Import table
advapi32.dll
TraceEvent, RegCreateKeyExW, RegCloseKey, RegQueryValueExW, RegOpenKeyW, CryptReleaseContext, CryptGetProvParam, CryptAcquireContextW, RegSetValueExW, RegOpenKeyExW, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids
crypt32.dll
CryptVerifyDetachedMessageSignature, CertCreateCertificateContext, CertFreeCertificateContext, CertSerializeCertificateStoreElement
kernel32.dll
TlsSetValue, TlsGetValue, TerminateProcess, GetCurrentProcess, WriteFile, GetStdHandle, DebugBreak, SetErrorMode, CreateFileW, SetFilePointer, FindClose, FindFirstFileW, GetFileAttributesW, SetEndOfFile, GetEnvironmentVariableW, GetTickCount, Sleep, GetSystemTimeAsFileTime, VirtualProtect, IsBadReadPtr, LoadLibraryA, SetLastError, InitializeCriticalSectionAndSpinCount, GetFileAttributesExW, GetSystemWindowsDirectoryW, DeviceIoControl, QueryDosDeviceW, GetLogicalDriveStringsW, GetVersion, OpenProcess, GetSystemDirectoryW, GetWindowsDirectoryW, TlsAlloc, HeapFree, HeapAlloc, GetCommandLineA, GetVersionExA, HeapReAlloc, HeapDestroy, HeapCreate, VirtualFree, VirtualAlloc, GetModuleHandleA, ExitProcess, GetModuleFileNameA, UnhandledExceptionFilter, SetUnhandledExceptionFilter, TlsFree, HeapSize, SetHandleCount, GetFileType, GetStartupInfoA, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, WideCharToMultiByte, GetEnvironmentStringsW, QueryPerformanceCounter, GetCPInfo, GetACP, GetOEMCP, LCMapStringA, MultiByteToWideChar, LCMapStringW, OutputDebugStringA, RtlUnwind, GetStringTypeA, GetStringTypeW, GetLocaleInfoA, GetSystemInfo, VirtualQuery, CreateFileA, GetConsoleCP, GetConsoleMode, SetStdHandle, FlushFileBuffers, GetProcessHeap, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, LocalFree, LocalAlloc, FreeLibrary, GetProcAddress, LoadLibraryW, GetLastError, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, InitializeCriticalSection, ReadFile, GetCurrentDirectoryW, InterlockedDecrement, InterlockedIncrement, InterlockedCompareExchange, GetCurrentProcessId, GetCurrentThreadId, CreateToolhelp32Snapshot, Process32FirstW, CloseHandle, Process32NextW, GetModuleHandleW, LoadLibraryExW, GetModuleFileNameW, GetVersionExW, RaiseException, InterlockedExchange
ntdll.dll
_wcsnicmp
psapi.dll
GetModuleInformation, EnumProcessModules, GetMappedFileNameW
sfc.dll
SfcIsFileProtected
shlwapi.dll
wnsprintfW
Export table
FreeValidationResults
InitializeMemoryStores
NotComDllGetInterface
NotComDllUnload
ValidateModule
ValidateModule_UserApp
ValidateOneFile
ValidateProcess_UserApp
ValidateProcessModules
VldTrustExports_Cleanup
VldTrustExports_Init
