Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
4Static
static
3avp.exe
windows7-x64
1avp.exe
windows10-2004-x64
1avp_azure.exe
windows7-x64
1avp_azure.exe
windows10-2004-x64
1avpinst.dll
windows7-x64
1avpinst.dll
windows10-2004-x64
1backup.dll
windows7-x64
1backup.dll
windows10-2004-x64
1com_antivirus.dll
windows7-x64
1com_antivirus.dll
windows10-2004-x64
1mcou.dll
windows7-x64
4mcou.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
avp.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
avp.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
avp_azure.exe
Resource
win7-20231020-en
Behavioral task
behavioral4
Sample
avp_azure.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral5
Sample
avpinst.dll
Resource
win7-20231023-en
Behavioral task
behavioral6
Sample
avpinst.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral7
Sample
backup.dll
Resource
win7-20231023-en
Behavioral task
behavioral8
Sample
backup.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral9
Sample
com_antivirus.dll
Resource
win7-20231023-en
Behavioral task
behavioral10
Sample
com_antivirus.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral11
Sample
mcou.dll
Resource
win7-20231023-en
Behavioral task
behavioral12
Sample
mcou.dll
Resource
win10v2004-20231025-en
Target
NEAS.31b292608cd39e45aaf06eae9721f260.cab
Size
7.2MB
MD5
31b292608cd39e45aaf06eae9721f260
SHA1
365edf5046497692d81856f75f8ff0354f1022f1
SHA256
188f44c4c53ce27b8cfa5758e9228cfda737d6fae19ece8a6fb11884b0357c2e
SHA512
990b42f1615c8679ee4b8e0d1cd2b3c2402936f08d4eca69aa9eb5820ecedf75d53258e50f8caab997991c807269095a76d740ce93de5274f21149273ea6d401
SSDEEP
98304:yMW8Vly6ZPa/GCfUHSKCTtLwtb0wrw3EPHJ/g5f6Vh12un+78D0ROZ5d:IsaesUr+urw3r5fIh1x+78D3
Checks for missing Authenticode signature.
resource |
---|
unpack001/avp.exe |
unpack001/avp_azure.exe |
unpack001/com_antivirus.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
lstrcmpiW
FindResourceW
LoadResource
LockResource
lstrlenW
OutputDebugStringW
lstrcpyW
FreeResource
lstrcatW
LoadLibraryW
GetProcAddress
GetCommandLineW
ExitProcess
TerminateProcess
lstrcpynW
HeapFree
GetModuleFileNameW
HeapAlloc
FreeLibrary
GetProcessHeap
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
RegQueryValueExW
RegEnumKeyW
RegQueryInfoKeyW
RegOpenKeyExW
RegCloseKey
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
lstrcmpiW
FindResourceW
LoadResource
LockResource
lstrlenW
OutputDebugStringW
lstrcpyW
FreeResource
lstrcatW
LoadLibraryW
GetProcAddress
GetCommandLineW
ExitProcess
TerminateProcess
lstrcpynW
HeapFree
GetModuleFileNameW
HeapAlloc
FreeLibrary
GetProcessHeap
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
RegQueryValueExW
RegEnumKeyW
RegQueryInfoKeyW
RegOpenKeyExW
RegCloseKey
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord8
ord17
ord125
ord103
ord74
GetProfilesDirectoryW
UnloadUserProfile
SHDeleteKeyW
UuidCreate
GetModuleFileNameW
GetTempPathW
FindClose
CreateFileW
GetFileAttributesW
GetSystemDirectoryW
GetLastError
CloseHandle
RaiseException
HeapAlloc
GetCurrentDirectoryW
MoveFileExW
GetProcessHeap
GetTempFileNameW
InitializeCriticalSectionAndSpinCount
DecodePointer
GetProcAddress
DeleteCriticalSection
GetModuleHandleW
GetModuleFileNameA
GetEnvironmentVariableW
LoadLibraryW
GetLocalTime
FreeLibrary
LoadLibraryExW
Sleep
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentThreadId
OpenProcess
GetCurrentProcess
DeleteFileW
GetModuleHandleExW
InitializeCriticalSectionEx
CreateProcessW
ResumeThread
WaitForSingleObject
GetExitCodeProcess
CopyFileW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetFileAttributesW
RemoveDirectoryW
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
ExpandEnvironmentStringsW
FindNextFileW
HeapFree
GetFileSizeEx
FindFirstFileW
ReadFile
CreateDirectoryW
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
HeapSize
SetStdHandle
ReadConsoleW
WriteConsoleW
SetFilePointer
GetModuleHandleExA
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
LocalFree
FormatMessageA
FindFirstFileExW
GetFileAttributesExW
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
GetStringTypeW
WaitForSingleObjectEx
QueryPerformanceCounter
QueryPerformanceFrequency
EncodePointer
LCMapStringEx
GetSystemTimeAsFileTime
CompareStringEx
GetCPInfo
GetLocaleInfoEx
SetEvent
ResetEvent
CreateEventW
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
OutputDebugStringW
RtlUnwind
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetStdHandle
GetFileType
HeapReAlloc
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetDateFormatW
GetTimeFormatW
CompareStringW
wsprintfW
RegUnLoadKeyW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
ChangeServiceConfigW
CloseServiceHandle
StartServiceW
OpenServiceW
OpenSCManagerW
RegEnumValueW
RegDeleteValueW
RegQueryValueExW
RegLoadKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegCreateKeyExW
SHGetFolderPathW
CoInitializeEx
CoUninitialize
CoCreateInstance
ord22
ord20
ord23
GetVersionedAVPInstaller
MsiProductActivate
MsiProductDeactivate
MsiProductRbActivate
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WNetEnumResourceW
WNetOpenEnumW
WNetCloseEnum
GetVolumeInformationW
CreateDirectoryW
GetFileAttributesW
FindFirstFileExW
GetCurrentDirectoryW
CreateEventW
SetEvent
ResetEvent
WaitForSingleObjectEx
GetComputerNameW
DeviceIoControl
IsWow64Process
GetVersionExW
FindVolumeClose
FindFirstVolumeW
GetVolumePathNamesForVolumeNameW
FindNextVolumeW
SystemTimeToFileTime
GetFullPathNameW
VerSetConditionMask
VerifyVersionInfoW
GetModuleHandleExW
GetTimeZoneInformation
GetSystemTimeAsFileTime
FormatMessageA
FindNextFileW
GlobalAlloc
GlobalFree
GetFileAttributesExW
SetFileAttributesW
DeleteFileW
ReadFile
LoadLibraryExW
GetSystemDirectoryW
FreeLibrary
IsProcessorFeaturePresent
OutputDebugStringW
InitializeSListHead
GetFileInformationByHandle
FindClose
Sleep
LocalFree
GetFileSizeEx
CreateFileW
GetModuleHandleExA
GetModuleFileNameA
CloseHandle
InitializeCriticalSectionAndSpinCount
GetCurrentThread
GetCurrentProcess
GetLastError
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetProcAddress
GetModuleHandleW
GetProcessHeap
HeapFree
HeapAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FileTimeToSystemTime
FileTimeToLocalFileTime
DisableThreadLibraryCalls
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
FreeSid
AllocateAndInitializeSid
DuplicateTokenEx
SetNamedSecurityInfoW
DeleteAce
GetAce
GetAclInformation
GetExplicitEntriesFromAclW
SetEntriesInAclW
GetNamedSecurityInfoW
LookupAccountSidW
IsValidSid
CreateWellKnownSid
EqualSid
LookupAccountNameW
LookupPrivilegeValueW
AdjustTokenPrivileges
ImpersonateLoggedOnUser
RevertToSelf
ConvertSidToStringSidW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
OpenThreadToken
GetTokenInformation
CopySid
GetLengthSid
CoCreateInstance
CoCreateGuid
CoUninitialize
CoInitializeEx
StringFromGUID2
CoInitializeSecurity
SysAllocStringByteLen
SysStringLen
SysFreeString
SysStringByteLen
SysAllocString
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrCompare@@YA_NPBX0@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?uncaught_exceptions@std@@YAHXZ
??1ios_base@std@@UAE@XZ
?_Xlength_error@std@@YAXPBD@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?uncaught_exception@std@@YA_NXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
?_Init@ios_base@std@@IAEXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?clear@ios_base@std@@QAEXH_N@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Xbad_function_call@std@@YAXXZ
?toupper@?$ctype@_W@std@@QBE_W_W@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAHH@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
UnloadUserProfile
__std_terminate
memset
_except_handler4_common
__current_exception_context
memmove
__current_exception
__CxxFrameHandler3
memcpy
__std_exception_destroy
__std_type_info_destroy_list
__std_exception_copy
_CxxThrowException
memcmp
_callnewh
malloc
free
wcrtomb_s
mbrtowc
_itoa
_initterm
_initterm_e
_cexit
_crt_atexit
terminate
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_register_onexit_function
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initialize_onexit_table
towupper
towlower
wcsncmp
toupper
_CIexp
ceil
floor
?GetTracer@@YAPAUITracer@eka@@XZ
ekaCanUnloadModule
ekaGetObjectFactory
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RtlCopyUnicodeString
RtlGetVersion
MmGetSystemRoutineAddress
ExAllocatePoolWithTag
IoCreateDevice
IoDeleteDevice
ExFreePoolWithTag
KeInitializeEvent
IofCompleteRequest
KeBugCheckEx
RtlAppendUnicodeStringToString
KeQuerySystemTime
RtlCompareUnicodeString
ExAcquireFastMutex
ExReleaseFastMutex
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
KldlLoadAndStartDriver
MmGetSystemRoutineAddress
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CryptUnprotectData
CryptProtectMemory
CryptProtectData
CryptUnprotectMemory
LocalFree
LoadLibraryExW
OpenProcess
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
LoadLibraryExA
ReadFile
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
TlsSetValue
Sleep
TlsAlloc
HeapReAlloc
TlsGetValue
TlsFree
GetCurrentProcess
TerminateProcess
CreateEventW
SetEvent
WaitForSingleObjectEx
QueryPerformanceFrequency
ResetEvent
ReleaseSemaphore
GetCurrentThreadId
CreateSemaphoreW
OutputDebugStringA
GetComputerNameW
FindFirstFileExW
FindNextFileW
GetLongPathNameW
DeviceIoControl
GetFinalPathNameByHandleW
FindClose
UnmapViewOfFile
GetFileAttributesExW
FlushViewOfFile
DeleteFileW
CreateFileMappingW
MapViewOfFile
MoveFileW
VirtualFree
VirtualAlloc
DuplicateHandle
SwitchToThread
GetTickCount
ExpandEnvironmentStringsW
WaitForSingleObject
ResumeThread
GetModuleHandleA
MultiByteToWideChar
LoadLibraryA
CreateThread
CreateProcessW
CreateEventA
GetProcessTimes
GetComputerNameA
ProcessIdToSessionId
WriteProcessMemory
GetNativeSystemInfo
ReadProcessMemory
VirtualQuery
VirtualProtect
QueryPerformanceCounter
GetSystemInfo
ReleaseSRWLockShared
AcquireSRWLockShared
WaitForMultipleObjectsEx
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
RemoveVectoredExceptionHandler
SetLastError
HeapValidate
AddVectoredExceptionHandler
IsDebuggerPresent
SetUnhandledExceptionFilter
CreateFileW
WriteFile
GetSystemTimeAsFileTime
VerifyVersionInfoW
SystemTimeToFileTime
GetCurrentProcessId
VerSetConditionMask
GetCurrentDirectoryW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTimeZoneInformation
GetFileAttributesW
GetModuleHandleExW
CreateDirectoryW
FreeLibrary
LoadLibraryW
GetModuleFileNameW
InitializeCriticalSection
LeaveCriticalSection
EncodePointer
EnterCriticalSection
DeleteCriticalSection
DecodePointer
InitializeCriticalSectionEx
GetModuleHandleW
GetProcessHeap
GetProcAddress
HeapAlloc
RaiseException
GetThreadPriority
GetCurrentThread
GetLastError
GetModuleHandleExA
SetThreadPriority
HeapFree
GetModuleFileNameA
CloseHandle
OpenEventA
WriteConsoleW
SetStdHandle
HeapSize
GetConsoleOutputCP
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
ReadConsoleW
GetConsoleMode
GetFileType
GetStdHandle
SetConsoleCtrlHandler
ExitProcess
FreeLibraryAndExitThread
ExitThread
InterlockedFlushSList
RtlUnwind
OutputDebugStringW
GetCPInfo
CompareStringEx
GetStringTypeW
GetLocaleInfoEx
LCMapStringEx
WideCharToMultiByte
InitializeSListHead
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
UnhandledExceptionFilter
DuplicateTokenEx
OpenProcessToken
RegQueryValueExW
SetSecurityDescriptorDacl
SetEntriesInAclA
InitializeSecurityDescriptor
ConvertStringSidToSidA
MakeSelfRelativeSD
MakeAbsoluteSD
CreateWellKnownSid
CopySid
GetLengthSid
LookupAccountNameW
AdjustTokenPrivileges
EqualSid
AllocateAndInitializeSid
LookupPrivilegeValueA
FreeSid
SetThreadToken
RegOpenKeyExW
RevertToSelf
ConvertStringSecurityDescriptorToSecurityDescriptorA
ImpersonateLoggedOnUser
OpenThreadToken
RegCloseKey
GetTokenInformation
CoTaskMemFree
CoCreateInstance
SysStringLen
GetErrorInfo
SysFreeString
WSAEventSelect
send
socket
connect
recv
WSAEnumNetworkEvents
ioctlsocket
setsockopt
getsockname
WSAStringToAddressA
WSAAddressToStringA
ntohs
htons
WSACleanup
WSAStartup
inet_addr
WSACreateEvent
listen
closesocket
accept
bind
WSAGetLastError
NDRCContextMarshall
RpcErrorGetNextRecord
I_RpcBindingInqLocalClientPID
RpcServerInqCallAttributesA
RpcBindingVectorFree
RpcMgmtEpEltInqBegin
RpcMgmtSetCancelTimeout
RpcMgmtEpEltInqDone
RpcServerUnregisterIf
RpcBindingCopy
RpcServerUseProtseqEpA
RpcMgmtEpEltInqNextW
RpcEpRegisterA
RpcBindingToStringBindingA
RpcEpUnregister
RpcEpRegisterW
RpcServerInqBindings
RpcMgmtEpEltInqNextA
RpcCancelThread
RpcBindingSetAuthInfoExW
RpcServerInqCallAttributesW
RpcBindingSetAuthInfoExA
I_RpcSendReceive
RpcBindingFree
RpcStringFreeW
RpcRaiseException
RpcSsDestroyClientContext
RpcStringFreeA
RpcErrorEndEnumeration
I_RpcGetBuffer
RpcBindingFromStringBindingA
RpcRevertToSelf
RpcImpersonateClient
RpcServerRegisterIfEx
NDRSContextUnmarshall
RpcErrorStartEnumeration
RpcMgmtSetComTimeout
NDRCContextUnmarshall
I_RpcBindingInqTransportType
RpcStringBindingComposeA
RpcServerUnregisterIfEx
I_RpcFreeBuffer
NDRSContextMarshall
UnloadUserProfile
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
OutOfProcessExceptionEventCallback
OutOfProcessExceptionEventDebuggerLaunchCallback
OutOfProcessExceptionEventSignatureCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ZwCreateKey
ZwQueryValueKey
memcpy
memset
KeWaitForSingleObject
PsCreateSystemThread
PsGetVersion
ObReferenceObjectByHandle
ObfDereferenceObject
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
ZwCreateFile
ZwQueryInformationFile
ZwReadFile
sprintf
swprintf
strchr
_stricmp
_strnicmp
MmGetSystemRoutineAddress
IoAllocateIrp
RtlPrefixUnicodeString
ZwQuerySystemInformation
KeInitializeEvent
IoBuildDeviceIoControlRequest
IofCallDriver
ZwClose
ZwOpenKey
ZwEnumerateValueKey
ZwSetValueKey
wcschr
IofCompleteRequest
DbgPrint
_purecall
strncmp
RtlUnicodeStringToAnsiString
RtlAppendUnicodeStringToString
RtlFreeAnsiString
ExAllocatePool
RtlCompareUnicodeString
RtlEqualUnicodeString
RtlCopyUnicodeString
RtlAppendUnicodeToString
RtlGetVersion
KeInitializeMutex
KeReleaseMutex
MmIsDriverVerifying
IoCreateSymbolicLink
IoDeleteDevice
PsSetLoadImageNotifyRoutine
PsGetCurrentProcessId
IoRegisterBootDriverReinitialization
InitSafeBootMode
KeBugCheckEx
_aullshr
RtlUnwind
ExFreePoolWithTag
ExAllocatePoolWithTag
IoGetRelatedDeviceObject
RtlInitUnicodeString
ZwSetSecurityObject
IoDeviceObjectType
IoCreateDevice
ObOpenObjectByPointer
RtlGetDaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
RtlGetSaclSecurityDescriptor
SeCaptureSecurityDescriptor
_snwprintf
RtlLengthSecurityDescriptor
SeExports
RtlCreateSecurityDescriptor
_wcsnicmp
RtlAbsoluteToSelfRelativeSD
RtlAddAccessAllowedAce
RtlLengthSid
IoIsWdmVersionAvailable
RtlSetDaclSecurityDescriptor
_chkstk
memmove
_allmul
_allshl
_aulldvrm
_aulldiv
KfAcquireSpinLock
HalGetAdapter
KfReleaseSpinLock
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ExAllocatePoolWithTag
ExFreePoolWithTag
RtlCopyUnicodeString
RtlInitUnicodeString
MmGetSystemRoutineAddress
IoWMIRegistrationControl
LdrFindResource_U
LdrAccessResource
_vsnwprintf
InitSafeBootMode
IoGetCurrentProcess
RtlGetVersion
KeWaitForSingleObject
KeReleaseMutex
KeInitializeMutex
ExInitializeRundownProtection
KeDelayExecutionThread
ExReInitializeRundownProtection
ObReferenceObjectByName
IoDriverObjectType
ObfDereferenceObject
ExAcquireRundownProtection
IoAllocateWorkItem
IoQueueWorkItemEx
ExReleaseRundownProtection
IoGetTopLevelIrp
IofCompleteRequest
IoFreeWorkItem
ZwDeviceIoControlFile
ZwUnloadDriver
ZwCreateFile
ZwLoadDriver
ZwClose
ZwQuerySystemInformation
IoWriteErrorLogEntry
_purecall
IoGetBootDiskInformation
IoAllocateErrorLogEntry
FsRtlIsNameInExpression
RtlEqualUnicodeString
ZwEnumerateValueKey
ZwCreateKey
ZwDeleteValueKey
ZwDeleteKey
ZwEnumerateKey
ZwQueryValueKey
ZwSetValueKey
ZwOpenKey
ZwSetSecurityObject
RtlAppendUnicodeStringToString
ObQueryNameString
IoDeleteDevice
ZwOpenSymbolicLinkObject
IoDeleteSymbolicLink
IoCreateSymbolicLink
KeBugCheckEx
KeSetEvent
ExQueueWorkItem
KeInitializeEvent
KeInitializeDpc
KeInitializeTimer
KeSetTimer
KeCancelTimer
ExWaitForRundownProtectionRelease
KeEnterCriticalRegion
ExfAcquirePushLockExclusive
ExfReleasePushLock
KeLeaveCriticalRegion
MmHighestUserAddress
RtlImageNtHeader
RtlLengthSecurityDescriptor
RtlUnwind
SeExports
RtlCreateSecurityDescriptor
_wcsnicmp
wcschr
RtlAbsoluteToSelfRelativeSD
RtlAddAccessAllowedAce
RtlLengthSid
IoIsWdmVersionAvailable
RtlSetDaclSecurityDescriptor
memcpy
memset
IoDeviceObjectType
IoCreateDevice
ObOpenObjectByPointer
RtlGetDaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
RtlGetSaclSecurityDescriptor
SeCaptureSecurityDescriptor
_snwprintf
RtlFreeUnicodeString
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
KldlLoadAndStartDriver
MmGetSystemRoutineAddress
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FltInitializePushLock
FltAcquirePushLockExclusive
FltClose
FltReleasePushLock
FltDeletePushLock
FltCreateFile
FltCreateSystemVolumeInformationFolder
FltCreateFileEx
FltSetInformationFile
FltAcquirePushLockShared
FltAllocateCallbackData
FltLockUserBuffer
FltClearCallbackDataDirty
FltPerformSynchronousIo
FltFreeCallbackData
FltRegisterFilter
FltStartFiltering
FltUnregisterFilter
FltIsVolumeSnapshot
FltAllocateContext
FltQueryVolumeInformation
FltGetVolumeName
FltSetInstanceContext
FltReleaseContext
FltGetInstanceContext
FltGetRequestorProcess
FltGetRequestorProcessIdEx
FltGetFileNameInformation
FltReleaseFileNameInformation
FltGetRoutineAddress
FltObjectReference
FltObjectDereference
FltFsControlFile
FltReadFile
FltGetVolumeFromInstance
FltGetDiskDeviceObject
FltQueryInformationFile
FltFlushBuffers
FltGetEcpListFromCallbackData
FltFindExtraCreateParameter
FltAcknowledgeEcp
FltGetFileNameInformationUnsafe
FltGetDestinationFileNameInformation
FltGetStreamContext
FltSetStreamContext
FltReferenceContext
FltSetStreamHandleContext
FltGetStreamHandleContext
FltEnumerateInstances
FltWriteFile
FltGetVolumeFromDeviceObject
FltGetVolumeGuidName
IoSetThreadHardErrorMode
ObfDereferenceObject
KeGetCurrentThread
RtlInitializeGenericTableAvl
RtlEnumerateGenericTableAvl
RtlDeleteElementGenericTableAvl
RtlCopyUnicodeString
KeQuerySystemTime
RtlInsertElementGenericTableAvl
RtlCompareUnicodeString
RtlLookupElementGenericTableAvl
RtlEnumerateGenericTableWithoutSplayingAvl
PsReferenceImpersonationToken
PsDereferenceImpersonationToken
IoGetCurrentProcess
SeQueryAuthenticationIdToken
PsInitialSystemProcess
PsGetProcessSectionBaseAddress
KeBugCheckEx
ZwQuerySystemInformation
ExFreePoolWithTag
MmGetSystemRoutineAddress
IoWMIRegistrationControl
LdrFindResource_U
LdrAccessResource
_vsnwprintf
RtlAppendUnicodeStringToString
ZwOpenKey
ZwQueryValueKey
ZwClose
RtlGetVersion
InitSafeBootMode
RtlUpcaseUnicodeString
RtlUpcaseUnicodeChar
FsRtlIsNameInExpression
RtlIsGenericTableEmptyAvl
RtlNumberGenericTableElementsAvl
IoGetAttachedDeviceReference
KeInitializeEvent
IoBuildDeviceIoControlRequest
IofCallDriver
KeWaitForSingleObject
MmMapLockedPagesSpecifyCache
RtlDecompressBuffer
ZwSetValueKey
PsGetVersion
RtlAppendUnicodeToString
RtlEqualUnicodeString
PsGetThreadId
KeDelayExecutionThread
PsCreateSystemThread
ObReferenceObjectByHandle
KeSetEvent
KeSetPriorityThread
KeWaitForMultipleObjects
PsTerminateSystemThread
KeClearEvent
IoGetLowerDeviceObject
ExAcquireRundownProtection
ExReleaseRundownProtection
ZwCreateFile
ExInitializeRundownProtection
ZwLoadDriver
ZwDeviceIoControlFile
ExWaitForRundownProtectionRelease
KeAreApcsDisabled
IoBuildAsynchronousFsdRequest
MmUnlockPages
IoFreeMdl
IoFreeIrp
IoAllocateIrp
IoGetTopLevelIrp
IoSetTopLevelIrp
IoGetDeviceAttachmentBaseRef
ZwUnloadDriver
RtlHashUnicodeString
KeEnterCriticalRegion
ExfAcquirePushLockExclusive
ExfAcquirePushLockShared
ExfReleasePushLock
KeLeaveCriticalRegion
ZwDeleteValueKey
MmHighestUserAddress
RtlImageNtHeader
memcpy
RtlUnwind
ExAllocatePoolWithTag
RtlInitUnicodeString
_allmul
_aulldiv
memset
KeGetCurrentIrql
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
KldlLoadAndStartDriver
MmGetSystemRoutineAddress
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ExRundownCompleted
KeDelayExecutionThread
_vsnwprintf
IoGetRequestorProcessId
ZwCreateFile
IoGetRelatedDeviceObject
ObfDereferenceObject
_vsnprintf
RtlInitUnicodeString
ZwOpenSymbolicLinkObject
ExWaitForRundownProtectionRelease
IoDeleteDevice
ExInitializeRundownProtection
IoBuildDeviceIoControlRequest
IoGetDeviceObjectPointer
ObOpenObjectByPointer
IoDeleteSymbolicLink
KeSetEvent
RtlValidSecurityDescriptor
RtlInitAnsiString
ObReferenceObjectByHandle
IoCreateFile
IoCreateDevice
IofCallDriver
KeInitializeEvent
ZwSetSecurityObject
KeWaitForSingleObject
IoCreateSymbolicLink
ZwClose
SeExports
RtlCompareUnicodeString
SeImpersonateClientEx
ZwReadFile
KeGetCurrentThread
PsDereferencePrimaryToken
KeWaitForMultipleObjects
SeCreateClientSecurity
ZwWriteFile
IoAcquireCancelSpinLock
MmMapLockedPagesSpecifyCache
IofCompleteRequest
SeTokenType
IoReleaseCancelSpinLock
PsDereferenceImpersonationToken
KeSetPriorityThread
PsTerminateSystemThread
ObQueryNameString
IoUnregisterPlugPlayNotification
ZwQueryVolumeInformationFile
ExFreePoolWithTag
ZwSetInformationFile
IoRegisterPlugPlayNotification
ZwQueryInformationFile
InterlockedPushEntrySList
InterlockedPopEntrySList
RtlCompareMemory
IoEnumerateDeviceObjectList
ExDeleteResourceLite
ExDeleteNPagedLookasideList
LdrFindResource_U
RtlCopyUnicodeString
RtlGetVersion
ExAcquireRundownProtection
ExInitializeNPagedLookasideList
MmGetSystemRoutineAddress
IoWMIRegistrationControl
ExReleaseRundownProtection
ExInitializeResourceLite
LdrAccessResource
PsSetCreateProcessNotifyRoutine
RtlAppendUnicodeStringToString
KeRestoreFloatingPointState
KeSaveFloatingPointState
ZwDeviceIoControlFile
ZwUnloadDriver
ZwLoadDriver
KeBugCheckEx
ExfAcquirePushLockExclusive
ExfReleasePushLock
ZwCreateKey
ZwQueryValueKey
ZwSetValueKey
ZwOpenKey
MmHighestUserAddress
ZwQuerySystemInformation
RtlImageNtHeader
_alldiv
RtlUnwind
ExAllocatePoolWithTag
KeLeaveCriticalRegion
ExReleaseResourceLite
ExAcquireResourceExclusiveLite
PsCreateSystemThread
KeEnterCriticalRegion
IoDeviceObjectType
RtlGetDaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
RtlGetSaclSecurityDescriptor
SeCaptureSecurityDescriptor
_snwprintf
RtlLengthSecurityDescriptor
RtlCreateSecurityDescriptor
_wcsnicmp
wcschr
RtlAbsoluteToSelfRelativeSD
RtlAddAccessAllowedAce
RtlLengthSid
IoIsWdmVersionAvailable
RtlSetDaclSecurityDescriptor
memcpy
memset
RtlFreeUnicodeString
_allmul
KfRaiseIrql
KeGetCurrentIrql
KfAcquireSpinLock
KfReleaseSpinLock
KfLowerIrql
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
KldlLoadAndStartDriver
MmGetSystemRoutineAddress
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RtlIntegerToUnicodeString
RtlCopyUnicodeString
RtlAppendUnicodeStringToString
IoCreateFile
ZwSetInformationFile
ZwClose
ZwOpenKey
ZwDeleteKey
ZwDeleteValueKey
ZwEnumerateKey
ZwQueryValueKey
RtlUpcaseUnicodeString
bsearch_s
memcmp
memcpy
memset
RtlInitUnicodeString
MmGetSystemRoutineAddress
RtlGetVersion
ExAllocatePoolWithTag
ExFreePoolWithTag
ZwSetValueKey
IoRegisterBootDriverCallback
IoUnregisterBootDriverCallback
InitSafeBootMode
KeQuerySystemTime
ZwCreateKey
RtlEqualUnicodeString
memmove
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RtlIntegerToUnicodeString
RtlCopyUnicodeString
RtlAppendUnicodeStringToString
IoCreateFile
ZwSetInformationFile
ZwClose
ZwOpenKey
ZwDeleteKey
ZwDeleteValueKey
ZwEnumerateKey
ZwQueryValueKey
RtlUpcaseUnicodeString
bsearch_s
memcmp
memcpy
memset
RtlInitUnicodeString
MmGetSystemRoutineAddress
RtlGetVersion
ExAllocatePoolWithTag
ExFreePoolWithTag
ZwSetValueKey
IoRegisterBootDriverCallback
IoUnregisterBootDriverCallback
InitSafeBootMode
KeQuerySystemTime
ZwCreateKey
RtlEqualUnicodeString
memmove
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
NdisFIndicateReceiveNetBufferLists
NdisAllocateCloneOidRequest
NdisFRegisterFilterDriver
NdisAllocateNetBufferListPool
NdisCloseConfiguration
NdisGetPoolFromNetBufferList
NdisFDevicePnPEventNotify
NdisFCancelSendNetBufferLists
NdisOpenConfigurationEx
NdisFSendNetBufferListsComplete
NdisInitializeEvent
NdisFOidRequestComplete
NdisFreeMdl
NdisFOidRequest
NdisFreeNetBufferList
NdisAllocateNetBufferAndNetBufferList
NdisGeneratePartialCancelId
NdisFCancelOidRequest
NdisWaitEvent
NdisSetEvent
NdisFreeMemory
NdisFDeregisterFilterDriver
NdisAllocateMemoryWithTagPriority
NdisFreeNetBufferListPool
NdisFIndicateStatus
NdisCopyFromNetBufferToNetBuffer
NdisGetDataBuffer
NdisCopyReceiveNetBufferListInfo
NdisFSendNetBufferLists
NdisFNetPnPEvent
NdisFReturnNetBufferLists
NdisFSetAttributes
NdisFreeCloneOidRequest
NdisRegisterDeviceEx
NdisDeregisterDeviceEx
NdisAllocateMdl
NdisGetDeviceReservedExtension
KefReleaseSpinLockFromDpcLevel
ExAllocatePoolWithTag
KefAcquireSpinLockAtDpcLevel
ExFreePoolWithTag
MmMapLockedPagesSpecifyCache
ExReleaseRundownProtection
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
KeQuerySystemTime
InterlockedPushEntrySList
InterlockedPopEntrySList
ZwQuerySystemInformation
RtlAppendUnicodeStringToString
ExInitializeRundownProtection
RtlGetVersion
MmGetSystemRoutineAddress
IoWMIRegistrationControl
RtlCompareMemory
ObfDereferenceObject
ObCloseHandle
IoCreateFile
ObfReferenceObject
ZwQueryValueKey
ZwClose
ZwOpenKey
ZwCreateFile
KeInitializeEvent
KeWaitForSingleObject
KeSetEvent
ExReInitializeRundownProtection
KeDelayExecutionThread
ZwDeviceIoControlFile
ZwUnloadDriver
ZwLoadDriver
RtlCopyUnicodeString
ZwDeleteValueKey
KeEnterCriticalRegion
ExfAcquirePushLockExclusive
ExfReleasePushLock
KeLeaveCriticalRegion
PsGetVersion
_vsnwprintf
memmove
RtlUnwind
KeInitializeSpinLock
ExWaitForRundownProtectionRelease
RtlGUIDFromString
ExRundownCompleted
IofCompleteRequest
RtlInitUnicodeString
ExAcquireRundownProtection
KeBugCheckEx
memcpy
memset
KfReleaseSpinLock
KfAcquireSpinLock
KfRaiseIrql
KfLowerIrql
KeReleaseInStackQueuedSpinLock
KeAcquireInStackQueuedSpinLock
KeGetCurrentIrql
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
KldlLoadAndStartDriver
MmGetSystemRoutineAddress
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IoAcquireRemoveLockEx
ObfReferenceObject
ObfDereferenceObject
IoReleaseRemoveLockEx
IoGetAttachedDeviceReference
IoGetLowerDeviceObject
ExAcquireRundownProtection
ExReleaseRundownProtection
ExWaitForRundownProtectionRelease
KeSetEvent
IofCompleteRequest
ExReInitializeRundownProtection
ExFreePoolWithTag
ExRundownCompleted
KeBugCheckEx
KeTickCount
KeAcquireInStackQueuedSpinLockAtDpcLevel
KeReleaseInStackQueuedSpinLockFromDpcLevel
PoSetSystemState
RtlInitUnicodeString
ZwCreateFile
ZwDeviceIoControlFile
KeDelayExecutionThread
ZwClose
IofCallDriver
KeClearEvent
ExAllocatePoolWithTag
KeSetKernelStackSwapEnable
KeWaitForMultipleObjects
KeGetCurrentThread
ZwQuerySystemInformation
MmGetSystemRoutineAddress
IoWMIRegistrationControl
_vsnwprintf
KeInitializeEvent
KeWaitForSingleObject
MmUnlockPages
IoFreeMdl
IoAllocateIrp
IoFreeIrp
IoCancelIrp
IoSetThreadHardErrorMode
RtlCopyUnicodeString
ExReleaseFastMutexUnsafe
MmSystemRangeStart
RtlQueryRegistryValues
ExInitializeRundownProtection
IoCreateDevice
IoAttachDeviceToDeviceStackSafe
IoDeleteDevice
ZwOpenFile
ObReferenceObjectByHandle
IoFileObjectType
IoGetRelatedDeviceObject
RtlGetVersion
InitSafeBootMode
IoRegisterPlugPlayNotification
IoInitializeRemoveLockEx
IoUnregisterPlugPlayNotificationEx
IoFreeWorkItem
IoQueueWorkItem
IoAllocateWorkItem
IoReleaseRemoveLockAndWaitEx
IoDetachDevice
ZwUnloadDriver
ZwLoadDriver
ZwDeleteValueKey
ZwQueryValueKey
ZwOpenKey
ExfAcquirePushLockExclusive
ExfReleasePushLock
PsGetVersion
memcpy
RtlUnwind
KeLeaveCriticalRegion
KeEnterCriticalRegion
RtlAppendUnicodeStringToString
ExAcquireFastMutexUnsafe
memset
KeAcquireInStackQueuedSpinLock
KeGetCurrentIrql
KeReleaseInStackQueuedSpinLock
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
KldlLoadAndStartDriver
MmGetSystemRoutineAddress
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
KeBugCheckEx
ExAcquireFastMutexUnsafe
KeEnterCriticalRegion
ExWaitForRundownProtectionRelease
ExReInitializeRundownProtection
KeSetEvent
ExAcquireRundownProtection
IofCallDriver
PoSetSystemState
IofCompleteRequest
KeAcquireInStackQueuedSpinLockAtDpcLevel
ExReleaseRundownProtection
KeReleaseInStackQueuedSpinLockFromDpcLevel
ExReleaseFastMutexUnsafe
KeLeaveCriticalRegion
KeGetCurrentThread
KeWaitForMultipleObjects
KeClearEvent
KeSetKernelStackSwapEnable
MmUnlockPages
_vsnwprintf
ZwQuerySystemInformation
RtlAppendUnicodeStringToString
IoFreeIrp
IoGetRelatedDeviceObject
ObfDereferenceObject
IoAttachDeviceToDeviceStackSafe
RtlInitUnicodeString
IoDeleteDevice
IoInitializeRemoveLockEx
ExInitializeRundownProtection
RtlCopyUnicodeString
MmSystemRangeStart
IoGetLowerDeviceObject
RtlQueryRegistryValues
IoFileObjectType
ObReferenceObjectByHandle
RtlGetVersion
IoSetThreadHardErrorMode
IoUnregisterPlugPlayNotificationEx
IoRegisterPlugPlayNotification
IoFreeMdl
ObfReferenceObject
KeQueryInterruptTime
IoAllocateIrp
ExAllocatePoolWithTag
IoCreateDevice
ExFreePoolWithTag
IoWMIRegistrationControl
ZwOpenFile
KeInitializeEvent
InitSafeBootMode
KeWaitForSingleObject
ZwClose
IoGetAttachedDeviceReference
IoAllocateWorkItem
IoReleaseRemoveLockAndWaitEx
IoDetachDevice
IoFreeWorkItem
IoQueueWorkItem
KeDelayExecutionThread
ZwDeviceIoControlFile
ZwUnloadDriver
ZwCreateFile
ZwLoadDriver
ExfAcquirePushLockExclusive
ExfReleasePushLock
ZwDeleteValueKey
ZwQueryValueKey
ZwOpenKey
PsGetVersion
memcpy
RtlUnwind
IoReleaseRemoveLockEx
IoAcquireRemoveLockEx
MmGetSystemRoutineAddress
ExRundownCompleted
memset
KeGetCurrentIrql
KeReleaseInStackQueuedSpinLock
KeAcquireInStackQueuedSpinLock
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
KldlLoadAndStartDriver
MmGetSystemRoutineAddress
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
KeWaitForSingleObject
ZwQuerySystemInformation
RtlInitUnicodeString
MmGetSystemRoutineAddress
IoWMIRegistrationControl
LdrFindResource_U
LdrAccessResource
_vsnwprintf
RtlGetVersion
InitSafeBootMode
RtlUpperString
KeDelayExecutionThread
ZwDeviceIoControlFile
ZwUnloadDriver
ZwCreateFile
ZwLoadDriver
RtlCopyUnicodeString
ZwClose
KeBugCheckEx
KeEnterCriticalRegion
ExfAcquirePushLockExclusive
ExFreePoolWithTag
ExfReleasePushLock
KeLeaveCriticalRegion
ZwDeleteValueKey
ZwQueryValueKey
ZwOpenKey
RtlAppendUnicodeStringToString
MmHighestUserAddress
RtlImageNtHeader
memcpy
RtlUnwind
KeInitializeEvent
ExAllocatePoolWithTag
memset
KeAcquireInStackQueuedSpinLock
KeReleaseInStackQueuedSpinLock
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
KldlLoadAndStartDriver
MmGetSystemRoutineAddress
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ObfDereferenceObject
IoGetLowerDeviceObject
ExAcquireRundownProtection
IoQueueWorkItem
ExReleaseRundownProtection
ExAllocatePoolWithTag
IoAllocateWorkItem
ExFreePoolWithTag
RtlCopyUnicodeString
IoFreeWorkItem
MmIsDriverVerifying
KeDelayExecutionThread
IoGetDeviceObjectPointer
IoUnregisterPlugPlayNotificationEx
IoRegisterPlugPlayNotification
KeInitializeEvent
IoBuildDeviceIoControlRequest
IofCallDriver
KeWaitForSingleObject
PsGetCurrentProcessId
PsInitialSystemProcess
PsGetProcessId
PsGetCurrentThreadId
IoGetFileObjectGenericMapping
RtlMapGenericMask
ZwQuerySystemInformation
RtlInitUnicodeString
MmGetSystemRoutineAddress
IoWMIRegistrationControl
LdrFindResource_U
LdrAccessResource
_vsnwprintf
RtlAppendUnicodeStringToString
IoAcquireRemoveLockEx
IofCompleteRequest
IoReleaseRemoveLockEx
RtlGetVersion
ExInitializeRundownProtection
InitSafeBootMode
IoCreateDevice
IoRegisterShutdownNotification
IoInitializeRemoveLockEx
RtlCompareUnicodeString
IoDeleteDevice
ExWaitForRundownProtectionRelease
ExRundownCompleted
IoUnregisterShutdownNotification
KeSetEvent
IoReleaseRemoveLockAndWaitEx
IoDetachDevice
ExGetPreviousMode
MmSystemRangeStart
RtlQueryRegistryValues
ExAcquireFastMutexUnsafe
KeEnterCriticalRegion
ExReleaseFastMutexUnsafe
KeLeaveCriticalRegion
ZwDeviceIoControlFile
ZwUnloadDriver
ZwCreateFile
ZwLoadDriver
ZwClose
MmHighestUserAddress
RtlImageNtHeader
ZwCreateKey
ZwDeleteValueKey
ZwQueryValueKey
ZwSetValueKey
ZwOpenKey
KeBugCheckEx
ExfAcquirePushLockExclusive
ExfReleasePushLock
PsGetVersion
memcpy
RtlUnwind
IoAttachDeviceToDeviceStackSafe
ObfReferenceObject
memset
KeGetCurrentIrql
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
KldlLoadAndStartDriver
MmGetSystemRoutineAddress
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
NdisGetDataBuffer
NdisRetreatNetBufferDataStart
NdisAdvanceNetBufferDataStart
NdisCopyReceiveNetBufferListInfo
NdisCopySendNetBufferListInfo
FwpsInjectionHandleCreate0
FwpsReleaseClassifyHandle0
FwpsFreeCloneNetBufferList0
FwpsAllocateCloneNetBufferList0
FwpsInjectTransportReceiveAsync0
FwpsGetPacketListSecurityInformation0
FwpsFlowAssociateContext0
FwpsFlowRemoveContext0
FwpsAcquireClassifyHandle0
FwpsPendClassify0
FwpsCalloutRegister1
FwpmProviderAdd0
FwpmEngineOpen0
FwpmProviderDeleteByKey0
FwpmEngineClose0
FwpmSubLayerAdd0
FwpmSubLayerDeleteByKey0
FwpsCalloutUnregisterById0
FwpmCalloutDeleteByKey0
FwpmCalloutAdd0
FwpmBfeStateGet0
FwpmBfeStateUnsubscribeChanges0
FwpmBfeStateSubscribeChanges0
FwpmFilterDeleteById0
FwpmFilterAdd0
FwpmTransactionCommit0
FwpmTransactionBegin0
FwpmTransactionAbort0
FwpsCompleteOperation0
FwpsInjectTransportSendAsync1
FwpsQueryPacketInjectionState0
FwpsPendOperation0
FwpsCompleteClassify0
FwpsInjectionHandleDestroy0
ExAcquireSpinLockShared
PsGetCurrentProcessId
ExAcquireRundownProtection
ExAllocatePoolWithTag
ExFreePoolWithTag
PsGetCurrentThreadId
KeFlushQueuedDpcs
ExReleaseRundownProtection
KeBugCheckEx
InterlockedPushEntrySList
ExDeleteNPagedLookasideList
ExInitializeRundownProtection
FirstEntrySList
ExInitializeNPagedLookasideList
KeQuerySystemTime
InterlockedPopEntrySList
_vsnwprintf
ZwQuerySystemInformation
RtlInitUnicodeString
LdrFindResource_U
IoDeleteDevice
RtlGetVersion
ExAcquireResourceSharedLite
IoWMIRegistrationControl
LdrAccessResource
RtlAppendUnicodeStringToString
RtlCopyUnicodeString
ExWaitForRundownProtectionRelease
ZwClose
ZwOpenKey
ExRundownCompleted
RtlInitializeGenericTableAvl
RtlDeleteElementGenericTableAvl
ExDeleteResourceLite
ExAcquireResourceExclusiveLite
RtlLookupElementGenericTableAvl
RtlInsertElementGenericTableAvl
KeAreApcsDisabled
RtlEnumerateGenericTableWithoutSplayingAvl
ExReleaseResourceLite
ExInitializeResourceLite
KeLeaveCriticalRegion
ExReleaseSpinLockExclusive
ExAcquireSpinLockExclusive
ExEnterCriticalRegionAndAcquireResourceExclusive
ZwOpenEvent
ZwCreateEvent
IoCreateDevice
ExUuidCreate
ObfDereferenceObject
ObCloseHandle
IoCreateFile
ObfReferenceObject
IofCompleteRequest
KeDelayExecutionThread
ZwDeviceIoControlFile
ZwUnloadDriver
ZwCreateFile
ZwLoadDriver
ZwCreateKey
ZwDeleteValueKey
ZwSetValueKey
KeSetEvent
ExQueueWorkItem
KeInitializeEvent
KeInitializeDpc
KeInitializeTimer
KeSetTimer
KeCancelTimer
KeWaitForSingleObject
ExfAcquirePushLockExclusive
ExfReleasePushLock
MmHighestUserAddress
RtlImageNtHeader
PsGetVersion
RtlUnwind
ExReleaseSpinLockSharedFromDpcLevel
KeEnterCriticalRegion
ExReleaseResourceAndLeaveCriticalRegion
ExReleaseSpinLockShared
ZwQueryValueKey
MmGetSystemRoutineAddress
ZwSetSecurityObject
IoDeviceObjectType
ObOpenObjectByPointer
RtlGetDaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
RtlGetSaclSecurityDescriptor
SeCaptureSecurityDescriptor
_snwprintf
RtlLengthSecurityDescriptor
SeExports
RtlCreateSecurityDescriptor
_wcsnicmp
wcschr
RtlAbsoluteToSelfRelativeSD
RtlAddAccessAllowedAce
RtlLengthSid
IoIsWdmVersionAvailable
RtlSetDaclSecurityDescriptor
memcpy
memset
RtlFreeUnicodeString
memmove
KfAcquireSpinLock
KeAcquireInStackQueuedSpinLock
KeGetCurrentIrql
KfReleaseSpinLock
KeReleaseInStackQueuedSpinLock
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
KldlLoadAndStartDriver
MmGetSystemRoutineAddress
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FwpsCalloutRegister1
FwpmBfeStateGet0
FwpmBfeStateUnsubscribeChanges0
FwpmBfeStateSubscribeChanges0
FwpsApplyModifiedLayerData0
FwpsAcquireWritableLayerDataPointer0
FwpsStreamContinue0
FwpsInjectNetworkSendAsync0
FwpsCloneStreamData0
FwpsCopyStreamDataToBuffer0
FwpmCalloutDeleteByKey0
FwpsDiscardClonedStreamData0
FwpsCalloutUnregisterByKey0
FwpmProviderAdd0
FwpmProviderDeleteByKey0
FwpsInjectionHandleDestroy0
FwpsInjectForwardAsync0
FwpsInjectNetworkReceiveAsync0
FwpmEngineClose0
FwpmFilterAdd0
FwpmCalloutAdd0
FwpmCalloutDeleteById0
FwpmTransactionAbort0
FwpmFilterDeleteById0
FwpmTransactionBegin0
FwpsFreeNetBufferList0
FwpmEngineOpen0
FwpsAllocateNetBufferAndNetBufferList0
FwpmSubLayerDeleteByKey0
FwpmSubLayerAdd0
FwpmTransactionCommit0
FwpsGetPacketListSecurityInformation0
FwpsAllocateCloneNetBufferList0
FwpsPendClassify0
FwpsAcquireClassifyHandle0
FwpsFreeCloneNetBufferList0
FwpsReleaseClassifyHandle0
FwpsConstructIpHeaderForTransportPacket0
FwpsCompleteClassify0
FwpsInjectionHandleCreate0
FwpsQueryPacketInjectionState0
FwpsInjectTransportSendAsync1
FwpsCalloutUnregisterById0
FwpsInjectTransportReceiveAsync0
FwpsFlowRemoveContext0
FwpsStreamInjectAsync0
FwpsFlowAssociateContext0
NdisCopyReceiveNetBufferListInfo
NdisAdvanceNetBufferDataStart
NdisAllocateNetBufferListPool
NdisCopySendNetBufferListInfo
NdisFreeNetBufferPool
NdisFreeGenericObject
NdisFreeMdl
NdisAllocateGenericObject
NdisGetPoolFromNetBufferList
NdisCopyFromNetBufferToNetBuffer
NdisFreeNetBuffer
NdisAdvanceNetBufferListDataStart
NdisFreeNetBufferListPool
NdisAllocateNetBuffer
NdisGetDataBuffer
NdisAllocateNetBufferPool
NdisRetreatNetBufferListDataStart
NdisRetreatNetBufferDataStart
FreeMibTable
CancelMibChangeNotify2
GetIfTable2Ex
NotifyIpInterfaceChange
KeInitializeSpinLock
ExInitializeRundownProtection
KeReleaseMutex
ExAcquireRundownProtection
KeCancelTimer
ObfReferenceObject
IoCsqRemoveNextIrp
ExAllocatePoolWithTag
KeReleaseGuardedMutex
ExFreePoolWithTag
ExUuidCreate
KeAcquireGuardedMutex
IofCompleteRequest
KeWaitForSingleObject
IoReleaseCancelSpinLock
KeFlushQueuedDpcs
ExReleaseRundownProtection
IoAllocateWorkItem
RtlGUIDFromString
RtlEqualUnicodeString
RtlUpcaseUnicodeChar
RtlInitUnicodeString
IoDeleteDevice
IoDeleteSymbolicLink
RtlPrefixUnicodeString
PsGetCurrentProcessId
ObfDereferenceObject
IoQueueWorkItem
IoCreateSymbolicLink
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
InterlockedPushEntrySList
InterlockedPopEntrySList
ExReleaseSpinLockExclusive
ExReleaseSpinLockShared
ExAcquireSpinLockShared
ExAcquireSpinLockExclusive
IoBuildPartialMdl
IoAllocateMdl
KeSetEvent
IoFreeMdl
KeInitializeEvent
MmMapLockedPagesSpecifyCache
ExRundownCompleted
KeSetTimer
MmUnlockPages
MmProbeAndLockPages
KeInitializeTimer
ProbeForWrite
IoCreateDevice
KeAcquireInStackQueuedSpinLockAtDpcLevel
KeReleaseInStackQueuedSpinLockFromDpcLevel
ProbeForRead
RtlInitializeGenericTableAvl
RtlDeleteElementGenericTableAvl
RtlLookupElementGenericTableAvl
RtlInsertElementGenericTableAvl
RtlGetElementGenericTableAvl
RtlCompareMemory
ExWaitForRundownProtectionRelease
KeQuerySystemTime
KeBugCheckEx
ExReleaseSpinLockSharedFromDpcLevel
ExAcquireSpinLockSharedAtDpcLevel
MmBuildMdlForNonPagedPool
_vsnwprintf
ZwQuerySystemInformation
LdrFindResource_U
EtwWriteTransfer
RtlGetVersion
EtwUnregister
MmGetSystemRoutineAddress
EtwRegister
IoWMIRegistrationControl
LdrAccessResource
PsGetProcessId
PsInitialSystemProcess
RtlAppendUnicodeStringToString
RtlCopyUnicodeString
ZwQueryValueKey
ZwClose
ZwOpenKey
ExDeleteResourceLite
KeEnterCriticalRegion
ZwEnumerateValueKey
ExAcquireResourceExclusiveLite
ZwCreateKey
ZwDeleteValueKey
ExReleaseResourceLite
RtlStringFromGUID
ZwSetValueKey
ExInitializeResourceLite
KeLeaveCriticalRegion
KeDelayExecutionThread
ObCloseHandle
IoCreateFile
ZwWaitForSingleObject
KeWaitForMultipleObjects
PsCreateSystemThread
IoGetCurrentProcess
KeStackAttachProcess
MmUnmapLockedPages
PsGetCurrentThreadId
PsTerminateSystemThread
KeUnstackDetachProcess
ZwDeviceIoControlFile
ZwUnloadDriver
ZwCreateFile
ZwLoadDriver
MmHighestUserAddress
_stricmp
RtlImageNtHeader
ExQueueWorkItem
ExfAcquirePushLockExclusive
ExfReleasePushLock
PsGetVersion
RtlUnwind
KeSetTimerEx
KeInitializeTimerEx
KeInitializeMutex
IoCsqInsertIrpEx
KeInitializeGuardedMutex
KeInitializeDpc
IoCsqInitializeEx
IoFreeWorkItem
ZwSetSecurityObject
IoDeviceObjectType
ObOpenObjectByPointer
RtlGetDaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
RtlGetSaclSecurityDescriptor
SeCaptureSecurityDescriptor
_snwprintf
RtlLengthSecurityDescriptor
SeExports
RtlCreateSecurityDescriptor
_wcsnicmp
wcschr
RtlAbsoluteToSelfRelativeSD
RtlAddAccessAllowedAce
RtlLengthSid
IoIsWdmVersionAvailable
RtlSetDaclSecurityDescriptor
memcpy
memset
RtlFreeUnicodeString
memmove
KfReleaseSpinLock
KfAcquireSpinLock
KeAcquireInStackQueuedSpinLock
KfRaiseIrql
KfLowerIrql
KeGetCurrentIrql
KeReleaseInStackQueuedSpinLock
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
KldlLoadAndStartDriver
MmGetSystemRoutineAddress
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PsGetCurrentProcessId
RtlGetVersion
MmGetSystemRoutineAddress
IoWMIRegistrationControl
IofCompleteRequest
LdrAccessResource
ObfDereferenceObject
ObCloseHandle
KeInitializeSpinLock
IoCreateFile
ObfReferenceObject
KeSetEvent
KeInitializeEvent
KeWaitForSingleObject
KeEnterCriticalRegion
ExAcquireResourceExclusiveLite
ExReleaseResourceLite
KeLeaveCriticalRegion
KeSetTimer
IoAcquireRemoveLockEx
RtlCompareUnicodeString
KeDelayExecutionThread
IoAllocateWorkItem
IoReleaseRemoveLockEx
IoReleaseRemoveLockAndWaitEx
KeInitializeDpc
IoInitializeRemoveLockEx
KeInitializeTimer
RtlCopyUnicodeString
IoDeleteSymbolicLink
KeCancelTimer
IoCsqInitialize
IoCsqRemoveNextIrp
IoFreeWorkItem
IoCsqInsertIrp
IoQueueWorkItem
MmMapLockedPagesSpecifyCache
IoCreateSymbolicLink
KeFlushQueuedDpcs
InterlockedPushEntrySList
InterlockedPopEntrySList
ExDeleteNPagedLookasideList
KefReleaseSpinLockFromDpcLevel
IoDeleteDevice
KefAcquireSpinLockAtDpcLevel
KeQuerySystemTime
_purecall
strncpy
_itoa
KeInitializeMutex
_vsnprintf
KeReleaseMutex
RtlEqualUnicodeString
ZwUnloadDriver
ZwLoadDriver
PsInitialSystemProcess
KeStackAttachProcess
ZwClose
KeUnstackDetachProcess
ZwOpenKey
atoi
strncmp
ZwCreateKey
ZwQueryValueKey
ZwSetValueKey
RtlAppendUnicodeStringToString
ZwReadFile
ZwCreateFile
ZwQueryInformationFile
ZwDeviceIoControlFile
MmHighestUserAddress
_stricmp
RtlImageNtHeader
ZwDeleteValueKey
ExfAcquirePushLockExclusive
ExfReleasePushLock
PsGetVersion
_aullshr
RtlUnwind
LdrFindResource_U
KeBugCheckEx
ZwQuerySystemInformation
_vsnwprintf
ExFreePoolWithTag
ExAllocatePoolWithTag
ExInitializeNPagedLookasideList
RtlInitUnicodeString
ZwSetSecurityObject
IoDeviceObjectType
IoCreateDevice
ObOpenObjectByPointer
RtlGetDaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetOwnerSecurityDescriptor
RtlGetSaclSecurityDescriptor
SeCaptureSecurityDescriptor
_snwprintf
RtlLengthSecurityDescriptor
SeExports
RtlCreateSecurityDescriptor
_wcsnicmp
wcschr
RtlAbsoluteToSelfRelativeSD
RtlAddAccessAllowedAce
RtlLengthSid
IoIsWdmVersionAvailable
RtlSetDaclSecurityDescriptor
memcpy
memset
RtlFreeUnicodeString
KeWaitForMultipleObjects
PsCreateSystemThread
ObReferenceObjectByHandle
PsTerminateSystemThread
_alldiv
_allmul
_allrem
_allshl
_aulldiv
_aullrem
memmove
ExAcquireFastMutex
ExReleaseFastMutex
KfLowerIrql
KfRaiseIrql
KfAcquireSpinLock
KfReleaseSpinLock
KeGetCurrentIrql
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
KldlLoadAndStartDriver
MmGetSystemRoutineAddress
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CryptProtectData
CryptUnprotectData
CryptProtectMemory
CryptUnprotectMemory
GetModuleHandleExW
ReadFile
GetFileSizeEx
WriteFile
CreateFileW
SetFilePointerEx
LocalFree
FlushFileBuffers
SystemTimeToFileTime
TlsSetValue
Sleep
TlsAlloc
TlsGetValue
TlsFree
GetCurrentProcess
TerminateProcess
QueryPerformanceFrequency
ResetEvent
ReleaseSemaphore
CreateSemaphoreW
OutputDebugStringA
GetComputerNameW
CreateDirectoryW
FindFirstFileExW
GetLongPathNameW
DeviceIoControl
GetFinalPathNameByHandleW
UnmapViewOfFile
GetTimeZoneInformation
GetFileAttributesExW
FlushViewOfFile
GetCurrentDirectoryW
VerSetConditionMask
VerifyVersionInfoW
CreateFileMappingW
MapViewOfFile
MoveFileW
VirtualFree
VirtualAlloc
DuplicateHandle
SwitchToThread
ExpandEnvironmentStringsW
WaitForSingleObject
ResumeThread
GetModuleHandleA
LoadLibraryA
CreateThread
CreateProcessW
CreateEventA
GetProcessTimes
GetComputerNameA
ProcessIdToSessionId
WriteProcessMemory
GetNativeSystemInfo
ReadProcessMemory
VirtualQuery
VirtualProtect
QueryPerformanceCounter
GetSystemInfo
ReleaseSRWLockShared
AcquireSRWLockShared
WaitForMultipleObjectsEx
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
RemoveVectoredExceptionHandler
HeapValidate
AddVectoredExceptionHandler
IsDebuggerPresent
SetUnhandledExceptionFilter
OpenEventA
WriteConsoleW
SetStdHandle
GetConsoleOutputCP
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
ReadConsoleW
GetConsoleMode
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetConsoleCtrlHandler
ExitProcess
FreeLibraryAndExitThread
ExitThread
InterlockedFlushSList
RtlUnwind
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
OutputDebugStringW
GetCPInfo
CompareStringEx
GetStringTypeW
GetLocaleInfoEx
LCMapStringEx
WideCharToMultiByte
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetModuleFileNameA
HeapFree
SetThreadPriority
GetModuleHandleExA
GetLastError
GetCurrentThread
GetThreadPriority
RaiseException
HeapAlloc
GetProcAddress
GetProcessHeap
GetModuleHandleW
InitializeCriticalSectionEx
DecodePointer
DeleteCriticalSection
MultiByteToWideChar
HeapSize
HeapReAlloc
HeapDestroy
GetModuleFileNameW
SizeofResource
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
OpenProcess
GetTickCount
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemDirectoryW
SetFileAttributesW
GetTempPathW
GetSystemTimeAsFileTime
WaitForMultipleObjects
TerminateThread
SetEvent
WaitForSingleObjectEx
CloseHandle
CreateEventW
InitializeCriticalSection
lstrlenW
WritePrivateProfileStringW
FindNextFileW
DeleteFileW
GetFileAttributesW
FindFirstFileW
FindClose
GetCurrentProcessId
LoadLibraryExA
GlobalFree
GlobalHandle
lstrcmpW
SetLastError
GetCurrentThreadId
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
LeaveCriticalSection
EnterCriticalSection
EncodePointer
DisableThreadLibraryCalls
LoadLibraryExW
lstrcmpiW
LoadLibraryW
FreeLibrary
FindResourceW
FindResourceExW
LoadResource
LockResource
MapWindowPoints
UnregisterClassW
LoadCursorW
SetCursor
CharNextW
GetFocus
IsChild
GetSysColor
DrawTextW
GetDialogBaseUnits
ReleaseDC
GetDC
EndPaint
GetClientRect
BeginPaint
GetWindow
RegisterClassExW
DefWindowProcW
SetWindowLongW
GetWindowLongW
DestroyAcceleratorTable
GetDesktopWindow
InvalidateRect
CallWindowProcW
InvalidateRgn
FillRect
ReleaseCapture
SetCapture
MoveWindow
ScreenToClient
GetParent
ClientToScreen
CreateAcceleratorTableW
DestroyWindow
CreateWindowExW
GetClassInfoExW
RedrawWindow
SetWindowPos
GetClassNameW
IsWindow
SendMessageW
GetDlgItem
SetFocus
SetWindowTextW
OffsetRect
EqualRect
IntersectRect
UnionRect
PtInRect
GetKeyState
SendDlgItemMessageW
GetNextDlgTabItem
CopyAcceleratorTableW
IsDialogMessageW
ShowWindow
SystemParametersInfoW
DestroyIcon
EndDialog
EnumChildWindows
CreateDialogIndirectParamW
SetWindowContextHelpId
LoadImageW
SetTimer
EnableWindow
GetWindowTextW
GetWindowTextLengthW
RegisterWindowMessageW
MapDialogRect
SetWindowRgn
SetBkColor
CreateRectRgnIndirect
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetObjectW
CreateDCW
LPtoDP
SaveDC
SetMapMode
SetWindowOrgEx
SetViewportOrgEx
DeleteDC
RestoreDC
GetDeviceCaps
CreateFontIndirectW
GetTextMetricsW
GetTextExtentPointW
DeleteObject
SetBkMode
SetTextColor
Rectangle
SelectObject
GetStockObject
RevertToSelf
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
SetSecurityDescriptorDacl
SetEntriesInAclA
InitializeSecurityDescriptor
ConvertStringSidToSidA
MakeSelfRelativeSD
MakeAbsoluteSD
CreateWellKnownSid
CopySid
GetLengthSid
LookupAccountNameW
AdjustTokenPrivileges
EqualSid
AllocateAndInitializeSid
LookupPrivilegeValueA
FreeSid
SetThreadToken
DuplicateTokenEx
RegDeleteKeyW
ConvertStringSecurityDescriptorToSecurityDescriptorA
ImpersonateLoggedOnUser
OpenThreadToken
OpenProcessToken
GetTokenInformation
RegQueryValueExW
RegDeleteValueW
RegCreateKeyExW
CreateILockBytesOnHGlobal
CLSIDFromString
ReadClassStm
OleSaveToStream
WriteClassStm
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder
OleRegGetMiscStatus
OleInitialize
StgCreateDocfileOnILockBytes
CLSIDFromProgID
CoGetClassObject
OleLockRunning
OleUninitialize
CreateStreamOnHGlobal
StringFromGUID2
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
SafeArrayUnlock
SafeArrayDestroy
OleTranslateColor
SysAllocStringByteLen
VariantChangeType
SysStringByteLen
OleCreatePropertyFrame
LoadRegTypeLi
OleCreateFontIndirect
SysAllocStringLen
LoadTypeLi
VarUI4FromStr
DispCallFunc
VariantInit
VariantClear
SysAllocString
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
GetErrorInfo
SysStringLen
SysFreeString
htons
ntohs
WSAAddressToStringA
WSAStringToAddressA
WSAGetLastError
setsockopt
ioctlsocket
WSAEnumNetworkEvents
recv
connect
socket
send
WSAEventSelect
getsockname
WSACreateEvent
listen
closesocket
bind
accept
WSACleanup
WSAStartup
inet_addr
NDRSContextMarshall
RpcErrorEndEnumeration
I_RpcGetBuffer
RpcBindingFromStringBindingA
RpcRevertToSelf
RpcImpersonateClient
RpcServerRegisterIfEx
RpcBindingFree
RpcErrorStartEnumeration
RpcMgmtSetComTimeout
NDRCContextUnmarshall
I_RpcBindingInqTransportType
RpcStringBindingComposeA
RpcServerUnregisterIfEx
I_RpcFreeBuffer
RpcStringFreeA
I_RpcSendReceive
RpcBindingSetAuthInfoExA
RpcServerUseProtseqEpA
NDRCContextMarshall
RpcErrorGetNextRecord
I_RpcBindingInqLocalClientPID
RpcServerInqCallAttributesA
RpcBindingVectorFree
RpcMgmtEpEltInqBegin
RpcMgmtSetCancelTimeout
RpcMgmtEpEltInqDone
RpcServerUnregisterIf
RpcBindingCopy
RpcStringFreeW
RpcMgmtEpEltInqNextW
RpcEpRegisterA
RpcBindingToStringBindingA
RpcEpUnregister
RpcEpRegisterW
RpcServerInqBindings
RpcMgmtEpEltInqNextA
RpcCancelThread
RpcBindingSetAuthInfoExW
RpcServerInqCallAttributesW
NDRSContextUnmarshall
RpcSsDestroyClientContext
RpcRaiseException
UnloadUserProfile
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ExchEntryPoint
OutOfProcessExceptionEventCallback
OutOfProcessExceptionEventDebuggerLaunchCallback
OutOfProcessExceptionEventSignatureCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ