Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
Driver_x32.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Driver_x32.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Installer-master-BlackMythWukong.msi
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Installer-master-BlackMythWukong.msi
Resource
win10v2004-20240802-en
Target
Installer-master-BlackMythWukong.rar
Size
54.8MB
MD5
ee0ca9deced958f712b37416ded0ec77
SHA1
cc2f57bc78c61b50b76605975ffc2271fce60bf7
SHA256
b28507f5d646bff668608fd5815137dc2317f2536bfd9dcbb4c412506b31856c
SHA512
fbf9d3ff8d5754aafab9f19b2c44b6c60d1e1b80f0fbf5b8cd492a4f6d82f38be225ee4e1e3d46251d1349e9d5f1be66f8cf11b2e6c1d0b60390193e589431e9
SSDEEP
786432:yK9FbHTJiZVCh7UZaMwuM1nfRZ+bs4ZuRJhHxgqCiIFGD0TvjihWrc2oVNVjZc51:pLd8ChPuqfjis4ZuRJhaqqBTIIR1
Checks for missing Authenticode signature.
resource |
---|
unpack001/dll/Microsoft.Msmq.Activex.Interop.dll |
unpack001/dll/mqcertui.dll |
unpack001/dll/mqoa.dll |
unpack001/dll/mqsnap.dll |
unpack001/dll/nshwfp.dll |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetModuleFileNameW
GetLastError
GetACP
lstrlenW
CompareStringW
QueryPerformanceCounter
LocalFree
CloseHandle
VirtualProtect
WideCharToMultiByte
GetTickCount
FindClose
MultiByteToWideChar
LoadLibraryA
GetVersion
VirtualFree
RaiseException
ExitProcess
GetStartupInfoW
SwitchToThread
InitializeCriticalSection
GetEnvironmentVariableW
VirtualAlloc
WriteFile
RtlUnwind
GetSystemInfo
GetCommandLineW
GetProcAddress
DeleteCriticalSection
TlsGetValue
GetStdHandle
TlsSetValue
GetModuleHandleW
LoadLibraryExW
FreeLibrary
LocalAlloc
GetCurrentThreadId
UnhandledExceptionFilter
FindFirstFileW
VirtualQuery
SetThreadLocale
Sleep
InitCommonControls
CreateWindowExW
CharNextW
LoadStringW
SysAllocStringLen
SysFreeString
SysReAllocStringLen
RegQueryValueExW
AdjustTokenPrivileges
RegCloseKey
RegOpenKeyExW
AllocateAndInitializeSid
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Windows.Media.Protection.PlayReady.pdb
RegisterTraceGuidsW
GetTraceLoggerHandle
TraceMessage
GetTraceEnableFlags
UnregisterTraceGuids
GetTraceEnableLevel
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringW
GetACP
FormatMessageW
GetCurrentThread
UpdateProcThreadAttribute
InitializeProcThreadAttributeList
ExitProcess
TlsGetValue
TlsSetValue
GetCurrentThreadId
GetStartupInfoW
TlsAlloc
TlsFree
GetExitCodeProcess
CreateThread
GetCurrentProcessId
CreateProcessW
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
HeapDestroy
DisableThreadLibraryCalls
LoadLibraryExW
LoadLibraryExA
GetProcAddress
GetModuleHandleExW
GetModuleFileNameA
FreeLibrary
FreeLibraryAndExitThread
GetModuleHandleA
GetModuleHandleW
GetModuleFileNameW
DebugBreak
OutputDebugStringW
IsDebuggerPresent
OutputDebugStringA
GetLastError
RaiseException
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
AcquireSRWLockShared
InitializeCriticalSectionEx
ReleaseSRWLockShared
WaitForSingleObjectEx
ResetEvent
EnterCriticalSection
CreateEventW
WaitForSingleObject
InitializeSRWLock
AcquireSRWLockExclusive
OpenSemaphoreW
InitializeCriticalSectionAndSpinCount
ReleaseSRWLockExclusive
ReleaseSemaphore
ReleaseMutex
SetEvent
LeaveCriticalSection
CreateEventExW
CreateMutexExW
CreateSemaphoreExW
DeleteCriticalSection
InitializeCriticalSection
CloseHandle
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer
CloseThreadpoolTimer
WindowsGetStringRawBuffer
WindowsStringHasEmbeddedNull
WindowsCreateString
WindowsCompareStringOrdinal
WindowsDeleteString
WindowsGetStringLen
HSTRING_UserSize
HSTRING_UserUnmarshal
WindowsCreateStringReference
HSTRING_UserMarshal
HSTRING_UserFree
WindowsIsStringEmpty
GetFeatureEnabledState
SubscribeFeatureStateChangeNotification
UnsubscribeFeatureStateChangeNotification
RecordFeatureUsage
SetRestrictedErrorInfo
GetRestrictedErrorInfo
RoOriginateErrorW
RoTransformError
RoOriginateError
EncodePointer
DecodePointer
Sleep
InitOnceExecuteOnce
WakeAllConditionVariable
SleepConditionVariableSRW
EventWriteTransfer
EventSetInformation
EventUnregister
EventRegister
CoCreateGuid
CoGetApartmentType
CoUninitialize
CoInitializeEx
CoTaskMemFree
CoMarshalInterface
CoCreateInstance
CoGetMarshalSizeMax
CoUnmarshalInterface
CoWaitForMultipleHandles
PropVariantCopy
CoCreateFreeThreadedMarshaler
PropVariantClear
CoTaskMemAlloc
CreateStreamOnHGlobal
RoGetActivationFactory
RoActivateInstance
RoUninitialize
RoInitialize
CreateFileMappingW
MapViewOfFileEx
UnmapViewOfFile
MapViewOfFile
VirtualQueryEx
VirtualProtect
VirtualQuery
VirtualFree
VirtualAlloc
RaiseFailFastException
GetProcessMitigationPolicy
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStdHandle
SetStdHandle
GetCommandLineA
BSTR_UserFree
LPSAFEARRAY_UserSize
BSTR_UserSize
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserUnmarshal
SysAllocString
SysFreeString
SysAllocStringLen
BSTR_UserUnmarshal
SysStringLen
BSTR_UserMarshal
LPSAFEARRAY_UserMarshal
GetTickCount64
GetLocalTime
GetVersionExW
GetTickCount
GetSystemInfo
GetSystemTimeAsFileTime
RtlUnwind
GetFileType
SetFilePointer
CreateDirectoryW
ReadFile
WriteFile
CreateFileW
GetFileSize
LockFileEx
DeleteFileW
GetDiskFreeSpaceW
FlushFileBuffers
SetFileAttributesW
GetFileAttributesW
UnlockFileEx
SetEndOfFile
FileTimeToLocalFileTime
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
WriteConsoleW
FileTimeToSystemTime
PSCreateMemoryPropertyStore
QueueUserWorkItem
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
ConvertSecurityDescriptorToStringSecurityDescriptorW
DeviceIoControl
GetFileVersionInfoSizeExW
VerQueryValueW
GetFileVersionInfoExW
MoveFileExW
CopyFileW
VerifyVersionInfoW
GlobalMemoryStatus
MFCopyImage
MFPutWorkItemEx2
MFPutWaitingWorkItem
MFGetSystemTime
MFPutWorkItem
MFScheduleWorkItemEx
MFLockWorkQueue
MFPutWorkItemEx
MFCreateAsyncResult
MFCreateTrackedSample
MFIsContentProtectionDeviceSupported
MFCreateMediaExtensionActivate
MFCreateCollection
MFShutdown
MFStartup
MFUnwrapMediaType
MFInvokeCallback
MFCreateMediaEvent
MFCreateAttributes
MFCreateEventQueue
MFCreateContentProtectionDevice
MFCreateContentDecryptorContext
MFUnlockWorkQueue
VerSetConditionMask
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
NdrOleAllocate
CStdStubBuffer_QueryInterface
CStdStubBuffer_DebugServerRelease
NdrDllGetClassObject
NdrCStdStubBuffer_Release
IUnknown_Release_Proxy
NdrDllCanUnloadNow
CStdStubBuffer_AddRef
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrStubForwardingFunction
NdrStubCall2
CStdStubBuffer_CountRefs
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_DebugServerQueryInterface
IUnknown_AddRef_Proxy
CStdStubBuffer_Connect
NdrCStdStubBuffer2_Release
NdrProxyForwardingFunction5
NdrProxyForwardingFunction3
NdrProxyForwardingFunction4
CStdStubBuffer2_QueryInterface
NdrProxyForwardingFunction7
CStdStubBuffer2_Connect
ObjectStublessClient3
CStdStubBuffer2_Disconnect
ObjectStublessClient10
ObjectStublessClient7
ObjectStublessClient5
NdrProxyForwardingFunction8
ObjectStublessClient6
ObjectStublessClient8
ObjectStublessClient9
ObjectStublessClient4
ObjectStublessClient16
CStdStubBuffer2_CountRefs
NdrProxyForwardingFunction6
ObjectStublessClient11
NdrProxyForwardingFunction9
ObjectStublessClient17
ObjectStublessClient19
ObjectStublessClient13
ObjectStublessClient15
ObjectStublessClient18
ObjectStublessClient14
ObjectStublessClient12
GetAppContainerRegistryLocation
GdiEntry13
GetSecurityInfo
GlobalFree
LocalAlloc
LocalFree
IsWow64Process
Wow64RevertWow64FsRedirection
Wow64DisableWow64FsRedirection
GetCurrentPackageId
GetCurrentPackageFamilyName
GetCurrentApplicationUserModelId
RtwqSetLongRunning
BootstrapReleaseUnusedResources
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
MSPRMFDllCanUnloadNow
MSPRMFGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
mispace.pdb
?terminate@@YAXXZ
_CxxThrowException
__dllonexit
_unlock
_lock
_initterm
_amsg_exit
_XcptFilter
_except_handler4_common
??1type_info@@UAE@XZ
_callnewh
memmove_s
_vsnprintf_s
??0exception@@QAE@ABV0@@Z
memmove
_wcsicmp
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_purecall
memcpy_s
_vsnwprintf
__CxxFrameHandler3
wcstok_s
_ui64tow_s
_wcsnicmp
wcsnlen
_itow_s
_wtoi
_ftol2
towupper
wcschr
wcsncmp
wcsncat_s
swscanf_s
iswalpha
_wtoi64
iswspace
mbtowc
localeconv
wcsstr
_vscwprintf
memcmp
memcpy
toupper
malloc
free
swprintf_s
_onexit
isspace
memset
EventActivityIdControl
EventRegister
EventSetInformation
EventWriteTransfer
EventUnregister
GetSystemDirectoryW
GetWindowsDirectoryW
GetSystemTimeAsFileTime
GetSystemTime
GetTickCount
GetComputerNameExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetLastError
GetModuleHandleExW
FreeLibrary
GetModuleFileNameW
GetModuleFileNameA
LoadLibraryExW
LoadStringW
GetModuleHandleW
GetProcAddress
DisableThreadLibraryCalls
ReleaseSRWLockShared
InitializeCriticalSection
CreateMutexExW
WaitForMultipleObjectsEx
OpenSemaphoreW
CreateEventW
ReleaseSRWLockExclusive
AcquireSRWLockShared
DeleteCriticalSection
ResetEvent
ReleaseMutex
InitializeSRWLock
AcquireSRWLockExclusive
WaitForSingleObject
SetEvent
WaitForSingleObjectEx
CreateSemaphoreExW
EnterCriticalSection
ReleaseSemaphore
InitializeCriticalSectionEx
LeaveCriticalSection
HeapAlloc
GetProcessHeap
HeapFree
WaitForThreadpoolWorkCallbacks
SetThreadpoolThreadMaximum
SetThreadpoolThreadMinimum
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
SubmitThreadpoolWork
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolWork
CloseThreadpool
CreateThreadpool
CreateThreadpoolWork
GetCurrentProcess
TerminateProcess
GetCurrentThread
GetCurrentProcessId
GetCurrentThreadId
OpenProcessToken
OpenThreadToken
CreateThread
ResumeThread
TlsGetValue
SetThreadToken
FormatMessageW
IsDebuggerPresent
DebugBreak
OutputDebugStringW
QueryPerformanceFrequency
QueryPerformanceCounter
CloseHandle
UuidCreate
RpcServerListen
RpcServerRegisterIfEx
RpcServerUnregisterIf
RpcServerUseProtseqEpW
RpcMgmtStopServerListening
NdrServerCall2
RpcRevertToSelf
RpcImpersonateClient
I_RpcServerDisableExceptionFilter
Sleep
SxTracerGetThreadContextRetail
SxTracerShouldTrackFailure
SxTracerDebuggerBreak
RegOpenKeyExW
RegGetValueW
RegDeleteKeyExW
RegEnumKeyExW
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
LocalFree
LocalAlloc
IsValidSid
GetLengthSid
AdjustTokenPrivileges
CopySid
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
ImpersonateLoggedOnUser
DuplicateTokenEx
RevertToSelf
GetTokenInformation
CoTaskMemAlloc
CoUninitialize
CLSIDFromString
CoTaskMemFree
CoDisconnectObject
CoCreateGuid
CoSetProxyBlanket
CoCreateInstance
DeviceIoControl
GetOverlappedResult
FlushFileBuffers
QueryDosDeviceW
SetFilePointer
FindFirstVolumeW
ReadFile
GetDriveTypeW
GetDiskFreeSpaceW
WriteFile
SetFilePointerEx
DeleteFileW
GetVolumePathNameW
GetFileAttributesW
CreateFileW
FindClose
GetFinalPathNameByHandleW
RemoveDirectoryW
FindNextFileW
FindFirstFileW
FindNextVolumeW
CompareFileTime
DeleteVolumeMountPointW
GetDiskFreeSpaceExW
CreateDirectoryW
FindVolumeClose
DefineDosDeviceW
GetLongPathNameW
GetVolumeInformationW
GetFileSizeEx
FileTimeToSystemTime
SystemTimeToFileTime
LogonUserExExW
ControlTraceW
EnableTraceEx2
StartTraceW
ExpandEnvironmentStringsW
MoveFileWithProgressW
ConvertSidToStringSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSecurityDescriptorToStringSecurityDescriptorW
MultiByteToWideChar
CompareStringOrdinal
CompareStringW
GetVolumePathNamesForVolumeNameW
GetVolumeNameForVolumeMountPointW
RtlCaptureStackBackTrace
InitializeSListHead
InterlockedPushEntrySList
InterlockedPopEntrySList
IsWow64Process
CM_Get_Parent
NetShareAdd
NetShareEnum
NetShareDel
NetApiBufferFree
PerfSetCounterSetInfo
PerfStartProviderEx
PerfCreateInstance
PerfDeleteInstance
PerfSetULongCounterValue
PerfIncrementULongCounterValue
PerfStopProvider
WmiQueryAllDataW
WmiOpenBlock
WmiCloseBlock
DevObjDeleteDevice
DevObjEnumDeviceInfo
DevObjDestroyDeviceInfoList
DevObjGetDeviceInterfaceDetail
DevObjEnumDeviceInterfaces
DevObjGetDeviceRegistryProperty
DevObjOpenDeviceInterface
DevObjGetClassDevs
DevObjCreateDeviceInfoList
DevObjGetDeviceInstanceId
RtlGetLastNtStatus
RtlSetThreadErrorMode
NtQueryVolumeInformationFile
NtPowerInformation
NtQuerySystemInformation
RtlFreeHeap
RtlAllocateHeap
NtSystemDebugControl
RtlNtStatusToDosError
NtCompareTokens
RtlEnumerateGenericTableAvl
RtlEnumerateGenericTableWithoutSplayingAvl
RtlInsertElementGenericTableAvl
RtlLookupElementGenericTableAvl
RtlDeleteElementGenericTableAvl
RtlInitializeGenericTableAvl
EtwTraceMessage
RtlDeleteElementGenericTableAvlEx
RtlAnsiStringToUnicodeString
RtlxAnsiStringToUnicodeSize
RtlInitAnsiString
VerifyVersionInfoW
SetVolumeMountPointW
EvtArchiveExportedLog
EvtExportLog
MI_Application_InitializeV1
GetStorageDependencyInformation
ResUtilFindSzProperty
BCryptGenRandom
CM_Unregister_Notification
CM_Reenumerate_DevNode
CM_MapCrToWin32Err
CM_Register_Notification
CM_Reenumerate_DevNode_Ex
BcdOpenSystemStore
BcdCloseObject
BcdOpenObject
BcdDeleteObject
BcdCloseStore
BcdEnumerateObjects
BcdEnumerateElementTypes
BcdGetElementDataWithFlags
BcdSetElementData
BcdDeleteElement
BcdGetElementData
VerQueryValueW
GetFileVersionInfoExW
GetFileVersionInfoSizeExW
VerSetConditionMask
CancelIo
VirtualAlloc
VirtualFree
RtlCompareMemory
ResolveDelayLoadedAPI
DelayLoadFailureHook
ApiSetQueryApiSetPresence
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
GetProviderClassID
MI_Main
PreShutdown
SetShutdownCallback
SmpUnload
WspCheckMinimumSubsystemVersion
WspCompleteMethod
WspCreateJob
WspEnumerateRemoteInstances
WspFreeString
WspGetClassName
WspGetRemoteInstance
WspGetSubsystemFilter
WspGuidToString
WspInvokeRemoteMethod
WspIsAutomaticClusteringEnabled
WspIsRemoteInstance
WspIsRemoteRequest
WspPackObjectId
WspPostAssociation
WspPostSubsystemAssociationReferenceObject
WspProviderEnter
WspProviderExit
WspReferencesOfRemoteInstance
WspRunMethodAsJob
WspSendIndication
WspUnpackObjectId
WspUpdateMethod
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
mqcertui.pdb
_initterm
_amsg_exit
_XcptFilter
_CxxThrowException
??1type_info@@UAE@XZ
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
malloc
free
_except_handler4_common
?terminate@@YAXXZ
_callnewh
__CxxFrameHandler3
memset
TerminateProcess
GetCurrentProcess
GetCurrentProcessId
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
Sleep
QueryPerformanceCounter
GetCurrentThreadId
SetWindowTextW
EndDialog
SendMessageW
DialogBoxParamW
MessageBoxW
GetWindowPlacement
SetWindowPlacement
EnableWindow
GetDlgItem
LoadStringW
ShowWindow
ord17
CertEnumCertificatesInStore
CertFreeCertificateContext
CertOpenSystemStoreW
CertDuplicateCertificateContext
CertCloseStore
CryptAcquireContextW
CryptReleaseContext
CryptUIDlgViewCertificateW
MQSigCloneCertFromSysStore
MQSigCreateCertificate
MQSigCloneCertFromReg
MQFreeMemory
RTGetInternalCert
MQGetResourceHandle
SelectPersonalCertificateForRegister
SelectPersonalCertificateForRemoval
ShowCertificate
ShowPersonalCertificates
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
mqoa.pdb
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
_purecall
_vsnwprintf
?what@exception@@UBEPBDXZ
free
malloc
wcscat_s
memcpy_s
_vsnprintf_s
memmove_s
_ui64tow_s
_snwscanf_s
??0exception@@QAE@ABQBD@Z
_callnewh
_CxxThrowException
_XcptFilter
_amsg_exit
realloc
mktime
iswspace
wcschr
time
_wcsnicmp
localtime
_initterm
?terminate@@YAXXZ
_except_handler4_common
??1type_info@@UAE@XZ
_lock
memcmp
memcpy
_unlock
__dllonexit
_onexit
__CxxFrameHandler3
??0exception@@QAE@XZ
memset
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
OutputDebugStringA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetLastError
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetComputerNameW
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryExW
GetModuleHandleW
lstrcmpiW
lstrcpynW
VirtualProtect
VirtualAlloc
VirtualQuery
GetSystemInfo
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceExW
GetModuleFileNameW
DisableThreadLibraryCalls
HeapDestroy
GetModuleHandleA
FormatMessageW
GetCurrentThreadId
HeapAlloc
GetProcessHeap
HeapFree
GetModuleHandleExW
GetModuleFileNameA
DebugBreak
IsDebuggerPresent
OutputDebugStringW
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
SetLastError
CloseHandle
ReleaseSemaphore
ReleaseMutex
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
WaitForSingleObjectEx
InitializeCriticalSectionEx
GlobalAlloc
GlobalLock
WaitForSingleObject
OpenSemaphoreW
CreateThreadpoolTimer
GlobalHandle
GlobalFree
GlobalUnlock
GetCurrentProcessId
CreateMutexExW
CreateSemaphoreExW
LoadLibraryW
GetCurrentThread
GetCurrentProcess
Sleep
WakeAllConditionVariable
SleepConditionVariableSRW
RegisterClassA
CharPrevW
CharNextW
DestroyWindow
SetWindowPos
SetWindowLongW
CreateWindowExW
GetWindowLongW
DefWindowProcA
PostMessageA
IsWindow
CharLowerW
LoadStringW
UnregisterClassA
RegisterWindowMessageW
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetLengthSid
CopySid
GetTokenInformation
OpenProcessToken
OpenThreadToken
TraceMessage
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegEnumValueW
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorDacl
GetSecurityDescriptorDacl
GetAce
EqualSid
GetAclInformation
ReadClassStg
OleSave
StgCreateDocfileOnILockBytes
OleSaveToStream
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
StringFromGUID2
ReadClassStm
CoCreateInstance
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CLSIDFromString
CreateStreamOnHGlobal
CreateErrorInfo
VariantTimeToSystemTime
VariantCopy
SysFreeString
SysStringLen
SetErrorInfo
SystemTimeToVariantTime
SysReAllocString
VariantChangeType
SysStringByteLen
SafeArrayPutElement
VariantClear
SysAllocStringByteLen
LoadRegTypeLi
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
VarUI4FromStr
SysAllocStringLen
SysAllocString
VariantInit
MQSec_GetAnonymousSid
MQSec_GetWorldSid
MQSec_GetDefaultQueueAuthentication
MQSec_GetDefaultHashAlgorithm
MQSec_GetDefaultMessageAuthenticationLevel
MQBeginTransaction
RTXactGetDTC
MQInstanceToFormatName
MQLocateNext
MQLocateBegin
MQLocateEnd
MQGetQueueSecurity
MQSetQueueProperties
MQGetQueueProperties
MQOpenQueue
MQDeleteQueue
MQCreateQueue
MQPurgeQueue
MQCreateCursor
MQCloseCursor
MQReceiveMessage
MQReceiveMessageByLookupId
MQDeleteCursorMemory
MQCloseQueue
MQHandleToFormatName
MQPathNameToFormatName
MQACCloseCursor
MQSendMessage
MQGetSecurityContext
MQGetSecurityContextEx
MQFreeSecurityContext
MQLogHR
MQMgmtAction
MQMgmtGetInfo
MQGetPrivateComputerInformation
MQRegisterCertificate
MQFreeMemory
MQGetMachineProperties
MQADsPathToFormatName
DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
mqsnap.pdb
ord5303
ord4692
ord4074
ord5298
ord5296
ord3341
ord2388
ord3917
ord5727
ord2546
ord6371
ord3605
ord656
ord4270
ord3614
ord2406
ord3621
ord1634
ord5142
ord860
ord3714
ord793
ord2293
ord2356
ord2287
ord3133
ord4294
ord2281
ord941
ord539
ord5677
ord2809
ord926
ord859
ord3092
ord2507
ord3494
ord6484
ord2876
ord3470
ord6655
ord536
ord826
ord269
ord600
ord1240
ord1571
ord1250
ord1568
ord1570
ord342
ord1179
ord1248
ord1115
ord1194
ord1563
ord1197
ord2116
ord6195
ord1594
ord2821
ord3993
ord3991
ord6485
ord5949
ord1145
ord2914
ord2910
ord6456
ord561
ord5193
ord1089
ord2504
ord4480
ord1143
ord5710
ord4219
ord2235
ord355
ord942
ord2036
ord2440
ord5830
ord4371
ord3396
ord540
ord800
ord6466
ord4616
ord3733
ord1128
ord2717
ord3948
ord815
ord324
ord2822
ord1155
ord1165
ord1662
ord2385
ord2644
ord1560
ord268
ord1196
ord2606
ord3658
ord6390
ord326
ord4229
ord1808
ord4848
ord4992
ord2506
ord6048
ord4073
ord1767
ord4508
ord6481
ord2371
ord4253
ord6593
ord4401
ord5237
ord2377
ord5157
ord6370
ord4347
ord5283
ord3793
ord4829
ord4435
ord2640
ord2047
ord6372
ord3744
ord5059
ord1720
ord5257
ord2438
ord5273
ord2977
ord5446
ord2099
ord6928
ord6379
ord5436
ord768
ord2362
ord4155
ord3087
ord6330
ord861
ord2820
ord2634
ord4419
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3142
ord3254
ord4459
ord3131
ord5285
ord5977
ord924
ord6238
ord3088
ord2859
ord4272
ord4273
ord5679
ord4370
ord5276
ord4847
ord2637
ord2350
ord2291
ord2284
ord2854
ord2756
ord6218
ord5568
ord5268
ord5267
ord927
ord537
ord3332
ord3312
ord4124
ord6279
ord6278
ord5706
ord2755
ord3577
ord4392
ord2570
ord4213
ord2015
ord2403
ord4704
ord6024
ord2357
ord2290
ord6483
ord4709
ord6584
ord5284
ord4433
ord2046
ord3381
ord4425
ord6740
ord2520
ord6564
ord6525
ord693
ord3635
ord3365
ord4396
ord2574
ord2729
ord3798
ord3871
ord692
ord3634
ord4395
ord2573
ord4214
ord2016
ord2405
ord6362
ord1764
ord3569
ord4390
ord2567
ord795
ord567
ord3716
ord4418
ord3397
ord4831
ord5286
ord1768
ord6051
ord6211
ord940
ord925
ord922
ord535
ord858
ord641
ord616
ord609
ord4199
ord2836
ord2294
ord5155
ord5156
ord5154
ord4899
ord4736
ord4970
ord4942
ord4352
ord2078
ord5261
memcmp
__RTDynamicCast
__CxxFrameHandler3
_vsnwprintf
memcpy_s
_vsnprintf_s
??0exception@@QAE@XZ
??1exception@@UAE@XZ
memmove
memmove_s
wcsnlen
_purecall
malloc
_wcsicmp
free
realloc
?what@exception@@UBEPBDXZ
_itow_s
memcpy
??0exception@@QAE@ABV0@@Z
swscanf_s
_ui64tow_s
_except_handler4_common
_onexit
__dllonexit
_unlock
_lock
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_initterm
_amsg_exit
_XcptFilter
_CxxThrowException
memset
iswdigit
_snwscanf_s
towupper
wcstol
_wtoi
wcstoul
wcscspn
??0exception@@QAE@ABQBD@Z
wcschr
iswspace
isalpha
qsort
_wcsnicmp
_strnicmp
_wcsdup
?Add@CColumns@@QAEXABK@Z
??1CColumns@@QAE@XZ
??0CColumns@@QAE@I@Z
SetFalconKeyValue
GetFalconKeyValue
MQSec_GetAnonymousSid
MQSec_GetWorldSid
GetComputerNameInternal
IsLocalSystemCluster
??0CRestriction@@QAE@I@Z
??1CRestriction@@QAE@XZ
?AddRestriction@CRestriction@@QAEXPAU_GUID@@KK@Z
MQSec_GetAdminSid
MQSec_SetDirectorySecurityForService
MQSec_SetPrivilegeInThread
MQSec_GetProcessUserSid
MQSigCreateCertificate
MQSec_StorePubKeysInDS
GetDomainFQDNName
MSMQGetOperatingSystem
MQSec_GetUserType
MQGetResourceHandle
MQReceiveMessage
MQFreeMemory
RTRemoveUserCert
RTRemoveUserCertSid
MQGetQueueProperties
MQMgmtGetInfo
MQMgmtAction
MQGetMachineProperties
MQBeginTransaction
MQMoveMessage
MQDeleteQueue
MQGetQueueSecurity
MQSetQueueProperties
MQCreateCursor
MQOpenQueue
RTDeleteInternalCert
RTRegisterUserCert
RTGetInternalCert
RTCreateInternalCertificate
RTIsDependentClient
MQSetQueueSecurity
MQPathNameToFormatName
MQPurgeQueue
MQCreateQueue
MQCloseQueue
MQSendMessage
MQReceiveMessageByLookupId
RTGetUserCerts
MQCloseCursor
SelectPersonalCertificateForRemoval
SelectPersonalCertificateForRegister
ShowCertificate
ShowPersonalCertificates
VirtualAlloc
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
OutputDebugStringA
GetModuleFileNameW
LoadLibraryW
LoadLibraryExW
GetModuleHandleA
lstrcpynW
CreateSemaphoreExW
LeaveCriticalSection
CreateMutexExW
GetCurrentProcessId
CreateThreadpoolTimer
OpenSemaphoreW
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSectionEx
EnterCriticalSection
WaitForSingleObjectEx
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
ReleaseMutex
ReleaseSemaphore
SetLastError
ReleaseSRWLockShared
AcquireSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
OutputDebugStringW
IsDebuggerPresent
GetLastError
InitializeCriticalSectionAndSpinCount
DebugBreak
GetModuleFileNameA
GetModuleHandleExW
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
FormatMessageW
CloseHandle
LoadLibraryA
LocalAlloc
ExpandEnvironmentStringsW
FindClose
GetFileAttributesW
GetDriveTypeW
CreateDirectoryW
RemoveDirectoryW
FindFirstFileW
MoveFileW
FindNextFileW
OpenProcess
Sleep
GetComputerNameW
VirtualFree
LoadLibraryExA
EncodePointer
DecodePointer
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
lstrlenA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
WakeAllConditionVariable
SleepConditionVariableSRW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
GetVersionExW
RaiseException
GetCurrentProcess
InitializeCriticalSection
HeapDestroy
lstrcpyW
GlobalFree
GetModuleHandleW
LockResource
GetDateFormatW
GetTimeFormatW
CompareStringW
GetProcAddress
GlobalAlloc
LocalFree
CharNextW
LoadStringW
RegisterClipboardFormatW
GetDlgItem
SendMessageW
GetWindowLongW
GetParent
GetWindowRect
GetClientRect
SetWindowLongW
GetWindowTextLengthW
GetWindowTextW
EnableWindow
LoadImageW
LoadMenuW
GetSubMenu
GetMenuItemInfoW
DestroyMenu
PostMessageW
IsWindow
InsertMenuW
SetWindowTextW
GetDC
ReleaseDC
LoadIconW
ScreenToClient
SetDlgItemTextW
GetDlgItemTextW
SetActiveWindow
BringWindowToTop
FindWindowExW
GetWindowThreadProcessId
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
VarI4FromStr
SysFreeString
SysStringLen
SysAllocStringLen
GetErrorInfo
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
RegisterTypeLi
LoadTypeLi
VariantInit
VariantClear
SysAllocString
CoTaskMemRealloc
CoCreateInstance
CoTaskMemAlloc
StringFromCLSID
CreateStreamOnHGlobal
CoTaskMemFree
IIDFromString
StringFromGUID2
OleRun
CoInitialize
CLSIDFromProgID
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegQueryInfoKeyW
RegQueryValueExW
MakeSelfRelativeSD
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetLengthSid
InitializeSecurityDescriptor
TraceMessage
CopySid
OpenProcessToken
GetSecurityDescriptorDacl
GetAclInformation
GetAce
RegCreateKeyExW
EqualSid
LookupPrivilegeValueW
AdjustTokenPrivileges
ConvertSidToStringSidW
LookupAccountSidW
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
UnregisterTraceGuids
GetSecurityDescriptorLength
MapGenericMask
GetFileSecurityW
InitiateSystemShutdownExW
OpenSCManagerW
OpenServiceW
CloseServiceHandle
QueryServiceStatusEx
QueryServiceStatus
ControlService
EnumDependentServicesW
StartServiceW
TraceEvent
IsValidSid
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
GetTextExtentPoint32W
DeleteObject
CreateFontIndirectW
ord1
ord9
ord18
ord20
CertCloseStore
CertOpenStore
NetApiBufferFree
DsGetDcNameW
DsFreeNameResultW
DsCrackNamesW
CryptUIDlgSelectCertificateFromStore
CloseClusterNode
CloseCluster
OpenCluster
OpenClusterNode
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
nshwfp.pdb
memset
bsearch
_tempnam
remove
_lseek
_close
_write
_read
_errno
_open
strcpy_s
_wcsnicmp
qsort
_ui64toa_s
_i64toa_s
_ltoa_s
isprint
sprintf_s
strstr
strpbrk
_ultoa_s
_get_errno
wcstoul
_set_errno
wcsncmp
swprintf_s
_ultow_s
_snwprintf_s
_wcsicmp
wcstol
wprintf
_vsnwprintf
_vsnprintf
memcmp
memcpy
_onexit
__dllonexit
_unlock
_lock
_except_handler4_common
_initterm
malloc
free
_amsg_exit
_XcptFilter
PrintMessage
MatchEnumTag
PrintMessageFromModule
PreprocessCommand
RegisterHelper
RegisterContext
DisableThreadLibraryCalls
LoadStringW
GetProcAddress
GetModuleHandleExW
Sleep
QueryPerformanceCounter
ExitProcess
CreateProcessW
GetExitCodeProcess
TerminateProcess
GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
GetTickCount
GetSystemInfo
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
RtlIpv6AddressToStringW
RtlEthernetAddressToStringA
RtlIpv6AddressToStringA
RtlIpv4AddressToStringA
RtlIpv4StringToAddressW
RtlIpv6StringToAddressW
EtwEventWriteTransfer
RtlApplicationVerifierStop
RtlNtStatusToDosError
EtwTraceMessage
GetProcessHeap
HeapFree
HeapSize
HeapAlloc
HeapReAlloc
HeapCreate
HeapDestroy
MesDecodeBufferHandleCreate
MesEncodeDynBufferHandleCreate
UuidFromStringW
NdrMesTypeDecode2
I_RpcExceptionFilter
MesHandleFree
UuidCreate
InitializeCriticalSectionAndSpinCount
CreateEventW
EnterCriticalSection
LeaveCriticalSection
OpenEventW
WaitForSingleObject
SetEvent
DeleteCriticalSection
WideCharToMultiByte
MultiByteToWideChar
FWFreeDynamicKeywordAddressData0
FWEnumDynamicKeywordAddressesByType0
FwpmFilterSetSecurityInfoByKey0
FwpmEngineOpen0
FwpmEngineSetSecurityInfo0
IkeextSaDbSetSecurityInfo0
FwpmCalloutGetSecurityInfoByKey0
FwpmLayerEnum0
FwpmLayerCreateEnumHandle0
FwpmCalloutDestroyEnumHandle0
FwpmCalloutEnum0
FwpmFilterGetByKey0
FwpmCalloutCreateEnumHandle0
FwpmProviderContextDeleteByKey0
FwpmCalloutGetByKey0
FwpmNetEventsGetSecurityInfo0
FwpmGetAppIdFromFileName0
FwpmEngineSetOption0
FwpmCalloutSetSecurityInfoByKey0
FwpmSubLayerGetByKey0
FwpmLayerSetSecurityInfoByKey0
FwpmEngineGetOption0
FwpmProviderContextGetByKey3
FwpmProviderGetByKey0
FwpmProviderContextDestroyEnumHandle0
FwpmProviderContextGetSecurityInfoByKey0
FwpmProviderContextCreateEnumHandle0
FwpmSubLayerGetSecurityInfoByKey0
FwpmFilterGetSecurityInfoByKey0
FwpmFilterDestroyEnumHandle0
FwpmFilterEnum0
FwpmProviderUnsubscribeChanges0
FwpmProviderContextUnsubscribeChanges0
FwpmFilterCreateEnumHandle0
FwpmSubLayerUnsubscribeChanges0
FwpmCalloutUnsubscribeChanges0
FwpmFilterUnsubscribeChanges0
FwpmNetEventUnsubscribe0
FwpmNetEventSubscribe4
FwpmFilterSubscribeChanges0
FwpmCalloutSubscribeChanges0
IPsecDospStateDestroyEnumHandle0
IPsecDospStateEnum0
FwpmSubLayerSubscribeChanges0
FwpmProviderContextSubscribeChanges0
FwpmProviderSubscribeChanges0
FwpmNetEventDestroyEnumHandle0
FwpmNetEventEnum5
FwpmNetEventCreateEnumHandle0
IPsecGetStatistics1
IkeextGetStatistics1
FwpmSubLayerSubscriptionsGet0
FwpmProviderContextSubscriptionsGet0
FwpmProviderSubscriptionsGet0
FwpmNetEventSubscriptionsGet0
IPsecDospStateCreateEnumHandle0
IPsecDospGetStatistics0
FwpmFilterSubscriptionsGet0
FwpmCalloutSubscriptionsGet0
FwpmTransactionAbort0
FwpsAleEndpointDestroyEnumHandle0
FwpsAleEndpointEnum0
FwpsAleEndpointCreateEnumHandle0
IPsecSaContextDestroyEnumHandle0
IPsecSaContextEnum1
IPsecSaContextCreateEnumHandle0
IkeextSaDestroyEnumHandle0
IkeextSaEnum2
IkeextSaCreateEnumHandle0
FwpmSubLayerDestroyEnumHandle0
FwpmSubLayerEnum0
FwpmSubLayerCreateEnumHandle0
FwpmTransactionCommit0
FwpmTransactionBegin0
FwpmEngineGetSecurityInfo0
FwpmProviderContextAdd3
FwpmProviderGetSecurityInfoByKey0
FwpmNetEventsLost0
IPsecSaDbGetSecurityInfo0
FwpmEngineClose0
FwpmLayerGetSecurityInfoByKey0
FwpmSessionDestroyEnumHandle0
FwpmFilterAdd0
FwpmSessionEnum0
FwpmProviderContextSetSecurityInfoByKey0
FwpmSessionCreateEnumHandle0
FwpmProviderDestroyEnumHandle0
FwpmProviderEnum0
FwpmNetEventsSetSecurityInfo0
FwpmProviderCreateEnumHandle0
FwpmSubLayerSetSecurityInfoByKey0
FwpmSystemPortsGet0
FwpmLayerDestroyEnumHandle0
FwpmFreeMemory0
IPsecSaDbSetSecurityInfo0
FwpmFilterDeleteByKey0
IkeextSaDbGetSecurityInfo0
FwpmProviderSetSecurityInfoByKey0
FwpmProviderContextEnum3
NsiSetAllParameters
NsiGetAllParameters
QueryServiceStatusEx
GetConsoleOutputCP
GetStdHandle
GetFileAttributesA
WriteFile
DeleteFileW
DeleteFileA
CreateFileA
GetFileInformationByHandle
FileTimeToLocalFileTime
CreateFileW
CloseServiceHandle
OpenSCManagerW
OpenServiceW
GetLengthSid
FormatMessageW
AttachConsole
ConvertStringSidToSidW
ConvertSidToStringSidW
ConvertSecurityDescriptorToStringSecurityDescriptorW
CloseHandle
LocalFree
LocalAlloc
PathFindExtensionW
GetAdaptersAddresses
FileTimeToSystemTime
CertNameToStrW
CertFreeCertificateContext
CertGetNameStringW
CertCreateCertificateContext
LsaQueryInformationPolicy
LsaFreeMemory
LsaOpenPolicy
LsaClose
LookupAccountNameW
ControlTraceW
StartTraceW
EnableTrace
ord11
ord13
ord14
ord10
FileTimeToDosDateTime
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumValueW
RegCloseKey
RegQueryValueExW
IdpConfigAddPolicy
IdpConfigAllocateAndGetPolicy
IdpConfigFreePolicy
IdpConfigInitDefaultPolicy
IdpConfigRemovePolicy
InitHelperDll
WfpCaptureExportedW
WfpCaptureStop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ