lumma | 0b415a18fbc825d548cd561a13f2dec853d3e0420e8276433f35bc15f94d0673[.]zip

0b415a18fbc825d548cd561a13f2dec853d3e0420e8276433f35bc15f94d0673.zip

.zip

Password: infected

0b415a18fbc825d548cd561a13f2dec853d3e0420e8276433f35bc15f94d0673.zip

.zip

Password: infected

DefaultData/Data/QtCore4.dll

.dll windows x86

Password: infected

ab8e1e9eb2026051e03c52024771ef37

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DEBUG_STRIPPED

Imports

libgcc_s_dw2-1

_Unwind_DeleteException

_Unwind_GetDataRelBase

_Unwind_GetIPInfo

_Unwind_GetLanguageSpecificData

_Unwind_GetRegionStart

_Unwind_GetTextRelBase

_Unwind_RaiseException

_Unwind_Resume

_Unwind_Resume_or_Rethrow

_Unwind_SetGR

_Unwind_SetIP

__deregister_frame_info

__divdi3

__emutls_get_address

__moddi3

__register_frame_info

__udivdi3

__umoddi3

advapi32

CopySid

FreeSid

GetLengthSid

GetTokenInformation

OpenProcessToken

RegCloseKey

RegCreateKeyExW

RegDeleteKeyW

RegDeleteValueW

RegEnumKeyExW

RegEnumValueW

RegFlushKey

RegOpenKeyExW

RegQueryInfoKeyW

RegQueryValueExW

RegSetValueExW

kernel32

CloseHandle

CompareStringW

CopyFileW

CreateDirectoryW

CreateEventW

CreateFileMappingW

CreateFileW

CreatePipe

CreateProcessW

CreateSemaphoreA

CreateSemaphoreW

CreateThread

DeleteCriticalSection

DeleteFileW

DeviceIoControl

DuplicateHandle

EnterCriticalSection

FileTimeToSystemTime

FindClose

FindCloseChangeNotification

FindFirstChangeNotificationW

FindFirstFileExW

FindFirstFileW

FindNextChangeNotification

FindNextFileW

FormatMessageW

FreeEnvironmentStringsW

FreeLibrary

GetCommandLineW

GetCurrencyFormatW

GetCurrentDirectoryW

GetCurrentProcess

GetCurrentProcessId

GetCurrentThread

GetCurrentThreadId

GetDateFormatW

GetEnvironmentStringsW

GetExitCodeProcess

GetFileAttributesExW

GetFileAttributesW

GetFileInformationByHandle

GetFileType

GetFullPathNameW

GetLastError

GetLocalTime

GetLocaleInfoW

GetLogicalDrives

GetModuleFileNameW

GetModuleHandleA

GetModuleHandleW

GetOverlappedResult

GetProcAddress

GetStartupInfoW

GetStdHandle

GetSystemDirectoryW

GetSystemInfo

GetSystemTime

GetTempPathW

GetThreadPriority

GetTickCount

GetTimeFormatW

GetUserDefaultLCID

GetUserDefaultUILanguage

GetVersionExW

InitializeCriticalSection

InterlockedDecrement

InterlockedExchange

InterlockedIncrement

IsDBCSLeadByteEx

LeaveCriticalSection

LoadLibraryExW

LoadLibraryW

LocalFree

MapViewOfFile

MoveFileW

MultiByteToWideChar

OpenFileMappingW

OutputDebugStringW

PeekNamedPipe

QueryPerformanceCounter

QueryPerformanceFrequency

ReadFile

ReleaseSemaphore

RemoveDirectoryW

ResetEvent

ResumeThread

SetCurrentDirectoryW

SetEndOfFile

SetErrorMode

SetEvent

SetFilePointer

SetFilePointerEx

SetLastError

SetThreadPriority

Sleep

SwitchToThread

SystemTimeToTzSpecificLocalTime

TerminateProcess

TerminateThread

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

UnmapViewOfFile

VirtualQuery

WaitForMultipleObjects

WaitForSingleObject

WaitForSingleObjectEx

WideCharToMultiByte

WriteFile

mingwm10

__mingwthr_key_dtor

msvcrt

_close

_lseek

_open

_putenv

_read

_write

__dllonexit

__lc_codepage

__mb_cur_max

__p__environ

_assert

_beginthreadex

_clearfp

_close

_control87

_endthreadex

_errno

_filelengthi64

_get_osfhandle

_getdrive

_iob

_isctype

_lseeki64

_open_osfhandle

_pctype

_read

_tzname

_tzset

_vsnprintf

_waccess

_wchmod

_wgetdcwd

_wgetenv

_write

abort

acos

asin

atan2

calloc

ceil

cos

fclose

fflush

fgetpos

fgets

floor

fprintf

fputc

fputs

fread

free

fsetpos

fwrite

getenv

gmtime

localeconv

localtime

malloc

memchr

memcmp

memmove

memset

mktime

pow

printf

puts

rand

realloc

sin

sprintf

sqrt

srand

strcat

strchr

strcmp

strcpy

strerror

strlen

strncmp

strncpy

wcschr

wcslen

ole32

CoCreateGuid

CoCreateInstance

CoInitialize

CoUninitialize

user32

CallNextHookEx

CharNextExA

CreateWindowExW

DefWindowProcW

DestroyWindow

DispatchMessageW

EnumWindows

GetMessageW

GetQueueStatus

GetWindowLongW

GetWindowThreadProcessId

KillTimer

MsgWaitForMultipleObjectsEx

PeekMessageW

PostMessageW

PostThreadMessageW

RegisterClassW

SetTimer

SetWindowLongW

SetWindowsHookExW

TranslateMessage

UnhookWindowsHookEx

UnregisterClassW

ws2_32

WSAAsyncSelect

Exports

_Z10forcepointR11QTextStream

_Z10noshowbaseR11QTextStream

_Z10qAllocMoreii

_Z10qHBNewFacePvPF8HB_ErrorS_jPhPjE

_Z10qShapeItemP14HB_ShaperItem_

_Z10qvsnprintfPcjPKcS_

_Z10scientificR11QTextStream

_Z11noforcesignR11QTextStream

_Z11qHBFreeFaceP11HB_FaceRec_

_Z11qUncompressPKhi

_Z11qWinAppInstv

_Z11qt_assert_xPKcS0_S0_i

_Z11qt_int_sqrtj

_Z12noforcepointR11QTextStream

_Z12qAppFileNamev

_Z12qFreeAlignedPv

_Z12qInstallPathv

_Z12qSharedBuildv

_Z13lowercasebaseR11QTextStream

_Z13qErrnoWarningPKcz

_Z13qErrnoWarningiPKcz

_Z13qFlagLocationPKc

_Z13uppercasebaseR11QTextStream

_Z13winGetMessageP6tagMSGP6HWND__jj

_Z14qDecodeDataUrlRK4QUrl

_Z14qMallocAlignedjj

_Z14qSystemWarningPKci

_Z14qWinAppCmdShowv

_Z14qWinMsgHandler9QtMsgTypePKc

_Z14winPeekMessageP6tagMSGP6HWND__jjj

_Z14winPostMessageP6HWND__jjl

_Z15lowercasedigitsR11QTextStream

_Z15qAddPostRoutinePFvvE

_Z15qInitResourceIOv

_Z15qIsEffectiveTLDRK7QString

_Z15qReallocAlignedPvjjj

_Z15qTopLevelDomainRK7QString

_Z15qWinAppPrevInstv

_Z15qt_error_stringi

_Z15uppercasedigitsR11QTextStream

_Z16qInstallPathBinsv

_Z16qInstallPathDatav

_Z16qInstallPathDocsv

_Z16qInstallPathLibsv

_Z16qt_check_pointerPKci

_Z17qt_localeFromLCIDm

_Z17qt_message_output9QtMsgTypePKc

_Z18qDetectCPUFeaturesv

_Z18qGetCharAttributesPKtjPK13HB_ScriptItemjP17HB_CharAttributes

_Z18qInstallMsgHandlerPFv9QtMsgTypePKcE

_Z18qRemovePostRoutinePFvvE

_Z19qInstallPathHeadersv

_Z19qInstallPathPluginsv

_Z19qInstallPathSysconfv

_Z19qcoreVariantHandlerv

_Z20qt_qFindChild_helperPK7QObjectRK7QStringRK11QMetaObject

_Z21qDeleteInEventHandlerP7QObject

_Z21qRegisterResourceDataiPKhS0_S0_

_Z21qt_call_post_routinesv

_Z21qt_regexp_toCanonicalRK7QStringN7QRegExp13PatternSyntaxE

_Z23qUnregisterResourceDataiPKhS0_S0_

_Z23qt_qFindChildren_helperPK7QObjectRK7QStringPK7QRegExpRK11QMetaObjectP5QListIPvE

_Z24qGlobalPostedEventsCountv

_Z24qInstallPathTranslationsv

_Z24qcoreStateMachineHandlerv

_Z2wsR11QTextStream

_Z32qt_register_signal_spy_callbacksRK21QSignalSpyCallbackSet

_Z37qRegisterStaticPluginInstanceFunctionPFP7QObjectvE

_Z3binR11QTextStream

_Z3bomR11QTextStream

_Z3decR11QTextStream

_Z3hexR11QTextStream

_Z3octR11QTextStream

_Z4endlR11QTextStream

_Z4leftR11QTextStream

_Z4qInfv

_Z5fixedR11QTextStream

_Z5flushR11QTextStream

_Z5qFreePv

_Z5qHashRK10QByteArray

_Z5qHashRK10QStringRef

_Z5qHashRK7QString

_Z5qHashRK9QBitArray

_Z5qQNaNv

_Z5qSNaNv

_Z5qdtoadiiPiS_PPcS1_

_Z5qrandv

_Z5resetR11QTextStream

_Z5rightR11QTextStream

_Z6centerR11QTextStream

_Z6qDebugPKcz

_Z6qDebugv

_Z6qFatalPKcz

_Z6qIsInfd

_Z6qIsInff

_Z6qIsNaNd

_Z6qIsNaNf

_Z6qsrandj

_Z6qtTrIdPKci

_Z7qMallocj

_Z7qMemSetPvij

_Z7qgetenvPKc

_Z7qputenvPKcRK10QByteArray

_Z7qstrcmpPKcS0_

_Z7qstrcmpRK10QByteArrayPKc

_Z7qstrcmpRK10QByteArrayS1_

_Z7qstrcpyPcPKc

_Z7qstrdupPKc

_Z7qstrtodPKcPS0_Pb

_Z8qAppNamev

_Z8qMemCopyPvPKvj

_Z8qReallocPvj

_Z8qVersionv

_Z8qWarningPKcz

_Z8qWarningv

_Z8qWinMainP11HINSTANCE__S0_PciRiR7QVectorIS1_E

_Z8qstricmpPKcS0_

_Z8qstrncpyPcPKcj

_Z8showbaseR11QTextStream

_Z9decodeMSGRK6tagMSG

_Z9forcesignR11QTextStream

_Z9qBadAllocv

_Z9qChecksumPKcj

_Z9qCompressPKhii

_Z9qCriticalPKcz

_Z9qIsFinited

_Z9qIsFinitef

_Z9qsnprintfPcjPKcz

_Z9qstrnicmpPKcS0_j

_Z9qt_assertPKcS0_i

_ZN10QByteArray10fromBase64ERKS_

_ZN10QByteArray10setRawDataEPKcj

_ZN10QByteArray11fromRawDataEPKci

_ZN10QByteArray11shared_nullE

_ZN10QByteArray12shared_emptyE

_ZN10QByteArray19fromPercentEncodingERKS_c

_ZN10QByteArray4chopEi

_ZN10QByteArray4dataEv

_ZN10QByteArray4fillEci

_ZN10QByteArray5clearEv

_ZN10QByteArray6appendEPKc

_ZN10QByteArray6appendEPKci

_ZN10QByteArray6appendERKS_

_ZN10QByteArray6appendEc

_ZN10QByteArray6expandEi

_ZN10QByteArray6insertEiPKc

_ZN10QByteArray6insertEiPKci

_ZN10QByteArray6insertEiRKS_

_ZN10QByteArray6insertEic

_ZN10QByteArray6numberEdci

_ZN10QByteArray6numberEii

_ZN10QByteArray6numberEji

_ZN10QByteArray6numberExi

_ZN10QByteArray6numberEyi

_ZN10QByteArray6removeEii

_ZN10QByteArray6resizeEi

_ZN10QByteArray6setNumEdci

_ZN10QByteArray6setNumExi

_ZN10QByteArray6setNumEyi

_ZN10QByteArray7fromHexERKS_

_ZN10QByteArray7prependEPKc

_ZN10QByteArray7prependEPKci

_ZN10QByteArray7prependERKS_

_ZN10QByteArray7prependEc

_ZN10QByteArray7reallocEi

_ZN10QByteArray7replaceEPKcRKS_

_ZN10QByteArray7replaceEPKciS1_i

_ZN10QByteArray7replaceERKS_S1_

_ZN10QByteArray7replaceEcRKS_

_ZN10QByteArray7replaceEcc

_ZN10QByteArray7replaceEiiPKc

_ZN10QByteArray7replaceEiiPKci

_ZN10QByteArray7replaceEiiRKS_

_ZN10QByteArray8truncateEi

_ZN10QByteArrayC1EPKc

_ZN10QByteArrayC1EPKci

_ZN10QByteArrayC1EiN2Qt14InitializationE

_ZN10QByteArrayC1Eic

_ZN10QByteArrayC2EPKc

_ZN10QByteArrayC2EPKci

_ZN10QByteArrayC2EiN2Qt14InitializationE

_ZN10QByteArrayC2Eic

_ZN10QByteArrayD1Ev

_ZN10QByteArrayaSEPKc

_ZN10QByteArrayaSERKS_

_ZN10QEventLoop11qt_metacallEN11QMetaObject4CallEiPPv

_ZN10QEventLoop11qt_metacastEPKc

_ZN10QEventLoop13processEventsE6QFlagsINS_17ProcessEventsFlagEE

_ZN10QEventLoop13processEventsE6QFlagsINS_17ProcessEventsFlagEEi

_ZN10QEventLoop16staticMetaObjectE

_ZN10QEventLoop18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv

_ZN10QEventLoop25staticMetaObjectExtraDataE

_ZN10QEventLoop4execE6QFlagsINS_17ProcessEventsFlagEE

_ZN10QEventLoop4exitEi

_ZN10QEventLoop4quitEv

_ZN10QEventLoop6wakeUpEv

_ZN10QEventLoopC1EP7QObject

_ZN10QEventLoopC2EP7QObject

_ZN10QEventLoopD0Ev

_ZN10QEventLoopD1Ev

_ZN10QEventLoopD2Ev

_ZN10QMutexPool11createMutexEi

_ZN10QMutexPool17globalInstanceGetEPKv

_ZN10QMutexPool8instanceEv

_ZN10QMutexPoolC1EN6QMutex13RecursionModeEi

_ZN10QMutexPoolC2EN6QMutex13RecursionModeEi

_ZN10QMutexPoolD1Ev

_ZN10QMutexPoolD2Ev

_ZN10QSemaphore10tryAcquireEi

_ZN10QSemaphore10tryAcquireEii

_ZN10QSemaphore7acquireEi

_ZN10QSemaphore7releaseEi

_ZN10QSemaphoreC1Ei

_ZN10QSemaphoreC2Ei

_ZN10QSemaphoreD1Ev

_ZN10QSemaphoreD2Ev

_ZN10QTextCodec11codecForMibEi

_ZN10QTextCodec11validCodecsEv

_ZN10QTextCodec12codecForHtmlERK10QByteArray

_ZN10QTextCodec12codecForHtmlERK10QByteArrayPS_

_ZN10QTextCodec12codecForNameEPKc

_ZN10QTextCodec12codecForNameERK10QByteArray

_ZN10QTextCodec13availableMibsEv

_ZN10QTextCodec14ConverterStateD1Ev

_ZN10QTextCodec14ConverterStateD2Ev

_ZN10QTextCodec14codecForLocaleEv

_ZN10QTextCodec15availableCodecsEv

_ZN10QTextCodec15codecForUtfTextERK10QByteArray

_ZN10QTextCodec15codecForUtfTextERK10QByteArrayPS_

_ZN10QTextCodec17setCodecForLocaleEPS_

_ZN10QTextCodec4cftrE

_ZN10QTextCodec6localeEv

_ZN10QTextCodecC1Ev

_ZN10QTextCodecC2Ev

_ZN10QTextCodecD0Ev

_ZN10QTextCodecD1Ev

_ZN10QTextCodecD2Ev

_ZN11QBasicTimer4stopEv

_ZN11QBasicTimer5startEiP7QObject

_ZN11QBasicTimerD1Ev

_ZN11QChildEventC1EN6QEvent4TypeEP7QObject

_ZN11QChildEventC2EN6QEvent4TypeEP7QObject

_ZN11QChildEventD0Ev

_ZN11QChildEventD1Ev

_ZN11QChildEventD2Ev

_ZN11QDataStream10writeBytesEPKcj

_ZN11QDataStream11readRawDataEPci

_ZN11QDataStream11resetStatusEv

_ZN11QDataStream11skipRawDataEi

_ZN11QDataStream11unsetDeviceEv

_ZN11QDataStream12setByteOrderENS_9ByteOrderE

_ZN11QDataStream12writeRawDataEPKci

_ZN11QDataStream25setFloatingPointPrecisionENS_22FloatingPointPrecisionE

_ZN11QDataStream9readBytesERPcRj

_ZN11QDataStream9setDeviceEP9QIODevice

_ZN11QDataStream9setStatusENS_6StatusE

_ZN11QDataStreamC1EP10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QDataStreamC1EP10QByteArrayi

_ZN11QDataStreamC1EP9QIODevice

_ZN11QDataStreamC1ERK10QByteArray

_ZN11QDataStreamC1Ev

_ZN11QDataStreamC2EP10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QDataStreamC2EP10QByteArrayi

_ZN11QDataStreamC2EP9QIODevice

_ZN11QDataStreamC2ERK10QByteArray

_ZN11QDataStreamC2Ev

_ZN11QDataStreamD0Ev

_ZN11QDataStreamD1Ev

_ZN11QDataStreamD2Ev

_ZN11QDataStreamlsEPKc

_ZN11QDataStreamlsEa

_ZN11QDataStreamlsEb

_ZN11QDataStreamlsEd

_ZN11QDataStreamlsEf

_ZN11QDataStreamlsEi

_ZN11QDataStreamlsEs

_ZN11QDataStreamlsEx

_ZN11QDataStreamrsERPc

_ZN11QDataStreamrsERa

_ZN11QDataStreamrsERb

_ZN11QDataStreamrsERd

_ZN11QDataStreamrsERf

_ZN11QDataStreamrsERi

_ZN11QDataStreamrsERs

_ZN11QDataStreamrsERx

_ZN11QFinalState11qt_metacallEN11QMetaObject4CallEiPPv

_ZN11QFinalState11qt_metacastEPKc

_ZN11QFinalState16staticMetaObjectE

_ZN11QFinalState18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv

_ZN11QFinalState25staticMetaObjectExtraDataE

_ZN11QFinalState5eventEP6QEvent

_ZN11QFinalState6onExitEP6QEvent

_ZN11QFinalState7onEntryEP6QEvent

_ZN11QFinalStateC1EP6QState

_ZN11QFinalStateC2EP6QState

_ZN11QFinalStateD0Ev

_ZN11QFinalStateD1Ev

_ZN11QFinalStateD2Ev

_ZN11QMetaObject10disconnectEPK7QObjectiS2_i

_ZN11QMetaObject11changeGuardEPP7QObjectS1_

_ZN11QMetaObject11removeGuardEPP7QObject

_ZN11QMetaObject12invokeMethodEP7QObjectPKcN2Qt14ConnectionTypeE22QGenericReturnArgument16QGenericArgumentS7_S7_S7_S7_S7_S7_S7_S7_S7_

_ZN11QMetaObject13disconnectOneEPK7QObjectiS2_i

_ZN11QMetaObject14normalizedTypeEPKc

_ZN11QMetaObject16checkConnectArgsEPKcS1_

_ZN11QMetaObject18connectSlotsByNameEP7QObject

_ZN11QMetaObject19normalizedSignatureEPKc

_ZN11QMetaObject7connectEPK7QObjectiS2_iiPi

_ZN11QMetaObject8activateEP7QObjectPKS_iPPv

_ZN11QMetaObject8activateEP7QObjectPKS_iiPPv

_ZN11QMetaObject8activateEP7QObjectiPPv

_ZN11QMetaObject8activateEP7QObjectiiPPv

_ZN11QMetaObject8addGuardEPP7QObject

_ZN11QMetaObject8metacallEP7QObjectNS_4CallEiPPv

_ZN11QReadLockerC1EP14QReadWriteLock

_ZN11QReadLockerD1Ev

_ZN11QTextStream10setPadCharE5QChar

_ZN11QTextStream11resetStatusEv

_ZN11QTextStream11setEncodingENS_8EncodingE

_ZN11QTextStream13flagsInternalEi

_ZN11QTextStream13setFieldWidthEi

_ZN11QTextStream14setIntegerBaseEi

_ZN11QTextStream14setNumberFlagsE6QFlagsINS_10NumberFlagEE

_ZN11QTextStream14skipWhiteSpaceEv

_ZN11QTextStream17setFieldAlignmentENS_14FieldAlignmentE

_ZN11QTextStream20setAutoDetectUnicodeEb

_ZN11QTextStream21setRealNumberNotationENS_18RealNumberNotationE

_ZN11QTextStream22setRealNumberPrecisionEi

_ZN11QTextStream24setGenerateByteOrderMarkEb

_ZN11QTextStream4readEx

_ZN11QTextStream4seekEx

_ZN11QTextStream5flushEv

_ZN11QTextStream5resetEv

_ZN11QTextStream7readAllEv

_ZN11QTextStream8readLineEx

_ZN11QTextStream8setCodecEP10QTextCodec

_ZN11QTextStream8setCodecEPKc

_ZN11QTextStream9setDeviceEP9QIODevice

_ZN11QTextStream9setLocaleERK7QLocale

_ZN11QTextStream9setStatusENS_6StatusE

_ZN11QTextStream9setStringEP7QString6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QTextStreamC1EP10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QTextStreamC1EP6_iobuf6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QTextStreamC1EP7QString6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QTextStreamC1EP9QIODevice

_ZN11QTextStreamC1ERK10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QTextStreamC1Ev

_ZN11QTextStreamC2EP10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QTextStreamC2EP6_iobuf6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QTextStreamC2EP7QString6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QTextStreamC2EP9QIODevice

_ZN11QTextStreamC2ERK10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QTextStreamC2Ev

_ZN11QTextStreamD0Ev

_ZN11QTextStreamD1Ev

_ZN11QTextStreamD2Ev

_ZN11QTextStreamlsE5QBool

_ZN11QTextStreamlsE5QChar

_ZN11QTextStreamlsEPKc

_ZN11QTextStreamlsEPKv

_ZN11QTextStreamlsERK10QByteArray

_ZN11QTextStreamlsERK7QString

_ZN11QTextStreamlsEc

_ZN11QTextStreamlsEd

_ZN11QTextStreamlsEf

_ZN11QTextStreamlsEi

_ZN11QTextStreamlsEj

_ZN11QTextStreamlsEl

_ZN11QTextStreamlsEm

_ZN11QTextStreamlsEs

_ZN11QTextStreamlsEt

_ZN11QTextStreamlsEx

_ZN11QTextStreamlsEy

_ZN11QTextStreamrsEPc

_ZN11QTextStreamrsER10QByteArray

_ZN11QTextStreamrsER5QChar

_ZN11QTextStreamrsER7QString

_ZN11QTextStreamrsERc

_ZN11QTextStreamrsERd

_ZN11QTextStreamrsERf

_ZN11QTextStreamrsERi

_ZN11QTextStreamrsERj

_ZN11QTextStreamrsERl

_ZN11QTextStreamrsERm

_ZN11QTextStreamrsERs

_ZN11QTextStreamrsERt

_ZN11QTextStreamrsERx

_ZN11QTextStreamrsERy

_ZN11QThreadPool11qt_metacallEN11QMetaObject4CallEiPPv

_ZN11QThreadPool11qt_metacastEPKc

_ZN11QThreadPool11waitForDoneEi

_ZN11QThreadPool11waitForDoneEv

_ZN11QThreadPool13releaseThreadEv

_ZN11QThreadPool13reserveThreadEv

_ZN11QThreadPool14globalInstanceEv

_ZN11QThreadPool16setExpiryTimeoutEi

_ZN11QThreadPool16staticMetaObjectE

_ZN11QThreadPool17setMaxThreadCountEi

_ZN11QThreadPool18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv

_ZN11QThreadPool25staticMetaObjectExtraDataE

_ZN11QThreadPool5startEP9QRunnablei

_ZN11QThreadPool8tryStartEP9QRunnable

_ZN11QThreadPoolC1EP7QObject

_ZN11QThreadPoolC2EP7QObject

_ZN11QThreadPoolD0Ev

_ZN11QThreadPoolD1Ev

_ZN11QThreadPoolD2Ev

_ZN11QTimerEventC1Ei

_ZN11QTimerEventC2Ei

_ZN11QTimerEventD0Ev

_ZN11QTimerEventD1Ev

_ZN11QTimerEventD2Ev

_ZN11QTranslator11qt_metacallEN11QMetaObject4CallEiPPv

_ZN11QTranslator11qt_metacastEPKc

_ZN11QTranslator16staticMetaObjectE

_ZN11QTranslator18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv

_ZN11QTranslator25staticMetaObjectExtraDataE

_ZN11QTranslator4loadEPKhi

_ZN11QTranslator4loadERK7QLocaleRK7QStringS5_S5_S5_

_ZN11QTranslator4loadERK7QStringS2_S2_S2_

_ZN11QTranslatorC1EP7QObject

_ZN11QTranslatorC1EP7QObjectPKc

_ZN11QTranslatorC2EP7QObject

_ZN11QTranslatorC2EP7QObjectPKc

_ZN11QTranslatorD0Ev

_ZN11QTranslatorD1Ev

_ZN11QTranslatorD2Ev

_ZN11QVectorData10reallocateEPS_iii

_ZN11QVectorData11shared_nullE

_ZN11QVectorData4freeEPS_i

_ZN11QVectorData4growEiiib

_ZN11QVectorData6mallocEiiiPS_

_ZN11QVectorData8allocateEii

_ZN12QCustomEventC1EiPv

_ZN12QCustomEventC2EiPv

_ZN12QCustomEventD0Ev

_ZN12QCustomEventD1Ev

_ZN12QCustomEventD2Ev

_ZN12QDirIterator4nextEv

_ZN12QDirIteratorC1ERK4QDir6QFlagsINS_12IteratorFlagEE

_ZN12QDirIteratorC1ERK7QString6QFlagsIN4QDir6FilterEES3_INS_12IteratorFlagEE

_ZN12QDirIteratorC1ERK7QString6QFlagsINS_12IteratorFlagEE

_ZN12QDirIteratorC1ERK7QStringRK11QStringList6QFlagsIN4QDir6FilterEES6_INS_12IteratorFlagEE

_ZN12QDirIteratorC2ERK4QDir6QFlagsINS_12IteratorFlagEE

_ZN12QDirIteratorC2ERK7QString6QFlagsIN4QDir6FilterEES3_INS_12IteratorFlagEE

_ZN12QDirIteratorC2ERK7QString6QFlagsINS_12IteratorFlagEE

_ZN12QDirIteratorC2ERK7QStringRK11QStringList6QFlagsIN4QDir6FilterEES6_INS_12IteratorFlagEE

_ZN12QDirIteratorD0Ev

_ZN12QDirIteratorD1Ev

_ZN12QDirIteratorD2Ev

_ZN12QEasingCurve12setAmplitudeEd

_ZN12QEasingCurve12setOvershootEd

_ZN12QEasingCurve13setCustomTypeEPFddE

_ZN12QEasingCurve16staticMetaObjectE

_ZN12QEasingCurve7setTypeENS_4TypeE

_ZN12QEasingCurve9setPeriodEd

_ZN12QEasingCurveC1ENS_4TypeE

_ZN12QEasingCurveC1ERKS_

_ZN12QEasingCurveC2ENS_4TypeE

_ZN12QEasingCurveC2ERKS_

_ZN12QEasingCurveD1Ev

_ZN12QEasingCurveD2Ev

_ZN12QEasingCurveaSERKS_

_ZN12QLibraryInfo16licensedProductsEv

_ZN12QLibraryInfo8buildKeyEv

_ZN12QLibraryInfo8licenseeEv

_ZN12QLibraryInfo8locationENS_15LibraryLocationE

_ZN12QLibraryInfo9buildDateEv

_ZN12QLibraryInfoC1Ev

_ZN12QLibraryInfoC2Ev

_ZN12QMutexLocker6relockEv

_ZN12QMutexLocker6unlockEv

_ZN12QMutexLockerD1Ev

_ZN12QSystemError8toStringEv

_ZN12QTextDecoder9toUnicodeEP7QStringPKci

_ZN12QTextDecoder9toUnicodeEPKci

_ZN12QTextDecoder9toUnicodeERK10QByteArray

_ZN12QTextDecoderC1EPK10QTextCodec6QFlagsINS0_14ConversionFlagEE

_ZN12QTextDecoderC2EPK10QTextCodec6QFlagsINS0_14ConversionFlagEE

_ZN12QTextDecoderD1Ev

_ZN12QTextDecoderD2Ev

_ZN12QTextEncoder11fromUnicodeEPK5QChari

_ZN12QTextEncoder11fromUnicodeERK7QString

_ZN12QTextEncoder11fromUnicodeERK7QStringRi

_ZN12QTextEncoderC1EPK10QTextCodec6QFlagsINS0_14ConversionFlagEE

_ZN12QTextEncoderC2EPK10QTextCodec6QFlagsINS0_14ConversionFlagEE

_ZN12QTextEncoderD1Ev

_ZN12QTextEncoderD2Ev

_ZN12QWriteLockerD1Ev

_ZN12QtConcurrent15ResultStoreBase10addResultsEiPKvii

_ZN12QtConcurrent15ResultStoreBase13setFilterModeEb

_ZN12QtConcurrent15ResultStoreBase15syncResultCountEv

_ZN12QtConcurrent15ResultStoreBase16insertResultItemEiRNS_10ResultItemE

_ZN12QtConcurrent15ResultStoreBase17updateInsertIndexEii

_ZN12QtConcurrent15ResultStoreBase18syncPendingResultsEv

_ZN12QtConcurrent15ResultStoreBase23insertResultItemIfValidEiRNS_10ResultItemE

_ZN12QtConcurrent15ResultStoreBase9addResultEiPKv

_ZN12QtConcurrent15ResultStoreBaseC1Ev

_ZN12QtConcurrent15ResultStoreBaseC2Ev

_ZN12QtConcurrent15ResultStoreBaseD0Ev

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rdata
Size: 822KB - Virtual size: 821KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.edata
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

DefaultData/Data/mingwm10.dll

.dll windows x86

Password: infected

03e7672c8b423d2d726a1731f8c39711

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

__dllonexit

_errno

calloc

fflush

free

malloc

kernel32

DeleteCriticalSection

EnterCriticalSection

GetLastError

InitializeCriticalSection

LeaveCriticalSection

TlsGetValue

Exports

__mingwthr_key_dtor

__mingwthr_remove_key_dtor

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132B

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

DefaultData/settings/DiffImgProUpdate.reg

installerx64.exe

.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

locales/Data/QtCore4.dll

.dll windows x86

Password: infected

ab8e1e9eb2026051e03c52024771ef37

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DEBUG_STRIPPED

Imports

libgcc_s_dw2-1

_Unwind_DeleteException

_Unwind_GetDataRelBase

_Unwind_GetIPInfo

_Unwind_GetLanguageSpecificData

_Unwind_GetRegionStart

_Unwind_GetTextRelBase

_Unwind_RaiseException

_Unwind_Resume

_Unwind_Resume_or_Rethrow

_Unwind_SetGR

_Unwind_SetIP

__deregister_frame_info

__divdi3

__emutls_get_address

__moddi3

__register_frame_info

__udivdi3

__umoddi3

advapi32

CopySid

FreeSid

GetLengthSid

GetTokenInformation

OpenProcessToken

RegCloseKey

RegCreateKeyExW

RegDeleteKeyW

RegDeleteValueW

RegEnumKeyExW

RegEnumValueW

RegFlushKey

RegOpenKeyExW

RegQueryInfoKeyW

RegQueryValueExW

RegSetValueExW

kernel32

CloseHandle

CompareStringW

CopyFileW

CreateDirectoryW

CreateEventW

CreateFileMappingW

CreateFileW

CreatePipe

CreateProcessW

CreateSemaphoreA

CreateSemaphoreW

CreateThread

DeleteCriticalSection

DeleteFileW

DeviceIoControl

DuplicateHandle

EnterCriticalSection

FileTimeToSystemTime

FindClose

FindCloseChangeNotification

FindFirstChangeNotificationW

FindFirstFileExW

FindFirstFileW

FindNextChangeNotification

FindNextFileW

FormatMessageW

FreeEnvironmentStringsW

FreeLibrary

GetCommandLineW

GetCurrencyFormatW

GetCurrentDirectoryW

GetCurrentProcess

GetCurrentProcessId

GetCurrentThread

GetCurrentThreadId

GetDateFormatW

GetEnvironmentStringsW

GetExitCodeProcess

GetFileAttributesExW

GetFileAttributesW

GetFileInformationByHandle

GetFileType

GetFullPathNameW

GetLastError

GetLocalTime

GetLocaleInfoW

GetLogicalDrives

GetModuleFileNameW

GetModuleHandleA

GetModuleHandleW

GetOverlappedResult

GetProcAddress

GetStartupInfoW

GetStdHandle

GetSystemDirectoryW

GetSystemInfo

GetSystemTime

GetTempPathW

GetThreadPriority

GetTickCount

GetTimeFormatW

GetUserDefaultLCID

GetUserDefaultUILanguage

GetVersionExW

InitializeCriticalSection

InterlockedDecrement

InterlockedExchange

InterlockedIncrement

IsDBCSLeadByteEx

LeaveCriticalSection

LoadLibraryExW

LoadLibraryW

LocalFree

MapViewOfFile

MoveFileW

MultiByteToWideChar

OpenFileMappingW

OutputDebugStringW

PeekNamedPipe

QueryPerformanceCounter

QueryPerformanceFrequency

ReadFile

ReleaseSemaphore

RemoveDirectoryW

ResetEvent

ResumeThread

SetCurrentDirectoryW

SetEndOfFile

SetErrorMode

SetEvent

SetFilePointer

SetFilePointerEx

SetLastError

SetThreadPriority

Sleep

SwitchToThread

SystemTimeToTzSpecificLocalTime

TerminateProcess

TerminateThread

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

UnmapViewOfFile

VirtualQuery

WaitForMultipleObjects

WaitForSingleObject

WaitForSingleObjectEx

WideCharToMultiByte

WriteFile

mingwm10

__mingwthr_key_dtor

msvcrt

_close

_lseek

_open

_putenv

_read

_write

__dllonexit

__lc_codepage

__mb_cur_max

__p__environ

_assert

_beginthreadex

_clearfp

_close

_control87

_endthreadex

_errno

_filelengthi64

_get_osfhandle

_getdrive

_iob

_isctype

_lseeki64

_open_osfhandle

_pctype

_read

_tzname

_tzset

_vsnprintf

_waccess

_wchmod

_wgetdcwd

_wgetenv

_write

abort

acos

asin

atan2

calloc

ceil

cos

fclose

fflush

fgetpos

fgets

floor

fprintf

fputc

fputs

fread

free

fsetpos

fwrite

getenv

gmtime

localeconv

localtime

malloc

memchr

memcmp

memmove

memset

mktime

pow

printf

puts

rand

realloc

sin

sprintf

sqrt

srand

strcat

strchr

strcmp

strcpy

strerror

strlen

strncmp

strncpy

wcschr

wcslen

ole32

CoCreateGuid

CoCreateInstance

CoInitialize

CoUninitialize

user32

CallNextHookEx

CharNextExA

CreateWindowExW

DefWindowProcW

DestroyWindow

DispatchMessageW

EnumWindows

GetMessageW

GetQueueStatus

GetWindowLongW

GetWindowThreadProcessId

KillTimer

MsgWaitForMultipleObjectsEx

PeekMessageW

PostMessageW

PostThreadMessageW

RegisterClassW

SetTimer

SetWindowLongW

SetWindowsHookExW

TranslateMessage

UnhookWindowsHookEx

UnregisterClassW

ws2_32

WSAAsyncSelect

Exports

_Z10forcepointR11QTextStream

_Z10noshowbaseR11QTextStream

_Z10qAllocMoreii

_Z10qHBNewFacePvPF8HB_ErrorS_jPhPjE

_Z10qShapeItemP14HB_ShaperItem_

_Z10qvsnprintfPcjPKcS_

_Z10scientificR11QTextStream

_Z11noforcesignR11QTextStream

_Z11qHBFreeFaceP11HB_FaceRec_

_Z11qUncompressPKhi

_Z11qWinAppInstv

_Z11qt_assert_xPKcS0_S0_i

_Z11qt_int_sqrtj

_Z12noforcepointR11QTextStream

_Z12qAppFileNamev

_Z12qFreeAlignedPv

_Z12qInstallPathv

_Z12qSharedBuildv

_Z13lowercasebaseR11QTextStream

_Z13qErrnoWarningPKcz

_Z13qErrnoWarningiPKcz

_Z13qFlagLocationPKc

_Z13uppercasebaseR11QTextStream

_Z13winGetMessageP6tagMSGP6HWND__jj

_Z14qDecodeDataUrlRK4QUrl

_Z14qMallocAlignedjj

_Z14qSystemWarningPKci

_Z14qWinAppCmdShowv

_Z14qWinMsgHandler9QtMsgTypePKc

_Z14winPeekMessageP6tagMSGP6HWND__jjj

_Z14winPostMessageP6HWND__jjl

_Z15lowercasedigitsR11QTextStream

_Z15qAddPostRoutinePFvvE

_Z15qInitResourceIOv

_Z15qIsEffectiveTLDRK7QString

_Z15qReallocAlignedPvjjj

_Z15qTopLevelDomainRK7QString

_Z15qWinAppPrevInstv

_Z15qt_error_stringi

_Z15uppercasedigitsR11QTextStream

_Z16qInstallPathBinsv

_Z16qInstallPathDatav

_Z16qInstallPathDocsv

_Z16qInstallPathLibsv

_Z16qt_check_pointerPKci

_Z17qt_localeFromLCIDm

_Z17qt_message_output9QtMsgTypePKc

_Z18qDetectCPUFeaturesv

_Z18qGetCharAttributesPKtjPK13HB_ScriptItemjP17HB_CharAttributes

_Z18qInstallMsgHandlerPFv9QtMsgTypePKcE

_Z18qRemovePostRoutinePFvvE

_Z19qInstallPathHeadersv

_Z19qInstallPathPluginsv

_Z19qInstallPathSysconfv

_Z19qcoreVariantHandlerv

_Z20qt_qFindChild_helperPK7QObjectRK7QStringRK11QMetaObject

_Z21qDeleteInEventHandlerP7QObject

_Z21qRegisterResourceDataiPKhS0_S0_

_Z21qt_call_post_routinesv

_Z21qt_regexp_toCanonicalRK7QStringN7QRegExp13PatternSyntaxE

_Z23qUnregisterResourceDataiPKhS0_S0_

_Z23qt_qFindChildren_helperPK7QObjectRK7QStringPK7QRegExpRK11QMetaObjectP5QListIPvE

_Z24qGlobalPostedEventsCountv

_Z24qInstallPathTranslationsv

_Z24qcoreStateMachineHandlerv

_Z2wsR11QTextStream

_Z32qt_register_signal_spy_callbacksRK21QSignalSpyCallbackSet

_Z37qRegisterStaticPluginInstanceFunctionPFP7QObjectvE

_Z3binR11QTextStream

_Z3bomR11QTextStream

_Z3decR11QTextStream

_Z3hexR11QTextStream

_Z3octR11QTextStream

_Z4endlR11QTextStream

_Z4leftR11QTextStream

_Z4qInfv

_Z5fixedR11QTextStream

_Z5flushR11QTextStream

_Z5qFreePv

_Z5qHashRK10QByteArray

_Z5qHashRK10QStringRef

_Z5qHashRK7QString

_Z5qHashRK9QBitArray

_Z5qQNaNv

_Z5qSNaNv

_Z5qdtoadiiPiS_PPcS1_

_Z5qrandv

_Z5resetR11QTextStream

_Z5rightR11QTextStream

_Z6centerR11QTextStream

_Z6qDebugPKcz

_Z6qDebugv

_Z6qFatalPKcz

_Z6qIsInfd

_Z6qIsInff

_Z6qIsNaNd

_Z6qIsNaNf

_Z6qsrandj

_Z6qtTrIdPKci

_Z7qMallocj

_Z7qMemSetPvij

_Z7qgetenvPKc

_Z7qputenvPKcRK10QByteArray

_Z7qstrcmpPKcS0_

_Z7qstrcmpRK10QByteArrayPKc

_Z7qstrcmpRK10QByteArrayS1_

_Z7qstrcpyPcPKc

_Z7qstrdupPKc

_Z7qstrtodPKcPS0_Pb

_Z8qAppNamev

_Z8qMemCopyPvPKvj

_Z8qReallocPvj

_Z8qVersionv

_Z8qWarningPKcz

_Z8qWarningv

_Z8qWinMainP11HINSTANCE__S0_PciRiR7QVectorIS1_E

_Z8qstricmpPKcS0_

_Z8qstrncpyPcPKcj

_Z8showbaseR11QTextStream

_Z9decodeMSGRK6tagMSG

_Z9forcesignR11QTextStream

_Z9qBadAllocv

_Z9qChecksumPKcj

_Z9qCompressPKhii

_Z9qCriticalPKcz

_Z9qIsFinited

_Z9qIsFinitef

_Z9qsnprintfPcjPKcz

_Z9qstrnicmpPKcS0_j

_Z9qt_assertPKcS0_i

_ZN10QByteArray10fromBase64ERKS_

_ZN10QByteArray10setRawDataEPKcj

_ZN10QByteArray11fromRawDataEPKci

_ZN10QByteArray11shared_nullE

_ZN10QByteArray12shared_emptyE

_ZN10QByteArray19fromPercentEncodingERKS_c

_ZN10QByteArray4chopEi

_ZN10QByteArray4dataEv

_ZN10QByteArray4fillEci

_ZN10QByteArray5clearEv

_ZN10QByteArray6appendEPKc

_ZN10QByteArray6appendEPKci

_ZN10QByteArray6appendERKS_

_ZN10QByteArray6appendEc

_ZN10QByteArray6expandEi

_ZN10QByteArray6insertEiPKc

_ZN10QByteArray6insertEiPKci

_ZN10QByteArray6insertEiRKS_

_ZN10QByteArray6insertEic

_ZN10QByteArray6numberEdci

_ZN10QByteArray6numberEii

_ZN10QByteArray6numberEji

_ZN10QByteArray6numberExi

_ZN10QByteArray6numberEyi

_ZN10QByteArray6removeEii

_ZN10QByteArray6resizeEi

_ZN10QByteArray6setNumEdci

_ZN10QByteArray6setNumExi

_ZN10QByteArray6setNumEyi

_ZN10QByteArray7fromHexERKS_

_ZN10QByteArray7prependEPKc

_ZN10QByteArray7prependEPKci

_ZN10QByteArray7prependERKS_

_ZN10QByteArray7prependEc

_ZN10QByteArray7reallocEi

_ZN10QByteArray7replaceEPKcRKS_

_ZN10QByteArray7replaceEPKciS1_i

_ZN10QByteArray7replaceERKS_S1_

_ZN10QByteArray7replaceEcRKS_

_ZN10QByteArray7replaceEcc

_ZN10QByteArray7replaceEiiPKc

_ZN10QByteArray7replaceEiiPKci

_ZN10QByteArray7replaceEiiRKS_

_ZN10QByteArray8truncateEi

_ZN10QByteArrayC1EPKc

_ZN10QByteArrayC1EPKci

_ZN10QByteArrayC1EiN2Qt14InitializationE

_ZN10QByteArrayC1Eic

_ZN10QByteArrayC2EPKc

_ZN10QByteArrayC2EPKci

_ZN10QByteArrayC2EiN2Qt14InitializationE

_ZN10QByteArrayC2Eic

_ZN10QByteArrayD1Ev

_ZN10QByteArrayaSEPKc

_ZN10QByteArrayaSERKS_

_ZN10QEventLoop11qt_metacallEN11QMetaObject4CallEiPPv

_ZN10QEventLoop11qt_metacastEPKc

_ZN10QEventLoop13processEventsE6QFlagsINS_17ProcessEventsFlagEE

_ZN10QEventLoop13processEventsE6QFlagsINS_17ProcessEventsFlagEEi

_ZN10QEventLoop16staticMetaObjectE

_ZN10QEventLoop18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv

_ZN10QEventLoop25staticMetaObjectExtraDataE

_ZN10QEventLoop4execE6QFlagsINS_17ProcessEventsFlagEE

_ZN10QEventLoop4exitEi

_ZN10QEventLoop4quitEv

_ZN10QEventLoop6wakeUpEv

_ZN10QEventLoopC1EP7QObject

_ZN10QEventLoopC2EP7QObject

_ZN10QEventLoopD0Ev

_ZN10QEventLoopD1Ev

_ZN10QEventLoopD2Ev

_ZN10QMutexPool11createMutexEi

_ZN10QMutexPool17globalInstanceGetEPKv

_ZN10QMutexPool8instanceEv

_ZN10QMutexPoolC1EN6QMutex13RecursionModeEi

_ZN10QMutexPoolC2EN6QMutex13RecursionModeEi

_ZN10QMutexPoolD1Ev

_ZN10QMutexPoolD2Ev

_ZN10QSemaphore10tryAcquireEi

_ZN10QSemaphore10tryAcquireEii

_ZN10QSemaphore7acquireEi

_ZN10QSemaphore7releaseEi

_ZN10QSemaphoreC1Ei

_ZN10QSemaphoreC2Ei

_ZN10QSemaphoreD1Ev

_ZN10QSemaphoreD2Ev

_ZN10QTextCodec11codecForMibEi

_ZN10QTextCodec11validCodecsEv

_ZN10QTextCodec12codecForHtmlERK10QByteArray

_ZN10QTextCodec12codecForHtmlERK10QByteArrayPS_

_ZN10QTextCodec12codecForNameEPKc

_ZN10QTextCodec12codecForNameERK10QByteArray

_ZN10QTextCodec13availableMibsEv

_ZN10QTextCodec14ConverterStateD1Ev

_ZN10QTextCodec14ConverterStateD2Ev

_ZN10QTextCodec14codecForLocaleEv

_ZN10QTextCodec15availableCodecsEv

_ZN10QTextCodec15codecForUtfTextERK10QByteArray

_ZN10QTextCodec15codecForUtfTextERK10QByteArrayPS_

_ZN10QTextCodec17setCodecForLocaleEPS_

_ZN10QTextCodec4cftrE

_ZN10QTextCodec6localeEv

_ZN10QTextCodecC1Ev

_ZN10QTextCodecC2Ev

_ZN10QTextCodecD0Ev

_ZN10QTextCodecD1Ev

_ZN10QTextCodecD2Ev

_ZN11QBasicTimer4stopEv

_ZN11QBasicTimer5startEiP7QObject

_ZN11QBasicTimerD1Ev

_ZN11QChildEventC1EN6QEvent4TypeEP7QObject

_ZN11QChildEventC2EN6QEvent4TypeEP7QObject

_ZN11QChildEventD0Ev

_ZN11QChildEventD1Ev

_ZN11QChildEventD2Ev

_ZN11QDataStream10writeBytesEPKcj

_ZN11QDataStream11readRawDataEPci

_ZN11QDataStream11resetStatusEv

_ZN11QDataStream11skipRawDataEi

_ZN11QDataStream11unsetDeviceEv

_ZN11QDataStream12setByteOrderENS_9ByteOrderE

_ZN11QDataStream12writeRawDataEPKci

_ZN11QDataStream25setFloatingPointPrecisionENS_22FloatingPointPrecisionE

_ZN11QDataStream9readBytesERPcRj

_ZN11QDataStream9setDeviceEP9QIODevice

_ZN11QDataStream9setStatusENS_6StatusE

_ZN11QDataStreamC1EP10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QDataStreamC1EP10QByteArrayi

_ZN11QDataStreamC1EP9QIODevice

_ZN11QDataStreamC1ERK10QByteArray

_ZN11QDataStreamC1Ev

_ZN11QDataStreamC2EP10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QDataStreamC2EP10QByteArrayi

_ZN11QDataStreamC2EP9QIODevice

_ZN11QDataStreamC2ERK10QByteArray

_ZN11QDataStreamC2Ev

_ZN11QDataStreamD0Ev

_ZN11QDataStreamD1Ev

_ZN11QDataStreamD2Ev

_ZN11QDataStreamlsEPKc

_ZN11QDataStreamlsEa

_ZN11QDataStreamlsEb

_ZN11QDataStreamlsEd

_ZN11QDataStreamlsEf

_ZN11QDataStreamlsEi

_ZN11QDataStreamlsEs

_ZN11QDataStreamlsEx

_ZN11QDataStreamrsERPc

_ZN11QDataStreamrsERa

_ZN11QDataStreamrsERb

_ZN11QDataStreamrsERd

_ZN11QDataStreamrsERf

_ZN11QDataStreamrsERi

_ZN11QDataStreamrsERs

_ZN11QDataStreamrsERx

_ZN11QFinalState11qt_metacallEN11QMetaObject4CallEiPPv

_ZN11QFinalState11qt_metacastEPKc

_ZN11QFinalState16staticMetaObjectE

_ZN11QFinalState18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv

_ZN11QFinalState25staticMetaObjectExtraDataE

_ZN11QFinalState5eventEP6QEvent

_ZN11QFinalState6onExitEP6QEvent

_ZN11QFinalState7onEntryEP6QEvent

_ZN11QFinalStateC1EP6QState

_ZN11QFinalStateC2EP6QState

_ZN11QFinalStateD0Ev

_ZN11QFinalStateD1Ev

_ZN11QFinalStateD2Ev

_ZN11QMetaObject10disconnectEPK7QObjectiS2_i

_ZN11QMetaObject11changeGuardEPP7QObjectS1_

_ZN11QMetaObject11removeGuardEPP7QObject

_ZN11QMetaObject12invokeMethodEP7QObjectPKcN2Qt14ConnectionTypeE22QGenericReturnArgument16QGenericArgumentS7_S7_S7_S7_S7_S7_S7_S7_S7_

_ZN11QMetaObject13disconnectOneEPK7QObjectiS2_i

_ZN11QMetaObject14normalizedTypeEPKc

_ZN11QMetaObject16checkConnectArgsEPKcS1_

_ZN11QMetaObject18connectSlotsByNameEP7QObject

_ZN11QMetaObject19normalizedSignatureEPKc

_ZN11QMetaObject7connectEPK7QObjectiS2_iiPi

_ZN11QMetaObject8activateEP7QObjectPKS_iPPv

_ZN11QMetaObject8activateEP7QObjectPKS_iiPPv

_ZN11QMetaObject8activateEP7QObjectiPPv

_ZN11QMetaObject8activateEP7QObjectiiPPv

_ZN11QMetaObject8addGuardEPP7QObject

_ZN11QMetaObject8metacallEP7QObjectNS_4CallEiPPv

_ZN11QReadLockerC1EP14QReadWriteLock

_ZN11QReadLockerD1Ev

_ZN11QTextStream10setPadCharE5QChar

_ZN11QTextStream11resetStatusEv

_ZN11QTextStream11setEncodingENS_8EncodingE

_ZN11QTextStream13flagsInternalEi

_ZN11QTextStream13setFieldWidthEi

_ZN11QTextStream14setIntegerBaseEi

_ZN11QTextStream14setNumberFlagsE6QFlagsINS_10NumberFlagEE

_ZN11QTextStream14skipWhiteSpaceEv

_ZN11QTextStream17setFieldAlignmentENS_14FieldAlignmentE

_ZN11QTextStream20setAutoDetectUnicodeEb

_ZN11QTextStream21setRealNumberNotationENS_18RealNumberNotationE

_ZN11QTextStream22setRealNumberPrecisionEi

_ZN11QTextStream24setGenerateByteOrderMarkEb

_ZN11QTextStream4readEx

_ZN11QTextStream4seekEx

_ZN11QTextStream5flushEv

_ZN11QTextStream5resetEv

_ZN11QTextStream7readAllEv

_ZN11QTextStream8readLineEx

_ZN11QTextStream8setCodecEP10QTextCodec

_ZN11QTextStream8setCodecEPKc

_ZN11QTextStream9setDeviceEP9QIODevice

_ZN11QTextStream9setLocaleERK7QLocale

_ZN11QTextStream9setStatusENS_6StatusE

_ZN11QTextStream9setStringEP7QString6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QTextStreamC1EP10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QTextStreamC1EP6_iobuf6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QTextStreamC1EP7QString6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QTextStreamC1EP9QIODevice

_ZN11QTextStreamC1ERK10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QTextStreamC1Ev

_ZN11QTextStreamC2EP10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QTextStreamC2EP6_iobuf6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QTextStreamC2EP7QString6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QTextStreamC2EP9QIODevice

_ZN11QTextStreamC2ERK10QByteArray6QFlagsIN9QIODevice12OpenModeFlagEE

_ZN11QTextStreamC2Ev

_ZN11QTextStreamD0Ev

_ZN11QTextStreamD1Ev

_ZN11QTextStreamD2Ev

_ZN11QTextStreamlsE5QBool

_ZN11QTextStreamlsE5QChar

_ZN11QTextStreamlsEPKc

_ZN11QTextStreamlsEPKv

_ZN11QTextStreamlsERK10QByteArray

_ZN11QTextStreamlsERK7QString

_ZN11QTextStreamlsEc

_ZN11QTextStreamlsEd

_ZN11QTextStreamlsEf

_ZN11QTextStreamlsEi

_ZN11QTextStreamlsEj

_ZN11QTextStreamlsEl

_ZN11QTextStreamlsEm

_ZN11QTextStreamlsEs

_ZN11QTextStreamlsEt

_ZN11QTextStreamlsEx

_ZN11QTextStreamlsEy

_ZN11QTextStreamrsEPc

_ZN11QTextStreamrsER10QByteArray

_ZN11QTextStreamrsER5QChar

_ZN11QTextStreamrsER7QString

_ZN11QTextStreamrsERc

_ZN11QTextStreamrsERd

_ZN11QTextStreamrsERf

_ZN11QTextStreamrsERi

_ZN11QTextStreamrsERj

_ZN11QTextStreamrsERl

_ZN11QTextStreamrsERm

_ZN11QTextStreamrsERs

_ZN11QTextStreamrsERt

_ZN11QTextStreamrsERx

_ZN11QTextStreamrsERy

_ZN11QThreadPool11qt_metacallEN11QMetaObject4CallEiPPv

_ZN11QThreadPool11qt_metacastEPKc

_ZN11QThreadPool11waitForDoneEi

_ZN11QThreadPool11waitForDoneEv

_ZN11QThreadPool13releaseThreadEv

_ZN11QThreadPool13reserveThreadEv

_ZN11QThreadPool14globalInstanceEv

_ZN11QThreadPool16setExpiryTimeoutEi

_ZN11QThreadPool16staticMetaObjectE

_ZN11QThreadPool17setMaxThreadCountEi

_ZN11QThreadPool18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv

_ZN11QThreadPool25staticMetaObjectExtraDataE

_ZN11QThreadPool5startEP9QRunnablei

_ZN11QThreadPool8tryStartEP9QRunnable

_ZN11QThreadPoolC1EP7QObject

_ZN11QThreadPoolC2EP7QObject

_ZN11QThreadPoolD0Ev

_ZN11QThreadPoolD1Ev

_ZN11QThreadPoolD2Ev

_ZN11QTimerEventC1Ei

_ZN11QTimerEventC2Ei

_ZN11QTimerEventD0Ev

_ZN11QTimerEventD1Ev

_ZN11QTimerEventD2Ev

_ZN11QTranslator11qt_metacallEN11QMetaObject4CallEiPPv

_ZN11QTranslator11qt_metacastEPKc

_ZN11QTranslator16staticMetaObjectE

_ZN11QTranslator18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv

_ZN11QTranslator25staticMetaObjectExtraDataE

_ZN11QTranslator4loadEPKhi

_ZN11QTranslator4loadERK7QLocaleRK7QStringS5_S5_S5_

_ZN11QTranslator4loadERK7QStringS2_S2_S2_

_ZN11QTranslatorC1EP7QObject

_ZN11QTranslatorC1EP7QObjectPKc

_ZN11QTranslatorC2EP7QObject

_ZN11QTranslatorC2EP7QObjectPKc

_ZN11QTranslatorD0Ev

_ZN11QTranslatorD1Ev

_ZN11QTranslatorD2Ev

_ZN11QVectorData10reallocateEPS_iii

_ZN11QVectorData11shared_nullE

_ZN11QVectorData4freeEPS_i

_ZN11QVectorData4growEiiib

_ZN11QVectorData6mallocEiiiPS_

_ZN11QVectorData8allocateEii

_ZN12QCustomEventC1EiPv

_ZN12QCustomEventC2EiPv

_ZN12QCustomEventD0Ev

_ZN12QCustomEventD1Ev

_ZN12QCustomEventD2Ev

_ZN12QDirIterator4nextEv

_ZN12QDirIteratorC1ERK4QDir6QFlagsINS_12IteratorFlagEE

_ZN12QDirIteratorC1ERK7QString6QFlagsIN4QDir6FilterEES3_INS_12IteratorFlagEE

_ZN12QDirIteratorC1ERK7QString6QFlagsINS_12IteratorFlagEE

_ZN12QDirIteratorC1ERK7QStringRK11QStringList6QFlagsIN4QDir6FilterEES6_INS_12IteratorFlagEE

_ZN12QDirIteratorC2ERK4QDir6QFlagsINS_12IteratorFlagEE

_ZN12QDirIteratorC2ERK7QString6QFlagsIN4QDir6FilterEES3_INS_12IteratorFlagEE

_ZN12QDirIteratorC2ERK7QString6QFlagsINS_12IteratorFlagEE

_ZN12QDirIteratorC2ERK7QStringRK11QStringList6QFlagsIN4QDir6FilterEES6_INS_12IteratorFlagEE

_ZN12QDirIteratorD0Ev

_ZN12QDirIteratorD1Ev

_ZN12QDirIteratorD2Ev

_ZN12QEasingCurve12setAmplitudeEd

_ZN12QEasingCurve12setOvershootEd

_ZN12QEasingCurve13setCustomTypeEPFddE

_ZN12QEasingCurve16staticMetaObjectE

_ZN12QEasingCurve7setTypeENS_4TypeE

_ZN12QEasingCurve9setPeriodEd

_ZN12QEasingCurveC1ENS_4TypeE

_ZN12QEasingCurveC1ERKS_

_ZN12QEasingCurveC2ENS_4TypeE

_ZN12QEasingCurveC2ERKS_

_ZN12QEasingCurveD1Ev

_ZN12QEasingCurveD2Ev

_ZN12QEasingCurveaSERKS_

_ZN12QLibraryInfo16licensedProductsEv

_ZN12QLibraryInfo8buildKeyEv

_ZN12QLibraryInfo8licenseeEv

_ZN12QLibraryInfo8locationENS_15LibraryLocationE

_ZN12QLibraryInfo9buildDateEv

_ZN12QLibraryInfoC1Ev

_ZN12QLibraryInfoC2Ev

_ZN12QMutexLocker6relockEv

_ZN12QMutexLocker6unlockEv

_ZN12QMutexLockerD1Ev

_ZN12QSystemError8toStringEv

_ZN12QTextDecoder9toUnicodeEP7QStringPKci

_ZN12QTextDecoder9toUnicodeEPKci

_ZN12QTextDecoder9toUnicodeERK10QByteArray

_ZN12QTextDecoderC1EPK10QTextCodec6QFlagsINS0_14ConversionFlagEE

_ZN12QTextDecoderC2EPK10QTextCodec6QFlagsINS0_14ConversionFlagEE

_ZN12QTextDecoderD1Ev

_ZN12QTextDecoderD2Ev

_ZN12QTextEncoder11fromUnicodeEPK5QChari

_ZN12QTextEncoder11fromUnicodeERK7QString

_ZN12QTextEncoder11fromUnicodeERK7QStringRi

_ZN12QTextEncoderC1EPK10QTextCodec6QFlagsINS0_14ConversionFlagEE

_ZN12QTextEncoderC2EPK10QTextCodec6QFlagsINS0_14ConversionFlagEE

_ZN12QTextEncoderD1Ev

_ZN12QTextEncoderD2Ev

_ZN12QWriteLockerD1Ev

_ZN12QtConcurrent15ResultStoreBase10addResultsEiPKvii

_ZN12QtConcurrent15ResultStoreBase13setFilterModeEb

_ZN12QtConcurrent15ResultStoreBase15syncResultCountEv

_ZN12QtConcurrent15ResultStoreBase16insertResultItemEiRNS_10ResultItemE

_ZN12QtConcurrent15ResultStoreBase17updateInsertIndexEii

_ZN12QtConcurrent15ResultStoreBase18syncPendingResultsEv

_ZN12QtConcurrent15ResultStoreBase23insertResultItemIfValidEiRNS_10ResultItemE

_ZN12QtConcurrent15ResultStoreBase9addResultEiPKv

_ZN12QtConcurrent15ResultStoreBaseC1Ev

_ZN12QtConcurrent15ResultStoreBaseC2Ev

_ZN12QtConcurrent15ResultStoreBaseD0Ev

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rdata
Size: 822KB - Virtual size: 821KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.edata
Size: 185KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

locales/Data/libgcc_s_dw2-1.dll

.dll windows x86

Password: infected

22de106f971ff0449d33ea6ca7f9dcba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle

CreateSemaphoreA

GetCurrentThreadId

GetLastError

GetModuleHandleA

GetProcAddress

InterlockedDecrement

InterlockedIncrement

ReleaseSemaphore

SetLastError

Sleep

TlsAlloc

TlsFree

TlsGetValue

TlsSetValue

VirtualProtect

VirtualQuery

WaitForSingleObject

msvcrt

__dllonexit

_errno

_global_unwind2

abort

calloc

fflush

free

malloc

realloc

Exports

_Unwind_Backtrace

_Unwind_DeleteException

_Unwind_FindEnclosingFunction

_Unwind_Find_FDE

_Unwind_ForcedUnwind

_Unwind_GetCFA

_Unwind_GetDataRelBase

_Unwind_GetGR

_Unwind_GetIP

_Unwind_GetIPInfo

_Unwind_GetLanguageSpecificData

_Unwind_GetRegionStart

_Unwind_GetTextRelBase

_Unwind_RaiseException

_Unwind_Resume

_Unwind_Resume_or_Rethrow

_Unwind_SetGR

_Unwind_SetIP

__absvdi2

__absvsi2

__addvdi3

__addvsi3

__ashldi3

__ashrdi3

__bswapdi2

__bswapsi2

__clear_cache

__clzdi2

__clzsi2

__cmpdi2

__ctzdi2

__ctzsi2

__deregister_frame

__deregister_frame_info

__deregister_frame_info_bases

__divdc3

__divdi3

__divsc3

__divxc3

__emutls_get_address

__emutls_register_common

__enable_execute_stack

__ffsdi2

__ffssi2

__fixdfdi

__fixsfdi

__fixunsdfdi

__fixunsdfsi

__fixunssfdi

__fixunssfsi

__fixunsxfdi

__fixunsxfsi

__fixxfdi

__floatdidf

__floatdisf

__floatdixf

__floatundidf

__floatundisf

__floatundixf

__gcc_except_handler

__gcc_personality_v0

__lshrdi3

__moddi3

__muldc3

__muldi3

__mulsc3

__mulvdi3

__mulvsi3

__mulxc3

__negdi2

__negvdi2

__negvsi2

__paritydi2

__paritysi2

__popcountdi2

__popcountsi2

__powidf2

__powisf2

__powixf2

__register_frame

__register_frame_info

__register_frame_info_bases

__register_frame_info_table

__register_frame_info_table_bases

__register_frame_table

__subvdi3

__subvsi3

__ucmpdi2

__udivdi3

__udivmoddi4

__umoddi3

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 264B

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

locales/Langs/0405.DAT

locales/Langs/0406.DAT

locales/Langs/0407.DAT

locales/Langs/040A.DAT

locales/Langs/040B.DAT

locales/Langs/040C.DAT

locales/Langs/0410.DAT

locales/Langs/0413.DAT

locales/Langs/041E.DAT

locales/RedistList/Columm/bangJarfuls/bicronLoopier.xml

.xml

locales/RedistList/Columm/bangJarfuls/fullamWhealedParpend.xml

.xml

locales/RedistList/Columm/bangJarfuls/hamital.xml

.xml

locales/RedistList/Columm/bangJarfuls/peptoneLaikHomely.xml

.xml

locales/RedistList/Columm/bangJarfuls/spurreyGladsMorae.xml

.xml

locales/RedistList/Columm/bangJarfuls/whissle.xml

.xml

locales/RedistList/Columm/dagEavesChest.xml

.xml

locales/RedistList/Columm/fooled/favnJacklegHangar.xml

.xml

locales/RedistList/Columm/fooled/inhalerFaba.xml

.xml

locales/RedistList/Columm/fooled/luggingAinhum.xml

.xml

locales/RedistList/Columm/fooled/parfaitUnfelon.xml

.xml

locales/RedistList/Columm/fooled/pokey.xml

.xml

locales/RedistList/Columm/fooled/raringCzechScreaky.xml

.xml

locales/RedistList/Columm/gamebagSilting.xml

.xml

locales/RedistList/Columm/seismal.xml

.xml

locales/RedistList/Columm/spavinsScalls.xml

.xml

locales/RedistList/Columm/tappitAllying/astrerDoolies.xml

.xml

locales/RedistList/Columm/tappitAllying/oreticMintersSemiurn.xml

.xml

locales/RedistList/Columm/tappitAllying/pompanoTapetal.xml

.xml

locales/RedistList/Columm/tappitAllying/shimmerAlquierEspinos.xml

.xml

locales/RedistList/Columm/tappitAllying/thraxAcarid.xml

.xml

locales/RedistList/Columm/tappitAllying/unlushSpleetMidmorn.xml

.xml

locales/RedistList/Columm/whipsKnarredFilles/carniesLamp.xml

.xml

locales/RedistList/Columm/whipsKnarredFilles/ferriRichestMacacos.xml

.xml

locales/RedistList/Columm/whipsKnarredFilles/flicky.xml

.xml

locales/RedistList/Columm/whipsKnarredFilles/grataPotting.xml

.xml

locales/RedistList/Columm/whipsKnarredFilles/hepcat.xml

.xml

locales/RedistList/Columm/whipsKnarredFilles/insteamLapinTybalt.xml

.xml

locales/RedistList/Columm/whipsKnarredFilles/korwaColonel.xml

.xml

locales/RedistList/Columm/whipsKnarredFilles/laniateMalisonMinoan.xml

.xml

locales/RedistList/Columm/whipsKnarredFilles/margauxSteghTaluche.xml

.xml

locales/RedistList/Columm/whipsKnarredFilles/nilousSubpoolGazabos.xml

.xml

locales/RedistList/Columm/whipsKnarredFilles/poxed.xml

.xml

locales/RedistList/Columm/yeatPulasMolle.xml

.xml

locales/RedistList/FrameworkList.xml

locales/RedistList/batatasDeucedSabreur.xml

.xml

locales/RedistList/exerceSprettyMitua.xml

.xml

locales/RedistList/legatoVacates.xml

.xml

locales/RedistList/nainHealful.xml

.xml

locales/RedistList/raxing.xml

.xml

locales/RedistList/unniceDicetyl.xml

.xml

locales/app data/.github/FUNDING.yml

locales/app data/.github/ISSUE_TEMPLATE/bug_report.md

locales/app data/.github/ISSUE_TEMPLATE/feature_request.md

locales/app data/.github/workflows/app_build_and_test.yml

locales/app data/.github/workflows/app_playstore_publish.yml

locales/app data/.github/workflows/publish_maven.yml

locales/app data/.github/workflows/stale.yml

locales/app data/app/.gitignore

locales/app data/app/build.gradle

locales/app data/app/proguard-rules.pro

locales/app data/app/src/main/AndroidManifest.xml

.xml

locales/app data/app/src/main/ic_launcher-playstore.png

.png

locales/app data/app/src/main/java/com/burhanrashid52/photoediting/ColorPickerAdapter.kt

locales/app data/app/src/main/java/com/burhanrashid52/photoediting/EditImageActivity.kt

.js

locales/app data/app/src/main/java/com/burhanrashid52/photoediting/EmojiBSFragment.kt

.js

locales/app data/app/src/main/java/com/burhanrashid52/photoediting/FileSaveHelper.kt

.js

locales/app data/app/src/main/java/com/burhanrashid52/photoediting/PhotoApp.kt

locales/app data/app/src/main/java/com/burhanrashid52/photoediting/PropertiesBSFragment.kt

locales/app data/app/src/main/java/com/burhanrashid52/photoediting/ShapeBSFragment.kt

locales/app data/app/src/main/java/com/burhanrashid52/photoediting/StickerBSFragment.kt

locales/app data/app/src/main/java/com/burhanrashid52/photoediting/TextEditorDialogFragment.kt

locales/app data/app/src/main/java/com/burhanrashid52/photoediting/base/BaseActivity.kt

locales/app data/app/src/main/java/com/burhanrashid52/photoediting/base/BaseFragment.kt

locales/app data/app/src/main/java/com/burhanrashid52/photoediting/filters/FilterListener.kt

locales/app data/app/src/main/java/com/burhanrashid52/photoediting/filters/FilterViewAdapter.kt

.js

locales/app data/app/src/main/java/com/burhanrashid52/photoediting/tools/EditingToolsAdapter.kt

locales/app data/app/src/main/java/com/burhanrashid52/photoediting/tools/ToolType.kt

locales/app data/app/src/main/res/drawable-v24/ic_launcher_foreground.xml

locales/app data/app/src/main/res/drawable/blank_image.jpg

locales/app data/app/src/main/res/drawable/ic_brush.xml

locales/app data/app/src/main/res/drawable/ic_camera.xml

locales/app data/app/src/main/res/drawable/ic_close.xml

locales/app data/app/src/main/res/drawable/ic_eraser.xml

locales/app data/app/src/main/res/drawable/ic_gallery.xml

locales/app data/app/src/main/res/drawable/ic_insert_emoticon.xml

locales/app data/app/src/main/res/drawable/ic_launcher_background.xml

.xml

locales/app data/app/src/main/res/drawable/ic_oval.xml

locales/app data/app/src/main/res/drawable/ic_photo_filter.xml

locales/app data/app/src/main/res/drawable/ic_rectangle.xml

locales/app data/app/src/main/res/drawable/ic_redo.xml

locales/app data/app/src/main/res/drawable/ic_save.xml

locales/app data/app/src/main/res/drawable/ic_share.xml

locales/app data/app/src/main/res/drawable/ic_sticker.xml

locales/app data/app/src/main/res/drawable/ic_text.xml

locales/app data/app/src/main/res/drawable/ic_undo.xml

locales/app data/app/src/main/res/drawable/original.jpg

.jpg

locales/app data/app/src/main/res/drawable/paris_tower.jpg

.jpg

locales/app data/app/src/main/res/drawable/rounded_border_text_view.xml

.xml

locales/app data/app/src/main/res/font/roboto_medium.xml

.xml

locales/app data/app/src/main/res/layout/activity_edit_image.xml

.xml

locales/app data/app/src/main/res/layout/add_text_dialog.xml

.xml

locales/app data/app/src/main/res/layout/color_picker_item_list.xml

.xml

locales/app data/app/src/main/res/layout/fragment_bottom_custom_effect_dialog.xml

.xml

locales/app data/app/src/main/res/layout/fragment_bottom_properties_dialog.xml

.xml

locales/app data/app/src/main/res/layout/fragment_bottom_shapes_dialog.xml

.xml

locales/app data/app/src/main/res/layout/fragment_bottom_sticker_emoji_dialog.xml

.xml

locales/app data/app/src/main/res/layout/row_editing_tools.xml

.xml

locales/app data/app/src/main/res/layout/row_emoji.xml

.xml

locales/app data/app/src/main/res/layout/row_filter_view.xml

.xml

locales/app data/app/src/main/res/layout/row_sticker.xml

.xml

locales/app data/app/src/main/res/mipmap-anydpi-v26/ic_launcher.xml

.xml

locales/app data/app/src/main/res/mipmap-anydpi-v26/ic_launcher_round.xml

.xml

locales/app data/app/src/main/res/mipmap-hdpi/ic_launcher.png

.png

locales/app data/app/src/main/res/mipmap-hdpi/ic_launcher_foreground.png

.png

locales/app data/app/src/main/res/mipmap-hdpi/ic_launcher_round.png

.png

locales/app data/app/src/main/res/mipmap-mdpi/ic_launcher.png

.png

locales/app data/app/src/main/res/mipmap-mdpi/ic_launcher_foreground.png

.png

locales/app data/app/src/main/res/mipmap-mdpi/ic_launcher_round.png

.png

locales/app data/app/src/main/res/mipmap-xhdpi/ic_launcher.png

.png

locales/app data/app/src/main/res/mipmap-xhdpi/ic_launcher_foreground.png

.png

locales/app data/app/src/main/res/mipmap-xhdpi/ic_launcher_round.png

.png

locales/app data/app/src/main/res/mipmap-xxhdpi/ic_launcher.png

.png

locales/app data/app/src/main/res/mipmap-xxhdpi/ic_launcher_foreground.png

.png

locales/app data/app/src/main/res/mipmap-xxhdpi/ic_launcher_round.png

.png

locales/app data/app/src/main/res/mipmap-xxxhdpi/ic_launcher.png

.png

locales/app data/app/src/main/res/mipmap-xxxhdpi/ic_launcher_foreground.png

.png

locales/app data/app/src/main/res/mipmap-xxxhdpi/ic_launcher_round.png

.png

locales/app data/app/src/main/res/values-fr/strings.xml

locales/app data/app/src/main/res/values/colors.xml

.xml

locales/app data/app/src/main/res/values/dimens.xml

locales/app data/app/src/main/res/values/font_certs.xml

.xml

locales/app data/app/src/main/res/values/ic_launcher_background.xml

.xml

locales/app data/app/src/main/res/values/preloaded_fonts.xml

.xml

locales/app data/app/src/main/res/values/strings.xml

locales/app data/app/src/main/res/values/styles.xml

locales/app data/app/src/main/res/xml/file_paths.xml

.xml

locales/app data/app/src/test/java/com/burhanrashid52/photoediting/SampleTest.kt

locales/app data/build.gradle

locales/app data/metadata/en-US/changelogs/2.txt

locales/app data/metadata/en-US/full_description.txt

locales/app data/metadata/en-US/images/phoneScreenshots/photoeditor_home.jpg

.png

locales/app data/metadata/en-US/images/phoneScreenshots/photoeditor_image_edited.jpg

.png

locales/app data/metadata/en-US/short_description.txt

locales/app data/metadata/en-US/title.txt

locales/app data/photoeditor/.gitignore

locales/app data/photoeditor/build.gradle

locales/app data/photoeditor/proguard-rules.pro

locales/app data/photoeditor/src/androidTest/java/ja/burhanrashid52/photoeditor/BaseDrawingViewTest.kt

locales/app data/photoeditor/src/androidTest/java/ja/burhanrashid52/photoeditor/DrawingViewApiTest.kt

locales/app data/photoeditor/src/androidTest/java/ja/burhanrashid52/photoeditor/DrawingViewTouchEventTest.kt

locales/app data/photoeditor/src/androidTest/java/ja/burhanrashid52/photoeditor/DrawingViewUndoRedoTest.kt

locales/app data/photoeditor/src/main/AndroidManifest.xml

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/BitmapUtil.kt

.js

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/BoxHelper.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/BrushDrawingStateListener.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/BrushViewChangeListener.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/CustomEffect.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/DrawingView.kt

.js

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/Emoji.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/FilterImageView.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/GLToolbox.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/Graphic.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/GraphicManager.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/ImageFilterView.kt

.js

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/MultiTouchListener.kt

.js

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/OnPhotoEditorListener.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/OnSaveBitmap.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/PhotoEditor.kt

.js

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/PhotoEditorImageViewListener.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/PhotoEditorImpl.kt

.js

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/PhotoEditorView.kt

.js

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/PhotoEditorViewState.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/PhotoFilter.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/PhotoSaverTask.kt

.js

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/SaveFileResult.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/SaveSettings.kt

.js

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/ScaleGestureDetector.kt

.js

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/Sticker.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/Text.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/TextBorder.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/TextShadow.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/TextStyleBuilder.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/TextureRenderer.kt

.js

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/Vector2D.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/ViewType.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/shape/AbstractShape.kt

.js

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/shape/ArrowPointerLocation.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/shape/BrushShape.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/shape/LineShape.kt

.js

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/shape/OvalShape.kt

.js

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/shape/RectangleShape.kt

.js

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/shape/Shape.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/shape/ShapeAndPaint.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/shape/ShapeBuilder.kt

locales/app data/photoeditor/src/main/java/ja/burhanrashid52/photoeditor/shape/ShapeType.kt

locales/app data/photoeditor/src/main/res/drawable-hdpi/ic_remove.png

.png

locales/app data/photoeditor/src/main/res/drawable-mdpi/ic_remove.png

.png

locales/app data/photoeditor/src/main/res/drawable-xhdpi/ic_remove.png

.png

locales/app data/photoeditor/src/main/res/drawable-xxhdpi/ic_remove.png

.png

locales/app data/photoeditor/src/main/res/drawable/rounded_border_tv.xml

.xml

locales/app data/photoeditor/src/main/res/layout/view_photo_editor_image.xml

.xml

locales/app data/photoeditor/src/main/res/layout/view_photo_editor_text.xml

.xml

locales/app data/photoeditor/src/main/res/values/attrs.xml

.xml

locales/app data/photoeditor/src/test/java/ja/burhanrashid52/photoeditor/EnumTest.kt

locales/app data/photoeditor/src/test/java/ja/burhanrashid52/photoeditor/GraphicManagerTest.kt

.js

locales/app data/photoeditor/src/test/java/ja/burhanrashid52/photoeditor/SaveSettingsTest.kt

locales/app data/photoeditor/src/test/java/ja/burhanrashid52/photoeditor/TextStyleBuilderTest.kt

.js

locales/app data/photoeditor/src/test/resources/robolectric.properties

locales/app data/scripts/publish-mavencentral.gradle

locales/braccioAshenWhealy/abirVerbs/blocNorahAlite/cardiacFruggin.xml

.xml

locales/braccioAshenWhealy/abirVerbs/blocNorahAlite/ketting.xml

.xml

locales/braccioAshenWhealy/abirVerbs/combNanigoOundy.xml

.xml

locales/braccioAshenWhealy/abirVerbs/cornettTricksMints.xml

.xml

locales/braccioAshenWhealy/abirVerbs/extrait.xml

.xml

locales/braccioAshenWhealy/abirVerbs/frenums.xml

.xml

locales/braccioAshenWhealy/abirVerbs/geniiTiento.xml

.xml

locales/braccioAshenWhealy/abirVerbs/jigs/bromaLarvule.xml

.xml .wsf

locales/braccioAshenWhealy/abirVerbs/jigs/mellowy.xml

.xml

locales/braccioAshenWhealy/abirVerbs/jigs/mobsmanProsilySully.xml

.xml

locales/braccioAshenWhealy/abirVerbs/jigs/outherVirgil.xml

.xml

locales/braccioAshenWhealy/abirVerbs/jigs/pterion.xml

.xml

locales/braccioAshenWhealy/abirVerbs/jigs/realism.xml

.xml

locales/braccioAshenWhealy/abirVerbs/knurlyKotosSpied.xml

.xml

locales/braccioAshenWhealy/abirVerbs/maganiDiffundTarge.xml

.xml

locales/braccioAshenWhealy/abirVerbs/sutten.xml

.xml

locales/braccioAshenWhealy/abirVerbs/uncuthMahalDrainer/acetalHostaAmmu.xml

.xml

locales/braccioAshenWhealy/abirVerbs/uncuthMahalDrainer/spumes.xml

.xml

locales/braccioAshenWhealy/abirVerbs/uncuthMahalDrainer/vesaniaAssurerErsh.xml

.xml

locales/braccioAshenWhealy/abirVerbs/yatters/bride.xml

.xml

locales/braccioAshenWhealy/abirVerbs/yatters/irpeBurring.xml

.xml

locales/braccioAshenWhealy/abirVerbs/yatters/pacayaGirella.xml

.xml

locales/braccioAshenWhealy/bunnSyndet.xml

.xml

locales/braccioAshenWhealy/catclawIsopod.xml

.xml

locales/braccioAshenWhealy/serailsBatussi/cep.xml

.xml

locales/braccioAshenWhealy/serailsBatussi/ideal/bandeauCepheidSawish.xml

.xml

locales/braccioAshenWhealy/serailsBatussi/ideal/milAbsohm.xml

.xml

locales/braccioAshenWhealy/serailsBatussi/indy.xml

.xml

locales/braccioAshenWhealy/serailsBatussi/jabulDusun.xml

.xml

locales/braccioAshenWhealy/serailsBatussi/lasUndateWindigo.xml

.xml

locales/braccioAshenWhealy/serailsBatussi/pisacha.xml

.xml

locales/braccioAshenWhealy/serailsBatussi/royaleSalmi.xml

.xml

locales/braccioAshenWhealy/serailsBatussi/trabucoHutreImpark/kilnrib.xml

.xml

locales/braccioAshenWhealy/serailsBatussi/trabucoHutreImpark/roarerDentist.xml

.xml

locales/braccioAshenWhealy/serailsBatussi/trabucoHutreImpark/unmews.xml

.xml

locales/braccioAshenWhealy/serailsBatussi/zonulasFroryWastabl/chiasmTripped.xml

.xml

locales/braccioAshenWhealy/serailsBatussi/zonulasFroryWastabl/noseMeiosis.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/akkaPiccageGametic.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/alar/carpiAbaculi.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/alar/haggisEdictal.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/alar/rebeg.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/boikoDacryaDeare.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/divisi/calycesTeco.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/divisi/fixedlyBrodderTelford.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/divisi/infightSlidden.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/dosing.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/durrasKnaveSull/birchesBodikinOaken.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/durrasKnaveSull/chanty.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/durrasKnaveSull/faucesYaksZelotic.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/durrasKnaveSull/labrysJitiAlgate.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/durrasKnaveSull/manorsEggnog.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/durrasKnaveSull/palki.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/durrasKnaveSull/whereatRaunchyOtc.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/ensafeDoyenneWhiled/dawenSling.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/ensafeDoyenneWhiled/docentsTuantKrona.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/greablyClines.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/ihram.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/knutIsmailiProteus.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/nichingHousesKaifs.xml

.xml .wsf

locales/clivisKathaVenge/darkieAlbynRants/pheneYorubaScarola.xml

.xml

locales/clivisKathaVenge/darkieAlbynRants/wanyoro.xml

.xml

locales/clivisKathaVenge/hissers.xml

.xml

locales/clivisKathaVenge/skyjackHyaenic.xml

.xml

locales/guyan/drive/drivers/AppManMigrationPlugin.dll

.dll regsvr32 windows x64

Password: infected

3426e31e2eb9a00393a44c4098df121d

Code Sign

33:00:00:03:8b:79:45:c1:8b:0e:b6:87:ec:00:00:00:00:03:8b
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05-05-2022 19:23

Not After

04-05-2023 19:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

c5:8b:ac:8f:3f:a6:f2:e6:3e:b2:83:f0:c0:3d:a0:b0:f6:d2:87:c0:bd:a6:46:dc:6f:ae:bb:35:50:98:3e:fe
Signer

Actual PE Digest

c5:8b:ac:8f:3f:a6:f2:e6:3e:b2:83:f0:c0:3d:a0:b0:f6:d2:87:c0:bd:a6:46:dc:6f:ae:bb:35:50:98:3e:fe

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

21-03-2023 12:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

msvcrt

___lc_collate_cp_func

setlocale

__pctype_func

isupper

___lc_handle_func

___lc_codepage_func

memcmp

___mb_cur_max_func

_ismbblead

__uncaught_exception

islower

_wcsdup

??8type_info@@QEBAHAEBV0@@Z

__crtCompareStringW

__crtCompareStringA

__crtLCMapStringW

__crtLCMapStringA

_wsetlocale

isspace

tolower

memchr

abort

memset

isalnum

_Getdays

ungetc

_W_Getdays

_W_Getmonths

_W_Gettnames

_Wcsftime

__mb_cur_max

_Gettnames

_Strftime

strchr

_wcsicmp

??0bad_cast@@QEAA@AEBV0@@Z

??0bad_cast@@QEAA@PEBD@Z

??1bad_cast@@UEAA@XZ

strerror

ldexp

fseek

mbstowcs_s

?name@type_info@@QEBAPEBDXZ

_fseeki64

_wfsopen

fsetpos

setvbuf

fgetpos

fwrite

fgetc

fclose

fflush

fputc

sprintf_s

_stricmp

localeconv

strcspn

_wcsnicmp

time

??1type_info@@UEAA@XZ

_onexit

__dllonexit

_unlock

_lock

?terminate@@YAXXZ

realloc

_errno

_initterm

_amsg_exit

_XcptFilter

memmove

memcpy

_CxxThrowException

?what@exception@@UEBAPEBDXZ

??0exception@@QEAA@AEBQEBDH@Z

??0exception@@QEAA@AEBQEBD@Z

_callnewh

swprintf_s

ldiv

_Getmonths

isdigit

calloc

_wtoi

wcscat_s

wcsncpy_s

malloc

memmove_s

free

_vsnprintf_s

??0exception@@QEAA@AEBV0@@Z

??0exception@@QEAA@XZ

??1exception@@UEAA@XZ

_purecall

wcscpy_s

memcpy_s

_vsnwprintf

??_V@YAXPEAX@Z

__C_specific_handler

__CxxFrameHandler3

??3@YAXPEAX@Z

wcscmp

ntdll

RtlCaptureContext

RtlVirtualUnwind

RtlLookupFunctionEntry

kernel32

SleepConditionVariableSRW

WakeAllConditionVariable

DecodePointer

EncodePointer

GetLocaleInfoW

GetStringTypeW

LocalAlloc

GetProcessMitigationPolicy

TlsFree

TlsGetValue

TlsAlloc

GetModuleFileNameA

SizeofResource

CreateSemaphoreExW

HeapFree

SetLastError

EnterCriticalSection

ReleaseSemaphore

GetModuleHandleExW

GetModuleFileNameW

LeaveCriticalSection

InitializeCriticalSection

WaitForSingleObject

GetCurrentThreadId

ReleaseMutex

FormatMessageW

GetLastError

OutputDebugStringW

WaitForSingleObjectEx

LockResource

OpenSemaphoreW

CloseHandle

RaiseException

FindResourceExW

LoadResource

HeapAlloc

GetProcAddress

CreateMutexExW

DeleteCriticalSection

GetCurrentProcessId

GetProcessHeap

GetModuleHandleW

DebugBreak

lstrcmpiW

LoadLibraryExW

FreeLibrary

MultiByteToWideChar

GetThreadLocale

SetThreadLocale

InitOnceBeginInitialize

InitOnceComplete

FindFirstFileW

FindNextFileW

FindClose

GetSystemDirectoryW

GetFileAttributesW

HeapSize

HeapReAlloc

HeapDestroy

WideCharToMultiByte

LocalFree

Sleep

UnhandledExceptionFilter

SetUnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

QueryPerformanceCounter

GetSystemTimeAsFileTime

GetTickCount

OutputDebugStringA

TlsSetValue

ResetEvent

OpenEventA

ProcessIdToSessionId

GetFileTime

GetFileSize

SetEvent

SetFileAttributesW

CreateFileW

ExpandEnvironmentStringsW

WriteFile

CreateEventA

ReadFile

GetComputerNameExW

lstrlenA

SystemTimeToFileTime

GetLocalTime

LocalUnlock

DeleteFileW

LocalLock

AcquireSRWLockShared

AreFileApisANSI

CreateDirectoryW

DeviceIoControl

GetCurrentDirectoryW

IsDebuggerPresent

CreateThreadpoolTimer

ReleaseSRWLockShared

SetThreadpoolTimer

AcquireSRWLockExclusive

CloseThreadpoolTimer

ReleaseSRWLockExclusive

WaitForThreadpoolTimerCallbacks

InitializeCriticalSectionEx

FormatMessageA

ole32

OleRun

CoCreateInstance

CLSIDFromString

CoTaskMemAlloc

CoTaskMemRealloc

CoTaskMemFree

StringFromCLSID

CLSIDFromProgID

CoUninitialize

CoInitializeEx

StringFromGUID2

oleaut32

SysAllocStringByteLen

VarUI4FromStr

SysStringLen

SysFreeString

LoadTypeLi

LoadRegTypeLi

UnRegisterTypeLi

SysAllocString

RegisterTypeLi

VariantInit

VariantClear

GetErrorInfo

user32

UnregisterClassA

CharNextW

advapi32

EventUnregister

EventWriteTransfer

EventRegister

RegGetValueW

RegDeleteValueW

RegQueryInfoKeyW

RegSetKeyValueW

EventSetInformation

RegQueryValueExW

RegDeleteKeyExW

RegEnumValueW

EqualSid

CreateWellKnownSid

GetNamedSecurityInfoW

OpenProcessToken

GetTokenInformation

RegDeleteTreeW

RegCloseKey

RegCreateKeyExW

RegEnumKeyExW

RegSetValueExW

RegOpenKeyExW

shell32

SHGetFileInfoW

SHGetKnownFolderPath

activeds

ord3

Exports

DllCanUnloadNow

DllGetClassObject

DllMain

DllRegisterServer

DllUnregisterServer

Sections

.text
Size: 835KB - Virtual size: 834KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

locales/guyan/drive/drivers/Xaml.Controls.Tabs.dll

.dll windows x64

Password: infected

76a198e9ad1a91c289dbfc5b737a0f17

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_APPCONTAINER

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW

GetModuleHandleW

GetProcAddress

GetModuleFileNameA

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize

WakeConditionVariable

InitializeConditionVariable

WakeAllConditionVariable

InitOnceComplete

InitOnceExecuteOnce

SleepConditionVariableSRW

Sleep

api-ms-win-core-synch-l1-1-0

WaitForSingleObject

CreateSemaphoreExW

InitializeCriticalSection

EnterCriticalSection

ReleaseSemaphore

InitializeCriticalSectionEx

DeleteCriticalSection

AcquireSRWLockShared

ReleaseSRWLockExclusive

CreateMutexExW

CreateEventW

ResetEvent

SetEvent

InitializeCriticalSectionAndSpinCount

ReleaseMutex

InitializeSRWLock

ReleaseSRWLockShared

TryAcquireSRWLockExclusive

OpenSemaphoreW

WaitForSingleObjectEx

AcquireSRWLockExclusive

LeaveCriticalSection

api-ms-win-core-heap-l1-1-0

HeapFree

GetProcessHeap

HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

RaiseException

UnhandledExceptionFilter

SetUnhandledExceptionFilter

SetLastError

GetLastError

api-ms-win-eventing-provider-l1-1-0

EventSetInformation

EventUnregister

EventWriteTransfer

EventProviderEnabled

EventRegister

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolWork

FreeLibraryWhenCallbackReturns

SubmitThreadpoolWork

CloseThreadpoolWork

CreateThreadpoolTimer

SetThreadpoolTimer

WaitForThreadpoolTimerCallbacks

CloseThreadpoolTimer

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId

TerminateProcess

GetCurrentThreadId

GetCurrentProcess

api-ms-win-core-localization-l1-2-0

FormatMessageW

LCMapStringEx

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

OutputDebugStringW

DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-rtcore-ntuser-window-l1-1-0

GetMessageTime

api-ms-win-core-sysinfo-l1-1-0

GetTickCount64

GetSystemTimeAsFileTime

GetTickCount

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler

CoTaskMemAlloc

CoGetApartmentType

CoGetObjectContext

CoTaskMemFree

CoGetContextToken

wincorlib

?__abi_cast_String_to_Object@__abi_details@@YAPE$AAVObject@Platform@@PE$AAVString@3@@Z

?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z

?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z

?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z

?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z

?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z

?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z

?CreateValue@Details@Platform@@YAPE$AAVObject@2@W4TypeCode@2@PEBX@Z

?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@PE$AAV12@@Z

??0NullReferenceException@Platform@@QE$AAA@XZ

?Allocate@Heap@Details@Platform@@SAPEAX_K@Z

??0Delegate@Platform@@QE$AAA@XZ

?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z

??0ChangedStateException@Platform@@QE$AAA@XZ

??0OutOfBoundsException@Platform@@QE$AAA@XZ

??0FailureException@Platform@@QE$AAA@XZ

??0OutOfMemoryException@Platform@@QE$AAA@XZ

?__abi_make_type_id@@YAPE$AAVType@Platform@@AEBU__abi_type_descriptor@@@Z

??BType@Platform@@SA?AVTypeName@Interop@Xaml@UI@Windows@@PE$AAV01@@Z

?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z

??0NotImplementedException@Platform@@QE$AAA@XZ

?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z

?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z

?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z

?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z

?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z

??0Object@Platform@@QE$AAA@XZ

?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ

?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z

?get@FullName@Type@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_WinRTraiseObjectDisposedException@@YAXXZ

?__abi_WinRTraiseInvalidCastException@@YAXXZ

?__abi_WinRTraiseNotImplementedException@@YAXXZ

?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z

?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ

?__abi_WinRTraiseDisconnectedException@@YAXXZ

?__abi_WinRTraiseFailureException@@YAXXZ

?__abi_WinRTraiseOperationCanceledException@@YAXXZ

?__abi_WinRTraiseAccessDeniedException@@YAXXZ

?__abi_WinRTraiseInvalidArgumentException@@YAXXZ

?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ

??0InvalidArgumentException@Platform@@QE$AAA@PE$AAVString@1@@Z

?__abi_WinRTraiseCOMException@@YAXJ@Z

?__abi_WinRTraiseNullReferenceException@@YAXXZ

?__abi_WinRTraiseChangedStateException@@YAXXZ

?__abi_WinRTraiseOutOfBoundsException@@YAXXZ

?__abi_WinRTraiseWrongThreadException@@YAXXZ

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ

??0DisconnectedException@Platform@@QE$AAA@XZ

?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z

?__abi_cast_Object_to_String@__abi_details@@YAPE$AAVString@Platform@@_NPE$AAVObject@3@@Z

??0GridLength@Xaml@UI@Windows@@QEAA@NW4GridUnitType@123@@Z

?InitializeData@Details@Platform@@YAJH@Z

?UninitializeData@Details@Platform@@YAXH@Z

?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z

?__abi_FailFast@@YAXXZ

?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z

?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z

?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z

??0InvalidArgumentException@Platform@@QE$AAA@XZ

?Equals@Object@Platform@@QE$AAA_NPE$AAV12@@Z

?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ

?GetActivationFactory@Details@Platform@@YAJPEAVModuleBase@1WRL@Microsoft@@PEAUHSTRING__@@PEAPEAUIActivationFactory@@@Z

?TerminateModule@Details@Platform@@YA_NPEAVModuleBase@1WRL@Microsoft@@@Z

?Free@Heap@Details@Platform@@SAXPEAX@Z

?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z

?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z

api-ms-win-crt-string-l1-1-0

wcslen

wcsnlen

memset

api-ms-win-crt-locale-l1-1-0

_lock_locales

_unlock_locales

api-ms-win-crt-private-l1-1-0

_o___pctype_func

_o___std_exception_copy

_o___std_exception_destroy

_o___std_type_info_destroy_list

_o___stdio_common_vsnprintf_s

_o___stdio_common_vswprintf

_o__callnewh

_o__calloc_base

_o__cexit

_o__configure_narrow_argv

_o__crt_atexit

_o__dtest

_o__errno

_o__execute_onexit_table

_o__free_base

_o__initialize_narrow_environment

_o__initialize_onexit_table

_o__invalid_parameter_noinfo

_o__invalid_parameter_noinfo_noreturn

_o__malloc_base

_o__purecall

_o__register_onexit_function

_o__wcsdup

_o__wtof

_o__wtoi

_o_abort

_o_floor

_o_free

_o_malloc

_o_powf

_o_realloc

_o_setlocale

_o_terminate

_o_toupper

_o_wcstol

__CxxFrameHandler4

wcsstr

__std_terminate

wcsrchr

strchr

_CxxThrowException

__CxxFrameHandler3

__current_exception

__AdjustPointer

__processing_throw

__GetPlatformExceptionInfo

__C_specific_handler

_o____mb_cur_max_func

_o____lc_locale_name_func

_o____lc_collate_cp_func

_o____lc_codepage_func

_o__seh_filter_dll

memcmp

memcpy

memmove

api-ms-win-core-winrt-string-l1-1-0

WindowsIsStringEmpty

WindowsGetStringRawBuffer

WindowsGetStringLen

WindowsDuplicateString

WindowsDeleteString

WindowsCreateStringReference

WindowsCreateString

WindowsConcatString

WindowsCompareStringOrdinal

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo

RoFailFastWithErrorContext

RoOriginateError

api-ms-win-core-winrt-error-l1-1-1

RoReportUnhandledError

api-ms-win-core-util-l1-1-0

EncodePointer

DecodePointer

api-ms-win-core-rtlsupport-l1-1-0

RtlPcToFileHeader

RtlCaptureContext

RtlVirtualUnwind

RtlLookupFunctionEntry

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-string-l1-1-0

GetStringTypeW

CompareStringEx

MultiByteToWideChar

WideCharToMultiByte

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-heap-l2-1-0

LocalAlloc

api-ms-win-crt-runtime-l1-1-0

_initterm

_initterm_e

Exports

DllCanUnloadNow

DllGetActivationFactory

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 255KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

locales/guyan/drive/drivers/mfcsubs.dll

.dll windows x64

30c7cb39213bf552e9d5798b2c47de50

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

malloc

free

_amsg_exit

__CxxFrameHandler3

__C_specific_handler

_XcptFilter

_purecall

iswspace

?terminate@@YAXXZ

memmove

_vsnwprintf

iswdigit

_wtoi

wcsstr

wcsrchr

wcscspn

wcsspn

_wcsrev

_wcslwr

_wcsupr

wcspbrk

wcschr

wcscoll

_wcsicmp

_initterm

memcpy

memset

api-ms-win-core-synch-l1-1-0

WaitForSingleObject

InitializeCriticalSection

LeaveCriticalSection

EnterCriticalSection

DeleteCriticalSection

api-ms-win-core-com-l1-1-0

CoTaskMemFree

CoTaskMemAlloc

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

UnhandledExceptionFilter

RaiseException

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

GetCurrentProcess

GetCurrentThreadId

GetCurrentProcessId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

GetTickCount

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry

RtlCaptureContext

RtlVirtualUnwind

Exports

??$ConstructElements@VCString@@@@YAXPEAVCString@@H@Z

??$CopyElements@VCString@@@@YAXPEAVCString@@PEBV0@H@Z

??$DestructElements@VCString@@@@YAXPEAVCString@@H@Z

??$HashKey@AEBU_GUID@@@@YAIAEBU_GUID@@@Z

??$HashKey@PEBD@@YAIPEBD@Z

??$HashKey@PEBG@@YAIPEBG@Z

??0CCriticalSection@@QEAA@XZ

??0CMapStringToPtr@@QEAA@H@Z

??0CObject@@IEAA@XZ

??0CString@@QEAA@AEBV0@@Z

??0CString@@QEAA@GH@Z

??0CString@@QEAA@PEBD@Z

??0CString@@QEAA@PEBE@Z

??0CString@@QEAA@PEBG@Z

??0CString@@QEAA@PEBGH@Z

??0CString@@QEAA@XZ

??0CStringArray@@QEAA@XZ

??0CSyncObject@@QEAA@PEBG@Z

??1CCriticalSection@@UEAA@XZ

??1CMapStringToPtr@@UEAA@XZ

??1CObject@@UEAA@XZ

??1CString@@QEAA@XZ

??1CStringArray@@UEAA@XZ

??1CSyncObject@@UEAA@XZ

??4CPlex@@QEAAAEAU0@$$QEAU0@@Z

??4CPlex@@QEAAAEAU0@AEBU0@@Z

??4CString@@QEAAAEBV0@AEBV0@@Z

??4CString@@QEAAAEBV0@D@Z

??4CString@@QEAAAEBV0@G@Z

??4CString@@QEAAAEBV0@PEBD@Z

??4CString@@QEAAAEBV0@PEBE@Z

??4CString@@QEAAAEBV0@PEBG@Z

??8@YA_NAEBVCString@@0@Z

??8@YA_NAEBVCString@@PEBG@Z

??8@YA_NPEBGAEBVCString@@@Z

??9@YA_NAEBVCString@@0@Z

??9@YA_NAEBVCString@@PEBG@Z

??9@YA_NPEBGAEBVCString@@@Z

??ACMapStringToPtr@@QEAAAEAPEAXPEBG@Z

??ACString@@QEBAGH@Z

??ACStringArray@@QEAAAEAVCString@@H@Z

??ACStringArray@@QEBA?AVCString@@H@Z

??BCCriticalSection@@QEAAPEAU_RTL_CRITICAL_SECTION@@XZ

??BCString@@QEBAPEBGXZ

??BCSyncObject@@QEBAPEAXXZ

??H@YA?AVCString@@AEBV0@0@Z

??H@YA?AVCString@@AEBV0@D@Z

??H@YA?AVCString@@AEBV0@G@Z

??H@YA?AVCString@@AEBV0@PEBG@Z

??H@YA?AVCString@@DAEBV0@@Z

??H@YA?AVCString@@GAEBV0@@Z

??H@YA?AVCString@@PEBGAEBV0@@Z

??M@YA_NAEBVCString@@0@Z

??M@YA_NAEBVCString@@PEBG@Z

??M@YA_NPEBGAEBVCString@@@Z

??N@YA_NAEBVCString@@0@Z

??N@YA_NAEBVCString@@PEBG@Z

??N@YA_NPEBGAEBVCString@@@Z

??O@YA_NAEBVCString@@0@Z

??O@YA_NAEBVCString@@PEBG@Z

??O@YA_NPEBGAEBVCString@@@Z

??P@YA_NAEBVCString@@0@Z

??P@YA_NAEBVCString@@PEBG@Z

??P@YA_NPEBGAEBVCString@@@Z

??YCString@@QEAAAEBV0@AEBV0@@Z

??YCString@@QEAAAEBV0@D@Z

??YCString@@QEAAAEBV0@G@Z

??YCString@@QEAAAEBV0@PEBG@Z

??_7CCriticalSection@@6B@

??_7CMapStringToPtr@@6B@

??_7CObject@@6B@

??_7CStringArray@@6B@

??_7CSyncObject@@6B@

??_FCMapStringToPtr@@QEAAXXZ

?Add@CStringArray@@QEAAHPEBG@Z

?AfxExtractSubString@@YAHAEAVCString@@PEBGHG@Z

?AfxGetEmptyString@@YAAEBVCString@@XZ

?AfxLoadString@@YAHIPEAGI@Z

?AllocBeforeWrite@CString@@IEAAXH@Z

?AllocBuffer@CString@@IEAAXH@Z

?AllocCopy@CString@@IEBAXAEAV1@III@Z

?Append@CStringArray@@QEAAHAEBV1@@Z

?AssignCopy@CString@@IEAAXHPEBG@Z

?Collate@CString@@QEBAHPEBG@Z

?Compare@CString@@QEBAHPEBG@Z

?CompareNoCase@CString@@QEBAHPEBG@Z

?ConcatCopy@CString@@IEAAXHPEBGH0@Z

?ConcatInPlace@CString@@IEAAXHPEBG@Z

?Copy@CStringArray@@QEAAXAEBV1@@Z

?CopyBeforeWrite@CString@@IEAAXXZ

?Create@CPlex@@SAPEAU1@AEAPEAU1@II@Z

?ElementAt@CStringArray@@QEAAAEAVCString@@H@Z

?Empty@CString@@QEAAXXZ

?Find@CString@@QEBAHG@Z

?Find@CString@@QEBAHPEBG@Z

?FindOneOf@CString@@QEBAHPEBG@Z

?Format@CString@@QEAAXIZZ

?Format@CString@@QEAAXPEBGZZ

?FormatMessageW@CString@@QEAAXIZZ

?FormatMessageW@CString@@QEAAXPEBGZZ

?FormatV@CString@@IEAAXPEBGPEAD@Z

?FreeAssoc@CMapStringToPtr@@IEAAXPEAUCAssoc@1@@Z

?FreeDataChain@CPlex@@QEAAXXZ

?FreeExtra@CString@@QEAAXXZ

?FreeExtra@CStringArray@@QEAAXXZ

?GetAllocLength@CString@@QEBAHXZ

?GetAssocAt@CMapStringToPtr@@IEBAPEAUCAssoc@1@PEBGAEAI@Z

?GetAt@CString@@QEBAGH@Z

?GetAt@CStringArray@@QEBA?AVCString@@H@Z

?GetBuffer@CString@@QEAAPEAGH@Z

?GetBufferSetLength@CString@@QEAAPEAGH@Z

?GetCount@CMapStringToPtr@@QEBAHXZ

?GetData@CString@@IEBAPEAUCStringData@@XZ

?GetData@CStringArray@@QEAAPEAVCString@@XZ

?GetData@CStringArray@@QEBAPEBVCString@@XZ

?GetHashTableSize@CMapStringToPtr@@QEBAIXZ

?GetLength@CString@@QEBAHXZ

?GetNextAssoc@CMapStringToPtr@@QEBAXAEAPEAU__POSITION@@AEAVCString@@AEAPEAX@Z

?GetSize@CStringArray@@QEBAHXZ

?GetStartPosition@CMapStringToPtr@@QEBAPEAU__POSITION@@XZ

?GetUpperBound@CStringArray@@QEBAHXZ

?HashKey@CMapStringToPtr@@QEBAIPEBG@Z

?Init@CString@@IEAAXXZ

?InitHashTable@CMapStringToPtr@@QEAAXIH@Z

?InsertAt@CStringArray@@QEAAXHPEAV1@@Z

?InsertAt@CStringArray@@QEAAXHPEBGH@Z

?IsEmpty@CMapStringToPtr@@QEBAHXZ

?IsEmpty@CString@@QEBAHXZ

?Left@CString@@QEBA?AV1@H@Z

?LoadStringW@CString@@QEAAHI@Z

?Lock@CCriticalSection@@QEAAHXZ

?Lock@CCriticalSection@@UEAAHK@Z

?Lock@CSyncObject@@UEAAHK@Z

?LockBuffer@CString@@QEAAPEAGXZ

?Lookup@CMapStringToPtr@@QEBAHPEBGAEAPEAX@Z

?LookupKey@CMapStringToPtr@@QEBAHPEBGAEAPEBG@Z

?MakeLower@CString@@QEAAXXZ

?MakeReverse@CString@@QEAAXXZ

?MakeUpper@CString@@QEAAXXZ

?Mid@CString@@QEBA?AV1@H@Z

?Mid@CString@@QEBA?AV1@HH@Z

?NewAssoc@CMapStringToPtr@@IEAAPEAUCAssoc@1@XZ

?Release@CString@@IEAAXXZ

?Release@CString@@KAXPEAUCStringData@@@Z

?ReleaseBuffer@CString@@QEAAXH@Z

?RemoveAll@CMapStringToPtr@@QEAAXXZ

?RemoveAll@CStringArray@@QEAAXXZ

?RemoveAt@CStringArray@@QEAAXHH@Z

?RemoveKey@CMapStringToPtr@@QEAAHPEBG@Z

?ReverseFind@CString@@QEBAHG@Z

?Right@CString@@QEBA?AV1@H@Z

?SafeStrlen@CString@@KAHPEBG@Z

?SetAt@CMapStringToPtr@@QEAAXPEBGPEAX@Z

?SetAt@CString@@QEAAXHG@Z

?SetAt@CStringArray@@QEAAXHPEBG@Z

?SetAtGrow@CStringArray@@QEAAXHPEBG@Z

?SetSize@CStringArray@@QEAAXHH@Z

?SpanExcluding@CString@@QEBA?AV1@PEBG@Z

?SpanIncluding@CString@@QEBA?AV1@PEBG@Z

?TrimLeft@CString@@QEAAXXZ

?TrimRight@CString@@QEAAXXZ

?Unlock@CCriticalSection@@UEAAHXZ

?Unlock@CSyncObject@@UEAAHJPEAJ@Z

?UnlockBuffer@CString@@QEAAXXZ

?data@CPlex@@QEAAPEAXXZ

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

locales/guyan/recover/DMWmiBridgeProv.dll

.dll regsvr32 windows x64

3654398321e9ef24847f22d2e5c0feab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

sprintf_s

_wtoi

_wcsicmp

_wcsnicmp

wcsstr

swprintf_s

memcpy

??1type_info@@UEAA@XZ

?terminate@@YAXXZ

_callnewh

_vsnprintf_s

??0exception@@QEAA@AEBV0@@Z

??0exception@@QEAA@XZ

??1exception@@UEAA@XZ

_purecall

??3@YAXPEAX@Z

memcpy_s

_vsnwprintf

??_V@YAXPEAX@Z

__CxxFrameHandler3

memmove

memset

_onexit

__dllonexit

_unlock

_lock

__C_specific_handler

_initterm

_amsg_exit

_XcptFilter

malloc

free

_CxxThrowException

wcscmp

api-ms-win-core-sysinfo-l1-1-0

GetSystemDirectoryW

GetSystemTimeAsFileTime

GetTickCount

api-ms-win-core-errorhandling-l1-1-0

GetLastError

SetLastError

SetUnhandledExceptionFilter

UnhandledExceptionFilter

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary

LoadLibraryExW

GetModuleHandleExW

DisableThreadLibraryCalls

GetModuleHandleW

GetModuleFileNameA

GetProcAddress

api-ms-win-core-synch-l1-2-0

WakeAllConditionVariable

Sleep

SleepConditionVariableSRW

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess

TerminateProcess

GetCurrentProcessId

GetCurrentThreadId

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

msvcp110_win

?pbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z

?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ

??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z

?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ

??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ

?_Add_vtordisp1@?$basic_ios@GU?$char_traits@G@std@@@std@@UEAAXXZ

?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z

?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z

?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ

?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ

?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ

?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ

?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z

?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z

?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z

?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z

?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z

??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ

?_Add_vtordisp2@?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAAXXZ

??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ

?endl@std@@YAAEAV?$basic_ostream@GU?$char_traits@G@std@@@1@AEAV21@@Z

??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ

?_BADOFF@std@@3_JB

?uncaught_exception@std@@YA_NXZ

?_Xbad_alloc@std@@YAXXZ

?_Xout_of_range@std@@YAXPEBD@Z

?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ

??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ

?_Winerror_map@std@@YAPEBDH@Z

?_Syserror_map@std@@YAPEBDH@Z

?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z

?_Xlength_error@std@@YAXPEBD@Z

??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ

api-ms-win-eventing-provider-l1-1-0

EventActivityIdControl

EventUnregister

EventSetInformation

EventRegister

EventWriteTransfer

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection

CreateMutexExW

OpenSemaphoreW

WaitForSingleObjectEx

WaitForSingleObject

ReleaseSemaphore

CreateSemaphoreExW

EnterCriticalSection

InitializeCriticalSection

LeaveCriticalSection

ReleaseSRWLockExclusive

AcquireSRWLockExclusive

ReleaseMutex

api-ms-win-core-heap-l1-1-0

HeapFree

GetProcessHeap

HeapAlloc

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW

IsDebuggerPresent

DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle

coredpus

ord10

dmenrollengine

ord10

ord12

EnrollEngineInitialize

dmcmnutils

UnicodeToMB

DmGetCurrentUserSid

DmIsRunningInSystemContext

EscapeStringW

ntdll

RtlIsStateSeparationEnabled

oleaut32

VariantInit

SysFreeString

SysAllocStringByteLen

SysAllocString

VariantCopy

VariantClear

VariantChangeType

api-ms-win-core-heap-l2-1-0

LocalFree

LocalAlloc

api-ms-win-core-com-l1-1-0

CoUninitialize

StringFromGUID2

CLSIDFromString

CoInitializeEx

CoCreateInstance

rpcrt4

UuidCreate

api-ms-win-core-registry-l1-1-0

RegQueryValueExW

RegOpenKeyExW

RegCloseKey

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrChrW

shlwapi

ord12

xmllite

CreateXmlReader

CreateXmlReaderInputWithEncodingName

Exports

DllCanUnloadNow

DllGetClassObject

DllMain

DllRegisterServer

DllUnregisterServer

GetProviderClassID

MI_Main

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 119KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

locales/guyan/recover/MFMediaEngine.dll

.dll windows x64

96b5470fdc3fca149ad59c6032c2a796

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

_W_Gettnames

abort

ldexp

_ismbblead

_Wcsftime

_vsnprintf

_Gettnames

_Strftime

isspace

___lc_handle_func

___mb_cur_max_func

setlocale

_unlock

_wcsdup

_Getdays

memchr

_lock

memmove

memcpy

_CxxThrowException

islower

_ltoa_s

_i64toa_s

_gcvt_s

___lc_collate_cp_func

memcmp

_wsetlocale

strcspn

isalnum

localeconv

sprintf_s

??0bad_cast@@QEAA@PEBD@Z

??1bad_cast@@UEAA@XZ

??0bad_cast@@QEAA@AEBV0@@Z

_wtof

wcstoul

isdigit

time

ctime

atoi

wcstombs_s

memmove_s

calloc

iswdigit

iswalpha

wcscspn

swscanf

strncmp

strncpy_s

strnlen

wcstod

__mb_cur_max

??0exception@@QEAA@AEBQEBD@Z

_errno

isxdigit

strtol

_strtoui64

_XcptFilter

_strnicmp

_amsg_exit

isalpha

_wtoi

_initterm

__C_specific_handler

wcsrchr

wcsstr

wcschr

??0exception@@QEAA@XZ

_vsnprintf_s

wcspbrk

??0exception@@QEAA@AEBQEBDH@Z

??0exception@@QEAA@AEBV0@@Z

__dllonexit

??1exception@@UEAA@XZ

?what@exception@@UEBAPEBDXZ

__CxxFrameHandler3

wcscpy_s

swscanf_s

_onexit

_wcsicmp

_W_Getmonths

memset

_W_Getdays

__uncaught_exception

__pctype_func

isupper

_ui64toa_s

?terminate@@YAXXZ

??1type_info@@UEAA@XZ

_ultow_s

towlower

tolower

_ltow_s

_ultoa_s

realloc

__crtLCMapStringA

_stricmp

isprint

_finite

_isnan

__crtLCMapStringW

_Getmonths

__crtCompareStringA

_vsnwprintf

_wcsnicmp

wcsncmp

qsort

memcpy_s

towupper

wcstok_s

_callnewh

malloc

free

_purecall

__crtCompareStringW

___lc_codepage_func

floor

wcscmp

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW

Sleep

InitOnceExecuteOnce

WakeAllConditionVariable

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

SetLastError

RaiseException

UnhandledExceptionFilter

GetLastError

api-ms-win-core-synch-l1-1-0

AcquireSRWLockExclusive

LeaveCriticalSection

CreateMutexW

EnterCriticalSection

ResetEvent

SetWaitableTimer

CreateWaitableTimerExW

SetEvent

CreateEventW

WaitForSingleObject

ReleaseSRWLockShared

InitializeCriticalSection

CreateSemaphoreExW

ReleaseSemaphore

CreateEventExW

AcquireSRWLockShared

ReleaseMutex

InitializeSRWLock

DeleteCriticalSection

WaitForSingleObjectEx

OpenSemaphoreW

CreateMutexExW

InitializeCriticalSectionEx

ReleaseSRWLockExclusive

WaitForMultipleObjectsEx

api-ms-win-eventing-provider-l1-1-0

EventSetInformation

EventUnregister

EventRegister

EventWriteTransfer

api-ms-win-core-util-l1-1-0

EncodePointer

DecodePointer

api-ms-win-eventing-classicprovider-l1-1-0

GetTraceLoggerHandle

UnregisterTraceGuids

GetTraceEnableFlags

RegisterTraceGuidsW

TraceMessage

GetTraceEnableLevel

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary

LoadLibraryExW

DisableThreadLibraryCalls

GetModuleHandleExW

GetModuleHandleW

GetProcAddress

LoadStringW

GetModuleFileNameW

GetModuleFileNameA

api-ms-win-core-processthreads-l1-1-0

TlsGetValue

TerminateProcess

CreateThread

GetCurrentProcess

OpenProcessToken

GetCurrentProcessId

GetCurrentThreadId

TlsSetValue

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrSpnW

StrCmpNW

StrCmpNIW

StrStrW

StrCmpW

StrToIntW

StrStrIW

StrTrimW

StrChrW

StrCmpIW

api-ms-win-core-string-l1-1-0

GetStringTypeW

WideCharToMultiByte

MultiByteToWideChar

CompareStringOrdinal

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolTimer

SetThreadpoolTimer

WaitForThreadpoolTimerCallbacks

CreateThreadpoolTimer

api-ms-win-core-heap-l1-1-0

HeapAlloc

GetProcessHeap

HeapReAlloc

HeapFree

api-ms-win-core-registry-l1-1-0

RegCreateKeyExA

RegGetValueW

RegOpenKeyExW

RegEnumKeyExW

RegCloseKey

RegQueryValueExA

RegSetValueExA

api-ms-win-core-handle-l1-1-0

DuplicateHandle

CloseHandle

api-ms-win-core-localization-l1-2-0

FormatMessageW

GetLocaleInfoW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

OutputDebugStringW

DebugBreak

OutputDebugStringA

api-ms-win-core-console-l3-2-0

GetConsoleWindow

api-ms-win-security-base-l1-1-0

GetTokenInformation

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo

GetSystemTimeAsFileTime

GlobalMemoryStatusEx

GetTickCount

GetTickCount64

api-ms-win-core-url-l1-1-0

UrlHashW

api-ms-win-core-path-l1-1-0

PathCchFindExtension

PathIsUNCEx

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency

QueryPerformanceCounter

api-ms-win-core-largeinteger-l1-1-0

MulDiv

api-ms-win-core-processthreads-l1-1-1

GetProcessMitigationPolicy

OpenProcess

api-ms-win-power-base-l1-1-0

PowerRegisterSuspendResumeNotification

PowerUnregisterSuspendResumeNotification

api-ms-win-core-heap-obsolete-l1-1-0

GlobalLock

GlobalUnlock

api-ms-win-core-heap-l2-1-0

LocalFree

LocalAlloc

GlobalFree

xmllite

CreateXmlReader

api-ms-win-core-shlwapi-legacy-l1-1-0

IsCharSpaceW

api-ms-win-core-string-l2-1-0

IsCharAlphaW

api-ms-win-power-setting-l1-1-0

PowerSettingRegisterNotification

PowerSettingUnregisterNotification

api-ms-win-core-kernel32-legacy-l1-1-0

GetSystemPowerStatus

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

api-ms-win-appmodel-runtime-l1-1-2

AppPolicyGetWindowingModel

AppPolicyGetLifecycleManagement

AppPolicyGetMediaFoundationCodecLoading

api-ms-win-appmodel-runtime-l1-1-0

GetPackagesByPackageFamily

GetCurrentPackageFullName

PackageIdFromFullName

api-ms-win-dx-d3dkmt-l1-1-0

GdiEntry13

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-processenvironment-l1-1-0

GetStdHandle

api-ms-win-core-file-l1-1-0

CreateFileA

SetFilePointer

FlushFileBuffers

SetFilePointerEx

WriteFile

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiA

lstrcmpiW

api-ms-win-core-console-l1-1-0

AllocConsole

api-ms-win-core-console-l2-2-0

SetConsoleTitleW

bcrypt

BCryptEncrypt

BCryptGenerateSymmetricKey

BCryptSetProperty

BCryptOpenAlgorithmProvider

BCryptCloseAlgorithmProvider

BCryptDestroyKey

BCryptDecrypt

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

rtworkq

RtwqSetLongRunning

Exports

DllCanUnloadNow

DllGetActivationFactory

DllGetClassObject

Sections

.text
Size: 3.2MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 731KB - Virtual size: 730KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.didat
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

locales/guyan/recover/mfdvdec.dll

.dll windows x64

c2cd05a80ef743073eadb33662f239d9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

strncpy_s

strnlen

_purecall

memset

_XcptFilter

_amsg_exit

free

_callnewh

_initterm

__C_specific_handler

_lock

malloc

_onexit

_unlock

__dllonexit

qsort

memcpy

api-ms-win-core-com-l1-1-0

PropVariantClear

api-ms-win-core-errorhandling-l1-1-0

SetLastError

SetUnhandledExceptionFilter

GetLastError

UnhandledExceptionFilter

api-ms-win-core-synch-l1-1-0

EnterCriticalSection

LeaveCriticalSection

DeleteCriticalSection

InitializeCriticalSection

api-ms-win-eventing-classicprovider-l1-1-0

GetTraceEnableLevel

GetTraceLoggerHandle

UnregisterTraceGuids

GetTraceEnableFlags

RegisterTraceGuidsW

TraceMessage

api-ms-win-core-processthreads-l1-1-0

TerminateProcess

TlsGetValue

TlsSetValue

GetCurrentProcess

GetCurrentThreadId

GetCurrentProcessId

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

FreeLibrary

GetModuleHandleExW

api-ms-win-core-sysinfo-l1-1-0

GetTickCount

GetSystemTimeAsFileTime

GetVersionExW

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry

RtlCaptureContext

RtlVirtualUnwind

mfplat

MFCreateMediaType

MFGetStrideForBitmapInfoHeader

MFGetCallStackTracingWeakReference

MFCalculateImageSize

MFGetSystemTime

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer

api-ms-win-core-debug-l1-1-0

DebugBreak

IsDebuggerPresent

Exports

DllCanUnloadNow

DllGetClassObject

Sections

.text
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

locales/guyan/recover/winsetup.dll

.dll windows x64

13ac5715282cc532d7063b3f0eee1e63

Code Sign

33:00:00:03:3c:89:c6:6a:7b:45:bb:1f:bd:00:00:00:00:03:3c
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:23

Not After

01-09-2022 18:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

76:49:eb:75:82:fc:24:8d:f5:60:7e:ba:e6:d8:06:1c:5a:f4:89:a4:7f:08:2f:ee:49:58:ce:e8:d8:b6:2c:bd
Signer

Actual PE Digest

76:49:eb:75:82:fc:24:8d:f5:60:7e:ba:e6:d8:06:1c:5a:f4:89:a4:7f:08:2f:ee:49:58:ce:e8:d8:b6:2c:bd

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

21-03-2023 12:34
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

IMAGE_FILE_NET_RUN_FROM_SWAP

Imports

msvcrt

__crtLCMapStringW

setlocale

_wfsopen

__mb_cur_max

___lc_codepage_func

___lc_handle_func

__pctype_func

_errno

vswprintf_s

wcstol

iswalpha

wcscspn

rand

time

srand

getchar

wprintf

?name@type_info@@QEBAPEBDXZ

abort

fwrite

___mb_cur_max_func

fputwc

ungetwc

ungetc

fgetc

fgetwc

fgetpos

fseek

fsetpos

setvbuf

iswctype

_vscwprintf

_wtoi64

_purecall

_itow_s

fwprintf

fclose

__crtGetStringTypeW

iswdigit

fflush

swscanf_s

wcsspn

qsort

_snwscanf_s

strncmp

_wcsupr

wcsnlen

strcpy_s

wcsncpy_s

_vsnwprintf_s

wcscat_s

wcscpy_s

_ultow_s

bsearch

_wcsrev

_strnicmp

strncpy_s

_wcstoi64

wcstok_s

__iob_func

realloc

_wcslwr

__RTDynamicCast

memcmp

memcpy

memmove

memset

_onexit

__dllonexit

_unlock

_lock

??1type_info@@UEAA@XZ

?terminate@@YAXXZ

_initterm

_amsg_exit

_XcptFilter

_CxxThrowException

towupper

swprintf_s

_callnewh

malloc

_stricmp

calloc

free

_wtoi

_wcsicmp

wcsncmp

_wcsnicmp

_vsnwprintf

wcsrchr

wcschr

??0exception@@QEAA@XZ

memmove_s

??0exception@@QEAA@AEBQEBD@Z

??1exception@@UEAA@XZ

?what@exception@@UEBAPEBDXZ

??0exception@@QEAA@AEBV0@@Z

memcpy_s

swscanf

_vsnprintf

__CxxFrameHandler3

_wcstoui64

wcstoul

_wtol

wcsstr

__C_specific_handler

wcscmp

kernel32

TerminateProcess

GetCurrentProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

OutputDebugStringA

RtlVirtualUnwind

RtlLookupFunctionEntry

RtlCaptureContext

WideCharToMultiByte

MultiByteToWideChar

lstrlenA

GetSystemTimeAsFileTime

FlushFileBuffers

FindClose

FindNextFileW

FindFirstFileW

RtlCompareMemory

WritePrivateProfileStringW

GetSystemDirectoryW

Sleep

GetDiskFreeSpaceExW

SystemTimeToFileTime

GetVersionExW

GetProcAddress

GetModuleHandleW

FreeLibrary

GetModuleHandleExW

CreateEventW

CreateThread

VirtualQuery

LoadLibraryExA

VirtualProtect

AcquireSRWLockExclusive

WakeAllConditionVariable

GetCurrentThreadId

GetCurrentProcessId

ReleaseSRWLockExclusive

GetSystemPowerStatus

OpenEventW

CreateDirectoryW

FindResourceW

MulDiv

GetLocaleInfoEx

DebugBreak

WaitForMultipleObjects

LockFileEx

UnlockFileEx

SetEndOfFile

SetVolumeLabelW

MoveFileWithProgressW

RemoveDirectoryW

RaiseException

MapViewOfFileEx

DefineDosDeviceW

WaitForSingleObjectEx

ReleaseMutex

GetPrivateProfileStringW

SetComputerNameExW

GetStartupInfoW

SleepEx

ResetEvent

SetFileInformationByHandle

GetFileInformationByHandle

GetFileInformationByHandleEx

SetThreadPreferredUILanguages

GetFileTime

GetFinalPathNameByHandleW

GetLongPathNameW

IsWow64Process

HeapReAlloc

SetFilePointerEx

GetDiskFreeSpaceW

GetFileSize

LCMapStringW

GetVersionExA

CopyFileExW

ExpandEnvironmentStringsW

DeleteFileW

GetTempFileNameW

SetFilePointer

ReadFile

LocalAlloc

GetVersion

QueryPerformanceCounter

IsValidLocale

IsValidCodePage

lstrcmpW

GetFileAttributesExW

LockResource

SizeofResource

lstrcmpiW

GetCurrentThread

DeviceIoControl

GetFileSizeEx

FindNextVolumeW

DeleteVolumeMountPointW

FindVolumeClose

SetVolumeMountPointW

FormatMessageW

FindFirstVolumeW

GetVolumeNameForVolumeMountPointW

GetPrivateProfileSectionW

WriteFile

GetVolumeInformationW

QueryDosDeviceW

GetExitCodeProcess

CreateProcessW

LoadLibraryExW

MapViewOfFile

CreateFileMappingW

LoadResource

FindResourceExW

UnmapViewOfFile

GetLocaleInfoW

GetUserDefaultUILanguage

GetSystemDefaultUILanguage

SearchPathW

GetLocalTime

GetDateFormatW

FileTimeToSystemTime

GetEnvironmentVariableW

GetLogicalDrives

SetEnvironmentVariableW

GetDriveTypeW

GetNativeSystemInfo

GetLogicalDriveStringsW

CreateFileW

GetSystemDefaultLangID

GetUserDefaultLangID

GetPrivateProfileIntW

GetSystemWindowsDirectoryW

SetCurrentDirectoryW

GetCurrentDirectoryW

GetExitCodeThread

GetVolumePathNamesForVolumeNameW

SetFileTime

LocalFileTimeToFileTime

DosDateTimeToFileTime

Wow64RevertWow64FsRedirection

Wow64DisableWow64FsRedirection

CreateSemaphoreExW

WaitForMultipleObjectsEx

TlsSetValue

TlsGetValue

TlsFree

TlsAlloc

GetVolumeInformationByHandleW

CreateSemaphoreW

ReleaseSemaphore

DuplicateHandle

InitializeCriticalSectionAndSpinCount

OpenProcess

SetThreadIdealProcessor

GetOverlappedResult

GetHandleInformation

VirtualFree

VirtualAlloc

GetLastError

SetThreadExecutionState

CreateMutexW

GetModuleFileNameW

GetCommandLineW

CompareStringW

HeapFree

GetProcessHeap

SetEvent

WaitForSingleObject

CloseHandle

GetFileAttributesW

MoveFileW

HeapAlloc

LocalFree

SetLastError

GetWindowsDirectoryW

CopyFileW

LoadLibraryW

GetTickCount

GlobalFree

GetSystemInfo

VerifyVersionInfoW

GetTempPathW

GlobalMemoryStatusEx

LeaveCriticalSection

EnterCriticalSection

DeleteCriticalSection

InitializeCriticalSection

GetVolumePathNameW

MoveFileExW

SetFileAttributesW

GetFullPathNameW

SleepConditionVariableSRW

advapi32

RegisterTraceGuidsW

GetTraceEnableLevel

GetTraceEnableFlags

GetTraceLoggerHandle

TraceEvent

UnregisterTraceGuids

ConvertStringSecurityDescriptorToSecurityDescriptorW

MakeAbsoluteSD

InitiateSystemShutdownExW

OpenSCManagerW

OpenServiceW

AllocateAndInitializeSid

FreeSid

NotifyServiceStatusChangeW

ControlService

EnumDependentServicesW

StartServiceW

RegDeleteKeyExW

RegDeleteTreeW

RegQueryInfoKeyW

EqualSid

RegEnumKeyExW

PrivilegeCheck

RegDeleteKeyW

RegEnumValueW

EventRegister

EventUnregister

EventWriteTransfer

LookupPrivilegeValueW

GetSecurityDescriptorSacl

AdjustTokenPrivileges

GetSecurityDescriptorGroup

GetSecurityDescriptorControl

GetSecurityDescriptorOwner

OpenProcessToken

ConvertSidToStringSidW

OpenThreadToken

GetTokenInformation

RegGetValueW

RegDeleteValueW

RegOpenKeyExW

RegQueryValueExW

QueryServiceStatus

CloseServiceHandle

GetSecurityDescriptorDacl

SetNamedSecurityInfoW

RegCreateKeyExW

RegSetValueExW

RegCloseKey

RegRestoreKeyW

RegLoadKeyW

RegUnLoadKeyW

RegFlushKey

SetThreadToken

ReadEncryptedFileRaw

CloseEncryptedFileRaw

WriteEncryptedFileRaw

GetSecurityDescriptorLength

OpenEncryptedFileRawW

RevertToSelf

GetSecurityInfo

SetSecurityDescriptorDacl

AddAccessAllowedAce

InitializeAcl

GetLengthSid

GetAclInformation

InitializeSecurityDescriptor

DuplicateTokenEx

dnsapi

DnsValidateName_W

ole32

CoSetProxyBlanket

CoCreateInstance

CLSIDFromString

StringFromCLSID

StringFromGUID2

CoTaskMemFree

CoInitializeSecurity

CoInitializeEx

CoUninitialize

oleaut32

VarUI4FromDec

VarBstrFromDate

VarI4FromDec

SysStringLen

SafeArrayGetElement

VariantClear

SysFreeString

SysAllocString

rpcrt4

RpcBindingFromStringBindingW

RpcStringBindingComposeW

NdrClientCall3

I_RpcMapWin32Status

RpcBindingSetAuthInfoW

UuidFromStringW

UuidToStringW

RpcStringFreeW

RpcBindingFree

UuidCreate

shell32

CommandLineToArgvW

shlwapi

PathFileExistsW

PathIsUNCW

PathRemoveBackslashW

StrStrW

user32

CharLowerW

MessageBoxW

CharNextW

LoadStringW

CharUpperBuffW

GetSystemMetrics

GetWindowTextW

EndPaint

GetKeyboardLayout

IsCharAlphaW

LoadBitmapW

FillRect

GetWindowLongW

GetMessageW

DefWindowProcW

BeginPaint

ReleaseDC

InvalidateRect

LoadImageW

UpdateWindow

PostQuitMessage

CharUpperW

DrawTextW

GetClientRect

SetCursor

TranslateMessage

SetPropW

SetFocus

MapWindowPoints

SetTimer

FindWindowExW

DispatchMessageW

ShowWindow

SetThreadDesktop

RegisterClassExW

NotifyWinEvent

SetClassLongPtrW

SetWindowTextW

SendMessageW

CreateWindowExW

GetPropW

SetWindowPos

IsWindowVisible

GetDC

DestroyWindow

KillTimer

wintrust

CryptCATAdminCalcHashFromFileHandle

imagehlp

CheckSumMappedFile

wdscore

WdsInitializeDataStringW

WdsFreeCollection

WdsPackCollection

WdsCollectionAddValue

WdsAllocCollection

WdsAddModule

WdsExitImmediatelyEx

ConstructPartialMsgVA

WdsDeleteBlackboardValue

WdsSetBlackboardValue

WdsInitializeDataUInt64

WdsSetNextExecutionGroup

WdsInitializeDataBinary

WdsPublishImmediateEx

WdsFreeData

WdsSetupLogMessageA

WdsCopyBlackboardItemsEx

WdsDestroyBlackboard

WdsUnpackCollection

WdsEnableExit

WdsInitializeDataUInt32

WdsGetBlackboardValue

WdsValidBlackboard

WdsInitialize

WdsSetupLogMessageW

CurrentIP

ConstructPartialMsgVW

WdsExecuteWorkQueueEx

WdsSetupLogDestroy

WdsTerminate

WdsEnumFirstBlackboardItem

WdsEnumNextBlackboardItem

WdsAbortBlackboardItemEnum

WdsInitializeCallbackArray

WdsPublish

WdsSubscribeEx

WdsCreateBlackboard

WdsCollectionGetValue

wdsutil

WdsPickTempDriveBasedOnInstallDrive

PublishMessage

SignalSetupComplianceBlock

GetDiskKey

GetRegionKey

IsCrossArchitectureInstall

CallbackGetArgumentInt32

?IsUpgrade@CUpgradeUserSetting@@SAHXZ

WdsValidateInstallDrive

GetApplicableDiskRegionReason

FreeReason

GetApplicableDiskReason

LogDiskRegionReasons

DiskRegionSupportsCapabilityForType

LogDiskReasons

DiskSupportsCapabilityForType

CallbackGetArgumentUInt64

ntdll

NtOpenFile

NtSetValueKey

NtDeviceIoControlFile

NtQuerySymbolicLinkObject

NtOpenKey

NtOpenSymbolicLinkObject

RtlImpersonateSelf

NtShutdownSystem

RtlAdjustPrivilege

RtlNtStatusToDosError

RtlInitUnicodeString

NtCreatePagingFile

ZwQuerySystemInformation

RtlGUIDFromString

RtlFreeUnicodeString

RtlStringFromGUID

RtlFreeHeap

RtlAllocateHeap

RtlAppendUnicodeToString

ZwQueryAttributesFile

ZwWaitForSingleObject

ZwQueryKey

ZwReleaseMutant

ZwOpenFile

ZwOpenMutant

ZwClose

RtlLengthSecurityDescriptor

NtPrivilegeCheck

RtlSetOwnerSecurityDescriptor

RtlSetDaclSecurityDescriptor

ZwCreateFile

ZwCreateKey

ZwLoadKey

RtlAddAccessAllowedAceEx

RtlAllocateAndInitializeSid

RtlLengthSid

ZwFlushKey

ZwDeleteValueKey

ZwSaveKey

RtlFreeSid

ZwDeleteKey

ZwEnumerateKey

ZwQueryValueKey

RtlCreateAcl

ZwSetSecurityObject

ZwUnloadKey

RtlCreateSecurityDescriptor

NtClose

RtlRaiseStatus

DbgPrintEx

LdrAccessResource

LdrFindResource_U

NtWaitForSingleObject

NtQueryInformationThread

NtQueryInformationFile

NtCreateEvent

RtlImageNtHeader

NtOpenProcess

NtQueryInformationProcess

NtSetInformationFile

NtCreateFile

NtQueryObject

RtlImageDirectoryEntryToData

RtlVerifyVersionInfo

VerSetConditionMask

LdrResSearchResource

ZwMapViewOfSection

ZwUnmapViewOfSection

RtlAnsiStringToUnicodeString

RtlxAnsiStringToUnicodeSize

RtlInitString

ZwSetInformationProcess

ZwCreateSection

RtlFormatCurrentUserKeyPath

RtlInitUnicodeStringEx

RtlNtPathNameToDosPathName

RtlpEnsureBufferSize

ZwQueryDirectoryFile

RtlDosPathNameToNtPathName_U_WithStatus

RtlGetNativeSystemInformation

RtlUpcaseUnicodeChar

NtReadFile

NtWriteFile

NtQueryValueKey

RtlRunOnceExecuteOnce

RtlAppendUnicodeStringToString

RtlReAllocateHeap

RtlGetVersion

NtCreateKey

NtEnumerateBootEntries

NtQueryDirectoryObject

NtOpenDirectoryObject

NtTranslateFilePath

NtSetSecurityObject

NtQueryBootOptions

NtQueryBootEntryOrder

NtDeleteKey

DbgPrint

NtDeleteFile

RtlGetThreadErrorMode

RtlSetThreadErrorMode

NtFsControlFile

NtQueryDirectoryFile

RtlDosPathNameToNtPathName_U

NtOpenEvent

RtlValidSid

EtwEventWrite

NtQueryKey

NtFlushKey

NtDeleteValueKey

NtSaveKeyEx

NtQuerySystemTime

RtlSetEnvironmentVariable

RtlCreateEnvironment

RtlDestroyEnvironment

RtlExpandEnvironmentStrings_U

RtlGetControlSecurityDescriptor

RtlConvertSidToUnicodeString

RtlSetControlSecurityDescriptor

NtQuerySecurityObject

NtQuerySystemEnvironmentValueEx

NtEnumerateKey

NtEnumerateValueKey

NtLoadKey

NtDelayExecution

NtUnloadKey

RtlGetAce

RtlAddAccessAllowedAce

NtRestoreKey

RtlEqualUnicodeString

NtQueryVolumeInformationFile

NtQueryAttributesFile

RtlDosPathNameToRelativeNtPathName_U_WithStatus

NtSetSystemInformation

RtlGetLastNtStatus

RtlFindAceByType

NtUnloadKey2

NtQueryEaFile

NtSetEaFile

RtlInitializeResource

RtlAcquireResourceExclusive

RtlAcquireResourceShared

RtlReleaseResource

RtlDeleteResource

RtlInitializeCriticalSection

ZwSetValueKey

ZwOpenKey

ZwAllocateUuids

ZwQuerySymbolicLinkObject

ZwDeviceIoControlFile

ZwQueryDirectoryObject

ZwOpenSymbolicLinkObject

ZwOpenDirectoryObject

LdrGetProcedureAddress

ZwQueryVolumeInformationFile

LdrGetDllHandle

ZwQueryInformationProcess

RtlInitAnsiString

ZwDeleteFile

ZwQueryInformationFile

ZwOpenProcess

NtQuerySystemInformation

NtAdjustPrivilegesToken

NtOpenProcessTokenEx

NtSetInformationThread

NtOpenThreadTokenEx

input

ord104

ord109

ord112

ord107

ord106

ord105

unbcl

??0?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEAA@PEAV?$Array@PEAVString@UnBCL@@@1@@Z

?GetFiles@Directory@UnBCL@@SAPEAV?$Array@PEAVString@UnBCL@@@2@PEBVString@2@0H@Z

??1?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@UEAA@XZ

??C?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$Array@PEAVString@UnBCL@@@1@XZ

?GetFileName@Path@UnBCL@@SAPEAVString@2@PEBV32@@Z

?Combine@Path@UnBCL@@SAPEAVString@2@PEBV32@0@Z

?get_P@?$SmartPtr@VString@UnBCL@@@UnBCL@@QEBAPEAVString@2@XZ

?Compare@String@UnBCL@@SAHPEBG0H@Z

?GetDirectoriesAndFiles@Directory@UnBCL@@SAPEAV?$Array@PEAVString@UnBCL@@@2@PEBVString@2@0W4EnumerationType@12@H@Z

?get_IsEmpty@String@UnBCL@@QEBAHXZ

??0Win32Exception@UnBCL@@QEAA@KPEBG@Z

??1Win32Exception@UnBCL@@UEAA@XZ

?CreateDir@Directory@UnBCL@@SAPEAVDirectoryInfo@2@PEBVString@2@@Z

??0?$Array@E@UnBCL@@QEAA@HH@Z

??_D?$Array@E@UnBCL@@QEAAXXZ

?GetBuffer@?$Array@E@UnBCL@@UEAAPEAEH@Z

?get_P@?$SmartPtr@V?$Array@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$Array@PEAVString@UnBCL@@@2@XZ

?get_Chars@String@UnBCL@@QEBAAEBGH@Z

?Steal@?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAAPEAVString@2@XZ

??0String@UnBCL@@QEAA@PEBV01@@Z

?EndsWith@String@UnBCL@@QEBAHPEBGH@Z

?StartsWith@String@UnBCL@@QEBAHPEBGH@Z

??1Exception@UnBCL@@UEAA@XZ

?get_Length@String@UnBCL@@QEBAHXZ

??1ISerializable@UnBCL@@UEAA@XZ

??1?$IList@E@UnBCL@@UEAA@XZ

??1?$ICollection@E@UnBCL@@UEAA@XZ

?Exists@File@UnBCL@@SAHPEBVString@2@@Z

?Nullify@?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAAAEAV12@XZ

??D?$SmartPtr@VString@UnBCL@@@UnBCL@@QEBAAEAVString@1@XZ

?SetCompressionState@File@UnBCL@@SAHPEBVString@2@G@Z

?Delete@File@UnBCL@@SAXPEBVString@2@@Z

??0?$Array@E@UnBCL@@QEAA@PEBU?$ICollection@E@1@@Z

?Clone@?$Array@E@UnBCL@@UEBAPEAVObject@2@XZ

?Equals@?$Array@E@UnBCL@@UEBAHPEBVObject@2@@Z

??6SerializationStream@UnBCL@@QEAAAEAV01@H@Z

?WriteBytes@SerializationStream@UnBCL@@QEAAXPEBEH@Z

??5SerializationStream@UnBCL@@QEAAAEAV01@AEAH@Z

?ReadBytes@SerializationStream@UnBCL@@QEAAXPEAEH@Z

?SanitizeTypeName@SerializationStream@UnBCL@@SAPEAVString@2@AEBV32@@Z

??2Object@UnBCL@@SAPEAX_KI@Z

??0String@UnBCL@@QEAA@AEBV01@@Z

?GetCallingModule@SerializationStream@UnBCL@@SAPEAUHINSTANCE__@@XZ

?CanRegister@SerializationStream@UnBCL@@SAHXZ

?RegisterType@SerializationStream@UnBCL@@SAXPEBVString@2@HPEAUHINSTANCE__@@PEAUIInstanceFactory@2@@Z

?EnqueueSbRegistration@SbRegistrationList@UnBCL@@SAXPEBDHPEAUHINSTANCE__@@PEAUIInstanceFactory@2@@Z

??0Exception@UnBCL@@QEAA@PEBG@Z

?UnregisterType@SerializationStream@UnBCL@@SAXPEBVString@2@HPEAUHINSTANCE__@@@Z

??0IInstanceFactory@UnBCL@@QEAA@XZ

??0ISerializable@UnBCL@@QEAA@XZ

??0?$IList@E@UnBCL@@QEAA@XZ

??0?$ICollection@E@UnBCL@@QEAA@XZ

??0?$IEnumerable@E@UnBCL@@QEAA@XZ

?ExpandEnvironmentVariables@Environment@UnBCL@@SAPEAVString@2@PEBV32@@Z

?Delete@Directory@UnBCL@@SAXPEBVString@2@H@Z

?Concat@String@UnBCL@@SAPEAV12@PEBG0@Z

?Substring@String@UnBCL@@QEBAPEAV12@HH@Z

?get_Win32ErrorCode@Win32Exception@UnBCL@@QEBAKXZ

?GetEnvironmentVar@Environment@UnBCL@@SAPEAVString@2@PEBV32@@Z

?Assign@?$SmartPtr@VString@UnBCL@@@UnBCL@@AEAAXPEAVString@2@@Z

?get_Item@XmlAttributeCollection@UnBCL@@QEAAPEAVXmlAttribute@2@PEAVString@2@@Z

?GetStackTrace@Exception@UnBCL@@QEBAPEAVString@2@XZ

?Clone@?$Hashtable@PEAVString@UnBCL@@PEAV12@@UnBCL@@UEBAPEAVObject@2@XZ

??0?$Hashtable@PEAVString@UnBCL@@PEAV12@@UnBCL@@QEAA@HH@Z

??0InvalidCastException@UnBCL@@QEAA@XZ

?SelectSingleNode@XmlNode@UnBCL@@QEAAPEAV12@PEAVString@2@@Z

?SelectNodes@XmlNode@UnBCL@@QEAAPEAVXmlNodeList@2@PEAVString@2@@Z

?get_Value@XmlNode@UnBCL@@QEAAPEAVString@2@XZ

?get_Attributes@XmlNode@UnBCL@@QEAAPEAVXmlAttributeCollection@2@XZ

?Load@XmlDocument@UnBCL@@QEAAXPEAVString@2@@Z

??1XmlDocument@UnBCL@@UEAA@XZ

??0XmlDocument@UnBCL@@QEAA@XZ

?get_P@?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$ArrayList@PEAVString@UnBCL@@@2@XZ

??C?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEBAPEAV?$ArrayList@PEAVString@UnBCL@@@1@XZ

??4?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z

??1?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@UEAA@XZ

??0?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEAA@XZ

??0?$SmartPtr@V?$ArrayList@PEAVString@UnBCL@@@UnBCL@@@UnBCL@@QEAA@PEAV?$ArrayList@PEAVString@UnBCL@@@1@@Z

??5SerializationStream@UnBCL@@QEAAAEAV01@AEAK@Z

??5SerializationStream@UnBCL@@QEAAAEAV01@AEAPEAVString@1@@Z

??5SerializationStream@UnBCL@@QEAAAEAV01@AEAPEAUISerializable@1@@Z

??6SerializationStream@UnBCL@@QEAAAEAV01@K@Z

??6SerializationStream@UnBCL@@QEAAAEAV01@PEBVString@1@@Z

??6SerializationStream@UnBCL@@QEAAAEAV01@PEBUISerializable@1@@Z

?Compare@String@UnBCL@@SAHPEBV12@0H@Z

?ToLower@String@UnBCL@@QEBAPEAV12@XZ

?Split@String@UnBCL@@QEBAPEAV?$ArrayList@PEAVString@UnBCL@@@2@PEBG@Z

?LastIndexOf@String@UnBCL@@QEBAHG@Z

?CompareTo@String@UnBCL@@QEBAHPEBG@Z

?CompareTo@String@UnBCL@@QEBAHPEBGH@Z

?get_Item@XmlNodeList@UnBCL@@QEAAPEAVXmlNode@2@H@Z

?get_Count@XmlNodeList@UnBCL@@QEAAHXZ

??0Object@UnBCL@@QEAA@AEBV01@@Z

??0Win32Exception@UnBCL@@QEAA@K@Z

??1InvalidCastException@UnBCL@@UEAA@XZ

??1?$IEnumerator@PEAVString@UnBCL@@@UnBCL@@UEAA@XZ

??0?$IEnumerator@PEAVString@UnBCL@@@UnBCL@@QEAA@XZ

??4Object@UnBCL@@QEAAAEAV01@AEBV01@@Z

??0?$ICollection@PEAVString@UnBCL@@@UnBCL@@QEAA@XZ

??0?$IEnumerable@PEAVString@UnBCL@@@UnBCL@@QEAA@XZ

??1?$ICollection@PEAVString@UnBCL@@@UnBCL@@UEAA@XZ

??_D?$Hashtable@PEAVString@UnBCL@@PEAV12@@UnBCL@@QEAAXXZ

?Append@MutableString@UnBCL@@QEAAXPEBG@Z

?Clone@MultiSz@UnBCL@@UEBAPEAVObject@2@XZ

?ToString@MultiSz@UnBCL@@UEBAPEAVString@2@XZ

?Add@MultiSz@UnBCL@@QEAAXPEBG@Z

?get_Buffer@MultiSz@UnBCL@@QEBAPEBGXZ

??0MultiSz@UnBCL@@QEAA@XZ

?Trim@String@UnBCL@@QEBAPEAV12@PEBG@Z

?Substring@String@UnBCL@@QEBAPEAV12@H@Z

?IndexOf@String@UnBCL@@QEBAHPEBGH@Z

??_DMultiSz@UnBCL@@QEAAXXZ

?MakeTrim@MutableString@UnBCL@@QEAAXPEBG@Z

??0MutableString@UnBCL@@QEAA@PEBG@Z

?IsEnvironmentVarSetTrue@Environment@UnBCL@@SAHPEBVString@2@H@Z

??0OutOfMemoryException@UnBCL@@QEAA@XZ

?IndexOf@String@UnBCL@@QEBAHG@Z

??0String@UnBCL@@QEAA@PEBGHH@Z

??1OutOfMemoryException@UnBCL@@UEAA@XZ

?get_ChildNodes@XmlNode@UnBCL@@QEAAPEAVXmlNodeList@2@XZ

?get_Name@XmlNode@UnBCL@@QEAAPEAVString@2@XZ

?get_Count@XmlAttributeCollection@UnBCL@@QEAAHXZ

?FormatV@String@UnBCL@@SAPEAV12@PEBGPEAD@Z

??4?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAAAEAV01@AEBV01@@Z

?Concat@String@UnBCL@@SAPEAV12@PEBG00@Z

?Copy@Directory@UnBCL@@SAXPEBVString@2@0HPEAUICopyDelegate@12@@Z

?Exists@Directory@UnBCL@@SAHPEBVString@2@@Z

??C?$SmartPtr@VString@UnBCL@@@UnBCL@@QEBAPEAVString@1@XZ

??1?$SmartPtr@VString@UnBCL@@@UnBCL@@UEAA@XZ

?GetParentPath@Path@UnBCL@@SAPEAVString@2@PEBV32@@Z

??0?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAA@PEAVString@1@@Z

??4MutableString@UnBCL@@QEAAAEAV01@PEBG@Z

??0MutableString@UnBCL@@QEAA@XZ

?Tokenize@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEBA?AV12@PEBGAEAH@Z

??4?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAAEAV01@AEBV01@@Z

?Compare@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEBAHPEBG@Z

??1?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@XZ

??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@PEBD@Z

??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@PEBG@Z

??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@XZ

?SetAt@?$CSimpleStringT@G$0A@@ATL@@QEAAXHG@Z

?GetManager@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEBAPEAUIAtlStringMgr@2@XZ

??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@AEBV01@@Z

??0?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAA@PEAUIAtlStringMgr@1@@Z

?Concatenate@?$CSimpleStringT@G$0A@@ATL@@KAXAEAV12@PEBGH1H@Z

?Append@?$CSimpleStringT@G$0A@@ATL@@QEAAXPEBG@Z

?Empty@?$CSimpleStringT@G$0A@@ATL@@QEAAXXZ

??4?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAAEAV01@PEBG@Z

?Format@?$CStringT@GV?$StrTraitATL@GV?$ChTraitsCRT@G@ATL@@@ATL@@@ATL@@QEAAXPEBGZZ

??3Object@UnBCL@@SAXPEAX@Z

??1String@UnBCL@@UEAA@XZ

??0String@UnBCL@@QEAA@PEBG@Z

??0Object@UnBCL@@QEAA@XZ

??1Object@UnBCL@@UEAA@XZ

??2Object@UnBCL@@SAPEAX_K@Z

?AddStackTrace@Exception@UnBCL@@QEAAXPEBD@Z

?MemAllocFailed@Allocator@UnBCL@@SAHXZ

??0ArgumentOutOfRangeException@UnBCL@@QEAA@PEBG@Z

??0ArgumentNullException@UnBCL@@QEAA@PEBG@Z

??0ArgumentException@UnBCL@@QEAA@PEBG@Z

??0InvalidOperationException@UnBCL@@QEAA@PEBVString@1@PEAVException@1@@Z

??0InvalidOperationException@UnBCL@@QEAA@PEBG@Z

??0NotSupportedException@UnBCL@@QEAA@PEBG@Z

??0InvalidOperationException@UnBCL@@QEAA@PEBVString@1@@Z

?Equals@Object@UnBCL@@UEBAHPEBV12@@Z

?CompareTo@Object@UnBCL@@UEBAHPEBV12@@Z

?AddRef@Object@UnBCL@@QEAAXXZ

?DecRef@Object@UnBCL@@QEAAHXZ

?SetLiteralStorage@_@UnBCL@@YAXPEAPEBVString@2@PEBG@Z

?Equals@String@UnBCL@@UEBAHPEBVObject@2@@Z

?GetHashCode@String@UnBCL@@UEBAHXZ

?GetType@Object@UnBCL@@UEBAPEAVType@2@XZ

?ToString@String@UnBCL@@UEBAPEAV12@XZ

?GetObjectID@Object@UnBCL@@UEBAIXZ

?CompareTo@String@UnBCL@@UEBAHPEBVObject@2@@Z

?Clone@String@UnBCL@@UEBAPEAVObject@2@XZ

?GetHashCode@Object@UnBCL@@UEBAHXZ

?ToString@Exception@UnBCL@@UEBAPEAVString@2@XZ

?Clone@Object@UnBCL@@UEBAPEAV12@XZ

?get_InnerException@Exception@UnBCL@@UEBAPEBV12@XZ

?get_Message@Exception@UnBCL@@UEBAPEBVString@2@XZ

?get_Source@Exception@UnBCL@@UEBAPEBVString@2@XZ

?set_Source@Exception@UnBCL@@UEAAXPEBVString@2@@Z

?GetBaseException@Exception@UnBCL@@UEBAPEBV12@XZ

?get_HResult@Exception@UnBCL@@UEBAJXZ

?set_HResult@Exception@UnBCL@@MEAAXJ@Z

?SetMessage@Exception@UnBCL@@MEAAXPEAVString@2@@Z

?ToString@Object@UnBCL@@UEBAPEAVString@2@XZ

?FromASCII@String@UnBCL@@SAPEAV12@PEBD@Z

??1NotSupportedException@UnBCL@@UEAA@XZ

??1InvalidOperationException@UnBCL@@UEAA@XZ

??1ArgumentOutOfRangeException@UnBCL@@UEAA@XZ

??1ArgumentException@UnBCL@@UEAA@XZ

??1ArgumentNullException@UnBCL@@UEAA@XZ

??1MutableString@UnBCL@@UEAA@XZ

?get_CString@String@UnBCL@@QEBAPEBGXZ

??0ApplicationException@UnBCL@@QEAA@PEBG@Z

??1ApplicationException@UnBCL@@UEAA@XZ

?Format@String@UnBCL@@SAPEAV12@PEBGZZ

??0?$SmartPtr@VString@UnBCL@@@UnBCL@@QEAA@XZ

unattend

UnattendEnumFree

UnattendCtxEnumGet

UnattendCtxEnumOrderedSubNodes

UnattendFreeNode

UnattendCtxOpenNode

UnattendCtxGetCount

UnattendFreeResults

UnattendCtxGetFlag

UnattendCtxGetString

UnattendCtxGetShowUI

UnattendCtxGetCountByNode

UnattendCtxCommitModify

UnattendCtxOpenNodeByNode

UnattendCtxGetUlongByNode

UnattendCtxDeserializeBuffer

UnattendCtxCleanup

UnattendCtxGetEnumValueByNode

UnattendCtxCancelModify

UnattendCtxSerializeSettingsStream

UnattendCtxGetRootNode

UnattendCtxSerializeToBuffer

UnattendCtxReplaceNode

UnattendCtxGetStringByNode

UnattendCtxSerialize

UnattendCtxGetUlong

UnattendCtxSetNodeName

UnattendCtxPrettyPrint

UnattendCtxGetLongByNode

UnattendCtxGetExpandedStringByNode

UnattendFindAnswerFileWithResults

UnattendGetImplicitContext

UnattendGetFirstFailingSetting

UnattendCleanup

UnattendCtxGetFlagByNode

UnattendFreeSetting

UnattendIsNodeValid

UnattendCtxSpliceTrees

UnattendCtxSetStringByNode

UnattendCtxSerializeToBufferFromNode

UnattendCtxSetString

UnattendCtxDeserializeString

UnattendAddResults

UnattendCtxDeserialize

UnattendMarkPassUsedInCtx

UnattendCtxBeginModify

UnattendDeserializeWithResults

UnattendCtxGetLong

UnattendFormatPath

UnattendCtxReplaceMatchedNodesWithText

gdi32

GdiAlphaBlend

CreateDIBitmap

GetTextMetricsW

SetBkColor

SetLayout

GetTextAlign

SetMapMode

SetTextAlign

SetWorldTransform

SetGraphicsMode

AddFontMemResourceEx

SetBrushOrgEx

BitBlt

CreateCompatibleBitmap

SelectObject

CreateCompatibleDC

StretchBlt

GetStockObject

GetDeviceCaps

GetTextExtentPoint32W

SetTextColor

SetBkMode

GetObjectW

TranslateCharsetInfo

DeleteDC

CreateDCW

EnumFontFamiliesExW

SetTextCharacterExtra

CreateFontIndirectW

RemoveFontMemResourceEx

CreateSolidBrush

DeleteObject

SetStretchBltMode

TextOutW

mpr

WNetCancelConnection2W

WNetAddConnection2W

version

GetFileVersionInfoExW

VerQueryValueW

GetFileVersionInfoSizeExW

wininet

InternetQueryOptionW

InternetGetConnectedState

InternetSetOptionW

cfgmgr32

CMP_WaitNoPendingInstallEvents

CM_Get_Parent

CM_Get_Device_ID_ExW

CM_Get_DevNode_Registry_PropertyW

CM_Get_Device_ID_Size_Ex

bcrypt

BCryptHashData

BCryptDestroyHash

BCryptOpenAlgorithmProvider

BCryptCloseAlgorithmProvider

BCryptGetProperty

BCryptCreateHash

BCryptDestroyKey

BCryptVerifySignature

BCryptImportKeyPair

BCryptFinishHash

fltlib

FilterAttach

FilterLoad

cabinet

ord23

ord20

ord22

Exports

??4DUMgr@@QEAAAEAV0@AEBV0@@Z

?GetModuleId@DUMgr@@QEAAAEBQEAXXZ

?Instance@DUMgr@@SAPEAV1@XZ

?IsCancelled@DUMgr@@AEAAHXZ

?SetModuleId@DUMgr@@QEAAXPEAX@Z

?SetPhase@DUMgr@@AEAAXW4DUPhase@@@Z

FreeResourceHandle

GetCleanInstallCheckpointSequence

GetSpaceNeededForWinPE

InstallCopyCodeUpdate

InstallSetupUpdates

InstallWindows

Module_Init_BootPrepare

Module_Init_Bootstrap

Module_Init_CBS

Module_Init_Cleanup

Module_Init_Compliance

Module_Init_ComputerName

Module_Init_ConfigOfflineImage

Module_Init_ConfigSet

Module_Init_CopyImages

Module_Init_CopyPrivates

Module_Init_CopySetupFiles

Module_Init_DU

Module_Init_DeployImages

Module_Init_DiskConfiguration

Module_Init_DiskSpace

Module_Init_Ems

Module_Init_Engine

Module_Init_ErrorHandler

Module_Init_ExternalDrivers

Module_Init_Finalize_Image

Module_Init_FixBBPaths

Module_Init_GatherDiskInfo

Module_Init_ImageInstall

Module_Init_ImageTransfer

Module_Init_Internal

Module_Init_LanguagePack

Module_Init_License

Module_Init_Locale

Module_Init_ModuleLoader

Module_Init_MountedDevices

Module_Init_MungeBootEntries

Module_Init_OnlineSettings

Module_Init_PageFile

Module_Init_ParseCmdLine

Module_Init_PickTempDrive

Module_Init_PrepareInstallDrive

Module_Init_Productkey

Module_Init_QFE

Module_Init_RestartSetup

Module_Init_Rollback

Module_Init_ScenarioDetect

Module_Init_SourceMedia

Module_Init_Sysprep

Module_Init_SystemRestore

Module_Init_Unattend

PublishDiskInfoOnBlackboard

SetFileCopyErrorResult

SetFileCopyErrorResultFromStruct

SetResourceHandle

Sysprep_Specialize_Offline_Pnp_Compat

Sysprep_Specialize_Pnp_Compat

UnattendErrorFromResults

g_hwCompatParams

g_pUnattendCtxIBS

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

locales/guyan/recover/wxmsw30u_core_gcc_custom.dll

.dll windows x64

2ee64642a31d3f6dd8e8ee571294a762

Code Sign

31:83:0c:37:0a:d7:e4:97:63:3b:6e:b3:a0:2d:69:e6
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

18-02-2022 00:00

Not After

17-02-2025 23:59

Subject

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01-01-2004 00:00

Not After

31-12-2028 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign

KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-05-2021 00:00

Not After

31-12-2028 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22-03-2021 00:00

Not After

21-03-2036 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

03:cb:34:fd:3d:ff:12:11:33:9f:f0:7c:4b:21:57:c7
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

30-08-2022 00:00

Not After

29-08-2023 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

c3:fe:f0:2a:81:01:14:f0:12:0f:c2:d6:76:35:7c:48:7b:03:3a:b7:95:d8:b4:9a:14:e4:6f:0b:7e:a2:f2:da
Signer

Actual PE Digest

c3:fe:f0:2a:81:01:14:f0:12:0f:c2:d6:76:35:7c:48:7b:03:3a:b7:95:d8:b4:9a:14:e4:6f:0b:7e:a2:f2:da

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

19-09-2022 09:21
Valid: true

Chain 1

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DEBUG_STRIPPED

Imports

wxbase30u_gcc_custom

_Z10wxPathOnlyRK8wxString

_Z11wxDirExistsRK8wxString

_Z11wxGetLocalev

_Z12wxEntryStartRiPPw

_Z12wxExecuteDDERK8wxStringS1_S1_

_Z12wxFileExistsRK8wxString

_Z12wxRenameFileRK8wxStringS1_b

_Z12wxWakeUpIdlev

_Z13wxCRT_StrdupAPKc

_Z13wxGetFileKindP6_iobuf

_Z13wxGetUserHomeRK8wxString

_Z13wxLocaltime_rPKxP2tm

_Z13wxSetInstanceP11HINSTANCE__

_Z14wxEntryCleanupv

_Z14wxGetLocalTimev

_Z14wxGetOsVersionPiS_

_Z14wxNewEventTypev

_Z14wxSysErrorCodev

_Z15wxGetWinVersionv

_Z16wxIsAbsolutePathRK8wxString

_Z18wxFileNameFromPathPw

_Z18wxFileNameFromPathRK8wxString

_Z18wxLoadUserResourcePPKvPyRK8wxStringPKwP11HINSTANCE__

_Z18wxWakeUpMainThreadv

_Z19wxEncodingToCharset14wxFontEncoding

_Z19wxGet_wxConvLibcPtrv

_Z20wxGetLocalTimeMillisv

_Z20wxGet_wxConvLocalPtrv

_Z20wxIsWaitingForThreadv

_Z21wxSetWorkingDirectoryRK8wxString

_Z22wxGuiOwnedByMainThreadv

_Z22wxMutexGuiLeaveOrEnterv

_Z23wxEndsWithPathSeparatorRK8wxString

_Z26wxParseCommonDialogsFilterRK8wxStringR13wxArrayStringS3_

_Z7wxEntryRiPPw

_Z7wxMkdirRK8wxStringi

_Z7wxSplitRK8wxStringww

_Z8wxGetCwdv

_ZN10wxDateTime13TIME_T_FACTORE

_ZN10wxDateTime3SetERK2tm

_ZN10wxDateTime3SetEtNS_5MonthEitttt

_ZN10wxDateTime8GetTmNowEP2tm

_ZN10wxDateTime8TimeZoneC1ENS_2TZE

_ZN10wxFileName10FileExistsERK8wxString

_ZN10wxFileName5ClearEv

_ZN10wxFileName6AssignERK8wxString12wxPathFormat

_ZN10wxFileName6AssignERK8wxStringS2_12wxPathFormat

_ZN10wxFileName6AssignERKS_

_ZN10wxFileName7DirNameERK8wxString12wxPathFormat

_ZN10wxFileName9NormalizeEiRK8wxString12wxPathFormat

_ZN10wxFileName9SplitPathERK8wxStringPS0_S3_S3_12wxPathFormat

_ZN10wxFileTypeD1Ev

_ZN10wxLogChain11DoLogRecordEmRK8wxStringRK15wxLogRecordInfo

_ZN10wxLogChain5FlushEv

_ZN10wxLogChainD2Ev

_ZN11wxAppTraits21DoSimpleWaitForThreadEPv

_ZN11wxClassInfo8RegisterEv

_ZN11wxClassInfo8sm_firstE

_ZN11wxClassInfoD1Ev

_ZN11wxHashTable4NextEv

_ZN11wxIdleEvent11sm_idleModeE

_ZN11wxStopWatch5StartEl

_ZN11wxTimerImplC2EP7wxTimer

_ZN12wxEvtHandler10QueueEventEP7wxEvent

_ZN12wxEvtHandler12ProcessEventER7wxEvent

_ZN12wxEvtHandler12ms_classInfoE

_ZN12wxEvtHandler13sm_eventTableE

_ZN12wxEvtHandler15DoSetClientDataEPv

_ZN12wxEvtHandler16SearchEventTableER12wxEventTableR7wxEvent

_ZN12wxEvtHandler17DoSetClientObjectEP12wxClientData

_ZN12wxEvtHandler18SafelyProcessEventER7wxEvent

_ZN12wxEvtHandler19ProcessEventLocallyER7wxEvent

_ZN12wxEvtHandler6DoBindEiiiP14wxEventFunctorP8wxObject

_ZN12wxEvtHandler6UnlinkEv

_ZN12wxEvtHandler8DoUnbindEiiiRK14wxEventFunctorP8wxObject

_ZN12wxEvtHandler8TryAfterER7wxEvent

_ZN12wxEvtHandler9TryBeforeER7wxEvent

_ZN12wxEvtHandlerC2Ev

_ZN12wxEvtHandlerD2Ev

_ZN12wxFileSystem13URLToFileNameERK8wxString

_ZN12wxStringHash10stringHashEPKw

_ZN12wxTextBuffer11typeDefaultE

_ZN12wxTextBuffer6GetEOLE14wxTextFileType

_ZN12wxTextBuffer9TranslateERK8wxString14wxTextFileType

_ZN13wxArrayString4SortEPFiRK8wxStringS2_E

_ZN13wxInputStream4GetCEv

_ZN13wxInputStream5SeekIEx10wxSeekMode

_ZN13wxInputStream7ReadAllEPvy

_ZN14wxEventFunctorD2Ev

_ZN14wxFSVolumeBase10GetVolumesEii

_ZN14wxFSVolumeBaseC2ERK8wxString

_ZN14wxFormatString7AsWCharEv

_ZN14wxOutputStream8WriteAllEPKvy

_ZN14wxOutputStreamD2Ev

_ZN14wxPlatformInfo13GetPortIdNameE8wxPortIdb

_ZN14wxPlatformInfo3GetEv

_ZN14wxTranslations21GetUntranslatedStringERK8wxString

_ZN14wxTranslations3GetEv

_ZN15wxAppTraitsBase13MutexGuiEnterEv

_ZN15wxAppTraitsBase13MutexGuiLeaveEv

_ZN15wxAppTraitsBase16GetStandardPathsEv

_ZN15wxAppTraitsBase16ShowAssertDialogERK8wxString

_ZN15wxCmdLineParser19ConvertStringToArgsERK8wxString18wxCmdLineSplitType

_ZN15wxCmdLineParser7SetDescEPK18wxCmdLineEntryDesc

_ZN15wxEventLoopBase10WakeUpIdleEv

_ZN15wxEventLoopBase11ProcessIdleEv

_ZN15wxEventLoopBase13ms_activeLoopE

_ZN15wxEventLoopBase3RunEv

_ZN15wxEventLoopBase4ExitEi

_ZN15wxEventLoopBase5YieldEb

_ZN15wxEventLoopBase6OnExitEv

_ZN15wxEventLoopBase9SetActiveEPS_

_ZN15wxHashTableBase5ClearEv

_ZN15wxHashTableBase5DoPutERK8wxStringlPv

_ZN15wxHashTableBase5DoPutEllPv

_ZN15wxHashTableBase6CreateE9wxKeyTypey

_ZN15wxHashTableBase7DestroyEv

_ZN15wxHashTableBase7MakeKeyERK8wxString

_ZN15wxHashTableBase8DoDeleteERK8wxStringl

_ZN15wxHashTableBaseC2Ev

_ZN15wxLogInterposerC2Ev

_ZN15wxMessageOutput13DoPrintfWcharEPKwz

_ZN15wxSystemOptions12GetOptionIntERK8wxString

_ZN15wxSystemOptions9HasOptionERK8wxString

_ZN16wxAppConsoleBase10InitializeERiPPw

_ZN16wxAppConsoleBase10OnLaunchedEv

_ZN16wxAppConsoleBase10SetCLocaleEv

_ZN16wxAppConsoleBase10WakeUpIdleEv

_ZN16wxAppConsoleBase11FilterEventER7wxEvent

_ZN16wxAppConsoleBase11ProcessIdleEv

_ZN16wxAppConsoleBase12CreateTraitsEv

_ZN16wxAppConsoleBase12ExitMainLoopEv

_ZN16wxAppConsoleBase13OnCmdLineHelpER15wxCmdLineParser

_ZN16wxAppConsoleBase13OnInitCmdLineER15wxCmdLineParser

_ZN16wxAppConsoleBase14OnCmdLineErrorER15wxCmdLineParser

_ZN16wxAppConsoleBase14ms_appInstanceE

_ZN16wxAppConsoleBase15OnAssertFailureEPKwiS1_S1_S1_

_ZN16wxAppConsoleBase15OnCmdLineParsedER15wxCmdLineParser

_ZN16wxAppConsoleBase17CheckBuildOptionsEPKcS1_

_ZN16wxAppConsoleBase20DeletePendingObjectsEv

_ZN16wxAppConsoleBase20OnUnhandledExceptionEv

_ZN16wxAppConsoleBase20ProcessPendingEventsEv

_ZN16wxAppConsoleBase21OnExceptionInMainLoopEv

_ZN16wxAppConsoleBase4ExitEv

_ZN16wxAppConsoleBase5OnRunEv

_ZN16wxAppConsoleBase5YieldEb

_ZN16wxAppConsoleBase6OnExitEv

_ZN16wxAppConsoleBase6OnInitEv

_ZN16wxAppConsoleBase7CleanUpEv

_ZN16wxAppConsoleBase7PendingEv

_ZN16wxAppConsoleBase8DispatchEv

_ZN16wxAppConsoleBase8MainLoopEv

_ZN16wxAppConsoleBase8OnAssertEPKwiS1_S1_

_ZN16wxAppConsoleBase9GetTraitsEv

_ZN16wxAppConsoleBaseC2Ev

_ZN16wxAppConsoleBaseD2Ev

_ZN16wxDynamicLibrary12RawGetSymbolEP11HINSTANCE__RK8wxString

_ZN16wxDynamicLibrary22CanonicalizePluginNameERK8wxString16wxPluginCategory

_ZN16wxDynamicLibrary4LoadERK8wxStringi

_ZN16wxDynamicLibrary6UnloadEP11HINSTANCE__

_ZN16wxEventHashTableC1ERK12wxEventTable

_ZN16wxEventHashTableD1Ev

_ZN16wxFontMapperBase15GetEncodingNameE14wxFontEncoding

_ZN16wxFontMapperBase19GetEncodingFromNameERK8wxString

_ZN16wxFontMapperBase22GetEncodingDescriptionE14wxFontEncoding

_ZN16wxFontMapperBase31NonInteractiveCharsetToEncodingERK8wxString

_ZN16wxFontMapperBase3GetEv

_ZN16wxFontMapperBaseC2Ev

_ZN16wxFontMapperBaseD2Ev

_ZN17wxCriticalSection5EnterEv

_ZN17wxCriticalSection5LeaveEv

_ZN17wxCriticalSectionC1E21wxCriticalSectionType

_ZN17wxCriticalSectionD1Ev

_ZN17wxDataInputStream6Read32Ev

_ZN17wxEventLoopManual12ScheduleExitEi

_ZN17wxEventLoopManual5DoRunEv

_ZN17wxNumberFormatter10FromStringE8wxStringPd

_ZN17wxNumberFormatter10FromStringE8wxStringPx

_ZN17wxNumberFormatter19GetDecimalSeparatorEv

_ZN17wxNumberFormatter8ToStringEdii

_ZN17wxNumberFormatter8ToStringExi

_ZN17wxStringTokenizer12GetNextTokenEv

_ZN17wxStringTokenizer9SetStringERK8wxStringS2_21wxStringTokenizerMode

_ZN17wxStringTokenizerC1ERK8wxStringS2_21wxStringTokenizerMode

_ZN18wxDataOutputStream7Write32Ej

_ZN18wxFFileInputStreamC1ERK8wxStringS2_

_ZN18wxFFileInputStreamD1Ev

_ZN18wxMSWEventLoopBase14GetNextMessageEP6tagMSG

_ZN18wxMSWEventLoopBase21GetNextMessageTimeoutEP6tagMSGm

_ZN18wxMSWEventLoopBaseC2Ev

_ZN18wxMimeTypesManager23GetFileTypeFromMimeTypeERK8wxString

_ZN18wxMimeTypesManager24GetFileTypeFromExtensionERK8wxString

_ZN19wxEncodingConverter17GetAllEquivalentsE14wxFontEncoding

_ZN19wxFFileOutputStreamC1ERK8wxStringS2_

_ZN19wxFFileOutputStreamD1Ev

_ZN19wxMemoryInputStreamC1EPKvy

_ZN19wxMemoryInputStreamD1Ev

_ZN20wxMemoryOutputStreamC1EPvy

_ZN20wxMemoryOutputStreamD1Ev

_ZN21wxBufferedInputStreamC1ER13wxInputStreamP14wxStreamBuffer

_ZN21wxBufferedInputStreamD1Ev

_ZN21wxClientDataContainer15DoSetClientDataEPv

_ZN21wxClientDataContainer17DoSetClientObjectEP12wxClientData

_ZN21wxClientDataContainerC2Ev

_ZN21wxClientDataContainerD2Ev

_ZN21wxMemoryFSHandlerBase16CheckDoesntExistERK8wxString

_ZN21wxMemoryFSHandlerBase6m_HashE

_ZN21wxMemoryFSHandlerBase7CanOpenERK8wxString

_ZN21wxMemoryFSHandlerBase8FindNextEv

_ZN21wxMemoryFSHandlerBase8OpenFileER12wxFileSystemRK8wxString

_ZN21wxMemoryFSHandlerBase9FindFirstERK8wxStringi

_ZN21wxMemoryFSHandlerBaseD2Ev

_ZN22wxBufferedOutputStreamC1ER14wxOutputStreamP14wxStreamBuffer

_ZN22wxBufferedOutputStreamD1Ev

_ZN22wxCountingOutputStreamC1Ev

_ZN28_WX_LIST_HELPER_wxObjectList14DeleteFunctionEP8wxObject

_ZN28_WX_LIST_HELPER_wxObjectList9EmptyListB5cxx11E

_ZN5wxDir4OpenERK8wxString

_ZN5wxDir5CloseEv

_ZN5wxDirC1ERK8wxString

_ZN5wxLog11DoLogRecordEmRK8wxStringRK15wxLogRecordInfo

_ZN5wxLog11FlushActiveEv

_ZN5wxLog11ms_bVerboseE

_ZN5wxLog12ms_timestampE

_ZN5wxLog15ms_suspendCountE

_ZN5wxLog16DoLogTextAtLevelEmRK8wxString

_ZN5wxLog17GetComponentLevelE8wxString

_ZN5wxLog19EnableThreadLoggingEb

_ZN5wxLog21LogLastRepeatIfNeededEv

_ZN5wxLog22IsThreadLoggingEnabledEv

_ZN5wxLog5FlushEv

_ZN5wxLog5OnLogEmRK8wxStringRK15wxLogRecordInfo

_ZN5wxLog8ms_doLogE

_ZN5wxLog9DoLogTextERK8wxString

_ZN5wxLogD2Ev

_ZN5wxURIC1ERK8wxString

_ZN6wxFile4OpenERK8wxStringNS_8OpenModeEi

_ZN6wxFile5CloseEv

_ZN6wxFile5WriteEPKvy

_ZN6wxFile5WriteERK8wxStringRK8wxMBConv

_ZN6wxFile6CreateERK8wxStringbi

_ZN6wxFile6ExistsERK8wxString

_ZN6wxFileC1ERK8wxStringNS_8OpenModeE

_ZN7wxEvent12ms_classInfoE

_ZN7wxEventC2ERKS_

_ZN7wxEventC2Eii

_ZN7wxEventaSERKS_

_ZN7wxFFile5CloseEv

_ZN7wxFFile5WriteERK8wxStringRK8wxMBConv

_ZN7wxFFile7ReadAllEP8wxStringRK8wxMBConv

_ZN7wxFFileC1ERK8wxStringS2_

_ZN7wxTimer4InitEv

_ZN7wxTimer4StopEv

_ZN7wxTimer5StartEib

_ZN7wxTimer8SetOwnerEP12wxEvtHandleri

_ZN7wxTimerD1Ev

_ZN7wxTimerD2Ev

_ZN8wxLocale15GetLanguageInfoEi

_ZN8wxLocale17GetSystemLanguageEv

_ZN8wxMBConvD2Ev

_ZN8wxModule12ms_classInfoE

_ZN8wxObject12ms_classInfoE

_ZN8wxObject14AllocExclusiveEv

_ZN8wxObject3RefERKS_

_ZN8wxObject5UnRefEv

_ZN8wxRegKey4OpenENS_10AccessModeE

_ZN8wxRegKey7SetNameENS_6StdKeyERK8wxString

_ZN8wxRegKeyC1ENS_6StdKeyERK8wxStringNS_13WOW64ViewModeE

_ZN8wxRegKeyC1ERKS_RK8wxString

_ZN8wxRegKeyD1Ev

_ZN8wxString10ConvertStrEPKcyRK8wxMBConv

_ZN8wxString11FromCDoubleEdi

_ZN8wxString13DoFormatWcharEPKwz

_ZN8wxString13DoPrintfWcharEPKwz

_ZN8wxString4TrimEb

_ZN8wxString4nposE

_ZN8wxString7FormatVERKS_Pc

_ZN8wxString7ReplaceERKS_S1_b

_ZN8wxString8TruncateEy

_ZN8wxString9FromAsciiEPKc

_ZN8wxString9MakeLowerEv

_ZN8wxString9MakeUpperEv

_ZN8wxThread11TestDestroyEv

_ZN8wxThread12GetCurrentIdEv

_ZN8wxThread15ms_idMainThreadE

_ZN8wxThread3RunEv

_ZN8wxThread4WaitE12wxThreadWait

_ZN8wxThread6CreateEj

_ZN8wxThreadC2E12wxThreadKind

_ZN8wxThreadD2Ev

_ZN9wxPrivate18GetUntypedNullDataEv

_ZN9wxUniChar10FromHi8bitEc

_ZNK10wxDateTime6FormatERK8wxStringRKNS_8TimeZoneE

_ZNK10wxFileName10IsAbsoluteE12wxPathFormat

_ZNK10wxFileName11GetFullNameEv

_ZNK10wxFileName11GetFullPathE12wxPathFormat

_ZNK10wxFileName6SameAsERKS_12wxPathFormat

_ZNK10wxFileName7GetPathEi12wxPathFormat

_ZNK10wxFileType7GetIconEP14wxIconLocation

_ZNK11wxStopWatch11TimeInMicroEv

_ZNK12wxEvtHandler12GetClassInfoEv

_ZNK12wxEvtHandler13GetEventTableEv

_ZNK12wxEvtHandler15DoGetClientDataEv

_ZNK12wxEvtHandler17DoGetClientObjectEv

_ZNK12wxEvtHandler17GetEventHashTableEv

_ZNK12wxStreamBase7GetSizeEv

_ZNK13wxArrayString5IndexERK8wxStringbb

_ZNK13wxInputStream5TellIEv

_ZNK14wxFSVolumeBase7GetKindEv

_ZNK14wxFormatString15GetArgumentTypeEj

_ZNK14wxTranslations19GetTranslatedStringERK8wxStringS2_

_ZNK14wxTranslations19GetTranslatedStringERK8wxStringjS2_

_ZNK15wxHashTableBase5DoGetERK8wxStringl

_ZNK15wxHashTableBase5DoGetEll

_ZNK16wxAppConsoleBase11HandleEventEP12wxEvtHandlerMS0_FvR7wxEventES3_

_ZNK16wxAppConsoleBase13UsesEventLoopEv

_ZNK16wxAppConsoleBase16CallEventHandlerEP12wxEvtHandlerR14wxEventFunctorR7wxEvent

_ZNK16wxAppConsoleBase17GetAppDisplayNameEv

_ZNK16wxDynamicLibrary9GetSymbolERK8wxStringPb

_ZNK16wxLongLongNative8ToStringEv

_ZNK17wxStringTokenizer13HasMoreTokensEv

_ZNK18wxFFileInputStream4IsOkEv

_ZNK18wxMSWEventLoopBase7PendingEv

_ZNK19wxFFileOutputStream4IsOkEv

_ZNK19wxFileSystemHandler12GetClassInfoEv

_ZNK20wxArgNormalizerWcharIRK10wxCStrDataE3getEv

_ZNK20wxArgNormalizerWcharIRK8wxStringE3getEv

_ZNK20wxMemoryOutputStream6CopyToEPvy

_ZNK21wxClientDataContainer15DoGetClientDataEv

_ZNK21wxClientDataContainer17DoGetClientObjectEv

_ZNK5wxDir10HasSubDirsERK8wxString

_ZNK5wxDir7GetNextEP8wxString

_ZNK5wxDir8GetFirstEP8wxStringRKS0_i

_ZNK5wxDir8HasFilesERK8wxString

_ZNK5wxDir8IsOpenedEv

_ZNK7wxTimer9IsRunningEv

_ZNK8wxMBConv6cMB2WCEPKc

_ZNK8wxObject12CloneRefDataEPK12wxRefCounter

_ZNK8wxObject12GetClassInfoEv

_ZNK8wxObject13CreateRefDataEv

_ZNK8wxObject8IsKindOfEPK11wxClassInfo

_ZNK8wxRegKey10QueryValueERK8wxStringR14wxMemoryBuffer

_ZNK8wxRegKey17QueryDefaultValueEv

_ZNK8wxRegKey6ExistsEv

_ZNK8wxRegKey8HasValueERK8wxString

_ZNK8wxString10AfterFirstE9wxUniChar

_ZNK8wxString10BeforeLastE9wxUniCharPS_

_ZNK8wxString10StartsWithERKS_PS_

_ZNK8wxString11BeforeFirstE9wxUniCharPS_

_ZNK8wxString3MidEyy

_ZNK8wxString4FindE9wxUniCharb

_ZNK8wxString4LeftEy

_ZNK8wxString5RightEy

_ZNK8wxString5StripENS_9stripTypeE

_ZNK8wxString6AsCharERK8wxMBConv

_ZNK8wxString6ToLongEPli

_ZNK8wxString7IsAsciiEv

_ZNK8wxString7ToAsciiEv

_ZNK8wxString7ToULongEPmi

_ZNK8wxString7compareEPKw

_ZNK8wxString7compareERKS_

_ZNK8wxString7compareEyyPKcy

_ZNK8wxString8EndsWithERKS_PS_

_ZNK8wxString8IsSameAsE9wxUniCharb

_ZNK8wxString8ToDoubleEPd

_ZNK8wxString9AfterLastE9wxUniChar

_ZNK8wxString9CmpNoCaseERKS_

_ZNK8wxString9ToCDoubleEPd

_ZTV10wxConvAuto

_ZTV11wxHashTable

_ZTV11wxIdleEvent

_ZTV12wxMBConvUTF8

_ZTV12wxPowerEvent

_ZTV14wxLogFormatter

_ZTV14wxMSWTimerImpl

_ZTV15wxLogInterposer

_ZTV17wxStringTokenizer

_ZTV18wxMBConvStrictUTF8

_ZTV18wxStringClientData

_ZTV19wxMessageOutputBest

_ZTV20wxObjectEventFunctor

_ZTV22wxCountingOutputStream

_ZTV5wxLog

_ZTV5wxURI

_ZTV7wxTimer

_ZTV8wxModule

_ZTV8wxObject

_ZThn120_N16wxAppConsoleBase11FilterEventER7wxEvent

_Zpl9wxUniCharRK8wxString

_ZplPKcRK8wxString

_ZplPKwRK8wxString

_ZplRK8wxString9wxUniChar

_ZplRK8wxStringPKw

_ZplRK8wxStringS1_

wxConvCurrent

wxConvLibcPtr

wxConvLocalPtr

wxCreateHiddenWindow

wxDefaultDateTime

wxEVT_IDLE

wxEVT_NULL

wxEVT_POWER_RESUME

wxEVT_POWER_SUSPENDED

wxEVT_POWER_SUSPENDING

wxEVT_POWER_SUSPEND_CANCEL

wxEVT_TIMER

wxEmptyString

wxGetInstance

wxPendingDelete

wxTheMimeTypesManager

libpng16-16

png_create_info_struct

png_create_read_struct

png_create_write_struct

png_destroy_read_struct

png_destroy_write_struct

png_get_IHDR

png_get_PLTE

png_get_header_version

png_get_io_ptr

png_get_pHYs

png_get_valid

png_read_end

png_read_image

png_read_info

png_set_IHDR

png_set_PLTE

png_set_compression_buffer_size

png_set_compression_level

png_set_compression_mem_level

png_set_compression_strategy

png_set_expand

png_set_filler

png_set_filter

png_set_pHYs

png_set_packing

png_set_read_fn

png_set_sBIT

png_set_shift

png_set_strip_16

png_set_tRNS

png_set_write_fn

png_write_end

png_write_info

png_write_rows

comctl32

CreateUpDownControl

ImageList_Add

ImageList_AddMasked

ImageList_BeginDrag

ImageList_Create

ImageList_Destroy

ImageList_DragEnter

ImageList_DragLeave

ImageList_DragMove

ImageList_Draw

ImageList_EndDrag

ImageList_GetIcon

ImageList_GetIconSize

ImageList_GetImageCount

ImageList_GetImageInfo

ImageList_Remove

ImageList_Replace

ImageList_ReplaceIcon

ImageList_SetBkColor

ImageList_SetDragCursorImage

InitCommonControls

comdlg32

ChooseFontW

CommDlgExtendedError

GetOpenFileNameW

GetSaveFileNameW

gdi32

Arc

BitBlt

CloseEnhMetaFile

CombineRgn

CopyEnhMetaFileW

CreateBitmap

CreateBitmapIndirect

CreateCompatibleBitmap

CreateCompatibleDC

CreateDIBSection

CreateDIBitmap

CreateEnhMetaFileW

CreateFontIndirectW

CreateHatchBrush

CreateICW

CreatePalette

CreatePatternBrush

CreatePen

CreatePolygonRgn

CreateRectRgn

CreateRectRgnIndirect

CreateSolidBrush

DeleteDC

DeleteEnhMetaFile

DeleteObject

Ellipse

EnumFontFamiliesExW

EqualRgn

ExcludeClipRect

ExtCreatePen

ExtCreateRegion

ExtFloodFill

ExtSelectClipRgn

ExtTextOutW

GdiFlush

GetBkColor

GetCharABCWidthsW

GetClipBox

GetDIBColorTable

GetDIBits

GetDeviceCaps

GetEnhMetaFileHeader

GetEnhMetaFileW

GetMetaFileBitsEx

GetNearestPaletteIndex

GetObjectType

GetObjectW

GetOutlineTextMetricsW

GetPaletteEntries

GetPixel

GetRegionData

GetRgnBox

GetStockObject

GetSystemPaletteEntries

GetTextExtentExPointW

GetTextExtentPoint32W

GetTextMetricsW

GetWinMetaFileBits

LineTo

MaskBlt

MoveToEx

OffsetRgn

Pie

PlayEnhMetaFile

PolyPolygon

Polygon

Polyline

PtInRegion

RealizePalette

RectInRegion

Rectangle

RoundRect

SelectClipRgn

SelectObject

SelectPalette

SetBkColor

SetBkMode

SetBrushOrgEx

SetLayout

SetMapMode

SetMetaFileBitsEx

SetPixel

SetPolyFillMode

SetROP2

SetStretchBltMode

SetTextColor

SetViewportExtEx

SetViewportOrgEx

SetWinMetaFileBits

SetWindowExtEx

SetWindowOrgEx

StretchBlt

StretchDIBits

kernel32

DeleteCriticalSection

EnterCriticalSection

FillConsoleOutputCharacterW

FreeConsole

FreeLibrary

GetCommandLineW

GetConsoleScreenBufferInfo

GetCurrentThreadId

GetFileAttributesW

GetLastError

GetProcessHeap

GetStdHandle

GetVersionExW

GlobalAlloc

GlobalFree

GlobalLock

GlobalSize

GlobalUnlock

HeapSize

InitializeCriticalSection

IsDBCSLeadByteEx

LeaveCriticalSection

LoadLibraryW

MulDiv

MultiByteToWideChar

ReadConsoleOutputCharacterA

SetConsoleCursorPosition

SetErrorMode

SetLastError

Sleep

TlsGetValue

VirtualProtect

VirtualQuery

WideCharToMultiByte

WriteConsoleA

WriteConsoleW

msvcrt

___lc_codepage_func

___mb_cur_max_func

__iob_func

__setusermatherr

_amsg_exit

_chdrive

_errno

_getdrive

_initterm

_lock

_setjmp

_time64

_unlock

_wstat64

abort

atoi

calloc

exit

fgetwc

fputc

free

fwrite

getc

islower

isspace

isupper

iswalnum

iswalpha

iswctype

iswdigit

iswprint

isxdigit

localeconv

malloc

memcmp

memcpy

memmove

memset

realloc

strchr

strcmp

strcpy

strerror

strlen

strncmp

strncpy

strstr

strtol

strtoul

tolower

toupper

towlower

towupper

ungetc

ungetwc

vfprintf

wcschr

wcscmp

wcscpy

wcsftime

wcslen

wcsncpy

wcstol

wcstoul

longjmp

_wcsdup

ole32

CoCreateInstance

CoLockObjectExternal

CoTaskMemAlloc

CoTaskMemFree

DoDragDrop

OleFlushClipboard

OleGetClipboard

OleInitialize

OleIsCurrentClipboard

OleSetClipboard

OleUninitialize

RegisterDragDrop

ReleaseStgMedium

RevokeDragDrop

oleaut32

SysAllocString

SysFreeString

SysReAllocString

SysStringLen

rpcrt4

RpcStringFreeW

UuidCreate

UuidFromStringW

UuidToStringW

shell32

DragAcceptFiles

DragFinish

DragQueryFileW

DragQueryPoint

ExtractIconExW

ExtractIconW

SHBrowseForFolderW

SHGetFileInfoW

SHGetMalloc

SHGetPathFromIDListW

ShellExecuteExW

user32

AdjustWindowRectEx

AppendMenuW

BeginDeferWindowPos

BeginPaint

BringWindowToTop

CallNextHookEx

CallWindowProcW

ChangeDisplaySettingsW

CheckMenuItem

CheckMenuRadioItem

ChildWindowFromPoint

ChildWindowFromPointEx

ClientToScreen

CloseClipboard

CopyRect

CreateAcceleratorTableW

CreateCaret

CreateDialogIndirectParamW

CreateDialogParamW

CreateIconIndirect

CreateMenu

CreatePopupMenu

CreateWindowExW

DefWindowProcW

DeferWindowPos

DestroyAcceleratorTable

DestroyCaret

DestroyCursor

DestroyIcon

DestroyMenu

DestroyWindow

DispatchMessageW

DrawEdge

DrawFocusRect

DrawFrameControl

DrawIconEx

DrawMenuBar

DrawStateW

DrawTextW

EmptyClipboard

EnableMenuItem

EnableScrollBar

EnableWindow

EndDeferWindowPos

EndDialog

EndPaint

EnumChildWindows

EnumClipboardFormats

EnumDisplaySettingsW

FillRect

FindWindowExW

FlashWindow

GetActiveWindow

GetAsyncKeyState

GetCapture

GetCaretBlinkTime

GetClassInfoW

GetClassNameW

GetClientRect

GetClipboardData

GetClipboardFormatNameW

GetCursorPos

GetDC

GetDesktopWindow

GetDialogBaseUnits

GetDlgItem

GetDoubleClickTime

GetFocus

GetIconInfo

GetKeyState

GetMenuItemCount

GetMenuItemID

GetMenuItemInfoW

GetMenuState

GetMessagePos

GetMessageTime

GetMessageW

GetParent

GetScrollInfo

GetSubMenu

GetSysColor

GetSysColorBrush

GetSystemMenu

GetSystemMetrics

GetUpdateRgn

GetWindow

GetWindowDC

GetWindowLongPtrW

GetWindowLongW

GetWindowPlacement

GetWindowRect

GetWindowTextLengthW

GetWindowTextW

HideCaret

InflateRect

InsertMenuItemW

InsertMenuW

InvalidateRect

IsClipboardFormatAvailable

IsDialogMessageW

IsIconic

IsRectEmpty

IsWindow

IsWindowEnabled

IsWindowVisible

IsZoomed

LoadAcceleratorsW

LoadBitmapW

LoadCursorFromFileW

LoadCursorW

LoadIconW

LoadImageW

MapVirtualKeyW

MapWindowPoints

MessageBeep

MessageBoxW

ModifyMenuW

MoveWindow

MsgWaitForMultipleObjects

OffsetRect

OpenClipboard

PeekMessageW

PostMessageW

PostQuitMessage

PostThreadMessageW

PtInRect

RedrawWindow

RegisterClassW

RegisterClipboardFormatW

RegisterHotKey

ReleaseCapture

ReleaseDC

RemoveMenu

ScreenToClient

ScrollWindow

SendMessageW

SetCapture

SetCaretBlinkTime

SetCaretPos

SetClipboardData

SetCursor

SetCursorPos

SetFocus

SetForegroundWindow

SetMenu

SetMenuItemInfoW

SetParent

SetRect

SetRectEmpty

SetScrollInfo

SetWindowLongPtrW

SetWindowLongW

SetWindowPos

SetWindowRgn

SetWindowTextW

SetWindowsHookExW

ShowCaret

ShowCursor

ShowWindow

SystemParametersInfoW

TrackPopupMenu

TranslateAcceleratorW

TranslateMessage

UnhookWindowsHookEx

UnionRect

UnregisterClassW

UnregisterHotKey

UpdateWindow

ValidateRect

ValidateRgn

VkKeyScanW

WindowFromPoint

keybd_event

mouse_event

wsprintfW

libgcc_s_seh-1

_Unwind_Resume

libstdc++-6

_ZNKSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE4findEPKwyy

_ZNKSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE4findEwy

_ZNKSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE5rfindEPKwyy

_ZNKSt8__detail20_Prime_rehash_policy11_M_next_bktEy

_ZNKSt8__detail20_Prime_rehash_policy14_M_need_rehashEyyy

_ZNSt15basic_streambufIcSt11char_traitsIcEE4syncEv

_ZNSt15basic_streambufIcSt11char_traitsIcEE5imbueERKSt6locale

_ZNSt15basic_streambufIcSt11char_traitsIcEE5uflowEv

_ZNSt15basic_streambufIcSt11char_traitsIcEE6setbufEPcx

_ZNSt15basic_streambufIcSt11char_traitsIcEE6xsgetnEPcx

_ZNSt15basic_streambufIcSt11char_traitsIcEE6xsputnEPKcx

_ZNSt15basic_streambufIcSt11char_traitsIcEE7seekoffExSt12_Ios_SeekdirSt13_Ios_Openmode

_ZNSt15basic_streambufIcSt11char_traitsIcEE7seekposESt4fposIiESt13_Ios_Openmode

_ZNSt15basic_streambufIcSt11char_traitsIcEE9pbackfailEi

_ZNSt15basic_streambufIcSt11char_traitsIcEE9showmanycEv

_ZNSt15basic_streambufIcSt11char_traitsIcEE9underflowEv

_ZNSt6localeC1Ev

_ZNSt6localeD1Ev

_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE10_M_disposeEv

_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE10_M_replaceEyyPKwy

_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE14_M_replace_auxEyyyw

_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE4swapERS4_

_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE7reserveEy

_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE8_M_eraseEyy

_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE9_M_appendEPKwy

_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE9_M_assignERKS4_

_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE9_M_createERyy

_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE9_M_mutateEyyPKwy

_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE9push_backEw

_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEEC1ERKS4_

_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEEaSEOS4_

_ZNSt8__detail15_List_node_base7_M_hookEPS0_

_ZNSt8__detail15_List_node_base9_M_unhookEv

_ZNSt8ios_base4InitC1Ev

_ZNSt8ios_base4InitD1Ev

_ZSt17__throw_bad_allocv

_ZSt19__throw_logic_errorPKc

_ZSt20__throw_length_errorPKc

_ZSt24__throw_out_of_range_fmtPKcz

_ZSt9terminatev

_ZTISt15basic_streambufIcSt11char_traitsIcEE

_ZTVN10__cxxabiv117__class_type_infoE

_ZTVN10__cxxabiv120__si_class_type_infoE

_ZTVN10__cxxabiv121__vmi_class_type_infoE

_ZTVSt15basic_streambufIcSt11char_traitsIcEE

_ZdaPv

_ZdaPvy

_ZdlPvy

_Znay

_Znwy

__cxa_begin_catch

__cxa_end_catch

__cxa_guard_abort

__cxa_guard_acquire

__cxa_guard_release

__cxa_pure_virtual

__cxa_rethrow

__cxa_throw_bad_array_new_length

__gxx_personality_seh0

Exports

_Z10wxDrawLineP5HDC__iiii

_Z10wxToStringRK10wxFontBase

_Z10wxToStringRK12wxColourBase

_Z11wxIsStockIDi

_Z11wxSafeYieldP8wxWindowb

_Z11wxSetCursorRK8wxCursor

_Z12wxEntryStartP11HINSTANCE__S0_Pci

_Z12wxFromStringRK8wxStringP10wxFontBase

_Z12wxFromStringRK8wxStringP12wxColourBase

_Z12wxMessageBoxRK8wxStringS1_lP8wxWindowii

_Z13IsIidFromListRK5_GUIDPPS0_y

_Z13wxDirSelectorRK8wxStringS1_lRK7wxPointP8wxWindow

_Z13wxDisplaySizePiS_

_Z13wxFillLogFontP11tagLOGFONTWPK6wxFont

_Z13wxFindMaxSizeP6HWND__P7tagRECT

_Z13wxGetCharSizeP6HWND__PiS1_RK6wxFont

_Z13wxGetKeyState9wxKeyCode

_Z13wxGetWindowIdP6HWND__

_Z14wxDisplayDepthv

_Z14wxFileSelectorRK8wxStringS1_S1_S1_S1_iP8wxWindowii

_Z14wxGetHiconSizeP7HICON__

_Z14wxIsStockLabeliRK8wxString

_Z15wxColourDisplayv

_Z15wxDisplaySizeMMPiS_

_Z15wxEndBusyCursorv

_Z15wxGetDisplayPPIv

_Z15wxGetMouseStatev

_Z15wxGetStockLabelil

_Z15wxGetWindowTextP6HWND__

_Z15wxOpenClipboardv

_Z15wxYieldIfNeededv

_Z16wxCloseClipboardv

_Z16wxEmptyClipboardv

_Z16wxFileSelectorExRK8wxStringS1_S1_PiS1_iP8wxWindowii

_Z16wxFindMenuItemIdP7wxFrameRK8wxStringS3_

_Z16wxGetDisplaySizev

_Z16wxGetWindowClassP6HWND__

_Z16wxInfoMessageBoxP8wxWindow

_Z16wxIsDragResultOk12wxDragResult

_Z16wxStripMenuCodesRK8wxStringi

_Z17wxBeginBusyCursorPK8wxCursor

_Z17wxGetActiveWindowv

_Z17wxGetCursorPosMSWP8tagPOINT

_Z17wxGetFontFromUserP8wxWindowRK6wxFontRK8wxString

_Z17wxGetTextFromUserRK8wxStringS1_S1_P8wxWindowiib

_Z17wxSetFocusToChildP8wxWindowPS0_

_Z18wxDeleteStockListsv

_Z18wxFindWindowByNameRK8wxStringP8wxWindow

_Z18wxGetClipboardData12wxDataFormatPl

_Z18wxGetDisplaySizeMMv

_Z18wxGetMousePositionPiS_

_Z18wxGetMousePositionv

_Z18wxLoadFileSelectorRK8wxStringS1_S1_P8wxWindow

_Z18wxSaveFileSelectorRK8wxStringS1_S1_P8wxWindow

_Z18wxSetClipboardData12wxDataFormatPKvii

_Z18wxTestFontEncodingRK20wxNativeEncodingInfo

_Z19wxCheckForInterruptP8wxWindow

_Z19wxClientDisplayRectPiS_S_S_

_Z19wxFindWinFromHandleP6HWND__

_Z19wxFindWindowAtPointRK7wxPoint

_Z19wxFindWindowByLabelRK8wxStringP8wxWindow

_Z19wxGetTopLevelParentP8wxWindow

_Z19wxGetWindowFromHWNDP6HWND__

_Z19wxIsClipboardOpenedv

_Z20wxCheckWindowWndProcP6HWND__PFivE

_Z20wxConvertStringToOleRK8wxString

_Z20wxGetStockHelpStringi23wxStockHelpStringClient

_Z21wxFindFocusDescendantP8wxWindow

_Z21wxFindWindowAtPointerR7wxPoint

_Z21wxGetPasswordFromUserRK8wxStringS1_S1_P8wxWindowiib

_Z21wxGetStockAcceleratori

_Z21wxMSWGetColumnClickedP8tagNMHDRP8tagPOINT

_Z22wxConvertStringFromOlePw

_Z22wxEnumClipboardFormats12wxDataFormat

_Z22wxGetClientDisplayRectv

_Z22wxInitAllImageHandlersv

_Z22wxInitializeStockListsv

_Z22wxLaunchDefaultBrowserRK8wxStringi

_Z23wxCreateFontFromLogFontPK11tagLOGFONTW

_Z23wxEnableTopLevelWindowsb

_Z23wxGetFontEncFromCharSeti

_Z23wxGetLibraryVersionInfov

_Z23wxGetNativeFontEncoding14wxFontEncodingP20wxNativeEncodingInfo

_Z24wxGetClipboardFormatName12wxDataFormatPwi

_Z25wxRegisterClipboardFormatPw

_Z25wxSetDetectableAutoRepeatb

_Z26wxGenericFindWindowAtPointRK7wxPoint

_Z26wxLaunchDefaultApplicationRK8wxStringi

_Z28wxIsClipboardFormatAvailable12wxDataFormat

_Z31wxMSWDisableSettingHighDPIAwarev

_Z6wxBellv

_Z7wxEntryP11HINSTANCE__S0_Pci

_Z7wxYieldv

_Z8wxIsBusyv

_Z9wxWndProcP6HWND__jyx

_ZN10wxBoxSizer11RecalcSizesEv

_ZN10wxBoxSizer12ms_classInfoE

_ZN10wxBoxSizer7CalcMinEv

_ZN10wxBoxSizer9AddSpacerEi

_ZN10wxBusyInfoC1ERK8wxStringP8wxWindow

_ZN10wxBusyInfoC2ERK8wxStringP8wxWindow

_ZN10wxBusyInfoD0Ev

_ZN10wxBusyInfoD1Ev

_ZN10wxBusyInfoD2Ev

_ZN10wxCheckBox10MSWCommandEjt

_ZN10wxCheckBox11OnMouseLeftER12wxMouseEvent

_ZN10wxCheckBox12ms_classInfoE

_ZN10wxCheckBox14wxCreateObjectEv

_ZN10wxCheckBox16DoSet3StateValueE15wxCheckBoxState

_ZN10wxCheckBox17MSWMakeOwnerDrawnEb

_ZN10wxCheckBox19OnMouseEnterOrLeaveER12wxMouseEvent

_ZN10wxCheckBox19SetForegroundColourERK8wxColour

_ZN10wxCheckBox4InitEv

_ZN10wxCheckBox6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizelRK11wxValidatorS4_

_ZN10wxCheckBox7CommandER14wxCommandEvent

_ZN10wxCheckBox7OnFocusER12wxFocusEvent

_ZN10wxCheckBox8SetLabelERK8wxString

_ZN10wxCheckBox8SetValueEb

_ZN10wxCheckBox9MSWOnDrawEPPv

_ZN10wxClientDC12ms_classInfoE

_ZN10wxClientDCC1EP8wxWindow

_ZN10wxClientDCC2EP8wxWindow

_ZN10wxComboBox10MSWCommandEjt

_ZN10wxComboBox11OnSelectAllER14wxCommandEvent

_ZN10wxComboBox11OnUpdateCutER15wxUpdateUIEvent

_ZN10wxComboBox12DoSetToolTipEP9wxToolTip

_ZN10wxComboBox12OnUpdateCopyER15wxUpdateUIEvent

_ZN10wxComboBox12OnUpdateRedoER15wxUpdateUIEvent

_ZN10wxComboBox12OnUpdateUndoER15wxUpdateUIEvent

_ZN10wxComboBox12ms_classInfoE

_ZN10wxComboBox13MSWWindowProcEjyx

_ZN10wxComboBox13OnUpdatePasteER15wxUpdateUIEvent

_ZN10wxComboBox13sm_eventTableE

_ZN10wxComboBox14OnUpdateDeleteER15wxUpdateUIEvent

_ZN10wxComboBox14wxCreateObjectEv

_ZN10wxComboBox17GetEditableWindowEv

_ZN10wxComboBox17MSWProcessEditMsgEjyx

_ZN10wxComboBox17OnUpdateSelectAllER15wxUpdateUIEvent

_ZN10wxComboBox17sm_eventHashTableE

_ZN10wxComboBox20sm_eventTableEntriesE

_ZN10wxComboBox26MSWShouldPreProcessMessageEP6tagMSG

_ZN10wxComboBox5ClearEv

_ZN10wxComboBox5OnCutER14wxCommandEvent

_ZN10wxComboBox6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizeRK13wxArrayStringlRK11wxValidatorS4_

_ZN10wxComboBox6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizeiPS3_lRK11wxValidatorS4_

_ZN10wxComboBox6OnCopyER14wxCommandEvent

_ZN10wxComboBox6OnRedoER14wxCommandEvent

_ZN10wxComboBox6OnUndoER14wxCommandEvent

_ZN10wxComboBox7OnPasteER14wxCommandEvent

_ZN10wxComboBox7SetHintERK8wxString

_ZN10wxComboBox8OnDeleteER14wxCommandEvent

_ZN10wxComboBox8SetValueERK8wxString

_ZN10wxFSVolume9InitIconsEv

_ZN10wxFileData10SetNewNameERK8wxStringS2_

_ZN10wxFileData4CopyERKS_

_ZN10wxFileData4InitEv

_ZN10wxFileData8MakeItemER10wxListItem

_ZN10wxFileData8ReadDataEv

_ZN10wxFileDataC1ERK8wxStringS2_NS_8fileTypeEi

_ZN10wxFileDataC2ERK8wxStringS2_NS_8fileTypeEi

_ZN10wxFontBase11SetFaceNameERK8wxString

_ZN10wxFontBase12SetPixelSizeERK6wxSize

_ZN10wxFontBase15SetSymbolicSizeE18wxFontSymbolicSize

_ZN10wxFontBase17SetNativeFontInfoERK8wxString

_ZN10wxFontBase18SetDefaultEncodingE14wxFontEncoding

_ZN10wxFontBase18ms_encodingDefaultE

_ZN10wxFontBase19DoSetNativeFontInfoERK16wxNativeFontInfo

_ZN10wxFontBase20AdjustToSymbolicSizeE18wxFontSymbolicSizei

_ZN10wxFontBase25SetNativeFontInfoUserDescERK8wxString

_ZN10wxFontBase3NewERK16wxNativeFontInfo

_ZN10wxFontBase3NewERK6wxSize12wxFontFamily11wxFontStyle12wxFontWeightbRK8wxString14wxFontEncoding

_ZN10wxFontBase3NewERK6wxSize12wxFontFamilyiRK8wxString14wxFontEncoding

_ZN10wxFontBase3NewERK8wxString

_ZN10wxFontBase3NewEi12wxFontFamily11wxFontStyle12wxFontWeightbRK8wxString14wxFontEncoding

_ZN10wxFontBase3NewEi12wxFontFamilyiRK8wxString14wxFontEncoding

_ZN10wxFontBaseD0Ev

_ZN10wxFontBaseD1Ev

_ZN10wxFontBaseD2Ev

_ZN10wxFontData12ms_classInfoE

_ZN10wxFontData14wxCreateObjectEv

_ZN10wxFontDataC1ERKS_

_ZN10wxFontDataC1Ev

_ZN10wxFontDataC2ERKS_

_ZN10wxFontDataC2Ev

_ZN10wxFontDataD0Ev

_ZN10wxFontDataD1Ev

_ZN10wxFontDataD2Ev

_ZN10wxFontDataaSERKS_

_ZN10wxFontList16FindOrCreateFontEi12wxFontFamily11wxFontStyle12wxFontWeightbRK8wxString14wxFontEncoding

_ZN10wxGCDCImpl10DoDrawIconERK6wxIconii

_ZN10wxGCDCImpl10DoDrawLineEiiii

_ZN10wxGCDCImpl10DoDrawTextERK8wxStringii

_ZN10wxGCDCImpl10SetPaletteERK9wxPalette

_ZN10wxGCDCImpl11DoCrossHairEii

_ZN10wxGCDCImpl11DoDrawLinesEiPK7wxPointii

_ZN10wxGCDCImpl11DoDrawPointEii

_ZN10wxGCDCImpl11DoFloodFillEiiRK8wxColour16wxFloodFillStyle

_ZN10wxGCDCImpl12DoDrawBitmapERK8wxBitmapiib

_ZN10wxGCDCImpl12ms_classInfoE

_ZN10wxGCDCImpl13DoDrawEllipseEiiii

_ZN10wxGCDCImpl13DoDrawPolygonEiPK7wxPointii17wxPolygonFillMode

_ZN10wxGCDCImpl13DoStretchBlitEiiiiP4wxDCiiii21wxRasterOperationModebii

_ZN10wxGCDCImpl13SetBackgroundERK7wxBrush

_ZN10wxGCDCImpl15DoDrawCheckMarkEiiii

_ZN10wxGCDCImpl15DoDrawRectangleEiiii

_ZN10wxGCDCImpl17DoDrawEllipticArcEiiiidd

_ZN10wxGCDCImpl17DoDrawPolyPolygonEiPKiPK7wxPointii17wxPolygonFillMode

_ZN10wxGCDCImpl17DoDrawRotatedTextERK8wxStringiid

_ZN10wxGCDCImpl17SetBackgroundModeEi

_ZN10wxGCDCImpl17SetTextBackgroundERK8wxColour

_ZN10wxGCDCImpl17SetTextForegroundERK8wxColour

_ZN10wxGCDCImpl18SetGraphicsContextEP17wxGraphicsContext

_ZN10wxGCDCImpl18SetLogicalFunctionE21wxRasterOperationMode

_ZN10wxGCDCImpl19DoSetClippingRegionEiiii

_ZN10wxGCDCImpl20DoGradientFillLinearERK6wxRectRK8wxColourS5_11wxDirection

_ZN10wxGCDCImpl21ComputeScaleAndOriginEv

_ZN10wxGCDCImpl21DestroyClippingRegionEv

_ZN10wxGCDCImpl22DoDrawRoundedRectangleEiiiid

_ZN10wxGCDCImpl24DoGradientFillConcentricERK6wxRectRK8wxColourS5_RK7wxPoint

_ZN10wxGCDCImpl25DoSetDeviceClippingRegionERK8wxRegion

_ZN10wxGCDCImpl4InitEP17wxGraphicsContext

_ZN10wxGCDCImpl5ClearEv

_ZN10wxGCDCImpl5FlushEv

_ZN10wxGCDCImpl6DoBlitEiiiiP4wxDCii21wxRasterOperationModebii

_ZN10wxGCDCImpl6EndDocEv

_ZN10wxGCDCImpl6SetPenERK5wxPen

_ZN10wxGCDCImpl7EndPageEv

_ZN10wxGCDCImpl7SetFontERK6wxFont

_ZN10wxGCDCImpl8SetBrushERK7wxBrush

_ZN10wxGCDCImpl8StartDocERK8wxString

_ZN10wxGCDCImpl9DoDrawArcEiiiiii

_ZN10wxGCDCImpl9StartPageEv

_ZN10wxGCDCImplC1EP4wxDC

_ZN10wxGCDCImplC1EP4wxDCRK10wxMemoryDC

_ZN10wxGCDCImplC1EP4wxDCRK10wxWindowDC

_ZN10wxGCDCImplC1EP4wxDCRK15wxEnhMetaFileDC

_ZN10wxGCDCImplC1EP4wxDCi

_ZN10wxGCDCImplC2EP4wxDC

_ZN10wxGCDCImplC2EP4wxDCRK10wxMemoryDC

_ZN10wxGCDCImplC2EP4wxDCRK10wxWindowDC

_ZN10wxGCDCImplC2EP4wxDCRK15wxEnhMetaFileDC

_ZN10wxGCDCImplC2EP4wxDCi

_ZN10wxGCDCImplD0Ev

_ZN10wxGCDCImplD1Ev

_ZN10wxGCDCImplD2Ev

_ZN10wxGDIImage10AddHandlerEP17wxGDIImageHandler

_ZN10wxGDIImage11FindHandlerERK8wxString

_ZN10wxGDIImage11FindHandlerERK8wxStringl

_ZN10wxGDIImage11FindHandlerEl

_ZN10wxGDIImage11ms_handlersE

_ZN10wxGDIImage12FreeResourceEb

_ZN10wxGDIImage13InsertHandlerEP17wxGDIImageHandler

_ZN10wxGDIImage13RemoveHandlerERK8wxString

_ZN10wxGDIImage15CleanUpHandlersEv

_ZN10wxGDIImage20InitStandardHandlersEv

_ZN10wxKeyEvent12ms_classInfoE

_ZN10wxKeyEvent14wxCreateObjectEv

_ZN10wxKeyEventC1ERKS_

_ZN10wxKeyEventC1Ei

_ZN10wxKeyEventC1EiRKS_

_ZN10wxKeyEventC2ERKS_

_ZN10wxKeyEventC2Ei

_ZN10wxKeyEventC2EiRKS_

_ZN10wxListCtrl10DeleteItemEl

_ZN10wxListCtrl10InsertItemERK10wxListItem

_ZN10wxListCtrl10InsertItemElRK8wxString

_ZN10wxListCtrl10InsertItemElRK8wxStringi

_ZN10wxListCtrl10InsertItemEli

_ZN10wxListCtrl10MSWCommandEjt

_ZN10wxListCtrl10OnCharHookER10wxKeyEvent

_ZN10wxListCtrl10ScrollListEii

_ZN10wxListCtrl11MSWOnNotifyEixPx

_ZN10wxListCtrl11RefreshItemEl

_ZN10wxListCtrl11SetItemFontElRK6wxFont

_ZN10wxListCtrl11SetItemTextElRK8wxString

_ZN10wxListCtrl11UpdateStyleEv

_ZN10wxListCtrl12DeleteColumnEi

_ZN10wxListCtrl12EndEditLabelEb

_ZN10wxListCtrl12OnCustomDrawEx

_ZN10wxListCtrl12RefreshItemsEll

_ZN10wxListCtrl12SetImageListEP11wxImageListi

_ZN10wxListCtrl12SetItemCountEl

_ZN10wxListCtrl12SetItemImageElii

_ZN10wxListCtrl12SetItemStateElll

_ZN10wxListCtrl12ms_classInfoE

_ZN10wxListCtrl13EnsureVisibleEl

_ZN10wxListCtrl13MSWWindowProcEjyx

_ZN10wxListCtrl13SetTextColourERK8wxColour

_ZN10wxListCtrl13sm_eventTableE

_ZN10wxListCtrl14DeleteAllItemsEv

_ZN10wxListCtrl14DoInsertColumnElRK10wxListItem

_ZN10wxListCtrl14SetColumnWidthEii

_ZN10wxListCtrl14SetItemPtrDataEly

_ZN10wxListCtrl14SetSingleStyleElb

_ZN10wxListCtrl14wxCreateObjectEv

_ZN10wxListCtrl15AssignImageListEP11wxImageListi

_ZN10wxListCtrl15InitEditControlEP6HWND__

_ZN10wxListCtrl15SetColumnsOrderERK10wxArrayInt

_ZN10wxListCtrl15SetItemPositionElRK7wxPoint

_ZN10wxListCtrl16DeleteAllColumnsEv

_ZN10wxListCtrl17DeleteEditControlEv

_ZN10wxListCtrl17SetItemTextColourElRK8wxColour

_ZN10wxListCtrl17sm_eventHashTableE

_ZN10wxListCtrl18MSWSetExListStylesEv

_ZN10wxListCtrl18SetItemColumnImageElli

_ZN10wxListCtrl18SetWindowStyleFlagEl

_ZN10wxListCtrl19FreeAllInternalDataEv

_ZN10wxListCtrl19SetBackgroundColourERK8wxColour

_ZN10wxListCtrl19SetForegroundColourERK8wxColour

_ZN10wxListCtrl20sm_eventTableEntriesE

_ZN10wxListCtrl23SetItemBackgroundColourElRK8wxColour

_ZN10wxListCtrl25GetClassDefaultAttributesE15wxWindowVariant

_ZN10wxListCtrl26MSWShouldPreProcessMessageEP6tagMSG

_ZN10wxListCtrl4InitEv

_ZN10wxListCtrl6CreateEP8wxWindowiRK7wxPointRK6wxSizelRK11wxValidatorRK8wxString

_ZN10wxListCtrl7ArrangeEi

_ZN10wxListCtrl7OnPaintER12wxPaintEvent

_ZN10wxListCtrl7SetItemER10wxListItem

_ZN10wxListCtrl7SetItemEliRK8wxStringi

_ZN10wxListCtrl8ClearAllEv

_ZN10wxListCtrl8FindItemElRK7wxPointi

_ZN10wxListCtrl8FindItemElRK8wxStringb

_ZN10wxListCtrl8FindItemEly

_ZN10wxListCtrl9EditLabelElP11wxClassInfo

_ZN10wxListCtrl9SetColumnEiRK10wxListItem

_ZN10wxListCtrl9SortItemsEPFixxxEx

_ZN10wxListCtrlD0Ev

_ZN10wxListCtrlD1Ev

_ZN10wxListCtrlD2Ev

_ZN10wxListItem12ms_classInfoE

_ZN10wxListItem14wxCreateObjectEv

_ZN10wxListView12ms_classInfoE

_ZN10wxListView14wxCreateObjectEv

_ZN10wxListbook10InsertPageEyP8wxWindowRK8wxStringbi

_ZN10wxListbook10UpdateSizeEv

_ZN10wxListbook11SetPageTextEyRK8wxString

_ZN10wxListbook12DoRemovePageEy

_ZN10wxListbook12SetImageListEP11wxImageList

_ZN10wxListbook12SetPageImageEyi

_ZN10wxListbook12ms_classInfoE

_ZN10wxListbook13sm_eventTableE

_ZN10wxListbook14DeleteAllPagesEv

_ZN10wxListbook14OnListSelectedER11wxListEvent

_ZN10wxListbook14wxCreateObjectEv

_ZN10wxListbook16MakeChangedEventER15wxBookCtrlEvent

_ZN10wxListbook17sm_eventHashTableE

_ZN10wxListbook18UpdateSelectedPageEy

_ZN10wxListbook20sm_eventTableEntriesE

_ZN10wxListbook6CreateEP8wxWindowiRK7wxPointRK6wxSizelRK8wxString

_ZN10wxListbook6OnSizeER11wxSizeEvent

_ZN10wxMSGArray3AddERK6tagMSGy

_ZN10wxMSGArray6DoCopyERKS_

_ZN10wxMSGArray6InsertERK6tagMSGyy

_ZN10wxMSGArray7DoEmptyEv

_ZN10wxMSGArray8RemoveAtEyy

_ZN10wxMSGArrayC1ERKS_

_ZN10wxMSGArrayC2ERKS_

_ZN10wxMSGArrayD1Ev

_ZN10wxMSGArrayD2Ev

_ZN10wxMSGArrayaSERKS_

_ZN10wxMaskBase6CreateERK8wxBitmap

_ZN10wxMaskBase6CreateERK8wxBitmapRK8wxColour

_ZN10wxMaskBase6CreateERK8wxBitmapi

_ZN10wxMemoryDC12SelectObjectER8wxBitmap

_ZN10wxMemoryDC12ms_classInfoE

_ZN10wxMemoryDC14wxCreateObjectEv

_ZN10wxMemoryDC17GetSelectedBitmapEv

_ZN10wxMemoryDC20SelectObjectAsSourceERK8wxBitmap

_ZN10wxMemoryDCC1EP4wxDC

_ZN10wxMemoryDCC1ER8wxBitmap

_ZN10wxMemoryDCC1Ev

_ZN10wxMemoryDCC2EP4wxDC

_ZN10wxMemoryDCC2ER8wxBitmap

_ZN10wxMemoryDCC2Ev

_ZN10wxMenuBase10AddSubMenuEP6wxMenu

_ZN10wxMenuBase13SetHelpStringEiRK8wxString

_ZN10wxMenuBase17SetInvokingWindowEP8wxWindow

_ZN10wxMenuBase4InitEl

_ZN10wxMenuBase5CheckEib

_ZN10wxMenuBase6AttachEP13wxMenuBarBase

_ZN10wxMenuBase6DeleteEP10wxMenuItem

_ZN10wxMenuBase6DetachEv

_ZN10wxMenuBase6EnableEib

_ZN10wxMenuBase6InsertEyP10wxMenuItem

_ZN10wxMenuBase6RemoveEP10wxMenuItem

_ZN10wxMenuBase7DestroyEP10wxMenuItem

_ZN10wxMenuBase8DoAppendEP10wxMenuItem

_ZN10wxMenuBase8DoDeleteEP10wxMenuItem

_ZN10wxMenuBase8DoInsertEyP10wxMenuItem

_ZN10wxMenuBase8DoRemoveEP10wxMenuItem

_ZN10wxMenuBase8SetLabelEiRK8wxString

_ZN10wxMenuBase8UpdateUIEP12wxEvtHandler

_ZN10wxMenuBase9DoDestroyEP10wxMenuItem

_ZN10wxMenuBase9SendEventEii

_ZN10wxMenuBase9ms_lockedE

_ZN10wxMenuBaseD0Ev

_ZN10wxMenuBaseD1Ev

_ZN10wxMenuBaseD2Ev

_ZN10wxMenuItem10OnDrawItemER4wxDCRK6wxRectN16wxOwnerDrawnBase10wxODActionENS5_10wxODStatusE

_ZN10wxMenuItem12SetItemLabelERK8wxString

_ZN10wxMenuItem12ms_classInfoE

_ZN10wxMenuItem13OnMeasureItemEPyS0_

_ZN10wxMenuItem14wxCreateObjectEv

_ZN10wxMenuItem16DrawStdCheckMarkEP5HDC__PK7tagRECTN16wxOwnerDrawnBase10wxODStatusE

_ZN10wxMenuItem4InitEv

_ZN10wxMenuItem5CheckEb

_ZN10wxMenuItem6EnableEb

_ZN10wxMenuItemC1EP6wxMenuiRK8wxStringS4_10wxItemKindS1_

_ZN10wxMenuItemC2EP6wxMenuiRK8wxStringS4_10wxItemKindS1_

_ZN10wxMenuItemD0Ev

_ZN10wxMenuItemD1Ev

_ZN10wxMenuItemD2Ev

_ZN10wxNotebook10InsertPageEyP8wxWindowRK8wxStringbi

_ZN10wxNotebook10SetPaddingERK6wxSize

_ZN10wxNotebook10SetTabSizeERK6wxSize

_ZN10wxNotebook11MSWOnNotifyEixPx

_ZN10wxNotebook11MSWOnScrollEittP6HWND__

_ZN10wxNotebook11SetPageSizeERK6wxSize

_ZN10wxNotebook11SetPageTextEyRK8wxString

_ZN10wxNotebook12DoRemovePageEy

_ZN10wxNotebook12SetImageListEP11wxImageList

_ZN10wxNotebook12SetPageImageEyi

_ZN10wxNotebook12SetSelectionEy

_ZN10wxNotebook12ms_classInfoE

_ZN10wxNotebook13MSWPrintChildEP5HDC__P8wxWindow

_ZN10wxNotebook13QueryBgBitmapEv

_ZN10wxNotebook13UpdateBgBrushEv

_ZN10wxNotebook13sm_eventTableE

_ZN10wxNotebook14AdjustPageSizeEP8wxWindow

_ZN10wxNotebook14DeleteAllPagesEv

_ZN10wxNotebook14wxCreateObjectEv

_ZN10wxNotebook15ChangeSelectionEy

_ZN10wxNotebook15OnNavigationKeyER20wxNavigationKeyEvent

_ZN10wxNotebook15UpdateSelectionEi

_ZN10wxNotebook16DoDrawBackgroundEP5HDC__P8wxWindow

_ZN10wxNotebook17OnEraseBackgroundER12wxEraseEvent

_ZN10wxNotebook17sm_eventHashTableE

_ZN10wxNotebook20sm_eventTableEntriesE

_ZN10wxNotebook4InitEv

_ZN10wxNotebook6CreateEP8wxWindowiRK7wxPointRK6wxSizelRK8wxString

_ZN10wxNotebook6OnSizeER11wxSizeEvent

_ZN10wxNotebook7OnPaintER12wxPaintEvent

_ZN10wxNotebookC1EP8wxWindowiRK7wxPointRK6wxSizelRK8wxString

_ZN10wxNotebookC1Ev

_ZN10wxNotebookC2EP8wxWindowiRK7wxPointRK6wxSizelRK8wxString

_ZN10wxNotebookC2Ev

_ZN10wxNotebookD0Ev

_ZN10wxNotebookD1Ev

_ZN10wxNotebookD2Ev

_ZN10wxQuantize10DoQuantizeEjjPPhS1_S0_i

_ZN10wxQuantize12ms_classInfoE

_ZN10wxQuantize14wxCreateObjectEv

_ZN10wxQuantize8QuantizeERK7wxImageRS0_PP9wxPaletteiPPhi

_ZN10wxQuantize8QuantizeERK7wxImageRS0_iPPhi

_ZN10wxRadioBox10MSWCommandEjt

_ZN10wxRadioBox12DoMoveWindowEiiii

_ZN10wxRadioBox12SetSelectionEi

_ZN10wxRadioBox12ms_classInfoE

_ZN10wxRadioBox14wxCreateObjectEv

_ZN10wxRadioBox16DoSetItemToolTipEjP9wxToolTip

_ZN10wxRadioBox18PositionAllButtonsEiiii

_ZN10wxRadioBox19SubclassRadioButtonEP6HWND__

_ZN10wxRadioBox21SendNotificationEventEv

_ZN10wxRadioBox22GetFromRadioButtonHWNDEP6HWND__

_ZN10wxRadioBox27MSWGetRegionWithoutChildrenEv

_ZN10wxRadioBox4InitEv

_ZN10wxRadioBox4ShowEb

_ZN10wxRadioBox4ShowEjb

_ZN10wxRadioBox6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizeRK13wxArrayStringilRK11wxValidatorS4_

_ZN10wxRadioBox6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizeiPS3_ilRK11wxValidatorS4_

_ZN10wxRadioBox6EnableEb

_ZN10wxRadioBox6EnableEjb

_ZN10wxRadioBox7CommandER14wxCommandEvent

_ZN10wxRadioBox7SetFontERK6wxFont

_ZN10wxRadioBox8ReparentEP12wxWindowBase

_ZN10wxRadioBox8SetFocusEv

_ZN10wxRadioBox9DoSetSizeEiiiii

_ZN10wxRadioBox9SetStringEjRK8wxString

_ZN10wxRadioBoxD0Ev

_ZN10wxRadioBoxD1Ev

_ZN10wxRadioBoxD2Ev

_ZN10wxScreenDC12ms_classInfoE

_ZN10wxScreenDC14wxCreateObjectEv

_ZN10wxScreenDCC1Ev

_ZN10wxScreenDCC2Ev

_ZN10wxSpinCtrl10OnSetFocusER12wxFocusEvent

_ZN10wxSpinCtrl11MSWOnNotifyEixPx

_ZN10wxSpinCtrl11MSWOnScrollEittP6HWND__

_ZN10wxSpinCtrl11OnKillFocusER12wxFocusEvent

_ZN10wxSpinCtrl12DoMoveWindowEiiii

_ZN10wxSpinCtrl12DoSetToolTipEP9wxToolTip

_ZN10wxSpinCtrl12SetSelectionEll

_ZN10wxSpinCtrl12ms_classInfoE

_ZN10wxSpinCtrl13sm_eventTableE

_ZN10wxSpinCtrl14NormalizeValueEv

_ZN10wxSpinCtrl14SendSpinUpdateEi

_ZN10wxSpinCtrl14wxCreateObjectEv

_ZN10wxSpinCtrl16UpdateBuddyStyleEv

_ZN10wxSpinCtrl17sm_eventHashTableE

_ZN10wxSpinCtrl18GetSpinForTextCtrlEP6HWND__

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rdata
Size: 573KB - Virtual size: 573KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.pdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.xdata
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.edata
Size: 318KB - Virtual size: 318KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.idata
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

locales/linderPampasOughts/anomiesTheyll/eonismsCrineUvic/neglige.xml

.xml

locales/linderPampasOughts/anomiesTheyll/eonismsCrineUvic/pretireIriticMunjeet.xml

.xml

locales/linderPampasOughts/anomiesTheyll/foveolaRedwud.xml

.xml

locales/linderPampasOughts/anomiesTheyll/knock.xml

.xml

locales/linderPampasOughts/anomiesTheyll/moxoDemoidEmperil.xml

.xml

locales/linderPampasOughts/distadJejunaCumuli.xml

.xml

locales/linderPampasOughts/flatdom.xml

.xml

locales/linderPampasOughts/hektareDemised/biassed/boileryApperilManul.xml

.xml

locales/linderPampasOughts/hektareDemised/biassed/outleanPubsOospore.xml

.xml

locales/linderPampasOughts/hektareDemised/biassed/shrovy.xml

.xml

locales/linderPampasOughts/hektareDemised/biassed/sissooCheeksPiccage.xml

.xml

locales/linderPampasOughts/hektareDemised/gaubPatten.xml

.xml

locales/linderPampasOughts/hektareDemised/locanda/deodateNaig.xml

.xml

locales/linderPampasOughts/hektareDemised/locanda/noucheCharuk.xml

.xml .js

locales/linderPampasOughts/hektareDemised/locanda/recoinBabuaRamjet.xml

.xml

locales/linderPampasOughts/hektareDemised/locanda/skeo.xml

.xml

locales/linderPampasOughts/hektareDemised/locanda/stourTrioses.xml

.xml

locales/linderPampasOughts/hektareDemised/locanda/uropodsAcroseObiter.xml

.xml

locales/linderPampasOughts/hektareDemised/matzohs.xml

.xml

locales/linderPampasOughts/hektareDemised/pommardOvercup.xml

.xml

locales/linderPampasOughts/hektareDemised/procbalTonierReigned.xml

.xml

locales/linderPampasOughts/hektareDemised/telegaHover/scrawkDamiana.xml

.xml

locales/linderPampasOughts/hektareDemised/telegaHover/zep.xml

.xml

locales/linderPampasOughts/hektareDemised/tomcatRapalloScones.xml

.xml

locales/linderPampasOughts/kebyarCoremiaGested.xml

.xml

locales/linderPampasOughts/neritjcOpusBelly.xml

.xml

locales/linderPampasOughts/reacherLockoutFdnames.xml

.xml

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

Password: infected

ab8e1e9eb2026051e03c52024771ef37

Headers

File Characteristics

Imports

libgcc_s_dw2-1

advapi32

kernel32

mingwm10

msvcrt

ole32

user32

ws2_32

Exports

Exports

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.data Size: 23KB - Virtual size: 23KB

.rdata Size: 822KB - Virtual size: 821KB

.bss Size: - Virtual size: 6KB

.edata Size: 185KB - Virtual size: 185KB

.idata Size: 8KB - Virtual size: 7KB

.rsrc Size: 1024B - Virtual size: 840B

.reloc Size: 58KB - Virtual size: 58KB

Password: infected

03e7672c8b423d2d726a1731f8c39711

Headers

File Characteristics

Imports

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 4B

.bss Size: - Virtual size: 132B

.edata Size: 512B - Virtual size: 120B

.idata Size: 512B - Virtual size: 456B

.reloc Size: 512B - Virtual size: 120B

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 4.6MB - Virtual size: 4.6MB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

Password: infected

ab8e1e9eb2026051e03c52024771ef37

Headers

File Characteristics

Imports

libgcc_s_dw2-1

advapi32

kernel32

mingwm10

msvcrt

ole32

user32

ws2_32

Exports

Exports

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.data Size: 23KB - Virtual size: 23KB

.rdata Size: 822KB - Virtual size: 821KB

.bss Size: - Virtual size: 6KB

.edata Size: 185KB - Virtual size: 185KB

.idata Size: 8KB - Virtual size: 7KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.data
Size: 23KB - Virtual size: 23KB

.rdata
Size: 822KB - Virtual size: 821KB

.bss
Size: - Virtual size: 6KB

.edata
Size: 185KB - Virtual size: 185KB

.idata
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 1024B - Virtual size: 840B

.reloc
Size: 58KB - Virtual size: 58KB

.text
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 4B

.bss
Size: - Virtual size: 132B

.edata
Size: 512B - Virtual size: 120B

.idata
Size: 512B - Virtual size: 456B

.reloc
Size: 512B - Virtual size: 120B

.text
Size: 4.6MB - Virtual size: 4.6MB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 1.7MB - Virtual size: 1.7MB

.data
Size: 23KB - Virtual size: 23KB

.rdata
Size: 822KB - Virtual size: 821KB

.bss
Size: - Virtual size: 6KB

.edata
Size: 185KB - Virtual size: 185KB

.idata
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 1024B - Virtual size: 840B

.reloc
Size: 58KB - Virtual size: 58KB

.text
Size: 30KB - Virtual size: 30KB

.data
Size: 512B - Virtual size: 40B

.rdata
Size: 4KB - Virtual size: 4KB

.bss
Size: - Virtual size: 264B

.edata
Size: 2KB - Virtual size: 2KB

.idata
Size: 1024B - Virtual size: 852B

.reloc
Size: 2KB - Virtual size: 1KB

33:00:00:03:8b:79:45:c1:8b:0e:b6:87:ec:00:00:00:00:03:8b
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

c5:8b:ac:8f:3f:a6:f2:e6:3e:b2:83:f0:c0:3d:a0:b0:f6:d2:87:c0:bd:a6:46:dc:6f:ae:bb:35:50:98:3e:fe
Signer

21-03-2023 12:34
Valid: false

.text
Size: 835KB - Virtual size: 834KB

.rdata
Size: 300KB - Virtual size: 299KB

.data
Size: 32KB - Virtual size: 38KB

.pdata
Size: 33KB - Virtual size: 32KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 4KB