Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
7Static
static
371246671ff...71.exe
windows7-x64
771246671ff...71.exe
windows10-2004-x64
7$PLUGINSDI...er.dll
windows7-x64
1$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3CacheBJSX/...ch.exe
windows7-x64
1CacheBJSX/...ch.exe
windows10-2004-x64
1CacheBJSX/...64.exe
windows7-x64
1CacheBJSX/...64.exe
windows10-2004-x64
1CacheBJSX/...in.dll
windows7-x64
1CacheBJSX/...in.dll
windows10-2004-x64
1CacheBJSX/...ze.exe
windows7-x64
1CacheBJSX/...ze.exe
windows10-2004-x64
1CacheBJSX/...64.exe
windows7-x64
1CacheBJSX/...64.exe
windows10-2004-x64
1CacheBJSX/...an.exe
windows7-x64
1CacheBJSX/...an.exe
windows10-2004-x64
1CacheBJSX/...PC.dll
windows7-x64
1CacheBJSX/...PC.dll
windows10-2004-x64
1CacheBJSX/...ip.dll
windows7-x64
1CacheBJSX/...ip.dll
windows10-2004-x64
1CacheBJSX/...64.dll
windows7-x64
1CacheBJSX/...64.dll
windows10-2004-x64
1CacheBJSX/...UI.exe
windows7-x64
1CacheBJSX/...UI.exe
windows10-2004-x64
CacheBJSX/...ox.dll
windows7-x64
1CacheBJSX/...ox.dll
windows10-2004-x64
1CacheBJSX/...ox.sys
windows7-x64
1CacheBJSX/...ox.sys
windows10-2004-x64
1CacheBJSX/...64.dll
windows7-x64
1CacheBJSX/...64.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
71246671ffc920da4d0643419a164c71.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
71246671ffc920da4d0643419a164c71.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/SetupHelper.dll
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/SetupHelper.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral7
Sample
CacheBJSX/plugins/qmsxtboxplugin/DcomLaunch.exe
Resource
win7-20231215-en
Behavioral task
behavioral8
Sample
CacheBJSX/plugins/qmsxtboxplugin/DcomLaunch.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
CacheBJSX/plugins/qmsxtboxplugin/DcomLaunch64.exe
Resource
win7-20231215-en
Behavioral task
behavioral10
Sample
CacheBJSX/plugins/qmsxtboxplugin/DcomLaunch64.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
CacheBJSX/plugins/qmsxtboxplugin/QMSXTBoxPlugin.dll
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
CacheBJSX/plugins/qmsxtboxplugin/QMSXTBoxPlugin.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
CacheBJSX/plugins/qmsxtboxplugin/RPCVirtualize.exe
Resource
win7-20231129-en
Behavioral task
behavioral14
Sample
CacheBJSX/plugins/qmsxtboxplugin/RPCVirtualize.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
CacheBJSX/plugins/qmsxtboxplugin/RPCVirtualize64.exe
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
CacheBJSX/plugins/qmsxtboxplugin/RPCVirtualize64.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
CacheBJSX/plugins/qmsxtboxplugin/SXClean.exe
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
CacheBJSX/plugins/qmsxtboxplugin/SXClean.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
CacheBJSX/plugins/qmsxtboxplugin/SXIPC.dll
Resource
win7-20231215-en
Behavioral task
behavioral20
Sample
CacheBJSX/plugins/qmsxtboxplugin/SXIPC.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral21
Sample
CacheBJSX/plugins/qmsxtboxplugin/SXTip.dll
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
CacheBJSX/plugins/qmsxtboxplugin/SXTip.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral23
Sample
CacheBJSX/plugins/qmsxtboxplugin/SXTip64.dll
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
CacheBJSX/plugins/qmsxtboxplugin/SXTip64.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
CacheBJSX/plugins/qmsxtboxplugin/SXUI.exe
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
CacheBJSX/plugins/qmsxtboxplugin/SXUI.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral27
Sample
CacheBJSX/plugins/qmsxtboxplugin/Sandbox.dll
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
CacheBJSX/plugins/qmsxtboxplugin/Sandbox.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral29
Sample
CacheBJSX/plugins/qmsxtboxplugin/Sandbox.sys
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
CacheBJSX/plugins/qmsxtboxplugin/Sandbox.sys
Resource
win10v2004-20231222-en
Behavioral task
behavioral31
Sample
CacheBJSX/plugins/qmsxtboxplugin/Sandbox64.dll
Resource
win7-20231215-en
Behavioral task
behavioral32
Sample
CacheBJSX/plugins/qmsxtboxplugin/Sandbox64.dll
Resource
win10v2004-20231215-en
Target
71246671ffc920da4d0643419a164c71
Size
1.6MB
MD5
71246671ffc920da4d0643419a164c71
SHA1
489b56c3e92ec9a4cf516433b0acf721e6438f9a
SHA256
c41167832e23807b0c6a98bcda72708286d523929c55c2bab72adaf5b7cf9b95
SHA512
e526c1a9dfe1bc98433644bfcaf49c7fc15bb2eae102ccecf21ac0db1744a3e7ea71f89c068cf90dc8b9c0ee1567eabb9b84271e1e16c370b100978e8ac2bf6a
SSDEEP
24576:VmJWYgcDBI5lNYJoIjclAfYEzlrg2aTQ4qJyXbk8FefMX6fA0mCNHHEwc:VLYgc9JJjcSbza7qWe8lClkp
Checks for missing Authenticode signature.
resource |
---|
unpack001/$PLUGINSDIR/System.dll |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
CloseHandle
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
MulDiv
lstrlenA
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrcpynA
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
FindWindowExW
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
IsWindow
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation
RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
GlobalGetAtomNameW
GetAtomNameW
GetThreadLocale
SystemTimeToFileTime
GlobalFlags
GetPrivateProfileStringW
GetStringTypeExW
lstrcmpiW
FlushFileBuffers
LockFile
UnlockFile
GetVolumeInformationW
GetFullPathNameW
GetShortPathNameW
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesW
GetFileTime
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetSystemTimeAsFileTime
ExitThread
CreateThread
GetDriveTypeW
GetCommandLineA
HeapReAlloc
ExitProcess
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
GetACP
GetOEMCP
TlsFree
HeapDestroy
HeapCreate
VirtualFree
FatalAppExitA
VirtualAlloc
GetModuleFileNameA
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetCurrentDirectoryA
SetCurrentDirectoryA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
SetConsoleCtrlHandler
SetStdHandle
GetConsoleCP
GetConsoleMode
CreateFileA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetDriveTypeA
GetFullPathNameA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
LocalReAlloc
TlsSetValue
InterlockedCompareExchange
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
SuspendThread
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
CompareStringA
InterlockedExchange
FileTimeToLocalFileTime
FileTimeToSystemTime
GetModuleHandleA
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
GetVersionExA
GlobalSize
GlobalLock
GlobalUnlock
MulDiv
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
VirtualQuery
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryA
GetStdHandle
CreatePipe
DuplicateHandle
DebugBreak
MoveFileW
GetBinaryTypeW
IsDBCSLeadByte
GetCPInfo
GetLocalTime
WritePrivateProfileStringW
GetDiskFreeSpaceExW
GetProcessHeap
HeapAlloc
HeapFree
GetPrivateProfileIntW
InterlockedDecrement
ReadFile
SetFilePointer
GetTempPathW
GetFileSize
SetLastError
LocalAlloc
DeviceIoControl
GetCurrentProcessId
QueryDosDeviceW
Module32FirstW
Module32NextW
TerminateProcess
GetUserDefaultUILanguage
GetLocaleInfoW
CreateEventW
SetEvent
ExpandEnvironmentStringsW
GetCurrentDirectoryW
IsBadReadPtr
IsBadWritePtr
GetSystemDefaultLangID
GetVersion
MultiByteToWideChar
RemoveDirectoryW
MoveFileExW
CreateDirectoryW
GetFileAttributesA
CreateFileW
WriteFile
FormatMessageW
FormatMessageA
lstrlenA
OutputDebugStringA
LocalFree
ReleaseMutex
CreateMutexW
GetModuleFileNameW
GetSystemInfo
LoadLibraryW
FreeLibrary
SetErrorMode
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
GlobalAlloc
lstrcpynW
GlobalFree
GetWindowsDirectoryW
OutputDebugStringW
GetSystemDirectoryW
GetLastError
GetModuleHandleW
GetProcAddress
GetCurrentProcess
CopyFileW
GetFileAttributesW
FindFirstFileW
FindNextFileW
DeleteFileW
FindClose
GetTickCount
GetVersionExW
OpenProcess
VirtualAllocEx
WriteProcessMemory
ReadProcessMemory
lstrlenW
VirtualFreeEx
GetTempPathA
Sleep
CreateToolhelp32Snapshot
Process32FirstW
CloseHandle
Process32NextW
FindResourceW
LoadResource
LockResource
SizeofResource
IsValidCodePage
WideCharToMultiByte
FillRect
ScrollWindowEx
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemInt
CheckRadioButton
CheckDlgButton
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetFocus
GetWindowTextLengthW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
SendMessageTimeoutW
InvalidateRect
UnregisterClassA
SendMessageW
GetClientRect
FindWindowExW
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
TabbedTextOutW
DestroyIcon
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetMenu
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
SetWindowPlacement
GetDlgCtrlID
GetWindowLongW
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
UnhookWindowsHookEx
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
LoadBitmapW
LoadIconW
CharNextW
CharPrevW
GetCursorPos
LoadCursorW
SetCursor
GetDesktopWindow
ReleaseDC
GetDC
PtInRect
DrawTextW
DrawTextExW
GrayStringW
GetWindowDC
PostQuitMessage
CheckMenuItem
ModifyMenuW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ValidateRect
TranslateMessage
GetMessageW
ShowOwnedPopups
GetKeyNameTextW
MapVirtualKeyW
InflateRect
UnregisterClassW
GetSysColorBrush
GetMenuItemInfoW
DestroyMenu
GetDialogBaseUnits
GetKeyState
DeleteMenu
FindWindowW
GetParent
CharUpperW
SetScrollRange
ScreenToClient
ClientToScreen
GetWindowThreadProcessId
GetWindowTextW
EndPaint
BeginPaint
CallWindowProcW
SetWindowLongW
GetWindowRect
SetFocus
KillTimer
ShowWindow
IsWindowVisible
SetTimer
MoveWindow
OffsetRect
IsWindow
SetWindowTextW
IsWindowEnabled
UpdateWindow
CreateWindowExW
GetDlgItem
LoadImageW
RegisterWindowMessageW
MessageBoxW
LoadStringW
SystemParametersInfoW
SetWindowPos
GetSystemMenu
EnableMenuItem
RedrawWindow
GetDlgItemTextW
EndDialog
DefWindowProcW
PostMessageW
GetClassNameW
EnableWindow
GetWindow
FindWindowA
BeginDeferWindowPos
GetTextMetricsW
DPtoLP
GetMapMode
CombineRgn
SetRectRgn
PatBlt
GetWindowExtEx
CreateRectRgnIndirect
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
CreateBitmap
CreatePatternBrush
CreateDIBPatternBrushPt
DeleteDC
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
RectVisible
PtVisible
StartDocW
SetROP2
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
DeleteObject
TextOutW
GetTextExtentPoint32W
SetBkMode
SelectObject
CreateFontIndirectW
GetObjectW
GetStockObject
CreatePen
CreateCompatibleBitmap
CreateCompatibleDC
GetBkColor
GetTextColor
BitBlt
GetDeviceCaps
CopyMetaFileW
CreateDCW
GetDCOrgEx
GetClipBox
SetTextColor
SetBkColor
SaveDC
RestoreDC
SetPolyFillMode
GetPixel
GetFileTitleW
DocumentPropertiesW
ClosePrinter
OpenPrinterW
RegCreateKeyW
RegQueryValueW
RegEnumKeyW
RegSetValueW
RegOpenKeyExA
RegQueryValueExA
RegRestoreKeyW
RegEnumKeyExW
LookupAccountNameW
GetFileSecurityW
GetSecurityDescriptorDacl
GetLengthSid
InitializeAcl
GetAclInformation
GetAce
AddAce
AddAccessAllowedAce
GetSecurityDescriptorControl
SetFileSecurityW
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
QueryServiceConfigW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegDeleteKeyW
RegQueryInfoKeyW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
ChangeServiceConfigW
ChangeServiceConfig2W
DeleteService
ControlService
QueryServiceStatus
CreateServiceW
RegDeleteValueW
RegOpenKeyW
OpenSCManagerW
OpenServiceW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
CloseServiceHandle
StartServiceW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
SHGetMalloc
SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
ShellExecuteW
ExtractIconW
SHGetFileInfoW
SHFileOperationW
PathFileExistsW
SHDeleteKeyW
PathIsDirectoryW
SHSetValueW
PathAppendW
PathAddBackslashW
PathFindExtensionW
PathRemoveExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
CoInitializeSecurity
CoSetProxyBlanket
CoInitializeEx
StgCreateDocfile
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
CoCreateGuid
CreateBindCtx
ReleaseStgMedium
SetConvertStg
StringFromCLSID
CoTreatAsClass
StgOpenStorage
StgIsStorageFile
CoInitialize
CoFreeUnusedLibrariesEx
ReadClassStg
CoTaskMemFree
CoCreateInstance
CoUninitialize
OleDuplicateData
CoDisconnectObject
StringFromGUID2
CLSIDFromString
CoTaskMemAlloc
WriteFmtUserTypeStg
VariantInit
VariantChangeType
SafeArrayUnaccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
VariantClear
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
VarDateFromStr
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarBstrFromDate
SysStringLen
SysAllocString
SysFreeString
SafeArrayGetElement
GetErrorInfo
SetErrorInfo
CreateErrorInfo
WSCDeinstallProvider
WSCEnumProtocols
htonl
htons
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
GetModuleFileNameExW
EnumProcessModules
UnMapAndLoad
MapAndLoad
NetWkstaTransportEnum
NetApiBufferFree
Netbios
AddToAllowList
ApiInstallFileMonDriver
ApiUninstallFileMonDriver
BackUpSetupPackage
CallOutTrayIcon
CallRegEnvironmentVar
CallRegUrlProtocol
CallRegUrlProtocol2
CallUnRegEnvironmentVar
CallUnRegUrlProtocol
CallUnShortCut
Check360
CheckAV
CheckCRunTime
CheckForQQSoftUninstall
CheckForSetup
CheckForUninstall
CheckInstallPath
CheckQQPCRtpNeedReboot
CleanTempFolder
CloseProcess
CreateBitmapCtrl
CreateShortCutInfo
DelService
DeleteCacheFolder
DeleteFileRecursively
DeleteRebootCopy
DeployFile
DisableFileRedirect
ExecuteShell
ExecuteShellNoWait
ExtendCommand
FinalizeReport
FindExistedRTP
GetFunctionRunTime
GetIntVersionFromString
GetMessageHandler
GetParentProcessName
GetQQReleatedPath
GetQQSoftInstallDir
GetShortCutInfo
GetSystemDriversPath
HookInstallButton
InitPenetration
InitializeReport
IsAcLayers
IsAdmin
IsChildProtectionRun
IsCompare
IsMainWndRun
IsNeedUpdate
IsPinQQPCMgrToStartMenu
IsPinUnsoftToStartMenu
IsQQDoctorExist
IsQQPCTrayExists
IsQQSoftExist
IsVista
IsWin7
IsWinXp
IsWindows64
IsWndEnable
IsWow64
LoadDriver
LoadQMDriver
LoadTSFltmgr
NotifyAction
NotifyProgress
NotifySetupStatus
OutputError
OutputInfo
ParseCmdLine
ParseUninstallCmdLine
PinQQPCMgrToStartMenu
PinUnsoftToStartMenu
PrepareConfig
ReadLastInstallTime
ReadLastUnInstallTime
RecoverCommand
RecoverProxy
RegisterSecurityCenterHelper
ReleaseRtpOptDlg
RemoveArpDriver
RemoveFromAllowList
RemoveQQPCMgrFromStartMenu
RemoveUnSoftFromStartMenu
RepairQQPCRtp
ReportInstallInfo
ReportUninstallInfo
RevertFileRedirect
SaveRtpState
SetExclusive
SetFunctionRunStartTime
SetInstallPath
SetInstallStartTime
SetInstallTime
SetRowSpace
SetSystemAccessControl
SetText
SetUnInstallPath
SetUnistallPara
ShowLoadDriverErrorDlg
ShowRtpOptDlg
UnHookInstallButton
UninitPenetration
UninstallLSP
UninstallQQDoctor
UninstallQQSoft
UpdateFIXService
UpdateProtectState
UpdateRTPService
UpdateRtpState
UpdateSetupInfo
UpdateTrayIcon
WaitBugReportExit
WaitForFixShutdown
WaitForProcessEndByName
WaitForRtpShutdown
WaitForUninstExit
WaitUninstallComplete
WriteLog
WriteTimer
free_instfilespage_bitmap
kill_instfilespage_timer
load_instfilespage_bitmap
start_instfilespage_timer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
lstrlenW
FreeLibrary
wsprintfW
CLSIDFromString
StringFromGUID2
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetEvent
CreateEventW
OpenEventW
InterlockedCompareExchange
ResetEvent
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
InterlockedExchange
CloseHandle
GetThreadContext
SetThreadContext
ResumeThread
GetCurrentThreadId
VirtualAlloc
FlushInstructionCache
VirtualProtect
VirtualQuery
SetLastError
FreeLibrary
WaitForMultipleObjects
CreateProcessW
GetModuleFileNameW
GetCurrentProcess
GetLastError
GetCurrentThread
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
OpenFileMappingW
CreateFileMappingW
LoadLibraryW
GetCurrentProcessId
ProcessIdToSessionId
GetModuleHandleW
OpenProcess
GetVersionExW
Sleep
CreateThread
GetProcAddress
WaitForSingleObject
SuspendThread
StrStrIW
PathFileExistsW
PathAppendW
PathRemoveFileSpecW
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__set_app_type
_unlock
memcpy
memset
_wcsicmp
??_V@YAXPAX@Z
_wcsupr_s
memmove_s
?what@exception@std@@UBEPBDXZ
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
_stricmp
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
??3@YAXPAX@Z
_vsnwprintf_s
??2@YAPAXI@Z
_wtoi
wcsstr
_crt_debugger_hook
?terminate@@YAXXZ
_invoke_watson
_controlfp_s
__dllonexit
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CxxFrameHandler3
_except_handler4_common
_CxxThrowException
WSASetLastError
OpenSCManagerW
CloseServiceHandle
RegisterServiceCtrlHandlerExA
StartServiceCtrlDispatcherW
AccessCheckByType
SetThreadToken
GetTokenInformation
SetServiceStatus
OpenServiceW
OpenSCManagerA
DuplicateToken
OpenProcessToken
RegisterServiceCtrlHandlerExW
ControlService
QueryServiceStatus
QueryServiceStatusEx
StartServiceW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
ResetEvent
CloseHandle
WaitForSingleObject
OpenProcess
SetEvent
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
CreateEventW
TerminateProcess
GetStartupInfoW
SuspendThread
GetThreadContext
SetThreadContext
ResumeThread
GetCurrentThreadId
VirtualAlloc
FlushInstructionCache
VirtualProtect
VirtualQuery
GetCurrentProcess
GetLastError
SetLastError
FreeLibrary
WaitForMultipleObjects
CreateProcessW
GetModuleFileNameW
GetVersionExW
Sleep
CreateThread
GetCurrentProcessId
ProcessIdToSessionId
GetCurrentThread
LoadLibraryW
GetModuleHandleW
GetProcAddress
OpenEventW
TlsSetValue
TlsGetValue
UnhandledExceptionFilter
TlsFree
CreateFileMappingW
OpenFileMappingW
TlsAlloc
StrStrIW
PathFileExistsW
PathAppendW
PathRemoveFileSpecW
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_cexit
_exit
_XcptFilter
__wgetmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_commode
memset
__C_specific_handler
_wcsupr_s
memmove_s
_wcsicmp
??_V@YAXPEAX@Z
_vsnwprintf_s
?what@exception@std@@UEBAPEBDXZ
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
_invalid_parameter_noinfo
_stricmp
??0exception@std@@QEAA@XZ
??1exception@std@@UEAA@XZ
??0exception@std@@QEAA@AEBQEBD@Z
??0exception@std@@QEAA@AEBV01@@Z
_wtoi
wcsstr
_fmode
__set_app_type
__crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
memcpy
_CxxThrowException
memcmp
__CxxFrameHandler3
WSASetLastError
OpenSCManagerW
CloseServiceHandle
RegisterServiceCtrlHandlerExA
RegisterServiceCtrlHandlerExW
AccessCheckByType
SetThreadToken
GetTokenInformation
SetServiceStatus
OpenSCManagerA
ControlService
DuplicateToken
OpenProcessToken
QueryServiceStatus
QueryServiceStatusEx
StartServiceW
OpenServiceW
StartServiceCtrlDispatcherW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InterlockedIncrement
InterlockedDecrement
SetThreadLocale
GetThreadLocale
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
GetModuleHandleW
GetCurrentProcess
CreateProcessW
CloseHandle
lstrcmpiW
lstrlenW
GetLastError
FindResourceExW
TerminateProcess
InterlockedCompareExchange
Sleep
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
GetLocaleInfoA
GetACP
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
UnhandledExceptionFilter
RaiseException
InterlockedExchange
CharNextW
UnregisterClassA
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
SHGetFileInfoW
CoCreateInstance
CoTaskMemFree
StringFromCLSID
SysFreeString
VarUI4FromStr
LoadTypeLi
SysStringLen
LoadRegTypeLi
ord31
ord32
ord58
ord15
ord18
ord22
ord64
ord23
ord30
ord61
PathFileExistsW
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
_initterm
??3@YAXPAX@Z
wcsrchr
memcpy_s
malloc
free
_CxxThrowException
wcscpy_s
wcsncpy_s
memset
__CxxFrameHandler3
wcslen
wcsncat_s
??_V@YAXPAX@Z
memmove_s
_purecall
_recalloc
memcmp
??2@YAPAXI@Z
_except_handler4_common
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
__clean_type_info_names_internal
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ResetEvent
CloseHandle
WaitForSingleObject
OpenProcess
SetEvent
CreateFileMappingW
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CreateEventW
InterlockedExchange
SuspendThread
GetThreadContext
SetThreadContext
ResumeThread
GetCurrentThreadId
VirtualAlloc
FlushInstructionCache
VirtualProtect
VirtualQuery
GetCurrentProcess
GetLastError
SetLastError
FreeLibrary
WaitForMultipleObjects
CreateProcessW
GetModuleFileNameW
OpenFileMappingW
GetCurrentThread
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
GetModuleHandleW
GetVersionExW
Sleep
InterlockedCompareExchange
CreateThread
GetProcAddress
LoadLibraryW
ProcessIdToSessionId
OpenEventW
GetStartupInfoW
StrStrIW
PathFileExistsW
PathAppendW
PathRemoveFileSpecW
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
__set_app_type
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
_except_handler4_common
_unlock
memcpy
memset
memmove_s
_wcsicmp
??_V@YAXPAX@Z
_wcsupr_s
??0exception@std@@QAE@ABV01@@Z
??3@YAXPAX@Z
?what@exception@std@@UBEPBDXZ
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
_stricmp
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??2@YAPAXI@Z
_vsnwprintf_s
_wtoi
wcsstr
_crt_debugger_hook
?terminate@@YAXXZ
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__dllonexit
_controlfp_s
__CxxFrameHandler3
__p__fmode
_CxxThrowException
WSASetLastError
RegisterServiceCtrlHandlerExW
AccessCheckByType
SetThreadToken
StartServiceCtrlDispatcherW
SetServiceStatus
OpenServiceW
StartServiceW
QueryServiceStatusEx
QueryServiceStatus
ControlService
OpenSCManagerA
RegisterServiceCtrlHandlerExA
DuplicateToken
OpenProcessToken
GetTokenInformation
CloseServiceHandle
OpenSCManagerW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
OpenEventW
ResetEvent
CloseHandle
WaitForSingleObject
OpenProcess
SetEvent
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
CreateFileMappingW
TerminateProcess
GetStartupInfoW
SuspendThread
GetThreadContext
SetThreadContext
ResumeThread
GetCurrentThreadId
VirtualAlloc
FlushInstructionCache
VirtualProtect
VirtualQuery
WaitForMultipleObjects
CreateProcessW
GetModuleFileNameW
GetCurrentProcess
GetLastError
SetLastError
FreeLibrary
GetCurrentThread
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
OpenFileMappingW
ProcessIdToSessionId
GetModuleHandleW
CreateEventW
GetVersionExW
Sleep
CreateThread
GetProcAddress
GetCurrentProcessId
UnhandledExceptionFilter
LoadLibraryW
PathFileExistsW
PathAppendW
PathRemoveFileSpecW
StrStrIW
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_cexit
_exit
_XcptFilter
__wgetmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
memcpy
__setusermatherr
__C_specific_handler
??_V@YAXPEAX@Z
_wcsupr_s
memmove_s
_wcsicmp
_invalid_parameter_noinfo
??0exception@std@@QEAA@XZ
_stricmp
??1exception@std@@UEAA@XZ
??0exception@std@@QEAA@AEBQEBD@Z
??0exception@std@@QEAA@AEBV01@@Z
??3@YAXPEAX@Z
?what@exception@std@@UEBAPEBDXZ
_vsnwprintf_s
??2@YAPEAX_K@Z
_wtoi
wcsstr
_commode
_fmode
__crt_debugger_hook
?terminate@@YAXXZ
memset
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
memcmp
__CxxFrameHandler3
__set_app_type
_CxxThrowException
WSASetLastError
StartServiceW
QueryServiceStatus
QueryServiceStatusEx
StartServiceCtrlDispatcherW
ControlService
OpenSCManagerA
OpenSCManagerW
CloseServiceHandle
RegisterServiceCtrlHandlerExA
RegisterServiceCtrlHandlerExW
OpenServiceW
SetServiceStatus
DuplicateToken
OpenProcessToken
GetTokenInformation
SetThreadToken
AccessCheckByType
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FindFirstFileW
GetWindowsDirectoryW
FindNextFileW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetLastError
FindClose
DeleteFileW
GetFileAttributesW
SetFileAttributesW
GetModuleHandleA
GetProcAddress
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
SendMessageW
FindWindowW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
SetSecurityInfo
SetNamedSecurityInfoW
RegCloseKey
RegQueryInfoKeyW
SHFileOperationW
SHDeleteKeyW
memcpy
_wcsicmp
_amsg_exit
__wgetmainargs
_cexit
wcscmp
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
wcsncpy
malloc
_snwprintf
free
memset
wcslen
_exit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
OpenProcess
LeaveCriticalSection
SetEvent
GetProcAddress
GetModuleHandleW
GetCurrentProcess
OpenEventW
CreateEventW
InitializeCriticalSection
CreateThread
GetWindowsDirectoryW
GetFileAttributesW
GetCurrentProcessId
CreateProcessW
WaitForSingleObject
EnterCriticalSection
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
QueryDosDeviceW
CloseHandle
GetModuleFileNameW
LoadLibraryA
RtlUnwind
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
HeapAlloc
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RaiseException
Sleep
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetWindowThreadProcessId
FindWindowW
SendMessageW
GetWindowLongW
GetWindowTextW
EnumWindows
GetFileTitleW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegQueryValueExW
SHGetPathFromIDListW
CoCreateInstance
CoInitialize
CoUninitialize
wnsprintfW
PathRemoveFileSpecW
GetModuleBaseNameW
EnumProcessModules
AddExclusionReg
AddSandbox
ClearRenameData
GetProcessesInSandBox
GetWindowTitle
InitSandbox
InstallDriver
KillSandboxProcess
NotifyDirverAutoInSandbox
NotifyDirverRemoveFromSandbox
QuitGUI
RefreshProcessList
RegCallBack
ReportInstallStatus
ReportQuitStatus
ReportSandboxStatus
RunProcessInSandbox
SetAutoSandboxPolicy
SetExcSandboxPolicy
SetSandboxFlag
ShowSandbox
StartSandbox
StopSandbox
UnInstallDriver
UnloadDriverService
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameExA
ord37
ord44
ord42
ord48
ord60
ord43
lstrlenA
SetLastError
LockResource
LoadResource
FindResourceW
GetModuleHandleW
GlobalUnlock
GlobalLock
GlobalAlloc
FlushInstructionCache
GetCurrentProcess
CreateThread
GetCurrentProcessId
DisableThreadLibraryCalls
GetCurrentThread
GetProcAddress
GetModuleHandleA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
InitializeCriticalSection
LocalAlloc
LoadLibraryExA
SuspendThread
GetThreadContext
SetThreadContext
MultiByteToWideChar
VirtualProtect
VirtualQuery
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
ReadFile
CreateFileA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
GetLocaleInfoW
FreeLibrary
SetConsoleCtrlHandler
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFilePointer
IsValidCodePage
GetOEMCP
TlsSetValue
GetStartupInfoA
GetFileType
SetHandleCount
CloseHandle
GetModuleFileNameA
GetStdHandle
WriteFile
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLastError
RaiseException
TlsFree
ResumeThread
LocalFree
InterlockedIncrement
InterlockedDecrement
Sleep
HeapReAlloc
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetCommandLineA
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetCPInfo
HeapDestroy
HeapCreate
FatalAppExitA
HeapSize
TlsGetValue
TlsAlloc
ExitProcess
RegisterClassExW
PostMessageW
UnregisterClassA
DispatchMessageA
DefDlgProcW
DefDlgProcA
IsIconic
GetWindowThreadProcessId
GetClassNameA
GetWindowTextA
GetMessageW
TranslateMessage
DispatchMessageW
CallWindowProcW
GetWindowLongW
DefWindowProcW
IsWindowVisible
MapDialogRect
DestroyWindow
SetWindowContextHelpId
GetWindow
SetWindowPos
CreateWindowExW
SetWindowLongW
IsWindow
RegisterClassExA
UnregisterClassW
PostQuitMessage
SetForegroundWindow
LoadBitmapW
OffsetRect
CopyRect
LoadCursorW
GetClassInfoExW
LoadCursorA
GetClassInfoExA
SetWindowRgn
GetParent
SendDlgItemMessageW
ShowWindow
ReleaseDC
GetDC
EndPaint
BeginPaint
GetWindowRect
MoveWindow
SendMessageW
CreateStreamOnHGlobal
BitBlt
CreateRectRgn
SetBkMode
CreateCompatibleDC
SelectObject
ImmDisableIME
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetModuleFileNameExA
FlushInstructionCache
GetCurrentProcess
lstrcmpW
MulDiv
GetModuleFileNameW
RaiseException
GetCurrentThreadId
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleHandleW
GlobalFree
GlobalHandle
CreateThread
GetCurrentProcessId
GetCurrentThread
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
InterlockedPushEntrySList
HeapFree
HeapAlloc
GetProcessHeap
VirtualFree
VirtualAlloc
InterlockedPopEntrySList
LocalAlloc
LoadLibraryExA
SuspendThread
GetThreadContext
SetThreadContext
ResumeThread
VirtualProtect
VirtualQuery
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
ReadFile
CreateFileA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
GetLocaleInfoW
DeleteCriticalSection
FreeLibrary
SetConsoleCtrlHandler
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
FatalAppExitA
GetTimeFormatA
GetDateFormatA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFilePointer
IsValidCodePage
GetOEMCP
GetStartupInfoA
GetFileType
SetHandleCount
CloseHandle
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
FlsAlloc
TlsSetValue
FlsFree
TlsFree
TlsAlloc
FlsGetValue
HeapSize
HeapDestroy
HeapCreate
HeapSetInformation
RtlVirtualUnwind
GetCPInfo
LCMapStringW
InitializeCriticalSection
WideCharToMultiByte
LCMapStringA
GetCommandLineA
FlsSetValue
RtlCaptureContext
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwindEx
RtlLookupFunctionEntry
HeapReAlloc
RtlPcToFileHeader
Sleep
__C_specific_handler
lstrlenW
FindResourceW
LoadResource
LockResource
SetLastError
LeaveCriticalSection
EnterCriticalSection
lstrlenA
MultiByteToWideChar
GetLastError
LoadLibraryA
LocalFree
ReleaseCapture
PostMessageW
SendMessageW
MoveWindow
GetWindowRect
BeginPaint
EndPaint
GetDC
ReleaseDC
ShowWindow
SendDlgItemMessageW
UnregisterClassA
DispatchMessageA
DefDlgProcW
IsIconic
GetWindowThreadProcessId
GetClassNameA
GetWindowTextA
GetMessageW
TranslateMessage
DispatchMessageW
CreateDialogIndirectParamW
RegisterWindowMessageW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
CreateAcceleratorTableW
IsWindowVisible
RegisterClassExW
LoadCursorW
GetClassInfoExW
IsWindow
SetFocus
GetFocus
DestroyAcceleratorTable
GetDesktopWindow
GetWindowLongPtrW
CallWindowProcW
FillRect
DefDlgProcA
GetClassNameW
GetDlgItem
IsChild
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
ScreenToClient
ClientToScreen
GetClientRect
SetWindowLongW
GetWindowLongW
CharNextW
GetSysColor
DefWindowProcW
SetWindowLongPtrW
MapDialogRect
DestroyWindow
SetWindowContextHelpId
GetWindow
SetWindowPos
CreateWindowExW
PostQuitMessage
SetForegroundWindow
LoadBitmapW
OffsetRect
CopyRect
SetWindowRgn
GetParent
StringFromGUID2
OleLockRunning
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoTaskMemAlloc
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
GetStockObject
GetObjectW
CreateSolidBrush
CreateCompatibleBitmap
DeleteObject
DeleteDC
GetDeviceCaps
SetBkMode
CreateCompatibleDC
SelectObject
BitBlt
CreateRectRgn
ImmDisableIME
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?MakeLower@CTXStringW@@QAEAAV1@XZ
?GetLength@CTXStringW@@QBEHXZ
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?Empty@CTXStringW@@QAEXXZ
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?IsEmpty@CTXBSTR@@QAEHXZ
?ReverseFind@CTXStringW@@QBEH_W@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
?GetBuffer@CTXStringW@@QAEPA_WXZ
??0CTXBSTR@@QAE@XZ
??ICTXBSTR@@QAEPAPA_WXZ
?ClearDeadQueue@Misc@Util@@YAXXZ
?InitBugReport@TXBugReport@@YAXPB_W000GGKHHKKP6GHPAUtagBugReportInfo@1@PBD200PAPAXPAKPAX@Z@Z
?SetBugReportUin@TXBugReport@@YAXKPB_W@Z
?ValidateBugReport@TXBugReport@@YAXXZ
?OnExitCoreCenter@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?OnUninitCom@Misc@Util@@YAXXZ
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?Replace@CTXStringW@@QAEHPB_W0@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?InitPlatformGFConfig@Boot@Util@@YAHXZ
??8@YA_NPB_WABVCTXBSTR@@@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
?Record@Perf@Util@@YAJPB_WHH00@Z
?GetPlatformTpc@CoreCenter@Util@@YAHPAPAUITXDataRead@@@Z
?GetPlatformCore@CoreCenter@Util@@YAHPAPAUITXPlatformCore@@@Z
??8CTXBSTR@@QBE_NPB_W@Z
?Find@CTXStringW@@QBEHPB_WH@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
?RemoveFileSystem@FS@@YAHPB_W@Z
??M@YA_NABVCTXStringW@@0@Z
?AddFileSystem@FS@@YAJW4FILESYSTEM_TYPE@@PB_W1HHH@Z
?IsDirectoryExist@FS@@YAHPB_W@Z
?GetLocalePath@TXI18N@@YA?AVCTXStringW@@PB_W@Z
?SplitQNC@FS@@YAHPB_WAAVCTXStringW@@1@Z
?IsEmpty@CTXStringW@@QBE_NXZ
?TrimLeft@CTXStringW@@QAEAAV1@PB_W@Z
?GetFileName@FS@Util@@YA?AVCTXStringW@@ABV3@@Z
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??0CTXBSTR@@QAE@PB_W@Z
??BCTXBSTR@@QBEPA_WXZ
??1CTXBSTR@@QAE@XZ
?Format@CTXStringW@@QAAXPB_WZZ
??H@YA?AVCTXStringW@@ABV0@0@Z
?RecordTransEnd@Perf@Util@@YAJ_JPB_WHH11H@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
?RecordTransBegin@Perf@Util@@YA_JPB_WHH00@Z
??0CTXStringW@@QAE@PB_W@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?TXAssert@@YAXPB_W0H@Z
??BCTXStringW@@QBEPB_WXZ
??0CTXStringW@@QAE@PA_W@Z
??0CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@ABV0@@Z
??1CTXStringW@@QAE@XZ
??4CTXStringW@@QAEAAV0@ABV0@@Z
??0CTXStringW@@QAE@H@Z
?GetAt@CTXStringW@@QBE_WH@Z
?NotifyIdle@TXTimer@@YAXXZ
?DelIdleCallback@Window@Util@@YAJPAVVTXMsgLoopIdleCallback@@@Z
?AddIdleCallback@Window@Util@@YAJPAVVTXMsgLoopIdleCallback@@@Z
?GetParentDir@File@Util@@YA?AVCTXStringW@@ABV3@@Z
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?ClosePopupWindows@GF@Util@@YAXXZ
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
CoCreateInstance
OleInitialize
OleUninitialize
CoInitialize
htons
htonl
RaiseException
lstrcpynW
GetCurrentThreadId
GetProcAddress
GetModuleHandleA
SetFileAttributesW
GetFileAttributesW
lstrcmpiW
SetLastError
GetFileSize
OpenFileMappingW
UnmapViewOfFile
MapViewOfFile
GetLocalTime
GetSystemDirectoryW
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
InterlockedExchange
UnhandledExceptionFilter
GetStartupInfoW
GetThreadLocale
GetLocaleInfoA
GetACP
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
VirtualQuery
SwitchToThread
GetCommandLineW
InterlockedCompareExchange
ReleaseMutex
GetSystemDefaultLangID
GetSystemInfo
FreeLibrary
LoadLibraryA
MultiByteToWideChar
GetEnvironmentVariableW
ProcessIdToSessionId
WaitForMultipleObjects
ResetEvent
QueueUserWorkItem
GetCurrentProcessId
ExpandEnvironmentStringsW
CreateProcessW
InitializeCriticalSection
MoveFileExW
TerminateProcess
SetFilePointer
WriteFile
InterlockedDecrement
InterlockedIncrement
MoveFileW
DeleteCriticalSection
OpenProcess
VirtualAllocEx
ReadProcessMemory
lstrlenW
VirtualFreeEx
WideCharToMultiByte
GetVersionExW
GetTickCount
OpenEventW
CreateFileW
CreateEventW
CreateThread
WaitForSingleObject
SetEvent
Sleep
GetModuleHandleW
LeaveCriticalSection
EnterCriticalSection
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetWindowsDirectoryW
CreateDirectoryW
GetModuleFileNameW
GetCurrentProcess
GetProcessHeap
HeapAlloc
DeleteFileW
GetLastError
FindClose
FindNextFileW
FindFirstFileW
LoadLibraryW
CloseHandle
LocalFree
HeapFree
SetUnhandledExceptionFilter
SendMessageTimeoutW
FindWindowW
IsWindowVisible
GetWindowLongW
SetPropW
SetWindowLongW
IsWindow
RemovePropW
LoadCursorW
RegisterClassW
CreateWindowExW
UpdateWindow
TranslateMessage
UnregisterClassA
FindWindowA
DispatchMessageW
MessageBoxW
KillTimer
FindWindowExW
ScreenToClient
GetWindowThreadProcessId
DestroyWindow
SystemParametersInfoW
PrivateExtractIconsW
GetWindowInfo
GetWindowRect
LoadIconW
SendMessageW
ShowWindow
SetForegroundWindow
GetPropW
DefWindowProcW
CallWindowProcW
PostMessageW
DestroyIcon
GetCursorPos
LoadImageW
GetForegroundWindow
WaitMessage
PeekMessageW
PostThreadMessageW
GetClassNameW
GetClassLongW
EnumThreadWindows
IsWindowEnabled
RegisterWindowMessageW
GetMessageW
GetStockObject
RegCloseKey
SetNamedSecurityInfoW
SetSecurityInfo
RegOpenKeyExW
RegDeleteKeyW
RegEnumKeyW
RegQueryInfoKeyW
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
RegSetValueExW
RegCreateKeyW
RegQueryValueExW
RegDeleteValueW
RegFlushKey
RegEnumKeyExW
RegEnumValueW
RegNotifyChangeKeyValue
RegCreateKeyExW
RegGetKeySecurity
RegSetKeySecurity
SHGetSpecialFolderPathW
SHGetFileInfoW
Shell_NotifyIconW
LoadTypeLi
LoadRegTypeLi
SysStringLen
SysAllocString
SysFreeString
PathAppendW
StrCmpIW
SHGetValueW
PathFileExistsW
SHSetValueW
PathCombineW
SHDeleteKeyW
SHSetValueA
SHGetValueA
wnsprintfW
PathFindFileNameW
SHDeleteValueW
PathRemoveFileSpecW
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?data@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHABV12@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHPB_W@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ
??2@YAPAXI@Z
wcscat_s
__wargv
__argc
strncat
_snprintf
fclose
fread
_invalid_parameter_noinfo
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
_purecall
wcsrchr
_wfopen
_wcsnicmp
_wtoi64
_wsplitpath_s
swscanf_s
_snwprintf_s
_wtol
wcsncat_s
_vsnprintf_s
_recalloc
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
fflush
strncpy_s
_memicmp
strrchr
_snprintf_s
fwrite
_wtoi
memmove_s
??_V@YAXPAX@Z
putwchar
putchar
strchr
_vsnwprintf_s
wcschr
wcsncpy_s
wcscpy_s
memcpy
_wcsicmp
wcsncpy
memcpy_s
wcscmp
strlen
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
__CxxFrameHandler3
malloc
_snwprintf
free
memset
wcslen
??3@YAXPAX@Z
realloc
_strdup
_except_handler3
GetModuleBaseNameW
EnumProcessModules
EnumProcesses
GetProcessMemoryInfo
GetModuleFileNameExW
ord30
ord58
ord31
ord32
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
InitCommonControlsEx
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
GetModuleInformation
RtlInitializeCriticalSection
ZwQueryInformationThread
wcschr
RtlDetermineDosPathNameType_U
strncat
ZwQueryInformationProcess
RtlEnterCriticalSection
RtlLeaveCriticalSection
_chkstk
RtlFreeSid
RtlFreeHeap
ZwEnumerateValueKey
RtlAllocateAndInitializeSid
RtlCreateAndSetSD
ZwQueryKey
_wcsicmp
_wcsnicmp
ZwQueryInformationFile
ZwReadFile
RtlDeleteCriticalSection
wcsstr
ZwCreateFile
RtlImageNtHeader
strcmp
strstr
RtlNtStatusToDosError
RtlInitUnicodeString
_snprintf
wcsncat
ZwQueryObject
ZwOpenFile
ZwQueryVolumeInformationFile
RtlWalkFrameChain
strlen
wcsncpy
memcpy
_snwprintf
ZwClose
wcslen
memset
memcmp
ZwWriteFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
CreateFileA
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
SetFilePointer
SetConsoleCtrlHandler
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
Sleep
InterlockedDecrement
InterlockedIncrement
HeapReAlloc
TerminateProcess
GetCurrentProcess
QueryDosDeviceW
GetCurrentProcessId
DebugBreak
VirtualProtectEx
WriteProcessMemory
VirtualProtect
VirtualAllocEx
GetModuleHandleA
SetThreadContext
VirtualFreeEx
GetThreadContext
GetProcAddress
GetModuleFileNameW
GetWindowsDirectoryW
GetProcessHeap
GetCurrentThread
OpenProcess
GetModuleFileNameA
GetVersionExA
LoadLibraryA
DisableThreadLibraryCalls
CloseHandle
WaitForSingleObject
SetEvent
CreateThread
ExitProcess
WaitForMultipleObjects
CreateEventA
GetFileAttributesA
IsBadStringPtrA
GetFileAttributesW
IsBadStringPtrW
ResumeThread
GetLastError
SearchPathW
SetLastError
CreateFileW
IsBadReadPtr
WideCharToMultiByte
SetUnhandledExceptionFilter
WriteFile
GetProcessId
GetCurrentThreadId
GlobalGetAtomNameA
OpenThread
TlsAlloc
OpenFileMappingW
CreateFileMappingW
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
TlsFree
EnterCriticalSection
LeaveCriticalSection
TlsGetValue
TlsSetValue
GetTickCount
ProcessIdToSessionId
CreateProcessW
GetSystemWindowsDirectoryW
ResetEvent
OpenEventA
GetSystemDirectoryA
LocalAlloc
LocalFree
InterlockedExchange
RaiseException
VirtualQuery
FlushInstructionCache
VirtualAlloc
InterlockedCompareExchange
SuspendThread
HeapFree
RtlUnwind
UnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapAlloc
HeapDestroy
HeapCreate
VirtualFree
FatalAppExitA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RtlInitUnicodeString
IofCompleteRequest
IoCreateSymbolicLink
IoCreateDevice
ObfDereferenceObject
IoQueryFileDosDeviceName
ObReferenceObjectByHandle
ZwClose
ZwCreateFile
ObOpenObjectByPointer
IoFileObjectType
RtlFreeUnicodeString
_wcsnicmp
wcslen
RtlPrefixUnicodeString
IoGetCurrentProcess
IoGetDiskDeviceObject
IoCreateFileSpecifyDeviceObjectHint
wcsncpy
ZwQueryFullAttributesFile
_snwprintf
ObfReferenceObject
KeSetEvent
KeWaitForSingleObject
KeDelayExecutionThread
IoCancelIrp
KeReadStateEvent
KeGetCurrentThread
IoAllocateIrp
KeInitializeEvent
KeClearEvent
_wcsicmp
IoDriverObjectType
_vsnwprintf
RtlWalkFrameChain
ObReferenceObjectByName
IoFreeIrp
IoFreeMdl
IofCallDriver
IoGetRelatedDeviceObject
ZwWriteFile
ZwReadFile
ZwSetInformationFile
ZwQueryInformationFile
ZwMapViewOfSection
ZwCreateSection
IoCreateFile
ZwQueryValueKey
ZwOpenKey
_strnicmp
MmGetSystemRoutineAddress
RtlAnsiStringToUnicodeString
RtlInitAnsiString
_stricmp
RtlImageNtHeader
_except_handler3
wcsstr
FsRtlIsNameInExpression
ZwQuerySymbolicLinkObject
IoDeleteSymbolicLink
KeDetachProcess
KeAttachProcess
PsGetProcessPeb
NtBuildNumber
ZwSetValueKey
ZwCreateKey
ZwQueryKey
ZwDeleteKey
ZwDeleteValueKey
KeInitializeSpinLock
PsGetCurrentThreadId
wcsncat
_wcsupr
PsLookupProcessByProcessId
ObQueryNameString
IoVolumeDeviceToDosName
PsTerminateSystemThread
ZwWaitForSingleObject
PsGetCurrentProcessId
MmIsAddressValid
ExGetPreviousMode
ZwQuerySecurityObject
ZwSetSecurityObject
PsCreateSystemThread
RtlLengthRequiredSid
RtlCopySid
RtlLengthSid
RtlSetSaclSecurityDescriptor
RtlSetDaclSecurityDescriptor
RtlSetGroupSecurityDescriptor
RtlSetOwnerSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAddAce
RtlCreateAcl
ZwConnectPort
ZwRequestWaitReplyPort
PsInitialSystemProcess
ZwUnmapViewOfSection
ZwCreateDirectoryObject
ZwAllocateVirtualMemory
ZwQueryInformationProcess
PsGetProcessInheritedFromUniqueProcessId
PsGetProcessSectionBaseAddress
RtlGetAce
RtlGetDaclSecurityDescriptor
ZwEnumerateKey
ZwEnumerateValueKey
CmUnRegisterCallback
CmRegisterCallback
IoGetDeviceObjectPointer
PsSetCreateProcessNotifyRoutine
PsRemoveLoadImageNotifyRoutine
PsSetLoadImageNotifyRoutine
KeTickCount
KeBugCheckEx
IoDeleteDevice
ExDeleteNPagedLookasideList
ExFreePoolWithTag
ExAllocatePoolWithTag
ExInitializeNPagedLookasideList
InterlockedPushEntrySList
ZwOpenSymbolicLinkObject
InterlockedPopEntrySList
KfReleaseSpinLock
ExAcquireFastMutex
ExReleaseFastMutex
KfRaiseIrql
KfLowerIrql
KeGetCurrentIrql
KfAcquireSpinLock
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
GetModuleInformation
ZwEnumerateValueKey
RtlAllocateAndInitializeSid
RtlCreateAndSetSD
ZwQueryKey
ZwReadFile
ZwWriteFile
ZwCreateFile
ZwOpenFile
ZwQueryVolumeInformationFile
RtlWalkFrameChain
RtlDeleteCriticalSection
RtlFreeHeap
RtlInitializeCriticalSection
ZwQueryInformationProcess
ZwQueryInformationThread
ZwQueryObject
ZwQueryInformationFile
RtlInitUnicodeString
RtlEnterCriticalSection
RtlLeaveCriticalSection
RtlDetermineDosPathNameType_U
RtlNtStatusToDosError
ZwClose
RtlFreeSid
RtlImageNtHeader
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
CreateFileA
GetTimeZoneInformation
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetTimeFormatA
GetDateFormatA
GetStringTypeW
GetStringTypeA
SetConsoleCtrlHandler
HeapReAlloc
FatalAppExitA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
GetFileAttributesA
IsBadStringPtrA
GetFileAttributesW
IsBadStringPtrW
ResumeThread
GetLastError
QueryDosDeviceW
GetCurrentProcessId
SearchPathW
SetLastError
TerminateProcess
GetCurrentProcess
CloseHandle
CreateFileW
IsBadReadPtr
WideCharToMultiByte
GetModuleHandleA
SetUnhandledExceptionFilter
WriteFile
GetProcessId
GetProcAddress
DebugBreak
VirtualProtectEx
WriteProcessMemory
VirtualProtect
VirtualAllocEx
GetModuleFileNameW
GetWindowsDirectoryW
GetProcessHeap
GetCurrentThread
OpenProcess
GetModuleFileNameA
GetVersionExA
LoadLibraryA
DisableThreadLibraryCalls
WaitForSingleObject
SetEvent
CreateThread
ExitProcess
WaitForMultipleObjects
CreateEventA
GetCurrentThreadId
GlobalGetAtomNameA
OpenThread
TlsAlloc
OpenFileMappingW
CreateFileMappingW
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
TlsFree
EnterCriticalSection
LeaveCriticalSection
TlsGetValue
TlsSetValue
GetTickCount
ProcessIdToSessionId
CreateProcessW
GetSystemWindowsDirectoryW
ResetEvent
OpenEventA
LocalAlloc
LocalFree
RaiseException
VirtualQuery
FlushInstructionCache
VirtualAlloc
SetThreadContext
GetThreadContext
SuspendThread
HeapFree
RtlLookupFunctionEntry
RtlUnwindEx
RtlPcToFileHeader
UnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
FlsSetValue
GetCommandLineA
HeapAlloc
RtlVirtualUnwind
FlsGetValue
FlsFree
FlsAlloc
Sleep
HeapSize
HeapSetInformation
HeapCreate
HeapDestroy
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
ExpInterlockedPopEntrySList
ExpInterlockedPushEntrySList
ExQueryDepthSList
ExInitializeNPagedLookasideList
ExAllocatePoolWithTag
ExFreePoolWithTag
ExDeleteNPagedLookasideList
IoDeleteDevice
IoDeleteSymbolicLink
RtlInitUnicodeString
IofCompleteRequest
IoCreateSymbolicLink
IoCreateDevice
ObfDereferenceObject
IoQueryFileDosDeviceName
ObReferenceObjectByHandle
ZwClose
ZwCreateFile
ObOpenObjectByPointer
IoFileObjectType
RtlFreeUnicodeString
_wcsnicmp
RtlPrefixUnicodeString
IoGetCurrentProcess
IoGetDiskDeviceObject
IoCreateFileSpecifyDeviceObjectHint
wcsncpy
ZwQueryFullAttributesFile
_snwprintf
ObfReferenceObject
KeSetEvent
KeWaitForSingleObject
KeDelayExecutionThread
IoCancelIrp
KeReadStateEvent
IoAllocateIrp
KeInitializeEvent
KeClearEvent
_wcsicmp
IoDriverObjectType
_vsnwprintf
RtlWalkFrameChain
ObReferenceObjectByName
IoFreeIrp
IoFreeMdl
IofCallDriver
IoGetRelatedDeviceObject
ZwWriteFile
ZwReadFile
ZwSetInformationFile
ZwQueryInformationFile
ExReleaseFastMutex
ExAcquireFastMutex
ZwMapViewOfSection
ZwCreateSection
IoCreateFile
ZwQueryValueKey
ZwOpenKey
_strnicmp
MmGetSystemRoutineAddress
RtlAnsiStringToUnicodeString
RtlInitAnsiString
__C_specific_handler
_stricmp
RtlImageNtHeader
wcsstr
FsRtlIsNameInExpression
ZwQuerySymbolicLinkObject
ZwOpenSymbolicLinkObject
KeDetachProcess
KeAttachProcess
PsGetProcessPeb
NtBuildNumber
ZwSetValueKey
ZwCreateKey
ZwQueryKey
ZwDeleteKey
ZwDeleteValueKey
KeReleaseSpinLock
KeAcquireSpinLockRaiseToDpc
PsGetCurrentThreadId
wcsncat
_wcsupr
PsLookupProcessByProcessId
ObQueryNameString
IoVolumeDeviceToDosName
PsTerminateSystemThread
ZwWaitForSingleObject
PsGetCurrentProcessId
MmIsAddressValid
ExGetPreviousMode
ZwQuerySecurityObject
ZwSetSecurityObject
PsCreateSystemThread
RtlLengthRequiredSid
RtlCopySid
RtlLengthSid
RtlSetSaclSecurityDescriptor
RtlSetDaclSecurityDescriptor
RtlSetGroupSecurityDescriptor
RtlSetOwnerSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAddAce
RtlCreateAcl
ZwConnectPort
ZwRequestWaitReplyPort
PsInitialSystemProcess
ZwUnmapViewOfSection
ZwCreateDirectoryObject
KeAcquireGuardedMutex
KeReleaseGuardedMutex
KeTryToAcquireGuardedMutex
ZwAllocateVirtualMemory
ZwQueryInformationProcess
PsGetProcessInheritedFromUniqueProcessId
PsGetProcessSectionBaseAddress
PsRemoveLoadImageNotifyRoutine
PsSetCreateProcessNotifyRoutine
PsSetLoadImageNotifyRoutine
RtlGetAce
RtlGetDaclSecurityDescriptor
ZwEnumerateKey
ZwEnumerateValueKey
CmUnRegisterCallback
CmRegisterCallback
KeBugCheckEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ