Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Target
Telegram Desktop.zip
Size
9.3MB
MD5
311f8e33de278e9a2a3a09086cb444e1
SHA1
7d1006c3d39d868de2540be2e888ce4c4c35a6d3
SHA256
d86296cba8a3752b0d794ce152830a544ec7cd7b64dbcdf2aca73481cec59de9
SHA512
7f248ebe1e22982fcc73092cdf8ebbe5b5d9f549c81f17a59451bb5eabcd70a7094560d6dde00a2f7fdfeab18cfaed4bb97401ec45b54e4a84851857402c69db
SSDEEP
196608:KSgUGDobZblzSOaqxg9h+WTwI7oIFOsVp6dfVVXcpb4P9+fwG0s:KSHGUlblzSbqCXZUVJ6psfbcR4Xs
resource | yara_rule |
---|---|
static1/unpack004/Checker Zalando/Checker Zalando.exe | Nirsoft |
Password recovery tool for various web browsers
resource | yara_rule |
---|---|
static1/unpack004/Checker Zalando/Checker Zalando.exe | WebBrowserPassView |
Checks for missing Authenticode signature.
resource |
---|
unpack002/DscCore.dll |
unpack002/DscCoreConfProv.dll |
unpack002/drvstore.dll |
unpack003/dmview.ocx |
unpack003/dnscmmc.dll |
unpack003/elshyph.dll |
unpack004/Checker Zalando/Checker Zalando.exe |
unpack004/Checker Zalando/dycpasapi.dll |
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
C:\0ufHwaNfSeScFQ8BgERmZBYvzmD1P86k\Bullet.pdb
ArcTo
CreateIconIndirect
CoGetApartmentType
CoGetObjectContext
SetServiceStatus
ReadFile
HeapReAlloc
WriteConsoleW
ReadConsoleW
CreateFileW
CloseHandle
WaitForSingleObject
CreateThread
GetProcAddress
RaiseException
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetCurrentThreadId
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
FormatMessageA
InitOnceBeginInitialize
InitOnceComplete
GetLastError
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
RtlCaptureStackBackTrace
IsProcessorFeaturePresent
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObjectEx
Sleep
SwitchToThread
GetExitCodeThread
GetNativeSystemInfo
LocalFree
GetLocaleInfoEx
SetFileInformationByHandle
GetTempPathW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
InitOnceExecuteOnce
SleepConditionVariableCS
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetSystemTimeAsFileTime
GetTickCount64
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetModuleHandleW
GetFileInformationByHandleEx
CreateSymbolicLinkW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
InitializeSListHead
HeapSize
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitThread
ResumeThread
FreeLibraryAndExitThread
ExitProcess
GetModuleFileNameW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
GetCurrentThread
SetConsoleCtrlHandler
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
GetFileSizeEx
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
OutputDebugStringW
SetStdHandle
GetStringTypeW
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
DecodePointer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
dsccore.pdb
_wfopen_s
_wcsicmp
memset
fwscanf_s
fwprintf_s
_vsnwprintf
_waccess
_waccess_s
fseek
fclose
clock
_onexit
__dllonexit
wcsrchr
memcmp
memcpy
_unlock
_lock
__C_specific_handler
_initterm
_amsg_exit
_XcptFilter
memmove_s
?what@exception@@UEBAPEBDXZ
??1exception@@UEAA@XZ
??0exception@@QEAA@XZ
??0exception@@QEAA@AEBQEBD@Z
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBV0@@Z
memcpy_s
_CxxThrowException
__CxxFrameHandler3
??1type_info@@UEAA@XZ
malloc
free
swprintf_s
LoadLibraryExW
FreeLibrary
GetProcAddress
LoadStringW
DisableThreadLibraryCalls
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetTickCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
Sleep
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
SetThreadToken
TerminateProcess
GetCurrentProcessId
OpenThreadToken
GetCurrentProcess
GetCurrentThreadId
QueryPerformanceCounter
mi_clientFT_V1
MI_Application_InitializeV1
ReleaseSemaphore
OpenSemaphoreW
FindFirstFileW
FindClose
FindNextFileW
ResetEvent
GetFileSize
GetComputerNameW
ReadFile
RemoveDirectoryW
WideCharToMultiByte
HeapReAlloc
CreateEventW
EnterCriticalSection
LeaveCriticalSection
GetEnvironmentVariableW
GetTempFileNameW
CreateProcessW
HeapAlloc
HeapFree
CreateDirectoryW
WaitForSingleObject
GetCurrentThread
GetProcessHeap
WriteFile
CopyFileW
FormatMessageW
GetExitCodeProcess
CreateFileW
MultiByteToWideChar
GetTempPathW
SetLastError
GetLocalTime
DeleteCriticalSection
CloseHandle
DeleteFileW
LocalFree
ExpandEnvironmentStringsW
SetEvent
InitializeCriticalSectionAndSpinCount
CoSetProxyBlanket
CoUninitialize
CoCreateGuid
StringFromGUID2
CoInitializeEx
CoCreateInstance
StopCurrentPSConfiguration
Pull_GetConfiguration_ManagedPlugin
Test
Get
Pull_InstallCertificate_ManagedPlugin
Pull_GetAction_ManagedPlugin
Set
GetResourceProvider
MI_Application_NewSerializer_Mof
MI_Application_NewDeserializer_Mof
WinSqmAddToStreamEx
WinSqmEndSession
WinSqmStartSession
ImpersonateSelf
RevertToSelf
AdjustTokenPrivileges
GetTokenInformation
CryptAcquireCertificatePrivateKey
CryptStringToBinaryW
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertOpenStore
CryptBinaryToStringA
ConvertSidToStringSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
InitiateSystemShutdownExW
EventUnregister
EventWrite
EventRegister
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
PathRemoveFileSpecW
CryptDecrypt
CryptGetUserKey
QualifierFlavorToWMI
Instance_New
ResultFromHRESULT
ResultToHRESULT
TypeToCimType
ValueToVariant
SysAllocString
VariantClear
VariantInit
SysFreeString
CATraps
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
GetProviderClassID
LCMTraps
MI_Main
NITS
NITS_PRESENCE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
DscCoreConfProv.pdb
??1type_info@@UEAA@XZ
wcspbrk
towlower
_lock
_vsnwprintf
??0exception@@QEAA@XZ
__C_specific_handler
_wcsicmp
??0exception@@QEAA@AEBQEBD@Z
memcpy_s
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
fputws
??1exception@@UEAA@XZ
_wmakepath_s
_onexit
wcsncmp
feof
?what@exception@@UEBAPEBDXZ
_wfsopen
fread
memmove_s
_get_errno
_initterm
_amsg_exit
_XcptFilter
__CxxFrameHandler3
_CxxThrowException
malloc
fclose
ferror
swprintf_s
__dllonexit
_wfopen_s
wcscpy_s
free
_wcserror_s
_wsplitpath_s
_unlock
memcpy
memset
DisableThreadLibraryCalls
GetModuleHandleW
LoadStringW
FreeLibrary
LoadLibraryExW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetSystemDirectoryW
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetProcessHeap
HeapFree
HeapAlloc
WriteFile
FindNextFileW
DeleteFileW
CreateFileW
FindFirstFileExW
CreateDirectoryW
RemoveDirectoryW
GetFileSize
SetFileAttributesW
FindFirstFileW
FindClose
ReadFile
WNetCancelConnection2W
WNetAddConnection2W
ExpandEnvironmentStringsW
CloseHandle
ReleaseSemaphore
Sleep
WaitForSingleObject
OpenSemaphoreW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
OutputDebugStringA
QueryPerformanceCounter
PathIsUNCServerW
PathRemoveFileSpecW
PathFindNextComponentW
PathCombineW
PathRemoveBackslashW
PathCanonicalizeW
PathStripToRootW
PathIsRootW
GetComputerNameW
CopyFileW
CryptHashData
CryptGetHashParam
CryptAcquireContextW
CryptReleaseContext
CryptCreateHash
CryptDestroyHash
mi_clientFT_V1
MI_Application_InitializeV1
MI_Application_NewDeserializer_Mof
MI_Application_NewSerializer_Mof
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
FormatMessageW
EventRegister
EventUnregister
EventWrite
LocalFree
FileTimeToSystemTime
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
GetProviderClassID
MI_Main
NITS
NITS_PRESENCE
NativeProviderTraps
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL
drvstore.pdb
memcpy
__C_specific_handler
_initterm
malloc
free
wcsncmp
_amsg_exit
_XcptFilter
wcstol
_ultow_s
swprintf_s
swscanf
bsearch
toupper
towupper
_vsnprintf
_resetstkoflw
_wcsnicmp
wcstoul
iswxdigit
swscanf_s
memset
wcsstr
wcsrchr
memmove
_wcsicmp
wcschr
_vsnwprintf
memcmp
wcscmp
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
NtEnumerateKey
NtEnumerateValueKey
NtQueryKey
RtlInitUnicodeStringEx
NtQueryValueKey
NtOpenKey
RtlIsTextUnicode
RtlGetVersion
RtlNtStatusToDosErrorNoTeb
NtCreateFile
RtlInitUnicodeString
LdrUnloadDll
LdrGetProcedureAddress
LdrLoadDll
RtlGetAce
RtlSubAuthoritySid
RtlLengthRequiredSid
RtlValidSid
RtlGetSaclSecurityDescriptor
RtlSetGroupSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlMapGenericMask
RtlGetDaclSecurityDescriptor
RtlInitializeSid
RtlSelfRelativeToAbsoluteSD2
RtlMakeSelfRelativeSD
RtlGetOwnerSecurityDescriptor
RtlSetOwnerSecurityDescriptor
RtlUnicodeToMultiByteSize
RtlUnicodeToMultiByteN
RtlMultiByteToUnicodeSize
RtlMultiByteToUnicodeN
RtlUpcaseUnicodeChar
NtQuerySystemInformation
RtlGUIDFromString
RtlRandomEx
RtlImageNtHeader
NtSetInformationFile
RtlFormatCurrentUserKeyPath
RtlFreeUnicodeString
NtDeleteKey
NtCreateKey
NtSetValueKey
RtlUnicodeStringToInteger
RtlAllocateHeap
RtlFreeHeap
NtOpenThreadTokenEx
NtOpenProcessTokenEx
NtQueryInformationToken
RtlEqualSid
RtlValidRelativeSecurityDescriptor
RtlLengthSecurityDescriptor
RtlEqualUnicodeString
RtlPrefixUnicodeString
RtlLengthSid
RtlCreateAcl
RtlAddAccessAllowedAceEx
RtlCreateSecurityDescriptor
RtlSetDaclSecurityDescriptor
RtlValidSecurityDescriptor
RtlAbsoluteToSelfRelativeSD
NtOpenThreadToken
NtOpenProcessToken
NtQuerySecurityObject
NtDuplicateToken
NtAdjustPrivilegesToken
NtSetInformationThread
RtlCopySid
RtlAddAce
NtSetSecurityObject
NtDeleteValueKey
NtQueryObject
NtDuplicateObject
RtlTimeToTimeFields
LdrGetDllHandle
RtlInitAnsiString
RtlCreateUnicodeString
RtlDuplicateUnicodeString
RtlGetLastNtStatus
VerSetConditionMask
RtlVerifyVersionInfo
NtOpenProcess
NtQueryInformationProcess
NtQueryInformationFile
NtClose
RtlNtStatusToDosError
SetLastError
SetErrorMode
RaiseException
GetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemWindowsDirectoryW
GetWindowsDirectoryW
GetSystemDirectoryW
GetTickCount
GetLocalTime
GetSystemTimeAsFileTime
DeleteCriticalSection
EnterCriticalSection
SleepEx
CreateMutexW
LeaveCriticalSection
InitializeCriticalSection
WaitForMultipleObjectsEx
WaitForSingleObjectEx
CreateEventW
ReleaseMutex
SetEvent
WriteFile
GetTempFileNameW
FindFirstFileW
CreateDirectoryW
GetShortPathNameW
ReadFile
GetFileSizeEx
LocalFileTimeToFileTime
DeleteFileW
GetFileAttributesExW
SetFileAttributesW
FileTimeToLocalFileTime
SetFileTime
CompareFileTime
GetFileTime
FindClose
SetEndOfFile
GetFullPathNameW
GetFileSize
FlushFileBuffers
CreateFileA
SetFilePointer
CreateFileW
GetFileAttributesW
GetFileInformationByHandle
FindNextFileW
RemoveDirectoryW
GetDriveTypeW
MultiByteToWideChar
CompareStringW
WideCharToMultiByte
GetStringTypeExW
lstrcmpiW
lstrlenW
lstrcmpW
lstrlenA
CloseHandle
RegLoadKeyW
RegUnLoadKeyW
RegDeleteValueW
RegCreateKeyExW
RegSaveKeyExW
RegEnumKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegFlushKey
RegQueryValueExW
RegDeleteKeyExW
RegCloseKey
GetSecurityDescriptorLength
GetSecurityDescriptorControl
MakeAbsoluteSD
IsValidSecurityDescriptor
MakeSelfRelativeSD
FreeSid
SetSecurityDescriptorGroup
EqualSid
GetSecurityDescriptorSacl
GetSecurityDescriptorGroup
GetSecurityDescriptorDacl
GetSecurityDescriptorOwner
AllocateAndInitializeSid
SetFileSecurityW
AdjustTokenPrivileges
GetKernelObjectSecurity
DuplicateTokenEx
GetFileSecurityW
CheckTokenMembership
SetKernelObjectSecurity
MoveFileExW
CopyFileExW
CreateHardLinkW
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
GetSystemDefaultUILanguage
GetModuleHandleW
GetModuleFileNameA
FreeLibrary
LoadLibraryExA
GetProcAddress
LoadLibraryExW
SystemTimeToFileTime
FileTimeToSystemTime
LocalFree
LocalAlloc
GetThreadLocale
LCMapStringW
FormatMessageW
GetCommandLineA
GetEnvironmentVariableW
DeviceIoControl
Sleep
GetCurrentThreadId
TlsAlloc
GetCurrentProcess
GetCurrentThread
TlsGetValue
TlsSetValue
TlsFree
TerminateProcess
GetCurrentProcessId
QueryPerformanceCounter
GetNativeSystemInfo
GetFileVersionInfoExW
GetFileVersionInfoSizeExW
VerQueryValueW
HeapFree
GetProcessHeap
HeapAlloc
HeapReAlloc
SetThreadToken
OpenProcessToken
OpenThreadToken
DosDateTimeToFileTime
RtlCompareMemory
GetTempPathW
DriverPackageClose
DriverPackageEnumClassesW
DriverPackageEnumConfigurationsW
DriverPackageEnumDevicesW
DriverPackageEnumDriversW
DriverPackageEnumFilesW
DriverPackageEnumInterfacesW
DriverPackageEnumPropertiesW
DriverPackageEnumRegKeysW
DriverPackageEnumServicesW
DriverPackageGetVersionInfoW
DriverPackageOpenW
DriverStoreClose
DriverStoreConfigureW
DriverStoreCopyW
DriverStoreDeleteW
DriverStoreDriverPackageResolveCallbackW
DriverStoreEnumObjectsW
DriverStoreEnumW
DriverStoreFindW
DriverStoreGetObjectPropertyKeysW
DriverStoreGetObjectPropertyW
DriverStoreImportW
DriverStoreOfflineAddDriverPackageA
DriverStoreOfflineAddDriverPackageW
DriverStoreOfflineDeleteDriverPackageA
DriverStoreOfflineDeleteDriverPackageW
DriverStoreOfflineEnumDriverPackageA
DriverStoreOfflineEnumDriverPackageW
DriverStoreOfflineFindDriverPackageA
DriverStoreOfflineFindDriverPackageW
DriverStoreOpenW
DriverStorePublishW
DriverStoreReflectCriticalW
DriverStoreReflectW
DriverStoreSetLogContext
DriverStoreSetObjectPropertyW
DriverStoreUnconfigureW
DriverStoreUnpublishW
DriverStoreUnreflectCriticalW
DriverStoreUnreflectW
pServerDeleteDriverPackage
pServerImportDriverPackage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
C:\0ufHwaNfSeScFQ8BgERmZBYvzmD1P86k\Bullet.pdb
ArcTo
CreateIconIndirect
CoGetApartmentType
CoGetObjectContext
SetServiceStatus
ReadFile
HeapReAlloc
WriteConsoleW
ReadConsoleW
CreateFileW
CloseHandle
WaitForSingleObject
CreateThread
GetProcAddress
RaiseException
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetCurrentThreadId
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
FormatMessageA
InitOnceBeginInitialize
InitOnceComplete
GetLastError
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
RtlCaptureStackBackTrace
IsProcessorFeaturePresent
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObjectEx
Sleep
SwitchToThread
GetExitCodeThread
GetNativeSystemInfo
LocalFree
GetLocaleInfoEx
SetFileInformationByHandle
GetTempPathW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
InitOnceExecuteOnce
SleepConditionVariableCS
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetSystemTimeAsFileTime
GetTickCount64
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetModuleHandleW
GetFileInformationByHandleEx
CreateSymbolicLinkW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
InitializeSListHead
HeapSize
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitThread
ResumeThread
FreeLibraryAndExitThread
ExitProcess
GetModuleFileNameW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
GetCurrentThread
SetConsoleCtrlHandler
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
GetFileSizeEx
SetFilePointerEx
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
OutputDebugStringW
SetStdHandle
GetStringTypeW
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
DecodePointer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
dmview.pdb
ord3920
ord2902
ord629
ord1043
ord493
ord971
ord1875
ord4573
ord4953
ord2488
ord2712
ord287
ord1473
ord1510
ord1527
ord455
ord949
ord408
ord904
ord3742
ord599
ord4209
ord2546
ord5353
ord4808
ord2111
ord3137
ord5890
ord3020
ord2394
ord6257
ord5889
ord4301
ord3310
ord4623
ord5388
ord2992
ord5166
ord1441
ord3396
ord2105
ord2783
ord4436
ord4257
ord4601
ord1561
ord1566
ord5445
ord525
ord984
ord3283
ord3754
ord6175
ord4985
ord4372
ord3165
ord3053
ord3374
ord4816
ord3363
ord3244
ord3050
ord6807
ord2398
ord4895
ord3537
ord2491
ord5385
ord5399
ord4761
ord5416
ord4962
ord4754
ord5110
ord5113
ord5111
ord4697
ord4702
ord4713
ord4941
ord5475
ord4997
ord4998
ord5011
ord5157
ord4695
ord5004
ord5017
ord5434
ord5056
ord5010
ord5031
ord5032
ord5033
ord5307
ord5308
ord5024
ord5339
ord5334
ord5329
ord5395
ord4951
ord4874
ord4904
ord5302
ord5012
ord5143
ord5025
ord5026
ord4412
ord5978
ord3069
ord2917
ord5074
ord5072
ord5572
ord4121
ord3019
ord5629
ord1964
ord2159
ord6380
ord5322
ord5248
ord2181
ord6011
ord4752
ord5054
ord4683
ord1345
ord5946
ord1701
ord2450
ord3850
ord4983
ord3484
ord3384
ord5868
ord4822
ord6800
ord3447
ord6799
ord1891
ord4576
ord1512
ord496
ord974
ord2300
ord4771
ord4986
ord3385
ord4786
ord5708
ord6808
ord1777
ord6437
ord2517
ord5080
ord5406
ord5245
ord4721
ord5687
ord5419
ord5235
ord5038
ord4926
ord6133
ord2574
ord6577
ord6238
ord2846
ord659
ord1063
ord4213
ord2751
ord1517
ord6787
ord1530
ord3837
ord3534
ord6053
ord5711
ord5730
ord5065
ord4368
ord5724
ord5722
ord3468
ord2412
ord5615
ord1388
ord4191
ord6071
ord2515
ord2559
ord4836
ord6813
ord1126
ord2463
ord912
ord6385
ord4262
ord3417
ord4567
ord627
ord1041
ord6395
ord6544
ord6349
ord6393
ord3407
ord3806
ord4747
ord2593
ord2629
ord1287
ord1284
ord2845
ord4187
ord1966
ord2461
ord650
ord1055
ord4594
ord3910
ord311
ord827
ord2639
ord1506
ord1524
ord4550
ord4273
ord2754
ord2757
ord2756
ord3748
ord1427
ord1426
ord1082
ord288
ord812
ord1544
ord1586
ord1555
ord1583
ord1585
ord355
ord1477
ord1553
ord1416
ord1491
ord1577
ord6880
ord2121
ord5804
ord6821
ord2876
ord5815
ord6832
ord6351
ord6632
ord6522
ord5061
ord2178
ord2138
ord6520
ord2776
ord1646
ord1647
ord2898
ord3346
ord6886
ord2857
ord4481
ord4599
ord3783
ord3790
ord3830
ord286
ord1574
ord2427
ord2408
ord3740
ord851
ord336
ord622
ord620
ord4473
ord1463
ord2393
ord624
ord1040
ord626
ord1122
ord6734
ord2906
ord6887
ord665
ord1067
ord4770
ord4988
ord4371
ord3164
ord4077
ord4083
ord4082
ord3046
ord3166
ord3052
ord3366
ord3231
ord4815
ord3362
ord3243
ord3049
ord5699
ord2140
ord2457
ord5683
ord1736
ord5484
ord3933
ord6814
ord2060
ord2670
ord4789
ord5229
ord4017
ord5712
ord4694
ord6812
ord5586
ord2399
ord5663
ord1778
ord4365
ord5000
ord6440
_initterm
malloc
free
_amsg_exit
_XcptFilter
__CxxFrameHandler3
_purecall
wcsncmp
localeconv
__C_specific_handler
_wtoi
iswdigit
??_U@YAPEAX_K@Z
??_V@YAXPEAX@Z
_lock
_unlock
__dllonexit
_onexit
wcsstr
??1type_info@@UEAA@XZ
_CxxThrowException
log10
memset
?GetScopeNode@CDMScopeNodeCollection@@QEAAH_JPEAPEAVCDMScopeNode@@@Z
?GetParentDiskPtr@CDMNodeObj@@QEAAPEAV1@XZ
?GetUIState@CTaskData@@QEAAKXZ
?EnumDisks@CTaskData@@QEAAXAEAKPEAPEA_J@Z
?EnumVolumes@CTaskData@@QEAAXAEAKPEAPEA_J@Z
?DoDelete@CContextMenu@@QEAAX_J@Z
?GetResultPane@CDMSnapin@@QEAAH_JPEAPEAVCDMResultPane@@@Z
?GetDeviceType@CDMNodeObj@@QEAAKXZ
?EnumFirstVolumeMember@CDMNodeObj@@QEAAXAEA_JAEAJ@Z
?namecmp@@YAHPEBG0@Z
?ShowContextMenu@CContextMenu@@QEAAJPEAVCWnd@@JJ_J@Z
?GetResultStringArray@CDMNodeObj@@QEAAHAEAVCStringArray@@@Z
?PopUpInit@CContextMenu@@QEAAXPEAVCDMNodeObj@@AEAH1H@Z
?GetStorageType@CDMNodeObj@@QEAAXAEAVCString@@H@Z
?UpDateConsoleView@CDMSnapin@@QEAAX_J@Z
?GetSizeString@CDMNodeObj@@QEAAXAEAVCString@@@Z
?GetObjectId@CDMNodeObj@@QEAAXAEA_J@Z
?GetImageNum@CDMNodeObj@@QEAAHXZ
?GetSizeMB@CDMNodeObj@@QEAAXAEA_J@Z
?GetExtendedRegionColor@CDMNodeObj@@QEAAKXZ
?IsHiddenRegion@CDMNodeObj@@QEAAHXZ
?GetSize@CDMNodeObj@@QEAAXAEA_JH@Z
?GetDiskInfo@CDMNodeObj@@QEAAHAEAUdiskinfoex@@@Z
?EnumDiskRegions@CDMNodeObj@@QEAAXPEAPEA_JAEAJ@Z
?GetStorageType@CDMNodeObj@@QEAA?AW4_STORAGE_TYPES@@XZ
?GetPatternRef@CDMNodeObj@@QEAAHXZ
?GetColorRef@CDMNodeObj@@QEAAKXZ
?GetVolumeStatus@CDMNodeObj@@QEAAHAEAVCString@@@Z
?GetFileSystemLabel@CDMNodeObj@@QEAAXAEAVCString@@@Z
?GetFileSystemName@CDMNodeObj@@QEAAXAEAVCString@@@Z
?GetFlags@CDMNodeObj@@QEAAJXZ
?GetParentVolumePtr@CDMNodeObj@@QEAAPEAV1@XZ
?GetDriveLetter@CDMNodeObj@@QEAAXAEAG@Z
?GetName@CDMNodeObj@@QEAAXAEAVCString@@@Z
?GetOfflineReasonText@CDMNodeObj@@QEAAHAEAVCString@@@Z
?IsDiskOffline@CDMNodeObj@@QEAAHXZ
?GetDiskStatus@CDMNodeObj@@QEAAHAEAVCString@@@Z
?EnumVolumeMembers@CDMNodeObj@@QEAAXPEAPEA_JAEAJ@Z
?GetDiskTypeName@CDMNodeObj@@QEAAXAEAVCString@@@Z
?Command@CContextMenu@@QEAAJJPEAUIDataObject@@_J@Z
GetModuleHandleW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
LocalAlloc
LocalFree
Sleep
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
ImageList_GetIcon
ImageList_Draw
ImageList_AddMasked
GetWindowRect
EnableWindow
SendMessageW
RegisterWindowMessageW
NotifyWinEvent
BeginPaint
GetClientRect
EndPaint
GetDC
ReleaseDC
ShowScrollBar
GetSysColor
GetFocus
InvalidateRect
ScreenToClient
SystemParametersInfoW
GetCursorPos
PtInRect
GetKeyState
DrawFrameControl
LoadCursorW
SetCursor
LoadBitmapW
PostMessageW
GetParent
SetRect
ClientToScreen
FillRect
DrawTextExW
DrawIconEx
LoadImageW
DestroyIcon
IsWindow
PostThreadMessageW
LoadRegTypeLi
SysAllocString
BitBlt
CreateBitmap
GetDeviceCaps
SelectObject
CreateCompatibleDC
GetTextMetricsW
CreateFontIndirectW
CreateSolidBrush
PatBlt
GetBkColor
ExtTextOutW
CreateHatchBrush
GetTextExtentPoint32W
StrCmpLogicalW
AccessibleObjectFromWindow
LresultFromObject
ShowMessage
?AddLDMObjMapEntry@CDataCache@@QEAAXPEAU_LDM_OBJ_MAP_ENTRY@@@Z
?GetDiskCount@CDataCache@@QEAAKXZ
?GetLdmObjectId@CDMNodeObj@@QEAA_JXZ
?GetNumMembers@CDMNodeObj@@QEAAKXZ
?GetOcxFrameCWndPtr@CTaskData@@QEAAPEAVCWnd@@XZ
?GetRegionColorStructPtr@CTaskData@@QEAAXPEAPEAU_REGION_COLORS@@AEAH@Z
?GetServerName@CDataCache@@QEAA?AVCString@@XZ
?GetVolumeCount@CDataCache@@QEAAKXZ
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
dnscmmc.pdb
??2@YAPEAX_K@Z
_CxxThrowException
_cexit
abort
memmove
??3@YAXPEAX@Z
__CxxFrameHandler3
?terminate@@YAXXZ
??1type_info@@UEAA@XZ
__C_specific_handler
_initterm
malloc
free
_amsg_exit
_XcptFilter
_errno
memset
CoTaskMemAlloc
CreateStreamOnHGlobal
StringFromCLSID
CoTaskMemFree
CoCreateInstance
RtlVirtualUnwind
UnhandledExceptionFilter
RtlLookupFunctionEntry
RtlCaptureContext
GetTickCount
OutputDebugStringA
GetProcAddress
SetLastError
GetVersion
GetLastError
VirtualQuery
RtlPcToFileHeader
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
lstrlenW
GlobalAlloc
GlobalFree
GetProcessHeap
HeapAlloc
HeapFree
Sleep
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
_CorDllMain
CorBindToRuntimeEx
LoadStringW
LoadImageA
RegisterClipboardFormatW
RegQueryValueExW
RegDeleteKeyW
RegDeleteTreeW
RegSetValueExW
RegCreateKeyExW
RegEnumKeyExW
RegDeleteValueW
RegCloseKey
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
elshyph.pdb
realloc
free
??0exception@@QEAA@AEBQEBDH@Z
_callnewh
??8type_info@@QEBAHAEBV0@@Z
_vsnwprintf
towlower
bsearch
_wtoi
setlocale
memcpy
strerror
___mb_cur_max_func
_errno
__pctype_func
___lc_handle_func
___lc_codepage_func
calloc
__crtLCMapStringW
__uncaught_exception
abort
_CxxThrowException
??0exception@@QEAA@XZ
memcmp
memset
__CxxFrameHandler3
_onexit
__dllonexit
_unlock
_lock
??1type_info@@UEAA@XZ
__C_specific_handler
_initterm
_amsg_exit
wcscpy_s
_XcptFilter
malloc
_purecall
??_V@YAXPEAX@Z
memmove
??0exception@@QEAA@AEBQEBD@Z
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBV0@@Z
??3@YAXPEAX@Z
??1exception@@UEAA@XZ
wcscmp
RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind
DecodePointer
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetStringTypeW
WideCharToMultiByte
MultiByteToWideChar
GetUserPreferredUILanguages
UnmapViewOfFile
CloseHandle
CreateFileW
GetLastError
LocalFree
CreateFileMappingW
MapViewOfFile
CompareStringOrdinal
InitializeSRWLock
AcquireSRWLockShared
ReleaseSRWLockShared
ReleaseSRWLockExclusive
GetSystemWindowsDirectoryW
AcquireSRWLockExclusive
DisableThreadLibraryCalls
Sleep
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
RegDeleteTreeW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegGetValueW
RegOpenKeyExW
RegCloseKey
RegOpenCurrentUser
RegEnumKeyExW
EventWrite
EventUnregister
EventRegister
RegQueryInfoKeyW
RegEnumValueW
PathAppendW
DoAction
FreePropertyBag
FreeService
InitService
RecognizeText
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
F:\Free Menu Project\Again\BLUGTA - Other Countries\bin\Release\SpookyGui.pdb
URLDownloadToFileW
timeGetTime
QueryPerformanceFrequency
GetSystemDirectoryA
FreeLibrary
LoadLibraryA
VerifyVersionInfoA
WaitForSingleObjectEx
ExpandEnvironmentStringsA
GetFileType
ReadFile
PeekNamedPipe
WaitForMultipleObjects
SetLastError
FormatMessageA
CreateFileA
GetFileSizeEx
GetSystemTime
SystemTimeToFileTime
GetEnvironmentVariableW
WideCharToMultiByte
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FindClose
FindFirstFileW
FindNextFileW
MultiByteToWideChar
FormatMessageW
WriteFile
GetSystemTimeAsFileTime
VerSetConditionMask
ConvertFiberToThread
LoadLibraryW
SetEndOfFile
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
EnterCriticalSection
ConvertThreadToFiber
SwitchToFiber
DeleteFiber
CreateFiber
GetModuleFileNameA
GetModuleHandleExW
GetProcAddress
AttachConsole
GetCurrentProcessId
AllocConsole
GetStdHandle
SetConsoleTitleA
SetConsoleOutputCP
SetConsoleTextAttribute
FreeConsole
DisableThreadLibraryCalls
FreeLibraryAndExitThread
CreateThread
CloseHandle
FlushFileBuffers
EnumSystemLocalesW
SleepEx
Sleep
RtlVirtualUnwind
LeaveCriticalSection
GetModuleHandleA
IsThreadAFiber
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetConsoleOutputCP
GetModuleFileNameW
SetStdHandle
SetConsoleCtrlHandler
SetFilePointerEx
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
ExitThread
ExitProcess
RtlUnwind
LoadLibraryExW
InterlockedFlushSList
RtlUnwindEx
OutputDebugStringW
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
CreateEventW
ResetEvent
SetEvent
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
RtlLookupFunctionEntry
GetCPInfo
GetStringTypeW
GetTickCount64
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
DecodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
QueryPerformanceCounter
GetModuleHandleW
GetTickCount
WriteConsoleW
HeapCreate
GetCurrentProcess
OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualProtect
CreateToolhelp32Snapshot
Thread32First
Thread32Next
GetSystemInfo
VirtualAlloc
VirtualFree
VirtualQuery
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
VerifyVersionInfoW
SetUnhandledExceptionFilter
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
RtlCaptureContext
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindFirstFileExW
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
SetFileInformationByHandle
AreFileApisANSI
CopyFileW
GetFileInformationByHandleEx
LocalFree
GetLocaleInfoEx
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetExitCodeThread
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
RtlPcToFileHeader
RaiseException
InitOnceBeginInitialize
InitOnceComplete
EncodePointer
LCMapStringEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
ClientToScreen
SetCursor
GetClientRect
ReleaseDC
GetDC
GetForegroundWindow
ReleaseCapture
SetCapture
GetCapture
GetKeyState
IsChild
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
ScreenToClient
GetAsyncKeyState
SetProcessDPIAware
SetWindowLongPtrW
CallWindowProcW
FindWindowW
MessageBoxA
GetCursorPos
SetCursorPos
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
LoadCursorW
MonitorFromWindow
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDestroyHash
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptSignHashW
CryptEnumProvidersW
BCryptGenRandom
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
D3DCompile
WSAGetLastError
htonl
listen
ioctlsocket
getaddrinfo
freeaddrinfo
inet_pton
recvfrom
sendto
gethostname
shutdown
getnameinfo
__WSAFDIsSet
select
WSASetLastError
bind
connect
getpeername
getsockname
getsockopt
socket
ntohs
setsockopt
WSAIoctl
WSAStartup
WSACleanup
accept
closesocket
recv
ntohl
send
htons
ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord26
ord22
ord41
ord50
ord45
ord60
ord211
ord46
ord143
CryptQueryObject
CertGetCertificateContextProperty
CertOpenStore
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryA
CertAddCertificateContextToStore
CertGetNameStringA
CertCloseStore
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
GetDeviceCaps
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ