Static task
static1
Behavioral task
behavioral1
Sample
Final Draft.exe
Resource
win11-20231222-en
windows11-21h2-x64
General
-
Target
Final Draft.exe
-
Size
45.2MB
-
MD5
99bde827b6d430c154239f213e9791cc
-
SHA1
c24da1357c0f89004096523cd414b7eb3f337016
-
SHA256
d298b94adf13cbf4e17e5a2abf7b2669dd8c08614505224d0958f2bf59a4a9a1
-
SHA512
8a02d1ce269318caeed276b2238e2db2eb3a45329479322572eca6a733081f78e0bc8dbfb1685967ac9d840cdea3c5e4547cf463ff214a8e3f63ae83f337d0a3
-
SSDEEP
196608:znZYWJwcmfVxAePH1krSLnSMdC0xMwFLOyomFHKnP:TZYBvfV6w/TdC0bF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Final Draft.exe
Files
-
Final Draft.exe.exe windows:6 windows x86 arch:x86
d43f9b15096b387870d28941a4d47fa2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
api-ms-win-core-winrt-string-l1-1-0
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateStringReference
WindowsStringHasEmbeddedNull
WindowsCreateString
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
RoRevokeActivationFactories
RoRegisterActivationFactories
RoActivateInstance
api-ms-win-core-winrt-error-l1-1-0
RoOriginateErrorW
RoOriginateError
icuin58
?getMatchCallback@RegexMatcher@icu_58@@UAEXAAP6ACPBXH@ZAAPBXAAW4UErrorCode@@@Z
?getInput@RegexMatcher@icu_58@@UBEPAUUText@@PAU3@AAW4UErrorCode@@@Z
?getFindProgressCallback@RegexMatcher@icu_58@@UAEXAAP6ACPBX_J@ZAAPBXAAW4UErrorCode@@@Z
?getDynamicClassID@RegexMatcher@icu_58@@UBEPAXXZ
?find@RegexMatcher@icu_58@@UAEC_JAAW4UErrorCode@@@Z
?find@RegexMatcher@icu_58@@UAECXZ
?find@RegexMatcher@icu_58@@UAECAAW4UErrorCode@@@Z
?end@RegexMatcher@icu_58@@UBEHHAAW4UErrorCode@@@Z
?end@RegexMatcher@icu_58@@UBEHAAW4UErrorCode@@@Z
?end64@RegexMatcher@icu_58@@UBE_JHAAW4UErrorCode@@@Z
?end64@RegexMatcher@icu_58@@UBE_JAAW4UErrorCode@@@Z
?appendTail@RegexMatcher@icu_58@@UAEPAUUText@@PAU3@AAW4UErrorCode@@@Z
?appendTail@RegexMatcher@icu_58@@UAEAAVUnicodeString@2@AAV32@@Z
?appendReplacement@RegexMatcher@icu_58@@UAEAAV12@PAUUText@@0AAW4UErrorCode@@@Z
?appendReplacement@RegexMatcher@icu_58@@UAEAAV12@AAVUnicodeString@2@ABV32@AAW4UErrorCode@@@Z
?getStackLimit@RegexMatcher@icu_58@@UBEHXZ
?getTimeLimit@RegexMatcher@icu_58@@UBEHXZ
?group@RegexMatcher@icu_58@@UBE?AVUnicodeString@2@AAW4UErrorCode@@@Z
?group@RegexMatcher@icu_58@@UBE?AVUnicodeString@2@HAAW4UErrorCode@@@Z
?group@RegexMatcher@icu_58@@UBEPAUUText@@HPAU3@AA_JAAW4UErrorCode@@@Z
?group@RegexMatcher@icu_58@@UBEPAUUText@@PAU3@AA_JAAW4UErrorCode@@@Z
?groupCount@RegexMatcher@icu_58@@UBEHXZ
?hasAnchoringBounds@RegexMatcher@icu_58@@UBECXZ
?hasTransparentBounds@RegexMatcher@icu_58@@UBECXZ
?hitEnd@RegexMatcher@icu_58@@UBECXZ
?input@RegexMatcher@icu_58@@UBEABVUnicodeString@2@XZ
?inputText@RegexMatcher@icu_58@@UBEPAUUText@@XZ
?lookingAt@RegexMatcher@icu_58@@UAECAAW4UErrorCode@@@Z
?lookingAt@RegexMatcher@icu_58@@UAEC_JAAW4UErrorCode@@@Z
?matches@RegexMatcher@icu_58@@UAECAAW4UErrorCode@@@Z
?createInstance@Transliterator@icu_58@@SAPAV12@ABVUnicodeString@2@W4UTransDirection@@AAW4UErrorCode@@@Z
?pattern@RegexMatcher@icu_58@@UBEABVRegexPattern@2@XZ
?refreshInputText@RegexMatcher@icu_58@@UAEAAV12@PAUUText@@AAW4UErrorCode@@@Z
?region@RegexMatcher@icu_58@@UAEAAV12@_J00AAW4UErrorCode@@@Z
?region@RegexMatcher@icu_58@@UAEAAV12@_J0AAW4UErrorCode@@@Z
?regionEnd64@RegexMatcher@icu_58@@UBE_JXZ
?regionEnd@RegexMatcher@icu_58@@UBEHXZ
?regionStart64@RegexMatcher@icu_58@@UBE_JXZ
?regionStart@RegexMatcher@icu_58@@UBEHXZ
?replaceAll@RegexMatcher@icu_58@@UAE?AVUnicodeString@2@ABV32@AAW4UErrorCode@@@Z
?replaceAll@RegexMatcher@icu_58@@UAEPAUUText@@PAU3@0AAW4UErrorCode@@@Z
?replaceFirst@RegexMatcher@icu_58@@UAE?AVUnicodeString@2@ABV32@AAW4UErrorCode@@@Z
?replaceFirst@RegexMatcher@icu_58@@UAEPAUUText@@PAU3@0AAW4UErrorCode@@@Z
?requireEnd@RegexMatcher@icu_58@@UBECXZ
ucsdet_getName_58
ucsdet_detectAll_58
?reset@RegexMatcher@icu_58@@UAEAAV12@ABVUnicodeString@2@@Z
?reset@RegexMatcher@icu_58@@UAEAAV12@PAUUText@@@Z
?reset@RegexMatcher@icu_58@@UAEAAV12@XZ
?reset@RegexMatcher@icu_58@@UAEAAV12@_JAAW4UErrorCode@@@Z
?setFindProgressCallback@RegexMatcher@icu_58@@UAEXP6ACPBX_J@Z0AAW4UErrorCode@@@Z
?setMatchCallback@RegexMatcher@icu_58@@UAEXP6ACPBXH@Z0AAW4UErrorCode@@@Z
?setStackLimit@RegexMatcher@icu_58@@UAEXHAAW4UErrorCode@@@Z
?setTimeLimit@RegexMatcher@icu_58@@UAEXHAAW4UErrorCode@@@Z
?split@RegexMatcher@icu_58@@UAEHABVUnicodeString@2@QAV32@HAAW4UErrorCode@@@Z
?split@RegexMatcher@icu_58@@UAEHPAUUText@@QAPAU3@HAAW4UErrorCode@@@Z
?start64@RegexMatcher@icu_58@@UBE_JAAW4UErrorCode@@@Z
?start64@RegexMatcher@icu_58@@UBE_JHAAW4UErrorCode@@@Z
?start@RegexMatcher@icu_58@@UBEHAAW4UErrorCode@@@Z
?start@RegexMatcher@icu_58@@UBEHHAAW4UErrorCode@@@Z
?useAnchoringBounds@RegexMatcher@icu_58@@UAEAAV12@C@Z
?useTransparentBounds@RegexMatcher@icu_58@@UAEAAV12@C@Z
ucsdet_setText_58
ucsdet_close_58
ucsdet_open_58
??1StringSearch@icu_58@@UAE@XZ
??0StringSearch@icu_58@@QAE@ABVUnicodeString@1@0ABVLocale@1@PAVBreakIterator@1@AAW4UErrorCode@@@Z
?matches@RegexMatcher@icu_58@@UAEC_JAAW4UErrorCode@@@Z
?first@SearchIterator@icu_58@@QAEHAAW4UErrorCode@@@Z
??0RegexMatcher@icu_58@@QAE@ABVUnicodeString@1@IAAW4UErrorCode@@@Z
??1RegexMatcher@icu_58@@UAE@XZ
icuuc58
?hasNext@UCharCharacterIterator@icu_58@@UAECXZ
ucnv_countAliases_58
ucnv_close_58
ucnv_open_58
ubrk_close_58
ubrk_open_58
??1Locale@icu_58@@UAE@XZ
??0Locale@icu_58@@QAE@PBD000@Z
?getUS@Locale@icu_58@@SAABV12@XZ
?doCompare@UnicodeString@icu_58@@ABECHHABV12@HH@Z
??0UnicodeString@icu_58@@QAE@PBDHPAUUConverter@@AAW4UErrorCode@@@Z
??0UnicodeString@icu_58@@QAE@PBDH0@Z
??0UnicodeString@icu_58@@QAE@PBD@Z
??0UnicodeString@icu_58@@QAE@PB_WH@Z
?releaseBuffer@UnicodeString@icu_58@@QAEXH@Z
?getBuffer@UnicodeString@icu_58@@QAEPA_WH@Z
?toTitle@UnicodeString@icu_58@@QAEAAV12@PAVBreakIterator@2@ABVLocale@2@@Z
?toTitle@UnicodeString@icu_58@@QAEAAV12@PAVBreakIterator@2@@Z
?toLower@UnicodeString@icu_58@@QAEAAV12@ABVLocale@2@@Z
?toLower@UnicodeString@icu_58@@QAEAAV12@XZ
?toUpper@UnicodeString@icu_58@@QAEAAV12@ABVLocale@2@@Z
?findAndReplace@UnicodeString@icu_58@@QAEAAV12@ABV12@0@Z
?setTo@UnicodeString@icu_58@@QAEAAV12@PB_WH@Z
?countChar32@UnicodeString@icu_58@@QBEHHH@Z
?extract@UnicodeString@icu_58@@QBEHHHPADIPBD@Z
u_strFromUTF8_58
u_strFromWCS_58
u_memset_58
u_ispunct_58
u_isspace_58
??0StringPiece@icu_58@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?getTerminatedBuffer@UnicodeString@icu_58@@QAEPB_WXZ
??0UnicodeString@icu_58@@QAE@$$QAV01@@Z
??1UnicodeString@icu_58@@UAE@XZ
?fromUTF8@UnicodeString@icu_58@@SA?AV12@VStringPiece@2@@Z
u_islower_58
u_isalpha_58
u_isalnum_58
u_tolower_58
u_toupper_58
?current@UCharCharacterIterator@icu_58@@UBE_WXZ
?next@UCharCharacterIterator@icu_58@@UAE_WXZ
??0StringCharacterIterator@icu_58@@QAE@ABVUnicodeString@1@@Z
??1StringCharacterIterator@icu_58@@UAE@XZ
??3UMemory@icu_58@@SAXPAX@Z
??1ByteSink@icu_58@@UAE@XZ
?toUTF8@UnicodeString@icu_58@@QBEXAAVByteSink@2@@Z
?Flush@ByteSink@icu_58@@UAEXXZ
?GetAppendBuffer@ByteSink@icu_58@@UAEPADHHPADHPAH@Z
??2UMemory@icu_58@@SAPAXI@Z
??0StringPiece@icu_58@@QAE@PBD@Z
?length@UnicodeString@icu_58@@QBEHXZ
?append@UnicodeString@icu_58@@QAEAAV12@H@Z
??0UnicodeString@icu_58@@QAE@XZ
?char32At@UnicodeString@icu_58@@QBEHH@Z
?toUpper@UnicodeString@icu_58@@QAEAAV12@XZ
??0UnicodeString@icu_58@@QAE@H@Z
??0UnicodeString@icu_58@@QAE@PB_W@Z
?doCaseCompare@UnicodeString@icu_58@@ABECHHABV12@HHI@Z
?doCharAt@UnicodeString@icu_58@@ABE_WH@Z
u_isprint_58
u_isWhitespace_58
?getChar32At@UnicodeString@icu_58@@MBEHH@Z
?getCharAt@UnicodeString@icu_58@@MBE_WH@Z
?getLength@UnicodeString@icu_58@@MBEHXZ
?clone@UnicodeString@icu_58@@UBEPAVReplaceable@2@XZ
?hasMetaData@UnicodeString@icu_58@@UBECXZ
?copy@UnicodeString@icu_58@@UAEXHHH@Z
?handleReplaceBetween@UnicodeString@icu_58@@UAEXHHABV12@@Z
?extractBetween@UnicodeString@icu_58@@UBEXHHAAV12@@Z
?getDynamicClassID@UnicodeString@icu_58@@UBEPAXXZ
??8UnicodeString@icu_58@@QBECABV01@@Z
?endsWith@UnicodeString@icu_58@@QBECABV12@@Z
?tempSubString@UnicodeString@icu_58@@QBE?AV12@HH@Z
??4UnicodeString@icu_58@@QAEAAV01@$$QAV01@@Z
?replace@UnicodeString@icu_58@@QAEAAV12@HHH@Z
?trim@UnicodeString@icu_58@@QAEAAV12@XZ
??0UnicodeString@icu_58@@QAE@ABV01@@Z
??0UnicodeString@icu_58@@QAE@ABV01@H@Z
??0UnicodeString@icu_58@@QAE@ABV01@HH@Z
?doReplace@UnicodeString@icu_58@@AAEAAV12@HHABV12@HH@Z
?doReplace@UnicodeString@icu_58@@AAEAAV12@HHPB_WHH@Z
?getArrayStart@UnicodeString@icu_58@@ABEPB_WXZ
u_isupper_58
u_isdigit_58
ucnv_getAliases_58
xpdftext
pdfGetWord
pdfGetWordText
pdfGetWordBox
pdfSetTextEncoding
pdfGetNumWords
pdfSetConfig
pdfLoadFileW
pdfLoadMem
pdfFree
pdfGetNumPages
pdfGetPageBoxXMax
pdfGetPageBoxYMax
pdfGetPageWidth
pdfFreeMemory
pdfSetTextSimpleLayoutMode
pdfSetDiscardDiagonalText
pdfSetTextPageBreaks
pdfConvertToTextString
pdfExtractTextFromRect
pdfBuildWordList
pdfBuildWordListFromRect2
userenv
GetProfilesDirectoryA
winsparkle
win_sparkle_check_update_with_ui
win_sparkle_cleanup
win_sparkle_set_appcast_url
win_sparkle_set_dsa_pub_pem
win_sparkle_set_automatic_check_for_updates
win_sparkle_check_update_without_ui
win_sparkle_init
win_sparkle_get_automatic_check_for_updates
winhttp
WinHttpOpenRequest
WinHttpOpen
WinHttpCloseHandle
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpSetStatusCallback
WinHttpQueryOption
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpConnect
wininet
InternetCanonicalizeUrlW
secur32
GetUserNameExW
winmm
PlaySoundW
dbghelp
SymInitialize
SymGetLineFromAddr64
SymCleanup
SymFromAddr
dhcpcsvc
DhcpRequestParams
ruisdk_5.6.0.x86
ruiFree
ruiSetLicenseKey
ruiTrackEventText
ruiTrackEvent
ruiTrackException
ruiStopSDK
ruiStartSDK
ruiSetCustomProperty
ruiSetLicenseData
ruiSetProductData
ruiSetReachOutOnAutoSync
ruiCreateConfig
ruiCreateInstance
ruiDestroyInstance
uiautomationcore
UiaRaiseAutomationEvent
UiaHostProviderFromHwnd
UiaReturnRawElementProvider
kernel32
TlsSetValue
OutputDebugStringA
InitializeSListHead
IsProcessorFeaturePresent
UnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
WaitForMultipleObjectsEx
OpenEventA
GetSystemInfo
GetLogicalProcessorInformation
QueryPerformanceFrequency
VirtualProtect
SystemTimeToFileTime
GetSystemTime
FlushConsoleInputBuffer
GlobalMemoryStatus
GetFileType
GetStdHandle
CreateIoCompletionPort
VerSetConditionMask
CreateWaitableTimerA
QueueUserAPC
TerminateThread
CreateEventW
GetQueuedCompletionStatus
VerifyVersionInfoA
WaitForSingleObjectEx
SetWaitableTimer
CreateSemaphoreA
SetThreadAffinityMask
SetProcessAffinityMask
GetProcessAffinityMask
GetSystemDirectoryA
OpenProcess
SetThreadContext
GetThreadContext
GetUserDefaultLCID
TlsGetValue
ResumeThread
SuspendThread
GetThreadPriority
SetThreadPriority
GetCurrentThread
WaitForMultipleObjects
VirtualQuery
ReleaseSemaphore
DuplicateHandle
WaitNamedPipeA
SleepEx
GetLastError
PostQueuedCompletionStatus
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
TlsAlloc
TlsFree
CreateEventA
CloseHandle
SetEvent
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
RaiseException
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
GetCurrentProcess
GetModuleFileNameW
GetPackageFamilyName
MulDiv
RtlCaptureStackBackTrace
SetUnhandledExceptionFilter
InitializeCriticalSectionEx
OutputDebugStringW
LocalAlloc
LocalSize
LocalFree
FormatMessageW
lstrlenW
GlobalLock
GlobalUnlock
FindClose
FindFirstFileW
FindNextFileW
GetWindowsDirectoryW
GetModuleHandleW
MultiByteToWideChar
GetCurrentThreadId
GetTimeFormatEx
GetDateFormatEx
EnumDateFormatsExEx
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
SetCurrentDirectoryW
LockResource
GlobalAlloc
GlobalSize
GlobalFree
WideCharToMultiByte
GetCommandLineW
ReleaseMutex
CreateMutexW
GlobalDeleteAtom
lstrcmpW
lstrcmpiW
GlobalAddAtomW
GetStringTypeExW
GetThreadLocale
FindResourceW
RegisterApplicationRestart
CreateDirectoryW
LoadResource
GetVersionExW
FreeLibrary
GetProcAddress
LoadLibraryW
GetUserDefaultUILanguage
lstrcpynW
GetLocaleInfoW
SetNamedPipeHandleState
GetDateFormatW
QueryPerformanceCounter
GetCurrentProcessId
GetFileAttributesW
GetTempFileNameW
lstrcpyW
CreateFileW
lstrcatW
GetCurrentDirectoryW
GetTempPathW
LCIDToLocaleName
CopyFileW
GetVersion
GetLocaleInfoEx
FreeResource
DeleteFileW
FlushFileBuffers
GetFileSize
ReadFile
SetEndOfFile
SetFilePointer
WriteFile
_llseek
GlobalReAlloc
GetACP
GetSystemDefaultLangID
GetConsoleOutputCP
_lopen
_lcreat
_lwrite
_hread
_hwrite
_lclose
WaitForSingleObject
CreateMutexA
Sleep
CreateThread
LoadLibraryExA
LoadLibraryA
GetTickCount
LoadLibraryExW
ExitThread
GetFileSizeEx
CreateFileA
SetHandleInformation
SetErrorMode
FormatMessageA
GetWindowsDirectoryA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetVersionExA
lstrlenA
GetLocalTime
GetTimeZoneInformation
GetModuleHandleA
GetEnvironmentVariableA
GetEnvironmentVariableW
DeviceIoControl
ResetEvent
FindFirstFileA
FindNextFileA
GetSystemWindowsDirectoryA
GetProcessTimes
VirtualAlloc
VirtualFree
GetDriveTypeA
GetVolumeInformationA
SetLastError
user32
SetClipboardData
CloseClipboard
SetMenuItemInfoW
GetMenuItemInfoW
CheckMenuItem
EnumChildWindows
CallWindowProcW
PostThreadMessageW
GetUpdateRect
ToUnicode
GetKeyboardState
OpenClipboard
AppendMenuW
EnableMenuItem
MapDialogRect
MessageBoxW
IsIconic
DefWindowProcW
DrawMenuBar
UnregisterClassW
InvertRect
ReleaseDC
WindowFromDC
SetRect
GetWindowDC
IsWindowEnabled
TranslateAcceleratorW
LoadAcceleratorsW
DeleteMenu
GetSystemMenu
RegisterWindowMessageW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenu
GetNextDlgTabItem
GetWindow
DrawFrameControl
InflateRect
wsprintfW
FindWindowW
SetFocus
GetIconInfo
LoadImageW
GetWindowThreadProcessId
SetForegroundWindow
GetForegroundWindow
ShowWindow
AttachThreadInput
SystemParametersInfoW
GetScrollInfo
GetAsyncKeyState
IsRectEmpty
GetClipboardData
EmptyClipboard
DrawEdge
DestroyMenu
LoadMenuW
OffsetRect
AnimateWindow
GetClassInfoW
RegisterClassW
ScrollDC
IsWindow
CopyRect
GetDoubleClickTime
GetWindowInfo
GetLastActivePopup
SetActiveWindow
GetDlgItem
MessageBeep
UpdateLayeredWindow
GetKeyboardLayout
KillTimer
SetTimer
MapWindowPoints
LoadBitmapW
SendMessageTimeoutW
BringWindowToTop
SetWindowPos
IsZoomed
ShowCaret
HideCaret
InsertMenuW
IsClipboardFormatAvailable
PostMessageW
CreatePopupMenu
IsChild
RegisterClipboardFormatW
LoadCursorW
GetParent
SetWindowLongW
GetWindowLongW
GetCapture
DragDetect
LockWindowUpdate
MonitorFromWindow
GetMonitorInfoW
EnumDisplayMonitors
InvalidateRgn
PtInRect
IntersectRect
WindowFromPoint
ScreenToClient
ClientToScreen
GetCursorPos
DestroyCursor
CreateCaret
SetCaretPos
FrameRect
SendMessageA
UnpackDDElParam
ReuseDDElParam
MoveWindow
SetCursor
EndDialog
SetDlgItemTextA
GetDlgItemTextA
GetDlgItemTextW
SetWindowTextA
GetWindowLongA
CreateDialogIndirectParamA
DialogBoxIndirectParamA
wsprintfA
UnregisterClassA
GetProcessWindowStation
GetUserObjectInformationW
CloseWindow
MessageBoxA
GetClientRect
EnableScrollBar
ShowScrollBar
SetWindowRgn
UpdateWindow
ReleaseCapture
SetCapture
GetKeyState
GetFocus
GetActiveWindow
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetLayeredWindowAttributes
LoadIconW
DrawIcon
GetSystemMetrics
FillRect
GetWindowRect
RedrawWindow
InvalidateRect
GetDC
EnableWindow
SendMessageW
EqualRect
TranslateMessage
DispatchMessageW
SetParent
CreateIconIndirect
DestroyIcon
DestroyWindow
PeekMessageW
DestroyCaret
GetSysColor
gdi32
GetWindowExtEx
SelectPalette
SetDIBitsToDevice
StretchDIBits
GetViewportExtEx
RectVisible
Rectangle
RealizePalette
UnrealizeObject
GetTextExtentPoint32W
SetStretchBltMode
ResetDCW
CreateDCW
CreatePolygonRgn
GetRegionData
GetBitmapBits
GetCurrentObject
CreateBitmap
CreateBrushIndirect
FillRgn
FrameRgn
GetROP2
GetBrushOrgEx
GetStretchBltMode
GetViewportOrgEx
GetWindowOrgEx
InvertRgn
PatBlt
SetGraphicsMode
SetPixelV
StretchBlt
GetBkColor
SetBrushOrgEx
EnumFontFamiliesW
Polyline
CreatePalette
StartDocW
EndDoc
StartPage
EndPage
GetMapMode
SetDCBrushColor
CopyMetaFileW
DeleteMetaFile
GetMetaFileBitsEx
PlayMetaFile
RestoreDC
SaveDC
SetMapMode
SetMetaFileBitsEx
PlayMetaFileRecord
EnumMetaFile
SetViewportExtEx
SetViewportOrgEx
SetWindowOrgEx
GetClipBox
GetTextCharset
GetFontLanguageInfo
LineTo
SelectClipRgn
SetBkColor
SetTextColor
SetTextJustification
MoveToEx
TextOutW
SetWindowExtEx
GetTextFaceW
GetTextExtentExPointW
SetBkMode
SetTextAlign
ExtTextOutW
GetDIBits
GetObjectA
RoundRect
CreatePen
GetTextMetricsW
CreateRectRgnIndirect
GetTextColor
CreateSolidBrush
CreateFontW
StrokeAndFillPath
EndPath
BeginPath
AngleArc
GetStockObject
Ellipse
GetFontUnicodeRanges
SetRectRgn
PtInRegion
CreateFontIndirectW
EnumFontFamiliesExW
DPtoLP
CreateCompatibleDC
DeleteDC
SelectObject
GetDIBColorTable
GetDeviceCaps
GetObjectW
BitBlt
CombineRgn
CreateCompatibleBitmap
CreateRectRgn
GetRgnBox
OffsetRgn
LPtoDP
DeleteObject
CreateDIBSection
SetDIBColorTable
AddFontResourceW
SetWorldTransform
RemoveFontResourceW
winspool.drv
OpenPrinterW
ClosePrinter
comdlg32
GetSaveFileNameW
GetOpenFileNameW
PrintDlgW
GetOpenFileNameA
advapi32
RegCloseKey
RegCreateKeyW
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
ReportEventA
RegisterEventSourceA
DeregisterEventSource
StartServiceA
QueryServiceStatus
OpenServiceA
OpenSCManagerA
CloseServiceHandle
RegQueryInfoKeyA
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
GetUserNameW
GetUserNameA
RegCreateKeyExA
RegOpenKeyExA
RegEnumValueA
RegDeleteValueA
RegQueryValueExW
RegEnumValueW
RegDeleteValueW
RegSetKeyValueW
shell32
SHCreateItemFromParsingName
DragQueryFileW
ShellExecuteW
DragAcceptFiles
CommandLineToArgvW
SHGetKnownFolderPath
ord680
ole32
CoRegisterClassObject
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoUninitialize
CoTaskMemAlloc
CoCreateInstance
CoInitialize
CoTaskMemFree
StringFromCLSID
CoReleaseServerProcess
CoAddRefServerProcess
CoResumeClassObjects
CoRevokeClassObject
oleaut32
SysStringByteLen
SafeArrayGetLBound
SafeArrayGetUBound
SysAllocStringLen
VariantInit
VariantClear
SafeArrayUnaccessData
SafeArrayAccessData
SysFreeString
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayDestroy
SysAllocString
SysAllocStringByteLen
CreateErrorInfo
SetErrorInfo
VariantChangeType
GetErrorInfo
VariantCopy
mfc140u
ord9753
ord2025
ord10654
ord10704
ord10803
ord11512
ord3091
ord13769
ord4695
ord4689
ord5491
ord5486
ord13829
ord5858
ord10538
ord8943
ord671
ord13623
ord1827
ord732
ord665
ord3210
ord1837
ord4440
ord5165
ord5164
ord4693
ord5489
ord13882
ord13881
ord6386
ord2042
ord14363
ord13883
ord1260
ord6659
ord4211
ord10651
ord10610
ord10536
ord14192
ord4980
ord1760
ord13183
ord4698
ord12588
ord1952
ord6270
ord6269
ord7243
ord13500
ord7245
ord683
ord5808
ord12625
ord13072
ord4726
ord13492
ord737
ord3211
ord1872
ord1874
ord1993
ord4714
ord1293
ord738
ord7271
ord735
ord13896
ord13840
ord14145
ord14144
ord7265
ord729
ord13895
ord13839
ord13629
ord4386
ord3245
ord8543
ord8602
ord1788
ord8529
ord13293
ord5419
ord6834
ord3257
ord4236
ord9135
ord8163
ord581
ord1206
ord594
ord4430
ord1213
ord14600
ord8719
ord8757
ord3605
ord2732
ord6894
ord7039
ord13947
ord6884
ord13043
ord2996
ord14364
ord5110
ord4466
ord6825
ord3246
ord3362
ord13901
ord1433
ord13608
ord14075
ord13524
ord4480
ord540
ord3182
ord5837
ord4884
ord3797
ord8171
ord6977
ord6795
ord13086
ord13085
ord4648
ord362
ord1068
ord3869
ord6788
ord365
ord4091
ord8066
ord4356
ord13786
ord8599
ord8225
ord8738
ord7175
ord6880
ord8464
ord6752
ord824
ord1886
ord12608
ord1355
ord13149
ord2257
ord4885
ord364
ord4143
ord8776
ord5390
ord7138
ord3643
ord13235
ord7992
ord4019
ord14181
ord558
ord3191
ord7692
ord12106
ord8400
ord3940
ord12180
ord1789
ord11797
ord5956
ord11802
ord3834
ord9304
ord7511
ord12859
ord5602
ord6189
ord3615
ord6345
ord2209
ord5399
ord6248
ord13224
ord13282
ord5434
ord4381
ord8476
ord13321
ord8352
ord8072
ord6554
ord6225
ord501
ord1143
ord4093
ord6316
ord13412
ord14530
ord11468
ord10142
ord10595
ord10499
ord10141
ord10264
ord11735
ord10531
ord9017
ord9120
ord9292
ord10994
ord5771
ord6740
ord3222
ord3353
ord1345
ord7604
ord12115
ord4323
ord1526
ord3816
ord6802
ord6101
ord6799
ord906
ord4106
ord3613
ord2542
ord6099
ord3425
ord2835
ord7898
ord6338
ord5678
ord13826
ord10542
ord5859
ord5708
ord5703
ord9555
ord6423
ord5240
ord8947
ord5462
ord10035
ord11260
ord11382
ord13739
ord6667
ord680
ord1267
ord13788
ord13187
ord9769
ord4213
ord3094
ord11513
ord9165
ord9163
ord8867
ord5711
ord7194
ord597
ord596
ord1215
ord13367
ord11975
ord9091
ord9535
ord3607
ord13135
ord3085
ord9745
ord8600
ord898
ord11463
ord13654
ord985
ord2029
ord814
ord6832
ord3256
ord3627
ord3644
ord6469
ord13924
ord12482
ord9919
ord10527
ord9581
ord3621
ord3903
ord14265
ord14263
ord3888
ord3856
ord5038
ord13226
ord2692
ord1794
ord4089
ord4140
ord4141
ord7907
ord5756
ord5688
ord14379
ord14372
ord4173
ord13973
ord14276
ord14289
ord9254
ord11001
ord6113
ord14328
ord14779
ord5221
ord3873
ord5816
ord6380
ord924
ord6102
ord3954
ord7487
ord7130
ord5533
ord4130
ord10150
ord4134
ord2303
ord909
ord4171
ord13469
ord7408
ord7926
ord3285
ord7638
ord5322
ord11905
ord13442
ord4046
ord780
ord758
ord8477
ord12768
ord2943
ord5225
ord4374
ord1306
ord763
ord1310
ord5301
ord5809
ord12626
ord13076
ord13078
ord14036
ord4027
ord4039
ord7311
ord759
ord1307
ord6723
ord789
ord1831
ord12769
ord1918
ord4614
ord10488
ord9248
ord3218
ord10029
ord1324
ord12085
ord6069
ord7815
ord11038
ord6902
ord6286
ord13809
ord8364
ord2747
ord1976
ord12548
ord7715
ord7706
ord5721
ord8113
ord3990
ord454
ord1110
ord3303
ord5402
ord2689
ord10850
ord10471
ord13584
ord8191
ord5692
ord14230
ord7878
ord14557
ord4418
ord9487
ord10275
ord12846
ord14385
ord6238
ord5468
ord5547
ord14399
ord4658
ord5478
ord6530
ord7492
ord5526
ord3693
ord3804
ord7810
ord10512
ord10747
ord5932
ord10730
ord11543
ord12752
ord984
ord1460
ord6851
ord5842
ord1464
ord7647
ord6122
ord6493
ord3146
ord13335
ord5172
ord10293
ord4220
ord8742
ord9127
ord4992
ord5007
ord4931
ord1713
ord5960
ord12144
ord4610
ord5037
ord1442
ord3684
ord6830
ord3254
ord3363
ord1692
ord1693
ord12763
ord2384
ord7684
ord2345
ord12219
ord12251
ord8217
ord12239
ord5918
ord3852
ord12037
ord1072
ord6541
ord477
ord1865
ord5601
ord6188
ord12535
ord11976
ord11977
ord12945
ord2904
ord6231
ord5091
ord4135
ord9397
ord10143
ord10146
ord1124
ord8462
ord13911
ord6349
ord14668
ord6350
ord14669
ord6348
ord14667
ord8000
ord12531
ord14466
ord1866
ord11982
ord11983
comctl32
ord17
ImageList_GetImageInfo
ImageList_Draw
ImageList_GetImageCount
ImageList_SetOverlayImage
ImageList_AddMasked
ImageList_SetBkColor
ImageList_SetImageCount
ImageList_Add
shlwapi
PathFindExtensionW
PathRemoveBackslashW
ord12
ws2_32
recv
select
send
setsockopt
socket
__WSAFDIsSet
htonl
getpeername
getsockname
WSASetLastError
ntohl
ioctlsocket
getsockopt
getnameinfo
inet_addr
freeaddrinfo
getaddrinfo
gethostname
gethostbyname
inet_ntoa
WSACleanup
WSAStartup
shutdown
connect
closesocket
WSARecv
listen
WSAGetLastError
WSASend
WSAIoctl
WSASocketW
accept
bind
msvcp140
?__ExceptionPtrDestroy@@YAXPAX@Z
??0facet@locale@std@@IAE@I@Z
?c_str@?$_Yarn@D@std@@QBEPBDXZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??1_Locinfo@std@@QAE@XZ
?flags@ios_base@std@@QAEHH@Z
??0_Locinfo@std@@QAE@PBD@Z
_Strxfrm
_Strcoll
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z
??0task_continuation_context@Concurrency@@AAE@XZ
?precision@ios_base@std@@QAE_J_J@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
_Xtime_get_ticks
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z
?_XGetLastError@std@@YAXXZ
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
_Cnd_unregister_at_thread_exit
_Cnd_register_at_thread_exit
??1facet@locale@std@@MAE@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?is@?$ctype@D@std@@QBE_NFD@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
?widen@?$ctype@D@std@@QBEDD@Z
?narrow@?$ctype@D@std@@QBEDDD@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Winerror_message@std@@YAKKPADK@Z
?_Winerror_map@std@@YAHH@Z
?exceptions@ios_base@std@@QAEXH@Z
_Cnd_broadcast
?__ExceptionPtrCreate@@YAXPAX@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Xinvalid_argument@std@@YAXPBD@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?toupper@?$ctype@D@std@@QBEDD@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
??Bid@locale@std@@QAEIXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Gettrue@_Locinfo@std@@QBEPBDXZ
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
??0id@locale@std@@QAE@I@Z
?_Getcat@facet@locale@std@@SAIPAPBV123@PBV23@@Z
?_Xbad_alloc@std@@YAXXZ
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?classic@locale@std@@SAABV12@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@PBD3@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?id@?$numpunct@D@std@@2V0locale@2@A
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?eof@ios_base@std@@QBE_NXZ
?widen@?$ctype@D@std@@QBEPBDPBD0PAD@Z
?unsetf@ios_base@std@@QAEXH@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setf@ios_base@std@@QAEHHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
_Query_perf_counter
_Query_perf_frequency
_Mtx_current_owns
_Cnd_timedwait
_Cnd_signal
?_Throw_Cpp_error@std@@YAXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
_Mtx_trylock
_Thrd_start
_Thrd_detach
_Mtx_init
_Mtx_destroy
_Cnd_init
_Cnd_destroy
_Cnd_do_broadcast_at_thread_exit
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
_Thrd_id
?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?fail@ios_base@std@@QBE_NXZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0codecvt_base@std@@QAE@I@Z
??1codecvt_base@std@@UAE@XZ
?do_encoding@codecvt_base@std@@MBEHXZ
?do_max_length@codecvt_base@std@@MBEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?rdstate@ios_base@std@@QBEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?uncaught_exception@std@@YA_NXZ
?_Xbad_function_call@std@@YAXXZ
?_BADOFF@std@@3_JB
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
_Cnd_wait
_Cnd_destroy_in_situ
_Cnd_init_in_situ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
?_Syserror_map@std@@YAPBDH@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?_Xlength_error@std@@YAXPBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??Bios_base@std@@QBE_NXZ
?_Xout_of_range@std@@YAXPBD@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
api-ms-win-shcore-scaling-l1-1-1
GetScaleFactorForMonitor
dwrite
DWriteCreateFactory
vcruntime140
__CxxRegisterExceptionObject
__CxxDetectRethrow
__CxxUnregisterExceptionObject
__FrameUnwindFilter
__std_type_info_destroy_list
_except_handler4_common
__vcrt_InitializeCriticalSectionEx
memcmp
strrchr
wcsstr
strstr
longjmp
_setjmp3
wcsrchr
__CxxExceptionFilter
__std_type_info_name
__RTtypeid
__std_type_info_compare
memchr
__std_exception_destroy
__std_exception_copy
__RTDynamicCast
_purecall
memset
strchr
memcpy
__CxxFrameHandler3
_CxxThrowException
memmove
__std_terminate
__CxxQueryExceptionSize
wcschr
api-ms-win-crt-runtime-l1-1-0
exit
strerror
_endthreadex
_seh_filter_exe
abort
_set_app_type
_get_errno
_set_errno
__p___argc
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
terminate
_getpid
_resetstkoflw
_errno
_c_exit
_register_thread_local_exe_atexit_callback
_seh_filter_dll
perror
raise
_endthread
_beginthread
signal
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
__sys_errlist
__sys_nerr
_invalid_parameter_noinfo
_controlfp_s
_beginthreadex
_invalid_parameter_noinfo_noreturn
_exit
_cexit
_wassert
api-ms-win-crt-string-l1-1-0
isxdigit
strcspn
_strnicmp
strlen
wcsncmp
isgraph
strncpy
towupper
towlower
strncat_s
isupper
strncmp
strspn
strcmp
iswctype
iscntrl
strcpy
isprint
_wcsnicmp
strcat_s
wcscspn
strtok_s
_strdup
wcscat_s
wcscpy_s
wcsncat_s
wcsncpy_s
_wcsicmp
iswpunct
isalnum
iswspace
strcpy_s
strncpy_s
islower
isdigit
isspace
tolower
ispunct
_stricmp
wcstok_s
wcspbrk
strtok
isalpha
toupper
strcat
strpbrk
api-ms-win-crt-stdio-l1-1-0
clearerr
_get_stream_buffer_pointers
fgetc
fgetpos
freopen
_wfopen
_wfreopen
_close
_wopen
getchar
fputc
fsetpos
_fseeki64
fwrite
setvbuf
ungetc
__acrt_iob_func
fclose
fread
ferror
fflush
fgets
__stdio_common_vsprintf_s
fopen
fseek
fopen_s
ftell
__stdio_common_vfprintf
__stdio_common_vfwprintf
__stdio_common_vfwprintf_s
__stdio_common_vfwprintf_p
__stdio_common_vswprintf_p
__stdio_common_vsprintf
__stdio_common_vsscanf
_open
__stdio_common_vswprintf
__stdio_common_vswprintf_s
_getcwd
__p__commode
__stdio_common_vsnwprintf_s
_set_fmode
fputs
_setmode
_fileno
tmpnam
__stdio_common_vfprintf_s
__stdio_common_vfprintf_p
feof
__stdio_common_vsprintf_p
__stdio_common_vfwscanf
__stdio_common_vswscanf
__stdio_common_vsnprintf_s
__stdio_common_vfscanf
api-ms-win-crt-heap-l1-1-0
realloc
_set_new_mode
_recalloc
malloc
free
calloc
api-ms-win-crt-convert-l1-1-0
_wtoi
_itow
strtod
strtoul
_ultow_s
atof
wcstombs_s
mbstowcs_s
_ltow_s
_strtoui64
atoi
_strtoi64
strtol
api-ms-win-crt-math-l1-1-0
modf
_except1
_libm_sse2_cos_precise
floor
round
_libm_sse2_sqrt_precise
lroundf
ceil
_libm_sse2_tan_precise
_libm_sse2_pow_precise
_libm_sse2_sin_precise
lroundl
__setusermatherr
_CIfmod
_libm_sse2_acos_precise
_libm_sse2_atan_precise
roundf
truncf
lround
api-ms-win-crt-time-l1-1-0
asctime
_mktime64
strftime
_time64
_localtime64
_difftime64
_localtime64_s
_gmtime64
asctime_s
_gmtime64_s
wcsftime
__timezone
clock
api-ms-win-crt-filesystem-l1-1-0
_splitpath_s
_fullpath
_stat64i32
_wrename
_wunlink
_waccess
rename
remove
_wstat64i32
_wremove
_findclose
_unlock_file
_wsplitpath
_lock_file
_findfirst64i32
_findnext64i32
_access
_unlink
api-ms-win-crt-locale-l1-1-0
setlocale
localeconv
_configthreadlocale
api-ms-win-crt-utility-l1-1-0
srand
rand_s
ldiv
qsort
rand
bsearch
api-ms-win-crt-environment-l1-1-0
getenv
_dupenv_s
_wgetenv_s
_putenv
api-ms-win-crt-conio-l1-1-0
_getch
xerces-c_3_1
?fgCharCharsTable1_0@XMLChar1_0@xercesc_3_1@@0PAEA
?setDoNamespaces@AbstractDOMParser@xercesc_3_1@@QAEX_N@Z
?getErrorCount@AbstractDOMParser@xercesc_3_1@@QBEKXZ
?adoptDocument@AbstractDOMParser@xercesc_3_1@@QAEPAVDOMDocument@2@XZ
??1MemBufInputSource@xercesc_3_1@@UAE@XZ
??0MemBufInputSource@xercesc_3_1@@QAE@QBEKQBD_NQAVMemoryManager@1@@Z
?getRawBuffer@MemBufFormatTarget@xercesc_3_1@@QBEPBEXZ
??1MemBufFormatTarget@xercesc_3_1@@UAE@XZ
?setSystemId@InputSource@xercesc_3_1@@UAEXQB_W@Z
??1XMLFormatTarget@xercesc_3_1@@UAE@XZ
??1TranscodeFromStr@xercesc_3_1@@QAE@XZ
??0TranscodeFromStr@xercesc_3_1@@QAE@PBEKPBDPAVMemoryManager@1@@Z
?getDOMImplementation@DOMImplementationRegistry@xercesc_3_1@@SAPAVDOMImplementation@2@PB_W@Z
?transcode@XMLString@xercesc_3_1@@SA_NQBDQA_WKQAVMemoryManager@2@@Z
?transcode@XMLString@xercesc_3_1@@SAPADQB_WQAVMemoryManager@2@@Z
?compareString@XMLString@xercesc_3_1@@SAHQB_W0@Z
?Terminate@XMLPlatformUtils@xercesc_3_1@@SAXXZ
?Initialize@XMLPlatformUtils@xercesc_3_1@@SAXQBD0QAVPanicHandler@2@QAVMemoryManager@2@@Z
??3XMemory@xercesc_3_1@@SAXPAX@Z
?setPublicId@InputSource@xercesc_3_1@@UAEXQB_W@Z
?setIssueFatalErrorIfNotFound@InputSource@xercesc_3_1@@UAEX_N@Z
?setEncoding@InputSource@xercesc_3_1@@UAEXQB_W@Z
?makeStream@MemBufInputSource@xercesc_3_1@@UBEPAVBinInputStream@2@XZ
?getSystemId@InputSource@xercesc_3_1@@UBEPB_WXZ
?getPublicId@InputSource@xercesc_3_1@@UBEPB_WXZ
?getIssueFatalErrorIfNotFound@InputSource@xercesc_3_1@@UBE_NXZ
?getEncoding@InputSource@xercesc_3_1@@UBEPB_WXZ
?getLineNumber@SAXParseException@xercesc_3_1@@QBE_KXZ
?getColumnNumber@SAXParseException@xercesc_3_1@@QBE_KXZ
?release@XMLString@xercesc_3_1@@SAXPAPA_WQAVMemoryManager@2@@Z
?transcode@XMLString@xercesc_3_1@@SAPA_WQBDQAVMemoryManager@2@@Z
??2XMemory@xercesc_3_1@@SAPAXI@Z
??1DOMErrorHandler@xercesc_3_1@@UAE@XZ
?fgMemoryManager@XMLPlatformUtils@xercesc_3_1@@2PAVMemoryManager@2@A
?fgXercescDefaultLocale@XMLUni@xercesc_3_1@@2QBDB
?fgDOMWRTFormatPrettyPrint@XMLUni@xercesc_3_1@@2QB_WB
?fgDOMErrorHandler@XMLUni@xercesc_3_1@@2QB_WB
?flush@XMLFormatTarget@xercesc_3_1@@UAEXXZ
??1EntityResolver@xercesc_3_1@@UAE@XZ
??1ErrorHandler@xercesc_3_1@@UAE@XZ
?setEntityResolver@XercesDOMParser@xercesc_3_1@@QAEXQAVEntityResolver@2@@Z
?setErrorHandler@XercesDOMParser@xercesc_3_1@@QAEXQAVErrorHandler@2@@Z
??1XercesDOMParser@xercesc_3_1@@UAE@XZ
??0XercesDOMParser@xercesc_3_1@@QAE@QAVXMLValidator@1@QAVMemoryManager@1@QAVXMLGrammarPool@1@@Z
?parse@AbstractDOMParser@xercesc_3_1@@QAEXABVInputSource@2@@Z
?setLoadExternalDTD@AbstractDOMParser@xercesc_3_1@@QAEX_N@Z
?setExternalNoNamespaceSchemaLocation@AbstractDOMParser@xercesc_3_1@@QAEXQBD@Z
?setDoSchema@AbstractDOMParser@xercesc_3_1@@QAEX_N@Z
?setValidationSchemaFullChecking@AbstractDOMParser@xercesc_3_1@@QAEX_N@Z
??0MemBufFormatTarget@xercesc_3_1@@QAE@KQAVMemoryManager@1@@Z
?setValidationScheme@AbstractDOMParser@xercesc_3_1@@QAEXW4ValSchemes@12@@Z
netapi32
Netbios
mscoree
_CorExeMain
Sections
.text Size: - Virtual size: 12.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textidx Size: - Virtual size: 732KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 465KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shr Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fnp_dir Size: - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fnp_mar Size: - Virtual size: 1B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.giats Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.,Y" Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.oZ^ Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.5Zt Size: 5.4MB - Virtual size: 5.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 39.2MB - Virtual size: 39.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ