Static task
static1
Behavioral task
behavioral1
Sample
gmw6.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
gmw6.exe
Resource
win10v2004-20230915-en
General
-
Target
gmw6.exe
-
Size
9.4MB
-
MD5
fd12e9a6fbff6fc98df45b5c3c8a36c6
-
SHA1
8af3bed363dc7d37b98333a5f2530da3fb2374b8
-
SHA256
19cd6c9028ec048ad1e9bd33d140af6c27adab1d203b3e505158b81885ff53d6
-
SHA512
d90b2ff6ef95bfe648c5eb0b033692be2be23dbb2986651a2add6d9d37b3b6f0656c87606d61f31887dddcd51a911fda93cc17a40247ac79c5897a0d707667bf
-
SSDEEP
196608:dtHXYuYOyCU4NQ50wQTxKh9Iv5LUJRG4a:TnYp4heSvSJ04a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource gmw6.exe
Files
-
gmw6.exe.exe windows:4 windows x86
b0f43dff72f3e38bb42d14367e186c9d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmGetContext
ImmNotifyIME
ImmReleaseContext
ImmGetCompositionStringA
comctl32
PropertySheetA
ord17
ImageList_Add
ImageList_ReplaceIcon
ImageList_Create
ImageList_Merge
ImageList_GetDragImage
ImageList_GetIcon
ImageList_GetImageCount
ImageList_GetIconSize
CreateToolbarEx
ImageList_Remove
CreatePropertySheetPageA
ImageList_LoadImageA
ImageList_Destroy
ImageList_Draw
ImageList_AddMasked
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_BeginDrag
ImageList_EndDrag
ImageList_SetBkColor
InitCommonControlsEx
msvfw32
MCIWndCreateA
tapi32
lineTranslateDialog
lineDrop
lineGetDevCaps
lineConfigDialog
lineGetID
lineMakeCall
lineOpen
lineAnswer
lineSetCallPrivilege
lineSetNumRings
lineSetStatusMessages
lineClose
lineDeallocateCall
lineTranslateAddress
lineGetCountry
lineGetTranslateCaps
lineInitialize
lineShutdown
lineGetCallStatus
lineNegotiateAPIVersion
wsock32
WSACleanup
socket
inet_ntoa
getsockname
listen
bind
accept
inet_addr
gethostname
WSAAsyncSelect
WSAAsyncGetHostByName
WSACancelAsyncRequest
htons
setsockopt
connect
send
recv
recvfrom
sendto
WSAGetLastError
select
shutdown
closesocket
ioctlsocket
gethostbyname
WSAStartup
winmm
PlaySoundA
sndPlaySoundA
mpr
WNetOpenEnumA
WNetEnumResourceA
WNetCloseEnum
wininet
InternetSetOptionA
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
HttpSendRequestExA
HttpEndRequestA
InternetWriteFile
InternetReadFile
InternetCloseHandle
sensapi
IsNetworkAlive
kernel32
GetFullPathNameA
GetCurrentThread
OpenFile
MoveFileA
GetExitCodeThread
ResumeThread
SuspendThread
GetFileType
GetCommState
SetCommState
LocalSize
GetOverlappedResult
SetCommBreak
ClearCommBreak
SetupComm
ClearCommError
PurgeComm
GetCommTimeouts
SetCommTimeouts
GetCommMask
SetCommMask
GetDriveTypeA
SetPriorityClass
SetThreadPriority
ExpandEnvironmentStringsA
RtlUnwind
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
ExitThread
IsBadReadPtr
GetFileInformationByHandle
PeekNamedPipe
GetStartupInfoA
GetCommandLineA
GetCPInfo
GlobalHandle
_lcreat
_lopen
_lclose
FatalAppExitA
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetCurrentProcessId
HeapDestroy
HeapCreate
VirtualFree
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GlobalSize
OpenFileMappingA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
GetSystemTime
InterlockedDecrement
GetLastError
MultiByteToWideChar
lstrlenA
LeaveCriticalSection
EnterCriticalSection
WritePrivateProfileStringA
GetPrivateProfileStringA
Sleep
GetTickCount
WideCharToMultiByte
lstrlenW
HeapFree
GetProcessHeap
lstrcmpiA
SetEvent
CloseHandle
WaitForSingleObject
SystemTimeToFileTime
GlobalMemoryStatus
GetTempPathA
lstrcpynA
lstrcpyA
GetModuleFileNameA
lstrcatA
GetCurrentThreadId
CreateThread
CreateEventA
IsDBCSLeadByte
MulDiv
FlushInstructionCache
GetCurrentProcess
HeapAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcmpA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
WaitForMultipleObjects
GetProcAddress
GetPrivateProfileIntA
GetUserDefaultLCID
FreeResource
WriteFile
CreateFileA
LockResource
ResetEvent
GetWindowsDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
RemoveDirectoryA
FileTimeToSystemTime
FindClose
FindFirstFileA
OutputDebugStringA
CompareFileTime
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
GlobalAddAtomA
UnmapViewOfFile
OpenEventA
SetLastError
ExitProcess
SetEnvironmentVariableA
CompareStringW
CompareStringA
MapViewOfFile
CreateFileMappingA
GetFileSize
LoadLibraryA
WinExec
SleepEx
DeleteFileA
GlobalFree
GetProfileIntA
ReadFile
CreateMutexA
ReleaseMutex
LocalFree
FormatMessageA
GetComputerNameA
FindNextFileA
GetLocalTime
SetFileAttributesA
SetEndOfFile
GlobalGetAtomNameA
GlobalDeleteAtom
GetCurrencyFormatA
EnumResourceNamesA
SetHandleCount
GlobalCompact
GetEnvironmentVariableA
GetSystemDirectoryA
CreatePipe
GetExitCodeProcess
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
GetLocaleInfoW
IsBadCodePtr
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetStdHandle
UnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetStdHandle
SetConsoleCtrlHandler
GetOEMCP
FlushFileBuffers
HeapSize
TerminateProcess
SetUnhandledExceptionFilter
GetTempFileNameA
SetFileTime
GetDiskFreeSpaceA
SetFilePointer
IsBadWritePtr
LocalAlloc
CreateProcessA
CreateDirectoryA
MoveFileExA
CopyFileA
GetFileAttributesA
SetErrorMode
user32
SetFocus
SetWindowPos
SendMessageA
DestroyWindow
CreateWindowExA
SetWindowLongA
GetKeyState
GetParent
PostMessageA
CallWindowProcA
GetDC
GetSysColorBrush
FillRect
DrawEdge
GetSysColor
ReleaseDC
GetClientRect
InvalidateRect
UpdateWindow
LoadMenuA
GetWindowLongA
UnregisterClassA
ShowWindow
GetActiveWindow
SetCursor
LoadCursorA
CheckMenuItem
BringWindowToTop
GetTopWindow
MoveWindow
IsWindowVisible
GetUpdateRect
EndPaint
BeginPaint
DestroyMenu
SetRect
DefMDIChildProcA
IsIconic
GetDlgItem
EnableWindow
wsprintfA
LoadImageA
EndDialog
GetWindowTextA
IsWindowEnabled
GetWindow
SendDlgItemMessageA
GetDlgCtrlID
IsWindow
CharNextA
CharUpperA
GetClassNameA
UnhookWindowsHookEx
PostThreadMessageA
GetLastActivePopup
SetForegroundWindow
DefWindowProcA
ReleaseCapture
SetCapture
InvalidateRgn
GetDesktopWindow
DestroyAcceleratorTable
IsChild
GetFocus
RedrawWindow
CallNextHookEx
SetWindowsHookExA
CreateAcceleratorTableA
RegisterClassExA
GetClassInfoExA
SetWindowTextA
GetWindowTextLengthA
RegisterWindowMessageA
GetWindowInfo
EnumChildWindows
GetWindowRect
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
PeekMessageA
ClientToScreen
TrackPopupMenu
GetSubMenu
MapWindowPoints
GetCursorPos
GetAsyncKeyState
LoadIconA
CharToOemA
MessageBeep
PtInRect
EnableMenuItem
GetMenuItemID
GetMenuItemCount
DrawFocusRect
ScrollDC
WindowFromPoint
ScreenToClient
SetScrollPos
SetScrollRange
ShowScrollBar
EnableScrollBar
DrawTextA
InflateRect
FrameRect
IsRectEmpty
InsertMenuA
DeleteMenu
GetCapture
ScrollWindowEx
ValidateRect
GetNextDlgTabItem
TrackPopupMenuEx
ChildWindowFromPoint
GetCursor
OpenIcon
CreateMDIWindowA
AppendMenuA
LoadBitmapA
LoadStringA
ClipCursor
ModifyMenuA
CreatePopupMenu
GetMenuStringA
CheckRadioButton
GetDlgItemTextA
IsDlgButtonChecked
CheckDlgButton
InsertMenuItemA
OffsetRect
RemoveMenu
CharToOemBuffA
FindWindowA
CharUpperBuffA
DdePostAdvise
DdeCreateDataHandle
DdeUninitialize
DdeDisconnect
DdeFreeStringHandle
DdeConnect
DdeCreateStringHandleA
DdeGetLastError
DdeInitializeA
DdeClientTransaction
DdeFreeDataHandle
DdeGetData
RegisterClipboardFormatA
DdeAccessData
DdeQueryStringA
DdeNameService
DdeCmpStringHandles
GetClipboardFormatNameA
DdeAddData
DdeUnaccessData
DdeQueryConvInfo
RegisterClassA
GetClassInfoA
SetMenuDefaultItem
SetDlgItemInt
GetDlgItemInt
DrawMenuBar
GetMenuState
GetSystemMetrics
OemToCharA
WinHelpA
DestroyCursor
GetWindowDC
WindowFromDC
SetScrollInfo
UnregisterHotKey
RegisterHotKey
MapDialogRect
SetWindowContextHelpId
ScrollWindow
SetCursorPos
SetWindowRgn
GetThreadDesktop
SetActiveWindow
TranslateAcceleratorA
TranslateMDISysAccel
IsDialogMessageA
LockWindowUpdate
GetClipboardData
GetMessageA
CheckMenuRadioItem
CreateMenu
GetWindowThreadProcessId
ShowCursor
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetParent
GetKeyNameTextA
GetCaretPos
SendMessageTimeoutA
GetClassLongA
VkKeyScanA
keybd_event
CharLowerBuffA
CreateIconFromResourceEx
SetTimer
KillTimer
GetDialogBaseUnits
TranslateMessage
DispatchMessageA
LoadAcceleratorsA
SetRectEmpty
CreateDialogIndirectParamA
CreateDialogParamA
DialogBoxIndirectParamA
DialogBoxParamA
WaitForInputIdle
IntersectRect
GetWindowPlacement
MessageBoxA
GetMenu
DefFrameProcA
PostQuitMessage
GetForegroundWindow
GetKeyboardState
SetKeyboardState
IsClipboardFormatAvailable
IsZoomed
DrawStateA
DrawIconEx
DestroyIcon
DrawTextExA
SetMenuItemInfoA
SystemParametersInfoA
SetDlgItemTextA
GetMenuItemInfoA
gdi32
LineTo
MoveToEx
SetBkMode
SelectClipRgn
CreateRectRgnIndirect
Rectangle
CreatePen
SetROP2
DPtoLP
GetObjectA
GetMapMode
CreatePalette
RealizePalette
SelectPalette
GetDeviceCaps
StretchBlt
Polygon
Ellipse
Arc
SetViewportOrgEx
SetViewportExtEx
SetWindowExtEx
Polyline
GetDCOrgEx
GetClipBox
CreateFontA
TextOutA
EnumFontFamiliesExA
GetCurrentObject
PatBlt
CreateRectRgn
GetTextExtentPoint32A
CreatePatternBrush
FillPath
EndPath
CloseFigure
BeginPath
GetBkMode
GetBkColor
EndDoc
EndPage
StartPage
StartDocA
SetAbortProc
CreateDCA
AbortDoc
ExtFloodFill
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
DeleteObject
CreateFontIndirectA
CreateSolidBrush
CreateBitmap
GetStockObject
CreateDIBitmap
SelectObject
SetBkColor
SetTextColor
SetTextAlign
SetMapMode
GetTextMetricsA
ExtTextOutA
comdlg32
GetOpenFileNameA
ChooseColorA
ChooseFontA
PrintDlgA
GetSaveFileNameA
advapi32
RegEnumValueA
RegCreateKeyA
RegEnumKeyA
RegQueryValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
GetUserNameA
shell32
DragFinish
ExtractIconA
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
DragQueryFileA
ShellExecuteA
Shell_NotifyIconA
FindExecutableA
SHGetFileInfoA
ShellExecuteExA
DragAcceptFiles
SHFileOperationA
SHGetSpecialFolderLocation
ole32
OleLockRunning
StringFromGUID2
CoUninitialize
CoInitialize
CoTaskMemRealloc
CoTaskMemFree
CreateStreamOnHGlobal
CoRegisterClassObject
CoRevokeClassObject
OleInitialize
CLSIDFromString
CLSIDFromProgID
OleUninitialize
CoCreateInstance
OleRun
CoGetClassObject
CoInitializeEx
StringFromCLSID
CoTaskMemAlloc
oleaut32
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector
SafeArrayDestroyData
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayGetVartype
DispCallFunc
SafeArrayDestroy
UnRegisterTypeLi
LoadTypeLi
SysStringLen
SysAllocStringLen
VariantClear
VariantInit
VariantCopy
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysFreeString
VariantTimeToSystemTime
VariantChangeType
SystemTimeToVariantTime
OleCreateFontIndirect
LoadRegTypeLi
RegisterTypeLi
CreateErrorInfo
SetErrorInfo
GetErrorInfo
VarUI4FromStr
gmre32
ord5
ord3
ord8
ord4
ord2
gmtb32
ATC_IsButtonTextOn
ATC_GetDockWindow
ATC_ShowEditMacroDialog
ATC_ShowMacroPopup
ATC_IsMacroRecording
ATC_ShowToolbarsDialog
ATC_GetToolbarCount
ATC_IsVisible
ATC_GetToolbarViaIndex
ATC_EnableButton
ATC_CheckButton
ATC_AdjustDockWindows
ATC_FreeLayoutStrings
ATC_GetLayoutString
ATC_CreateLayoutStrings
ATC_AppendToolbar
ATC_ShowToolbar
ATC_SetButtonStyle
ATC_CreateDock
ATC_SetUserConfig
ATC_SetToolbarSwitch
ATC_ShowButtonText
ATC_ShowFlyBy
ATC_ShowQuickHelp
ATC_IsFlyByOn
ATC_DecodeHotKey
ATC_PlaybackMacro
ATC_RestoreLayout
ATC_AddLayoutString
ATC_InitRestoreLayout
ATC_RemoveSystem
ATC_IsToolbarSwitchOn
ATC_IsUserConfigOn
ATC_IsQuickHelpOn
ATC_DefineCategory
ATC_DefineCategoryOrder
ATC_InitMacros
ATC_Terminate
ATC_DefineDead
ATC_DefineButtons
ATC_DefineButtonBitmap
ATC_InstallSystem
ATC_EnablePopupMenu
ATC_DefineOptions
ATC_DefineMessages
ATC_Initialize
ATC_DestroyToolbar
gm6s32
ord9
gmssl32
ord657
ord181
ord585
ord653
ord2405
ord1653
ord2404
ord222
ord558
ord555
ord625
ord556
ord626
ord629
ord66
ord52
ord78
ord95
ord364
ord444
ord2143
ord1882
ord641
ord421
ord401
ord2544
ord3212
ord281
ord227
ord2151
ord399
ord2446
ord1016
ord679
ord2064
ord623
ord2033
ord905
ord1654
ord2150
ord2596
ord910
ord2411
ord82
ord1291
ord419
ord304
ord1304
ord1308
ord88
ord774
ord746
ord2142
ord2155
ord2146
ord2145
gmxml
?parse@DOMParser@xercesc_2_5@@QAEXABVInputSource@2@@Z
??0MemBufInputSource@xercesc_2_5@@QAE@QBEIQBD_NQAVMemoryManager@1@@Z
??2XMemory@xercesc_2_5@@SAPAXI@Z
?setValidationSchemaFullChecking@DOMParser@xercesc_2_5@@QAEX_N@Z
?setDoSchema@DOMParser@xercesc_2_5@@QAEX_N@Z
?setDoNamespaces@DOMParser@xercesc_2_5@@QAEX_N@Z
??1MemBufInputSource@xercesc_2_5@@UAE@XZ
?TextDecl@DOMParser@xercesc_2_5@@UAEXQBG0@Z
?startExtSubset@DOMParser@xercesc_2_5@@UAEXXZ
?startIntSubset@DOMParser@xercesc_2_5@@UAEXXZ
?startAttList@DOMParser@xercesc_2_5@@UAEXABVDTDElementDecl@2@@Z
?notationDecl@DOMParser@xercesc_2_5@@UAEXABVXMLNotationDecl@2@_N@Z
?resetDocType@DOMParser@xercesc_2_5@@UAEXXZ
?entityDecl@DOMParser@xercesc_2_5@@UAEXABVDTDEntityDecl@2@_N1@Z
?endExtSubset@DOMParser@xercesc_2_5@@UAEXXZ
?endIntSubset@DOMParser@xercesc_2_5@@UAEXXZ
?endAttList@DOMParser@xercesc_2_5@@UAEXABVDTDElementDecl@2@@Z
?elementDecl@DOMParser@xercesc_2_5@@UAEXABVDTDElementDecl@2@_N@Z
?doctypeWhitespace@DOMParser@xercesc_2_5@@UAEXQBGI@Z
?doctypePI@DOMParser@xercesc_2_5@@UAEXQBG0@Z
?doctypeDecl@DOMParser@xercesc_2_5@@UAEXABVDTDElementDecl@2@QBG1_N2@Z
?doctypeComment@DOMParser@xercesc_2_5@@UAEXQBG@Z
?attDef@DOMParser@xercesc_2_5@@UAEXABVDTDElementDecl@2@ABVDTDAttDef@2@_N@Z
?startInputSource@DOMParser@xercesc_2_5@@UAEXABVInputSource@2@@Z
?resolveEntity@DOMParser@xercesc_2_5@@UAEPAVInputSource@2@QBG00@Z
?resolveEntity@DOMParser@xercesc_2_5@@UAEPAVInputSource@2@PAVXMLResourceIdentifier@2@@Z
?resetEntities@DOMParser@xercesc_2_5@@UAEXXZ
?expandSystemId@DOMParser@xercesc_2_5@@UAE_NQBGAAVXMLBuffer@2@@Z
?endInputSource@DOMParser@xercesc_2_5@@UAEXABVInputSource@2@@Z
?transcode@XMLString@xercesc_2_5@@SAPAGQBD@Z
?error@DOMParser@xercesc_2_5@@UAEXIQBGW4ErrTypes@XMLErrorReporter@2@000JJ@Z
?elementTypeInfo@XMLDocumentHandler@xercesc_2_5@@UAEXQBG0@Z
?XMLDecl@DOMParser@xercesc_2_5@@UAEXQBG000@Z
?startEntityReference@DOMParser@xercesc_2_5@@UAEXABVXMLEntityDecl@2@@Z
?startElement@DOMParser@xercesc_2_5@@UAEXABVXMLElementDecl@2@IQBGABV?$RefVectorOf@VXMLAttr@xercesc_2_5@@@2@I_N3@Z
?startDocument@DOMParser@xercesc_2_5@@UAEXXZ
?resetDocument@DOMParser@xercesc_2_5@@UAEXXZ
?ignorableWhitespace@DOMParser@xercesc_2_5@@UAEXQBGI_N@Z
?endEntityReference@DOMParser@xercesc_2_5@@UAEXABVXMLEntityDecl@2@@Z
?endElement@DOMParser@xercesc_2_5@@UAEXABVXMLElementDecl@2@I_NQBG@Z
?endDocument@DOMParser@xercesc_2_5@@UAEXXZ
?doctypeDecl@AbstractDOMParser@xercesc_2_5@@UAEXABVDTDElementDecl@2@QBG1_N2@Z
?docPI@DOMParser@xercesc_2_5@@UAEXQBG0@Z
?docComment@DOMParser@xercesc_2_5@@UAEXQBG@Z
?docCharacters@DOMParser@xercesc_2_5@@UAEXQBGI_N@Z
??0DOMParser@xercesc_2_5@@QAE@QAVXMLValidator@1@QAVMemoryManager@1@QAVXMLGrammarPool@1@@Z
??1DOMParser@xercesc_2_5@@UAE@XZ
??0DOM_Element@xercesc_2_5@@QAE@ABV01@@Z
??9DOM_Node@xercesc_2_5@@QBE_NPBVDOM_NullPtr@1@@Z
?getElementsByTagName@DOM_Element@xercesc_2_5@@QBE?AVDOM_NodeList@2@ABVDOMString@2@@Z
??0DOM_Element@xercesc_2_5@@QAE@XZ
?rawBuffer@DOMString@xercesc_2_5@@QBEPBGXZ
?TextDecl@AbstractDOMParser@xercesc_2_5@@UAEXQBG0@Z
?startExtSubset@AbstractDOMParser@xercesc_2_5@@UAEXXZ
?startIntSubset@AbstractDOMParser@xercesc_2_5@@UAEXXZ
?startAttList@AbstractDOMParser@xercesc_2_5@@UAEXABVDTDElementDecl@2@@Z
?notationDecl@AbstractDOMParser@xercesc_2_5@@UAEXABVXMLNotationDecl@2@_N@Z
?resetDocType@AbstractDOMParser@xercesc_2_5@@UAEXXZ
?entityDecl@AbstractDOMParser@xercesc_2_5@@UAEXABVDTDEntityDecl@2@_N1@Z
?endExtSubset@AbstractDOMParser@xercesc_2_5@@UAEXXZ
?release@XMLString@xercesc_2_5@@SAXPAPAG@Z
?release@XMLString@xercesc_2_5@@SAXPAPAD@Z
?transcode@XMLString@xercesc_2_5@@SAPADQBG@Z
?Initialize@XMLPlatformUtils@xercesc_2_5@@SAXQBD0QAVPanicHandler@2@QAVMemoryManager@2@@Z
?fgXercescDefaultLocale@XMLUni@xercesc_2_5@@2QBDB
?Terminate@XMLPlatformUtils@xercesc_2_5@@SAXXZ
?transcode@DOMString@xercesc_2_5@@QBEPADQAVMemoryManager@2@@Z
?fgMemoryManager@XMLPlatformUtils@xercesc_2_5@@2PAVMemoryManager@2@A
?getDOMImplementation@DOMImplementationRegistry@xercesc_2_5@@SAPAVDOMImplementation@2@PBG@Z
??1DOMString@xercesc_2_5@@QAE@XZ
?getNodeValue@DOM_Node@xercesc_2_5@@QBE?AVDOMString@2@XZ
?getNodeType@DOM_Node@xercesc_2_5@@QBEFXZ
?doctypeComment@AbstractDOMParser@xercesc_2_5@@UAEXQBG@Z
??1DOM_Node@xercesc_2_5@@QAE@XZ
??1DOM_NodeList@xercesc_2_5@@QAE@XZ
?getLength@DOM_NodeList@xercesc_2_5@@QBEIXZ
?getChildNodes@DOM_Node@xercesc_2_5@@QBE?AVDOM_NodeList@2@XZ
??1DOM_NamedNodeMap@xercesc_2_5@@QAE@XZ
?item@DOM_NamedNodeMap@xercesc_2_5@@QBE?AVDOM_Node@2@I@Z
?getAttributes@DOM_Node@xercesc_2_5@@QBE?AVDOM_NamedNodeMap@2@XZ
?hasAttributes@DOM_Node@xercesc_2_5@@QBE_NXZ
?item@DOM_NodeList@xercesc_2_5@@QBE?AVDOM_Node@2@I@Z
?hasChildNodes@DOM_Node@xercesc_2_5@@QBE_NXZ
??1DOM_Attr@xercesc_2_5@@QAE@XZ
?getValue@DOM_Attr@xercesc_2_5@@QBE?AVDOMString@2@XZ
?isNull@DOM_Node@xercesc_2_5@@QBE_NXZ
?getAttributeNode@DOM_Element@xercesc_2_5@@QBE?AVDOM_Attr@2@ABVDOMString@2@@Z
??0DOMString@xercesc_2_5@@QAE@PBD@Z
?hasAttributes@DOM_Element@xercesc_2_5@@QBE_NXZ
?setIssueFatalErrorIfNotFound@InputSource@xercesc_2_5@@UAEX_N@Z
?setSystemId@InputSource@xercesc_2_5@@UAEXQBG@Z
?setPublicId@InputSource@xercesc_2_5@@UAEXQBG@Z
?setEncoding@InputSource@xercesc_2_5@@UAEXQBG@Z
?getIssueFatalErrorIfNotFound@InputSource@xercesc_2_5@@UBE_NXZ
?getSystemId@InputSource@xercesc_2_5@@UBEPBGXZ
?getPublicId@InputSource@xercesc_2_5@@UBEPBGXZ
?getEncoding@InputSource@xercesc_2_5@@UBEPBGXZ
?makeStream@MemBufInputSource@xercesc_2_5@@UBEPAVBinInputStream@2@XZ
??3XMemory@xercesc_2_5@@SAXPAX@Z
??1DOM_Document@xercesc_2_5@@QAE@XZ
??1DOM_Element@xercesc_2_5@@QAE@XZ
??4DOM_Document@xercesc_2_5@@QAEAAV01@PBVDOM_NullPtr@1@@Z
??4DOM_Element@xercesc_2_5@@QAEAAV01@PBVDOM_NullPtr@1@@Z
?getTagName@DOM_Element@xercesc_2_5@@QBE?AVDOMString@2@XZ
?getDocumentElement@DOM_Document@xercesc_2_5@@QBE?AVDOM_Element@2@XZ
?getDocument@DOMParser@xercesc_2_5@@QAE?AVDOM_Document@2@XZ
?resetErrors@DOMParser@xercesc_2_5@@UAEXXZ
?getErrorCount@DOMParser@xercesc_2_5@@QBEHXZ
?endIntSubset@AbstractDOMParser@xercesc_2_5@@UAEXXZ
?endAttList@AbstractDOMParser@xercesc_2_5@@UAEXABVDTDElementDecl@2@@Z
?elementDecl@AbstractDOMParser@xercesc_2_5@@UAEXABVDTDElementDecl@2@_N@Z
?doctypeWhitespace@AbstractDOMParser@xercesc_2_5@@UAEXQBGI@Z
?doctypePI@AbstractDOMParser@xercesc_2_5@@UAEXQBG0@Z
??_7MemoryManager@xercesc_2_5@@6B@
?attDef@AbstractDOMParser@xercesc_2_5@@UAEXABVDTDElementDecl@2@ABVDTDAttDef@2@_N@Z
?startInputSource@XercesDOMParser@xercesc_2_5@@UAEXABVInputSource@2@@Z
?resolveEntity@XercesDOMParser@xercesc_2_5@@UAEPAVInputSource@2@QBG00@Z
?resolveEntity@XercesDOMParser@xercesc_2_5@@UAEPAVInputSource@2@PAVXMLResourceIdentifier@2@@Z
?resetEntities@XercesDOMParser@xercesc_2_5@@UAEXXZ
?expandSystemId@XercesDOMParser@xercesc_2_5@@UAE_NQBGAAVXMLBuffer@2@@Z
?endInputSource@XercesDOMParser@xercesc_2_5@@UAEXABVInputSource@2@@Z
?resetErrors@XercesDOMParser@xercesc_2_5@@UAEXXZ
?error@XercesDOMParser@xercesc_2_5@@UAEXIQBGW4ErrTypes@XMLErrorReporter@2@000JJ@Z
?createElementNSNode@AbstractDOMParser@xercesc_2_5@@MAEPAVDOMElement@2@PBG0@Z
?setPSVIHandler@AbstractDOMParser@xercesc_2_5@@UAEXQAVPSVIHandler@2@@Z
?elementTypeInfo@AbstractDOMParser@xercesc_2_5@@UAEXQBG0@Z
?XMLDecl@AbstractDOMParser@xercesc_2_5@@UAEXQBG000@Z
?startEntityReference@AbstractDOMParser@xercesc_2_5@@UAEXABVXMLEntityDecl@2@@Z
?startElement@AbstractDOMParser@xercesc_2_5@@UAEXABVXMLElementDecl@2@IQBGABV?$RefVectorOf@VXMLAttr@xercesc_2_5@@@2@I_N3@Z
?startDocument@AbstractDOMParser@xercesc_2_5@@UAEXXZ
?resetDocument@AbstractDOMParser@xercesc_2_5@@UAEXXZ
?ignorableWhitespace@AbstractDOMParser@xercesc_2_5@@UAEXQBGI_N@Z
?endEntityReference@AbstractDOMParser@xercesc_2_5@@UAEXABVXMLEntityDecl@2@@Z
?endElement@AbstractDOMParser@xercesc_2_5@@UAEXABVXMLElementDecl@2@I_NQBG@Z
?endDocument@AbstractDOMParser@xercesc_2_5@@UAEXXZ
?docPI@AbstractDOMParser@xercesc_2_5@@UAEXQBG0@Z
?docComment@AbstractDOMParser@xercesc_2_5@@UAEXQBG@Z
?docCharacters@AbstractDOMParser@xercesc_2_5@@UAEXQBGI_N@Z
?getDocument@AbstractDOMParser@xercesc_2_5@@QAEPAVDOMDocument@2@XZ
?parse@AbstractDOMParser@xercesc_2_5@@QAEXABVInputSource@2@@Z
??0XercesDOMParser@xercesc_2_5@@QAE@QAVXMLValidator@1@QAVMemoryManager@1@QAVXMLGrammarPool@1@@Z
??1XercesDOMParser@xercesc_2_5@@UAE@XZ
?externalEntityDecl@DefaultHandler@xercesc_2_5@@UAEXQBG00@Z
?internalEntityDecl@DefaultHandler@xercesc_2_5@@UAEXQBG0@Z
?attributeDecl@DefaultHandler@xercesc_2_5@@UAEXQBG0000@Z
?elementDecl@DefaultHandler@xercesc_2_5@@UAEXQBG0@Z
?startEntity@DefaultHandler@xercesc_2_5@@UAEXQBG@Z
?startDTD@DefaultHandler@xercesc_2_5@@UAEXQBG00@Z
?startCDATA@DefaultHandler@xercesc_2_5@@UAEXXZ
?endEntity@DefaultHandler@xercesc_2_5@@UAEXQBG@Z
?endDTD@DefaultHandler@xercesc_2_5@@UAEXXZ
?endCDATA@DefaultHandler@xercesc_2_5@@UAEXXZ
?comment@DefaultHandler@xercesc_2_5@@UAEXQBGI@Z
?resetErrors@DefaultHandler@xercesc_2_5@@UAEXXZ
?warning@DefaultHandler@xercesc_2_5@@UAEXABVSAXParseException@2@@Z
?skippedEntity@DefaultHandler@xercesc_2_5@@UAEXQBG@Z
?endPrefixMapping@DefaultHandler@xercesc_2_5@@UAEXQBG@Z
?startPrefixMapping@DefaultHandler@xercesc_2_5@@UAEXQBG0@Z
?startDocument@DefaultHandler@xercesc_2_5@@UAEXXZ
?setDocumentLocator@DefaultHandler@xercesc_2_5@@UAEXQBVLocator@2@@Z
?processingInstruction@DefaultHandler@xercesc_2_5@@UAEXQBG0@Z
?endDocument@DefaultHandler@xercesc_2_5@@UAEXXZ
?resetDocType@DefaultHandler@xercesc_2_5@@UAEXXZ
?unparsedEntityDecl@DefaultHandler@xercesc_2_5@@UAEXQBG000@Z
?notationDecl@DefaultHandler@xercesc_2_5@@UAEXQBG00@Z
?resetDocument@DefaultHandler@xercesc_2_5@@UAEXXZ
?resolveEntity@DefaultHandler@xercesc_2_5@@UAEPAVInputSource@2@QBG0@Z
??1DefaultHandler@xercesc_2_5@@UAE@XZ
??0DefaultHandler@xercesc_2_5@@QAE@XZ
?createXMLReader@XMLReaderFactory@xercesc_2_5@@SAPAVSAX2XMLReader@2@QAVMemoryManager@2@QAVXMLGrammarPool@2@@Z
?initialize@XalanTransformer@xalanc_1_8@@SAXXZ
?terminate@XalanTransformer@xalanc_1_8@@SAXXZ
??4DOM_Element@xercesc_2_5@@QAEAAV01@ABV01@@Z
?getNextSibling@DOM_Node@xercesc_2_5@@QBE?AV12@XZ
?length@DOMString@xercesc_2_5@@QBEIXZ
??4DOM_Node@xercesc_2_5@@QAEAAV01@ABV01@@Z
??1DOM_Text@xercesc_2_5@@QAE@XZ
?createTextNode@DOM_Document@xercesc_2_5@@QAE?AVDOM_Text@2@ABVDOMString@2@@Z
?appendChild@DOM_Node@xercesc_2_5@@QAE?AV12@ABV12@@Z
?createElement@DOM_Document@xercesc_2_5@@QAE?AVDOM_Element@2@ABVDOMString@2@@Z
??1XSLTInputSource@xalanc_1_8@@UAE@XZ
??1XalanTransformer@xalanc_1_8@@UAE@XZ
??1XSLTResultTarget@xalanc_1_8@@QAE@XZ
??1InputSource@xercesc_2_5@@UAE@XZ
?transform@XalanTransformer@xalanc_1_8@@QAEHABVXSLTInputSource@2@0ABVXSLTResultTarget@2@@Z
??0XSLTInputSource@xalanc_1_8@@QAE@PAV?$basic_istream@DU?$char_traits@D@std@@@std@@@Z
??0XSLTResultTarget@xalanc_1_8@@QAE@PAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
??0XalanTransformer@xalanc_1_8@@QAE@XZ
?getFirstChild@DOM_Node@xercesc_2_5@@QBE?AV12@XZ
dunzip32
dunzip
dzip32
dzip
shlwapi
PathFindExtensionA
urlmon
CreateURLMoniker
Sections
.text Size: 8.2MB - Virtual size: 8.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ