Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
setup.msi
Resource
win10v2004-20240426-en
Target
x64-.x32.-installer.zip
Size
36.2MB
MD5
ffffd58dcac7a687c8bd4ead3fc623a5
SHA1
d8648e59d55f8ea95a38dff6261ae721778247f0
SHA256
7ed61f91f8f42d6212c5333eca1efe6db7e383602ad5a7ef31edc62d07dddb9f
SHA512
6d851061850a728f7a114198c984b3034f5a9e7a323fa33860d423513ef9085b6869ba61faca64445726deeed8525673cbe3d5b9727a285de74c0ce6eff2ad63
SSDEEP
786432:YeAlVQ3uqurqInA0QYKQr6f1iSiQiIf+X4ANKDKg:VwUuqur+gr69iS1hf+e
Checks for missing Authenticode signature.
resource |
---|
unpack003/UpdateAgent/mskeyprotcli.dll |
unpack003/UpdateAgent/softpub.dll |
unpack003/UpdateAgent/umrdp.dll |
unpack003/aadtb/aadtb.dll |
unpack003/aadtb/kerberos.dll |
unpack003/taskcomp/ppcsnap.dll |
unpack003/taskcomp/scecli.dll |
unpack003/taskcomp/taskcomp.dll |
unpack003/uireng/htui.dll |
unpack003/uireng/uireng.dll |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL
UpdateAgent.pdb
_initterm_e
_initterm
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o__set_errno
_o__wcsicmp
_o__wcsnicmp
_o__wcstoui64
_o__wfopen
_o__wsplitpath_s
_o__wtof
_o__wtoi
_o_fclose
_o_feof
_o_fgetws
_o_free
memmove
_o_iswctype
_o_iswspace
_o_malloc
_o_memcpy_s
_o_strncpy_s
_o_strtol
_o_terminate
_o_toupper
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcsncpy_s
_o_wcstok_s
_o_wcstoul
__CxxFrameHandler3
_CxxThrowException
_o__execute_onexit_table
_o__errno
_o__crt_atexit
_o__configure_narrow_argv
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_onexit_table
_o__initialize_narrow_environment
_o__cexit
_o__callnewh
wcsstr
_o__aligned_malloc
_o__aligned_free
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsprintf_s
_o___stdio_common_vsprintf
_o___stdio_common_vsnprintf_s
_o___stdio_common_vfwprintf
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
_o___acrt_iob_func
strrchr
wcsrchr
strchr
wcschr
__C_specific_handler
memcmp
memcpy
wcscmp
memset
wcsnlen
strcmp
strncmp
wcsncmp
RtlNtStatusToDosError
NtSetInformationFile
RtlCompareUnicodeString
NtUnloadKey2
RtlDosPathNameToNtPathName_U_WithStatus
RtlAdjustPrivilege
NtLoadKey2
NtDelayExecution
NtShutdownSystem
NtQueryLicenseValue
RtlDestroyEnvironment
NtSetInformationProcess
RtlCreateEnvironmentEx
RtlSetEnvironmentVariable
RtlDowncaseUnicodeChar
RtlExpandEnvironmentStrings_U
RtlInitUnicodeStringEx
RtlLengthSid
RtlDuplicateUnicodeString
NtQueryPerformanceCounter
NtFlushKey
DbgPrintEx
NtQueryVolumeInformationFile
RtlValidAcl
NtAdjustPrivilegesToken
RtlSetSaclSecurityDescriptor
RtlCreateUnicodeStringFromAsciiz
NtQueryValueKey
DbgPrint
NtCreateFile
RtlFreeHeap
NtClose
RtlQueryEnvironmentVariable_U
LdrLoadDll
RtlDosPathNameToNtPathName_U
LdrUnloadDll
LdrGetDllHandle
NtOpenKey
NtWriteFile
LdrGetProcedureAddress
NtQueryObject
RtlLeaveCriticalSection
RtlInitializeCriticalSection
RtlEnterCriticalSection
RtlTimeToTimeFields
RtlDeleteCriticalSection
RtlNtStatusToDosErrorNoTeb
RtlLengthSecurityDescriptor
RtlValidSid
NtOpenProcessToken
RtlSetOwnerSecurityDescriptor
RtlGetControlSecurityDescriptor
RtlMakeSelfRelativeSD
NtDuplicateToken
RtlSetDaclSecurityDescriptor
RtlGetSaclSecurityDescriptor
RtlQueryInformationAcl
RtlGetOwnerSecurityDescriptor
RtlAllocateAndInitializeSid
RtlRaiseStatus
RtlCreateHeap
RtlUpcaseUnicodeChar
RtlAllocateHeap
RtlReAllocateHeap
RtlInitUnicodeString
NtSetInformationThread
NtQueryInformationThread
RtlDestroyHeap
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlGetGroupSecurityDescriptor
RtlCopySid
NtOpenThreadToken
RtlGetVersion
RtlSetGroupSecurityDescriptor
RtlCreateSecurityDescriptor
RtlFindAceByType
RtlGetDaclSecurityDescriptor
RtlDeleteSecurityObject
NtYieldExecution
NtQueryKey
NtDeleteKey
RtlSetCurrentTransaction
NtEnumerateKey
RtlGetLengthWithoutLastFullDosOrNtPathElement
NtEnumerateValueKey
NtOpenKeyEx
RtlGetAce
RtlpApplyLengthFunction
RtlAddAccessAllowedAceEx
NtReadFile
NtCreateKeyTransacted
RtlNewSecurityObjectEx
NtDeleteFile
NtSetSecurityObject
RtlGetCurrentTransaction
NtDeleteValueKey
RtlAddAce
NtQueryAttributesFile
NtFlushBuffersFile
NtDuplicateObject
NtFsControlFile
NtQueryInformationFile
RtlCreateAcl
NtCreateKey
NtOpenKeyTransactedEx
NtQueryDirectoryFile
NtQuerySecurityObject
NtSetValueKey
NtOpenFile
RtlDosPathNameToRelativeNtPathName_U_WithStatus
NtSetEaFile
RtlReleaseRelativeName
NtQueryEaFile
NtWaitForSingleObject
RtlCopyUnicodeString
RtlAppendUnicodeStringToString
RtlEqualUnicodeString
RtlCreateEnvironment
NtQuerySystemTime
RtlSetControlSecurityDescriptor
RtlAnsiCharToUnicodeChar
RtlUnicodeToMultiByteN
RtlIsTextUnicode
RtlUnicodeToMultiByteSize
RtlConvertSidToUnicodeString
RtlRunOnceComplete
RtlRunOnceBeginInitialize
RtlFindNextForwardRunClear
RtlNumberOfSetBits
RtlInitializeSRWLock
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
RtlExpandEnvironmentStrings
NtQueryInformationToken
VerSetConditionMask
GetSecurityDescriptorLength
GetTokenInformation
AddAccessAllowedAce
GetLengthSid
DestroyPrivateObjectSecurity
MakeSelfRelativeSD
InitializeAcl
InitializeSecurityDescriptor
FreeSid
CopySid
EqualSid
SetSecurityDescriptorDacl
CreatePrivateObjectSecurityWithMultipleInheritance
GetSecurityDescriptorControl
AllocateAndInitializeSid
IsValidSid
AdjustTokenPrivileges
IsValidAcl
AddAccessAllowedAceEx
CheckTokenMembership
IsValidSecurityDescriptor
SetEndOfFile
GetLogicalDriveStringsW
SetFileTime
GetShortPathNameW
DeleteFileW
GetLogicalDrives
GetVolumeInformationW
GetFileSizeEx
FindFirstFileW
GetFileInformationByHandle
FindNextFileW
FlushFileBuffers
SetFileInformationByHandle
SetFilePointer
GetDiskFreeSpaceW
ReadFile
RemoveDirectoryW
GetFullPathNameW
DeleteFileA
SetFilePointerEx
CreateFileA
CreateDirectoryW
CreateFileW
GetFileType
SetFileAttributesW
GetFileAttributesW
FindFirstFileExW
FindClose
GetDriveTypeW
GetFinalPathNameByHandleW
GetLongPathNameW
GetTempFileNameW
GetFileSize
WriteFile
GetDiskFreeSpaceExW
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleW
GetModuleHandleExW
LoadLibraryExA
GetModuleFileNameA
GetProcAddress
FreeLibrary
RegDeleteValueW
RegQueryValueExW
RegSetValueExW
RegEnumValueW
RegEnumKeyExW
RegSetKeySecurity
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
WideCharToMultiByte
CompareStringW
CompareStringOrdinal
MultiByteToWideChar
WaitForSingleObject
ReleaseSRWLockShared
InitializeCriticalSectionEx
CreateMutexW
ResetEvent
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
OpenSemaphoreW
WaitForSingleObjectEx
CreateMutexExW
AcquireSRWLockExclusive
ReleaseSemaphore
AcquireSRWLockShared
OpenEventW
EnterCriticalSection
CreateSemaphoreExW
DeleteCriticalSection
WaitForMultipleObjectsEx
CreateMutexA
SetEvent
TryEnterCriticalSection
CreateEventW
ReleaseSRWLockExclusive
InitializeSRWLock
ReleaseMutex
InitializeCriticalSection
HeapValidate
HeapReAlloc
HeapCompact
HeapFree
HeapCreate
HeapWalk
HeapAlloc
HeapDestroy
HeapSize
GetProcessHeap
GetErrorMode
UnhandledExceptionFilter
SetLastError
GetLastError
SetUnhandledExceptionFilter
SetErrorMode
RaiseException
CoTaskMemAlloc
CoCreateGuid
CoGetMalloc
CoInitializeEx
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoSetProxyBlanket
StringFromGUID2
SetThreadPriority
GetCurrentProcess
GetThreadPriority
TlsSetValue
CreateProcessA
SetPriorityClass
GetExitCodeThread
GetPriorityClass
TlsAlloc
GetProcessId
TlsGetValue
ExitProcess
OpenThreadToken
OpenProcessToken
GetCurrentThreadId
TlsFree
CreateProcessW
TerminateProcess
GetCurrentThread
CreateThread
GetCurrentProcessId
GetExitCodeProcess
ExpandEnvironmentStringsW
GetCurrentDirectoryW
GetEnvironmentVariableW
GetCommandLineW
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertStringSidToSidW
EventWriteString
EventProviderEnabled
EventRegister
EventWriteTransfer
EventUnregister
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolTimer
SetThreadpoolTimer
CharNextW
GetSystemTime
GetWindowsDirectoryW
GlobalMemoryStatusEx
GetComputerNameExW
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetSystemInfo
GetTickCount64
GetVersion
GetSystemDirectoryW
GetVersionExW
GetTickCount
GetVersionExA
GetLocalTime
IsProcessorFeaturePresent
OpenProcess
GetVolumePathNamesForVolumeNameW
GetTempPathW
GetVolumeNameForVolumeMountPointW
InitOnceExecuteOnce
Sleep
ResolveLocaleName
FormatMessageW
GetLocaleInfoW
OutputDebugStringW
DebugBreak
OutputDebugStringA
IsDebuggerPresent
CloseHandle
DuplicateHandle
GlobalUnlock
LocalFree
GlobalLock
LocalAlloc
GlobalSize
CopyFileW
MoveFileW
GlobalMemoryStatus
WaitForMultipleObjects
CreateFileMappingA
QueryPerformanceCounter
InitializeSListHead
VirtualFree
CreateFileMappingW
MapViewOfFile
VirtualAlloc
VirtualQuery
VirtualProtect
UnmapViewOfFile
CertVerifyCertificateChainPolicy
CryptHashCertificate2
I_RpcMapWin32Status
UuidToStringW
RpcStringFreeW
UuidFromStringW
UuidCreate
SysAllocString
SysFreeString
VariantTimeToSystemTime
SystemTimeToVariantTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
CopyFileExW
GetFileInformationByHandleEx
MoveFileExW
GetFileVersionInfoExW
GetFileVersionInfoSizeExW
VerQueryValueW
GetOverlappedResult
DeviceIoControl
InitiateSystemShutdownExW
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
WinVerifyTrust
WTHelperGetProvCertFromChain
LoadLibraryW
RegDeleteKeyW
GlobalAlloc
GlobalFree
SetSecurityInfo
WerReportAddFile
WerReportSetUIOption
WerReportSubmit
WerReportCreate
WerReportCloseHandle
WerReportSetParameter
LCIDToLocaleName
GetPrivateProfileStringW
lstrcmpW
VerifyVersionInfoW
PathMatchSpecW
EnableTraceEx2
ControlTraceW
RtlCaptureStackBackTrace
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
CM_Get_Device_Interface_ListW
CM_Get_Device_Interface_List_SizeW
CM_Get_Device_Interface_PropertyW
RaiseFailFastException
CreateDeploymentSession
CreateDeploymentSessionEx
CreateOfflineDeploymentSession
UA_CommitActionList
UA_CreateActionList
UA_CreateDownloadList
UA_CreateDownloadListFromActionList
UA_CreatePackageListFromDownloadList
UA_InstallActionList
UA_ReleaseDownloadList
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
mskeyprotcli.pdb
memcpy_s
_CxxThrowException
memcmp
_purecall
_vsnwprintf
realloc
_errno
??1exception@@UEAA@XZ
??0exception@@QEAA@XZ
??0exception@@QEAA@AEBV0@@Z
_vsnprintf_s
strrchr
memmove_s
calloc
wcsspn
wcscspn
wcsstr
_wcsicmp
wcstol
_set_errno
_XcptFilter
isdigit
_callnewh
memset
?terminate@@YAXXZ
_onexit
__dllonexit
_unlock
_lock
__C_specific_handler
_initterm
??1type_info@@UEAA@XZ
memcpy
malloc
free
_amsg_exit
__CxxFrameHandler3
wcscmp
GetModuleFileNameW
GetModuleFileNameA
SizeofResource
GetModuleHandleExW
FindResourceExW
LoadLibraryExW
FreeLibrary
LockResource
GetModuleHandleW
LoadResource
GetProcAddress
LocalAlloc
LocalFree
CompareStringW
WideCharToMultiByte
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
WakeAllConditionVariable
Sleep
InitOnceBeginInitialize
InitOnceComplete
SleepConditionVariableSRW
BCryptCreateHash
BCryptGetProperty
BCryptOpenAlgorithmProvider
BCryptImportKey
BCryptExportKey
BCryptGenerateSymmetricKey
BCryptHashData
BCryptDestroyHash
BCryptFinishHash
BCryptDestroyKey
BCryptCloseAlgorithmProvider
HeapSize
HeapDestroy
GetProcessHeap
HeapFree
HeapReAlloc
HeapAlloc
OpenSemaphoreW
ReleaseMutex
WaitForSingleObjectEx
CreateEventW
CreateSemaphoreExW
ReleaseSemaphore
CreateMutexExW
CreateEventExW
AcquireSRWLockExclusive
WaitForMultipleObjectsEx
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
ReleaseSRWLockExclusive
RegEnumKeyExW
RegEnumValueW
RegCreateKeyExW
RegQueryValueExW
RegQueryInfoKeyW
RegDeleteTreeW
RegDeleteValueW
RegDeleteKeyExW
RegSetValueExW
RegOpenKeyExW
RegOpenCurrentUser
RegGetValueW
RegCloseKey
CoTaskMemFree
RaiseException
GetLastError
SetLastError
ord2
ord5
ord4
RtlFreeHeap
RtlAllocateHeap
RtlUnhandledExceptionFilter
NtTerminateProcess
RtlImageNtHeader
EtwGetTraceEnableFlags
LdrDisableThreadCalloutsForDll
EtwTraceMessage
EtwGetTraceLoggerHandle
EtwGetTraceEnableLevel
EtwRegisterTraceGuidsW
EtwUnregisterTraceGuids
EventWriteTransfer
EventRegister
EventSetInformation
EventUnregister
EventActivityIdControl
OpenProcessToken
GetProcessIdOfThread
OpenThreadToken
OpenThread
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
SetThreadStackGuarantee
FormatMessageW
GetUserDefaultLocaleName
GetThreadPreferredUILanguages
IsDebuggerPresent
DebugBreak
OutputDebugStringA
OutputDebugStringW
CloseHandle
RpcAsyncCompleteCall
RpcSsDestroyClientContext
MesBufferHandleReset
RpcAsyncCancelCall
MesDecodeBufferHandleCreate
UuidCreate
I_RpcBindingInqLocalClientPID
RpcAsyncInitializeHandle
NdrMesTypeAlignSize3
MesHandleFree
NdrMesTypeEncode3
RpcBindingFromStringBindingW
Ndr64AsyncClientCall
MesEncodeFixedBufferHandleCreate
RpcStringBindingComposeW
RpcBindingSetAuthInfoExW
RpcStringFreeW
RpcBindingFree
OpenSCManagerW
OpenServiceW
CloseServiceHandle
CreateWellKnownSid
IsValidSid
RevertToSelf
ImpersonateLoggedOnUser
GetSecurityDescriptorDacl
GetSecurityDescriptorSacl
GetTokenInformation
QueryServiceStatus
VirtualProtect
VirtualAlloc
VirtualQuery
GetVersionExW
GetSystemTimeAsFileTime
GetSystemInfo
GetComputerNameW
SystemTimeToFileTime
FileTimeToSystemTime
CryptProtectData
CryptUnprotectMemory
CryptUnprotectData
CryptProtectMemory
GetFileVersionInfoExW
VerQueryValueW
GetFileVersionInfoSizeExW
LookupAccountNameW
ConvertSidToStringSidW
GetProfileType
LsaDeregisterLogonProcess
LogonUserExExW
LsaRegisterLogonProcess
LsaCallAuthenticationPackage
LsaLookupAuthenticationPackage
LsaConnectUntrusted
ResolveDelayLoadedAPI
DelayLoadFailureHook
SetNamedSecurityInfoW
GetKeyProtectionInterface
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
softpub.pdb
__C_specific_handler
_initterm
malloc
free
_amsg_exit
_XcptFilter
Sleep
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount
AddPersonalTrustDBPages
DllRegisterServer
DllUnregisterServer
DriverCleanupPolicy
DriverFinalPolicy
DriverInitializePolicy
FindCertsByIssuer
GenericChainCertificateTrust
GenericChainFinalProv
HTTPSCertificateTrust
HTTPSFinalProv
OfficeCleanupPolicy
OfficeInitializePolicy
OpenPersonalTrustDBDialog
SoftpubAuthenticode
SoftpubCheckCert
SoftpubCleanup
SoftpubDefCertInit
SoftpubDumpStructure
SoftpubFreeDefUsageCallData
SoftpubInitialize
SoftpubLoadDefUsageCallData
SoftpubLoadMessage
SoftpubLoadSignature
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
umrdp.pdb
__dllonexit
_unlock
_lock
memcpy
_onexit
memmove
memset
_purecall
wcsstr
memcpy_s
__CxxFrameHandler3
_initterm
_amsg_exit
_XcptFilter
free
_callnewh
malloc
wcsrchr
wcschr
rand
srand
time
_wcsicmp
_vsnwprintf
__C_specific_handler
GetTickCount
GetSystemTimeAsFileTime
GetVersionExW
GetSystemWindowsDirectoryW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
SetLastError
DuplicateHandle
CloseHandle
SetEvent
ResetEvent
WaitForMultipleObjectsEx
CreateEventW
DeleteCriticalSection
WaitForSingleObject
InitializeCriticalSection
CancelWaitableTimer
LeaveCriticalSection
EnterCriticalSection
SetWaitableTimer
GetProcAddress
GetModuleHandleExA
FreeLibrary
LoadStringW
GetCurrentThread
GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
OpenThreadToken
TerminateProcess
CreateThread
ConvertStringSecurityDescriptorToSecurityDescriptorW
LocalAlloc
LocalFree
IsValidAcl
IsValidSid
GetSidIdentifierAuthority
FreeSid
AddAccessAllowedAceEx
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ImpersonateLoggedOnUser
GetTokenInformation
CreateWellKnownSid
CheckTokenMembership
RevertToSelf
GetSidSubAuthorityCount
GetSidSubAuthority
CopySid
EqualSid
OpenProcess
HeapReAlloc
HeapFree
HeapAlloc
VerSetConditionMask
DeviceIoControl
GetOverlappedResult
CreateFileW
DeleteFileW
ReadFile
QueryDosDeviceW
GetFileSize
WriteFile
CancelIo
CreateWaitableTimerW
RegOpenUserClassesRoot
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyExW
RegGetValueW
RegNotifyChangeKeyValue
RegCloseKey
RegQueryValueExW
RegOpenCurrentUser
RegDeleteValueW
RegOpenKeyExW
LoadLibraryW
MultiByteToWideChar
Sleep
GetTempPathW
FormatMessageW
RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind
QueryPerformanceCounter
EtwEventWriteFull
RtlMultiByteToUnicodeN
NtCreateFile
RtlOpenCurrentUser
RtlNtStatusToDosError
NtMakePermanentObject
NtMakeTemporaryObject
NtClose
NtQuerySymbolicLinkObject
NtOpenSymbolicLinkObject
NtCreateSymbolicLinkObject
RtlInitUnicodeString
NtQueryInformationProcess
EtwEventActivityIdControl
DbgPrint
RtlInitializeGenericTable
RtlEnumerateGenericTable
RtlInsertElementGenericTable
RtlDeleteElementGenericTable
RtlLookupElementGenericTable
RtlEnumerateGenericTableWithoutSplaying
EtwEventRegister
RtlGetSuiteMask
EtwEventUnregister
EtwUnregisterTraceGuids
EtwRegisterTraceGuidsW
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwTraceMessage
EtwEventWrite
TraceMessage
PeekMessageW
MsgWaitForMultipleObjectsEx
PostThreadMessageW
UnregisterClassW
DefWindowProcW
RegisterClassExW
PostMessageW
DestroyWindow
DispatchMessageW
CreateWindowExW
RegisterDeviceNotificationW
UnregisterDeviceNotification
GetClassInfoExW
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
InitializeCriticalSectionEx
CloseThreadpoolCleanupGroupMembers
CreateThreadpoolCleanupGroup
SetThreadpoolThreadMaximum
CreateThreadpool
CloseThreadpool
CloseThreadpoolCleanupGroup
CancelIoEx
WaitForMultipleObjects
GetThreadId
ProcessIdToSessionId
ReadFileEx
GetModuleHandleW
QueueUserAPC
WaitForSingleObjectEx
lstrcmpiW
DeleteTimerQueueTimer
CreateTimerQueueTimer
FreeLibraryAndExitThread
GetProcessHeap
GetModuleHandleExW
GetTickCount64
ReleaseSemaphore
VerifyVersionInfoW
UnregisterWait
SleepEx
TlsSetValue
TlsAlloc
GetSystemInfo
SwitchToThread
CreateSemaphoreW
TlsGetValue
TlsFree
OpenThread
ResumeThread
EventWriteTransfer
EventUnregister
EventActivityIdControl
EventRegister
CM_Get_DevNode_Status
ResolveDelayLoadedAPI
DelayLoadFailureHook
ServiceMain
SvchostPushServiceGlobals
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
aadtb.pdb
NgcDecryptWithSymmetricPopKey
NgcImportSymmetricPopKey
NgcSignWithSymmetricPopKey
NgcEnumContainers
ord51
ord50
DsrFreeJoinInfoEx
DsrGetJoinInfoEx
VariantClear
SysFreeString
SysAllocString
VariantInit
CryptSignAndEncodeCertificate
CryptExportPublicKeyInfo
CryptProtectData
CryptUnprotectData
CertGetCertificateContextProperty
CryptAcquireCertificatePrivateKey
CryptEncodeObject
CertSetCertificateContextProperty
CryptHashCertificate
CertFreeCertificateContext
CertCreateCertificateContext
CertDuplicateCertificateContext
CertDeleteCertificateFromStore
CertAddCertificateContextToStore
CertFindCertificateInStore
CertCloseStore
CertOpenStore
NCryptOpenStorageProvider
NCryptOpenKey
NCryptFinalizeKey
NCryptSetProperty
NCryptCreatePersistedKey
NCryptDeleteKey
NCryptFreeObject
NCryptSignHash
RtlAllocateHeap
RtlFreeHeap
RtlNtStatusToDosError
RtlGetDeviceFamilyInfoEnum
RtlImageNtHeader
DeleteObject
GetObjectW
WaitForSingleObject
ReleaseMutex
AcquireSRWLockExclusive
OpenSemaphoreW
CreateEventExW
ReleaseSemaphore
CreateSemaphoreExW
CreateMutexExW
LeaveCriticalSection
WaitForSingleObjectEx
SetEvent
ResetEvent
DeleteCriticalSection
EnterCriticalSection
AcquireSRWLockShared
ReleaseSRWLockShared
InitializeCriticalSectionEx
ReleaseSRWLockExclusive
EventSetInformation
EventWriteTransfer
EventRegister
EventActivityIdControl
EventUnregister
SetLastError
GetLastError
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetProcessHeap
HeapFree
HeapReAlloc
HeapSize
HeapAlloc
WindowsGetStringRawBuffer
HSTRING_UserMarshal64
WindowsStringHasEmbeddedNull
WindowsIsStringEmpty
WindowsGetStringLen
HSTRING_UserSize64
WindowsCompareStringOrdinal
HSTRING_UserUnmarshal
HSTRING_UserFree64
WindowsDuplicateString
WindowsDeleteString
HSTRING_UserMarshal
HSTRING_UserUnmarshal64
HSTRING_UserSize
WindowsCreateStringReference
WindowsConcatString
WindowsCreateString
HSTRING_UserFree
RoOriginateErrorW
RoOriginateError
CoMarshalInterThreadInterfaceInStream
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoGetObjectContext
CoCreateGuid
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoGetCallContext
CoGetInterfaceAndReleaseStream
CoGetApartmentType
CryptReleaseContext
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptDestroyHash
CryptGetProvParam
CryptAcquireContextW
GetCurrentProcess
GetCurrentProcessId
SetThreadStackGuarantee
CreateProcessW
TerminateProcess
GetCurrentThreadId
OpenProcessToken
GetSystemInfo
GetTickCount
GetSystemDirectoryW
GetSystemTimeAsFileTime
CloseHandle
OutputDebugStringW
IsDebuggerPresent
DebugBreak
RegisterTraceGuidsW
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
TraceMessage
UnregisterTraceGuids
EncodePointer
DecodePointer
WakeAllConditionVariable
SleepConditionVariableSRW
InitOnceExecuteOnce
Sleep
LocalAlloc
LocalFree
DuplicateTokenEx
CopySid
GetTokenInformation
GetLengthSid
ConvertSidToStringSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
CreateStreamOverRandomAccessStream
NdrOleFree
CStdStubBuffer_IsIIDSupported
IUnknown_Release_Proxy
NdrCStdStubBuffer2_Release
NdrStubCall3
IUnknown_QueryInterface_Proxy
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
CStdStubBuffer_AddRef
NdrDllGetClassObject
NdrDllCanUnloadNow
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_Invoke
IUnknown_AddRef_Proxy
NdrStubForwardingFunction
NdrProxyForwardingFunction3
CStdStubBuffer2_Disconnect
ObjectStublessClient7
CStdStubBuffer2_QueryInterface
NdrProxyForwardingFunction4
NdrProxyForwardingFunction5
ObjectStublessClient6
ObjectStublessClient8
ObjectStublessClient9
ObjectStublessClient10
CStdStubBuffer2_Connect
CStdStubBuffer2_CountRefs
WideCharToMultiByte
MultiByteToWideChar
FormatMessageW
RegEnumKeyExW
RegOpenKeyExW
RegCreateKeyExW
RegEnumValueW
RegDeleteTreeW
RegCloseKey
RegGetValueW
RegSetValueExW
GetModuleFileNameA
GetModuleHandleExW
GetProcAddress
GetModuleHandleW
SetThreadpoolTimer
CloseThreadpoolTimer
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks
LsaDeregisterLogonProcess
LsaConnectUntrusted
LsaFreeReturnBuffer
LsaCallAuthenticationPackage
LsaLookupAuthenticationPackage
RegDeleteKeyValueW
?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z
??0ClassNotRegisteredException@Platform@@QE$AAA@PE$AAVString@1@@Z
??0COMException@Platform@@QE$AAA@HPE$AAVString@1@@Z
?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ
?Allocate@Heap@Details@Platform@@SAPEAX_K@Z
??0Delegate@Platform@@QE$AAA@XZ
?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z
?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z
?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z
?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z
?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z
?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z
?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z
?CreateException@Exception@Platform@@SAPE$AAV12@H@Z
??0FailureException@Platform@@QE$AAA@XZ
??0OutOfMemoryException@Platform@@QE$AAA@XZ
?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z
??0Object@Platform@@QE$AAA@XZ
??0OutOfBoundsException@Platform@@QE$AAA@XZ
?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z
??0ChangedStateException@Platform@@QE$AAA@XZ
?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ
?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z
?Free@Heap@Details@Platform@@SAXPEAX@Z
?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z
?__abi_WinRTraiseNotImplementedException@@YAXXZ
?__abi_WinRTraiseInvalidCastException@@YAXXZ
?__abi_WinRTraiseNullReferenceException@@YAXXZ
?__abi_WinRTraiseOperationCanceledException@@YAXXZ
?__abi_WinRTraiseFailureException@@YAXXZ
?__abi_WinRTraiseAccessDeniedException@@YAXXZ
?__abi_WinRTraiseOutOfMemoryException@@YAXXZ
?__abi_WinRTraiseInvalidArgumentException@@YAXXZ
?__abi_WinRTraiseOutOfBoundsException@@YAXXZ
?__abi_WinRTraiseChangedStateException@@YAXXZ
?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ
?__abi_WinRTraiseWrongThreadException@@YAXXZ
?__abi_WinRTraiseDisconnectedException@@YAXXZ
?__abi_WinRTraiseObjectDisposedException@@YAXXZ
?__abi_WinRTraiseCOMException@@YAXJ@Z
?InitializeData@Details@Platform@@YAJH@Z
?UninitializeData@Details@Platform@@YAXH@Z
?__abi_FailFast@@YAXXZ
?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z
?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z
?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z
?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z
?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z
_vscwprintf
_purecall
__ExceptionPtrDestroy
__ExceptionPtrCopy
__ExceptionPtrCurrentException
__ExceptionPtrCreate
?terminate@@YAXXZ
wcsstr
??_V@YAXPEAX@Z
_wcsicmp
??1exception@@UEAA@XZ
??0exception@@QEAA@XZ
??0exception@@QEAA@AEBV0@@Z
__ExceptionPtrRethrow
wcsnlen
wcschr
??2@YAPEAX_KHPEBDH@Z
wcsrchr
?name@type_info@@QEBAPEBDXZ
__RTtypeid
malloc
swprintf_s
_wcslwr_s
wcspbrk
iswspace
__C_specific_handler
time
wcscspn
wcsspn
_wcsicoll
wcsncmp
_wcsnicmp
_wcsupr_s
difftime
_vsnwprintf
_vsnprintf_s
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBQEBD@Z
__ExceptionPtrCopyException
_wtol
_wtoi
??0exception@@QEAA@AEBQEBDH@Z
memcpy_s
wcslen
_CxxThrowException
_lock
_unlock
__dllonexit
_onexit
??1type_info@@UEAA@XZ
_XcptFilter
_amsg_exit
_initterm
realloc
__CxxFrameHandler3
??3@YAXPEAX@Z
_callnewh
memcpy
memmove
_vsnprintf
wcscat_s
wcsncpy_s
__RTDynamicCast
_gmtime64_s
wcsftime
memcmp
vswprintf_s
memmove_s
_wcsdup
memset
free
SHTaskPoolQueueTask
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
QueryPerformanceCounter
VirtualProtect
VirtualAlloc
VirtualQuery
ResolveDelayLoadedAPI
DelayLoadFailureHook
CapabilityCheck
AADTBAcquireToken
AADTBAcquireTokenEx
AADTBFreeString
AADTBFreeStruct
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
KERBEROS.pdb
_initterm_e
_initterm
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o__stricmp
_o__ultow
_o__wcsicmp
memmove
_o_free
_o_malloc
_o_qsort
_o_strcpy_s
_o_toupper
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcsncpy_s
_o_wcstok
_o_wcstok_s
_o_wcstol
_o_wcstoul
__C_specific_handler
_o__execute_onexit_table
_o__errno
_o__crt_atexit
_o__configure_narrow_argv
_o__cexit
_o__callnewh
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsscanf
_o___stdio_common_vsprintf_s
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
__std_terminate
__CxxFrameHandler4
memcmp
memcpy
_CxxThrowException
__CxxFrameHandler3
wcsrchr
wcschr
memset
strcmp
wcscmp
wcsncmp
GetModuleHandleW
GetProcAddress
GetModuleFileNameA
DisableThreadLibraryCalls
FreeLibrary
GetModuleHandleExW
GetModuleFileNameW
LoadLibraryExA
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentThreadId
TerminateProcess
GetCurrentProcessId
SetThreadStackGuarantee
SetThreadToken
GetCurrentProcess
FormatMessageW
GetACP
DebugBreak
OutputDebugStringA
OutputDebugStringW
IsDebuggerPresent
GetTraceEnableFlags
GetTraceLoggerHandle
GetTraceEnableLevel
TraceMessage
UnregisterTraceGuids
RegisterTraceGuidsW
RtlLookupFunctionEntry
RtlCompareMemory
RtlVirtualUnwind
RtlCaptureContext
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
RaiseException
SetLastError
OpenProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemInfo
GetVersionExW
GetTickCount
GetSystemTimeAsFileTime
GetWindowsDirectoryW
GetComputerNameExW
InitializeSListHead
LocalFree
LocalAlloc
GlobalFree
InitOnceExecuteOnce
Sleep
RegNotifyChangeKeyValue
RegEnumValueW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegQueryInfoKeyW
RevertToSelf
CheckTokenMembership
GetTokenInformation
FreeSid
AllocateAndInitializeSid
AdjustTokenPrivileges
IsTokenRestricted
EqualSid
ResetEvent
SetEvent
WaitForSingleObject
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
ReleaseSemaphore
OpenSemaphoreW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionEx
CreateMutexExW
ReleaseMutex
CreateSemaphoreExW
WaitForSingleObjectEx
OpenEventW
CreateEventW
InitializeCriticalSection
InitializeSRWLock
TryAcquireSRWLockExclusive
CloseHandle
ExpandEnvironmentStringsW
GetCurrentDirectoryW
GetEnvironmentVariableW
SetCurrentDirectoryW
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
SetThreadpoolTimer
QueryFullProcessImageNameW
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
FileTimeToLocalFileTime
FileTimeToSystemTime
EventWriteTransfer
EventSetInformation
EventProviderEnabled
EventRegister
EventUnregister
ASN1DEREncGeneralizedTime
ASN1_Encode
ASN1intxisuint32
ASN1_FreeDecoded
ASN1_FreeEncoded
ASN1intx2uint32
ASN1intx2int32
ASN1_CreateEncoder
ASN1_Decode
ASN1ztcharstring_free
ASN1bitstring_free
ASN1BERDecCharString
ASN1_CreateModule
ASN1BERDecU32Val
ASN1DEREncBitString
ASN1BERDecZeroCharString
ASN1BEREncObjectIdentifier
ASN1BERDecObjectIdentifier
ASN1BERDecBitString
ASN1charstring_free
ASN1DEREncOctetString
ASN1BERDecS32Val
ASN1BEREncOpenType
ASN1BEREncSX
ASN1DecAlloc
ASN1Free
ASN1BERDecSkip
ASN1BEREncBool
ASN1BEREncEndOfContents
ASN1DEREncCharString
ASN1BEREncS32
ASN1EncSetError
ASN1objectidentifier_free
ASN1BERDecBool
ASN1BERDecEndOfContents
ASN1BEREncExplicitTag
ASN1BERDecNotEndOfContents
ASN1BERDecOctetString
ASN1BEREncU32
ASN1BERDecPeekTag
ASN1BERDecGeneralizedTime
ASN1intx_setuint32
ASN1BERDecExplicitTag
ASN1DecSetError
ASN1octetstring_free
ASN1BERDecSXVal
ASN1BERDecOpenType2
ASN1_CloseDecoder
ASN1intx_free
ASN1_CreateDecoder
ASN1_CloseEncoder
DeleteTimerQueueTimer
QueueUserWorkItem
UnregisterWaitEx
ChangeTimerQueueTimer
CreateTimerQueueTimer
lstrlenA
lstrcmpiA
lstrlenW
lstrcmpW
RtlDeleteElementGenericTable
RtlInsertElementGenericTable
RtlGetElementGenericTable
RtlDeleteTimerQueueEx
RtlImageNtHeader
RtlLeaveCriticalSection
RtlLengthRequiredSid
RtlSubAuthorityCountSid
RtlTimeToTimeFields
RtlTimeFieldsToTime
RtlValidSid
RtlNtStatusToDosError
NtSetEvent
EtwUnregisterTraceGuids
RtlFreeHeap
RtlAllocateHeap
RtlEqualComputerName
EtwGetTraceLoggerHandle
EtwRegisterTraceGuidsW
RtlDuplicateUnicodeString
RtlEraseUnicodeString
RtlAnsiStringToUnicodeString
EtwLogTraceEvent
RtlRunDecodeUnicodeString
RtlCopyUnicodeString
RtlCopyLuid
NtOpenProcess
RtlAvlInsertNodeEx
RtlAvlRemoveNode
RtlAppendUnicodeStringToString
RtlInitUnicodeStringEx
RtlFreeAnsiString
RtlUnicodeStringToAnsiString
RtlInitAnsiString
RtlCompareUnicodeString
RtlInitializeGenericTable
RtlIntegerToUnicodeString
WinSqmSetDWORD
RtlValidateUnicodeString
RtlPrefixUnicodeString
NtSetInformationThread
RtlUpcaseUnicodeString
NtQuerySystemTime
RtlDowncaseUnicodeString
RtlSystemTimeToLocalTime
RtlEqualUnicodeString
RtlRegisterWait
RtlIpv6AddressToStringExW
RtlIpv4AddressToStringExW
RtlIpv6StringToAddressExW
RtlDeregisterWait
RtlIpv4StringToAddressExW
NtClose
NtWaitForSingleObject
NtOpenEvent
NtCreateEvent
RtlInitUnicodeString
NtAllocateLocallyUniqueId
WinSqmIncrementDWORD
EtwTraceMessage
RtlInitializeGenericTableAvl
RtlInitializeResource
RtlDeleteResource
RtlEnumerateGenericTableAvl
RtlEqualDomainName
RtlFreeUnicodeString
RtlDeleteElementGenericTableAvl
RtlConvertSharedToExclusive
RtlLookupElementGenericTableAvl
RtlAcquireResourceShared
RtlReleaseResource
RtlInsertElementGenericTableAvl
RtlAcquireResourceExclusive
RtlDeleteTimerQueue
RtlCreateTimer
RtlCreateTimerQueue
NtSetSecurityObject
RtlSetDaclSecurityDescriptor
RtlCreateSecurityDescriptor
RtlAddAccessAllowedAce
RtlCreateAcl
NtOpenProcessToken
RtlAllocateAndInitializeSid
NtOpenThreadToken
EtwEventWriteTransfer
EtwEventActivityIdControl
NtDuplicateToken
RtlCopySid
RtlEqualSid
RtlLengthSid
RtlSubAuthoritySid
RtlInitializeSid
NtQueryInformationToken
NtDuplicateObject
RtlFreeSid
RtlUniform
NtQuerySystemInformation
EtwEventUnregister
EtwEventRegister
RtlDeleteCriticalSection
RtlInitializeCriticalSection
RtlEnterCriticalSection
??Bios_base@std@@QEBA_NXZ
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
GetFileVersionInfoSizeExW
VerQueryValueW
GetFileVersionInfoExW
EnableTraceEx2
StartTraceW
ControlTraceW
VirtualQuery
VirtualAlloc
UnmapViewOfFile
VirtualProtect
CreateFileMappingW
OpenFileMappingW
MapViewOfFileEx
MoveFileExW
ApiSetQueryApiSetPresence
RegisterWaitForSingleObjectEx
DsUnBindW
DsFreeNameResultW
DsBindWithSpnExW
DsCrackNamesW
ceilf
DllMain
KerbCreateTokenFromTicketForKdc
KerbDomainChangeCallback
KerbIsInitialized
KerbKdcCallBack
KerbMakeKdcCall
Kerberos
SpInitialize
SpInstanceInit
SpLsaModeInitialize
SpUserModeInitialize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
MFCM120U.amd64.pdb
DecodePointer
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
IsDebuggerPresent
OutputDebugStringW
IsProcessorFeaturePresent
Sleep
EncodePointer
?terminate@@YAXXZ
??3@YAXPEAX@Z
??2@YAPEAX_K@Z
memset
__FrameUnwindFilter
_cexit
??_V@YAXPEAX@Z
free
__CxxFrameHandler3
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__crtCapturePreviousContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
_purecall
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
_onexit
__C_specific_handler
_lock
__dllonexit
_calloc_crt
_unlock
SetWindowPos
GetWindow
SendMessageW
GetClientRect
PostMessageW
CopyRect
ord13057
ord4207
ord2477
ord2485
ord11895
ord3461
ord7277
ord2170
ord473
ord2192
ord2294
ord13056
ord4290
ord7924
ord13721
ord13619
ord8388
ord12990
ord5140
ord7432
ord13625
ord8352
ord5250
ord12481
ord13355
ord7718
ord7721
ord3752
ord3159
ord3160
ord4987
ord5267
ord5455
ord8922
ord5243
ord5471
ord4990
ord5133
ord4970
ord5651
ord7346
ord7347
ord7337
ord5131
ord7804
ord9822
ord8781
ord6158
ord2302
ord13358
ord8349
ord3804
ord2272
ord3963
ord3166
ord6030
ord6618
ord2455
ord820
ord1338
ord7065
ord11776
ord7312
ord5976
ord11725
ord11679
ord3670
ord371
ord8798
ord3163
ord10080
ord3130
ord11309
ord8495
ord2180
ord2179
ord269
ord1498
ord1028
ord1636
ord1030
_CorDllMain
AfxmReleaseManagedReferences
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ppcsnap.pdb
free
memmove
_amsg_exit
_CxxThrowException
?what@exception@@UEBAPEBDXZ
??1exception@@UEAA@XZ
_XcptFilter
__CxxFrameHandler3
_lock
_unlock
__dllonexit
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBQEBD@Z
_onexit
??1type_info@@UEAA@XZ
memset
memcmp
??_V@YAXPEAX@Z
_callnewh
malloc
_purecall
__C_specific_handler
??3@YAXPEAX@Z
_vsnwprintf
wcschr
_wcsicmp
memcpy
_initterm
wcscmp
DisableThreadLibraryCalls
DeleteCriticalSection
InitializeCriticalSection
HeapDestroy
GetLastError
SetLastError
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
RaiseException
DeactivateActCtx
ActivateActCtx
LoadLibraryW
FindActCtxSectionStringW
CreateActCtxW
GetModuleFileNameW
GetModuleHandleExW
QueryActCtxW
OutputDebugStringA
VirtualFree
GetCurrentProcess
VirtualAlloc
LoadLibraryExA
EncodePointer
HeapAlloc
DecodePointer
GetProcAddress
GetProcessHeap
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
Sleep
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
CreateEventW
SetThreadpoolTimer
WaitForSingleObject
CloseHandle
InitializeCriticalSectionAndSpinCount
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
SetEvent
HeapFree
CoCreateInstance
CoTaskMemAlloc
GetHGlobalFromStream
StringFromIID
CoCreateGuid
CreateStreamOnHGlobal
CoUninitialize
CoTaskMemFree
CoInitialize
PeekMessageW
PostQuitMessage
IsWindow
RegisterClassExW
GetClassInfoExW
GetWindowTextLengthW
GetDlgItemTextW
LoadIconW
SetWindowTextW
SetWindowLongPtrW
EnableWindow
GetDlgItem
MessageBoxW
PostMessageW
CallWindowProcW
GetActiveWindow
CreateWindowExW
GetWindowLongPtrW
DefWindowProcW
DestroyWindow
LoadCursorW
SetFocus
DialogBoxParamW
GetLastActivePopup
wsprintfW
GetWindow
GetParent
GetGUIThreadInfo
EndDialog
RegisterClipboardFormatW
SendMessageW
VariantInit
SysAllocString
SysAllocStringLen
VariantClear
SysFreeString
ord219
ord174
ord209
ord211
ord208
ord210
ord256
STRAPI_LoadString
PUIAPI_CreateInstance
PUIAPI_ShowBrowseForPrinterDialog
STRAPI_TrimString
STRAPI_GUID2String
STRAPI_Format
RegDeleteKeyExW
RegQueryValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
TpReleaseAlpcCompletion
TpWaitForAlpcCompletion
TpReleaseIoCompletion
TpWaitForIoCompletion
TpReleaseTimer
TpWaitForTimer
TpReleaseWait
TpWaitForWait
TpReleaseWork
TpWaitForWork
TpAllocAlpcCompletion
TpStartAsyncIoOperation
TpAllocIoCompletion
TpSetTimer
TpReleasePool
TpCallbackMayRunLong
TpSetWait
TpAllocTimer
TpAllocWait
TpPostWork
TpAllocWork
RtlNtStatusToDosError
TpSimpleTryPost
ord3
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
scecli.pdb
_itow_s
wcstoul
memcpy_s
__CxxFrameHandler3
_findclose
_wfindnext64
memmove_s
_wtol
fclose
__C_specific_handler
malloc
_callnewh
_wfindfirst64
wcsncat_s
??0exception@@QEAA@AEBQEBD@Z
??0exception@@QEAA@AEBQEBDH@Z
_vsnprintf_s
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBV0@@Z
wcsncpy_s
wcscat_s
??0exception@@QEAA@XZ
??1exception@@UEAA@XZ
_wfopen
_vsnwprintf
??3@YAXPEAX@Z
_CxxThrowException
_resetstkoflw
memcpy
memmove
_purecall
_XcptFilter
_amsg_exit
free
_initterm
??1type_info@@UEAA@XZ
wcsncmp
_wcsnicmp
wcsstr
wcschr
swprintf_s
_vsnwprintf_s
wcscpy_s
_wcsupr
_lock
_wcsicmp
towlower
memcmp
_onexit
__dllonexit
_unlock
memset
NdrClientCall3
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcBindingFree
NdrServerCall2
RpcBindingToStringBindingW
RpcBindingSetAuthInfoW
RpcStringFreeW
RpcStringBindingParseW
NdrServerCallAll
I_RpcExceptionFilter
GetDriveTypeW
GetFileSize
FindFirstFileW
GetFileAttributesW
GetTempFileNameW
FindClose
DeleteFileW
CreateFileW
SetFilePointer
WriteFile
GetFullPathNameW
CreateDirectoryW
ReadFile
GetVolumeInformationW
SetFileAttributesW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegGetValueW
RegCreateKeyExW
RegDeleteKeyExW
RegOpenCurrentUser
RegCloseKey
GetLastError
SetErrorMode
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetLastError
RaiseException
GetCurrentProcess
TerminateProcess
GetCurrentThread
GetCurrentThreadId
ExitThread
CreateThread
GetCurrentProcessId
SetThreadStackGuarantee
OpenThreadToken
OpenProcessToken
GetEnvironmentStringsW
ExpandEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentVariableW
ImpersonateSelf
FreeSid
ImpersonateLoggedOnUser
EqualSid
AllocateAndInitializeSid
GetSecurityDescriptorDacl
RevertToSelf
DuplicateToken
GetSidSubAuthority
CheckTokenMembership
LocalFree
LocalAlloc
GetComputerNameExW
GetTickCount
GetSystemTimeAsFileTime
GetSystemDirectoryW
GetSystemWindowsDirectoryW
GetSystemInfo
GetStringTypeExW
CompareStringOrdinal
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
GetTraceEnableFlags
GetTraceEnableLevel
UnregisterTraceGuids
RegisterTraceGuidsW
TraceMessage
GetTraceLoggerHandle
FileTimeToSystemTime
LockResource
GetModuleFileNameA
FreeLibrary
LoadLibraryExW
GetModuleHandleExW
GetModuleHandleW
LoadStringW
FreeLibraryAndExitThread
GetProcAddress
LoadResource
CloseHandle
FindResourceW
GetDateFormatW
GetTimeFormatW
HeapFree
HeapAlloc
GetProcessHeap
HeapReAlloc
GetThreadLocale
FormatMessageW
LCMapStringW
CreateSemaphoreExW
EnterCriticalSection
CreateMutexW
SleepEx
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
WaitForSingleObject
AcquireSRWLockShared
WaitForMultipleObjectsEx
OpenEventW
ReleaseMutex
CreateEventW
ReleaseSemaphore
ReleaseSRWLockExclusive
SetEvent
CreateMutexExW
AcquireSRWLockExclusive
WaitForSingleObjectEx
OpenSemaphoreW
ReleaseSRWLockShared
InitializeCriticalSection
VirtualQuery
VirtualAlloc
CreateFileMappingW
MapViewOfFile
VirtualProtect
UnmapViewOfFile
EventUnregister
EventSetInformation
EventRegister
EventWriteTransfer
QueryPerformanceFrequency
QueryPerformanceCounter
GetSystemTimePreciseAsFileTime
Sleep
CopyFileW
CloseThreadpoolTimer
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
OutputDebugStringW
DebugBreak
IsDebuggerPresent
ControlTraceW
EnableTraceEx2
StartTraceW
GetTempPathW
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
QueueUserWorkItem
lstrlenW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileSectionW
GetPrivateProfileIntW
GetSystemDefaultUILanguage
WritePrivateProfileSectionW
RtlGetDaclSecurityDescriptor
RtlValidSid
RtlConvertSidToUnicodeString
RtlFreeUnicodeString
RtlInitUnicodeString
NtQueryWnfStateData
RtlGetNtProductType
RtlLengthRequiredSid
RtlEqualSid
RtlNtStatusToDosError
RtlIsTextUnicode
RtlRandomEx
RtlTimeToSecondsSince1980
DbgPrint
RtlLengthSecurityDescriptor
RtlMakeSelfRelativeSD
NtQueryObject
RtlAllocateHeap
RtlImageNtHeader
RtlFreeHeap
RtlGetGroupSecurityDescriptor
RtlFreeSid
RtlLengthSid
RtlSystemTimeToLocalTime
NtQueryInformationToken
RtlSubAuthorityCountSid
RtlAllocateAndInitializeSid
RtlGetOwnerSecurityDescriptor
RtlGetAce
RtlGetSaclSecurityDescriptor
RtlTimeToTimeFields
RtlIdentifierAuthoritySid
RtlSubAuthoritySid
RtlMapGenericMask
RtlGetControlSecurityDescriptor
NtQuerySystemTime
NtAdjustPrivilegesToken
RtlCopySid
ResolveDelayLoadedAPI
DelayLoadFailureHook
ApiSetQueryApiSetPresence
ConvertSecurityDescriptorToText
DeltaNotify
DllRegisterServer
DllUnregisterServer
InitializeChangeNotify
SceAddToNameList
SceAddToNameStatusList
SceAddToObjectList
SceAnalyzeSystem
SceAppendSecurityProfileInfo
SceBrowseDatabaseTable
SceCloseProfile
SceCommitTransaction
SceCompareNameList
SceCompareSecurityDescriptors
SceConfigureConvertedFileSecurity
SceConfigureSystem
SceCopyBaseProfile
SceCreateDirectory
SceDcPromoCreateGPOsInSysvol
SceDcPromoCreateGPOsInSysvolEx
SceDcPromoteSecurity
SceDcPromoteSecurityEx
SceEnforceSecurityPolicyPropagation
SceEnumerateServices
SceFreeMemory
SceFreeProfileMemory
SceGenerateGroupPolicy
SceGenerateRollback
SceGetAnalysisAreaSummary
SceGetAreas
SceGetDatabaseSetting
SceGetDbTime
SceGetObjectChildren
SceGetObjectSecurity
SceGetScpProfileDescription
SceGetSecurityProfileInfo
SceGetServerProductType
SceGetTimeStamp
SceIsSystemDatabase
SceLookupPrivRightName
SceNotifyPolicyDelta
SceOpenPolicy
SceOpenProfile
SceProcessSecurityPolicyGPO
SceProcessSecurityPolicyGPOEx
SceRegisterRegValues
SceRollbackTransaction
SceSetDatabaseSetting
SceSetupBackupSecurity
SceSetupConfigureServices
SceSetupGenerateTemplate
SceSetupMoveSecurityFile
SceSetupRootSecurity
SceSetupSystemByInfName
SceSetupUnwindSecurityFile
SceSetupUpdateSecurityFile
SceSetupUpdateSecurityKey
SceSetupUpdateSecurityService
SceStartTransaction
SceSvcConvertSDToText
SceSvcConvertTextToSD
SceSvcFree
SceSvcGetInformationTemplate
SceSvcQueryInfo
SceSvcSetInfo
SceSvcSetInformationTemplate
SceSvcUpdateInfo
SceSysPrep
SceSysPrepOffline
SceUpdateObjectInfo
SceUpdateSecurityProfile
SceWrapperExportSecurityProfile
SceWrapperImportSecurityProfile
SceWriteSecurityProfileInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
taskcomp.pdb
?terminate@@YAXXZ
__C_specific_handler
wcsncpy_s
??1type_info@@UEAA@XZ
_lock
_initterm
_amsg_exit
_XcptFilter
memmove
memcpy
_CxxThrowException
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
wcsspn
wcspbrk
_itow_s
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBQEBD@Z
_callnewh
malloc
_unlock
__dllonexit
_onexit
wcstoul
_wtol
memset
memcmp
?what@exception@@UEBAPEBDXZ
_wcstoui64
wcsncmp
_wcsnicmp
wcsrchr
__CxxFrameHandler3
wcschr
_purecall
_wcsupr
fopen_s
fputws
iswdigit
iswspace
free
rand
_wcsicmp
fclose
fflush
_vsnwprintf
wcsstr
_wtoi
wcscmp
InitializeCriticalSectionAndSpinCount
CreateWaitableTimerExW
EnterCriticalSection
CreateEventW
CancelWaitableTimer
WaitForSingleObject
ReleaseMutex
CreateSemaphoreExW
SetWaitableTimer
CreateMutexW
InitializeCriticalSectionEx
WaitForMultipleObjectsEx
LeaveCriticalSection
ReleaseSemaphore
DeleteCriticalSection
SetEvent
InitializeCriticalSection
SysAllocStringLen
VariantClear
SysStringLen
SysFreeString
SysStringByteLen
SysAllocString
SysAllocStringByteLen
OpenThreadToken
GetCurrentProcessId
GetCurrentProcess
SetThreadToken
TerminateProcess
CreateThread
GetCurrentThreadId
OpenProcessToken
GetCurrentThread
CopySid
GetSidSubAuthority
GetSecurityDescriptorDacl
GetSidSubAuthorityCount
IsValidSid
GetSecurityDescriptorGroup
GetSecurityDescriptorSacl
FreeSid
DuplicateToken
GetLengthSid
ImpersonateSelf
RevertToSelf
AdjustTokenPrivileges
IsTokenRestricted
AccessCheck
GetSecurityDescriptorControl
AllocateAndInitializeSid
IsWellKnownSid
GetFileSecurityW
GetSecurityDescriptorOwner
EqualSid
CreateWellKnownSid
GetTokenInformation
CheckTokenMembership
GetSidIdentifierAuthority
NtClose
EtwEventRegister
NtAccessCheck
NtOpenThreadToken
EtwEventUnregister
EtwEventEnabled
RtlInitString
RtlInitUnicodeString
NtOpenProcessToken
EtwEventWrite
EtwUnregisterTraceGuids
EtwGetTraceEnableFlags
EtwGetTraceLoggerHandle
EtwGetTraceEnableLevel
EtwRegisterTraceGuidsW
NtQueryDirectoryFile
RtlSubAuthoritySid
RtlLengthRequiredSid
RtlInitializeSid
RtlSubAuthorityCountSid
RtlCopySid
RtlLengthSid
RtlCreateAcl
RtlAddAce
RtlCreateSecurityDescriptor
RtlSetOwnerSecurityDescriptor
RtlSetGroupSecurityDescriptor
RtlSetDaclSecurityDescriptor
RtlSetSaclSecurityDescriptor
RtlNewSecurityObject
RtlDeleteSecurityObject
RtlNtStatusToDosError
EtwTraceMessage
NtQueryInformationToken
Sleep
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
NdrServerCall2
RpcImpersonateClient
RpcRevertToSelf
RpcServerInqBindings
RpcEpRegisterW
RpcEpUnregister
RpcServerRegisterAuthInfoW
RpcBindingSetAuthInfoExW
RpcStringFreeW
RpcBindingFree
RpcServerRegisterIfEx
RpcServerUnregisterIf
RpcServerUseProtseqW
RpcServerUseProtseqEpW
RpcBindingVectorFree
NdrServerCallAll
NdrClientCall3
I_RpcExceptionFilter
RpcStringBindingComposeW
UuidCreate
RpcBindingFromStringBindingW
CloseHandle
LocalReAlloc
LocalAlloc
LocalFree
RegQueryValueExW
RegGetValueW
RegDeleteTreeW
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyExW
GetFinalPathNameByHandleW
FindClose
GetFileType
GetFileSize
GetFileAttributesExW
SetEndOfFile
ReadFile
GetFileInformationByHandle
GetDriveTypeW
FindNextFileW
SetFileAttributesW
FindFirstFileW
WriteFile
LocalFileTimeToFileTime
GetFullPathNameW
DeleteFileW
FileTimeToLocalFileTime
CreateFileW
CompareFileTime
GetFileAttributesW
GetVolumeInformationW
GetVolumePathNameW
CreateDirectoryW
SetFilePointer
TzSpecificLocalTimeToSystemTime
FileTimeToSystemTime
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
GetSystemTimeAsFileTime
GetVersionExW
GetComputerNameExW
GetSystemTime
GetLocalTime
GetTickCount
CancelIo
DeviceIoControl
ReadDirectoryChangesW
VerQueryValueW
GetFileVersionInfoSizeExW
GetFileVersionInfoExW
OutputDebugStringW
LoadLibraryExW
FreeLibrary
GetModuleHandleW
LoadStringW
DisableThreadLibraryCalls
GetModuleHandleExW
CryptDestroyKey
CryptReleaseContext
CryptHashData
CryptAcquireContextW
CryptCreateHash
CryptDestroyHash
CryptGenKey
CryptGetHashParam
CryptSignHashW
GetComputerNameW
lstrcmpiW
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceCounter
HeapFree
HeapReAlloc
HeapSize
HeapAlloc
HeapDestroy
GetProcessHeap
CredDeleteW
CredFree
CredWriteW
CredEnumerateW
EventWriteTransfer
SearchPathW
ExpandEnvironmentStringsW
GetEnvironmentVariableW
WideCharToMultiByte
GetLocaleInfoW
FormatMessageW
GetDateFormatW
GetTimeFormatW
ResolveDelayLoadedAPI
DelayLoadFailureHook
DeleteTaskNotification
InitializeAdapter
IsRegistering
RegisterTaskNotification
SetSdNotification
ShutdownAdapter
UpdateJobStatus
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
htui.pdb
_vsnwprintf
_XcptFilter
_amsg_exit
free
malloc
_initterm
strncmp
memmove
memcpy
memcmp
__C_specific_handler
wcstol
memset
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
ReadFile
WriteProfileStringW
lstrlenW
WriteFile
SetFilePointer
CreateFileW
GlobalAlloc
GlobalFree
CloseHandle
GlobalLock
GetProfileStringW
GlobalUnlock
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
GetLocaleInfoW
MultiByteToWideChar
LocalAlloc
LocalFree
BitBlt
CreateCompatibleBitmap
SaveDC
SelectObject
CreateCompatibleDC
RealizePalette
StretchDIBits
GetStockObject
GetDIBits
DeleteDC
CreateHalftonePalette
SelectPalette
SetColorAdjustment
GetObjectW
ExcludeClipRect
SetStretchBltMode
RestoreDC
DeleteObject
GetOpenFileNameW
GetSaveFileNameW
DefWindowProcW
CallWindowProcW
PostMessageW
GetWindow
GetWindowRect
DestroyWindow
GetWindowLongW
IsWindowVisible
SetWindowPos
SetActiveWindow
EnumChildWindows
SetWindowLongPtrW
FillRect
CreateWindowExW
GetDC
ScreenToClient
SendMessageW
EndDialog
DialogBoxParamW
GetActiveWindow
LoadStringW
GetWindowTextW
EnableWindow
EndPaint
BeginPaint
ReleaseDC
InvalidateRect
GetParent
SetScrollPos
CheckDlgButton
GetDlgItem
GetClientRect
SetWindowLongW
SetScrollRange
SetCursor
EndDeferWindowPos
GetWindowDC
LoadCursorW
SetWindowContextHelpId
SetFocus
WinHelpW
IsDlgButtonChecked
IsWindowEnabled
SendDlgItemMessageW
RegisterClassW
SetDlgItemTextW
ClientToScreen
GetDlgCtrlID
BeginDeferWindowPos
ShowWindow
GetWindowLongPtrW
ChildWindowFromPointEx
SetClassLongPtrW
SetWindowTextW
GetSystemMetrics
DeferWindowPos
DllMain
HTUI_ColorAdjustment
HTUI_ColorAdjustmentA
HTUI_ColorAdjustmentW
HTUI_DeviceColorAdjustment
HTUI_DeviceColorAdjustmentA
HTUI_DeviceColorAdjustmentW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
MFPS.pdb
_purecall
_callnewh
_amsg_exit
strnlen
_initterm
__C_specific_handler
strncpy_s
malloc
_lock
qsort
free
_XcptFilter
_unlock
__dllonexit
_onexit
memcpy
memcmp
memset
CStdStubBuffer_Invoke
CStdStubBuffer_Connect
CStdStubBuffer_IsIIDSupported
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
CStdStubBuffer_QueryInterface
CStdStubBuffer_CountRefs
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
NdrStubCall3
NdrOleFree
CStdStubBuffer_DebugServerQueryInterface
IUnknown_AddRef_Proxy
NdrClientCall3
NdrStubForwardingFunction
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrCStdStubBuffer2_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
GetModuleHandleExW
FreeLibrary
DisableThreadLibraryCalls
CStdStubBuffer2_Disconnect
ObjectStublessClient13
CStdStubBuffer2_QueryInterface
NdrProxyForwardingFunction4
ObjectStublessClient12
NdrProxyForwardingFunction5
ObjectStublessClient10
NdrProxyForwardingFunction9
ObjectStublessClient3
ObjectStublessClient15
ObjectStublessClient7
ObjectStublessClient5
NdrProxyForwardingFunction3
CStdStubBuffer2_Connect
NdrProxyForwardingFunction24
ObjectStublessClient6
ObjectStublessClient8
ObjectStublessClient9
ObjectStublessClient22
ObjectStublessClient17
ObjectStublessClient20
ObjectStublessClient23
ObjectStublessClient19
ObjectStublessClient16
NdrProxyForwardingFunction25
ObjectStublessClient21
NdrProxyForwardingFunction7
NdrProxyForwardingFunction8
NdrProxyForwardingFunction6
ObjectStublessClient4
ObjectStublessClient18
ObjectStublessClient14
ObjectStublessClient11
CStdStubBuffer2_CountRefs
GlobalUnlock
GlobalLock
HSTRING_UserSize64
HSTRING_UserFree
HSTRING_UserSize
HSTRING_UserMarshal64
HSTRING_UserFree64
HSTRING_UserMarshal
HSTRING_UserUnmarshal
HSTRING_UserUnmarshal64
UnhandledExceptionFilter
GetLastError
SetLastError
SetUnhandledExceptionFilter
CloseHandle
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
GetCurrentProcessId
TlsGetValue
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
EventWriteTransfer
IsDebuggerPresent
DebugBreak
Sleep
RtlVirtualUnwind
RtlCaptureContext
RtlLookupFunctionEntry
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
ResolveDelayLoadedAPI
DelayLoadFailureHook
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
MSVPROC.pdb
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
memset
memmove_s
strnlen
_initterm
_initterm_e
_o__errno
_o__execute_onexit_table
_o__gcvt_s
_o__i64toa_s
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__ltoa_s
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o___std_exception_destroy
memmove
_o__ultoa_s
_o_acos
_o_atan2
_o_atoi
_o_ceil
_o_cos
_o_free
_o_log
_o_malloc
_o_pow
_o_qsort
_o_realloc
_o_sin
_o_sqrt
_o_strncpy_s
_o_wcstombs_s
__CxxFrameHandler4
__std_terminate
__C_specific_handler
__CxxFrameHandler3
_o___std_exception_copy
_o__crt_atexit
_o__configure_narrow_argv
_o__aligned_malloc
_o__aligned_free
_o___stdio_common_vswscanf
_o__cexit
_o___stdio_common_vswprintf
_CxxThrowException
_o___stdio_common_vsprintf
_o___stdio_common_vsnprintf_s
_o__callnewh
memcmp
memcpy
_o___std_type_info_destroy_list
InitOnceExecuteOnce
WindowsDeleteString
WindowsStringHasEmbeddedNull
WindowsDuplicateString
WindowsCompareStringOrdinal
WindowsCreateStringReference
WindowsConcatString
WindowsCreateString
WindowsGetStringRawBuffer
WindowsIsStringEmpty
OpenSemaphoreW
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObjectEx
InitializeCriticalSection
ReleaseSRWLockExclusive
InitializeCriticalSectionAndSpinCount
AcquireSRWLockExclusive
ResetEvent
InitializeCriticalSectionEx
WaitForMultipleObjectsEx
SetEvent
CreateEventW
ReleaseSRWLockShared
AcquireSRWLockShared
DeleteCriticalSection
CreateSemaphoreExW
CreateMutexExW
ReleaseSemaphore
WaitForSingleObject
ReleaseMutex
InitializeSRWLock
EventWriteTransfer
EventSetInformation
EventRegister
EventUnregister
EncodePointer
DecodePointer
TraceMessage
UnregisterTraceGuids
GetTraceLoggerHandle
GetTraceEnableFlags
RegisterTraceGuidsW
GetTraceEnableLevel
FreeLibrary
GetModuleFileNameA
GetModuleHandleExW
GetModuleHandleW
DisableThreadLibraryCalls
GetProcAddress
CloseHandle
RaiseException
SetUnhandledExceptionFilter
SetLastError
GetLastError
UnhandledExceptionFilter
GetProcessHeap
HeapAlloc
HeapFree
FormatMessageW
TlsGetValue
TlsSetValue
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
IsDebuggerPresent
DebugBreak
OutputDebugStringW
CreateThreadpoolTimer
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
SubscribeFeatureStateChangeNotification
UnsubscribeFeatureStateChangeNotification
GetFeatureEnabledState
RecordFeatureUsage
RoGetActivationFactory
RoActivateInstance
RegNotifyChangeKeyValue
RegOpenKeyExW
RegQueryValueExW
RegGetValueW
RegCloseKey
GetSystemTimeAsFileTime
GetSystemInfo
PowerSettingUnregisterNotification
PowerSettingRegisterNotification
IsProcessorFeaturePresent
QueryPerformanceCounter
WideCharToMultiByte
GetSystemPowerStatus
ResolveDelayLoadedAPI
DelayLoadFailureHook
RtlVirtualUnwind
RtlCaptureContext
RtlLookupFunctionEntry
InitializeSListHead
ApiSetQueryApiSetPresence
RtwqCancelWorkItem
RtwqPutWaitingWorkItem
RtwqCreateAsyncResult
sqrtf
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
uireng.pdb
wcsrchr
wcschr
memcpy
memmove
_wcsnicmp
_CxxThrowException
_wtoi
wcstol
_wcsupr
wcsstr
wcstoul
_wcstoui64
_itow_s
wcscpy_s
__CxxFrameHandler3
memset
??1type_info@@UEAA@XZ
_onexit
__dllonexit
_unlock
_lock
?terminate@@YAXXZ
__C_specific_handler
_initterm
_amsg_exit
_XcptFilter
_callnewh
malloc
free
_purecall
_vsnprintf
_wcsicmp
_vsnprintf_s
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@XZ
??1exception@@UEAA@XZ
memcpy_s
_vsnwprintf
_snwscanf_s
_vscwprintf
wcscmp
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
EventRegister
EventUnregister
StartTraceW
UnregisterTraceGuids
RegOpenKeyW
RegisterTraceGuidsW
GetTraceEnableFlags
EnableTrace
FlushTraceW
EnableTraceEx
ControlTraceW
EventWriteString
OpenTraceW
ProcessTrace
CloseTrace
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetTraceEnableLevel
GetTraceLoggerHandle
TraceMessage
CreateSolidBrush
StretchBlt
CreateCompatibleDC
CreateDCW
ExcludeClipRect
DeleteObject
CreatePen
SelectObject
GetStockObject
Rectangle
ExtCreatePen
MoveToEx
LineTo
PolyBezier
SetDCBrushColor
Ellipse
DeleteDC
GetCurrentObject
CreateCompatibleBitmap
BitBlt
GetObjectW
GdipAlloc
GdipFree
GdipDisposeImage
GdipSaveImageToFile
GdipCreateBitmapFromHBITMAP
GdipGetImageEncoders
GdipGetImageEncodersSize
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GetModuleFileNameA
CreateSemaphoreExW
HeapFree
SetLastError
ReleaseSemaphore
GetModuleHandleExW
WaitForSingleObject
GetCurrentThreadId
ReleaseMutex
FormatMessageW
GetLastError
OutputDebugStringW
WaitForSingleObjectEx
OpenSemaphoreW
CloseHandle
HeapAlloc
GetProcAddress
CreateMutexExW
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
DebugBreak
IsDebuggerPresent
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetTickCount
ExitProcess
OpenProcess
K32GetModuleFileNameExW
LocalFree
GetSystemTimeAsFileTime
ReadProcessMemory
GetTimeFormatW
GetFileAttributesW
RemoveDirectoryW
ExpandEnvironmentStringsW
CreateDirectoryW
WaitForMultipleObjects
CreateThread
Sleep
UnregisterWait
RegisterWaitForSingleObject
FindFirstFileW
CreateFileW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
ReadFile
FreeLibrary
GetWindowsDirectoryW
LoadLibraryW
ResumeThread
GetSystemDirectoryW
FindNextFileW
GetDriveTypeW
GetLongPathNameW
SizeofResource
WriteFile
UnmapViewOfFile
MultiByteToWideChar
LockResource
DeleteFileW
LoadResource
FindResourceW
GetFileSize
WideCharToMultiByte
CreateFileMappingW
SearchPathW
DuplicateHandle
ResetEvent
GetThreadPriority
GetCurrentThread
MapViewOfFile
SetEvent
CreateEventW
InitializeConditionVariable
SetThreadPriority
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
HeapReAlloc
DeleteCriticalSection
LoadLibraryExW
FindClose
GetVersionExW
GetProductInfo
FileTimeToSystemTime
MoveFileExW
GetDateFormatW
SystemTimeToTzSpecificLocalTime
QueryFullProcessImageNameW
DRMIsWindowProtected
RtlFreeUnicodeString
RtlDosPathNameToNtPathName_U_WithStatus
RtlGetFullPathName_UEx
RtlInitUnicodeString
NtApphelpCacheControl
NtQueryValueKey
NtClose
RtlFreeHeap
RtlAllocateHeap
RtlInitUnicodeStringEx
NtQueryInformationProcess
ZwClose
ZwOpenKey
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlFormatCurrentUserKeyPath
ZwCreateFile
CoCreateInstance
StringFromGUID2
CoInitializeEx
CoInitialize
CoUninitialize
CoCreateGuid
CLSIDFromString
GetRoleTextW
SysFreeString
VariantClear
VariantInit
SysAllocString
SysStringLen
CommandLineToArgvW
ShellExecuteW
SHFileOperationW
PathRemoveBlanksW
PathRemoveExtensionW
SHCreateStreamOnFileEx
PathFindFileNameW
PathCombineW
CallNextHookEx
SetWindowsHookExW
GetClientRect
SetLayeredWindowAttributes
MsgWaitForMultipleObjectsEx
PeekMessageW
SetTimer
ShowWindow
RegisterWindowMessageW
PostThreadMessageW
DispatchMessageW
TranslateMessage
GetMessageW
WindowFromPoint
GetWindowThreadProcessId
GetGUIThreadInfo
GetCursorInfo
ReleaseDC
UnhookWindowsHookEx
GetDC
GetDesktopWindow
DrawIcon
GetIconInfo
LoadCursorW
GetWindowRect
GetClassNameW
InternalGetWindowText
GetParent
GetWindowLongPtrW
GetKeyState
GetKeyNameTextW
MapVirtualKeyW
GetWindowInfo
PtInRect
GetAsyncKeyState
LoadImageW
GetSystemMetrics
GetDoubleClickTime
IsHungAppWindow
GetRawInputDeviceInfoW
GetPointerDevices
DestroyWindow
RegisterRawInputDevices
RegisterClassExW
CreateWindowExW
UnregisterClassW
FillRect
SetWindowLongPtrW
CopyImage
SetWindowPos
GetWindowTextW
EnableWindow
ReleaseCapture
SystemParametersInfoW
GetDlgItem
SwitchDesktop
SetCapture
GetProcessDefaultLayout
FindWindowW
LoadIconW
IsRectEmpty
CreateDesktopW
ClientToScreen
IsDialogMessageW
CloseDesktop
GetThreadDesktop
SetThreadDesktop
SendMessageW
SetProcessDefaultLayout
CreateDialogParamW
GetWindowTextLengthW
GetCursorPos
InvalidateRect
UpdateWindow
FindWindowExW
WindowFromPhysicalPoint
DefWindowProcW
GetRawInputData
EndPaint
SetWinEventHook
GetWindowLongW
ShowWindowAsync
UnhookWinEvent
PhysicalToLogicalPointForPerMonitorDPI
EnumWindows
BeginPaint
PicFreeFileInfo
PicRetrieveFileInfo
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
CreateXmlWriter
HidP_GetLinkCollectionNodes
HidP_GetValueCaps
HidP_GetUsageValue
HidP_GetUsages
HidP_GetCaps
AlphaBlend
RpcServerListen
RpcServerRegisterIf2
NdrServerCall2
RpcServerUseProtseqEpW
NdrServerCallAll
UirGetScreenComment
UirInitializeEngine
UirIsRecordingActive
UirOutCreateOutputFile
UirPauseRecordingSession
UirResumeRecordingSession
UirStartRecordingSession
UirStopRecordingSession
UirUninitializeEngine
UirUpdateRecordingSession
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ