Static | ZeroBOX

PE Compile Time

2019-09-17 14:33:38

PDB Path

C:\agent\_work\66\s\build\ship\x86\burn.pdb

PE Imphash

42d651751c1d75ed4fa8fe71751854ff

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x00048ff7 0x00049000 6.57278109846
.rdata 0x0004a000 0x0001f760 0x0001f800 5.66075286279
.data 0x0006a000 0x000016fc 0x00000a00 3.155161303
.wixburn 0x0006c000 0x00000038 0x00000200 0.49886180657
.rsrc 0x0006d000 0x00029618 0x00029800 4.981741635
.reloc 0x00097000 0x00003dd0 0x00003e00 6.79510076227

Resources

Name Offset Size Language Sub-language File type
RT_ICON 0x0008ec48 0x0000499b LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0008ec48 0x0000499b LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0008ec48 0x0000499b LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0008ec48 0x0000499b LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0008ec48 0x0000499b LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0008ec48 0x0000499b LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_ICON 0x0008ec48 0x0000499b LANG_ENGLISH SUBLANG_ENGLISH_US PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
RT_MESSAGETABLE 0x000935e4 0x00002840 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_GROUP_ICON 0x00095e24 0x00000068 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_VERSION 0x00095e8c 0x000002b8 LANG_ENGLISH SUBLANG_ENGLISH_US COM executable for DOS
RT_MANIFEST 0x00096144 0x000004d2 LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators

Imports

Library ADVAPI32.dll:
0x44a000 RegCloseKey
0x44a004 RegOpenKeyExW
0x44a008 OpenProcessToken
0x44a018 GetUserNameW
0x44a01c RegQueryValueExW
0x44a020 RegDeleteValueW
0x44a024 CloseEventLog
0x44a028 OpenEventLogW
0x44a02c ReportEventW
0x44a034 DecryptFileW
0x44a038 CreateWellKnownSid
0x44a03c InitializeAcl
0x44a040 SetEntriesInAclW
0x44a048 CloseServiceHandle
0x44a04c ControlService
0x44a050 OpenSCManagerW
0x44a054 OpenServiceW
0x44a058 QueryServiceStatus
0x44a068 SetEntriesInAclA
0x44a07c RegSetValueExW
0x44a080 RegQueryInfoKeyW
0x44a084 RegEnumValueW
0x44a088 RegEnumKeyExW
0x44a08c RegDeleteKeyW
0x44a090 RegCreateKeyExW
0x44a094 GetTokenInformation
0x44a098 CryptDestroyHash
0x44a09c CryptHashData
0x44a0a0 CryptCreateHash
0x44a0a4 CryptGetHashParam
0x44a0a8 CryptReleaseContext
0x44a0b0 QueryServiceConfigW
Library USER32.dll:
0x44a35c PeekMessageW
0x44a360 PostMessageW
0x44a364 IsWindow
0x44a368 WaitForInputIdle
0x44a36c PostQuitMessage
0x44a370 GetMessageW
0x44a374 TranslateMessage
0x44a37c PostThreadMessageW
0x44a380 GetMonitorInfoW
0x44a384 MonitorFromPoint
0x44a388 IsDialogMessageW
0x44a38c LoadCursorW
0x44a390 LoadBitmapW
0x44a394 SetWindowLongW
0x44a398 GetWindowLongW
0x44a39c GetCursorPos
0x44a3a0 MessageBoxW
0x44a3a4 CreateWindowExW
0x44a3a8 UnregisterClassW
0x44a3ac RegisterClassW
0x44a3b0 DefWindowProcW
0x44a3b4 DispatchMessageW
Library OLEAUT32.dll:
0x44a330 VariantInit
0x44a334 SysAllocString
0x44a338 VariantClear
0x44a33c SysFreeString
Library GDI32.dll:
0x44a0b8 DeleteDC
0x44a0bc DeleteObject
0x44a0c0 SelectObject
0x44a0c4 StretchBlt
0x44a0c8 GetObjectW
0x44a0cc CreateCompatibleDC
Library SHELL32.dll:
0x44a34c CommandLineToArgvW
0x44a350 SHGetFolderPathW
0x44a354 ShellExecuteExW
Library ole32.dll:
0x44a3bc CoUninitialize
0x44a3c0 CoInitializeEx
0x44a3c4 CoInitialize
0x44a3c8 StringFromGUID2
0x44a3cc CoCreateInstance
0x44a3d0 CoTaskMemFree
0x44a3d4 CLSIDFromProgID
Library KERNEL32.dll:
0x44a0d4 GetCPInfo
0x44a0d8 GetOEMCP
0x44a0dc IsValidCodePage
0x44a0e0 CloseHandle
0x44a0e4 CreateFileW
0x44a0e8 GetProcAddress
0x44a0ec LocalFree
0x44a0f0 HeapSetInformation
0x44a0f4 GetLastError
0x44a0f8 GetModuleHandleW
0x44a0fc FormatMessageW
0x44a100 lstrlenA
0x44a104 lstrlenW
0x44a108 MultiByteToWideChar
0x44a10c WideCharToMultiByte
0x44a110 LCMapStringW
0x44a114 Sleep
0x44a118 GetLocalTime
0x44a11c GetModuleFileNameW
0x44a124 GetTempPathW
0x44a128 GetTempFileNameW
0x44a12c CreateDirectoryW
0x44a130 GetFullPathNameW
0x44a134 CompareStringW
0x44a138 GetCurrentProcessId
0x44a13c WriteFile
0x44a140 SetFilePointer
0x44a144 LoadLibraryW
0x44a148 GetSystemDirectoryW
0x44a14c CreateFileA
0x44a150 HeapAlloc
0x44a154 HeapReAlloc
0x44a158 HeapFree
0x44a15c HeapSize
0x44a160 GetProcessHeap
0x44a164 FindClose
0x44a168 GetCommandLineA
0x44a170 RemoveDirectoryW
0x44a174 SetFileAttributesW
0x44a178 GetFileAttributesW
0x44a17c DeleteFileW
0x44a180 FindFirstFileW
0x44a184 FindNextFileW
0x44a188 MoveFileExW
0x44a18c GetCurrentProcess
0x44a190 GetCurrentThreadId
0x44a19c ReleaseMutex
0x44a1a0 TlsAlloc
0x44a1a4 TlsGetValue
0x44a1a8 TlsSetValue
0x44a1ac TlsFree
0x44a1b0 CreateProcessW
0x44a1b4 GetVersionExW
0x44a1b8 VerSetConditionMask
0x44a1bc FreeLibrary
0x44a1c8 GetSystemTime
0x44a1cc GetNativeSystemInfo
0x44a1d0 GetModuleHandleExW
0x44a1dc GetCommandLineW
0x44a1e0 VerifyVersionInfoW
0x44a1e4 GetVolumePathNameW
0x44a1e8 GetDateFormatW
0x44a1f8 GetStringTypeW
0x44a1fc ReadFile
0x44a200 SetFilePointerEx
0x44a204 DuplicateHandle
0x44a208 InterlockedExchange
0x44a210 LoadLibraryExW
0x44a214 CreateEventW
0x44a21c OpenProcess
0x44a220 GetProcessId
0x44a224 WaitForSingleObject
0x44a228 ConnectNamedPipe
0x44a230 CreateNamedPipeW
0x44a234 CreateThread
0x44a238 GetExitCodeThread
0x44a23c SetEvent
0x44a24c ResetEvent
0x44a250 SetEndOfFile
0x44a254 SetFileTime
0x44a260 CompareStringA
0x44a264 GetExitCodeProcess
0x44a26c CopyFileExW
0x44a270 MapViewOfFile
0x44a274 UnmapViewOfFile
0x44a278 CreateMutexW
0x44a27c CreateFileMappingW
0x44a280 GetThreadLocale
0x44a284 FindFirstFileExW
0x44a290 SetStdHandle
0x44a294 GetConsoleCP
0x44a298 GetConsoleMode
0x44a29c FlushFileBuffers
0x44a2a0 DecodePointer
0x44a2a4 WriteConsoleW
0x44a2a8 GetModuleHandleA
0x44a2ac GlobalAlloc
0x44a2b0 GlobalFree
0x44a2b4 GetFileSizeEx
0x44a2b8 CopyFileW
0x44a2bc VirtualAlloc
0x44a2c0 VirtualFree
0x44a2d0 GetSystemInfo
0x44a2d4 VirtualProtect
0x44a2d8 VirtualQuery
0x44a2dc GetComputerNameW
0x44a2e4 GetFileType
0x44a2e8 GetACP
0x44a2ec ExitProcess
0x44a2f0 GetStdHandle
0x44a2f8 SetLastError
0x44a2fc RtlUnwind
0x44a308 TerminateProcess
0x44a318 InitializeSListHead
0x44a31c IsDebuggerPresent
0x44a320 GetStartupInfoW
0x44a324 RaiseException
0x44a328 LoadLibraryExA
Library RPCRT4.dll:
0x44a344 UuidCreate

!This program cannot be run in DOS mode.
Rich}k
`.rdata
@.data
.wixburn8
@.rsrc
@.reloc
uJVVRQV
uLSSSSRQS
Bj-_f;>
Wj\_f;|A
Yj Xf;
t5f9t0V
t/j\Yf;
j\Zf;TN
f91tNSW
j:Xf;F
ulj?Xf;F
mj\Yf;
/u"PSP
r&j\Yf;K
9~ t?9~
t@j"Zf;
<SVWj83
SSWSh3
9_ t#j
;.wixu
8.wixu
burntC
97tN9w
TSVWjP3
yCh4)E
y*hH*E
9N\t1;
uM9~\uH9~tuC
t f90t
t&9~@v
y(hP-E
@PWPPPV
y@Php4E
j=Zf;T
uNh4>E
j=Zf;T
uNhd>E
j=Zf;T
yIh(EE
y0h`IE
QVWjDXj
yRh@aE
WVh cE
y!hpcE
9G$u_P
SWh8fE
9p t$QWP
SWh8fE
y3hxZE
v%j.Yf;
t0jrYf;
t<f90t7
PQQQQj
PQQQQj
x(C;_,r
uU9u$ua9u
CD+CHV
t*f90t%
t.9~ t
t.9~$t
A9~,t!
uA9](t<!]
C`9G@~
;O,sL3
t SQWR
Bh9^\}
^\9F`}
VVVVVVVj
t*f90t%
x7G;{xr
t6f98t19}
t|f9:tw
ue9s t
uGjiYf;H
u>jtYf;H
u5jsZf;P
PPPPPP
PPRPh]
tD90t@
jhYjtf
URPQQh
;t$,v-
UQPXY]Y[
Tt1jhZ;
^$+^8+
t0jXXf
~$+~8+
F2jgYf;
j"^f91j\^u8
j"^f9q
t/j=[f;
u0jAXf;
u0jAXf;
Wj0XPV
taj*Xf
VWj\^j:
WWWPWS
SSVWh
f9:t!V
QQSWj0j@
PPPPPWS
PP9E u:PPVWP
QSUVW3
PPPPPPPP
QRPh4|F
QRPhT|F
QRPht|F
x&h,ZF
Vj5h|\F
PSSSSSS
VjNh|\F
uwSSSSSS
xSSSSS
uqf;Tx
Vjwhp]F
VjRhp]F
Vjhp]F
u\j:Xf;B
uSj Xf;B
PSSSSSSh
j\Yf;H
tpj\_f;
f90tnj
f90t1j
t6VWVSVP
j\Yf;K
SWRQh(cF
!},!}0
t<PPPP
u.9u*
O,Qh$dF
O4QhDdF
O,Qh$dF
O4Qh8dF
O<QhDdF
A$;r u9;B$u7
A,;r(u
B4;A4w
B0;A0r
C,;C$r$w
C(;C r
Vj7h`hF
Vjlh`hF
SetDefaultDllDirectories
SetDllDirectoryW
c:\agent\_work\66\s\src\libs\dutil\apputil.cpp
c:\agent\_work\66\s\src\libs\dutil\strutil.cpp
UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU
 !"#$%&'()*+,-./0123U456U789:;<=>?@ABCDEFGHIJKLMNOPQRSTUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUU
c:\agent\_work\66\s\src\libs\dutil\pathutil.cpp
>`c:\agent\_work\66\s\src\libs\dutil\memutil.cpp
c:\agent\_work\66\s\src\libs\dutil\dirutil.cpp
Failed to parse command line.
Failed to initialize engine state.
Failed to initialize COM.
Failed to initialize Cryputil.
Failed to initialize Regutil.
Failed to initialize Wiutil.
Failed to initialize XML util.
c:\agent\_work\66\s\src\burn\engine\engine.cpp
Failed to get OS info.
3.11.2.4516
Failed to initialize core.
Failed to run untrusted mode.
Failed to run per-user mode.
Failed to run per-machine mode.
Failed to run embedded mode.
Failed to run RunOnce mode.
Invalid run mode.
Missing required parameter for switch: %ls
Failed to parse file handle: '%ls'
Failed to initialize engine section.
Failed to get path for current process.
Failed to cache to clean room.
Failed to allocate parameters for unelevated process.
Failed to append %ls
Failed to append original command line.
Failed to allocate full command-line.
Failed to launch clean room process: %ls
Failed to wait for clean room process: %ls
Failed to open log.
Failed to check global conditions
Failed to create the message window.
Failed to query registration.
Failed to set action variables.
Failed to set registration variables.
Failed to set layout directory variable to value provided from command-line.
Failed while running
Failed to connect to unelevated process.
Failed to allocate thread local storage for logging.
Failed to set elevated pipe into thread local storage for logging.
Failed to pump messages from parent process.
Failed to connect to parent of embedded process.
Failed to run bootstrapper application embedded.
Unable to get resume command line from the registry
Failed to get current process path.
Failed to re-launch bundle process after RunOnce: %ls
Failed to create engine for UX.
Failed to load UX.
Failed to start bootstrapper application.
Unexpected return value from message pump.
Failed to get process token.
Failed to get shutdown privilege LUID.
Failed to adjust token to add shutdown privileges.
Failed to schedule restart.
Failed to add built-in variable: %ls.
Failed to select variable nodes.
Failed to get variable node count.
Failed to get next node.
Failed to get @Id.
Failed to get @Hidden.
Failed to get @Persisted.
Failed to get @Value.
Failed to set variant value.
Failed to get @Type.
Initializing numeric variable '%ls' to value '%ls'
Initializing string variable '%ls' to value '%ls'
Initializing version variable '%ls' to value '%ls'
Invalid value for @Type: %ls
Initializing hidden variable '%ls'
Failed to change variant type.
Failed to find variable value '%ls'.
Failed to insert variable '%ls'.
c:\agent\_work\66\s\src\burn\engine\variable.cpp
Attempt to set built-in variable value: %ls
Failed to set value of variable: %ls
Failed to set variant encryption
Failed to get value of variable: %ls
Failed to get value as numeric for variable: %ls
Failed to get value as string for variable: %ls
Failed to get value as version for variable: %ls
Failed to copy value of variable: %ls
Failed to get variable: %ls
Failed to get unformatted string.
Failed to format value '%ls' of variable: %ls
Failed to allocate buffer for escaped string.
Failed to append characters.
Failed to format escape sequence.
Failed to append escape sequence.
Failed to copy string.
Failed to write variable count.
Failed to write included flag.
Failed to write variable name.
Failed to write variable value type.
Failed to get numeric.
Failed to write variable value as number.
Failed to get version.
Failed to get string.
Failed to write variable value as string.
Unsupported variable type.
Failed to write literal flag.
Failed to read variable count.
Failed to read variable included flag.
Failed to read variable name.
Failed to read variable value type.
Failed to read variable value as number.
Failed to set variable value.
Failed to read variable value as string.
Failed to read variable literal flag.
Failed to set variable.
Failed to get visibility of variable: %ls
Failed to allocate buffer for format string.
Failed to append string.
Failed to get variable name.
Failed to reallocate variable array.
Failed to allocate variable array.
Failed to determine variable visibility: '%ls'.
Failed to format placeholder string.
Failed to append placeholder.
Failed to allocate record.
Failed to set record format string.
Failed to set record string.
Failed to get formatted length.
Failed to allocate string.
Failed to format record.
Failed to find variable value.
Failed to insert variable.
Failed to initialize built-in variable value '%ls'.
Failed to compare strings.
Overflow while growing variable array size
Overflow while calculating size of variable array buffer
Failed to allocate room for more variables.
Overflow while dealing with variable array buffer allocation
Failed to allocate room for variables.
Failed to copy variable name.
Setting hidden variable '%ls'
Unsetting variable '%ls'
Setting numeric variable '%ls' to value %lld
Setting string variable '%ls' to value '%ls'
Setting version variable '%ls' to value '%hu.%hu.%hu.%hu'
Setting variable failed: ID '%ls', HRESULT 0x%x
Failed to locate NTDLL.
RtlGetVersion
Failed to locate RtlGetVersion.
Failed to get computer name.
DllGetVersion
Failed to find DllGetVersion entry point in msi.dll.
Failed to get msi.dll version info.
Failed to get shell folder.
Failed to get temp path.
Failed to get 64-bit system folder.
Failed to get 32-bit system folder.
Failed to backslash terminate system folder.
Failed to set system folder variant value.
Failed to get windows directory.
Failed to get volume path name.
Failed to check if process could run privileged.
Failed to set reboot pending variant value.
Failed to get 64-bit folder.
Failed to get the required buffer length for the Date.
Failed to allocate the buffer for the Date.
Failed to get the Date.
Failed to copy the engine version.
Failed to get the user name.
Failed to open Windows folder key.
Failed to read folder path for '%ls'.
Failed to ensure path was backslash terminated.
Failed to read next symbol.
Failed to parse expression.
Failed to expect end symbol.
Failed to evaluate condition: %ls
Failed to display error dialog
Failed to select condition node.
Failed to get Condition inner text.
Failed to copy condition string from BSTR
Failed to parse boolean-term.
Failed to parse boolean-factor.
Failed to parse term.
Failed to expect right parenthesis.
Failed to parse value.
Failed to compare value.
c:\agent\_work\66\s\src\burn\engine\condition.cpp
Failed to find variable.
Failed to parse condition '%ls' at position: %u
Failed to parse condition "%ls". Unexpected '~' operator at position %d.
Failed to parse condition "%ls". Unterminated literal at position %d.
Failed to set symbol value.
Failed to parse condition "%ls". Identifier cannot start at a digit, at position %d.
Failed to parse condition "%ls". Constant too big, at position %d.
Failed to parse condition "%ls". Version can have a maximum of 4 parts, at position %d.
Failed to parse condition "%ls". Invalid version format, at position %d.
Failed to parse condition "%ls". Unexpected character at position %d.
Failed to get the left string
Failed to get the right string
Failed to get the left numeric
Failed to get the right numeric
Failed to get the left version
Failed to get the right version
Failed to select search nodes.
Failed to get search node count.
c:\agent\_work\66\s\src\burn\engine\search.cpp
Failed to allocate memory for search structs.
Failed to get @Variable.
Failed to get @Condition.
Failed to get @Path.
Failed to get @Root.
Invalid value for @Root: %ls
Failed to get Key attribute.
Failed to get Value attribute.
Failed to get Win64 attribute.
Failed to get @ExpandEnvironment.
Failed to get @VariableType.
Invalid value for @VariableType: %ls
Failed to get @ProductCode.
Failed to get @ComponentId.
Failed to get @UpgradeCode.
Failed to get @ProductCode or @UpgradeCode.
Failed to get @FeatureId.
Unexpected element name: %ls
Failed to evaluate search condition. Id = '%ls', Condition = '%ls'
Failed to format variable string.
Failed while searching directory search: %ls, for path: %ls
Failed to set directory search path variable.
Directory search: %ls, did not find path: %ls, reason: 0x%x
File search: %ls, did not find path: %ls
Failed get to file attributes. '%ls'
Failed to format path string.
Failed get file version.
Failed to set variable to file search path.
Failed while searching file search: %ls, for path: %ls
Failed to format key string.
Registry key not found. Key = '%ls'
Failed to open registry key. Key = '%ls'
Failed to format value string.
Registry value not found. Key = '%ls', Value = '%ls'
Failed to query registry key value.
RegistrySearchExists failed: ID '%ls', HRESULT 0x%x
Failed to clear variable.
Failed to open registry key.
Failed to query registry key value size.
Failed to allocate memory registry value.
Failed to allocate string buffer.
Failed to get expand environment string.
Unsupported registry key value type. Type = '%u'
Failed to read registry value.
Failed to change value type.
RegistrySearchValue failed: ID '%ls', HRESULT 0x%x
Failed to format component id string.
Failed to format product code string.
Failed to get component path: %d
MsiComponentSearch failed: ID '%ls', HRESULT 0x%x
Unsupported product search type: %u
Failed to format GUID string.
Failed to enumerate related products for upgrade code.
Failed to copy upgrade code.
Trying per-machine extended info for property '%ls' for product: %ls
Trying per-user extended info for property '%ls' for product: %ls
Product or related product not found: %ls
Failed to get product info.
MsiProductSearch failed: ID '%ls', HRESULT 0x%x
MsiFeatureSearch failed: ID '%ls', HRESULT 0x%x
c:\agent\_work\66\s\src\burn\engine\section.cpp
Failed to open handle to engine process path.
Failed to seek to start of file.
Failed to read DOS header.
Failed to find valid DOS image header in buffer.
Failed to seek to NT header.
Failed to read NT header.
Failed to find valid NT image header in buffer.
Failed to seek to section info.
Failed to read signature offset.
Failed to read signature size.
Failed to seek past optional headers.
Failed to read image section header, index: %u
Failed to read complete image section header, index: %u
.wixburn
Failed to find Burn section.
Failed to read section info, data to short: %u
Failed to allocate buffer for section info.
Failed to read section info.
Failed to read complete section info.
Failed to read section info, unsupported version: %08x
Failed to get total size of bundle.
Failed to allocate memory for container sizes.
PE Header from file didn't match PE Header in memory.
Failed to find container info, too few elements: %u
Unexpected container format.
Failed to get module handle to process.
Bundle guid didn't match the guid in the PE Header in memory.
Failed to select approved exe nodes.
Failed to get approved exe node count.
c:\agent\_work\66\s\src\burn\engine\approvedexe.cpp
Failed to allocate memory for approved exe structs.
Failed to get @Key.
Failed to get @ValueName.
Failed to get @Win64.
Failed to format argument string.
Failed to create executable command.
Failed to format obfuscated argument string.
Failed to create obfuscated executable command.
Failed to CreateProcess on path: %ls
Failed to get the variable: %ls
Failed to get the root package cache folder.
Failed to select container nodes.
Failed to get container node count.
c:\agent\_work\66\s\src\burn\engine\container.cpp
Failed to allocate memory for container structs.
Failed to get @Primary.
Failed to get @Attached.
Failed to get @AttachedIndex.
Failed to get path to current process for attached container.
Failed to set attached container file path.
Failed to get @FilePath.
Failed to copy @FilePath
Failed to get @DownloadUrl. Either @SourcePath or @DownloadUrl needs to be provided.
Failed to hex decode the Container/@Hash.
Failed to get @Hash.
Failed to get attached container information.
Failed to get container information for UX container.
Failed to get path for executing module.
Failed to open attached container.
Failed to open file: %ls
Failed to duplicate handle to container: %ls
Failed to move file pointer to container offset.
Failed to open container.
Failed to close cabinet.
Failed to select catalog nodes.
Failed to get payload node count.
c:\agent\_work\66\s\src\burn\engine\catalog.cpp
Failed to allocate memory for payload structs.
Failed to get @Payload.
Failed to find payload for catalog file.
Failed to get catalog local file path
Failed to open catalog in working path: %ls
Failed to verify catalog signature: %ls
Failed to select payload nodes.
c:\agent\_work\66\s\src\burn\engine\payload.cpp
Failed to get @Packaging.
Invalid value for @Packaging: %ls
Failed to get @Container.
Failed to to find container: %ls
Failed to get @LayoutOnly.
Failed to get @SourcePath.
Failed to get @DownloadUrl.
Failed to get @FileSize.
Failed to parse @FileSize.
Failed to get @CertificateRootPublicKeyIdentifier.
Failed to hex decode @CertificateRootPublicKeyIdentifier.
Failed to get @CertificateRootThumbprint.
Failed to hex decode @CertificateRootThumbprint.
Failed to hex decode the Payload/@Hash.
Failed to get @Catalog.
Failed to find catalog.
Failed to get next stream.
Failed to find embedded payload: %ls
Failed to concat file paths.
Failed to get directory portion of local file path
Failed to ensure directory exists
Failed to extract file.
Payload was not found in container: %ls
Failed to select user experience node.
Failed to to get UX/@SplashScreen
Failed to parse user experience payloads.
Too few UX payloads.
c:\agent\_work\66\s\src\burn\engine\userexperience.cpp
Failed to load UX DLL.
BootstrapperApplicationCreate
Failed to get BootstrapperApplicationCreate entry-point
Failed to create UX.
BootstrapperApplicationDestroy
Failed to create working folder.
Failed to calculate the bootstrapper application working path.
Failed create bootstrapper application working folder.
Engine active cannot be changed because it was already in that state.
Engine is active, cannot proceed.
Failed to select rollback boundary nodes.
Failed to get rollback bundary node count.
c:\agent\_work\66\s\src\burn\engine\package.cpp
Failed to allocate memory for rollback boundary structs.
Failed to get @Vital.
Failed to select package nodes.
Failed to get package node count.
Failed to allocate memory for package structs.
Invalid cache type: %ls
Failed to get @Cache.
Failed to get @CacheId.
Failed to get @Size.
Failed to get @InstallSize.
Failed to get @PerMachine.
Failed to get @Permanent.
Failed to get @LogPathVariable.
Failed to get @RollbackLogPathVariable.
Failed to get @InstallCondition.
Failed to get @RollbackBoundaryForward.
Failed to find forward transaction boundary: %ls
Failed to get @RollbackBoundaryBackward.
Failed to find backward transaction boundary: %ls
Failed to parse EXE package.
Failed to parse MSI package.
Failed to parse MSP package.
Failed to parse MSU package.
Failed to parse payload references.
Failed to parse dependency providers.
Failed to allocate memory for MSP patch sequence information.
Failed to allocate memory for patch sequence information to package lookup.
Failed to parse target product codes.
Failed to copy the property value.
Failed to allocate memory for compatible packages.
Failed to allocate memory for package payloads.
Failed to get Id attribute.
Failed to find payload.
Failed to select PatchTargetCode nodes.
Failed to get PatchTargetCode node count.
Failed to allocate memory for patch targetcodes.
Failed to get @TargetCode attribute.
Failed to get @Product.
Failed to select Bundle/Update node.
Failed to get Update@Location.
Failed to select registration node.
Failed to get @Tag.
Failed to parse related bundles
Failed to get @Version.
Failed to parse @Version: %ls
Failed to get @ProviderKey.
Failed to get @ExecutableName.
Failed to select ARP node.
Failed to get @Register.
Failed to get @DisplayName.
Failed to get @DisplayVersion.
Failed to get @Publisher.
Failed to get @HelpLink.
Failed to get @HelpTelephone.
Failed to get @AboutUrl.
Failed to get @UpdateUrl.
Failed to get @ParentDisplayName.
Failed to get @Comments.
Failed to get @Contact.
c:\agent\_work\66\s\src\burn\engine\registration.cpp
Invalid modify disabled type: %ls
Failed to get @DisableModify.
Failed to get @DisableRemove.
Failed to parse software tag.
Failed to select Update node.
Failed to get @Manufacturer.
Failed to get @Department.
Failed to get @ProductFamily.
Failed to get @Name.
Failed to get @Classification.
Failed to set registration paths.
Failed to set the bundle installed built-in variable.
Failed to initialize bundle name.
Failed to initialize bundle manufacturer.
Failed to overwrite the bundle active parent built-in variable.
Failed to overwrite the bundle provider key built-in variable.
Failed to overwrite the bundle tag built-in variable.
Failed to format pending restart registry key to read.
Failed to open registration key.
Failed to read Resume value.
Failed to initialize per-machine related bundles.
Failed to initialize per-user related bundles.
Failed to cache bundle from path: %ls
Failed to create registration key.
Failed to write %ls value.
Failed to update name and publisher.
Failed to write software tags.
Failed to write update registration.
Failed to register the bundle dependency key.
Failed to update resume mode.
Failed to write volatile reboot required registry key.
Failed to delete registration key: %ls
Failed to write state to file: %ls
Failed to select software tag nodes.
Failed to get software tag count.
Failed to allocate memory for software tag structs.
Failed to get @Filename.
Failed to get @Regid.
Failed to get SoftwareTag text.
Failed to convert SoftwareTag text to UTF-8
Failed to build uninstall registry key path.
Failed to build cache directory.
Failed to build cached executable path.
Failed to build state file path.
Failed to set bundle manufacturer.
Failed to get bundle manufacturer.
Failed to set bundle name.
Failed to get bundle name.
Failed to write Resume value.
Failed to write Installed value.
Failed to format resume command line for RunOnce.
Failed to create run key.
Failed to write run key value.
Failed to write resume command line value.
Failed to delete run key value.
Failed to delete resume command line value.
Failed to get RelatedBundle nodes
Failed to get RelatedBundle element count.
Failed to get next RelatedBundle element.
Failed to get @Action.
Failed to resize Detect code array in registration
Failed to resize Upgrade code array in registration
Failed to resize Addon code array in registration
Failed to resize Patch code array in registration
Invalid value for @Action: %ls
Failed to format the key path for update registration.
Failed to format tag folder path.
Failed to allocate regid folder path.
Failed to allocate regid file path.
Failed to create regid folder: %ls
Failed to write tag xml to file: %ls
Failed to get the formatted key path for update registration.
Failed to create the key for update registration.
Failed to format key for update registration.
Failed to remove update registration key: %ls
Failed to get the %ls variable.
Failed to set the bundle action built-in variable.
Failed to get default request state for action.
Failed to evaluate install condition.
Failed to get path for current executing process as layout directory.
Failed to get executing process as layout directory.
Failed to get bundle layout directory property.
Failed to ensure layout directory is backslash terminated.
Failed to append bundle start action.
Failed to to copy executable name for bundle.
Failed to to copy layout directory for bundle.
Failed to calculate bundle layout working path.
Failed to plan layout payload.
Failed to copy ancestors and self to related bundle ancestors.
Failed to copy self to related bundle ancestors.
Failed to process package.
Failed to add compatible package for package: %ls
Failed to append execute action.
Failed to copy installed ProductCode
Failed to process compatible package.
Failed to plan install keep registration.
Failed to plan uninstall remove registration.
Failed to plan rollback boundary begin.
Failed to plan clean package.
Failed to create the string dictionary.
Failed to allocate registration action.
Failed to add self-dependent to ignore dependents.
Failed to add dependents ignored from command-line.
Failed to add dependent bundle provider key to ignore dependents.
Failed to check for remaining dependents during planning.
Failed to add registration action for dependent related bundle.
Failed to add registration action for self dependent.
Failed to process passthrough package.
Failed to plan rollback boundary for passthrough package.
Failed to process update package.
Failed to plan rollback boundary for update package.
Failed to plan clean of update package.
Failed to set default package state.
c:\agent\_work\66\s\src\burn\engine\plan.cpp
UX aborted plan package begin.
Failed to process package rollback boundary.
Failed to plan layout package.
Failed to plan execute package.
Failed to plan cache package.
Failed to plan dependency actions for package: %ls
Failed to append execute checkpoint.
Failed to plan rollback boundary complete.
Failed to append package start action.
Failed to append layout container action.
Failed to append cache/layout payload action.
Failed to append cache action.
Failed to calculate execute actions for package: %ls
Failed to calculate plan actions for package: %ls
Failed to begin plan dependency actions for package: %ls
Invalid package type.
Failed to add plan actions for package: %ls
Failed to complete plan dependency actions for package: %ls
Failed to create string array from ancestors.
Failed to create dictionary from ancestors array.
Failed to lookup the bundle ID in the ancestors dictionary.
Unexpected relation type encountered during plan: %d
UX aborted plan related bundle.
Failed to add the package provider key "%ls" to the planned list.
Failed to get the list of dependencies to ignore.
Failed to create dictionary for planned packages.
Failed to check the dictionary for a related bundle provider key: "%ls".
Failed to copy the list of dependencies to ignore.
Failed to calcuate plan for related bundle: %ls
Failed to begin plan dependency actions to package: %ls
Failed to add to plan related bundle: %ls
Failed to complete plan dependency actions for related bundle package: %ls
Failed to begin plan dependency actions for related bundle package: %ls
Failed to plan related bundle package provider actions.
Failed to remove unnecessary execute actions.
Failed to finalize slipstream execute actions.
Failed to finalize slipstream rollback actions.
Failed to grow plan's array of clean actions.
Failed to append wait action for caching.
Failed to append rollback action.
Failed to append execute checkpoint for cache rollback.
Failed to grow plan's array of execute actions.
Failed to grow plan's array of rollback actions.
Failed to insert keep registration execute action.
Failed to insert keep registration rollback action.
Failed to insert remove registration execute action.
Failed to insert remove registration rollback action.
Failed to append rollback boundary begin action.
Failed to recreate resume command-line.
Invalid action state.
Failed to grow plan's array of registration actions.
Failed to copy owner bundle to registration action.
Failed to copy dependent provider key to registration action.
Failed to grow plan's array of rollback registration actions.
Failed to copy dependent provider key to rollback registration action.
Failed to plan slipstream patches for package.
Failed to append rollback cache action.
Failed to append payload cache action.
Failed to create syncpoint event.
Failed to plan slipstream MSP: %ls
Failed to grow plan's array of cache actions.
Failed to grow plan's array of rollback cache actions.
Failed to append acquire container action for layout to plan.
Failed to copy container working path for layout.
Failed to append cache action to cache payload.
Failed to copy layout directory into plan.
Failed to calculate unverified path for payload.
Failed to add extract payload action to previous package.
Failed to create container extract action.
Failed while searching for package's container extract action.
Failed to add extract payload to current package.
Failed to append cache action to acquire payload.
Failed to copy unverified path for payload to acquire.
Failed to append acquire container action to plan.
Failed to get path for executing module as attached container working path.
Failed to copy container unverified path for cache action to extract container.
Failed to append cache action to extract payloads from container.
Failed to calculate unverified path for container.
Failed to grow list of payloads to extract from container.
Failed to copy unverified path for payload to extract.
execute
rollback
Failed to allocate memory for patch actions.
Failed to plan package dependency actions.
Failed to get current directory.
Failed to open log: %ls
Failed to get non-session specific TEMP folder.
Failed to copy log path to prefix.
Failed to copy log extension to extension.
Failed to copy full log path to prefix.
c:\agent\_work\66\s\src\burn\engine\logging.cpp
Failed to open Application event log
Failed to allocate path for package log.
Failed to set log path into variable.
Failed to copy package log path.
Unknown
Layout
Uninstall
Install
Modify
Repair
UpdateReplace
UpdateReplaceEmbedded
Invalid
AdminInstall
MinorUpgrade
MajorUpgrade
Register
Unregister
Obsolete
Absent
Cached
Present
Superseded
Partial
Complete
Advertised
Source
AddLocal
AddSource
AddDefault
Reinstall
Advertise
Remove
AllUserManaged
Machine
UserManaged
UserUnmanaged
PerMachine
PerUser
Required
Initiated
Active
Suspend
Reboot Pending
Detect
Upgrade
Dependent
Update
Downgrade
MinorUpdate
ForceAbsent
%I64u.%I64u.%I64u.%I64u
Failed to get temp folder.
Failed to get length of temp folder.
Failed to format session id as a string.
Failed to get length of session id string.
Failed to copy temp folder.
Failed to write send message to pipe.
Failed to pump messages during send message to pipe.
Failed to read log message.
Failed to write log message:'%hs'.
c:\agent\_work\66\s\src\burn\engine\pipe.cpp
No status returned to PipePumpMessages()
Failed to read returned result to PipePumpMessages()
Failed to read returned restart to PipePumpMessages()
Failed to process message: %u
Failed to post result to child process.
Failed to get message over pipe
Failed to create pipe guid.
Failed to convert pipe guid into string.
Failed to allocate pipe name.
Failed to allocate pipe secret.
Failed to create the security descriptor for the connection event and pipe.
Failed to allocate full name of pipe: %ls
Failed to create pipe: %ls
Failed to allocate full name of cache pipe: %ls
Failed to allocate parameters for elevated process.
Failed to launch elevated child process: %ls
Failed to set pipe to non-blocking.
Failed to wait for child to connect to pipe.
Failed to reset pipe to blocking.
Failed to write secret length to pipe.
Failed to write secret to pipe.
Failed to write our process id to pipe.
Failed to read ACK from pipe.
Failed to write exit code to message buffer.
Failed to write restart to message buffer.
Failed to post terminate message to child process cache thread.
Failed to post terminate message to child process.
Failed to wait for child process exit.
Failed to allocate name of parent pipe.
Failed to open parent pipe: %ls
Failed to verify parent pipe: %ls
Failed to allocate name of parent cache pipe.
Failed to open companion process with PID: %u
Failed to allocate memory for message.
Failed to allocate message to write.
Failed to write message type to pipe.
Failed to read message from pipe.
Failed to allocate data for message.
Failed to read data for message.
Failed to read size of verification secret from parent pipe.
Verification secret from parent is too big.
Failed to allocate buffer for verification secret.
Failed to read verification secret from parent pipe.
Verification secret from parent does not match.
Failed to read verification process id from parent pipe.
Verification process id from parent does not match.
Failed to inform parent process that child is running.
Failed to initialize variables.
Failed to open attached UX container.
Failed to open manifest stream.
Failed to get manifest stream from container.
Failed to load manifest.
Failed to overwrite the %ls built-in variable.
Failed to set source process path variable.
Failed to get source process folder from path.
Failed to set source process folder variable.
Failed to set original source variable.
Failed to initialize internal cache functionality.
Failed to get unique temporary folder for bootstrapper application.
Failed to extract bootstrapper application payloads.
Failed to load catalog files.
Failed to serialize variables.
Failed to detect resume type.
Engine cannot start detect because it is busy with another action.
c:\agent\_work\66\s\src\burn\engine\core.cpp
UX aborted detect begin.
Failed to execute searches.
Failed to detect related bundles.
Failed to detect forward compatible bundle.
Failed to detect provider key bundle id.
Failed to report detected related bundles.
Failed to detect update.
Failed to initialize MSP engine detection.
UX aborted detect package begin.
Failed to detect if payloads are all cached for package: %ls
Package type not supported by detect yet.
Engine cannot start plan because it is busy with another action.
UX aborted plan begin.
Failed to update action.
Failed to set resume command
Failed to initialize the dependencies for the plan.
Failed to plan the layout of the bundle.
Failed to plan packages.
Failed to plan update.
Failed to plan passthrough.
Failed to plan registration.
Failed to plan related bundles.
Failed to schedule related bundles.
Failed to remove unnecessary actions from plan.
Failed to cache engine to working directory.
Failed to actually elevate.
Engine cannot start apply because it is busy with another action.
UX aborted apply begin.
Another per-user setup is already executing.
Failed to set initial apply variables.
Failed to elevate.
Another per-machine setup is already executing.
Failed to register bundle.
Failed to create cache thread.
Failed while caching, aborting execution.
Engine cannot start LaunchApprovedExe because it is busy with another action.
UX aborted LaunchApprovedExe begin.
Failed to serialize engine state.
Failed to save engine state in per-machine process.
Failed to save engine state.
Failed to empty command line.
Failed to append display state to command-line
Failed to append action state to command-line
Failed to append restart state to command-line
Failed to format active parent command-line for command-line.
Failed to format parent:none command-line for command-line.
Failed to append active parent command-line to command-line.
Failed to format ancestors for command-line.
Failed to append ancestors to command-line.
Failed to format relation type for command-line.
Failed to append relation type to command-line.
Failed to format passthrough for command-line.
Failed to append passthrough to command-line.
Failed to format append log command-line for command-line.
Failed to append log command-line to command-line
Failed to append space to command-line.
Failed to append command-line to command-line.
Failed to duplicate file handle for attached container.
Failed to append the file handle to the command line.
Failed to append the file handle to the obfuscated command line.
Must specify a path for log.
Failed to copy log file path.
Failed to copy path for layout directory.
Must specify a path for original source.
Failed to copy last used source.
Must specify a value for parent.
Failed to copy parent.
Failed to initialize parent to none.
Must specify a path for append log.
Failed to copy append log file path.
Must specify the elevated name, token and parent process id.
Multiple mode command-line switches were provided.
Failed to parse elevated connection.
Failed to copy source process path.
Must specify the embedded name, token and parent process id.
Failed to parse embedded connection.
Failed to allocate the list of dependencies to ignore.
Failed to allocate the list of ancestors.
Failed to determine whether variable is hidden.
Failed to copy sanitized argument.
Failed to copy connection name from command line.
Failed to copy connection secret from command line.
Failed to copy parent process id from command line.
Failed to get completed cache path.
Failed to concat payload cache path.
Failed to initialize COM on cache thread.
Failed to wait for cache thread to terminate.
Failed to get cache thread exit code.
Failed to get completed path for bundle.
Failed to combine working path with engine file name.
Failed to compare current path for bundle: %ls
Failed to initialize cache source path.
Failed to copy current path to original source.
Failed to get directory from original source path.
Failed to set original source directory variable.
Failed to calculate working folder to ensure it exists.
Failed create working folder.
Failed to copy working folder.
Failed to get working folder for bundle.
Failed to calculate the bundle working path.
Failed to get working folder for bundle layout.
Failed to append bundle id for bundle layout working path.
Failed to get working folder for payload.
Failed to append SHA1 hash as payload unverified path.
Failed to get working folder for container.
Failed to append SHA1 hash as container unverified path.
per-machine
per-user
Failed to get %hs package cache root directory.
Failed to construct cache path.
Failed to ensure cache path was backslash terminated.
Failed to get old %hs package cache root directory.
Failed to get current process directory.
Failed to combine last source with source.
Failed to combine layout source with source.
Failed to copy source path.
Failed to determine length of source path.
Failed to determine length of relative path.
Failed to trim source folder.
Failed to set last source.
c:\agent\_work\66\s\src\burn\engine\cache.cpp
UX aborted on download progress.
Invalid return code from progress routine.
Failed to get current path for process to cache to clean room.
Failed to cache bundle to clean room.
Failed to use current process path as target path.
Failed to copy engine to working folder.
Failed to combine completed path with engine file name for layout.
Layout bundle from: '%ls' to: '%ls'
Failed to layout bundle from: '%ls' to '%ls'
Failed to create completed cache path for bundle.
Failed to combine completed path with engine file name.
Failed to compare completed cache path for bundle: %ls
Caching bundle from: '%ls' to: '%ls'
Failed to cache bundle from: '%ls' to '%ls'
Failed to reset permissions on cached bundle: '%ls'
Failed to get directory from engine working path: %ls
Failed to build payload source path.
Failed to complete the cache of payload: %ls
Failed to concat complete cached path.
Failed to layout container from cached path: %ls
Failed to layout payload from cached payload: %ls
Failed to get cached path for package with cache id: %ls
Failed to create unverified path.
Failed to transfer working path to unverified path for payload: %ls.
Failed to find payload: %ls in working path: %ls and unverified path: %ls
Failed to reset permissions on unverified cached payload: %ls
moving
copying
Failed to move verified file to complete payload path: %ls
Failed to calculate the working folder to remove it.
Failed to remove bundle id: %ls.
Failed to remove package id: %ls.
Failed authenticode verification of payload: %ls
Failed to get provider state from authenticode certificate.
Failed to get signer chain from authenticode certificate.
Failed to verify expected payload against actual certificate chain.
Failed to get windows path for working folder.
Failed to ensure windows path for working folder ended in backslash.
Failed to concat Temp directory on windows path for working folder.
Failed to get temp path for working folder.
Failed to create working folder guid.
Failed to convert working folder guid into string.
Failed to append bundle id on to temp path for working folder.
Failed to copy working folder path.
Failed to find local %hs appdata directory.
Failed to construct %hs package cache directory name.
Failed to backslash terminate default %hs package cache directory name.
Failed to read PackageCache policy directory.
Failed to backslash terminate redirected per-machine package cache directory name.
Failed to copy default package cache directory to current package cache directory.
Failed to copy %hs package cache root directory.
Failed to compare default and current package cache directories.
Failed to get cache directory.
Failed to create cache directory: %ls
Failed to secure cache directory: %ls
Failed to create unverified cache directory: %ls
Failed to concat payload id to unverified folder path.
Failed to open container in working path: %ls
Failed to verify container hash: %ls
%ls container from working path '%ls' to path '%ls'
Failed to move %ls to %ls
Failed to copy %ls to %ls
Failed to open payload in working path: %ls
Failed to verify payload signature: %ls
Failed to verify payload hash: %ls
%ls payload from working path '%ls' to path '%ls'
Failed to open payload at path: %ls
Failed to verify signature of payload: %ls
Failed to verify catalog signature of payload: %ls
Failed to verify hash of payload: %ls
Failed to allocate memory for well known SID.
Failed to create well known SID.
Failed to allocate administrator SID.
Failed to initialize ACL.
Failed to allocate SID to grate access.
Failed to allocate access for Administrators group to path: %ls
Failed to allocate access for SYSTEM group to path: %ls
Failed to allocate access for Everyone group to path: %ls
Failed to allocate access for Users group to path: %ls
Failed to create ACL to secure cache path: %ls
Failed to secure cache path: %ls
Failed to create working path to copy engine.
Failed to calculate the bundle working folder target name.
Failed create bundle working folder.
Failed to copy engine: '%ls' to working path: %ls
Failed to get directory from engine path: %ls
Failed to build payload source path for working copy.
Failed to build payload target path for working copy.
Failed to copy UX payload from: '%ls' to: '%ls'
Failed to copy target path for engine working path.
Failed to create engine file at path: %ls
Failed to seek to beginning of engine file: %ls
Failed to copy engine from: %ls to: %ls
Failed to seek to checksum in exe header.
Failed to update signature offset.
Failed to seek to signature table in exe header.
Failed to seek to original data in exe burn section header.
Failed to zero out original data offset.
Failed to calculate cache path.
Failed to calculate hash for path: %ls
Hash mismatch for path: %ls, expected: %ls, actual: %ls
Hash mismatch for path: %ls
Failed to allocate memory
Failed to get file hash.
Failed to encode file hash.
Could not verify file %ls.
Could not close verify handle.
Failed to get certificate public key identifier.
Failed to read certificate thumbprint.
Failed to find expected public key in certificate chain.
c:\agent\_work\66\s\src\burn\engine\elevation.cpp
UX aborted elevation requirement.
Failed to create pipe name and client token.
Failed to create pipe and cache pipe.
Failed to connect to elevated child process.
Failed to write action to message buffer.
Failed to write update action to message buffer.
Failed to write system restore point action to message buffer.
Failed to write variables.
Failed to send message to per-machine process.
Failed to write engine working path to message buffer.
Failed to write resume command line to message buffer.
Failed to write resume flag.
Failed to write registration operations to message buffer.
Failed to write dependency registration action to message buffer.
Failed to write estimated size to message buffer.
Failed to write resume mode to message buffer.
Failed to write restart enum to message buffer.
Failed to write layout directory to message buffer.
Failed to write payload unverified path to message buffer.
Failed to send BURN_ELEVATION_MESSAGE_TYPE_LAYOUT_BUNDLE message to per-machine process.
Failed to write container id to message buffer.
Failed to write package id to message buffer.
Failed to write payload id to message buffer.
Failed to write unverified path to message buffer.
Failed to write move flag to message buffer.
Failed to send BURN_ELEVATION_MESSAGE_TYPE_CACHE_OR_LAYOUT_CONTAINER_OR_PAYLOAD message to per-machine process.
Failed to send BURN_ELEVATION_MESSAGE_TYPE_CACHE_CLEANUP message to per-machine process.
Failed to write action type to message buffer.
Failed to write bundle id to message buffer.
Failed to write dependent provider key to message buffer.
Failed to send BURN_ELEVATION_MESSAGE_TYPE_PROCESS_DEPENDENT_REGISTRATION message to per-machine process.
Failed to write rollback.
Failed to write the list of dependencies to ignore to the message buffer.
Failed to write the list of ancestors to the message buffer.
Failed to send BURN_ELEVATION_MESSAGE_TYPE_EXECUTE_EXE_PACKAGE message to per-machine process.
Failed to write parent hwnd to message buffer.
Failed to write package log to message buffer.
Failed to write UI level to message buffer.
Failed to write feature action to message buffer.
Failed to write slipstream patch action to message buffer.
Failed to write rollback flag to message buffer.
Failed to send BURN_ELEVATION_MESSAGE_TYPE_EXECUTE_MSI_PACKAGE message to per-machine process.
Failed to write target product code to message buffer.
Failed to write count of ordered patches to message buffer.
Failed to write ordered patch order to message buffer.
Failed to write ordered patch id to message buffer.
Failed to send BURN_ELEVATION_MESSAGE_TYPE_EXECUTE_MSP_PACKAGE message to per-machine process.
Failed to write StopWusaService.
Failed to send BURN_ELEVATION_MESSAGE_TYPE_EXECUTE_MSU_PACKAGE message to per-machine process.
Failed to send BURN_ELEVATION_MESSAGE_TYPE_EXECUTE_PACKAGE_PROVIDER message to per-machine process.
Failed to write bundle dependency key to message buffer.
Failed to send BURN_ELEVATION_MESSAGE_TYPE_EXECUTE_PACKAGE_DEPENDENCY message to per-machine process.
Failed to write installed ProductCode to message buffer.
Failed to write installed version to message buffer.
Failed to send BURN_ELEVATION_MESSAGE_TYPE_LOAD_COMPATIBLE_PACKAGE message to per-machine process.
Failed to write clean package id to message buffer.
Failed to send BURN_ELEVATION_MESSAGE_TYPE_CLEAN_PACKAGE message to per-machine process.
Failed to write approved exe id to message buffer.
Failed to write approved exe arguments to message buffer.
Failed to write approved exe WaitForInputIdle timeout to message buffer.
Failed to send BURN_ELEVATION_MESSAGE_TYPE_LAUNCH_APPROVED_EXE message to per-machine process.
Failed to create elevated cache thread.
Failed to pump messages in child process.
Failed to resume automatic updates after pausing them, continuing...
Failed to set elevated cache pipe into thread local storage for logging.
Failed to allowed results.
Failed to progress.
Failed to read error code.
Failed to read message.
Failed to read file count.
Failed to allocate buffer for files in use.
Failed to read file name: %u
Invalid package message.
Failed to read MSI data count.
Failed to allocate buffer to read MSI data.
Failed to read MSI data: %u
Failed to read UI flags.
Failed to read progress.
Failed to read message type.
Failed to read approved exe process id.
Invalid launch approved exe message.
Unexpected elevated message sent to child process, msg: %u
Unexpected elevated cache message sent to child process, msg: %u
Failed to read action.
Failed to read update action.
Failed to read system restore point action.
Failed to read variables.
Failed to acquire lock due to setup in other session.
Failed to read engine working path.
Failed to read resume command line.
Failed to read resume flag.
Failed to read registration operations.
Failed to read dependency registration action.
Failed to read estimated size.
Failed to begin registration session.
Failed to resume registration session.
Failed to read resume mode enum.
Failed to read restart enum.
Failed to suspend registration session.
Failed to save state.
Failed to read layout directory.
Failed to read unverified bundle path.
Failed to layout bundle from: %ls
Failed to read package id.
Failed to find container: %ls
Failed to find package: %ls
Failed to read payload id.
Failed to find payload: %ls
Failed to read unverified path.
Failed to read move flag.
Failed to layout container from: %ls to %ls
Failed to layout payload from: %ls to %ls
Failed to cache payload: %ls
Invalid data passed to cache or layout payload.
Failed to read action type.
Failed to read bundle id.
Failed to read dependent provider key.
Failed to execute dependent registration action for provider key: %ls
Failed to read EXE package id.
Failed to read rollback.
Failed to read the list of dependencies to ignore.
Failed to read the list of ancestors.
Failed to execute EXE package.
Failed to read MSI package id.
Failed to read parent hwnd.
Failed to read package log.
Failed to read UI level.
Failed to allocate memory for feature actions.
Failed to read feature action.
Failed to allocate memory for slipstream patch actions.
Failed to read slipstream action.
Failed to read rollback flag.
Failed to execute MSI package.
Failed to read MSP package id.
Failed to read target product code.
Failed to read count of ordered patches.
Failed to allocate memory for ordered patches.
Failed to read ordered patch order number.
Failed to read ordered patch package id.
Failed to find ordered patch package: %ls
Failed to execute MSP package.
Failed to read MSU package id.
Failed to read StopWusaService.
Failed to execute MSU package.
Failed to read package id from message buffer.
Failed to execute package provider action.
Failed to read bundle dependency key from message buffer.
Failed to execute package dependency action.
Failed to read installed ProductCode from message buffer.
Failed to read installed version from message buffer.
Failed to copy installed ProductCode.
Failed to load compatible package.
Failed to write UI flags.
Failed to write progress percentage to message buffer.
Failed to write error code to message buffer.
Failed to write message to message buffer.
Failed to count of files in use to message buffer.
Failed to write file in use to message buffer.
Failed to send message to per-user process.
Failed to write MSI data count to message buffer.
Failed to write MSI data to message buffer.
Failed to write MSI message type to message buffer.
Invalid message type: %d
Failed to remove from cache package: %ls
Failed to read approved exe id.
Failed to read approved exe arguments.
Failed to read approved exe WaitForInputIdle timeout.
The per-user process requested unknown approved exe with id: %ls
Failed to open the registry key for the approved exe path.
Failed to read the value for the approved exe path.
Failed to verify the executable path is in a secure location: %ls
The executable path is not in a secure location: %ls
Failed to launch approved exe: %ls
Failed to write the approved exe process id to message buffer.
Failed to send BURN_ELEVATION_MESSAGE_TYPE_LAUNCH_APPROVED_EXE_PROCESSID message to per-user process.
c:\agent\_work\66\s\src\burn\engine\splashscreen.cpp
Failed to create modal event.
Failed to create UI thread.
Failed to allocate string to display error message
Failed to load splash screen.
Failed to register window.
Failed to create window.
Failed to load splash screen bitmap.
c:\agent\_work\66\s\src\burn\engine\uithread.cpp
Failed to create initialization event.
Failed to create the UI thread.
Kz?;?!S,
KzO;?1S,
JzG;?)S,
5b>(4R
Jz?;?!S,
[:?-S,
JzK;?-S,
Jz?;?!S,
4b;`5S
4RCWyR
MzOCOmR
MzOCJ)S
MzOCJ5T
4S@G]R
MzAGAR
4REW5R
4rty on install.
Failed to install MSP package.
Failed to uninstall MSP package.
Failed to create unique target product codes.
Failed to add product code to possible target product codes.
Failed to add upgrade product code to possible target product codes.
Failed to enumerate all products to patch related to upgrade code: %ls
Failed to add product code to search product codes.
Failed to enumerate all products on the machine for patches applicability.
Failed to add possible target code to unique product codes.
Failed to grow array of possible target products.
Failed to copy possible target product code.
Failed to ensure enough target product codes were allocated.
Failed to copy target product code.
Failed to plan action for target product.
Failed grow array of ordered patches.
Failed to get @KB.
Failed to evaluate MSU package detect condition.
c:\agent\_work\66\s\src\burn\engine\msuengine.cpp
Invalid package state.
Failed to determine WOW64 status.
Failed to find Windows directory.
Failed to append SysNative directory.
Failed to find System32 directory.
Failed to allocate WUSA.exe path.
Failed to build MSU path.
Failed to format MSU install command.
Failed to format MSU uninstall command.
Failed to get action arguments for MSU package.
Failed to append log switch to MSU command-line.
Failed to append log path to MSU command-line.
Failed to ensure WU service was enabled to install MSU package.
Bootstrapper application aborted during MSU progress.
Failed to get process exit code.
Failed to open service control manager.
Failed to open WU service.
Failed to query status of WU service.
Failed to read configuration for WU service.
Failed to mark WU service to start on demand.
Failed to set service start type.
Failed to stop wusa service.
Failed to select dependency provider nodes.
Failed to get the dependency provider node count.
c:\agent\_work\66\s\src\burn\engine\dependency.cpp
Failed to allocate memory for dependency providers.
Failed to get the next dependency provider node.
Failed to get the Key attribute.
Failed to get the Version attribute.
Failed to get the DisplayName attribute.
Failed to get the Imported attribute.
Failed to get the package provider information.
Failed to get the package default provider information.
Failed to get provider key bundle id.
Failed to initialize provider key bundle id.
Failed to add the bundle provider key to the list of dependencies to ignore.
Failed to split the list of dependencies to ignore.
Failed to join the list of dependencies to ignore.
Failed to check the dictionary of unique dependencies.
Failed to add "%ls" to the string dictionary.
Failed to build the list of ignored dependents.
Failed to check if "ALL" was set in IGNOREDEPENDENCIES.
Failed dependents check on package provider: %ls
Failed to plan the dependency actions for package: %ls
Failed to append provider rollback action.
Failed to plan provider checkpoint action.
Failed to insert provider execute action.
Failed to append provider execute action.
Failed to register the package providers.
Failed to register the dependency on the package provider.
Failed to format the registration version string.
Failed to register the bundle dependency provider.
Failed to register dependent: %ls
Failed to unregister dependent: %ls
Unrecognized registration action type: %d
Failed to add "%ls" to the list of dependencies to ignore.
Failed to append the string delimiter.
Failed to append the key "%ls".
Failed to add the bundle provider key "%ls" to the list of ignored dependencies.
Failed to add the package provider key "%ls" to the list of ignored dependencies.
Failed to get the package property: %ls
Failed to add the authored ignored dependencies to the cumulative list of ignored dependencies.
Failed to get the provider key package id.
Failed to copy the provider key.
Failed to copy the bundle dependency provider.
Failed to plan dependency checkpoint action.
Failed to register the package dependency provider: %ls
Failed to register the dependency on package dependency provider: %ls
Failed to open uninstall registry key.
Failed to enumerate uninstall key for related bundles.
Failed to open uninstall key for potential related bundle: %ls
Failed to ensure there is space for related bundles.
Failed to initialize package from related bundle id: %ls
c:\agent\_work\66\s\src\burn\engine\relatedbundle.cpp
Failed to allocate list for a single upgrade code from older bundle.
upgrade codes
Failed to create string dictionary for %hs.
Failed to do array search for upgrade code match.
Failed to do array search for detect code match.
Failed to do array search for addon code match.
addon codes
patch codes
Failed to do array search for patch code match.
detect codes
Failed to read version from registry for bundle: %ls
Failed to read cache path from registry for bundle: %ls
Failed to get size of pseudo bundle: %ls
Failed to read provider key from registry for bundle: %ls
Failed to copy version for bundle: %ls
Failed to copy display name for bundle: %ls
Failed to read tag from registry for bundle: %ls
Failed to initialize related bundle to represent bundle: %ls
c:\agent\_work\66\s\src\burn\engine\detect.cpp
BA aborted detect forward compatible bundle.
Failed to initialize update bundle.
Unexpected relation type encountered: %d
BA aborted detect related bundle.
UX aborted detect update begin.
Failed to detect atom feed update.
Failed to allocation error string.
Failed to create UpdateFeed based on current system time.
Failed to copy update url.
Failed attempt to download update feed from URL: '%ls' to: '%ls'
Failed to initialize Atom.
Failed to download update feed.
Failed to parse update atom feed: %ls.
Failed to allocate update chain from atom feed.
Failed to set the bundle forced restart package built-in variable.
c:\agent\_work\66\s\src\burn\engine\apply.cpp
UX aborted register begin.
Failed to resume registration session in per-machine process.
Failed to calculate working path for engine.
Failed to begin registration session in per-machine process.
Failed to end session in per-machine process.
Failed to end session in per-user process.
UX aborted cache.
Failed to set syncpoint event.
BA aborted execute begin.
Failed to execute dependent registration action.
Failed to process dependency registration action.
Failed to open container: %ls.
Failed to extract payload: %ls from container: %ls
Failed to skip the extraction of payload: %ls from container: %ls
Failed to extract all payloads from container: %ls
Failed to get path to bundle source process path to layout.
Failed to get path to bundle to layout.
Failed to concat layout path for bundle.
Failed to determine if layout bundle path was equivalent with current process path.
BA aborted cache acquire begin.
Failed to copy bundle from: '%ls' to: '%ls'
UX aborted cache verify begin.
Failed to layout bundle: %ls to layout directory: %ls
Failed to search local source.
Failed to determine if payload source path was equivalent to the destination path.
Failed while prompting for source (original path '%ls').
BA aborted cache download payload begin.
Failed to acquire payload from: '%ls' to working path: '%ls'
Failed to find external payload to cache.
container
payload
BA aborted verify of %hs: %ls
Failed to clear readonly bit on payload destination path: %ls
BA aborted copy of payload from: '%ls' to: %ls.
Failed attempt to copy payload from: '%ls' to: %ls.
download
Failed attempt to download URL: '%ls' to: '%ls'
Cache thread exited unexpectedly.
Failed to wait for cache check-point.
Failed to execute package provider registration action.
Failed to execute dependency action.
Failed to execute compatible package action.
Invalid execute action.
Invalid rollback action: %d.
UX aborted execute EXE package begin.
UX aborted EXE progress.
Failed to configure per-machine EXE package.
Failed to configure per-user EXE package.
UX aborted EXE package execute progress.
UX aborted execute MSI package begin.
Failed to configure per-machine MSI package.
Failed to configure per-user MSI package.
UX aborted MSI package execute progress.
UX aborted execute MSP package begin.
BA aborted execute MSP target.
Failed to configure per-machine MSP package.
Failed to configure per-user MSP package.
UX aborted MSP package execute progress.
UX aborted execute MSU package begin.
UX aborted MSU progress.
Failed to configure per-machine MSU package.
UX aborted MSU package execute progress.
Failed to register the package provider on per-machine package.
Failed to register the package provider on per-user package.
Failed to register the dependency on per-machine package.
Failed to register the dependency on per-user package.
Failed to load compatible package on per-machine package.
Failed to load manifest as XML document.
Failed to get bundle element.
Failed to get Log element.
Failed to get Log/@PathVariable.
Failed to get Log/@Prefix attribute.
Failed to get Log/@Extension attribute.
Failed to get chain element.
Failed to get Chain/@DisableRollback
Failed to get Chain/@DisableSystemRestore
Failed to get Chain/@ParallelCache
Failed to parse global condition.
Failed to parse variables.
Failed to parse searches.
Failed to parse user experience.
Failed to parse catalog files.
Failed to parse registration.
Failed to parse update.
Failed to parse containers.
Failed to parse payloads.
Failed to parse packages.
Failed to parse approved exes.
c:\agent\_work\66\s\src\burn\engine\pseudobundle.cpp
Failed to allocate space for burn package payload inside of related bundle struct
Failed to allocate space for burn payload inside of related bundle struct
Failed to copy key for pseudo bundle payload.
Failed to copy filename for pseudo bundle.
Failed to copy local source path for pseudo bundle.
Failed to copy download source for pseudo bundle.
Failed to allocate memory for pseudo bundle payload hash.
Failed to copy key for pseudo bundle.
Failed to copy cache id for pseudo bundle.
Failed to copy install arguments for related bundle package
Failed to append relation type to install arguments for related bundle package
Failed to copy repair arguments for related bundle package
Failed to append relation type to repair arguments for related bundle package
Failed to copy uninstall arguments for related bundle package
Failed to append relation type to uninstall arguments for related bundle package
Failed to copy version for pseudo bundle.
Failed to copy display name for pseudo bundle.
Failed to allocate space for burn package payload inside of passthrough bundle.
Failed to copy key for passthrough pseudo bundle payload.
Failed to copy filename for passthrough pseudo bundle.
Failed to copy local source path for passthrough pseudo bundle.
Failed to copy download source for passthrough pseudo bundle.
Failed to copy key for passthrough pseudo bundle.
Failed to copy cache id for passthrough pseudo bundle.
Failed to recreate command-line arguments.
Failed to copy install arguments for passthrough bundle package
Failed to copy related arguments for passthrough bundle package
Failed to copy uninstall arguments for passthrough bundle package
Failed to create embedded pipe name and client token.
Failed to create embedded pipe.
Failed to allocate embedded command.
c:\agent\_work\66\s\src\burn\engine\embedded.cpp
Failed to create embedded process at path: %ls
Failed to wait for embedded process to connect to pipe.
Failed to process messages from embedded message.
Failed to wait for embedded executable: %ls
Failed to process embedded error message.
Failed to process embedded progress message.
Unexpected embedded message sent to child process, msg: %u
Failed to read error code from buffer.
Failed to read error message from buffer.
Failed to read UI hint from buffer.
Failed to read progress from buffer.
c:\agent\_work\66\s\src\burn\engine\netfxchainer.cpp
Failed to allocate memory for NetFxChainer struct.
Failed to create event: %ls
failed to allocate memory for event name
failed to allocate memory for mutex name
Failed to create mutex: %ls
Failed to memory map cabinet file: %ls
Failed to MapViewOfFile for %ls.
failed to copy event name to shared memory structure.
Failed to allocate memory for message data
Failed to allocate buffer.
Failed to get message from netfx chainer.
Failed to send files in use message from netfx chainer.
Failed to create netfx chainer guid.
Failed to convert netfx chainer guid into string.
Failed to allocate section name.
Failed to allocate event name.
Failed to create netfx chainer.
Failed to allocate netfx chainer arguments.
Failed to get netfx return code.
Failed to process netfx chainer message.
Failed to wait for netfx chainer process to complete
k"c:\agent\_work\66\s\src\burn\engine\bitsengine.cpp
Failure while sending progress during BITS job transferred.
Failed to get error context.
Failed to get state during job modification.
Failure while sending progress during BITS job modification.
Failed while waiting for download.
Failed to get progress when BITS job was transferred.
Failed to send progress from BITS job.
Failed to get BITS job state.
Failure while sending progress.
Failed to create BITS job complete event.
Invalid BITS engine URL: %ls
Failed to copy download URL.
Failed to create BITS job.
Failed to set credentials for BITS job.
Failed to add file to BITS job.
Failed to create BITS job callback.
Failed to initialize BITS job callback.
Failed to set callback interface for BITS job.
Falied to start BITS job.
Failed while waiting for BITS download.
Failed to download BITS job.
Failed to complete BITS job.
|Failed to create IBackgroundCopyManager.
Failed to set notification flags for BITS job.
Failed to set progress timeout.
Failed to set BITS job to foreground.
Failed to set background copy NTLM credentials
Failed to set background copy negotiate credentials
Unknown exception
bad allocation
bad array new length
FlsAlloc
FlsFree
FlsSetValue
InitializeCriticalSectionEx
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
`h````
xpxxxx
(null)
CorExitProcess
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
GetCurrentPackageId
InitializeCriticalSectionEx
LCMapStringEx
LocaleNameToLCID
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
[aOni*{
~ $s%r
@b;zO]
v2!L.2
1#QNAN
1#SNAN
?5Wg4p
%S#[k=
"B <1=
_hypot
_nextafter
Cabinet.dll
CRYPT32.dll
msi.dll
WININET.dll
WINTRUST.dll
c:\agent\_work\66\s\src\libs\dutil\buffutil.cpp
SystemFunction040
SystemFunction041
CryptProtectMemory
c:\agent\_work\66\s\src\libs\dutil\cryputil.cpp
CryptUnprotectMemory
unknown
warning
standard
verbose
c:\agent\_work\66\s\src\libs\dutil\logutil.cpp
--- logging level: %hs ---
Error 0x%x: %ls
=== Logging started: %ls ===
Executable: %ls v%d.%d.%d.%d
Computer : %ls
=== Logging stopped: %ls ===
c:\agent\_work\66\s\src\libs\dutil\procutil.cpp
IsWow64Process
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
RegDeleteKeyExW
c:\agent\_work\66\s\src\libs\dutil\regutil.cpp
SRSetRestorePointW
c:\agent\_work\66\s\src\libs\dutil\srputil.cpp
eListAddSourceExW
c:\agent\_work\66\s\src\libs\dutil\wiutil.cpp
c:\agent\_work\66\s\src\libs\dutil\xmlutil.cpp
kernel32.dll
Wow64EnableWow64FsRedirection
c:\agent\_work\66\s\src\libs\dutil\shelutil.cpp
Kc:\agent\_work\66\s\src\libs\dutil\wuautil.cpp
c:\agent\_work\66\s\src\libs\dutil\fileutil.cpp
c:\agent\_work\66\s\src\libs\dutil\dictutil.cpp
c:\agent\_work\66\s\src\libs\dutil\aclutil.cpp
c:\agent\_work\66\s\src\libs\dutil\certutil.cpp
c:\agent\_work\66\s\src\libs\dutil\svcutil.cpp
c:\agent\_work\66\s\src\libs\dutil\dlutil.cpp
Failed to send request to URL: %ls, trying to process HTTP status code anyway.
Unknown HTTP status code %d, returned from URL: %ls
c:\agent\_work\66\s\src\libs\dutil\atomutil.cpp
c:\agent\_work\66\s\src\libs\dutil\apuputil.cpp
c:\agent\_work\66\s\src\libs\dutil\timeutil.cpp
c:\agent\_work\66\s\src\libs\dutil\inetutil.cpp
c:\agent\_work\66\s\src\libs\dutil\uriutil.cpp
c:\agent\_work\66\s\src\libs\deputil\deputil.cpp
VERSION.dll
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SHLWAPI.dll
DWS;zk
iB\aHz
3`fH%w[
C:\agent\_work\66\s\build\ship\x86\burn.pdb
.text$di
.text$mn
.idata$5
.00cfg
.CRT$XCA
.CRT$XCAA
.CRT$XCU
.CRT$XCZ
.CRT$XIA
.CRT$XIAA
.CRT$XIAC
.CRT$XIC
.CRT$XIZ
.CRT$XLA
.CRT$XLZ
.CRT$XPA
.CRT$XPX
.CRT$XPXA
.CRT$XPZ
.CRT$XTA
.CRT$XTZ
.rdata
.rdata$T
.rdata$r
.rdata$sxdata
.rdata$zzzdbg
.rtc$IAA
.rtc$IZZ
.rtc$TAA
.rtc$TZZ
.tls$ZZZ
.xdata$x
.didat$2
.didat$3
.didat$4
.didat$6
.didat$7
.idata$2
.idata$3
.idata$4
.idata$6
.data$r
.didat$5
.wixburn
.rsrc$01
.rsrc$02
CryptHashPublicKeyInfo
InternetErrorDlg
WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
CryptCATAdminCalcHashFromFileHandle
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
CertGetCertificateContextProperty
PathCanonicalizeW
InternetOpenW
InternetCloseHandle
InternetConnectW
InternetReadFile
InternetSetOptionW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
HttpQueryInfoW
InternetCrackUrlW
RegCloseKey
RegOpenKeyExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
RegQueryValueExW
RegDeleteValueW
CloseEventLog
OpenEventLogW
ReportEventW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DecryptFileW
CreateWellKnownSid
InitializeAcl
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
ADVAPI32.dll
GetMessageW
PeekMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
TranslateMessage
DispatchMessageW
DefWindowProcW
RegisterClassW
UnregisterClassW
CreateWindowExW
MessageBoxW
GetCursorPos
GetWindowLongW
SetWindowLongW
LoadBitmapW
LoadCursorW
IsDialogMessageW
MonitorFromPoint
GetMonitorInfoW
PostThreadMessageW
MsgWaitForMultipleObjects
USER32.dll
OLEAUT32.dll
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
GDI32.dll
CommandLineToArgvW
SHGetFolderPathW
SHELL32.dll
CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
ole32.dll
CloseHandle
CreateFileW
GetProcAddress
LocalFree
HeapSetInformation
GetLastError
GetModuleHandleW
FormatMessageW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
GetLocalTime
GetModuleFileNameW
ExpandEnvironmentStringsW
GetTempPathW
GetTempFileNameW
CreateDirectoryW
GetFullPathNameW
CompareStringW
GetCurrentProcessId
WriteFile
SetFilePointer
LoadLibraryW
GetSystemDirectoryW
CreateFileA
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FindClose
SetCurrentDirectoryW
GetCurrentDirectoryW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
GetCurrentProcess
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetNativeSystemInfo
GetModuleHandleExW
GetWindowsDirectoryW
GetSystemWow64DirectoryW
GetComputerNameW
VerifyVersionInfoW
GetVolumePathNameW
GetDateFormatW
GetUserDefaultUILanguage
GetSystemDefaultLangID
GetUserDefaultLangID
GetStringTypeW
ReadFile
Antivirus Signature
Bkav W32.AIDetectMalware
Lionic Trojan.Win32.Rugmi.4!c
tehtris Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Trojan.Rugmi
Skyhigh Clean
ALYac Clean
Cylance Unsafe
Zillya Trojan.Penguish.Win32.350
Sangfor Clean
K7AntiVirus Clean
Alibaba Clean
K7GW Clean
Cybereason Clean
huorong Clean
Baidu Clean
VirIT Clean
Paloalto generic.ml
Symantec Trojan.Gen.MBT
Elastic malicious (moderate confidence)
ESET-NOD32 Win32/TrojanDownloader.Rugmi.AAN
APEX Clean
Avast Win32:Malware-gen
Cynet Clean
Kaspersky UDS:Trojan.Win32.Penguish
BitDefender Clean
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Clean
Tencent Malware.Win32.Gencirc.14136fff
TACHYON Clean
Sophos Mal/Generic-R
F-Secure Trojan.TR/AVI.Agent.ipyqi
DrWeb Clean
VIPRE Clean
TrendMicro TrojanSpy.Win32.STEALC.E
McAfeeD ti!EDA401786B61
Trapmine Clean
FireEye Clean
Emsisoft Clean
Ikarus Trojan.Win32.Rugmi
GData Win32.Trojan.Agent.VCQGXY
Jiangmin Clean
Webroot Clean
Varist W32/ABTrojan.DVWK-2455
Avira TR/AVI.Agent.ipyqi
Antiy-AVL Trojan/Win32.Rugmi
Kingsoft Win32.Troj.Generic.v
Gridinsoft Trojan.Win32.Gen.cl
Xcitium Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm UDS:Trojan.Win32.Penguish
Microsoft Trojan:Win32/Rugmi!MSR
Google Detected
AhnLab-V3 Clean
Acronis Clean
McAfee Clean
MAX Clean
VBA32 Clean
Malwarebytes Trojan.PyengyLoader
Panda Clean
Zoner Clean
TrendMicro-HouseCall TrojanSpy.Win32.STEALC.E
Rising Clean
Yandex Clean
SentinelOne Clean
MaxSecure Trojan.Malware.116989021.susgen
Fortinet Malicious_Behavior.SB
BitDefenderTheta Clean
AVG Win32:Malware-gen
DeepInstinct MALICIOUS
CrowdStrike Clean
alibabacloud Trojan[downloader]:Win/Rugmi.AMS
No IRMA results available.