Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
Zoom.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Zoom.exe
Resource
win10v2004-20220901-en
Target
Zoom.exe
Size
261KB
MD5
731a5862ef8b740c68164edb144eab2d
SHA1
3cca551044e73f9864a6814a4aa217786f5c6bc0
SHA256
f3a1420453b39b9f672323890cef4bdd6410a4c8a28d1bdc453a1c464a27a8c2
SHA512
6a6feff89f821c023142bcc54cb2b6e76865a50e2228ef808d9a533ef3dff78369ce4a7ecccf3b11dfb0cb88a8ff04bfe0d6f4265d87a7ac417ccec795ad3c56
SSDEEP
3072:t0w4WJogOGuIbS+7OxqCOfn+zKsmlp3vKpRBy:t0fWJog9uQ/+uvCpRBy
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
SERIALNUMBER=4969967,CN=Zoom Video Communications\, Inc.,O=Zoom Video Communications\, Inc.,L=San Jose,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=4969967,CN=Zoom Video Communications\, Inc.,O=Zoom Video Communications\, Inc.,L=San Jose,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HackCheck
GetModuleInformation
GetModuleFileNameExW
EnumProcessModules
ord7
ord9
?Now@Time@Cmm@@SA?AV12@XZ
?GetZoomAccountManager@Cmm@@YAPAVIZoomAccountManager@zoom_data@@XZ
?GetZoomClientData@Cmm@@YAPAVIZoomClientData@zoom_data@@XZ
?GetZoomAppPropData@Cmm@@YAPAVIZoomAppPropData@zoom_data@@XZ
CmmMQ_GetService
?CreateAppContext@Cmm@@YAPAVISSBAppContext@1@ABV?$CStringT@_W@1@HH@Z
?NotifyClientDataTermed@Cmm@@YAXXZ
?IsPTProcess@Cmm@@YAHXZ
?GetSwitchValueASCII@CommandLine@Cmm@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?ForCurrentProcess@CommandLine@Cmm@@SAPAV12@XZ
?DestroyDefaultMessageLoop@ZoomWorkerFactory@Cmm@@SAXXZ
?GetSpecialDirectory@CFileName@Cmm@@QAEXW4SpecialFolder@12@H@Z
?SetProcessType@Cmm@@YAXW4PROCESS_TYPE@@@Z
?DestroyAppContext@Cmm@@YAXPAVISSBAppContext@1@@Z
?Empty@?$CStringT@D@Cmm@@QAEXXZ
?empty@?$CStringT@D@Cmm@@QBE_NXZ
??0?$CStringT@D@Cmm@@QAE@XZ
??0?$CStringT@D@Cmm@@QAE@PB_W@Z
??0?$CStringT@D@Cmm@@QAE@ABV?$CStringT@_W@1@@Z
??1?$CStringT@D@Cmm@@UAE@XZ
??4?$CStringT@D@Cmm@@QAEAAV01@PBD@Z
??4?$CStringT@D@Cmm@@QAEAAV01@ABV01@@Z
?c_str@?$CStringT@D@Cmm@@QBEPBDXZ
?empty@?$CStringT@_W@Cmm@@QBE_NXZ
??0?$CStringT@_W@Cmm@@QAE@XZ
??0?$CStringT@_W@Cmm@@QAE@PB_W@Z
??0?$CStringT@_W@Cmm@@QAE@PBD@Z
??1?$CStringT@_W@Cmm@@UAE@XZ
??4?$CStringT@_W@Cmm@@QAEAAV01@PB_W@Z
??4?$CStringT@_W@Cmm@@QAEAAV01@ABV01@@Z
??Y?$CStringT@_W@Cmm@@QAEAAV01@PB_W@Z
??Y?$CStringT@_W@Cmm@@QAEAAV01@ABV01@@Z
?c_str@?$CStringT@_W@Cmm@@QBEPB_WXZ
?GetBuffer@?$CStringT@_W@Cmm@@QAEPA_WI@Z
?IsEmpty@?$CStringT@_W@Cmm@@QBEHXZ
?SetLength@?$CStringT@_W@Cmm@@QAEXI@Z
??1CFileName@Cmm@@UAE@XZ
?GetModuleFileNameW@CFileName@Cmm@@QAEXPAUHINSTANCE__@@@Z
?GetName@CFileName@Cmm@@QBEPB_WXZ
??0CFileName@Cmm@@QAE@XZ
??B?$CStringT@_W@Cmm@@QBEPB_WXZ
??Y?$CStringT@_W@Cmm@@QAEAAV01@PBD@Z
??8?$CStringT@_W@Cmm@@QBE_NABV01@@Z
?GetModuleLoader@Cmm@@YAPAVICmmModuleLoader@1@XZ
?GetModuleRegistry@Cmm@@YAPAVICmmModuleRegistry@1@XZ
??1CCmmArchiveObjHelper@Cmm@@QAE@XZ
??0CCmmArchiveObjHelper@Cmm@@QAE@PBD@Z
?FreeMsg@CCmmMessageHelper@Cmm@@YAXPAVCmmMQ_Msg@2@@Z
?FlatternToMsg@CCmmMessageHelper@Cmm@@YAPAVCmmMQ_Msg@2@PAVCCmmArchiveObjHelper@2@H@Z
??1CSBMBMessage_NotifyNetworkStateChanged@@UAE@XZ
?Set_Flag@CSBMBMessage_NotifyNetworkStateChanged@@QAEXABI@Z
?Set_State@CSBMBMessage_NotifyNetworkStateChanged@@QAEXABI@Z
??0CSBMBMessage_NotifyNetworkStateChanged@@QAE@XZ
??1CSBMBMessage_NotifyAppInActive@@UAE@XZ
?Set_Reason@CSBMBMessage_NotifyAppInActive@@QAEXABV?$CStringT@D@Cmm@@@Z
??0CSBMBMessage_NotifyAppInActive@@QAE@XZ
??1CSBMBMessage_NotifyAppActive@@UAE@XZ
?Set_Reason@CSBMBMessage_NotifyAppActive@@QAEXABV?$CStringT@D@Cmm@@@Z
??0CSBMBMessage_NotifyAppActive@@QAE@XZ
?cmm_str_convert@@YAIHPADIPB_WI@Z
?SetMinLogLevel@logging@@YAXH@Z
?BaseInitLoggingImpl_built_with_NDEBUG@logging@@YA_NPB_WW4LoggingDestination@1@W4LogLockingState@1@W4OldFileDeletionState@1@W4LogEncryptPolicy@1@@Z
??_7CFileName@Cmm@@6B@
??_7?$CStringT@_W@Cmm@@6B@
cmm_fs_rmdirs
?ToTimeT@Time@Cmm@@QBE_JXZ
?IsExists@CFileName@Cmm@@QBEHXZ
?Assign@?$CStringT@_W@Cmm@@QAEXPB_WI@Z
?SetLength@?$CStringT@D@Cmm@@QAEXI@Z
?size@?$CStringT@D@Cmm@@QBEIXZ
??0?$CStringT@D@Cmm@@QAE@PBD@Z
??Y?$CStringT@D@Cmm@@QAEAAV01@PBD@Z
?GetBuffer@?$CStringT@D@Cmm@@QAEPADI@Z
?begin@?$CStringT@_W@Cmm@@QAE?AV?$_String_iterator@V?$_String_val@U?$_Simple_types@_W@std@@@std@@@std@@XZ
?erase@?$CStringT@_W@Cmm@@QAE?AV?$_String_iterator@V?$_String_val@U?$_Simple_types@_W@std@@@std@@@std@@V34@@Z
?find@?$CStringT@_W@Cmm@@QBEIPB_WI@Z
?find@?$CStringT@_W@Cmm@@QBEI_WI@Z
?find_last_of@?$CStringT@_W@Cmm@@QBEI_WI@Z
?length@?$CStringT@_W@Cmm@@QBEIXZ
??0?$CStringT@_W@Cmm@@QAE@ABV01@@Z
??0?$CStringT@_W@Cmm@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??4?$CStringT@_W@Cmm@@QAEAAV01@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?Format@?$CStringT@_W@Cmm@@QAAXPB_WZZ
?Compare@?$CStringT@_W@Cmm@@QBEHPB_W@Z
?GetAt@?$CStringT@_W@Cmm@@QBE_WH@Z
?Left@?$CStringT@_W@Cmm@@QBE?AV?$CRangeT@PB_W@2@I@Z
?Right@?$CStringT@_W@Cmm@@QBE?AV?$CRangeT@PB_W@2@I@Z
?Trim@?$CStringT@_W@Cmm@@QAEXXZ
?MakeLower@?$CStringT@_W@Cmm@@QAEXXZ
?GetSecond@CTime@Cmm@@QBEHXZ
?GetMinute@CTime@Cmm@@QBEHXZ
?GetHour@CTime@Cmm@@QBEHXZ
?GetDay@CTime@Cmm@@QBEHXZ
?GetMonth@CTime@Cmm@@QBEHXZ
?GetYear@CTime@Cmm@@QBEHXZ
?GetTickCount@CTime@Cmm@@SA?AV12@XZ
??_7CmmLogGC@Cmm@@6B@
?ResetAppData@CmmLogGC@Cmm@@UAEHH@Z
?Init@CommandLine@Cmm@@SAXHPBQBD@Z
??0?$CStringT@_W@Cmm@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??8?$CStringT@_W@Cmm@@QBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
CmmMQ_TermService
CmmMQ_InitService
?GetCurrentVersion@Cmm@@YAXAAV?$CStringT@D@1@@Z
?ClearAllPackageDefines@CCmmArchiveService@Cmm@@SAXXZ
?base64FreeDecodeBuffer@Cmm@@YAXAAPAE@Z
?IsNewerVersion@Cmm@@YAHABV?$CStringT@D@1@0@Z
?base64Decode@Cmm@@YAPAEABV?$CStringT@_W@1@AAI@Z
?assign@?$CStringT@_W@Cmm@@QAEAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_W@Z
?size@?$CStringT@_W@Cmm@@QBEIXZ
??H?$CStringT@_W@Cmm@@QBE?AV01@PB_W@Z
??Y?$CStringT@_W@Cmm@@QAEAAV01@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??9?$CStringT@_W@Cmm@@QBE_NPB_W@Z
??9?$CStringT@_W@Cmm@@QBE_NABV01@@Z
??1PolicyContext_s@zpref@@QAE@XZ
??1CSBMBMessage_NotifyAppEvent@@UAE@XZ
?Set_Param@CSBMBMessage_NotifyAppEvent@@QAEXABV?$CStringT@_W@Cmm@@@Z
?Set_EventID@CSBMBMessage_NotifyAppEvent@@QAEXABI@Z
??0CSBMBMessage_NotifyAppEvent@@QAE@XZ
??1CSBMBMessage_NotifyBeforeTerm@@UAE@XZ
?Set_AppName@CSBMBMessage_NotifyBeforeTerm@@QAEXABV?$CStringT@D@Cmm@@@Z
??0CSBMBMessage_NotifyBeforeTerm@@QAE@XZ
??1CSBMBMessage_NotifyAfterInit@@UAE@XZ
?Set_AppName@CSBMBMessage_NotifyAfterInit@@QAEXABV?$CStringT@D@Cmm@@@Z
??0CSBMBMessage_NotifyAfterInit@@QAE@XZ
??1CSBMBMessage_TermThread@@UAE@XZ
?Set_AppName@CSBMBMessage_TermThread@@QAEXABV?$CStringT@D@Cmm@@@Z
??0CSBMBMessage_TermThread@@QAE@XZ
??1CSBMBMessage_InitThread@@UAE@XZ
?Set_AppName@CSBMBMessage_InitThread@@QAEXABV?$CStringT@D@Cmm@@@Z
??0CSBMBMessage_InitThread@@QAE@XZ
??0PolicyContext_s@zpref@@QAE@XZ
?GetModuleFilePath@CFileName@Cmm@@QAEXPAUHINSTANCE__@@@Z
?CreatePolicyProvider@zpref@@YAPAVIPolicyProvider@1@ABUPolicyContext_s@1@@Z
?DestoryPolicyProvider@zpref@@YAXXZ
?cmm_str_convert@@YAIHPA_WIPBDI@Z
?GetAppContext@Cmm@@YAPAVISSBAppContext@1@XZ
?UnInitHdpi@CHighDpi@DuiLib@@SAXXZ
?InitHdpi@CHighDpi@DuiLib@@SAHXZ
?SetSupportHighContrast@CHighContrast@DuiLib@@QAEX_N@Z
?SetAwarenessMode@CHighDpi@DuiLib@@SA_NW4DPIAwareMode@CDpiAwarenessMode@2@@Z
?Instance@CHighContrast@DuiLib@@SAPAV12@XZ
?ReleaseAllPictures@CZPPictureMgr@UIBase@@QAEXXZ
?_ZPUIImgMgr@UIBase@@3VCZPPictureMgr@1@A
ZAccInitModule
ZAccTermModule
mlog_unreg
?update_log_destination@mem_log_file@ssb@@QAEHI@Z
?destroy@mem_log_file@ssb@@SAXXZ
?instance@mem_log_file@ssb@@SAPAV12@I@Z
mlog_reg
??1thread_mutex_recursive@ssb@@QAE@XZ
util_uninit
util_init
enable_logger
destroy_mlog_mgr
??0thread_mutex_recursive@ssb@@QAE@XZ
RAND_bytes
ResetEvent
WaitForSingleObjectEx
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
MoveFileW
HeapFree
CreateFileW
GetFileAttributesW
OpenProcess
GetLastError
CloseHandle
HeapAlloc
GetProcAddress
VerSetConditionMask
GetProcessHeap
VerifyVersionInfoW
LoadLibraryExW
InitializeCriticalSectionEx
CreateDirectoryW
SetErrorMode
GetPrivateProfileStringW
DeleteFileW
GetTempFileNameW
GetModuleHandleA
VirtualProtect
EnterCriticalSection
GetCurrentProcess
ReleaseSemaphore
WriteFile
TerminateProcess
GetModuleFileNameW
WaitForMultipleObjects
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
ResumeThread
CreateToolhelp32Snapshot
CreateEventW
Process32NextW
CreateFileA
SetEvent
Process32FirstW
CreateThread
GetWindowsDirectoryW
DeleteCriticalSection
GetCurrentProcessId
GetModuleHandleW
CreateSemaphoreW
FlushInstructionCache
CreateDirectoryA
SetDllDirectoryW
VirtualQuery
FlushFileBuffers
CreateProcessW
FindFirstFileW
SetLastError
FindNextFileW
ExpandEnvironmentStringsW
DeviceIoControl
FindClose
OutputDebugStringW
GetTempPathW
MoveFileExW
FreeLibrary
PostMessageW
GetClassInfoW
ShowWindow
IsWindow
SendMessageW
UnregisterClassW
GetUserObjectInformationA
RegisterClassW
SetFocus
MessageBoxW
GetProcessWindowStation
UpdateWindow
FindWindowW
CreateWindowExW
DefWindowProcW
DestroyWindow
CheckTokenMembership
FreeSid
OpenProcessToken
AllocateAndInitializeSid
GetTokenInformation
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
GetUserNameW
DuplicateToken
SHFileOperationW
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
ShellExecuteW
SHGetFolderPathA
CoInitialize
CoUninitialize
PathAppendW
PathRemoveFileSpecW
PathAddBackslashW
PathIsRelativeW
PathRemoveBackslashW
WTHelperGetProvCertFromChain
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WinVerifyTrust
CertGetNameStringW
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPBD@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?get_adaptor_mac_addr@net_adaptors_t@ssb@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?release@net_adaptors_t@ssb@@SAXAAPAV12@@Z
?enum_netadaptors@net_adaptors_t@ssb@@SAPAV12@XZ
GdiplusStartup
GdiplusShutdown
memcpy
memmove
_except_handler4_common
memset
__current_exception_context
__current_exception
wcsstr
_purecall
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
__std_terminate
memcmp
_CxxThrowException
wcscpy_s
strnlen
_wcsicmp
towupper
strcat_s
towlower
wcscat_s
_strnicmp
_set_new_mode
_callnewh
free
malloc
_wstat64i32
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_c_exit
_configure_wide_argv
_register_thread_local_exe_atexit_callback
_set_app_type
_seh_filter_exe
terminate
signal
_set_abort_behavior
_cexit
_crt_atexit
_invalid_parameter_noinfo_noreturn
_controlfp_s
_register_onexit_function
_initialize_onexit_table
_itow_s
_putenv
getenv
__setusermatherr
_set_fmode
__p__commode
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ