2ccd4664ebf1d2d773537f5e9b37b9db6a3cd2f1d333293e47a8cc493e260cb2

Sharing

Copy URL Twitter E-mail

General

Target

2ccd4664ebf1d2d773537f5e9b37b9db6a3cd2f1d333293e47a8cc493e260cb2
Size

11.7MB
MD5

08b0704ec9f60a7bd62f2c6c280de2fa
SHA1

246b8824a5eb8b7509ebae8df8d75ef94c8a0b56
SHA256

2ccd4664ebf1d2d773537f5e9b37b9db6a3cd2f1d333293e47a8cc493e260cb2
SHA512

231a28ad1aebfe8a90636e996001b02b0a2b96ab931249748c0ec8da2c8e36476c1598972e994a08e0344bbca08a67e9fa32c9cffb8f385f821f3c63e446b94f
SSDEEP

196608:LYFQRzaFf7FfXowqxd40ZEgPuUvA/sqMuzBQJ0tk3btQjslcctKHMA6VyJW:kKYFf75owngPHvEsoZtk3xwSPJH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ccd4664ebf1d2d773537f5e9b37b9db6a3cd2f1d333293e47a8cc493e260cb2

Files

2ccd4664ebf1d2d773537f5e9b37b9db6a3cd2f1d333293e47a8cc493e260cb2
.exe windows:6 windows x64 arch:x64

c289cdf8fa7ea181211669983ff40852

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ws2_32

setsockopt
shutdown
socket
select
recv
ntohs
WSAGetLastError
inet_addr
htons
getsockname
WSACleanup
WSAStartup
gethostname
gethostbyname
send
ioctlsocket
connect
closesocket
bind
__WSAFDIsSet
getsockopt
inet_ntoa

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

mpr

WNetGetUniversalNameA
WNetCloseEnum
WNetOpenEnumA
WNetEnumResourceA

gdiplus

GdipGetImageGraphicsContext
GdipDeletePath
GdipCreatePath
GdiplusStartup
GdipDrawImageRectRect
GdipFillPolygonI
GdipFillRectangleI
GdipDisposeImage
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipCloneBitmapAreaI
GdipCreateHBITMAPFromBitmap
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneImage
GdipFree
GdipCloneBrush
GdipDrawImageRectI
GdipCreateBitmapFromHBITMAP
GdipFlush
GdipCreateFromHDC
GdipAlloc
GdipDeleteGraphics
GdipSetInterpolationMode
GdipSetPixelOffsetMode
GdipAddPathBeziers
GdipCreateLineBrush
GdipCreatePen1
GdipDeletePen
GdipGetImagePixelFormat
GdipCreateHICONFromBitmap
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipBitmapGetPixel
GdipBitmapSetPixel
GdipDrawLineI
GdipDrawPath
GdipFillPath
GdipDrawImageI
GdipSaveImageToStream
GdipCreateBitmapFromFile
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipSetSmoothingMode

comctl32

ImageList_ReplaceIcon
ImageList_Remove
ImageList_GetImageCount
ImageList_Create
ImageList_Destroy
ImageList_DrawIndirect
ImageList_LoadImageA
ImageList_Merge
ord8
ord17
ImageList_Add
ord14
ImageList_GetIcon

cvole2

?HandleDocDeselected@CDocument@@QEAAJXZ
?InitFilterCollections@@YAHXZ
?new_CFrame@@YAPEAVCFrame@@PEAXPEAUCoreGlobalStruct@@PEAUCallbacks@@@Z
?BuildObjectVerbPopup@@YAXPEAX@Z
?GetBWRect@CFrame@@QEAAXPEAUtagRECT@@@Z
?SetFrameContext@CFrame@@QEAAXPEAX000@Z
?ResizeBorder@CFrame@@QEAAJPEAUtagRECT@@@Z
?InPlaceSetFocus@CFrame@@QEAAXXZ
?InPlaceActivateApp@CFrame@@QEAAXH@Z
?QueryEnableEditLinks@CDocument@@QEAAHXZ
?GetInPlaceSite@CFrame@@QEAAPEAVCSite@@XZ
?DragDrop@CDocument@@QEAAHPEAUCVDragData@@@Z
?CreateCoreDropTarget@@YAPEAXPEAX@Z
?Terminate@CFrame@@QEAAXXZ
?PasteSpecial@CDocument@@QEAAXXZ
?InsertObject@CDocument@@QEAAHXZ
?InsertObjectTypeAt@CDocument@@QEAAHPEAU_GUID@@PEAV?$_Rect@U?$_rect_LeftTop@N@@U?$CoordinateTraits@N@@UScreen@CoordinateSystemType@@@@H@Z
?EditLinks@CDocument@@QEAAHPEAX@Z
?SendAdvise@CDocument@@QEAAXI@Z
?IsLink@CDocument@@QEAAHXZ
?IsEmbedding@CDocument@@QEAAHXZ
?GetLogFile@@YAPEAU_iobuf@@XZ
?IsInPlaceContainer@CFrame@@QEAAHXZ
?getCurFilterData@@YAPEAUCVIOFilter@@XZ
?UpdateEmbeddingUI@CDocument@@QEAAXXZ
?IsInPlaceSiteActive@CDocument@@QEAAHXZ
?IsEmbeddingLaunch@CFrame@@QEAAEXZ
?Init@CDocument@@QEAAHPEAVCFrame@@PEAX@Z
?new_CDocument@@YAPEAVCDocument@@XZ
?AttachWindow@CDocument@@QEAAJPEAX@Z
?SetInMDICREATE@CDocument@@QEAAXH@Z
?GetInMDICREATE@CDocument@@QEAAHXZ
?DestroyCoreDropTarget@@YAHPEAX0@Z
?CreatingNewEmbedding@CFrame@@QEAAEXZ
?IsEmbeddedCVObjectOnClipboard@@YAHXZ
?MetaToEnhMeta@@YAPEAXPEAX@Z
?EnhMetaToDStream@@YAPEAVDHandStream@@PEAX@Z
?SetClipboardOwner@CDocument@@QEAAXE@Z
?SetClipboardWithEmbedding@@YAHH@Z
?IsClassFactoryRegistered@CFrame@@QEAAHXZ
?DispatchVerb@CDocument@@QEAAJK@Z
?Init@CFrame@@QEAAHH@Z
?InitEmbeddingServer@CFrame@@QEAAXXZ

winmm

timeGetTime
PlaySoundA

psapi

GetProcessMemoryInfo

dwrite

DWriteCreateFactory

acdidclient

?GetAcdIDInTouch@acdID@@YAPEAVIAcdIDInTouch@1@XZ
??0ClientOptions@acdID@@QEAA@XZ
?GetAcdIDClient@acdID@@YAPEAVIAcdIDClient@1@XZ
??0AppContext@acdID@@QEAA@XZ

kernel32

SetFileTime
InitializeCriticalSectionAndSpinCount
ResetEvent
WaitForSingleObjectEx
GetModuleHandleW
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
OutputDebugStringW
ExpandEnvironmentStringsA
SetLastError
CreateSemaphoreA
IsDBCSLeadByte
EnumSystemLocalesA
GetLocaleInfoW
GetVersion
SetUnhandledExceptionFilter
HeapValidate
GlobalMemoryStatus
DebugBreak
lstrcmpiA
_llseek
_lclose
_lcreat
GetFullPathNameA
lstrcatA
CreateFileMappingA
LocalFree
LocalAlloc
UnmapViewOfFile
MapViewOfFile
IsDBCSLeadByteEx
SystemTimeToFileTime
FileTimeToSystemTime
GetSystemTimeAsFileTime
lstrcmpA
VirtualFree
VirtualAlloc
OpenMutexA
CreateProcessA
GlobalMemoryStatusEx
GetCurrentProcess
GetVersionExA
OutputDebugStringA
GetUserDefaultLangID
GetCPInfoExW
GetOEMCP
GetACP
ResumeThread
SuspendThread
TerminateThread
CreateThread
GetSystemTime
lstrlenA
Sleep
GetLocalTime
GetDiskFreeSpaceA
GlobalSize
GlobalReAlloc
HeapSize
HeapReAlloc
HeapDestroy
QueryPerformanceFrequency
QueryPerformanceCounter
lstrcpyA
GetSystemDefaultLangID
MulDiv
GetFileTime
LoadLibraryA
GetCurrentDirectoryA
SetCurrentDirectoryA
MoveFileA
CopyFileA
GetProcessHeap
HeapFree
HeapAlloc
GetTempFileNameA
GetTempPathA
WriteFile
SetFilePointer
SetFileAttributesA
SetEndOfFile
RemoveDirectoryA
ReadFile
GetFileSize
GetFileAttributesA
FindNextFileA
FindFirstFileA
FindClose
DeleteFileA
CreateFileA
CreateDirectoryA
GetLocaleInfoA
GetTickCount
InitializeCriticalSectionEx
GetLastError
CreateMutexA
WaitForSingleObject
ReleaseMutex
CloseHandle
GetModuleHandleA
GetCurrentThreadId
GetCurrentProcessId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
EnumResourceNamesA
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
MultiByteToWideChar
LoadLibraryExA
GetProcAddress
GetModuleFileNameA
FreeLibrary
WideCharToMultiByte
FindResourceA
SizeofResource
LockResource
LoadResource
FreeResource
ReleaseSemaphore
LocalFileTimeToFileTime
GetComputerNameW
CompareFileTime
MoveFileExW
MoveFileW
CopyFileW
SetFileAttributesW
CreateDirectoryW
GetCurrentDirectoryW
SetEvent
CreateEventW
GetTimeZoneInformation
AreFileApisANSI
HeapCreate
GetFullPathNameW
GetDiskFreeSpaceW
LockFile
UnlockFileEx
GetTempPathW
CreateMutexW
CreateFileW
GetFileAttributesW
FormatMessageW
GetFileAttributesExW
DeleteFileW
GetSystemInfo
LoadLibraryW
UnlockFile
LockFileEx
FormatMessageA
CreateFileMappingW
FlushFileBuffers
LCMapStringW
FindNextFileW
FindFirstFileW
MoveFileExA
GetProfileIntA
GetProfileStringA
_lopen
OpenFileMappingA
GetCommandLineA
FileTimeToDosDateTime
GetFileSizeEx
SetErrorMode
CompareStringA
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

SetTimer
GetClassInfoExA
LoadStringA
LoadBitmapA
LoadCursorA
DefWindowProcA
KillTimer
PostMessageA
RegisterClassExA
CreateWindowExA
DestroyWindow
SetPropA
GetPropA
RemovePropA
UnregisterClassA
GetSysColor
CopyImage
RegisterClipboardFormatW
GetDCEx
FindWindowA
SendInput
RegisterWindowMessageA
GetNextDlgGroupItem
CharUpperA
EnableScrollBar
GetAncestor
GetMonitorInfoA
MonitorFromRect
ArrangeIconicWindows
TranslateMDISysAccel
UnhookWindowsHook
SetWindowsHookA
GetKeyboardState
CloseGestureInfoHandle
GetGestureInfo
GetUpdateRgn
SetMenuItemInfoA
CreateMenu
SetMenu
TranslateAcceleratorA
RegisterClipboardFormatA
IsDlgButtonChecked
InvalidateRgn
GetForegroundWindow
IsRectEmpty
GetMenuItemInfoA
CreateIconIndirect
LoadImageA
DrawStateA
TrackPopupMenu
CreatePopupMenu
UnregisterHotKey
RegisterHotKey
TrackMouseEvent
InsertMenuA
SetMenuItemBitmaps
DeleteMenu
ModifyMenuA
CheckMenuItem
GetMenuStringA
DefFrameProcA
GetMenu
SetRect
SetClassLongPtrA
GetClassLongPtrA
GetClassLongA
FindWindowExA
GetWindowTextLengthW
GetWindowTextW
GetWindowDC
DrawTextW
RemoveMenu
GetSubMenu
EnableMenuItem
GetSystemMenu
LoadMenuA
GetNextDlgTabItem
CreateDialogIndirectParamA
BeginDeferWindowPos
PostQuitMessage
DrawCaption
SetParent
BringWindowToTop
UnhookWindowsHookEx
GetCapture
GetDoubleClickTime
GetMessageTime
GetMessagePos
GetCaretBlinkTime
DefMDIChildProcA
IsZoomed
IsChild
DrawFocusRect
EnumDesktopWindows
EnumChildWindows
GetDialogBaseUnits
DialogBoxParamA
CallNextHookEx
SetWindowsHookExA
SetWindowLongA
GetWindowLongA
SetWindowPlacement
GetWindow
EnumWindows
ScrollWindow
ValidateRect
CopyRect
SetRectEmpty
GetLastActivePopup
DrawIcon
PtInRect
SetActiveWindow
InvertRect
GetMenuCheckMarkDimensions
SubtractRect
UnionRect
LoadAcceleratorsA
ShowScrollBar
DestroyIcon
GetActiveWindow
WaitMessage
GetScrollInfo
SetScrollInfo
SetWindowLongW
GetWindowLongW
GetScrollRange
IsIconic
SystemParametersInfoA
ScreenToClient
ClientToScreen
GetWindowTextLengthA
SetWindowTextA
GetScrollPos
TrackPopupMenuEx
GetMenuItemCount
GetMenuItemID
DestroyMenu
ReleaseCapture
SetCapture
GetAsyncKeyState
AttachThreadInput
GetWindowPlacement
MessageBoxA
GetIconInfo
SetCursor
GetDlgItem
UpdateWindow
InvalidateRect
RedrawWindow
GetClientRect
GetWindowRect
MessageBeep
InflateRect
GetParent
FillRect
RegisterClassA
GetClassInfoA
BeginPaint
EndPaint
SendMessageA
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
wsprintfA
GetMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
ShowWindow
MoveWindow
SetWindowPos
CreateDialogParamA
DefDlgProcA
GetKeyState
GetDC
ReleaseDC
GetCursorPos
FrameRect
OffsetRect
GetDesktopWindow
GetMenuState
DrawEdge
SetFocus
GetFocus
SetForegroundWindow
WindowFromDC
MapWindowPoints
IsWindowVisible
GetDlgCtrlID
IsWindowEnabled
WindowFromPoint
ChildWindowFromPoint
GetClassNameA
EndDialog
SetDlgItemTextA
GetDlgItemTextA
CheckDlgButton
CheckRadioButton
SendDlgItemMessageA
EnableWindow
CallWindowProcA
IsWindow
GetWindowLongPtrA
SetWindowLongPtrA
DrawTextA
GetClipboardOwner
SetClipboardViewer
ChangeClipboardChain
GetClipboardData
CountClipboardFormats
EnumClipboardFormats
GetClipboardFormatNameA
IsClipboardFormatAvailable
AppendMenuA
SetScrollPos
SetScrollRange
IntersectRect
DrawFrameControl
DeferWindowPos
EndDeferWindowPos
GetWindowTextA
IsDialogMessageA
ShowCursor
GetCursor
CreateCursor
DrawIconEx
LoadIconA
GetSystemMetrics
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
MapVirtualKeyExA
GetKeyNameTextA
GetKeyboardLayout
DestroyCursor
GetProcessWindowStation
GetUserObjectInformationW

gdi32

ExtTextOutA
GetTextMetricsA
SetTextAlign
SetBkColor
SaveDC
RestoreDC
GetTextExtentPoint32A
GetCurrentObject
Rectangle
TextOutA
SetTextColor
StretchDIBits
SetBkMode
SelectPalette
RealizePalette
GetTextColor
GetDeviceCaps
CreatePalette
CreateFontIndirectA
CreateCompatibleBitmap
SetEnhMetaFileBits
DeleteEnhMetaFile
CreateSolidBrush
GetTextAlign
LineTo
GetGlyphOutlineA
GetObjectA
StretchBlt
SelectObject
DeleteDC
CreateCompatibleDC
BitBlt
GetStockObject
CreatePen
DeleteObject
SelectClipRgn
GetCharABCWidthsFloatA
GetCurrentPositionEx
PlayMetaFile
SetMapMode
SetViewportExtEx
SetViewportOrgEx
GetFontData
CreateBitmap
CreatePatternBrush
SetBitmapBits
ExtEscape
CreateRectRgnIndirect
MoveToEx
GetClipBox
StartDocA
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
CreateICA
CreateDIBSection
CreateRectRgn
GetTextExtentExPointA
ExcludeClipRect
Polygon
Polyline
GetTextExtentPointA
SetGraphicsMode
GetEnhMetaFileBits
PlayEnhMetaFile
SetWorldTransform
GetBitmapBits
TextOutW
GetTextExtentPoint32W
CreateFontIndirectW
SetRectRgn
PaintRgn
PatBlt
GetRegionData
CreateDCA
PolyTextOutA
PolyBezier
StrokePath
PathToRegion
FillPath
EndPath
CloseFigure
BeginPath
PolyPolygon
CreatePolyPolygonRgn
GetOutlineTextMetricsA
GetObjectType
RoundRect
GetTextCharsetInfo
GetBkMode
GetBkColor
UnrealizeObject
SetBrushOrgEx
ExtCreatePen
SetPolyFillMode
ExtSelectClipRgn
CombineRgn
GetROP2
PlayMetaFileRecord
CreatePenIndirect
CreateDIBPatternBrush
CreateBrushIndirect
GetWindowOrgEx
GetWindowExtEx
GetViewportOrgEx
GetViewportExtEx
GetMapMode
SetWindowOrgEx
SetWindowExtEx
SetROP2
GdiComment
SetWinMetaFileBits
GetWinMetaFileBits
GetEnhMetaFileHeader
GetEnhMetaFileA
CreateEnhMetaFileA
CloseEnhMetaFile
GetMetaFileA
GetMetaFileBitsEx
DeleteMetaFile
SetPixel
GetKerningPairsA
SetTextCharacterExtra
TranslateCharsetInfo
DPtoLP
CreatePolygonRgn
PtInRegion
GetWorldTransform
GetPixel
SetDIBits
GetDIBits
InvertRgn
SetDIBColorTable
GetDIBColorTable
GetSystemPaletteUse
GetSystemPaletteEntries
CreateDIBPatternBrushPt
EnumFontsA
EnumFontFamiliesExA
Ellipse
GdiFlush

winspool.drv

GetPrinterA
OpenPrinterA
GetPrinterDriverA
DocumentPropertiesA
ClosePrinter
EnumPrintersA

comdlg32

GetOpenFileNameA
PrintDlgA
CommDlgExtendedError
ChooseColorA
GetSaveFileNameA

advapi32

RegQueryInfoKeyA
RegCloseKey
CryptExportKey
CryptDestroyKey
CryptSignHashA
CryptDestroyHash
CryptCreateHash
CryptSetHashParam
CryptAcquireContextW
CryptGetUserKey
CryptGetProvParam
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
GetUserNameA
RegSetValueA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegQueryValueExA
RegOpenKeyExA

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHCreateDirectoryExA
SHGetSpecialFolderLocation
SHAppBarMessage
ShellExecuteW
DragAcceptFiles
ShellExecuteA
ShellExecuteExA
DragQueryFileA
DragQueryPoint
SHFileOperationA
DragFinish
SHGetFolderPathA

ole32

CreateStreamOnHGlobal
IIDFromString
StringFromGUID2
CoCreateGuid
CoUninitialize
CLSIDFromString
CoTaskMemAlloc
CoInitialize
ReleaseStgMedium
OleSetClipboard
OleGetClipboard
OleFlushClipboard
StringFromCLSID
CoTaskMemFree
CoCreateInstance

oleaut32

VariantClear
VariantInit
SysFreeString
SysAllocString

cvfc

?End@GroupIterator@cvfc@@SA?AV12@XZ
??DGroupIterator@cvfc@@QEBAHXZ
??EGroupIterator@cvfc@@QEAAAEAV01@XZ
??9cvfc@@YA_NAEBVGroupIterator@0@0@Z
??1GroupIterator@cvfc@@QEAA@XZ
??0GroupIterator@cvfc@@QEAA@AEBV01@@Z
?Begin@SelectionIterator@cvfc@@SA?AV12@XZ
?End@SelectionIterator@cvfc@@SA?AV12@XZ
?Begin@GroupIterator@cvfc@@SA?AV12@H@Z
??9cvfc@@YA_NAEBVSelectionIterator@0@0@Z
??1CanvasDrawToolBase@cvfc@@UEAA@XZ
?CreateHidden@CanvasDrawToolBase@cvfc@@QEAAHFHD@Z
?Activate@CanvasDrawToolBase@cvfc@@UEAA_NXZ
?SwitchToDefaultDrawTool@CanvasDrawToolBase@cvfc@@SA_NXZ
??0CanvasDrawToolBase@cvfc@@IEAA@I@Z
?HandleDrawToolMessage@CanvasDrawToolBase@cvfc@@MEAAH_J0IPEAX@Z
?NaturalCompare_IsGreater@cvfc@@YA_NAEBVCVString@@0@Z
?NaturalCompare_IsLess@cvfc@@YA_NAEBVCVString@@0@Z
??1UndoContext@cvfc@@QEAA@XZ
??DSelectionIterator@cvfc@@QEBAAEBUCVSelectionItem@@XZ
??ESelectionIterator@cvfc@@QEAAAEAV01@XZ
?OnDoubleClick@CanvasDrawToolBase@cvfc@@MEAA_NPEAUCVDrawToolDoubleClickMsg@@@Z
?OnMouseOverView@CanvasDrawToolBase@cvfc@@MEAA_NPEAUCVDrawToolMouseOverViewMsg@@@Z
?OnRightMouse@CanvasDrawToolBase@cvfc@@MEAA_NPEAUCVDrawToolRightMouseMsg@@@Z
?Begin@PageIterator@cvfc@@SA?AV12@H@Z
?End@PageIterator@cvfc@@SA?AV12@XZ
??DPageIterator@cvfc@@QEBAHXZ
??EPageIterator@cvfc@@QEAAAEAV01@XZ
??9cvfc@@YA_NAEBVPageIterator@0@0@Z
??1PageIterator@cvfc@@QEAA@XZ
??0PageIterator@cvfc@@QEAA@AEBV01@@Z
??0PageIterator@cvfc@@QEAA@$$QEAV01@@Z
??4PageIterator@cvfc@@QEAAAEAV01@AEBV01@@Z
?Begin@PageObjectIterator@cvfc@@SA?AV12@H@Z
?End@PageObjectIterator@cvfc@@SA?AV12@XZ
??DPageObjectIterator@cvfc@@QEBAHXZ
??EPageObjectIterator@cvfc@@QEAAAEAV01@XZ
??9cvfc@@YA_NAEBVPageObjectIterator@0@0@Z
??1PageObjectIterator@cvfc@@QEAA@XZ
??0PageObjectIterator@cvfc@@QEAA@AEBV01@@Z
??0PageObjectIterator@cvfc@@QEAA@$$QEAV01@@Z
??4PageObjectIterator@cvfc@@QEAAAEAV01@AEBV01@@Z
?Begin@RecursiveGroupIterator@cvfc@@SA?AV12@H@Z
?End@RecursiveGroupIterator@cvfc@@SA?AV12@XZ
??DRecursiveGroupIterator@cvfc@@QEBAHXZ
??ERecursiveGroupIterator@cvfc@@QEAAAEAV01@XZ
??9cvfc@@YA_NAEBVRecursiveGroupIterator@0@0@Z
??1RecursiveGroupIterator@cvfc@@QEAA@XZ
??0RecursiveGroupIterator@cvfc@@QEAA@AEBV01@@Z
??0RecursiveGroupIterator@cvfc@@QEAA@$$QEAV01@@Z
??4RecursiveGroupIterator@cvfc@@QEAAAEAV01@AEBV01@@Z
??0CanvasObject@cvfc@@QEAA@H@Z
??1CanvasObject@cvfc@@UEAA@XZ
?GetType@CanvasObject@cvfc@@QEBADXZ
??0CanvasObject@cvfc@@QEAA@AEBV01@@Z
?IsAnyContextActive@UndoContext@cvfc@@SA_NXZ
??1ComponentBase@cvfc@@UEAA@XZ
??0ComponentBase@cvfc@@IEAA@XZ
?CreateComponent@ComponentBase@cvfc@@IEAA_NXZ
?DestroyComponent@ComponentBase@cvfc@@IEAAXXZ
?HandleMessage@ComponentBase@cvfc@@MEAAH_J0IPEAX@Z
??1BroadcastMessageRegistration@cvfc@@UEAA@XZ
?RegisterMessages@BroadcastMessageRegistration@cvfc@@QEAA_N_J@Z
?UnregisterMessages@BroadcastMessageRegistration@cvfc@@QEAA_NXZ
??0SymFile@cvfc@@QEAA@AEBVCVString@@HH@Z
??1SymFile@cvfc@@QEAA@XZ
?CreateObjectFromSymbolUndo@SymFile@cvfc@@QEAAHW4TPlaceSymbolMethod@SymFileIOSuite@@AEAV?$_Rect@U?$_rect_LeftTop@N@@U?$CoordinateTraits@N@@UScreen@CoordinateSystemType@@@@AEAH@Z
?ScaleSizeNoDistort@cvfc@@YAXAEAV?$_Point@U?$_point_HV@N@@U?$CoordinateTraits@N@@@@00@Z
??0Color@cvfc@@QEAA@AEBURgb@1@@Z
?InitCvfc@cvfc@@YA_NPEAUCoreGlobalStruct@@@Z
??0UniqueFileName@cvfc@@QEAA@AEBVCVString@@00@Z
?Generate@UniqueFileName@cvfc@@QEAA?AVCVString@@XZ
??1UniqueFileName@cvfc@@QEAA@XZ
?SetKeywords@SymFile@cvfc@@QEAAHAEBVCVString@@@Z
?GetFullFileName@SymFile@cvfc@@QEBAAEBVCVString@@XZ
?Attach@CanvasObject@cvfc@@UEAAXH@Z
?CheckFlag@CanvasObject@cvfc@@UEBA_NH@Z
?ClearFlag@CanvasObject@cvfc@@UEAAHH@Z
?Clone@CanvasObject@cvfc@@UEBAPEAV12@PEBUCVZOrder@@@Z
?Deselect@CanvasObject@cvfc@@UEAAHXZ
?Dispose@CanvasObject@cvfc@@UEAAHXZ
?Draw@CanvasObject@cvfc@@UEAAXHAEBV?$_Rect@U?$_rect_LeftTop@N@@U?$CoordinateTraits@N@@UScreen@CoordinateSystemType@@@@@Z
?Duplicate@CanvasObject@cvfc@@UEBAHPEBUCVZOrder@@@Z
?GetBoundingRect@CanvasObject@cvfc@@UEBA?AV?$_Rect@U?$_rect_LeftTop@N@@U?$CoordinateTraits@N@@UScreen@CoordinateSystemType@@@@XZ
?GetFillInk@CanvasObject@cvfc@@UEBAHXZ
?GetFrameInk@CanvasObject@cvfc@@UEBAHXZ
?GetFrameStyle@CanvasObject@cvfc@@UEBAHXZ
?GetGeometryRect@CanvasObject@cvfc@@UEBA?AV?$_Rect@U?$_rect_LeftTop@N@@U?$CoordinateTraits@N@@UScreen@CoordinateSystemType@@@@XZ
?GetName@CanvasObject@cvfc@@UEBA?AVCVString@@XZ
?GetName@CanvasObject@cvfc@@UEBA_NPEADH@Z
?GetPath@CanvasObject@cvfc@@UEBAHW4PathType@@_NPEAVCVMultiPath@2@@Z
?GetTransform@CanvasObject@cvfc@@UEBA_N_NAEAUFPTransform@@@Z
?GetTypeName@CanvasObject@cvfc@@UEBA_NPEADH@Z
?GetZOrder@CanvasObject@cvfc@@UEBA_NAEAUCVZOrder@@@Z
?HasTransform@CanvasObject@cvfc@@UEBA_NXZ
?Hide@CanvasObject@cvfc@@UEAAHXZ
?HitTest@CanvasObject@cvfc@@UEBA_NAEBV?$_Point@U?$_point_HV@N@@U?$CoordinateTraits@N@@@@PEAH@Z
?Invalidate@CanvasObject@cvfc@@UEBAX_N@Z
?IsDisplayed@CanvasObject@cvfc@@UEBA_NXZ
?IsInZOrder@CanvasObject@cvfc@@UEBA_NXZ
?IsLocked@CanvasObject@cvfc@@UEBA_NXZ
?IsSelected@CanvasObject@cvfc@@UEBA_NXZ
?IsValid@CanvasObject@cvfc@@UEBA_NXZ
?IsVisible@CanvasObject@cvfc@@UEBA_NXZ
?Lock@CanvasObject@cvfc@@UEAAH_N@Z
?Move@CanvasObject@cvfc@@UEBAHAEBV?$Vector2D@NU?$_point_HV@N@@U?$CoordinateTraits@N@@@2@@Z
?RecalculateBoundingRect@CanvasObject@cvfc@@UEAAHXZ
?Resize@CanvasObject@cvfc@@UEAAHAEBV?$_Rect@U?$_rect_LeftTop@N@@U?$CoordinateTraits@N@@UScreen@CoordinateSystemType@@@@@Z
?Select@CanvasObject@cvfc@@UEAAH_N@Z
?SetArrowHeadAtEndpoints@CanvasObject@cvfc@@UEAAHPEBXH_N11@Z
?SetArrowHeadDirectional@CanvasObject@cvfc@@UEAAHPEBXH_N11@Z
?SetDash@CanvasObject@cvfc@@UEAAHAEBUDashStruct@@_N@Z
?SetFillInk@CanvasObject@cvfc@@UEAAHHPEBXHPEBD_N@Z
?SetFillInk@CanvasObject@cvfc@@UEAAHH_N@Z
?SetFlag@CanvasObject@cvfc@@UEAAHH_N@Z
?SetFrameInk@CanvasObject@cvfc@@UEAAHHPEBXHPEBD_N@Z
?SetFrameInk@CanvasObject@cvfc@@UEAAHH_N@Z
?SetFrameStyle@CanvasObject@cvfc@@UEAAHHPEBXH_N@Z
?SetFrameStyle@CanvasObject@cvfc@@UEAAHH_N@Z
?SetGeometryRect@CanvasObject@cvfc@@UEAAHAEBV?$_Rect@U?$_rect_LeftTop@N@@U?$CoordinateTraits@N@@UScreen@CoordinateSystemType@@@@@Z
?SetName@CanvasObject@cvfc@@UEAAHPEBD@Z
?SetTransform@CanvasObject@cvfc@@UEAAHAEBUFPTransform@@@Z
?SetZOrder@CanvasObject@cvfc@@UEAAHAEBUCVZOrder@@@Z
?Show@CanvasObject@cvfc@@UEAAH_N@Z
?Unlock@CanvasObject@cvfc@@UEAAHXZ
??7CanvasObject@cvfc@@QEBA_NXZ
?GetToolID@CanvasObject@cvfc@@QEBAHXZ
??0Thread@cvfc@@QEAA@XZ
??1Thread@cvfc@@UEAA@XZ
?Start@Thread@cvfc@@QEAAXXZ
?Terminate@Thread@cvfc@@QEAAXXZ
?IsTerminated@Thread@cvfc@@QEAA_NXZ
?Start_@Thread@cvfc@@MEAAXXZ
?Wait_@Thread@cvfc@@MEAA_NI@Z
??0UndoContext@cvfc@@QEAA@XZ

_uiframework

?GetCustomUIProc@ReflectedObject@Reflection@UI@ACDSystems@@UEBAPEAXXZ
?FromString@ReflectedObject@Reflection@UI@ACDSystems@@UEAAXAEBVCVString@@@Z
?SetElementAutoDestroy@UI@ACDSystems@@YAHPEAX@Z
?ScrollToItem@GridBox@UI@ACDSystems@@QEAAXAEBH@Z
?IndexToItem@GridBox@UI@ACDSystems@@QEAAHI@Z
?ItemToIndex@GridBox@UI@ACDSystems@@QEAAIAEBH@Z
?AddItems@GridBox@UI@ACDSystems@@QEAA?AV?$deque@HV?$allocator@H@std@@@std@@I@Z
?GetUIProc@ReflectedObject@Reflection@UI@ACDSystems@@UEBAP6AXPEAXAEBUtagLVITEMA@@0@ZXZ
??0GridBox@UI@ACDSystems@@QEAA@XZ
??1ImagePushButton@UI@ACDSystems@@UEAA@XZ
??0ImagePushButton@UI@ACDSystems@@QEAA@XZ
?AddChild@Dialog@UI@ACDSystems@@QEAAHAEAVElement@23@@Z
??1Dialog@UI@ACDSystems@@UEAA@XZ
??0Dialog@UI@ACDSystems@@QEAA@XZ
?BindLegacy@Element@UI@ACDSystems@@QEAAHPEAX@Z
?IsEmptyString@ReflectedObject@Reflection@UI@ACDSystems@@UEBA_NXZ
?IsValidString@ReflectedObject@Reflection@UI@ACDSystems@@UEAA_NAEBVCVString@@@Z
?NeedsLocalization@ReflectedObjectBase@Reflection@UI@ACDSystems@@UEBA_NXZ
?OnBoundsChanged@Element@UI@ACDSystems@@UEAAXXZ
?OnClick@Button@UI@ACDSystems@@UEAAXXZ
?OnEnabledChanged@Element@UI@ACDSystems@@UEAAXXZ
?OnGotFocus@Element@UI@ACDSystems@@UEAAXXZ
?OnLostFocus@Element@UI@ACDSystems@@UEAAXXZ
?OnVisibleChanged@Element@UI@ACDSystems@@UEAAXXZ
?ToString@ReflectedObject@Reflection@UI@ACDSystems@@UEBA?AVCVString@@XZ
?BindLegacy@Element@UI@ACDSystems@@QEAAHPEAXF@Z
?AutoDestroy_@Element@UI@ACDSystems@@AEAAXPEAV_AutoDestroyBase@123@@Z
?GetType@ReflectedObject@Reflection@UI@ACDSystems@@UEBA?AVCVString@@XZ
??0ImageRadioButton@UI@ACDSystems@@QEAA@XZ
??1ImageRadioButton@UI@ACDSystems@@UEAA@XZ
?GetElementFromOSHandle@UI@ACDSystems@@YAPEAVElement@12@PEAX@Z
?DeSerializeProperties@ReflectedObjectBase@Reflection@UI@ACDSystems@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV56@@Z
?DoModal@Dialog@UI@ACDSystems@@QEAA?AW4DialogResultEnum@DialogResult@23@XZ
??0PushButton@UI@ACDSystems@@QEAA@XZ
??1PushButton@UI@ACDSystems@@UEAA@XZ
??0Label@UI@ACDSystems@@QEAA@XZ
??1Label@UI@ACDSystems@@UEAA@XZ
??0Slider@UI@ACDSystems@@QEAA@XZ
??1Slider@UI@ACDSystems@@UEAA@XZ
?OnBind@Dialog@UI@ACDSystems@@UEAAXXZ
?OnCancel@Dialog@UI@ACDSystems@@UEAAXXZ
?OnDisposed@Dialog@UI@ACDSystems@@UEAAXXZ
?OnIdle@Dialog@UI@ACDSystems@@UEAAXXZ
?OnLoad@Dialog@UI@ACDSystems@@UEAAXXZ
?OnOK@Dialog@UI@ACDSystems@@UEAAXXZ
?OnPostLoad@Dialog@UI@ACDSystems@@UEAAXXZ
??0ImageBox@UI@ACDSystems@@QEAA@XZ
??1ImageBox@UI@ACDSystems@@UEAA@XZ
?GetSize@Dialog@UI@ACDSystems@@SA?AV?$_Size@U?$_size_XY@H@@U?$CoordinateTraits@H@@@@AEBUUIResource@23@@Z
?GetName@ReflectedObjectBase@Reflection@UI@ACDSystems@@QEBA?AVCVString@@XZ
?GetProperties@ReflectedObjectBase@Reflection@UI@ACDSystems@@QEBAAEBV?$deque@PEAVReflectedObjectBase@Reflection@UI@ACDSystems@@V?$allocator@PEAVReflectedObjectBase@Reflection@UI@ACDSystems@@@std@@@std@@XZ
?SerializeProperties@ReflectedObjectBase@Reflection@UI@ACDSystems@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetElementPlatformInfo@UI@ACDSystems@@YAXAEBVElement@12@AEAUElementPlatformInfo@12@@Z
?SetElementInDesigner@UI@ACDSystems@@YAXAEAVElement@12@@Z
?SetElementInTestMode@UI@ACDSystems@@YAXAEAVElement@12@@Z
?GetReflectedItemTypes@Reflection@UI@ACDSystems@@YA?AV?$vector@VCVString@@V?$allocator@VCVString@@@std@@@std@@XZ
?CreateItem@Reflection@UI@ACDSystems@@YAPEAVElement@23@AEBVCVString@@@Z
?SelectAll@TextBox@UI@ACDSystems@@QEAAXXZ
??0PopupButton@UI@ACDSystems@@QEAA@XZ
??1PopupButton@UI@ACDSystems@@UEAA@XZ
?InitUIFramework@UI@ACDSystems@@YAHPEAUCoreGlobalStruct@@PEAUCanvasAPIGate@12@@Z
??0OwnerDraw@UI@ACDSystems@@QEAA@XZ
??1OwnerDraw@UI@ACDSystems@@UEAA@XZ
??0ZoomItem@UI@ACDSystems@@QEAA@XZ
??1ZoomItem@UI@ACDSystems@@UEAA@XZ
?GetElementDesignMode@UI@ACDSystems@@YAHAEBVElement@12@@Z
?GetElementTestMode@UI@ACDSystems@@YAHAEBVElement@12@@Z
?Invalidate@Element@UI@ACDSystems@@QEAAXPEBV?$_Rect@U?$_rect_LeftTop@H@@U?$CoordinateTraits@H@@UScreen@CoordinateSystemType@@@@H@Z
?DoPopup@Dialog@UI@ACDSystems@@QEAA?AW4DialogResultEnum@DialogResult@23@PEBV?$_Rect@U?$_rect_LeftTop@H@@U?$CoordinateTraits@H@@UScreen@CoordinateSystemType@@@@@Z
?EndPopup@Dialog@UI@ACDSystems@@QEAAXXZ
??0Scrollbar@UI@ACDSystems@@QEAA@XZ
??1Scrollbar@UI@ACDSystems@@UEAA@XZ
?InCustomDrawUpdate@Slider@UI@ACDSystems@@QEBA_NXZ
??0TextBox@UI@ACDSystems@@QEAA@XZ
??1TextBox@UI@ACDSystems@@UEAA@XZ
??0CheckBox@UI@ACDSystems@@QEAA@XZ
??1CheckBox@UI@ACDSystems@@UEAA@XZ
??0GroupBox@UI@ACDSystems@@QEAA@XZ
??1GroupBox@UI@ACDSystems@@UEAA@XZ
?SetFocus@Element@UI@ACDSystems@@QEAAXXZ
??1GridBox@UI@ACDSystems@@UEAA@XZ

msvcp140

?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?id@?$ctype@D@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?setbase@std@@YA?AU?$_Smanip@H@1@H@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?uncaught_exception@std@@YA_NXZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
?_Xruntime_error@std@@YAXPEBD@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??0_Locinfo@std@@QEAA@HPEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z
?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z
?global@locale@std@@SA?AV12@AEBV12@@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?id@?$numpunct@D@std@@2V0locale@2@A
_Thrd_hardware_concurrency
??7ios_base@std@@QEBA_NXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
_Strcoll
_Strxfrm
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$collate@D@std@@2V0locale@2@A
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
?setf@ios_base@std@@QEAAHH@Z
?_Xbad_alloc@std@@YAXXZ
?eof@ios_base@std@@QEBA_NXZ
?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?is@?$ctype@D@std@@QEBA_NFD@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Getname@_Locinfo@std@@QEBAPEBDXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
?toupper@?$ctype@D@std@@QEBADD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z

shlwapi

PathFindExtensionA
PathIsNetworkPathA
PathIsDirectoryA
ord12

concrt140

?PPLParallelForeachEventGuid@Concurrency@@3U_GUID@@B
?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QEAA_NXZ
?_Confirm_cancel@_Cancellation_beacon@details@Concurrency@@QEAA_NXZ
?Free@Concurrency@@YAXPEAX@Z
?PPLParallelForEventGuid@Concurrency@@3U_GUID@@B
?_CheckTaskCollection@_UnrealizedChore@details@Concurrency@@IEAAXXZ
??1_StructuredTaskCollection@details@Concurrency@@QEAA@XZ
?_Schedule@_StructuredTaskCollection@details@Concurrency@@QEAAXPEAV_UnrealizedChore@23@@Z
?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QEAA?AW4_TaskCollectionStatus@23@PEAV_UnrealizedChore@23@@Z
?_CurrentContext@_Context@details@Concurrency@@SA?AV123@XZ
?_Yield@_Context@details@Concurrency@@SAXXZ
?_IsSynchronouslyBlocked@_Context@details@Concurrency@@QEBA_NXZ
?_GetNumberOfVirtualProcessors@_CurrentScheduler@details@Concurrency@@SAIXZ
?_UnderlyingYield@details@Concurrency@@YAXXZ
??0_Cancellation_beacon@details@Concurrency@@QEAA@XZ
?_Trace_ppl_function@Concurrency@@YAXAEBU_GUID@@EW4ConcRT_EventType@1@@Z
??1_Cancellation_beacon@details@Concurrency@@QEAA@XZ
?Alloc@Concurrency@@YAPEAX_K@Z

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

msimg32

AlphaBlend
TransparentBlt

vcruntime140

__C_specific_handler
_purecall
memcpy
memmove
__std_terminate
_CxxThrowException
__CxxFrameHandler3
memset
strchr
memchr
memcmp
strstr
__std_exception_copy
__std_exception_destroy
strrchr
wcsstr
__std_type_info_compare

api-ms-win-crt-runtime-l1-1-0

_set_invalid_parameter_handler
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_c_exit
_register_onexit_function
_exit
exit
_crt_atexit
_initterm_e
__p___argc
_initterm
_get_narrow_winmain_command_line
__p___argv
_invalid_parameter_noinfo_noreturn
_set_app_type
_seh_filter_exe
_control87
_cexit
_invalid_parameter_noinfo
strerror
_errno
perror
terminate

api-ms-win-crt-string-l1-1-0

strcpy
strcspn
_strupr
strnlen
strcmp
_strnicmp
_strlwr
toupper
strncmp
strpbrk
isspace
wcscpy_s
wcstok_s
_wcsicmp
iswspace
isdigit
isalpha
isalnum
ispunct
strtok
strcpy_s
strncpy
wcsncpy
tolower
strcat_s
_stricmp
strncat_s
strncat
wcscat_s
towlower
strncpy_s
towupper

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
__stdio_common_vsprintf_s
__stdio_common_vsnprintf_s
_lseeki64
__stdio_common_vfprintf
ftell
fseek
fread
fgetc
ferror
fclose
fopen_s
fopen
__acrt_iob_func
_get_stream_buffer_pointers
fflush
fgetpos
fputc
fsetpos
_fseeki64
fwrite
setvbuf
ungetc
fgets
_set_fmode
_filelength
_filelengthi64
__p__commode
_telli64
_open
_close
_read
_write
_wopen
_fileno
__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

_set_new_mode
_msize
realloc
_callnewh
calloc
malloc
free

api-ms-win-crt-convert-l1-1-0

wcstombs
_atoi64
strtol
atol
atof
wcstombs_s
_itoa
mbstowcs
_itoa_s
strtod
atoi
mbstowcs_s

api-ms-win-crt-math-l1-1-0

asin
cosh
fabs
log
sinh
tanh
fmod
__setusermatherr
floorf
ceil
floor
_dtest
exp
_finite
_isnan
sin
cos
atan2
atan
roundf
asinf
acos
round
log10
tan
pow
expf
logf
sqrtf
fmax
sqrt

api-ms-win-crt-filesystem-l1-1-0

_splitpath
_makepath
_unlock_file
_lock_file
_unlink
_access
_wsplitpath
_findclose
_findfirst64i32
_findnext64i32
rename
_wsplitpath_s
remove

api-ms-win-crt-utility-l1-1-0

srand
rand
bsearch
qsort
ldiv

api-ms-win-crt-time-l1-1-0

_tzset
_mktime64
_get_daylight
_strdate_s
clock
_time64
_localtime64
_localtime64_s
_gmtime64
_ctime64
_strtime_s
_get_timezone

api-ms-win-crt-locale-l1-1-0

_configthreadlocale
setlocale

api-ms-win-crt-multibyte-l1-1-0

_mbsdec
_mbsstr
_mbsrchr
_mbsncpy
_mbsnbcnt
_mbslen
_mbsinc
_mbschr
_mbspbrk
_mbscspn

api-ms-win-crt-environment-l1-1-0

_dupenv_s
getenv

Exports

Exports

??0ControlDrawing@Drawing@UI@ACDSystems@@QEAA@$$QEAV0123@@Z
??0ControlDrawing@Drawing@UI@ACDSystems@@QEAA@AEBV0123@@Z
??0ControlDrawing@Drawing@UI@ACDSystems@@QEAA@PEAX@Z
??0ControlEdge@Drawing@UI@ACDSystems@@QEAA@$$QEAV0123@@Z
??0ControlEdge@Drawing@UI@ACDSystems@@QEAA@AEBV0123@@Z
??0ControlEdge@Drawing@UI@ACDSystems@@QEAA@PEAX@Z
??0ExplorerBarNormal@Drawing@UI@ACDSystems@@QEAA@$$QEAV0123@@Z
??0ExplorerBarNormal@Drawing@UI@ACDSystems@@QEAA@AEBV0123@@Z
??0ExplorerBarNormal@Drawing@UI@ACDSystems@@QEAA@PEAX_N@Z
??0ProxyPNGImage@@QEAA@XZ
??0PushButton@Drawing@UI@ACDSystems@@QEAA@$$QEAV0123@@Z
??0PushButton@Drawing@UI@ACDSystems@@QEAA@AEBV0123@@Z
??0PushButton@Drawing@UI@ACDSystems@@QEAA@PEAX@Z
??0SplitButton@Drawing@UI@ACDSystems@@QEAA@$$QEAV0123@@Z
??0SplitButton@Drawing@UI@ACDSystems@@QEAA@AEBV0123@@Z
??0SplitButton@Drawing@UI@ACDSystems@@QEAA@PEAX@Z
??0StorePassword@PasswordDlg@@QEAA@AEBVCVString@@@Z
??0Toolbar@Drawing@UI@ACDSystems@@QEAA@$$QEAV0123@@Z
??0Toolbar@Drawing@UI@ACDSystems@@QEAA@AEBV0123@@Z
??0Toolbar@Drawing@UI@ACDSystems@@QEAA@PEAX@Z
??1ProxyPNGImage@@QEAA@XZ
??1StorePassword@PasswordDlg@@QEAA@XZ
??4ControlDrawing@Drawing@UI@ACDSystems@@QEAAAEAV0123@$$QEAV0123@@Z
??4ControlDrawing@Drawing@UI@ACDSystems@@QEAAAEAV0123@AEBV0123@@Z
??4ControlEdge@Drawing@UI@ACDSystems@@QEAAAEAV0123@$$QEAV0123@@Z
??4ControlEdge@Drawing@UI@ACDSystems@@QEAAAEAV0123@AEBV0123@@Z
??4ExplorerBarNormal@Drawing@UI@ACDSystems@@QEAAAEAV0123@$$QEAV0123@@Z
??4ExplorerBarNormal@Drawing@UI@ACDSystems@@QEAAAEAV0123@AEBV0123@@Z
??4ProxyPNGImage@@QEAAAEAV0@AEBV0@@Z
??4PushButton@Drawing@UI@ACDSystems@@QEAAAEAV0123@$$QEAV0123@@Z
??4PushButton@Drawing@UI@ACDSystems@@QEAAAEAV0123@AEBV0123@@Z
??4SplitButton@Drawing@UI@ACDSystems@@QEAAAEAV0123@$$QEAV0123@@Z
??4SplitButton@Drawing@UI@ACDSystems@@QEAAAEAV0123@AEBV0123@@Z
??4StorePassword@PasswordDlg@@QEAAAEAV01@AEBV01@@Z
??4Toolbar@Drawing@UI@ACDSystems@@QEAAAEAV0123@$$QEAV0123@@Z
??4Toolbar@Drawing@UI@ACDSystems@@QEAAAEAV0123@AEBV0123@@Z
??_7ControlDrawing@Drawing@UI@ACDSystems@@6B@
??_7ControlEdge@Drawing@UI@ACDSystems@@6B@
??_7ExplorerBarNormal@Drawing@UI@ACDSystems@@6B@
??_7PushButton@Drawing@UI@ACDSystems@@6B@
??_7SplitButton@Drawing@UI@ACDSystems@@6B@
??_7Toolbar@Drawing@UI@ACDSystems@@6B@
?CVXLibInit@@YAHPEAX@Z
?CVXLibTest@@YAXXZ
?CVXLibUninit@@YAHXZ
?Clone@ProxyPNGImage@@QEAAPEAV1@XZ
?CreateFontComboBox@@YAPEAXPEAXKAEBUtagRECT@@PEBUUIEditTextInfo@@PEBUUIPopupMenuInfo@@@Z
?Draw@ControlDrawing@Drawing@UI@ACDSystems@@IEBAXPEAXAEBUtagRECT@@PEBGHW4State@DrawingState@234@@Z
?Draw@ControlEdge@Drawing@UI@ACDSystems@@UEBAXPEAXAEBUtagRECT@@W4State@DrawingState@234@@Z
?Draw@ExplorerBarNormal@Drawing@UI@ACDSystems@@UEBAXPEAXAEBUtagRECT@@W4State@DrawingState@234@@Z
?Draw@ProxyPNGImage@@QEBAXPEAXUtagPOINT@@1UtagSIZE@@W4DrawTypeEnum@DrawType@@@Z
?Draw@ProxyPNGImage@@QEBAXPEAXUtagPOINT@@UtagSIZE@@W4DrawTypeEnum@DrawType@@@Z
?Draw@ProxyPNGImage@@QEBAXPEAXUtagPOINT@@W4DrawTypeEnum@DrawType@@@Z
?Draw@PushButton@Drawing@UI@ACDSystems@@UEBAXPEAXAEBUtagRECT@@W4State@DrawingState@234@@Z
?Draw@SplitButton@Drawing@UI@ACDSystems@@UEBAXPEAXAEBUtagRECT@@W4State@DrawingState@234@@Z
?Draw@Toolbar@Drawing@UI@ACDSystems@@UEBAXPEAXAEBUtagRECT@@W4State@DrawingState@234@@Z
?DrawImageFromResource@@YA_NPEAXUtagPOINT@@0PEBDW4DrawTypeEnum@DrawType@@@Z
?DrawImageFromResource@@YA_NPEAXUtagPOINT@@PEBDW4DrawTypeEnum@DrawType@@@Z
?DrawMaskedImage@@YAXPEAXUtagPOINT@@00@Z
?DrawParentBackground@GDI@UI@ACDSystems@@YAXPEAX0AEBUtagRECT@@@Z
?GetContentRect@ControlDrawing@Drawing@UI@ACDSystems@@IEBA?AUtagRECT@@PEAXAEBU5@PEBGHW4State@DrawingState@234@@Z
?GetContentRect@ControlEdge@Drawing@UI@ACDSystems@@UEBA?AUtagRECT@@PEAXAEBU5@W4State@DrawingState@234@@Z
?GetContentRect@ExplorerBarNormal@Drawing@UI@ACDSystems@@UEBA?AUtagRECT@@PEAXAEBU5@W4State@DrawingState@234@@Z
?GetContentRect@PushButton@Drawing@UI@ACDSystems@@UEBA?AUtagRECT@@PEAXAEBU5@W4State@DrawingState@234@@Z
?GetContentRect@SplitButton@Drawing@UI@ACDSystems@@UEBA?AUtagRECT@@PEAXAEBU5@W4State@DrawingState@234@@Z
?GetContentRect@Toolbar@Drawing@UI@ACDSystems@@UEBA?AUtagRECT@@PEAXAEBU5@W4State@DrawingState@234@@Z
?GetHBITMAP@ProxyPNGImage@@QEBA_NAEAPEAXAEBVColor@1@@Z
?GetHICON@ProxyPNGImage@@QEBA_NAEAPEAX@Z
?GetPNGImageSizeFromResource@@YA_NPEAXPEBDAEAH2@Z
?GetPNGImageSizeFromResource@@YA_NPEBDAEAH1@Z
?GetPassword@PasswordDlg@@YA_NAEAVCVString@@_N@Z
?GetTransitionDuration@ControlDrawing@Drawing@UI@ACDSystems@@IEBAKPEBGHW4State@DrawingState@234@1@Z
?GetTransitionDuration@ControlEdge@Drawing@UI@ACDSystems@@UEBAKW4State@DrawingState@234@0@Z
?GetTransitionDuration@ExplorerBarNormal@Drawing@UI@ACDSystems@@UEBAKW4State@DrawingState@234@0@Z
?GetTransitionDuration@PushButton@Drawing@UI@ACDSystems@@UEBAKW4State@DrawingState@234@0@Z
?GetTransitionDuration@SplitButton@Drawing@UI@ACDSystems@@UEBAKW4State@DrawingState@234@0@Z
?GetTransitionDuration@Toolbar@Drawing@UI@ACDSystems@@UEBAKW4State@DrawingState@234@0@Z
?Height@ProxyPNGImage@@QEBAHXZ
?InSplitButtonRect@SplitButton@Drawing@UI@ACDSystems@@SA_NAEBUtagPOINT@@AEBUtagRECT@@@Z
?LoadImageFromDD@ProxyPNGImage@@SAPEAV1@PEAUDD_HImageObject@@@Z
?LoadPNGFromResource@ProxyPNGImage@@SAPEAV1@PEAXPEBD@Z
?LoadPNGFromResource@ProxyPNGImage@@SAPEAV1@PEBD@Z
?LoadPNGFromResource@ProxyPNGImage@@SAPEAV1@PEBDPEAX0@Z
?StateToStateId@ControlEdge@Drawing@UI@ACDSystems@@MEBAHW4State@DrawingState@234@@Z
?StateToStateId@ExplorerBarNormal@Drawing@UI@ACDSystems@@MEBAHW4State@DrawingState@234@@Z
?StateToStateId@PushButton@Drawing@UI@ACDSystems@@MEBAHW4State@DrawingState@234@@Z
?StateToStateId@SplitButton@Drawing@UI@ACDSystems@@MEBAHW4State@DrawingState@234@@Z
?StateToStateId@Toolbar@Drawing@UI@ACDSystems@@MEBAHW4State@DrawingState@234@@Z
?Width@ProxyPNGImage@@QEBAHXZ
GetCVXModule

Sections

.text
Size: - Virtual size: 19.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 11.5MB - Virtual size: 11.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c289cdf8fa7ea181211669983ff40852

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

wininet

mpr

gdiplus

comctl32

cvole2

winmm

psapi

dwrite

acdidclient

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

cvfc

_uiframework

msvcp140

shlwapi

concrt140

version

msimg32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

api-ms-win-crt-environment-l1-1-0

Exports

Exports

Sections

.text Size: - Virtual size: 19.8MB

.rdata Size: - Virtual size: 2.8MB

.data Size: - Virtual size: 3.7MB

.pdata Size: - Virtual size: 1.3MB

.vmp0 Size: - Virtual size: 1.3MB

.vmp1 Size: 11.5MB - Virtual size: 11.5MB

.rsrc Size: 144KB - Virtual size: 144KB

.text
Size: - Virtual size: 19.8MB

.rdata
Size: - Virtual size: 2.8MB

.data
Size: - Virtual size: 3.7MB

.pdata
Size: - Virtual size: 1.3MB

.vmp0
Size: - Virtual size: 1.3MB

.vmp1
Size: 11.5MB - Virtual size: 11.5MB

.rsrc
Size: 144KB - Virtual size: 144KB