Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
robot.7z
Resource
win10v2004-20230703-en
Target
robot.7z
Size
1.7MB
MD5
12e003ce3a6a8c6ee655c532b432fe4f
SHA1
9725bcf5a86645073c4817ee7612768e714f80ff
SHA256
f4f6a32020ff04813c5268f622d3541dd8c4c635d81ad891094e3dd4ea77dafa
SHA512
06dd3ca51fbe122f71a846c3b2013a1e2f21263cbdb3c202ba4909297e72a2820707b9663e9d135c2eb2916c931846a9ea816432c5ff70308f340f18634fe467
SSDEEP
49152:eK7eZ9+QZvDH0X+zmJEhDBT+kHUX7OuJg07BQPo:eegZ4X+xD47He09Wo
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/pcid.dll |
| unpack001/spolsvt.exe |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CloseHandle
GetProcAddress
LoadLibraryW
OpenFileMappingW
Sleep
GlobalFindAtomW
GlobalAddAtomW
MapViewOfFile
UnmapViewOfFile
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
RtlUnwind
HeapSize
MultiByteToWideChar
GetLocaleInfoA
RaiseException
IsWindow
FindWindowW
PostMessageW
SHLoadInProc
CoCreateInstance
StringFromGUID2
?DockSetValue@@YGXMMMM@Z
?DockSetValueEx@@YGXMMMMM@Z
?InitDock@@YGX_N@Z
?IsDockBandShow@@YG_NXZ
?SetLangID@@YG_NK@Z
?ShowDockBand@@YG_N_N@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GlobalAlloc
GlobalLock
OutputDebugStringW
GlobalUnlock
GlobalFree
lstrcpyW
lstrcatW
FindFirstFileW
FindNextFileW
lstrcmpW
FindClose
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
MultiByteToWideChar
GetLastError
ReadFile
CloseHandle
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateFileW
InitializeCriticalSection
SetStdHandle
VirtualAlloc
HeapReAlloc
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
CreateFileA
HeapSize
GetLocaleInfoA
CreateStreamOnHGlobal
GdipAlloc
GdipFree
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromStream
Rdb_CompressRes
Rdb_LoadSkinRes
Rdb_UnCompressRes
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
GetProcAddress
WideCharToMultiByte
lstrlenW
FlushFileBuffers
CloseHandle
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
RaiseException
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
WriteFile
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
InitializeCriticalSection
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
PCIDGetIdentify
UDP_Close
UDP_GetFullNewsList
UDP_GetSoftCategoryList
UDP_GetSoftItemInfor
UDP_GetSoftList
UDP_GetTempValueLimit
UDP_GetWeather
UDP_Init
UDP_ReportButtonEvent
UDP_ReportNewsID
UDP_SetLanguage
UDP_SetPCID
UDP_SetUnion
_UDP_ReportEventString@8
_UDP_SetClientVer@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetFileTime
SetErrorMode
GetTickCount
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
VirtualAlloc
GetSystemInfo
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileAttributesW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetACP
GetOEMCP
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetTimeFormatA
GetDateFormatA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCurrentDirectoryA
GetDriveTypeA
SetEnvironmentVariableA
GlobalGetAtomNameW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GlobalFlags
lstrlenA
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
FindNextFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
GetVersionExA
FormatMessageW
LocalFree
GetModuleHandleA
GetModuleFileNameA
SetLastError
VirtualFreeEx
ReadProcessMemory
VirtualAllocEx
GetTempPathW
ResumeThread
MoveFileExW
TerminateThread
VirtualProtect
VirtualQuery
WriteProcessMemory
lstrcmpiA
MulDiv
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
GetSystemTime
lstrcmpW
OutputDebugStringW
InterlockedIncrement
GetDiskFreeSpaceA
GetSystemDirectoryA
GlobalMemoryStatusEx
SetEvent
GetLocalTime
WaitForSingleObject
CreateEventW
lstrcpynW
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
Sleep
SetProcessWorkingSetSize
OpenProcess
CreateMutexW
SetUnhandledExceptionFilter
ExitProcess
FreeLibrary
GetCurrentProcessId
GetCurrentThreadId
LoadLibraryW
ReleaseSemaphore
OpenSemaphoreW
CreateThread
DeleteFileW
CreateFileW
GetLastError
WinExec
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetVersionExW
GetModuleHandleW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
CopyFileW
FreeResource
LockResource
LoadResource
FindResourceW
lstrcpyW
lstrcmpiW
DeleteCriticalSection
CreateDirectoryW
CreateProcessW
lstrcatW
GetSystemDirectoryW
SizeofResource
CloseHandle
GetCurrentProcess
InitializeCriticalSection
lstrlenW
GetStartupInfoA
InterlockedDecrement
IsRectEmpty
DestroyMenu
ShowOwnedPopups
GetMessageW
TranslateMessage
ValidateRect
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
CharUpperW
IsWindowEnabled
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemInt
CheckDlgButton
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetFocus
GetWindowTextLengthW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetScrollRange
GetScrollRange
SetScrollPos
ShowScrollBar
GetMenu
MessageBoxW
CreateWindowExW
GetClassInfoExW
AdjustWindowRectEx
EqualRect
DeferWindowPos
WindowFromPoint
TranslateAcceleratorW
SystemParametersInfoA
GetWindowPlacement
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
GetMenuStringW
UpdateWindow
GetMenuState
ModifyMenuW
InsertMenuW
GetMenuItemCount
LoadMenuW
CreateMenu
GetMenuItemID
LoadBitmapW
CopyRect
EnableMenuItem
FindWindowExW
GetWindowThreadProcessId
IntersectRect
SetScrollInfo
FillRect
ClientToScreen
GetScrollInfo
GetSysColorBrush
EnableWindow
ExitWindowsEx
UnregisterClassA
PostMessageW
SendMessageW
GetDC
DrawFocusRect
GetWindowTextW
RemovePropW
TrackMouseEvent
EndPaint
BeginPaint
CallWindowProcW
SetPropW
GetClassNameW
GetPropW
UpdateLayeredWindow
GetDesktopWindow
GetWindowDC
GetFocus
GetMessagePos
GrayStringW
DrawTextExW
TabbedTextOutW
IsChild
SystemParametersInfoW
DefWindowProcW
GetClassInfoW
OffsetRect
GetScrollPos
ReleaseCapture
SetCapture
FrameRect
InflateRect
UnregisterClassW
CharNextW
CopyAcceleratorTableW
GetNextDlgGroupItem
MessageBeep
PostThreadMessageW
SetCursor
PtInRect
SetRectEmpty
RegisterClipboardFormatW
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsW
InsertMenuItemW
SetMenu
ReleaseDC
SetRect
GetDlgCtrlID
GetClientRect
SetWindowRgn
SetForegroundWindow
GetWindowLongW
GetParent
GetWindowRect
ScreenToClient
LoadStringW
DrawTextW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
InvalidateRgn
GetActiveWindow
InvalidateRect
SetWindowLongW
SetWindowTextA
DefDlgProcW
LoadIconW
LoadCursorW
GetSysColor
RegisterClassW
FindWindowW
IsHungAppWindow
RegisterWindowMessageW
GetSystemMenu
SetTimer
GetSystemMetrics
DrawIcon
GetSubMenu
GetMenuItemInfoW
GetCursorPos
RedrawWindow
CreatePopupMenu
GetWindowRgn
IsWindow
SetWindowPos
BringWindowToTop
IsIconic
ShowWindow
IsWindowVisible
KillTimer
AppendMenuW
CreateRectRgnIndirect
GetMapMode
CreateEllipticRgn
LPtoDP
Ellipse
GetBkColor
GetTextColor
GetRgnBox
GetDeviceCaps
CreateBitmap
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
ExcludeClipRect
GetClipBox
SetMapMode
SetBkColor
RestoreDC
SaveDC
CreatePen
LineTo
MoveToEx
DeleteDC
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateDIBSection
SetDCPenColor
FrameRgn
FillRgn
CreateRoundRectRgn
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
GetTextExtentPoint32W
SetTextColor
SetBkMode
BitBlt
CombineRgn
GetPixel
CreateRectRgn
CreateFontIndirectW
GetStockObject
SelectObject
GetObjectW
DeleteObject
GradientFill
GetFileTitleW
DocumentPropertiesW
OpenPrinterW
ClosePrinter
InitializeSecurityDescriptor
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegQueryValueW
AllocateAndInitializeSid
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyW
RegDeleteValueW
RegSetValueExW
RegQueryValueExA
RegOpenKeyExA
SetSecurityDescriptorDacl
CheckTokenMembership
FreeSid
OpenProcessToken
DragFinish
ShellExecuteW
ShellExecuteExW
SHBrowseForFolderW
SHGetPathFromIDListW
Shell_NotifyIconW
SHGetSpecialFolderLocation
DragQueryFileW
SHGetSpecialFolderPathW
_TrackMouseEvent
InitCommonControlsEx
PathFileExistsW
PathRemoveExtensionW
UrlUnescapeW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathRemoveFileSpecW
PathFindFileNameW
OleUIBusyW
CoInitialize
CoInitializeSecurity
CoCreateInstance
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
SysFreeString
VariantInit
VariantCopy
VariantClear
VariantChangeType
SystemTimeToVariantTime
VarUdateFromDate
VariantTimeToSystemTime
SysStringLen
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SysAllocString
SafeArrayDestroy
OleCreateFontIndirect
Rdb_LoadSkinRes
ImageDirectoryEntryToData
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipDrawString
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipCloneImage
GdipImageSelectActiveFrame
GdipDrawImageRectI
GdipCreatePen1
GdipDeletePen
GdipDrawCurve
GdipCreateStringFormat
GdipFree
GdipCloneBrush
GdipAlloc
GdipDeleteBrush
GdipCreateTexture2
GdipFillRectangleI
GdipCreateTexture2I
GdipFillRectangle
GdipTranslateTextureTransform
GdipCreateTexture
GdipDrawImageRectRect
GdiplusShutdown
GdiplusStartup
GdipCreateSolidFill
GdipDeleteFont
GdipGetImageHeight
GdipGetImageWidth
GdipDeleteGraphics
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipSaveImageToFile
GdipCreateBitmapFromHBITMAP
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipDisposeImage
GdipCreateFromHDC
GdipLoadImageFromFile
GdipCreateBitmapFromFile
GdipImageGetFrameCount
_UDP_SetClientVer@8
UDP_Close
UDP_ReportButtonEvent
_UDP_ReportEventString@8
UDP_ReportNewsID
UDP_GetWeather
UDP_GetTempValueLimit
UDP_GetSoftCategoryList
UDP_GetSoftList
UDP_GetSoftItemInfor
UDP_SetUnion
UDP_SetLanguage
UDP_Init
UDP_GetFullNewsList
?InitDock@@YGX_N@Z
?IsDockBandShow@@YG_NXZ
?ShowDockBand@@YG_N_N@Z
?DockSetValueEx@@YGXMMMMM@Z
connect
closesocket
recv
send
socket
gethostbyname
htons
WSAStartup
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW
InternetReadFile
InternetQueryDataAvailable
InternetCanonicalizeUrlW
InternetCrackUrlW
HttpSendRequestW
InternetConnectW
HttpOpenRequestW
InternetSetOptionExW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateFileA
GetFileSize
ReadFile
SetFilePointer
CloseHandle
ExitProcess
TerminateProcess
ResumeThread
CreateProcessA
VirtualAlloc
VirtualQueryEx
ReadProcessMemory
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
WriteConsoleW
CreateFileW
OutputDebugStringW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetCurrentProcess
InterlockedPushEntrySList
InterlockedFlushSList
RaiseException
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
GetCurrentThread
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
GetStdHandle
GetFileType
SetConsoleCtrlHandler
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
DecodePointer
wsprintfA
strncpy
GetInterfaceInfo
GetMappedFileNameW
RegDeleteKeyA
SHGetFolderPathW
PCIDGetIdentify
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcess
SetUnhandledExceptionFilter
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
GetProcAddress
TerminateProcess
GetCommandLineA
GetProcessWorkingSetSize
SetProcessWorkingSetSize
OpenProcess
CloseHandle
VirtualAlloc
VirtualFree
GetLastError
strncpy
strrchr
toupper
strstr
_strdup
strncat
printf
strchr
isspace
isdigit
_strupr
malloc
_exit
_XcptFilter
_cexit
exit
__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
_controlfp
__set_app_type
_except_handler3
_c_exit
__p__fmode
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
EnumDesktopsA
EnumWindows
GetWindowThreadProcessId
GetWindow
GetWindowLongA
GetWindowTextA
FindWindowExA
GetProcessWindowStation
GetThreadDesktop
OpenWindowStationA
SetProcessWindowStation
OpenDesktopA
SetThreadDesktop
CloseDesktop
CloseWindowStation
EnumWindowStationsA
NtSetSystemInformation
RtlUnicodeStringToAnsiString
NtQuerySystemInformation
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ