abc43906300675d47f1f7e5e10a885d110e63ebb45e5f70a3d9536dd2f8b10cd

Sharing

Copy URL Twitter E-mail

General

Target

abc43906300675d47f1f7e5e10a885d110e63ebb45e5f70a3d9536dd2f8b10cd
Size

12.6MB
MD5

d989a33d94d484159bf611ba32e2643e
SHA1

27146d611447fc64684f661f5a30762c1d069ae0
SHA256

abc43906300675d47f1f7e5e10a885d110e63ebb45e5f70a3d9536dd2f8b10cd
SHA512

8daff32bea8b3dec8f9e47bf66326b8d78f682e55a4dfe804b7798116a7cae20562b85329e05caf57fce19f51bf8a569b4e9bd505c07a4b64230518726f7fbce
SSDEEP

196608:EPqbbOrlfmaKkPmiPoYHOgMEuK004ATfRKtNSDSSZfzons64:ESbZIPmyoYup9y4A8tNSDJfzMsh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abc43906300675d47f1f7e5e10a885d110e63ebb45e5f70a3d9536dd2f8b10cd

Files

abc43906300675d47f1f7e5e10a885d110e63ebb45e5f70a3d9536dd2f8b10cd
.exe windows:6 windows x64 arch:x64

70c40e434cd9063a3250aecbc9650e38

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ws2_32

closesocket
connect
ioctlsocket
freeaddrinfo
getaddrinfo
WSAGetLastError
socket
bind
sendto
send
getsockname
getsockopt
htonl
htons
inet_addr
accept
WSAStartup
gethostbyname
gethostname
__WSAFDIsSet
setsockopt
WSACleanup
inet_ntoa
listen
ntohs
recv
recvfrom
select

winmm

waveOutGetDevCapsA
waveOutGetNumDevs
mixerClose
mixerOpen
mixerGetDevCapsA
mixerGetNumDevs
waveInGetDevCapsA
waveInGetNumDevs
mixerSetControlDetails
mixerGetControlDetailsA
mixerGetLineControlsA
mixerGetLineInfoA
timeEndPeriod
timeKillEvent
timeSetEvent
midiInReset
midiInStop
midiInStart
midiInClose
midiInOpen
midiInGetErrorTextW
midiInGetDevCapsW
midiInGetNumDevs
midiOutCachePatches
midiOutReset
midiOutLongMsg
midiOutShortMsg
midiOutUnprepareHeader
midiOutPrepareHeader
midiOutClose
midiOutOpen
midiOutGetErrorTextW
midiOutGetDevCapsW
timeGetTime
timeGetDevCaps
timeBeginPeriod
midiOutGetNumDevs

msacm32

acmMetrics

gdiplus

GdipSetCompositingQuality
GdipSetCompositingMode
GdipSetImageAttributesWrapMode
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdipDrawImageRectRectI
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipDrawPolygon
GdiplusShutdown
GdipDrawRectangleI
GdiplusStartup
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipDrawImageRectI
GdipCreateCachedBitmap
GdipDeleteCachedBitmap
GdipGetClip
GdipDrawCachedBitmap
GdipCreateBitmapFromGraphics
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipSaveImageToFile
GdipSetClipRegion
GdipBitmapSetResolution
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipSetClipRect
GdipDrawImagePoints
GdipTranslateWorldTransform
GdipDrawImageI
GdipScaleWorldTransform
GdipFillPath
GdipFillEllipse
GdipFillPolygon
GdipFillRectangleI
GdipRotateWorldTransform
GdipFillRectangle
GdipDrawPath
GdipDrawEllipse
GdipDrawRectangle
GdipDrawBezier
GdipGetImageHorizontalResolution
GdipGetImageVerticalResolution
GdipDrawLine
GdipSetPageUnit
GdipSetSmoothingMode
GdipReleaseDC
GdipGetDC
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromHICON
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipCloneImage
GdipSetPenDashArray
GdipSetPenDashStyle
GdipSetPenMode
GdipSetPenEndCap
GdipSetPenStartCap
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipScaleTextureTransform
GdipTranslateTextureTransform
GdipCreateTexture2
GdipDeleteBrush
GdipCloneBrush
GdipGetRegionHRgn
GdipDeleteRegion
GdipCloneRegion
GdipCreateRegionHrgn
GdipCreateRegion
GdipGetPathWorldBounds
GdipAddPathPolygon
GdipAddPathBezier
GdipAddPathLine2
GdipAddPathLine
GdipClosePathFigure
GdipStartPathFigure
GdipSetPixelOffsetMode
GdipDeletePath
GdipCreatePath
GdipGetImagePixelFormat
GdipAlloc
GdipFree

uxtheme

EnableThemeDialogTexture

iphlpapi

GetIfTable2Ex
GetIpForwardTable
FreeMibTable

pxcview

PXCV_Err_FormatErrorCode
PXCV_ReadDocumentW
PXCV_Delete
PXCV_Init
PXCV_DrawPageToDC
PXCV_GetPageDimensions

usp10

ScriptFreeCache
ScriptItemize
ScriptShape
ScriptGetFontProperties

winsparkle

win_sparkle_set_automatic_check_for_updates
win_sparkle_set_appcast_url
win_sparkle_cleanup
win_sparkle_init
win_sparkle_get_automatic_check_for_updates
win_sparkle_check_update_with_ui

dwrite

DWriteCreateFactory

crashrpt1402

ord29
ord7
ord9

ut64

?DrawGripper@COXCoolToolBar@@MEAAXAEAVCDC@@AEAVCRect@@@Z
?DrawSeparator@COXCoolToolBar@@MEAAXAEAVCDC@@AEAVCRect@@@Z
?DrawIcon@COXCoolToolBar@@MEAAXAEAVCDC@@AEAVCRect@@@Z
?DrawCustomizedButton@COXCoolToolBar@@MEAAXAEAVCDC@@AEAVCRect@@@Z
??1COXCoolToolBar@@UEAA@XZ
?OnUpdateCmdUI@COXCoolToolBar@@UEAAXPEAVCFrameWnd@@H@Z
?EraseNonClient@COXCoolToolBar@@UEAAXXZ
?CalcFixedLayout@COXCoolToolBar@@UEAA?AVCSize@@HH@Z
?CalcDynamicLayout@COXCoolToolBar@@UEAA?AVCSize@@HK@Z
?CalcInsideRect@COXCoolToolBar@@UEAAXAEAVCRect@@H@Z
?OnLButtonUp@COXCoolToolBar@@IEAAXIVCPoint@@@Z
?OnRButtonDown@COXCoolToolBar@@IEAAXIVCPoint@@@Z
?OnLButtonDblClk@COXCoolToolBar@@IEAAXIVCPoint@@@Z
?OnIdleUpdateCmdUI@COXCoolToolBar@@IEAA_J_K_J@Z
?OnDragEnter@COXCoolToolBar@@MEAA_J_K_J@Z
?OnDragOver@COXCoolToolBar@@MEAA_J_K_J@Z
?OnDragLeave@COXCoolToolBar@@MEAA_J_K_J@Z
?OnDrop@COXCoolToolBar@@MEAA_J_K_J@Z
?OnRemoveDraggedButton@COXCoolToolBar@@MEAAXH@Z
?GetThisMessageMap@COXCoolToolBar@@KAPEBUAFX_MSGMAP@@XZ
?EnableDocking@COXCoolToolBar@@QEAAXKH@Z
?DrawBorders@COXCoolToolBar@@UEAAXPEAVCDC@@AEAVCRect@@@Z
??0COXBitmapMenuOrganizer@@QEAA@XZ
??1COXBitmapMenuOrganizer@@UEAA@XZ
?AttachFrameWnd@COXBitmapMenuOrganizer@@QEAAHPEAVCFrameWnd@@@Z
?GetThisClass@COXMFCToolBar@@SAPEAUCRuntimeClass@@XZ
?DockControlBarLeftOf@COXCoolToolBar@@QEAAXPEAVCOXMFCToolBar@@@Z
??0COXFileWatcher@@QEAA@H@Z
?GetFitButtonSize@COXBitmapButton@@UEAA?AVCSize@@XZ
?GetStyleEx@COXBitmapButton@@QEAAKXZ
?IsChecked@COXBitmapButton@@QEAAHXZ
?DrawItem@COXBitmapButton@@UEAAXPEAUtagDRAWITEMSTRUCT@@@Z
?Toggle@COXBitmapButton@@IEAAHXZ
?GetThisMessageMap@COXBitmapButton@@KAPEBUAFX_MSGMAP@@XZ
?OnClicked@COXBitmapButton@@MEAAHXZ
?GetMessageMap@COXBitmapButton@@MEBAPEBUAFX_MSGMAP@@XZ
?SetToolTip@COXBitmapButton@@QEAAHH@Z
?IsWindowEnabled@COXBitmapButton@@QEBAHXZ
?EnableWindow@COXBitmapButton@@QEAAHH@Z
?SetStateEx@COXBitmapButton@@QEAAXKH@Z
?RestorePalette@COXBitmapButton@@MEAAXPEAVCDC@@IVCRect@@PEAVCPalette@@@Z
?GetDropDownArrowWidth@COXBitmapButton@@MEAAHXZ
?DrawDropDownArrow@COXBitmapButton@@MEAAXPEAVCDC@@IVCRect@@@Z
?DisplayCustomizeButtonContextMenu@COXCoolToolBar@@UEAAHHVCPoint@@@Z
?CalcLayout@COXCoolToolBar@@MEAA?AVCSize@@KH@Z
?CalcSize@COXCoolToolBar@@MEAA?AVCSize@@PEAU_TBBUTTON@@H@Z
?WrapToolBar@COXCoolToolBar@@MEAAHPEAU_TBBUTTON@@HH@Z
?SizeToolBar@COXCoolToolBar@@MEAAXPEAU_TBBUTTON@@HHH@Z
??1COXFileWatcher@@UEAA@XZ
?AddWatch@COXFileWatcher@@QEAAHPEB_WHK@Z
?RemoveAllWatches@COXFileWatcher@@QEAAXXZ
?EnableWindowNotification@COXFileWatcher@@QEAAXPEB_WPEAVCWnd@@H@Z
?DisableWindowNotification@COXFileWatcher@@QEAAXPEB_W@Z
?OnDropDown@COXBitmapButton@@MEAAXXZ
?OnToggle@COXBitmapButton@@MEAAXXZ
?SetBarStyle@COXMFCToolBar@@QEAAXK@Z
?CreateEx@COXMFCToolBar@@UEAAHPEAVCWnd@@KKVCRect@@I@Z
?GetRuntimeClass@COXCoolToolBar@@UEBAPEAUCRuntimeClass@@XZ
??0COXCoolToolBar@@QEAA@XZ
?Create@COXCoolToolBar@@UEAAHPEAVCWnd@@KI@Z
?SetBitmapIds@COXCoolToolBar@@QEAAXPEAIH@Z
?SetCustomizable@COXCoolToolBar@@QEAAXHH@Z
?SetDropDownArrow@COXCoolToolBar@@QEAAXH@Z
?SaveBarState@COXCoolToolBar@@UEAAHPEB_W0H@Z
?LoadBarState@COXCoolToolBar@@UEAAHPEB_W0H@Z
?RedrawToolBar@COXCoolToolBar@@QEAAXHH@Z
?DrawTextW@COXBitmapButton@@MEAAXPEAVCDC@@IV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@VCRect@@@Z
?DrawFocusRectangle@COXBitmapButton@@MEAAXPEAVCDC@@IVCRect@@1@Z
?DrawImage@COXBitmapButton@@MEAAXPEAVCDC@@IPEAVCImageList@@VCRect@@@Z
?DrawButton@COXBitmapButton@@MEAAXPEAVCDC@@IVCRect@@@Z
?SelectPalette@COXBitmapButton@@MEAAXPEAVCDC@@IVCRect@@AEAPEAVCPalette@@@Z
?DistributeSpace@COXBitmapButton@@MEAAXIVCRect@@AEAV2@11@Z
?PreCreateWindow@COXBitmapButton@@MEAAHAEAUtagCREATESTRUCTW@@@Z
?PreTranslateMessage@COXBitmapButton@@UEAAHPEAUtagMSG@@@Z
??1COXBitmapButton@@UEAA@XZ
?GetReservedSpace@COXBitmapButton@@UEAA?AVCSize@@XZ
?SizeToContent@COXBitmapButton@@UEAAXXZ
??0COXBitmapButton@@QEAA@XZ
?GetRuntimeClass@COXBitmapButton@@UEBAPEAUCRuntimeClass@@XZ
?SetStyleEx@COXBitmapButton@@QEAAXKH@Z
?SetText@COXBitmapButton@@QEAAXPEB_W@Z

icuuc53

??1UnicodeString@icu_53@@UEAA@XZ
?getTerminatedBuffer@UnicodeString@icu_53@@QEAAPEB_WXZ
??0UnicodeString@icu_53@@QEAA@AEBV01@@Z
u_islower_53
u_isalpha_53
u_isspace_53
u_toupper_53
?getBuffer@UnicodeString@icu_53@@QEAAPEA_WH@Z
?releaseBuffer@UnicodeString@icu_53@@QEAAXH@Z
u_charName_53
??4UnicodeString@icu_53@@QEAAAEAV01@AEBV01@@Z
u_ispunct_53
??3UMemory@icu_53@@SAXPEAX@Z
??1UObject@icu_53@@UEAA@XZ
?getDynamicClassID@UObject@icu_53@@UEBAPEAXXZ
??1Replaceable@icu_53@@UEAA@XZ
?hasMetaData@Replaceable@icu_53@@UEBACXZ
?clone@Replaceable@icu_53@@UEBAPEAV12@XZ
?extractBetween@UnicodeString@icu_53@@UEBAXHHAEAV12@@Z
?handleReplaceBetween@UnicodeString@icu_53@@UEAAXHHAEBV12@@Z
?hasMetaData@UnicodeString@icu_53@@UEBACXZ
?copy@UnicodeString@icu_53@@UEAAXHHH@Z
?clone@UnicodeString@icu_53@@UEBAPEAVReplaceable@2@XZ
?getDynamicClassID@UnicodeString@icu_53@@UEBAPEAXXZ
?getLength@UnicodeString@icu_53@@MEBAHXZ
?getCharAt@UnicodeString@icu_53@@MEBA_WH@Z
?getChar32At@UnicodeString@icu_53@@MEBAHH@Z
?toUpper@UnicodeString@icu_53@@QEAAAEAV12@XZ
?toLower@UnicodeString@icu_53@@QEAAAEAV12@XZ
??0UnicodeString@icu_53@@QEAA@PEB_W@Z
??Hicu_53@@YA?AVUnicodeString@0@AEBV10@0@Z
u_isWhitespace_53
u_strToUTF8_53
u_strFromUTF8_53
?indexOf@UnicodeString@icu_53@@QEBAHPEB_WHHHH@Z
??0UnicodeString@icu_53@@QEAA@PEBD@Z
?doEquals@UnicodeString@icu_53@@AEBACAEBV12@H@Z
?doReplace@UnicodeString@icu_53@@AEAAAEAV12@HHAEBV12@HH@Z
u_isprint_53
?findAndReplace@UnicodeString@icu_53@@QEAAAEAV12@HHAEBV12@HH0HH@Z
?append@UnicodeString@icu_53@@QEAAAEAV12@H@Z
?doIndexOf@UnicodeString@icu_53@@AEBAHHHH@Z
?first32@UCharCharacterIterator@icu_53@@UEAAHXZ
?next32@UCharCharacterIterator@icu_53@@UEAAHXZ
??0StringCharacterIterator@icu_53@@QEAA@AEBVUnicodeString@1@@Z
??1StringCharacterIterator@icu_53@@UEAA@XZ
?char32At@UnicodeString@icu_53@@QEBAHH@Z
??0UnicodeString@icu_53@@QEAA@H@Z

eqatec.analytics.monitor.win32_vc100-x64

?CreateMonitor@AnalyticsMonitorFactory@EQATECAnalytics@@SAPEAVIAnalyticsMonitor@2@PEBD0@Z

libxml2

xmlTextReaderRead
xmlTextReaderIsEmptyElement
xmlTextReaderNodeType
xmlTextReaderConstName
xmlTextReaderConstValue
xmlTextReaderClose
xmlTextReaderMoveToNextAttribute
xmlTextReaderByteConsumed
xmlReaderForFile
xmlReaderForMemory
xmlFreeTextReader

msvcp140

?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?rdstate@ios_base@std@@QEBAHXZ
?_Getmonths@_Locinfo@std@@QEBAPEBDXZ
?_Getdays@_Locinfo@std@@QEBAPEBDXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
_Strcoll
_Strxfrm
_Wcscoll
_Wcsxfrm
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??Bid@locale@std@@QEAA_KXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?id@?$collate@_W@std@@2V0locale@2@A
?_Xinvalid_argument@std@@YAXPEBD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?setf@ios_base@std@@QEAAHHH@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?classic@locale@std@@SAAEBV12@XZ
?precision@ios_base@std@@QEAA_J_J@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_N@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
_Xtime_get_ticks
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?setf@ios_base@std@@QEAAHH@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
_Thrd_id
_Mtx_current_owns
_Cnd_wait
_Cnd_timedwait
_Cnd_broadcast
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_detach
_Mtx_trylock
_Cnd_do_broadcast_at_thread_exit
_Query_perf_counter
_Query_perf_frequency
_Thrd_join
_Thrd_sleep
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_signal
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?widen@?$ctype@_W@std@@QEBA_WD@Z
?narrow@?$ctype@_W@std@@QEBAD_WD@Z
?exceptions@ios_base@std@@QEAAXH@Z
?flags@ios_base@std@@QEAAHH@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??_D?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?id@?$numpunct@_W@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?uncaught_exception@std@@YA_NXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Throw_C_error@std@@YAXH@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
_Mtx_unlock
?_Xbad_function_call@std@@YAXXZ
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
_Mbrtowc
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Xout_of_range@std@@YAXPEBD@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
_Mtx_lock

mfc140u

ord8902
ord10121
ord2821
ord12624
ord7712
ord3334
ord3333
ord8431
ord5263
ord5971
ord5401
ord1391
ord12292
ord1985
ord917
ord6559
ord7928
ord2344
ord7389
ord9841
ord9840
ord9039
ord11770
ord11805
ord8917
ord6630
ord2628
ord1446
ord9739
ord10835
ord8604
ord8614
ord10199
ord10807
ord9217
ord9682
ord9677
ord9205
ord9215
ord9200
ord10968
ord10965
ord8003
ord3989
ord979
ord7173
ord11081
ord2178
ord2273
ord8167
ord7393
ord1450
ord8084
ord10124
ord12544
ord4445
ord8023
ord5183
ord9842
ord9838
ord9835
ord2439
ord12223
ord12222
ord14210
ord7650
ord14216
ord9089
ord4011
ord3949
ord12625
ord7668
ord11709
ord2011
ord11665
ord11664
ord1844
ord14088
ord12212
ord7719
ord14288
ord6121
ord14290
ord6123
ord14289
ord6122
ord13545
ord8159
ord983
ord6614
ord3731
ord5706
ord11921
ord7920
ord11933
ord11901
ord5664
ord5382
ord2345
ord3967
ord5557
ord7241
ord8903
ord9670
ord11432
ord9054
ord10828
ord10827
ord10411
ord9942
ord10122
ord5188
ord5196
ord14132
ord3947
ord3997
ord1106
ord11775
ord2662
ord9175
ord4549
ord12341
ord12100
ord2511
ord13023
ord2767
ord7395
ord8093
ord10941
ord12256
ord5376
ord12466
ord8888
ord10956
ord10713
ord10665
ord3735
ord8772
ord5981
ord5408
ord2779
ord13468
ord13697
ord469
ord6862
ord3728
ord12558
ord12680
ord4813
ord8683
ord11405
ord12992
ord4967
ord5632
ord5615
ord2861
ord12988
ord13601
ord9107
ord2786
ord6074
ord1149
ord3745
ord4724
ord3089
ord528
ord3726
ord10290
ord10315
ord8823
ord4084
ord7364
ord2495
ord5212
ord3965
ord894
ord6553
ord5750
ord8730
ord10703
ord6260
ord1089
ord10163
ord11902
ord14128
ord5246
ord2703
ord14098
ord13956
ord3599
ord5555
ord7227
ord1056
ord9941
ord362
ord6819
ord8817
ord3056
ord5241
ord3841
ord2487
ord4730
ord990
ord13679
ord12967
ord12763
ord6313
ord357
ord6250
ord14299
ord14038
ord2414
ord1059
ord11719
ord365
ord2330
ord7251
ord9117
ord11232
ord8995
ord14120
ord3714
ord5744
ord11486
ord1767
ord11862
ord3811
ord8097
ord11788
ord7432
ord5720
ord3098
ord546
ord6916
ord9741
ord11063
ord10093
ord11184
ord11763
ord8928
ord3151
ord804
ord5189
ord11484
ord8904
ord7912
ord1129
ord9043
ord8521
ord11119
ord13811
ord4353
ord2510
ord4241
ord5726
ord13358
ord5727
ord13360
ord13351
ord7541
ord12142
ord5917
ord4873
ord4878
ord4872
ord3081
ord1404
ord1053
ord13401
ord8026
ord3713
ord13199
ord4335
ord12706
ord8507
ord6724
ord8441
ord4086
ord3832
ord2479
ord3803
ord6361
ord8161
ord13864
ord1670
ord8416
ord4511
ord13999
ord4725
ord287
ord14111
ord8433
ord12265
ord1667
ord1504
ord14043
ord4181
ord1631
ord2187
ord2815
ord1427
ord12111
ord959
ord6707
ord2415
ord2311
ord306
ord12240
ord4946
ord4357
ord2514
ord4578
ord4561
ord2802
ord7888
ord5385
ord1122
ord491
ord1503
ord280
ord4947
ord2269
ord2212
ord14039
ord2903
ord5709
ord1501
ord290
ord286
ord285
ord2921
ord8164
ord1034
ord316
ord12241
ord4948
ord7234
ord13398
ord11443
ord2580
ord1090
ord3072
ord449
ord6286
ord8989
ord13613
ord13612
ord14199
ord11760
ord11780
ord11853
ord8681
ord3810
ord7883
ord12139
ord8037
ord3722
ord4114
ord4144
ord4110
ord4068
ord4038
ord3972
ord2598
ord2571
ord2270
ord6002
ord2698
ord8900
ord1369
ord878
ord8063
ord8501
ord3742
ord6247
ord3756
ord4722
ord6320
ord4656
ord296
ord13955
ord12746
ord1086
ord438
ord3825
ord2473
ord3828
ord2475
ord2222
ord11813
ord6000
ord13397
ord2697
ord8901
ord11854
ord11085
ord3951
ord3307
ord3308
ord3071
ord6285
ord3212
ord3209
ord9946
ord7913
ord14360
ord9976
ord9978
ord9977
ord9975
ord9979
ord5451
ord11414
ord11415
ord8830
ord11771
ord3718
ord11625
ord14209
ord8656
ord6729
ord10691
ord8947
ord3173
ord13513
ord11944
ord11940
ord1700
ord1722
ord1748
ord1734
ord1755
ord4776
ord4843
ord4788
ord4806
ord4800
ord4794
ord4853
ord4837
ord4782
ord4859
ord4814
ord4752
ord4767
ord4828
ord4360
ord5582
ord9384
ord4352
ord2967
ord14211
ord7651
ord14217
ord6631
ord7882
ord11406
ord13354
ord5723
ord13767
ord2629
ord11806
ord3812
ord3278
ord3279
ord3172
ord11850
ord5080
ord5363
ord5552
ord9041
ord5339
ord2346
ord5083
ord5229
ord5062
ord7460
ord7461
ord7450
ord5227
ord7922
ord4726
ord1033
ord6505
ord6498
ord1327
ord8171
ord1846
ord12349
ord5398
ord5968
ord13115
ord2176
ord1671
ord5742
ord3723
ord5237
ord13758
ord8043
ord10085

kernel32

GetWindowsDirectoryW
GetLocaleInfoA
ReleaseSemaphore
CreateSemaphoreW
IsDBCSLeadByte
IsValidCodePage
GetCPInfo
GetCPInfoExW
EnumSystemCodePagesW
SetErrorMode
GetSystemInfo
CreateDirectoryA
CreateFileA
DeleteFileA
FindFirstFileA
FindNextFileA
GetFileAttributesA
GetFileSizeEx
GetFullPathNameA
RemoveDirectoryA
SetFileAttributesA
SetFilePointerEx
GetVolumeInformationA
GetACP
DeleteTimerQueueTimer
LoadLibraryA
GetTempPathA
GetCurrentProcessId
CreateProcessA
GetModuleFileNameA
CopyFileA
MoveFileA
CreateEventA
ResumeThread
GetLongPathNameA
lstrcmpiA
GetProfileIntA
GetDiskFreeSpaceW
GetFullPathNameW
LockFile
LockFileEx
UnlockFile
UnlockFileEx
AreFileApisANSI
GetSystemTime
FatalAppExitW
DebugBreak
InitializeCriticalSectionAndSpinCount
lstrlenW
GetLocaleInfoW
CreateSymbolicLinkW
GetSystemTimeAsFileTime
ExpandEnvironmentStringsA
LoadLibraryExA
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
GetStartupInfoW
FormatMessageA
FindFirstFileExW
GetFinalPathNameByHandleW
SetFileInformationByHandle
DeviceIoControl
CreateDirectoryExW
MoveFileExW
CreateHardLinkW
GetFileInformationByHandleEx
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
InitOnceBeginInitialize
InitOnceComplete
SetLastError
GetModuleHandleExW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
RaiseException
GetComputerNameW
SetThreadAffinityMask
GetModuleHandleA
GetNativeSystemInfo
GetSystemDirectoryW
SetLocalTime
GlobalMemoryStatusEx
SetPriorityClass
CreateProcessW
TerminateThread
SetThreadPriority
GetCurrentThread
GetExitCodeProcess
TerminateProcess
ExitProcess
GetCurrentProcess
WaitForMultipleObjects
CreateEventW
ResetEvent
SetEvent
CancelIo
GetOverlappedResult
QueryPerformanceFrequency
QueryPerformanceCounter
CreateNamedPipeW
PeekNamedPipe
DisconnectNamedPipe
ConnectNamedPipe
CreatePipe
SetUnhandledExceptionFilter
SetHandleInformation
IsDebuggerPresent
GetTempPathW
GetVolumeInformationW
GetLogicalDriveStringsW
GetFileAttributesExW
GetDriveTypeW
GetDiskFreeSpaceExW
GetEnvironmentVariableW
RtlCaptureStackBackTrace
GlobalSize
LoadLibraryExW
LocalAlloc
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileInformationByHandle
WideCharToMultiByte
SetFileTime
LocalFileTimeToFileTime
GetFileSize
FlushFileBuffers
GetPrivateProfileIntW
WriteProfileStringW
GetProfileStringW
GetProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrcmpiW
GetCurrentThreadId
GetLastError
HeapDestroy
LoadLibraryW
FindNextFileW
FindFirstFileW
FindClose
GlobalReAlloc
FindResourceW
SizeofResource
LockResource
LoadResource
OutputDebugStringW
OutputDebugStringA
IsDBCSLeadByteEx
GetModuleFileNameW
GlobalHandle
FreeLibrary
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
GetTickCount
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetTimeFormatW
GetDateFormatW
SystemTimeToFileTime
CreateTimerQueueTimer
HeapAlloc
HeapReAlloc
FileTimeToSystemTime
GetLocalTime
MultiByteToWideChar
MoveFileW
CopyFileW
Sleep
WriteFile
SetFilePointer
SetFileAttributesW
SetEndOfFile
RemoveDirectoryW
ReadFile
GetTempFileNameW
GetFileAttributesW
DeleteFileW
CreateFileW
CreateDirectoryW
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
CloseHandle
ReleaseMutex
WaitForSingleObject
CreateMutexW
LocalFree
FormatMessageW
SetCurrentDirectoryW
DecodePointer
GetCurrentDirectoryW
VerSetConditionMask
GetModuleHandleW
GetProcAddress
VerifyVersionInfoW
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

UnregisterClassW
GetClientRect
DefWindowProcW
RegisterClassExW
CreateWindowExW
DestroyWindow
GetWindowLongPtrW
SetWindowLongPtrW
GetDlgItem
SetDlgItemTextA
SetDlgItemTextW
GetDlgItemTextA
GetDlgItemTextW
EnableWindow
GetWindowTextLengthW
SetRect
UpdateWindow
InvalidateRect
FillRect
BeginPaint
EndPaint
IsRectEmpty
SendMessageW
PostMessageW
PeekMessageW
GetSysColor
GetDC
ReleaseDC
IntersectRect
UnionRect
LoadIconW
SetRectEmpty
GetAsyncKeyState
LoadStringW
ShowWindow
MoveWindow
IsWindowVisible
SetDlgItemInt
GetDlgItemInt
IsDlgButtonChecked
GetFocus
GetWindowRect
MessageBoxW
GetParent
GetWindow
SendDlgItemMessageW
GetMenu
GetMenuItemCount
ModifyMenuW
DrawTextW
MessageBeep
SetCursor
GetSystemMetrics
LoadStringA
SetFocus
GetMenuState
CheckMenuItem
EnableMenuItem
MessageBoxA
LoadCursorW
CreatePopupMenu
AppendMenuW
RegisterWindowMessageW
TranslateMessage
DispatchMessageW
IsWindow
CreateDialogParamW
DialogBoxParamW
EndDialog
TranslateAcceleratorW
GetCursorPos
ScreenToClient
OffsetRect
GetWindowLongW
EnumChildWindows
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
IsDialogMessageW
TranslateMDISysAccel
GetKeyState
VkKeyScanW
SetWindowPos
BringWindowToTop
GetDlgCtrlID
PtInRect
GetSystemMenu
GetWindowPlacement
CheckDlgButton
CheckRadioButton
SetCapture
ReleaseCapture
IsWindowEnabled
ValidateRect
SetWindowTextW
GetWindowTextW
ClientToScreen
InvertRect
GetClassNameW
LoadMenuW
GetMenuStringW
DestroyMenu
GetSubMenu
RemoveMenu
TrackPopupMenu
GetMenuItemInfoW
SetMenuItemInfoW
CopyRect
EnumDisplayMonitors
CallWindowProcW
GetUpdateRgn
ScrollWindow
IsZoomed
GetClassInfoW
GetNextDlgGroupItem
GetWindowTextA
DrawFocusRect
InflateRect
LoadBitmapW
KillTimer
RegisterClassW
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetActiveWindow
BlockInput
SetWindowLongPtrA
GetWindowLongPtrA
CreateWindowExA
UnregisterClassA
RegisterClassA
DefWindowProcA
UnregisterDeviceNotification
RegisterDeviceNotificationA
EnumWindows
GetForegroundWindow
CharNextA
SetCursorPos
GetCapture
CopyIcon
GetCaretPos
GetMonitorInfoW
MonitorFromPoint
GetComboBoxInfo
RegisterClipboardFormatW
GetClipboardData
GetMessageTime
HideCaret
SetMenu
SetKeyboardState
GetKeyboardState
WindowFromDC
EnableScrollBar
MapDialogRect
GetMenuStringA
GetKeyNameTextA
MapVirtualKeyW
ChildWindowFromPoint
IsClipboardFormatAvailable
SetMenuInfo
GetMenuInfo
LoadImageW
RedrawWindow
SetCaretPos
ShowCaret
DestroyCaret
CreateCaret
ShowCursor
GetDoubleClickTime
GetCursor
MapWindowPoints
DrawFrameControl
DrawEdge
ShowScrollBar
LoadAcceleratorsW
WindowFromPoint
DrawIconEx
DestroyIcon
ModifyMenuA
AppendMenuA
FrameRect
DrawIcon
CharLowerW
CharUpperW
SetWindowTextA
InsertMenuItemW
CreateMenu
IsCharAlphaW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetWindowThreadProcessId
AttachThreadInput
GetScrollInfo
SetScrollInfo
SetClassLongPtrW
GetClassLongPtrW
SetWindowLongW
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetDesktopWindow
SetForegroundWindow
DeleteMenu
EqualRect
GetUpdateRect
IsIconic
FindWindowW
SystemParametersInfoW
wsprintfW
InsertMenuW
GetMenuItemID
DrawMenuBar
SetTimer
GetProcessWindowStation
GetUserObjectInformationW

gdi32

GetWindowExtEx
GetViewportOrgEx
GetViewportExtEx
GetTextAlign
DeleteMetaFile
GetGlyphOutlineA
GetFontUnicodeRanges
GetTextCharsetInfo
GetFontData
GetMapMode
Polygon
SetRectRgn
PaintRgn
CreatePolyPolygonRgn
StretchBlt
CreateBrushIndirect
SaveDC
RestoreDC
GetNearestColor
SetViewportOrgEx
LPtoDP
SetViewportExtEx
GetBkColor
GetGlyphOutlineW
GetClipBox
SetAbortProc
CreateRectRgnIndirect
CreateBitmap
CreatePolygonRgn
FillRgn
CreateSolidBrush
TextOutA
SetPixel
Rectangle
SetROP2
GetClipRgn
CreateRectRgn
CreatePen
CombineRgn
AbortDoc
CreateICW
CreateDCW
GetWindowOrgEx
LineTo
GetTextExtentPoint32A
GetKerningPairsW
GetTextFaceW
GetTextMetricsW
TranslateCharsetInfo
GetTextCharset
GetOutlineTextMetricsW
GetCharABCWidthsFloatW
GetCharABCWidthsFloatA
GetCharWidth32W
EnumFontFamiliesExW
CreateFontIndirectW
GetDeviceCaps
CreateBitmapIndirect
ExtTextOutW
EndPage
StartPage
EndDoc
StartDocW
SetTextAlign
SetMapMode
SetBkMode
SelectClipRgn
GetGlyphIndicesW
GetTextColor
PatBlt
DeleteDC
TextOutW
SetTextColor
SetBkColor
SelectObject
GetTextExtentPoint32W
GetStockObject
CreateFontW
CreateCompatibleBitmap
BitBlt
GetObjectW
DeleteObject
CreateCompatibleDC
SetWindowExtEx
SetWindowOrgEx
PlayMetaFile
MoveToEx
SetMetaFileBitsEx
DPtoLP

msimg32

TransparentBlt

comdlg32

PageSetupDlgW
GetSaveFileNameA
GetOpenFileNameA
ChooseColorW
PrintDlgW
ChooseFontW

winspool.drv

EnumFormsW
ClosePrinter
DocumentPropertiesW
OpenPrinterW
EnumPrintersW
ord203

advapi32

AllocateAndInitializeSid
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
GetUserNameW
RegDeleteValueW
RegCloseKey
RegCreateKeyW
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
RegCreateKeyExA
SetNamedSecurityInfoW
SetNamedSecurityInfoA
SetEntriesInAclA
RegQueryValueExA
RegOpenKeyExA
FreeSid
CheckTokenMembership
RegCreateKeyExW

shell32

ShellExecuteW
SHGetKnownFolderPath
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteA
SHBrowseForFolderW
SHCreateItemFromParsingName
FindExecutableA
SHGetFolderPathA
SHCreateDirectoryExW
SHFileOperationW
DragAcceptFiles
SHGetSpecialFolderPathW

comctl32

_TrackMouseEvent
ImageList_Add
ord8
ord413
ord412
ord411
ord410

shlwapi

PathStripPathW
PathFileExistsW
PathFindExtensionW
PathRenameExtensionW
ord219
PathStripToRootW
PathGetDriveNumberW
PathFindFileNameW
PathIsDirectoryW
PathSetDlgItemPathW
PathRemoveExtensionW

ole32

CoInitializeEx
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitialize
PropVariantClear

oleaut32

SysFreeString

wininet

InternetOpenW
InternetConnectW
InternetSetFilePointer
InternetWriteFile
InternetCrackUrlW
HttpQueryInfoA
InternetSetOptionW
FtpOpenFileW
HttpOpenRequestW
HttpSendRequestExW
HttpEndRequestW
HttpQueryInfoW
HttpSendRequestA
InternetReadFile
InternetOpenA
InternetCloseHandle
InternetQueryOptionW
InternetConnectA
HttpOpenRequestA

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

dbghelp

SymInitialize
SymFromAddr
SymGetModuleInfo64

vcruntime140

__std_exception_copy
__intrinsic_setjmp
__std_exception_destroy
__std_type_info_destroy_list
__current_exception_context
__current_exception
__C_specific_handler
longjmp
strrchr
__RTtypeid
_CxxThrowException
__std_type_info_compare
_purecall
__RTDynamicCast
memcpy
memmove
memset
strstr
__std_type_info_name
memcmp
memchr
strchr
wcsstr
wcschr
__std_terminate
wcsrchr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

strerror
abort
_initialize_onexit_table
_initialize_narrow_environment
_controlfp_s
_configure_narrow_argv
_seh_filter_dll
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_configure_wide_argv
_set_app_type
_seh_filter_exe
_invalid_parameter_noinfo
_errno
_endthread
_beginthread
_wassert
terminate
_endthreadex
_beginthreadex
exit

api-ms-win-crt-heap-l1-1-0

malloc
free
_recalloc
_callnewh
_set_new_mode
realloc
calloc

api-ms-win-crt-string-l1-1-0

strtok_s
_wcsnicmp
strncat_s
wcsncat_s
strtok
strpbrk
strcmp
strnlen
strncpy
isspace
wcstok_s
strcspn
wcscoll
iswdigit
_stricmp
islower
isdigit
strcat_s
isalpha
toupper
strncat
iswpunct
strncpy_s
strcpy_s
strncmp
isalnum
ispunct
wcsncmp
tolower
wcscat_s
wcscpy_s
isxdigit
wcsncpy
wcsncpy_s
_wcsicmp
_strdup
iswalnum
iswalpha
iswlower
iswprint
iswspace
iswupper
towlower
towupper

api-ms-win-crt-filesystem-l1-1-0

_makepath_s
_splitpath_s
_fstat64i32
_wsplitpath_s
rename
_unlink
_stat64i32
_chmod
_mkdir
_rmdir
_wmakepath_s
_lock_file
_unlock_file
remove

api-ms-win-crt-stdio-l1-1-0

setvbuf
_fseeki64
__p__commode
fputc
fgetc
_get_stream_buffer_pointers
fclose
fgetpos
fgets
_fileno
fread
fsetpos
fseek
ftell
_lseeki64
_wopen
fwrite
_write
_read
_close
_open
fflush
__stdio_common_vsprintf
__acrt_iob_func
__stdio_common_vswprintf
__stdio_common_vsscanf
_wfopen
__stdio_common_vswscanf
ferror
ungetc
_chsize
__stdio_common_vfwprintf_s
_wfopen_s
tmpnam
__stdio_common_vfwprintf
__stdio_common_vswprintf_s
fopen
feof
clearerr
__stdio_common_vsnwprintf_s
_set_fmode
fopen_s
__stdio_common_vfprintf
__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s

api-ms-win-crt-time-l1-1-0

_get_tzname
_gmtime64_s
_localtime64_s
_mktime64
_tzset
strftime
wcsftime
_time64
_ftime64_s
_ctime64_s
_localtime64

api-ms-win-crt-locale-l1-1-0

setlocale
localeconv
_configthreadlocale
___lc_codepage_func
_setmbcp
_getmbcp

api-ms-win-crt-convert-l1-1-0

wcstol
wcstof
strtoul
_wtoi
atof
wcstombs
strtod
_atoi64
_wtof
strtol
atoi
wcstoul
atol
_wtol
_fcvt_s
_ltoa_s

api-ms-win-crt-utility-l1-1-0

rand
srand
qsort

api-ms-win-crt-math-l1-1-0

log10f
__setusermatherr
fmod
cosf
log2f
atan2f
ceilf
exp2
roundf
tanh
sinh
cosh
round
_hypot
powf
asin
acos
atan
log
exp
tan
sin
pow
fmodf
atanf
cos
modf
sqrt
log10
floor
ceil
_isnan
ldexp
_hypotf
sinf
_dsign
sqrtf

Exports

Exports

?MmeMidiInCallBack@@YAXPEAUHMIDIIN__@@I_K11@Z
?OnRelease@ILogAnalyticsMonitor@EQATECAnalytics@@UEAAXXZ
?OnRelease@IStorage@EQATECAnalytics@@UEAAXXZ
AdjustCurrentToolMenus
ExitCurrentTool
FX_AlertMessage
FX_AlertMessage_UTF16
FX_AnalyzeChord
FX_AutoNumberedName_UTF16
FX_AutoRehearsalInsert
FX_AutoRehearsalInsert_UTF16
FX_CancelFinaleEdit
FX_CheckFin2012Accidentals
FX_CloseCurrentDocumentWindow
FX_CloseEnigmaDocument
FX_CopyCutMusic
FX_CopyMidi
FX_CountParts
FX_CreateEData
FX_CreateGraphic
FX_CreatePercMapRefData
FX_CreatePercMapRefData_UTF16
FX_DeleteEData
FX_DeleteEXENTRY
FX_DeleteMeasures
FX_DeleteMidiExpressions
FX_DeleteTempoRecords
FX_Dialog
FX_DisposeFinClipFileToken
FX_DoesFontExistOnSystem
FX_ElapsedTime
FX_EnableDlgItem
FX_EndDialog
FX_EndFinaleEdit
FX_EndMassEdit
FX_ExecuteMenuItem
FX_ExportSvgFromShape
FX_FontDialog
FX_FontDialog_UTF16
FX_FontNameToNum
FX_FontNameToNum_UTF16
FX_FontNumToName
FX_FontNumToName_UTF16
FX_FreeEntryMetrics
FX_FreeMeasureMetrics
FX_FreeTGF
FX_GenerateParts
FX_GetCurERegions
FX_GetCurrentEnigmaDocument
FX_GetCurrentPartID
FX_GetCurrentWindow
FX_GetCurrentWindowInfo
FX_GetDlgCntl
FX_GetDlgCntlVal
FX_GetDlgCntlVal_UTF16
FX_GetDlgItemUser
FX_GetDlgItemVal
FX_GetDlgString
FX_GetDlgString_UTF16
FX_GetDocumentPath
FX_GetEntryMetrics
FX_GetEntryMetrics2009a
FX_GetEntryMetrics2014
FX_GetFinalePath
FX_GetGraphicPath
FX_GetKeySig
FX_GetMaxLayers
FX_GetMeasureDuration
FX_GetMeasureMetrics
FX_GetMeasureNumberString
FX_GetNextEnigmaDocument
FX_GetNextPartID
FX_GetPartName
FX_GetPartName_UTF16
FX_GetPercMapRefData
FX_GetPercMapRefData_UTF16
FX_GetPlaybackSystem
FX_GetPrintSettings
FX_GetShowLayer
FX_GetSyllable
FX_GetSyllable_UTF16
FX_GetTGFDuration
FX_GetTGFEntryMetrics
FX_GetTGFEntryMetrics2009a
FX_GetTGFEntryMetrics2014
FX_GetTextEncoding
FX_GetTextMetrics_UTF16
FX_GetWindowCount
FX_GetWindowInfoList
FX_InsertEXENTRY
FX_InsertMeasures
FX_InsertMergeMusic
FX_InstToSlot
FX_IsDemo
FX_IsEnigmaDocumentDirty
FX_IsSMuFLFont
FX_KillTimer
FX_ListenToMidi
FX_LoadEData
FX_LoadTGF
FX_MassEditProgress
FX_MidiNoteToString
FX_MidiNoteToString_UTF16
FX_NewEnigmaDocument
FX_NextEData
FX_NoteMover
FX_NoteToMidi
FX_OpenDocument
FX_OpenDocument26_1
FX_OpenHelpItem
FX_OpenHelpItem_UTF16
FX_ParseCaretCommand
FX_ParseCaretCommand_UTF16
FX_PasteMidi
FX_Playback
FX_PreviousEData
FX_PrintCurrentDocument
FX_PrintDocument
FX_PrintDocuments
FX_ProcessMidiData
FX_ProcessMidiDataNoSplit
FX_QueryAriaSlot
FX_QueryAriaSlot_2010
FX_QueryAriaSlot_2010_UTF16
FX_QueryK2Slot
FX_QueryK2Slot_UTF16
FX_RebarRegion
FX_RebeamRegion
FX_RedrawMusic
FX_ReduceEntries
FX_SaveDocument
FX_SaveEData
FX_SaveTGF
FX_ScrollTo
FX_SelectExpressionDialog
FX_SelectFileToOpen
FX_SelectFileToSave
FX_SelectFolder
FX_SelectNote
FX_SelectionDialog
FX_SetCurERegion
FX_SetCurrentEnigmaDocument
FX_SetCurrentPartID
FX_SetCurrentPartInView
FX_SetCurrentWindow
FX_SetDefaultMusicFont
FX_SetDlgCntlVal
FX_SetDlgCntlVal_UTF16
FX_SetDlgFocus
FX_SetDlgItemUser
FX_SetDlgItemVal
FX_SetDlgString
FX_SetDlgString_UTF16
FX_SetEnigmaDocumentDirty
FX_SetPlaybackSystem
FX_SetTimer
FX_ShowHideDlgItem
FX_SlotToInst
FX_StartFinaleEdit
FX_StartFinaleEdit_UTF16
FX_StartMassEdit
FX_StringToMidiNote
FX_StringToMidiNote_UTF16
FX_SyllableInfo
FX_SyllableInfo_UTF16
FX_SymbolDialog
FX_SymbolDialog_UTF32
FX_UpdateLayout
InitCurrentTool

Sections

.text
Size: - Virtual size: 16.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 776KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 10.7MB - Virtual size: 10.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.0MB - Virtual size: 14.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

70c40e434cd9063a3250aecbc9650e38

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

winmm

msacm32

gdiplus

uxtheme

iphlpapi

pxcview

usp10

winsparkle

dwrite

crashrpt1402

ut64

icuuc53

eqatec.analytics.monitor.win32_vc100-x64

libxml2

msvcp140

mfc140u

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

wininet

version

dbghelp

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: - Virtual size: 16.3MB

.rdata Size: - Virtual size: 3.3MB

.data Size: - Virtual size: 2.2MB

.pdata Size: - Virtual size: 776KB

.vmp0 Size: - Virtual size: 1.3MB

.vmp1 Size: 10.7MB - Virtual size: 10.7MB

.rsrc Size: 2.0MB - Virtual size: 14.3MB

.text
Size: - Virtual size: 16.3MB

.rdata
Size: - Virtual size: 3.3MB

.data
Size: - Virtual size: 2.2MB

.pdata
Size: - Virtual size: 776KB

.vmp0
Size: - Virtual size: 1.3MB

.vmp1
Size: 10.7MB - Virtual size: 10.7MB

.rsrc
Size: 2.0MB - Virtual size: 14.3MB