Extended Key Usages
ExtKeyUsageTimeStamping
Static task
static1
Behavioral task
behavioral1
Sample
4e692aa0c2b858917235b4cc2befe649c1fc3df90d6c42d0f329cde57156d752.dll
Resource
win10v2004-20240802-en
Target
4e692aa0c2b858917235b4cc2befe649c1fc3df90d6c42d0f329cde57156d752.dll
Size
241KB
MD5
6b64382e0d7fe3d455c8065625d91ca3
SHA1
6111ec178472470244c7027aa46591a94c897b88
SHA256
4e692aa0c2b858917235b4cc2befe649c1fc3df90d6c42d0f329cde57156d752
SHA512
2d98c6c16f7d3648498df2098d09190f5fb17fc853f807a06d33ba72f499494fe66315da7d9c854dd44030b121a9d0e4966ab4b620ea0034c20307b28a1f1c64
SSDEEP
6144:vvV/g0FYbSAOSVbzzFUBSkaJPawk60HPs:HV/vP62ADcdHPs
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
iisutil2.pdb
_onexit
__dllonexit
_unlock
_lock
_initterm
_amsg_exit
_XcptFilter
_callnewh
malloc
free
_wcsnicmp
_vsnprintf
atof
isdigit
strtok
isalnum
isalpha
atoi
tolower
toupper
??1type_info@@UAE@XZ
wcsstr
_except_handler4_common
_aligned_malloc
_aligned_free
_snprintf_s
swprintf_s
_vsnprintf_s
strrchr
strcpy_s
_purecall
wcsrchr
strcat_s
sprintf_s
isxdigit
strchr
_vscwprintf
iswalnum
memmove
iswxdigit
wcschr
wcsncpy_s
_vsnwprintf_s
strncpy_s
memcpy
_ftol2_sse
_ftol2
strnlen
wcsnlen
_wcsicmp
_CxxThrowException
_wcslwr
_itoa_s
_stricmp
memset
RtlCaptureStackBackTrace
RtlGetNtProductType
EtwLogTraceEvent
RtlSetThreadPreferredUILanguages
RtlGetCurrentPeb
RtlUpcaseUnicodeChar
RtlNtStatusToDosError
RtlMultiByteToUnicodeN
DeleteTimerQueueEx
QueryPerformanceCounter
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDBCSLeadByteEx
GetComputerNameW
LoadLibraryExW
GetLastError
SetLastError
GetCurrentThreadId
LocalAlloc
LocalFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemInfo
InitializeCriticalSectionAndSpinCount
Sleep
GetModuleHandleW
GetProcAddress
DebugBreak
CreateSemaphoreExW
WaitForSingleObject
GetTickCount
ReleaseSemaphore
CloseHandle
HeapReAlloc
GetProcessHeap
HeapAlloc
HeapFree
MultiByteToWideChar
CompareStringOrdinal
ExpandEnvironmentStringsW
WideCharToMultiByte
FormatMessageA
GetModuleHandleA
GetSystemDefaultLangID
GetSystemDirectoryW
GetSystemWindowsDirectoryW
GetTempPathW
OutputDebugStringA
DisableThreadLibraryCalls
GetTickCount64
GetLocalTime
GlobalAlloc
GetStdHandle
GlobalFree
CreateFileA
GetWindowsDirectoryA
FlushFileBuffers
WriteFile
GetEnvironmentVariableW
CreateDirectoryW
GetCurrentProcessId
CreateFileW
SetConsoleTextAttribute
CreateEventA
CreateMutexA
CreateTimerQueueTimer
DeleteTimerQueueTimer
InitializeSListHead
QueryDepthSList
InterlockedPopEntrySList
InterlockedPushEntrySList
CreateTimerQueue
GetModuleHandleExW
GetThreadPreferredUILanguages
FreeLibrary
GetCurrentThread
GetCurrentProcess
CreateEventW
CreateThread
SetEvent
OpenProcess
WaitForMultipleObjectsEx
GetSystemTimeAsFileTime
FileTimeToSystemTime
SystemTimeToFileTime
GetSystemTime
FileTimeToLocalFileTime
GetDateFormatA
GetTimeFormatA
GetVersionExW
GetModuleFileNameW
IsDBCSLeadByte
UnregisterWaitEx
ReadFile
GetOverlappedResult
CreateNamedPipeW
ConnectNamedPipe
SetNamedPipeHandleState
DisconnectNamedPipe
CancelIoEx
RegisterWaitForSingleObjectEx
PeekNamedPipe
UnregisterWait
RegisterWaitForSingleObject
GetProcessHeaps
HeapSetInformation
EnumUILanguagesW
GetSystemDefaultUILanguage
LCIDToLocaleName
GetLocaleInfoEx
DuplicateTokenEx
RegQueryValueExW
RegCloseKey
RegQueryValueExA
SetSecurityInfo
GetSecurityDescriptorDacl
RegCreateKeyExW
RegSetValueExW
CloseServiceHandle
QueryServiceStatusEx
OpenServiceW
OpenSCManagerW
QueryServiceConfig2W
RegOpenKeyExW
AddAccessDeniedAce
SetEntriesInAclW
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
InitializeSecurityDescriptor
OpenProcessToken
LookupAccountSidW
EqualSid
AdjustTokenPrivileges
RegOpenKeyExA
AddAce
GetAce
GetAclInformation
SetKernelObjectSecurity
SetSecurityDescriptorDacl
MakeAbsoluteSD
GetKernelObjectSecurity
SetTokenInformation
AddAccessAllowedAce
InitializeAcl
GetLengthSid
GetTokenInformation
FreeSid
AllocateAndInitializeSid
CreateWellKnownSid
SetThreadToken
ReportEventW
RevertToSelf
OpenThreadToken
DeregisterEventSource
RegisterEventSourceW
RegSetValueExA
LoadStringW
LoadStringA
CoUninitialize
CoDisconnectObject
CoInitializeEx
UuidToStringW
UuidCreate
RpcStringFreeW
CryptUnprotectMemory
CryptProtectMemory
WSAStartup
GetAddrInfoW
ntohl
WSACleanup
WSAGetLastError
FreeAddrInfoW
??0?$CDataCache@UDATETIME_FORMAT_ENTRY@@@@QAE@XZ
??0?$CDataCache@VCDateTime@@@@QAE@XZ
??0ALLOC_CACHE_HANDLER@@QAE@PBDPBUALLOC_CACHE_CONFIGURATION@@H@Z
??0ASCLOG_DATETIME_CACHE@@QAE@XZ
??0BIG_REF_TRACE@@QAE@XZ
??0BUFFER@@QAE@PAEK@Z
??0BUFFER@@QAE@XZ
??0CACHED_DATETIME_FORMATS@@QAE@XZ
??0CCritSec@@QAE@XZ
??0CDFTCache@@QAE@XZ
??0CDateTime@@QAE@ABU_FILETIME@@@Z
??0CDateTime@@QAE@ABU_FILETIME@@ABU_SYSTEMTIME@@@Z
??0CDateTime@@QAE@ABU_SYSTEMTIME@@@Z
??0CDateTime@@QAE@XZ
??0CDoubleList@@QAE@XZ
??0CEtwTracer@@QAE@XZ
??0CFakeLock@@QAE@XZ
??0CHUNK_BUFFER@@QAE@XZ
??0CLKRHashTable@@QAE@PBDP6G?BKPBX@ZP6GKK@ZP6G_NKK@ZP6GX1H@ZNKK_N@Z
??0CLKRHashTableStats@@QAE@XZ
??0CLKRHashTable_Iterator@@IAE@PAVCLKRHashTable@@F@Z
??0CLKRHashTable_Iterator@@QAE@ABV0@@Z
??0CLKRHashTable_Iterator@@QAE@XZ
??0CLKRLinearHashTable@@AAE@PBDP6G?BKPBX@ZP6GKK@ZP6G_NKK@ZP6GX1H@ZNKPAVCLKRHashTable@@_N@Z
??0CLKRLinearHashTable@@QAE@PBDP6G?BKPBX@ZP6GKK@ZP6G_NKK@ZP6GX1H@ZNKK_N@Z
??0CLKRLinearHashTable_Iterator@@IAE@PAVCLKRLinearHashTable@@PAVCNodeClump@@KF@Z
??0CLKRLinearHashTable_Iterator@@QAE@ABV0@@Z
??0CLKRLinearHashTable_Iterator@@QAE@XZ
??0CLockedDoubleList@@QAE@XZ
??0CLockedSingleList@@QAE@XZ
??0CReaderWriterLock2@@QAE@XZ
??0CReaderWriterLock3@@QAE@XZ
??0CReaderWriterLock@@QAE@XZ
??0CRtlResource@@QAE@XZ
??0CSecurityDispenser@@QAE@XZ
??0CShareLock@@QAE@XZ
??0CSharelock@@QAE@HH@Z
??0CSingleList@@QAE@XZ
??0CSmallSpinLock@@QAE@XZ
??0CSpinLock@@QAE@XZ
??0EVENT_LOG@@QAE@PBG@Z
??0EXTLOG_DATETIME_CACHE@@QAE@XZ
??0IPM2_MESSAGE_PIPE@@AAE@XZ
??0IPM2_MESSAGE_PIPE@@QAE@ABV0@@Z
??0IPM_MESSAGE_PIPE@@AAE@XZ
??0IPM_MESSAGE_PIPE@@QAE@ABV0@@Z
??0LANG_STRING@@QAE@XZ
??0MB@@QAE@PAUIMSAdminBaseW@@@Z
??0MB_BASE_NOTIFICATION_SINK@@QAE@XZ
??0MULTISZ@@QAE@ABV0@@Z
??0MULTISZ@@QAE@PAGK@Z
??0MULTISZ@@QAE@PBG@Z
??0MULTISZ@@QAE@XZ
??0MULTISZA@@QAE@ABV0@@Z
??0MULTISZA@@QAE@PADK@Z
??0MULTISZA@@QAE@PBD@Z
??0MULTISZA@@QAE@XZ
??0MULTI_IPM@@QAE@XZ
??0STRA@@AAE@ABV0@@Z
??0STRA@@AAE@PAD@Z
??0STRA@@AAE@PBD@Z
??0STRA@@QAE@PADK@Z
??0STRA@@QAE@XZ
??0STRAU@@QAE@AAV0@@Z
??0STRAU@@QAE@PBD@Z
??0STRAU@@QAE@PBDH@Z
??0STRAU@@QAE@PBG@Z
??0STRAU@@QAE@XZ
??0STRU@@AAE@ABV0@@Z
??0STRU@@AAE@PAG@Z
??0STRU@@AAE@PBG@Z
??0STRU@@QAE@PAGK@Z
??0STRU@@QAE@XZ
??0STRU_PATH@@QAE@G@Z
??0STRU_PATH@@QAE@PAGKG@Z
??0TREE_HASH_TABLE@@QAE@ABV0@@Z
??0TREE_HASH_TABLE@@QAE@H@Z
??0TS_RESOURCE@@QAE@XZ
??0W3_DATETIME_CACHE@@QAE@XZ
??0W3_TRACE_LOG@@QAE@PAVW3_TRACE_LOG_FACTORY@@@Z
??0W3_TRACE_LOG_FACTORY@@AAE@XZ
??1ALLOC_CACHE_HANDLER@@QAE@XZ
??1ASCLOG_DATETIME_CACHE@@UAE@XZ
??1BIG_REF_TRACE@@QAE@XZ
??1BUFFER@@QAE@XZ
??1CACHED_DATETIME_FORMATS@@UAE@XZ
??1CCritSec@@QAE@XZ
??1CDoubleList@@QAE@XZ
??1CEtwTracer@@QAE@XZ
??1CFakeLock@@QAE@XZ
??1CHUNK_BUFFER@@QAE@XZ
??1CLKRHashTable@@QAE@XZ
??1CLKRHashTable_Iterator@@QAE@XZ
??1CLKRLinearHashTable@@QAE@XZ
??1CLKRLinearHashTable_Iterator@@QAE@XZ
??1CLockedDoubleList@@QAE@XZ
??1CLockedSingleList@@QAE@XZ
??1CReaderWriterLock2@@QAE@XZ
??1CReaderWriterLock3@@QAE@XZ
??1CReaderWriterLock@@QAE@XZ
??1CRtlResource@@QAE@XZ
??1CSecurityDispenser@@QAE@XZ
??1CShareLock@@QAE@XZ
??1CSharelock@@QAE@XZ
??1CSingleList@@QAE@XZ
??1CSmallSpinLock@@QAE@XZ
??1CSpinLock@@QAE@XZ
??1EXTLOG_DATETIME_CACHE@@UAE@XZ
??1IPM2_MESSAGE_PIPE@@EAE@XZ
??1IPM_MESSAGE_PIPE@@EAE@XZ
??1MB@@QAE@XZ
??1MB_BASE_NOTIFICATION_SINK@@UAE@XZ
??1MULTISZ@@QAE@XZ
??1MULTISZA@@QAE@XZ
??1MULTI_IPM@@QAE@XZ
??1STRA@@QAE@XZ
??1STRAU@@QAE@XZ
??1STRU@@QAE@XZ
??1STRU_PATH@@QAE@XZ
??1TREE_HASH_TABLE@@QAE@XZ
??1TS_RESOURCE@@QAE@XZ
??1W3_DATETIME_CACHE@@UAE@XZ
??1W3_TRACE_LOG@@AAE@XZ
??1W3_TRACE_LOG_FACTORY@@AAE@XZ
??2CLKRLinearHashTable@@SGPAXI@Z
??3CLKRLinearHashTable@@SGXPAX@Z
??4?$CDataCache@UDATETIME_FORMAT_ENTRY@@@@QAEAAV0@ABV0@@Z
??4?$CDataCache@VCDateTime@@@@QAEAAV0@ABV0@@Z
??4?$CLockBase@$00$00$02$00$02$01@@QAEAAV0@ABV0@@Z
??4?$CLockBase@$01$00$00$00$02$01@@QAEAAV0@ABV0@@Z
??4?$CLockBase@$02$00$00$00$00$00@@QAEAAV0@ABV0@@Z
??4?$CLockBase@$03$00$00$01$02$02@@QAEAAV0@ABV0@@Z
??4?$CLockBase@$04$01$00$01$02$02@@QAEAAV0@ABV0@@Z
??4?$CLockBase@$05$01$00$01$02$02@@QAEAAV0@ABV0@@Z
??4?$CLockBase@$06$01$01$00$02$01@@QAEAAV0@ABV0@@Z
??4?$CLockBase@$07$01$01$00$02$01@@QAEAAV0@ABV0@@Z
??4?$CLockBase@$08$01$00$00$02$01@@QAEAAV0@ABV0@@Z
??4ALLOC_CACHE_HANDLER@@QAEAAV0@ABV0@@Z
??4BIG_REF_TRACE@@QAEAAV0@ABV0@@Z
??4BUFFER@@QAEAAV0@ABV0@@Z
??4CCritSec@@QAEAAV0@ABV0@@Z
??4CDFTCache@@QAEAAV0@ABV0@@Z
??4CDateTime@@QAEAAV0@ABV0@@Z
??4CDoubleList@@QAEAAV0@ABV0@@Z
??4CFakeLock@@QAEAAV0@ABV0@@Z
??4CHUNK_BUFFER@@QAEAAV0@ABV0@@Z
??4CLKRHashTableStats@@QAEAAV0@ABV0@@Z
??4CLKRHashTable_Iterator@@QAEAAV0@ABV0@@Z
??4CLKRLinearHashTable_Iterator@@QAEAAV0@ABV0@@Z
??4CLockedDoubleList@@QAEAAV0@ABV0@@Z
??4CLockedSingleList@@QAEAAV0@ABV0@@Z
??4CReaderWriterLock2@@QAEAAV0@ABV0@@Z
??4CReaderWriterLock3@@QAEAAV0@ABV0@@Z
??4CReaderWriterLock@@QAEAAV0@ABV0@@Z
??4CRtlResource@@QAEAAV0@ABV0@@Z
??4CSecurityDispenser@@QAEAAV0@ABV0@@Z
??4CSingleList@@QAEAAV0@ABV0@@Z
??4CSmallSpinLock@@QAEAAV0@ABV0@@Z
??4CSpinLock@@QAEAAV0@ABV0@@Z
??4DATETIME_FORMAT_ENTRY@@QAEAAU0@ABU0@@Z
??4EVENT_LOG@@QAEAAV0@ABV0@@Z
??4IPM2_MESSAGE_PIPE@@QAEAAV0@ABV0@@Z
??4IPM_MESSAGE_PIPE@@QAEAAV0@ABV0@@Z
??4LANG_STRING@@QAEAAV0@ABV0@@Z
??4MB@@QAEAAV0@ABV0@@Z
??4MULTISZ@@QAEAAV0@ABV0@@Z
??4MULTISZA@@QAEAAV0@ABV0@@Z
??4STRA@@AAEAAV0@ABV0@@Z
??4STRAU@@QAEAAV0@ABV0@@Z
??4STRU@@AAEAAV0@ABV0@@Z
??4TREE_HASH_TABLE@@QAEAAV0@ABV0@@Z
??4TS_RESOURCE@@QAEAAV0@ABV0@@Z
??4W3_TRACE_LOG@@QAEAAV0@ABV0@@Z
??4W3_TRACE_LOG_FACTORY@@QAEAAV0@ABV0@@Z
??8CLKRHashTable_Iterator@@QBE_NABV0@@Z
??8CLKRLinearHashTable_Iterator@@QBE_NABV0@@Z
??9CLKRHashTable_Iterator@@QBE_NABV0@@Z
??9CLKRLinearHashTable_Iterator@@QBE_NABV0@@Z
??_7ASCLOG_DATETIME_CACHE@@6B@
??_7CACHED_DATETIME_FORMATS@@6B@
??_7EXTLOG_DATETIME_CACHE@@6B@
??_7IPM2_MESSAGE_PIPE@@6B@
??_7IPM_MESSAGE_PIPE@@6B@
??_7TREE_HASH_TABLE@@6B@
??_7W3_DATETIME_CACHE@@6B@
??_FCSharelock@@QAEXXZ
??_FSTRU_PATH@@QAEXXZ
?ActiveUsers@CSharelock@@QAEHXZ
?AddNewBlock@CHUNK_BUFFER@@AAEJK@Z
?AddNodeInternal@TREE_HASH_TABLE@@AAEJPBGKPAXPAUTREE_HASH_NODE@@PAPAU2@@Z
?AddObject@MB@@QAEHPBG@Z
?AddRef@MB_BASE_NOTIFICATION_SINK@@UAGKXZ
?AddTrace@BIG_REF_TRACE@@AAEJPAXHH@Z
?AdjustTokenForAdministrators@CSecurityDispenser@@QAEKPAX@Z
?Alloc@ALLOC_CACHE_HANDLER@@QAEPAXXZ
?AllocateEntry@BIG_REF_TRACE@@AAEPAU_REF_TRACE_ENTRY@@XZ
?AllocateHeadEntry@BIG_REF_TRACE@@AAEPAU_REF_TRACE_HEAD_ENTRY@@PAX@Z
?AllocateNode@TREE_HASH_TABLE@@AAEJPBGKPAXPAUTREE_HASH_NODE@@PAPAU2@@Z
?AllocateSpace@CHUNK_BUFFER@@QAEJKPAPAD@Z
?AllocateSpace@CHUNK_BUFFER@@QAEJKPAPAG@Z
?AllocateSpace@CHUNK_BUFFER@@QAEJKPAPAX@Z
?AllocateSpace@CHUNK_BUFFER@@QAEJPADKPAPAD@Z
?AllocateSpace@CHUNK_BUFFER@@QAEJPAGKPAPAG@Z
?Append@MULTISZ@@QAEHAAVSTRU@@@Z
?Append@MULTISZ@@QAEHPBG@Z
?Append@MULTISZ@@QAEHPBGK@Z
?Append@MULTISZA@@QAEHAAVSTRA@@@Z
?Append@MULTISZA@@QAEHPBD@Z
?Append@MULTISZA@@QAEHPBDK@Z
?Append@STRA@@QAEJABV1@@Z
?Append@STRA@@QAEJPBD@Z
?Append@STRA@@QAEJPBDK@Z
?Append@STRAU@@QAEHAAV1@@Z
?Append@STRAU@@QAEHPBD@Z
?Append@STRAU@@QAEHPBDK@Z
?Append@STRAU@@QAEHPBG@Z
?Append@STRAU@@QAEHPBGK@Z
?Append@STRU@@QAEJABV1@@Z
?Append@STRU@@QAEJG@Z
?Append@STRU@@QAEJPBG@Z
?Append@STRU@@QAEJPBGK@Z
?AppendA@STRU@@QAEJPBD@Z
?AppendA@STRU@@QAEJPBDK@Z
?AppendA_ACP@STRU@@QAEJPBD@Z
?AppendA_ACP@STRU@@QAEJPBDK@Z
?AppendData@W3_TRACE_LOG_FACTORY@@QAEJPAXK@Z
?AppendW@MULTISZA@@QAEHPBG@Z
?AppendW@MULTISZA@@QAEHPBGK@Z
?AppendW@STRA@@QAEJPBG@Z
?AppendW@STRA@@QAEJPBGK@Z
?AppendWSimple@STRA@@QAEJPBGK@Z
?AppendWTruncate@STRA@@QAEJPBG@Z
?AppendWTruncate@STRA@@QAEJPBGK@Z
?Apply@CLKRHashTable@@QAEKP6G?AW4LK_ACTION@@PBXPAX@Z1W4LK_LOCKTYPE@@@Z
?Apply@CLKRLinearHashTable@@QAEKP6G?AW4LK_ACTION@@PBXPAX@Z1W4LK_LOCKTYPE@@@Z
?ApplyIf@CLKRHashTable@@QAEKP6G?AW4LK_PREDICATE@@PBXPAX@ZP6G?AW4LK_ACTION@@01@Z1W4LK_LOCKTYPE@@@Z
?ApplyIf@CLKRLinearHashTable@@QAEKP6G?AW4LK_PREDICATE@@PBXPAX@ZP6G?AW4LK_ACTION@@01@Z1W4LK_LOCKTYPE@@@Z
?ApplyIf@TREE_HASH_TABLE@@QAEXP6GXPAX0@Z0@Z
?AuxAppend@MULTISZ@@AAEHPBGIH@Z
?AuxAppend@MULTISZA@@AAEHPBEIH@Z
?AuxAppend@STRA@@AAEJPBEKK_N@Z
?AuxAppend@STRAU@@AAEHPBDIH@Z
?AuxAppend@STRAU@@AAEHPBGIH@Z
?AuxAppend@STRU@@AAEJPBEKK_N@Z
?AuxAppendA@STRU@@AAEJPBEKK_N1@Z
?AuxAppendW@MULTISZA@@AAEHPBGIH@Z
?AuxAppendW@STRA@@AAEJPBGKK_N@Z
?AuxAppendWSimple@STRA@@AAEJPBGKK_N@Z
?AuxAppendWTruncate@STRA@@AAEJPBGKK_N@Z
?AuxInit@MULTISZ@@AAEXPBG@Z
?AuxInit@MULTISZA@@AAEXPBE@Z
?AuxInit@STRAU@@AAEXPBD@Z
?AuxInit@STRAU@@AAEXPBG@Z
?Begin@CLKRHashTable@@QAE?AVCLKRHashTable_Iterator@@XZ
?Begin@CLKRLinearHashTable@@QAE?AVCLKRLinearHashTable_Iterator@@XZ
?BucketIndex@CLKRHashTableStats@@SGJJ@Z
?BucketSize@CLKRHashTableStats@@SGJJ@Z
?BucketSizes@CLKRHashTableStats@@SGPBJXZ
?CalcHash@TREE_HASH_TABLE@@QAEKPBG@Z
?CalcLength@MULTISZ@@SGKPBGPAK@Z
?CalcLength@MULTISZA@@SGKPBDPAK@Z
?ChangeExclusiveLockToSharedLock@CSharelock@@QAEXXZ
?ChangeSharedLockToExclusiveLock@CSharelock@@QAEEH@Z
?CheckSignature@BIG_REF_TRACE@@ABEHXZ
?CheckTable@CLKRHashTable@@QBEHXZ
?CheckTable@CLKRLinearHashTable@@QBEHXZ
?ClaimExclusiveLock@CSharelock@@QAEEH@Z
?ClaimShareLock@CSharelock@@QAEEH@Z
?ClassName@CCritSec@@SGPBGXZ
?ClassName@CFakeLock@@SGPBGXZ
?ClassName@CLKRHashTable@@SGPBGXZ
?ClassName@CLKRLinearHashTable@@SGPBGXZ
?ClassName@CReaderWriterLock2@@SGPBGXZ
?ClassName@CReaderWriterLock3@@SGPBGXZ
?ClassName@CReaderWriterLock@@SGPBGXZ
?ClassName@CRtlResource@@SGPBDXZ
?ClassName@CShareLock@@SGPBDXZ
?ClassName@CSmallSpinLock@@SGPBGXZ
?ClassName@CSpinLock@@SGPBGXZ
?Cleanup@ALLOC_CACHE_HANDLER@@SGHH@Z
?CleanupAllLookasides@ALLOC_CACHE_HANDLER@@SGXPAXE@Z
?CleanupLookaside@ALLOC_CACHE_HANDLER@@QAEXH@Z
?Clear@CLKRHashTable@@QAEXXZ
?Clear@CLKRLinearHashTable@@QAEXXZ
?Clear@TREE_HASH_TABLE@@QAEXXZ
?ClearBuffer@W3_TRACE_LOG@@QAEXXZ
?Clone@MULTISZ@@QBEHPAV1@@Z
?Clone@MULTISZA@@QBEHPAV1@@Z
?Clone@STRA@@QBEJPAV1@@Z
?Close@MB@@QAEHXZ
?Convert@TS_RESOURCE@@QAEXW4TSRES_CONV_TYPE@@@Z
?ConvertExclusiveToShared@CCritSec@@QAEXXZ
?ConvertExclusiveToShared@CFakeLock@@QAEXXZ
?ConvertExclusiveToShared@CLKRHashTable@@QBEXXZ
?ConvertExclusiveToShared@CLKRLinearHashTable@@QBEXXZ
?ConvertExclusiveToShared@CReaderWriterLock2@@QAEXXZ
?ConvertExclusiveToShared@CReaderWriterLock3@@QAEXXZ
?ConvertExclusiveToShared@CReaderWriterLock@@QAEXXZ
?ConvertExclusiveToShared@CRtlResource@@QAEXXZ
?ConvertExclusiveToShared@CShareLock@@QAEXXZ
?ConvertExclusiveToShared@CSmallSpinLock@@QAEXXZ
?ConvertExclusiveToShared@CSpinLock@@QAEXXZ
?ConvertSharedToExclusive@CCritSec@@QAEXXZ
?ConvertSharedToExclusive@CFakeLock@@QAEXXZ
?ConvertSharedToExclusive@CLKRHashTable@@QBEXXZ
?ConvertSharedToExclusive@CLKRLinearHashTable@@QBEXXZ
?ConvertSharedToExclusive@CReaderWriterLock2@@QAEXXZ
?ConvertSharedToExclusive@CReaderWriterLock3@@QAEXXZ
?ConvertSharedToExclusive@CReaderWriterLock@@QAEXXZ
?ConvertSharedToExclusive@CRtlResource@@QAEXXZ
?ConvertSharedToExclusive@CShareLock@@QAEXXZ
?ConvertSharedToExclusive@CSmallSpinLock@@QAEXXZ
?ConvertSharedToExclusive@CSpinLock@@QAEXXZ
?Copy@MULTISZ@@QAEHABV1@@Z
?Copy@MULTISZ@@QAEHPBGK@Z
?Copy@MULTISZA@@QAEHABV1@@Z
?Copy@MULTISZA@@QAEHPBDK@Z
?Copy@STRA@@QAEJABV1@@Z
?Copy@STRA@@QAEJPBD@Z
?Copy@STRA@@QAEJPBDK@Z
?Copy@STRAU@@QAEHAAV1@@Z
?Copy@STRAU@@QAEHPBD@Z
?Copy@STRAU@@QAEHPBDK@Z
?Copy@STRAU@@QAEHPBG@Z
?Copy@STRAU@@QAEHPBGK@Z
?Copy@STRU@@QAEJABV1@@Z
?Copy@STRU@@QAEJPBG@Z
?Copy@STRU@@QAEJPBGK@Z
?Copy@STRU@@QAEJPBV1@@Z
?CopyA@STRU@@QAEJPBD@Z
?CopyA@STRU@@QAEJPBDK@Z
?CopyA_ACP@STRU@@QAEJPBD@Z
?CopyA_ACP@STRU@@QAEJPBDK@Z
?CopyBinary@STRA@@QAEJPAXK@Z
?CopyFormattedData@CDFTCache@@QBEHPBU_SYSTEMTIME@@PAD@Z
?CopyFormattedData@DATETIME_FORMAT_ENTRY@@QBEXPBU_SYSTEMTIME@@PAD@Z
?CopyToBuffer@MULTISZ@@QBEHPAGPAK@Z
?CopyToBuffer@MULTISZA@@QBEHPADPAK@Z
?CopyToBuffer@STRA@@QBEJPADPAK@Z
?CopyToBuffer@STRU@@QBEJPAGPAK@Z
?CopyW@STRA@@QAEJPBG@Z
?CopyW@STRA@@QAEJPBGK@Z
?CopyWToUTF8Escaped@STRA@@QAEJABVSTRU@@@Z
?CopyWToUTF8Escaped@STRA@@QAEJPBG@Z
?CopyWToUTF8Escaped@STRA@@QAEJPBGK@Z
?CopyWToUTF8Unescaped@STRA@@QAEJABVSTRU@@@Z
?CopyWToUTF8Unescaped@STRA@@QAEJPBG@Z
?CopyWToUTF8Unescaped@STRA@@QAEJPBGK@Z
?CopyWTruncate@STRA@@QAEJPBG@Z
?CopyWTruncate@STRA@@QAEJPBGK@Z
?CreateIpmMessagePipe@IPM2_MESSAGE_PIPE@@SGJPAVIPM2_MESSAGE_ACCEPTOR@@PBGHHKPAU_SECURITY_ATTRIBUTES@@PAPAV1@PAH@Z
?CreateIpmMessagePipe@IPM2_MESSAGE_PIPE@@SGJPAVIPM2_MESSAGE_ACCEPTOR@@PBGHPAU_SECURITY_ATTRIBUTES@@PAPAV1@@Z
?CreateIpmMessagePipe@IPM_MESSAGE_PIPE@@SGJPAVIPM_MESSAGE_ACCEPTOR@@PBGHPAU_SECURITY_ATTRIBUTES@@PAPAV1@@Z
?CreateServer@MULTI_IPM@@QAEJPBGKPAU_SECURITY_ATTRIBUTES@@@Z
?CreateTraceLog@W3_TRACE_LOG_FACTORY@@QAEJPAPAVW3_TRACE_LOG@@@Z
?CreateTraceLogFactory@W3_TRACE_LOG_FACTORY@@SGJPAPAV1@PAX@Z
?DateTimeChars@CDFTCache@@QBEKXZ
?DayOfWeek3CharNames@@YGPBDK@Z
?DecrementAcceptorInUse@IPM2_MESSAGE_PIPE@@AAGXXZ
?DecrementAcceptorInUse@IPM_MESSAGE_PIPE@@AAGXXZ
?DeleteData@MB@@QAEHPBGKKK@Z
?DeleteIf@CLKRHashTable@@QAEKP6G?AW4LK_PREDICATE@@PBXPAX@Z1@Z
?DeleteIf@CLKRLinearHashTable@@QAEKP6G?AW4LK_PREDICATE@@PBXPAX@Z1@Z
?DeleteIf@TREE_HASH_TABLE@@QAEXP6GHPAX0@Z0@Z
?DeleteKey@CLKRHashTable@@QAE?AW4LK_RETCODE@@K@Z
?DeleteKey@CLKRLinearHashTable@@QAE?AW4LK_RETCODE@@K@Z
?DeleteNode@TREE_HASH_TABLE@@AAEXPAUTREE_HASH_NODE@@@Z
?DeleteNodeInternal@TREE_HASH_TABLE@@AAEXPAPAUTREE_HASH_NODE@@PAU2@@Z
?DeleteObject@MB@@QAEHPBG@Z
?DeletePath@TREE_HASH_TABLE@@QAEXPBG@Z
?DeleteRecord@CLKRHashTable@@QAE?AW4LK_RETCODE@@PBX@Z
?DeleteRecord@CLKRLinearHashTable@@QAE?AW4LK_RETCODE@@PBX@Z
?DestroyEventLogSource@EVENT_LOG@@CGXPAU_EVENT_LOG_SOURCE@@@Z
?DestroyIpmMessagePipe@IPM2_MESSAGE_PIPE@@QAGXXZ
?DestroyIpmMessagePipe@IPM_MESSAGE_PIPE@@QAGXXZ
?DestroyTraceLog@W3_TRACE_LOG@@QAEXXZ
?DestroyTraceLogFactory@W3_TRACE_LOG_FACTORY@@QAEXXZ
?DisableEventsCallbackCustomHandler@CEtwTracer@@UAEKXZ
?DisableFreeList@ALLOC_CACHE_HANDLER@@QAEXXZ
?DumpStatsToHtml@ALLOC_CACHE_HANDLER@@SGHPADPAK@Z
?EmptyAndFreeHeadEntry@BIG_REF_TRACE@@AAEJPAU_REF_TRACE_HEAD_ENTRY@@@Z
?EnableEventsCallbackCustomHandler@CEtwTracer@@UAEKXZ
?End@CLKRHashTable@@QAE?AVCLKRHashTable_Iterator@@XZ
?End@CLKRLinearHashTable@@QAE?AVCLKRLinearHashTable_Iterator@@XZ
?EnumObjects@MB@@QAEHPBGPAGK@Z
?EnumUILanguagesProc@LANG_STRING@@CGHPAGJ@Z
?EqualRange@CLKRHashTable@@QAE_NKAAVCLKRHashTable_Iterator@@0@Z
?EqualRange@CLKRLinearHashTable@@QAE_NKAAVCLKRLinearHashTable_Iterator@@0@Z
?Equals@MULTISZ@@QAEHPAV1@@Z
?Equals@STRA@@QBE_NABV1@@Z
?Equals@STRA@@QBE_NPBD@Z
?Equals@STRU@@QBE_NABV1@@Z
?Equals@STRU@@QBE_NPBG@Z
?EqualsNoCase@STRA@@QBE_NABV1@@Z
?EqualsNoCase@STRA@@QBE_NPBD@Z
?EqualsNoCase@STRU@@QBE_NABV1@@Z
?EqualsNoCase@STRU@@QBE_NPBG@Z
?Erase@CLKRHashTable@@QAE_NAAVCLKRHashTable_Iterator@@0@Z
?Erase@CLKRHashTable@@QAE_NAAVCLKRHashTable_Iterator@@@Z
?Erase@CLKRLinearHashTable@@QAE_NAAVCLKRLinearHashTable_Iterator@@0@Z
?Erase@CLKRLinearHashTable@@QAE_NAAVCLKRLinearHashTable_Iterator@@@Z
?Escape@STRA@@QAEJ_N0@Z
?Escape@STRU@@QAEJXZ
?EtwTraceEvent@CEtwTracer@@QAAKPBU_GUID@@KZZ
?EtwTraceEvent@CEtwTracer@@QAEKPAU_ETW_TRACE_EVENT@@@Z
?EtwTraceEvent@CEtwTracer@@QAEKPAU_EVENT_TRACE_HEADER@@@Z
?ExpandEnvironmentVariables@STRU@@SGJPBGPAV1@@Z
?ExpandEnvironmentVariables@STRU_PATH@@QAEJPAG@Z
?ExpandEnvironmentVariables@STRU_PATH@@QAEJXZ
?FastAppend@MULTISZ@@QAEHAAVSTRU@@@Z
?FastAppend@MULTISZ@@QAEHPBG@Z
?FastAppend@MULTISZ@@QAEHPBGK@Z
?FastAuxAppend@MULTISZ@@AAEHPBGIH@Z
?FastCopy@MULTISZ@@QAEHABV1@@Z
?FastCopy@MULTISZ@@QAEHPBGK@Z
?FileTimeToGMT@@YGHABU_FILETIME@@PADK@Z
?FileTimeToGMTEx@@YGHABU_FILETIME@@PADKK@Z
?Find@CLKRHashTable@@QAE_NKAAVCLKRHashTable_Iterator@@@Z
?Find@CLKRLinearHashTable@@QAE_NKAAVCLKRLinearHashTable_Iterator@@@Z
?FindKey@CLKRHashTable@@QBE?AW4LK_RETCODE@@KPAPBX@Z
?FindKey@CLKRLinearHashTable@@QBE?AW4LK_RETCODE@@KPAPBX@Z
?FindNodeInternal@TREE_HASH_TABLE@@AAEHPBGKPAPAUTREE_HASH_NODE@@PAPAPAU2@@Z
?FindRecord@CLKRHashTable@@QBE?AW4LK_RETCODE@@PBX@Z
?FindRecord@CLKRLinearHashTable@@QBE?AW4LK_RETCODE@@PBX@Z
?FindRecord@TREE_HASH_TABLE@@QAEXPBGPAPAX@Z
?FindRefTraceHeadEntry@BIG_REF_TRACE@@SGPAU_REF_TRACE_HEAD_ENTRY@@PAV1@PAX@Z
?FindString@MULTISZ@@QAEHAAVSTRU@@@Z
?FindString@MULTISZ@@QAEHPBG@Z
?FindString@MULTISZA@@QAEHAAVSTRA@@@Z
?FindString@MULTISZA@@QAEHPBD@Z
?FindStringNoCase@MULTISZ@@QAEHAAVSTRU@@@Z
?FindStringNoCase@MULTISZ@@QAEHPBG@Z
?First@CDoubleList@@QBEQAVCListEntry@@XZ
?First@CLockedDoubleList@@QAEQAVCListEntry@@XZ
?First@MULTISZ@@QBEPBGXZ
?First@MULTISZA@@QBEPBDXZ
?FormatString@STRA@@QAEJKQAPBDPBDK@Z
?FormattedBuffer@CDFTCache@@QBEPBDXZ
?Free@ALLOC_CACHE_HANDLER@@QAEHPAX@Z
?FreeAllAllocatedSpace@CHUNK_BUFFER@@QAEXXZ
?FreeEntry@BIG_REF_TRACE@@AAEXPAU_REF_TRACE_ENTRY@@@Z
?FreeHeadEntry@BIG_REF_TRACE@@AAEXPAU_REF_TRACE_HEAD_ENTRY@@@Z
?FreeMemory@BUFFER@@QAEXXZ
?FreeMemoryInternal@BUFFER@@AAEXXZ
?GenerateDateTimeString@ASCLOG_DATETIME_CACHE@@UAEXPAUDATETIME_FORMAT_ENTRY@@PBU_SYSTEMTIME@@@Z
?GenerateDateTimeString@EXTLOG_DATETIME_CACHE@@UAEXPAUDATETIME_FORMAT_ENTRY@@PBU_SYSTEMTIME@@@Z
?GenerateDateTimeString@W3_DATETIME_CACHE@@UAEXPAUDATETIME_FORMAT_ENTRY@@PBU_SYSTEMTIME@@@Z
?GetAll@MB@@QAEHPBGKKPAVBUFFER@@PAK2@Z
?GetBucketLockSpinCount@CLKRHashTable@@QBEGXZ
?GetBucketLockSpinCount@CLKRLinearHashTable@@QBEGXZ
?GetBuffer@MB@@QAEHPBGKKPAVBUFFER@@PAKK@Z
?GetChildPaths@MB@@QAEHPBGPAVBUFFER@@@Z
?GetData@MB@@QAEHPBGKKKPAXPAKK@Z
?GetDataPaths@MB@@QAEHPBGKKPAVBUFFER@@@Z
?GetDataSetNumber@MB@@QAEHPBGPAK@Z
?GetDefaultSpinAdjustmentFactor@CCritSec@@SGNXZ
?GetDefaultSpinAdjustmentFactor@CFakeLock@@SGNXZ
?GetDefaultSpinAdjustmentFactor@CReaderWriterLock2@@SGNXZ
?GetDefaultSpinAdjustmentFactor@CReaderWriterLock3@@SGNXZ
?GetDefaultSpinAdjustmentFactor@CReaderWriterLock@@SGNXZ
?GetDefaultSpinAdjustmentFactor@CRtlResource@@SGNXZ
?GetDefaultSpinAdjustmentFactor@CShareLock@@SGNXZ
?GetDefaultSpinAdjustmentFactor@CSmallSpinLock@@SGNXZ
?GetDefaultSpinAdjustmentFactor@CSpinLock@@SGNXZ
?GetDefaultSpinCount@CCritSec@@SGGXZ
?GetDefaultSpinCount@CFakeLock@@SGGXZ
?GetDefaultSpinCount@CReaderWriterLock2@@SGGXZ
?GetDefaultSpinCount@CReaderWriterLock3@@SGGXZ
?GetDefaultSpinCount@CReaderWriterLock@@SGGXZ
?GetDefaultSpinCount@CRtlResource@@SGGXZ
?GetDefaultSpinCount@CShareLock@@SGGXZ
?GetDefaultSpinCount@CSmallSpinLock@@SGGXZ
?GetDefaultSpinCount@CSpinLock@@SGGXZ
?GetDword@MB@@QAEHPBGKKPAKK@Z
?GetDword@MB@@QAEXPBGKKKPAKK@Z
?GetFallbackLanguage@LANG_STRING@@QAEJPAPBD@Z
?GetFormattedCurrentDateTime@CACHED_DATETIME_FORMATS@@QAEKPAD@Z
?GetFormattedDateTime@CACHED_DATETIME_FORMATS@@QAEKPBU_SYSTEMTIME@@PAD@Z
?GetIisIusrsSID@CSecurityDispenser@@QAEKPAPAX@Z
?GetLanguage@LANG_STRING@@QAEJPBDKPAPBDHH@Z
?GetLanguages@LANG_STRING@@QBEJPAPAPBDPAK@Z
?GetLocalGroupSID@CSecurityDispenser@@QAEKPAPAX@Z
?GetMultisz@MB@@QAEHPBGKKPAVMULTISZ@@K@Z
?GetParentLanguage@LANG_STRING@@AAEJPADPAVBUFFER@@@Z
?GetPrime@TREE_HASH_TABLE@@CGKK@Z
?GetSID@CSecurityDispenser@@QAEKW4WELL_KNOWN_SID_TYPE@@PAPAX@Z
?GetSeperator@STRU_PATH@@AAEGXZ
?GetSpinCount@CCritSec@@QBEGXZ
?GetSpinCount@CFakeLock@@QBEGXZ
?GetSpinCount@CReaderWriterLock2@@QBEGXZ
?GetSpinCount@CReaderWriterLock3@@QBEGXZ
?GetSpinCount@CReaderWriterLock@@QBEGXZ
?GetSpinCount@CRtlResource@@QBEGXZ
?GetSpinCount@CShareLock@@QBEGXZ
?GetSpinCount@CSmallSpinLock@@QBEGXZ
?GetSpinCount@CSpinLock@@QBEGXZ
?GetStatistics@CLKRHashTable@@QBE?AVCLKRHashTableStats@@XZ
?GetStatistics@CLKRLinearHashTable@@QBE?AVCLKRHashTableStats@@XZ
?GetStr@MB@@QAEHPBGKKPAVSTRU@@K0@Z
?GetString@LANG_STRING@@QAEJIPBDPAPBGPAK@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ