Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.20bc1e0280cac8efef0f5c694c471b10.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.20bc1e0280cac8efef0f5c694c471b10.dll
Resource
win10v2004-20231023-en
Target
NEAS.20bc1e0280cac8efef0f5c694c471b10.exe
Size
41KB
MD5
20bc1e0280cac8efef0f5c694c471b10
SHA1
bcc37ba1f6e5ab5d03b42124fa96d6d2a1960821
SHA256
30d50f842a586019d920ca9b083d3ee35e2b7be2ea83cb6503c4d669ad6d5a6b
SHA512
6ac7032343ac280826f65b64a5e4a32d86774a9bd3d4cc6078499c92c465a40faa2d55c3fb30f040204ef865f9c2893ddd138e159d75b969b10f34d4d48ef220
SSDEEP
768:PdNtcNwLGFJo174vCLtZkHmLng+L8+YbXcYiQDKyiR3b8b:SNDU1g+L6s7Qmyil4
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
CompareStringW
CopyFileExW
CreateDirectoryW
CreateFileMappingW
CreateFileW
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
ExpandEnvironmentStringsW
FindClose
FindFirstFileW
FindNextFileW
FindResourceExW
FormatMessageW
FreeLibrary
GetCommandLineW
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeW
GetFileAttributesW
GetFileInformationByHandle
GetFileType
GetFullPathNameW
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTempFileNameW
GetTickCount
GetVersionExW
HeapAlloc
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
IsWow64Process
LeaveCriticalSection
LoadLibraryExW
LoadResource
LockResource
MapViewOfFile
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReadFile
SearchPathW
SetConsoleCtrlHandler
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetLastError
SetThreadUILanguage
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
CreateEventW
CreateFileA
CreateMutexA
CreateMutexW
CreateProcessW
DebugBreak
DeleteFileA
DeleteFileW
DisableThreadLibraryCalls
DuplicateHandle
ExitProcess
ExpandEnvironmentStringsA
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsW
GetCurrentDirectoryW
GetCurrentThread
GetEnvironmentStringsW
GetExitCodeProcess
GetFileSize
GetFileSizeEx
GetLocalTime
GetModuleFileNameA
GetNativeSystemInfo
GetSystemDirectoryW
GetTempPathW
GetThreadLocale
GetVersion
GetVolumeNameForVolumeMountPointW
GetVolumePathNameW
GetWindowsDirectoryW
IsDebuggerPresent
LoadLibraryExA
MoveFileExW
ReleaseMutex
SetThreadLocale
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualQuery
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatW
GetLocaleInfoW
GetNumberFormatW
GetTimeFormatW
GetModuleHandleA
AcquireSRWLockExclusive
GetFinalPathNameByHandleW
GetOverlappedResult
GetVolumePathNamesForVolumeNameW
ReleaseSRWLockExclusive
RemoveDirectoryW
VirtualProtect
CreateSemaphoreExW
CreateThread
GetSystemFirmwareTable
InitializeCriticalSectionEx
ReleaseSemaphore
VirtualAlloc
VirtualFree
WaitForMultipleObjectsEx
DeleteVolumeMountPointW
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetFileTime
GetLogicalDrives
GetVolumeInformationW
LockFileEx
QueryDosDeviceW
SetEndOfFile
SetFilePointerEx
UnlockFileEx
VerSetConditionMask
InitializeSListHead
IsProcessorFeaturePresent
memset
_except_handler4_common
__std_type_info_destroy_list
_configure_narrow_argv
_initterm_e
_initialize_onexit_table
_execute_onexit_table
_cexit
_seh_filter_dll
_initterm
_initialize_narrow_environment
??4CDownlevelKernel32L1@@QAEAAV0@$$QAV0@@Z
??4CDownlevelKernel32L1@@QAEAAV0@ABV0@@Z
?AcquireSRWLockExclusive@CDownlevelKernel32L1@@QAGXPAU_RTL_SRWLOCK@@@Z
?CloseHandle@CDownlevelKernel32L1@@QAGHPAX@Z
?CompareStringW@CDownlevelKernel32L1@@QAGHKKPB_WH0H@Z
?CopyFileExW@CDownlevelKernel32L1@@QAGHPB_W0P6GKT_LARGE_INTEGER@@111KKPAX22@Z2PAHK@Z
?CreateDirectoryW@CDownlevelKernel32L1@@QAGHPB_WPAU_SECURITY_ATTRIBUTES@@@Z
?CreateEventW@CDownlevelKernel32L1@@QAGPAXPAU_SECURITY_ATTRIBUTES@@HHPB_W@Z
?CreateFileA@CDownlevelKernel32L1@@QAGPAXPBDKKPAU_SECURITY_ATTRIBUTES@@KKPAX@Z
?CreateFileMappingW@CDownlevelKernel32L1@@QAGPAXPAXPAU_SECURITY_ATTRIBUTES@@KKKPB_W@Z
?CreateFileW@CDownlevelKernel32L1@@QAGPAXPB_WKKPAU_SECURITY_ATTRIBUTES@@KKPAX@Z
?CreateMutexA@CDownlevelKernel32L1@@QAGPAXPAU_SECURITY_ATTRIBUTES@@HPBD@Z
?CreateMutexW@CDownlevelKernel32L1@@QAGPAXPAU_SECURITY_ATTRIBUTES@@HPB_W@Z
?CreateProcessW@CDownlevelKernel32L1@@QAGHPB_WPA_WPAU_SECURITY_ATTRIBUTES@@2HKPAX0PAU_STARTUPINFOW@@PAU_PROCESS_INFORMATION@@@Z
?CreateSemaphoreExW@CDownlevelKernel32L1@@QAGPAXPAU_SECURITY_ATTRIBUTES@@JJPB_WKK@Z
?CreateThread@CDownlevelKernel32L1@@QAGPAXPAU_SECURITY_ATTRIBUTES@@KP6GKPAX@Z1KPAK@Z
?DebugBreak@CDownlevelKernel32L1@@QAGXXZ
?DeleteCriticalSection@CDownlevelKernel32L1@@QAGXPAU_RTL_CRITICAL_SECTION@@@Z
?DeleteFileA@CDownlevelKernel32L1@@QAGHPBD@Z
?DeleteFileW@CDownlevelKernel32L1@@QAGHPB_W@Z
?DeleteVolumeMountPointW@CDownlevelKernel32L1@@QAGHPB_W@Z
?DeviceIoControl@CDownlevelKernel32L1@@QAGHPAXK0K0KPAKPAU_OVERLAPPED@@@Z
?DisableThreadLibraryCalls@CDownlevelKernel32L1@@QAGHPAUHINSTANCE__@@@Z
?DuplicateHandle@CDownlevelKernel32L1@@QAGHPAX00PAPAXKHK@Z
?EnterCriticalSection@CDownlevelKernel32L1@@QAGXPAU_RTL_CRITICAL_SECTION@@@Z
?ExitProcess@CDownlevelKernel32L1@@QAGXI@Z
?ExpandEnvironmentStringsA@CDownlevelKernel32L1@@QAGKPBDPADK@Z
?ExpandEnvironmentStringsW@CDownlevelKernel32L1@@QAGKPB_WPA_WK@Z
?FileTimeToLocalFileTime@CDownlevelKernel32L1@@QAGHPBU_FILETIME@@PAU2@@Z
?FileTimeToSystemTime@CDownlevelKernel32L1@@QAGHPBU_FILETIME@@PAU_SYSTEMTIME@@@Z
?FindClose@CDownlevelKernel32L1@@QAGHPAX@Z
?FindFirstFileW@CDownlevelKernel32L1@@QAGPAXPB_WPAU_WIN32_FIND_DATAW@@@Z
?FindFirstVolumeW@CDownlevelKernel32L1@@QAGPAXPA_WK@Z
?FindNextFileW@CDownlevelKernel32L1@@QAGHPAXPAU_WIN32_FIND_DATAW@@@Z
?FindNextVolumeW@CDownlevelKernel32L1@@QAGHPAXPA_WK@Z
?FindResourceExW@CDownlevelKernel32L1@@QAGPAUHRSRC__@@PAUHINSTANCE__@@PB_W1G@Z
?FindVolumeClose@CDownlevelKernel32L1@@QAGHPAX@Z
?FlushFileBuffers@CDownlevelKernel32L1@@QAGHPAX@Z
?FormatMessageA@CDownlevelKernel32L1@@QAGKKPBXKKPADKPAPAD@Z
?FormatMessageW@CDownlevelKernel32L1@@QAGKKPBXKKPA_WKPAPAD@Z
?FreeEnvironmentStringsW@CDownlevelKernel32L1@@QAGHPA_W@Z
?FreeLibrary@CDownlevelKernel32L1@@QAGHPAUHINSTANCE__@@@Z
?GetCommandLineW@CDownlevelKernel32L1@@QAGPA_WXZ
?GetConsoleMode@CDownlevelKernel32L1@@QAGHPAXPAK@Z
?GetCurrentDirectoryW@CDownlevelKernel32L1@@QAGKKPA_W@Z
?GetCurrentProcess@CDownlevelKernel32L1@@QAGPAXXZ
?GetCurrentProcessId@CDownlevelKernel32L1@@QAGKXZ
?GetCurrentThread@CDownlevelKernel32L1@@QAGPAXXZ
?GetCurrentThreadId@CDownlevelKernel32L1@@QAGKXZ
?GetDateFormatW@CDownlevelKernel32L1@@QAGHKKPBU_SYSTEMTIME@@PB_WPA_WH@Z
?GetDiskFreeSpaceExW@CDownlevelKernel32L1@@QAGHPB_WPAT_ULARGE_INTEGER@@11@Z
?GetDiskFreeSpaceW@CDownlevelKernel32L1@@QAGHPB_WPAK111@Z
?GetDriveTypeW@CDownlevelKernel32L1@@QAGIPB_W@Z
?GetEnvironmentStringsW@CDownlevelKernel32L1@@QAGPA_WXZ
?GetExitCodeProcess@CDownlevelKernel32L1@@QAGHPAXPAK@Z
?GetFileAttributesW@CDownlevelKernel32L1@@QAGKPB_W@Z
?GetFileInformationByHandle@CDownlevelKernel32L1@@QAGHPAXPAU_BY_HANDLE_FILE_INFORMATION@@@Z
?GetFileSize@CDownlevelKernel32L1@@QAGKPAXPAK@Z
?GetFileSizeEx@CDownlevelKernel32L1@@QAGHPAXPAT_LARGE_INTEGER@@@Z
?GetFileTime@CDownlevelKernel32L1@@QAGHPAXPAU_FILETIME@@11@Z
?GetFileType@CDownlevelKernel32L1@@QAGKPAX@Z
?GetFinalPathNameByHandleW@CDownlevelKernel32L1@@QAGKPAXPA_WKK@Z
?GetFullPathNameW@CDownlevelKernel32L1@@QAGKPB_WKPA_WPAPA_W@Z
?GetLastError@CDownlevelKernel32L1@@QAGKXZ
?GetLocalTime@CDownlevelKernel32L1@@QAGXPAU_SYSTEMTIME@@@Z
?GetLocaleInfoW@CDownlevelKernel32L1@@QAGHKKPA_WH@Z
?GetLogicalDrives@CDownlevelKernel32L1@@QAGKXZ
?GetModuleFileNameA@CDownlevelKernel32L1@@QAGKPAUHINSTANCE__@@PADK@Z
?GetModuleFileNameW@CDownlevelKernel32L1@@QAGKPAUHINSTANCE__@@PA_WK@Z
?GetModuleHandleA@CDownlevelKernel32L1@@QAGPAUHINSTANCE__@@PBD@Z
?GetModuleHandleExW@CDownlevelKernel32L1@@QAGHKPB_WPAPAUHINSTANCE__@@@Z
?GetModuleHandleW@CDownlevelKernel32L1@@QAGPAUHINSTANCE__@@PB_W@Z
?GetNativeSystemInfo@CDownlevelKernel32L1@@QAGXPAU_SYSTEM_INFO@@@Z
?GetNumberFormatW@CDownlevelKernel32L1@@QAGHKKPB_WPBU_numberfmtW@@PA_WH@Z
?GetOverlappedResult@CDownlevelKernel32L1@@QAGHPAXPAU_OVERLAPPED@@PAKH@Z
?GetProcAddress@CDownlevelKernel32L1@@QAGP6GHXZPAUHINSTANCE__@@PBD@Z
?GetProcessHeap@CDownlevelKernel32L1@@QAGPAXXZ
?GetStdHandle@CDownlevelKernel32L1@@QAGPAXK@Z
?GetSystemDirectoryW@CDownlevelKernel32L1@@QAGIPA_WI@Z
?GetSystemFirmwareTable@CDownlevelKernel32L1@@QAGIKKPAXK@Z
?GetSystemInfo@CDownlevelKernel32L1@@QAGXPAU_SYSTEM_INFO@@@Z
?GetSystemTimeAsFileTime@CDownlevelKernel32L1@@QAGXPAU_FILETIME@@@Z
?GetSystemWindowsDirectoryW@CDownlevelKernel32L1@@QAGIPA_WI@Z
?GetTempFileNameW@CDownlevelKernel32L1@@QAGIPB_W0IPA_W@Z
?GetTempPathW@CDownlevelKernel32L1@@QAGKKPA_W@Z
?GetThreadLocale@CDownlevelKernel32L1@@QAGKXZ
?GetTickCount@CDownlevelKernel32L1@@QAGKXZ
?GetTimeFormatW@CDownlevelKernel32L1@@QAGHKKPBU_SYSTEMTIME@@PB_WPA_WH@Z
?GetVersion@CDownlevelKernel32L1@@QAGKXZ
?GetVersionExW@CDownlevelKernel32L1@@QAGHPAU_OSVERSIONINFOW@@@Z
?GetVolumeInformationW@CDownlevelKernel32L1@@QAGHPB_WPA_WKPAK221K@Z
?GetVolumeNameForVolumeMountPointW@CDownlevelKernel32L1@@QAGHPB_WPA_WK@Z
?GetVolumePathNameW@CDownlevelKernel32L1@@QAGHPB_WPA_WK@Z
?GetVolumePathNamesForVolumeNameW@CDownlevelKernel32L1@@QAGHPB_WPA_WKPAK@Z
?GetWindowsDirectoryW@CDownlevelKernel32L1@@QAGIPA_WI@Z
?HeapAlloc@CDownlevelKernel32L1@@QAGPAXPAXKK@Z
?HeapDestroy@CDownlevelKernel32L1@@QAGHPAX@Z
?HeapFree@CDownlevelKernel32L1@@QAGHPAXK0@Z
?HeapReAlloc@CDownlevelKernel32L1@@QAGPAXPAXK0K@Z
?HeapSize@CDownlevelKernel32L1@@QAGKPAXKPBX@Z
?InitializeCriticalSection@CDownlevelKernel32L1@@QAGXPAU_RTL_CRITICAL_SECTION@@@Z
?InitializeCriticalSectionEx@CDownlevelKernel32L1@@QAGHPAU_RTL_CRITICAL_SECTION@@KK@Z
?IsDebuggerPresent@CDownlevelKernel32L1@@QAGHXZ
?IsWow64Process@CDownlevelKernel32L1@@QAGHPAXPAH@Z
?LeaveCriticalSection@CDownlevelKernel32L1@@QAGXPAU_RTL_CRITICAL_SECTION@@@Z
?LoadLibraryExA@CDownlevelKernel32L1@@QAGPAUHINSTANCE__@@PBDPAXK@Z
?LoadLibraryExW@CDownlevelKernel32L1@@QAGPAUHINSTANCE__@@PB_WPAXK@Z
?LoadResource@CDownlevelKernel32L1@@QAGPAXPAUHINSTANCE__@@PAUHRSRC__@@@Z
?LockFileEx@CDownlevelKernel32L1@@QAGHPAXKKKKPAU_OVERLAPPED@@@Z
?LockResource@CDownlevelKernel32L1@@QAGPAXPAX@Z
?MapViewOfFile@CDownlevelKernel32L1@@QAGPAXPAXKKKK@Z
?MoveFileExW@CDownlevelKernel32L1@@QAGHPB_W0K@Z
?MultiByteToWideChar@CDownlevelKernel32L1@@QAGHIKPBDHPA_WH@Z
?OutputDebugStringA@CDownlevelKernel32L1@@QAGXPBD@Z
?OutputDebugStringW@CDownlevelKernel32L1@@QAGXPB_W@Z
?QueryDosDeviceW@CDownlevelKernel32L1@@QAGKPB_WPA_WK@Z
?QueryPerformanceCounter@CDownlevelKernel32L1@@QAGHPAT_LARGE_INTEGER@@@Z
?RaiseException@CDownlevelKernel32L1@@QAGXKKKPBK@Z
?ReadFile@CDownlevelKernel32L1@@QAGHPAX0KPAKPAU_OVERLAPPED@@@Z
?ReleaseMutex@CDownlevelKernel32L1@@QAGHPAX@Z
?ReleaseSRWLockExclusive@CDownlevelKernel32L1@@QAGXPAU_RTL_SRWLOCK@@@Z
?ReleaseSemaphore@CDownlevelKernel32L1@@QAGHPAXJPAJ@Z
?RemoveDirectoryW@CDownlevelKernel32L1@@QAGHPB_W@Z
?SearchPathW@CDownlevelKernel32L1@@QAGKPB_W00KPA_WPAPA_W@Z
?SetConsoleCtrlHandler@CDownlevelKernel32L1@@QAGHP6GHK@ZH@Z
?SetEndOfFile@CDownlevelKernel32L1@@QAGHPAX@Z
?SetErrorMode@CDownlevelKernel32L1@@QAGII@Z
?SetEvent@CDownlevelKernel32L1@@QAGHPAX@Z
?SetFileAttributesW@CDownlevelKernel32L1@@QAGHPB_WK@Z
?SetFilePointer@CDownlevelKernel32L1@@QAGKPAXJPAJK@Z
?SetFilePointerEx@CDownlevelKernel32L1@@QAGHPAXT_LARGE_INTEGER@@PAT2@K@Z
?SetLastError@CDownlevelKernel32L1@@QAGXK@Z
?SetThreadLocale@CDownlevelKernel32L1@@QAGHK@Z
?SetThreadUILanguage@CDownlevelKernel32L1@@QAGGG@Z
?SetUnhandledExceptionFilter@CDownlevelKernel32L1@@QAGP6GJPAU_EXCEPTION_POINTERS@@@ZP6GJ0@Z@Z
?SizeofResource@CDownlevelKernel32L1@@QAGKPAUHINSTANCE__@@PAUHRSRC__@@@Z
?Sleep@CDownlevelKernel32L1@@QAGXK@Z
?TerminateProcess@CDownlevelKernel32L1@@QAGHPAXI@Z
?TlsAlloc@CDownlevelKernel32L1@@QAGKXZ
?TlsFree@CDownlevelKernel32L1@@QAGHK@Z
?TlsGetValue@CDownlevelKernel32L1@@QAGPAXK@Z
?TlsSetValue@CDownlevelKernel32L1@@QAGHKPAX@Z
?UnhandledExceptionFilter@CDownlevelKernel32L1@@QAGJPAU_EXCEPTION_POINTERS@@@Z
?UnlockFileEx@CDownlevelKernel32L1@@QAGHPAXKKKPAU_OVERLAPPED@@@Z
?UnmapViewOfFile@CDownlevelKernel32L1@@QAGHPBX@Z
?VerSetConditionMask@CDownlevelKernel32L1@@QAG_K_KKE@Z
?VirtualAlloc@CDownlevelKernel32L1@@QAGPAXPAXKKK@Z
?VirtualFree@CDownlevelKernel32L1@@QAGHPAXKK@Z
?VirtualProtect@CDownlevelKernel32L1@@QAGHPAXKKPAK@Z
?VirtualQuery@CDownlevelKernel32L1@@QAGKPBXPAU_MEMORY_BASIC_INFORMATION@@K@Z
?WaitForMultipleObjectsEx@CDownlevelKernel32L1@@QAGKKPBQAXHKH@Z
?WaitForSingleObject@CDownlevelKernel32L1@@QAGKPAXK@Z
?WideCharToMultiByte@CDownlevelKernel32L1@@QAGHIKPB_WHPADHPBDPAH@Z
?WriteConsoleW@CDownlevelKernel32L1@@QAGHPAXPBXKPAK0@Z
?WriteFile@CDownlevelKernel32L1@@QAGHPAXPBXKPAKPAU_OVERLAPPED@@@Z
AcquireSRWLockExclusive
CloseHandle
CompareStringW
CopyFileExW
CreateDirectoryW
CreateEventW
CreateFileA
CreateFileMappingW
CreateFileW
CreateMutexA
CreateMutexW
CreateProcessW
CreateSemaphoreExW
CreateThread
DebugBreak
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeleteVolumeMountPointW
DeviceIoControl
DisableThreadLibraryCalls
DuplicateHandle
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileW
FindFirstVolumeW
FindNextFileW
FindNextVolumeW
FindResourceExW
FindVolumeClose
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetCommandLineW
GetConsoleMode
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDriveTypeW
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoW
GetLogicalDrives
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNativeSystemInfo
GetNumberFormatW
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetStdHandle
GetSystemDirectoryW
GetSystemFirmwareTable
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTempFileNameW
GetTempPathW
GetThreadLocale
GetTickCount
GetTimeFormatW
GetVersion
GetVersionExW
GetVolumeInformationW
GetVolumeNameForVolumeMountPointW
GetVolumePathNameW
GetVolumePathNamesForVolumeNameW
GetWindowsDirectoryW
HeapAlloc
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionEx
IsDebuggerPresent
IsWow64Process
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadResource
LockFileEx
LockResource
MapViewOfFile
MoveFileExW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryDosDeviceW
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSemaphore
RemoveDirectoryW
SearchPathW
SetConsoleCtrlHandler
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetLastError
SetThreadLocale
SetThreadUILanguage
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFileEx
UnmapViewOfFile
VerSetConditionMask
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ