Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
4a01790f8a52bf587976629a00004041.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4a01790f8a52bf587976629a00004041.exe
Resource
win10v2004-20231215-en
Target
4a01790f8a52bf587976629a00004041
Size
421KB
MD5
4a01790f8a52bf587976629a00004041
SHA1
eed197363632b99d1914603e6693e7b84476c073
SHA256
797545666dfa858a5c23abe579c1c6bcb4f7fec5d1246af47b8a8bbd47b7573a
SHA512
8edaecb0ecf2b74988b4c6f0029f58ac738a75d765bda78f15a1b2eef2586c85f70c06c236bd0d1e09b52d3cdabc8999db0a52a6161fdf273581bb06a94969eb
SSDEEP
6144:BA2uJBvrsNVJpwVklxYACeHFoFqOmvyOYXYGKAsSb5Ni:BA/ZQNPpwKGAC2By3XiAF5A
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
htonl
inet_addr
CopySid
GetLengthSid
IsValidSid
InitializeSecurityDescriptor
CreateWellKnownSid
LookupAccountSidW
ConvertSidToStringSidW
EqualSid
ChangeServiceConfigW
ChangeServiceConfig2W
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExW
ControlService
DeleteService
CreateServiceW
RegEnumKeyExW
OpenSCManagerW
OpenServiceW
CloseServiceHandle
SetServiceStatus
RegisterEventSourceW
ReportEventW
DeregisterEventSource
RegQueryInfoKeyW
RegSetValueExW
RegQueryValueExW
SetSecurityDescriptorOwner
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
OpenThreadToken
OpenProcessToken
SetSecurityDescriptorDacl
InitializeAcl
AddAccessAllowedAce
GetAclInformation
AddAce
GetAce
GetTokenInformation
SetSecurityDescriptorGroup
RegisterDeviceNotificationW
LoadStringW
CharNextW
CharUpperW
TranslateMessage
DispatchMessageW
GetMessageW
PostThreadMessageW
MessageBoxW
UnregisterDeviceNotification
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
?handle_output@ACE_Event_Handler@@UAEHPAX@Z
?remove_reference@ACE_Event_Handler@@UAEJXZ
?close@ACE_Task_Base@@UAEHK@Z
?module_closed@ACE_Task_Base@@UAEHXZ
?put@ACE_Task_Base@@UAEHPAVACE_Message_Block@@PAVACE_Time_Value@@@Z
?activate@ACE_Task_Base@@UAEHJHHJHPAV1@QAPAX1QAIQAKQAPBD@Z
?wait@ACE_Task_Base@@UAEHXZ
?init@ACE_Shared_Object@@UAEHHQAPA_W@Z
?info@ACE_Shared_Object@@UBEHPAPA_WI@Z
?instance@ACE_Service_Repository@@SAPAV1@I@Z
?find@ACE_Service_Repository@@QBEHQB_WPAPBVACE_Service_Type@@_N@Z
?remove@ACE_Service_Repository@@QAEHQB_WPAPAVACE_Service_Type@@@Z
?reactor_timer_interface@ACE_Event_Handler@@UBEPAVACE_Reactor_Timer_Interface@@XZ
?reactor@ACE_Event_Handler@@UAEXPAVACE_Reactor@@@Z
?reactor@ACE_Event_Handler@@UBEPAVACE_Reactor@@XZ
?handle_group_qos@ACE_Event_Handler@@UAEHPAX@Z
?handle_qos@ACE_Event_Handler@@UAEHPAX@Z
?resume_handler@ACE_Event_Handler@@UAEHXZ
?handle_signal@ACE_Event_Handler@@UAEHHPAUsiginfo_t@@PAH@Z
?handle_close@ACE_Event_Handler@@UAEHPAXK@Z
?handle_exit@ACE_Event_Handler@@UAEHPAVACE_Process@@@Z
?handle_timeout@ACE_Event_Handler@@UAEHABVACE_Time_Value@@PBX@Z
?handle_input@ACE_Event_Handler@@UAEHPAX@Z
?priority@ACE_Event_Handler@@UBEHXZ
?priority@ACE_Event_Handler@@UAEXH@Z
?set_handle@ACE_Event_Handler@@UAEXPAX@Z
?get_handle@ACE_Event_Handler@@UBEPAXXZ
?process_directive@ACE_Service_Config@@SAHQB_W@Z
?owner@ACE_Reactor@@QAEHKPAK@Z
?resume_handlers@ACE_Reactor@@QAEHXZ
?close@ACE_Reactor@@QAEHXZ
?release@ACE_Mutex@@QAEHXZ
?acquire@ACE_Mutex@@QAEHXZ
??0ACE_NT_Service@@QAE@KKK@Z
?remove_at_exit@ACE_Object_Manager@@SAHPAX@Z
?self@ACE_Thread@@SAKXZ
?resume@ACE_Service_Repository@@QAEHQB_WPAPBVACE_Service_Type@@@Z
?suspend@ACE_Service_Repository@@QAEHQB_WPAPBVACE_Service_Type@@@Z
??1ACE_NT_Service@@UAE@XZ
?open@ACE_NT_Service@@UAEHPAX@Z
?fini@ACE_NT_Service@@UAEHXZ
??9?$ACE_String_Base_Iterator@_W@@QBE_NABV0@@Z
??E?$ACE_String_Base_Iterator@_W@@QAEAAV0@XZ
??D?$ACE_String_Base_Iterator@_W@@QAEAA_WXZ
??1?$ACE_String_Base_Iterator@_W@@QAE@XZ
??0?$ACE_String_Base_Iterator@_W@@QAE@ABV0@@Z
?putq@?$ACE_Task@VACE_MT_SYNCH@@@@QAEHPAVACE_Message_Block@@PAVACE_Time_Value@@@Z
?run_reactor_event_loop@ACE_Reactor@@QAEHP6AHPAV1@@Z@Z
?instance@ACE_Reactor@@SAPAV1@XZ
?end@?$ACE_String_Base@_W@@QAE?AV?$ACE_String_Base_Iterator@_W@@XZ
?begin@?$ACE_String_Base@_W@@QAE?AV?$ACE_String_Base_Iterator@_W@@XZ
?log@ACE_Log_Msg@@QAAHW4ACE_Log_Priority@@PB_WZZ
?conditional_set@ACE_Log_Msg@@QAEXPBDHHH@Z
?instance@ACE_Log_Msg@@SAPAV1@XZ
?last_error_adapter@ACE_Log_Msg@@SAHXZ
??0?$ACE_String_Base@_W@@QAE@PB_WPAVACE_Allocator@@_N@Z
??1?$ACE_String_Base@_W@@QAE@XZ
??1ACE_Cleanup@@UAE@XZ
?mutex_lock@ACE_OS@@YAHPAUACE_mutex_t@@@Z
?remove_at_exit_i@ACE_Object_Manager@@AAEHPAX@Z
?instance@ACE_Object_Manager@@SAPAV1@XZ
?get_singleton_lock@ACE_Object_Manager@@SAHAAPAVACE_Mutex@@@Z
?shutting_down@ACE_Object_Manager@@SAHXZ
?starting_up@ACE_Object_Manager@@SAHXZ
?init@ACE@@YAHXZ
?fini@ACE@@YAHXZ
??0?$ACE_String_Base@_W@@QAE@ABV0@@Z
?data_block@ACE_Message_Block@@QAEXPAVACE_Data_Block@@@Z
??0ACE_Data_Block@@QAE@XZ
??0ACE_Message_Block@@QAE@PAVACE_Allocator@@@Z
?clone@ACE_Message_Block@@UBEPAV1@K@Z
?duplicate@ACE_Message_Block@@UBEPAV1@XZ
?release@ACE_Message_Block@@UAEPAV1@XZ
?clone@ACE_Data_Block@@UBEPAV1@K@Z
?clone_nocopy@ACE_Data_Block@@UBEPAV1@KI@Z
?release_i@ACE_Data_Block@@MAEPAV1@XZ
??1ACE_Data_Block@@UAE@XZ
??1ACE_Message_Block@@UAE@XZ
??9?$ACE_String_Base@_W@@QBE_NABV0@@Z
?c_str@?$ACE_String_Base@_W@@QBEPB_WXZ
?length@?$ACE_String_Base@_W@@QBEIXZ
?append@?$ACE_String_Base@_W@@QAEAAV1@PB_WI@Z
??Y?$ACE_String_Base@_W@@QAEAAV0@ABV0@@Z
??4?$ACE_String_Base@_W@@QAEAAV0@PB_W@Z
??4?$ACE_String_Base@_W@@QAEAAV0@ABV0@@Z
??0?$ACE_String_Base@_W@@QAE@PAVACE_Allocator@@@Z
??0?$ACE_String_Base@_W@@QAE@I_WPAVACE_Allocator@@@Z
?report_status@ACE_NT_Service@@IAEHKK@Z
?startup@ACE_NT_Service@@QAEKXZ
?handle_control@ACE_NT_Service@@UAEXK@Z
?add_reference@ACE_Event_Handler@@UAEJXZ
?GetSessionLinkTechnology@IPSSolSessionUsingPortClient@@QAE_NPAF@Z
??1IPSSolSessionUsingPortClient@@UAE@XZ
??0IPSIderSessionUsingPortClient@@QAE@XZ
?GetSessionLinkTechnology@IPSIderSessionUsingPortClient@@QAE_NPAF@Z
??1IPSIderSessionUsingPortClient@@UAE@XZ
??0IPSKVMSessionUsingPortClient@@QAE@XZ
?GetSessionLinkTechnology@IPSKVMSessionUsingPortClient@@QAE_NPAF@Z
??1IPSKVMSessionUsingPortClient@@UAE@XZ
??0IPSSolSessionUsingPortClient@@QAE@XZ
?updateScreenSettings@KVMScreenSettingClient@@QAE_NABUExtendedDisplayParameters@@@Z
??1KVMScreenSettingClient@@UAE@XZ
?CILAFilterCollectionSubscriptionExists@AMTFCFHWSmanClient@@QAE_NPAF@Z
?snmpEventSubscriberExists@AMTFCFHWSmanClient@@QAE_NPAF@Z
??0AMTFCFHWSmanClient@@QAE@XZ
?userInitiatedPolicyRuleExists@AMTFCFHWSmanClient@@QAE_NPAF@Z
??1AMTFCFHWSmanClient@@UAE@XZ
?SetLinkPreference@AMTEthernetPortSettingsClient@@QAE_NI@Z
??0AMTEthernetPortSettingsClient@@QAE@XZ
?GetAMTEthernetPortSettings@AMTEthernetPortSettingsClient@@QAE_NPAI00@Z
??1AMTEthernetPortSettingsClient@@UAE@XZ
??0AMTRedirectionServiceWSManClient@@QAE@XZ
?TerminateSession@AMTRedirectionServiceWSManClient@@QAE_NI@Z
?GetUserConsentState@CancelOptInClient@@QAE_NPAF0@Z
??1AMTRedirectionServiceWSManClient@@UAE@XZ
??0HBPWSManClient@@QAE@XZ
?GetConfigurationInfo@HBPWSManClient@@QAE_NPAF0AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAPAUtagSAFEARRAY@@@Z
??1HBPWSManClient@@UAE@XZ
?SetSpriteZoom@SIOWSManClient@@QAE_NG@Z
?GetSpriteParameters@SIOWSManClient@@QAE_NPAG0@Z
?GetSpriteZoom@SIOWSManClient@@QAE_NPAG@Z
??0SIOWSManClient@@QAE@XZ
?SetSpriteLanguage@SIOWSManClient@@QAE_NG@Z
?GetSpriteLanguage@SIOWSManClient@@QAE_NPAG@Z
??1SIOWSManClient@@UAE@XZ
?GetMEBxState@KVMWSManClient@@QAE_NPA_N@Z
??0KVMWSManClient@@QAE@XZ
?TerminateKVMSession@KVMWSManClient@@QAE_NXZ
?KVMRedirectionState@KVMWSManClient@@QAE_NPAG@Z
??1KVMWSManClient@@UAE@XZ
??0CancelOptInClient@@QAE@XZ
?CancelOptIn@CancelOptInClient@@QAE_NPAI@Z
??1CancelOptInClient@@UAE@XZ
??0AuditLogWSManClient@@QAE@XZ
?readLogsFromFW@AuditLogWSManClient@@QAE_NAAV?$vector@VBase64@Utils@Cim@Manageability@Intel@@V?$allocator@VBase64@Utils@Cim@Manageability@Intel@@@std@@@std@@@Z
??1AuditLogWSManClient@@UAE@XZ
??0BinaryData@@QAE@PAEI@Z
?parseLogs@AuditLogWSManClient@@QAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$vector@VBinaryData@@V?$allocator@VBinaryData@@@std@@@3@@Z
??1BinaryData@@QAE@XZ
??0BinaryData@@QAE@ABV0@@Z
??0KVMScreenSettingClient@@QAE@XZ
CreateFileA
GetTickCount
OutputDebugStringA
ResumeThread
CreateSemaphoreA
ReleaseSemaphore
WriteFile
lstrlenW
SetDllDirectoryW
GetCurrentThread
GetCurrentProcess
CloseHandle
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
CreateEventA
LeaveCriticalSection
EnterCriticalSection
GetLastError
GetProcAddress
GetVersionExW
EncodePointer
DecodePointer
InterlockedExchange
InterlockedCompareExchange
HeapSetInformation
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
ReadFile
GetOverlappedResult
CancelIo
GetModuleHandleA
OpenEventW
ResetEvent
LocalFree
DeviceIoControl
FormatMessageW
LocalAlloc
OpenProcess
WaitForMultipleObjects
GetCommandLineW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
SetEvent
GetCurrentThreadId
CreateEventW
CreateThread
Sleep
GetModuleFileNameW
WaitForSingleObject
lstrcmpiW
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
RaiseException
CoCreateInstance
CoInitializeEx
CoInitializeSecurity
CoUninitialize
CoSetProxyBlanket
CoTaskMemAlloc
CoTaskMemRealloc
CoRevokeClassObject
CoRegisterClassObject
StringFromGUID2
CoResumeClassObjects
CoAddRefServerProcess
CoReleaseServerProcess
CoRevertToSelf
CoImpersonateClient
CoTaskMemFree
SysFreeString
VariantClear
VariantInit
SysAllocString
SysStringLen
SafeArrayCreateVector
SafeArrayPutElement
VariantChangeType
SafeArrayDestroy
SafeArrayCreate
SafeArrayUnlock
SafeArrayLock
SafeArrayCopy
SafeArrayGetLBound
SafeArrayGetUBound
SysStringByteLen
SafeArrayGetVartype
LoadRegTypeLi
SysAllocStringLen
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
?instance@StringManager@@SAPAVCStringManager@@XZ
??1WindowsStringLoader@@UAE@XZ
?loadStrings@CStringManager@@QAEXAAVStringLoader@@AAV?$vector@IV?$allocator@I@std@@@std@@@Z
?GetServiceDirectory@@YA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV12@@Z
?MacAddressToString@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEI@Z
??0LibraryException@@QAE@ABV0@@Z
??1LibraryException@@UAE@XZ
??0Library@@QAE@PB_W@Z
??_7LibraryException@@6B@
??1Library@@QAE@XZ
??_7WindowsStringLoader@@6B@
?checkFileExist@@YA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0ChangeConfiguration@@QAE@XZ
??_7IServicesManager@@6B@
?ServiceStart@GMSExternalLogger@@QAEXXZ
??0GMSConfig@@QAE@XZ
??1ChangeConfiguration@@UAE@XZ
?DSinstance@@YAAAVDataStorageWrapper@@XZ
?ServiceStopped@GMSExternalLogger@@QAEXXZ
?instance@GMSExternalLogger@@SAAAV1@XZ
?deleteMessageBlockPtr@@YAXPAVACE_Message_Block@@@Z
??_7StartPFWUP@@6B@
??1GMSConfig@@QAE@XZ
??0DeviceEventDataBlock@@QAE@K_N@Z
??1DeviceEventDataBlock@@UAE@XZ
??1IServicesManager@@UAE@XZ
CertFindCertificateInStore
CertFreeCertificateContext
CryptQueryObject
CryptMsgClose
CertCloseStore
CryptMsgGetParam
CertCompareCertificateName
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_BADOFF@std@@3_JB
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??1_Lockit@std@@QAE@XZ
?_Id_cnt@id@locale@std@@0HA
?id@?$ctype@_W@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?is@?$ctype@_W@std@@QBE_NF_W@Z
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
_invoke_watson
_controlfp_s
_crt_debugger_hook
__RTDynamicCast
??3@YAXPAX@Z
__CxxFrameHandler3
??_V@YAXPAX@Z
??0exception@std@@QAE@XZ
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
memcpy
??2@YAPAXI@Z
free
malloc
memset
strncmp
fprintf
__iob_func
_errno
wcsstr
memmove
memcpy_s
wcscpy_s
wcsncpy_s
wcscat_s
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
_putws
_vsnwprintf_s
_recalloc
getchar
_wcsicmp
_purecall
swprintf_s
wcschr
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??8type_info@@QBE_NABV0@@Z
wcstok
calloc
_resetstkoflw
toupper
_beginthreadex
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
?_type_info_dtor_internal_method@type_info@@QAEXXZ
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
WinVerifyTrust
??0ShaModule@NAP_SHA@@QAE@ABV01@@Z
??0ShaModule@NAP_SHA@@QAE@W4DATA_NAME@@@Z
??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??1ShaModule@NAP_SHA@@QAE@XZ
??4ShaModule@NAP_SHA@@QAEAAV01@ABV01@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
??_7ShaModule@NAP_SHA@@6B@
?FillShaComponentRegistrationInfo@ShaModule@NAP_SHA@@CAJPAUtagNapComponentRegistrationInfo@@@Z
?FreeComponentRegistration@ShaModule@NAP_SHA@@CAXPAUtagNapComponentRegistrationInfo@@@Z
?InitNAP@ShaModule@NAP_SHA@@QAEJXZ
?InitializeSecurity@ShaModule@NAP_SHA@@SAJXZ
?NotifySoHChange@ShaModule@NAP_SHA@@UAEJXZ
?RegisterSdkSha@ShaModule@NAP_SHA@@SAJXZ
?SetPosture@ShaModule@NAP_SHA@@UAE_NPAEAAI01@Z
?UnregisterSdkSha@ShaModule@NAP_SHA@@SAJXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ