General

Malware Config

Signatures

Files

• caaf7a0ba0be857a3b9ffadb1721a2f8e1ce053de3e54c58971c24235acb8952

  .zip
• snxdx/????.url

  .url
• snxdx/?????.7xk
• snxdx/?????.exe

  .exe windows x86

  a80e7d9c7437b95318c939d4a5d93115

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcr120

  _commode

  _crt_debugger_hook

  __crtUnhandledException

  __crtTerminateProcess

  ?terminate@@YAXXZ

  __crtSetUnhandledExceptionFilter

  _lock

  _unlock

  _calloc_crt

  _fmode

  _onexit

  _invoke_watson

  _controlfp_s

  _except_handler4_common

  _CxxThrowException

  __CxxFrameHandler3

  _wcmdln

  ??3@YAXPAX@Z

  _initterm

  _initterm_e

  __setusermatherr

  _configthreadlocale

  _cexit

  _exit

  exit

  __set_app_type

  __wgetmainargs

  _amsg_exit

  __crtGetShowWindowMode

  _XcptFilter

  ??2@YAPAXI@Z

  __dllonexit

  malloc

  free

  ??1type_info@@UAE@XZ

  mscoree

  CorBindToRuntimeEx

  CLRCreateInstance

  kernel32

  EncodePointer

  LocalFree

  MultiByteToWideChar

  lstrlenA

  GetLastError

  DecodePointer

  GetSystemTimeAsFileTime

  GetCurrentThreadId

  GetCurrentProcessId

  QueryPerformanceCounter

  IsProcessorFeaturePresent

  IsDebuggerPresent

  InterlockedDecrement

  ole32

  CoInitializeEx

  oleaut32

  SysFreeString

  SafeArrayDestroy

  SafeArrayCreate

  SafeArrayPutElement

  VariantClear

  SysAllocString

  Sections

  .text

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 36KB - Virtual size: 36KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 18KB - Virtual size: 21KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

• snxdx/??????.url

  .url
• snxdx/CrackCaptchaAPI.dll

  .dll windows x86

  2e0cb872e351474113d3223cee94e947

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  CreateEventA

  SetEvent

  HeapCreate

  HeapDestroy

  InterlockedIncrement

  InterlockedDecrement

  GetCurrentThreadId

  ResetEvent

  SystemTimeToFileTime

  GetCurrentProcess

  MulDiv

  GetCurrentDirectoryA

  GetPrivateProfileIntA

  GetPrivateProfileStringA

  Sleep

  WriteFile

  FreeLibrary

  HeapFree

  ReleaseSemaphore

  TlsAlloc

  GetLocalTime

  TlsSetValue

  DeleteFileA

  MoveFileA

  GetFileSize

  ReadFile

  TlsGetValue

  GetProcessHeap

  HeapAlloc

  SetLastError

  WaitForSingleObject

  EnterCriticalSection

  DeleteCriticalSection

  InitializeCriticalSectionAndSpinCount

  LeaveCriticalSection

  GetSystemTimeAsFileTime

  GetTickCount

  FileTimeToSystemTime

  SystemTimeToTzSpecificLocalTime

  WideCharToMultiByte

  GetLastError

  MultiByteToWideChar

  GetVersionExA

  DeviceIoControl

  CreateFileA

  GetProcAddress

  LoadLibraryA

  lstrlenA

  WaitForMultipleObjects

  CloseHandle

  GlobalAlloc

  GlobalFree

  SetEnvironmentVariableA

  CompareStringW

  CreateFileW

  WriteConsoleW

  CreateSemaphoreA

  FlushFileBuffers

  SetEndOfFile

  SetStdHandle

  GetDriveTypeW

  GetFileAttributesA

  GetStringTypeW

  LoadLibraryW

  HeapReAlloc

  GetConsoleMode

  GetConsoleCP

  SetFilePointer

  GetCurrentProcessId

  QueryPerformanceCounter

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetModuleFileNameA

  LCMapStringW

  GetStartupInfoW

  SetHandleCount

  RtlUnwind

  GetCurrentDirectoryW

  GetFileType

  PeekNamedPipe

  EncodePointer

  DecodePointer

  ExitThread

  CreateThread

  FindClose

  FileTimeToLocalFileTime

  GetDriveTypeA

  FindFirstFileExA

  GetCommandLineA

  TerminateProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  RaiseException

  GetTimeZoneInformation

  HeapSize

  GetModuleHandleW

  ExitProcess

  TlsFree

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  GetStdHandle

  GetModuleFileNameW

  IsProcessorFeaturePresent

  GetFullPathNameA

  GetFileInformationByHandle

  user32

  GetSystemMetrics

  GetDC

  GetWindowDC

  ScreenToClient

  FindWindowExA

  IsWindow

  GetSysColor

  ReleaseDC

  IsRectEmpty

  GetWindowRect

  gdi32

  GetDeviceCaps

  SetWinMetaFileBits

  CreateCompatibleDC

  SelectObject

  DeleteObject

  CreateCompatibleBitmap

  DeleteDC

  SetBkColor

  BitBlt

  GetDIBits

  DeleteEnhMetaFile

  GetEnhMetaFileHeader

  SetEnhMetaFileBits

  PlayEnhMetaFile

  RealizePalette

  SelectPalette

  CreatePalette

  GetEnhMetaFilePaletteEntries

  ExtTextOutA

  advapi32

  LookupPrivilegeValueA

  AdjustTokenPrivileges

  OpenProcessToken

  wininet

  InternetOpenUrlA

  InternetReadFile

  InternetOpenA

  HttpQueryInfoA

  InternetCloseHandle

  iphlpapi

  GetAdaptersInfo

  shlwapi

  PathFileExistsA

  ws2_32

  gethostname

  connect

  WSAStartup

  gethostbyname

  recv

  inet_ntoa

  closesocket

  htons

  WSAGetLastError

  inet_addr

  socket

  ioctlsocket

  WSACreateEvent

  WSAResetEvent

  WSACloseEvent

  send

  WSAEventSelect

  WSAWaitForMultipleEvents

  WSAEnumNetworkEvents

  ntohl

  htonl

  getsockname

  ntohs

  getpeername

  WSACleanup

  Exports

  Exports

  ChangeInfo

  D2Balance

  D2Buf

  D2File

  D2FileAsync

  D2Recharge

  D2Register

  D2Wnd

  D2WndHandle

  Decode

  DecodeBuf

  DecodeBufSync

  DecodeFileSync

  DecodeSync

  DecodeWnd

  DecodeWndHandle

  DecodeWndHandleSync

  DecodeWndSync

  GetOrigError

  GetResult

  Init

  Login

  Login2

  Logoff

  QueryBalance

  ReadInfo

  Recharge

  Register

  ReportResult

  Uninit

  Sections

  .text

  Size: 1.0MB - Virtual size: 1.0MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 278KB - Virtual size: 278KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 28KB - Virtual size: 84KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 36KB - Virtual size: 36KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rmnet

  Size: 76KB - Virtual size: 76KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

• snxdx/Nie.7xk
• snxdx/Nie.Captcha.7xk
• snxdx/Nie.Management.7xk
• snxdx/UUWiseHelper.dll

  .dll windows x86

  6f727a0ca8f61a3a8e91c7dd26c78cd8

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  ReadFile

  GetFileSize

  InterlockedIncrement

  InterlockedDecrement

  GetCurrentProcess

  GetCurrentThreadId

  GetCurrentProcessId

  GetLocalTime

  GetModuleFileNameW

  GlobalUnlock

  GlobalLock

  GlobalSize

  SetUnhandledExceptionFilter

  lstrcmpiW

  lstrcatW

  lstrcpyW

  DisableThreadLibraryCalls

  lstrlenA

  WaitForSingleObject

  CreateThread

  CreateDirectoryW

  GetPrivateProfileIntW

  WriteFile

  SetFilePointer

  InitializeCriticalSection

  FreeLibrary

  LoadLibraryW

  CreateEventA

  TerminateThread

  SetEvent

  WaitForMultipleObjects

  DeviceIoControl

  GetSystemInfo

  GetVersionExW

  FindNextFileW

  FindFirstFileW

  lstrcpynW

  IsBadWritePtr

  IsBadReadPtr

  lstrcpyA

  lstrcpynA

  CompareStringW

  WriteConsoleW

  MultiByteToWideChar

  FlushFileBuffers

  SetStdHandle

  GetConsoleMode

  CloseHandle

  lstrlenW

  GetModuleHandleW

  GetProcAddress

  CreateFileW

  Sleep

  FindResourceExW

  FindResourceW

  LoadResource

  LockResource

  SizeofResource

  DeleteCriticalSection

  InitializeCriticalSectionAndSpinCount

  LeaveCriticalSection

  EnterCriticalSection

  GetLastError

  WideCharToMultiByte

  GetConsoleCP

  QueryPerformanceCounter

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetModuleFileNameA

  GetStartupInfoW

  GetFileType

  SetHandleCount

  GetStdHandle

  SetEnvironmentVariableA

  ExitProcess

  IsProcessorFeaturePresent

  HeapCreate

  LCMapStringW

  GetStringTypeW

  SetLastError

  TlsFree

  TlsSetValue

  TlsGetValue

  TlsAlloc

  IsValidCodePage

  GetOEMCP

  GetACP

  GetCPInfo

  TerminateProcess

  IsDebuggerPresent

  UnhandledExceptionFilter

  GetCommandLineA

  GetSystemTimeAsFileTime

  GetTimeZoneInformation

  DecodePointer

  EncodePointer

  RtlUnwind

  GetTickCount

  GetProcessHeap

  HeapSize

  HeapReAlloc

  HeapFree

  HeapAlloc

  HeapDestroy

  RaiseException

  user32

  PrintWindow

  FindWindowW

  ReleaseDC

  GetDC

  GetSystemMetrics

  GetWindowRect

  GetWindowDC

  wsprintfA

  gdi32

  DeleteObject

  GetDeviceCaps

  CreateCompatibleDC

  CreateCompatibleBitmap

  SelectObject

  BitBlt

  DeleteDC

  advapi32

  CryptReleaseContext

  RegOpenKeyExW

  RegCloseKey

  CryptAcquireContextW

  CryptCreateHash

  CryptHashData

  CryptGetHashParam

  CryptDestroyHash

  shell32

  SHGetSpecialFolderPathW

  ole32

  CoCreateGuid

  CoTaskMemFree

  CoUninitialize

  CoCreateInstance

  CoInitialize

  CreateStreamOnHGlobal

  GetHGlobalFromStream

  oleaut32

  SafeArrayGetLBound

  VariantClear

  SysAllocString

  SafeArrayCreateVector

  SafeArrayGetUBound

  SafeArrayAccessData

  SafeArrayUnaccessData

  SysAllocStringLen

  VariantInit

  SysFreeString

  shlwapi

  PathFileExistsW

  StrStrIW

  urlmon

  FindMimeFromData

  dbghelp

  MiniDumpWriteDump

  gdiplus

  GdiplusStartup

  GdipFree

  GdipGetImageEncodersSize

  GdipCloneImage

  GdipCreateBitmapFromHBITMAP

  GdipCreateBitmapFromStream

  GdipSaveImageToStream

  GdipGetImageEncoders

  GdipDisposeImage

  GdipAlloc

  iphlpapi

  GetAdaptersInfo

  ws2_32

  GetAddrInfoW

  sendto

  recvfrom

  setsockopt

  WSAStartup

  closesocket

  socket

  Exports

  Exports

  uu_AsyncRecognizeByCodeTypeAndPathA

  uu_CheckApiSignA

  uu_CheckApiSignW

  uu_CloseAsyncRecognizeHandle

  uu_GetAsyncRecognizeResultA

  uu_SysCallOneParam

  uu_UploadFileA

  uu_UploadFileW

  uu_UploadScreen

  uu_easyRecognizeBytesA

  uu_easyRecognizeBytesW

  uu_easyRecognizeFileA

  uu_easyRecognizeFileW

  uu_easyRecognizeScreenA

  uu_easyRecognizeScreenW

  uu_easyRecognizeUrlA

  uu_easyRecognizeUrlW

  uu_easyRecognizeWndByHWndAndPosA

  uu_easyRecognizeWndByHWndAndPosW

  uu_easyRecognizeWndByTitleAndPosA

  uu_easyRecognizeWndByTitleAndPosW

  uu_getResultA

  uu_getResultW

  uu_getScoreA

  uu_getScoreW

  uu_loginA

  uu_loginW

  uu_payA

  uu_payW

  uu_recognizeByCodeTypeAndBytesA

  uu_recognizeByCodeTypeAndBytesW

  uu_recognizeByCodeTypeAndPathA

  uu_recognizeByCodeTypeAndPathW

  uu_recognizeByCodeTypeAndUrlA

  uu_recognizeByCodeTypeAndUrlW

  uu_recognizeScreenByCodeTypeA

  uu_recognizeScreenByCodeTypeW

  uu_recognizeWndByHWndAndPosA

  uu_recognizeWndByHWndAndPosW

  uu_recognizeWndByTitleAndPosA

  uu_recognizeWndByTitleAndPosW

  uu_reguserA

  uu_reguserW

  uu_reportError

  uu_setSoftInfoA

  uu_setSoftInfoW

  uu_setTimeOut

  Sections

  .text

  Size: 176KB - Virtual size: 175KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 32KB - Virtual size: 31KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 12KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• snxdx/dc.dll

  .dll windows x86

  8f44d7882c9933a2a203e607aedb0523

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mfc42

  ord3922

  ord1089

  ord5199

  ord2396

  ord3346

  ord5300

  ord5302

  ord4079

  ord4698

  ord5307

  ord5289

  ord5714

  ord2982

  ord3147

  ord3259

  ord4465

  ord3136

  ord3262

  ord2985

  ord3081

  ord2976

  ord3830

  ord3831

  ord3825

  ord3079

  ord4080

  ord4622

  ord4424

  ord3738

  ord561

  ord815

  ord858

  ord5731

  ord5683

  ord1199

  ord1247

  ord2725

  ord6385

  ord6283

  ord6282

  ord6930

  ord6928

  ord941

  ord2827

  ord939

  ord3337

  ord3811

  ord1601

  ord1176

  ord1575

  ord1168

  ord1577

  ord1182

  ord342

  ord1243

  ord1197

  ord1570

  ord1253

  ord1255

  ord6467

  ord1578

  ord600

  ord826

  ord1116

  ord269

  ord2512

  ord2554

  ord4486

  ord6375

  ord4274

  ord922

  ord4202

  ord537

  ord540

  ord2818

  ord535

  ord860

  ord924

  ord800

  ord354

  ord5186

  ord3318

  ord5442

  ord1979

  ord665

  ord803

  ord823

  ord825

  ord543

  ord4278

  ord3584

  msvcrt

  memmove

  free

  wcscmp

  malloc

  srand

  _CxxThrowException

  wcscpy

  __dllonexit

  rand

  strstr

  _ftol

  atol

  sprintf

  __CxxFrameHandler

  time

  _onexit

  ??1type_info@@UAE@XZ

  _initterm

  calloc

  _adjust_fdiv

  _mbscmp

  kernel32

  lstrlenA

  DeleteFileA

  GetPrivateProfileStringA

  CreateDirectoryA

  GetModuleHandleA

  GetModuleFileNameA

  GetComputerNameA

  GetDiskFreeSpaceExA

  GetSystemInfo

  GetVersionExA

  GetSystemDirectoryA

  GetTickCount

  WritePrivateProfileStringA

  LeaveCriticalSection

  GetCurrentThreadId

  EnterCriticalSection

  GetPrivateProfileIntA

  DeleteCriticalSection

  InitializeCriticalSection

  Sleep

  WideCharToMultiByte

  lstrlenW

  LocalFree

  LocalAlloc

  MultiByteToWideChar

  gdiplus

  GdipCloneImage

  GdipAlloc

  GdipFree

  GdiplusStartup

  GdipLoadImageFromFile

  GdipSaveImageToFile

  GdipDisposeImage

  GdiplusShutdown

  GdipGetImageEncodersSize

  GdipGetImageEncoders

  wsock32

  ntohs

  WSAStartup

  socket

  WSAGetLastError

  inet_ntoa

  ioctlsocket

  htons

  connect

  select

  __WSAFDIsSet

  send

  recv

  closesocket

  gethostbyname

  inet_addr

  getsockname

  msvcp60

  ??0_Lockit@std@@QAE@XZ

  ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

  ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z

  ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

  ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

  ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z

  ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB

  ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB

  ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z

  ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ

  ?_Xran@std@@YAXXZ

  ??1_Lockit@std@@QAE@XZ

  Exports

  Exports

  DC_Check

  DC_CheckUpdate

  DC_GetCJ

  DC_GetImg

  DC_GetInfo

  DC_GetLastError

  DC_Init

  DC_Init2

  DC_Notify

  DC_NotifyFail

  DC_RecogImg

  DC_Reg

  DC_Reg2

  DC_RegPayUser

  DC_SetResult

  DC_Uninit

  GetUserInfo

  GetUserInfo_A

  RecByte

  RecByte_A

  RecYZM

  RecYZM_A

  Reglz

  ReportError

  ReportError_A

  VBYB_GetResult

  VBYB_Init

  VBYB_PutImg

  VBYB_ReportError

  VBYB_Uninit

  VB_GetUserInfo

  VB_RecByte

  VB_RecFile

  VB_ReportError

  uu_getScoreA

  uu_getScoreW

  uu_loginA

  uu_loginW

  uu_recognizeByCodeTypeAndBytesA

  uu_recognizeByCodeTypeAndBytesW

  uu_recognizeByCodeTypeAndPathA

  uu_recognizeByCodeTypeAndPathW

  uu_reportError

  uu_setSoftInfoA

  uu_setSoftInfoW

  uu_setTimeOut

  Sections

  .text

  Size: 80KB - Virtual size: 77KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 12KB - Virtual size: 11KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 8KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 936B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• snxdx/msvcr120.dll

  .dll windows x86

  aa8d086deb6960b10f8791df466a5610

  
  

  Code Sign

  33:00:00:00:34:24:31:40:c9:a0:c1:79:8d:00:00:00:00:00:34

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  27-03-2013 20:08

  Not After

  27-06-2014 20:08

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  24-01-2013 22:33

  Not After

  24-04-2014 22:33

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31-08-2010 22:19

  Not After

  31-08-2020 22:29

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03-04-2007 12:53

  Not After

  03-04-2021 13:03

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:1a:77:bb:74:b3:07:d1:16:b8:00:00:00:00:00:1a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  24-09-2013 17:41

  Not After

  24-12-2014 17:41

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08-07-2011 20:59

  Not After

  08-07-2026 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:82:cf:f8:a2:0e:57:bd:cc:0a:76:cf:1e:4f:c9:43:8c:94:65:03:5e:34:db:a7:06:0b:42:ee:a6:9d:c2:88

  Signer

  Actual PE Digest

  0a:82:cf:f8:a2:0e:57:bd:cc:0a:76:cf:1e:4f:c9:43:8c:94:65:03:5e:34:db:a7:06:0b:42:ee:a6:9d:c2:88

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  18-05-2022 18:07

  Valid: false

  3f:08:90:50:77:63:e4:04:ba:19:2c:b1:94:32:e7:d0:82:51:35:78

  Signer

  Actual PE Digest

  3f:08:90:50:77:63:e4:04:ba:19:2c:b1:94:32:e7:d0:82:51:35:78

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  05-10-2013 09:04

  Valid: false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  EncodePointer

  DecodePointer

  RaiseException

  GetLastError

  ExitProcess

  GetModuleHandleW

  GetModuleHandleExW

  GetProcAddress

  AreFileApisANSI

  MultiByteToWideChar

  WideCharToMultiByte

  GetCommandLineA

  GetCommandLineW

  GetCurrentThreadId

  EnterCriticalSection

  LeaveCriticalSection

  DeleteCriticalSection

  GetModuleFileNameA

  SetLastError

  GetCurrentThread

  GetModuleFileNameW

  IsProcessorFeaturePresent

  GetStdHandle

  WriteFile

  FindClose

  FindFirstFileExA

  FindNextFileA

  FindFirstFileExW

  FindNextFileW

  CloseHandle

  CreateThread

  ExitThread

  ResumeThread

  LoadLibraryExW

  SystemTimeToTzSpecificLocalTime

  FileTimeToSystemTime

  GetDiskFreeSpaceA

  GetLogicalDrives

  SetErrorMode

  Beep

  Sleep

  GetFullPathNameA

  GetCurrentProcessId

  GetFileAttributesExW

  SetFileAttributesW

  GetFullPathNameW

  CreateDirectoryW

  MoveFileExW

  RemoveDirectoryW

  GetDriveTypeW

  DeleteFileW

  SetEnvironmentVariableA

  SetCurrentDirectoryA

  GetCurrentDirectoryA

  SetCurrentDirectoryW

  GetCurrentDirectoryW

  SetEnvironmentVariableW

  WaitForSingleObject

  GetExitCodeProcess

  CreateProcessA

  FreeLibrary

  LoadLibraryExA

  CreateProcessW

  ReadFile

  GetTempPathA

  GetTempPathW

  DuplicateHandle

  GetCurrentProcess

  GetSystemTimeAsFileTime

  GetTimeZoneInformation

  GetLocalTime

  LocalFileTimeToFileTime

  SetFileTime

  SystemTimeToFileTime

  SetLocalTime

  InterlockedPopEntrySList

  InterlockedFlushSList

  QueryDepthSList

  InterlockedPushEntrySList

  CreateTimerQueue

  SetEvent

  WaitForSingleObjectEx

  UnregisterWait

  TlsGetValue

  SignalObjectAndWait

  TlsSetValue

  SetThreadPriority

  ChangeTimerQueueTimer

  CreateTimerQueueTimer

  GetNumaHighestNodeNumber

  RegisterWaitForSingleObject

  GetLogicalProcessorInformation

  RtlCaptureStackBackTrace

  GetThreadPriority

  GetProcessAffinityMask

  SetThreadAffinityMask

  TlsAlloc

  DeleteTimerQueueTimer

  TlsFree

  SwitchToThread

  TryEnterCriticalSection

  SetProcessAffinityMask

  VirtualFree

  GetVersionExW

  VirtualAlloc

  VirtualProtect

  InitializeSListHead

  ReleaseSemaphore

  UnregisterWaitEx

  LoadLibraryW

  OutputDebugStringW

  FreeLibraryAndExitThread

  GetModuleHandleA

  GetThreadTimes

  CreateEventW

  GetStringTypeW

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCPInfo

  RtlUnwind

  HeapFree

  HeapAlloc

  GetProcessHeap

  HeapReAlloc

  HeapSize

  HeapQueryInformation

  HeapValidate

  HeapCompact

  HeapWalk

  GetSystemInfo

  VirtualQuery

  GetFileType

  GetStartupInfoW

  FileTimeToLocalFileTime

  GetFileInformationByHandle

  PeekNamedPipe

  CreateFileW

  GetConsoleMode

  ReadConsoleW

  GetConsoleCP

  SetFilePointerEx

  FlushFileBuffers

  CreatePipe

  SetStdHandle

  GetNumberOfConsoleInputEvents

  PeekConsoleInputA

  ReadConsoleInputA

  SetConsoleMode

  ReadConsoleInputW

  WriteConsoleW

  SetEndOfFile

  LockFileEx

  UnlockFileEx

  IsDebuggerPresent

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  InitializeCriticalSectionAndSpinCount

  TerminateProcess

  GetTickCount

  CreateSemaphoreW

  SetConsoleCtrlHandler

  QueryPerformanceCounter

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetDateFormatW

  GetTimeFormatW

  CompareStringW

  LCMapStringW

  GetLocaleInfoW

  IsValidLocale

  GetUserDefaultLCID

  EnumSystemLocalesW

  OutputDebugStringA

  Exports

  Exports

  $I10_OUTPUT

  ??0?$_SpinWait@$00@details@Concurrency@@QAE@P6AXXZ@Z

  ??0?$_SpinWait@$0A@@details@Concurrency@@QAE@P6AXXZ@Z

  ??0SchedulerPolicy@Concurrency@@QAA@IZZ

  ??0SchedulerPolicy@Concurrency@@QAE@ABV01@@Z

  ??0SchedulerPolicy@Concurrency@@QAE@XZ

  ??0_Cancellation_beacon@details@Concurrency@@QAE@XZ

  ??0_Condition_variable@details@Concurrency@@QAE@XZ

  ??0_Context@details@Concurrency@@QAE@PAVContext@2@@Z

  ??0_Interruption_exception@details@Concurrency@@QAE@PBD@Z

  ??0_Interruption_exception@details@Concurrency@@QAE@XZ

  ??0_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ

  ??0_NonReentrantPPLLock@details@Concurrency@@QAE@XZ

  ??0_ReaderWriterLock@details@Concurrency@@QAE@XZ

  ??0_ReentrantBlockingLock@details@Concurrency@@QAE@XZ

  ??0_ReentrantLock@details@Concurrency@@QAE@XZ

  ??0_ReentrantPPLLock@details@Concurrency@@QAE@XZ

  ??0_Scheduler@details@Concurrency@@QAE@PAVScheduler@2@@Z

  ??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z

  ??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z

  ??0_SpinLock@details@Concurrency@@QAE@ACJ@Z

  ??0_StructuredTaskCollection@details@Concurrency@@QAE@PAV_CancellationTokenState@12@@Z

  ??0_TaskCollection@details@Concurrency@@QAE@PAV_CancellationTokenState@12@@Z

  ??0_TaskCollection@details@Concurrency@@QAE@XZ

  ??0_Timer@details@Concurrency@@IAE@I_N@Z

  ??0__non_rtti_object@std@@QAE@ABV01@@Z

  ??0__non_rtti_object@std@@QAE@PBD@Z

  ??0bad_cast@std@@AAE@PBQBD@Z

  ??0bad_cast@std@@QAE@ABV01@@Z

  ??0bad_cast@std@@QAE@PBD@Z

  ??0bad_target@Concurrency@@QAE@PBD@Z

  ??0bad_target@Concurrency@@QAE@XZ

  ??0bad_typeid@std@@QAE@ABV01@@Z

  ??0bad_typeid@std@@QAE@PBD@Z

  ??0context_self_unblock@Concurrency@@QAE@PBD@Z

  ??0context_self_unblock@Concurrency@@QAE@XZ

  ??0context_unblock_unbalanced@Concurrency@@QAE@PBD@Z

  ??0context_unblock_unbalanced@Concurrency@@QAE@XZ

  ??0critical_section@Concurrency@@QAE@XZ

  ??0default_scheduler_exists@Concurrency@@QAE@PBD@Z

  ??0default_scheduler_exists@Concurrency@@QAE@XZ

  ??0event@Concurrency@@QAE@XZ

  ??0exception@std@@QAE@ABQBD@Z

  ??0exception@std@@QAE@ABQBDH@Z

  ??0exception@std@@QAE@ABV01@@Z

  ??0exception@std@@QAE@XZ

  ??0improper_lock@Concurrency@@QAE@PBD@Z

  ??0improper_lock@Concurrency@@QAE@XZ

  ??0improper_scheduler_attach@Concurrency@@QAE@PBD@Z

  ??0improper_scheduler_attach@Concurrency@@QAE@XZ

  ??0improper_scheduler_detach@Concurrency@@QAE@PBD@Z

  ??0improper_scheduler_detach@Concurrency@@QAE@XZ

  ??0improper_scheduler_reference@Concurrency@@QAE@PBD@Z

  ??0improper_scheduler_reference@Concurrency@@QAE@XZ

  ??0invalid_link_target@Concurrency@@QAE@PBD@Z

  ??0invalid_link_target@Concurrency@@QAE@XZ

  ??0invalid_multiple_scheduling@Concurrency@@QAE@PBD@Z

  ??0invalid_multiple_scheduling@Concurrency@@QAE@XZ

  ??0invalid_operation@Concurrency@@QAE@PBD@Z

  ??0invalid_operation@Concurrency@@QAE@XZ

  ??0invalid_oversubscribe_operation@Concurrency@@QAE@PBD@Z

  ??0invalid_oversubscribe_operation@Concurrency@@QAE@XZ

  ??0invalid_scheduler_policy_key@Concurrency@@QAE@PBD@Z

  ??0invalid_scheduler_policy_key@Concurrency@@QAE@XZ

  ??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@PBD@Z

  ??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@XZ

  ??0invalid_scheduler_policy_value@Concurrency@@QAE@PBD@Z

  ??0invalid_scheduler_policy_value@Concurrency@@QAE@XZ

  ??0message_not_found@Concurrency@@QAE@PBD@Z

  ??0message_not_found@Concurrency@@QAE@XZ

  ??0missing_wait@Concurrency@@QAE@PBD@Z

  ??0missing_wait@Concurrency@@QAE@XZ

  ??0nested_scheduler_missing_detach@Concurrency@@QAE@PBD@Z

  ??0nested_scheduler_missing_detach@Concurrency@@QAE@XZ

  ??0operation_timed_out@Concurrency@@QAE@PBD@Z

  ??0operation_timed_out@Concurrency@@QAE@XZ

  ??0reader_writer_lock@Concurrency@@QAE@XZ

  ??0scheduler_not_attached@Concurrency@@QAE@PBD@Z

  ??0scheduler_not_attached@Concurrency@@QAE@XZ

  ??0scheduler_resource_allocation_error@Concurrency@@QAE@J@Z

  ??0scheduler_resource_allocation_error@Concurrency@@QAE@PBDJ@Z

  ??0scheduler_worker_creation_error@Concurrency@@QAE@J@Z

  ??0scheduler_worker_creation_error@Concurrency@@QAE@PBDJ@Z

  ??0scoped_lock@critical_section@Concurrency@@QAE@AAV12@@Z

  ??0scoped_lock@reader_writer_lock@Concurrency@@QAE@AAV12@@Z

  ??0scoped_lock_read@reader_writer_lock@Concurrency@@QAE@AAV12@@Z

  ??0task_canceled@Concurrency@@QAE@PBD@Z

  ??0task_canceled@Concurrency@@QAE@XZ

  ??0unsupported_os@Concurrency@@QAE@PBD@Z

  ??0unsupported_os@Concurrency@@QAE@XZ

  ??1SchedulerPolicy@Concurrency@@QAE@XZ

  ??1_Cancellation_beacon@details@Concurrency@@QAE@XZ

  ??1_Condition_variable@details@Concurrency@@QAE@XZ

  ??1_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ

  ??1_ReentrantBlockingLock@details@Concurrency@@QAE@XZ

  ??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@XZ

  ??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@XZ

  ??1_SpinLock@details@Concurrency@@QAE@XZ

  ??1_StructuredTaskCollection@details@Concurrency@@QAE@XZ

  ??1_TaskCollection@details@Concurrency@@QAE@XZ

  ??1_Timer@details@Concurrency@@MAE@XZ

  ??1__non_rtti_object@std@@UAE@XZ

  ??1bad_cast@std@@UAE@XZ

  ??1bad_typeid@std@@UAE@XZ

  ??1critical_section@Concurrency@@QAE@XZ

  ??1event@Concurrency@@QAE@XZ

  ??1exception@std@@UAE@XZ

  ??1reader_writer_lock@Concurrency@@QAE@XZ

  ??1scoped_lock@critical_section@Concurrency@@QAE@XZ

  ??1scoped_lock@reader_writer_lock@Concurrency@@QAE@XZ

  ??1scoped_lock_read@reader_writer_lock@Concurrency@@QAE@XZ

  ??1type_info@@UAE@XZ

  ??2@YAPAXI@Z

  ??2@YAPAXIHPBDH@Z

  ??3@YAXPAX@Z

  ??3@YAXPAXHPBDH@Z

  ??4?$_SpinWait@$00@details@Concurrency@@QAEAAV012@ABV012@@Z

  ??4?$_SpinWait@$0A@@details@Concurrency@@QAEAAV012@ABV012@@Z

  ??4SchedulerPolicy@Concurrency@@QAEAAV01@ABV01@@Z

  ??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z

  ??4bad_cast@std@@QAEAAV01@ABV01@@Z

  ??4bad_typeid@std@@QAEAAV01@ABV01@@Z

  ??4exception@std@@QAEAAV01@ABV01@@Z

  ??8type_info@@QBE_NABV0@@Z

  ??9type_info@@QBE_NABV0@@Z

  ??_7__non_rtti_object@std@@6B@

  ??_7bad_cast@std@@6B@

  ??_7bad_typeid@std@@6B@

  ??_7exception@std@@6B@

  ??_F?$_SpinWait@$00@details@Concurrency@@QAEXXZ

  ??_F?$_SpinWait@$0A@@details@Concurrency@@QAEXXZ

  ??_F_Context@details@Concurrency@@QAEXXZ

  ??_F_Scheduler@details@Concurrency@@QAEXXZ

  ??_Fbad_cast@std@@QAEXXZ

  ??_Fbad_typeid@std@@QAEXXZ

  ??_U@YAPAXI@Z

  ??_U@YAPAXIHPBDH@Z

  ??_V@YAXPAX@Z

  ??_V@YAXPAXHPBDH@Z

  ?Alloc@Concurrency@@YAPAXI@Z

  ?Block@Context@Concurrency@@SAXXZ

  ?CaptureCallstack@platform@details@Concurrency@@YAIPAPAXII@Z

  ?Create@CurrentScheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z

  ?Create@Scheduler@Concurrency@@SAPAV12@ABVSchedulerPolicy@2@@Z

  ?CreateResourceManager@Concurrency@@YAPAUIResourceManager@1@XZ

  ?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPAVScheduleGroup@2@AAVlocation@2@@Z

  ?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPAVScheduleGroup@2@XZ

  ?CurrentContext@Context@Concurrency@@SAPAV12@XZ

  ?Detach@CurrentScheduler@Concurrency@@SAXXZ

  ?DisableTracing@Concurrency@@YAJXZ

  ?EnableTracing@Concurrency@@YAJXZ

  ?Free@Concurrency@@YAXPAX@Z

  ?Get@CurrentScheduler@Concurrency@@SAPAVScheduler@2@XZ

  ?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

  ?GetExecutionContextId@Concurrency@@YAIXZ

  ?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ

  ?GetOSVersion@Concurrency@@YA?AW4OSVersion@IResourceManager@1@XZ

  ?GetPolicy@CurrentScheduler@Concurrency@@SA?AVSchedulerPolicy@2@XZ

  ?GetPolicyValue@SchedulerPolicy@Concurrency@@QBEIW4PolicyElementKey@2@@Z

  ?GetProcessorCount@Concurrency@@YAIXZ

  ?GetProcessorNodeCount@Concurrency@@YAIXZ

  ?GetSchedulerId@Concurrency@@YAIXZ

  ?GetSharedTimerQueue@details@Concurrency@@YAPAXXZ

  ?Id@Context@Concurrency@@SAIXZ

  ?Id@CurrentScheduler@Concurrency@@SAIXZ

  ?IsAvailableLocation@CurrentScheduler@Concurrency@@SA_NABVlocation@2@@Z

  ?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ

  ?Log2@details@Concurrency@@YAKI@Z

  ?Oversubscribe@Context@Concurrency@@SAX_N@Z

  ?RegisterShutdownEvent@CurrentScheduler@Concurrency@@SAXPAX@Z

  ?ResetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXXZ

  ?ScheduleGroupId@Context@Concurrency@@SAIXZ

  ?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0@Z

  ?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0AAVlocation@2@@Z

  ?SetConcurrencyLimits@SchedulerPolicy@Concurrency@@QAEXII@Z

  ?SetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z

  ?SetPolicyValue@SchedulerPolicy@Concurrency@@QAEIW4PolicyElementKey@2@I@Z

  ?VirtualProcessorId@Context@Concurrency@@SAIXZ

  ?Yield@Context@Concurrency@@SAXXZ

  ?_Abort@_StructuredTaskCollection@details@Concurrency@@AAEXXZ

  ?_Acquire@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ

  ?_Acquire@_NonReentrantPPLLock@details@Concurrency@@QAEXPAX@Z

  ?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ

  ?_Acquire@_ReentrantLock@details@Concurrency@@QAEXXZ

  ?_Acquire@_ReentrantPPLLock@details@Concurrency@@QAEXPAX@Z

  ?_AcquireRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ

  ?_AcquireWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ

  ?_Cancel@_StructuredTaskCollection@details@Concurrency@@QAEXXZ

  ?_Cancel@_TaskCollection@details@Concurrency@@QAEXXZ

  ?_CheckTaskCollection@_UnrealizedChore@details@Concurrency@@IAEXXZ

  ?_CleanupToken@_StructuredTaskCollection@details@Concurrency@@AAEXXZ

  ?_ConcRT_CoreAssert@details@Concurrency@@YAXPBD0H@Z

  ?_ConcRT_Trace@details@Concurrency@@YAXHPB_WZZ

  ?_Confirm_cancel@_Cancellation_beacon@details@Concurrency@@QAE_NXZ

  ?_Copy_str@exception@std@@AAEXPBD@Z

  ?_CurrentContext@_Context@details@Concurrency@@SA?AV123@XZ

  ?_Current_node@location@Concurrency@@SA?AV12@XZ

  ?_Destroy@_AsyncTaskCollection@details@Concurrency@@EAEXXZ

  ?_DoYield@?$_SpinWait@$00@details@Concurrency@@IAEXXZ

  ?_DoYield@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ

  ?_Get@_CurrentScheduler@details@Concurrency@@SA?AV_Scheduler@23@XZ

  ?_GetConcRTTraceInfo@Concurrency@@YAPBU_CONCRT_TRACE_INFO@details@1@XZ

  ?_GetConcurrency@details@Concurrency@@YAIXZ

  ?_GetCurrentInlineDepth@_StackGuard@details@Concurrency@@CAAAIXZ

  ?_GetNumberOfVirtualProcessors@_CurrentScheduler@details@Concurrency@@SAIXZ

  ?_GetScheduler@_Scheduler@details@Concurrency@@QAEPAVScheduler@3@XZ

  ?_Id@_CurrentScheduler@details@Concurrency@@SAIXZ

  ?_IsCanceling@_StructuredTaskCollection@details@Concurrency@@QAE_NXZ

  ?_IsCanceling@_TaskCollection@details@Concurrency@@QAE_NXZ

  ?_IsSynchronouslyBlocked@_Context@details@Concurrency@@QBE_NXZ

  ?_Name_base@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z

  ?_Name_base_internal@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z

  ?_NewCollection@_AsyncTaskCollection@details@Concurrency@@SAPAV123@PAV_CancellationTokenState@23@@Z

  ?_NumberOfSpins@?$_SpinWait@$00@details@Concurrency@@IAEKXZ

  ?_NumberOfSpins@?$_SpinWait@$0A@@details@Concurrency@@IAEKXZ

  ?_Oversubscribe@_Context@details@Concurrency@@SAX_N@Z

  ?_Reference@_Scheduler@details@Concurrency@@QAEIXZ

  ?_Release@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ

  ?_Release@_NonReentrantPPLLock@details@Concurrency@@QAEXXZ

  ?_Release@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ

  ?_Release@_ReentrantLock@details@Concurrency@@QAEXXZ

  ?_Release@_ReentrantPPLLock@details@Concurrency@@QAEXXZ

  ?_Release@_Scheduler@details@Concurrency@@QAEIXZ

  ?_ReleaseRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ

  ?_ReleaseWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ

  ?_ReportUnobservedException@details@Concurrency@@YAXXZ

  ?_Reset@?$_SpinWait@$00@details@Concurrency@@IAEXXZ

  ?_Reset@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ

  ?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z

  ?_RunAndWait@_TaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z

  ?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z

  ?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@PAVlocation@3@@Z

  ?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z

  ?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@PAVlocation@3@@Z

  ?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPAX@Z0@Z

  ?_SetSpinCount@?$_SpinWait@$00@details@Concurrency@@QAEXI@Z

  ?_SetSpinCount@?$_SpinWait@$0A@@details@Concurrency@@QAEXI@Z

  ?_SetUnobservedExceptionHandler@details@Concurrency@@YAXP6AXXZ@Z

  ?_ShouldSpinAgain@?$_SpinWait@$00@details@Concurrency@@IAE_NXZ

  ?_ShouldSpinAgain@?$_SpinWait@$0A@@details@Concurrency@@IAE_NXZ

  ?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAE_NXZ

  ?_SpinOnce@?$_SpinWait@$0A@@details@Concurrency@@QAE_NXZ

  ?_SpinYield@Context@Concurrency@@SAXXZ

  ?_Start@_Timer@details@Concurrency@@IAEXXZ

  ?_Stop@_Timer@details@Concurrency@@IAEXXZ

  ?_Tidy@exception@std@@AAEXXZ

  ?_Trace_agents@Concurrency@@YAXW4Agents_EventType@1@_JZZ

  ?_Trace_ppl_function@Concurrency@@YAXABU_GUID@@EW4ConcRT_EventType@1@@Z

  ?_TryAcquire@_NonReentrantBlockingLock@details@Concurrency@@QAE_NXZ

  ?_TryAcquire@_ReentrantBlockingLock@details@Concurrency@@QAE_NXZ

  ?_TryAcquire@_ReentrantLock@details@Concurrency@@QAE_NXZ

  ?_TryAcquireWrite@_ReaderWriterLock@details@Concurrency@@QAE_NXZ

  ?_Type_info_dtor@type_info@@CAXPAV1@@Z

  ?_Type_info_dtor_internal@type_info@@CAXPAV1@@Z

  ?_UnderlyingYield@details@Concurrency@@YAXXZ

  ?_ValidateExecute@@YAHP6GHXZ@Z

  ?_ValidateRead@@YAHPBXI@Z

  ?_ValidateWrite@@YAHPAXI@Z

  ?_Value@_SpinCount@details@Concurrency@@SAIXZ

  ?_Yield@_Context@details@Concurrency@@SAXXZ

  ?__ExceptionPtrAssign@@YAXPAXPBX@Z

  ?__ExceptionPtrCompare@@YA_NPBX0@Z

  ?__ExceptionPtrCopy@@YAXPAXPBX@Z

  ?__ExceptionPtrCopyException@@YAXPAXPBX1@Z

  ?__ExceptionPtrCreate@@YAXPAX@Z

  ?__ExceptionPtrCurrentException@@YAXPAX@Z

  ?__ExceptionPtrDestroy@@YAXPAX@Z

  ?__ExceptionPtrRethrow@@YAXPBX@Z

  ?__ExceptionPtrSwap@@YAXPAX0@Z

  ?__ExceptionPtrToBool@@YA_NPBX@Z

  ?_inconsistency@@YAXXZ

  ?_invalid_parameter@@YAXPBG00II@Z

  ?_is_exception_typeof@@YAHABVtype_info@@PAU_EXCEPTION_POINTERS@@@Z

  ?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z

  ?_open@@YAHPBDHH@Z

  ?_query_new_handler@@YAP6AHI@ZXZ

  ?_query_new_mode@@YAHXZ

  ?_set_new_handler@@YAP6AHI@ZH@Z

  ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z

  ?_set_new_mode@@YAHH@Z

  ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZH@Z

  ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z

  ?_sopen@@YAHPBDHHH@Z

  ?_type_info_dtor_internal_method@type_info@@QAEXXZ

  ?_wopen@@YAHPB_WHH@Z

  ?_wsopen@@YAHPB_WHHH@Z

  ?before@type_info@@QBE_NABV1@@Z

  ?current@location@Concurrency@@SA?AV12@XZ

  ?from_numa_node@location@Concurrency@@SA?AV12@G@Z

  ?get_error_code@scheduler_resource_allocation_error@Concurrency@@QBEJXZ

  ?lock@critical_section@Concurrency@@QAEXXZ

  ?lock@reader_writer_lock@Concurrency@@QAEXXZ

  ?lock_read@reader_writer_lock@Concurrency@@QAEXXZ

  ?name@type_info@@QBEPBDPAU__type_info_node@@@Z

  ?native_handle@critical_section@Concurrency@@QAEAAV12@XZ

  ?notify_all@_Condition_variable@details@Concurrency@@QAEXXZ

  ?notify_one@_Condition_variable@details@Concurrency@@QAEXXZ

  ?raw_name@type_info@@QBEPBDXZ

  ?reset@event@Concurrency@@QAEXXZ

  ?set@event@Concurrency@@QAEXXZ

  ?set_new_handler@@YAP6AXXZP6AXXZ@Z

  ?set_task_execution_resources@Concurrency@@YAXGPAU_GROUP_AFFINITY@@@Z

  ?set_task_execution_resources@Concurrency@@YAXK@Z

  ?set_terminate@@YAP6AXXZH@Z

  ?set_terminate@@YAP6AXXZP6AXXZ@Z

  ?set_unexpected@@YAP6AXXZH@Z

  ?set_unexpected@@YAP6AXXZP6AXXZ@Z

  ?swprintf@@YAHPAGIPBGZZ

  ?swprintf@@YAHPA_WIPB_WZZ

  ?terminate@@YAXXZ

  ?try_lock@critical_section@Concurrency@@QAE_NXZ

  ?try_lock@reader_writer_lock@Concurrency@@QAE_NXZ

  ?try_lock_for@critical_section@Concurrency@@QAE_NI@Z

  ?try_lock_read@reader_writer_lock@Concurrency@@QAE_NXZ

  ?unexpected@@YAXXZ

  ?unlock@critical_section@Concurrency@@QAEXXZ

  ?unlock@reader_writer_lock@Concurrency@@QAEXXZ

  ?vswprintf@@YAHPA_WIPB_WPAD@Z

  ?wait@Concurrency@@YAXI@Z

  ?wait@_Condition_variable@details@Concurrency@@QAEXAAVcritical_section@3@@Z

  ?wait@event@Concurrency@@QAEII@Z

  ?wait_for@_Condition_variable@details@Concurrency@@QAE_NAAVcritical_section@3@I@Z

  ?wait_for_multiple@event@Concurrency@@SAIPAPAV12@I_NI@Z

  ?what@exception@std@@UBEPBDXZ

  _CIacos

  _CIasin

  _CIatan

  _CIatan2

  _CIcos

  _CIcosh

  _CIexp

  _CIfmod

  _CIlog

  _CIlog10

  _CIpow

  _CIsin

  _CIsinh

  _CIsqrt

  _CItan

  _CItanh

  _CRT_RTC_INIT

  _CRT_RTC_INITW

  _Cbuild

  _CreateFrameInfo

  _CxxThrowException

  _EH_prolog

  _FCbuild

  _FindAndUnlinkFrame

  _Getdays

  _Getmonths

  _Gettnames

  _HUGE

  _IsExceptionObjectToBeDestroyed

  _LCbuild

  _NLG_Dispatch2

  _NLG_Return

  _NLG_Return2

  _SetWinRTOutOfMemoryExceptionCallback

  _Strftime

  _W_Getdays

  _W_Getmonths

  _W_Gettnames

  _Wcsftime

  _XcptFilter

  __AdjustPointer

  __BuildCatchObject

  __BuildCatchObjectHelper

  __CppXcptFilter

  __CxxDetectRethrow

  __CxxExceptionFilter

  __CxxFrameHandler

  __CxxFrameHandler2

  __CxxFrameHandler3

  __CxxLongjmpUnwind

  __CxxQueryExceptionSize

  __CxxRegisterExceptionObject

  __CxxUnregisterExceptionObject

  __DestructExceptionObject

  __FrameUnwindFilter

  __GetPlatformExceptionInfo

  __RTCastToVoid

  __RTDynamicCast

  __RTtypeid

  __STRINGTOLD

  __STRINGTOLD_L

  __TypeMatch

  ___lc_codepage_func

  ___lc_collate_cp_func

  ___lc_locale_name_func

  ___mb_cur_max_func

  ___mb_cur_max_l_func

  ___setlc_active_func

  ___unguarded_readlc_active_add_func

  __argc

  __argv

  __badioinfo

  __clean_type_info_names_internal

  __control87_2

  __create_locale

  __crtCompareStringA

  __crtCompareStringEx

  __crtCompareStringW

  __crtCreateEventExW

  __crtCreateSemaphoreExW

  __crtCreateSymbolicLinkW

  __crtEnumSystemLocalesEx

  __crtFlsAlloc

  __crtFlsFree

  __crtFlsGetValue

  __crtFlsSetValue

  __crtGetDateFormatEx

  __crtGetFileInformationByHandleEx

  __crtGetLocaleInfoEx

  __crtGetShowWindowMode

  __crtGetTickCount64

  __crtGetTimeFormatEx

  __crtGetUserDefaultLocaleName

  __crtInitializeCriticalSectionEx

  __crtIsPackagedApp

  __crtIsValidLocaleName

  __crtLCMapStringA

  __crtLCMapStringEx

  __crtLCMapStringW

  __crtSetFileInformationByHandle

  __crtSetThreadStackGuarantee

  __crtSetUnhandledExceptionFilter

  __crtSleep

  __crtTerminateProcess

  __crtUnhandledException

  __daylight

  __dllonexit

  __doserrno

  __dstbias

  __fpecode

  __free_locale

  __get_current_locale

  __get_flsindex

  __get_tlsindex

  __getmainargs

  __initenv

  __iob_func

  __isascii

  __iscsym

  __iscsymf

  __iswcsym

  __iswcsymf

  __lconv

  __lconv_init

  __libm_sse2_acos

  __libm_sse2_acosf

  __libm_sse2_asin

  __libm_sse2_asinf

  __libm_sse2_atan

  __libm_sse2_atan2

  __libm_sse2_atanf

  __libm_sse2_cos

  __libm_sse2_cosf

  __libm_sse2_exp

  __libm_sse2_expf

  __libm_sse2_log

  __libm_sse2_log10

  __libm_sse2_log10f

  __libm_sse2_logf

  __libm_sse2_pow

  __libm_sse2_powf

  __libm_sse2_sin

  __libm_sse2_sinf

  __libm_sse2_tan

  __libm_sse2_tanf

  __mb_cur_max

  __p___argc

  __p___argv

  __p___initenv

  __p___mb_cur_max

  __p___wargv

  __p___winitenv

  __p__acmdln

  __p__commode

  __p__daylight

  __p__dstbias

  __p__environ

  __p__fmode

  __p__iob

  __p__mbcasemap

  __p__mbctype

  __p__pctype

  __p__pgmptr

  __p__pwctype

  __p__timezone

  __p__tzname

  __p__wcmdln

  __p__wenviron

  __p__wpgmptr

  __pctype_func

  __pioinfo

  __pwctype_func

  __pxcptinfoptrs

  __report_gsfailure

  __set_app_type

  __setlc_active

  Sections

  .text

  Size: 880KB - Virtual size: 880KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 21KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1000B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 23KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ