Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Overview
overview
7Static
static
3fb6bcec103...18.exe
windows7-x64
7fb6bcec103...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...in.dll
windows7-x64
3$PLUGINSDI...in.dll
windows10-2004-x64
3$TEMP/$R0.dll
windows7-x64
3$TEMP/$R0.dll
windows10-2004-x64
3$TEMP/Algo...ib.dll
windows7-x64
3$TEMP/Algo...ib.dll
windows10-2004-x64
3$TEMP/EfiMon.sys
windows7-x64
1$TEMP/EfiMon.sys
windows10-2004-x64
1$TEMP/Safe...rl.dll
windows7-x64
3$TEMP/Safe...rl.dll
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
fb6bcec103fa23a48fefec137b4221af_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb6bcec103fa23a48fefec137b4221af_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/nsplugin.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/nsplugin.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$TEMP/$R0.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
$TEMP/$R0.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
$TEMP/AlgorithmLib.dll
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
$TEMP/AlgorithmLib.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
$TEMP/EfiMon.sys
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
$TEMP/EfiMon.sys
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
$TEMP/SafeDriverCtrl.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
$TEMP/SafeDriverCtrl.dll
Resource
win10v2004-20240802-en
Target
fb6bcec103fa23a48fefec137b4221af_JaffaCakes118
Size
21.9MB
MD5
fb6bcec103fa23a48fefec137b4221af
SHA1
d5c4ac52f85c8b2d275a0bc98e8047a5b6c4eab1
SHA256
1ca8bf7b0f58c43a8b55efeab9266b01a3e69397662fa85b50497037964c4e35
SHA512
159cc0e37844d8dd3c70fc9e7590365db1a887fb9c49da9052532a1f1f3b392eb1bf576c140e570bb4f5b592969ad637eac137008eb7a2c4a20c154e95229717
SSDEEP
393216:PGQAoF8pO4ymLAmS6y37P83kOONpMN/P3Wgmw99Vn/e04:PZrF8c4ymu6yg0O7PP99V/
Checks for missing Authenticode signature.
resource |
---|
unpack001/$PLUGINSDIR/InstallOptions.dll |
unpack001/$PLUGINSDIR/NSISdl.dll |
unpack001/$PLUGINSDIR/System.dll |
unpack001/$PLUGINSDIR/nsplugin.dll |
resource | yara_rule |
---|---|
sample | nsis_installer_1 |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc
MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect
SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
CoTaskMemFree
dialog
initDialog
show
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WaitForSingleObject
lstrcpynA
lstrlenA
lstrcatA
GlobalAlloc
GlobalFree
CloseHandle
GetTickCount
DeleteFileA
Sleep
WriteFile
CreateFileA
lstrcmpiA
lstrcpyA
MulDiv
CreateThread
CharPrevA
SetWindowLongA
RegisterWindowMessageA
CallWindowProcA
DestroyWindow
EnableWindow
GetWindowLongA
CreateWindowExA
GetWindowRect
GetClientRect
ShowWindow
IsWindowVisible
GetFocus
GetDlgItem
FindWindowExA
SetWindowTextA
SendMessageA
wsprintfA
SetDlgItemTextA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
gethostbyname
inet_addr
ioctlsocket
htons
socket
closesocket
shutdown
connect
__WSAFDIsSet
select
recv
WSAGetLastError
send
WSACleanup
WSAStartup
download
download_quiet
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalAlloc
GlobalFree
GlobalSize
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetLastError
VirtualAlloc
VirtualProtect
wsprintfA
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FindNextFileA
lstrcmpiA
FindFirstFileA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetFileAttributesExA
MoveFileExA
DeleteFileA
SuspendThread
Module32NextW
Module32FirstW
FindClose
GetProcAddress
GetModuleHandleA
Thread32Next
Thread32First
Sleep
GlobalFree
lstrcpyA
FreeLibrary
LoadLibraryA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetSystemWindowsDirectoryA
OpenProcess
TerminateProcess
GetLongPathNameA
GetCurrentProcess
OpenThread
CloseHandle
FindWindowA
GetWindowThreadProcessId
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCloseKey
RegEnumValueA
RegOpenKeyExA
OpenProcessToken
PathFileExistsA
PathAppendA
PathRemoveFileSpecA
PathRemoveBackslashA
PathCombineA
StrChrA
StrCmpNA
GetModuleFileNameExA
EnumProcesses
GetModuleBaseNameA
EnumProcessModules
_wcsicmp
fopen
fclose
_vsnprintf
_except_handler3
memset
_mbslwr
_mbscmp
strchr
CheckCompSoft
GetCID
KillLeakFixer
KillProcess
RegVer2IniVer
RemoveCompSoft
RemoveCompSoft2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
e:\building\efimon_sys\objfre_w2K_x86\i386\EfiMon.pdb
ExFreePool
ZwQueryValueKey
ExAllocatePoolWithTag
wcslen
RtlInitUnicodeString
ZwReadFile
ZwQueryInformationFile
IoCreateFile
ZwClose
ZwQueryKey
ZwOpenKey
ZwCreateKey
NtBuildNumber
PsGetVersion
KeSetEvent
KeWaitForSingleObject
ExQueueWorkItem
KeInitializeEvent
ZwLoadDriver
IofCompleteRequest
IofCallDriver
ObfDereferenceObject
IoBuildDeviceIoControlRequest
IoGetDeviceObjectPointer
ZwQuerySystemInformation
MmUserProbeAddress
MmIsAddressValid
ZwFlushKey
ZwDeleteKey
ZwSetValueKey
RtlAppendUnicodeStringToString
SeSinglePrivilegeCheck
IoDeleteDevice
IoCreateSymbolicLink
IoCreateDevice
KeTickCount
KeBugCheckEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameW
LoadStringW
LoadStringA
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
_adjust_fdiv
malloc
_initterm
free
memset
wcsstr
_vsnwprintf
??3@YAXPAX@Z
_wcsupr
Get360SafeVersion
Get360SafeVersionEx
GetExTitleA
GetExTitleW
IsBetaVersion
VerifyFiles
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTickCount
DisableThreadLibraryCalls
DeleteFileW
SetFileAttributesW
WideCharToMultiByte
CreateDirectoryW
SystemTimeToFileTime
GlobalAlloc
GlobalFree
SetFilePointer
ReadFile
lstrcmpA
LocalFileTimeToFileTime
MultiByteToWideChar
lstrlenA
lstrcpyA
GetLastError
CreateDirectoryA
CloseHandle
IsBadReadPtr
GetCurrentDirectoryA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
CreateFileA
CreateFileW
DuplicateHandle
GetCurrentProcess
lstrcmpiA
SetFileTime
WriteFile
FileTimeToSystemTime
GetLocalTime
GetFileSize
GetFileInformationByHandle
lstrlenW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
FindClose
FindNextFileW
FindFirstFileW
lstrcpyW
RtlUnwind
HeapFree
HeapAlloc
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
RaiseException
TerminateProcess
IsDebuggerPresent
GetConsoleCP
GetConsoleMode
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
FlushFileBuffers
SetHandleCount
GetFileType
GetStartupInfoA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetEndOfFile
GetProcessHeap
GetDesktopWindow
??0CAes@@QAE@AAV0@@Z
??0CAes@@QAE@PAVDQWORD@@W4etMode@0@W4etDirection@0@W4etKeyLength@0@@Z
??0CAes@@QAE@XZ
??0CAesWrap@@QAE@HH@Z
??0CLiteZip@@QAE@XZ
??0CSha1@@QAE@XZ
??0THash@@QAE@PAEH@Z
??0THash@@QAE@XZ
??0THash@@QAE@_K@Z
??0THmac@@QAE@AAV0@@Z
??0THmac@@QAE@XZ
??1CAes@@QAE@XZ
??1CAesWrap@@QAE@XZ
??1CLiteZip@@QAE@XZ
??1CSha1@@QAE@XZ
??4CAes@@QAEAAV0@AAV0@@Z
??4CAesWrap@@QAEAAV0@ABV0@@Z
??4CLiteZip@@QAEAAV0@ABV0@@Z
??4CSha1@@QAEAAV0@ABV0@@Z
??4THash@@QAEAAV0@ABV0@@Z
??4THmac@@QAEAAV0@AAV0@@Z
??4THmac@@QAEAAV0@AAVTHash@@@Z
??HTHash@@QAEAAV0@AAV0@@Z
?AddDir@CLiteZip@@QAEKPA_W@Z
?Extract@CLiteZip@@QAEKPA_W0@Z
?Extract@CLiteZip@@QAEKPA_W@Z
?GetKey@CAesWrap@@QAEPAEXZ
?GetKeyHash2@CSha1@@QAE?AVDQWORD@@PAEH@Z
?GetKeyHash@CSha1@@QAEPAVDQWORD@@PAEH@Z
?GetSalt@CAesWrap@@QAEPAEXZ
?GetWrap@CAesWrap@@QAEPAEXZ
?Hmac@THash@@QAEPAVTHmac@@XZ
?Init@CAes@@QAEXPAVDQWORD@@W4etMode@1@W4etDirection@1@W4etKeyLength@1@@Z
?KeyHash@THash@@QAEPAVDQWORD@@XZ
?SetIV@CAes@@QAEXPAVDQWORD@@@Z
?UnWrap@CAesWrap@@QAEHPAX00@Z
?Wrap@CAesWrap@@QAEXPAX00@Z
?Xblock@CAes@@QAEHPAVDQWORD@@0K@Z
?m_aoKeyWrapA@CAesWrap@@0PAEA
GetAlgorithmInterface
SHA1Final
SHA1Init
SHA1Transform
SHA1Update
adler32
compress
compress2
crc32
deflate
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflateReset
deflateSetDictionary
get_crc_table
gzclose
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzwrite
inflate
inflateEnd
inflateInit2_
inflateInit_
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
uncompress
zError
zlibVersion
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
e:\building\efimon_sys\objfre_w2K_x86\i386\EfiMon.pdb
ExFreePool
ZwQueryValueKey
ExAllocatePoolWithTag
wcslen
RtlInitUnicodeString
ZwReadFile
ZwQueryInformationFile
IoCreateFile
ZwClose
ZwQueryKey
ZwOpenKey
ZwCreateKey
NtBuildNumber
PsGetVersion
KeSetEvent
KeWaitForSingleObject
ExQueueWorkItem
KeInitializeEvent
ZwLoadDriver
IofCompleteRequest
IofCallDriver
ObfDereferenceObject
IoBuildDeviceIoControlRequest
IoGetDeviceObjectPointer
ZwQuerySystemInformation
MmUserProbeAddress
MmIsAddressValid
ZwFlushKey
ZwDeleteKey
ZwSetValueKey
RtlAppendUnicodeStringToString
SeSinglePrivilegeCheck
IoDeleteDevice
IoCreateSymbolicLink
IoCreateDevice
KeTickCount
KeBugCheckEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
WideCharToMultiByte
FlushFileBuffers
SetFilePointer
SetEndOfFile
SetFilePointerEx
GetVolumeInformationW
GetVolumePathNameW
DeleteFileW
WriteFile
GetTickCount
GetModuleFileNameW
SetLastError
InterlockedDecrement
lstrlenW
QueryDosDeviceW
DebugBreak
OutputDebugStringW
lstrlenA
InterlockedIncrement
WritePrivateProfileStringW
DefineDosDeviceW
GetSystemDirectoryW
GetProcAddress
GetFileAttributesW
CopyFileW
HeapSize
GetLocaleInfoA
FreeLibrary
LoadLibraryW
ReleaseMutex
CreateMutexW
WaitForSingleObject
GetCurrentProcess
TerminateProcess
GetProcessHeap
InitializeCriticalSectionAndSpinCount
LoadLibraryA
RaiseException
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
CloseHandle
DeviceIoControl
CreateFileW
GetLastError
Sleep
SetFileAttributesW
VirtualFree
VirtualAlloc
GetFileSize
ReadFile
HeapFree
HeapAlloc
GetConsoleCP
GetConsoleMode
RtlUnwind
MultiByteToWideChar
GetCurrentThreadId
GetCommandLineA
GetModuleHandleW
ExitProcess
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapDestroy
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetHandleCount
GetFileType
GetStartupInfoA
SetStdHandle
CreateFileA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
EnumWindows
GetClassNameW
SendMessageW
FindWindowW
CharNextW
wvsprintfW
PostMessageW
GetActiveWindow
MessageBoxW
DeleteService
OpenServiceW
StartServiceW
CloseServiceHandle
OpenSCManagerW
ControlService
QueryServiceStatusEx
SHChangeNotify
ShellExecuteW
PathIsDirectoryW
PathRemoveFileSpecW
PathCombineW
PathFileExistsW
SHA1Final
SHA1Update
SHA1Init
??1CAesWrap@@QAE@XZ
?Wrap@CAesWrap@@QAEXPAX00@Z
??0CAesWrap@@QAE@HH@Z
??1CSha1@@QAE@XZ
?GetKeyHash@CSha1@@QAEPAVDQWORD@@PAEH@Z
??0CSha1@@QAE@XZ
?GetWrap@CAesWrap@@QAEPAEXZ
GetSafeDriverCtrlInterface
InstallSys
IsProcessRunning
UnloadAll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ