Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
bulkmail.exe
Resource
win10v2004-20230703-en
Target
bulkmail - 1234.rar
Size
12.6MB
MD5
31fe69edb549300eaa8c954319049bf6
SHA1
1d28c9dfbbb13e92d9f612c7af67c13871f6fa3e
SHA256
4c7833e172b3ddfbc17cacd82c9743657585a5c12333754277c0df79caee00cd
SHA512
2f7d1a72f4d42d8c01f8038150d217ea8fe97d8fa55f93b56baa46f62fe35c5fabfb875a8cceb566c243d1f3c1c5bd6d967258efec64b9140ec363e6c4c5779f
SSDEEP
393216:BdLA+hIHsTpnjppgjKU8Pm7jX/bq162ynGIBsCF:7AvHsTpjPgjd8Cb/bjL1BsCF
resource | yara_rule |
---|---|
static1/unpack001/bulkmail.exe | pyinstaller |
Checks for missing Authenticode signature.
resource |
---|
unpack001/MACDll.dll |
unpack001/bulkmail.exe |
unpack001/napipsec.dll |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
swscanf_s
_vscprintf
vsprintf_s
iswalpha
_vsnwprintf
_wcsnicmp
wcsncmp
wcsstr
_wtoi
towlower
_vsnprintf
strrchr
iswctype
memcpy
fclose
__dllonexit
_unlock
_lock
realloc
_errno
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
_initterm
_amsg_exit
_XcptFilter
_CxxThrowException
_callnewh
?what@exception@@UEBAPEBDXZ
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
wcsncpy_s
wcscat_s
calloc
memmove_s
memcpy_s
_purecall
_wcsicmp
wcsrchr
wcschr
vswprintf_s
_vscwprintf
wcscpy_s
malloc
wcstok_s
_wfopen
fgetws
feof
_onexit
_resetstkoflw
free
__C_specific_handler
__CxxFrameHandler3
memcmp
memset
AdjustTokenPrivileges
SetSecurityDescriptorDacl
EqualSid
InitializeSecurityDescriptor
InitializeAcl
GetLengthSid
AddAccessAllowedAce
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
OpenThreadToken
RegQueryInfoKeyW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
DebugBreak
CreateFileMappingA
DeleteFileW
GetLastError
SetThreadUILanguage
CreateFileW
CloseHandle
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
GetCurrentProcessId
OutputDebugStringW
MultiByteToWideChar
GetTempPathW
GetModuleHandleExW
FreeLibrary
SetEvent
GetModuleFileNameW
GetModuleHandleW
Wow64DisableWow64FsRedirection
CopyFileExW
Wow64RevertWow64FsRedirection
CreateEventW
WaitForSingleObject
TerminateProcess
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceExW
DisableThreadLibraryCalls
GetThreadLocale
SetThreadLocale
RaiseException
GetProcAddress
LoadLibraryExW
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
HeapDestroy
CompareStringW
Sleep
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
GetFileSizeEx
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
OutputDebugStringA
LocalFree
GetCurrentThread
GetFullPathNameW
GetTempFileNameW
GetWindowsDirectoryW
IsDebuggerPresent
FlushFileBuffers
DeleteFileA
CreateFileA
GetVersion
ReleaseMutex
CreateMutexA
CreateMutexW
WriteFile
GetFileAttributesW
GetSystemInfo
SetFilePointer
ReadFile
ExpandEnvironmentStringsW
GetNativeSystemInfo
GetSystemWindowsDirectoryW
FormatMessageW
GetSystemDirectoryW
MoveFileExW
FindClose
FindNextFileW
FindFirstFileW
GetModuleFileNameA
VirtualQuery
FormatMessageA
TlsFree
TlsGetValue
ExitProcess
GetFileSize
GetLocalTime
TlsAlloc
TlsSetValue
MapViewOfFile
CreateFileMappingW
QueryDosDeviceW
UnmapViewOfFile
GetVersionExW
SetLastError
SearchPathW
DuplicateHandle
DeviceIoControl
SetFileAttributesW
GetCurrentDirectoryW
GetDriveTypeW
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
CreateProcessW
GetExitCodeProcess
CreateDirectoryW
GetFileInformationByHandle
GetVolumePathNameW
RtlCaptureContext
GetVolumeNameForVolumeMountPointW
CoTaskMemFree
StringFromCLSID
CoCreateGuid
CoSetProxyBlanket
ProgIDFromCLSID
StringFromGUID2
CoRegisterPSClsid
CoRegisterClassObject
CoRevokeClassObject
CoCreateInstance
LoadStringW
CharNextW
RegisterTypeLi
UnRegisterTypeLi
GetErrorInfo
CreateErrorInfo
SetErrorInfo
LoadTypeLi
LoadRegTypeLi
SysStringLen
VariantClear
VariantInit
SysAllocStringLen
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantTimeToSystemTime
SystemTimeToVariantTime
LoadTypeLibEx
GetFileVersionInfoExW
GetFileVersionInfoSizeExW
VerQueryValueW
RtlFreeHeap
RtlAllocateHeap
NtSetInformationFile
RtlNtStatusToDosError
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
lstrcpy
InitCommonControls
??0CGameApplication@@QAE@XZ
??0CISSolutionTool@@QAE@ABV0@@Z
??0CISSolutionTool@@QAE@XZ
??1CGameApplication@@QAE@XZ
??1CISSolutionTool@@QAE@XZ
??4CGameApplication@@QAEAAV0@ABV0@@Z
??4CISSolutionTool@@QAEAAV0@ABV0@@Z
?AddAutoDataAll@CISSolutionTool@@QAEXXZ
?AddSSolutionData@CISSolutionTool@@QAEKAAUSSPointInfo@@@Z
?Auto_AddSSolutionDataAuto@CISSolutionTool@@QAEKAAUSSPointInfo@@@Z
?Auto_Find@CISSolutionTool@@QAEPAUSSolutionPoint@@W4SHOOT_SOLUTION_THROW_TYPE@@KW4SHOOT_SOLUTION_BOUND_TYPE@@K@Z
?Auto_GenerateData@CISSolutionTool@@QAEXAAUSSSimulCondition@@@Z
?Auto_GetMaxCount@CISSolutionTool@@QAEKW4SHOOT_SOLUTION_THROW_TYPE@@KW4SHOOT_SOLUTION_BOUND_TYPE@@@Z
?Auto_GetShootingData@CISSolutionTool@@AAE_NAAVJOVECTOR3@@AAM0@Z
?Auto_Remove@CISSolutionTool@@QAEXW4SHOOT_SOLUTION_THROW_TYPE@@KW4SHOOT_SOLUTION_BOUND_TYPE@@K@Z
?Auto_RemoveAll@CISSolutionTool@@QAEXXZ
?Auto_StartGen@CISSolutionTool@@AAE_NXZ
?CheckBigBound@CISSolutionTool@@AAE_NAAUBallPoint@@@Z
?Close@CGameApplication@@QAEXXZ
?CollectContactPoint@CISSolutionTool@@QAEXPBDAAUBallPoint@@@Z
?DecisionBoundType@CISSolutionTool@@AAE?AW4SHOOT_SOLUTION_BOUND_TYPE@@AAH0@Z
?DecisionKind@CISSolutionTool@@AAEXXZ
?DeviceReleaseCallBack@CGameApplication@@SAXXZ
?DeviceRestoreCallBack@CGameApplication@@SAXXZ
?Dlg_ScreenModeProc@CGameApplication@@SGHPAUHWND__@@IIJ@Z
?Find@CISSolutionTool@@QAEPAUSSolutionPoint@@W4SHOOT_SOLUTION_THROW_TYPE@@KW4SHOOT_SOLUTION_BOUND_TYPE@@K@Z
?GetCenterPosFromSectorNum@CISSolutionTool@@QAE?AVJOVECTOR3@@I@Z
?GetInstance@CISSolutionTool@@SAPAV1@XZ
?GetMaxCount@CISSolutionTool@@QAEKW4SHOOT_SOLUTION_THROW_TYPE@@KW4SHOOT_SOLUTION_BOUND_TYPE@@@Z
?GetSSolutionMode@CISSolutionTool@@QAE?AW4ESSolutionMode@@XZ
?HS_CallbackProc@CGameApplication@@QAEHJJPAX@Z
?IMESystemUpdate@CGameApplication@@QAE_NPAUHWND__@@UtagMSG@@_N@Z
?Init@CGameApplication@@QAE_NPAUHINSTANCE__@@PAUHWND__@@1PA_W2@Z
?InitForTool@CGameApplication@@QAE_NPAUHINSTANCE__@@PAUHWND__@@1@Z
?InsertEventChar@CGameApplication@@QAEXIJ@Z
?InsertEventKeyboard@CGameApplication@@QAEXIJ_N@Z
?LoadSolutionFromFile@CISSolutionTool@@QAEXPBD@Z
?LoadSolutionFromFileAndAdd@CISSolutionTool@@QAEXPBD@Z
?LoadSolutionFromFileOld@CISSolutionTool@@QAEXPBD@Z
?Remove@CISSolutionTool@@QAEXW4SHOOT_SOLUTION_THROW_TYPE@@KW4SHOOT_SOLUTION_BOUND_TYPE@@K@Z
?RemoveAll@CISSolutionTool@@QAEXXZ
?Reset@CISSolutionTool@@AAEXXZ
?Run@CGameApplication@@QAEXXZ
?SaveSolutionToFile@CISSolutionTool@@QAEXPBD@Z
?SaveSolutionToFileToRelease@CISSolutionTool@@QAEXPBD@Z
?Send_GA_Analytics_Event@CGameApplication@@AAEXHPA_WPAD11H@Z
?SetAutoMode@CISSolutionTool@@QAEX_N@Z
?SetBallPos@CISSolutionTool@@QAEXAAVJOVECTOR3@@@Z
?SetBallPos@CISSolutionTool@@QAEXK@Z
?SetBallPosFromLogic@CISSolutionTool@@QAEXAAUBallPoint@@@Z
?SetCursorList@CGameApplication@@QAEXV?$vector@PAUHICON__@@V?$allocator@PAUHICON__@@@std@@@std@@@Z
?SetDataColliect@CISSolutionTool@@QAEX_N@Z
?SetGoalin@CISSolutionTool@@QAEXAAUBallPoint@@@Z
?SetLineDraw@CISSolutionTool@@QAEX_N@Z
?SetSSolutionMode@CISSolutionTool@@QAEXW4ESSolutionMode@@@Z
?SimulateShoot@CISSolutionTool@@QAEXAAVJOVECTOR3@@0M_NM@Z
?ThrowShoot@CISSolutionTool@@QAEXAAUSSPointInfo@@AAVJOVECTOR3@@@Z
?WindowProc@CGameApplication@@QAEJPAUHWND__@@IIJ@Z
?m_pInitDlg@CGameApplication@@2PAVCInitDlg@@A
?m_pInstance@CISSolutionTool@@0PAV1@A
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ResetEvent
WaitForSingleObjectEx
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
WriteConsoleW
DecodePointer
SetFilePointerEx
GetConsoleMode
GetConsoleCP
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
GetProcessHeap
LCMapStringW
GetStringTypeW
GetFileType
GetStdHandle
GetACP
HeapAlloc
HeapFree
GetModuleFileNameA
ExitProcess
HeapQueryInformation
HeapReAlloc
HeapSize
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
EncodePointer
InterlockedFlushSList
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
RtlUnwind
RaiseException
lstrlenA
GetCurrentProcess
FlushFileBuffers
InterlockedIncrement
GlobalFlags
GetCurrentProcessId
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
FreeResource
GlobalFindAtomW
GetVersionExW
CompareStringW
LoadLibraryA
GetVersionExA
InterlockedDecrement
GlobalFree
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
MulDiv
GetLastError
SetLastError
GlobalAddAtomW
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryW
FindResourceW
LoadResource
LockResource
SizeofResource
InterlockedExchange
GlobalLock
lstrcmpW
GlobalAlloc
FreeLibrary
CreateEventW
SetEvent
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
DeleteFileW
CreateFileW
SetFilePointer
SetEndOfFile
ReadFile
WriteFile
GetFileSize
GetProcAddress
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetModuleFileNameW
CloseHandle
Sleep
WaitForSingleObject
TerminateThread
SetThreadPriority
CreateThread
FindFirstFileW
GetModuleHandleW
FindFirstFileExA
FindClose
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
CreateDialogIndirectParamW
CopyRect
PtInRect
MessageBoxW
PostMessageW
SendMessageW
EnableWindow
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetDesktopWindow
GetDC
ReleaseDC
IsDialogMessageW
SetWindowTextW
ShowWindow
IsWindowEnabled
GetClientRect
GetNextDlgTabItem
DialogBoxParamW
EndDialog
CheckDlgButton
IsDlgButtonChecked
GetDlgItem
SetDlgItemTextW
GetDlgItemTextW
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuW
GetParent
GetFocus
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ValidateRect
GetCursorPos
PeekMessageW
GetKeyState
UnregisterClassW
GetWindowThreadProcessId
ClientToScreen
GetSysColorBrush
LoadCursorW
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
BeginPaint
EndPaint
DestroyMenu
GetSystemMetrics
GetWindowTextLengthW
GetWindowTextW
GetWindow
GetWindowLongW
SetFocus
UnhookWindowsHookEx
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetCursor
PostQuitMessage
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
SetMapMode
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
RestoreDC
SaveDC
DeleteObject
GetObjectW
SetBkColor
SetTextColor
GetClipBox
ScaleViewportExtEx
CreateBitmap
GetDeviceCaps
ClosePrinter
OpenPrinterW
DocumentPropertiesW
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
PathFindFileNameW
PathFindExtensionW
VariantInit
VariantChangeType
VariantClear
CreateStdAccessibleObject
LresultFromObject
CloseFilterInput
CloseFilterOutput
CompressFile
CompressFileW
CompressFileW2
ConvertFile
ConvertFileW
ConvertFileW2
DIALOGMsgProc
DecompressFile
DecompressFileW
DecompressFileW2
FillWaveFormatEx
FillWaveHeader
FilterGetFileSize
FilterGetFirstSpecialData
FilterGetNextSpecialData
FilterGetOptions
FilterOptions
FilterOptionsString
FilterUnderstandsFormat
FilterWriteSpecialData
GetID3Tag
GetInterfaceCompatibility
GetVersionNumber
OpenFilterInput
OpenFilterOutput
QueryCoolFilter
ReadFilterInput
RemoveTag
ShowFileInfoDialog
TagFileSimple
VerifyFile
VerifyFileW
VerifyFileW2
WriteFilterOutput
c_APECompress_AddData
c_APECompress_Create
c_APECompress_Destroy
c_APECompress_Finish
c_APECompress_GetBufferBytesAvailable
c_APECompress_Kill
c_APECompress_LockBuffer
c_APECompress_Start
c_APECompress_StartW
c_APECompress_UnlockBuffer
c_APEDecompress_Create
c_APEDecompress_CreateW
c_APEDecompress_Destroy
c_APEDecompress_GetData
c_APEDecompress_GetInfo
c_APEDecompress_Seek
winampGetExtendedFileInfo
winampGetInModule2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
CreateWindowExW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW
ord380
GetStringTypeW
GetFileAttributesExW
HeapReAlloc
FlushFileBuffers
GetCurrentDirectoryW
IsValidCodePage
GetACP
GetModuleHandleW
MulDiv
GetLastError
SetDllDirectoryW
GetModuleFileNameW
GetProcAddress
GetCommandLineW
GetEnvironmentVariableW
GetOEMCP
ExpandEnvironmentStringsW
CreateDirectoryW
GetTempPathW
WaitForSingleObject
Sleep
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
FreeLibrary
LoadLibraryExW
SetConsoleCtrlHandler
FindClose
FindFirstFileExW
CloseHandle
GetCurrentProcess
LocalFree
FormatMessageW
MultiByteToWideChar
WideCharToMultiByte
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
WriteConsoleW
SetEnvironmentVariableW
RtlUnwindEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
SetEndOfFile
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
RemoveDirectoryW
FindNextFileW
SetStdHandle
DeleteFileW
ReadFile
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
OpenProcessToken
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
SelectObject
DeleteObject
CreateFontIndirectW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
SymInitialize
StackWalk64
SymGetModuleBase64
SymGetModuleInfo64
SymFromAddr
SymFunctionTableAccess64
GetModuleHandleW
GetProcAddress
LoadLibraryW
CloseHandle
CreateThread
WaitForSingleObject
GetModuleFileNameW
FreeLibrary
ReadFile
GetCurrentThreadId
ReadProcessMemory
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
GetCurrentProcessId
TerminateThread
OpenThread
CreateNamedPipeW
VirtualProtect
WriteProcessMemory
GetThreadId
GetProcessId
K32GetModuleFileNameExW
CreateProcessW
GetProcessHeap
WriteFile
FlushFileBuffers
DisconnectNamedPipe
WerRegisterRuntimeExceptionModule
WerUnregisterRuntimeExceptionModule
LocaleNameToLCID
WideCharToMultiByte
VerSetConditionMask
VerifyVersionInfoW
CreateFileW
GetFileAttributesExW
EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
FindResourceExW
FindResourceW
SizeofResource
LockResource
LoadResource
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
RaiseException
MultiByteToWideChar
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
ConnectNamedPipe
IsDebuggerPresent
IsWindowVisible
EnableWindow
IsHungAppWindow
DisableProcessWindowsGhosting
MessageBoxW
GetWindowTextW
GetWindowTextLengthW
ReleaseDC
DrawIconEx
GetSysColor
GetDC
SetFocus
GetDlgCtrlID
IsDlgButtonChecked
PostMessageW
ShowWindow
GetSystemMenu
EnableMenuItem
GetWindowThreadProcessId
GetSysColorBrush
EndDialog
GetWindow
SetWindowTextW
SetDlgItemTextW
SetWindowPos
OffsetRect
CopyRect
GetDesktopWindow
GetKeyState
GetDlgItem
GetWindowLongPtrW
GetParent
SetCursor
LoadCursorW
ReleaseCapture
PtInRect
ClientToScreen
GetWindowRect
SetCapture
InvalidateRect
GetCapture
SendMessageW
EnumWindows
CheckDlgButton
SetPropW
RemovePropW
DialogBoxIndirectParamW
GetPropW
CallWindowProcW
SetWindowLongPtrW
DeleteDC
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
SetBkMode
CreateFontIndirectW
GetObjectW
SetTextColor
DeleteObject
RegOpenCurrentUser
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
SHCreateDirectoryExW
SHGetKnownFolderPath
ord6
ShellExecuteW
CoTaskMemFree
CoCreateGuid
_Strcoll
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
_Wcscoll
_Strxfrm
_Wcsxfrm
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@_W@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?read@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@PEA_W_J@Z
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_JH@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?_Xbad_alloc@std@@YAXXZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Xout_of_range@std@@YAXPEBD@Z
_Mtx_init_in_situ
_Mtx_destroy_in_situ
?empty@locale@std@@SA?AV12@XZ
?_BADOFF@std@@3_JB
?uncaught_exception@std@@YA_NXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Xlength_error@std@@YAXPEBD@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$ctype@_W@std@@2V0locale@2@A
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_J@Z
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Throw_C_error@std@@YAXH@Z
_Thrd_start
_Thrd_join
_Mtx_init
_Mtx_lock
_Mtx_trylock
_Mtx_unlock
_Cnd_init
_Cnd_wait
_Cnd_signal
_Cnd_destroy
_Mtx_destroy
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_id
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
PathAppendW
PathFileExistsW
memchr
strchr
__CxxFrameHandler3
memset
__C_specific_handler
__vcrt_InitializeCriticalSectionEx
_CxxThrowException
__std_type_info_destroy_list
wcsstr
_purecall
memmove
__std_exception_destroy
__std_exception_copy
__std_terminate
memcmp
memcpy
_callnewh
free
calloc
_recalloc
realloc
malloc
strtok_s
strncpy_s
isspace
tolower
_strdup
wcsnlen
wmemcpy_s
iswspace
terminate
_initterm_e
_invalid_parameter_noinfo
_initterm
_errno
_cexit
_invalid_parameter_noinfo_noreturn
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
ungetwc
fgetwc
fsetpos
_fseeki64
fgetpos
fwrite
_get_stream_buffer_pointers
fclose
__stdio_common_vswprintf
__stdio_common_vswprintf_s
fputc
setvbuf
ungetc
fputwc
fflush
fgetc
_lock_file
_unlock_file
_wremove
_itoa_s
?AddCRCustomData@@YA_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_K@Z
?CrashReporterInitialize@@YA_NPEAXPEBD1111P6A_KAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@ZP6AXXZ_NW4AdobeCrashReporterScalingFactor@@@Z
?GetCRDialogOptions@@YAHXZ
?GetCRLastErrorCode@@YA?AW4ERROR_CR@@XZ
?SetCRDialogOptions@@YA_NH@Z
?SetCRDialogSaclingFactor@@YA_NW4AdobeCrashReporterScalingFactor@@@Z
?SetCRDialogUserEmail@@YA_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetCRDisplayName@@YA_NPEBD@Z
?SetCRHighbeamSessionId@@YA_NPEBD@Z
?SetCRHighbeamSessionInfo@@YA_NPEAXPEB_W@Z
?SetCRLocale@@YA_NPEBD@Z
?SetCRParentWnd@@YA_NPEAX@Z
?SetCRPostHandler@@YA_NP6AXXZ@Z
?SetCRPosthandlerThreadPreference@@YA_N_N@Z
?SetCRPreHandler@@YA_NP6A_KAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?ShowCRDialogOnlyOnFirstCrash@@YA_NXZ
OutOfProcessExceptionEventCallback
OutOfProcessExceptionEventDebuggerLaunchCallback
OutOfProcessExceptionEventSignatureCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
memcpy
_except_handler4_common
_onexit
__dllonexit
_unlock
_lock
_initterm
malloc
free
_amsg_exit
memcmp
_XcptFilter
memset
EtwRegisterTraceGuidsW
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwTraceMessage
EtwUnregisterTraceGuids
GetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CloseHandle
HeapFree
HeapAlloc
GetProcessHeap
DisableThreadLibraryCalls
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
GetCurrentProcess
GetCurrentThreadId
TerminateProcess
GetCurrentProcessId
CreateThread
QueryPerformanceCounter
WaitForSingleObjectEx
SetEvent
Sleep
DeleteCriticalSection
CreateEventW
WaitForSingleObject
InitializeCriticalSection
GetTickCount
GetSystemTimeAsFileTime
FwpmFilterAdd0
FwpmEngineOpen0
FwpmEngineClose0
IkeextSaCreateEnumHandle0
IkeextSaEnum2
FwpmProviderContextGetByKey2
IkeextSaDeleteById0
FwpmFreeMemory0
IkeextSaDestroyEnumHandle0
FwpmProviderContextAdd1
FwpmProviderContextAdd2
FwpmProviderContextDeleteByKey0
FwpmFilterDeleteByKey0
EnterCriticalPolicySection
UnregisterGPNotification
RegisterGPNotification
LeaveCriticalPolicySection
DelayLoadFailureHook
WaitForMultipleObjects
DeleteTimerQueueTimer
CreateTimerQueueTimer
DeleteTimerQueueEx
CreateTimerQueue
ResolveDelayLoadedAPI
InitializeNapIpsecRp
UninitializeNapIpsecRp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ