TSCLicensing[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

TSCLicensing.dll
Size

3.8MB
MD5

10e9faf385bfc893848e9ba923df4866
SHA1

c3326dac98501ed38c67428b72278f0293894745
SHA256

0b6890b580712c84b12df0ee5fce4d719877ccf9cf1e5591eb3402439d0fb99c
SHA512

2e88f73fd5d116882ec5656bcc2e84163e585c2768c602861e5dba007ba46c0819fafb658978edf27d2c05d19eb8be2cf60f7f15285e8fdc0874673e918f48c0
SSDEEP

98304:SCc6AROumt9um0haKyyH86nD1/HJ1XF+h0af1b:Dc1RSt30UyTZHXF+eAb

Score

7^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TSCLicensing.dll

Files

TSCLicensing.dll
.dll windows x64

b0cb8d94efe5378f93c63fdc1b3b83fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

cpprest140_2_9

?set_request_uri@_http_request@details@http@web@@QEAAXAEBVuri@4@@Z
??0_http_request@details@http@web@@QEAA@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?set_body@http_msg_base@details@http@web@@QEAAXAEBV?$basic_istream@E@streams@Concurrency@@_KAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?to_uri@uri_builder@web@@QEAA?AVuri@2@XZ
?GET@methods@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B
??0uri@web@@QEAA@PEB_W@Z
??1win32_encryption@details@web@@QEAA@XZ
?platform_category@details@utility@@YAAEBVerror_category@std@@XZ
??0value@json@web@@QEAA@AEBV012@@Z
?serialize@value@json@web@@QEBAXAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
?to_string@http_msg_base@details@http@web@@UEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?from_string@datetime@utility@@SA?AV12@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4date_format@12@@Z
??0http_client@client@http@web@@QEAA@AEBVuri@3@AEBVhttp_client_config@123@@Z
??4value@json@web@@QEAAAEAV012@AEBV012@@Z
?number@value@json@web@@SA?AV123@N@Z
?number@value@json@web@@SA?AV123@H@Z
?number@value@json@web@@SA?AV123@_J@Z
?boolean@value@json@web@@SA?AV123@_N@Z
?string@value@json@web@@SA?AV123@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?is_integer@value@json@web@@QEBA_NXZ
?is_double@value@json@web@@QEBA_NXZ
?as_double@value@json@web@@QEBANXZ
?as_integer@value@json@web@@QEBAHXZ
?to_string@_http_request@details@http@web@@UEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?to_string_t@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?_complete@http_msg_base@details@http@web@@UEAAX_KAEBVexception_ptr@std@@@Z
?as_number@value@json@web@@QEBAAEBVnumber@23@XZ
?as_bool@value@json@web@@QEBA_NXZ
??1http_client@client@http@web@@QEAA@XZ
?as_string@value@json@web@@QEBAAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
??0value@json@web@@QEAA@XZ
??0value@json@web@@QEAA@$$QEAV012@@Z
?array@value@json@web@@SA?AV123@V?$vector@Vvalue@json@web@@V?$allocator@Vvalue@json@web@@@std@@@std@@@Z
?request@http_client@client@http@web@@QEAA?AV?$task@Vhttp_response@http@web@@@Concurrency@@Vhttp_request@34@AEBVcancellation_token@6@@Z
?user_agent@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B
?as_array@value@json@web@@QEBAAEBVarray@23@XZ
?encode_uri@uri@web@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV34@W4component@components@12@@Z
?to_string_t@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV34@@Z
?append_query@uri_builder@web@@QEAAAEAV12@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
?encode_impl@uri@web@@CA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV34@AEBV?$function@$$A6A_NH@Z@4@@Z
?serialize@value@json@web@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?to_string@datetime@utility@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4date_format@12@@Z
?to_utf8string@conversions@utility@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z
?to_utf16string@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?to_string_t@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$$QEAV34@@Z
?utf16_to_utf8@conversions@utility@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z
??Avalue@json@web@@QEAAAEAV012@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?at@value@json@web@@QEBAAEBV123@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?type@value@json@web@@QEBA?AW4value_type@123@XZ
?object@value@json@web@@SA?AV123@_N@Z
??4value@json@web@@QEAAAEAV012@$$QEAV012@@Z
?extract_string@http_msg_base@details@http@web@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
?extract_utf8string@http_msg_base@details@http@web@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
??0uri@web@@QEAA@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?validate@uri@web@@SA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?split_query@uri@web@@SA?AV?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z
?parse@value@json@web@@SA?AV123@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?to_string_t@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$$QEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z

mswsock

TransmitFile

ws2_32

ntohs
inet_addr
htons
htonl
getsockname
getpeername
ntohl
gethostbyname
FreeAddrInfoW
GetAddrInfoW
WSAAddressToStringW
WSAStartup
WSASend
ioctlsocket
getservbyname
WSAGetLastError
setsockopt
__WSAFDIsSet
gethostname
accept
bind
closesocket
connect
getsockopt
listen
select
gethostbyaddr
shutdown
socket
recvfrom
sendto
WSAGetOverlappedResult
WSACleanup
WSARecv

winhttp

WinHttpOpenRequest
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpConnect
WinHttpGetProxyForUrl
WinHttpCloseHandle
WinHttpSetStatusCallback
WinHttpSetOption
WinHttpCrackUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpFreeProxyResult
WinHttpGetProxyResult
WinHttpGetProxyForUrlEx
WinHttpCreateProxyResolver
WinHttpOpen

kernel32

GetDiskFreeSpaceExW
GetTempPathW
AreFileApisANSI
CreateDirectoryExW
CopyFileW
CreateHardLinkW
InitializeCriticalSectionAndSpinCount
ResetEvent
CreateEventW
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
FindFirstFileExW
CreateNamedPipeA
CreatePipe
UnlockFileEx
UnlockFile
LockFileEx
LockFile
SetEndOfFile
GetModuleFileNameA
GetVersionExA
CreateFileA
TerminateProcess
WaitForMultipleObjects
OpenProcess
CreateProcessW
GetExitCodeProcess
GetCurrentProcessId
GetHandleInformation
SetHandleInformation
CreateSemaphoreA
ReleaseSemaphore
GetCurrentThread
SwitchToThread
DuplicateHandle
GetEnvironmentVariableW
GetDriveTypeW
GetDriveTypeA
GetCurrentDirectoryW
SetCurrentDirectoryW
ExpandEnvironmentStringsW
PeekNamedPipe
WriteFile
ReadFile
MoveFileExW
CancelIo
DeviceIoControl
GetOverlappedResult
SetFilePointer
DeleteFileW
CreateFileW
SetStdHandle
GetStdHandle
RemoveDirectoryW
CreateDirectoryW
LocalFree
SetFileTime
SetFileAttributesW
GetFullPathNameW
GetFileType
GetFileTime
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
FindClose
CreateEventA
WaitForSingleObject
ReleaseMutex
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringW
CloseHandle
GetLastError
SetEvent
WaitForSingleObjectEx
CreateEventExW
GlobalFree
SetEnvironmentVariableW
FindFirstFileW
FindNextFileW
FreeLibrary
LoadLibraryW
GetProcAddress
LoadLibraryA
MultiByteToWideChar
WideCharToMultiByte
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentThreadId
GetCurrentProcess
GetModuleFileNameW
GetModuleHandleW
FormatMessageW
FormatMessageA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCommandLineW
TlsAlloc
TlsFree
SetLastError
Sleep
GetSystemTimeAsFileTime
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SystemTimeToFileTime
GetTimeZoneInformation
TlsGetValue
TlsSetValue
InitializeCriticalSection
DisableThreadLibraryCalls
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

advapi32

DuplicateTokenEx
CopySid
GetLengthSid
GetTokenInformation
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
AllocateAndInitializeSid
FreeSid
GetEffectiveRightsFromAclW
GetNamedSecurityInfoA
GetNamedSecurityInfoW
GetSecurityInfo
EqualSid
GetSidIdentifierAuthority
GetSidSubAuthority
GetSidSubAuthorityCount
IsValidSid
LogonUserW
SetSecurityDescriptorDacl
RevertToSelf
InitializeSecurityDescriptor
ImpersonateLoggedOnUser
OpenProcessToken
CreateProcessAsUserW
RegQueryValueExW
RegOpenKeyExA
LookupAccountNameA
LookupAccountSidA

shell32

CommandLineToArgvW

odbc32

ord75
ord141
ord9
ord24
ord236
ord31
ord111

msvcp140

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_J@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAM@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAN@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?id@?$ctype@_W@std@@2V0locale@2@A
?flags@ios_base@std@@QEAAHH@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?is@?$ctype@D@std@@QEBA_NFD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??7ios_base@std@@QEBA_NXZ
?eof@ios_base@std@@QEBA_NXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_N@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?fail@ios_base@std@@QEBA_NXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAHH@Z
?_Winerror_message@std@@YAKKPEADK@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??Bios_base@std@@QEBA_NXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
_Strcoll
_Strxfrm
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?id@?$collate@D@std@@2V0locale@2@A
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?toupper@?$ctype@_W@std@@QEBA_W_W@Z
_Thrd_start
_Xtime_get_ticks
_Thrd_sleep
_Mtx_init
_Mtx_destroy
_Cnd_init
_Cnd_destroy
_Cnd_signal
_Cnd_do_broadcast_at_thread_exit
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@F@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@O@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@DD@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEBUtm@@DD@Z
?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
_Mbrtowc
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_broadcast
?_Throw_C_error@std@@YAXH@Z
?_Xbad_function_call@std@@YAXXZ
?_XGetLastError@std@@YAXXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
??0task_continuation_context@Concurrency@@AEAA@XZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?_BADOFF@std@@3_JB
?_Xout_of_range@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?classic@locale@std@@SAAEBV12@XZ
?good@ios_base@std@@QEBA_NXZ
?bad@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?setf@ios_base@std@@QEAAHHH@Z
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@N@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ

bcrypt

BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
BCryptGenRandom

vcruntime140

strrchr
__std_type_info_compare
strchr
__std_type_info_destroy_list
memchr
__std_type_info_name
memcmp
wcschr
memmove
memcpy
__CxxFrameHandler3
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__std_terminate
_purecall
memset
__C_specific_handler
__RTDynamicCast

api-ms-win-crt-runtime-l1-1-0

_endthreadex
_beginthreadex
strerror
terminate
_getpid
_initterm_e
_initterm
_invalid_parameter_noinfo
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_invalid_parameter_noinfo_noreturn
_errno
_cexit
__doserrno

api-ms-win-crt-string-l1-1-0

isdigit
_strdup
isalpha
_wcsicmp
strcpy_s
strncpy_s
_stricmp
tolower
_strnicmp
islower
strcmp
wcsncmp
isspace
strncmp
toupper
strspn

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free
calloc
realloc

api-ms-win-crt-stdio-l1-1-0

_get_stream_buffer_pointers
fclose
fflush
fgetc
fgetpos
fputc
fsetpos
_fseeki64
fwrite
setvbuf
ungetc
_setmode
_open_osfhandle
_get_osfhandle
__stdio_common_vfwprintf
__stdio_common_vfprintf
__acrt_iob_func
_dup2
_commit
_close
__stdio_common_vsprintf
fputs
fputws

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_wstat64i32
_unlock_file
_stat64i32

api-ms-win-crt-convert-l1-1-0

mbsrtowcs
atoi
wcstombs
atol
strtol
_strtoi64

api-ms-win-crt-utility-l1-1-0

srand
rand

api-ms-win-crt-time-l1-1-0

_time64
strftime

api-ms-win-crt-environment-l1-1-0

__p__wenviron
__p__environ
getenv

api-ms-win-crt-math-l1-1-0

modf

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

user32

GetProcessWindowStation
GetUserObjectInformationW

Exports

Exports

??0ActivationData@TSCLicensing@@QEAA@PEBD@Z
??0ActivationData@TSCLicensing@@QEAA@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0CppRestWebProxyAdapter@TSCLicensing@@QEAA@V?$shared_ptr@VILogger@TSCLicensing@@@std@@@Z
??0License@@QEAA@ULicensingResponse@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@3@W4LicenseType@TSCLicensing@@@Z
??0License@@QEAA@ULicensingResponse@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@3@W4LicenseType@TSCLicensing@@PEAV?$ILicenseProvider@VILicense@@@@@Z
??0LicenseSoftLimitChecker@@QEAA@XZ
??0LicenseVersionChecker@@QEAA@H@Z
??0MaintenanceAgreementEntitlement@TSCLicensing@@QEAA@V?$shared_ptr@VISecureCache@TSCLicensing@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z
??0NalpeironEntitlementProvider@TSCLicensing@@QEAA@V?$shared_ptr@VINalpeironHelper@@@std@@@Z
??0NalpeironHelper@@QEAA@V?$shared_ptr@VINalpeironAPI@TSCLicensing@@@std@@V?$shared_ptr@VILicenseVersionChecker@@@2@V?$shared_ptr@VILicenseSoftLimitChecker@@@2@V?$shared_ptr@VINalpeironCommonHelper@TSCLicensing@@@2@V?$shared_ptr@VILogger@TSCLicensing@@@2@V?$shared_ptr@VIGetProxyInfo@TSCLicensing@@@2@V?$shared_ptr@VSDKConfig@TSCLicensing@@@2@_N@Z
??0NalpeironLicenseProvider@TSCLicensing@@QEAA@V?$shared_ptr@VINalpeironHelper@@@std@@UNalpeironSystemInfo@@V?$vector@V?$shared_ptr@VIEntitlementDataProvider@TSCLicensing@@@std@@V?$allocator@V?$shared_ptr@VIEntitlementDataProvider@TSCLicensing@@@std@@@2@@3@@Z
??0NalpeironLicensingConfiguration@@QEAA@HHHHHHHH_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1UNalpeironSystemInfo@@W4Environment@TSCLicensing@@V?$shared_ptr@VIGetProxyInfo@TSCLicensing@@@2@@Z
??0NalpeironPassiveHelper@TSCLicensing@@QEAA@V?$shared_ptr@VINalpeironPassiveAPI@TSCLicensing@@@std@@V?$shared_ptr@VINalpeironCommonHelper@TSCLicensing@@@3@V?$shared_ptr@VILicenseVersionChecker@@@3@V?$shared_ptr@VILogger@TSCLicensing@@@3@V?$shared_ptr@VSDKConfig@TSCLicensing@@@3@@Z
??0NalpeironPassiveLicenseProvider@TSCLicensing@@QEAA@V?$shared_ptr@VINalpeironPassiveHelper@TSCLicensing@@@std@@@Z
??0NalpeironSystemInfo@@QEAA@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@000@Z
??0OfflineActivationData@@QEAA@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
??0PassiveActivationData@TSCLicensing@@QEAA@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
??0PassiveNalpeironLicenseConfiguration@TSCLicensing@@QEAA@HHHHHHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0UNalpeironSystemInfo@@@Z
??0ProxyResolverAdapter@Win@TSCLicensing@@QEAA@V?$shared_ptr@VILogger@TSCLicensing@@@std@@@Z
??0TSCActivationAPI@TSCLicensing@@QEAA@V?$shared_ptr@VIKeysApi@Generated@TSCLicensing@@@std@@V?$shared_ptr@VIWebViewApi@Api@TSCLicensing@@@3@V?$shared_ptr@VILogger@TSCLicensing@@@3@@Z
??0TSCActivationAPIFactory@TSCLicensing@@QEAA@XZ
??0TSCActivationEntitlementProvider@TSCLicensing@@QEAA@V?$shared_ptr@VITSCActivationAPI@TSCLicensing@@@std@@V?$shared_ptr@VISecureCache@TSCLicensing@@@3@AEBHV?$shared_ptr@VIEntitlement@TSCLicensing@@@3@3@Z
??0TSCLicensingServiceLocator@TSCLicensing@@QEAA@V?$shared_ptr@VILicensingConfiguration@@@std@@V?$shared_ptr@VIRedirectBuilder@@@3@@Z
??0WebViewUrlEntitlement@TSCLicensing@@QEAA@XZ
??0WinProxyResultConverter@Win@TSCLicensing@@QEAA@V?$shared_ptr@VILogger@TSCLicensing@@@std@@@Z
??1ITSCActivationAPI@TSCLicensing@@UEAA@XZ
??4LicensingResponse@@QEAAAEAU0@$$QEAU0@@Z
??4LicensingResponse@@QEAAAEAU0@AEBU0@@Z
??4_Init_locks@std@@QEAAAEAV01@AEBV01@@Z
?AttemptToRefreshEntitlementsOnline@NalpeironEntitlementProvider@TSCLicensing@@UEAA?AV?$task@X@Concurrency@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?AttemptToRefreshEntitlementsOnline@TSCActivationEntitlementProvider@TSCLicensing@@UEAA?AV?$task@X@Concurrency@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?AttemptToRefreshLicenseOnline@NalpeironHelper@@UEAAXXZ
?BuildNumber@NalpeironSystemInfo@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?CanReachNalpeiron@NalpeironHelper@@UEAA_NXZ
?CheckLicenseVersion@LicenseVersionChecker@@UEAAHH@Z
?CheckLicenseVersion@LicenseVersionChecker@@UEAAHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?CheckSoftLimit@LicenseSoftLimitChecker@@UEAAHHH@Z
?CheckSoftLimit@LicenseSoftLimitChecker@@UEAAHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?CleanInvalidLicenseKeyChars@StringUtilCommon@TSCLicensing@@YAXAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?CleanInvalidSeparators@StringUtilCommon@TSCLicensing@@YAXAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?ClearEntitlementsFromCache@NalpeironEntitlementProvider@TSCLicensing@@UEAAXXZ
?ClearEntitlementsFromCache@TSCActivationEntitlementProvider@TSCLicensing@@UEAAXXZ
?CloseLibrary@NalpeironHelper@@UEAAXXZ
?CloseLibrary@NalpeironPassiveHelper@TSCLicensing@@UEAAXXZ
?CompleteOfflineActivation@NalpeironLicenseProvider@TSCLicensing@@UEAA?AV?$shared_ptr@VILicense@@@std@@UOfflineActivationData@@@Z
?CompleteOfflineActivation@NalpeironPassiveLicenseProvider@TSCLicensing@@UEAA?AV?$shared_ptr@VILicense@@@std@@UOfflineActivationData@@@Z
?CompleteOfflineActivation@TSCLicensingServiceLocator@TSCLicensing@@UEAA?AV?$shared_ptr@VILicense@@@std@@UOfflineActivationData@@@Z
?CompleteOfflineDeactivation@NalpeironLicenseProvider@TSCLicensing@@UEAA?AV?$shared_ptr@VILicense@@@std@@XZ
?CompleteOfflineDeactivation@NalpeironPassiveLicenseProvider@TSCLicensing@@UEAA?AV?$shared_ptr@VILicense@@@std@@XZ
?CompleteOfflineDeactivation@TSCLicensingServiceLocator@TSCLicensing@@UEAA?AV?$shared_ptr@VILicense@@@std@@XZ
?CompletePassiveActivation@NalpeironPassiveHelper@TSCLicensing@@UEAAHV?$shared_ptr@VPassiveActivationData@TSCLicensing@@@std@@@Z
?ConstructActivationAPI@TSCActivationAPIFactory@TSCLicensing@@QEAA?AV?$shared_ptr@VITSCActivationAPI@TSCLicensing@@@std@@V?$shared_ptr@VILogger@TSCLicensing@@@4@W4Environment@2@V?$shared_ptr@VIGetProxyInfo@TSCLicensing@@@4@V?$shared_ptr@VIRedirectBuilder@@@4@@Z
?ConvertToCppRestProxyInfo@CppRestWebProxyAdapter@TSCLicensing@@QEAA?AVweb_proxy@web@@UProxyInfo@2@@Z
?CreateLicensingService@NalpeironServiceFactory@@UEAA?AV?$shared_ptr@VILicensingService@@@std@@V?$shared_ptr@VILicensingConfiguration@@@3@V?$shared_ptr@VIRedirectBuilder@@@3@@Z
?DeleteLicenseCacheFiles@NalpeironHelper@@UEAAXXZ
?DeleteLicensingFiles@NalpeironPassiveHelper@TSCLicensing@@UEAAXXZ
?DeleteLicensingFiles@NalpeironPassiveLicenseProvider@TSCLicensing@@UEAAXXZ
?DeleteLicensingFiles@TSCLicensingServiceLocator@TSCLicensing@@UEAAXXZ
?EditionId@NalpeironSystemInfo@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?FileExists@FileSystemUtil@TSCLicensing@@UEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?FullProductVersion@NalpeironSystemInfo@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetActivationCertificateRequest@NalpeironHelper@@UEAAHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAV23@@Z
?GetCertificate@PassiveActivationData@TSCLicensing@@QEAA?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetComputerID@NalpeironHelper@@UEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetComputerID@NalpeironHelper@@UEAA_NPEAPEAD@Z
?GetComputerID@NalpeironPassiveHelper@TSCLicensing@@UEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetDeactivationCertificateRequest@NalpeironHelper@@UEAAHAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetEntitlementsFromCache@NalpeironEntitlementProvider@TSCLicensing@@UEAA?AV?$shared_ptr@V?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@std@@XZ
?GetEntitlementsFromCache@TSCActivationEntitlementProvider@TSCLicensing@@UEAA?AV?$shared_ptr@V?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@std@@XZ
?GetLicense@NalpeironLicenseProvider@TSCLicensing@@UEAA?AV?$shared_ptr@VILicense@@@std@@V?$shared_ptr@VActivationData@TSCLicensing@@@4@@Z
?GetLicense@NalpeironPassiveLicenseProvider@TSCLicensing@@UEAA?AV?$shared_ptr@VILicense@@@std@@V?$shared_ptr@VActivationData@TSCLicensing@@@4@@Z
?GetLicense@TSCLicensingServiceLocator@TSCLicensing@@UEAA?AV?$shared_ptr@VILicense@@@std@@V?$shared_ptr@VActivationData@TSCLicensing@@@4@@Z
?GetLicenseCode@ActivationData@TSCLicensing@@UEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetLicenseType@NalpeironHelper@@UEAA?AW4LicenseType@TSCLicensing@@XZ
?GetLicenseValidationResponse@License@@UEAA?AULicensingResponse@@XZ
?GetMaintenanceInfo@TSCActivationAPI@TSCLicensing@@UEAA?AV?$task@V?$shared_ptr@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@std@@@Concurrency@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetProxyInfo@ProxyResolverAdapter@Win@TSCLicensing@@UEAA?AUProxyInfo@3@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetStoredLicenseCode@NalpeironHelper@@UEAA_NPEAPEAD@Z
?GetSubscriptionExpirationDate@NalpeironHelper@@UEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetTrialExpirationDate@NalpeironHelper@@UEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetUDFValue@NalpeironHelper@@UEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V23@@Z
?GetUDFValue@NalpeironPassiveHelper@TSCLicensing@@UEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V34@@Z
?GetWebViewUrl@TSCActivationAPI@TSCLicensing@@UEAA?AV?$task@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Concurrency@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?InitLibrary@NalpeironHelper@@UEAAHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0IIIIIII@Z
?InitLibrary@NalpeironPassiveHelper@TSCLicensing@@UEAAHV?$shared_ptr@VPassiveNalpeironLicenseConfiguration@TSCLicensing@@@std@@@Z
?InstallLang@NalpeironSystemInfo@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?IsLicenseActivated@NalpeironHelper@@UEAA_NXZ
?IsSubscription@License@@UEAA_NXZ
?IsTrial@License@@UEAA_NXZ
?Key@License@@UEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?Key@OfflineActivationData@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?LicenseCertificate@OfflineActivationData@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?LicenseData@License@@UEAA?AV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@XZ
?ParseProxyIpAndPort@WinProxyResultConverter@Win@TSCLicensing@@QEAA?AUProxyInfo@3@UWINHTTP_PROXY_INFO@@@Z
?RPCCall@NalpeironHelper@@UEAAHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00AEAV23@@Z
?ReadFromCache@MaintenanceAgreementEntitlement@TSCLicensing@@UEAA_NXZ
?ReadFromCache@WebViewUrlEntitlement@TSCLicensing@@UEAA_NXZ
?ReadSecureCache@NalpeironHelper@@UEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAV23@@Z
?RemoveLastPathElement@FileSystemUtil@TSCLicensing@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V34@@Z
?Return@License@@UEAA?AULicensingResponse@@XZ
?ReturnLicense@NalpeironHelper@@UEAA_NXZ
?ReturnLicense@NalpeironLicenseProvider@TSCLicensing@@UEAA?AULicensingResponse@@XZ
?ReturnLicense@NalpeironPassiveLicenseProvider@TSCLicensing@@UEAA?AULicensingResponse@@XZ
?Separator@FileSystemUtil@TSCLicensing@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?SetActivationListener@License@@UEAA?AVthread@std@@KV?$shared_ptr@VIActivationListener@@@3@@Z
?SetActivationListener@NalpeironLicenseProvider@TSCLicensing@@UEAA?AVthread@std@@KV?$shared_ptr@VIActivationListener@@@4@@Z
?SetActivationListener@NalpeironPassiveLicenseProvider@TSCLicensing@@UEAA?AVthread@std@@KV?$shared_ptr@VIActivationListener@@@4@@Z
?SetEntitlementListener@License@@UEAA?AVthread@std@@KV?$shared_ptr@VIEntitlementListener@@@3@@Z
?SetEntitlementListener@NalpeironLicenseProvider@TSCLicensing@@UEAA?AVthread@std@@KV?$shared_ptr@VIEntitlementListener@@@4@@Z
?SetEntitlementListener@NalpeironPassiveLicenseProvider@TSCLicensing@@UEAA?AVthread@std@@KV?$shared_ptr@VIEntitlementListener@@@4@@Z
?SetValue@MaintenanceAgreementEntitlement@TSCLicensing@@UEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetValue@WebViewUrlEntitlement@TSCLicensing@@UEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?ShutDownLicensing@NalpeironLicenseProvider@TSCLicensing@@UEAAXXZ
?ShutDownLicensing@NalpeironPassiveLicenseProvider@TSCLicensing@@UEAAXXZ
?ShutDownLicensing@TSCLicensingServiceLocator@TSCLicensing@@UEAAXXZ
?ShutDownNalpeiron@NalpeironHelper@@UEAAXXZ
?ShutDownNalpeiron@NalpeironPassiveHelper@TSCLicensing@@UEAAXXZ
?StopActivationListener@License@@UEAAXXZ
?StopActivationListener@NalpeironLicenseProvider@TSCLicensing@@UEAAXXZ
?StopActivationListener@NalpeironPassiveLicenseProvider@TSCLicensing@@UEAAXXZ
?StopEntitlementListener@License@@UEAAXXZ
?StopEntitlementListener@NalpeironLicenseProvider@TSCLicensing@@UEAAXXZ
?StopEntitlementListener@NalpeironPassiveLicenseProvider@TSCLicensing@@UEAAXXZ
?ToMap@MaintenanceAgreementEntitlement@TSCLicensing@@UEBA?AV?$shared_ptr@V?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@std@@XZ
?ToMap@WebViewUrlEntitlement@TSCLicensing@@UEBA?AV?$shared_ptr@V?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@std@@XZ
?ToStdString@StringUtilWin@TSCLicensing@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z
?ToStdWString@StringUtilWin@TSCLicensing@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?UnlockOffline@NalpeironHelper@@UEAAHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?UploadSystemInfo@NalpeironHelper@@UEAA_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@000@Z
?VerifyLicense@NalpeironHelper@@UEAAHAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?WriteSecureCache@NalpeironHelper@@UEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?isValid@LicensingResponse@@QEAA_NXZ

Sections

.text
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 712KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0cb8d94efe5378f93c63fdc1b3b83fc

Headers

DLL Characteristics

File Characteristics

Imports

cpprest140_2_9

mswsock

ws2_32

winhttp

kernel32

advapi32

shell32

odbc32

msvcp140

bcrypt

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

user32

Exports

Exports

Sections

.text Size: - Virtual size: 1.7MB

.rdata Size: - Virtual size: 712KB

.data Size: - Virtual size: 110KB

.pdata Size: - Virtual size: 108KB

.vmp0 Size: - Virtual size: 1.3MB

.vmp1 Size: 3.8MB - Virtual size: 3.8MB

.reloc Size: 512B - Virtual size: 212B

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: - Virtual size: 1.7MB

.rdata
Size: - Virtual size: 712KB

.data
Size: - Virtual size: 110KB

.pdata
Size: - Virtual size: 108KB

.vmp0
Size: - Virtual size: 1.3MB

.vmp1
Size: 3.8MB - Virtual size: 3.8MB

.reloc
Size: 512B - Virtual size: 212B

.rsrc
Size: 1KB - Virtual size: 1KB