Kontakt 7 Patcher[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Kontakt 7 Patcher.zip
Size

69.4MB
MD5

7623fa02bc0aafc1b89fe17b4664d563
SHA1

8971373b8f8c43f475cfe3026bad53d424eca520
SHA256

b92bf82559ccb44e35a2b5085d205c926f7799b0229b9175fe4aed24905adfff
SHA512

421193e26531c7566a44281c7893a4b8cc69445b90374eb767a855cd581b05c2d19003ea5826e3da497a31fdd1aaeb2cef80310c2e15bcea87314fbbf37f203b
SSDEEP

1572864:oNL19IZaCInA8JbIwDyxglQGz4GPxgabWssqumQ:oNrIHkJ5fckRDQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Kontakt 7 Patcher.exe

Files

Kontakt 7 Patcher.zip
.zip
Kontakt 7 Patcher.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14.5MB - Virtual size: 14.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Kontakt 7.exe
.exe windows x64

2f29f3ac7022445fef80fe914c8bcd21

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:92:1e:31:af:15:9e:dc:94:1a:a6:59:57:55:b6:84
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

01/10/2021, 00:00

Not After

02/10/2024, 23:59

Subject

CN=Native Instruments GmbH,O=Native Instruments GmbH,L=Berlin,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

16:58:95:ae:d7:a1:95:4e:65:2a:e4:72:06:ff:22:f8:f0:f6:60:4e
Signer

Actual PE Digest

16:58:95:ae:d7:a1:95:4e:65:2a:e4:72:06:ff:22:f8:f0:f6:60:4e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

odbc32

ord44
ord18
ord20
ord75
ord61
ord72
ord127
ord108
ord111
ord31
ord119
ord139
ord140
ord145
ord147
ord152
ord154
ord30
ord13
ord43
ord24
ord12
ord138
ord141
ord29
ord9
ord26
ord176
ord165
ord136

winmm

timeKillEvent
midiInUnprepareHeader
timeGetTime
midiOutGetNumDevs
midiInStop
midiStreamOpen
midiStreamClose
midiInPrepareHeader
midiInClose
midiInOpen
midiStreamProperty
midiStreamPosition
midiStreamOut
midiStreamRestart
timeSetEvent
midiInStart
midiInAddBuffer
midiInGetDevCapsW
midiInGetNumDevs
midiOutLongMsg
midiOutShortMsg
midiOutUnprepareHeader
midiOutPrepareHeader
midiOutClose
midiOutOpen
midiOutGetDevCapsW
PlaySoundW
midiInReset
midiStreamStop

dwmapi

DwmEnableMMCSS
DwmEnableBlurBehindWindow
DwmGetWindowAttribute
DwmSetWindowAttribute

avrt

AvSetMmThreadPriority
AvSetMmThreadCharacteristicsW

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDevicePropertyW
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiGetDeviceInstanceIdW

dnsapi

DnsQuery_W
DnsFree

iphlpapi

if_nametoindex
GetAdaptersAddresses
ConvertInterfaceIndexToLuid
ConvertInterfaceLuidToGuid
ConvertInterfaceNameToLuidW
ConvertInterfaceLuidToNameW
ConvertInterfaceLuidToIndex
GetIfTable
GetAdaptersInfo
if_indextoname

winhttp

WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpConnect
WinHttpQueryAuthSchemes
WinHttpOpen
WinHttpQueryOption
WinHttpSetOption
WinHttpSetCredentials
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpSetTimeouts
WinHttpGetDefaultProxyConfiguration
WinHttpCloseHandle
WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpQueryDataAvailable
WinHttpWriteData
WinHttpReadData
WinHttpSetStatusCallback

crypt32

CertFreeCertificateContext
CertAddStoreToCollection
CertVerifyTimeValidity
CertOpenSystemStoreW
CertGetCertificateChain
CertFreeCertificateChain
CertFindChainInStore
PFXImportCertStore
CertFindCertificateInStore
CertCloseStore
CertDuplicateCertificateContext
CryptUnprotectMemory
CertVerifyCertificateChainPolicy
CertOpenStore

secur32

EncryptMessage
FreeContextBuffer
QueryContextAttributesW
ApplyControlToken
DeleteSecurityContext
FreeCredentialsHandle
InitSecurityInterfaceW
AcquireCredentialsHandleW
InitializeSecurityContextW
DecryptMessage
AcceptSecurityContext

bcrypt

BCryptDecrypt
BCryptDestroyKey
BCryptEncrypt
BCryptOpenAlgorithmProvider
BCryptSetProperty
BCryptGenRandom
BCryptGetProperty
BCryptCreateHash
BCryptHashData
BCryptFinishHash
BCryptCloseAlgorithmProvider
BCryptGenerateSymmetricKey
BCryptDestroyHash

ws2_32

WSAGetLastError
WSACleanup
WSAIoctl
inet_ntop
htonl
ntohl
getaddrinfo
freeaddrinfo
__WSAFDIsSet
accept
bind
closesocket
connect
ioctlsocket
getpeername
getsockname
getsockopt
getnameinfo
WSAAccept
WSAConnect
WSAHtonl
WSANtohl
WSANtohs
htons
inet_addr
listen
ntohs
recv
recvfrom
select
WSARecv
getservbyname
getservbyport
WSAAsyncSelect
WSAStringToAddressW
WSAAddressToStringW
WSASetLastError
gethostname
WSAStartup
gethostbyname
gethostbyaddr
shutdown
send
sendto
setsockopt
WSARecvFrom
WSASend
WSASendTo
WSASocketW
inet_ntoa
WSACloseEvent
WSACreateEvent
WSAEventSelect
WSAWaitForMultipleEvents
socket

mfplat

MFShutdown
MFCreateAsyncResult
MFInvokeCallback
MFCreateMediaType
MFStartup

mfreadwrite

MFCreateSourceReaderFromByteStream

propsys

PropVariantToInt64

uxtheme

GetThemeBackgroundRegion
OpenThemeData
IsThemeBackgroundPartiallyTransparent
GetThemeColor
GetThemeBool
ord47
CloseThemeData
GetThemePartSize
GetThemeInt
GetThemeEnumValue
GetThemeMargins
GetThemePropertyOrigin
SetWindowTheme
IsThemeActive
IsAppThemed
GetThemeTransitionDuration
GetCurrentThemeName

d3d11

D3D11CreateDevice

dxgi

CreateDXGIFactory1
CreateDXGIFactory2
CreateDXGIFactory

dwrite

DWriteCreateFactory

gdi32

GdiFlush
CreateDIBSection
SelectObject
SelectClipRgn
GetRegionData
SetStretchBltMode
CreateSolidBrush
GetClipBox
CreateBitmap
AddFontResourceExW
RemoveFontResourceExW
AddFontMemResourceEx
GetTextMetricsW
SetDIBitsToDevice
GetCharABCWidthsW
GetCharABCWidthsFloatW
GetGlyphOutlineW
DeleteObject
CreateRectRgn
CreateCompatibleDC
CombineRgn
GetDeviceCaps
DeleteDC
CreateDCW
GetDIBits
GetObjectW
GetStockObject
CreateCompatibleBitmap
GetTextFaceW
GetOutlineTextMetricsW
BitBlt
GetTextExtentPoint32W
CreateFontIndirectW
GetCharWidthI
GetCharABCWidthsI
SetBkMode
StretchDIBits
EnumFontFamiliesExW
GetFontData
SetGraphicsMode
SetTextColor
SetTextAlign
SetWorldTransform
ExtTextOutW
ChoosePixelFormat
SetPixelFormat
OffsetRgn
SetLayout
DescribePixelFormat
GetPixelFormat
SwapBuffers
GetBitmapBits
RemoveFontMemResourceEx

imm32

ImmAssociateContext
ImmGetDefaultIMEWnd
ImmAssociateContextEx
ImmGetCompositionStringW
ImmReleaseContext
ImmNotifyIME
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetVirtualKey
ImmGetOpenStatus
ImmGetContext

oleaut32

SafeArrayGetElement
SafeArrayGetUBound
VariantClear
SysFreeString
SysStringLen
SysAllocStringByteLen
SafeArrayPutElement
SafeArrayCreateVector
SysAllocString
VariantInit
SetErrorInfo
GetErrorInfo

shlwapi

UrlCreateFromPathW
ord219
StrCmpLogicalW
PathCreateFromUrlW
UrlIsW

wtsapi32

WTSFreeMemory
WTSQuerySessionInformationW

api-ms-win-shcore-scaling-l1-1-1

GetDpiForMonitor
GetProcessDpiAwareness
SetProcessDpiAwareness

comdlg32

GetSaveFileNameW
GetOpenFileNameW

d3d9

Direct3DCreate9

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle
WaitOnAddress
WakeByAddressAll

mpr

WNetGetConnectionA

userenv

GetUserProfileDirectoryW

advapi32

SetSecurityDescriptorDacl
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegSetValueExW
RegQueryInfoKeyW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
GetNamedSecurityInfoW
LookupAccountSidW
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
InitializeAcl
GetLengthSid
FreeSid
DuplicateToken
CopySid
AllocateAndInitializeSid
AddAccessDeniedAceEx
AddAccessAllowedAceEx
OpenProcessToken
SystemFunction036
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
RegQueryValueExW
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegNotifyChangeKeyValue
GetUserNameW
LookupAccountNameW
RegOpenKeyA
RegEnumKeyA
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
InitializeSecurityDescriptor
RegOpenKeyExW
RegCloseKey
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA

authz

AuthzInitializeContextFromToken
AuthzFreeResourceManager
AuthzInitializeResourceManager
AuthzAccessCheck
AuthzInitializeContextFromSid
AuthzFreeContext

kernel32

GetModuleHandleW
GetPhysicallyInstalledSystemMemory
VerSetConditionMask
GetLongPathNameW
TrySubmitThreadpoolCallback
CloseThreadpoolCleanupGroupMembers
CreateThreadpoolCleanupGroup
CloseThreadpool
CreateWaitableTimerA
VerifyVersionInfoA
GetUserDefaultLangID
SetFilePointerEx
FileTimeToLocalFileTime
GetLogicalDriveStringsW
GetWindowsDirectoryA
LoadResource
LockResource
SizeofResource
EnumResourceNamesA
FindResourceA
GetACP
IsWow64Process
GetComputerNameW
GetUserDefaultUILanguage
RtlVirtualUnwind
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
VerifyVersionInfoW
GetDynamicTimeZoneInformation
GetConsoleMode
WriteConsoleA
SetConsoleTextAttribute
GetDriveTypeW
GetDiskFreeSpaceExW
CheckRemoteDebuggerPresent
ExpandEnvironmentStringsW
CreateProcessW
GetLocaleInfoW
ExitProcess
GetDiskFreeSpaceW
TerminateProcess
IsProcessorFeaturePresent
GetEnvironmentVariableW
lstrcmpW
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
InitializeCriticalSectionAndSpinCount
SetWaitableTimer
QueueUserAPC
TerminateThread
TlsFree
WTSGetActiveConsoleSessionId
SetThreadpoolThreadMinimum
SetThreadpoolThreadMaximum
CreateThreadpool
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetConsoleScreenBufferInfo
WriteConsoleW
GetFileType
SleepConditionVariableCS
WakeAllConditionVariable
InitializeConditionVariable
SetHandleInformation
LocalAlloc
SleepEx
WaitNamedPipeW
DisconnectNamedPipe
RtlDeleteFunctionTable
RtlAddFunctionTable
VirtualFree
SetConsoleMode
ReadConsoleA
ReadConsoleW
VirtualProtect
VirtualAlloc
GetTimeZoneInformation
GetConsoleWindow
GetCommandLineW
GlobalLock
OpenFile
GlobalUnlock
CreateDirectoryExW
CopyFileExW
FoldStringW
GetLocaleInfoA
EnumSystemLocalesA
InitOnceBeginInitialize
InitOnceComplete
RtlCaptureContext
RtlLookupFunctionEntry
UnhandledExceptionFilter
InitializeSListHead
GetStartupInfoW
GetUserDefaultLocaleName
CompareStringEx
InterlockedPushEntrySList
GetTickCount64
CreateThread
ResumeThread
GetLocalTime
PeekNamedPipe
CreateThreadpoolWait
SetThreadpoolWait
WaitForThreadpoolWaitCallbacks
CloseThreadpoolWait
LCMapStringW
GetDateFormatW
GetTimeFormatW
GetCurrencyFormatW
GetUserPreferredUILanguages
GetFileInformationByHandle
SetFileTime
GetVolumePathNamesForVolumeNameW
DeviceIoControl
CopyFileW
MoveFileExW
TzSpecificLocalTimeToSystemTime
GetFileInformationByHandleEx
FindCloseChangeNotification
FindFirstChangeNotificationW
FindNextChangeNotification
FindFirstFileExW
GetGeoInfoW
GetUserGeoID
GetModuleHandleExW
CloseHandle
GetLastError
SetEvent
WaitForSingleObject
CreateEventW
LocalFree
FormatMessageA
FormatMessageW
WideCharToMultiByte
RaiseException
InitializeCriticalSectionEx
DeleteCriticalSection
Sleep
GetTickCount
GetShortPathNameA
GlobalMemoryStatusEx
GetSystemTimeAsFileTime
CreateDirectoryW
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetDriveTypeA
GetFileAttributesW
GetFileSize
GetFileTime
GetLogicalDrives
ReadFile
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFilePointer
WriteFile
GetTempPathA
GetVolumeInformationA
SetErrorMode
GetCurrentProcess
GetCurrentThread
SetThreadPriority
GetThreadPriority
GetSystemInfo
GetSystemDirectoryA
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
SetProcessWorkingSetSize
VirtualLock
VirtualUnlock
FreeLibrary
GetProcAddress
LoadLibraryW
MoveFileW
FileTimeToSystemTime
GetDateFormatA
CompareStringW
MultiByteToWideChar
K32GetProcessMemoryInfo
ReleaseSemaphore
WaitForSingleObjectEx
WaitForMultipleObjectsEx
CreateSemaphoreW
TlsAlloc
TlsGetValue
TlsSetValue
GetThreadContext
VirtualQuery
CreateSemaphoreA
GetVersionExW
GetModuleFileNameA
LoadLibraryA
LoadLibraryExA
IsDebuggerPresent
SetUnhandledExceptionFilter
OutputDebugStringA
GetCurrentProcessId
GetProcessTimes
SwitchToThread
QueryPerformanceCounter
QueryPerformanceFrequency
DuplicateHandle
CreateFileA
FindFirstFileA
FindNextFileA
LockFileEx
UnlockFileEx
GetFileSizeEx
CreateMutexA
ReleaseMutex
CreateFileMappingA
MapViewOfFileEx
CreateDirectoryA
RemoveDirectoryA
GetModuleHandleA
SetLastError
GetShortPathNameW
OpenProcess
K32GetModuleFileNameExW
GetExitCodeProcess
K32EnumProcessModules
K32GetModuleBaseNameA
FlushFileBuffers
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
ResetEvent
GetModuleFileNameW
GetVolumeInformationW
GetSystemDirectoryW
GetWindowsDirectoryW
GetUserDefaultLCID
GetSystemTime
SystemTimeToFileTime
GetProcessHeap
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
HeapReAlloc
DeleteFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetDiskFreeSpaceA
HeapSize
HeapValidate
CreateMutexW
GetTempPathW
GetFullPathNameA
LockFile
GlobalSize
GetFullPathNameW
HeapFree
HeapCreate
AreFileApisANSI
TryEnterCriticalSection
GetCurrentThreadId
GetStdHandle
GetCurrentDirectoryA
GetCurrentDirectoryW
IsValidCodePage
IsDBCSLeadByteEx
GetOverlappedResult
WaitForMultipleObjects
ReadDirectoryChangesW
CreateEventA
GlobalAlloc
GlobalFree
CancelIoEx

netapi32

NetShareEnum
NetApiBufferFree

ole32

OleFlushClipboard
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree
PropVariantClear
CLSIDFromString
OleInitialize
OleUninitialize
RegisterDragDrop
RevokeDragDrop
DoDragDrop
OleSetClipboard
OleGetClipboard
CoGetObject
CoSetProxyBlanket
ReleaseStgMedium
CoInitializeEx
StringFromGUID2
CoCreateGuid
OleIsCurrentClipboard
CoLockObjectExternal
CoGetMalloc
CoCreateFreeThreadedMarshaler

user32

SkipPointerFrameMessages
GetPointerPenInfoHistory
GetPointerPenInfo
GetPointerFrameTouchInfoHistory
GetPointerFrameTouchInfo
GetPointerType
CloseTouchInputHandle
GetTouchInputInfo
GetMessageExtraInfo
GetCursorInfo
CreateCursor
TrackPopupMenuEx
ToAscii
GetKeyboardState
FindWindowA
SetCaretPos
ShowCaret
DestroyCaret
CreateCaret
IsWindowEnabled
RegisterWindowMessageW
GetKeyboardLayout
SetDisplayAutoRotationPreferences
DisplayConfigGetDeviceInfo
QueryDisplayConfig
GetDisplayConfigBufferSizes
SetMenuItemInfoW
RemoveMenu
AppendMenuW
DestroyIcon
DestroyCursor
SetCursor
AdjustWindowRectExForDpi
SetWindowRgn
GetUpdateRect
GetSystemMetricsForDpi
IsTouchWindow
UnregisterTouchWindow
RegisterTouchWindow
FlashWindowEx
SetLayeredWindowAttributes
AttachThreadInput
GetWindowThreadProcessId
RemoveClipboardFormatListener
AddClipboardFormatListener
ChangeClipboardChain
SetClipboardViewer
IsHungAppWindow
EnumDisplayDevicesW
GetClipboardFormatNameW
RegisterClipboardFormatW
SetProcessDpiAwarenessContext
EnableNonClientDpiScaling
GetAwarenessFromDpiAwarenessContext
GetWindowDpiAwarenessContext
SystemParametersInfoForDpi
GetSysColorBrush
ChildWindowFromPointEx
WindowFromPoint
RegisterClassExW
UnregisterPowerSettingNotification
RegisterPowerSettingNotification
GetKeyboardLayoutList
UpdateLayeredWindowIndirect
GetCaretBlinkTime
MessageBeep
GetDoubleClickTime
GetIconInfo
CreateIconIndirect
DrawIconEx
MessageBoxW
EnumWindows
InsertMenuItemW
TrackPopupMenu
ModifyMenuW
GetMenuItemID
GetSubMenu
EnableMenuItem
CreatePopupMenu
CreateMenu
GetMenuState
GetAsyncKeyState
RealGetWindowClassW
GetFocus
RegisterRawInputDevices
GetRawInputData
LoadCursorW
FillRect
GetCursor
GetCursorPos
SetCursorPos
EndPaint
BeginPaint
InsertMenuW
GetSystemMenu
GetDlgItem
TrackMouseEvent
GetAncestor
GetDpiForWindow
MonitorFromWindow
MonitorFromPoint
LoadImageW
LoadIconW
GetWindow
EnumThreadWindows
FindWindowW
SetParent
GetParent
SetWindowLongPtrW
GetWindowLongPtrW
ScreenToClient
ClientToScreen
AdjustWindowRectEx
GetClientRect
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
InvalidateRect
UpdateWindow
GetMenuItemInfoW
GetMenuItemCount
DestroyMenu
DrawMenuBar
SetMenu
GetMenu
KillTimer
SetTimer
ReleaseCapture
SetCapture
GetCapture
MapVirtualKeyW
ToUnicode
SetFocus
CharUpperW
RegisterClipboardFormatA
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
IsZoomed
BringWindowToTop
IsIconic
IsWindowVisible
SetWindowPlacement
GetWindowPlacement
SetWindowPos
UpdateLayeredWindow
ShowWindow
IsWindow
CreateWindowExW
RegisterClassW
CallWindowProcW
PostQuitMessage
PostMessageW
GetMessageW
CharLowerBuffA
GetDesktopWindow
GetSysColor
ReleaseDC
GetDC
DestroyWindow
DefWindowProcW
SystemParametersInfoW
GetSystemMetrics
SendMessageW
SetWindowLongW
GetWindowLongW
EnumDisplayMonitors
GetMonitorInfoW
IsChild
PeekMessageW
DispatchMessageW
TranslateMessage
ChangeWindowMessageFilterEx
GetForegroundWindow
UnregisterClassW
GetWindowRect
MoveWindow
CharNextExA
GetQueueStatus
MsgWaitForMultipleObjectsEx
GetUserObjectInformationW
GetProcessWindowStation
CharLowerW
RegisterDeviceNotificationW
UnregisterDeviceNotification
GetPointerDeviceRects
GetKeyState
SetForegroundWindow

version

VerQueryValueW
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoW
GetFileVersionInfoSizeW

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

shell32

ShellExecuteExA
SHGetSpecialFolderPathA
SHCreateItemFromParsingName
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
SHAppBarMessage
ord74
CommandLineToArgvW
ord155
SHParseDisplayName
ShellExecuteA
ShellExecuteW
ord190
SHOpenFolderAndSelectItems
SHGetFileInfoW
SHGetStockIconInfo
ord727
SHCreateItemFromIDList
SHGetKnownFolderIDList
Shell_NotifyIconW
Shell_NotifyIconGetRect
SHGetKnownFolderPath
DragQueryFileW

dbghelp

MiniDumpWriteDump

powrprof

GetPwrCapabilities
CallNtPowerInformation

msvcp140

?do_put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEBUtm@@DD@Z
?id@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$numpunct@_W@std@@2V0locale@2@A
?id@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$moneypunct@D$00@std@@2V0locale@2@A
?id@?$moneypunct@D$0A@@std@@2V0locale@2@A
?id@?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$moneypunct@_W$00@std@@2V0locale@2@A
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Xout_of_range@std@@YAXPEBD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEBX@Z
?id@?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?do_put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@DD@Z
?id@?$collate@_W@std@@2V0locale@2@A
??0?$codecvt@DDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@DDU_Mbstatet@@@std@@MEAA@XZ
?do_always_noconv@?$codecvt@DDU_Mbstatet@@@std@@MEBA_NXZ
?do_encoding@codecvt_base@std@@MEBAHXZ
?do_in@?$codecvt@DDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?do_length@?$codecvt@DDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1_K@Z
?do_max_length@codecvt_base@std@@MEBAHXZ
?do_out@?$codecvt@DDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?do_unshift@?$codecvt@DDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?xalloc@ios_base@std@@SAHXZ
?pword@ios_base@std@@QEAAAEAPEAXH@Z
?register_callback@ios_base@std@@QEAAXP6AXW4event@12@AEAV12@H@ZH@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@D_N@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBX@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEA_N@Z
?id@?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_W_N@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEA_N@Z
?id@?$moneypunct@_W$0A@@std@@2V0locale@2@A
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@N@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?setiosflags@std@@YA?AU?$_Smanip@H@1@H@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
_Xtime_get_ticks
_Query_perf_counter
_Query_perf_frequency
_Thrd_sleep
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?toupper@?$ctype@D@std@@QEBADD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAHH@Z
?classic@locale@std@@SAAEBV12@XZ
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAPEAX@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Xbad_function_call@std@@YAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAPEAX@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IEAA@PEBD_K@Z
??1?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEAA@XZ
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@_K@Z
??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WO@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WN@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_W_K@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_W_J@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WK@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WJ@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@_K@Z
??1?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEAA@XZ
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAO@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAN@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAM@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEA_K@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEA_J@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAK@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAJ@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAI@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAG@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@_K@Z
??1?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEAA@XZ
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DO@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DN@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@D_K@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@D_J@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DK@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DJ@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z
??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAO@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAN@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAM@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEA_K@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEA_J@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAK@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAJ@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAI@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAG@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ
?widen@?$ctype@_W@std@@QEBAPEBDPEBD0PEA_W@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
_Wcsxfrm
_Wcscoll
?seekp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_K@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?__ExceptionPtrCompare@@YA_NPEBX0@Z
?widen@?$ctype@D@std@@QEBAPEBDPEBD0PEAD@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??4?$basic_istream@DU?$char_traits@D@std@@@std@@IEAAAEAV01@$$QEAV01@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@IEAA@$$QEAV01@@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pubsync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?pubimbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?sgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEAD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
_Unlock_shared_ptr_spin_lock
_Lock_shared_ptr_spin_lock
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?id@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z
?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEBUtm@@PEB_W4@Z
?_Getcat@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?get@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEB_W4@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@DD@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@O@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?toupper@?$ctype@_W@std@@QEBA_W_W@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
_Cnd_timedwait
_Mtx_current_owns
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
_Strxfrm
_Strcoll
?id@?$collate@D@std@@2V0locale@2@A
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?id@?$numpunct@D@std@@2V0locale@2@A
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
??0task_continuation_context@Concurrency@@AEAA@XZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
_Exp
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?setf@ios_base@std@@QEAAHHH@Z
?setf@ios_base@std@@QEAAHH@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
??0_Locinfo@std@@QEAA@PEBD@Z
_Cnd_unregister_at_thread_exit
_Cnd_register_at_thread_exit
_Cnd_signal
_Cnd_broadcast
_Cnd_wait
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Mtx_trylock
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_Getname@_Locinfo@std@@QEBAPEBDXZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@HPEBD@Z
?_Xruntime_error@std@@YAXPEBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?flags@ios_base@std@@QEAAHH@Z
?exceptions@ios_base@std@@QEAAXH@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?narrow@?$ctype@D@std@@QEBADDD@Z
?widen@?$ctype@D@std@@QEBADD@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??Bid@locale@std@@QEAA_KXZ
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_C_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Mtx_unlock
_Mtx_lock
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
_Thrd_id
_Thrd_yield
_Thrd_join
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mbrtowc
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Random_device@std@@YAIXZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?uncaught_exception@std@@YA_NXZ

msvcp140_1

_Aligned_get_default_resource

msvcp140_2

__std_smf_hypot3f

mswsock

GetAcceptExSockaddrs
AcceptEx

concrt140

?_Release@_ReentrantBlockingLock@details@Concurrency@@QEAAXXZ
?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QEAAXXZ
??1_ReentrantBlockingLock@details@Concurrency@@QEAA@XZ
??0_ReentrantBlockingLock@details@Concurrency@@QEAA@XZ

vcruntime140

_CxxThrowException
__std_exception_destroy
__std_exception_copy
_set_purecall_handler
__std_type_info_hash
__C_specific_handler
strstr
strchr
__RTtypeid
memcmp
memchr
__RTDynamicCast
__std_type_info_name
memcpy
memmove
memset
_purecall
__std_terminate
__std_type_info_compare
__intrinsic_setjmp
strrchr
__CxxFrameHandler3
wcsrchr
longjmp
wcsstr
__current_exception
__current_exception_context

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_exit
_initialize_onexit_table
_register_onexit_function
system
fegetenv
fesetenv
set_terminate
_crt_atexit
signal
_errno
strerror
raise
_invalid_parameter_noinfo
_seh_filter_exe
_set_app_type
_get_narrow_winmain_command_line
_invalid_parameter_noinfo_noreturn
terminate
strerror_s
_endthreadex
_control87
_clearfp
_initterm
_initterm_e
_c_exit
_register_thread_local_exe_atexit_callback
__p___argv
__p___argc
_cexit
exit
_beginthreadex
abort

api-ms-win-crt-heap-l1-1-0

calloc
free
realloc
_msize
malloc
_callnewh
_set_new_mode
_aligned_realloc
_aligned_free
_aligned_malloc

api-ms-win-crt-convert-l1-1-0

strtoul
_strtoui64
strtol
atoi
atof
_ui64toa_s
_i64toa_s
_strtod_l
_ui64tow_s
_i64tow_s
_wcstod_l
wcstol
mbstowcs
strtoull
strtoll
strtod

api-ms-win-crt-string-l1-1-0

tolower
_strnicmp
strcmp
_strnicmp_l
_stricmp_l
strcat_s
__isascii
isblank
isalpha
strncpy_s
strcpy_s
strncat
strnlen
isdigit
iswspace
iswdigit
strncpy
wcsnlen
strcspn
wcsncmp
_isctype_l
strspn
isxdigit
isspace
ispunct
strncmp
wcsncpy
towlower
toupper
_wcsupr
_wcslwr
_wcsnicmp
_wcsicmp
isupper
islower
_stricmp
_strdup
isgraph
isalnum
strcoll
strpbrk
iscntrl

api-ms-win-crt-stdio-l1-1-0

fgetc
feof
_lseeki64
ferror
_close
_open_osfhandle
__stdio_common_vsprintf_s
_read
_write
_fcloseall
fopen
__stdio_common_vsnwprintf_s
__stdio_common_vsscanf
__stdio_common_vswprintf
getc
clearerr
_ftelli64
_pclose
_popen
tmpfile
__stdio_common_vsnprintf_s
_setmode
__stdio_common_vswprintf_s
_get_stream_buffer_pointers
fclose
fflush
__stdio_common_vsprintf
_wfopen
__acrt_iob_func
tmpnam
ungetc
_set_fmode
setvbuf
fwrite
_sopen_dispatch
__p__commode
_get_osfhandle
_wsopen_dispatch
__stdio_common_vfprintf
ftell
fseek
_fileno
_fseeki64
fsetpos
fread
fputs
fputc
fgets
fgetpos
freopen

api-ms-win-crt-math-l1-1-0

frexp
logf
atan2
hypot
ldexp
lround
log2
trunc
ceil
floor
sqrt
ceilf
nearbyint
exp2
tan
_dclass
roundf
fmaxf
lroundf
sin
exp
tanf
tanhf
copysign
_fdopen
sinf
cosh
log10f
sinh
cbrt
nearbyintf
pow
powf
log
fminf
_fdclass
log10
_isnan
log2f
round
_ldclass
__setusermatherr
_dsign
fmodf
sqrtf
floorf
acos
atan2f
atanf
lrintf
tanh
asin
atan
copysignf
_ldsign
remainder
_hypotf
modf
acosh
asinh
atanh
expm1
log1p
expf
fmod
llroundf
_fdsign
truncf
cosf
cos
acosf
asinf
fmaf
llround

api-ms-win-crt-utility-l1-1-0

div
rand_s
srand
rand
bsearch
qsort

api-ms-win-crt-filesystem-l1-1-0

remove
_access
_wstat64i32
_waccess
_wchmod
_stat64i32
rename
_wsplitpath
_lock_file
_unlock_file

api-ms-win-crt-time-l1-1-0

_localtime64
clock
_difftime64
_mktime64
strftime
_time64
_get_dstbias
_get_timezone
_tzset
_localtime64_s
_gmtime64
_ftime64
_get_tzname
_gmtime64_s

api-ms-win-crt-locale-l1-1-0

setlocale
_configthreadlocale
_create_locale
_free_locale
__pctype_func
localeconv

api-ms-win-crt-environment-l1-1-0

getenv
_wgetenv_s
getenv_s

Exports

Exports

??4?$StaticObject@UVersions@detail@cereal@@@detail@cereal@@QEAAAEAV012@AEBV012@@Z
qt_qmlDebugClearBuffer
qt_qmlDebugConnectionBlocker
qt_qmlDebugConnectorOpen
qt_qmlDebugDisableService
qt_qmlDebugEnableService
qt_qmlDebugMessageAvailable
qt_qmlDebugMessageBuffer
qt_qmlDebugMessageLength
qt_qmlDebugObjectAvailable
qt_qmlDebugSendDataToService
qt_qmlDebugSetStreamVersion

Sections

.text
Size: 51.4MB - Virtual size: 51.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

IPPCODE
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44.3MB - Virtual size: 44.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.9MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qtmimed
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

IPPDATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33.3MB - Virtual size: 33.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 482KB - Virtual size: 482KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 126KB - Virtual size: 126KB

DATA Size: 45KB - Virtual size: 45KB

BSS Size: - Virtual size: 4KB

.idata Size: 5KB - Virtual size: 4KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 9KB - Virtual size: 8KB

.rsrc Size: 14.5MB - Virtual size: 14.5MB

2f29f3ac7022445fef80fe914c8bcd21

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

04:92:1e:31:af:15:9e:dc:94:1a:a6:59:57:55:b6:84Certificate

Extended Key Usages

Key Usages

16:58:95:ae:d7:a1:95:4e:65:2a:e4:72:06:ff:22:f8:f0:f6:60:4eSigner

Headers

DLL Characteristics

File Characteristics

Imports

odbc32

winmm

dwmapi

avrt

setupapi

dnsapi

iphlpapi

winhttp

crypt32

secur32

bcrypt

ws2_32

mfplat

mfreadwrite

propsys

uxtheme

d3d11

dxgi

dwrite

gdi32

imm32

oleaut32

shlwapi

wtsapi32

api-ms-win-shcore-scaling-l1-1-1

comdlg32

d3d9

api-ms-win-core-synch-l1-2-0

mpr

userenv

advapi32

authz

kernel32

netapi32

ole32

user32

version

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-winrt-l1-1-0

shell32

dbghelp

powrprof

msvcp140

CODE
Size: 126KB - Virtual size: 126KB

DATA
Size: 45KB - Virtual size: 45KB

BSS
Size: - Virtual size: 4KB

.idata
Size: 5KB - Virtual size: 4KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 14.5MB - Virtual size: 14.5MB

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

04:92:1e:31:af:15:9e:dc:94:1a:a6:59:57:55:b6:84
Certificate

16:58:95:ae:d7:a1:95:4e:65:2a:e4:72:06:ff:22:f8:f0:f6:60:4e
Signer

.text
Size: 51.4MB - Virtual size: 51.4MB

IPPCODE
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 44.3MB - Virtual size: 44.3MB

.data
Size: 1.9MB - Virtual size: 3.3MB

.pdata
Size: 2.1MB - Virtual size: 2.1MB

.qtmimed
Size: 332KB - Virtual size: 331KB

IPPDATA
Size: 5KB - Virtual size: 5KB

_RDATA
Size: 211KB - Virtual size: 210KB

.rsrc
Size: 33.3MB - Virtual size: 33.3MB

.reloc
Size: 482KB - Virtual size: 482KB