Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
10Static
static
10executor x64-x23.zip
windows7-x64
1executor x64-x23.zip
windows10-2004-x64
1executor x...ts.jar
windows7-x64
1executor x...ts.jar
windows10-2004-x64
1executor x...oy.jar
windows7-x64
1executor x...oy.jar
windows10-2004-x64
1executor x...ws.jar
windows7-x64
1executor x...ws.jar
windows10-2004-x64
1executor x...se.jar
windows7-x64
1executor x...se.jar
windows10-2004-x64
1executor x...in.jar
windows7-x64
1executor x...in.jar
windows10-2004-x64
1executor x...64.dll
windows7-x64
1executor x...64.dll
windows10-2004-x64
1executor x...ux.dll
windows7-x64
1executor x...ux.dll
windows10-2004-x64
1executor x...64.dll
windows7-x64
1executor x...64.dll
windows10-2004-x64
1executor x...55.dll
windows7-x64
1executor x...55.dll
windows10-2004-x64
1executor x...64.dll
windows7-x64
1executor x...64.dll
windows10-2004-x64
1executor x...64.dll
windows7-x64
1executor x...64.dll
windows10-2004-x64
1executor x...ce.jar
windows7-x64
1executor x...ce.jar
windows10-2004-x64
1executor x...fr.jar
windows7-x64
1executor x...fr.jar
windows10-2004-x64
1executor x...wt.jar
windows7-x64
1executor x...wt.jar
windows10-2004-x64
1executor x...nt.jar
windows7-x64
1executor x...nt.jar
windows10-2004-x64
1Behavioral task
behavioral1
Sample
executor x64-x23.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
executor x64-x23.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
executor x64-x23/executor/scriрts/amd64/cmm/charsets.jar
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
executor x64-x23/executor/scriрts/amd64/cmm/charsets.jar
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
executor x64-x23/executor/scriрts/amd64/cmm/deploy.jar
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
executor x64-x23/executor/scriрts/amd64/cmm/deploy.jar
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
executor x64-x23/executor/scriрts/amd64/cmm/javaws.jar
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
executor x64-x23/executor/scriрts/amd64/cmm/javaws.jar
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
executor x64-x23/executor/scriрts/amd64/cmm/jsse.jar
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
executor x64-x23/executor/scriрts/amd64/cmm/jsse.jar
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
executor x64-x23/executor/scriрts/amd64/cmm/plugin.jar
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
executor x64-x23/executor/scriрts/amd64/cmm/plugin.jar
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
executor x64-x23/executor/scriрts/applet/ShadowPlay/NVSPCAPS/_nvspcaps64.dll
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
executor x64-x23/executor/scriрts/applet/ShadowPlay/NVSPCAPS/_nvspcaps64.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
executor x64-x23/executor/scriрts/applet/ShadowPlay/NvRemux.dll
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
executor x64-x23/executor/scriрts/applet/ShadowPlay/NvRemux.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
executor x64-x23/executor/scriрts/applet/ShadowPlay/Plugins/LocalSystem/_nvspserviceplugin64.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
executor x64-x23/executor/scriрts/applet/ShadowPlay/Plugins/LocalSystem/_nvspserviceplugin64.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
executor x64-x23/executor/scriрts/applet/ShadowPlay/cudart64_55.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
executor x64-x23/executor/scriрts/applet/ShadowPlay/cudart64_55.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
executor x64-x23/executor/scriрts/applet/ShadowPlay/ipccommon64.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
executor x64-x23/executor/scriрts/applet/ShadowPlay/ipccommon64.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
executor x64-x23/executor/scriрts/applet/ShadowPlay/nvspscreenshot64.dll
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
executor x64-x23/executor/scriрts/applet/ShadowPlay/nvspscreenshot64.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
executor x64-x23/executor/scriрts/ext/deploy/jce.jar
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
executor x64-x23/executor/scriрts/ext/deploy/jce.jar
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
executor x64-x23/executor/scriрts/ext/deploy/jfr.jar
Resource
win7-20240220-en
Behavioral task
behavioral28
Sample
executor x64-x23/executor/scriрts/ext/deploy/jfr.jar
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
executor x64-x23/executor/scriрts/ext/deploy/jfxswt.jar
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
executor x64-x23/executor/scriрts/ext/deploy/jfxswt.jar
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
executor x64-x23/executor/scriрts/ext/deploy/management-agent.jar
Resource
win7-20240215-en
Behavioral task
behavioral32
Sample
executor x64-x23/executor/scriрts/ext/deploy/management-agent.jar
Resource
win10v2004-20240226-en
Target
executor x64-x23.zip
Size
21.1MB
MD5
f9f78c2be45228af8f238a02a23060cc
SHA1
b245acceefd1abc0cb920bfb77b6a4deebbfaecc
SHA256
c21f14a55785ea00f68c753ed97f00880a331f7f3055bab7257568dbbe9baf91
SHA512
7acdf5deacd3a36947765f9f01769942163f5688df1e9c573630c4bc3e4d9d6dc26cd2dc784e1b7b7fecbca04403ede76f36d5fd8cb5a5cbd78ffe9ef84ec9e9
SSDEEP
393216:csC03oJ7QER+u7gUttG3w5hey2yVHrx/O5S3x9VTyd6f77/jhCke7We:2+U+u7httG3kSgJO5WtyQfHlCkeye
resource | yara_rule |
---|---|
static1/unpack001/executor x64-x23/executor/louder.exe | family_zgrat_v1 |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Performance.pdb
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
C:\dvs\p4\build\sw\rel\gfclient\rel_03_11\shadowplay2\server\win7_amd64_release\_nvspcaps64.pdb
DeleteCriticalSection
LoadLibraryW
WideCharToMultiByte
GetCurrentProcessId
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventA
CreateThread
WaitForMultipleObjects
CreateSemaphoreA
ResetEvent
GetFileAttributesA
Sleep
TerminateProcess
GetExitCodeProcess
GetTickCount
OpenEventA
HeapFree
GetProcessHeap
CreateEventW
GetSystemTimeAsFileTime
OpenProcess
GetCurrentThreadId
GetThreadId
GetModuleHandleA
CreateDirectoryA
CreateFileA
OutputDebugStringA
GetLocalTime
GetModuleFileNameW
MoveFileExA
QueryPerformanceCounter
QueryPerformanceFrequency
LoadLibraryA
MultiByteToWideChar
CreateDirectoryW
RemoveDirectoryW
GetTempPathW
HeapDestroy
HeapAlloc
HeapReAlloc
HeapSize
K32GetModuleFileNameExW
InitializeCriticalSectionEx
Process32FirstW
Process32NextW
SetCurrentDirectoryA
GetCurrentProcess
ProcessIdToSessionId
GetSystemDirectoryA
GetVersionExA
GetModuleFileNameA
GetVolumeInformationA
WTSGetActiveConsoleSessionId
K32GetProcessMemoryInfo
GetSystemTime
SystemTimeToFileTime
DeleteFileA
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
QueryFullProcessImageNameA
RaiseException
DecodePointer
WriteFile
ReadFile
GetFileSizeEx
VerifyVersionInfoW
SetEndOfFile
ReadConsoleW
SetFilePointerEx
SetStdHandle
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindNextFileA
FindFirstFileExW
FindFirstFileExA
FindClose
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
CloseHandle
lstrcmpA
LocalFree
LocalAlloc
LoadLibraryExW
GetModuleHandleW
CreateProcessW
CreateProcessA
SetLastError
OutputDebugStringW
GetFullPathNameW
GetFileAttributesW
CreateFileW
VerSetConditionMask
GetProcAddress
FreeLibrary
GetSystemDirectoryW
CreateWaitableTimerA
CancelWaitableTimer
SetWaitableTimer
GetLastError
CreateToolhelp32Snapshot
FlushFileBuffers
GetStringTypeW
SetConsoleCtrlHandler
GetACP
GetCurrentThread
ExitProcess
WriteConsoleW
GetModuleHandleExW
GetFileType
GetStdHandle
EncodePointer
InterlockedFlushSList
InterlockedPushEntrySList
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
ReleaseMutex
OpenFileMappingA
CreateMutexA
OpenMutexA
CreateMutexW
OpenMutexW
OpenEventW
CreateFileMappingW
OpenFileMappingW
FindWindowA
UnregisterClassA
WaitForInputIdle
PostThreadMessageA
GetMessageA
TranslateMessage
DispatchMessageA
RegisterDeviceNotificationA
UnregisterDeviceNotification
DefWindowProcA
PostQuitMessage
RegisterClassExA
GetWindow
EnumChildWindows
GetDesktopWindow
CreateWindowExA
GetWindowRect
IsWindowVisible
IsWindow
EnumDisplaySettingsExA
GetWindowThreadProcessId
EnumWindows
GetShellWindow
FindWindowExW
FindWindowW
GetWindowLongA
GetForegroundWindow
PostMessageA
SendMessageA
RedrawWindow
EnumDisplayDevicesA
EnumDisplaySettingsA
DestroyWindow
RegCloseKey
ConvertStringSidToSidW
OpenSCManagerA
CloseServiceHandle
GetUserNameW
GetUserNameA
SetTokenInformation
GetLengthSid
DuplicateTokenEx
OpenProcessToken
RegDeleteKeyValueA
RegSetValueExA
RegQueryValueExW
RegDeleteKeyExA
RegDeleteKeyA
RegCreateKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetSecurityInfo
RegQueryValueExA
RegOpenKeyExA
AllocateAndInitializeSid
CopySid
FreeSid
GetSecurityDescriptorDacl
GetTokenInformation
SetEntriesInAclA
SHGetPropertyStoreFromParsingName
SHGetKnownFolderPath
SHGetFolderPathW
SHGetFolderPathA
PropVariantClear
CoCreateInstance
CoInitializeEx
CoUninitialize
CoTaskMemFree
SetErrorInfo
VariantChangeType
GetErrorInfo
SysAllocStringLen
CreateErrorInfo
SysFreeString
VariantInit
VariantCopy
SysAllocString
VariantClear
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueA
PathFileExistsA
NvPluginGetInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
C:\dvs\p4\build\sw\rel\gfclient\rel_03_11\shadowplay2\mux\remux\win7_x86_release\NvRemux.pdb
SHGetKnownFolderPath
SHGetPropertyStoreFromParsingName
SHGetFolderPathW
CoUninitialize
CoInitializeEx
CoTaskMemFree
PropVariantClear
VariantClear
SysFreeString
SetErrorInfo
GetErrorInfo
SysAllocString
VariantInit
VariantChangeType
CreateErrorInfo
MFStartup
MFShutdown
MFCreateSourceReaderFromURL
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
SetSecurityInfo
PostThreadMessageW
SetEndOfFile
HeapReAlloc
HeapSize
SetFilePointerEx
SetStdHandle
ReadFile
SetConsoleCtrlHandler
GetProcessHeap
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
ReadConsoleW
WriteConsoleW
DecodePointer
GetStringTypeW
SetUnhandledExceptionFilter
LCMapStringW
CompareStringW
VerSetConditionMask
ExpandEnvironmentStringsW
CreateFileW
GetFileAttributesW
GetFullPathNameW
OutputDebugStringW
CloseHandle
GetLastError
SetLastError
GetCurrentProcess
CreateProcessA
CreateProcessW
GetSystemDirectoryW
FreeLibrary
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LocalAlloc
LocalFree
lstrcmpA
lstrcmpW
VerifyVersionInfoW
GetVolumeInformationW
GetVersionExW
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
CreateDirectoryW
InitializeCriticalSection
DeleteCriticalSection
Sleep
GetFileSizeEx
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
GetModuleFileNameW
MoveFileExW
WideCharToMultiByte
GetSystemTime
SystemTimeToFileTime
SetEvent
ResetEvent
WaitForSingleObject
CreateEventW
CreateThread
GetThreadId
UnhandledExceptionFilter
OutputDebugStringA
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetTimeFormatW
GetDateFormatW
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
RtlUnwind
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetCurrentThread
GetACP
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
_CreateInstance@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
C:\dvs\p4\build\sw\rel\gfclient\rel_03_11\shadowplay2\ServicePlugin\win7_amd64_release\_nvspserviceplugin64.pdb
SHGetFolderPathW
SHGetKnownFolderPath
CoTaskMemFree
RegQueryValueExA
ConvertStringSidToSidW
SetTokenInformation
GetLengthSid
DuplicateTokenEx
RegCloseKey
RegOpenKeyExA
SetSecurityInfo
OpenProcessToken
WaitForInputIdle
UnregisterClassW
WTSQueryUserToken
CreateEnvironmentBlock
DestroyEnvironmentBlock
ReadFile
ReadConsoleW
WriteConsoleW
InitializeCriticalSectionEx
SetEndOfFile
SetFilePointerEx
SetStdHandle
GetStringTypeW
SetConsoleCtrlHandler
GetProcessHeap
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
VerSetConditionMask
CreateFileW
GetFileAttributesW
GetFullPathNameW
OutputDebugStringW
CloseHandle
GetLastError
SetLastError
CreateProcessA
CreateProcessW
GetSystemDirectoryW
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LocalAlloc
LocalFree
lstrcmpA
VerifyVersionInfoW
GetCurrentProcessId
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateThread
WaitForMultipleObjects
CreateSemaphoreW
CreateDirectoryW
GetFileSizeEx
GetCurrentThreadId
GetLocalTime
GetModuleFileNameW
MoveFileExW
WideCharToMultiByte
SetCurrentDirectoryW
GetCurrentProcess
TerminateProcess
ProcessIdToSessionId
OpenProcess
GetSystemInfo
WTSGetActiveConsoleSessionId
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
RemoveDirectoryW
DecodePointer
RaiseException
OutputDebugStringA
CreateSymbolicLinkW
GetLocaleInfoW
LCMapStringW
CompareStringW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
HeapFree
HeapAlloc
GetCurrentThread
GetACP
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetDateFormatW
GetTimeFormatW
PathFileExistsW
NvPluginGetInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
FlushFileBuffers
GetProcAddress
FreeLibrary
LoadLibraryA
QueryPerformanceCounter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetCurrentThreadId
CloseHandle
SwitchToThread
GetLastError
GetModuleFileNameA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapCreate
GetModuleHandleW
ExitProcess
DecodePointer
EncodePointer
FlsSetValue
GetCommandLineA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryW
FlsGetValue
FlsFree
SetLastError
FlsAlloc
RtlUnwindEx
WriteFile
GetStdHandle
GetModuleFileNameW
HeapSize
SetHandleCount
GetStartupInfoW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
GetTickCount
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
GetConsoleCP
GetConsoleMode
LCMapStringW
MultiByteToWideChar
GetStringTypeW
WriteConsoleW
CreateFileW
NvOptimusEnablementCuda
__cudaRegisterDeviceFunction
__cudaRegisterFatBinary
__cudaRegisterFunction
__cudaRegisterPrelinkedFatBinary
__cudaRegisterShared
__cudaRegisterSharedVar
__cudaRegisterSurface
__cudaRegisterTexture
__cudaRegisterVar
__cudaUnregisterFatBinary
cudaArrayGetInfo
cudaBindSurfaceToArray
cudaBindTexture
cudaBindTexture2D
cudaBindTextureToArray
cudaBindTextureToMipmappedArray
cudaChooseDevice
cudaConfigureCall
cudaCreateChannelDesc
cudaCreateSurfaceObject
cudaCreateTextureObject
cudaD3D10GetDevice
cudaD3D10GetDevices
cudaD3D10GetDirect3DDevice
cudaD3D10MapResources
cudaD3D10RegisterResource
cudaD3D10ResourceGetMappedArray
cudaD3D10ResourceGetMappedPitch
cudaD3D10ResourceGetMappedPointer
cudaD3D10ResourceGetMappedSize
cudaD3D10ResourceGetSurfaceDimensions
cudaD3D10ResourceSetMapFlags
cudaD3D10SetDirect3DDevice
cudaD3D10UnmapResources
cudaD3D10UnregisterResource
cudaD3D11GetDevice
cudaD3D11GetDevices
cudaD3D11GetDirect3DDevice
cudaD3D11SetDirect3DDevice
cudaD3D9Begin
cudaD3D9End
cudaD3D9GetDevice
cudaD3D9GetDevices
cudaD3D9GetDirect3DDevice
cudaD3D9MapResources
cudaD3D9MapVertexBuffer
cudaD3D9RegisterResource
cudaD3D9RegisterVertexBuffer
cudaD3D9ResourceGetMappedArray
cudaD3D9ResourceGetMappedPitch
cudaD3D9ResourceGetMappedPointer
cudaD3D9ResourceGetMappedSize
cudaD3D9ResourceGetSurfaceDimensions
cudaD3D9ResourceSetMapFlags
cudaD3D9SetDirect3DDevice
cudaD3D9UnmapResources
cudaD3D9UnmapVertexBuffer
cudaD3D9UnregisterResource
cudaD3D9UnregisterVertexBuffer
cudaDestroySurfaceObject
cudaDestroyTextureObject
cudaDeviceCanAccessPeer
cudaDeviceDisablePeerAccess
cudaDeviceEnablePeerAccess
cudaDeviceGetAttribute
cudaDeviceGetByPCIBusId
cudaDeviceGetCacheConfig
cudaDeviceGetLimit
cudaDeviceGetPCIBusId
cudaDeviceGetSharedMemConfig
cudaDeviceGetStreamPriorityRange
cudaDeviceReset
cudaDeviceSetCacheConfig
cudaDeviceSetLimit
cudaDeviceSetSharedMemConfig
cudaDeviceSynchronize
cudaDriverGetVersion
cudaEventCreate
cudaEventCreateWithFlags
cudaEventDestroy
cudaEventElapsedTime
cudaEventQuery
cudaEventRecord
cudaEventSynchronize
cudaFree
cudaFreeArray
cudaFreeHost
cudaFreeMipmappedArray
cudaFuncGetAttributes
cudaFuncSetCacheConfig
cudaFuncSetSharedMemConfig
cudaGLGetDevices
cudaGLMapBufferObject
cudaGLMapBufferObjectAsync
cudaGLRegisterBufferObject
cudaGLSetBufferObjectMapFlags
cudaGLSetGLDevice
cudaGLUnmapBufferObject
cudaGLUnmapBufferObjectAsync
cudaGLUnregisterBufferObject
cudaGetChannelDesc
cudaGetDevice
cudaGetDeviceCount
cudaGetDeviceProperties
cudaGetErrorString
cudaGetExportTable
cudaGetLastError
cudaGetMipmappedArrayLevel
cudaGetSurfaceObjectResourceDesc
cudaGetSurfaceReference
cudaGetSymbolAddress
cudaGetSymbolSize
cudaGetTextureAlignmentOffset
cudaGetTextureObjectResourceDesc
cudaGetTextureObjectResourceViewDesc
cudaGetTextureObjectTextureDesc
cudaGetTextureReference
cudaGraphicsD3D10RegisterResource
cudaGraphicsD3D11RegisterResource
cudaGraphicsD3D9RegisterResource
cudaGraphicsGLRegisterBuffer
cudaGraphicsGLRegisterImage
cudaGraphicsMapResources
cudaGraphicsResourceGetMappedMipmappedArray
cudaGraphicsResourceGetMappedPointer
cudaGraphicsResourceSetMapFlags
cudaGraphicsSubResourceGetMappedArray
cudaGraphicsUnmapResources
cudaGraphicsUnregisterResource
cudaHostAlloc
cudaHostGetDevicePointer
cudaHostGetFlags
cudaHostRegister
cudaHostUnregister
cudaIpcCloseMemHandle
cudaIpcGetEventHandle
cudaIpcGetMemHandle
cudaIpcOpenEventHandle
cudaIpcOpenMemHandle
cudaLaunch
cudaMalloc
cudaMalloc3D
cudaMalloc3DArray
cudaMallocArray
cudaMallocHost
cudaMallocMipmappedArray
cudaMallocPitch
cudaMemGetInfo
cudaMemcpy
cudaMemcpy2D
cudaMemcpy2DArrayToArray
cudaMemcpy2DAsync
cudaMemcpy2DFromArray
cudaMemcpy2DFromArrayAsync
cudaMemcpy2DToArray
cudaMemcpy2DToArrayAsync
cudaMemcpy3D
cudaMemcpy3DAsync
cudaMemcpy3DPeer
cudaMemcpy3DPeerAsync
cudaMemcpyArrayToArray
cudaMemcpyAsync
cudaMemcpyFromArray
cudaMemcpyFromArrayAsync
cudaMemcpyFromSymbol
cudaMemcpyFromSymbolAsync
cudaMemcpyPeer
cudaMemcpyPeerAsync
cudaMemcpyToArray
cudaMemcpyToArrayAsync
cudaMemcpyToSymbol
cudaMemcpyToSymbolAsync
cudaMemset
cudaMemset2D
cudaMemset2DAsync
cudaMemset3D
cudaMemset3DAsync
cudaMemsetAsync
cudaPeekAtLastError
cudaPointerGetAttributes
cudaProfilerInitialize
cudaProfilerStart
cudaProfilerStop
cudaRuntimeGetVersion
cudaSetDevice
cudaSetDeviceFlags
cudaSetDoubleForDevice
cudaSetDoubleForHost
cudaSetValidDevices
cudaSetupArgument
cudaStreamAddCallback
cudaStreamCreate
cudaStreamCreateWithFlags
cudaStreamCreateWithPriority
cudaStreamDestroy
cudaStreamGetFlags
cudaStreamGetPriority
cudaStreamQuery
cudaStreamSynchronize
cudaStreamWaitEvent
cudaThreadExit
cudaThreadGetCacheConfig
cudaThreadGetLimit
cudaThreadSetCacheConfig
cudaThreadSetLimit
cudaThreadSynchronize
cudaUnbindTexture
cudaWGLGetDevice
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
C:\dvs\p4\build\sw\rel\gfclient\rel_03_11\shadowplay2\common\ipcwrapper\win7_amd64_release\ipccommon64.pdb
SHGetFolderPathA
SetSecurityInfo
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
getMessageBusInterface
releaseMessageBusInterface
?ListFields@GeneratedMessageReflection@internal@protobuf@google@@UEBAXAEBVMessage@34@PEAV?$vector@PEBVFieldDescriptor@protobuf@google@@V?$allocator@PEBVFieldDescriptor@protobuf@google@@@std@@@std@@@Z
?MutableMessage@GeneratedMessageReflection@internal@protobuf@google@@UEBAPEAVMessage@34@PEAV534@PEBVFieldDescriptor@34@PEAVMessageFactory@34@@Z
?MutableRawRepeatedField@GeneratedMessageReflection@internal@protobuf@google@@MEBAPEAXPEAVMessage@34@PEBVFieldDescriptor@34@W4CppType@634@HPEBVDescriptor@34@@Z
?MutableRepeatedMessage@GeneratedMessageReflection@internal@protobuf@google@@UEBAPEAVMessage@34@PEAV534@PEBVFieldDescriptor@34@H@Z
?MutableUnknownFields@GeneratedMessageReflection@internal@protobuf@google@@UEBAPEAVUnknownFieldSet@34@PEAVMessage@34@@Z
?ReleaseLast@GeneratedMessageReflection@internal@protobuf@google@@UEBAPEAVMessage@34@PEAV534@PEBVFieldDescriptor@34@@Z
?ReleaseMessage@GeneratedMessageReflection@internal@protobuf@google@@UEBAPEAVMessage@34@PEAV534@PEBVFieldDescriptor@34@PEAVMessageFactory@34@@Z
?RemoveLast@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@@Z
?SetAllocatedMessage@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@0PEBVFieldDescriptor@34@@Z
?SetBool@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@_N@Z
?SetDouble@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@N@Z
?SetEnum@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@PEBVEnumValueDescriptor@34@@Z
?InitializationErrorString@Message@protobuf@google@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?SetInt32@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@H@Z
?SetInt64@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@_J@Z
?SetRepeatedBool@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@H_N@Z
?SetRepeatedDouble@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@HN@Z
?SetRepeatedEnum@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@HPEBVEnumValueDescriptor@34@@Z
?SetRepeatedFloat@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@HM@Z
?SetRepeatedInt32@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@HH@Z
?SetRepeatedInt64@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@H_J@Z
?SetRepeatedString@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@HAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetRepeatedUInt32@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@HI@Z
?SetRepeatedUInt64@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@H_K@Z
?SetString@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetUInt32@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@I@Z
?SetUInt64@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@_K@Z
?SpaceUsed@GeneratedMessageReflection@internal@protobuf@google@@UEBAHAEBVMessage@34@@Z
?SpaceUsed@Message@protobuf@google@@UEBAHXZ
?Swap@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@0@Z
?SwapElements@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@HH@Z
?SwapFields@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@0AEBV?$vector@PEBVFieldDescriptor@protobuf@google@@V?$allocator@PEBVFieldDescriptor@protobuf@google@@@std@@@std@@@Z
??_7FunctionClosure0@internal@protobuf@google@@6B@
?HasOneof@GeneratedMessageReflection@internal@protobuf@google@@UEBA_NAEBVMessage@34@PEBVOneofDescriptor@34@@Z
?HasField@GeneratedMessageReflection@internal@protobuf@google@@UEBA_NAEBVMessage@34@PEBVFieldDescriptor@34@@Z
?GetUnknownFields@GeneratedMessageReflection@internal@protobuf@google@@UEBAAEBVUnknownFieldSet@34@AEBVMessage@34@@Z
?GetUInt64@GeneratedMessageReflection@internal@protobuf@google@@UEBA_KAEBVMessage@34@PEBVFieldDescriptor@34@@Z
?GetUInt32@GeneratedMessageReflection@internal@protobuf@google@@UEBAIAEBVMessage@34@PEBVFieldDescriptor@34@@Z
?GetTypeName@Message@protobuf@google@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetStringReference@GeneratedMessageReflection@internal@protobuf@google@@UEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVMessage@34@PEBVFieldDescriptor@34@PEAV56@@Z
?GetString@GeneratedMessageReflection@internal@protobuf@google@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVMessage@34@PEBVFieldDescriptor@34@@Z
?GetRepeatedUInt64@GeneratedMessageReflection@internal@protobuf@google@@UEBA_KAEBVMessage@34@PEBVFieldDescriptor@34@H@Z
?GetRepeatedUInt32@GeneratedMessageReflection@internal@protobuf@google@@UEBAIAEBVMessage@34@PEBVFieldDescriptor@34@H@Z
?GetRepeatedStringReference@GeneratedMessageReflection@internal@protobuf@google@@UEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVMessage@34@PEBVFieldDescriptor@34@HPEAV56@@Z
?GetRepeatedString@GeneratedMessageReflection@internal@protobuf@google@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVMessage@34@PEBVFieldDescriptor@34@H@Z
?GetRepeatedMessage@GeneratedMessageReflection@internal@protobuf@google@@UEBAAEBVMessage@34@AEBV534@PEBVFieldDescriptor@34@H@Z
?GetRepeatedInt64@GeneratedMessageReflection@internal@protobuf@google@@UEBA_JAEBVMessage@34@PEBVFieldDescriptor@34@H@Z
?GetRepeatedInt32@GeneratedMessageReflection@internal@protobuf@google@@UEBAHAEBVMessage@34@PEBVFieldDescriptor@34@H@Z
?GetRepeatedFloat@GeneratedMessageReflection@internal@protobuf@google@@UEBAMAEBVMessage@34@PEBVFieldDescriptor@34@H@Z
?GetRepeatedEnum@GeneratedMessageReflection@internal@protobuf@google@@UEBAPEBVEnumValueDescriptor@34@AEBVMessage@34@PEBVFieldDescriptor@34@H@Z
?GetRepeatedDouble@GeneratedMessageReflection@internal@protobuf@google@@UEBANAEBVMessage@34@PEBVFieldDescriptor@34@H@Z
?GetRepeatedBool@GeneratedMessageReflection@internal@protobuf@google@@UEBA_NAEBVMessage@34@PEBVFieldDescriptor@34@H@Z
?GetReflection@Message@protobuf@google@@UEBAPEBVReflection@23@XZ
?GetOneofFieldDescriptor@GeneratedMessageReflection@internal@protobuf@google@@UEBAPEBVFieldDescriptor@34@AEBVMessage@34@PEBVOneofDescriptor@34@@Z
?GetMessage@GeneratedMessageReflection@internal@protobuf@google@@UEBAAEBVMessage@34@AEBV534@PEBVFieldDescriptor@34@PEAVMessageFactory@34@@Z
?GetInt64@GeneratedMessageReflection@internal@protobuf@google@@UEBA_JAEBVMessage@34@PEBVFieldDescriptor@34@@Z
?GetInt32@GeneratedMessageReflection@internal@protobuf@google@@UEBAHAEBVMessage@34@PEBVFieldDescriptor@34@@Z
?GetFloat@GeneratedMessageReflection@internal@protobuf@google@@UEBAMAEBVMessage@34@PEBVFieldDescriptor@34@@Z
?GetEnum@GeneratedMessageReflection@internal@protobuf@google@@UEBAPEBVEnumValueDescriptor@34@AEBVMessage@34@PEBVFieldDescriptor@34@@Z
?GetDouble@GeneratedMessageReflection@internal@protobuf@google@@UEBANAEBVMessage@34@PEBVFieldDescriptor@34@@Z
?GetBool@GeneratedMessageReflection@internal@protobuf@google@@UEBA_NAEBVMessage@34@PEBVFieldDescriptor@34@@Z
?FindKnownExtensionByNumber@GeneratedMessageReflection@internal@protobuf@google@@UEBAPEBVFieldDescriptor@34@H@Z
?FindKnownExtensionByName@GeneratedMessageReflection@internal@protobuf@google@@UEBAPEBVFieldDescriptor@34@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?FieldSize@GeneratedMessageReflection@internal@protobuf@google@@UEBAHAEBVMessage@34@PEBVFieldDescriptor@34@@Z
?DiscardUnknownFields@Message@protobuf@google@@UEAAXXZ
?ClearOneof@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVOneofDescriptor@34@@Z
?ClearField@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@@Z
?CheckTypeAndMergeFrom@Message@protobuf@google@@UEAAXAEBVMessageLite@23@@Z
?AddUInt64@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@_K@Z
?AddUInt32@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@I@Z
?AddString@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?AddMessage@GeneratedMessageReflection@internal@protobuf@google@@UEBAPEAVMessage@34@PEAV534@PEBVFieldDescriptor@34@PEAVMessageFactory@34@@Z
?AddInt64@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@_J@Z
?AddInt32@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@H@Z
?AddFloat@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@M@Z
?AddEnum@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@PEBVEnumValueDescriptor@34@@Z
?AddDouble@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@N@Z
?AddBool@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@_N@Z
?VerifyUTF8StringFallback@WireFormat@internal@protobuf@google@@CAXPEBDHW4Operation@1234@0@Z
?ComputeUnknownFieldsSize@WireFormat@internal@protobuf@google@@SAHAEBVUnknownFieldSet@34@@Z
?SerializeUnknownFieldsToArray@WireFormat@internal@protobuf@google@@SAPEAEAEBVUnknownFieldSet@34@PEAE@Z
?SerializeUnknownFields@WireFormat@internal@protobuf@google@@SAXAEBVUnknownFieldSet@34@PEAVCodedOutputStream@io@34@@Z
?SkipField@WireFormat@internal@protobuf@google@@SA_NPEAVCodedInputStream@io@34@IPEAVUnknownFieldSet@34@@Z
?Merge@ReflectionOps@internal@protobuf@google@@SAXAEBVMessage@34@PEAV534@@Z
??1GeneratedMessageReflection@internal@protobuf@google@@UEAA@XZ
??0GeneratedMessageReflection@internal@protobuf@google@@QEAA@PEBVDescriptor@23@PEBVMessage@23@QEBHHHHPEBVDescriptorPool@23@PEAVMessageFactory@23@H@Z
?BytesSize@WireFormatLite@internal@protobuf@google@@SAHAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?StringSize@WireFormatLite@internal@protobuf@google@@SAHAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?WriteEnumNoTagToArray@WireFormatLite@internal@protobuf@google@@SAPEAEHPEAE@Z
?WriteMessageMaybeToArray@WireFormatLite@internal@protobuf@google@@SAXHAEBVMessageLite@34@PEAVCodedOutputStream@io@34@@Z
?WriteBytesMaybeAliased@WireFormatLite@internal@protobuf@google@@SAXHAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAVCodedOutputStream@io@34@@Z
?WriteStringMaybeAliased@WireFormatLite@internal@protobuf@google@@SAXHAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAVCodedOutputStream@io@34@@Z
?WriteEnum@WireFormatLite@internal@protobuf@google@@SAXHHPEAVCodedOutputStream@io@34@@Z
?WriteBool@WireFormatLite@internal@protobuf@google@@SAXH_NPEAVCodedOutputStream@io@34@@Z
?WriteUInt32@WireFormatLite@internal@protobuf@google@@SAXHIPEAVCodedOutputStream@io@34@@Z
?ReadBytes@WireFormatLite@internal@protobuf@google@@SA_NPEAVCodedInputStream@io@34@PEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?ReadString@WireFormatLite@internal@protobuf@google@@SA_NPEAVCodedInputStream@io@34@PEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?VarintSize32Fallback@CodedOutputStream@io@protobuf@google@@CAHI@Z
?WriteVarint32FallbackToArray@CodedOutputStream@io@protobuf@google@@CAPEAEIPEAE@Z
?WriteTagToArray@CodedOutputStream@io@protobuf@google@@SAPEAEIPEAE@Z
?WriteVarint32SignExtendedToArray@CodedOutputStream@io@protobuf@google@@SAPEAEHPEAE@Z
?WriteVarint32ToArray@CodedOutputStream@io@protobuf@google@@SAPEAEIPEAE@Z
?WriteStringWithSizeToArray@CodedOutputStream@io@protobuf@google@@SAPEAEAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAE@Z
?PopLimit@CodedInputStream@io@protobuf@google@@QEAAXH@Z
?PushLimit@CodedInputStream@io@protobuf@google@@QEAAHH@Z
?ExpectAtEnd@CodedInputStream@io@protobuf@google@@QEAA_NXZ
?ExpectTag@CodedInputStream@io@protobuf@google@@QEAA_NI@Z
?ReadTagWithCutoff@CodedInputStream@io@protobuf@google@@QEAA?AU?$pair@I_N@std@@I@Z
?ReadVarint64@CodedInputStream@io@protobuf@google@@QEAA_NPEA_K@Z
?ReadVarint32@CodedInputStream@io@protobuf@google@@QEAA_NPEAI@Z
?ClearFallback@UnknownFieldSet@protobuf@google@@AEAAXXZ
?AddVarint@UnknownFieldSet@protobuf@google@@QEAAXH_K@Z
?Swap@UnknownFieldSet@protobuf@google@@QEAAXPEAV123@@Z
?MergeFrom@UnknownFieldSet@protobuf@google@@QEAAXAEBV123@@Z
?empty@UnknownFieldSet@protobuf@google@@QEBA_NXZ
??1UnknownFieldSet@protobuf@google@@QEAA@XZ
??0UnknownFieldSet@protobuf@google@@QEAA@XZ
?Swap@RepeatedPtrFieldBase@internal@protobuf@google@@IEAAXPEAV1234@@Z
?Reserve@RepeatedPtrFieldBase@internal@protobuf@google@@IEAAXH@Z
?InternalRegisterGeneratedMessage@MessageFactory@protobuf@google@@SAXPEBVDescriptor@23@PEBVMessage@23@@Z
?InternalRegisterGeneratedFile@MessageFactory@protobuf@google@@SAXPEBDP6AXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?generated_factory@MessageFactory@protobuf@google@@SAPEAV123@XZ
??1Message@protobuf@google@@UEAA@XZ
?InternalAddGeneratedFile@DescriptorPool@protobuf@google@@SAXPEBXH@Z
?FindFileByName@DescriptorPool@protobuf@google@@QEBAPEBVFileDescriptor@23@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?generated_pool@DescriptorPool@protobuf@google@@SAPEBV123@XZ
?GetEmptyString@internal@protobuf@google@@YAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GoogleOnceInitImpl@protobuf@google@@YAXPEA_JPEAVClosure@12@@Z
?OnShutdown@internal@protobuf@google@@YAXP6AXXZ@Z
??1FunctionClosure0@internal@protobuf@google@@UEAA@XZ
??4LogFinisher@internal@protobuf@google@@QEAAXAEAVLogMessage@123@@Z
??6LogMessage@internal@protobuf@google@@QEAAAEAV0123@PEBD@Z
??1LogMessage@internal@protobuf@google@@QEAA@XZ
??0LogMessage@internal@protobuf@google@@QEAA@W4LogLevel@23@PEBDH@Z
?VerifyVersion@internal@protobuf@google@@YAXHHPEBD@Z
?SerializeToString@MessageLite@protobuf@google@@QEBA_NPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?ParseFromArray@MessageLite@protobuf@google@@QEAA_NPEBXH@Z
?GetEmptyStringAlreadyInited@internal@protobuf@google@@YAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?SetFloat@GeneratedMessageReflection@internal@protobuf@google@@UEBAXPEAVMessage@34@PEBVFieldDescriptor@34@M@Z
GetLastError
SetEvent
ResetEvent
CreateEventA
ReadConsoleW
ReadFile
SetEndOfFile
SetStdHandle
SetFilePointerEx
GetStringTypeW
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
CreateSemaphoreW
GetTickCount
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
CreateEventW
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetModuleFileNameA
SetConsoleCtrlHandler
GetStartupInfoW
FatalAppExitA
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetCurrentThread
IsDebuggerPresent
HeapSize
MultiByteToWideChar
AreFileApisANSI
ExitProcess
IsProcessorFeaturePresent
GetCommandLineA
WriteConsoleW
GetModuleHandleExW
GetFileType
GetStdHandle
RtlUnwindEx
RtlLookupFunctionEntry
RaiseException
RtlPcToFileHeader
DecodePointer
EncodePointer
VerifyVersionInfoW
lstrcmpA
LocalFree
LocalAlloc
LoadLibraryExW
GetProcAddress
GetModuleHandleW
FreeLibrary
GetSystemDirectoryW
CreateProcessW
CreateProcessA
SetLastError
OutputDebugStringW
GetFullPathNameW
GetFileAttributesW
CreateFileW
VerSetConditionMask
WideCharToMultiByte
MoveFileExA
GetModuleFileNameW
GetLocalTime
GetCurrentThreadId
OutputDebugStringA
GetFileSizeEx
CreateFileA
CreateDirectoryA
QueryPerformanceFrequency
QueryPerformanceCounter
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetProcessHeap
HeapFree
HeapAlloc
WaitForMultipleObjects
GetCurrentProcessId
CloseHandle
CreateIpcClient
CreateIpcProxyInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
C:\dvs\p4\build\sw\rel\gfclient\rel_03_11\shadowplay2\screenshot\win7_amd64_release\nvspscreenshot64.pdb
SHGetFolderPathA
GdipGetImageEncodersSize
GdipCreateBitmapFromScan0
GdipSetPropertyItem
GdipGetImageEncoders
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipSaveImageToFile
SetEntriesInAclA
InitializeSecurityDescriptor
GetTokenInformation
GetSecurityDescriptorDacl
GetLengthSid
FreeSid
CopySid
AllocateAndInitializeSid
OpenProcessToken
SetSecurityDescriptorDacl
SetSecurityInfo
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
IsValidLocale
GetUserDefaultLCID
GetLocaleInfoW
LCMapStringW
CloseHandle
SetEvent
ResetEvent
WaitForSingleObject
CreateEventA
Sleep
CreateThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetCurrentProcessId
OpenProcess
FreeLibrary
GetProcAddress
LoadLibraryA
CreateDirectoryA
CreateFileA
GetFileSizeEx
OutputDebugStringA
GetLastError
GetCurrentThreadId
GetLocalTime
EnumSystemLocalesW
MoveFileExA
WideCharToMultiByte
ReleaseMutex
UnmapViewOfFile
OpenFileMappingA
HeapAlloc
HeapFree
GetProcessHeap
CreateMutexA
OpenEventA
GetCurrentProcess
MapViewOfFile
LocalAlloc
LocalFree
OpenMutexA
CreateFileMappingA
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
FreeEnvironmentStringsW
GetStringTypeW
SetStdHandle
SetFilePointerEx
CreateFileW
HeapSize
HeapReAlloc
SetEndOfFile
ReadFile
GetModuleFileNameW
ReadConsoleW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetEnvironmentVariableW
RtlUnwindEx
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RtlPcToFileHeader
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
EncodePointer
GetStdHandle
GetFileType
GetModuleFileNameA
GetModuleHandleExW
WriteConsoleW
ExitProcess
MultiByteToWideChar
WriteFile
OutputDebugStringW
SetConsoleCtrlHandler
GetCurrentThread
GetACP
FlushFileBuffers
GetConsoleCP
GetConsoleMode
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
SetEnvironmentVariableA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
NvCreateScreenshotInterface
NvReleaseScreenshotInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
C:\dvs\p4\build\sw\rel\gfclient\rel_03_11\shadowplay2\api\win7_amd64_release\nvspapi64.pdb
SHGetFolderPathA
SHGetKnownFolderPath
CoTaskMemFree
SetErrorInfo
CreateErrorInfo
GetErrorInfo
VariantCopy
SysAllocString
SysAllocStringLen
SysFreeString
VariantInit
VariantClear
VariantChangeType
FreeSid
ConvertStringSidToSidW
OpenSCManagerA
CloseServiceHandle
GetUserNameW
GetUserNameA
SetTokenInformation
DuplicateTokenEx
RegDeleteKeyValueA
RegSetValueExA
RegQueryValueExW
RegDeleteKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
SetSecurityInfo
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenProcessToken
AllocateAndInitializeSid
CopySid
RegCreateKeyExA
GetLengthSid
GetSecurityDescriptorDacl
GetTokenInformation
SetEntriesInAclA
LookupAccountNameA
ConvertSidToStringSidA
RegDeleteKeyA
WTSQuerySessionInformationA
WTSFreeMemory
PathFindFileNameA
PathFileExistsA
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetConsoleCtrlHandler
HeapSize
HeapReAlloc
SetStdHandle
SetFilePointerEx
ReadConsoleW
WriteConsoleW
CreateProcessW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CloseHandle
SetEvent
CreateEventA
WaitForMultipleObjects
GetLastError
ResetEvent
WaitForSingleObject
GetCurrentProcessId
CreateThread
GetCurrentThreadId
GetThreadId
FreeLibrary
GetProcAddress
WideCharToMultiByte
GetSystemDirectoryW
SetLastError
HeapFree
GetProcessHeap
OpenEventA
Sleep
SetDllDirectoryA
GetModuleHandleA
CreateDirectoryA
CreateFileA
GetFileSizeEx
OutputDebugStringA
GetLocalTime
GetModuleFileNameW
MoveFileExA
CreateFileW
ReadFile
WriteFile
WaitNamedPipeW
CreateEventW
QueryPerformanceCounter
QueryPerformanceFrequency
OpenProcess
LoadLibraryA
ReleaseMutex
UnmapViewOfFile
OpenFileMappingA
HeapAlloc
CreateMutexA
GetCurrentProcess
MapViewOfFile
LocalAlloc
LocalFree
OpenMutexA
CreateFileMappingA
GetModuleFileNameA
WTSGetActiveConsoleSessionId
VerSetConditionMask
GetFileAttributesW
GetFullPathNameW
OutputDebugStringW
CreateProcessA
SetEndOfFile
GetModuleHandleW
LoadLibraryExW
lstrcmpA
VerifyVersionInfoW
DecodePointer
RaiseException
InitializeCriticalSectionEx
SetCurrentDirectoryA
GetFileAttributesA
TerminateProcess
ProcessIdToSessionId
GetSystemDirectoryA
GetVersionExA
GetVolumeInformationA
MultiByteToWideChar
K32GetProcessMemoryInfo
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
DeleteFileA
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindNextFileA
FindFirstFileExW
FindFirstFileExA
FindClose
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
GetFileType
GetStdHandle
GetACP
GetCurrentThread
GetModuleHandleExW
ExitProcess
EncodePointer
InterlockedFlushSList
InterlockedPushEntrySList
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RtlPcToFileHeader
RtlUnwindEx
EnumDisplaySettingsA
wsprintfW
ChangeWindowMessageFilterEx
DestroyWindow
CreateWindowExA
RegisterClassExA
UnregisterClassA
SendMessageA
GetForegroundWindow
TranslateMessage
GetMessageA
PostThreadMessageA
RedrawWindow
PostMessageA
EnumDisplaySettingsExA
DispatchMessageA
GetWindowThreadProcessId
EnumDisplayDevicesA
DefWindowProcA
WaitForInputIdle
EnumWindows
GetShellWindow
FindWindowExW
FindWindowA
FindWindowW
CreateOverlayApiInterface
CreateShadowPlayApiInterface
ShadowPlayOnSystemStart
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ