filenamewcp.dll
size3986752 (0x3cd540)
md5465f13cf9e0db8fee6e92296615921b4
typePE32+ executable (DLL) (console) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
2573079512
1473072999
101582
2603079510
259307955
2613079521
256307951
26430795423
253307951
255307951
258307951

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections8
TimeDateStamp0x1194bc34
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion14.30
SizeOfCode0x2c3000
SizeOfInitializedData0x10d000
SizeOfUninitializedData0
AddressOfEntryPoint0x812a0
BaseOfCode0x1000
ImageBase0x180000000
SectionAlignment0x1000
FileAlignment0x1000
OperatingSystemVersion10.0
ImageVersion10.0
SubsystemVersion6.1
Reserved10
SizeOfImage0x3d1000
SizeOfHeaders0x1000
CheckSum0x3dbd7f
Subsystem3
DllCharacteristics0x4160
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x2be2dc0x2bf000R-X CODE
PAGE0x2c00000x25270x3000R-X CODE
PAGECMRC0x2c30000x820x1000R-X CODE
.rdata0x2c40000xdea1c0xdf000R-- IDATA
.data0x3a30000xc8600x7000RW- IDATA
.pdata0x3b00000x18d980x19000R-- IDATA
.rsrc0x3c90000x27d00x3000R-- IDATA
.reloc0x3cc0000x48a80x5000R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x3934d00xb2f0
IMPORT0x39e7c00x3c0
RESOURCE0x3c90000x27d0
EXCEPTION0x3b00000x18d98
SECURITY0x3cb0000x2540
BASERELOC0x3cc0000x48a8
DEBUG0x3827400x70
ARCHITECTURE00
GLOBALPTR00
TLS0x2e4db00x28
LOAD_CONFIG0x2e4c700x140
Bound_IAT00
IAT0x2e4dd80x1058
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x1803847500x18038475c0x1803aa5000x1802e5f4800x300000
typenamesizecp
VERSION#19560
#614#190660
module_namehintordfunction_name
api-ms-win-crt-runtime-l1-1-0.dll54_initterm
api-ms-win-crt-runtime-l1-1-0.dll55_initterm_e
api-ms-win-crt-private-l1-1-0.dll315_o__i64tow_s
api-ms-win-crt-private-l1-1-0.dll316_o__initialize_narrow_environment
api-ms-win-crt-private-l1-1-0.dll317_o__initialize_onexit_table
api-ms-win-crt-private-l1-1-0.dll319_o__invalid_parameter_noinfo
api-ms-win-crt-private-l1-1-0.dll593_o__register_onexit_function
api-ms-win-crt-private-l1-1-0.dll601_o__seh_filter_dll
api-ms-win-crt-private-l1-1-0.dll686_o__ui64tow_s
api-ms-win-crt-private-l1-1-0.dll689_o__ultow
api-ms-win-crt-private-l1-1-0.dll690_o__ultow_s
api-ms-win-crt-private-l1-1-0.dll717_o__wcsicmp
api-ms-win-crt-private-l1-1-0.dll721_o__wcslwr
api-ms-win-crt-private-l1-1-0.dll727_o__wcsnicmp
api-ms-win-crt-private-l1-1-0.dll737_o__wcstoi64
api-ms-win-crt-private-l1-1-0.dll744_o__wcstoui64
api-ms-win-crt-private-l1-1-0.dll748_o__wcsupr
api-ms-win-crt-private-l1-1-0.dll857_o_bsearch
api-ms-win-crt-private-l1-1-0.dll1124memmove
api-ms-win-crt-private-l1-1-0.dll888_o_fflush
api-ms-win-crt-private-l1-1-0.dll909_o_free
api-ms-win-crt-private-l1-1-0.dll944_o_iswctype
api-ms-win-crt-private-l1-1-0.dll984_o_malloc
api-ms-win-crt-private-l1-1-0.dll995_o_memcpy_s
api-ms-win-crt-private-l1-1-0.dll1018_o_qsort
api-ms-win-crt-private-l1-1-0.dll1058_o_strcpy_s
api-ms-win-crt-private-l1-1-0.dll1084_o_tolower
api-ms-win-crt-private-l1-1-0.dll1085_o_toupper
api-ms-win-crt-private-l1-1-0.dll1092_o_wcscat_s
api-ms-win-crt-private-l1-1-0.dll1095_o_wcscpy_s
api-ms-win-crt-private-l1-1-0.dll1098_o_wcsncpy_s
api-ms-win-crt-private-l1-1-0.dll1104_o_wcstok_s
api-ms-win-crt-private-l1-1-0.dll1110_o_wcstoul
api-ms-win-crt-private-l1-1-0.dll194_o__execute_onexit_table
api-ms-win-crt-private-l1-1-0.dll192_o__errno
api-ms-win-crt-private-l1-1-0.dll167_o__crt_atexit
api-ms-win-crt-private-l1-1-0.dll160_o__configure_narrow_argv
api-ms-win-crt-private-l1-1-0.dll147_o__cexit
api-ms-win-crt-private-l1-1-0.dll122_o__aligned_malloc
api-ms-win-crt-private-l1-1-0.dll121_o__aligned_free
api-ms-win-crt-private-l1-1-0.dll1132wcsrchr
api-ms-win-crt-private-l1-1-0.dll115_o___stdio_common_vswscanf
api-ms-win-crt-private-l1-1-0.dll114_o___stdio_common_vswprintf_s
api-ms-win-crt-private-l1-1-0.dll112_o___stdio_common_vswprintf
api-ms-win-crt-private-l1-1-0.dll111_o___stdio_common_vsscanf
api-ms-win-crt-private-l1-1-0.dll1129strstr
api-ms-win-crt-private-l1-1-0.dll1131wcschr
api-ms-win-crt-private-l1-1-0.dll108_o___stdio_common_vsprintf
api-ms-win-crt-private-l1-1-0.dll107_o___stdio_common_vsnwprintf_s
api-ms-win-crt-private-l1-1-0.dll1133wcsstr
api-ms-win-crt-private-l1-1-0.dll1128strrchr
api-ms-win-crt-private-l1-1-0.dll106_o___stdio_common_vsnprintf_s
api-ms-win-crt-private-l1-1-0.dll102_o___stdio_common_vfwprintf
api-ms-win-crt-private-l1-1-0.dll96_o___std_type_info_destroy_list
api-ms-win-crt-private-l1-1-0.dll67_o___acrt_iob_func
api-ms-win-crt-private-l1-1-0.dll1127strchr
api-ms-win-crt-private-l1-1-0.dll12__C_specific_handler
api-ms-win-crt-private-l1-1-0.dll1122memcmp
api-ms-win-crt-private-l1-1-0.dll1123memcpy
api-ms-win-crt-string-l1-1-0.dll130memmove_s
api-ms-win-crt-string-l1-1-0.dll131memset
api-ms-win-crt-string-l1-1-0.dll142strncmp
api-ms-win-crt-string-l1-1-0.dll169wcsnlen
RPCRT4.dll547UuidFromStringW
RPCRT4.dll551UuidToStringW
RPCRT4.dll533RpcStringFreeW
api-ms-win-core-registry-l1-1-0.dll3RegCreateKeyExW
api-ms-win-core-registry-l1-1-0.dll18RegGetValueW
api-ms-win-core-registry-l1-1-0.dll40RegSetValueExW
api-ms-win-core-registry-l1-1-0.dll9RegDeleteValueW
api-ms-win-core-registry-l1-1-0.dll33RegQueryValueExW
api-ms-win-core-registry-l1-1-0.dll28RegOpenKeyExW
api-ms-win-core-registry-l1-1-0.dll15RegFlushKey
api-ms-win-core-registry-l1-1-0.dllRegCloseKey
api-ms-win-core-libraryloader-l1-1-0.dll7GetModuleFileNameA
api-ms-win-core-libraryloader-l1-1-0.dll16LoadResource
api-ms-win-core-libraryloader-l1-1-0.dll22SizeofResource
api-ms-win-core-libraryloader-l1-1-0.dll13GetProcAddress
api-ms-win-core-libraryloader-l1-1-0.dll11GetModuleHandleExW
api-ms-win-core-libraryloader-l1-1-0.dll2FindResourceExW
api-ms-win-core-libraryloader-l1-1-0.dll10GetModuleHandleExA
api-ms-win-core-libraryloader-l1-1-0.dll15LoadLibraryExW
api-ms-win-core-libraryloader-l1-1-0.dll12GetModuleHandleW
api-ms-win-core-libraryloader-l1-1-0.dll8GetModuleFileNameW
api-ms-win-core-libraryloader-l1-1-0.dll4FreeLibrary
api-ms-win-core-libraryloader-l1-1-0.dll19LockResource
api-ms-win-core-rtlsupport-l1-1-0.dll1RtlCaptureContext
api-ms-win-core-rtlsupport-l1-1-0.dll9RtlRaiseException
api-ms-win-core-rtlsupport-l1-1-0.dll7RtlLookupFunctionEntry
api-ms-win-core-rtlsupport-l1-1-0.dll2RtlCaptureStackBackTrace
api-ms-win-core-rtlsupport-l1-1-0.dll13RtlVirtualUnwind
api-ms-win-core-rtlsupport-l1-1-0.dll3RtlCompareMemory
api-ms-win-core-rtlsupport-l1-1-0.dll8RtlPcToFileHeader
api-ms-win-eventing-provider-l1-1-0.dll5EventUnregister
api-ms-win-eventing-provider-l1-1-0.dll9EventWriteTransfer
api-ms-win-eventing-provider-l1-1-0.dll3EventRegister
api-ms-win-eventing-provider-l1-1-0.dllEventActivityIdControl
api-ms-win-core-profile-l1-1-0.dllQueryPerformanceCounter
api-ms-win-core-processthreads-l1-1-0.dll28OpenThreadToken
api-ms-win-core-processthreads-l1-1-0.dll12GetCurrentThread
api-ms-win-core-processthreads-l1-1-0.dll26OpenProcessToken
api-ms-win-core-processthreads-l1-1-0.dll5CreateThread
api-ms-win-core-processthreads-l1-1-0.dll47TlsSetValue
api-ms-win-core-processthreads-l1-1-0.dll2CreateProcessW
api-ms-win-core-processthreads-l1-1-0.dll10GetCurrentProcess
api-ms-win-core-processthreads-l1-1-0.dll42TerminateProcess
api-ms-win-core-processthreads-l1-1-0.dll14GetExitCodeProcess
api-ms-win-core-processthreads-l1-1-0.dll11GetCurrentProcessId
api-ms-win-core-processthreads-l1-1-0.dll45TlsFree
api-ms-win-core-processthreads-l1-1-0.dll13GetCurrentThreadId
api-ms-win-core-processthreads-l1-1-0.dll44TlsAlloc
api-ms-win-core-processthreads-l1-1-0.dll46TlsGetValue
api-ms-win-core-sysinfo-l1-1-0.dll10GetSystemTimeAsFileTime
api-ms-win-core-sysinfo-l1-1-0.dll7GetSystemInfo
api-ms-win-core-sysinfo-l1-1-0.dll17GetVersionExW
api-ms-win-core-sysinfo-l1-1-0.dll20GlobalMemoryStatusEx
api-ms-win-core-sysinfo-l1-1-0.dll14GetTickCount64
api-ms-win-core-interlocked-l1-1-0.dllInitializeSListHead
api-ms-win-core-debug-l1-1-0.dllDebugBreak
api-ms-win-core-debug-l1-1-0.dll3OutputDebugStringW
api-ms-win-core-debug-l1-1-0.dll1IsDebuggerPresent
api-ms-win-core-errorhandling-l1-1-0.dll2RaiseException
api-ms-win-core-errorhandling-l1-1-0.dll6UnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-0.dll1GetLastError
api-ms-win-core-errorhandling-l1-1-0.dll4SetLastError
api-ms-win-core-errorhandling-l1-1-0.dll5SetUnhandledExceptionFilter
api-ms-win-core-processthreads-l1-1-1.dll9IsProcessorFeaturePresent
api-ms-win-core-com-l1-1-0.dll61CoTaskMemAlloc
api-ms-win-core-com-l1-1-0.dll62CoTaskMemFree
api-ms-win-core-localization-l1-2-0.dll7FormatMessageW
api-ms-win-core-heap-l1-1-0.dllGetProcessHeap
api-ms-win-core-heap-l1-1-0.dll2HeapAlloc
api-ms-win-core-heap-l1-1-0.dll6HeapFree
api-ms-win-core-synch-l1-1-0.dll23OpenSemaphoreW
api-ms-win-core-synch-l1-1-0.dll26ReleaseSRWLockExclusive
api-ms-win-core-synch-l1-1-0.dll29ResetEvent
api-ms-win-core-synch-l1-1-0.dllAcquireSRWLockExclusive
api-ms-win-core-synch-l1-1-0.dll6CreateEventW
api-ms-win-core-synch-l1-1-0.dll38WaitForMultipleObjectsEx
api-ms-win-core-synch-l1-1-0.dll1AcquireSRWLockShared
api-ms-win-core-synch-l1-1-0.dll16InitializeCriticalSectionAndSpinCount
api-ms-win-core-synch-l1-1-0.dll31SetEvent
api-ms-win-core-synch-l1-1-0.dll27ReleaseSRWLockShared
api-ms-win-core-synch-l1-1-0.dll28ReleaseSemaphore
api-ms-win-core-synch-l1-1-0.dll25ReleaseMutex
api-ms-win-core-synch-l1-1-0.dll40WaitForSingleObjectEx
api-ms-win-core-synch-l1-1-0.dll14EnterCriticalSection
api-ms-win-core-synch-l1-1-0.dll17InitializeCriticalSectionEx
api-ms-win-core-synch-l1-1-0.dll9CreateMutexExW
api-ms-win-core-synch-l1-1-0.dll13DeleteCriticalSection
api-ms-win-core-synch-l1-1-0.dll19LeaveCriticalSection
api-ms-win-core-synch-l1-1-0.dll11CreateSemaphoreExW
api-ms-win-core-synch-l1-1-0.dll39WaitForSingleObject
api-ms-win-core-handle-l1-1-0.dllCloseHandle
api-ms-win-core-handle-l1-1-0.dll2DuplicateHandle
api-ms-win-core-threadpool-l1-2-0.dll6CloseThreadpoolTimer
api-ms-win-core-threadpool-l1-2-0.dll34WaitForThreadpoolTimerCallbacks
api-ms-win-core-threadpool-l1-2-0.dll26SetThreadpoolTimer
api-ms-win-core-threadpool-l1-2-0.dll12CreateThreadpoolTimer
api-ms-win-core-synch-l1-2-0.dll9Sleep
api-ms-win-core-sysinfo-l1-2-0.dll3GetProductInfo
api-ms-win-core-sysinfo-l1-2-0.dll1GetNativeSystemInfo
api-ms-win-core-sysinfo-l1-2-0.dll8VerSetConditionMask
api-ms-win-eventing-legacy-l1-1-0.dll5FlushTraceW
api-ms-win-core-heap-obsolete-l1-1-0.dll8LocalAlloc
api-ms-win-core-heap-obsolete-l1-1-0.dll12LocalReAlloc
api-ms-win-core-heap-obsolete-l1-1-0.dll10LocalFree
api-ms-win-security-base-l1-1-0.dll55GetSidLengthRequired
api-ms-win-security-base-l1-1-0.dll31CreateWellKnownSid
api-ms-win-security-base-l1-1-0.dll56GetSidSubAuthority
api-ms-win-security-base-l1-1-0.dll41GetAce
api-ms-win-security-base-l1-1-0.dll58GetTokenInformation
api-ms-win-security-base-l1-1-0.dll65InitializeSid
api-ms-win-security-base-l1-1-0.dll70IsValidSid
api-ms-win-security-base-l1-1-0.dll63InitializeAcl
api-ms-win-security-base-l1-1-0.dll88SetPrivateObjectSecurityEx
api-ms-win-security-base-l1-1-0.dll45GetLengthSid
api-ms-win-security-base-l1-1-0.dll69IsValidSecurityDescriptor
api-ms-win-security-base-l1-1-0.dll33DestroyPrivateObjectSecurity
api-ms-win-security-base-l1-1-0.dll50GetSecurityDescriptorLength
api-ms-win-security-base-l1-1-0.dll92SetSecurityDescriptorGroup
api-ms-win-security-base-l1-1-0.dll74MakeSelfRelativeSD
api-ms-win-security-base-l1-1-0.dll7AddAccessAllowedAce
api-ms-win-security-base-l1-1-0.dll29CreatePrivateObjectSecurityWithMultipleInheritance
api-ms-win-security-base-l1-1-0.dll64InitializeSecurityDescriptor
api-ms-win-security-base-l1-1-0.dll47GetSecurityDescriptorControl
api-ms-win-security-base-l1-1-0.dll93SetSecurityDescriptorOwner
api-ms-win-security-base-l1-1-0.dll91SetSecurityDescriptorDacl
api-ms-win-core-kernel32-legacy-l1-1-0.dll38LoadLibraryA
api-ms-win-core-kernel32-legacy-l1-1-0.dll39LoadLibraryW
api-ms-win-security-provider-l1-1-0.dll1GetNamedSecurityInfoW
api-ms-win-core-file-l1-1-0.dll41GetFinalPathNameByHandleW
api-ms-win-core-file-l1-1-0.dll4CreateFileW
api-ms-win-core-file-l1-1-0.dll64SetFileAttributesW
api-ms-win-core-file-l1-1-0.dll72WriteFile
api-ms-win-core-file-l1-1-0.dll7DeleteFileW
api-ms-win-core-file-l1-1-0.dll62SetEndOfFile
api-ms-win-core-file-l1-1-0.dll24FlushFileBuffers
api-ms-win-core-file-l1-1-0.dll67SetFilePointerEx
api-ms-win-core-file-l1-1-0.dll37GetFileSizeEx
api-ms-win-core-file-l1-1-0.dll34GetFileAttributesW
api-ms-win-core-file-l1-1-0.dll57ReadFile
api-ms-win-core-namedpipe-l1-1-0.dll2CreatePipe
api-ms-win-core-processenvironment-l1-1-0.dll11GetEnvironmentVariableW
api-ms-win-core-kernel32-legacy-l1-1-1.dll14VerifyVersionInfoW
api-ms-win-core-string-l1-1-0.dll2CompareStringW
api-ms-win-core-file-l2-1-0.dll6MoveFileExW
api-ms-win-service-management-l1-1-0.dll5OpenServiceW
api-ms-win-service-management-l1-1-0.dll3DeleteService
api-ms-win-service-management-l1-1-0.dll4OpenSCManagerW
api-ms-win-service-management-l1-1-0.dllCloseServiceHandle
api-ms-win-service-management-l1-1-0.dll6StartServiceW
api-ms-win-service-winsvc-l1-1-0.dll20QueryServiceStatus
api-ms-win-service-winsvc-l1-1-0.dll2ControlService
api-ms-win-security-lsalookup-l2-1-0.dll1LookupAccountSidW
api-ms-win-security-cryptoapi-l1-1-0.dll1CryptAcquireContextW
api-ms-win-security-cryptoapi-l1-1-0.dll15CryptExportKey
api-ms-win-security-cryptoapi-l1-1-0.dll6CryptDestroyHash
api-ms-win-security-cryptoapi-l1-1-0.dll20CryptGetHashParam
api-ms-win-security-cryptoapi-l1-1-0.dllCryptAcquireContextA
api-ms-win-security-cryptoapi-l1-1-0.dll3CryptCreateHash
api-ms-win-security-cryptoapi-l1-1-0.dll27CryptReleaseContext
api-ms-win-security-cryptoapi-l1-1-0.dll7CryptDestroyKey
api-ms-win-security-cryptoapi-l1-1-0.dll24CryptHashData
api-ms-win-core-string-obsolete-l1-1-0.dll1lstrcmpA
api-ms-win-core-localization-obsolete-l1-2-0.dllCompareStringA
api-ms-win-core-libraryloader-l1-1-1.dll1EnumResourceLanguagesExW
api-ms-win-core-file-l1-2-0.dll1GetTempPathW
api-ms-win-security-lsapolicy-l1-1-0.dll15LsaQueryInformationPolicy
api-ms-win-security-lsapolicy-l1-1-0.dll1LsaClose
api-ms-win-security-lsapolicy-l1-1-0.dll13LsaOpenPolicy
api-ms-win-security-lsapolicy-l1-1-0.dll5LsaFreeMemory
ntdll.dll978RtlEqualUnicodeString
ntdll.dll1058RtlGetControlSecurityDescriptor
ntdll.dll1291RtlMakeSelfRelativeSD
ntdll.dll1462RtlSetControlSecurityDescriptor
ntdll.dll744RtlAnsiCharToUnicodeChar
ntdll.dll1570RtlUnicodeToMultiByteN
ntdll.dll1249RtlIsTextUnicode
ntdll.dll1571RtlUnicodeToMultiByteSize
ntdll.dll825RtlConvertSidToUnicodeString
ntdll.dll212NtAllocateLocallyUniqueId
ntdll.dll491NtQueryInformationToken
ntdll.dll1264RtlLengthRequiredSid
ntdll.dll1041RtlFreeSid
ntdll.dll1542RtlTimeToTimeFields
ntdll.dll429NtOpenKey
ntdll.dll941RtlDosPathNameToNtPathName_U
ntdll.dll123LdrGetDllHandleEx
ntdll.dll1296RtlMultiByteToUnicodeN
ntdll.dll1297RtlMultiByteToUnicodeSize
ntdll.dll1031RtlFormatCurrentUserKeyPath
ntdll.dll1589RtlUpcaseUnicodeChar
ntdll.dll947RtlDowncaseUnicodeChar
ntdll.dll35DbgPrintEx
ntdll.dll1399RtlReAllocateHeap
ntdll.dll1292RtlMapGenericMask
ntdll.dll1108RtlGetSaclSecurityDescriptor
ntdll.dll1101RtlGetOwnerSecurityDescriptor
ntdll.dll737RtlAllocateAndInitializeSid
ntdll.dll707RtlAddAccessAllowedAce
ntdll.dll1082RtlGetGroupSecurityDescriptor
ntdll.dll976RtlEqualSid
ntdll.dll517NtQuerySystemInformation
ntdll.dll500NtQueryLicenseValue
ntdll.dll1604RtlValidAcl
ntdll.dll207NtAdjustPrivilegesToken
ntdll.dll1490RtlSetSaclSecurityDescriptor
ntdll.dll1608RtlValidSid
ntdll.dll345NtDuplicateToken
ntdll.dll603NtSetInformationThread
ntdll.dll1474RtlSetGroupSecurityDescriptor
ntdll.dll999RtlFindAceByType
ntdll.dll851RtlCreateEnvironmentEx
ntdll.dll989RtlExpandEnvironmentStrings_U
ntdll.dll1310RtlNtStatusToDosError
ntdll.dll696RtlAbsoluteToSelfRelativeSD
ntdll.dll1446RtlRunOnceComplete
ntdll.dll1445RtlRunOnceBeginInitialize
ntdll.dll1015RtlFindNextForwardRunClear
ntdll.dll1318RtlNumberOfSetBits
ntdll.dll1182RtlInitializeSRWLock
ntdll.dll474NtQueryDirectoryFile
ntdll.dll1417RtlReleaseSRWLockExclusive
ntdll.dll702RtlAcquireSRWLockExclusive
ntdll.dll750RtlAppendUnicodeStringToString
ntdll.dll120LdrGetDllHandle
ntdll.dll610NtSetIoCompletion
ntdll.dll667NtWaitForMultipleObjects
ntdll.dll286NtCreateIoCompletion
ntdll.dll282NtCreateEvent
ntdll.dll1768TpSimpleTryPost
ntdll.dll547NtRemoveIoCompletion
ntdll.dll587NtSetEvent
ntdll.dll62EtwEventWrite
ntdll.dll59EtwEventRegister
ntdll.dll61EtwEventUnregister
ntdll.dll519NtQuerySystemTime
ntdll.dll1183RtlInitializeSid
ntdll.dll720RtlAddAuditAccessObjectAce
ntdll.dll719RtlAddAuditAccessAceEx
ntdll.dll478NtQueryEaFile
ntdll.dll711RtlAddAccessDeniedAceEx
ntdll.dll709RtlAddAccessAllowedObjectAce
ntdll.dll712RtlAddAccessDeniedObjectAce
ntdll.dll1022RtlFirstFreeAce
ntdll.dll257NtClose
ntdll.dll1415RtlReleaseRelativeName
ntdll.dll511NtQuerySecurityObject
ntdll.dll586NtSetEaFile
ntdll.dll944RtlDosPathNameToRelativeNtPathName_U_WithStatus
ntdll.dll911RtlDeleteSecurityObject
ntdll.dll522NtQueryValueKey
ntdll.dll951RtlDuplicateUnicodeString
ntdll.dll506NtQueryPerformanceCounter
ntdll.dll872RtlCreateUnicodeStringFromAsciiz
ntdll.dll34DbgPrint
ntdll.dll1394RtlRaiseStatus
ntdll.dll1261RtlLeaveCriticalSection
ntdll.dll1037RtlFreeHeap
ntdll.dll1170RtlInitializeCriticalSection
ntdll.dll1480RtlSetLastWin32ErrorAndNtStatusFromNtStatus
ntdll.dll963RtlEnterCriticalSection
ntdll.dll109LdrDisableThreadCalloutsForDll
ntdll.dll488NtQueryInformationProcess
ntdll.dll740RtlAllocateHeap
ntdll.dll901RtlDeleteCriticalSection
ntdll.dll503NtQueryObject
ntdll.dll524NtQueryVolumeInformationFile
ntdll.dll432NtOpenKeyTransactedEx
ntdll.dll1067RtlGetDaclSecurityDescriptor
ntdll.dll290NtCreateKey
ntdll.dll844RtlCreateAcl
ntdll.dll598NtSetInformationKey
ntdll.dll448NtOpenThreadToken
ntdll.dll370NtFsControlFile
ntdll.dll344NtDuplicateObject
ntdll.dll358NtFlushBuffersFile
ntdll.dll1162RtlInitUnicodeStringEx
ntdll.dll467NtQueryAttributesFile
ntdll.dll714RtlAddAce
ntdll.dll336NtDeleteValueKey
ntdll.dll1065RtlGetCurrentTransaction
ntdll.dll616NtSetSecurityObject
ntdll.dll332NtDeleteFile
ntdll.dll1303RtlNewSecurityObjectEx
ntdll.dll291NtCreateKeyTransacted
ntdll.dll708RtlAddAccessAllowedAceEx
ntdll.dll490NtQueryInformationThread
ntdll.dll595NtSetInformationFile
ntdll.dll841RtlCopyUnicodeString
ntdll.dll1354RtlQueryInformationAcl
ntdll.dll1659RtlpApplyLengthFunction
ntdll.dll1049RtlGetAce
ntdll.dll352NtEnumerateValueKey
ntdll.dll674NtWriteFile
ntdll.dll1088RtlGetLengthWithoutLastFullDosOrNtPathElement
ntdll.dll349NtEnumerateKey
ntdll.dll1466RtlSetCurrentTransaction
ntdll.dll1482RtlSetOwnerSecurityDescriptor
ntdll.dll439NtOpenProcessToken
ntdll.dll333NtDeleteKey
ntdll.dll499NtQueryKey
ntdll.dll532NtReadFile
ntdll.dll1311RtlNtStatusToDosErrorNoTeb
ntdll.dll1044RtlFreeUnicodeString
ntdll.dll1265RtlLengthSecurityDescriptor
ntdll.dll850RtlCreateEnvironment
ntdll.dll923RtlDestroyEnvironment
ntdll.dll1471RtlSetEnvironmentVariable
ntdll.dll328NtDelayExecution
ntdll.dll128LdrGetProcedureAddress
ntdll.dll174LdrUnloadDll
ntdll.dll138LdrLoadDll
ntdll.dll1161RtlInitUnicodeString
ntdll.dll1266RtlLengthSid
ntdll.dll751RtlAppendUnicodeToString
ntdll.dll807RtlCompareUnicodeString
ntdll.dll864RtlCreateServiceSid
ntdll.dll1527RtlSubAuthoritySid
ntdll.dll1526RtlSubAuthorityCountSid
ntdll.dll838RtlCopySid
ntdll.dll1467RtlSetDaclSecurityDescriptor
ntdll.dll863RtlCreateSecurityDescriptor
ntdll.dll746RtlAnsiStringToUnicodeString
ntdll.dll1148RtlInitAnsiString
ntdll.dll628NtSetValueKey
ntdll.dll398NtLoadKey2
ntdll.dll430NtOpenKeyEx
ntdll.dll362NtFlushKey
ntdll.dll655NtUnloadKey2
ntdll.dll284NtCreateFile
ntdll.dll569NtRollbackTransaction
ntdll.dll262NtCommitTransaction
ntdll.dll319NtCreateTransaction
ntdll.dll492NtQueryInformationTransaction
ntdll.dll438NtOpenProcess
ntdll.dll485NtQueryInformationFile
ntdll.dll426NtOpenFile
ntdll.dll678NtYieldExecution
ntdll.dll1541RtlTimeToSecondsSince1980
ntdll.dll669NtWaitForSingleObject
ntdll.dll1348RtlQueryEnvironmentVariable_U
ntdll.dll339NtDeviceIoControlFile
ntdll.dll2137ZwQuerySystemInformation
ntdll.dll1047RtlGUIDFromString
ntdll.dll1523RtlStringFromGUID
ntdll.dll2087ZwQueryAttributesFile
ntdll.dll2289ZwWaitForSingleObject
ntdll.dll2119ZwQueryKey
ntdll.dll2164ZwReleaseMutant
ntdll.dll2046ZwOpenFile
ntdll.dll2054ZwOpenMutant
ntdll.dll1878ZwClose
ntdll.dll1911ZwCreateKey
ntdll.dll2017ZwLoadKey
ntdll.dll1957ZwDeleteValueKey
ntdll.dll1954ZwDeleteKey
ntdll.dll1970ZwEnumerateKey
ntdll.dll2142ZwQueryValueKey
ntdll.dll2236ZwSetSecurityObject
ntdll.dll2274ZwUnloadKey
ntdll.dll2248ZwSetValueKey
ntdll.dll2049ZwOpenKey
ntdll.dll1837ZwAllocateUuids
ntdll.dll2134ZwQuerySymbolicLinkObject
ntdll.dll1960ZwDeviceIoControlFile
ntdll.dll2096ZwQueryDirectoryObject
ntdll.dll2066ZwOpenSymbolicLinkObject
ntdll.dll2042ZwOpenDirectoryObject
ntdll.dll2108ZwQueryInformationProcess
ntdll.dll2105ZwQueryInformationFile
ntdll.dll2058ZwOpenProcess
ntdll.dll440NtOpenProcessTokenEx
ntdll.dll449NtOpenThreadTokenEx
ntdll.dll1145RtlImpersonateSelf
ntdll.dll446NtOpenSymbolicLinkObject
ntdll.dll514NtQuerySymbolicLinkObject
ntdll.dll469NtQueryBootEntryOrder
ntdll.dll470NtQueryBootOptions
ntdll.dll651NtTranslateFilePath
ntdll.dll422NtOpenDirectoryObject
ntdll.dll476NtQueryDirectoryObject
ntdll.dll347NtEnumerateBootEntries
ntdll.dll811RtlComputeCrc32
ntdll.dll1134RtlHashUnicodeString
bcrypt.dll6BCryptCreateHash
bcrypt.dll35BCryptHashData
bcrypt.dll13BCryptDestroyHash
bcrypt.dll2BCryptCloseAlgorithmProvider
bcrypt.dll27BCryptFinishHash
bcrypt.dll33BCryptGetProperty
bcrypt.dll39BCryptOpenAlgorithmProvider
CRYPT32.dll15CertAddStoreToCollection
CRYPT32.dll60CertFreeCTLContext
CRYPT32.dll8CertAddEncodedCertificateToStore
CRYPT32.dll174CryptMsgClose
CRYPT32.dll71CertGetEnhancedKeyUsage
CRYPT32.dll185CryptMsgUpdate
CRYPT32.dll69CertGetCertificateChain
CRYPT32.dll64CertFreeCertificateContext
CRYPT32.dll180CryptMsgGetAndVerifySigner
CRYPT32.dll57CertFindSubjectInCTL
CRYPT32.dll182CryptMsgOpenToDecode
CRYPT32.dll18CertCloseStore
CRYPT32.dll181CryptMsgGetParam
CRYPT32.dll25CertCreateCTLContext
CRYPT32.dll158CryptHashCertificate2
CRYPT32.dll61CertFreeCertificateChain
CRYPT32.dll164CryptImportPublicKeyInfoEx
CRYPT32.dll89CertOpenStore
CRYPT32.dll118CertVerifyCertificateChainPolicy
CRYPT32.dll79CertGetSubjectCertificateFromStore
CRYPT32.dll130CryptDecodeObject
OLEAUT32.dll200
OLEAUT32.dll6
ordentry_vafunction_name
10x25a0e0??$ReplaceVariablesInStringCallthrough@U_LUNICODE_STRING@@@Rtl@Implementation@WCP@Windows@@YAJPEAXPEBU_LBLOB@@PEAU_RTL_SMART_LBLOB_UCSCHAR_WRITING_CONTEXT@@@Z
20x7cc70??0AIAsimovProvider@COM@Windows@@QEAA@XZ
30x6fe40??0CBackupFileCreator@PrimitiveInstaller@@QEAA@XZ
40x64970??0CBaseInstaller@PrimitiveInstaller@@IEAA@XZ
50x6f950??0CCoordinator@PrimitiveInstaller@@QEAA@XZ
60x6fc50??0CFileInstaller@@QEAA@XZ
70x4c820??0CGacPrimitiveInstaller@@QEAA@XZ
80x62660??0CMigInfoInstaller@@QEAA@XZ
90x12a9e0??0CQueueExecutor@COM@Windows@@QEAA@XZ
100x5de40??0CRawInstallMap@InstallMap@@QEAA@XZ
110x47440??0CRawStoreLayout@ComponentStore@@QEAA@XZ
120x6fde0??0CRegistryInstaller@@QEAA@XZ
130x80e40??0CSecurityDescriptorFactory@Rtl@Implementation@WCP@Windows@@QEAA@XZ
140x440a0??0CXmlCursor@@QEAA@XZ
150x7af90??1AIAsimovProvider@COM@Windows@@QEAA@XZ
160x5e190??1AutoLZMSDecoder@Rtl@WCP@Windows@@QEAA@XZ
170x252b50??1AutoLZMSEncoder@Rtl@WCP@Windows@@QEAA@XZ
180x5ef00??1CBackupFileCreator@PrimitiveInstaller@@QEAA@XZ
190x12edc0??1CComponentInformation@COM@Windows@@QEAA@XZ
200x54e90??1CCoordinator@PrimitiveInstaller@@QEAA@XZ
210x12a10??1CGacPrimitiveInstaller@@QEAA@XZ
220x7dc40??1CMigInfoInstaller@@QEAA@XZ
230x7a9d0??1CPbrInstaller@@QEAA@XZ
240x6cd30??1CQueueExecutor@COM@Windows@@QEAA@XZ
250x13b50??1CRawInstallMap@InstallMap@@QEAA@XZ
260x139a0??1CRawStoreLayout@ComponentStore@@QEAA@XZ
270x7ef60??1CRegistryInstaller@@QEAA@XZ
280x7d0f0??1CSecurityDescriptorFactory@Rtl@Implementation@WCP@Windows@@QEAA@XZ
290x2193d0??1CSettingsInstaller@@QEAA@XZ
300x21d750??1CShortcutInstaller@@QEAA@XZ
310x7ee80??1CSysprepInstaller@@QEAA@XZ
320x13bf0??1PrivilegeAcquisition@RtlSystemUtil@@QEAA@XZ
330x75950?Acquire@PrivilegeAcquisition@RtlSystemUtil@@QEAAJAEBU?$Vector@$$CBJ@Windows@@@Z
340x137410?AcquireInstallerComponentPath@LocalInstallerServices@COM@WCP@Windows@@UEAAJKPEAUIDefinitionIdentity@@PEAPEA_WPEAK@Z
350x12f00?AcquireRequiredResources@CRawStoreLayout@ComponentStore@@QEAAJXZ
360xd9760?AddCatalogFile@CRawStoreLayout@ComponentStore@@QEAAJPEBU_LBLOB@@KPEAUIRtlSystemIsolationLayer@Rtl@Windows@@PEAUIRtlFile@56@PEAV?$Auto@U_LUNICODE_STRING@@@6@@Z
370xd9c50?AddCatalogMarkFromTlc@CRawStoreLayout@ComponentStore@@QEAAJAEBU_LUNICODE_STRING@@PEAUTlcData@2@@Z
380x1ed5f0?AddChange@ExecutionQueueDeriver@AiQueue@@QEAAJPEBVWcpManifest@@0@Z
390xd9f00?AddComponentFile@CRawStoreLayout@ComponentStore@@QEAAJKPEAUComponentData@2@AEBU_LUNICODE_STRING@@KPEAUIRtlSystemIsolationLayer@Rtl@Windows@@PEAUIRtlFile@67@KPEAUIRtlDirectory@67@AEBU?$Vector@$$CBUHashInfo@Rtl@ManifestParser@Windows@@@7@PEAV?$Auto@PEAUIRtlFile@Rtl@Windows@@@7@6PEAK@Z
400x61570?AddComponentImplication@CRawStoreLayout@ComponentStore@@QEAAJAEBUComponentData@2@PEAUTlcData@2@@Z
410x1edb90?AddInspect@ExecutionQueueDeriver@AiQueue@@QEAAJAEBVWcpManifest@@@Z
420xd5640?AddInstallMarkToFamily@CRawInstallMap@InstallMap@@QEAAJPEAUMapForFamily@2@AEBT_FOUR_PART_VERSION@@@Z
430x137570?AddInstallerFailureAnnotation@LocalInstallerServices@COM@WCP@Windows@@UEAAJKPEA_W@Z
440x137650?AddRef@LocalInstallerServices@COM@WCP@Windows@@UEAAKXZ
450x137650?AddRef@LocalTransformerServices@COM@WCP@Windows@@UEAAKXZ
460x15530?AddTlcMark@CRawStoreLayout@ComponentStore@@QEAAJKAEBUTlcInstaller@2@PEAUTlcData@2@@Z
470x13ca20AddTrusteeCapabilities
480xeaf60?AddVerifiedCatalogMarkInVersionedIndex@CRawStoreLayout@ComponentStore@@QEAAJPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@AEBU_LUNICODE_STRING@@@Z
490x281bb0?AllocGroup@CMultiThreadExecQ@MTEQ@@QEAAJPEAV?$AutoNewPtr@VCItemGroupContextBase@MTEQ@@@Windows@@PEAV?$AutoNewPtr@VCGroup@MTEQ@@@4@@Z
500x13cf80AllocateTrusteeData
510x1f9330?ApplySecurityToObjectEx@@YAJKPEAUIRtlSystemObject@Rtl@Windows@@PEBU_SECURITY_DESCRIPTOR@@@Z
520x1f94f0?ApplySecurityToObjectWithDefaults@@YAJ_NPEAUIRtlSystemObject@Rtl@Windows@@PEBU_SECURITY_DESCRIPTOR@@@Z
530x1d1490?Canonicalize@CBaseCanonicalizer@@QEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@AEBU?$Vector@UNode@Rtl@Microdom@Windows@@@5@PEAUIRtlWOFOStream@35@@Z
540x1d2f00?Canonicalize@CC14NCanonicalizer@@MEAAJUElement@Rtl@Microdom@Windows@@@Z
550x1d31d0?Canonicalize@CC14NCanonicalizer@@MEAAJUProcessingInstruction@Rtl@Microdom@Windows@@@Z
560x1d33a0?Canonicalize@CC14NCanonicalizer@@MEAAJUText@Rtl@Microdom@Windows@@@Z
570xf1a20?CheckComponentFileFlag@CRawStoreLayout@ComponentStore@@QEAAJKPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@U_LUNICODE_STRING@@PEA_N@Z
580xf1bf0?CheckComponentFlag@CRawStoreLayout@ComponentStore@@QEAAJKPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@PEA_N@Z
590x26e980?ChooseBitnessFromIdentityAndTarget@MacroReplacement@@YAJKPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@PEAK@Z
600xd5670?CleanupInstallMap@CRawInstallMap@InstallMap@@QEAAJXZ
610x1b410?Close@?$Auto@U_ACL@@@Windows@@QEAAXXZ
620x19d30?Close@?$Auto@U_SECURITY_DESCRIPTOR@@@Windows@@QEAAXXZ
630x1b410?Close@?$Auto@U_SID@@@Windows@@QEAAXXZ
640x7bb50?Close@AutoDeltaBlob@Rtl@Windows@@QEAAXXZ
650x131d0?Close@CApplicationAccessor@@QEAAXXZ
660x77aa0?Close@CCatalog@@QEAAJXZ
670x281cb0?Close@CMultiThreadExecQ@MTEQ@@QEAAJXZ
680x88240?CmsGetBestFileHashInformation@WcpManifest@@UEBAJAEBUFile@WcpManifestParser@@PEAUHashInfo@Rtl@ManifestParser@Windows@@@Z
690x88260?CmsGetFileHashInformation@WcpManifest@@SAJAEBUFile@WcpManifestParser@@PEAUHashInfo@Rtl@ManifestParser@Windows@@@Z
700x8a8c0?CmsVerifyFileHashes@Rtl@ManifestParser@Windows@@YAJKAEBU?$Vector@$$CBUHashInfo@Rtl@ManifestParser@Windows@@@3@AEBU_LUNICODE_STRING@@PEAUIRtlFile@13@PEAUIRtlDefinitionIdentity@1Identity@3@PEAK@Z
710x441d0?CoTaskMemAlloc@COM@Windows@@YAPEAX_K@Z
720x1d180?CoTaskMemFree@COM@Windows@@YAXPEBX@Z
730xf870?CompareIdentityAttributeValue@Rtl@Identity@Windows@@YAJPEBU_LUNICODE_STRING@@0PEAH@Z
740x1fa2b0?CompareSecurityDescriptorFromObjectAgainstManifest@Rtl@Implementation@WCP@Windows@@YAJKPEBU_SECURITY_DESCRIPTOR@@0PEA_N@Z
750x283090?CompressManifest@Rtl@Implementation@WCP@Windows@@YAJK_NPEBU_LBLOB@@PEAUIRtlFile@14@@Z
760x26f360?ConvertIn@COM@Windows@@YAJPEAUIDefinitionIdentity@@PEAPEAUIRtlDefinitionIdentity@Rtl@Identity@2@@Z
770x1f8f70?ConvertSecurityDescriptorToString@CSecurityDescriptorFactory@Rtl@Implementation@WCP@Windows@@QEBAJKPEAXKPEAV?$Auto@U_LUNICODE_STRING@@@5@PEAK@Z
780x1f90f0?ConvertStringSecurityDescriptor@CSecurityDescriptorFactory@Rtl@Implementation@WCP@Windows@@QEBAJKAEBU_LUNICODE_STRING@@PEAV?$Auto@U_SECURITY_DESCRIPTOR@@@5@PEAK@Z
790xc7310?CopyOut@COM@Windows@@YAJPEAUIRtlDefinitionIdentity@Rtl@Identity@2@PEAPEAUIDefinitionIdentity@@@Z
800x1fb4a0?CopyOutPath@COM@Windows@@YAJPEBU_LUNICODE_STRING@@PEAPEA_W@Z
810x254d30?Create@CCatalog@@QEAAJKKPEBU_LBLOB@@PEAK@Z
820x1f0a10?CreateAdvInstallerQueueFromXml@AiQueue@@YAJPEAUIRtlIdentityAuthority@Rtl@Identity@Windows@@PEAUIRtlMicrodom@3Microdom@5@PEAV?$Auto@U?$Vector@VExecutionQueueEntry@AiQueue@@@Windows@@@5@@Z
830x25ade0?CreateSecurityDescriptorFromParts@Rtl@Implementation@WCP@Windows@@YAJKPEBU_SID@@0PEBU_ACL@@1PEAV?$Auto@U_SECURITY_DESCRIPTOR@@@4@@Z
840xdb5a0?DecodeTlcInstallerFromMarkValueAndData@ComponentStore@@YAJAEBU_LUNICODE_STRING@@AEBU_LBLOB@@PEAUTlcInstaller@1@PEA_N@Z
850x25b050?DecomposeSecurityDescriptor@Rtl@Implementation@WCP@Windows@@YAJPEBU_SECURITY_DESCRIPTOR@@PEAKPEAV?$Auto@U_SID@@@4@2PEAV?$Auto@U_ACL@@@4@3PEAG@Z
860x2832c0?DecompressManifest@Rtl@Implementation@WCP@Windows@@YAJKPEAV?$Auto@U_LBLOB@@@4@PEAK@Z
870xf8840?DeletePendingFiles@CRawStoreLayout@ComponentStore@@QEAAJXZ
880x13dce0DeleteTrusteeCapabilities
890x13ddc0DeleteTrusteeData
900x253ef0?DeltaCompressFile@Rtl@Windows@@YAJKKPEAU_LBLOB@@PEBU3@0PEAUIRtlFile@12@@Z
910x254010?DeltaCompressFile@Rtl@Windows@@YAJKPEAUIRtlFile@12@PEBU_LBLOB@@00@Z
920x3f120?DeltaDecompressBuffer@Rtl@Windows@@YAJKPEAU_LBLOB@@_K0PEAVAutoDeltaBlob@12@2@Z
930x3f0f0?DeltaDecompressBuffer@Rtl@Windows@@YAJKPEAU_LBLOB@@_K0PEAVAutoDeltaBlob@12@@Z
940x254120?DeltaDecompressFile@Rtl@Windows@@YAJPEAUIRtlFile@12@_K00@Z
950x254140?DeltaDecompressFile@Rtl@Windows@@YAJPEAUIRtlFile@12@_K00PEAVAutoDeltaBlob@12@@Z
960x5e130?DestroyOutputStream@Tracing@Windows@@YAXPEAUIRtlFormattedOutputStream@Rtl@2@@Z
970x1fb8c0?DoesFileMatchHashInManifest@Rtl@Implementation@WCP@Windows@@YAJAEBU?$Vector@$$CBUHashInfo@Rtl@ManifestParser@Windows@@@4@AEBU_LUNICODE_STRING@@PEAUIRtlFile@14@PEAUIRtlDefinitionIdentity@1Identity@4@PEA_N@Z
980x1eef70?DoesManifestContainAIs@ExecutionQueueDeriver@AiQueue@@QEAAJAEBVWcpManifest@@PEA_N@Z
990x2550f0?DoesTargetHaveTestRootCert@@YAJPEAUIRtlSystemIsolationLayerPublic@Rtl@Windows@@PEA_N@Z
1000x106420?EnsureComponentFullyPresent@CRawStoreLayout@ComponentStore@@QEAAJKPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@PEBVWcpManifest@@PEAK@Z
1010x25fef0EnumerateFileRedirections
1020x260df0EnumerateRegistryRedirections
1030x1f1910?ExecutionQueueToXml@AiQueue@@YAJKAEBU?$Vector@VExecutionQueueEntry@AiQueue@@@Windows@@PEAUIRtlIdentityAuthority@Rtl@Identity@3@PEAUIRtlXmlWriter@5Microdom@3@@Z
1040x515d0?FileHashAlgorithmToDigest@Rtl@Cms@Windows@@YA?AW4_CMS_HASH_DIGESTMETHOD@23@K@Z
1050x2590c0?FilePathCombine@COM@Windows@@YAJPEBGAEBU_LUNICODE_STRING@@PEAV?$Auto@U_LUNICODE_STRING@@@2@@Z
1060x1d3a20?Finalize@CC14NCanonicalizer@@MEAAJXZ
1070x1eefa0?Finalize@ExecutionQueueDeriver@AiQueue@@QEAAJPEAV?$Auto@U?$Vector@VExecutionQueueEntry@AiQueue@@@Windows@@@Windows@@PEAK@Z
1080x221510?FinalizeChanges@CCoordinator@PrimitiveInstaller@@QEAAJXZ
1090x282100?FinalizeGroup@CMultiThreadExecQ@MTEQ@@QEAAJV?$AutoNewPtr@VCGroup@MTEQ@@@Windows@@@Z
1100x7d240?FinalizeValue@CComponentInformationTableTraits@COM@Windows@@SAXAEAV?$Auto@PEAVCComponentInformation@COM@Windows@@@3@@Z
1110x2551a0?FindSubject@CCatalog@@QEBAJKPEBU_LBLOB@@PEA_NPEAJ@Z
1120x78dd0?FindUnchangedMatchingVersions@VersionedIndexHelper@ComponentStore@@QEAAJPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@AEBU_LUNICODE_STRING@@KKAEBU_LBLOB@@PEAV?$CVector@T_FOUR_PART_VERSION@@VCCallDisposition@Rtl@BUCL@@@BUCL@@@Z
1130x3ace0?FormatFourPartVersion@Rtl@Implementation@WCP@Windows@@YAJKAEBT_FOUR_PART_VERSION@@PEAE1P6A?AU_RTL_UCSCHAR_ENCODER_RETURN_VALUE@@K11@ZPEAPEAE@Z
1140x51a40?FormatNumberIntoBuffer@Rtl@Implementation@WCP@Windows@@YAJ_KKPEAE1P6A?AU_RTL_UCSCHAR_ENCODER_RETURN_VALUE@@K11@ZPEAPEAE@Z
1150x260e70FreeRedirectionsMemory
1160x2b400?FsnpDowncaseChar@@YAKK@Z
1170x2552a0?GenerateCatalogThumbprint@@YAJPEAUIRtlFile@Rtl@Windows@@PEAV?$Auto@U_LUNICODE_STRING@@@3@@Z
1180x255340?GenerateCatalogThumbprint@@YAJPEBU_LBLOB@@PEAV?$Auto@U_LUNICODE_STRING@@@Windows@@@Z
1190x88a20?GetComDefinitionIdentity@WcpManifest@@UEBAJPEAV?$AutoComPtr@UIDefinitionIdentity@@@Windows@@@Z
1200x65980?GetComponentAbsolutePath@CRawStoreLayout@ComponentStore@@QEAAJKPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@PEAV?$Auto@U_LUNICODE_STRING@@@6@@Z
1210xddb50?GetComponentAbsolutePath@ComponentStore@@YAJKPEAUIRtlIdentityAuthority@Rtl@Identity@Windows@@PEAUIRtlDefinitionIdentity@345@PEAUIRtlSystemIsolationLayer@35@2AEBU_LUNICODE_STRING@@PEAV?$Auto@U_LUNICODE_STRING@@@5@@Z
1220xddcc0?GetComponentFileAbsolutePath@CRawStoreLayout@ComponentStore@@QEAAJKPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@AEBU_LUNICODE_STRING@@PEAV?$Auto@U_LUNICODE_STRING@@@6@2@Z
1230xde3c0?GetComponentMatchingVersions@CRawStoreLayout@ComponentStore@@QEAAJPEAUComponentData@2@_NPEAV?$CVector@T_FOUR_PART_VERSION@@VCCallDisposition@Rtl@BUCL@@@BUCL@@@Z
1240xec690?GetComponentVersionedKey@CRawStoreLayout@ComponentStore@@QEAAJKPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@PEAV?$Auto@PEAUIRtlKey@Rtl@Windows@@@6@PEAK@Z
1250xd63a0?GetComponentWinningVersion@CRawInstallMap@InstallMap@@QEAAJPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@PEAT_FOUR_PART_VERSION@@PEA_N_N@Z
1260x43190?GetCompressedFileType@Rtl@WCP@Windows@@YAKPEBU_LBLOB@@@Z
1270x2821f0?GetContext@CGroup@MTEQ@@QEAAXPEAV?$AutoNewPtr@VCItemGroupContextBase@MTEQ@@@Windows@@@Z
1280x259210?GetCurrentDllWin32Path@COM@Windows@@YAJPEAXPEAV?$Auto@U_LUNICODE_STRING@@@2@@Z
1290xdebe0?GetDeltaDirectoryNameFromFlag@ComponentStore@@YA?AU_LUNICODE_STRING@@K@Z
1300x88ac0?GetDependencyIdentity@WcpManifest@@QEBAJAEBUDependency@WcpManifestParser@@PEAV?$Auto@PEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@@Windows@@@Z
1310xdec70?GetExternalDirPath@CRawStoreLayout@ComponentStore@@QEAAJPEAPEBU_LUNICODE_STRING@@@Z
1320x88dc0?GetFileHashes@WcpManifest@@SAJAEBUFile@WcpManifestParser@@PEAV?$CVector@UHashInfo@Rtl@ManifestParser@Windows@@VCCallDisposition@2BUCL@@@BUCL@@PEAPEAUHashInfo@Rtl@ManifestParser@Windows@@@Z
1330x69770?GetFileSystemDefaultSecurity@@YAJKPEAV?$Auto@U_SECURITY_DESCRIPTOR@@@Windows@@@Z
1340x13ded0GetGroupTrusteeDataCountFromManifest
1350x13df80GetGroupTrusteeDataFromManifest
1360x1378e0?GetIsolationAllocator@LocalTransformerServices@COM@WCP@Windows@@UEAAJPEAPEAUIMalloc@@@Z
1370x283b30?GetLUnicodeParameter@Rtl@Transformers@WCP@Windows@@YAJKPEAUICSITransformerServices@@AEBU_LUNICODE_STRING@@PEAV?$Auto@U_LUNICODE_STRING@@@4@PEAK@Z
1380x2822a0?GetNextCompletedItemIfAvailable@CGroup@MTEQ@@QEAAJPEAV?$AutoNewPtr@VCItemExecutorBase@MTEQ@@@Windows@@@Z
1390x283de0?GetNtFilePathParameter@Rtl@Transformers@WCP@Windows@@YAJKPEAUICSITransformerServices@@AEBU_LUNICODE_STRING@@PEAV?$Auto@U_LUNICODE_STRING@@@4@PEAKK@Z
1400x283f00?GetNtRegistryPathParameter@Rtl@Transformers@WCP@Windows@@YAJKPEAUICSITransformerServices@@AEBU_LUNICODE_STRING@@PEAV?$Auto@U_LUNICODE_STRING@@@4@PEAKK@Z
1410x60460?GetOutputStreamStreamFromSink@Tracing@Windows@@YAXPEAUIRtlOutputSink@Rtl@2@PEAPEAUIRtlFormattedOutputStream@42@@Z
1420x137970?GetParameter@LocalTransformerServices@COM@WCP@Windows@@UEAAJKPEB_WPEAPEA_WPEAK@Z
1430x274370?GetPoqXmlPath@@YA?BU?$Vector@QEBU_UNICODE_STRING@@@Windows@@XZ
1440x137f30?GetRollbackSystem@LocalTransformerServices@COM@WCP@Windows@@UEAAJPEAPEAUIRtlSystemIsolationLayerPublic@Rtl@4@@Z
1450x5f8c0?GetRootDirPath@CRawStoreLayout@ComponentStore@@QEAAJPEAPEBU_LUNICODE_STRING@@@Z
1460x256660?GetSignerPublicKeyToken@CCatalog@@QEAAJPEAUIRtlSystemIsolationLayer@Rtl@Windows@@PEAU_LBLOB@@@Z
1470x138000?GetSystem@LocalTransformerServices@COM@WCP@Windows@@UEAAJPEAPEAUIRtlSystemIsolationLayerPublic@Rtl@4@@Z
1480xdee30?GetTemporaryDirectory@CRawStoreLayout@ComponentStore@@QEAAJKPEAV?$Auto@PEAUIRtlDirectory@Rtl@Windows@@@Windows@@@Z
1490x25c1c0?GetUTF8FileWriterStream@Rtl@Windows@@YAJPEAUIRtlFile@12@PEAV?$Auto@PEAUIRtlWOFOUCSStream@Rtl@Windows@@@2@@Z
1500xdf5d0?GetUniqueName@ComponentStore@@YAJPEAV?$Auto@U_LUNICODE_STRING@@@Windows@@@Z
1510x1380c0?GetUserProfile@LocalTransformerServices@COM@WCP@Windows@@UEAAJPEAPEAUIRtlUserProfile@Rtl@4@@Z
1520x284240?GetWin32FilePathParameter@COM@Transformers@WCP@Windows@@YAJKPEAUICSITransformerServices@@PEBGPEAPEAGPEAKK@Z
1530x2595a0?GetWin32PathOfSiblingFile@COM@Windows@@YAJPEAXPEBGPEAV?$Auto@U_LUNICODE_STRING@@@2@@Z
1540x2595b0?GetWin32PathOfSiblingFile@COM@Windows@@YAJPEAXPEB_WPEAV?$Auto@U_LUNICODE_STRING@@@2@@Z
1550x2843a0?GetWin32RegistryPathParameter@COM@Transformers@WCP@Windows@@YAJKPEAUICSITransformerServices@@PEBGPEAPEAUHKEY__@@PEAPEAGPEAKK@Z
1560x287e90?GetXml@XmlParserGenerator@@YAJPEBUDomElement@1@PEAV?$Auto@U_LUTF8_STRING@@@Windows@@@Z
1570x67f10?HasImpactfulOperation@ExecutionQueueDeriver@AiQueue@@QEBA_NXZ
1580x2887b0?Hydrate@DeltaHydrator@@YAJPEAUIRtlFile@Rtl@Windows@@PEAUDeltaFile@1@100@Z
1590xdfb90?HydrateFile@CRawStoreLayout@ComponentStore@@QEAAJPEAUComponentData@2@T_FOUR_PART_VERSION@@U_LUNICODE_STRING@@PEAUIRtlFile@Rtl@Windows@@PEAUIRtlDirectory@78@PEAV?$Auto@PEAUIRtlFile@Rtl@Windows@@@8@5PEAV?$CVector@UPossibleCorruption@ComponentStore@@VCCallDisposition@Rtl@BUCL@@@BUCL@@PEAK@Z
1600x288a90?HydrateNull@DeltaHydrator@@YAJPEAUIRtlFile@Rtl@Windows@@0@Z
1610x71cf0?InitComponentData@VersionedIndexHelper@ComponentStore@@QEAAJ_NPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@PEAUComponentData@2@PEA_N@Z
1620x252c10?Initialize@AutoLZMSDecoder@Rtl@WCP@Windows@@QEAAJXZ
1630x252db0?Initialize@AutoLZMSEncoder@Rtl@WCP@Windows@@QEAAJXZ
1640xf7130?Initialize@CApplicationAccessor@@QEAAJPEAUIRtlDefinitionAppId@Rtl@AppId@Windows@@PEAUIRtlAppIdAuthority@345@@Z
1650x1d1750?Initialize@CBaseCanonicalizer@@MEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@AEBU?$Vector@UNode@Rtl@Microdom@Windows@@@5@PEAUIRtlWOFOStream@35@@Z
1660x1d4840?Initialize@CC14NCanonicalizer@@MEAAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@AEBU?$Vector@UNode@Rtl@Microdom@Windows@@@5@PEAUIRtlWOFOStream@35@@Z
1670xf7230?Initialize@CComponentAccessor@@QEAAJPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@PEAUIRtlIdentityAuthority@345@@Z
1680x221cf0?Initialize@CCoordinator@PrimitiveInstaller@@QEAAJKKKPEAUIRtlPrimitiveInstallerSupport@Rtl@PrimitiveInstallers@Windows@@PEAUIRtlPrimitiveInstallerRepairCallback@456@PEAUIRtlSystemIsolationLayer@46@@Z
1690x282420?Initialize@CMultiThreadExecQ@MTEQ@@QEAAJ_N_K1@Z
1700x133d50?Initialize@CQueueExecutor@COM@Windows@@QEAAJKPEB_WPEAVIComponentStoreHelper@23@PEAUIRtlSystemIsolationLayer@Rtl@3@PEAVCTransactionContent@23@@Z
1710xd6a60?Initialize@CRawInstallMap@InstallMap@@QEAAJ_NPEAUIRtlIdentityAuthority@Rtl@Identity@Windows@@PEAUIRtlKey@46@PEAUIRtlSystemIsolationLayer@46@@Z
1720x7bce0?Initialize@CXmlCursor@@QEAAJPEAX_K@Z
1730x1ef3d0?Initialize@ExecutionQueueDeriver@AiQueue@@QEAAJKKK_KPEAUIRtlSystemIsolationLayer@Rtl@Windows@@1PEBV?$CVector@UTransformsChangeQueueEntry@AiQueue@@VCCallDisposition@Rtl@BUCL@@@BUCL@@@Z
1740xec860?Initialize@VersionedIndexHelper@ComponentStore@@QEAAJPEAUIRtlKey@Rtl@Windows@@_NPEAVIStoreLayoutHelper@2@PEAUIRtlIdentityAuthority@4Identity@5@@Z
1750x2542b0?InitializeDeltaCompressor@Rtl@Windows@@YAJPEAX@Z
1760xe1170?InitializeStoreContext@CRawStoreLayout@ComponentStore@@QEAAJKPEAUIRtlIdentityAuthority@Rtl@Identity@Windows@@PEAUIRtlAppIdAuthority@4AppId@6@PEAUIRtlSystemIsolationLayer@46@2PEAUIRtlKey@46@3AEAVCRawInstallMap@InstallMap@@PEAUIRtlDirectory@46@5PEAVLRUCache@12@@Z
1770xe15c0?InitializeTlcCanonicalData@CRawStoreLayout@ComponentStore@@QEAAJAEBVCApplicationAccessor@@PEAUTlcData@2@PEA_N@Z
1780x8aba0?IsAnyMidgroundOrAIPresent@WcpManifest@@QEBAJPEA_N@Z
1790x106f30?IsComponentFileDeltaOrLZMSCompressed@CRawStoreLayout@ComponentStore@@QEAAJAEBUComponentData@2@AEBU_LUNICODE_STRING@@PEA_NPEAK@Z
1800xf1fb0?IsComponentFileStaged@CRawStoreLayout@ComponentStore@@QEAAJKPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@AEBU_LUNICODE_STRING@@PEA_N@Z
1810xf2090?IsComponentFileStaged@CRawStoreLayout@ComponentStore@@SAJKAEBUComponentData@2@AEBU_LUNICODE_STRING@@PEA_N@Z
1820xe1880?IsComponentStaged@CRawStoreLayout@ComponentStore@@QEAAJPEAUComponentData@2@PEAK@Z
1830x2544a0?IsDeltaCompressorAvailable@Rtl@Windows@@YAJPEA_N@Z
1840x893d0?IsDeployment@WcpManifest@@QEBA_NXZ
1850xcf0d0?IsIdentityDriver@Rtl@Identity@Windows@@YAJPEAUIRtlBaseIdentity@123@PEA_N@Z
1860x430e0?IsManifestCompressed@Rtl@Implementation@WCP@Windows@@YAJPEBU_LBLOB@@PEA_N@Z
1870x138230?IsMobileStore@LocalInstallerServices@COM@WCP@Windows@@UEAA_NXZ
1880x138260?IsPhysicallyOffline@LocalInstallerServices@COM@WCP@Windows@@UEAA_NXZ
1890x138280?IsSafeMode@LocalInstallerServices@COM@WCP@Windows@@UEAAJPEA_N@Z
1900x893f0?IsServicingStack@WcpManifest@@QEBA_NXZ
1910x894e0?IsSingleInstanceFiles@WcpManifest@@QEBA_NXZ
1920x1382a0?IsSkuAssembly@LocalInstallerServices@COM@WCP@Windows@@UEAA_NXZ
1930x1382c0?IsStateSeparated@LocalInstallerServices@COM@WCP@Windows@@UEAA_NXZ
1940x257940?IsValid@CCatalog@@QEBA_NXZ
1950x253620?LZMSCompressFile@Rtl@WCP@Windows@@YAJPEBU_LBLOB@@PEAUIRtlFile@13@1@Z
1960x253860?LZMSDecompressBuffer@Rtl@WCP@Windows@@YAJ_KPEBU_LBLOB@@AEAV?$Auto@U_LBLOB@@@3@@Z
1970x253aa0?LZMSDecompressFile@Rtl@WCP@Windows@@YAJ_KPEAUIRtlFile@13@1@Z
1980x2596e0?LoadFirstResourceLanguageAgnostic@Rtl@Windows@@YAJKPEAUHINSTANCE__@@PEBG1PEAU_LBLOB@@@Z
1990x1382e0?LogAiMessage@LocalInstallerServices@COM@WCP@Windows@@UEAAXW4LogAiMessageFlags@ICSIMetadataInstallerServices@@W4LogLevel@6@PEAU_RTL_TRACING_FACILITY@Rtl@34@QEB_W@Z
2000x1383f0?LogAiMessageA@LocalInstallerServices@COM@WCP@Windows@@UEAAXW4LogAiMessageFlags@ICSIMetadataInstallerServices@@W4LogLevel@6@PEAU_RTL_TRACING_FACILITY@Rtl@34@QEBD@Z
2010x26eb10?LookupStringReplacement@MacroReplacement@@YAJKKAEBU_LUNICODE_STRING@@PEAUIRtlSystemIsolationLayer@Rtl@Windows@@PEAXPEAUIRtlDefinitionIdentity@4Identity@5@PEAV?$Auto@U_LUNICODE_STRING@@@5@PEAK@Z
2020x15720?MakeMarkValueName@ComponentStore@@YAJ_WAEBU_GUID@@AEBU_LUNICODE_STRING@@PEAV?$Auto@U_LUNICODE_STRING@@@Windows@@@Z
2030xe2410?MakeMarkValueValue@ComponentStore@@YAJAEBU_LUNICODE_STRING@@0PEAV?$Auto@U_LBLOB@@@Windows@@@Z
2040xe26d0?ManuallyMarkComponentStaged@CRawStoreLayout@ComponentStore@@QEAAJAEBVCComponentAccessor@@PEBU_LBLOB@@@Z
2050xe26f0?ManuallyMarkFileStaged@CRawStoreLayout@ComponentStore@@QEAAJPEAUComponentData@2@AEBU_LUNICODE_STRING@@_N_N@Z
2060x13f120MapToPrivilegeName
2070x13f1e0MapToWellKnownSidType
2080xeca40?MarkComponentInFamily@CRawStoreLayout@ComponentStore@@QEAAJKPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@AEBT_FOUR_PART_VERSION@@AEBVWcpManifest@@@Z
2090x528b0?MarkSelfCorrupt@CRawStoreLayout@ComponentStore@@QEAAXK@Z
2100x138690?MarkServicingStackCorruptHelper@LocalInstallerServices@COM@WCP@Windows@@UEAAJXZ
2110x2826c0?MaybeGetCompletedGroup@CMultiThreadExecQ@MTEQ@@QEAAJ_NPEAV?$AutoNewPtr@VCGroup@MTEQ@@@Windows@@PEAK@Z
2120xd650?Next@CXmlCursor@@QEAAJXZ
2130xe40a0?OpenComponentDerivedData@VersionedIndexHelper@ComponentStore@@QEAAJ_NPEBU_LUNICODE_STRING@@1PEAUComponentData@2@PEA_N@Z
2140xd6c70?OpenFamilyMap@CRawInstallMap@InstallMap@@QEAAJ_NPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@PEAUMapForFamily@2@PEA_N@Z
2150xe4970?OpenTlcByImplication@CRawStoreLayout@ComponentStore@@QEAAJ_NAEBUComponentImplication@2@PEAUTlcData@2@PEA_N@Z
2160x19f20?ParseBase16String@Rtl@Implementation@WCP@Windows@@YAJKPEBE0P6A?AU_RTL_UCSCHAR_DECODER_RETURN_VALUE@@00@ZPEAU_LBLOB@@PEA_N@Z
2170x66700?ParseFromBlob@WcpManifest@@QEAAJAEBU_LBLOB@@PEAVStopWatch@Rtl@Windows@@@Z
2180x6cb70?ParseFromBlob@WcpManifest@@QEAAJW4ParseDocumentFlags@XmlParserGenerator@@AEBU_LBLOB@@PEAVStopWatch@Rtl@Windows@@@Z
2190x495a0?ParseGuid@Rtl@Implementation@WCP@Windows@@YAJPEBE0P6A?AU_RTL_UCSCHAR_DECODER_RETURN_VALUE@@00@ZPEAU_GUID@@PEA_N@Z
2200xcf630?ParseProcessorArchitecture@Rtl@Identity@Windows@@YAJAEBU_LUNICODE_STRING@@PEAVPSEUDO_ARCH@123@PEA_N@Z
2210x16d270PoqParsePoqexecLog
2220x1386f0?PoqWasExecutedInline@LocalInstallerServices@COM@WCP@Windows@@UEAA_NXZ
2230x2220c0?ProcessChange@CCoordinator@PrimitiveInstaller@@QEAAJAEBUComponentChange@2@@Z
2240xf26a0?QueryComponentFlag@CRawStoreLayout@ComponentStore@@SAJAEBUComponentData@2@PEA_NPEAK@Z
2250xe51d0?QueryComponentImplications@CRawStoreLayout@ComponentStore@@QEAAJ_NPEAUIRtlKey@Rtl@Windows@@PEA_KPEAV?$CVector@V?$Auto@UComponentImplication@ComponentStore@@@Windows@@VCCallDisposition@Rtl@BUCL@@@BUCL@@@Z
2260xe5430?QueryConfigurationOption@CRawStoreLayout@ComponentStore@@QEBAJAEBU_GUID@@KPEAK@Z
2270xe57f0?QueryConfigurationOption@CRawStoreLayout@ComponentStore@@QEBAJAEBU_GUID@@_NPEA_N@Z
2280x138710?QueryInterface@LocalInstallerServices@COM@WCP@Windows@@UEAAJAEBU_GUID@@PEAPEAX@Z
2290x138860?QueryInterface@LocalTransformerServices@COM@WCP@Windows@@UEAAJAEBU_GUID@@PEAPEAX@Z
2300xe5b00?QueryMarksOnTopLevelComponent@CRawStoreLayout@ComponentStore@@QEAAJKAEBUTlcData@2@PEAUTlcMarks@2@PEAV?$CVector@V?$Auto@UTlcMark@ComponentStore@@@Windows@@VCCallDisposition@Rtl@BUCL@@@BUCL@@@Z
2310x138940?QuerySingleResourceOwnershipConfiguration@LocalInstallerServices@COM@WCP@Windows@@UEAAJPEA_N@Z
2320x1389a0?QuerySmiHiveUpdatesConfiguration@LocalInstallerServices@COM@WCP@Windows@@UEAAJPEAK@Z
2330x5b810?QueryUnchangedFileVersions@VersionedIndexHelper@ComponentStore@@QEAAJ_N0PEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@AEBU_LUNICODE_STRING@@AEBU_LBLOB@@PEAV?$CVector@T_FOUR_PART_VERSION@@VCCallDisposition@Rtl@BUCL@@@BUCL@@PEA_N@Z
2340x282980?QueueItemForGroup@CMultiThreadExecQ@MTEQ@@QEAAJPEAVCGroup@2@PEAV?$AutoNewPtr@VCItemExecutorBase@MTEQ@@@Windows@@@Z
2350x1d7080?ReadAt@CBufferedStream@@QEAAJ_K0PEAXPEA_K@Z
2360xe63a0?ReadKeyValue@ComponentStore@@YAJPEAUIRtlKey@Rtl@Windows@@PEBU_LUNICODE_STRING@@PEAV?$Auto@U_LBLOB@@@4@PEAPEBU_KEY_VALUE_PARTIAL_INFORMATION@@PEA_N@Z
2370x138a00?RedirectWowPath@LocalInstallerServices@COM@WCP@Windows@@UEAAJW4RedirectWowPathFlags@ICSIMetadataInstallerServices@@PEAUIDefinitionIdentity@@PEB_WPEAPEA_W@Z
2380x138ba0?Release@LocalInstallerServices@COM@WCP@Windows@@UEAAKXZ
2390x138ba0?Release@LocalTransformerServices@COM@WCP@Windows@@UEAAKXZ
2400xe6fc0?RemoveComponentImplication@CRawStoreLayout@ComponentStore@@QEAAJAEBUComponentData@2@PEAUTlcData@2@@Z
2410xfc660?RemoveComponentPayload@CRawStoreLayout@ComponentStore@@QEAAJ_NPEAUComponentData@2@PEAK@Z
2420xd6e70?RemoveInstallMarkFromFamily@CRawInstallMap@InstallMap@@QEAAJPEAUMapForFamily@2@AEBT_FOUR_PART_VERSION@@@Z
2430xe6fe0?RemoveTlcMark@CRawStoreLayout@ComponentStore@@QEAAJKAEBUTlcInstaller@2@PEAUTlcData@2@@Z
2440x138bb0?ReplaceMacros@LocalInstallerServices@COM@WCP@Windows@@UEAAJKPEB_WPEAPEA_WPEAUIDefinitionIdentity@@@Z
2450x138d60?ReplaceMacros@LocalTransformerServices@COM@WCP@Windows@@UEAAJKPEB_WPEAPEA_WK@Z
2460x26f110?ReplaceSystemPathStringWithDefaultMacro@Rtl@ComponentMacroReplacement@@YAJW4ReplaceSystemPathStringWithDefaultMacroFlags@12@AEBU_LUNICODE_STRING@@PEAV?$Auto@U_LUNICODE_STRING@@@Windows@@PEAW4ReplaceSystemPathStringWithDefaultMacroDisposition@12@@Z
2470x432b0?ReplaceVariablesInString@Rtl@Implementation@WCP@Windows@@YAJPEBU_LBLOB@@P6A?AU_RTL_UCSCHAR_DECODER_RETURN_VALUE@@PEBE1@ZPEAXP6AJ30PEAU_RTL_SMART_LBLOB_UCSCHAR_WRITING_CONTEXT@@@ZP6AJKPEAU_RTL_SMART_LBLOB_WRITING_CONTEXT@@@ZP6AJQEBK_K6@ZPEAU5@@Z
2480x143880?ResolvePendingPhases@COM@Windows@@YAJKPEAVCQueueExecutor@12@PEA_N@Z
2490x7a440?Restore@PrivilegeAcquisition@RtlSystemUtil@@QEAAJXZ
2500x27f20?RtlCaptureTracingParameterList@Rtl@WCP@Windows@@YAXK_KPEADQEAU_RTL_TRACING_PARAMETER@123@@Z
2510x24090?RtlFormatIntoStreamFromParameterList@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@QEBD_KQEBU_RTL_TRACING_PARAMETER@123@@Z
2520x24890?RtlGetFacilityTracingFlags@Rtl@WCP@Windows@@YAKPEAU_RTL_TRACING_FACILITY@123@@Z
2530x647a0?RtlGetVersionResourceFromSelf@@YAXPEAU_RTL_VERSION_RESOURCE@@@Z
2540x25130?RtlIsTracingEnabled@Rtl@WCP@Windows@@YA_NPEAU_RTL_TRACING_FACILITY@123@K@Z
2550x2772e0?RtlRunPrimitiveOperationsInXmlAgainstExecutor@@YAJW4RtlRunPrimitivesFlags@@_KPEBU_LBLOB@@AEBU?$Vector@QEBU_UNICODE_STRING@@@Windows@@P6AJ01P6AXPEAXPEAT_PRIMITIVE_OPERATION_UNION_VALUES@@PEAU_PRIMITIVE_OPERATION@@PEAE@ZP6AX456@ZP6AJPEBU_UNICODE_STRING@@4@Z44PEBU_POQ_PROGRESS_INFORMATION@@PEAU_POQ_CHECKPOINT_INFORMATION@@PEAU_POQ_FAILURE_INFORMATION@@@Z4P6AJPEBU7@4@ZPEBU8@PEAU9@PEAU_POQ_FAILURE_INFORMATION@@PEAW4RtlRunPrimitivesDisposition@@@Z
2560x2802f0?RtlRunPrimitiveOperationsInXmlAgainstSil@@YAJW4RtlRunPrimitivesFlags@@_KPEAUIRtlSystemIsolationLayer@Rtl@Windows@@PEBU_LBLOB@@AEBU?$Vector@QEBU_UNICODE_STRING@@@4@P6AJPEBU_UNICODE_STRING@@PEAX@ZPEBU_POQ_PROGRESS_INFORMATION@@PEAU_POQ_CHECKPOINT_INFORMATION@@PEAU_POQ_FAILURE_INFORMATION@@PEAW4RtlRunPrimitivesDisposition@@@Z
2570x42f70?RtlShutdownTracing@Rtl@WCP@Windows@@YAXXZ
2580x7faf0?RtlTraceEx@Rtl@WCP@Windows@@YAXPEBU_RTL_TRACING_STATIC_DATA@123@QEBQEBX@Z
2590x7d9d0?RtlTraceFailureFromGroupList@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@PEBU_RTL_TRACING_FAILURE_DATA@123@_KQEBU_RTL_FORMATTING_GROUP@123@@Z
2600x280380?RtlTraceFormat@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBUIRtlSystemIsolationLayerWithPOQ@13@@Z
2610x1c7360?RtlTraceFormat_FormattableObject@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2620x1c73e0?RtlTraceFormat_HANDLE@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2630x78cb0?RtlTraceFormat_IRtlBaseIdentity@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2640x46ba0?RtlTraceFormat_IRtlDefinitionAppId@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2650x1c7560?RtlTraceFormat_IRtlFormattableObject@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2660x1c75c0?RtlTraceFormat_PCBOOLEAN@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2670x48320?RtlTraceFormat_PCFOUR_PART_VERSION@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2680x1c7640?RtlTraceFormat_PCGUID@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2690x4f2f0?RtlTraceFormat_PCHRESULT@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2700x1c76a0?RtlTraceFormat_PCLARGE_INTEGER_AsReadableTime@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2710x7d860?RtlTraceFormat_PCLARGE_INTEGER_AsTime@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2720x65790?RtlTraceFormat_PCLBLOB@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2730x1c79d0?RtlTraceFormat_PCLBLOB_AsBase64@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2740x1c7c60?RtlTraceFormat_PCLBLOB_LimitLength@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2750x1c7e50?RtlTraceFormat_PCLONG@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2760x80cf0?RtlTraceFormat_PCLUNICODE_STRING@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2770x60b20?RtlTraceFormat_PCLUNICODE_STRING_AsLiteralString@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2780x1c7ea0?RtlTraceFormat_PCLUTF8_STRING@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2790x1c7ed0?RtlTraceFormat_PCLUTF8_STRING_AsLiteralString@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2800x7e0a0?RtlTraceFormat_PCNTSTATUS@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2810x1c8290?RtlTraceFormat_PCPCVOID@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2820x1c82e0?RtlTraceFormat_PCPCVOID_AsOptDerefPCVOID@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2830x1c8330?RtlTraceFormat_PCSIZE_T@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2840x1c8380?RtlTraceFormat_PCSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2850x60cf0?RtlTraceFormat_PCSTR_AsLiteralString@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2860x809b0?RtlTraceFormat_PCULONG@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2870x1c8330?RtlTraceFormat_PCULONGLONG@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2880x1c83a0?RtlTraceFormat_PCULONGLONG_AsDecimalOnly@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2890x1c83f0?RtlTraceFormat_PCULONGLONG_AsTickDelta@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2900x5cdf0?RtlTraceFormat_PCULONG_AsDecimalOnly@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2910x63120?RtlTraceFormat_PCULONG_AsHexadecimalOnly@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2920x46db0?RtlTraceFormat_PCULONG_AsHexadecimalOnly_ShortZero@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2930x1c87d0?RtlTraceFormat_PCULONG_AsRegValueType@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2940x1c8820?RtlTraceFormat_PCULONG_AsSpecialCount@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2950x1c88e0?RtlTraceFormat_PCULONG_AsWin32Error@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2960x1c8330?RtlTraceFormat_PCULONG_PTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2970x1c8ba0?RtlTraceFormat_PCUNICODE_STRING@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2980x48480?RtlTraceFormat_PCUSHORT_AsProcessorArchitecture@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
2990x46d80?RtlTraceFormat_PCVOID@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
3000x78cf0?RtlTraceFormat_PCWSTR@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
3010x1c8cc0?RtlTraceFormat_PCWSTR_Array@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
3020x1c8e10?RtlTraceFormat_PCWSTR_AsLiteralString@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
3030x1c8f70?RtlTraceFormat_PCbool@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
3040x1c8fc0?RtlTraceFormat_PCbool_AsSuccessIndicator@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
3050x1c9040?RtlTraceFormat_RegistryValue@Rtl@WCP@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
3060x22260?RtlTraceFromGroupList@Rtl@WCP@Windows@@YAXKPEAU_RTL_TRACING_FACILITY@123@PEBU_RTL_TRACING_FAILURE_DATA@123@_KQEBU_RTL_FORMATTING_GROUP@123@@Z
3070x21dc0?RtlTraceVa@Rtl@WCP@Windows@@YAXKKPEAU_RTL_TRACING_FACILITY@123@QEBD_KPEAD@Z
3080x7f1c0?RtlWcpCreateMicrodomFromXmlBlob@Rtl@Implementation@WCP@Windows@@YAJPEBU_LBLOB@@PEAUIParseErrorCallback@1Microdom@4@PEAV?$Auto@PEAUIRtlMicrodom@Rtl@Microdom@Windows@@@4@@Z
3090x1fdb50?RtlWcpParseManifestFromXml@Rtl@Implementation@WCP@Windows@@YAJKPEBU_LBLOB@@PEAUIParseErrorCallback@1Microdom@4@PEAUIRtlManifestParseErrorCallback@1ManifestParser@4@PEAV?$Auto@PEAVIRtlCdf@Rtl@Cdf@Windows@@@4@@Z
3100xfdb40?Scavenge@CRawStoreLayout@ComponentStore@@QEAAJ_NAEBUScavengeControl@12@PEAUIRtlDirectory@Rtl@Windows@@PEAUIScavengeLastDitch@12@@Z
3110xf38f0?SetComponentFileFlag@CRawStoreLayout@ComponentStore@@QEAAJ_NKAEBUComponentData@2@AEBU_LUNICODE_STRING@@@Z
3120xf3c50?SetComponentFileStageFlag@CRawStoreLayout@ComponentStore@@QEAAJ_NPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@AEBU_LUNICODE_STRING@@@Z
3130xf3d20?SetComponentFlag@CRawStoreLayout@ComponentStore@@QEAAJ_NKAEBUComponentData@2@@Z
3140xf3d50?SetComponentFlag@CRawStoreLayout@ComponentStore@@QEAAJ_NKPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@@Z
3150xf0470?SetVersionedIndexFlags@CRawStoreLayout@ComponentStore@@QEAAJPEAUIRtlKey@Rtl@Windows@@K@Z
3160x1f09b0?ShouldRunAIs@ExecutionQueueDeriver@AiQueue@@QEAAJPEAUIRtlDefinitionIdentity@Rtl@Identity@Windows@@PEA_N@Z
3170x25cab0?SilCreateDirectories@Rtl@Windows@@YAJPEAUIRtlSystemIsolationLayerPublic@12@AEBU_LUNICODE_STRING@@@Z
3180x25ccd0?SilCreateKeys@Rtl@Windows@@YAJPEAUIRtlSystemIsolationLayerPublic@12@AEBU_LUNICODE_STRING@@@Z
3190x25cf90SilDoesDirectoryExist
3200x25d1e0?SilDoesFileExist@Rtl@Windows@@YAJPEAUIRtlSystemIsolationLayerPublic@12@PEAUIRtlDirectory@12@AEBU_LUNICODE_STRING@@PEA_N@Z
3210x25d4d0?SilFindExistingPath@Rtl@Windows@@YAJPEAUIRtlSystemIsolationLayerPublic@12@AEBU_LUNICODE_STRING@@PEAU4@PEAV?$Auto@PEAUIRtlDirectory@Rtl@Windows@@@2@@Z
3220x25d680?SilGetRegistryDWORD@Rtl@Windows@@YAJKPEAUIRtlKey@12@AEBU_LUNICODE_STRING@@PEAK2@Z
3230x25d780?SilGetRegistryDWORD@Rtl@Windows@@YAJKPEAUIRtlSystemIsolationLayerPublic@12@AEBU_LUNICODE_STRING@@1PEAK2@Z
3240x25d880?SilGetRegistryString@Rtl@Windows@@YAJKPEAUIRtlKey@12@AEBU_LUNICODE_STRING@@PEAV?$Auto@U_LUNICODE_STRING@@@2@PEAK@Z
3250x25da30?SilGetRegistryString@Rtl@Windows@@YAJKPEAUIRtlSystemIsolationLayerPublic@12@AEBU_LUNICODE_STRING@@1PEAV?$Auto@U_LUNICODE_STRING@@@2@PEAK@Z
3260x25ddd0?SilSetRegistryDWORD@Rtl@Windows@@YAJPEAUIRtlSystemIsolationLayerPublic@12@AEBU_LUNICODE_STRING@@1K@Z
3270x259c20?SplitWin32RegistryPathIntoBaseAndSubKey@COM@Windows@@YAJPEBGPEAPEAUHKEY__@@PEAPEBG@Z
3280x4ebb0?Swap@?$Auto@U_SECURITY_DESCRIPTOR@@@Windows@@QEAAXPEAV12@@Z
3290x46720?TraceChangeList@Rtl@ComponentStore@Windows@@YAXPEAUIRtlFormattedOutputStream@13@PEBX@Z
3300x20510?TraceETWEvent@Rtl@WCP@Windows@@YAXU_EVENT_DESCRIPTOR@@PEBGZZ
3310x148770?TransferWin32FilePathIntoTempDirectory@@YAJKPEAUIRtlDirectory@Rtl@Windows@@PEAUIRtlSystemIsolationLayer@23@1AEBU_LUNICODE_STRING@@2PEAV?$Auto@PEAUIRtlFile@Rtl@Windows@@@3@@Z
3320x1d55e0?TrimNamespaceTable@CC14NCanonicalizer@@MEAAJUElement@Rtl@Microdom@Windows@@PEAVCNamespaceTable@@PEAVCAttributeTable@@@Z
3330x139750?TryGetRollbackStorageDirectory@LocalTransformerServices@COM@WCP@Windows@@UEAAJKPEAPEAUIRtlDirectory@Rtl@4@@Z
3340x139c00?TryGetRollbackStorageKey@LocalTransformerServices@COM@WCP@Windows@@UEAAJKPEAPEAUIRtlKey@Rtl@4@@Z
3350x284c00?TryGetWin32DirectoryRollbackStoragePath@COM@Transformers@WCP@Windows@@YAJKPEAUICSITransformerServices@@PEAPEAG@Z
3360x284d90?TryGetWin32RegistryRollbackStoragePath@COM@Transformers@WCP@Windows@@YAJKPEAUICSITransformerServices@@PEAPEAUHKEY__@@PEAPEAG@Z
3370x13a0a0?VerifyAdvancedInstaller@LocalInstallerServices@COM@WCP@Windows@@UEAAJPEB_W00PEAK@Z
3380x258130?VerifyCertChainRoot@CCatalog@@QEAAJKPEAK@Z
3390x113940?VerifyFileAgainstCatalog@Rtl@ComponentStore@Windows@@YAJAEBVCCatalog@@AEBU_LUNICODE_STRING@@PEBUIRtlDefinitionIdentity@1Identity@3@AEBU_LBLOB@@3PEAW4VerifyFileAgainstCatalogDisposition@123@@Z
3400x258e90?VerifySigner@CCatalog@@QEAAJPEAUIRtlSystemIsolationLayer@Rtl@Windows@@@Z
3410x284fa0?VirtualNtRegistryPathToPhysical@Rtl@Transformers@WCP@Windows@@YAJPEAUICSITransformerServices@@AEBU_LUNICODE_STRING@@PEAV?$Auto@U_LUNICODE_STRING@@@4@K@Z
3420x13a240?VirtualPathToPhysical@LocalInstallerServices@COM@WCP@Windows@@UEAAJKPEB_WPEAPEA_W@Z
3430x285150?VirtualWin32RegistryPathToPhysical@COM@Transformers@WCP@Windows@@YAJPEAUICSITransformerServices@@PEBGPEAPEAUHKEY__@@PEAPEAGK@Z
3440x1d8170?WriteAt@CBufferedStream@@QEAAJ_K0PEBXPEA_K@Z
3450x1fcd00?XmlParseError@XmlParseErrorCallback@@UEAAXKKKJAEBU_LUTF8_STRING@@@Z
3460x13a340?get_IsolationAllocator@LocalInstallerServices@COM@WCP@Windows@@UEAAJPEAPEAUIMalloc@@@Z
3470x13a3d0?get_RebootIndicator@LocalInstallerServices@COM@WCP@Windows@@UEAAJPEAW4RebootIndicators@@@Z
3480x13a450?get_System@LocalInstallerServices@COM@WCP@Windows@@UEAAJPEAPEAUIRtlSystemIsolationLayerPublic@Rtl@4@@Z
3490x13a520?get_TargetProcessorArchitecture@LocalInstallerServices@COM@WCP@Windows@@UEAAJPEAK@Z
3500x13a5b0?get_UserProfile@LocalInstallerServices@COM@WCP@Windows@@UEAAJPEAPEAUIRtlUserProfile@Rtl@4@@Z
3510x13a8c0?put_RebootIndicator@LocalInstallerServices@COM@WCP@Windows@@UEAAJW4RebootIndicators@@@Z
3520x59de0?utiludom_GetElementImmediateChildrenByName@@YAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UElement@234@PEBU_LUTF8_STRING@@2PEAV?$Auto@U?$Vector@UElement@Rtl@Microdom@Windows@@@Windows@@@4@@Z
3530x1d8400?utiludom_GetElementNameDetails@@YAJPEAUIRtlMicrodom@Rtl@Microdom@Windows@@UElement@234@PEAPEBU_LUTF8_STRING@@22@Z
3540x144980ApplyTransactionPOQsToSil
3550x548e0ConvertHResultToNtStatus
3560x76aa0ConvertNtStatusToHResult
3570x1be980CreateNewOfflineStore
3580x1c6020CreateNewPseudoWindows
3590x1c6050CreateNewPseudoWindowsEx
3600x1c69c0CreateNewWindows
3610x25e1a0DelayExecution
3620x1c6e30DismountRegistryHives
3630x1ec6a0DllCsiGetHandler
3640x145210ExecuteMidgroundInstallers
3650x4d700ExpandAndNullTerminateEnvironmentVariableString
3660x84eb0FreeAndZeroCSI_BROKEN_COMPONENT
3670x84f20FreeAndZeroCSI_REPAIRED_COMPONENT
3680xcd1a0GetAppIdAuthority
3690x1f20e0GetFriendlyInstallerName
3700x4dc80GetIdentityAuthority
3710x1142a0GetPrimitiveInstallerSupport
3720x1526c0GetSystemStore
3730x259e00GetTemporaryPath
3740x1fd6c0GetVersionString
3750x84f90InitializeCSI_BROKEN_COMPONENT
3760x84fc0InitializeCSI_REPAIRED_COMPONENT
3770x259fa0IsCompactOSEnabled
3780xcf360IsIdentityPnPDriver
3790x1fce40IsSkuAssembly
3800x114790MergeTwoChangeLists
3810x2611a0ORAdvanceSubkeyEnumerator
3820x262eb0ORAdvanceValueEnumerator
3830x261350ORCleanupSubkeyEnumerator
3840x262fa0ORCleanupValueEnumerator
3850x2642b0ORCloseHive
3860x2613e0ORCloseKey
3870x2643b0ORCreateHive
3880x2643c0ORCreateHiveEx
3890x261470ORCreateKey
3900x261a30ORDeleteKey
3910x263010ORDeleteValue
3920x261c60OREnumKey
3930x263110OREnumValue
3940x264780ORFlushHive
3950x264f10ORGetKeySecurity
3960x2634f0ORGetValue
3970x261e00ORGetVirtualFlags
3980x261ea0ORInitializeSubkeyEnumerator
3990x2637e0ORInitializeValueEnumerator
4000x2652c0ORMergeHives
4010x2648c0OROpenHive
4020x2648e0OROpenHiveByHandle
4030x261fc0OROpenKey
4040x2622d0ORQueryInfoKey
4050x2624f0ORQueryInfoKeyEx
4060x2638c0ORQueryInfoKeyValueEx
4070x2626e0ORQuerySubkeyEnumerator
4080x2639b0ORQueryValueEnumerator
4090x262810ORRenameKey
4100x264c30ORSaveHive
4110x264c50ORSaveHiveEx
4120x264dd0ORSaveHiveToHandle
4130x265000ORSetKeySecurity
4140x263af0ORSetValue
4150x262c50ORSetVirtualFlags
4160x262d10ORStartSubkeyEnumerator
4170x263f70ORStartValueEnumerator
4180x1bedf0OpenExistingOfflineStore
4190xc6af0ParseManifest
4200xc6b20ParseManifestEx
4210x18b60RtlAllocateLBlob
4220x18c00RtlAllocateLUnicodeString
4230x186c0RtlAllocateLUtf8String
4240x1cc3d0RtlAllocateUnicodeString
4250x38370RtlAppendLUnicodeStringToLUnicodeString
4260x1cd200RtlAppendLUtf8StringToLUnicodeString
4270x49b40RtlAppendLUtf8StringToLUtf8String
4280x18760RtlAppendUcsCharacterToLUnicodeString
4290x17eb0RtlAppendUcsCharactersToLUnicodeString
4300x1cb270RtlBase64EncodeLBlobToLUnicodeString
4310x1cd3b0RtlCalculateUtf16StringLengthFromLUtf8String
4320x1ce530RtlCombineNtPathSegments
4330x80220RtlCommitSmartLBlobUcsWritingContext
4340xf930RtlCompareEncodedLBlobs
4350xf7f0RtlCompareLUnicodeStringToLUtf8String
4360xf8f0RtlCompareLUnicodeStrings
4370xf830RtlCompareLUtf8Strings
4380x17c00RtlConcatenateLUnicodeStrings
4390x49e10RtlConcatenateLUtf8Strings
4400x15e70RtlConvertNtFilePathToWin32FilePath
4410x1ce920RtlConvertNtRegistryPathToWin32RegistryPath
4420x1ce9f0RtlConvertWin32FilePathToNtFilePath
4430x1ced20RtlConvertWin32RegistryPathToNtRegistryPath
4440x1ced50RtlConvertWin32RegistryPathToNtRegistryPathWithSid
4450x189a0RtlCopyLBlob
4460x18f10RtlCopyLUnicodeString
4470x6e490RtlCopyLUtf8String
4480x1cd570RtlCopyLUtf8StringToLUnicodeString
4490x23f8c0RtlCreateCdfEx
4500x1dacc0RtlCreateDefaultMicrodomXmlWriter
4510x1dc3e0RtlCreateDefaultXmlWriter
4520x64990RtlCreateMicrodom
4530x1e3230RtlCreateMicrodomUpdateContext
4540x1e33d0RtlCreateUpdatedMicrodomAsMicrodom
4550x1e3500RtlCreateUpdatedMicrodomAsUtf8
4560x1d00f0RtlCreateUtf16LEUCSStringBuilder
4570x1d02f0RtlCreateUtf8UCSStringBuilder
4580x1a4f0RtlDeallocateUnicodeString
4590x1cb5f0RtlDecodeBase64LUnicodeStringToLBlob
4600x61830RtlDecodeBase64LUtf8StringToLBlob
4610x15490RtlDecodeUtf16LE
4620x27810RtlDecodeUtf8
4630x3f860RtlDestroyGrowingList
4640x1db50RtlDestroyMicrodomUpdateContext
4650x2e910RtlDetermineTranscodedLBlobSize
4660x40190RtlDoesLUnicodeStringMatchExpression
4670x27c70RtlDowncaseUCSCharacter
4680x1cc780RtlDuplicateCountedStringToLUnicodeString
4690xff60RtlDuplicateLBlob
4700x17390RtlDuplicateLUnicodeString
4710x58560RtlDuplicateLUnicodeStringToLUtf8String
4720x6ac00RtlDuplicateLUtf8String
4730x6ed40RtlDuplicateLUtf8StringToLUnicodeString
4740x1cca20RtlDuplicateNullTerminatedAnsiStringToLUnicodeString
4750x1ccb00RtlDuplicateNullTerminatedStringToLUnicodeString
4760x1ccbb0RtlDuplicateUnicodeStringToLUnicodeString
4770x1cd7d0RtlDuplicateUnicodeStringToLUtf8String
4780x27bd0RtlEncodeUtf16LE
4790x27660RtlEncodeUtf8
4800x54790RtlEqualLUnicodeStringPrefix
4810x1cccc0RtlEqualLUnicodeStringSuffix
4820x547d0RtlEqualLUnicodeStrings
4830x1cd8f0RtlEqualLUtf8StringPrefix
4840x1cda50RtlEqualLUtf8Strings
4850x1e6130RtlExecuteXPathOverMicrodom
4860x36cd0RtlFilterLUnicodeString
4870x7d100RtlFinalizeSmartLBlobUcsWritingContext
4880x1abe0RtlFreeLBlob
4890x1a550RtlFreeLUnicodeString
4900x1a520RtlFreeLUtf8String
4910x23e160RtlGetAppIdAuthority
4920x2f5c0RtlGetCharacterSetDecoder
4930x183320RtlGetDirectSystem
4940x1c4b0RtlGetEncodingSizeUtf16
4950x30fe0RtlGetEncodingSizeUtf8
4960x1cb800RtlGetHashAlgorithmHashLength
4970x3c4c0RtlGetIdentityAuthority
4980x1fd7f0RtlGetPendingXmlVersion
4990x183580RtlGetSystem
5000x1cb950RtlHashLBlob
5010x3bc60RtlHashLUnicodeString
5020x4f0f0RtlHashLUtf8String
5030xb590RtlIndexIntoGrowingList
5040x7ae10RtlInitLUnicodeStringFromNullTerminatedString
5050x28620RtlInitLUnicodeStringFromUnicodeString
5060x4d950RtlInitUnicodeStringFromLUnicodeString
5070x3a4e0RtlInitializeGrowingList
5080x181f0RtlInitializeSmartLBlobWritingContext
5090x6f4f0RtlInitializeSmartLUnicodeStringWritingContext
5100x1cf3a0RtlInitializeSmartLUtf8StringWritingContext
5110x18eb0RtlIsLBlobValid
5120x190e0RtlIsLUnicodeStringValid
5130x27b00RtlLengthOfUcsCharacterEncodedAsUtf8
5140x1ccdf0RtlMatchLUnicodeStringAgainstLUtf8StringList
5150x1ccff0RtlMatchLUnicodeStringAgainstList
5160xd150RtlMatchLUnicodeStringAgainstPointerList
5170x1cdb10RtlMatchLUtf8StringAgainstList
5180x1cdd00RtlMatchLUtf8StringAgainstPointerList
5190x1e3660RtlMicrodomUpdateCreateAttributeNs
5200x1e3830RtlMicrodomUpdateCreateElementNs
5210x1e3ad0RtlMicrodomUpdateCreateTextual
5220x1e3c20RtlMicrodomUpdateGetCookieForExistingAttribute
5230x1e3c50RtlMicrodomUpdateGetCookieForExistingElement
5240x1e3c80RtlMicrodomUpdateGetCookieForExistingNode
5250x1e3d40RtlMicrodomUpdateInsertChild
5260x1e3ec0RtlMicrodomUpdateInsertMicrodomNode
5270x1e41f0RtlMicrodomUpdateRemoveChild
5280x1e4310RtlMicrodomUpdateRemoveElement
5290x1e43d0RtlMicrodomUpdateSetNodeName
5300x1e4510RtlMicrodomUpdateSetNodeTextContent
5310x33670RtlMurmurHashLBlob
5320x3f7e0RtlNsDestroy
5330x3fdf0RtlNsInitialize
5340x1fd820RtlParseDottedVersion
5350x8b2d0RtlParseManifestMicrodomIntoCdf
5360x51180RtlPreInitializeSmartLBlobUcsWritingContext
5370x18d00RtlReallocateLBlob
5380x174b0RtlReallocateLUnicodeString
5390x6f660RtlReallocateLUtf8String
5400x67f90RtlReallocateUnicodeString
5410x4caa0RtlRegisterErrorOriginationCallback
5420x183d00RtlReplaceSystemPathMappings
5430x6f8a0RtlReportErrorOrigination
5440x1d09c0RtlReportErrorPropagation
5450x80de0RtlSmartMultiUcsEncoder_Utf16LE
5460x51fa0RtlSmartMultiUcsEncoder_Utf8
5470x1cf400RtlSmartUcsEncoder_Utf16LE
5480x1cf450RtlSmartUcsEncoder_Utf8
5490x175f0RtlSplitEncodedLBlob
5500x17030RtlSplitLUnicodeString
5510x1cdef0RtlSplitLUtf8String
5520x1cef20RtlSplitNtPath
5530x1cf080RtlSplitWin32RegistryPathIntoRootAndLeaves
5540x2ed40RtlTranscodeLBlobs
5550x44500RtlUpcaseUCSCharacter
5560x1bf230RtlWcpDllDebugEntrypoint
5570x1bf270RtlWcpDllDebugSetFeatureState
5580x1cf4a0RtlWriteDecodedUcsDataIntoSmartLBlobUcsWritingContext
5590x1dadc0RtlWriteMicrodomXml
5600x1cf750RtlWriteUcsDataIntoSmartLBlobUcsWritingContext
5610x1e67b0RtlXmlCloneRawTokenizationState
5620x1e68b0RtlXmlCopyStringOut
5630xb310RtlXmlDefaultCompareStrings
5640x55950RtlXmlDestroyNextLogicalThing
5650x7060RtlXmlDetermineStreamEncoding
5660x1e7c80RtlXmlExtentToString
5670x34900RtlXmlExtentToUtf8String
5680x6eb0RtlXmlInitializeNextLogicalThing
5690x42ff0RtlXmlInitializeTokenization
5700x8e80RtlXmlNextLogicalThing
5710x7340RtlXmlNextToken
5720x80b40SetIsolationIMalloc
5730x1c9470SetLogToConsole
5740x1fde80SilCreateBufferedSil
5750x1bf360SilCreateRerootedSil
5760x7b800WcpInitialize
5770x83100WcpReportExternalErrorOrigination
5780x83110WcpSetHelperCallback
5790x80dd0WcpShutdown
5800x114360WriteWinnersFromChangelist
module_namewcp.dll
flags0
timestamp1979-05-07 21:23:00
version0.0
ordinal_base1
nFunctions580
nNames580
Names(580)0x393e08
Functions(580)0x3934f8
NameOrdinals(580)0x394718

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionWindows Componentization Platform Servicing API
FileVersion10.0.22621.1906 (WinBuild.160101.0800)
InternalNameWCPDll
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenamewcp.dll
ProductNameMicrosoft® Windows® Operating System
ProductVersion10.0.22621.1906

VS_FIXEDFILEINFO

FileVersion10.0.22621.1906
ProductVersion10.0.22621.1906
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType1
FileSubtype0

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Windows Production PCA 2011
serial: 33000004158295A1A3D82E2857000000000415

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:04:15:82:95:a1:a3:d8:2e:28:57:00:00:00:00:04:15
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Production PCA 2011
        Validity
            Not Before: Feb  3 00:05:42 2023 GMT
            Not After : Feb  1 00:05:42 2024 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:f8:f6:2a:d0:be:d5:e2:cd:fe:36:f1:d7:55:85:
                    04:4a:9f:83:87:3d:c3:26:16:f0:a9:61:1e:cc:b6:
                    d8:88:0c:33:a5:85:c0:17:9e:09:77:e9:af:80:12:
                    21:7a:70:95:f9:bf:f8:41:af:40:1b:e7:66:08:85:
                    6a:01:e1:56:69:71:5f:17:c0:22:80:d1:0d:0f:38:
                    15:9a:a1:b8:61:b3:f9:b0:87:70:53:29:39:9a:33:
                    d6:43:30:99:fc:df:da:b8:e8:ed:5b:68:4a:6f:db:
                    9b:d2:14:7b:aa:0c:f9:0e:ec:0d:e7:2c:73:92:7b:
                    4e:d0:cf:b2:4d:40:53:d8:1b:02:bf:a1:02:69:1e:
                    3d:a6:57:ae:68:65:f9:c0:41:17:ab:2f:8d:5e:e9:
                    cf:e8:a6:d2:75:81:72:52:4d:5b:9e:4a:f1:05:5e:
                    ab:e5:6c:cd:2e:33:11:26:4e:6c:0a:51:86:81:e1:
                    69:6a:fc:03:be:3a:ee:5a:cf:83:3d:36:20:7c:1a:
                    35:4c:fa:7e:bc:72:3f:f1:70:f8:f0:f8:50:48:62:
                    e6:2f:ef:08:33:fe:b9:b5:37:8e:04:df:29:8d:cf:
                    ed:82:c9:30:7c:69:08:e5:92:43:32:3d:ca:b7:b2:
                    a0:28:eb:5e:8d:c2:3c:50:b3:47:35:1b:e2:34:40:
                    84:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                1.3.6.1.4.1.311.10.3.6, Code Signing
            X509v3 Subject Key Identifier: 
                62:BB:E5:49:30:B4:04:62:37:6C:B3:20:90:44:8F:8D:75:70:6F:32
            X509v3 Subject Alternative Name: 
                DirName:/OU=Microsoft Corporation/serialNumber=229879\+500174
            X509v3 Authority Key Identifier: 
                A9:29:02:39:8E:16:C4:97:78:CD:90:F9:9E:4F:9A:E1:7C:55:AF:53
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://www.microsoft.com/pkiops/crl/MicWinProPCA2011_2011-10-19.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pkiops/certs/MicWinProPCA2011_2011-10-19.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        30:e9:1c:73:87:9b:64:54:d8:c1:5e:15:11:60:c3:b4:f0:42:
        c3:a3:cd:d3:2a:af:15:6d:19:67:d1:95:f2:e1:27:9e:25:f4:
        9e:61:0c:52:b1:ce:86:2f:b0:76:ce:10:e2:65:1a:9c:64:27:
        5f:a3:d9:5f:c0:79:d3:83:9e:5f:2d:97:42:d0:bc:c6:a2:2e:
        b0:06:b3:5b:04:cd:3f:5e:40:9e:3a:99:1b:e3:85:41:14:14:
        b5:cf:a5:e3:3a:7d:9a:49:5a:ab:53:a2:e6:3c:15:96:93:a4:
        bd:bd:61:17:a3:99:bd:fe:bb:b8:d1:c1:85:c6:6d:3b:fe:42:
        dc:d8:f8:91:f7:a3:f3:6f:f3:c0:78:8e:cc:45:95:39:a0:8c:
        b0:05:fe:76:92:18:2d:b0:db:58:94:d3:83:55:66:47:2e:f7:
        46:67:f4:31:2e:97:2c:ce:c1:1a:23:dc:4f:5e:48:08:02:f1:
        fe:35:3b:3b:37:a2:c3:4d:dc:d0:92:e8:3d:e1:20:37:9d:57:
        6e:83:aa:96:89:69:fb:77:66:8a:cc:18:97:53:cb:16:e7:6c:
        88:be:99:9f:e1:13:42:98:6d:fa:30:09:f3:42:26:ad:ec:b3:
        87:e3:0d:98:32:46:14:35:dc:89:64:df:63:ce:7e:b8:2b:f2:
        f1:d6:c1:30

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:07:76:56:00:00:00:00:00:08
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
        Validity
            Not Before: Oct 19 18:41:42 2011 GMT
            Not After : Oct 19 18:51:42 2026 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Windows Production PCA 2011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:dd:0c:bb:a2:e4:2e:09:e3:e7:c5:f7:96:69:bc:
                    00:21:bd:69:33:33:ef:ad:04:cb:54:80:ee:06:83:
                    bb:c5:20:84:d9:f7:d2:8b:f3:38:b0:ab:a4:ad:2d:
                    7c:62:79:05:ff:e3:4a:3f:04:35:20:70:e3:c4:e7:
                    6b:e0:9c:c0:36:75:e9:8a:31:dd:8d:70:e5:dc:37:
                    b5:74:46:96:28:5b:87:60:23:2c:bf:dc:47:a5:67:
                    f7:51:27:9e:72:eb:07:a6:c9:b9:1e:3b:53:35:7c:
                    e5:d3:ec:27:b9:87:1c:fe:b9:c9:23:09:6f:a8:46:
                    91:c1:6e:96:3c:41:d3:cb:a3:3f:5d:02:6a:4d:ec:
                    69:1f:25:28:5c:36:ff:fd:43:15:0a:94:e0:19:b4:
                    cf:df:c2:12:e2:c2:5b:27:ee:27:78:30:8b:5b:2a:
                    09:6b:22:89:53:60:16:2c:c0:68:1d:53:ba:ec:49:
                    f3:9d:61:8c:85:68:09:73:44:5d:7d:a2:54:2b:dd:
                    79:f7:15:cf:35:5d:6c:1c:2b:5c:ce:bc:9c:23:8b:
                    6f:6e:b5:26:d9:36:13:c3:4f:d6:27:ae:b9:32:3b:
                    41:92:2c:e1:c7:cd:77:e8:aa:54:4e:f7:5c:0b:04:
                    87:65:b4:43:18:a8:b2:e0:6d:19:77:ec:5a:24:fa:
                    48:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                A9:29:02:39:8E:16:C4:97:78:CD:90:F9:9E:4F:9A:E1:7C:55:AF:53
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                D5:F6:56:CB:8F:E8:A2:5C:62:68:D1:3D:94:90:5B:D7:CE:9A:18:C4
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        14:fc:7c:71:51:a5:79:c2:6e:b2:ef:39:3e:bc:3c:52:0f:6e:
        2b:3f:10:13:73:fe:a8:68:d0:48:a6:34:4d:8a:96:05:26:ee:
        31:46:90:61:79:d6:ff:38:2e:45:6b:f4:c0:e5:28:b8:da:1d:
        8f:8a:db:09:d7:1a:c7:4c:0a:36:66:6a:8c:ec:1b:d7:04:90:
        a8:18:17:a4:9b:b9:e2:40:32:36:76:c4:c1:5a:c6:bf:e4:04:
        c0:ea:16:d3:ac:c3:68:ef:62:ac:dd:54:6c:50:30:58:a6:eb:
        7c:fe:94:a7:4e:8e:f4:ec:7c:86:73:57:c2:52:21:73:34:5a:
        f3:a3:8a:56:c8:04:da:07:09:ed:f8:8b:e3:ce:f4:7e:8e:ae:
        f0:f6:0b:8a:08:fb:3f:c9:1d:72:7f:53:b8:eb:be:63:e0:e3:
        3d:31:65:b0:81:e5:f2:ac:cd:16:a4:9f:3d:a8:b1:9b:c2:42:
        d0:90:84:5f:54:1d:ff:89:ea:ba:1d:47:90:6f:b0:73:4e:41:
        9f:40:9f:5f:e5:a1:2a:b2:11:91:73:8a:21:28:f0:ce:de:73:
        39:5f:3e:ab:5c:60:ec:df:03:10:a8:d3:09:e9:f4:f6:96:85:
        b6:7f:51:88:66:47:19:8d:a2:b0:12:3d:81:2a:68:05:77:bb:
        91:4c:62:7b:b6:c1:07:c7:ba:7a:87:34:03:0e:4b:62:7a:99:
        e9:ca:fc:ce:4a:37:c9:2d:a4:57:7c:1c:fe:3d:dc:b8:0f:5a:
        fa:d6:c4:b3:02:85:02:3a:ea:b3:d9:6e:e4:69:21:37:de:81:
        d1:f6:75:19:05:67:d3:93:57:5e:29:1b:39:c8:ee:2d:e1:cd:
        e4:45:73:5b:d0:d2:ce:7a:ab:16:19:82:46:58:d0:5e:9d:81:
        b3:67:af:6c:35:f2:bc:e5:3f:24:e2:35:a2:0a:75:06:f6:18:
        56:99:d4:78:2c:d1:05:1b:eb:d0:88:01:9d:aa:10:f1:05:df:
        ba:7e:2c:63:b7:06:9b:23:21:c4:f9:78:6c:e2:58:17:06:36:
        2b:91:12:03:cc:a4:d9:f2:2d:ba:f9:94:9d:40:ed:18:45:f1:
        ce:8a:5c:6b:3e:ab:03:d3:70:18:2a:0a:6a:e0:5f:47:d1:d5:
        63:0a:32:f2:af:d7:36:1f:2a:70:5a:e5:42:59:08:71:4b:57:
        ba:7e:83:81:f0:21:3c:f4:1c:c1:c5:b9:90:93:0e:88:45:93:
        86:e9:b1:20:99:be:98:cb:c5:95:a4:5d:62:d6:a0:63:08:20:
        bd:75:10:77:7d:3d:f3:45:b9:9f:97:9f:cb:57:80:6f:33:a9:
        04:cf:77:a4:62:1c:59:7e

undefined method `first' for #

offsetsizetypecomment
15c115HTM#
15d03981168BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x3aa500