WarHack[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WarHack.zip
Size

1.1MB
MD5

661d718e463c6e83f3f439be7440c77a
SHA1

1f712e0f53085cf130668a81b3d2315f23bcc801
SHA256

61ac237a8783492b362dd63e2a8f8884807a116fd65242d974d07aec7a6b4dd2
SHA512

3b9bbc43f50584ad3a50456eb66040ae5b2ee7c29eb1bcd4fd948a67594efcedd0ec5a3e7d61de79e432945eca3b6874050c46cf4765fc21127a741c629ec84e
SSDEEP

24576:uTIjcSeUv1oOg+kc9G11Oon7r5xtaKVS/i+BBEcapTheRzggKmJmKJ:GIj1eUv1oOg+kcE1Aon7rjzVSbrSleRN

Score

N/A

Malware Config

Signatures

Files

WarHack.zip
.zip

Password: war2023
CrashReporter.dll
.dll windows x86

Password: war2023

fa2958ff8d7224cbe6bdde67c9ab40d3

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

08:4c:af:4d:f4:99:14:1d:40:4b:71:99:aa:2c:21:31
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25/09/2015, 00:00

Not After

03/10/2018, 12:00

Subject

CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:c0:79:2e:ad:98:0a:68:b3:84:2f:37:c3:00:f9:c9:0b:6f:6b:b6
Signer

Actual PE Digest

77:c0:79:2e:ad:98:0a:68:b3:84:2f:37:c3:00:f9:c9:0b:6f:6b:b6

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US

31/08/2016, 23:25
Valid: true

Chain 1

CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

icuuc

?removeAllStrings@UnicodeSet@icu_52@@UAEAAV12@XZ
?retain@UnicodeSet@icu_52@@UAEAAV12@HH@Z
?retainAll@UnicodeSet@icu_52@@UAEAAV12@ABV12@@Z
?setData@UnicodeFilter@icu_52@@UAEXPBVTransliterationRuleData@2@@Z
?toMatcher@UnicodeFilter@icu_52@@UBEPAVUnicodeMatcher@2@XZ
?toPattern@UnicodeSet@icu_52@@UBEAAVUnicodeString@2@AAV32@C@Z
?toReplacer@UnicodeFunctor@icu_52@@UBEPAVUnicodeReplacer@2@XZ
??_7UObject@icu_52@@6B@
??_7Replaceable@icu_52@@6B@
??_7UnicodeString@icu_52@@6B@
uscript_getCode_52
uscript_getName_52
uscript_getScript_52
?char32At@Replaceable@icu_52@@QBEHH@Z
?extract@UnicodeString@icu_52@@QBEHHHPADHW4EInvariant@12@@Z
?append@UnicodeString@icu_52@@QAEAAV12@ABV12@@Z
?append@UnicodeString@icu_52@@QAEAAV12@PB_WH@Z
?truncate@UnicodeString@icu_52@@QAECH@Z
?getBuffer@UnicodeString@icu_52@@QBEPB_WXZ
??0UnicodeString@icu_52@@QAE@PBDHW4EInvariant@01@@Z
?doCaseCompare@UnicodeString@icu_52@@ABECHHPB_WHHI@Z
uhash_open_52
uhash_close_52
uhash_setValueDeleter_52
uhash_iput_52
uhash_iget_52
uhash_hashLong_52
uhash_compareLong_52
??0Hashtable@icu_52@@QAE@CAAW4UErrorCode@@@Z
??1Hashtable@icu_52@@QAE@XZ
?puti@Hashtable@icu_52@@QAEHABVUnicodeString@2@HAAW4UErrorCode@@@Z
?geti@Hashtable@icu_52@@QBEHABVUnicodeString@2@@Z
uprv_max_52
uprv_min_52
uprv_isInvariantUString_52
?getDefault@Locale@icu_52@@SAABV12@XZ
uprv_isNaN_52
uprv_getNaN_52
uprv_floor_52
uprv_ceil_52
uprv_fabs_52
uhash_openSize_52
uhash_iputi_52
uhash_igeti_52
umtx_lock_52
umtx_unlock_52
uprv_malloc_52
uprv_free_52
??0UVector@icu_52@@QAE@HAAW4UErrorCode@@@Z
?orphanElementAt@UVector@icu_52@@QAEPAXH@Z
u_charType_52
?length@Replaceable@icu_52@@QBEHXZ
?getEnglish@Locale@icu_52@@SAABV12@XZ
?createWordInstance@BreakIterator@icu_52@@SAPAV12@ABVLocale@2@AAW4UErrorCode@@@Z
??0UVector32@icu_52@@QAE@AAW4UErrorCode@@@Z
??1UVector32@icu_52@@UAE@XZ
?addElement@UVector32@icu_52@@QAEXHAAW4UErrorCode@@@Z
?removeAllElements@UVector32@icu_52@@QAEXXZ
?getDynamicClassID@UVector32@icu_52@@UBEPAXXZ
??0Locale@icu_52@@QAE@PBD000@Z
??1Locale@icu_52@@UAE@XZ
?umtx_initImplPreInit@icu_52@@YACAAUUInitOnce@1@@Z
?umtx_initImplPostInit@icu_52@@YAXAAUUInitOnce@1@@Z
u_UCharsToChars_52
?indexOf@UnicodeString@icu_52@@QBEH_W@Z
?doCompare@UnicodeString@icu_52@@ABECHHABV12@HH@Z
uenum_close_52
uloc_getCountry_52
uloc_canonicalize_52
uloc_getKeywordValue_52
uloc_addLikelySubtags_52
uloc_minimizeSubtags_52
??0Locale@icu_52@@QAE@XZ
??0Locale@icu_52@@QAE@ABV01@@Z
??4Locale@icu_52@@QAEAAV01@ABV01@@Z
?createFromName@Locale@icu_52@@SA?AV12@PBD@Z
?getKeywordValue@Locale@icu_52@@QBEHPBDPADHAAW4UErrorCode@@@Z
?getAvailableLocales@Locale@icu_52@@SAPBV12@AAH@Z
ures_openDirect_52
ures_close_52
ures_getLocaleByType_52
ures_getIntVector_52
ures_getStringByIndex_52
ures_getByKey_52
uprv_fmod_52
uprv_getUTCtime_52
?put@Hashtable@icu_52@@QAEPAXABVUnicodeString@2@PAXAAW4UErrorCode@@@Z
?registerFactory@ICUService@icu_52@@UAEPBXPAVICUServiceFactory@2@AAW4UErrorCode@@@Z
?countFactories@ICUService@icu_52@@IBEHXZ
?initLocaleFromName@LocaleUtility@icu_52@@SAAAVLocale@2@ABVUnicodeString@2@AAV32@@Z
??1LocaleKeyFactory@icu_52@@UAE@XZ
??0LocaleKeyFactory@icu_52@@IAE@H@Z
??0ICUResourceBundleFactory@icu_52@@QAE@XZ
??1ICUResourceBundleFactory@icu_52@@UAE@XZ
??0ICULocaleService@icu_52@@QAE@ABVUnicodeString@1@@Z
??1ICULocaleService@icu_52@@UAE@XZ
?get@ICULocaleService@icu_52@@QBEPAVUObject@2@ABVLocale@2@HPAV42@AAW4UErrorCode@@@Z
uprv_stricmp_52
?getLocale@LocaleBased@icu_52@@QBE?AVLocale@2@W4ULocDataLocaleType@@AAW4UErrorCode@@@Z
?getLocaleID@LocaleBased@icu_52@@QBEPBDW4ULocDataLocaleType@@AAW4UErrorCode@@@Z
?setLocaleIDs@LocaleBased@icu_52@@QAEXPBD0@Z
??0UStringEnumeration@icu_52@@QAE@PAUUEnumeration@@@Z
??1UStringEnumeration@icu_52@@UAE@XZ
??8StringEnumeration@icu_52@@UBECABV01@@Z
??9StringEnumeration@icu_52@@UBECABV01@@Z
?acceptsListener@ICUService@icu_52@@MBECABVEventListener@2@@Z
?addListener@ICUNotifier@icu_52@@UAEXPBVEventListener@2@AAW4UErrorCode@@@Z
?clearCaches@ICUService@icu_52@@MAEXXZ
?clone@StringEnumeration@icu_52@@UBEPAV12@XZ
?count@UStringEnumeration@icu_52@@UBEHAAW4UErrorCode@@@Z
?createKey@ICULocaleService@icu_52@@MBEPAVICUServiceKey@2@PBVUnicodeString@2@AAW4UErrorCode@@@Z
?createKey@ICULocaleService@icu_52@@MBEPAVICUServiceKey@2@PBVUnicodeString@2@HAAW4UErrorCode@@@Z
?createSimpleFactory@ICUService@icu_52@@MAEPAVICUServiceFactory@2@PAVUObject@2@ABVUnicodeString@2@CAAW4UErrorCode@@@Z
?getAvailableLocales@ICULocaleService@icu_52@@UBEPAVStringEnumeration@2@XZ
?getDisplayName@LocaleKeyFactory@icu_52@@UBEAAVUnicodeString@2@ABV32@ABVLocale@2@AAV32@@Z
?getDynamicClassID@ICUResourceBundleFactory@icu_52@@UBEPAXXZ
?getDynamicClassID@LocaleKeyFactory@icu_52@@UBEPAXXZ
?getDynamicClassID@UStringEnumeration@icu_52@@UBEPAXXZ
?getKey@ICUService@icu_52@@UBEPAVUObject@2@AAVICUServiceKey@2@PAVUnicodeString@2@AAW4UErrorCode@@@Z
?getSupportedIDs@ICUResourceBundleFactory@icu_52@@MBEPBVHashtable@2@AAW4UErrorCode@@@Z
?getSupportedIDs@LocaleKeyFactory@icu_52@@MBEPBVHashtable@2@AAW4UErrorCode@@@Z
?handleCreate@ICUResourceBundleFactory@icu_52@@MBEPAVUObject@2@ABVLocale@2@HPBVICUService@2@AAW4UErrorCode@@@Z
?handleCreate@LocaleKeyFactory@icu_52@@MBEPAVUObject@2@ABVLocale@2@HPBVICUService@2@AAW4UErrorCode@@@Z
?handlesKey@LocaleKeyFactory@icu_52@@MBECABVICUServiceKey@2@AAW4UErrorCode@@@Z
?next@UStringEnumeration@icu_52@@UAEPBDPAHAAW4UErrorCode@@@Z
?notifyChanged@ICUNotifier@icu_52@@UAEXXZ
?notifyListener@ICUService@icu_52@@MBEXAAVEventListener@2@@Z
?reInitializeFactories@ICUService@icu_52@@MAEXXZ
?registerInstance@ICULocaleService@icu_52@@UAEPBXPAVUObject@2@ABVLocale@2@AAW4UErrorCode@@@Z
?registerInstance@ICULocaleService@icu_52@@UAEPBXPAVUObject@2@ABVLocale@2@HAAW4UErrorCode@@@Z
?registerInstance@ICULocaleService@icu_52@@UAEPBXPAVUObject@2@ABVLocale@2@HHAAW4UErrorCode@@@Z
?registerInstance@ICULocaleService@icu_52@@UAEPBXPAVUObject@2@ABVUnicodeString@2@CAAW4UErrorCode@@@Z
?removeListener@ICUNotifier@icu_52@@UAEXPBVEventListener@2@AAW4UErrorCode@@@Z
?reset@ICUService@icu_52@@UAEXXZ
?reset@UStringEnumeration@icu_52@@UAEXAAW4UErrorCode@@@Z
?snext@UStringEnumeration@icu_52@@UAEPBVUnicodeString@2@AAW4UErrorCode@@@Z
?unext@StringEnumeration@icu_52@@UAEPB_WPAHAAW4UErrorCode@@@Z
?unregister@ICUService@icu_52@@UAECPBXAAW4UErrorCode@@@Z
?updateVisibleIDs@LocaleKeyFactory@icu_52@@UBEXAAVHashtable@2@AAW4UErrorCode@@@Z
?setTo@UnicodeString@icu_52@@QAEAAV12@H@Z
?setTo@UnicodeString@icu_52@@QAEAAV12@CPB_WH@Z
ucase_getSingleton_52
??YUnicodeString@icu_52@@QAEAAV01@_W@Z
??YUnicodeString@icu_52@@QAEAAV01@ABV01@@Z
?doReplace@UnicodeString@icu_52@@AAEAAV12@HHABV12@HH@Z
??0MessagePattern@icu_52@@QAE@AAW4UErrorCode@@@Z
??0MessagePattern@icu_52@@QAE@ABV01@@Z
??4MessagePattern@icu_52@@QAEAAV01@ABV01@@Z
??1MessagePattern@icu_52@@UAE@XZ
?parseChoiceStyle@MessagePattern@icu_52@@QAEAAV12@ABVUnicodeString@2@PAUUParseError@@AAW4UErrorCode@@@Z
??8MessagePattern@icu_52@@QBECABV01@@Z
?getNumericValue@MessagePattern@icu_52@@QBENABVPart@12@@Z
?appendSubMessageWithoutSkipSyntax@MessageImpl@icu_52@@SAAAVUnicodeString@2@ABVMessagePattern@2@HAAV32@@Z
uprv_isPositiveInfinity_52
uprv_isNegativeInfinity_52
u_memcpy_52
?getTerminatedBuffer@UnicodeString@icu_52@@QAEPB_WXZ
??0UnicodeString@icu_52@@QAE@PA_WHH@Z
??_UUMemory@icu_52@@SAPAXI@Z
uiter_setUTF8_52
?setToBogus@UnicodeString@icu_52@@QAEXXZ
??1StringEnumeration@icu_52@@UAE@XZ
??0StringEnumeration@icu_52@@IAE@XZ
?setChars@StringEnumeration@icu_52@@IAEPAVUnicodeString@2@PBDHAAW4UErrorCode@@@Z
??0UnicodeSet@icu_52@@QAE@HH@Z
?getDisplayName@Locale@icu_52@@QBEAAVUnicodeString@2@ABV12@AAV32@@Z
??0Hashtable@icu_52@@QAE@AAW4UErrorCode@@@Z
?get@Hashtable@icu_52@@QBEPAXABVUnicodeString@2@@Z
?getDisplayName@ICUService@icu_52@@QBEAAVUnicodeString@2@ABV32@AAV32@ABVLocale@2@@Z
?initNameFromLocale@LocaleUtility@icu_52@@SAAAVUnicodeString@2@ABVLocale@2@AAV32@@Z
??0ICUResourceBundleFactory@icu_52@@QAE@ABVUnicodeString@1@@Z
?get@ICULocaleService@icu_52@@QBEPAVUObject@2@ABVLocale@2@AAW4UErrorCode@@@Z
?get@ICULocaleService@icu_52@@QBEPAVUObject@2@ABVLocale@2@PAV42@AAW4UErrorCode@@@Z
ures_getSize_52
ures_resetIterator_52
ures_hasNext_52
ures_getNextString_52
ures_initStackObject_52
?getDynamicClassID@Locale@icu_52@@UBEPAXXZ
?indexOf@UnicodeString@icu_52@@QBEHPB_WHH@Z
?lastIndexOf@UnicodeString@icu_52@@QBEHPB_WHH@Z
?tempSubString@UnicodeString@icu_52@@QBE?AV12@HH@Z
?setCharAt@UnicodeString@icu_52@@QAEAAV12@H_W@Z
?trim@UnicodeString@icu_52@@QAEAAV12@XZ
??0UnicodeString@icu_52@@QAE@H@Z
??0CharString@icu_52@@QAE@XZ
??1CharString@icu_52@@QAE@XZ
?appendInvariantChars@CharString@icu_52@@QAEAAV12@ABVUnicodeString@2@AAW4UErrorCode@@@Z
uprv_strdup_52
u_charDigitValue_52
??0Mutex@icu_52@@QAE@PAUUMutex@@@Z
??1Mutex@icu_52@@QAE@XZ
ures_open_52
ures_getString_52
ures_getKey_52
ures_getByIndex_52
uhash_setKeyDeleter_52
uhash_put_52
uhash_get_52
uhash_nextElement_52
uhash_hashChars_52
uhash_compareChars_52
uhash_equals_52
ures_getByKeyWithFallback_52
??Hicu_52@@YA?AVUnicodeString@0@ABV10@0@Z
uenum_unextDefault_52
uprv_sortArray_52
ucnv_open_52
ucnv_close_52
ucnv_toUChars_52
??8UnicodeString@icu_52@@QBECABV01@@Z
?findAndReplace@UnicodeString@icu_52@@QAEAAV12@ABV12@0@Z
??0UnicodeString@icu_52@@QAE@PB_W@Z
?doCompare@UnicodeString@icu_52@@ABECHHPB_WHH@Z
??8Locale@icu_52@@QBECABV01@@Z
?clone@Locale@icu_52@@QBEPAV12@XZ
?nextElement@Hashtable@icu_52@@QBEPBUUHashElement@@AAH@Z
?setValueComparator@Hashtable@icu_52@@QAEP6ACTUElement@@0@ZP6AC00@Z@Z
?equals@Hashtable@icu_52@@QBECABV12@@Z
ures_getStringByKeyWithFallback_52
u_strlen_52
u_strcmp_52
u_strcpy_52
??1ParsePosition@icu_52@@UAE@XZ
??_7ParsePosition@icu_52@@6B@
?fastCopyFrom@UnicodeString@icu_52@@QAEAAV12@ABV12@@Z
??4UnicodeString@icu_52@@QAEAAV01@_W@Z
?setTo@UnicodeString@icu_52@@QAEAAV12@PB_WH@Z
??0UnicodeString@icu_52@@QAE@XZ
?getRoot@Locale@icu_52@@SAABV12@XZ
ures_getStringByKey_52
??0UnicodeSet@icu_52@@QAE@ABV01@@Z
?freeze@UnicodeSet@icu_52@@QAEPAVUnicodeFunctor@2@XZ
u_isUWhiteSpace_52
??0StringPiece@icu_52@@QAE@PBD@Z
u_strncmp_52
u_strncpy_52
?compare@UnicodeString@icu_52@@QBECABV12@@Z
?indexOf@UnicodeString@icu_52@@QBEHABV12@@Z
?indexOf@UnicodeString@icu_52@@QBEH_WH@Z
?insert@UnicodeString@icu_52@@QAEAAV12@HABV12@@Z
?doCaseCompare@UnicodeString@icu_52@@ABECHHABV12@HHI@Z
?copyFrom@UnicodeString@icu_52@@AAEAAV12@ABV12@C@Z
??0StringEnumeration@icu_52@@QAE@ABV01@@Z
??4StringEnumeration@icu_52@@QAEAAV01@ABV01@@Z
uprv_getInfinity_52
?append@CharString@icu_52@@QAEAAV12@DAAW4UErrorCode@@@Z
?append@CharString@icu_52@@QAEAAV12@PBDHAAW4UErrorCode@@@Z
?isWhiteSpace@PatternProps@icu_52@@SACH@Z
?skipWhiteSpace@PatternProps@icu_52@@SAPB_WPB_WH@Z
??0Hashtable@icu_52@@QAE@XZ
?snext@StringEnumeration@icu_52@@UAEPBVUnicodeString@2@AAW4UErrorCode@@@Z
uprv_isInfinite_52
?getAppendBuffer@CharString@icu_52@@QAEPADHHAAHAAW4UErrorCode@@@Z
u_strchr_52
ures_getNextResource_52
uloc_getParent_52
ures_getFunctionalEquivalent_52
?next@StringEnumeration@icu_52@@UAEPBDPAHAAW4UErrorCode@@@Z
?charAt@Replaceable@icu_52@@QBE_WH@Z
?appendNumber@ICU_Utility@icu_52@@SAAAVUnicodeString@2@AAV32@HHH@Z
??0UnicodeString@icu_52@@QAE@PBD@Z
??0CharString@icu_52@@QAE@ABVStringPiece@1@AAW4UErrorCode@@@Z
??0CharString@icu_52@@QAE@ABV01@AAW4UErrorCode@@@Z
?doExtract@UnicodeString@icu_52@@ABEXHHPA_WH@Z
?setElementAt@UVector32@icu_52@@QAEXHH@Z
?setSize@UVector32@icu_52@@QAEXH@Z
?assign@UVector32@icu_52@@QAEXABV12@AAW4UErrorCode@@@Z
??8UVector32@icu_52@@QAECABV01@@Z
??1UnicodeFunctor@icu_52@@UAE@XZ
?toMatcher@UnicodeFunctor@icu_52@@UBEPAVUnicodeMatcher@2@XZ
?getBaseName@Locale@icu_52@@QBEPBDXZ
u_getNumericValue_52
??4UnicodeSet@icu_52@@QAEAAV01@ABV01@@Z
?containsAll@UnicodeSet@icu_52@@QBECABVUnicodeString@2@@Z
uhash_count_52
uhash_puti_52
uhash_geti_52
uhash_removeAll_52
uhash_removeElement_52
uscript_getScriptExtensions_52
?sort@UVector@icu_52@@QAEXP6ACTUElement@@0@ZAAW4UErrorCode@@@Z
?extract@UnicodeString@icu_52@@QBEHPA_WHAAW4UErrorCode@@@Z
?toTitle@UnicodeString@icu_52@@QAEAAV12@PAVBreakIterator@2@ABVLocale@2@I@Z
uloc_getDefault_52
?createKeywords@Locale@icu_52@@QBEPAVStringEnumeration@2@AAW4UErrorCode@@@Z
uloc_getTableStringWithFallback_52
?removeAll@UnicodeSet@icu_52@@UAEAAV12@ABV12@@Z
?compare@UnicodeString@icu_52@@QBECPB_WH@Z
?indexOf@UnicodeString@icu_52@@QBEHABV12@H@Z
?toLower@UnicodeString@icu_52@@QAEAAV12@ABVLocale@2@@Z
?getBuffer@UnicodeString@icu_52@@QAEPA_WH@Z
?releaseBuffer@UnicodeString@icu_52@@QAEXH@Z
?parse@MessagePattern@icu_52@@QAEAAV12@ABVUnicodeString@2@PAUUParseError@@AAW4UErrorCode@@@Z
?clear@MessagePattern@icu_52@@QAEXXZ
?validateArgumentName@MessagePattern@icu_52@@SAHABVUnicodeString@2@@Z
?getSubstring@MessagePattern@icu_52@@QBE?AVUnicodeString@2@ABVPart@12@@Z
?partSubstringMatches@MessagePattern@icu_52@@QBECABVPart@12@ABVUnicodeString@2@@Z
?getPluralOffset@MessagePattern@icu_52@@QBENH@Z
uprv_realloc_52
?trimWhiteSpace@PatternProps@icu_52@@SAPB_WPB_WAAH@Z
?appendReducedApostrophes@MessageImpl@icu_52@@SAXABVUnicodeString@2@HHAAV32@@Z
uprv_itou_52
??_7UnicodeStringAppendable@icu_52@@6B@
u_charFromName_52
uset_add_52
uprv_getMaxCharNameLength_52
uprv_getCharNameCharacters_52
?parsePattern@ICU_Utility@icu_52@@SAHABVUnicodeString@2@ABVReplaceable@2@HH@Z
??0UObject@icu_52@@QAE@ABV01@@Z
?endsWith@UnicodeString@icu_52@@QBECPB_WH@Z
?setTo@UnicodeString@icu_52@@QAEAAV12@ABV12@HH@Z
?remove@UnicodeString@icu_52@@QAEAAV12@HH@Z
?unBogus@UnicodeString@icu_52@@AAEXXZ
uprv_maxMantissa_52
?startsWith@UnicodeString@icu_52@@QBECABV12@@Z
uprv_log_52
uprv_pow_52
uprv_round_52
?getInstance@Normalizer2@icu_52@@SAPBV12@PBD0W4UNormalization2Mode@@AAW4UErrorCode@@@Z
?lastIndexOf@UnicodeString@icu_52@@QBEH_W@Z
?hashCode@Locale@icu_52@@QBEHXZ
?getKey@ICUService@icu_52@@QBEPAVUObject@2@AAVICUServiceKey@2@PAVUnicodeString@2@PBVICUServiceFactory@2@AAW4UErrorCode@@@Z
?get@ICULocaleService@icu_52@@QBEPAVUObject@2@ABVLocale@2@HAAW4UErrorCode@@@Z
?create@LocaleKeyFactory@icu_52@@UBEPAVUObject@2@ABVICUServiceKey@2@PBVICUService@2@AAW4UErrorCode@@@Z
ures_getInt_52
?setToStart@CharacterIterator@icu_52@@QAEHXZ
?next32PostInc@UCharCharacterIterator@icu_52@@UAEHXZ
?hasNext@UCharCharacterIterator@icu_52@@UAECXZ
??0StringCharacterIterator@icu_52@@QAE@ABVUnicodeString@1@@Z
??1StringCharacterIterator@icu_52@@UAE@XZ
??0UVector@icu_52@@QAE@P6AXPAX@ZP6ACTUElement@@2@ZAAW4UErrorCode@@@Z
ures_getBinary_52
?parsePluralStyle@MessagePattern@icu_52@@QAEAAV12@ABVUnicodeString@2@PAUUParseError@@AAW4UErrorCode@@@Z
?tempSubStringBetween@UnicodeString@icu_52@@QBE?AV12@HH@Z
??1UnicodeMatcher@icu_52@@UAE@XZ
??_7UnicodeFunctor@icu_52@@6B@
??0UnicodeString@icu_52@@QAE@ABV01@H@Z
?setValueDeleter@Hashtable@icu_52@@QAEP6AXPAX@ZP6AX0@Z@Z
u_ispunct_52
u_iscntrl_52
u_isIDStart_52
u_isIDPart_52
u_digit_52
?unescapeAt@UnicodeString@icu_52@@QBEHAAH@Z
??0UnicodeSet@icu_52@@QAE@ABVUnicodeString@1@AAVParsePosition@1@IPBVSymbolTable@1@AAW4UErrorCode@@@Z
?resemblesPattern@UnicodeSet@icu_52@@SACABVUnicodeString@2@H@Z
?removeAll@Hashtable@icu_52@@QAEXXZ
?setSize@UVector@icu_52@@QAEXHAAW4UErrorCode@@@Z
?toArray@UVector@icu_52@@QBEPAPAXPAPAX@Z
??1SymbolTable@icu_52@@UAE@XZ
?parseChar@ICU_Utility@icu_52@@SACABVUnicodeString@2@AAH_W@Z
?parsePattern@ICU_Utility@icu_52@@SAHABVUnicodeString@2@HH0PAH@Z
?parseNumber@ICU_Utility@icu_52@@SAHABVUnicodeString@2@AAHC@Z
?appendToRule@ICU_Utility@icu_52@@SAXAAVUnicodeString@2@HCC0@Z
?appendToRule@ICU_Utility@icu_52@@SAXAAVUnicodeString@2@ABV32@CC0@Z
?appendToRule@ICU_Utility@icu_52@@SAXAAVUnicodeString@2@PBVUnicodeMatcher@2@C0@Z
u_unescapeAt_52
?caseCompare@UnicodeString@icu_52@@QBECABV12@I@Z
?foldCase@UnicodeString@icu_52@@QAEAAV12@I@Z
u_hasBinaryProperty_52
??0UnicodeSet@icu_52@@QAE@ABVUnicodeString@1@IPBVSymbolTable@1@AAW4UErrorCode@@@Z
?applyIntPropertyValue@UnicodeSet@icu_52@@QAEAAV12@W4UProperty@@HAAW4UErrorCode@@@Z
?charAt@UnicodeSet@icu_52@@QBEHH@Z
?closeOver@UnicodeSet@icu_52@@QAEAAV12@H@Z
utext_close_52
utext_openConstUnicodeString_52
utext_clone_52
utext_nativeLength_52
utext_next32_52
utext_previous32_52
utext_setNativeIndex_52
utext_moveIndex32_52
utext_extract_52
??0UVector32@icu_52@@QAE@HAAW4UErrorCode@@@Z
?popi@UVector32@icu_52@@QAEHXZ
?addElement@UVector64@icu_52@@QAEX_JAAW4UErrorCode@@@Z
?setElementAt@UVector64@icu_52@@QAEX_JH@Z
?insertElementAt@UVector64@icu_52@@QAEX_JHAAW4UErrorCode@@@Z
?setSize@UVector64@icu_52@@QAEXH@Z
?addElement@UVector@icu_52@@QAEXHAAW4UErrorCode@@@Z
?elementAti@UVector@icu_52@@QBEHH@Z
??0UStack@icu_52@@QAE@AAW4UErrorCode@@@Z
??1UStack@icu_52@@UAE@XZ
?pop@UStack@icu_52@@QAEPAXXZ
?popi@UStack@icu_52@@QAEHXZ
ucase_toFullFolding_52
utext_openUChars_52
ures_getType_52
uhash_compareUnicodeString_52
uhash_hashUnicodeString_52
??0UVector@icu_52@@QAE@P6AXPAX@ZP6ACTUElement@@2@ZHAAW4UErrorCode@@@Z
?indexOf@UVector@icu_52@@QBEHPAXH@Z
??0UnicodeString@icu_52@@QAE@HHH@Z
u_isdigit_52
u_foldCase_52
utext_openUnicodeString_52
utext_current32_52
utext_getNativeIndex_52
utext_replace_52
??0UVector64@icu_52@@QAE@AAW4UErrorCode@@@Z
??1UVector64@icu_52@@UAE@XZ
?removeAllElements@UVector64@icu_52@@QAEXXZ
?setMaxCapacity@UVector64@icu_52@@QAEXH@Z
?reserveBlock@UVector64@icu_52@@QAEPA_JHAAW4UErrorCode@@@Z
?getDynamicClassID@UVector64@icu_52@@UBEPAXXZ
utext_equals_52
?assign@UVector64@icu_52@@QAEXABV12@AAW4UErrorCode@@@Z
u_getPropertyValueEnum_52
uscript_getShortName_52
?parseSelectStyle@MessagePattern@icu_52@@QAEAAV12@ABVUnicodeString@2@PAUUParseError@@AAW4UErrorCode@@@Z
?isIdentifier@PatternProps@icu_52@@SACPB_WH@Z
?doHashCode@UnicodeString@icu_52@@ABEHXZ
u_isWhitespace_52
ustr_hashCharsN_52
?setToBogus@Locale@icu_52@@QAEXXZ
ustr_hashUCharsN_52
uprv_tzset_52
uprv_timezone_52
uprv_tzname_52
u_terminateChars_52
?remove@UnicodeString@icu_52@@QAEAAV12@XZ
ucase_getTypeOrIgnorable_52
ucase_toFullLower_52
ucase_toFullTitle_52
ucase_toFullUpper_52
u_charsToUChars_52
??0ResourceBundle@icu_52@@QAE@PBDABVLocale@1@AAW4UErrorCode@@@Z
??1ResourceBundle@icu_52@@UAE@XZ
?getStringEx@ResourceBundle@icu_52@@QBE?AVUnicodeString@2@PBDAAW4UErrorCode@@@Z
?escapeUnprintable@ICU_Utility@icu_52@@SACAAVUnicodeString@2@H@Z
?getStringEx@ResourceBundle@icu_52@@QBE?AVUnicodeString@2@HAAW4UErrorCode@@@Z
?get@ResourceBundle@icu_52@@QBE?AV12@PBDAAW4UErrorCode@@@Z
?getLocale@ResourceBundle@icu_52@@QBEABVLocale@2@XZ
uhash_compareCaselessUnicodeString_52
uhash_deleteHashtable_52
?count@Hashtable@icu_52@@QBEHXZ
?remove@Hashtable@icu_52@@QAEPAXABVUnicodeString@2@@Z
?removeElement@UVector@icu_52@@QAECPAX@Z
?setComparer@UVector@icu_52@@QAEP6ACTUElement@@0@ZP6AC00@Z@Z
?getDynamicClassID@ResourceBundle@icu_52@@UBEPAXXZ
?skipWhitespace@ICU_Utility@icu_52@@SAHABVUnicodeString@2@AAHC@Z
?parseUnicodeIdentifier@ICU_Utility@icu_52@@SA?AVUnicodeString@2@ABV32@AAH@Z
?lastIndexOf@UnicodeString@icu_52@@QBEH_WH@Z
uhash_hashUChars_52
uhash_compareUChars_52
ulist_close_keyword_values_iterator_52
ulist_count_keyword_values_52
ulist_next_keyword_value_52
ulist_reset_keyword_values_iterator_52
?setTo@UnicodeString@icu_52@@QAEAAV12@PA_WHH@Z
uenum_openFromStringEnumeration_52
uloc_getAvailable_52
uloc_countAvailable_52
uloc_setKeywordValue_52
ulist_createEmptyList_52
ulist_addItemEndList_52
ulist_containsString_52
ulist_resetList_52
ulist_deleteList_52
ucln_registerCleanup_52
u_islower_52
uset_contains_52
unorm_normalize_52
udata_openChoice_52
udata_close_52
udata_getMemory_52
?previousFCD16@Normalizer2Impl@icu_52@@QBEGPB_WAAPB_W@Z
?getNFCImpl@Normalizer2Factory@icu_52@@SAPBVNormalizer2Impl@2@AAW4UErrorCode@@@Z
utrie_enum_52
utrie_get32_52
uprv_toupper_52
u_getCombiningClass_52
utrie_set32_52
??1ByteSink@icu_52@@UAE@XZ
uiter_current32_52
uiter_next32_52
uiter_previous32_52
u_strCompare_52
u_strCompareIter_52
utf8_nextCharSafeBody_52
utf8_prevCharSafeBody_52
utf8_back1SafeBody_52
utrie_unserialize_52
?nextFCD16@Normalizer2Impl@icu_52@@QBEGAAPB_WPB_W@Z
?getNFDInstance@Normalizer2Factory@icu_52@@SAPBVNormalizer2@2@AAW4UErrorCode@@@Z
?getFCDInstance@Normalizer2Factory@icu_52@@SAPBVNormalizer2@2@AAW4UErrorCode@@@Z
unorm_openIter_52
unorm_closeIter_52
unorm_setIter_52
?Flush@ByteSink@icu_52@@UAEXXZ
u_enumCharTypes_52
?quickCheck@Normalizer@icu_52@@SA?AW4UNormalizationCheckResult@@ABVUnicodeString@2@W4UNormalizationMode@@HAAW4UErrorCode@@@Z
?getFCD16@Normalizer2Impl@icu_52@@QBEGH@Z
?getFCD16FromNormData@Normalizer2Impl@icu_52@@QBEGH@Z
?getDecomposition@Normalizer2Impl@icu_52@@QBEPB_WHQA_WAAH@Z
utrie_open_52
utrie_clone_52
utrie_close_52
utrie_serialize_52

kernel32

CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
OutputDebugStringW
GetStringTypeW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapReAlloc
LoadLibraryExW
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
WriteFile
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
DeleteCriticalSection
GetFileType
GetStdHandle
GetProcessHeap
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetLastError
HeapSize
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
GetModuleHandleExW
ExitProcess
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
RaiseException
GetCurrencyFormatW
GetNumberFormatW
GetLocaleInfoW
GetLocaleInfoA
GetDateFormatW
GetTimeFormatW
FileTimeToSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
GetLastError
InterlockedDecrement
InterlockedIncrement
InterlockedCompareExchange
CloseHandle

Exports

Exports

??0?$EnumSet@W4UDateFormatBooleanAttribute@@$0A@$01@icu_52@@QAE@ABV01@@Z
??0?$EnumSet@W4UDateFormatBooleanAttribute@@$0A@$01@icu_52@@QAE@XZ
??0?$EnumSet@W4UNumberFormatAttribute@@$0BAAA@$0BAAC@@icu_52@@QAE@ABV01@@Z
??0?$EnumSet@W4UNumberFormatAttribute@@$0BAAA@$0BAAC@@icu_52@@QAE@XZ
??0?$MaybeStackHeaderAndArray@UdecNumber@@D$0CI@@icu_52@@AAE@ABV01@@Z
??0?$MaybeStackHeaderAndArray@UdecNumber@@D$0CI@@icu_52@@QAE@XZ
??0AlphabeticIndex@icu_52@@QAE@ABVLocale@1@AAW4UErrorCode@@@Z
??0AlphabeticIndex@icu_52@@QAE@PAVRuleBasedCollator@1@AAW4UErrorCode@@@Z
??0AnnualTimeZoneRule@icu_52@@QAE@ABV01@@Z
??0AnnualTimeZoneRule@icu_52@@QAE@ABVUnicodeString@1@HHABVDateTimeRule@1@HH@Z
??0AnnualTimeZoneRule@icu_52@@QAE@ABVUnicodeString@1@HHPAVDateTimeRule@1@HH@Z
??0BasicTimeZone@icu_52@@IAE@ABV01@@Z
??0BasicTimeZone@icu_52@@IAE@ABVUnicodeString@1@@Z
??0BasicTimeZone@icu_52@@IAE@XZ
??0Bucket@AlphabeticIndex@icu_52@@AAE@ABVUnicodeString@2@0W4UAlphabeticIndexLabelType@@@Z
??0Bucket@AlphabeticIndex@icu_52@@QAE@ABV012@@Z
??0CECalendar@icu_52@@IAE@ABV01@@Z
??0CECalendar@icu_52@@IAE@ABVLocale@1@AAW4UErrorCode@@@Z
??0Calendar@icu_52@@IAE@AAW4UErrorCode@@@Z
??0Calendar@icu_52@@IAE@ABV01@@Z
??0Calendar@icu_52@@IAE@ABVTimeZone@1@ABVLocale@1@AAW4UErrorCode@@@Z
??0Calendar@icu_52@@IAE@PAVTimeZone@1@ABVLocale@1@AAW4UErrorCode@@@Z
??0CalendarAstronomer@icu_52@@QAE@N@Z
??0CalendarAstronomer@icu_52@@QAE@NN@Z
??0CalendarAstronomer@icu_52@@QAE@XZ
??0ChineseCalendar@icu_52@@IAE@ABVLocale@1@HPBVTimeZone@1@AAW4UErrorCode@@@Z
??0ChineseCalendar@icu_52@@QAE@ABV01@@Z
??0ChineseCalendar@icu_52@@QAE@ABVLocale@1@AAW4UErrorCode@@@Z
??0ChoiceFormat@icu_52@@AAE@ABVUnicodeString@1@AAUUParseError@@AAW4UErrorCode@@@Z
??0ChoiceFormat@icu_52@@QAE@ABV01@@Z
??0ChoiceFormat@icu_52@@QAE@ABVUnicodeString@1@AAW4UErrorCode@@@Z
??0ChoiceFormat@icu_52@@QAE@PBNPBCPBVUnicodeString@1@H@Z
??0ChoiceFormat@icu_52@@QAE@PBNPBVUnicodeString@1@H@Z
??0CollationElementIterator@icu_52@@AAE@ABVCharacterIterator@1@PBVRuleBasedCollator@1@AAW4UErrorCode@@@Z
??0CollationElementIterator@icu_52@@AAE@ABVUnicodeString@1@PBVRuleBasedCollator@1@AAW4UErrorCode@@@Z
??0CollationElementIterator@icu_52@@QAE@ABV01@@Z
??0CollationKey@icu_52@@QAE@ABV01@@Z
??0CollationKey@icu_52@@QAE@PBEH@Z
??0CollationKey@icu_52@@QAE@XZ
??0Collator@icu_52@@IAE@ABV01@@Z
??0Collator@icu_52@@IAE@W4UColAttributeValue@@W4UNormalizationMode@@@Z
??0Collator@icu_52@@IAE@XZ
??0CollatorFactory@icu_52@@QAE@ABV01@@Z
??0CollatorFactory@icu_52@@QAE@XZ
??0CompactDecimalFormat@icu_52@@AAE@ABVDecimalFormat@1@PBUUHashtable@@PBNPAVPluralRules@1@@Z
??0CompactDecimalFormat@icu_52@@QAE@ABV01@@Z
??0CompoundTransliterator@icu_52@@AAE@AAVUVector@1@AAUUParseError@@AAW4UErrorCode@@@Z
??0CompoundTransliterator@icu_52@@AAE@AAVUVector@1@HAAUUParseError@@AAW4UErrorCode@@@Z
??0CompoundTransliterator@icu_52@@AAE@ABVUnicodeString@1@AAVUVector@1@PAVUnicodeFilter@1@HAAUUParseError@@AAW4UErrorCode@@@Z
??0CompoundTransliterator@icu_52@@QAE@ABV01@@Z
??0CompoundTransliterator@icu_52@@QAE@ABVUnicodeString@1@AAUUParseError@@AAW4UErrorCode@@@Z
??0CompoundTransliterator@icu_52@@QAE@ABVUnicodeString@1@W4UTransDirection@@PAVUnicodeFilter@1@AAUUParseError@@AAW4UErrorCode@@@Z
??0CompoundTransliterator@icu_52@@QAE@QBQAVTransliterator@1@HPAVUnicodeFilter@1@@Z
??0CurrencyAmount@icu_52@@QAE@ABV01@@Z
??0CurrencyAmount@icu_52@@QAE@ABVFormattable@1@PB_WAAW4UErrorCode@@@Z
??0CurrencyAmount@icu_52@@QAE@NPB_WAAW4UErrorCode@@@Z
??0CurrencyPluralInfo@icu_52@@QAE@AAW4UErrorCode@@@Z
??0CurrencyPluralInfo@icu_52@@QAE@ABV01@@Z
??0CurrencyPluralInfo@icu_52@@QAE@ABVLocale@1@AAW4UErrorCode@@@Z
??0CurrencyUnit@icu_52@@QAE@ABV01@@Z
??0CurrencyUnit@icu_52@@QAE@PB_WAAW4UErrorCode@@@Z
??0DateFormat@icu_52@@IAE@ABV01@@Z
??0DateFormat@icu_52@@IAE@XZ
??0DateFormatSymbols@icu_52@@QAE@AAW4UErrorCode@@@Z
??0DateFormatSymbols@icu_52@@QAE@ABV01@@Z
??0DateFormatSymbols@icu_52@@QAE@ABVLocale@1@AAW4UErrorCode@@@Z
??0DateFormatSymbols@icu_52@@QAE@ABVLocale@1@PBDAAW4UErrorCode@@@Z
??0DateFormatSymbols@icu_52@@QAE@PBDAAW4UErrorCode@@@Z
??0DateIntervalFormat@icu_52@@AAE@ABVLocale@1@PAVDateIntervalInfo@1@PBVUnicodeString@1@AAW4UErrorCode@@@Z
??0DateIntervalFormat@icu_52@@AAE@XZ
??0DateIntervalFormat@icu_52@@IAE@ABV01@@Z
??0DateIntervalInfo@icu_52@@QAE@AAW4UErrorCode@@@Z
??0DateIntervalInfo@icu_52@@QAE@ABV01@@Z
??0DateIntervalInfo@icu_52@@QAE@ABVLocale@1@AAW4UErrorCode@@@Z
??0DateTimePatternGenerator@icu_52@@AAE@AAW4UErrorCode@@@Z
??0DateTimePatternGenerator@icu_52@@AAE@ABV01@@Z
??0DateTimePatternGenerator@icu_52@@AAE@ABVLocale@1@AAW4UErrorCode@@@Z
??0DateTimeRule@icu_52@@QAE@ABV01@@Z
??0DateTimeRule@icu_52@@QAE@HHHCHW4TimeRuleType@01@@Z
??0DateTimeRule@icu_52@@QAE@HHHHW4TimeRuleType@01@@Z
??0DateTimeRule@icu_52@@QAE@HHHW4TimeRuleType@01@@Z
??0DecimalFormat@icu_52@@QAE@AAW4UErrorCode@@@Z
??0DecimalFormat@icu_52@@QAE@ABV01@@Z
??0DecimalFormat@icu_52@@QAE@ABVUnicodeString@1@AAW4UErrorCode@@@Z
??0DecimalFormat@icu_52@@QAE@ABVUnicodeString@1@ABVDecimalFormatSymbols@1@AAW4UErrorCode@@@Z
??0DecimalFormat@icu_52@@QAE@ABVUnicodeString@1@PAVDecimalFormatSymbols@1@AAUUParseError@@AAW4UErrorCode@@@Z
??0DecimalFormat@icu_52@@QAE@ABVUnicodeString@1@PAVDecimalFormatSymbols@1@AAW4UErrorCode@@@Z
??0DecimalFormat@icu_52@@QAE@ABVUnicodeString@1@PAVDecimalFormatSymbols@1@W4UNumberFormatStyle@@AAW4UErrorCode@@@Z
??0DecimalFormatSymbols@icu_52@@AAE@XZ
??0DecimalFormatSymbols@icu_52@@QAE@AAW4UErrorCode@@@Z
??0DecimalFormatSymbols@icu_52@@QAE@ABV01@@Z
??0DecimalFormatSymbols@icu_52@@QAE@ABVLocale@1@AAW4UErrorCode@@@Z
??0DigitList@icu_52@@QAE@ABV01@@Z
??0DigitList@icu_52@@QAE@XZ
??0DummyFormat@MessageFormat@icu_52@@QAE@ABV012@@Z
??0DummyFormat@MessageFormat@icu_52@@QAE@XZ
??0Ecliptic@CalendarAstronomer@icu_52@@QAE@NN@Z
??0Equatorial@CalendarAstronomer@icu_52@@QAE@NN@Z
??0FieldPosition@icu_52@@QAE@ABV01@@Z
??0FieldPosition@icu_52@@QAE@H@Z
??0FieldPosition@icu_52@@QAE@XZ
??0FieldPositionIterator@icu_52@@QAE@ABV01@@Z
??0FieldPositionIterator@icu_52@@QAE@XZ
??0FixedDecimal@icu_52@@QAE@ABV01@@Z
??0FixedDecimal@icu_52@@QAE@ABVUnicodeString@1@AAW4UErrorCode@@@Z
??0FixedDecimal@icu_52@@QAE@N@Z
??0FixedDecimal@icu_52@@QAE@NH@Z
??0FixedDecimal@icu_52@@QAE@NH_J@Z
??0FixedDecimal@icu_52@@QAE@XZ
??0Format@icu_52@@IAE@ABV01@@Z
??0Format@icu_52@@IAE@XZ
??0Formattable@icu_52@@QAE@ABV01@@Z
??0Formattable@icu_52@@QAE@ABVStringPiece@1@AAW4UErrorCode@@@Z
??0Formattable@icu_52@@QAE@ABVUnicodeString@1@@Z
??0Formattable@icu_52@@QAE@H@Z
??0Formattable@icu_52@@QAE@N@Z
??0Formattable@icu_52@@QAE@NW4ISDATE@01@@Z
??0Formattable@icu_52@@QAE@PAVUObject@1@@Z
??0Formattable@icu_52@@QAE@PAVUnicodeString@1@@Z
??0Formattable@icu_52@@QAE@PBD@Z
??0Formattable@icu_52@@QAE@PBV01@H@Z
??0Formattable@icu_52@@QAE@XZ
??0Formattable@icu_52@@QAE@_J@Z
??0GenderInfo@icu_52@@AAE@XZ
??0GregorianCalendar@icu_52@@QAE@AAW4UErrorCode@@@Z
??0GregorianCalendar@icu_52@@QAE@ABV01@@Z
??0GregorianCalendar@icu_52@@QAE@ABVLocale@1@AAW4UErrorCode@@@Z
??0GregorianCalendar@icu_52@@QAE@ABVTimeZone@1@AAW4UErrorCode@@@Z
??0GregorianCalendar@icu_52@@QAE@ABVTimeZone@1@ABVLocale@1@AAW4UErrorCode@@@Z
??0GregorianCalendar@icu_52@@QAE@HHHAAW4UErrorCode@@@Z
??0GregorianCalendar@icu_52@@QAE@HHHHHAAW4UErrorCode@@@Z
??0GregorianCalendar@icu_52@@QAE@HHHHHHAAW4UErrorCode@@@Z
??0GregorianCalendar@icu_52@@QAE@PAVTimeZone@1@AAW4UErrorCode@@@Z
??0GregorianCalendar@icu_52@@QAE@PAVTimeZone@1@ABVLocale@1@AAW4UErrorCode@@@Z
??0HebrewCalendar@icu_52@@QAE@ABV01@@Z
??0HebrewCalendar@icu_52@@QAE@ABVLocale@1@AAW4UErrorCode@@@Z
??0Horizon@CalendarAstronomer@icu_52@@QAE@NN@Z
??0IdentifierInfo@icu_52@@QAE@AAW4UErrorCode@@@Z
??0ImmutableIndex@AlphabeticIndex@icu_52@@AAE@PAVBucketList@2@PAVCollator@2@@Z
??0ImmutableIndex@AlphabeticIndex@icu_52@@QAE@ABV012@@Z
??0InitialTimeZoneRule@icu_52@@QAE@ABV01@@Z
??0InitialTimeZoneRule@icu_52@@QAE@ABVUnicodeString@1@HH@Z
??0IslamicCalendar@icu_52@@QAE@ABV01@@Z
??0IslamicCalendar@icu_52@@QAE@ABVLocale@1@AAW4UErrorCode@@W4ECalculationType@01@@Z
??0LocaleDisplayNames@icu_52@@QAE@ABV01@@Z
??0LocaleDisplayNames@icu_52@@QAE@XZ
??0MatchInfoCollection@TimeZoneNames@icu_52@@QAE@ABV012@@Z
??0MatchInfoCollection@TimeZoneNames@icu_52@@QAE@XZ
??0Measure@icu_52@@IAE@XZ
??0Measure@icu_52@@QAE@ABV01@@Z
??0Measure@icu_52@@QAE@ABVFormattable@1@PAVMeasureUnit@1@AAW4UErrorCode@@@Z
??0MeasureFormat@icu_52@@IAE@XZ
??0MeasureFormat@icu_52@@QAE@ABV01@@Z
??0MeasureUnit@icu_52@@IAE@XZ
??0MeasureUnit@icu_52@@QAE@ABV01@@Z
??0MessageFormat@icu_52@@QAE@ABV01@@Z
??0MessageFormat@icu_52@@QAE@ABVUnicodeString@1@AAW4UErrorCode@@@Z
??0MessageFormat@icu_52@@QAE@ABVUnicodeString@1@ABVLocale@1@AAUUParseError@@AAW4UErrorCode@@@Z
??0MessageFormat@icu_52@@QAE@ABVUnicodeString@1@ABVLocale@1@AAW4UErrorCode@@@Z
??0MoonAge@CalendarAstronomer@icu_52@@QAE@N@Z
??0NumberFormat@icu_52@@IAE@ABV01@@Z
??0NumberFormat@icu_52@@IAE@XZ
??0NumberFormatFactory@icu_52@@QAE@ABV01@@Z
??0NumberFormatFactory@icu_52@@QAE@XZ
??0NumberingSystem@icu_52@@QAE@ABV01@@Z
??0NumberingSystem@icu_52@@QAE@XZ
??0OlsonTimeZone@icu_52@@QAE@ABV01@@Z
??0OlsonTimeZone@icu_52@@QAE@PBUUResourceBundle@@0ABVUnicodeString@1@AAW4UErrorCode@@@Z
??0PluralAvailableLocalesEnumeration@icu_52@@QAE@AAW4UErrorCode@@@Z
??0PluralAvailableLocalesEnumeration@icu_52@@QAE@ABV01@@Z
??0PluralFormat@icu_52@@QAE@AAW4UErrorCode@@@Z
??0PluralFormat@icu_52@@QAE@ABV01@@Z
??0PluralFormat@icu_52@@QAE@ABVLocale@1@AAW4UErrorCode@@@Z
??0PluralFormat@icu_52@@QAE@ABVLocale@1@ABVPluralRules@1@AAW4UErrorCode@@@Z
??0PluralFormat@icu_52@@QAE@ABVLocale@1@ABVPluralRules@1@ABVUnicodeString@1@AAW4UErrorCode@@@Z
??0PluralFormat@icu_52@@QAE@ABVLocale@1@ABVUnicodeString@1@AAW4UErrorCode@@@Z
??0PluralFormat@icu_52@@QAE@ABVLocale@1@W4UPluralType@@AAW4UErrorCode@@@Z
??0PluralFormat@icu_52@@QAE@ABVLocale@1@W4UPluralType@@ABVUnicodeString@1@AAW4UErrorCode@@@Z
??0PluralFormat@icu_52@@QAE@ABVPluralRules@1@AAW4UErrorCode@@@Z
??0PluralFormat@icu_52@@QAE@ABVPluralRules@1@ABVUnicodeString@1@AAW4UErrorCode@@@Z
??0PluralFormat@icu_52@@QAE@ABVUnicodeString@1@AAW4UErrorCode@@@Z
??0PluralRules@icu_52@@QAE@AAW4UErrorCode@@@Z
??0PluralRules@icu_52@@QAE@ABV01@@Z
??0PluralSelector@PluralFormat@icu_52@@QAE@ABV012@@Z
??0PluralSelector@PluralFormat@icu_52@@QAE@XZ
??0PluralSelectorAdapter@PluralFormat@icu_52@@QAE@ABV012@@Z
??0PluralSelectorAdapter@PluralFormat@icu_52@@QAE@XZ
??0PluralSelectorProvider@MessageFormat@icu_52@@QAE@ABV012@@Z
??0PluralSelectorProvider@MessageFormat@icu_52@@QAE@ABV12@W4UPluralType@@@Z
??0RegexMatcher@icu_52@@AAE@PBVRegexPattern@1@@Z
??0RegexMatcher@icu_52@@QAE@ABVUnicodeString@1@0IAAW4UErrorCode@@@Z
??0RegexMatcher@icu_52@@QAE@ABVUnicodeString@1@IAAW4UErrorCode@@@Z
??0RegexMatcher@icu_52@@QAE@PAUUText@@0IAAW4UErrorCode@@@Z
??0RegexMatcher@icu_52@@QAE@PAUUText@@IAAW4UErrorCode@@@Z
??0RegexPattern@icu_52@@QAE@ABV01@@Z
??0RegexPattern@icu_52@@QAE@XZ
??0Region@icu_52@@AAE@XZ
??0Region@icu_52@@QAE@ABV01@@Z
??0RuleBasedCollator@icu_52@@AAE@ABVLocale@1@AAW4UErrorCode@@@Z
??0RuleBasedCollator@icu_52@@AAE@XZ
??0RuleBasedCollator@icu_52@@QAE@ABV01@@Z
??0RuleBasedCollator@icu_52@@QAE@ABVUnicodeString@1@AAW4UErrorCode@@@Z
??0RuleBasedCollator@icu_52@@QAE@ABVUnicodeString@1@W4ECollationStrength@Collator@1@AAW4UErrorCode@@@Z
??0RuleBasedCollator@icu_52@@QAE@ABVUnicodeString@1@W4ECollationStrength@Collator@1@W4UColAttributeValue@@AAW4UErrorCode@@@Z
??0RuleBasedCollator@icu_52@@QAE@ABVUnicodeString@1@W4UColAttributeValue@@AAW4UErrorCode@@@Z
??0RuleBasedCollator@icu_52@@QAE@PBEHPBV01@AAW4UErrorCode@@@Z
??0RuleBasedNumberFormat@icu_52@@AAE@ABVUnicodeString@1@PAVLocalizationInfo@1@ABVLocale@1@AAUUParseError@@AAW4UErrorCode@@@Z
??0RuleBasedNumberFormat@icu_52@@QAE@ABV01@@Z
??0RuleBasedNumberFormat@icu_52@@QAE@ABVUnicodeString@1@0AAUUParseError@@AAW4UErrorCode@@@Z
??0RuleBasedNumberFormat@icu_52@@QAE@ABVUnicodeString@1@0ABVLocale@1@AAUUParseError@@AAW4UErrorCode@@@Z
??0RuleBasedNumberFormat@icu_52@@QAE@ABVUnicodeString@1@AAUUParseError@@AAW4UErrorCode@@@Z
??0RuleBasedNumberFormat@icu_52@@QAE@ABVUnicodeString@1@ABVLocale@1@AAUUParseError@@AAW4UErrorCode@@@Z
??0RuleBasedNumberFormat@icu_52@@QAE@W4URBNFRuleSetTag@1@ABVLocale@1@AAW4UErrorCode@@@Z
??0RuleBasedTimeZone@icu_52@@QAE@ABV01@@Z
??0RuleBasedTimeZone@icu_52@@QAE@ABVUnicodeString@1@PAVInitialTimeZoneRule@1@@Z
??0ScriptSet@icu_52@@QAE@ABV01@@Z
??0ScriptSet@icu_52@@QAE@XZ
??0SearchIterator@icu_52@@IAE@AAVCharacterIterator@1@PAVBreakIterator@1@@Z
??0SearchIterator@icu_52@@IAE@ABVUnicodeString@1@PAVBreakIterator@1@@Z
??0SearchIterator@icu_52@@IAE@XZ
??0SearchIterator@icu_52@@QAE@ABV01@@Z
??0SelectFormat@icu_52@@QAE@ABV01@@Z
??0SelectFormat@icu_52@@QAE@ABVUnicodeString@1@AAW4UErrorCode@@@Z
??0SimpleDateFormat@icu_52@@AAE@ABVLocale@1@AAW4UErrorCode@@@Z
??0SimpleDateFormat@icu_52@@AAE@W4EStyle@DateFormat@1@0ABVLocale@1@AAW4UErrorCode@@@Z
??0SimpleDateFormat@icu_52@@QAE@AAW4UErrorCode@@@Z
??0SimpleDateFormat@icu_52@@QAE@ABV01@@Z
??0SimpleDateFormat@icu_52@@QAE@ABVUnicodeString@1@0AAW4UErrorCode@@@Z
??0SimpleDateFormat@icu_52@@QAE@ABVUnicodeString@1@0ABVLocale@1@AAW4UErrorCode@@@Z
??0SimpleDateFormat@icu_52@@QAE@ABVUnicodeString@1@AAW4UErrorCode@@@Z
??0SimpleDateFormat@icu_52@@QAE@ABVUnicodeString@1@ABVDateFormatSymbols@1@AAW4UErrorCode@@@Z
??0SimpleDateFormat@icu_52@@QAE@ABVUnicodeString@1@ABVLocale@1@AAW4UErrorCode@@@Z
??0SimpleDateFormat@icu_52@@QAE@ABVUnicodeString@1@PAVDateFormatSymbols@1@AAW4UErrorCode@@@Z
??0SimpleNumberFormatFactory@icu_52@@QAE@ABV01@@Z
??0SimpleNumberFormatFactory@icu_52@@QAE@ABVLocale@1@C@Z
??0SimpleTimeZone@icu_52@@QAE@ABV01@@Z
??0SimpleTimeZone@icu_52@@QAE@HABVUnicodeString@1@@Z
??0SimpleTimeZone@icu_52@@QAE@HABVUnicodeString@1@CCCHCCCHAAW4UErrorCode@@@Z
??0SimpleTimeZone@icu_52@@QAE@HABVUnicodeString@1@CCCHCCCHHAAW4UErrorCode@@@Z
??0SimpleTimeZone@icu_52@@QAE@HABVUnicodeString@1@CCCHW4TimeMode@01@CCCH1HAAW4UErrorCode@@@Z
??0StringSearch@icu_52@@QAE@ABV01@@Z
??0StringSearch@icu_52@@QAE@ABVUnicodeString@1@0ABVLocale@1@PAVBreakIterator@1@AAW4UErrorCode@@@Z
??0StringSearch@icu_52@@QAE@ABVUnicodeString@1@0PAVRuleBasedCollator@1@PAVBreakIterator@1@AAW4UErrorCode@@@Z
??0StringSearch@icu_52@@QAE@ABVUnicodeString@1@AAVCharacterIterator@1@ABVLocale@1@PAVBreakIterator@1@AAW4UErrorCode@@@Z
??0StringSearch@icu_52@@QAE@ABVUnicodeString@1@AAVCharacterIterator@1@PAVRuleBasedCollator@1@PAVBreakIterator@1@AAW4UErrorCode@@@Z
??0TextTrieMap@icu_52@@QAE@ABV01@@Z
??0TextTrieMap@icu_52@@QAE@CP6AXPAX@Z@Z
??0TimeArrayTimeZoneRule@icu_52@@QAE@ABV01@@Z
??0TimeArrayTimeZoneRule@icu_52@@QAE@ABVUnicodeString@1@HHPBNHW4TimeRuleType@DateTimeRule@1@@Z
??0TimeUnit@icu_52@@AAE@W4UTimeUnitFields@01@@Z
??0TimeUnit@icu_52@@QAE@ABV01@@Z
??0TimeUnitAmount@icu_52@@QAE@ABV01@@Z
??0TimeUnitAmount@icu_52@@QAE@ABVFormattable@1@W4UTimeUnitFields@TimeUnit@1@AAW4UErrorCode@@@Z
??0TimeUnitAmount@icu_52@@QAE@NW4UTimeUnitFields@TimeUnit@1@AAW4UErrorCode@@@Z
??0TimeUnitFormat@icu_52@@QAE@AAW4UErrorCode@@@Z
??0TimeUnitFormat@icu_52@@QAE@ABV01@@Z
??0TimeUnitFormat@icu_52@@QAE@ABVLocale@1@AAW4UErrorCode@@@Z
??0TimeUnitFormat@icu_52@@QAE@ABVLocale@1@W4UTimeUnitFormatStyle@@AAW4UErrorCode@@@Z
??0TimeZone@icu_52@@IAE@ABV01@@Z
??0TimeZone@icu_52@@IAE@ABVUnicodeString@1@@Z
??0TimeZone@icu_52@@IAE@XZ
??0TimeZoneFormat@icu_52@@IAE@ABVLocale@1@AAW4UErrorCode@@@Z
??0TimeZoneFormat@icu_52@@QAE@ABV01@@Z
??0TimeZoneGenericNames@icu_52@@AAE@XZ
??0TimeZoneGenericNames@icu_52@@QAE@ABV01@@Z
??0TimeZoneNames@icu_52@@QAE@ABV01@@Z
??0TimeZoneNames@icu_52@@QAE@XZ
??0TimeZoneRule@icu_52@@IAE@ABV01@@Z
??0TimeZoneRule@icu_52@@IAE@ABVUnicodeString@1@HH@Z
??0TimeZoneTransition@icu_52@@QAE@ABV01@@Z
??0TimeZoneTransition@icu_52@@QAE@NABVTimeZoneRule@1@0@Z
??0TimeZoneTransition@icu_52@@QAE@XZ
??0Transliterator@icu_52@@IAE@ABV01@@Z
??0Transliterator@icu_52@@IAE@ABVUnicodeString@1@PAVUnicodeFilter@1@@Z
??0UnicodeReplacer@icu_52@@QAE@ABV01@@Z
??0UnicodeReplacer@icu_52@@QAE@XZ
??0VTimeZone@icu_52@@AAE@XZ
??0VTimeZone@icu_52@@QAE@ABV01@@Z
??0ZNStringPool@icu_52@@QAE@AAW4UErrorCode@@@Z
??1?$EnumSet@W4UDateFormatBooleanAttribute@@$0A@$01@icu_52@@QAE@XZ
??1?$EnumSet@W4UNumberFormatAttribute@@$0BAAA@$0BAAC@@icu_52@@QAE@XZ
??1?$MaybeStackHeaderAndArray@UdecNumber@@D$0CI@@icu_52@@QAE@XZ
??1AlphabeticIndex@icu_52@@UAE@XZ
??1AnnualTimeZoneRule@icu_52@@UAE@XZ
??1BasicTimeZone@icu_52@@UAE@XZ
??1Bucket@AlphabeticIndex@icu_52@@UAE@XZ
??1CECalendar@icu_52@@MAE@XZ
??1Calendar@icu_52@@UAE@XZ
??1CalendarAstronomer@icu_52@@QAE@XZ
??1ChineseCalendar@icu_52@@UAE@XZ
??1ChoiceFormat@icu_52@@UAE@XZ
??1CollationElementIterator@icu_52@@UAE@XZ
??1CollationKey@icu_52@@UAE@XZ
??1Collator@icu_52@@UAE@XZ
??1CollatorFactory@icu_52@@UAE@XZ
??1CompactDecimalFormat@icu_52@@UAE@XZ
??1CompoundTransliterator@icu_52@@UAE@XZ
??1CurrencyAmount@icu_52@@UAE@XZ
??1CurrencyPluralInfo@icu_52@@UAE@XZ
??1CurrencyUnit@icu_52@@UAE@XZ
??1DateFormat@icu_52@@UAE@XZ
??1DateFormatSymbols@icu_52@@UAE@XZ
??1DateIntervalFormat@icu_52@@UAE@XZ
??1DateIntervalInfo@icu_52@@UAE@XZ
??1DateTimePatternGenerator@icu_52@@UAE@XZ
??1DateTimeRule@icu_52@@UAE@XZ
??1DecimalFormat@icu_52@@UAE@XZ
??1DecimalFormatSymbols@icu_52@@UAE@XZ
??1DigitList@icu_52@@QAE@XZ
??1DummyFormat@MessageFormat@icu_52@@UAE@XZ
??1FieldPosition@icu_52@@UAE@XZ
??1FieldPositionIterator@icu_52@@UAE@XZ
??1Format@icu_52@@UAE@XZ
??1Formattable@icu_52@@UAE@XZ
??1GenderInfo@icu_52@@UAE@XZ
??1GregorianCalendar@icu_52@@UAE@XZ
??1HebrewCalendar@icu_52@@UAE@XZ
??1IdentifierInfo@icu_52@@UAE@XZ
??1ImmutableIndex@AlphabeticIndex@icu_52@@UAE@XZ
??1InitialTimeZoneRule@icu_52@@UAE@XZ
??1IslamicCalendar@icu_52@@UAE@XZ
??1LocaleDisplayNames@icu_52@@UAE@XZ
??1MatchInfoCollection@TimeZoneNames@icu_52@@UAE@XZ
??1Measure@icu_52@@UAE@XZ
??1MeasureFormat@icu_52@@UAE@XZ
??1MeasureUnit@icu_52@@UAE@XZ
??1MessageFormat@icu_52@@UAE@XZ
??1NumberFormat@icu_52@@UAE@XZ
??1NumberFormatFactory@icu_52@@UAE@XZ
??1NumberingSystem@icu_52@@UAE@XZ
??1OlsonTimeZone@icu_52@@UAE@XZ
??1PluralAvailableLocalesEnumeration@icu_52@@UAE@XZ
??1PluralFormat@icu_52@@UAE@XZ
??1PluralRules@icu_52@@UAE@XZ
??1PluralSelector@PluralFormat@icu_52@@UAE@XZ
??1PluralSelectorAdapter@PluralFormat@icu_52@@UAE@XZ
??1PluralSelectorProvider@MessageFormat@icu_52@@UAE@XZ
??1RegexMatcher@icu_52@@UAE@XZ
??1RegexPattern@icu_52@@UAE@XZ
??1Region@icu_52@@UAE@XZ
??1RuleBasedCollator@icu_52@@UAE@XZ
??1RuleBasedNumberFormat@icu_52@@UAE@XZ
??1RuleBasedTimeZone@icu_52@@UAE@XZ
??1ScriptSet@icu_52@@QAE@XZ
??1SearchIterator@icu_52@@UAE@XZ
??1SelectFormat@icu_52@@UAE@XZ
??1SimpleDateFormat@icu_52@@UAE@XZ
??1SimpleNumberFormatFactory@icu_52@@UAE@XZ
??1SimpleTimeZone@icu_52@@UAE@XZ
??1StringSearch@icu_52@@UAE@XZ
??1TextTrieMap@icu_52@@UAE@XZ
??1TimeArrayTimeZoneRule@icu_52@@UAE@XZ
??1TimeUnit@icu_52@@UAE@XZ
??1TimeUnitAmount@icu_52@@UAE@XZ
??1TimeUnitFormat@icu_52@@UAE@XZ
??1TimeZone@icu_52@@UAE@XZ
??1TimeZoneFormat@icu_52@@UAE@XZ
??1TimeZoneGenericNames@icu_52@@UAE@XZ
??1TimeZoneNames@icu_52@@UAE@XZ
??1TimeZoneRule@icu_52@@UAE@XZ
??1TimeZoneTransition@icu_52@@UAE@XZ
??1Transliterator@icu_52@@UAE@XZ
??1UnicodeReplacer@icu_52@@UAE@XZ
??1VTimeZone@icu_52@@UAE@XZ
??1ZNStringPool@icu_52@@QAE@XZ
??2DigitList@icu_52@@SAPAXIPAXW4EStackMode@1@@Z
??3DigitList@icu_52@@SAXPAX0W4EStackMode@1@@Z
??4?$EnumSet@W4UDateFormatBooleanAttribute@@$0A@$01@icu_52@@QAEABV01@ABV01@@Z
??4?$EnumSet@W4UNumberFormatAttribute@@$0BAAA@$0BAAC@@icu_52@@QAEABV01@ABV01@@Z
??4?$MaybeStackHeaderAndArray@UdecNumber@@D$0CI@@icu_52@@AAEXABV01@@Z
??4AlphabeticIndex@icu_52@@AAEAAV01@ABV01@@Z
??4AnnualTimeZoneRule@icu_52@@QAEAAV01@ABV01@@Z
??4BasicTimeZone@icu_52@@QAEAAV01@ABV01@@Z
??4Bucket@AlphabeticIndex@icu_52@@QAEAAV012@ABV012@@Z
??4CECalendar@icu_52@@IAEAAV01@ABV01@@Z
??4Calendar@icu_52@@IAEAAV01@ABV01@@Z
??4CalendarAstronomer@icu_52@@QAEAAV01@ABV01@@Z
??4ChineseCalendar@icu_52@@QAEAAV01@ABV01@@Z
??4ChoiceFormat@icu_52@@QAEABV01@ABV01@@Z
??4CollationElementIterator@icu_52@@AAEABV01@ABV01@@Z
??4CollationKey@icu_52@@QAEABV01@ABV01@@Z
??4CollatorFactory@icu_52@@QAEAAV01@ABV01@@Z
??4CompactDecimalFormat@icu_52@@QAEAAV01@ABV01@@Z
??4CompoundTransliterator@icu_52@@AAEAAV01@ABV01@@Z
??4CurrencyAmount@icu_52@@QAEAAV01@ABV01@@Z
??4CurrencyPluralInfo@icu_52@@QAEAAV01@ABV01@@Z
??4CurrencyUnit@icu_52@@QAEAAV01@ABV01@@Z
??4DateFormat@icu_52@@IAEAAV01@ABV01@@Z
??4DateFormatSymbols@icu_52@@QAEAAV01@ABV01@@Z
??4DateIntervalFormat@icu_52@@IAEAAV01@ABV01@@Z
??4DateIntervalInfo@icu_52@@QAEAAV01@ABV01@@Z
??4DateTimePatternGenerator@icu_52@@AAEAAV01@ABV01@@Z
??4DateTimeRule@icu_52@@QAEAAV01@ABV01@@Z
??4DecimalFormat@icu_52@@QAEAAV01@ABV01@@Z
??4DecimalFormatSymbols@icu_52@@QAEAAV01@ABV01@@Z
??4DigitList@icu_52@@QAEAAV01@ABV01@@Z
??4DummyFormat@MessageFormat@icu_52@@QAEAAV012@ABV012@@Z
??4Ecliptic@CalendarAstronomer@icu_52@@QAEAAV012@ABV012@@Z
??4Equatorial@CalendarAstronomer@icu_52@@QAEAAV012@ABV012@@Z
??4FieldPosition@icu_52@@QAEAAV01@ABV01@@Z
??4FieldPositionIterator@icu_52@@QAEAAV01@ABV01@@Z
??4FixedDecimal@icu_52@@QAEAAV01@ABV01@@Z
??4Format@icu_52@@IAEAAV01@ABV01@@Z
??4Formattable@icu_52@@QAEAAV01@ABV01@@Z
??4GregorianCalendar@icu_52@@QAEAAV01@ABV01@@Z
??4Horizon@CalendarAstronomer@icu_52@@QAEAAV012@ABV012@@Z
??4IdentifierInfo@icu_52@@QAEAAV01@ABV01@@Z
??4ImmutableIndex@AlphabeticIndex@icu_52@@QAEAAV012@ABV012@@Z
??4InitialTimeZoneRule@icu_52@@QAEAAV01@ABV01@@Z
??4IslamicCalendar@icu_52@@QAEAAV01@ABV01@@Z
??4LocaleDisplayNames@icu_52@@QAEAAV01@ABV01@@Z
??4MatchInfoCollection@TimeZoneNames@icu_52@@QAEAAV012@ABV012@@Z
??4Measure@icu_52@@QAEAAV01@ABV01@@Z
??4MeasureFormat@icu_52@@QAEAAV01@ABV01@@Z
??4MeasureUnit@icu_52@@QAEAAV01@ABV01@@Z
??4MessageFormat@icu_52@@QAEABV01@ABV01@@Z
??4MoonAge@CalendarAstronomer@icu_52@@QAEAAV012@ABV012@@Z
??4NumberFormat@icu_52@@IAEAAV01@ABV01@@Z
??4NumberFormatFactory@icu_52@@QAEAAV01@ABV01@@Z
??4NumberingSystem@icu_52@@QAEAAV01@ABV01@@Z
??4OlsonTimeZone@icu_52@@QAEAAV01@ABV01@@Z
??4PluralAvailableLocalesEnumeration@icu_52@@QAEAAV01@ABV01@@Z
??4PluralFormat@icu_52@@QAEAAV01@ABV01@@Z
??4PluralRules@icu_52@@QAEAAV01@ABV01@@Z
??4PluralSelector@PluralFormat@icu_52@@QAEAAV012@ABV012@@Z
??4PluralSelectorAdapter@PluralFormat@icu_52@@QAEAAV012@ABV012@@Z
??4RegexPattern@icu_52@@QAEAAV01@ABV01@@Z
??4Region@icu_52@@QAEAAV01@ABV01@@Z
??4RuleBasedCollator@icu_52@@QAEAAV01@ABV01@@Z
??4RuleBasedNumberFormat@icu_52@@QAEAAV01@ABV01@@Z
??4RuleBasedTimeZone@icu_52@@QAEAAV01@ABV01@@Z
??4ScriptSet@icu_52@@QAEAAV01@ABV01@@Z
??4SearchIterator@icu_52@@IAEAAV01@ABV01@@Z
??4SelectFormat@icu_52@@QAEAAV01@ABV01@@Z
??4SimpleDateFormat@icu_52@@QAEAAV01@ABV01@@Z
??4SimpleTimeZone@icu_52@@QAEAAV01@ABV01@@Z
??4StringSearch@icu_52@@QAEAAV01@ABV01@@Z
??4TextTrieMap@icu_52@@QAEAAV01@ABV01@@Z
??4TimeArrayTimeZoneRule@icu_52@@QAEAAV01@ABV01@@Z
??4TimeUnit@icu_52@@QAEAAV01@ABV01@@Z
??4TimeUnitAmount@icu_52@@QAEAAV01@ABV01@@Z
??4TimeUnitFormat@icu_52@@QAEAAV01@ABV01@@Z
??4TimeZone@icu_52@@IAEAAV01@ABV01@@Z
??4TimeZoneFormat@icu_52@@QAEAAV01@ABV01@@Z
??4TimeZoneGenericNames@icu_52@@QAEAAV01@ABV01@@Z
??4TimeZoneNames@icu_52@@QAEAAV01@ABV01@@Z
??4TimeZoneRule@icu_52@@IAEAAV01@ABV01@@Z
??4TimeZoneTransition@icu_52@@QAEAAV01@ABV01@@Z
??4Transliterator@icu_52@@IAEAAV01@ABV01@@Z
??4UnicodeReplacer@icu_52@@QAEAAV01@ABV01@@Z
??4VTimeZone@icu_52@@QAEAAV01@ABV01@@Z
??4ZNStringPool@icu_52@@QAEAAV01@ABV01@@Z
??4ZoneMeta@icu_52@@QAEAAV01@ABV01@@Z
??8?$MaybeStackHeaderAndArray@UdecNumber@@D$0CI@@icu_52@@AAE_NABV01@@Z
??8AlphabeticIndex@icu_52@@EBECABV01@@Z
??8AnnualTimeZoneRule@icu_52@@UBECABVTimeZoneRule@1@@Z
??8Calendar@icu_52@@UBECABV01@@Z
??8ChoiceFormat@icu_52@@UBECABVFormat@1@@Z
??8CollationElementIterator@icu_52@@QBECABV01@@Z
??8CollationKey@icu_52@@QBECABV01@@Z
??8Collator@icu_52@@UBECABV01@@Z
??8CompactDecimalFormat@icu_52@@UBECABVFormat@1@@Z
??8CurrencyPluralInfo@icu_52@@QBECABV01@@Z
??8CurrencyUnit@icu_52@@UBECABVUObject@1@@Z
??8DateFormat@icu_52@@UBECABVFormat@1@@Z
??8DateFormatSymbols@icu_52@@QBECABV01@@Z
??8DateIntervalFormat@icu_52@@UBECABVFormat@1@@Z
??8DateIntervalInfo@icu_52@@UBECABV01@@Z
??8DateTimePatternGenerator@icu_52@@QBECABV01@@Z
??8DateTimeRule@icu_52@@QBECABV01@@Z
??8DecimalFormat@icu_52@@UBECABVFormat@1@@Z
??8DecimalFormatSymbols@icu_52@@QBECABV01@@Z
??8DigitList@icu_52@@QBECABV01@@Z
??8DummyFormat@MessageFormat@icu_52@@UBECABVFormat@2@@Z
??8FieldPosition@icu_52@@QBECABV01@@Z
??8FieldPositionIterator@icu_52@@QBECABV01@@Z
??8Format@icu_52@@UBECABV01@@Z
??8Formattable@icu_52@@QBECABV01@@Z
??8InitialTimeZoneRule@icu_52@@UBECABVTimeZoneRule@1@@Z
??8Measure@icu_52@@QBECABVUObject@1@@Z
??8MessageFormat@icu_52@@UBECABVFormat@1@@Z
??8NumberFormat@icu_52@@UBECABVFormat@1@@Z
??8OlsonTimeZone@icu_52@@UBECABVTimeZone@1@@Z
??8PluralFormat@icu_52@@UBECABVFormat@1@@Z
??8PluralRules@icu_52@@UBECABV01@@Z
??8RegexPattern@icu_52@@QBECABV01@@Z
??8Region@icu_52@@QBECABV01@@Z
??8RuleBasedCollator@icu_52@@UBECABVCollator@1@@Z
??8RuleBasedNumberFormat@icu_52@@UBECABVFormat@1@@Z
??8RuleBasedTimeZone@icu_52@@UBECABVTimeZone@1@@Z
??8ScriptSet@icu_52@@QBECABV01@@Z
??8SearchIterator@icu_52@@UBECABV01@@Z
??8SelectFormat@icu_52@@UBECABVFormat@1@@Z
??8SimpleDateFormat@icu_52@@UBECABVFormat@1@@Z
??8SimpleTimeZone@icu_52@@UBECABVTimeZone@1@@Z
??8StringSearch@icu_52@@UBECABVSearchIterator@1@@Z
??8TimeArrayTimeZoneRule@icu_52@@UBECABVTimeZoneRule@1@@Z
??8TimeUnit@icu_52@@UBECABVUObject@1@@Z
??8TimeUnitAmount@icu_52@@UBECABVUObject@1@@Z
??8TimeUnitFormat@icu_52@@UBECABVFormat@1@@Z

Sections

.text
Size: 1016KB - Virtual size: 1015KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 423KB - Virtual size: 422KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Loader.dll
.dll windows x86

Password: war2023

0c3e803dd8e326c1278d7872e609b579

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:c5:30:70:3a:21:0e:c1:d6:f8:3c:b4:fe:11:18:c5
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

22/09/2022, 00:00

Not After

19/10/2023, 23:59

Subject

SERIALNUMBER=5567037485,CN=Spotify AB,O=Spotify AB,L=Stockholm,C=SE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025345

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

53:0f:0d:b2:bf:4b:e6:72:ba:9a:60:c8:6e:69:ae:83:ac:5c:89:0a:b2:15:0b:3a:0d:40:54:87:48:c1:cd:1c
Signer

Actual PE Digest

53:0f:0d:b2:bf:4b:e6:72:ba:9a:60:c8:6e:69:ae:83:ac:5c:89:0a:b2:15:0b:3a:0d:40:54:87:48:c1:cd:1c

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

SERIALNUMBER=5567037485,CN=Spotify AB,O=Spotify AB,L=Stockholm,C=SE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025345

16/01/2023, 13:41
Valid: true

Chain 1

SERIALNUMBER=5567037485,CN=Spotify AB,O=Spotify AB,L=Stockholm,C=SE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025345

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Chain 2

SERIALNUMBER=5567037485,CN=Spotify AB,O=Spotify AB,L=Stockholm,C=SE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025345

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateEventW
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesExW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
IsWow64Process
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ResetEvent
RtlUnwind
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObjectEx
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile

advapi32

GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
OpenProcessToken
RegCloseKey
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA

cfgmgr32

CM_Get_Child
CM_Get_DevNode_Registry_PropertyW
CM_Get_DevNode_Status
CM_Get_Device_IDW
CM_Get_Device_ID_ListW
CM_Get_Device_ID_List_SizeW
CM_Get_Sibling
CM_Locate_DevNodeW
CM_Open_DevNode_Key

Exports

Exports

vkAcquireNextImage2KHR
vkAcquireNextImageKHR
vkAllocateCommandBuffers
vkAllocateDescriptorSets
vkAllocateMemory
vkBeginCommandBuffer
vkBindBufferMemory
vkBindBufferMemory2
vkBindImageMemory
vkBindImageMemory2
vkCmdBeginQuery
vkCmdBeginRenderPass
vkCmdBeginRenderPass2
vkCmdBeginRendering
vkCmdBindDescriptorSets
vkCmdBindIndexBuffer
vkCmdBindPipeline
vkCmdBindVertexBuffers
vkCmdBindVertexBuffers2
vkCmdBlitImage
vkCmdBlitImage2
vkCmdClearAttachments
vkCmdClearColorImage
vkCmdClearDepthStencilImage
vkCmdCopyBuffer
vkCmdCopyBuffer2
vkCmdCopyBufferToImage
vkCmdCopyBufferToImage2
vkCmdCopyImage
vkCmdCopyImage2
vkCmdCopyImageToBuffer
vkCmdCopyImageToBuffer2
vkCmdCopyQueryPoolResults
vkCmdDispatch
vkCmdDispatchBase
vkCmdDispatchIndirect
vkCmdDraw
vkCmdDrawIndexed
vkCmdDrawIndexedIndirect
vkCmdDrawIndexedIndirectCount
vkCmdDrawIndirect
vkCmdDrawIndirectCount
vkCmdEndQuery
vkCmdEndRenderPass
vkCmdEndRenderPass2
vkCmdEndRendering
vkCmdExecuteCommands
vkCmdFillBuffer
vkCmdNextSubpass
vkCmdNextSubpass2
vkCmdPipelineBarrier
vkCmdPipelineBarrier2
vkCmdPushConstants
vkCmdResetEvent
vkCmdResetEvent2
vkCmdResetQueryPool
vkCmdResolveImage
vkCmdResolveImage2
vkCmdSetBlendConstants
vkCmdSetCullMode
vkCmdSetDepthBias
vkCmdSetDepthBiasEnable
vkCmdSetDepthBounds
vkCmdSetDepthBoundsTestEnable
vkCmdSetDepthCompareOp
vkCmdSetDepthTestEnable
vkCmdSetDepthWriteEnable
vkCmdSetDeviceMask
vkCmdSetEvent
vkCmdSetEvent2
vkCmdSetFrontFace
vkCmdSetLineWidth
vkCmdSetPrimitiveRestartEnable
vkCmdSetPrimitiveTopology
vkCmdSetRasterizerDiscardEnable
vkCmdSetScissor
vkCmdSetScissorWithCount
vkCmdSetStencilCompareMask
vkCmdSetStencilOp
vkCmdSetStencilReference
vkCmdSetStencilTestEnable
vkCmdSetStencilWriteMask
vkCmdSetViewport
vkCmdSetViewportWithCount
vkCmdUpdateBuffer
vkCmdWaitEvents
vkCmdWaitEvents2
vkCmdWriteTimestamp
vkCmdWriteTimestamp2
vkCreateBuffer
vkCreateBufferView
vkCreateCommandPool
vkCreateComputePipelines
vkCreateDescriptorPool
vkCreateDescriptorSetLayout
vkCreateDescriptorUpdateTemplate
vkCreateDevice
vkCreateDisplayModeKHR
vkCreateDisplayPlaneSurfaceKHR
vkCreateEvent
vkCreateFence
vkCreateFramebuffer
vkCreateGraphicsPipelines
vkCreateHeadlessSurfaceEXT
vkCreateImage
vkCreateImageView
vkCreateInstance
vkCreatePipelineCache
vkCreatePipelineLayout
vkCreatePrivateDataSlot
vkCreateQueryPool
vkCreateRenderPass
vkCreateRenderPass2
vkCreateSampler
vkCreateSamplerYcbcrConversion
vkCreateSemaphore
vkCreateShaderModule
vkCreateSharedSwapchainsKHR
vkCreateSwapchainKHR
vkCreateWin32SurfaceKHR
vkDestroyBuffer
vkDestroyBufferView
vkDestroyCommandPool
vkDestroyDescriptorPool
vkDestroyDescriptorSetLayout
vkDestroyDescriptorUpdateTemplate
vkDestroyDevice
vkDestroyEvent
vkDestroyFence
vkDestroyFramebuffer
vkDestroyImage
vkDestroyImageView
vkDestroyInstance
vkDestroyPipeline
vkDestroyPipelineCache
vkDestroyPipelineLayout
vkDestroyPrivateDataSlot
vkDestroyQueryPool
vkDestroyRenderPass
vkDestroySampler
vkDestroySamplerYcbcrConversion
vkDestroySemaphore
vkDestroyShaderModule
vkDestroySurfaceKHR
vkDestroySwapchainKHR
vkDeviceWaitIdle
vkEndCommandBuffer
vkEnumerateDeviceExtensionProperties
vkEnumerateDeviceLayerProperties
vkEnumerateInstanceExtensionProperties
vkEnumerateInstanceLayerProperties
vkEnumerateInstanceVersion
vkEnumeratePhysicalDeviceGroups
vkEnumeratePhysicalDevices
vkFlushMappedMemoryRanges
vkFreeCommandBuffers
vkFreeDescriptorSets
vkFreeMemory
vkGetBufferDeviceAddress
vkGetBufferMemoryRequirements
vkGetBufferMemoryRequirements2
vkGetBufferOpaqueCaptureAddress
vkGetDescriptorSetLayoutSupport
vkGetDeviceBufferMemoryRequirements
vkGetDeviceGroupPeerMemoryFeatures
vkGetDeviceGroupPresentCapabilitiesKHR
vkGetDeviceGroupSurfacePresentModesKHR
vkGetDeviceImageMemoryRequirements
vkGetDeviceImageSparseMemoryRequirements
vkGetDeviceMemoryCommitment
vkGetDeviceMemoryOpaqueCaptureAddress
vkGetDeviceProcAddr
vkGetDeviceQueue
vkGetDeviceQueue2
vkGetDisplayModeProperties2KHR
vkGetDisplayModePropertiesKHR
vkGetDisplayPlaneCapabilities2KHR
vkGetDisplayPlaneCapabilitiesKHR
vkGetDisplayPlaneSupportedDisplaysKHR
vkGetEventStatus
vkGetFenceStatus
vkGetImageMemoryRequirements
vkGetImageMemoryRequirements2
vkGetImageSparseMemoryRequirements
vkGetImageSparseMemoryRequirements2
vkGetImageSubresourceLayout
vkGetInstanceProcAddr
vkGetPhysicalDeviceDisplayPlaneProperties2KHR
vkGetPhysicalDeviceDisplayPlanePropertiesKHR
vkGetPhysicalDeviceDisplayProperties2KHR
vkGetPhysicalDeviceDisplayPropertiesKHR
vkGetPhysicalDeviceExternalBufferProperties
vkGetPhysicalDeviceExternalFenceProperties
vkGetPhysicalDeviceExternalSemaphoreProperties
vkGetPhysicalDeviceFeatures
vkGetPhysicalDeviceFeatures2
vkGetPhysicalDeviceFormatProperties
vkGetPhysicalDeviceFormatProperties2
vkGetPhysicalDeviceImageFormatProperties
vkGetPhysicalDeviceImageFormatProperties2
vkGetPhysicalDeviceMemoryProperties
vkGetPhysicalDeviceMemoryProperties2
vkGetPhysicalDevicePresentRectanglesKHR
vkGetPhysicalDeviceProperties
vkGetPhysicalDeviceProperties2
vkGetPhysicalDeviceQueueFamilyProperties
vkGetPhysicalDeviceQueueFamilyProperties2
vkGetPhysicalDeviceSparseImageFormatProperties
vkGetPhysicalDeviceSparseImageFormatProperties2
vkGetPhysicalDeviceSurfaceCapabilities2KHR
vkGetPhysicalDeviceSurfaceCapabilitiesKHR
vkGetPhysicalDeviceSurfaceFormats2KHR
vkGetPhysicalDeviceSurfaceFormatsKHR
vkGetPhysicalDeviceSurfacePresentModesKHR
vkGetPhysicalDeviceSurfaceSupportKHR
vkGetPhysicalDeviceToolProperties
vkGetPhysicalDeviceWin32PresentationSupportKHR
vkGetPipelineCacheData
vkGetPrivateData
vkGetQueryPoolResults
vkGetRenderAreaGranularity
vkGetSemaphoreCounterValue
vkGetSwapchainImagesKHR
vkInvalidateMappedMemoryRanges
vkMapMemory
vkMergePipelineCaches
vkQueueBindSparse
vkQueuePresentKHR
vkQueueSubmit
vkQueueSubmit2
vkQueueWaitIdle
vkResetCommandBuffer
vkResetCommandPool
vkResetDescriptorPool
vkResetEvent
vkResetFences
vkResetQueryPool
vkSetEvent
vkSetPrivateData
vkSignalSemaphore
vkTrimCommandPool
vkUnmapMemory
vkUpdateDescriptorSetWithTemplate
vkUpdateDescriptorSets
vkWaitForFences
vkWaitSemaphores

Sections

.text
Size: 472KB - Virtual size: 471KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 178B

.rsrc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Runner.lnk
.lnk
WZone_psedpacket.dll
.dll windows x86

Password: war2023

3063fe73454b695324c81058a0022320

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetProcAddress
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
EncodePointer
DecodePointer
IsProcessorFeaturePresent
GetLastError
SetLastError
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetModuleFileNameW
LoadLibraryExW
RtlUnwind
HeapAlloc
HeapReAlloc
SetStdHandle
WriteConsoleW
GetStringTypeW
OutputDebugStringW
HeapSize
LCMapStringW
FlushFileBuffers
CreateFileW
CloseHandle

Exports

Exports

gmod13_close
gmod13_open

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
WarHack.exe
.exe windows x86

Password: war2023

933c3c1939cec1543334fac4d41f0119

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AdjustTokenPrivileges
GetUserNameA
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueA

kernel32

AddAtomW
DeleteCriticalSection
EnterCriticalSection
FreeConsole
FreeLibrary
GetLastError
GetLogicalDrives
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InitializeCriticalSection
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__getmainargs
__initenv
__p__acmdln
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_initterm
_iob
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 288B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/14
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/41
Size: 512B - Virtual size: 175B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/55
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/67
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/80
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
load.lua
.js
menu.lua

Sharing

General

Malware Config

Signatures

Files

Password: war2023

Password: war2023

fa2958ff8d7224cbe6bdde67c9ab40d3

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39Certificate

Key Usages

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

08:4c:af:4d:f4:99:14:1d:40:4b:71:99:aa:2c:21:31Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

77:c0:79:2e:ad:98:0a:68:b3:84:2f:37:c3:00:f9:c9:0b:6f:6b:b6Signer

Signature Validations

Verification

31/08/2016, 23:25 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

icuuc

kernel32

Exports

Exports

Sections

.text Size: 1016KB - Virtual size: 1015KB

.rdata Size: 423KB - Virtual size: 422KB

.data Size: 17KB - Virtual size: 26KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 63KB - Virtual size: 62KB

Password: war2023

0c3e803dd8e326c1278d7872e609b579

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

04:c5:30:70:3a:21:0e:c1:d6:f8:3c:b4:fe:11:18:c5Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

53:0f:0d:b2:bf:4b:e6:72:ba:9a:60:c8:6e:69:ae:83:ac:5c:89:0a:b2:15:0b:3a:0d:40:54:87:48:c1:cd:1cSigner

Signature Validations

Verification

16/01/2023, 13:41 Valid: true

Chain 1

Chain 2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

cfgmgr32

Exports

Exports

Sections

.text Size: 472KB - Virtual size: 471KB

.rdata Size: 194KB - Virtual size: 193KB

.data Size: 7KB - Virtual size: 13KB

.00cfg Size: 512B - Virtual size: 4B

.tls Size: 512B - Virtual size: 9B

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

08:4c:af:4d:f4:99:14:1d:40:4b:71:99:aa:2c:21:31
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

77:c0:79:2e:ad:98:0a:68:b3:84:2f:37:c3:00:f9:c9:0b:6f:6b:b6
Signer

31/08/2016, 23:25
Valid: true

.text
Size: 1016KB - Virtual size: 1015KB

.rdata
Size: 423KB - Virtual size: 422KB

.data
Size: 17KB - Virtual size: 26KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 63KB - Virtual size: 62KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

04:c5:30:70:3a:21:0e:c1:d6:f8:3c:b4:fe:11:18:c5
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

53:0f:0d:b2:bf:4b:e6:72:ba:9a:60:c8:6e:69:ae:83:ac:5c:89:0a:b2:15:0b:3a:0d:40:54:87:48:c1:cd:1c
Signer

16/01/2023, 13:41
Valid: true

.text
Size: 472KB - Virtual size: 471KB

.rdata
Size: 194KB - Virtual size: 193KB

.data
Size: 7KB - Virtual size: 13KB

.00cfg
Size: 512B - Virtual size: 4B

.tls
Size: 512B - Virtual size: 9B

.voltbl
Size: 512B - Virtual size: 178B

.rsrc
Size: 1024B - Virtual size: 720B

.reloc
Size: 27KB - Virtual size: 27KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 19KB - Virtual size: 18KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 3KB - Virtual size: 3KB

.text
Size: 15KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 132B

.rdata
Size: 177KB - Virtual size: 177KB

/4
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 288B

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 48B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 1KB - Virtual size: 1KB

/14
Size: 512B - Virtual size: 56B

/29
Size: 4KB - Virtual size: 3KB

/41
Size: 512B - Virtual size: 175B

/55
Size: 512B - Virtual size: 264B

/67
Size: 512B - Virtual size: 56B

/80
Size: 512B - Virtual size: 156B