XZ
??1GeoCoordinates@ngeo@Microsoft@@UEAA@XZ
??1GeoPolygon@ngeo@Microsoft@@UEAA@XZ
??1GeoPolyline@ngeo@Microsoft@@UEAA@XZ
??1GeoRect@ngeo@Microsoft@@UEAA@XZ
??1Guidance@ngeo@Microsoft@@QEAA@XZ
??1Guidance@nmacore@Microsoft@@UEAA@XZ
??1GuidanceListener@ngeo@Microsoft@@UEAA@XZ
??1GuidanceOptions@ngeo@Microsoft@@QEAA@XZ
??1IGeoCoordinates@msngeo@@UEAA@XZ
??1IGeoRect@msngeo@@UEAA@XZ
??1IItineraryWarning@msnma@@UEAA@XZ
??1IItineraryWarningAttributes@msngeo@@UEAA@XZ
??1IItineraryWarningAttributes@msnma@@UEAA@XZ
??1IItineraryWarningDivChange@msnma@@UEAA@XZ
??1IItineraryWarningTraffic@msngeo@@UEAA@XZ
??1IItineraryWarningTraffic@msnma@@UEAA@XZ
??1IManeuver@msnma@@UEAA@XZ
??1IRoute@msnma@@UEAA@XZ
??1ISignpost@msngeo@@UEAA@XZ
??1ITimerObserver@msnma@@UEAA@XZ
??1ITimerSource@msnma@@UEAA@XZ
??1Icon@ngeo@Microsoft@@QEAA@XZ
??1ItineraryWarning@ngeo@Microsoft@@UEAA@XZ
??1ItineraryWarning@nmacore@Microsoft@@UEAA@XZ
??1ItineraryWarningAdminDivChange@ngeo@Microsoft@@UEAA@XZ
??1ItineraryWarningAttributes@ngeo@Microsoft@@UEAA@XZ
??1ItineraryWarningAttributes@nmacore@Microsoft@@UEAA@XZ
??1ItineraryWarningDivChange@nmacore@Microsoft@@UEAA@XZ
??1ItineraryWarningTraffic@ngeo@Microsoft@@UEAA@XZ
??1ItineraryWarningTraffic@nmacore@Microsoft@@UEAA@XZ
??1ItineraryWarningVisitor@ngeo@Microsoft@@UEAA@XZ
??1LaneInfo@ngeo@Microsoft@@QEAA@XZ
??1LanguageKeyValuePair@ngeo@Microsoft@@QEAA@XZ
??1LanguageMapping@ngeo@Microsoft@@QEAA@XZ
??1Location@ngeo@Microsoft@@UEAA@XZ
??1LocationInfo@ngeo@Microsoft@@QEAA@XZ
??1LocationSource@ngeo@Microsoft@@QEAA@XZ
??1LocationSourceListener@ngeo@Microsoft@@UEAA@XZ
??1Maneuver@ngeo@Microsoft@@QEAA@XZ
??1Maneuver@nmacore@Microsoft@@UEAA@XZ
??1ManeuverVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??1MapMatchedLocation@ngeo@Microsoft@@UEAA@XZ
??1MapMatcher@ngeo@Microsoft@@QEAA@XZ
??1MapMatcherListener@ngeo@Microsoft@@UEAA@XZ
??1MapMatcherOptions@ngeo@Microsoft@@QEAA@XZ
??1MapMatcherProxy@nmacore@Microsoft@@QEAA@XZ
??1MapModel@ngeo@Microsoft@@QEAA@XZ
??1MapSensor@ngeo@Microsoft@@QEAA@XZ
??1MapSensor@nmacore@Microsoft@@QEAA@XZ
??1MicrosoftTtsVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??1Mutex@ngeo@Microsoft@@QEAA@XZ
??1NaturalGuidanceVoiceInfo@ngeo@Microsoft@@QEAA@XZ
??1OperatingHours@ngeo@Microsoft@@QEAA@XZ
??1Output@ngeo@Microsoft@@QEAA@XZ
??1OutputEngine@ngeo@Microsoft@@QEAA@XZ
??1PhonemeMapping@ngeo@Microsoft@@QEAA@XZ
??1Poller@nmacore@Microsoft@@UEAA@XZ
??1ProxyObject@ngeo@Microsoft@@MEAA@XZ
??1ProxyObjectHandle@ngeo@Microsoft@@QEAA@XZ
??1RefCountable@internal@ngeo@Microsoft@@UEAA@XZ
??1RenderBuffer@ngeo@Microsoft@@UEAA@XZ
??1RoadElement@ngeo@Microsoft@@QEAA@XZ

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 783KB - Virtual size: 783KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 114KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
python-3.11.2-amd64/pres/fr/docs/perf/XblAuthManager.dll
.dll windows x64

c9fe76fa00dbca05f5e9e8985d7ca489

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcp_win

?_Xbad_alloc@std@@YAXXZ
?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?tolower@?$ctype@G@std@@QEBAGG@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?is@?$ctype@G@std@@QEBA_NFG@Z
??1_Locinfo@std@@QEAA@XZ
??1_Lockit@std@@QEAA@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
??0_Lockit@std@@QEAA@H@Z
_Wcscoll
_Wcsxfrm
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?id@?$ctype@G@std@@2V0locale@2@A
??Bid@locale@std@@QEAA_KXZ
?id@?$collate@G@std@@2V0locale@2@A

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e

api-ms-win-crt-private-l1-1-0

_o__i64tow_s
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__mkgmtime64
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o__wcsicmp
_o__wcsnicmp
_o__wcstoui64
_o__wctime64_s
memmove
_o__wtoi64
_o_free
_o_iswdigit
_o_malloc
_o_realloc
_o_terminate
_o_towlower
_o_towupper
_o_wcstol
_o_wcstoul
__C_specific_handler
__CxxFrameHandler3
_CxxThrowException
_o__crt_atexit
_o__execute_onexit_table
_o__configure_narrow_argv
_o__errno
_o__cexit
_o__callnewh
strrchr
wcsstr
wcschr
strchr
wcsrchr
_o___stdio_common_vswprintf
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
__std_terminate
__CxxFrameHandler4
memcmp
memcpy

api-ms-win-crt-string-l1-1-0

wcscmp
wcsncmp
wcsnlen
memset

api-ms-win-core-com-l1-1-0

CoInitializeSecurity
CoRegisterClassObject
CoTaskMemFree
CoDecrementMTAUsage
CoGetCallContext
CoImpersonateClient
CoCreateInstance
CoCreateGuid
CoTaskMemAlloc
CoReleaseServerProcess
CoWaitForMultipleHandles
StringFromGUID2
CoAddRefServerProcess
CoRevertToSelf
CoDisconnectContext
CoRevokeClassObject
CoGetStandardMarshal
CoResumeClassObjects
CoCreateFreeThreadedMarshaler

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW
GetModuleHandleExW
GetProcAddress
GetModuleFileNameA
DisableThreadLibraryCalls

api-ms-win-power-setting-l1-1-0

PowerSettingUnregisterNotification
PowerSettingRegisterNotification

api-ms-win-security-base-l1-1-0

RevertToSelf
ImpersonateLoggedOnUser
MakeAbsoluteSD
GetTokenInformation
DuplicateTokenEx
AdjustTokenPrivileges
DuplicateToken

api-ms-win-core-synch-l1-2-0

Sleep
InitOnceExecuteOnce

api-ms-win-core-synch-l1-1-0

InitializeSRWLock
CreateSemaphoreExW
ReleaseSemaphore
OpenSemaphoreW
AcquireSRWLockExclusive
WaitForSingleObject
ReleaseMutex
CreateEventExW
ReleaseSRWLockShared
SetEvent
CreateMutexExW
AcquireSRWLockShared
ReleaseSRWLockExclusive
LeaveCriticalSection
EnterCriticalSection
CreateEventW
DeleteCriticalSection
ResetEvent
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeCriticalSection
WaitForMultipleObjectsEx
WaitForSingleObjectEx

api-ms-win-core-heap-l1-1-0

HeapAlloc
GetProcessHeap
HeapFree

api-ms-win-core-errorhandling-l1-1-0

GetLastError
UnhandledExceptionFilter
SetLastError
SetUnhandledExceptionFilter
RaiseException

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference
WindowsDuplicateString
WindowsIsStringEmpty
WindowsCompareStringOrdinal
WindowsStringHasEmbeddedNull
WindowsCreateString
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsGetStringLen

api-ms-win-security-sddl-l1-1-0

ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventRegister
EventSetInformation
EventUnregister

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess
TerminateProcess
GetCurrentThreadId
GetCurrentProcessId
GetCurrentThread
OpenProcessToken
SetThreadToken
OpenThreadToken

api-ms-win-core-winrt-l1-1-0

RoActivateInstance
RoInitialize
RoUninitialize
RoRevokeActivationFactories
RoGetActivationFactory
RoRegisterActivationFactories

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW
RoTransformError
RoOriginateError

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringW
DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-service-core-l1-1-0

SetServiceStatus
RegisterServiceCtrlHandlerExW

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent
OpenProcess

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency
QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount64
GetSystemTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

combase

ord66
ord68
ord69
ord67

appxalluserstore

FamilyMonikerStringToSid

wininet

InternetSetOptionW
InternetQueryOptionW

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-core-registry-l1-1-0

RegDeleteKeyExW
RegOpenCurrentUser
RegDeleteValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
RegCreateKeyExW
RegSetValueExW
RegGetValueW
RegEnumValueW
RegDeleteTreeW

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer

ntdll

RtlFreeSid
DbgPrintEx
NtQueryInformationToken
RtlIpv4AddressToStringW
RtlSubscribeWnfStateChangeNotification
RtlQueryWnfStateData
RtlPublishWnfStateData
RtlUnsubscribeWnfStateChangeNotification

api-ms-win-core-threadpool-legacy-l1-1-0

DeleteTimerQueueTimer
CreateTimerQueueTimer
ChangeTimerQueueTimer
QueueUserWorkItem

crypt32

CertAddEncodedCertificateToStore
CertFindCertificateInStore
CertOpenStore
CertAddCertificateContextToStore
CertCloseStore
CertEnumCertificatesInStore
CertFreeCertificateContext
CertCompareCertificate
CertDeleteCertificateFromStore
CertDuplicateCertificateContext
CryptQueryObject
CertGetCertificateContextProperty

winhttp

WinHttpSetTimeouts
WinHttpConnect
WinHttpOpenRequest
WinHttpOpen
WinHttpSetStatusCallback
WinHttpSetDefaultProxyConfiguration
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpReadData
WinHttpCloseHandle
WinHttpSetOption
WinHttpSendRequest
WinHttpCrackUrl

api-ms-win-security-capability-l1-1-0

CapabilityCheck

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
CompareStringOrdinal
MultiByteToWideChar

api-ms-win-core-psapi-l1-1-0

K32GetModuleFileNameExW

oleaut32

SysFreeString

api-ms-win-core-heap-l2-1-0

LocalFree

bcrypt

BCryptFinalizeKeyPair
BCryptGenerateKeyPair
BCryptOpenAlgorithmProvider
BCryptDestroyKey
BCryptSignHash
BCryptExportKey
BCryptGetProperty
BCryptCreateHash
BCryptHashData
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptFinishHash
BCryptImportKeyPair

api-ms-win-core-registry-l1-1-1

RegDeleteKeyValueW
RegSetKeyValueW

api-ms-win-security-lsalookup-l2-1-0

LookupPrivilegeValueW

api-ms-win-core-shutdown-l1-1-0

InitiateSystemShutdownExW

iphlpapi

GetAdaptersAddresses

ws2_32

htonl
WSAGetLastError
InetPtonW

api-ms-win-core-file-l1-1-0

GetFileAttributesExW
WriteFile
GetFileSize
GetFileAttributesW
CreateDirectoryW
DeleteFileW
CreateFileW
ReadFile
FindFirstFileW
FindClose
FindNextFileW

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-service-management-l2-1-0

QueryServiceStatusEx

api-ms-win-service-management-l1-1-0

StartServiceW
OpenServiceW
OpenSCManagerW
CloseServiceHandle

api-ms-win-service-winsvc-l1-1-0

QueryServiceStatus
ControlService

api-ms-win-core-memory-l1-1-0

UnmapViewOfFile
CreateFileMappingW
MapViewOfFile

userenv

ExpandEnvironmentStringsForUserW

api-ms-win-security-credentials-l1-1-0

CredWriteW
CredDeleteW
CredFree
CredReadW

api-ms-win-stateseparation-helpers-l1-1-0

GetPersistedRegistryLocationW

rpcrt4

RpcSsDestroyClientContext
RpcAsyncCompleteCall
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcAsyncInitializeHandle
RpcStringFreeW
RpcBindingFree
RpcBindingSetAuthInfoExW
RpcAsyncCancelCall
Ndr64AsyncClientCall

ncrypt

NCryptStreamOpenToUnprotect
NCryptCloseProtectionDescriptor
NCryptStreamClose
NCryptStreamUpdate
NCryptCreateProtectionDescriptor
NCryptStreamOpenToProtect

sspicli

LogonUserExExW

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-appmodel-identity-l1-2-0

AppContainerDeriveSidFromMoniker

api-ms-win-appmodel-runtime-l1-1-0

GetPackagesByPackageFamily
GetPackageFamilyName

urlmon

CreateUri

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

Exports

Exports

ServiceMain

Sections

.text
Size: 828KB - Virtual size: 827KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
python-3.11.2-amd64/pres/fr/docs/perf/XpsPrint.dll
.dll windows x64

6eca595c8c82f810b21eb481ad76799c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

tolower
_amsg_exit
_initterm
islower
_wsetlocale
__crtLCMapStringA
__crtLCMapStringW
_wcsdup
memchr
ldexp
__C_specific_handler
?terminate@@YAXXZ
abort
__dllonexit
_onexit
___mb_cur_max_func
_vsnwprintf
memcpy_s
??3@YAXPEAX@Z
_purecall
??1exception@@UEAA@XZ
??0exception@@QEAA@XZ
??0exception@@QEAA@AEBV0@@Z
__CxxFrameHandler3
_vsnprintf_s
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBQEBDH@Z
_XcptFilter
memcmp
isalnum
isdigit
??0exception@@QEAA@AEBQEBD@Z
??1bad_cast@@UEAA@XZ
??0bad_cast@@QEAA@PEBD@Z
memset
calloc
___lc_codepage_func
___lc_handle_func
isupper
__pctype_func
__uncaught_exception
setlocale
_unlock
_lock
_errno
wcsrchr
_vsnprintf
_finite
_vsnwprintf_l
wcstod
_isnan
memmove
memcpy
_CxxThrowException
_callnewh
strncmp
swprintf_s
_wtof
ldiv
malloc
memmove_s
wcscpy_s
??1type_info@@UEAA@XZ
??_V@YAXPEAX@Z
_wcsicmp
sprintf_s
isspace
free
localeconv
strcspn
??0bad_cast@@QEAA@AEBV0@@Z
_ismbblead

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameA
FreeLibraryAndExitThread
GetModuleHandleW
LoadLibraryExW
GetProcAddress
GetModuleHandleExW
FreeLibrary

api-ms-win-core-synch-l1-1-0

WaitForSingleObject
ReleaseSRWLockExclusive
SetEvent
InitializeCriticalSection
InitializeCriticalSectionEx
CreateEventW
DeleteCriticalSection
ReleaseSRWLockShared
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
AcquireSRWLockShared
EnterCriticalSection
ReleaseSemaphore
CreateSemaphoreExW
WaitForSingleObjectEx
ResetEvent
AcquireSRWLockExclusive
ReleaseMutex
OpenSemaphoreW
CreateMutexExW

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapFree
GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

GetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetLastError

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventSetInformation
EventRegister
EventWriteTransfer
EventEnabled
EventWrite

api-ms-win-eventing-classicprovider-l1-1-0

GetTraceEnableLevel
RegisterTraceGuidsW
UnregisterTraceGuids
GetTraceEnableFlags
GetTraceLoggerHandle
TraceMessage

api-ms-win-core-processthreads-l1-1-0

TerminateProcess
SetThreadToken
ResumeThread
GetCurrentThread
OpenThreadToken
CreateThread
ExitProcess
GetCurrentThreadId
GetCurrentProcess
GetProcessTimes
TlsSetValue
GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-handle-l1-1-0

DuplicateHandle
CloseHandle

api-ms-win-core-com-l1-1-0

CoTaskMemFree
CoCreateGuid
CoCreateInstanceEx
CoSetProxyBlanket
CreateStreamOnHGlobal
CoCreateInstance
CoInitializeEx
CoGetMalloc
CoUninitialize
StringFromCLSID
CoTaskMemAlloc

api-ms-win-core-synch-l1-2-0

WakeAllConditionVariable
InitOnceBeginInitialize
InitOnceComplete
Sleep
SleepConditionVariableSRW

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolTimer
CloseThreadpoolTimer
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-heap-l2-1-0

GlobalAlloc
GlobalFree
LocalFree

oleaut32

VariantInit
SysAllocStringLen
SysStringLen
VariantClear
SetErrorInfo
SysFreeString
SysAllocString

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-registry-l1-1-0

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

api-ms-win-core-string-l1-1-0

GetStringTypeW
CompareStringW
MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-file-l1-1-0

SetFilePointer
CreateFileW
GetFileAttributesW
FindNextFileW
FlushFileBuffers
FindFirstFileW
WriteFile
DeleteFileW
FindClose
ReadFile
CreateDirectoryW
SetFilePointerEx
SetEndOfFile

api-ms-win-security-base-l1-1-0

GetTokenInformation

rpcrt4

UuidCreateSequential
UuidToStringW
RpcServerInqCallAttributesW
RpcStringFreeW

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-core-version-l1-1-1

GetFileVersionInfoSizeW
GetFileVersionInfoW

api-ms-win-core-version-l1-1-0

VerQueryValueW

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount
GetTickCount64

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

ntdll

RtlReleaseSRWLockShared
RtlInitializeSRWLock
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
WinSqmIncrementDWORD
NtQueryInformationToken
RtlNtStatusToDosError
RtlGetAppContainerSidType
RtlAcquireSRWLockShared
WinSqmIsOptedIn

api-ms-win-shcore-stream-l1-1-0

SHCreateStreamOnFileW

api-ms-win-shlwapi-ie-l1-1-0

PathIsDirectoryW

xpsservices

ord8
ord9

winspool.drv

ord361
ord362
GetPrintExecutionData

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

urlmon

CreateUri

xmllite

CreateXmlReader

api-ms-win-core-kernel32-legacy-l1-1-0

RegisterWaitForSingleObject

api-ms-win-core-threadpool-legacy-l1-1-0

DeleteTimerQueueTimer
CreateTimerQueue
DeleteTimerQueueEx
CreateTimerQueueTimer
UnregisterWaitEx
QueueUserWorkItem

Exports

Exports

StartXpsPrintJob
StartXpsPrintJob1

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 323KB - Virtual size: 323KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
python-3.11.2-amd64/pres/fr/docs/perf/migstore.dll
.dll windows x64

d114f589d18689470f8720a61912fb22

Code Sign

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05-05-2022 19:23

Not After

04-05-2023 19:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d6:dc:52:ea:8e:61:4f:2c:93:21:97:c0:c4:a7:44:91:e5:44:c2:5e:cd:f5:20:d0:63:a8:b1:77:d4:26:48:cf
Signer

Actual PE Digest

d6:dc:52:ea:8e:61:4f:2c:93:21:97:c0:c4:a7:44:91:e5:44:c2:5e:cd:f5:20:d0:63:a8:b1:77:d4:26:48:cf

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

07-02-2023 20:40
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

msvcrt

__RTDynamicCast
_setjmp
memcpy
memmove
_onexit
__dllonexit
_unlock
_lock
?terminate@@YAXXZ
??1type_info@@UEAA@XZ
__C_specific_handler
_initterm
_amsg_exit
_XcptFilter
_CxxThrowException
_callnewh
?what@exception@@UEBAPEBDXZ
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
iswlower
iswalpha
longjmp
swscanf_s
_wcsnicmp
_wtoi64
_purecall
malloc
calloc
memmove_s
free
?name@type_info@@QEBAPEBDXZ
wcschr
towlower
__CxxFrameHandler3
memset

kernel32

GetProcessHeap
HeapAlloc
HeapFree
CloseHandle
GetLastError
SetFilePointer
SetEndOfFile
CreateFileW
ReadFile
SetFileAttributesW
DeleteFileW
WriteFile
FlushFileBuffers
GetFileSize
DuplicateHandle
GetCurrentProcess
CreateEventW
SetEvent
ResetEvent
WaitForMultipleObjects
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
InitializeCriticalSection
DeleteCriticalSection
CreateDirectoryW
SetLastError
CreateThread
GetFileAttributesW
FindFirstFileW
FindClose
SetErrorMode
GetDriveTypeW
GetVolumeInformationW
CreateHardLinkW
DeviceIoControl
GetModuleHandleW
GetProcAddress
Sleep
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess

unbcl

?AddRef@Object@UnBCL@@QEAAXXZ
?GetCallingModule@SerializationStream@UnBCL@@SAPEAUHINSTANCE__@@XZ
?CanRegister@SerializationStream@UnBCL@@SAHXZ
?RegisterType@SerializationStream@UnBCL@@SAXPEBVString@2@HPEAUHINSTANCE__@@PEAUIInstanceFactory@2@@Z
?EnqueueSbRegistration@SbRegistrationList@UnBCL@@SAXPEBDHPEAUHINSTANCE__@@PEAUIInstanceFactory@2@@Z
??0NotSupportedException@UnBCL@@QEAA@PEBG@Z
??1NotSupportedException@UnBCL@@UEAA@XZ
??0InvalidOperationException@UnBCL@@QEAA@PEBVString@1@@Z
?SetLiteralStorage@_@UnBCL@@YAXPEAPEBVString@2@PEBG@Z
??1?$ICollection@G@UnBCL@@UEAA@XZ
?UnregisterType@SerializationStream@UnBCL@@SAXPEBVString@2@HPEAUHINSTANCE__@@@Z
?Clone@?$ArrayList@PEAVString@UnBCL@@@UnBCL@@UEBAPEAVObject@2@XZ
?Equals@?$ArrayList@PEAVString@UnBCL@@@UnBCL@@UEBAHPEBVObject@2@@Z
??0IInstanceFactory@UnBCL@@QEAA@XZ
??1?$IEnumerator@PEAVString@UnBCL@@@UnBCL@@UEAA@XZ
??0?$IEnumerator@PEAVString@UnBCL@@@UnBCL@@QEAA@XZ
??0?$ICollection@G@UnBCL@@QEAA@XZ
??0?$IEnumerable@G@UnBCL@@QEAA@XZ
??0?$ICollection@PEAVString@UnBCL@@@UnBCL@@QEAA@XZ
??0?$IEnumerable@PEAVString@UnBCL@@@UnBCL@@QEAA@XZ
??1InvalidCastException@UnBCL@@UEAA@XZ
??_DStringPtr@UnBCL@@QEAAXXZ
??_DFileStream@UnBCL@@QEAAXXZ
??_D?$ArrayList@PEAVString@UnBCL@@@UnBCL@@QEAAXXZ
??4SyncObject@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4MemoryStream@UnBCL@@QEAAAEAV01@AEBV01@@Z
??_DMemoryStream@UnBCL@@QEAAXXZ
??0MemoryStream@UnBCL@@QEAA@AEBV01@@Z
??0ISerializable@UnBCL@@QEAA@$$QEAU01@@Z
??0ISerializable@UnBCL@@QEAA@AEBU01@@Z
??4ISerializable@UnBCL@@QEAAAEAU01@AEBU01@@Z
??4ISerializable@UnBCL@@QEAAAEAU01@$$QEAU01@@Z
??1InvalidOperationException@UnBCL@@UEAA@XZ
??0ISerializable@UnBCL@@QEAA@XZ
??0Win32Exception@UnBCL@@QEAA@XZ
??0OutOfMemoryException@UnBCL@@QEAA@XZ
??1Stream@UnBCL@@UEAA@XZ
??_7Stream@UnBCL@@6B01@@
??_7Stream@UnBCL@@6BObject@1@@
??_7Stream@UnBCL@@6BIDisposable@1@@
??0NotSupportedException@UnBCL@@QEAA@XZ
?Concat@String@UnBCL@@SAPEAV12@PEBG0@Z
??0StringBuilder@UnBCL@@QEAA@XZ
??1StringBuilder@UnBCL@@UEAA@XZ
?Append@StringBuilder@UnBCL@@QEAAPEAV12@PEBVString@2@@Z
?Append@StringBuilder@UnBCL@@QEAAPEAV12@G@Z
?get_CString@StringBuilder@UnBCL@@QEBAPEBGXZ
?WithoutLongPrefix@Path@UnBCL@@SAPEAVString@2@PEBV32@@Z
?WithLongPrefix@Path@UnBCL@@SAPEAVString@2@PEBV32@H@Z
??B?$SmartPtr@VString@UnBCL@@@UnBCL@@QEBAPEAVNullTest@01@XZ
?set_Length@StringBuilder@UnBCL@@QEAAXH@Z
?get_Length@StringBuilder@UnBCL@@QEBAHXZ
??0FileStream@UnBCL@@QEAA@PEBVString@1@W4FileMode@1@W4FileAccess@1@W4FileShare@1@K@Z
??0?$SmartPtr@VStream@UnBCL@@@UnBCL@@QEAA@XZ
??1?$SmartPtr@VStream@UnBCL@@@UnBCL@@UEAA@XZ
??4?$SmartPtr@VStream@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??0?$SmartPtr@VStream@UnBCL@@@UnBCL@@QEAA@PEAVStream@1@@Z
?get_P@?$SmartPtr@VStream@UnBCL@@@UnBCL@@QEBAPEAVStream@2@XZ
??C?$SmartPtr@VStream@UnBCL@@@UnBCL@@QEBAPEAVStream@1@XZ
??B?$SmartPtr@VStream@UnBCL@@@UnBCL@@QEBAPEAVNullTest@01@XZ
??0ArgumentException@UnBCL@@QEAA@XZ
?Append@StringBuilder@UnBCL@@QEAAPEAV12@PEBG@Z
?Create@File@UnBCL@@SAPEAVFileStream@2@PEBVString@2@@Z
?GetTemporaryFileName@File@UnBCL@@SAPEAVString@2@PEBV32@@Z
?Delete@File@UnBCL@@SAXPEBVString@2@@Z
?Add@StreamCounter@UnBCL@@QEAAX_J@Z
??0Exception@UnBCL@@QEAA@PEBG@Z
??0IDisposable@UnBCL@@QEAA@XZ
??1IDisposable@UnBCL@@UEAA@XZ
??1OutOfMemoryException@UnBCL@@UEAA@XZ
?get_Length@String@UnBCL@@QEBAHXZ
?GetEnvironmentVar@Environment@UnBCL@@SAPEAVString@2@PEBV32@@Z
?MatchI@String@UnBCL@@SAHPEBG0@Z
?Steal@?$SmartPtr@VStream@UnBCL@@@UnBCL@@QEAAPEAVStream@2@XZ
?GetFileNameWithoutExtension@Path@UnBCL@@SAPEAVString@2@PEBV32@@Z
?Concat@String@UnBCL@@SAPEAV12@PEBG000@Z
?Exists@File@UnBCL@@SAHPEBVString@2@@Z
??0IDisposable@UnBCL@@QEAA@AEBU01@@Z
??4Stream@UnBCL@@QEAAAEAV01@$$QEAV01@@Z
??4Stream@UnBCL@@QEAAAEAV01@AEBV01@@Z
??0Stream@UnBCL@@QEAA@$$QEAV01@@Z
??0Stream@UnBCL@@QEAA@AEBV01@@Z
?Compare@String@UnBCL@@SAHPEBG0H@Z
?GetDirectoryRoot@Directory@UnBCL@@SAPEAVString@2@PEBV32@@Z
?ExpandEnvironmentVariables@Environment@UnBCL@@SAPEAVString@2@PEBV32@@Z
?GetPathRoot@Path@UnBCL@@SAPEAVString@2@PEBV32@@Z
??0IDisposable@UnBCL@@QEAA@$$QEAU01@@Z
?Clone@?$Array@E@UnBCL@@UEBAPEAVObject@2@XZ
?Equals@?$Array@E@UnBCL@@UEBAHPEBVObject@2@@Z
??0?$Hashtable@PEAVString@UnBCL@@PEAV12@@UnBCL@@QEAA@HH@Z
??0InvalidOperationException@UnBCL@@QEAA@XZ
?Join@String@UnBCL@@SAPEAV12@PEBGPEAV?$Array@PEAVString@UnBCL@@@2@@Z
?get_Chars@String@UnBCL@@QEBAAEBGH@Z
??0?$SmartPtr@V?$Array@E@UnBCL@@@UnBCL@@QEAA@PEAV?$Array@E@1@@Z
??1?$SmartPtr@V?$Array@E@UnBCL@@@UnBCL@@UEAA@XZ
?get_P@?$SmartPtr@V?$Array@E@UnBCL@@@UnBCL@@QEBAPEAV?$Array@E@2@XZ
??C?$SmartPtr@V?$Array@E@UnBCL@@@UnBCL@@QEBAPEAV?$Array@E@1@XZ
?Steal@?$SmartPtr@V?$Array@E@UnBCL@@@UnBCL@@QEAAPEAV?$Array@E@2@XZ
?GetFileName@Path@UnBCL@@SAPEAVString@2@PEBV32@@Z
?IsPathRooted@Path@UnBCL@@SAHPEBVString@2@@Z
?Clone@?$Hashtable@PEAVString@UnBCL@@PEAV12@@UnBCL@@UEBAPEAVObject@2@XZ
??_D?$Hashtable@PEAVString@UnBCL@@PEAV12@@UnBCL@@QEAAXXZ
??0String@UnBCL@@QEAA@PEBGHH@Z
?Exists@Directory@UnBCL@@SAHPEBVString@2@@Z
?IsDirectoryEmpty@Directory@UnBCL@@SAHPEBVString@2@@Z
??0Win32Exception@UnBCL@@QEAA@PEBG@Z
??0?$SmartPtr@VEncoding@UnBCL@@@UnBCL@@QEAA@PEAVEncoding@1@@Z
?GetASCII@Encoding@UnBCL@@SAPEAV12@XZ
??1?$SmartPtr@VEncoding@UnBCL@@@UnBCL@@UEAA@XZ
??0StreamReader@UnBCL@@QEAA@PEBVString@1@PEAVEncoding@1@@Z
?get_P@?$SmartPtr@VEncoding@UnBCL@@@UnBCL@@QEBAPEAVEncoding@2@XZ
?DeleteNE@Directory@UnBCL@@SAHPEBVString@2@H@Z
??0StreamWriter@UnBCL@@QEAA@PEBVString@1@HPEAVEncoding@1@HH@Z
?Combine@Path@UnBCL@@SAPEAVString@2@PEBV32@0@Z
??0String@UnBCL@@QEAA@XZ
?Delete@Directory@UnBCL@@SAXPEBVString@2@H@Z
?StartsWith@String@UnBCL@@QEBAHPEBGH@Z
?ReadByte@Stream@UnBCL@@UEAAHXZ
??_DStreamWriter@UnBCL@@QEAAXXZ
??_DStreamReader@UnBCL@@QEAAXXZ
??0InvalidCastException@UnBCL@@QEAA@XZ
??5SerializationStream@UnBCL@@QEAAAEAV01@AEAPEAUISerializable@1@@Z
??0String@UnBCL@@QEAA@AEBV01@@Z
??2Object@UnBCL@@SAPEAX_KI@Z
??D?$SmartPtr@VString@UnBCL@@@UnBCL@@QEBAAEAVString@1@XZ
?SanitizeTypeName@SerializationStream@UnBCL@@SAPEAVString@2@AEBV32@@Z
?DecRef@Object@UnBCL@@QEAAHXZ
?get_P@?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$Array@PEAVString@UnBCL@@@2@XZ
?Substring@String@UnBCL@@QEBAPEAV12@HH@Z
?LastIndexOf@String@UnBCL@@QEBAHG@Z
?FromASCII@String@UnBCL@@SAPEAV12@PEBD@Z
?FormatV@String@UnBCL@@SAPEAV12@PEBGPEAD@Z
?Concat@String@UnBCL@@SAPEAV12@PEBG00@Z
?Equals@?$Array@PEAVString@UnBCL@@@UnBCL@@UEBAHPEBVObject@2@@Z
?Clone@?$Array@PEAVString@UnBCL@@@UnBCL@@UEBAPEAVObject@2@XZ
??0?$Array@PEAVString@UnBCL@@@UnBCL@@QEAA@HH@Z
??5SerializationStream@UnBCL@@QEAAAEAV01@AEAK@Z
??0MemoryStream@UnBCL@@QEAA@PEAV?$Array@E@1@HH@Z
?get_Context@SerializationStream@UnBCL@@QEBAPEAVObject@2@XZ
?ReadBytes@SerializationStream@UnBCL@@QEAAXPEAEH@Z
??5SerializationStream@UnBCL@@QEAAAEAV01@AEAG@Z
??6SerializationStream@UnBCL@@QEAAAEAV01@K@Z
??0String@UnBCL@@QEAA@PEBG@Z
?WriteBytes@SerializationStream@UnBCL@@QEAAXPEBEH@Z
??6SerializationStream@UnBCL@@QEAAAEAV01@G@Z
??_D?$Array@E@UnBCL@@QEAAXXZ
??1String@UnBCL@@UEAA@XZ
??0StringPtr@UnBCL@@QEAA@PEAVString@1@@Z
??4?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
?Compare@String@UnBCL@@SAHPEBV12@0H@Z
??_D?$Array@PEAVString@UnBCL@@@UnBCL@@QEAAXXZ
??0FileStream@UnBCL@@QEAA@PEAXW4FileAccess@1@@Z
??1ScopedObjectLock@UnBCL@@QEAA@XZ
??0ScopedObjectLock@UnBCL@@QEAA@PEAVSyncObject@1@@Z
?set_Context@SerializationStream@UnBCL@@QEAAXPEAVObject@2@@Z
??1SerializationStream@UnBCL@@UEAA@XZ
??0SerializationStream@UnBCL@@QEAA@PEAVStream@1@W4Mode@01@PEAVObject@1@@Z
??1?$ICollection@PEAVString@UnBCL@@@UnBCL@@UEAA@XZ
?MemAllocFailed@Allocator@UnBCL@@SAHXZ
?Steal@?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAAPEAVString@2@XZ
?ToLower@String@UnBCL@@QEBAPEAV12@XZ
??C?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$ArrayList@PEAVString@UnBCL@@@1@XZ
??0?$ArrayList@PEAVString@UnBCL@@@UnBCL@@QEAA@XZ
?get_Win32ErrorCode@Win32Exception@UnBCL@@QEBAKXZ
?CreateDir@Directory@UnBCL@@SAPEAVDirectoryInfo@2@PEBVString@2@@Z
?GetParentPath@Path@UnBCL@@SAPEAVString@2@PEBV32@@Z
??0SyncObject@UnBCL@@QEAA@XZ
??0MemoryStream@UnBCL@@QEAA@XZ
??0Exception@UnBCL@@QEAA@XZ
??C?$SmartPtr@VString@UnBCL@@@UnBCL@@QEBAPEAVString@1@XZ
??5SerializationStream@UnBCL@@QEAAAEAV01@AEAH@Z
??6SerializationStream@UnBCL@@QEAAAEAV01@PEBUISerializable@1@@Z
??6SerializationStream@UnBCL@@QEAAAEAV01@H@Z
??5SerializationStream@UnBCL@@QEAAAEAV01@AEA_K@Z
??5SerializationStream@UnBCL@@QEAAAEAV01@AEAPEAVString@1@@Z
??6SerializationStream@UnBCL@@QEAAAEAV01@_K@Z
??6SerializationStream@UnBCL@@QEAAAEAV01@PEBVString@1@@Z
??C?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$Array@PEAVString@UnBCL@@@1@XZ
??1?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@UEAA@XZ
??0?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEAA@PEAV?$Array@PEAVString@UnBCL@@@1@@Z
?get_CString@String@UnBCL@@QEBAPEBGXZ
??1SyncObject@UnBCL@@UEAA@XZ
??0SyncObject@UnBCL@@QEAA@AEBV01@@Z
??0?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAA@AEBV01@@Z
??0Win32Exception@UnBCL@@QEAA@KPEBGPEAVException@1@@Z
??0Win32Exception@UnBCL@@QEAA@KPEBG@Z
?ReAlloc@Allocator@UnBCL@@SAPEAXPEAX_KI@Z
??0ArgumentNullException@UnBCL@@QEAA@PEBG@Z
??1Exception@UnBCL@@UEAA@XZ
??1Win32Exception@UnBCL@@UEAA@XZ
??1ArgumentException@UnBCL@@UEAA@XZ
??1ArgumentNullException@UnBCL@@UEAA@XZ
??0ArgumentNullException@UnBCL@@QEAA@XZ
??0?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAA@XZ
??0Object@UnBCL@@QEAA@AEBV01@@Z
?ToString@Object@UnBCL@@UEBAPEAVString@2@XZ
??0?$Array@E@UnBCL@@QEAA@HH@Z
?GetBuffer@?$Array@E@UnBCL@@UEAAPEAEH@Z
??0ArgumentException@UnBCL@@QEAA@PEBG@Z
??1ISerializable@UnBCL@@UEAA@XZ
??1Object@UnBCL@@UEAA@XZ
??0Object@UnBCL@@QEAA@XZ
?Equals@String@UnBCL@@UEBAHPEBVObject@2@@Z
?GetHashCode@String@UnBCL@@UEBAHXZ
?ToString@String@UnBCL@@UEBAPEAV12@XZ
?CompareTo@String@UnBCL@@UEBAHPEBVObject@2@@Z
?Clone@String@UnBCL@@UEBAPEAVObject@2@XZ
??0String@UnBCL@@QEAA@PEBV01@@Z
?Format@String@UnBCL@@SAPEAV12@PEBGZZ
??0Win32Exception@UnBCL@@QEAA@K@Z
??1?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@UEAA@XZ
??0?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEAA@PEAV?$ArrayList@PEAVString@UnBCL@@@1@@Z
?get_P@?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$ArrayList@PEAVString@UnBCL@@@2@XZ
??1?$SmartPtr@VString@UnBCL@@@UnBCL@@UEAA@XZ
??0?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAA@PEAVString@1@@Z
??4?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
?get_P@?$SmartPtr@VString@UnBCL@@@UnBCL@@QEBAPEAVString@2@XZ
?Free@Allocator@UnBCL@@SAXPEAXI@Z
??1ArgumentOutOfRangeException@UnBCL@@UEAA@XZ
?Equals@Object@UnBCL@@UEBAHPEBV12@@Z
?GetHashCode@Object@UnBCL@@UEBAHXZ
?GetType@Object@UnBCL@@UEBAPEAVType@2@XZ
?ToString@Exception@UnBCL@@UEBAPEAVString@2@XZ
?GetObjectID@Object@UnBCL@@UEBAIXZ
?WritePhantomObject@SerializationStream@UnBCL@@QEAAHPEBVObject@2@@Z
??0SerializationException@UnBCL@@QEAA@PEBG@Z
?ToArray@MemoryStream@UnBCL@@UEBAPEAV?$Array@E@2@XZ
?ReadPhantomObject@SerializationStream@UnBCL@@QEAAXAEAPEAVObject@2@@Z
??1SerializationException@UnBCL@@UEAA@XZ
??0InvalidOperationException@UnBCL@@QEAA@PEBG@Z
??0InvalidOperationException@UnBCL@@QEAA@PEBVString@1@PEAVException@1@@Z
?CompareTo@Object@UnBCL@@UEBAHPEBV12@@Z
?Clone@Object@UnBCL@@UEBAPEAV12@XZ
?get_InnerException@Exception@UnBCL@@UEBAPEBV12@XZ
?get_Message@Exception@UnBCL@@UEBAPEBVString@2@XZ
?get_Source@Exception@UnBCL@@UEBAPEBVString@2@XZ
?set_Source@Exception@UnBCL@@UEAAXPEBVString@2@@Z
?GetBaseException@Exception@UnBCL@@UEBAPEBV12@XZ
?get_HResult@Exception@UnBCL@@UEBAJXZ
?set_HResult@Exception@UnBCL@@MEAAXJ@Z
?SetMessage@Exception@UnBCL@@MEAAXPEAVString@2@@Z
??0ArgumentOutOfRangeException@UnBCL@@QEAA@PEBG@Z
??3Object@UnBCL@@SAXPEAX@Z
??2Object@UnBCL@@SAPEAX_K@Z
?AddStackTrace@Exception@UnBCL@@QEAAXPEBD@Z
?Alloc@Allocator@UnBCL@@SAPEAX_KI@Z
??4Object@UnBCL@@QEAAAEAV01@AEBV01@@Z

migcore

??1IFileStreamProxy@Mig@@UEAA@XZ
??4IOptimizedFileStreamProxy@Mig@@QEAAAEAU01@AEBU01@@Z
??1IOptimizedFileStreamProxy@Mig@@UEAA@XZ
??0IOptimizedFileStreamProxy@Mig@@QEAA@XZ
??1CAbortException@Mig@@UEAA@XZ
??1SideAwareWin32Exception@Mig@@UEAA@XZ
??0CAbortException@Mig@@QEAA@PEBG@Z
?get_Name@CStorageType@Mig@@QEAAPEAVString@UnBCL@@XZ
?CopyStream@Mig@@YAXPEAVStream@UnBCL@@0PEAUILocalProgress@@H_J@Z
??C?$SmartPtr@UIMigLocation@Mig@@@UnBCL@@QEBAPEAUIMigLocation@Mig@@XZ
?get_P@?$SmartPtr@UIMigLocation@Mig@@@UnBCL@@QEBAPEAUIMigLocation@Mig@@XZ
?GetTypeFromString@CStorageType@Mig@@SAPEAV12@PEAVString@UnBCL@@@Z
??0SideAwareWin32Exception@Mig@@QEAA@HK@Z
??1IStreamProxy@Mig@@UEAA@XZ
?MappedFileSystemPath@CFileSystemRootMapping@Mig@@QEAAPEAVString@UnBCL@@PEAV34@@Z
??0?$SmartPtr@UIMigLocation@Mig@@@UnBCL@@QEAA@PEAUIMigLocation@Mig@@@Z
??1?$SmartPtr@UIMigLocation@Mig@@@UnBCL@@UEAA@XZ
?Clone@CFileLocation@Mig@@UEBAPEAVObject@UnBCL@@XZ
?CompareTo@CFilePattern@Mig@@UEBAHPEBVObject@UnBCL@@@Z
?ToString@CFileLocation@Mig@@UEBAPEAVString@UnBCL@@XZ
?GetHashCode@CFilePattern@Mig@@UEBAHXZ
??0IStreamProxy@Mig@@QEAA@XZ
?CreateFolder@IOptimizedFileStreamProxy@Mig@@UEAAXPEAVString@UnBCL@@HPEAHPEAUILocalProgress@@@Z
?CanCreateFolder@IOptimizedFileStreamProxy@Mig@@UEAAHXZ
??0IDataStoreNavigator@Mig@@QEAA@AEBU01@@Z
??1IDataStoreNavigator@Mig@@UEAA@XZ
??4IDataStoreNavigator@Mig@@QEAAAEAU01@AEBU01@@Z
??0IDataStoreNavigator@Mig@@QEAA@XZ
?CreateInstance@CLocationFactory@Mig@@SAPEAUIMigLocation@2@PEAVCStorageType@2@PEAV?$Array@PEAVString@UnBCL@@@UnBCL@@@Z
??1NavigatorRootAbsentException@Mig@@UEAA@XZ
??0NavigatorRootAbsentException@Mig@@QEAA@PEAUIMigLocation@1@@Z
??0?$SmartPtr@VCFileLocation@Mig@@@UnBCL@@QEAA@PEAVCFileLocation@Mig@@@Z
??1?$SmartPtr@VCFileLocation@Mig@@@UnBCL@@UEAA@XZ
?get_IsDirectory@CFileLocation@Mig@@QEBAHXZ
??0CFileLocation@Mig@@QEAA@HPEAVString@UnBCL@@@Z
??0IFileStreamProxy@Mig@@QEAA@XZ
??4?$SmartPtr@VCFileLocation@Mig@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
?GetFullPath@CFileLocation@Mig@@QEBAPEAVString@UnBCL@@XZ
??0SideAwareWin32Exception@Mig@@QEAA@HKQEBGPEAVException@UnBCL@@@Z
?Equals@CFilePattern@Mig@@UEBAHPEBVObject@UnBCL@@@Z
?MakeSureDirectoryExists@CNativeFileUtils@Mig@@SAKPEAGPEAH@Z
?get_Location@CPhysicalFile@Mig@@QEAAPEAVCFileLocation@2@XZ
?CanCreateFile@IOptimizedFileStreamProxy@Mig@@UEAAHXZ
?CreateFileW@IOptimizedFileStreamProxy@Mig@@UEAAXPEAVString@UnBCL@@KPEAH1PEAUILocalProgress@@@Z
??_DCBlobStreamProxy@Mig@@QEAAXXZ
??1CPhysicalFile@Mig@@UEAA@XZ
??_DCEfsFileReadStream@Mig@@QEAAXXZ
?Clone@CBlobStreamProxy@Mig@@UEBAPEAVObject@UnBCL@@XZ
??0CEfsFileReadStream@Mig@@QEAA@PEBVString@UnBCL@@HW4FileMode@3@W4FileAccess@3@W4FileShare@3@K@Z
??0CPhysicalFile@Mig@@QEAA@PEAVCFileLocation@1@H@Z
?Clone@CPhysicalFile@Mig@@UEBAPEAVObject@UnBCL@@XZ
?Steal@?$SmartPtr@UIMigLocation@Mig@@@UnBCL@@QEAAPEAUIMigLocation@Mig@@XZ
??0CBlobStreamProxy@Mig@@QEAA@PEAV?$Array@E@UnBCL@@H@Z
?GetStateType@CStorageType@Mig@@SAPEAV12@XZ
?GetRegistryType@CStorageType@Mig@@SAPEAV12@XZ
?GetFileType@CStorageType@Mig@@SAPEAV12@XZ
??0SideAwareWin32Exception@Mig@@QEAA@HPEAVWin32Exception@UnBCL@@@Z
?GetTempDir@CFacadeState@Mig@@SAPEAVString@UnBCL@@XZ
?GetInitialized@CFacadeState@Mig@@SAHXZ
?GetIOBufferSet@CFacadeState@Mig@@SAAEAVCIOBufferSet@2@XZ
??C?$SmartPtr@VCFileLocation@Mig@@@UnBCL@@QEBAPEAVCFileLocation@Mig@@XZ
?get_P@?$SmartPtr@VCFileLocation@Mig@@@UnBCL@@QEBAPEAVCFileLocation@Mig@@XZ
??_DCFileLocation@Mig@@QEAAXXZ

wdscore

CurrentIP
ConstructPartialMsgVW
WdsSetupLogMessageW

user32

GetMessageW
PostThreadMessageW
PeekMessageW

advapi32

CryptEncrypt
CryptDuplicateKey
CryptDestroyKey
CryptDecrypt
CryptSetKeyParam
CryptGetKeyParam

rpcrt4

UuidToStringW
UuidCreate
RpcStringFreeW

Exports

Exports

??0?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@AEAA@AEBV01@@Z
??0?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@QEAA@HH@Z
??0?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@QEAA@PEBU?$ICollection@PEAVCCatalogUser@Mig@@@1@@Z
??0?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@QEAA@XZ
??0?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@QEAA@AEBV01@@Z
??0?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@QEAA@H@Z
??0?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@QEAA@HH@Z
??0?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@QEAA@PEBU?$IDictionary@IPEAUIDevice@Mig@@@1@@Z
??0?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@QEAA@XZ
??0?$ICollection@PEAVCCatalogUser@Mig@@@UnBCL@@QEAA@AEBU01@@Z
??0?$ICollection@PEAVCCatalogUser@Mig@@@UnBCL@@QEAA@XZ
??0?$ICollection@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@UnBCL@@QEAA@AEBU01@@Z
??0?$ICollection@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@UnBCL@@QEAA@XZ
??0?$IDictionary@IPEAUIDevice@Mig@@@UnBCL@@QEAA@AEBU01@@Z
??0?$IDictionary@IPEAUIDevice@Mig@@@UnBCL@@QEAA@XZ
??0?$IEnumerable@PEAVCCatalogUser@Mig@@@UnBCL@@QEAA@AEBU01@@Z
??0?$IEnumerable@PEAVCCatalogUser@Mig@@@UnBCL@@QEAA@XZ
??0?$IEnumerable@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@UnBCL@@QEAA@AEBU01@@Z
??0?$IEnumerable@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@UnBCL@@QEAA@XZ
??0?$IList@PEAVCCatalogUser@Mig@@@UnBCL@@QEAA@AEBU01@@Z
??0?$IList@PEAVCCatalogUser@Mig@@@UnBCL@@QEAA@XZ
??0?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@QEAA@AEBV012@@Z
??0?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@QEAA@XZ
??0?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@UnBCL@@IEAA@XZ
??0?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@UnBCL@@QEAA@AEBV01@@Z
??0?$SerializableBase@VCCatalogEntry@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogEntry@Mig@@@UnBCL@@@UnBCL@@IEAA@XZ
??0?$SerializableBase@VCCatalogEntry@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogEntry@Mig@@@UnBCL@@@UnBCL@@QEAA@AEBV01@@Z
??0?$SerializableBase@VCCatalogUser@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUser@Mig@@@UnBCL@@@UnBCL@@IEAA@XZ
??0?$SerializableBase@VCCatalogUser@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUser@Mig@@@UnBCL@@@UnBCL@@QEAA@AEBV01@@Z
??0?$SerializableBase@VCCatalogUserList@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUserList@Mig@@@UnBCL@@@UnBCL@@IEAA@XZ
??0?$SerializableBase@VCCatalogUserList@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUserList@Mig@@@UnBCL@@@UnBCL@@QEAA@AEBV01@@Z
??0?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@QEAA@AEBV01@@Z
??0?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@QEAA@PEAUITrimableStream@Mig@@@Z
??0?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@QEAA@XZ
??0?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@QEAA@AEBV01@@Z
??0?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@QEAA@PEAV?$ArrayList@G@1@@Z
??0?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@QEAA@XZ
??0?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@QEAA@AEBV01@@Z
??0?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@QEAA@PEAV?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@1@@Z
??0?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@QEAA@XZ
??0?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@QEAA@AEBV01@@Z
??0?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@QEAA@PEAVCLibrarian@Mig@@@Z
??0?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@QEAA@XZ
??0?$SmartPtr@VSendState@Mig@@@UnBCL@@QEAA@AEBV01@@Z
??0?$SmartPtr@VSendState@Mig@@@UnBCL@@QEAA@PEAVSendState@Mig@@@Z
??0?$SmartPtr@VSendState@Mig@@@UnBCL@@QEAA@XZ
??0CAlternateStreamHolder@Mig@@QEAA@AEBV01@@Z
??0CAlternateStreamHolder@Mig@@QEAA@PEAVStream@UnBCL@@@Z
??0CAlternateStreamHolder@Mig@@QEAA@PEAVString@UnBCL@@@Z
??0CCatalog@Mig@@QEAA@AEBV01@@Z
??0CCatalog@Mig@@QEAA@PEAVString@UnBCL@@HHPEAV?$Array@PEAVString@UnBCL@@@3@HHH@Z
??0CCatalogEntry@Mig@@IEAA@XZ
??0CCatalogEntry@Mig@@QEAA@AEAV?$CBitVector2D@$01@1@PEAVString@UnBCL@@PEAUIMigLocation@1@22PEAVStream@4@PEAV?$Array@E@4@41PEAU?$IDictionary@PEAVString@UnBCL@@PEAVCAlternateStreamHolder@Mig@@@4@K@Z
??0CCatalogEntry@Mig@@QEAA@AEBV01@@Z
??0CCatalogLinearIterator@Mig@@AEAA@AEAVCCatalog@1@@Z
??0CCatalogLinearIterator@Mig@@QEAA@AEBV01@@Z
??0CCatalogNavigator@Mig@@IEAA@PEAUIMigLocation@1@PEAVString@UnBCL@@PEBVCCatalogTreeData@1@PEAV?$CTreeNode@VCCatalogTreeData@Mig@@@1@@Z
??0CCatalogNavigator@Mig@@QEAA@AEBV01@@Z
??0CCatalogUser@Mig@@QEAA@$$QEAV01@@Z
??0CCatalogUser@Mig@@QEAA@AEBV01@@Z
??0CCatalogUser@Mig@@QEAA@PEAVString@UnBCL@@@Z
??0CCatalogUser@Mig@@QEAA@XZ
??0CCatalogUserList@Mig@@QEAA@XZ
??0CConnectionPipeTransportStreamProxy@Mig@@IEAA@AEBV01@@Z
??0CConnectionPipeTransportStreamProxy@Mig@@QEAA@PEAVCConnectionPipeTransport@1@PEAVString@UnBCL@@1PEAVCFileSystemRootMapping@1@PEAVCDeviceProgressAdapter@1@PEAX@Z
??0CDeviceLockedObject@Mig@@IEAA@AEBV01@@Z
??0CDeviceLockedObject@Mig@@QEAA@PEAVString@UnBCL@@H@Z
??0CDeviceProgressAdapter@Mig@@QEAA@$$QEAV01@@Z
??0CDeviceProgressAdapter@Mig@@QEAA@AEBV01@@Z
??0CDeviceProgressAdapter@Mig@@QEAA@XZ
??0CExternalTransport@Mig@@QEAA@AEBV01@@Z
??0CExternalTransport@Mig@@QEAA@XZ
??0CExternalTransportInitializationData@Mig@@QEAA@$$QEAV01@@Z
??0CExternalTransportInitializationData@Mig@@QEAA@AEBV01@@Z
??0CExternalTransportInitializationData@Mig@@QEAA@PEAVCPlatform@1@PEAUIExternalStore@@PEAVString@UnBCL@@@Z
??0CExternalTransportStreamProxy@Mig@@IEAA@AEBV01@@Z
??0CExternalTransportStreamProxy@Mig@@QEAA@PEAVCExternalTransport@1@PEAUIExternalStore@@PEAVString@UnBCL@@PEAVCFileSystemRootMapping@1@PEAVCDeviceProgressAdapter@1@@Z
??0CHardLinkTransportStreamProxy@Mig@@IEAA@AEBV01@@Z
??0CHardLinkTransportStreamProxy@Mig@@QEAA@PEAVCUNCTransport@1@PEAVString@UnBCL@@1PEAVCFileSystemRootMapping@1@PEAVCDeviceProgressAdapter@1@@Z
??0CIMGTransport@Mig@@QEAA@AEBV01@@Z
??0CIMGTransport@Mig@@QEAA@XZ
??0CLibTransport@Mig@@QEAA@$$QEAV01@@Z
??0CLibTransport@Mig@@QEAA@AEBV01@@Z
??0CLibTransport@Mig@@QEAA@XZ
??0CLibTransportInitializationData@Mig@@QEAA@$$QEAV01@@Z
??0CLibTransportInitializationData@Mig@@QEAA@AEBV01@@Z
??0CLibTransportInitializationData@Mig@@QEAA@PEBG0PEAUITransportUI@@PEAUIMigStreamSizeRecorder@@@Z
??0CLibrarian@Mig@@QEAA@AEBV01@@Z
??0CLibrarian@Mig@@QEAA@PEAUITrimableStream@1@HH_K@Z
??0CLibrarian@Mig@@QEAA@PEAUITrimableStream@1@HH_KPEAH2@Z
??0CMediaManager@Mig@@QEAA@AEBV01@@Z
??0CMediaManager@Mig@@QEAA@PEAVCPlatform@1@@Z
??0CMediaManagerStreamProxy@Mig@@IEAA@AEBV01@@Z
??0CMediaManagerStreamProxy@Mig@@QEAA@PEAUIDevice@1@PEAVString@UnBCL@@PEAVCDeviceProgressAdapter@1@@Z
??0CNonTrimableFileStream@Mig@@QEAA@AEBV01@@Z
??0CNonTrimableFileStream@Mig@@QEAA@PEBVString@UnBCL@@W4FileMode@3@W4FileAccess@3@W4FileShare@3@KPEAUIDevice@1@@Z
??0CSimulationTableStream@@QEAA@AEBV0@@Z
??0CSimulationTableStream@@QEAA@PEAUIMigStreamSizeRecorder@@PEBG@Z
??0CSimulationTrimableStream@Mig@@QEAA@$$QEAV01@@Z
??0CSimulationTrimableStream@Mig@@QEAA@AEBV01@@Z
??0CSimulationTrimableStream@Mig@@QEAA@PEAUIMigStreamSizeRecorder@@@Z
??0CSplitFileStream@Mig@@QEAA@AEBV01@@Z
??0CSplitFileStream@Mig@@QEAA@PEAVString@UnBCL@@IP6AXPEAEIH@ZP6AH1IH@Z_JHPEAUIDevice@1@@Z
??0CUNCTransport@Mig@@QEAA@AEBV01@@Z
??0CUNCTransport@Mig@@QEAA@XZ
??0CUNCTransportInitializationData@Mig@@QEAA@$$QEAV01@@Z
??0CUNCTransportInitializationData@Mig@@QEAA@AEBV01@@Z
??0CUNCTransportInitializationData@Mig@@QEAA@PEBGPEAUIMigHardLinkPolicy@@PEAV?$ArrayList@G@UnBCL@@PEAVCPlatform@1@PEAUIMigStreamSizeRecorder@@@Z
??0IDevice@Mig@@QEAA@$$QEAU01@@Z
??0IDevice@Mig@@QEAA@AEBU01@@Z
??0IDevice@Mig@@QEAA@XZ
??0IDeviceInitializationData@Mig@@QEAA@$$QEAU01@@Z
??0IDeviceInitializationData@Mig@@QEAA@AEBU01@@Z
??0IDeviceInitializationData@Mig@@QEAA@XZ
??0IStoreInterface@Mig@@QEAA@$$QEAU01@@Z
??0IStoreInterface@Mig@@QEAA@AEBU01@@Z
??0IStoreInterface@Mig@@QEAA@XZ
??0ITrimableStream@Mig@@QEAA@$$QEAU01@@Z
??0ITrimableStream@Mig@@QEAA@AEBU01@@Z
??0ITrimableStream@Mig@@QEAA@XZ
??0SendState@Mig@@QEAA@$$QEAV01@@Z
??0SendState@Mig@@QEAA@AEBV01@@Z
??0SendState@Mig@@QEAA@XZ
??1?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@UEAA@XZ
??1?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@UEAA@XZ
??1?$ICollection@PEAVCCatalogUser@Mig@@@UnBCL@@UEAA@XZ
??1?$ICollection@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@UnBCL@@UEAA@XZ
??1?$IDictionary@IPEAUIDevice@Mig@@@UnBCL@@UEAA@XZ
??1?$IList@PEAVCCatalogUser@Mig@@@UnBCL@@UEAA@XZ
??1?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@UEAA@XZ
??1?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@UnBCL@@UEAA@XZ
??1?$SerializableBase@VCCatalogEntry@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogEntry@Mig@@@UnBCL@@@UnBCL@@UEAA@XZ
??1?$SerializableBase@VCCatalogUser@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUser@Mig@@@UnBCL@@@UnBCL@@UEAA@XZ
??1?$SerializableBase@VCCatalogUserList@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUserList@Mig@@@UnBCL@@@UnBCL@@UEAA@XZ
??1?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@UEAA@XZ
??1?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@UEAA@XZ
??1?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@UEAA@XZ
??1?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@UEAA@XZ
??1?$SmartPtr@VSendState@Mig@@@UnBCL@@UEAA@XZ
??1CAlternateStreamHolder@Mig@@UEAA@XZ
??1CCatalog@Mig@@UEAA@XZ
??1CCatalogEntry@Mig@@UEAA@XZ
??1CCatalogLinearIterator@Mig@@UEAA@XZ
??1CCatalogNavigator@Mig@@UEAA@XZ
??1CCatalogUser@Mig@@UEAA@XZ
??1CCatalogUserList@Mig@@UEAA@XZ
??1CConnectionPipeTransportStreamProxy@Mig@@UEAA@XZ
??1CDeviceLockedObject@Mig@@UEAA@XZ
??1CDeviceProgressAdapter@Mig@@UEAA@XZ
??1CExternalTransport@Mig@@UEAA@XZ
??1CExternalTransportInitializationData@Mig@@UEAA@XZ
??1CExternalTransportStreamProxy@Mig@@UEAA@XZ
??1CHardLinkTransportStreamProxy@Mig@@UEAA@XZ
??1CIMGTransport@Mig@@UEAA@XZ
??1CLibTransport@Mig@@UEAA@XZ
??1CLibTransportInitializationData@Mig@@UEAA@XZ
??1CLibrarian@Mig@@UEAA@XZ
??1CMediaManager@Mig@@UEAA@XZ
??1CMediaManagerStreamProxy@Mig@@UEAA@XZ
??1CNonTrimableFileStream@Mig@@UEAA@XZ
??1CSimulationTableStream@@UEAA@XZ
??1CSimulationTrimableStream@Mig@@UEAA@XZ
??1CSplitFileStream@Mig@@UEAA@XZ
??1CUNCTransport@Mig@@UEAA@XZ
??1CUNCTransportInitializationData@Mig@@UEAA@XZ
??1IDevice@Mig@@UEAA@XZ
??1IDeviceInitializationData@Mig@@UEAA@XZ
??1IStoreInterface@Mig@@UEAA@XZ
??1ITrimableStream@Mig@@UEAA@XZ
??1SendState@Mig@@UEAA@XZ
??4?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4?$ICollection@PEAVCCatalogUser@Mig@@@UnBCL@@QEAAAEAU01@$$QEAU01@@Z
??4?$ICollection@PEAVCCatalogUser@Mig@@@UnBCL@@QEAAAEAU01@AEBU01@@Z
??4?$ICollection@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@UnBCL@@QEAAAEAU01@$$QEAU01@@Z
??4?$ICollection@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@UnBCL@@QEAAAEAU01@AEBU01@@Z
??4?$IDictionary@IPEAUIDevice@Mig@@@UnBCL@@QEAAAEAU01@$$QEAU01@@Z
??4?$IDictionary@IPEAUIDevice@Mig@@@UnBCL@@QEAAAEAU01@AEBU01@@Z
??4?$IEnumerable@PEAVCCatalogUser@Mig@@@UnBCL@@QEAAAEAU01@$$QEAU01@@Z
??4?$IEnumerable@PEAVCCatalogUser@Mig@@@UnBCL@@QEAAAEAU01@AEBU01@@Z
??4?$IEnumerable@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@UnBCL@@QEAAAEAU01@$$QEAU01@@Z
??4?$IEnumerable@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@UnBCL@@QEAAAEAU01@AEBU01@@Z
??4?$IList@PEAVCCatalogUser@Mig@@@UnBCL@@QEAAAEAU01@$$QEAU01@@Z
??4?$IList@PEAVCCatalogUser@Mig@@@UnBCL@@QEAAAEAU01@AEBU01@@Z
??4?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@QEAAAEAV012@$$QEAV012@@Z
??4?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@QEAAAEAV012@AEBV012@@Z
??4?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@UnBCL@@QEAAAEAV01@$$QEAV01@@Z
??4?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4?$SerializableBase@VCCatalogEntry@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogEntry@Mig@@@UnBCL@@@UnBCL@@QEAAAEAV01@$$QEAV01@@Z
??4?$SerializableBase@VCCatalogEntry@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogEntry@Mig@@@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4?$SerializableBase@VCCatalogUser@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUser@Mig@@@UnBCL@@@UnBCL@@QEAAAEAV01@$$QEAV01@@Z
??4?$SerializableBase@VCCatalogUser@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUser@Mig@@@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4?$SerializableBase@VCCatalogUserList@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUserList@Mig@@@UnBCL@@@UnBCL@@QEAAAEAV01@$$QEAV01@@Z
??4?$SerializableBase@VCCatalogUserList@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUserList@Mig@@@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4?$SmartPtr@VSendState@Mig@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??4CAlternateStreamHolder@Mig@@QEAAAEAV01@AEBV01@@Z
??4CCatalog@Mig@@QEAAAEAV01@AEBV01@@Z
??4CCatalogEntry@Mig@@QEAAAEAV01@AEBV01@@Z
??4CCatalogNavigator@Mig@@QEAAAEAV01@AEBV01@@Z
??4CCatalogUser@Mig@@QEAAAEAV01@$$QEAV01@@Z
??4CCatalogUser@Mig@@QEAAAEAV01@AEBV01@@Z
??4CCatalogUserList@Mig@@QEAAAEAV01@$$QEAV01@@Z
??4CCatalogUserList@Mig@@QEAAAEAV01@AEBV01@@Z
??4CConnectionPipeTransportStreamProxy@Mig@@QEAAAEAV01@AEBV01@@Z
??4CDeviceLockedObject@Mig@@QEAAAEAV01@AEBV01@@Z
??4CDeviceProgressAdapter@Mig@@QEAAAEAV01@$$QEAV01@@Z
??4CDeviceProgressAdapter@Mig@@QEAAAEAV01@AEBV01@@Z
??4CExternalTransport@Mig@@QEAAAEAV01@AEBV01@@Z
??4CExternalTransportInitializationData@Mig@@QEAAAEAV01@$$QEAV01@@Z
??4CExternalTransportInitializationData@Mig@@QEAAAEAV01@AEBV01@@Z
??4CExternalTransportStreamProxy@Mig@@QEAAAEAV01@AEBV01@@Z
??4CHardLinkTransportStreamProxy@Mig@@QEAAAEAV01@AEBV01@@Z
??4CIMGTransport@Mig@@QEAAAEAV01@AEBV01@@Z
??4CLibTransport@Mig@@QEAAAEAV01@$$QEAV01@@Z
??4CLibTransport@Mig@@QEAAAEAV01@AEBV01@@Z
??4CLibTransportInitializationData@Mig@@QEAAAEAV01@$$QEAV01@@Z
??4CLibTransportInitializationData@Mig@@QEAAAEAV01@AEBV01@@Z
??4CLibrarian@Mig@@QEAAAEAV01@AEBV01@@Z
??4CMediaManager@Mig@@QEAAAEAV01@AEBV01@@Z
??4CMediaManagerStreamProxy@Mig@@QEAAAEAV01@AEBV01@@Z
??4CNonTrimableFileStream@Mig@@QEAAAEAV01@AEBV01@@Z
??4CSimulationTableStream@@QEAAAEAV0@AEBV0@@Z
??4CSimulationTrimableStream@Mig@@QEAAAEAV01@$$QEAV01@@Z
??4CSimulationTrimableStream@Mig@@QEAAAEAV01@AEBV01@@Z
??4CSplitFileStream@Mig@@QEAAAEAV01@AEBV01@@Z
??4CUNCTransport@Mig@@QEAAAEAV01@AEBV01@@Z
??4CUNCTransportInitializationData@Mig@@QEAAAEAV01@$$QEAV01@@Z
??4CUNCTransportInitializationData@Mig@@QEAAAEAV01@AEBV01@@Z
??4IDevice@Mig@@QEAAAEAU01@$$QEAU01@@Z
??4IDevice@Mig@@QEAAAEAU01@AEBU01@@Z
??4IDeviceInitializationData@Mig@@QEAAAEAU01@$$QEAU01@@Z
??4IDeviceInitializationData@Mig@@QEAAAEAU01@AEBU01@@Z
??4IStoreInterface@Mig@@QEAAAEAU01@$$QEAU01@@Z
??4IStoreInterface@Mig@@QEAAAEAU01@AEBU01@@Z
??4ITrimableStream@Mig@@QEAAAEAU01@$$QEAU01@@Z
??4ITrimableStream@Mig@@QEAAAEAU01@AEBU01@@Z
??4SendState@Mig@@QEAAAEAV01@$$QEAV01@@Z
??4SendState@Mig@@QEAAAEAV01@AEBV01@@Z
??7?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@QEBA_NXZ
??7?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@QEBA_NXZ
??7?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@QEBA_NXZ
??7?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@QEBA_NXZ
??7?$SmartPtr@VSendState@Mig@@@UnBCL@@QEBA_NXZ
??B?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@QEBAPEAVNullTest@01@XZ
??B?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@QEBAPEAVNullTest@01@XZ
??B?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAVNullTest@01@XZ
??B?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@QEBAPEAVNullTest@01@XZ
??B?$SmartPtr@VSendState@Mig@@@UnBCL@@QEBAPEAVNullTest@01@XZ
??C?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@QEBAPEAUITrimableStream@Mig@@XZ
??C?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@QEBAPEAV?$ArrayList@G@1@XZ
??C?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@1@XZ
??C?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@QEBAPEAVCLibrarian@Mig@@XZ
??C?$SmartPtr@VSendState@Mig@@@UnBCL@@QEBAPEAVSendState@Mig@@XZ
??D?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@QEBAAEAUITrimableStream@Mig@@XZ
??D?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@QEBAAEAV?$ArrayList@G@1@XZ
??D?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@QEBAAEAV?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@1@XZ
??D?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@QEBAAEAVCLibrarian@Mig@@XZ
??D?$SmartPtr@VSendState@Mig@@@UnBCL@@QEBAAEAVSendState@Mig@@XZ
??_7?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@6B01@@
??_7?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@6B?$ICollection@PEAVCCatalogUser@Mig@@@1@@
??_7?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@6B?$IEnumerable@PEAVCCatalogUser@Mig@@@1@@
??_7?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@6B?$IList@PEAVCCatalogUser@Mig@@@1@@
??_7?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@6B?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@1@@
??_7?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@6BISerializable@1@@
??_7?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@6BObject@1@@
??_7?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@6B01@@
??_7?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@6B?$ICollection@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@1@@
??_7?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@6B?$IDictionary@IPEAUIDevice@Mig@@@1@@
??_7?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@6B?$IEnumerable@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@1@@
??_7?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@6BObject@1@@
??_7?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@6B?$ICollection@PEAVCCatalogUser@Mig@@@2@@
??_7?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@6B?$IEnumerable@PEAVCCatalogUser@Mig@@@2@@
??_7?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@6B?$IList@PEAVCCatalogUser@Mig@@@2@@
??_7?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@6B?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@2@@
??_7?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@6BISerializable@2@@
??_7?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@6BObject@2@@
??_7?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@UnBCL@@6B01@@
??_7?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@UnBCL@@6BISerializable@1@@
??_7?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@UnBCL@@6BObject@1@@
??_7?$SerializableBase@VCCatalogEntry@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogEntry@Mig@@@UnBCL@@@UnBCL@@6B01@@
??_7?$SerializableBase@VCCatalogEntry@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogEntry@Mig@@@UnBCL@@@UnBCL@@6BISerializable@1@@
??_7?$SerializableBase@VCCatalogEntry@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogEntry@Mig@@@UnBCL@@@UnBCL@@6BObject@1@@
??_7?$SerializableBase@VCCatalogUser@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUser@Mig@@@UnBCL@@@UnBCL@@6B01@@
??_7?$SerializableBase@VCCatalogUser@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUser@Mig@@@UnBCL@@@UnBCL@@6BISerializable@1@@
??_7?$SerializableBase@VCCatalogUser@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUser@Mig@@@UnBCL@@@UnBCL@@6BObject@1@@
??_7?$SerializableBase@VCCatalogUserList@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUserList@Mig@@@UnBCL@@@UnBCL@@6B01@@
??_7?$SerializableBase@VCCatalogUserList@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUserList@Mig@@@UnBCL@@@UnBCL@@6BISerializable@1@@
??_7?$SerializableBase@VCCatalogUserList@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUserList@Mig@@@UnBCL@@@UnBCL@@6BObject@1@@
??_7?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@6B@
??_7?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@6B@
??_7?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@6B@
??_7?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@6B@
??_7?$SmartPtr@VSendState@Mig@@@UnBCL@@6B@
??_7CAlternateStreamHolder@Mig@@6B@
??_7CCatalog@Mig@@6B@
??_7CCatalogEntry@Mig@@6B?$SerializableBase@VCCatalogEntry@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogEntry@Mig@@@UnBCL@@@UnBCL@@@
??_7CCatalogEntry@Mig@@6B@
??_7CCatalogEntry@Mig@@6BISerializable@UnBCL@@@
??_7CCatalogLinearIterator@Mig@@6B@
??_7CCatalogNavigator@Mig@@6B@
??_7CCatalogNavigator@Mig@@6BIDataStoreNavigator@1@@
??_7CCatalogUser@Mig@@6B?$SerializableBase@VCCatalogUser@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUser@Mig@@@UnBCL@@@UnBCL@@@
??_7CCatalogUser@Mig@@6B@
??_7CCatalogUser@Mig@@6BISerializable@UnBCL@@@
??_7CCatalogUserList@Mig@@6B?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@
??_7CCatalogUserList@Mig@@6B?$ICollection@PEAVCCatalogUser@Mig@@@UnBCL@@@
??_7CCatalogUserList@Mig@@6B?$IEnumerable@PEAVCCatalogUser@Mig@@@UnBCL@@@
??_7CCatalogUserList@Mig@@6B?$IList@PEAVCCatalogUser@Mig@@@UnBCL@@@
??_7CCatalogUserList@Mig@@6B?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@UnBCL@@@
??_7CCatalogUserList@Mig@@6B?$SerializableBase@VCCatalogUserList@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUserList@Mig@@@UnBCL@@@UnBCL@@@
??_7CCatalogUserList@Mig@@6BISerializable@UnBCL@@@
??_7CCatalogUserList@Mig@@6BObject@UnBCL@@@
??_7CConnectionPipeTransportStreamProxy@Mig@@6B@
??_7CConnectionPipeTransportStreamProxy@Mig@@6BIFileStreamProxy@1@@
??_7CConnectionPipeTransportStreamProxy@Mig@@6BIOptimizedFileStreamProxy@1@@
??_7CConnectionPipeTransportStreamProxy@Mig@@6BIStreamProxy@1@@
??_7CConnectionPipeTransportStreamProxy@Mig@@6BObject@UnBCL@@@
??_7CDeviceLockedObject@Mig@@6B@
??_7CDeviceProgressAdapter@Mig@@6B@
??_7CExternalTransport@Mig@@6B@
??_7CExternalTransportInitializationData@Mig@@6B@
??_7CExternalTransportStreamProxy@Mig@@6B@
??_7CExternalTransportStreamProxy@Mig@@6BIFileStreamProxy@1@@
??_7CExternalTransportStreamProxy@Mig@@6BIOptimizedFileStreamProxy@1@@
??_7CExternalTransportStreamProxy@Mig@@6BIStreamProxy@1@@
??_7CExternalTransportStreamProxy@Mig@@6BObject@UnBCL@@@
??_7CHardLinkTransportStreamProxy@Mig@@6B@
??_7CHardLinkTransportStreamProxy@Mig@@6BIFileStreamProxy@1@@
??_7CHardLinkTransportStreamProxy@Mig@@6BIOptimizedFileStreamProxy@1@@
??_7CHardLinkTransportStreamProxy@Mig@@6BIStreamProxy@1@@
??_7CHardLinkTransportStreamProxy@Mig@@6BObject@UnBCL@@@
??_7CIMGTransport@Mig@@6B@
??_7CLibTransport@Mig@@6B@
??_7CLibTransportInitializationData@Mig@@6B@
??_7CLibrarian@Mig@@6B@
??_7CMediaManager@Mig@@6B@
??_7CMediaManager@Mig@@6BIStoreInterface@1@@
??_7CMediaManagerStreamProxy@Mig@@6B@
??_7CMediaManagerStreamProxy@Mig@@6BIFileStreamProxy@1@@
??_7CMediaManagerStreamProxy@Mig@@6BIOptimizedFileStreamProxy@1@@
??_7CMediaManagerStreamProxy@Mig@@6BIStreamProxy@1@@
??_7CMediaManagerStreamProxy@Mig@@6BObject@UnBCL@@@
??_7CNonTrimableFileStream@Mig@@6BIDisposable@UnBCL@@@
??_7CNonTrimableFileStream@Mig@@6BObject@UnBCL@@@
??_7CNonTrimableFileStream@Mig@@6BStream@UnBCL@@@
??_7CSimulationTableStream@@6BIDisposable@UnBCL@@@
??_7CSimulationTableStream@@6BObject@UnBCL@@@
??_7CSimulationTableStream@@6BStream@UnBCL@@@
??_7CSimulationTrimableStream@Mig@@6BIDisposable@UnBCL@@@
??_7CSimulationTrimableStream@Mig@@6BObject@UnBCL@@@
??_7CSimulationTrimableStream@Mig@@6BStream@UnBCL@@@
??_7CSplitFileStream@Mig@@6BIDisposable@UnBCL@@@
??_7CSplitFileStream@Mig@@6BObject@UnBCL@@@
??_7CSplitFileStream@Mig@@6BStream@UnBCL@@@
??_7CUNCTransport@Mig@@6B@
??_7CUNCTransportInitializationData@Mig@@6B@
??_7SendState@Mig@@6B@
??_8?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@7B?$ICollection@PEAVCCatalogUser@Mig@@@1@@
??_8?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@7B?$IList@PEAVCCatalogUser@Mig@@@1@@
??_8?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@7B?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@1@@
??_8?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@7B?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@1@@
??_8?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@7B@
??_8?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@7BISerializable@1@@
??_8?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@7B?$ICollection@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@1@@
??_8?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@7B?$IDictionary@IPEAUIDevice@Mig@@@1@@
??_8?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@7B@
??_8CCatalogEntry@Mig@@7B01@@
??_8CCatalogEntry@Mig@@7B?$SerializableBase@VCCatalogEntry@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogEntry@Mig@@@UnBCL@@@UnBCL@@@
??_8CCatalogEntry@Mig@@7BISerializable@UnBCL@@@
??_8CCatalogNavigator@Mig@@7B01@@
??_8CCatalogNavigator@Mig@@7BIDataStoreNavigator@1@@
??_8CCatalogUser@Mig@@7B?$SerializableBase@VCCatalogUser@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUser@Mig@@@UnBCL@@@UnBCL@@@
??_8CCatalogUser@Mig@@7B@
??_8CCatalogUser@Mig@@7BISerializable@UnBCL@@@
??_8CCatalogUserList@Mig@@7B01@@
??_8CCatalogUserList@Mig@@7B?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@
??_8CCatalogUserList@Mig@@7B?$ICollection@PEAVCCatalogUser@Mig@@@UnBCL@@@
??_8CCatalogUserList@Mig@@7B?$IList@PEAVCCatalogUser@Mig@@@UnBCL@@@
??_8CCatalogUserList@Mig@@7B?$SerializableArrayListBase@PEAVCCatalogUser@Mig@@@_@UnBCL@@@
??_8CCatalogUserList@Mig@@7B?$SerializableBase@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@$0A@V?$SimpleInstanceFactory@$1?OperatorNew@?$StaticOps@V?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@@_@UnBCL@@SAPEAUISerializable@4@XZ@2@@UnBCL@@@
??_8CCatalogUserList@Mig@@7B?$SerializableBase@VCCatalogUserList@Mig@@$0A@V?$DefaultInstanceFactory@VCCatalogUserList@Mig@@@UnBCL@@@UnBCL@@@
??_8CCatalogUserList@Mig@@7BISerializable@UnBCL@@@
??_8CConnectionPipeTransportStreamProxy@Mig@@7B@
??_8CConnectionPipeTransportStreamProxy@Mig@@7BCMediaManagerStreamProxy@1@@
??_8CConnectionPipeTransportStreamProxy@Mig@@7BIFileStreamProxy@1@@
??_8CConnectionPipeTransportStreamProxy@Mig@@7BIOptimizedFileStreamProxy@1@@
??_8CConnectionPipeTransportStreamProxy@Mig@@7BIStreamProxy@1@@
??_8CExternalTransportStreamProxy@Mig@@7B@
??_8CExternalTransportStreamProxy@Mig@@7BCMediaManagerStreamProxy@1@@
??_8CExternalTransportStreamProxy@Mig@@7BIFileStreamProxy@1@@
??_8CExternalTransportStreamProxy@Mig@@7BIOptimizedFileStreamProxy@1@@
??_8CExternalTransportStreamProxy@Mig@@7BIStreamProxy@1@@
??_8CHardLinkTransportStreamProxy@Mig@@7B@
??_8CHardLinkTransportStreamProxy@Mig@@7BCMediaManagerStreamProxy@1@@
??_8CHardLinkTransportStreamProxy@Mig@@7BIFileStreamProxy@1@@
??_8CHardLinkTransportStreamProxy@Mig@@7BIOptimizedFileStreamProxy@1@@
??_8CHardLinkTransportStreamProxy@Mig@@7BIStreamProxy@1@@
??_8CMediaManager@Mig@@7B01@@
??_8CMediaManager@Mig@@7BIStoreInterface@1@@
??_8CMediaManagerStreamProxy@Mig@@7B01@@
??_8CMediaManagerStreamProxy@Mig@@7BIFileStreamProxy@1@@
??_8CMediaManagerStreamProxy@Mig@@7BIOptimizedFileStreamProxy@1@@
??_8CMediaManagerStreamProxy@Mig@@7BIStreamProxy@1@@
??_8CNonTrimableFileStream@Mig@@7BIDisposable@UnBCL@@@
??_8CNonTrimableFileStream@Mig@@7BStream@UnBCL@@@
??_8CSimulationTableStream@@7BIDisposable@UnBCL@@@
??_8CSimulationTableStream@@7BStream@UnBCL@@@
??_8CSimulationTrimableStream@Mig@@7BIDisposable@UnBCL@@@
??_8CSimulationTrimableStream@Mig@@7BStream@UnBCL@@@
??_8CSplitFileStream@Mig@@7BIDisposable@UnBCL@@@
??_8CSplitFileStream@Mig@@7BStream@UnBCL@@@
??_D?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@QEAAXXZ
??_D?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@QEAAXXZ
??_DCCatalogEntry@Mig@@QEAAXXZ
??_DCCatalogNavigator@Mig@@QEAAXXZ
??_DCCatalogUser@Mig@@QEAAXXZ
??_DCCatalogUserList@Mig@@QEAAXXZ
??_DCConnectionPipeTransportStreamProxy@Mig@@QEAAXXZ
??_DCExternalTransportStreamProxy@Mig@@QEAAXXZ
??_DCHardLinkTransportStreamProxy@Mig@@QEAAXXZ
??_DCMediaManager@Mig@@QEAAXXZ
??_DCMediaManagerStreamProxy@Mig@@QEAAXXZ
??_DCNonTrimableFileStream@Mig@@QEAAXXZ
??_DCSimulationTableStream@@QEAAXXZ
??_DCSimulationTrimableStream@Mig@@QEAAXXZ
??_DCSplitFileStream@Mig@@QEAAXXZ
?AbandonCommited@CNonTrimableFileStream@Mig@@UEAAXXZ
?AbandonCommited@CSimulationTrimableStream@Mig@@UEAAXXZ
?AbandonCommited@CSplitFileStream@Mig@@UEAAXXZ
?Add@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@UEAAHPEAVCCatalogUser@Mig@@@Z
?Add@?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@UEAAXIPEAUIDevice@Mig@@@Z
?AddComplexNode@CCatalog@Mig@@AEAAXPEAPEAV?$CTreeNode@VCCatalogTreeData@Mig@@@2@0PEAVString@UnBCL@@PEAUIMigLocation@2@2@Z
?AddDictionary@?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@AEAAXPEBU?$IDictionary@IPEAUIDevice@Mig@@@2@@Z
?AddNonExistEntry@CCatalog@Mig@@QEAAHW4CatalogNamespace@2@PEAVString@UnBCL@@PEAUIMigLocation@2@@Z
?AddObject@CCatalog@Mig@@QEAAHW4CatalogNamespace@2@PEAVString@UnBCL@@PEAUIMigLocation@2@22PEAVStream@5@PEAV?$Array@E@5@41KPEAU?$IDictionary@PEAVString@UnBCL@@PEAVCAlternateStreamHolder@Mig@@@5@@Z
?AddObject@CLibrarian@Mig@@QEAAXPEAVStream@UnBCL@@PEAVString@4@PEAUILocalProgress@@PEA_J@Z
?AddObject@CMediaManager@Mig@@UEAAXPEAVCUserContext@2@PEAVCFileSystemRootMapping@2@PEAVCDataUnit@2@PEAUIMigLocation@2@3PEAUILocalProgress@@HH@Z
?AddObjectNode@CCatalog@Mig@@AEAAPEAV?$CTreeNode@VCCatalogTreeData@Mig@@@2@PEAVString@UnBCL@@PEAUIMigLocation@2@@Z
?AddObjectToUserView@CCatalog@Mig@@QEAAHW4CatalogNamespace@2@PEAVString@UnBCL@@PEAUIMigLocation@2@@Z
?AddRange@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@UEAAXPEBU?$ICollection@PEAVCCatalogUser@Mig@@@2@@Z
?Assign@?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@AEAAXAEBV12@@Z
?Assign@?$SmartPtr@UITrimableStream@Mig@@@UnBCL@@AEAAXPEAUITrimableStream@Mig@@@Z
?Assign@?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@AEAAXAEBV12@@Z
?Assign@?$SmartPtr@V?$ArrayList@G@UnBCL@@@UnBCL@@AEAAXPEAV?$ArrayList@G@2@@Z
?Assign@?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@AEAAXAEBV12@@Z
?Assign@?$SmartPtr@V?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@UnBCL@@@UnBCL@@AEAAXPEAV?$ArrayList@PEAV?$DictionaryEntry@PEAVCFileLocation@Mig@@PEAV12@@UnBCL@@@2@@Z
?Assign@?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@AEAAXAEBV12@@Z
?Assign@?$SmartPtr@VCLibrarian@Mig@@@UnBCL@@AEAAXPEAVCLibrarian@Mig@@@Z
?Assign@?$SmartPtr@VSendState@Mig@@@UnBCL@@AEAAXAEBV12@@Z
?Assign@?$SmartPtr@VSendState@Mig@@@UnBCL@@AEAAXPEAVSendState@Mig@@@Z
?BeginContext@CDeviceProgressAdapter@Mig@@UEAAXPEAVString@UnBCL@@@Z
?BeginMigrationUnit@CDeviceProgressAdapter@Mig@@UEAAXPEAUIMigUnit@@W4EXECUTION_PHASE@@@Z
?BinarySearch@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@AEAAHHHPEAVCCatalogUser@Mig@@PEAU?$IComparer@PEAVCCatalogUser@Mig@@@2@@Z
?BinarySearch@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@SAHPEAV12@PEAVCCatalogUser@Mig@@PEAU?$IComparer@PEAVCCatalogUser@Mig@@@2@@Z
?BinarySearch@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@UEAAHPEAVCCatalogUser@Mig@@PEAU?$IComparer@PEAVCCatalogUser@Mig@@@2@@Z
?BuildObjectFilePath@CUNCTransport@Mig@@IEAAPEAVString@UnBCL@@PEBGGG@Z
?BuildObjectFilePath@CUNCTransport@Mig@@IEAAPEAVString@UnBCL@@PEBGHPEAPEAV34@@Z
?BuildSearchTree@CCatalog@Mig@@AEAAXT_ULARGE_INTEGER@@HPEAVString@UnBCL@@@Z
?BuildUserMap@CCatalog@Mig@@AEAAXPEAV?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@Z
?BuildUserMap@CCatalog@Mig@@AEAAXPEAVCCatalogUserList@2@@Z
?CanCreateFile@CConnectionPipeTransportStreamProxy@Mig@@UEAAHXZ
?CanCreateFile@CExternalTransportStreamProxy@Mig@@UEAAHXZ
?CanCreateFile@CHardLinkTransportStreamProxy@Mig@@UEAAHXZ
?CheckForDeviceErrors@CNonTrimableFileStream@Mig@@IEBAXPEAVException@UnBCL@@@Z
?CheckForDeviceErrors@CSplitFileStream@Mig@@IEBAXPEAVException@UnBCL@@@Z
?Clear@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@UEAAXXZ
?Clear@?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@UEAAXXZ
?Clone@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@UEBAPEAVObject@2@XZ
?Clone@?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@UEBAPEAVObject@2@XZ
?Clone@CConnectionPipeTransportStreamProxy@Mig@@UEBAPEAVObject@UnBCL@@XZ
?Clone@CDeviceLockedObject@Mig@@UEBAPEAVObject@UnBCL@@XZ
?Clone@CExternalTransportStreamProxy@Mig@@UEBAPEAVObject@UnBCL@@XZ
?Clone@CHardLinkTransportStreamProxy@Mig@@UEBAPEAVObject@UnBCL@@XZ
?Clone@CMediaManagerStreamProxy@Mig@@UEBAPEAVObject@UnBCL@@XZ
?Close@CExternalTransport@Mig@@UEAAXH@Z
?Close@CIMGTransport@Mig@@UEAAXH@Z
?Close@CLibTransport@Mig@@UEAAXH@Z
?Close@CLibrarian@Mig@@QEAAXH@Z
?Close@CNonTrimableFileStream@Mig@@UEAAXXZ
?Close@CSimulationTableStream@@UEAAXXZ
?Close@CSimulationTrimableStream@Mig@@UEAAXXZ
?Close@CSplitFileStream@Mig@@UEAAXXZ
?Close@CUNCTransport@Mig@@UEAAXH@Z
?CloseTransport@CMediaManager@Mig@@UEAAXH@Z
?Commit@CNonTrimableFileStream@Mig@@UEAAX_J@Z
?Commit@CSimulationTrimableStream@Mig@@UEAAX_J@Z
?Commit@CSplitFileStream@Mig@@UEAAX_J@Z
?CompressAndEncryptBuffer@CLibrarian@Mig@@IEAAXKH@Z
?Contains@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@UEBAHQEAVCCatalogUser@Mig@@@Z
?Contains@?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@UEBAHI@Z
?ContainsKey@?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@UEBAHI@Z
?ContainsValue@?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@UEBAHPEAUIDevice@Mig@@@Z
?Copy@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@SAXPEBV12@HPEAV12@HH@Z
?Copy@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@SAXPEBV12@PEAV12@H@Z
?CopyTo@?$ArrayList@PEAVCCatalogUser@Mig@@@UnBCL@@UEBAXPEAV?$Array@PEAVCCatalogUser@Mig@@@2@H@Z
?CopyTo@?$Hashtable@IPEAUIDevice@Mig@@@UnBCL@@UEBAXPEAV?$Array@V?$DictionaryEntry@IPEAUIDevice@Mig@@@UnBCL@@@2@H@Z

Sections

.text
Size: 572KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 545KB - Virtual size: 545KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
python-3.11.2-amd64/pres/fr/docs/perf/xpsservices.dll
.dll windows x64

e0b363e910d853ca394061969e3b57c2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

memchr
_finite
tolower
__uncaught_exception
memmove_s
__crtGetStringTypeW
memcpy_s
??0exception@@QEAA@AEBQEBD@Z
__crtLCMapStringW
??0exception@@QEAA@XZ
abort
_wcsicmp
_vsnwprintf_l
wcstod
ldiv
wcsrchr
___mb_cur_max_func
isalnum
__mb_cur_max
___lc_codepage_func
___lc_handle_func
__pctype_func
isdigit
memcmp
_onexit
_errno
setlocale
__dllonexit
_itow_s
_unlock
_lock
_vsnwprintf
_strtoui64
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
__C_specific_handler
_strtoi64
_initterm
isspace
wcsncmp
_isnan
_wtoi
_amsg_exit
_XcptFilter
_CxxThrowException
_callnewh
?what@exception@@UEBAPEBDXZ
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
malloc
strcspn
sprintf_s
__CxxFrameHandler3
localeconv
free
_purecall
memset

api-ms-win-eventing-provider-l1-1-0

EventRegister
EventUnregister
EventWriteTransfer

api-ms-win-core-synch-l1-2-0

WakeAllConditionVariable
InitOnceComplete
InitOnceBeginInitialize
Sleep
SleepConditionVariableSRW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

CreateThread
TerminateProcess
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess

api-ms-win-core-sysinfo-l1-1-0

GetTickCount
GetSystemTimeAsFileTime

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
GetLastError
SetUnhandledExceptionFilter

oleaut32

GetErrorInfo
SysFreeString
SetErrorInfo
SysAllocString
SysAllocStringLen
SysStringLen
VariantClear
VariantInit

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
StringFromGUID2
CoCreateGuid
CoUninitialize
CoInitializeEx
CoCreateInstance
CreateStreamOnHGlobal

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress
GetModuleHandleW
GetModuleFileNameW

api-ms-win-core-synch-l1-1-0

InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
ReleaseSRWLockShared
AcquireSRWLockShared
CreateEventW
SetEvent
InitializeSRWLock

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
OutputDebugStringA

api-ms-win-core-version-l1-1-0

GetFileVersionInfoExW
VerQueryValueW
GetFileVersionInfoSizeExW

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

ntdll

WinSqmIncrementDWORD
WinSqmAddToStream
WinSqmIsOptedIn

opcservices

ord1
ord14
ord2
ord4
ord3

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime
SystemTimeToFileTime

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

xmllite

CreateXmlWriter

api-ms-win-core-fibers-l2-1-0

SwitchToFiber
ConvertThreadToFiber
CreateFiber
DeleteFiber

urlmon

CreateUri

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 726KB - Virtual size: 726KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
python-3.11.2-amd64/pres/fr/dons/mig/msv/MSVidCtl.dll
.dll regsvr32 windows x64

dd5e8a87d388e7f0e0dcb3f9ea5a64ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

_wsplitpath_s
wcscspn
swscanf
_wcsicmp
wcsncmp
iswalpha
??0exception@@QEAA@AEBQEBDH@Z
_callnewh
_XcptFilter
_amsg_exit
_initterm
?terminate@@YAXXZ
_lock
_unlock
__dllonexit
_onexit
??1type_info@@UEAA@XZ
memset
memmove
memcpy
memcmp
floor
__CxxFrameHandler3
_ui64tow
_errno
wcstol
wcsstr
iswspace
??8type_info@@QEBAHAEBV0@@Z
wcstoul
_vsnprintf
_wcsnicmp
_vsnwprintf
_itow
_wtoi
iswdigit
_purecall
realloc
wcscat_s
malloc
??0exception@@QEAA@XZ
memmove_s
??0exception@@QEAA@AEBQEBD@Z
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
memcpy_s
??0exception@@QEAA@AEBV0@@Z
wcsnlen
free
wcscpy_s
__C_specific_handler
_CxxThrowException
wcscmp

ole32

GetRunningObjectTable
MkParseDisplayName
CreateBindCtx
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder
OleRegGetMiscStatus
CreateDataAdviseHolder
CoGetMalloc
CoInitializeEx
CoWaitForMultipleHandles
CoUninitialize
ProgIDFromCLSID
StringFromCLSID
OleSaveToStream
WriteClassStm
OleLoadFromStream
StringFromGUID2
CoCreateFreeThreadedMarshaler
CLSIDFromString
CreateItemMoniker
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
ReadClassStm
HDC_UserSize64
HDC_UserMarshal
HDC_UserUnmarshal64
HDC_UserFree
HDC_UserUnmarshal
HDC_UserMarshal64
HDC_UserSize
HDC_UserFree64
HWND_UserUnmarshal64
HWND_UserMarshal64
HWND_UserMarshal
HWND_UserSize
HWND_UserSize64
HWND_UserFree64
HWND_UserFree
HWND_UserUnmarshal
CoTaskMemAlloc

oleaut32

SafeArrayUnaccessData
SysStringByteLen
SysAllocStringLen
SafeArrayDestroy
LoadRegTypeLi
SafeArrayAccessData
CreateErrorInfo
VariantInit
VariantChangeTypeEx
VarCmp
OleCreatePictureIndirect
OleCreatePropertyFrame
SetErrorInfo
VariantChangeType
SysAllocStringByteLen
VarUI4FromStr
VariantClear
VariantCopy
LoadTypeLi
SysAllocString
SysStringLen
RegisterTypeLi
LPSAFEARRAY_UserSize64
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserUnmarshal64
LPSAFEARRAY_UserMarshal64
LPSAFEARRAY_UserFree64
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserSize
BSTR_UserMarshal64
BSTR_UserSize64
BSTR_UserFree64
VARIANT_UserUnmarshal64
VARIANT_UserFree64
BSTR_UserMarshal
VARIANT_UserMarshal
BSTR_UserUnmarshal
VARIANT_UserSize
VARIANT_UserUnmarshal
VARIANT_UserFree
BSTR_UserUnmarshal64
BSTR_UserFree
VARIANT_UserMarshal64
VARIANT_UserSize64
BSTR_UserSize
SysFreeString
SafeArrayCreate

kernel32

UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
GetProcessHeap
TerminateProcess
HeapAlloc
EncodePointer
LoadLibraryExA
VirtualFree
HeapFree
WriteFile
ExpandEnvironmentStringsW
OutputDebugStringA
GetTempPathW
GetLocalTime
SetLastError
GetCurrentThreadId
GlobalAlloc
GlobalLock
GlobalUnlock
GetTickCount64
GetCurrentProcessId
IsValidLocale
LoadLibraryW
GetSystemDirectoryW
WideCharToMultiByte
GetVersionExW
GetDriveTypeW
DeviceIoControl
CreateFileW
Sleep
GetLocaleInfoW
SetThreadExecutionState
DecodeSystemPointer
SizeofResource
GetCurrentProcess
DuplicateHandle
WaitForMultipleObjects
CreateThread
ResetEvent
SetEvent
SetUnhandledExceptionFilter
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
DecodePointer
CreateMutexW
LockResource
LoadResource
FindResourceW
ReleaseMutex
WaitForSingleObject
CloseHandle
CreateEventW
MultiByteToWideChar
FormatMessageW
lstrlenA
OutputDebugStringW
DebugBreak
GetSystemInfo
VirtualQuery
VirtualAlloc
VirtualProtect
GetModuleHandleW
lstrcpynW
lstrcmpiW
lstrlenW
lstrcpyW
HeapDestroy
DisableThreadLibraryCalls
FreeLibrary
EncodeSystemPointer
GetModuleFileNameW
LoadLibraryExW
GetProcAddress
GetLastError
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
RaiseException

user32

SetWindowLongPtrW
FillRect
LoadCursorW
wsprintfW
GetWindowLongPtrW
CreateWindowExW
RegisterClassExW
DefWindowProcW
BeginPaint
EndPaint
UnionRect
OffsetRect
SetWindowRgn
GetClassInfoExW
SetWindowPos
GetClientRect
PtInRect
SendMessageW
DestroyWindow
SetCursor
LoadImageW
DestroyAcceleratorTable
ShowWindow
CallWindowProcW
CharNextW
LoadStringW
CharPrevW
wvsprintfW
MsgWaitForMultipleObjectsEx
PeekMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageW
IsWindow
CopyRect
MapWindowPoints
EqualRect
ReleaseDC
GetDC
SystemParametersInfoW
GetWindowRect
GetParent
IntersectRect
PostMessageW
GetKeyState
SetCapture
ReleaseCapture
SetTimer
KillTimer
GetDesktopWindow
InvalidateRect
SetFocus
GetFocus
IsChild

advapi32

RegQueryValueW
CryptGenRandom
CryptReleaseContext
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegEnumValueW
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CryptAcquireContextW
RegQueryValueExW
RegSetValueW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW

gdi32

DeleteDC
CreateCompatibleDC
SelectObject
CreateDIBitmap
DeleteMetaFile
CloseMetaFile
GetDeviceCaps
SetWindowOrgEx
SaveDC
SetWindowExtEx
CreateMetaFileW
CreateRectRgnIndirect
CreateSolidBrush
DeleteObject
RestoreDC

shlwapi

UrlIsW
PathCreateFromUrlW

rpcrt4

NdrCStdStubBuffer_Release
NdrStubForwardingFunction
NdrDllCanUnloadNow
IUnknown_AddRef_Proxy
NdrOleFree
IUnknown_Release_Proxy
NdrOleAllocate
IUnknown_QueryInterface_Proxy
NdrStubCall3
CStdStubBuffer_Invoke
NdrClientCall3
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_CountRefs
CStdStubBuffer_QueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Disconnect
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Connect
NdrCStdStubBuffer2_Release
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllGetClassObject

slc

SLGetWindowsInformationDWORD

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 266KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 314KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
python-3.11.2-amd64/pres/fr/dons/mig/msv/XpsPrint.dll
.dll windows x64

6eca595c8c82f810b21eb481ad76799c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

tolower
_amsg_exit
_initterm
islower
_wsetlocale
__crtLCMapStringA
__crtLCMapStringW
_wcsdup
memchr
ldexp
__C_specific_handler
?terminate@@YAXXZ
abort
__dllonexit
_onexit
___mb_cur_max_func
_vsnwprintf
memcpy_s
??3@YAXPEAX@Z
_purecall
??1exception@@UEAA@XZ
??0exception@@QEAA@XZ
??0exception@@QEAA@AEBV0@@Z
__CxxFrameHandler3
_vsnprintf_s
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBQEBDH@Z
_XcptFilter
memcmp
isalnum
isdigit
??0exception@@QEAA@AEBQEBD@Z
??1bad_cast@@UEAA@XZ
??0bad_cast@@QEAA@PEBD@Z
memset
calloc
___lc_codepage_func
___lc_handle_func
isupper
__pctype_func
__uncaught_exception
setlocale
_unlock
_lock
_errno
wcsrchr
_vsnprintf
_finite
_vsnwprintf_l
wcstod
_isnan
memmove
memcpy
_CxxThrowException
_callnewh
strncmp
swprintf_s
_wtof
ldiv
malloc
memmove_s
wcscpy_s
??1type_info@@UEAA@XZ
??_V@YAXPEAX@Z
_wcsicmp
sprintf_s
isspace
free
localeconv
strcspn
??0bad_cast@@QEAA@AEBV0@@Z
_ismbblead

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameA
FreeLibraryAndExitThread
GetModuleHandleW
LoadLibraryExW
GetProcAddress
GetModuleHandleExW
FreeLibrary

api-ms-win-core-synch-l1-1-0

WaitForSingleObject
ReleaseSRWLockExclusive
SetEvent
InitializeCriticalSection
InitializeCriticalSectionEx
CreateEventW
DeleteCriticalSection
ReleaseSRWLockShared
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
AcquireSRWLockShared
EnterCriticalSection
ReleaseSemaphore
CreateSemaphoreExW
WaitForSingleObjectEx
ResetEvent
AcquireSRWLockExclusive
ReleaseMutex
OpenSemaphoreW
CreateMutexExW

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapFree
GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

GetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetLastError

api-ms-win-eventing-provider-l1-1-0

EventUnregister
EventSetInformation
EventRegister
EventWriteTransfer
EventEnabled
EventWrite

api-ms-win-eventing-classicprovider-l1-1-0

GetTraceEnableLevel
RegisterTraceGuidsW
UnregisterTraceGuids
GetTraceEnableFlags
GetTraceLoggerHandle
TraceMessage

api-ms-win-core-processthreads-l1-1-0

TerminateProcess
SetThreadToken
ResumeThread
GetCurrentThread
OpenThreadToken
CreateThread
ExitProcess
GetCurrentThreadId
GetCurrentProcess
GetProcessTimes
TlsSetValue
GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
IsDebuggerPresent
DebugBreak

api-ms-win-core-handle-l1-1-0

DuplicateHandle
CloseHandle

api-ms-win-core-com-l1-1-0

CoTaskMemFree
CoCreateGuid
CoCreateInstanceEx
CoSetProxyBlanket
CreateStreamOnHGlobal
CoCreateInstance
CoInitializeEx
CoGetMalloc
CoUninitialize
StringFromCLSID
CoTaskMemAlloc

api-ms-win-core-synch-l1-2-0

WakeAllConditionVariable
InitOnceBeginInitialize
InitOnceComplete
Sleep
SleepConditionVariableSRW

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolTimer
CloseThreadpoolTimer
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-heap-l2-1-0

GlobalAlloc
GlobalFree
LocalFree

oleaut32

VariantInit
SysAllocStringLen
SysStringLen
VariantClear
SetErrorInfo
SysFreeString
SysAllocString

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-registry-l1-1-0

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

api-ms-win-core-string-l1-1-0

GetStringTypeW
CompareStringW
MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-file-l1-1-0

SetFilePointer
CreateFileW
GetFileAttributesW
FindNextFileW
FlushFileBuffers
FindFirstFileW
WriteFile
DeleteFileW
FindClose
ReadFile
CreateDirectoryW
SetFilePointerEx
SetEndOfFile

api-ms-win-security-base-l1-1-0

GetTokenInformation

rpcrt4

UuidCreateSequential
UuidToStringW
RpcServerInqCallAttributesW
RpcStringFreeW

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-core-version-l1-1-1

GetFileVersionInfoSizeW
GetFileVersionInfoW

api-ms-win-core-version-l1-1-0

VerQueryValueW

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount
GetTickCount64

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

ntdll

RtlReleaseSRWLockShared
RtlInitializeSRWLock
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
WinSqmIncrementDWORD
NtQueryInformationToken
RtlNtStatusToDosError
RtlGetAppContainerSidType
RtlAcquireSRWLockShared
WinSqmIsOptedIn

api-ms-win-shcore-stream-l1-1-0

SHCreateStreamOnFileW

api-ms-win-shlwapi-ie-l1-1-0

PathIsDirectoryW

xpsservices

ord8
ord9

winspool.drv

ord361
ord362
GetPrintExecutionData

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

urlmon

CreateUri

xmllite

CreateXmlReader

api-ms-win-core-kernel32-legacy-l1-1-0

RegisterWaitForSingleObject

api-ms-win-core-threadpool-legacy-l1-1-0

DeleteTimerQueueTimer
CreateTimerQueue
DeleteTimerQueueEx
CreateTimerQueueTimer
UnregisterWaitEx
QueueUserWorkItem

Exports

Exports

StartXpsPrintJob
StartXpsPrintJob1

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 323KB - Virtual size: 323KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
python-3.11.2-amd64/pres/fr/dons/mig/msv/winsetup.dll
.dll windows x64

13ac5715282cc532d7063b3f0eee1e63

Code Sign

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:23

Not After

01-09-2022 18:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

76:49:eb:75:82:fc:24:8d:f5:60:7e:ba:e6:d8:06:1c:5a:f4:89:a4:7f:08:2f:ee:49:58:ce:e8:d8:b6:2c:bd
Signer

Actual PE Digest

76:49:eb:75:82:fc:24:8d:f5:60:7e:ba:e6:d8:06:1c:5a:f4:89:a4:7f:08:2f:ee:49:58:ce:e8:d8:b6:2c:bd

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

07-02-2023 20:40
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

msvcrt

__crtLCMapStringW
setlocale
_wfsopen
__mb_cur_max
___lc_codepage_func
___lc_handle_func
__pctype_func
_errno
vswprintf_s
wcstol
iswalpha
wcscspn
rand
time
srand
getchar
wprintf
?name@type_info@@QEBAPEBDXZ
abort
fwrite
___mb_cur_max_func
fputwc
ungetwc
ungetc
fgetc
fgetwc
fgetpos
fseek
fsetpos
setvbuf
iswctype
_vscwprintf
_wtoi64
_purecall
_itow_s
fwprintf
fclose
__crtGetStringTypeW
iswdigit
fflush
swscanf_s
wcsspn
qsort
_snwscanf_s
strncmp
_wcsupr
wcsnlen
strcpy_s
wcsncpy_s
_vsnwprintf_s
wcscat_s
wcscpy_s
_ultow_s
bsearch
_wcsrev
_strnicmp
strncpy_s
_wcstoi64
wcstok_s
__iob_func
realloc
_wcslwr
__RTDynamicCast
memcmp
memcpy
memmove
memset
_onexit
__dllonexit
_unlock
_lock
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
_initterm
_amsg_exit
_XcptFilter
_CxxThrowException
towupper
swprintf_s
_callnewh
malloc
_stricmp
calloc
free
_wtoi
_wcsicmp
wcsncmp
_wcsnicmp
_vsnwprintf
wcsrchr
wcschr
??0exception@@QEAA@XZ
memmove_s
??0exception@@QEAA@AEBQEBD@Z
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBV0@@Z
memcpy_s
swscanf
_vsnprintf
__CxxFrameHandler3
_wcstoui64
wcstoul
_wtol
wcsstr
__C_specific_handler
wcscmp

kernel32

TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
OutputDebugStringA
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
GetSystemTimeAsFileTime
FlushFileBuffers
FindClose
FindNextFileW
FindFirstFileW
RtlCompareMemory
WritePrivateProfileStringW
GetSystemDirectoryW
Sleep
GetDiskFreeSpaceExW
SystemTimeToFileTime
GetVersionExW
GetProcAddress
GetModuleHandleW
FreeLibrary
GetModuleHandleExW
CreateEventW
CreateThread
VirtualQuery
LoadLibraryExA
VirtualProtect
AcquireSRWLockExclusive
WakeAllConditionVariable
GetCurrentThreadId
GetCurrentProcessId
ReleaseSRWLockExclusive
GetSystemPowerStatus
OpenEventW
CreateDirectoryW
FindResourceW
MulDiv
GetLocaleInfoEx
DebugBreak
WaitForMultipleObjects
LockFileEx
UnlockFileEx
SetEndOfFile
SetVolumeLabelW
MoveFileWithProgressW
RemoveDirectoryW
RaiseException
MapViewOfFileEx
DefineDosDeviceW
WaitForSingleObjectEx
ReleaseMutex
GetPrivateProfileStringW
SetComputerNameExW
GetStartupInfoW
SleepEx
ResetEvent
SetFileInformationByHandle
GetFileInformationByHandle
GetFileInformationByHandleEx
SetThreadPreferredUILanguages
GetFileTime
GetFinalPathNameByHandleW
GetLongPathNameW
IsWow64Process
HeapReAlloc
SetFilePointerEx
GetDiskFreeSpaceW
GetFileSize
LCMapStringW
GetVersionExA
CopyFileExW
ExpandEnvironmentStringsW
DeleteFileW
GetTempFileNameW
SetFilePointer
ReadFile
LocalAlloc
GetVersion
QueryPerformanceCounter
IsValidLocale
IsValidCodePage
lstrcmpW
GetFileAttributesExW
LockResource
SizeofResource
lstrcmpiW
GetCurrentThread
DeviceIoControl
GetFileSizeEx
FindNextVolumeW
DeleteVolumeMountPointW
FindVolumeClose
SetVolumeMountPointW
FormatMessageW
FindFirstVolumeW
GetVolumeNameForVolumeMountPointW
GetPrivateProfileSectionW
WriteFile
GetVolumeInformationW
QueryDosDeviceW
GetExitCodeProcess
CreateProcessW
LoadLibraryExW
MapViewOfFile
CreateFileMappingW
LoadResource
FindResourceExW
UnmapViewOfFile
GetLocaleInfoW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
SearchPathW
GetLocalTime
GetDateFormatW
FileTimeToSystemTime
GetEnvironmentVariableW
GetLogicalDrives
SetEnvironmentVariableW
GetDriveTypeW
GetNativeSystemInfo
GetLogicalDriveStringsW
CreateFileW
GetSystemDefaultLangID
GetUserDefaultLangID
GetPrivateProfileIntW
GetSystemWindowsDirectoryW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetExitCodeThread
GetVolumePathNamesForVolumeNameW
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
Wow64RevertWow64FsRedirection
Wow64DisableWow64FsRedirection
CreateSemaphoreExW
WaitForMultipleObjectsEx
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
GetVolumeInformationByHandleW
CreateSemaphoreW
ReleaseSemaphore
DuplicateHandle
InitializeCriticalSectionAndSpinCount
OpenProcess
SetThreadIdealProcessor
GetOverlappedResult
GetHandleInformation
VirtualFree
VirtualAlloc
GetLastError
SetThreadExecutionState
CreateMutexW
GetModuleFileNameW
GetCommandLineW
CompareStringW
HeapFree
GetProcessHeap
SetEvent
WaitForSingleObject
CloseHandle
GetFileAttributesW
MoveFileW
HeapAlloc
LocalFree
SetLastError
GetWindowsDirectoryW
CopyFileW
LoadLibraryW
GetTickCount
GlobalFree
GetSystemInfo
VerifyVersionInfoW
GetTempPathW
GlobalMemoryStatusEx
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetVolumePathNameW
MoveFileExW
SetFileAttributesW
GetFullPathNameW
SleepConditionVariableSRW

advapi32

RegisterTraceGuidsW
GetTraceEnableLevel
GetTraceEnableFlags
GetTraceLoggerHandle
TraceEvent
UnregisterTraceGuids
ConvertStringSecurityDescriptorToSecurityDescriptorW
MakeAbsoluteSD
InitiateSystemShutdownExW
OpenSCManagerW
OpenServiceW
AllocateAndInitializeSid
FreeSid
NotifyServiceStatusChangeW
ControlService
EnumDependentServicesW
StartServiceW
RegDeleteKeyExW
RegDeleteTreeW
RegQueryInfoKeyW
EqualSid
RegEnumKeyExW
PrivilegeCheck
RegDeleteKeyW
RegEnumValueW
EventRegister
EventUnregister
EventWriteTransfer
LookupPrivilegeValueW
GetSecurityDescriptorSacl
AdjustTokenPrivileges
GetSecurityDescriptorGroup
GetSecurityDescriptorControl
GetSecurityDescriptorOwner
OpenProcessToken
ConvertSidToStringSidW
OpenThreadToken
GetTokenInformation
RegGetValueW
RegDeleteValueW
RegOpenKeyExW
RegQueryValueExW
QueryServiceStatus
CloseServiceHandle
GetSecurityDescriptorDacl
SetNamedSecurityInfoW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegRestoreKeyW
RegLoadKeyW
RegUnLoadKeyW
RegFlushKey
SetThreadToken
ReadEncryptedFileRaw
CloseEncryptedFileRaw
WriteEncryptedFileRaw
GetSecurityDescriptorLength
OpenEncryptedFileRawW
RevertToSelf
GetSecurityInfo
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetLengthSid
GetAclInformation
InitializeSecurityDescriptor
DuplicateTokenEx

dnsapi

DnsValidateName_W

ole32

CoSetProxyBlanket
CoCreateInstance
CLSIDFromString
StringFromCLSID
StringFromGUID2
CoTaskMemFree
CoInitializeSecurity
CoInitializeEx
CoUninitialize

oleaut32

VarUI4FromDec
VarBstrFromDate
VarI4FromDec
SysStringLen
SafeArrayGetElement
VariantClear
SysFreeString
SysAllocString

rpcrt4

RpcBindingFromStringBindingW
RpcStringBindingComposeW
NdrClientCall3
I_RpcMapWin32Status
RpcBindingSetAuthInfoW
UuidFromStringW
UuidToStringW
RpcStringFreeW
RpcBindingFree
UuidCreate

shell32

CommandLineToArgvW

shlwapi

PathFileExistsW
PathIsUNCW
PathRemoveBackslashW
StrStrW

user32

CharLowerW
MessageBoxW
CharNextW
LoadStringW
CharUpperBuffW
GetSystemMetrics
GetWindowTextW
EndPaint
GetKeyboardLayout
IsCharAlphaW
LoadBitmapW
FillRect
GetWindowLongW
GetMessageW
DefWindowProcW
BeginPaint
ReleaseDC
InvalidateRect
LoadImageW
UpdateWindow
PostQuitMessage
CharUpperW
DrawTextW
GetClientRect
SetCursor
TranslateMessage
SetPropW
SetFocus
MapWindowPoints
SetTimer
FindWindowExW
DispatchMessageW
ShowWindow
SetThreadDesktop
RegisterClassExW
NotifyWinEvent
SetClassLongPtrW
SetWindowTextW
SendMessageW
CreateWindowExW
GetPropW
SetWindowPos
IsWindowVisible
GetDC
DestroyWindow
KillTimer

wintrust

CryptCATAdminCalcHashFromFileHandle

imagehlp

CheckSumMappedFile

wdscore

WdsInitializeDataStringW
WdsFreeCollection
WdsPackCollection
WdsCollectionAddValue
WdsAllocCollection
WdsAddModule
WdsExitImmediatelyEx
ConstructPartialMsgVA
WdsDeleteBlackboardValue
WdsSetBlackboardValue
WdsInitializeDataUInt64
WdsSetNextExecutionGroup
WdsInitializeDataBinary
WdsPublishImmediateEx
WdsFreeData
WdsSetupLogMessageA
WdsCopyBlackboardItemsEx
WdsDestroyBlackboard
WdsUnpackCollection
WdsEnableExit
WdsInitializeDataUInt32
WdsGetBlackboardValue
WdsValidBlackboard
WdsInitialize
WdsSetupLogMessageW
CurrentIP
ConstructPartialMsgVW
WdsExecuteWorkQueueEx
WdsSetupLogDestroy
WdsTerminate
WdsEnumFirstBlackboardItem
WdsEnumNextBlackboardItem
WdsAbortBlackboardItemEnum
WdsInitializeCallbackArray
WdsPublish
WdsSubscribeEx
WdsCreateBlackboard
WdsCollectionGetValue

wdsutil

WdsPickTempDriveBasedOnInstallDrive
PublishMessage
SignalSetupComplianceBlock
GetDiskKey
GetRegionKey
IsCrossArchitectureInstall
CallbackGetArgumentInt32
?IsUpgrade@CUpgradeUserSetting@@SAHXZ
WdsValidateInstallDrive
GetApplicableDiskRegionReason
FreeReason
GetApplicableDiskReason
LogDiskRegionReasons
DiskRegionSupportsCapabilityForType
LogDiskReasons
DiskSupportsCapabilityForType
CallbackGetArgumentUInt64

ntdll

NtOpenFile
NtSetValueKey
NtDeviceIoControlFile
NtQuerySymbolicLinkObject
NtOpenKey
NtOpenSymbolicLinkObject
RtlImpersonateSelf
NtShutdownSystem
RtlAdjustPrivilege
RtlNtStatusToDosError
RtlInitUnicodeString
NtCreatePagingFile
ZwQuerySystemInformation
RtlGUIDFromString
RtlFreeUnicodeString
RtlStringFromGUID
RtlFreeHeap
RtlAllocateHeap
RtlAppendUnicodeToString
ZwQueryAttributesFile
ZwWaitForSingleObject
ZwQueryKey
ZwReleaseMutant
ZwOpenFile
ZwOpenMutant
ZwClose
RtlLengthSecurityDescriptor
NtPrivilegeCheck
RtlSetOwnerSecurityDescriptor
RtlSetDaclSecurityDescriptor
ZwCreateFile
ZwCreateKey
ZwLoadKey
RtlAddAccessAllowedAceEx
RtlAllocateAndInitializeSid
RtlLengthSid
ZwFlushKey
ZwDeleteValueKey
ZwSaveKey
RtlFreeSid
ZwDeleteKey
ZwEnumerateKey
ZwQueryValueKey
RtlCreateAcl
ZwSetSecurityObject
ZwUnloadKey
RtlCreateSecurityDescriptor
NtClose
RtlRaiseStatus
DbgPrintEx
LdrAccessResource
LdrFindResource_U
NtWaitForSingleObject
NtQueryInformationThread
NtQueryInformationFile
NtCreateEvent
RtlImageNtHeader
NtOpenProcess
NtQueryInformationProcess
NtSetInformationFile
NtCreateFile
NtQueryObject
RtlImageDirectoryEntryToData
RtlVerifyVersionInfo
VerSetConditionMask
LdrResSearchResource
ZwMapViewOfSection
ZwUnmapViewOfSection
RtlAnsiStringToUnicodeString
RtlxAnsiStringToUnicodeSize
RtlInitString
ZwSetInformationProcess
ZwCreateSection
RtlFormatCurrentUserKeyPath
RtlInitUnicodeStringEx
RtlNtPathNameToDosPathName
RtlpEnsureBufferSize
ZwQueryDirectoryFile
RtlDosPathNameToNtPathName_U_WithStatus
RtlGetNativeSystemInformation
RtlUpcaseUnicodeChar
NtReadFile
NtWriteFile
NtQueryValueKey
RtlRunOnceExecuteOnce
RtlAppendUnicodeStringToString
RtlReAllocateHeap
RtlGetVersion
NtCreateKey
NtEnumerateBootEntries
NtQueryDirectoryObject
NtOpenDirectoryObject
NtTranslateFilePath
NtSetSecurityObject
NtQueryBootOptions
NtQueryBootEntryOrder
NtDeleteKey
DbgPrint
NtDeleteFile
RtlGetThreadErrorMode
RtlSetThreadErrorMode
NtFsControlFile
NtQueryDirectoryFile
RtlDosPathNameToNtPathName_U
NtOpenEvent
RtlValidSid
EtwEventWrite
NtQueryKey
NtFlushKey
NtDeleteValueKey
NtSaveKeyEx
NtQuerySystemTime
RtlSetEnvironmentVariable
RtlCreateEnvironment
RtlDestroyEnvironment
RtlExpandEnvironmentStrings_U
RtlGetControlSecurityDescriptor
RtlConvertSidToUnicodeString
RtlSetControlSecurityDescriptor
NtQuerySecurityObject
NtQuerySystemEnvironmentValueEx
NtEnumerateKey
NtEnumerateValueKey
NtLoadKey
NtDelayExecution
NtUnloadKey
RtlGetAce
RtlAddAccessAllowedAce
NtRestoreKey
RtlEqualUnicodeString
NtQueryVolumeInformationFile
NtQueryAttributesFile
RtlDosPathNameToRelativeNtPathName_U_WithStatus
NtSetSystemInformation
RtlGetLastNtStatus
RtlFindAceByType
NtUnloadKey2
NtQueryEaFile
NtSetEaFile
RtlInitializeResource
RtlAcquireResourceExclusive
RtlAcquireResourceShared
RtlReleaseResource
RtlDeleteResource
RtlInitializeCriticalSection
ZwSetValueKey
ZwOpenKey
ZwAllocateUuids
ZwQuerySymbolicLinkObject
ZwDeviceIoControlFile
ZwQueryDirectoryObject
ZwOpenSymbolicLinkObject
ZwOpenDirectoryObject
LdrGetProcedureAddress
ZwQueryVolumeInformationFile
LdrGetDllHandle
ZwQueryInformationProcess
RtlInitAnsiString
ZwDeleteFile
ZwQueryInformationFile
ZwOpenProcess
NtQuerySystemInformation
NtAdjustPrivilegesToken
NtOpenProcessTokenEx
NtSetInformationThread
NtOpenThreadTokenEx

input

ord104
ord109
ord112
ord107
ord106
ord105

unbcl

??0?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEAA@PEAV?$Array@PEAVString@UnBCL@@@1@@Z
?GetFiles@Directory@UnBCL@@SAPEAV?$Array@PEAVString@UnBCL@@@2@PEBVString@2@0H@Z
??1?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@UEAA@XZ
??C?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$Array@PEAVString@UnBCL@@@1@XZ
?GetFileName@Path@UnBCL@@SAPEAVString@2@PEBV32@@Z
?Combine@Path@UnBCL@@SAPEAVString@2@PEBV32@0@Z
?get_P@?$SmartPtr@VString@UnBCL@@@UnBCL@@QEBAPEAVString@2@XZ
?Compare@String@UnBCL@@SAHPEBG0H@Z
?GetDirectoriesAndFiles@Directory@UnBCL@@SAPEAV?$Array@PEAVString@UnBCL@@@2@PEBVString@2@0W4EnumerationType@12@H@Z
?get_IsEmpty@String@UnBCL@@QEBAHXZ
??0Win32Exception@UnBCL@@QEAA@KPEBG@Z
??1Win32Exception@UnBCL@@UEAA@XZ
?CreateDir@Directory@UnBCL@@SAPEAVDirectoryInfo@2@PEBVString@2@@Z
??0?$Array@E@UnBCL@@QEAA@HH@Z
??_D?$Array@E@UnBCL@@QEAAXXZ
?GetBuffer@?$Array@E@UnBCL@@UEAAPEAEH@Z
?get_P@?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$Array@PEAVString@UnBCL@@@2@XZ
?get_Chars@String@UnBCL@@QEBAAEBGH@Z
?Steal@?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAAPEAVString@2@XZ
??0String@UnBCL@@QEAA@PEBV01@@Z
?EndsWith@String@UnBCL@@QEBAHPEBGH@Z
?StartsWith@String@UnBCL@@QEBAHPEBGH@Z
??1Exception@UnBCL@@UEAA@XZ
?get_Length@String@UnBCL@@QEBAHXZ
??1ISerializable@UnBCL@@UEAA@XZ
??1?$IList@E@UnBCL@@UEAA@XZ
??1?$ICollection@E@UnBCL@@UEAA@XZ
?Exists@File@UnBCL@@SAHPEBVString@2@@Z
?Nullify@?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAAAEAV12@XZ
??D?$SmartPtr@VString@UnBCL@@@UnBCL@@QEBAAEAVString@1@XZ
?SetCompressionState@File@UnBCL@@SAHPEBVString@2@G@Z
?Delete@File@UnBCL@@SAXPEBVString@2@@Z
??0?$Array@E@UnBCL@@QEAA@PEBU?$ICollection@E@1@@Z
?Clone@?$Array@E@UnBCL@@UEBAPEAVObject@2@XZ
?Equals@?$Array@E@UnBCL@@UEBAHPEBVObject@2@@Z
??6SerializationStream@UnBCL@@QEAAAEAV01@H@Z
?WriteBytes@SerializationStream@UnBCL@@QEAAXPEBEH@Z
??5SerializationStream@UnBCL@@QEAAAEAV01@AEAH@Z
?ReadBytes@SerializationStream@UnBCL@@QEAAXPEAEH@Z
?SanitizeTypeName@SerializationStream@UnBCL@@SAPEAVString@2@AEBV32@@Z
??2Object@UnBCL@@SAPEAX_KI@Z
??0String@UnBCL@@QEAA@AEBV01@@Z
?GetCallingModule@SerializationStream@UnBCL@@SAPEAUHINSTANCE__@@XZ
?CanRegister@SerializationStream@UnBCL@@SAHXZ
?RegisterType@SerializationStream@UnBCL@@SAXPEBVString@2@HPEAUHINSTANCE__@@PEAUIInstanceFactory@2@@Z
?EnqueueSbRegistration@SbRegistrationList@UnBCL@@SAXPEBDHPEAUHINSTANCE__@@PEAUIInstanceFactory@2@@Z
??0Exception@UnBCL@@QEAA@PEBG@Z
?UnregisterType@SerializationStream@UnBCL@@SAXPEBVString@2@HPEAUHINSTANCE__@@@Z
??0IInstanceFactory@UnBCL@@QEAA@XZ
??0ISerializable@UnBCL@@QEAA@XZ
??0?$IList@E@UnBCL@@QEAA@XZ
??0?$ICollection@E@UnBCL@@QEAA@XZ
??0?$IEnumerable@E@UnBCL@@QEAA@XZ
?ExpandEnvironmentVariables@Environment@UnBCL@@SAPEAVString@2@PEBV32@@Z
?Delete@Directory@UnBCL@@SAXPEBVString@2@H@Z
?Concat@String@UnBCL@@SAPEAV12@PEBG0@Z
?Substring@String@UnBCL@@QEBAPEAV12@HH@Z
?get_Win32ErrorCode@Win32Exception@UnBCL@@QEBAKXZ
?GetEnvironmentVar@Environment@UnBCL@@SAPEAVString@2@PEBV32@@Z
?Assign@?$SmartPtr@VString@UnBCL@@@UnBCL@@AEAAXPEAVString@2@@Z
?get_Item@XmlAttributeCollection@UnBCL@@QEAAPEAVXmlAttribute@2@PEAVString@2@@Z
?GetStackTrace@Exception@UnBCL@@QEBAPEAVString@2@XZ
?Clone@?$Hashtable@PEAVString@UnBCL@@PEAV12@@UnBCL@@UEBAPEAVObject@2@XZ
??0?$Hashtable@PEAVString@UnBCL@@PEAV12@@UnBCL@@QEAA@HH@Z
??0InvalidCastException@UnBCL@@QEAA@XZ
?SelectSingleNode@XmlNode@UnBCL@@QEAAPEAV12@PEAVString@2@@Z
?SelectNodes@XmlNode@UnBCL@@QEAAPEAVXmlNodeList@2@PEAVString@2@@Z
?get_Value@XmlNode@UnBCL@@QEAAPEAVString@2@XZ
?get_Attributes@XmlNode@UnBCL@@QEAAPEAVXmlAttributeCollection@2@XZ
?Load@XmlDocument@UnBCL@@QEAAXPEAVString@2@@Z
??1XmlDocument@UnBCL@@UEAA@XZ
??0XmlDocument@UnBCL@@QEAA@XZ
?get_P@?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$ArrayList@PEAVString@UnBCL@@@2@XZ
??C?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$ArrayList@PEAVString@UnBCL@@@1@XZ
??4?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
??1?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@UEAA@XZ
??0?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEAA@XZ
??0?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEAA@PEAV?$ArrayList@PEAVString@UnBCL@@@1@@Z
??5SerializationStream@UnBCL@@QEAAAEAV01@AEAK@Z
??5SerializationStream@UnBCL@@QEAAAEAV01@AEAPEAVString@1@@Z
??5SerializationStream@UnBCL@@QEAAAEAV01@AEAPEAUISerializable@1@@Z
??6SerializationStream@UnBCL@@QEAAAEAV01@K@Z
??6SerializationStream@UnBCL@@QEAAAEAV01@PEBVString@1@@Z
??6SerializationStream@UnBCL@@QEAAAEAV01@PEBUISerializable@1@@Z
?Compare@String@UnBCL@@SAHPEBV12@0H@Z
?ToLower@String@UnBCL@@QEBAPEAV12@XZ
?Split@String@UnBCL@@QEBAPEAV?$ArrayList@PEAVString@UnBCL@@@2@PEBG@Z
?LastIndexOf@String@UnBCL@@QEBAHG@Z
?CompareTo@String@UnBCL@@QEBAHPEBG@Z
?CompareTo@String@UnBCL@@QEBAHPEBGH@Z
?get_Item@XmlNodeList@UnBCL@@QEAAPEAVXmlNode@2@H@Z
?get_Count@XmlNodeList@UnBCL@@QEAAHXZ
??0Object@UnBCL@@QEAA@AEBV01@@Z
??0Win32Exception@UnBCL@@QEAA@K@Z
??1InvalidCastException@UnBCL@@UEAA@XZ
??1?$IEnumerator@PEAVString@UnBCL@@@UnBCL@@UEAA@XZ
??0?$IEnumerator@PEAVString@UnBCL@@@UnBCL@@QEAA@XZ
??4Object@UnBCL@@QEAAAEAV01@AEBV01@@Z
??0?$ICollection@PEAVString@UnBCL@@@UnBCL@@QEAA@XZ
??0?$IEnumerable@PEAVString@UnBCL@@@UnBCL@@QEAA@XZ
??1?$ICollection@PEAVString@UnBCL@@@UnBCL@@UEAA@XZ
??_D?$Hashtable@PEAVString@UnBCL@@PEAV12@@UnBCL@@QEAAXXZ
?Append@MutableString@UnBCL@@QEAAXPEBG@Z
?Clone@MultiSz@UnBCL@@UEBAPEAVObject@2@XZ
?ToString@MultiSz@UnBCL@@UEBAPEAVString@2@XZ
?Add@MultiSz@UnBCL@@QEAAXPEBG@Z
?get_Buffer@MultiSz@UnBCL@@QEBAPEBGXZ
??0MultiSz@UnBCL@@QEAA@XZ
?Trim@String@UnBCL@@QEBAPEAV12@PEBG@Z
?Substring@String@UnBCL@@QEBAPEAV12@H@Z
?IndexOf@String@UnBCL@@QEBAHPEBGH@Z
??_DMultiSz@UnBCL@@QEAAXXZ
?MakeTrim@MutableString@UnBCL@@QEAAXPEBG@Z
??0MutableString@UnBCL@@QEAA@PEBG@Z
?IsEnvironmentVarSetTrue@Environment@UnBCL@@SAHPEBVString@2@H@Z
??0OutOfMemoryException@UnBCL@@QEAA@XZ
?IndexOf@String@UnBCL@@QEBAHG@Z
??0String@UnBCL@@QEAA@PEBGHH@Z
??1OutOfMemoryException@UnBCL@@UEAA@XZ
?get_ChildNodes@XmlNode@UnBCL@@QEAAPEAVXmlNodeList@2@XZ
?get_Name@XmlNode@UnBCL@@QEAAPEAVString@2@XZ
?get_Count@XmlAttributeCollection@UnBCL@@QEAAHXZ
?FormatV@String@UnBCL@@SAPEAV12@PEBGPEAD@Z
??4?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z
?Concat@String@UnBCL@@SAPEAV12@PEBG00@Z
?Copy@Directory@UnBCL@@SAXPEBVString@2@0HPEAUICopyDelegate@12@@Z
?Exists@Directory@UnBCL@@SAHPEBVString@2@@Z
??C?$SmartPtr@VString@UnBCL@@@UnBCL@@QEBAPEAVString@1@XZ
??1?$SmartPtr@VString@UnBCL@@@UnBCL@@UEAA@XZ
?GetParentPath@Path@UnBCL@@SAPEAVString@2@PEBV32@@Z
??0?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAA@PEAVString@1@@Z
??4MutableString@UnBCL@@QEAAAEAV01@PEBG@Z
??0MutableString@UnBCL@@QEAA@XZ
?Tokenize@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEBA?AV12@PEBGAEAH@Z
??4?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAAEAV01@AEBV01@@Z
?Compare@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEBAHPEBG@Z
??1?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@XZ
??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@PEBD@Z
??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@PEBG@Z
??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@XZ
?SetAt@?$CSimpleStringT@G$0A@@ATL@@QEAAXHG@Z
?GetManager@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEBAPEAUIAtlStringMgr@2@XZ
??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@AEBV01@@Z
??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@PEAUIAtlStringMgr@1@@Z
?Concatenate@?$CSimpleStringT@G$0A@@ATL@@KAXAEAV12@PEBGH1H@Z
?Append@?$CSimpleStringT@G$0A@@ATL@@QEAAXPEBG@Z
?Empty@?$CSimpleStringT@G$0A@@ATL@@QEAAXXZ
??4?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAAEAV01@PEBG@Z
?Format@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAXPEBGZZ
??3Object@UnBCL@@SAXPEAX@Z
??1String@UnBCL@@UEAA@XZ
??0String@UnBCL@@QEAA@PEBG@Z
??0Object@UnBCL@@QEAA@XZ
??1Object@UnBCL@@UEAA@XZ
??2Object@UnBCL@@SAPEAX_K@Z
?AddStackTrace@Exception@UnBCL@@QEAAXPEBD@Z
?MemAllocFailed@Allocator@UnBCL@@SAHXZ
??0ArgumentOutOfRangeException@UnBCL@@QEAA@PEBG@Z
??0ArgumentNullException@UnBCL@@QEAA@PEBG@Z
??0ArgumentException@UnBCL@@QEAA@PEBG@Z
??0InvalidOperationException@UnBCL@@QEAA@PEBVString@1@PEAVException@1@@Z
??0InvalidOperationException@UnBCL@@QEAA@PEBG@Z
??0NotSupportedException@UnBCL@@QEAA@PEBG@Z
??0InvalidOperationException@UnBCL@@QEAA@PEBVString@1@@Z
?Equals@Object@UnBCL@@UEBAHPEBV12@@Z
?CompareTo@Object@UnBCL@@UEBAHPEBV12@@Z
?AddRef@Object@UnBCL@@QEAAXXZ
?DecRef@Object@UnBCL@@QEAAHXZ
?SetLiteralStorage@_@UnBCL@@YAXPEAPEBVString@2@PEBG@Z
?Equals@String@UnBCL@@UEBAHPEBVObject@2@@Z
?GetHashCode@String@UnBCL@@UEBAHXZ
?GetType@Object@UnBCL@@UEBAPEAVType@2@XZ
?ToString@String@UnBCL@@UEBAPEAV12@XZ
?GetObjectID@Object@UnBCL@@UEBAIXZ
?CompareTo@String@UnBCL@@UEBAHPEBVObject@2@@Z
?Clone@String@UnBCL@@UEBAPEAVObject@2@XZ
?GetHashCode@Object@UnBCL@@UEBAHXZ
?ToString@Exception@UnBCL@@UEBAPEAVString@2@XZ
?Clone@Object@UnBCL@@UEBAPEAV12@XZ
?get_InnerException@Exception@UnBCL@@UEBAPEBV12@XZ
?get_Message@Exception@UnBCL@@UEBAPEBVString@2@XZ
?get_Source@Exception@UnBCL@@UEBAPEBVString@2@XZ
?set_Source@Exception@UnBCL@@UEAAXPEBVString@2@@Z
?GetBaseException@Exception@UnBCL@@UEBAPEBV12@XZ
?get_HResult@Exception@UnBCL@@UEBAJXZ
?set_HResult@Exception@UnBCL@@MEAAXJ@Z
?SetMessage@Exception@UnBCL@@MEAAXPEAVString@2@@Z
?ToString@Object@UnBCL@@UEBAPEAVString@2@XZ
?FromASCII@String@UnBCL@@SAPEAV12@PEBD@Z
??1NotSupportedException@UnBCL@@UEAA@XZ
??1InvalidOperationException@UnBCL@@UEAA@XZ
??1ArgumentOutOfRangeException@UnBCL@@UEAA@XZ
??1ArgumentException@UnBCL@@UEAA@XZ
??1ArgumentNullException@UnBCL@@UEAA@XZ
??1MutableString@UnBCL@@UEAA@XZ
?get_CString@String@UnBCL@@QEBAPEBGXZ
??0ApplicationException@UnBCL@@QEAA@PEBG@Z
??1ApplicationException@UnBCL@@UEAA@XZ
?Format@String@UnBCL@@SAPEAV12@PEBGZZ
??0?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAA@XZ

unattend

UnattendEnumFree
UnattendCtxEnumGet
UnattendCtxEnumOrderedSubNodes
UnattendFreeNode
UnattendCtxOpenNode
UnattendCtxGetCount
UnattendFreeResults
UnattendCtxGetFlag
UnattendCtxGetString
UnattendCtxGetShowUI
UnattendCtxGetCountByNode
UnattendCtxCommitModify
UnattendCtxOpenNodeByNode
UnattendCtxGetUlongByNode
UnattendCtxDeserializeBuffer
UnattendCtxCleanup
UnattendCtxGetEnumValueByNode
UnattendCtxCancelModify
UnattendCtxSerializeSettingsStream
UnattendCtxGetRootNode
UnattendCtxSerializeToBuffer
UnattendCtxReplaceNode
UnattendCtxGetStringByNode
UnattendCtxSerialize
UnattendCtxGetUlong
UnattendCtxSetNodeName
UnattendCtxPrettyPrint
UnattendCtxGetLongByNode
UnattendCtxGetExpandedStringByNode
UnattendFindAnswerFileWithResults
UnattendGetImplicitContext
UnattendGetFirstFailingSetting
UnattendCleanup
UnattendCtxGetFlagByNode
UnattendFreeSetting
UnattendIsNodeValid
UnattendCtxSpliceTrees
UnattendCtxSetStringByNode
UnattendCtxSerializeToBufferFromNode
UnattendCtxSetString
UnattendCtxDeserializeString
UnattendAddResults
UnattendCtxDeserialize
UnattendMarkPassUsedInCtx
UnattendCtxBeginModify
UnattendDeserializeWithResults
UnattendCtxGetLong
UnattendFormatPath
UnattendCtxReplaceMatchedNodesWithText

gdi32

GdiAlphaBlend
CreateDIBitmap
GetTextMetricsW
SetBkColor
SetLayout
GetTextAlign
SetMapMode
SetTextAlign
SetWorldTransform
SetGraphicsMode
AddFontMemResourceEx
SetBrushOrgEx
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
StretchBlt
GetStockObject
GetDeviceCaps
GetTextExtentPoint32W
SetTextColor
SetBkMode
GetObjectW
TranslateCharsetInfo
DeleteDC
CreateDCW
EnumFontFamiliesExW
SetTextCharacterExtra
CreateFontIndirectW
RemoveFontMemResourceEx
CreateSolidBrush
DeleteObject
SetStretchBltMode
TextOutW

mpr

WNetCancelConnection2W
WNetAddConnection2W

version

GetFileVersionInfoExW
VerQueryValueW
GetFileVersionInfoSizeExW

wininet

InternetQueryOptionW
InternetGetConnectedState
InternetSetOptionW

cfgmgr32

CMP_WaitNoPendingInstallEvents
CM_Get_Parent
CM_Get_Device_ID_ExW
CM_Get_DevNode_Registry_PropertyW
CM_Get_Device_ID_Size_Ex

bcrypt

BCryptHashData
BCryptDestroyHash
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
BCryptGetProperty
BCryptCreateHash
BCryptDestroyKey
BCryptVerifySignature
BCryptImportKeyPair
BCryptFinishHash

fltlib

FilterAttach
FilterLoad

cabinet

ord23
ord20
ord22

Exports

Exports

??4DUMgr@@QEAAAEAV0@AEBV0@@Z
?GetModuleId@DUMgr@@QEAAAEBQEAXXZ
?Instance@DUMgr@@SAPEAV1@XZ
?IsCancelled@DUMgr@@AEAAHXZ
?SetModuleId@DUMgr@@QEAAXPEAX@Z
?SetPhase@DUMgr@@AEAAXW4DUPhase@@@Z
FreeResourceHandle
GetCleanInstallCheckpointSequence
GetSpaceNeededForWinPE
InstallCopyCodeUpdate
InstallSetupUpdates
InstallWindows
Module_Init_BootPrepare
Module_Init_Bootstrap
Module_Init_CBS
Module_Init_Cleanup
Module_Init_Compliance
Module_Init_ComputerName
Module_Init_ConfigOfflineImage
Module_Init_ConfigSet
Module_Init_CopyImages
Module_Init_CopyPrivates
Module_Init_CopySetupFiles
Module_Init_DU
Module_Init_DeployImages
Module_Init_DiskConfiguration
Module_Init_DiskSpace
Module_Init_Ems
Module_Init_Engine
Module_Init_ErrorHandler
Module_Init_ExternalDrivers
Module_Init_Finalize_Image
Module_Init_FixBBPaths
Module_Init_GatherDiskInfo
Module_Init_ImageInstall
Module_Init_ImageTransfer
Module_Init_Internal
Module_Init_LanguagePack
Module_Init_License
Module_Init_Locale
Module_Init_ModuleLoader
Module_Init_MountedDevices
Module_Init_MungeBootEntries
Module_Init_OnlineSettings
Module_Init_PageFile
Module_Init_ParseCmdLine
Module_Init_PickTempDrive
Module_Init_PrepareInstallDrive
Module_Init_Productkey
Module_Init_QFE
Module_Init_RestartSetup
Module_Init_Rollback
Module_Init_ScenarioDetect
Module_Init_SourceMedia
Module_Init_Sysprep
Module_Init_SystemRestore
Module_Init_Unattend
PublishDiskInfoOnBlackboard
SetFileCopyErrorResult
SetFileCopyErrorResultFromStruct
SetResourceHandle
Sysprep_Specialize_Offline_Pnp_Compat
Sysprep_Specialize_Pnp_Compat
UnattendErrorFromResults
g_hwCompatParams
g_pUnattendCtxIBS

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
python-3.11.2-amd64/pres/fr/wbemcore.dll
.dll regsvr32 windows x64

71b0cdb1ea967550680a6969c9714a3d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

sscanf_s
wcscmp
memcmp
_vsnprintf
atol
memset
?terminate@@YAXXZ
??1type_info@@UEAA@XZ
_onexit
__dllonexit
_initterm
_amsg_exit
_XcptFilter
_unlock
_lock
memmove
memcpy
_CxxThrowException
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBQEBD@Z
_wcslwr_s
wcsstr
iswxdigit
iswspace
memmove_s
_ui64tow_s
_vsnprintf_s
swprintf_s
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@XZ
??1exception@@UEAA@XZ
memcpy_s
malloc
isdigit
free
wcschr
_wcsicmp
_vsnwprintf
_wcsnicmp
wcstok
_purecall
__C_specific_handler
__CxxFrameHandler3

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
TlsSetValue
GetCurrentThread
TlsFree
TlsGetValue
OpenThreadToken
GetCurrentProcess
TerminateProcess
SetThreadToken
TlsAlloc
GetCurrentThreadId
CreateThread
GetProcessTimes

api-ms-win-core-synch-l1-1-0

ReleaseSemaphore
DeleteCriticalSection
ReleaseMutex
OpenEventW
SetEvent
ReleaseSRWLockExclusive
LeaveCriticalSection
CreateEventW
InitializeCriticalSectionEx
WaitForSingleObject
WaitForMultipleObjectsEx
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
ResetEvent
AcquireSRWLockShared
CreateMutexExW
AcquireSRWLockExclusive
WaitForSingleObjectEx
ReleaseSRWLockShared
OpenSemaphoreW
CreateSemaphoreExW

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GlobalMemoryStatusEx
GetVersionExW
GetSystemDirectoryW
GetSystemTime
GetVersion
GetComputerNameExW
GetSystemInfo
GetTickCount64
GetLocalTime
GetTickCount

api-ms-win-core-registry-l1-1-0

RegNotifyChangeKeyValue
RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey

api-ms-win-core-localization-l1-2-0

LCMapStringW
FormatMessageW

api-ms-win-core-threadpool-legacy-l1-1-0

CreateTimerQueueTimer
DeleteTimerQueueTimer
QueueUserWorkItem

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
SetLastError

api-ms-win-security-base-l1-1-0

GetSecurityDescriptorDacl
GetLengthSid
RevertToSelf
GetTokenInformation
GetSecurityDescriptorControl
FreeSid
IsValidSecurityDescriptor
GetSidSubAuthority
GetSidSubAuthorityCount
PrivilegeCheck
AccessCheck
GetSecurityDescriptorSacl
AllocateAndInitializeSid

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameA
GetProcAddress
FreeLibrary
GetModuleHandleExW
GetModuleHandleW
LoadLibraryExW

api-ms-win-core-string-obsolete-l1-1-0

lstrlenW

api-ms-win-core-file-l1-1-0

WriteFile
GetFileInformationByHandle
GetFileAttributesExW
CreateFileW
GetFileAttributesW

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime
FileTimeToSystemTime

api-ms-win-eventing-provider-l1-1-0

EventActivityIdControl

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-core-string-l1-1-0

GetStringTypeExW
WideCharToMultiByte
CompareStringW

api-ms-win-core-version-l1-1-0

GetFileVersionInfoExW
GetFileVersionInfoSizeExW
VerQueryValueW

api-ms-win-core-heap-l1-1-0

HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolTimer
SetThreadpoolTimer
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
DebugBreak
OutputDebugStringW

api-ms-win-core-kernel32-legacy-l1-1-0

MoveFileW

api-ms-win-core-registry-l2-1-0

RegDeleteKeyW

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

ntdll

WinSqmIsOptedIn
WinSqmAddToStream

wbemcomn

??BWString@@QEBAPEBGXZ
?MakeInternalCopyOfThread@CWbemCallSecurity@@SAPEAV1@XZ
?WbemMemReAlloc@CWin32DefaultArena@@SAPEAXPEAX_K@Z
?IsValid@CNtSid@@QEAAHXZ
?IsValid@CNtAcl@@QEAAHXZ
?GetStatus@CNtSecurityDescriptor@@QEAAKXZ
?GetPtr@CNtSecurityDescriptor@@QEAAPEAXXZ
IsInAdminGroup
?GetSid@CNtAce@@QEAAPEAVCNtSid@@XZ
??0CNtAcl@@QEAA@PEAU_ACL@@@Z
?ContainsSid@CNtAcl@@QEAAHAEAVCNtSid@@AEAE@Z
?DeleteAce@CNtAcl@@QEAAHH@Z
?OrderAces@CNtAcl@@QEAAPEAV1@XZ
??4CNtSecurityDescriptor@@QEAAAEAV0@AEAV0@@Z
?GetDacl@CNtSecurityDescriptor@@QEAAJPEAPEAVCNtAcl@@@Z
?GetSacl@CNtSecurityDescriptor@@QEAAJPEAPEAVCNtAcl@@@Z
?SetSacl@CNtSecurityDescriptor@@QEAAHPEAVCNtAcl@@@Z
?DeleteSacl@CNtSecurityDescriptor@@QEAAJXZ
?GetOwner@CNtSecurityDescriptor@@QEAAPEAVCNtSid@@XZ
?SetOwner@CNtSecurityDescriptor@@QEAAHPEAVCNtSid@@@Z
?SetGroup@CNtSecurityDescriptor@@QEAAHPEAVCNtSid@@@Z
?GetSize@CNtSecurityDescriptor@@QEAAKXZ
GetSecurityDescriptorFromParameters
BuildSecurityDescriptorParameter
??0CVar@@QEAA@E@Z
??0CVar@@QEAA@J@Z
??0CVar@@QEAA@FH@Z
??0CVar@@QEAA@PEAVCVarVector@@H@Z
?SetVarVector@CVar@@QEAAXPEAVCVarVector@@H@Z
??0CVarVector@@QEAA@HHH@Z
??1CVarVector@@QEAA@XZ
?Add@CVarVector@@QEAAHAEAVCVar@@@Z
??0CVar@@QEAA@PEAUtagVARIANT@@@Z
?GetEmbeddedObject@CVar@@QEAAPEAUIUnknown@@XZ
?Length@WString2@@QEBAHXZ
?EqualNoCase@WString2@@QEBAHPEBG@Z
??0CPropertyName@@QEAA@XZ
??1CPropertyName@@QEAA@XZ
?GetNumElements@CPropertyName@@QEBAJXZ
??0CWbemTime@@QEAA@XZ
?Get100nss@CWbemTime@@QEBA_JXZ
?CountQuery@CWQLScanner@@QEAAHXZ
?IsValidDateTime@CDateTimeParser@@QEAAHXZ
?GetStringAt@CPropertyName@@QEBAPEBGJ@Z
?AddElement@CPropertyName@@QEAAXPEBG@Z
?Empty@CVar@@QEAAXXZ
?ChangeTypeTo@CVar@@QEAAHG@Z
??0QL_LEVEL_1_TOKEN@@QEAA@AEBU0@@Z
??1QL_LEVEL_1_TOKEN@@QEAA@XZ
??0CLike@@QEAA@PEBGG@Z
??1CLike@@QEAA@XZ
?Match@CLike@@QEAA_NPEBG@Z
ReadI64
?GetReferencedTables@CWQLScanner@@QEAAHAEAVCWStringArray@@@Z
??0CDateTimeParser@@QEAA@PEBG@Z
??1CDateTimeParser@@QEAA@XZ
?FillDMTF@CDateTimeParser@@QEAAHPEAG_K@Z
ReadUI64
??4WString@@QEAAAEAV0@AEBV0@@Z
?SetDMTF@CWbemTime@@QEAAHPEBG@Z
??0QL1_Parser@@QEAA@PEAVCGenLexSource@@@Z
??1QL1_Parser@@UEAA@XZ
?Parse@QL1_Parser@@QEAAHPEAPEAUQL_LEVEL_1_RPN_EXPRESSION@@@Z
?UnbindPtr@WString2@@QEAAPEAGXZ
??1QL_LEVEL_1_RPN_EXPRESSION@@QEAA@XZ
?AddRef@QL_LEVEL_1_RPN_EXPRESSION@@QEAAXXZ
?Release@QL_LEVEL_1_RPN_EXPRESSION@@QEAAXXZ
?AddProperty@QL_LEVEL_1_RPN_EXPRESSION@@UEAAXAEBVCPropertyName@@@Z
?GetText@QL_LEVEL_1_RPN_EXPRESSION@@QEAAPEAGXZ
?PublishTemporaryEssStarted@CPublishWMIOperationEvent@@SAJPEAG00K00@Z
?ValidateMemSize@CWin32DefaultArena@@SAHH@Z
?_GetSystemDefaultLocale@CMUILocale@@SAJPEAPEAGK@Z
??0CEnterWbemCriticalSection@@QEAA@PEAVCWbemCriticalSection@@K@Z
??1CEnterWbemCriticalSection@@QEAA@XZ
Set_WPP_INIT_TRACING_Call_State
?SetLogingEnabled@CMemoryLog@@QEAAX_N@Z
RegisterDLL
UnRegisterDLL
?RegisterCMIFlushRepositoryCacheHook@CWbemInstallObject@@SAXP6AJH@Z@Z
?UnregisterCMIFlushRepositoryCacheHook@CWbemInstallObject@@SAXXZ
WMIControlClientOpsCallback
??0CWbemCriticalSection@@QEAA@XZ
??1CWbemCriticalSection@@QEAA@XZ
?Enter@CWbemCriticalSection@@QEAAHK@Z
?Leave@CWbemCriticalSection@@QEAAXXZ
?Init@CPublishWMIOperationEvent@@SAJXZ
??0CVar@@QEAA@HVauto_bstr@@@Z
??0CHex@@QEAA@J@Z
?DeleteValue@Registry@@QEAAHPEBG@Z
?GetPersistentCfgValue@CPersistentConfig@@QEAAHKAEAK@Z
TestDirExistAndCreateWithSDIfNotThere
??0CInsertionString@@QEAA@VCHex@@@Z
??0CEventLog@@QEAA@PEBGAEBU_GUID@@K@Z
??1CEventLog@@QEAA@XZ
?Close@CEventLog@@QEAAHXZ
?Open@CEventLog@@QEAAHXZ
ComposeName
?GetBinaryPath@CWbemInstallObject@@SAPEBGXZ
?GetRepositoryFolder@CWbemInstallObject@@SAPEBGXZ
?anyFailure@CStaticCritSec@@SAHXZ
??0WString@@QEAA@AEBV0@@Z
?EqualNoCase@WString@@QEBAHPEBG@Z
?SetAt@CFlexArray@@QEAAXHPEAX@Z
??0CVar@@QEAA@AEBV0@@Z
?Empty@WString@@QEAAXXZ
?Size@CSafeArray@@QEAAHXZ
?GetVarVector@CVar@@QEAAPEAVCVarVector@@XZ
?GetStatus@CNtSid@@QEAAKXZ
?SetFlags@CNtAce@@UEAAXJ@Z
?GetStatus@CNtAce@@UEAAKXZ
_IsValidElementName
?Empty@CWStringArray@@QEAAXXZ
?FindStr@CWStringArray@@QEAAHPEBGH@Z
?IsUserInGroup@CNtSecurity@@SAHPEAXAEAVCNtSid@@PEAH@Z
?IsDataNull@CVar@@QEAAHXZ
?GetBSTR@CVar@@QEAAPEAGXZ
isunialphanum
?Size@CVarVector@@QEAAHXZ
?GetAt@CVarVector@@QEAAAEAVCVar@@H@Z
??0CNtAce@@QEAA@KKKAEAVCNtSid@@@Z
??1CNtAce@@UEAA@XZ
?GetType@CNtAce@@UEAAHXZ
?GetFlags@CNtAce@@UEAAHXZ
?GetAccessMask@CNtAce@@UEAAKXZ
?GetSerializedSize@CNtAce@@UEAAKXZ
?Serialize@CNtAce@@UEAA_NPEAE_K@Z
?Deserialize@CNtAce@@UEAA_NPEAE@Z
IsAdmin
??0CNtAcl@@QEAA@K@Z
??1CNtAcl@@QEAA@XZ
?GetNumAces@CNtAcl@@QEAAHXZ
?GetAce@CNtAcl@@QEAAPEAVCNtAce@@H@Z
?AddAce@CNtAcl@@QEAAHPEAVCNtAce@@@Z
BuildOperationInfo
??0CNtSecurityDescriptor@@QEAA@PEAX@Z
??0CNtSecurityDescriptor@@QEAA@XZ
??1CNtSecurityDescriptor@@QEAA@XZ
?GetDacl@CNtSecurityDescriptor@@QEAAPEAVCNtAcl@@XZ
?SetDacl@CNtSecurityDescriptor@@QEAAHPEAVCNtAcl@@@Z
?GetSacl@CNtSecurityDescriptor@@QEAAPEAVCNtAcl@@XZ
?CoGetClassObject@CWbemInstallObject@@SAJAEBU_GUID@@KPEAU_COSERVERINFO@@0PEAPEAX@Z
GetAccessToken
GetGlobalClientOps
??0CMUILocaleList@@QEAA@XZ
??1CMUILocaleList@@QEAA@XZ
?Initialize@CMUILocaleList@@QEAAJPEAG_N@Z
?GetFirst_ms_XXX_Locale@CMUILocaleList@@QEAAJPEAPEAG@Z
?GetCultures@CMUILocaleList@@QEAAPEBGXZ
?GetLocales@CMUILocaleList@@QEAAPEBGXZ
?AddChild@CClientOpsNode@@QEAAXPEAV1@@Z
??0CNtSid@@QEAA@PEAX@Z
??1CNtSid@@QEAA@XZ
?ms_XXX_Locale_To_LCID@CMUILocale@@SAJPEBGPEAK@Z
?CheckLangNeutral@CMUILocale@@SAJPEBGPEA_N@Z
?LocaleName_To_LCID@CMUILocale@@SAJPEBGPEA_NPEAK@Z
?LCID_To_ms_XXX_Format@CMUILocale@@SAJKPEAG_K@Z
??0CSafeArray@@QEAA@PEAUtagSAFEARRAY@@HHH@Z
?GetBSTRAt@CSafeArray@@QEAAPEAGH@Z
?Publish@CPublishWMIOperationEvent@@SAJPEAGKK0000K_K0H@Z
?PublishMethodExec@CPublishWMIOperationEvent@@SAJPEAGKK000000K_K0H@Z
?PublishWin32ProcessCreation@CPublishWMIOperationEvent@@SAJPEAGKK0K_K000K1H@Z
?PublishRepDelete@CPublishWMIOperationEvent@@SAJKPEAGPEAUIWbemContext@@K0_KH@Z
?PublishRepUpdate@CPublishWMIOperationEvent@@SAJKPEAGKPEAUIWbemContext@@K0_KH@Z
?CreateInst@CWbemCallSecurity@@SAPEAVIWbemCallSecurity@@XZ
?GetArray@CSafeArray@@QEAAPEAUtagSAFEARRAY@@XZ
?GetDWORD@CVar@@QEAAKXZ
?SetBool@CVar@@QEAAXF@Z
?GetBool@CVar@@QEAAFXZ
?SetBSTR@CVar@@QEAAHPEAG@Z
?SetBSTR@CVar@@QEAAHVauto_bstr@@@Z
??0Registry@@QEAA@PEAUHKEY__@@KKPEBG@Z
?GetDWORDStr@Registry@@QEAAHPEBGPEAK@Z
?GetMultiStr@Registry@@QEAAPEAGPEBGAEAK@Z
?SetDWORD@Registry@@QEAAHPEBGK@Z
?SetDWORDStr@Registry@@QEAAHPEBGK@Z
?SetStr@Registry@@QEAAHPEBG0@Z
??0CSafeArray@@QEAA@HHHH@Z
??1CSafeArray@@QEAA@XZ
?SetBSTRAt@CSafeArray@@QEAAHHPEAG@Z
?Trim@CSafeArray@@QEAAHXZ
?GetAt@CWStringArray@@QEBAPEAGH@Z
??0CVar@@QEAA@HPEAG@Z
?SetAsNull@CVar@@QEAAXXZ
?SetEmbeddedObject@CVar@@QEAAXPEAUIUnknown@@@Z
?GetSelectedColumns@CWQLScanner@@QEAAPEBVCFlexArray@@XZ
??0CFlexArray@@QEAA@AEAV0@@Z
?AliasToTable@CWQLScanner@@QEAAQEAGPEAG@Z
?GetReferencedAliases@CWQLScanner@@QEAAHAEAVCWStringArray@@@Z
??0CWQLScanner@@QEAA@PEAVCGenLexSource@@@Z
??1CWQLScanner@@QEAA@XZ
?Parse@CWQLScanner@@QEAAHXZ
?GetArrayPtr@CFlexArray@@QEAAPEAPEAXXZ
?IsNull@CVar@@QEAAHXZ
??BCVar@@QEAAPEAGXZ
?Compress@CFlexArray@@QEAAXXZ
?Bind@CFlexArray@@QEAAXAEAV1@@Z
??4CWStringArray@@QEAAAEAV0@AEAV0@@Z
?RemoveAt@CWStringArray@@QEAAHH@Z
?Union@CWStringArray@@SAXAEAV1@00@Z
??0WString2@@QEAA@PEAGH@Z
??YWString2@@QEAAAEAV0@AEBV0@@Z
?EscapeQuotes@WString2@@QEBA?AV1@XZ
?SetLong@CVar@@QEAAXJ@Z
?_Free@CMUILocale@@SAHPEAX@Z
??0Registry@@QEAA@PEBGK@Z
?GetStr@Registry@@QEAAHPEBGPEAPEAG@Z
IsNtSetupRunning
?Enter@CCheckedInCritSec@@QEAAXXZ
??1WString@@QEAA@XZ
?Length@WString@@QEBAHXZ
?GetStringPointerByRef@WString@@QEBAAEBQEBGXZ
??BWString@@QEAAPEAGXZ
?BindPtr@WString@@QEAAXPEAG@Z
?GetLastError@Registry@@QEAAJXZ
?GetQueueSize@CFlexQueue@@QEBAHXZ
??0CInsertionString@@QEAA@PEBG@Z
??0CClientOpsNode@@QEAA@XZ
?SetInfo@CClientOpsNode@@QEAAXPEAX@Z
BreakOnDbgAndRenterLoop
_ThrowMemoryException_
??0Registry@@QEAA@PEAUHKEY__@@KPEBG@Z
??1Registry@@QEAA@XZ
?GetDWORD@Registry@@QEAAHPEBGPEAK@Z
??0CIdentitySecurity@@QEAA@_N@Z
??1CIdentitySecurity@@QEAA@XZ
?AccessCheck@CIdentitySecurity@@QEAAHXZ
IsLocalConnection
??0WString@@QEAA@XZ
??4WString@@QEAAAEAV0@PEBG@Z
??YWString@@QEAAAEAV0@PEBG@Z
??1CClientOpsNode@@QEAA@XZ
?RemoveSelf@CClientOpsNode@@QEAAXXZ
?Peek@CFlexQueue@@QEAAPEAXXZ
?PublishStop@CPublishWMIOperationEvent@@SAJKJPEAG@Z
?PublishClientRequestFailure@CPublishWMIOperationEvent@@SAJPEBGPEAG1K10J0@Z
??0CVar@@QEAA@XZ
?GetType@CVar@@QEAAHXZ
?GetLPWSTR@CVar@@QEAAPEAGXZ
??1CVar@@QEAA@XZ
?WbemMemAlloc@CWin32DefaultArena@@SAPEAX_K@Z
?WbemMemFree@CWin32DefaultArena@@SAHPEAX@Z
??ACWStringArray@@QEBAPEAGH@Z
?Size@CWStringArray@@QEBAHXZ
??BWString2@@QEAAPEAGXZ
??0CInsertionString@@QEAA@XZ
??1CInsertionString@@QEAA@XZ
?GetAt@CFlexArray@@QEBAPEAXH@Z
??0CWStringArray@@QEAA@HH@Z
??1CWStringArray@@QEAA@XZ
?Add@CWStringArray@@QEAAHPEBG@Z
?Report@CEventLog@@QEAAHGAEBU_EVENT_DESCRIPTOR@@VCInsertionString@@111111111@Z
?IsOffline@CWbemInstallObject@@SA_NXZ
?GetRegistryPathCIMOM@CWbemInstallObject@@SAPEBGXZ
?CoCreateInstance@CWbemInstallObject@@SAJAEBU_GUID@@PEAUIUnknown@@K0PEAPEAX@Z
??0CFlexQueue@@QEAA@H@Z
??1CFlexQueue@@QEAA@XZ
?Enqueue@CFlexQueue@@QEAA_NPEAX@Z
?Dequeue@CFlexQueue@@QEAAPEAXXZ
??0WString2@@QEAA@XZ
??0WString2@@QEAA@PEBG@Z
??4WString2@@QEAAAEAV0@PEBG@Z
??1WString2@@QEAA@XZ
??YWString2@@QEAAAEAV0@PEBG@Z
?Empty@WString2@@QEAAXXZ
??0CCheckedInCritSec@@QEAA@PEAVCCritSec@@@Z
??1CCheckedInCritSec@@QEAA@XZ
?Leave@CCheckedInCritSec@@QEAAXXZ
?InsertAt@CFlexArray@@QEAAHHPEAX@Z
?Empty@CFlexArray@@QEAAXXZ
??0CStaticCritSec@@QEAA@XZ
??1CStaticCritSec@@QEAA@XZ
??0CCritSec@@QEAA@XZ
??1CCritSec@@QEAA@XZ
?Enter@CCritSec@@QEAAXXZ
?Leave@CCritSec@@QEAAXXZ
??0CInCritSec@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z
??1CInCritSec@@QEAA@XZ
?Add@CFlexArray@@QEAAHPEAX@Z
?Size@CFlexArray@@QEBAHXZ
??0CFlexArray@@QEAA@HH@Z
??1CFlexArray@@QEAA@XZ
??ACFlexArray@@QEAAAEAPEAXH@Z
?RemoveAt@CFlexArray@@QEAAHH@Z
GetMemLogObject
?Write@CMemoryLog@@QEAAXJ@Z
?SetFailure@CStaticCritSec@@SAXXZ
??0WString@@QEAA@PEBG@Z
??0WString@@QEAA@PEAGH@Z

fastprox

?ValidateRange@CWbemObject@@QEAAHPEAPEAG@Z
?SetDecoration@CWbemObject@@UEAAJPEBG0@Z
?RemoveDecoration@CWbemObject@@UEAAJXZ
?CompareClassParts@CWbemObject@@UEAAJPEAUIWbemClassObject@@J@Z
?GetKeyString@CWbemObject@@UEAAJJPEAPEAG@Z
?GetNormalizedPath@CWbemObject@@UEAAJJPEAPEAG@Z
?BeginEnumerationEx@CWbemObject@@UEAAJJJ@Z
?CIMTYPEToVARTYPE@CWbemObject@@UEAAJJPEAG@Z
?ValidateObject@CWbemObject@@UEAAJJ@Z
?GetParentClassFromBlob@CWbemObject@@UEAAJJKPEAXPEAPEAG@Z
?IsDynamic@CWbemClass@@QEAAHXZ
?IsAbstract@CWbemClass@@QEAAHXZ
?IsAmendment@CWbemClass@@QEAAHXZ
?SetObjectMemory@CWbemObject@@UEAAJPEAXK@Z
?QueryPartInfo@CWbemObject@@UEAAJPEAK@Z
?_GetCoreInfo@CWbemObject@@UEAAJJPEAPEAX@Z
?MergeAmended@CWbemObject@@UEAAJJPEAU_IWmiObject@@@Z
?QueryPropertyFlags@CWbemObject@@UEAAJJPEBG_KPEA_K@Z
?SetObjectFlags@CWbemObject@@UEAAJJ_K0@Z
?QueryObjectFlags@CWbemObject@@UEAAJJ_KPEA_K@Z
?SetMethodQual@CWbemObject@@UEAAJPEBG0JKKJKPEAX@Z
?GetMethodQual@CWbemObject@@UEAAJPEBG0JKPEAJPEAK2PEAX@Z
?SetPropQual@CWbemObject@@UEAAJPEBG0JKKJKPEAX@Z
?GetPropQual@CWbemObject@@UEAAJPEBG0JKPEAJPEAK2PEAX@Z
?SetObjQual@CWbemObject@@UEAAJPEBGJKKJKPEAX@Z
?GetObjQual@CWbemObject@@UEAAJPEBGJKPEAJPEAK2PEAX@Z
?WriteProp@CWbemObject@@UEAAJPEBGJKKJPEAX@Z
?ReadProp@CWbemObject@@UEAAJPEBGJKPEAJ1PEAHPEAKPEAX@Z
?AppendArrayPropRangeByHandle@CWbemObject@@UEAAJJJKKPEAX@Z
?RemoveArrayPropRangeByHandle@CWbemObject@@UEAAJJJKK@Z
?SetArrayPropRangeByHandle@CWbemObject@@UEAAJJJKKKPEAX@Z
?GetArrayPropRangeByHandle@CWbemObject@@UEAAJJJKKKPEAK0PEAX@Z
?RemoveArrayPropElementByHandle@CWbemObject@@UEAAJJJK@Z
?SetArrayPropElementByHandle@CWbemObject@@UEAAJJJKKPEAX@Z
?GetArrayPropElementByHandle@CWbemObject@@UEAAJJJKPEAK0PEAPEAX@Z
?GetArrayPropAddrByHandle@CWbemObject@@UEAAJJJPEAKPEAPEAX@Z
?GetArrayPropInfoByHandle@CWbemObject@@UEAAJJJPEAPEAGPEAJPEAK@Z
?GetPropAddrByHandle@CWbemObject@@UEAAJJJPEAKPEAPEAX@Z
?SetPropByHandle@CWbemObject@@UEAAJJJKPEAX@Z
?GetPropertyHandleEx@CWbemObject@@UEAAJPEBGJPEAJ1@Z
?Unlock@CWbemObject@@UEAAJJ@Z
?Lock@CWbemObject@@UEAAJJ@Z
?GetPropertyInfoByHandle@CWbemObject@@UEAAJJPEAPEAGPEAJ@Z
?WriteQWORD@CWbemObject@@UEAAJJ_K@Z
?ReadQWORD@CWbemObject@@UEAAJJPEA_K@Z
?WriteDWORD@CWbemObject@@UEAAJJK@Z
?ReadDWORD@CWbemObject@@UEAAJJPEAK@Z
?ReadPropertyValue@CWbemObject@@UEAAJJJPEAJPEAE@Z
?WritePropertyValue@CWbemObject@@UEAAJJJPEBE@Z
?GetPropertyHandle@CWbemObject@@UEAAJPEBGPEAJ1@Z
?SetServerNamespace@CWbemObject@@UEAAJPEBG0@Z
?GetSource@CWbemObject@@UEAAJPEAPEAG@Z
?GetHelpFile@CWbemObject@@UEAAJPEAPEAG@Z
?GetHelpContext@CWbemObject@@UEAAJPEAK@Z
?GetGUID@CWbemObject@@UEAAJPEAU_GUID@@@Z
?GetDescription@CWbemObject@@UEAAJPEAPEAG@Z
?DisconnectObject@CWbemObject@@UEAAJK@Z
?ReleaseMarshalData@CWbemObject@@UEAAJPEAUIStream@@@Z
?UnmarshalInterface@CWbemObject@@UEAAJPEAUIStream@@AEBU_GUID@@PEAPEAX@Z
?MarshalInterface@CWbemObject@@UEAAJPEAUIStream@@AEBU_GUID@@PEAXK2K@Z
?GetMarshalSizeMax@CWbemObject@@UEAAJAEBU_GUID@@PEAXK1KPEAK@Z
?GetUnmarshalClass@CWbemObject@@UEAAJAEBU_GUID@@PEAXK1KPEAU2@@Z
?GetPropertyValue@CWbemObject@@UEAAJPEAU_tag_WbemPropertyName@@JPEAPEAGPEAUtagVARIANT@@@Z
?InheritsFrom@CWbemObject@@UEAAJPEBG@Z
?GetPropertyOrigin@CWbemObject@@UEAAJPEBGPEAPEAG@Z
?CompareTo@CWbemObject@@UEAAJJPEAUIWbemClassObject@@@Z
?EndEnumeration@CWbemObject@@UEAAJXZ
?Next@CWbemObject@@UEAAJJPEAPEAGPEAUtagVARIANT@@PEAJ2@Z
?BeginEnumeration@CWbemObject@@UEAAJJ@Z
?GetNames@CWbemObject@@UEAAJPEBGJPEAUtagVARIANT@@PEAPEAUtagSAFEARRAY@@@Z
?Get@CWbemObject@@UEAAJPEBGJPEAUtagVARIANT@@PEAJ2@Z
?Release@CWbemObject@@UEAAKXZ
?AddRef@CWbemObject@@UEAAKXZ
?QueryInterface@CWbemObject@@UEAAJAEBU_GUID@@PEAPEAX@Z
?GetKeyOrigin@CWbemObject@@UEAAJJKPEAKPEAG@Z
?GetDerivation@CWbemObject@@UEAAJJKPEAK0PEAG@Z
?FindMethod@CWbemObject@@UEAAJPEBG@Z
?Unmerge@CWbemObject@@UEAAJJKPEAKPEAX@Z
?GetMaxMarshalStreamSize@CWbemObject@@UEAAJPEAK@Z
?WriteToStream@CWbemObject@@UEAAJPEAUIStream@@@Z
?MergeAndDecorate@CWbemClass@@UEAAJJKPEAXPEAG1PEAPEAU_IWmiObject@@@Z
?CloneAndDecorate@CWbemClass@@UEAAJJPEAG0PEAPEAUIWbemClassObject@@@Z
?GetParentClassFromBlob@CWbemClass@@UEAAJJKPEAXPEAPEAG@Z
?SpawnKeyedInstance@CWbemClass@@UEAAJJPEBGPEAPEAU_IWmiObject@@@Z
?Upgrade@CWbemClass@@UEAAJPEAU_IWmiObject@@JPEAPEAU2@@Z
?MakeSubsetInst@CWbemClass@@UEAAJPEAU_IWmiObject@@PEAPEAU2@@Z
?GetClassSubset@CWbemClass@@UEAAJKPEAPEBGPEAPEAU_IWmiObject@@@Z
?CompareDerivedMostClass@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z
?IsParentClass@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z
?CopyInstanceData@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z
?CloneEx@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z
?SetMethodOrigin@CWbemClass@@UEAAJPEBGJ@Z
?SetPropertyOrigin@CWbemClass@@UEAAJPEBGJ@Z
?SetInheritanceChain@CWbemClass@@UEAAJJPEAPEAG@Z
?GetMethodOrigin@CWbemClass@@UEAAJPEBGPEAPEAG@Z
?GetMethodQualifierSet@CWbemClass@@UEAAJPEBGPEAPEAUIWbemQualifierSet@@@Z
?EndMethodEnumeration@CWbemClass@@UEAAJXZ
?NextMethod@CWbemClass@@UEAAJJPEAPEAGPEAPEAUIWbemClassObject@@1@Z
?BeginMethodEnumeration@CWbemClass@@UEAAJJ@Z
?DeleteMethod@CWbemClass@@UEAAJPEBG@Z
?PutMethod@CWbemClass@@UEAAJPEBGJPEAUIWbemClassObject@@1@Z
?GetMethod@CWbemClass@@UEAAJPEBGJPEAPEAUIWbemClassObject@@1@Z
?CompareTo@CWbemClass@@UEAAJJPEAUIWbemClassObject@@@Z
?SpawnInstance@CWbemClass@@UEAAJJPEAPEAUIWbemClassObject@@@Z
?SpawnDerivedClass@CWbemClass@@UEAAJJPEAPEAUIWbemClassObject@@@Z
?GetObjectText@CWbemClass@@UEAAJJPEAPEAG@Z
?Clone@CWbemClass@@UEAAJPEAPEAUIWbemClassObject@@@Z
?GetPropertyQualifierSet@CWbemClass@@UEAAJPEBGPEAPEAUIWbemQualifierSet@@@Z
?Delete@CWbemClass@@UEAAJPEBG@Z
?Put@CWbemClass@@UEAAJPEBGJPEAUtagVARIANT@@J@Z
?GetQualifierSet@CWbemClass@@UEAAJPEAPEAUIWbemQualifierSet@@@Z
?GetDynasty@CWbemClass@@UEAAJPEAVCVar@@@Z
?ReconcileWith@CWbemClass@@UEAAJJPEAU_IWmiObject@@@Z
?Update@CWbemClass@@UEAAJPEAU_IWmiObject@@JPEAPEAU2@@Z
?Merge@CWbemClass@@UEAAJJKPEAXPEAPEAU_IWmiObject@@@Z
?Unmerge@CWbemClass@@UEAAJPEAEHPEAK@Z
?EstimateUnmergeSpace@CWbemClass@@UEAAKXZ
?CopyBlobOf@CWbemClass@@UEAAJPEAVCWbemObject@@@Z
?CompactAll@CWbemClass@@UEAAXXZ
?IsValidObj@CWbemClass@@UEAAJXZ
?GetRelPath@CWbemClass@@UEAAPEAGH@Z
?Undecorate@CWbemClass@@UEAAXXZ
?Decorate@CWbemClass@@UEAAJPEBG0@Z
?SetLocalized@CWbemClass@@UEAAXH@Z
?IsLocalized@CWbemClass@@UEAAHXZ
?SetPropQualifier@CWbemClass@@UEAAJPEBG0JPEAVCVar@@@Z
?SetPropQualifier@CWbemClass@@UEAAJPEBG0JPEAVCTypedValue@@@Z
?GetPropertyType@CWbemClass@@UEAAJPEBGPEAJ1@Z
?GetPropertyType@CWbemClass@@UEAAJPEAVCPropertyInformation@@PEAJ1@Z
?FindMethod@CWbemClass@@UEAAJPEBG@Z
?SetMethodQualifier@CWbemClass@@UEAAJPEBG0JPEAVCVar@@@Z
?SetMethodQualifier@CWbemClass@@UEAAJPEBG0JPEAVCTypedValue@@@Z
?GetMethodQualifier@CWbemClass@@UEAAJPEBG0PEAVCVar@@PEAJ2@Z
?GetMethodQualifier@CWbemClass@@UEAAJPEBG0PEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z
?GetPropQualifier@CWbemClass@@UEAAJPEBG0PEAVCVar@@PEAJ2@Z
?GetPropQualifier@CWbemClass@@UEAAJPEAVCPropertyInformation@@PEBGPEAVCVar@@PEAJ3@Z
?GetPropQualifier@CWbemClass@@UEAAJPEBG0PEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z
?GetPropQualifier@CWbemClass@@UEAAJPEAVCPropertyInformation@@PEBGPEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z
?SetQualifier@CWbemClass@@UEAAJPEBGPEAVCVar@@J@Z
?SetQualifier@CWbemClass@@UEAAJPEBGJPEAVCTypedValue@@@Z
?GetQualifier@CWbemClass@@UEAAJPEBGPEAVCVar@@PEAJ2@Z
?GetQualifier@CWbemClass@@UEAAJPEBGPEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z
?SetPropValue@CWbemClass@@UEAAJPEBGPEAVCVar@@J@Z
?GetProperty@CWbemClass@@UEAAJPEBGPEAVCVar@@@Z
?SetData@CWbemClass@@UEAAXPEAEH@Z
??1CWbemClass@@UEAA@XZ
?MergeAndDecorate@CWbemInstance@@UEAAJJKPEAXPEAG1PEAPEAU_IWmiObject@@@Z
?CloneAndDecorate@CWbemInstance@@UEAAJJPEAG0PEAPEAUIWbemClassObject@@@Z
?SpawnKeyedInstance@CWbemInstance@@UEAAJJPEBGPEAPEAU_IWmiObject@@@Z
?Update@CWbemInstance@@UEAAJPEAU_IWmiObject@@JPEAPEAU2@@Z
?Upgrade@CWbemInstance@@UEAAJPEAU_IWmiObject@@JPEAPEAU2@@Z
?ReconcileWith@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z
?Merge@CWbemInstance@@UEAAJJKPEAXPEAPEAU_IWmiObject@@@Z
?MakeSubsetInst@CWbemInstance@@UEAAJPEAU_IWmiObject@@PEAPEAU2@@Z
?GetClassSubset@CWbemInstance@@UEAAJKPEAPEBGPEAPEAU_IWmiObject@@@Z
?CompareDerivedMostClass@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z
?IsParentClass@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z
?CopyInstanceData@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z
?CloneEx@CWbemInstance@@UEAAJJPEAU_IWmiObject@@@Z
?ClearWriteOnlyProperties@CWbemInstance@@UEAAJXZ
?MergeClassPart@CWbemInstance@@UEAAJPEAUIWbemClassObject@@@Z
?SetClassPart@CWbemInstance@@UEAAJPEAXK@Z
?StripClassPart@CWbemInstance@@UEAAJXZ
?GetObjectParts@CWbemInstance@@UEAAJPEAXKKPEAK@Z
?SetObjectParts@CWbemInstance@@UEAAJPEAXKK@Z
?SpawnInstance@CWbemInstance@@UEAAJJPEAPEAUIWbemClassObject@@@Z
?SpawnDerivedClass@CWbemInstance@@UEAAJJPEAPEAUIWbemClassObject@@@Z
?GetObjectText@CWbemInstance@@UEAAJJPEAPEAG@Z
?Clone@CWbemInstance@@UEAAJPEAPEAUIWbemClassObject@@@Z
?GetPropertyQualifierSet@CWbemInstance@@UEAAJPEBGPEAPEAUIWbemQualifierSet@@@Z
?Delete@CWbemInstance@@UEAAJPEBG@Z
?Put@CWbemInstance@@UEAAJPEBGJPEAUtagVARIANT@@J@Z
?GetQualifierSet@CWbemInstance@@UEAAJPEAPEAUIWbemQualifierSet@@@Z
?ExtendInstancePartSpace@CWbemInstance@@UEAAHPEAVCInstancePart@@K@Z
?GetDynasty@CWbemInstance@@UEAAJPEAVCVar@@@Z
?Unmerge@CWbemInstance@@UEAAJPEAEHPEAK@Z
?CopyBlobOf@CWbemInstance@@UEAAJPEAVCWbemObject@@@Z
?IsValidObj@CWbemInstance@@UEAAJXZ
?GetRelPath@CWbemInstance@@UEAAPEAGH@Z
?Undecorate@CWbemInstance@@UEAAXXZ
?Decorate@CWbemInstance@@UEAAJPEBG0@Z
?SetLocalized@CWbemInstance@@UEAAXH@Z
?IsLocalized@CWbemInstance@@UEAAHXZ
?SetMethodQualifier@CWbemInstance@@UEAAJPEBG0JPEAVCVar@@@Z
?SetMethodQualifier@CWbemInstance@@UEAAJPEBG0JPEAVCTypedValue@@@Z
?GetMethodQualifier@CWbemInstance@@UEAAJPEBG0PEAVCVar@@PEAJ2@Z
?GetMethodQualifier@CWbemInstance@@UEAAJPEBG0PEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z
?SetPropQualifier@CWbemInstance@@UEAAJPEBG0JPEAVCVar@@@Z
?SetPropQualifier@CWbemInstance@@UEAAJPEBG0JPEAVCTypedValue@@@Z
?GetPropQualifier@CWbemInstance@@UEAAJPEAVCPropertyInformation@@PEBGPEAVCVar@@PEAJ3@Z
?GetPropQualifier@CWbemInstance@@UEAAJPEAVCPropertyInformation@@PEBGPEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z
?SetPropValue@CWbemInstance@@UEAAJPEBGPEAVCVar@@J@Z
?GetPropertyType@CWbemInstance@@UEAAJPEBGPEAJ1@Z
?GetPropertyType@CWbemInstance@@UEAAJPEAVCPropertyInformation@@PEAJ1@Z
?GetClassPart@CWbemInstance@@UEAAJPEAXKPEAK@Z
?GetMaxMarshalStreamSize@CWbemInstance@@UEAAJPEAK@Z
?WriteToStream@CWbemInstance@@UEAAJPEAUIStream@@@Z
?SetData@CWbemInstance@@UEAAXPEAEH@Z
??1CWbemInstance@@UEAA@XZ
??0CWbemInstance@@QEAA@XZ
?SetMethodOrigin@CWbemInstance@@UEAAJPEBGJ@Z
?SetPropertyOrigin@CWbemInstance@@UEAAJPEBGJ@Z
?SetInheritanceChain@CWbemInstance@@UEAAJJPEAPEAG@Z
?GetMethodOrigin@CWbemInstance@@UEAAJPEBGPEAPEAG@Z
?GetMethodQualifierSet@CWbemInstance@@UEAAJPEBGPEAPEAUIWbemQualifierSet@@@Z
?EndMethodEnumeration@CWbemInstance@@UEAAJXZ
?NextMethod@CWbemInstance@@UEAAJJPEAPEAGPEAPEAUIWbemClassObject@@1@Z
?BeginMethodEnumeration@CWbemInstance@@UEAAJJ@Z
?DeleteMethod@CWbemInstance@@UEAAJPEBG@Z
?PutMethod@CWbemInstance@@UEAAJPEBGJPEAUIWbemClassObject@@1@Z
?GetMethod@CWbemInstance@@UEAAJPEBGJPEAPEAUIWbemClassObject@@1@Z
?ClearCachedKeyValue@CWbemInstance@@UEAAXXZ
?GetInstanceObjectUnknown@CWbemInstance@@UEAAPEAUIUnknown@@XZ
?GetWbemObjectUnknown@CWbemInstance@@UEAAPEAUIUnknown@@XZ
?ReduceInstancePartSpace@CWbemInstance@@UEAAXPEAVCInstancePart@@K@Z
?ReduceClassPartSpace@CWbemInstance@@UEAAXPEAVCClassPart@@K@Z
?ExtendClassPartSpace@CWbemInstance@@UEAAHPEAVCClassPart@@K@Z
?GetKeyOrigin@CWbemInstance@@UEAAJAEAVWString@@@Z
?GetKeyProps@CWbemInstance@@UEAAHAEAVCWStringArray@@@Z
?GetIndexedProps@CWbemInstance@@UEAAHAEAVCWStringArray@@@Z
?GetGenus@CWbemInstance@@UEAAJPEAVCVar@@@Z
?GetPropertyCount@CWbemInstance@@UEAAJPEAVCVar@@@Z
?GetSuperclassName@CWbemInstance@@UEAAJPEAVCVar@@@Z
?GetClassNameW@CWbemInstance@@UEAAJPEAVCVar@@@Z
?EstimateUnmergeSpace@CWbemInstance@@UEAAKXZ
?CompactAll@CWbemInstance@@UEAAXXZ
?IsKeyed@CWbemInstance@@UEAAHXZ
?GetPropName@CWbemInstance@@UEAAJHPEAVCVar@@@Z
?GetNumProperties@CWbemInstance@@UEAAHXZ
?GetPropQualifier@CWbemInstance@@UEAAJPEBG0PEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z
?GetPropQualifier@CWbemInstance@@UEAAJPEBG0PEAVCVar@@PEAJ2@Z
?SetQualifier@CWbemInstance@@UEAAJPEBGJPEAVCTypedValue@@@Z
?SetQualifier@CWbemInstance@@UEAAJPEBGPEAVCVar@@J@Z
?GetQualifier@CWbemInstance@@UEAAJPEBGPEAJPEAVCTypedValue@@PEAPEAVCFastHeap@@H@Z
?GetQualifier@CWbemInstance@@UEAAJPEBGPEAVCVar@@PEAJ2@Z
?GetProperty@CWbemInstance@@UEAAJPEBGPEAVCVar@@@Z
?GetClassPart@CWbemInstance@@MEAAPEAVCClassPart@@XZ
?GetProperty@CWbemInstance@@MEAAJPEAVCPropertyInformation@@PEAVCVar@@@Z
?GetBlockLength@CWbemInstance@@MEAAKXZ
?ClearWriteOnlyProperties@CWbemClass@@UEAAJXZ
?MergeClassPart@CWbemClass@@UEAAJPEAUIWbemClassObject@@@Z
?SetClassPart@CWbemClass@@UEAAJPEAXK@Z
?GetClassPart@CWbemClass@@UEAAJPEAXKPEAK@Z
?StripClassPart@CWbemClass@@UEAAJXZ
?GetObjectParts@CWbemClass@@UEAAJPEAXKKPEAK@Z
?SetObjectParts@CWbemClass@@UEAAJPEAXKK@Z
?GetKeyOrigin@CWbemClass@@UEAAJAEAVWString@@@Z
?GetKeyProps@CWbemClass@@UEAAHAEAVCWStringArray@@@Z
?GetIndexedProps@CWbemClass@@UEAAHAEAVCWStringArray@@@Z
?GetGenus@CWbemClass@@UEAAJPEAVCVar@@@Z
?GetPropertyCount@CWbemClass@@UEAAJPEAVCVar@@@Z
?InitNew@CWbemInstance@@QEAAJPEAVCWbemClass@@HPEAVCDecorationPart@@@Z
?CreateDerivedClass@CWbemClass@@QEAAJPEAV1@HPEAVCDecorationPart@@@Z
WbemStringCopy
?GetVARTYPE@CType@@SAGK@Z
?CompactClass@CWbemInstance@@QEAAXXZ
?GetLimitedVersion@CWbemInstance@@QEAAJPEAVCLimitationMapping@@PEAPEAV1@@Z
?DeleteProperty@CWbemInstance@@QEAAJH@Z
WbemStringFree
?AsymmetricMerge@CWbemInstance@@SAJPEAV1@0@Z
?GetSystemPropertyByName@CWbemObject@@QEAAJPEBGPEAVCVar@@@Z
?IsLimited@CWbemObject@@QEAAHXZ
?IsClientOnly@CWbemObject@@QEAAHXZ
?GetNonsystemPropertyValue@CWbemInstance@@QEAAJPEBGPEAVCVar@@@Z
?PlugKeyHoles@CWbemInstance@@QEAAJXZ
?IsInstanceOf@CWbemInstance@@QEAAHPEAVCWbemClass@@@Z
?ConvertToClass@CWbemInstance@@QEAAJPEAVCWbemClass@@PEAPEAV1@@Z
?InitEmpty@CWbemClass@@QEAAJHH@Z
?GetDerivation@CWbemObject@@QEAAJPEAVCVar@@@Z
?GetObjectMemory@CWbemObject@@UEAAJPEAXKPEAK@Z
?IsIllegalDerivedClass@CSystemProperties@@SAHPEBG@Z
??0CLimitationMapping@@QEAA@XZ
??1CLimitationMapping@@QEAA@XZ
?MapLimitation@CWbemClass@@QEAAHJPEAVCWStringArray@@PEAVCLimitationMapping@@@Z
?FindLimitationError@CWbemClass@@QEAA?AVWString@@JPEAVCWStringArray@@@Z
?GetLimitedVersion@CWbemClass@@QEAAJPEAVCLimitationMapping@@PEAPEAV1@@Z
?IsInstance@CWbemObject@@QEAAHXZ
?IsObjectInstance@CWbemObject@@UEAAJXZ
??0CWbemClass@@QEAA@XZ
?GetProperty@CWbemClass@@MEAAJPEAVCPropertyInformation@@PEAVCVar@@@Z
?GetBlockLength@CWbemClass@@MEAAKXZ
?GetClassPart@CWbemClass@@MEAAPEAVCClassPart@@XZ
?GetNumProperties@CWbemClass@@UEAAHXZ
?GetPropName@CWbemClass@@UEAAJHPEAVCVar@@@Z
?IsKeyed@CWbemClass@@UEAAHXZ
?GetClassNameW@CWbemClass@@UEAAJPEAVCVar@@@Z
?GetSuperclassName@CWbemClass@@UEAAJPEAVCVar@@@Z

esscli

??1CStandardMetaData@@UEAA@XZ
??0CStandardMetaData@@QEAA@PEAUIWbemServices@@@Z
?GetNecessaryQueryForClass@CQueryAnalyser@@SAJPEAUQL_LEVEL_1_RPN_EXPRESSION@@PEAUIWbemClassObject@@AEAVCWStringArray@@AEAPEAU2@@Z
??1CContextMetaData@@QEAA@XZ
??0CContextMetaData@@QEAA@PEAVCMetaData@@PEAUIWbemContext@@@Z
?SimplifyQueryForChild@CQueryAnalyser@@SAJPEAUQL_LEVEL_1_RPN_EXPRESSION@@PEBGPEAUIWbemClassObject@@PEAVCContextMetaData@@AEAPEAU2@@Z

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Reinitialize
Shutdown

Sections

.text
Size: 971KB - Virtual size: 970KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 875KB - Virtual size: 875KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
python-3.11.2-amd64/pres/ind/app/ProvProvider.dll
.dll regsvr32 windows x64

91712e8ec3be030741115542b96aa566

Code Sign

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:ed
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:29

Not After

02-12-2021 21:29

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c3:46:2f:48:ba:bf:db:dd:92:74:0d:b0:38:04:52:3c:c9:9f:ca:37:e5:8b:e8:27:2d:c9:db:29:a7:d6:aa:70
Signer

Actual PE Digest

c3:46:2f:48:ba:bf:db:dd:92:74:0d:b0:38:04:52:3c:c9:9f:ca:37:e5:8b:e8:27:2d:c9:db:29:a7:d6:aa:70

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

07-02-2023 20:40
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

msvcrt

_vsnwprintf
_wcsicmp
memcmp
memcpy
wcschr
_wcsnicmp
strcpy_s
qsort
_wcsrev
_wcslwr
_strnicmp
wcsncmp
iswalpha
strncpy_s
_wcstoi64
_wtoi
towupper
_vsnprintf_s
iswspace
towlower
swscanf_s
__RTDynamicCast
memmove
_errno
_onexit
__dllonexit
_unlock
_lock
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
_initterm
_amsg_exit
_XcptFilter
_CxxThrowException
_callnewh
??0exception@@QEAA@AEBQEBDH@Z
wcsstr
_wcslwr_s
malloc
wcsncpy_s
wcscat_s
wcscpy_s
_purecall
vswprintf_s
_vscwprintf
??0exception@@QEAA@XZ
memmove_s
??0exception@@QEAA@AEBQEBD@Z
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
memcpy_s
??0exception@@QEAA@AEBV0@@Z
free
__C_specific_handler
_vsnwprintf_s
wcstoul
wcstok_s
wcsrchr
__CxxFrameHandler3
memset

advapi32

LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetSecurityDescriptorDacl
GetSecurityDescriptorSacl
GetSecurityDescriptorControl
GetSecurityDescriptorLength
GetAclInformation
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegQueryInfoKeyW
RegCreateKeyExW
RegGetValueW
RegSetValueExW
GetSecurityInfo
OpenEncryptedFileRawW
WriteEncryptedFileRaw
CloseEncryptedFileRaw
RevertToSelf
ReadEncryptedFileRaw

kernel32

CopyFileW
SizeofResource
LockResource
LoadResource
FindResourceExW
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
HeapDestroy
GetEnvironmentVariableW
WideCharToMultiByte
RaiseException
Sleep
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
OutputDebugStringW
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
GetVersionExW
SearchPathW
SetThreadLocale
GetThreadLocale
DisableThreadLibraryCalls
InitializeCriticalSection
GetModuleFileNameW
GetCurrentProcessId
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
MultiByteToWideChar
GetSystemInfo
GetHandleInformation
SetFilePointerEx
SetEndOfFile
GetOverlappedResult
SetFilePointer
SetThreadIdealProcessor
GetVolumeInformationW
InitializeCriticalSectionAndSpinCount
SetThreadUILanguage
GetModuleHandleW
LoadLibraryExW
GetProcAddress
CompareStringW
OutputDebugStringA
GetLastError
LockFileEx
UnlockFileEx
OpenProcess
GetPrivateProfileSectionW
WaitForMultipleObjects
GetVolumeInformationByHandleW
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForMultipleObjectsEx
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
LoadLibraryW
GetVolumePathNamesForVolumeNameW
GetFileInformationByHandleEx
FindFirstFileW
SetLastError
FindNextFileW
DeviceIoControl
GetTempPathW
FindClose
CreateFileW
GetFileAttributesW
SetFileAttributesW
GetFileInformationByHandle
SetFileInformationByHandle
DeleteFileW
CloseHandle
CopyFileExW
FlushFileBuffers
GetFileSizeEx
WaitForSingleObject
GetCurrentDirectoryW
FreeLibrary
CreateDirectoryW
GetFullPathNameW
GetLongPathNameW
GetFinalPathNameByHandleW
GetVolumePathNameW
GetVolumeNameForVolumeMountPointW
ExpandEnvironmentStringsW
FormatMessageW
SetEvent
CreateThread
ResetEvent
LocalFree
GetModuleFileNameA
CreateSemaphoreExW
ReleaseSemaphore
GetModuleHandleExW
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
CreateMutexExW
DebugBreak
IsDebuggerPresent
ReadFile
WriteFile
RemoveDirectoryW
LocalAlloc
GetCurrentThread
DuplicateHandle
CreateEventW

ole32

CoCreateGuid
CoCreateInstance
StringFromGUID2

user32

CharLowerBuffW
CharUpperW
CharNextW

oleaut32

VarBstrCmp
SysAllocStringLen
UnRegisterTypeLi
SysFreeString
SysStringByteLen
SysAllocStringByteLen
RegisterTypeLi
VariantClear
SysAllocString
SysStringLen
LoadRegTypeLi
LoadTypeLi

profapi

ord104

ntdll

RtlFindAceByType
NtSetSecurityObject
RtlDosPathNameToNtPathName_U
NtOpenFile
NtQueryDirectoryFile
NtClose
NtQueryInformationFile
NtQueryInformationProcess
NtQueryEaFile
NtCreateFile
NtSetEaFile
RtlImpersonateSelf
RtlAdjustPrivilege
RtlInitializeResource
RtlAcquireResourceExclusive
RtlSetControlSecurityDescriptor
RtlReleaseResource
RtlDeleteResource
RtlReAllocateHeap
RtlRaiseStatus
NtYieldExecution
DbgPrintEx
RtlAcquireResourceShared
RtlFreeHeap
RtlAllocateHeap
RtlNtStatusToDosError
NtSetInformationFile

xmllite

CreateXmlWriter
CreateXmlReader

bcrypt

BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptCreateHash
BCryptHashData
BCryptGetProperty
BCryptOpenAlgorithmProvider
BCryptFinishHash

cabinet

ord22
ord23
ord20

rpcrt4

RpcStringFreeW
UuidToStringW
UuidCreate

Exports

Exports

DLLGetDISMProviderCLSID
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 554KB - Virtual size: 553KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
python-3.11.2-amd64/pres/ind/app/TransmogProvider.dll
.dll regsvr32 windows x64

ff3ad3f4c457aeab897f502575405525

Code Sign

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05-05-2022 19:23

Not After

04-05-2023 19:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:7e:3f:e4:c2:79:42:53:f2:7a:b0:8e:a8:de:9c:a6:f2:30:7c:12:6c:a8:85:b8:57:94:bf:d1:05:09:7a:8e
Signer

Actual PE Digest

0c:7e:3f:e4:c2:79:42:53:f2:7a:b0:8e:a8:de:9c:a6:f2:30:7c:12:6c:a8:85:b8:57:94:bf:d1:05:09:7a:8e

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

07-02-2023 20:40
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

msvcrt

iswspace
wcstoul
??0exception@@QEAA@XZ
_wcsnicmp
wcschr
_wcsicmp
bsearch
strncmp
_snprintf_s
_CxxThrowException
wcsrchr
__RTDynamicCast
memcmp
memcpy
memmove
??1type_info@@UEAA@XZ
_onexit
__dllonexit
_unlock
_lock
?terminate@@YAXXZ
realloc
_errno
_initterm
_amsg_exit
_XcptFilter
memmove_s
wcscat_s
_vsnwprintf
wcsstr
??0exception@@QEAA@AEBQEBD@Z
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBV0@@Z
wcscpy_s
wcsncpy_s
malloc
free
_vscwprintf
_purecall
vswprintf_s
memcpy_s
__C_specific_handler
__CxxFrameHandler3
memset

ntdll

RtlCreateUnicodeStringFromAsciiz
NtQueryValueKey
DbgPrint
RtlQueryEnvironmentVariable_U
LdrLoadDll
RtlDosPathNameToNtPathName_U
LdrUnloadDll
LdrGetDllHandle
NtOpenKey
LdrGetProcedureAddress
RtlLeaveCriticalSection
RtlInitializeCriticalSection
RtlDeleteCriticalSection
RtlTimeToTimeFields
RtlHashUnicodeString
NtYieldExecution
RtlRaiseStatus
NtQueryPerformanceCounter
NtOpenFile
NtWaitForSingleObject
NtCreateFile
NtQueryInformationFile
RtlExpandEnvironmentStrings
NtClose
RtlReAllocateHeap
NtReadFile
RtlInitUnicodeString
NtWriteFile
RtlEnterCriticalSection
RtlNtStatusToDosError
NtSetInformationFile
RtlDosPathNameToNtPathName_U_WithStatus
RtlFreeHeap
RtlAllocateHeap
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

advapi32

RegDeleteKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
UnregisterTraceGuids
RegisterTraceGuidsW
RegUnLoadKeyW
RegLoadKeyW
RegQueryValueExW
RegCloseKey
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptReleaseContext
GetTraceLoggerHandle
GetTraceEnableFlags
GetTraceEnableLevel
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
RegQueryInfoKeyW

kernel32

SetLastError
GetFullPathNameW
GetFileAttributesW
SizeofResource
HeapFree
EnterCriticalSection
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetCurrentThreadId
MultiByteToWideChar
GetLastError
RaiseException
FindResourceExW
LoadResource
HeapAlloc
GetProcAddress
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
FreeLibrary
lstrcmpiW
LoadLibraryExW
LocalFree
CompareStringW
OutputDebugStringW
SetThreadUILanguage
LoadLibraryW
GetPrivateProfileIntW
CreateFileW
CloseHandle
GetLongPathNameW
CreateThread
WaitForSingleObject
GetExitCodeThread
DisableThreadLibraryCalls
GetThreadLocale
SetThreadLocale
HeapSize
HeapReAlloc
HeapDestroy
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
OutputDebugStringA
GetFinalPathNameByHandleW
GetCurrentDirectoryW
GetSystemWindowsDirectoryW
LocalAlloc
GetUserDefaultUILanguage
GetLocaleInfoW
LockResource
LCMapStringEx
CompareStringOrdinal
SearchPathW
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
GetVersionExW
CopyFileExW
SetFileInformationByHandle
GetFileInformationByHandle
GetFileInformationByHandleEx
DeleteFileW
SetFileAttributesW
FindFirstFileW
FindNextFileW
DeviceIoControl
CopyFileW
FindClose
FormatMessageW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
StringFromGUID2
CoCreateInstance
ProgIDFromCLSID

oleaut32

VariantClear
SetErrorInfo
CreateErrorInfo
VarBstrCmp
UnRegisterTypeLi
RegisterTypeLi
SysStringByteLen
LoadRegTypeLi
LoadTypeLi
SysFreeString
SysAllocStringLen
VarUI4FromStr
SysStringLen
SysAllocString
SysAllocStringByteLen

user32

CharNextW
UnregisterClassA
CharLowerBuffW
LoadStringW

rpcrt4

UuidCreate
RpcStringFreeW
UuidToStringW

setupapi

SetupCloseInfFile
SetupGetIntField
SetupFindFirstLineW
SetupFindNextLine
SetupGetStringFieldW
SetupOpenInfFileW

Exports

Exports

DLLGetDISMProviderCLSID
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 370KB - Virtual size: 369KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 881KB - Virtual size: 881KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
python-3.11.2-amd64/python-3.11.2-amd64.exe
.exe windows x64

4cea7ae85c87ddc7295d39ff9cda31d1

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-05-2021 00:00

Not After

31-12-2028 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22-03-2021 00:00

Not After

21-03-2036 23:59

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1f:73:4d:11:1b:4b:5c:87:9b:bd:5a:8c:49:ab:2a:90
Certificate

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Not Before

07-12-2021 00:00

Not After

06-12-2024 23:59

Subject

SERIALNUMBER=0400751588,CN=Comodo Security Solutions\, Inc,O=Comodo Security Solutions\, Inc,ST=New Jersey,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a4e6577204a6572736579,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23-10-2020 00:00

Not After

22-01-2032 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

92:60:66:aa:21:02:0a:4c:77:12:02:49:de:e4:2e:14:00:79:13:e4:a6:ca:12:84:62:13:03:2d:b7:c0:8e:f3
Signer

Actual PE Digest

92:60:66:aa:21:02:0a:4c:77:12:02:49:de:e4:2e:14:00:79:13:e4:a6:ca:12:84:62:13:03:2d:b7:c0:8e:f3

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=0400751588,CN=Comodo Security Solutions\, Inc,O=Comodo Security Solutions\, Inc,ST=New Jersey,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a4e6577204a6572736579,1.3.6.1.4.1.311.60.2.1.3=#13025553

07-02-2023 20:40
Valid: true

Chain 1

SERIALNUMBER=0400751588,CN=Comodo Security Solutions\, Inc,O=Comodo Security Solutions\, Inc,ST=New Jersey,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a4e6577204a6572736579,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

GetTokenInformation
RegDeleteValueA
RegOpenKeyExA
RegQueryInfoKeyA
FreeSid
OpenProcessToken
RegSetValueExA
RegCreateKeyExA
LookupPrivilegeValueA
AllocateAndInitializeSid
RegQueryValueExA
EqualSid
RegCloseKey
AdjustTokenPrivileges

kernel32

_lopen
_llseek
CompareStringA
GetLastError
GetFileAttributesA
GetSystemDirectoryA
LoadLibraryA
DeleteFileA
GlobalAlloc
GlobalFree
CloseHandle
WritePrivateProfileStringA
IsDBCSLeadByte
GetWindowsDirectoryA
SetFileAttributesA
GetProcAddress
GlobalLock
LocalFree
RemoveDirectoryA
FreeLibrary
_lclose
CreateDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
GlobalUnlock
ReadFile
SizeofResource
WriteFile
GetDriveTypeA
LoadLibraryExA
SetFileTime
SetFilePointer
FindResourceA
CreateMutexA
GetVolumeInformationA
WaitForSingleObject
GetCurrentDirectoryA
FreeResource
GetVersion
SetCurrentDirectoryA
GetTempPathA
LocalFileTimeToFileTime
CreateFileA
SetEvent
TerminateThread
GetVersionExA
LockResource
GetSystemInfo
CreateThread
ResetEvent
LoadResource
ExitProcess
GetModuleHandleW
CreateProcessA
FormatMessageA
GetTempFileNameA
DosDateTimeToFileTime
CreateEventA
GetExitCodeProcess
ExpandEnvironmentStringsA
LocalAlloc
lstrcmpA
FindNextFileA
GetCurrentProcess
FindFirstFileA
GetModuleFileNameA
GetShortPathNameA
Sleep
GetStartupInfoW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
EnumResourceLanguagesA
GetDiskFreeSpaceA
MulDiv
FindClose

gdi32

GetDeviceCaps

user32

ShowWindow
MsgWaitForMultipleObjects
SetWindowPos
GetDC
GetWindowRect
DispatchMessageA
GetSystemMetrics
CallWindowProcA
SetWindowTextA
MessageBoxA
SendDlgItemMessageA
SendMessageA
GetDlgItem
DialogBoxIndirectParamA
GetWindowLongPtrA
SetWindowLongPtrA
SetForegroundWindow
ReleaseDC
EnableWindow
CharNextA
LoadStringA
CharPrevA
EndDialog
MessageBeep
ExitWindowsEx
SetDlgItemTextA
CharUpperA
GetDesktopWindow
PeekMessageA
GetDlgItemTextA

msvcrt

?terminate@@YAXXZ
_commode
_fmode
_acmdln
__C_specific_handler
memset
__setusermatherr
_ismbblead
_cexit
_exit
exit
__set_app_type
__getmainargs
_amsg_exit
_XcptFilter
memcpy_s
_vsnprintf
_initterm
memcpy

comctl32

ord17

cabinet

ord20
ord21
ord23
ord22

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 591KB - Virtual size: 592KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b86b775ded6e4965bc085ca37be2cd29

Code Sign

33:00:00:03:80:e4:bb:91:f3:18:fd:8e:9a:00:00:00:00:03:80Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

b5:17:8b:e9:76:24:2e:50:7e:df:0d:b2:a6:e7:c1:9c:97:80:b0:b3:e8:c6:10:93:b4:a7:71:8d:45:c9:cd:98Signer

Signature Validations

Verification

07-02-2023 20:40 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-core-shlwapi-legacy-l1-1-0

ext-ms-win-rtcore-ntuser-cursor-l1-1-0

api-ms-win-rtcore-ntuser-window-l1-1-0

api-ms-win-rtcore-ntuser-synch-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-stateseparation-helpers-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-devices-config-l1-1-1

api-ms-win-core-com-l1-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-path-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-util-l1-1-0

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-threadpool-l1-2-0

rpcrt4

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-core-winrt-error-l1-1-1

newdev

ole32

winbio

Exports

Exports

Sections

.text Size: 404KB - Virtual size: 404KB

.rdata Size: 160KB - Virtual size: 160KB

.data Size: 5KB - Virtual size: 55KB

.pdata Size: 13KB - Virtual size: 12KB

.reloc Size: 3KB - Virtual size: 2KB

47e80c5ce159d30e288fb9dea6aede71

Code Sign

33:00:00:03:7f:c0:e0:39:ce:f3:f0:06:bb:00:00:00:00:03:7fCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

33:5c:8d:1c:65:fb:85:43:1b:b9:c5:fd:12:03:2e:37:0b:30:ce:19:3c:9c:93:5a:43:2f:70:5f:b8:cb:2c:47Signer

Signature Validations

Verification

07-02-2023 20:40 Valid: false

Headers

DLL Characteristics

File Characteristics

33:00:00:03:80:e4:bb:91:f3:18:fd:8e:9a:00:00:00:00:03:80
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

b5:17:8b:e9:76:24:2e:50:7e:df:0d:b2:a6:e7:c1:9c:97:80:b0:b3:e8:c6:10:93:b4:a7:71:8d:45:c9:cd:98
Signer

07-02-2023 20:40
Valid: false

.text
Size: 404KB - Virtual size: 404KB

.rdata
Size: 160KB - Virtual size: 160KB

.data
Size: 5KB - Virtual size: 55KB

.pdata
Size: 13KB - Virtual size: 12KB

.reloc
Size: 3KB - Virtual size: 2KB

33:00:00:03:7f:c0:e0:39:ce:f3:f0:06:bb:00:00:00:00:03:7f
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

33:5c:8d:1c:65:fb:85:43:1b:b9:c5:fd:12:03:2e:37:0b:30:ce:19:3c:9c:93:5a:43:2f:70:5f:b8:cb:2c:47
Signer

07-02-2023 20:40
Valid: false

.text
Size: 698KB - Virtual size: 698KB

.rdata
Size: 568KB - Virtual size: 567KB

.data
Size: 1KB - Virtual size: 4KB

.pdata
Size: 7KB - Virtual size: 7KB

.reloc
Size: 1024B - Virtual size: 584B