Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
ffd12748cdcb7ef6c577eff2d278fdde7a47426e8f4579dbac5cb8fd88eb3dca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ffd12748cdcb7ef6c577eff2d278fdde7a47426e8f4579dbac5cb8fd88eb3dca.exe
Resource
win10v2004-20220812-en
Target
ffd12748cdcb7ef6c577eff2d278fdde7a47426e8f4579dbac5cb8fd88eb3dca
Size
2.0MB
MD5
02243b7404b78dcde7017d7ff6ccf945
SHA1
457341f7efd63fe6a1f44944f695d099b171f2bd
SHA256
ffd12748cdcb7ef6c577eff2d278fdde7a47426e8f4579dbac5cb8fd88eb3dca
SHA512
1105da3499b0795c7060a0ecec6346dfa526d03ad0e624cfa4695eb412345095a3b04fbbf563ec0b068b5971a5e929a74fb794adcab88098a9bab46a70ae1552
SSDEEP
24576:tvT2TakiGAIDl0XawXrW1DGgQVI+9hpf6YbzTrd355mvBviXFKdj:MirW1D0S+lhbzTppovBvQFKdj
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?ToComment@TiXmlNode@@UBEPBVTiXmlComment@@XZ
?Attribute@TiXmlElement@@QBEPBDPBD@Z
?FirstChildElement@TiXmlNode@@QAEPAVTiXmlElement@@PBD@Z
?SaveFile@TiXmlDocument@@QBE_NPB_W@Z
?RemoveChild@TiXmlNode@@QAE_NPAV1@@Z
?InsertEndChild@TiXmlNode@@QAEPAV1@ABV1@@Z
?LoadFile@TiXmlDocument@@QAE_NPB_WW4TiXmlEncoding@@@Z
??1TiXmlDocument@@UAE@XZ
?ToElement@TiXmlElement@@UAEPAV1@XZ
?ToDocument@TiXmlNode@@UBEPBVTiXmlDocument@@XZ
?SetAttribute@TiXmlElement@@QAEXPBD0@Z
?ToDocument@TiXmlNode@@UAEPAVTiXmlDocument@@XZ
??0TiXmlElement@@QAE@PBD@Z
?Parse@TiXmlElement@@UAEPBDPBDPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
??0TiXmlDocument@@QAE@XZ
?GetText@TiXmlElement@@QBEPBDXZ
?NextSiblingElement@TiXmlNode@@QAEPAVTiXmlElement@@XZ
?Value@TiXmlNode@@QBEPBDXZ
?Next@TiXmlAttribute@@QAEPAV1@XZ
?Print@TiXmlElement@@UBEXPAU_iobuf@@H@Z
?Accept@TiXmlElement@@UBE_NPAVTiXmlVisitor@@@Z
?Value@TiXmlAttribute@@QBEPBDXZ
?Name@TiXmlAttribute@@QBEPBDXZ
?FirstAttribute@TiXmlElement@@QAEPAVTiXmlAttribute@@XZ
?FirstChildElement@TiXmlNode@@QAEPAVTiXmlElement@@XZ
?Clone@TiXmlElement@@UBEPAVTiXmlNode@@XZ
?ToDeclaration@TiXmlNode@@UBEPBVTiXmlDeclaration@@XZ
?ToDeclaration@TiXmlNode@@UAEPAVTiXmlDeclaration@@XZ
?ToText@TiXmlNode@@UBEPBVTiXmlText@@XZ
?ToText@TiXmlNode@@UAEPAVTiXmlText@@XZ
?ToUnknown@TiXmlNode@@UBEPBVTiXmlUnknown@@XZ
?ToUnknown@TiXmlNode@@UAEPAVTiXmlUnknown@@XZ
??1TiXmlElement@@UAE@XZ
?NextSiblingElement@TiXmlNode@@QAEPAVTiXmlElement@@PBD@Z
?LinkEndChild@TiXmlNode@@QAEPAV1@PAV1@@Z
?ToComment@TiXmlNode@@UAEPAVTiXmlComment@@XZ
?ToElement@TiXmlElement@@UBEPBV1@XZ
?ReplaceChild@TiXmlNode@@QAEPAV1@PAV1@ABV1@@Z
?RootElement@TiXmlDocument@@QAEPAVTiXmlElement@@XZ
?Destroy@CxImage@@QAE_NXZ
?GetHeight@CxImage@@QBEKXZ
?GetType@CxImage@@QBEKXZ
?IsValid@CxImage@@QBE_NXZ
?Decode@CxImage@@QAE_NPAVCxFile@@K@Z
??0CxImage@@QAE@K@Z
?Save@CxImage@@QAE_NPB_WK@Z
?Encode@CxImage@@QAE_NPAVCxFile@@K@Z
?Resample@CxImage@@QAE_NJJHPAV1@@Z
?GetWidth@CxImage@@QBEKXZ
??0CxImage@@QAE@PB_WK@Z
WSAStartup
?ClearDeadQueue@Misc@Util@@YAXXZ
?SetBugReportUin@TXBugReport@@YAXKPB_W@Z
?InitBugReport@TXBugReport@@YAXPB_W000GGKHHKKP6GHPAUtagBugReportInfo@1@PBD200PAPAXPAKPAX@Z@Z
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
?OnUninitCom@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?OnExitCoreCenter@Misc@Util@@YAXXZ
?InitPlatformGFConfig@Boot@Util@@YAHXZ
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?SetEventMask@CTXHttpDownload@@QAEXE@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?GetLocalePath@TXI18N@@YA?AVCTXStringW@@PB_W@Z
?Record@Perf@Util@@YAJPB_WHH00@Z
?TrimLeft@CTXStringW@@QAEAAV1@PB_W@Z
?GetPlatformTpc@CoreCenter@Util@@YAHPAPAUITXDataRead@@@Z
?GetPlatformCore@CoreCenter@Util@@YAHPAPAUITXPlatformCore@@@Z
?SplitQNC@FS@@YAHPB_WAAVCTXStringW@@1@Z
?GetParentDir@File@Util@@YA?AVCTXStringW@@ABV3@@Z
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
?GetResponseFileName@CTXHttpDownload@@QAEHAAVCTXStringW@@@Z
?ValidateBugReport@TXBugReport@@YAXXZ
?GetDays@CTXTimeSpan@@QBE_JXZ
?GetTickCount@CTXTime@@SA?AV1@XZ
??0CTXTime@@QAE@_J@Z
?NotifyIdle@TXTimer@@YAXXZ
?DelIdleCallback@Window@Util@@YAJPAVVTXMsgLoopIdleCallback@@@Z
?AddIdleCallback@Window@Util@@YAJPAVVTXMsgLoopIdleCallback@@@Z
??1CTXStringW@@QAE@XZ
?GetBuffer@CTXStringW@@QAEPA_WXZ
??0CTXStringW@@QAE@PB_W@Z
??0CTXBSTR@@QAE@PB_W@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??BCTXStringW@@QBEPB_WXZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
??1CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?Compare@CTXStringW@@QBEHPB_W@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
?GetString@CTXStringW@@QBEPB_WXZ
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
??ICTXBSTR@@QAEPAPA_WXZ
??0CTXStringW@@QAE@XZ
??0CTXBSTR@@QAE@XZ
?IsEmpty@CTXStringW@@QBE_NXZ
?Empty@CTXStringW@@QAEXXZ
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?Format@CTXStringW@@QAAXPB_WZZ
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
??YCTXStringW@@QAEAAV0@_W@Z
??ACTXStringW@@QBE_WH@Z
?GetLength@CTXStringW@@QBEHXZ
?Left@CTXStringW@@QBE?AV1@H@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
??0CTXStringW@@QAE@PA_W@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?IsEmpty@CTXBSTR@@QAEHXZ
??YCTXStringW@@QAEAAV0@PB_W@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
?Replace@CTXStringW@@QAEHPB_W0@Z
??0CTXStringW@@QAE@ABV0@@Z
??M@YA_NABVCTXStringW@@0@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
??0CTXBSTR@@QAE@ABV0@@Z
??8CTXBSTR@@QBE_NPB_W@Z
?GetTime@CTXTime@@QBE_JXZ
?GetDay@CTXTime@@QBEHXZ
??4CTXTime@@QAEAAV0@_J@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?CombinePath@FS@Util@@YA?AVCTXStringW@@ABV3@0@Z
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
??1CTXStringA@@QAE@XZ
??BCTXStringA@@QBEPBDXZ
?GetLength@CTXStringA@@QBEHXZ
??YCTXStringA@@QAEAAV0@PBD@Z
??0CTXStringA@@QAE@PBDH@Z
?FormatV@CTXStringW@@QAEXPB_WPAD@Z
?Find@CTXStringW@@QBEHPB_WH@Z
??8@YA_NABVCTXStringW@@0@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??0CTXTimeSpan@@QAE@_J@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
ord33
?MoveDownloadFile@CTXHttpDownload@@QAEHPB_WH@Z
?Download@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@0H@Z
??1CTXHttpDownloadSink@@UAE@XZ
?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z
??0CTXHttpDownload@@QAE@XZ
??0CTXHttpDownloadSink@@IAE@XZ
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnError@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@K@Z
?Run@CTXHttpDownload@@EAEIXZ
??1CTXHttpDownload@@UAE@XZ
?CancelDownload@CTXHttpDownload@@QAEXXZ
??8@YA_NPB_WABVCTXBSTR@@@Z
?ReleaseBuffer@CTXStringW@@QAEXH@Z
??0CTXStringW@@QAE@H@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?IsRunning@CTXHttpDownload@@QAEHXZ
??8@YA_NABVCTXStringW@@PB_W@Z
?Copy@CTXBSTR@@QBEPA_WXZ
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
?IsFileSystemFile@FS@@YAHPB_W@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?CombineQNC@FS@@YA?AVCTXStringW@@PB_W0@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
?GetFileSuffix@FS@Util@@YA?AVCTXStringW@@ABV3@@Z
?Empty@CTXBSTR@@QAEXXZ
??MCTXBSTR@@QBE_NABV0@@Z
??1CTXFileDialog@@QAE@XZ
?GetFileFullName@CTXFileDialog@@QBE?AVCTXStringW@@XZ
?DoModal@CTXFileDialog@@QAEHXZ
??0CTXFileDialog@@QAE@HPB_W00K0PAUHWND__@@HPAVVFileDialgCallback@@@Z
??0CTXBSTR@@QAE@H@Z
??8CTXBSTR@@QBE_NPA_W@Z
??8@YA_NPA_WABVCTXBSTR@@@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@PBXI@Z
?GetBuffer@CTXStringA@@QAEPADH@Z
??0CTXStringA@@QAE@UtagEN@@PB_WH@Z
?Format@CTXTime@@QBE?AVCTXStringW@@PB_W@Z
?CreateDirectoryW@FS@@YAHPB_W@Z
?DeleteDirectory@FS@@YAHPB_W@Z
?IsFileExist@FS@@YAHPB_W@Z
?AddFileSystem@FS@@YAJW4FILESYSTEM_TYPE@@PB_W1HHH@Z
?IsFileSystemExist@FS@@YAHPB_W@Z
?Length@CTXBSTR@@QBEIXZ
?LoadXmlByName@FS@Util@@YAHPB_WPAPAUIXMLDOMDocument@@@Z
?Detach@CTXBSTR@@QAEPA_WXZ
?Encode16@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z
?GetFileHash@FS@Util@@YAHPB_WAAVCTXBuffer@@AAK@Z
??9CTXBSTR@@QBE_NPB_W@Z
?ConvertXMLToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z
??9CTXBSTR@@QBE_NPA_W@Z
ord34
?ConvertTXDataToXML@Convert@Util@@YAHPA_WPAUITXDataRead@@0@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?GetFileName@FS@Util@@YA?AVCTXStringW@@ABV3@@Z
ord26
?IsDirectoryExist@FS@@YAHPB_W@Z
?TXAssert@@YAXPB_W0H@Z
?RecordTransEnd@Perf@Util@@YAJ_JPB_WHH11H@Z
?RecordTransBegin@Perf@Util@@YA_JPB_WHH00@Z
??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
??YCTXBSTR@@QAEAAV0@PB_W@Z
??YCTXBSTR@@QAEAAV0@ABV0@@Z
?RemoveFileSystem@FS@@YAHPB_W@Z
?AddPlugin@CoreCenter@Util@@YAHPA_WPAUITXData@@@Z
?InitPluginFileSystem@Boot@Util@@YAHPA_W@Z
?InitPluginI18NConfig@Boot@Util@@YAHPA_W@Z
?InitPluginGFConfig@Boot@Util@@YAHPA_W@Z
?EnablePlugin@CoreCenter@Util@@YAHPA_W@Z
?Find@CTXStringW@@QBEH_WH@Z
?Mid@CTXStringW@@QBE?AV1@HH@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
??8@YA_NPB_WABVCTXStringW@@@Z
?ToLower@CTXBSTR@@QAEJXZ
?QueryPluginCore@CoreCenter@Util@@YAHPA_WPAPAUITXPluginCore@@@Z
?GetService@GF@Util@@YAJABU_GUID@@PA_WPAPAX@Z
?RawInitGFElementByXtml@GF@Util@@YAJPA_WPAUIGFElement@@10H@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
DeleteTexture
UnlockTextureBits
LockTextureBits
GetTextureMode
ARGBtoAHSL
AHSLtoARGB
SetTextureMode
FillSolidRect
CreateCanvas
CreateTexture
GetTextureFilter
GetTextureSize
CanvasToTexture
SetTextureFilter
DrawTexture
SetCanvasFilter
ord2534
ord909
ord764
ord1176
ord1178
ord1182
ord266
ord762
ord1079
ord1908
ord265
ord3327
ord4255
ord4475
ord3943
ord2638
ord3703
ord3713
ord3712
ord2984
ord2527
ord2640
ord2832
ord2708
ord4301
ord2829
ord2725
ord2531
ord5562
ord5209
ord5226
ord4562
ord3942
ord5222
ord5220
ord2925
ord1911
ord3826
ord5378
ord6215
ord5096
ord1007
ord5579
ord2009
ord2054
ord4320
ord6274
ord3795
ord6272
ord4008
ord4032
ord577
ord283
ord2366
ord1121
ord1049
ord2239
ord3800
ord566
ord757
ord1198
_vsnprintf
strrchr
_memicmp
setlocale
_wsplitpath_s
_mktime64
_wfullpath
wcslen
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_except_handler4_common
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_invoke_watson
_controlfp_s
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
swscanf_s
putchar
putwchar
ldiv
_wcsupr
ftell
fread
wcstok_s
_wtoi64
sscanf
_wcsupr_s
strncpy_s
wcsrchr
_difftime64
_time64
malloc
free
wcscpy_s
wcsncpy_s
__CxxFrameHandler3
_wcsicmp
__wargv
__argc
memset
wcsncat
_wtoi
_wcsnicmp
_invalid_parameter_noinfo
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
memcpy
_purecall
_recalloc
exit
_get_heap_handle
_beginthreadex
_localtime64
fclose
fflush
fwrite
_snprintf
??0exception@std@@QAE@XZ
memmove_s
_snwprintf
rename
fseek
fopen
memmove
realloc
_snwprintf_s
_wfopen_s
memcpy_s
vswprintf_s
wcscat_s
swprintf_s
towlower
wcsncpy
wcsncmp
wcstoul
wcsncat_s
_except_handler3
_vsnwprintf_s
swscanf
sscanf_s
_itow
tolower
wcschr
strchr
_vswprintf
wcsstr
calloc
atof
_wtof
_wtol
_wfopen
strlen
_snprintf_s
_unlink
wcstol
fwprintf
LocalAlloc
HeapSize
HeapAlloc
HeapDestroy
GetVersionExA
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
GetStartupInfoW
MoveFileW
SwitchToThread
GetCommandLineW
LoadLibraryA
VirtualQuery
OpenFileMappingW
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
GetOverlappedResult
ConnectNamedPipe
CreateNamedPipeW
SetNamedPipeHandleState
WaitNamedPipeW
GetLocaleInfoA
GetTimeFormatW
GetDateFormatW
GetCurrencyFormatW
GetNumberFormatW
GetLocaleInfoW
FileTimeToLocalFileTime
SystemTimeToTzSpecificLocalTime
QueueUserAPC
ProcessIdToSessionId
GetACP
FormatMessageW
ResetEvent
TerminateThread
InitializeCriticalSectionAndSpinCount
WaitForMultipleObjects
InterlockedCompareExchange
OpenEventW
GetProcessTimes
MapViewOfFile
ExpandEnvironmentStringsW
HeapFree
lstrlenA
InterlockedExchangeAdd
InterlockedExchange
DeleteTimerQueueTimer
CreateTimerQueueTimer
SetFileTime
GetCurrentDirectoryW
SystemTimeToFileTime
LocalFileTimeToFileTime
FindClose
FindNextFileW
FindFirstFileW
GetPrivateProfileStringW
CreateDirectoryW
CopyFileW
GetTempFileNameW
GetSystemTime
FileTimeToSystemTime
QueryPerformanceCounter
GetCurrentProcessId
OpenProcess
TerminateProcess
GetVersionExW
GetSystemInfo
MultiByteToWideChar
GetTempPathW
GetSystemTimeAsFileTime
UnmapViewOfFile
CreateFileMappingW
MapViewOfFileEx
GetFileSize
SetFilePointer
WriteFile
GetCPInfo
IsDBCSLeadByte
WideCharToMultiByte
WritePrivateProfileStringW
GetPrivateProfileIntW
GetLocalTime
lstrcpynW
GetFileAttributesW
DeleteFileW
GetLongPathNameW
GetThreadLocale
SetThreadLocale
HeapValidate
GetExitCodeProcess
UnhandledExceptionFilter
Sleep
CreateEventW
ResumeThread
SetEvent
GetSystemDirectoryW
CreateFileW
ReadFile
FindResourceExW
FindResourceW
LoadResource
LockResource
SetLastError
OpenMutexW
FreeLibrary
IsBadReadPtr
LoadLibraryW
GetProcAddress
ReleaseMutex
GetSystemDefaultLangID
GetSystemDefaultUILanguage
InterlockedDecrement
InterlockedIncrement
SetDllDirectoryW
GetProcessHeap
SizeofResource
HeapSetInformation
SetThreadPriority
WaitForSingleObject
GetTickCount
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
DuplicateHandle
GetModuleHandleW
CreateToolhelp32Snapshot
Process32FirstW
lstrcmpiW
Process32NextW
CloseHandle
lstrlenW
GetModuleFileNameW
CreateProcessW
SleepEx
CreateMutexW
LeaveCriticalSection
EnterCriticalSection
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
UpdateWindow
WaitMessage
PeekMessageW
FindWindowA
GetWindow
GetClassNameW
SendMessageTimeoutW
GetClassLongW
BeginPaint
FillRect
EndPaint
GetParent
BringWindowToTop
SetFocus
RegisterClassExW
LoadCursorW
IsIconic
EnumThreadWindows
GetActiveWindow
GetWindowThreadProcessId
GetKeyState
SetRect
InflateRect
FindWindowExW
GetDC
DrawTextW
ReleaseDC
GetDesktopWindow
MoveWindow
SetTimer
IsWindowVisible
EnableWindow
KillTimer
SystemParametersInfoW
GetWindowLongW
CallWindowProcW
GetCursorPos
WindowFromPoint
GetAsyncKeyState
GetWindowRect
ScreenToClient
PtInRect
FindWindowW
RegisterWindowMessageW
GetMessageW
TranslateMessage
IsWindowEnabled
CharNextW
LoadStringW
MessageBoxW
SetWindowPos
IsWindow
PostMessageW
PostThreadMessageW
DestroyWindow
CreateWindowExW
SetWindowLongW
DefWindowProcW
IsZoomed
ShowWindow
RedrawWindow
SetForegroundWindow
SendMessageW
UnregisterClassA
GetClientRect
DispatchMessageW
SelectObject
GetStockObject
CreateSolidBrush
DeleteObject
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
IsTextUnicode
SetSecurityDescriptorDacl
ImpersonateLoggedOnUser
OpenProcessToken
RevertToSelf
InitializeSecurityDescriptor
SHGetFileInfoW
SHFileOperationW
SHCreateDirectoryExW
SHGetSpecialFolderPathW
ShellExecuteExW
ShellExecuteW
wnsprintfW
SHGetValueW
StrStrIW
PathRemoveExtensionW
StrCmpIW
PathIsDirectoryW
PathAddBackslashW
PathFileExistsW
PathRemoveFileSpecW
PathAppendW
StrFormatByteSizeW
PathFindFileNameW
StrFormatKBSizeW
PathIsRelativeW
PathIsRootW
StrFromTimeIntervalW
SysStringByteLen
SysAllocStringByteLen
VarBstrCmp
VariantInit
SysFreeString
VariantClear
SysAllocString
LoadTypeLi
LoadRegTypeLi
VarUI4FromStr
SysStringLen
ord30
ord32
ord58
ord61
ord23
ord64
ord22
ord18
ord15
ord31
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@_W@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?data@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHABV12@@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIPB_W@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIABV12@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II_W@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??_D?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??0?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?ends@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?str@strstreambuf@std@@QAEPADXZ
?freeze@strstreambuf@std@@QAEX_N@Z
??1strstreambuf@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0strstreambuf@std@@QAE@H@Z
GetModuleFileNameExW
GetModuleBaseNameW
EnumProcessModules
EnumProcesses
ImmAssociateContext
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
InitCommonControlsEx
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ