Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-22_1abf9a243147f85a9d86ef8b24c20c43_mafia.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2024-02-22_1abf9a243147f85a9d86ef8b24c20c43_mafia.exe
Resource
win10v2004-20240221-en
Target
2024-02-22_1abf9a243147f85a9d86ef8b24c20c43_mafia
Size
754KB
MD5
1abf9a243147f85a9d86ef8b24c20c43
SHA1
dddab3c68f111ad10500428d05abfaa7e5d5cfbf
SHA256
5420aa6663e8022ec59ddb5758d61adda68d8ee441cbc4a8a79e10ce3f0a8fee
SHA512
faebfdd2636f7756955aff1f857815921249321860423f461388804d7e1fb1bea491822761658376f3b3685ad4bae76edc39612ee5762a164df7cda87595288d
SSDEEP
12288:5Z7Vzt53ViBIoC9voabgr5SmPENOxXiiRu5VPDxlZrGoUWXUsgMmQldNGLBcK35y:5Z7Xpx9HwxyhKoU3sDmQldy2K35rO8cL
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?codecForLocale@QTextCodec@@SAPAV1@XZ
?codecForCStrings@QString@@0PAVQTextCodec@@A
?self@QCoreApplication@@0PAV1@A
??0QEventLoop@@QAE@PAVQObject@@@Z
?lock@QMutex@@QAEXXZ
?unlock@QMutex@@QAEXXZ
?exec@QEventLoop@@QAEHV?$QFlags@W4ProcessEventsFlag@QEventLoop@@@@@Z
?wakeAll@QWaitCondition@@QAEXXZ
??0QVariant@@QAE@H@Z
?toInt@QVariant@@QBEHPA_N@Z
?quit@QEventLoop@@QAEXXZ
??1QTimer@@UAE@XZ
?timerEvent@QTimer@@MAEXPAVQTimerEvent@@@Z
?metaObject@QEventLoop@@UBEPBUQMetaObject@@XZ
?qt_metacast@QTimer@@UAEPAXPBD@Z
?metaObject@QTimer@@UBEPBUQMetaObject@@XZ
??0QTimer@@QAE@PAVQObject@@@Z
?start@QTimer@@QAEXH@Z
??0QFileInfo@@QAE@ABVQString@@@Z
?absoluteDir@QFileInfo@@QBE?AVQDir@@XZ
?absolutePath@QFileInfo@@QBE?AVQString@@XZ
?remove@QFile@@QAE_NXZ
?endsWith@QString@@QBE_NABV1@W4CaseSensitivity@Qt@@@Z
?arg@QString@@QBE?AV1@VQChar@@HABV2@@Z
?fileName@QFileInfo@@QBE?AVQString@@XZ
?exists@QFile@@SA_NABVQString@@@Z
??0QProcess@@QAE@PAVQObject@@@Z
?setWorkingDirectory@QProcess@@QAEXABVQString@@@Z
?start@QProcess@@QAEXABVQString@@ABVQStringList@@V?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?waitForStarted@QProcess@@QAE_NH@Z
?waitForFinished@QProcess@@QAE_NH@Z
?kill@QProcess@@QAEXXZ
??1QProcess@@UAE@XZ
?arg@QString@@QBE?AV1@GHHABVQChar@@@Z
??0QUrl@@QAE@ABVQString@@@Z
??0QUrl@@QAE@XZ
??1QUrl@@QAE@XZ
?mkpath@QDir@@QBE_NABVQString@@@Z
?qt_metacast@QEventLoop@@UAEPAXPBD@Z
?qt_metacall@QEventLoop@@UAEHW4Call@QMetaObject@@HPAPAX@Z
??1QEventLoop@@UAE@XZ
?qt_metacall@QTimer@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?exists@QDir@@QBE_NXZ
?realloc@QListData@@QAEXH@Z
?createData@QMapData@@SAPAU1@H@Z
?node_create@QMapData@@QAEPAUNode@1@QAPAU21@HH@Z
?node_delete@QMapData@@QAEXQAPAUNode@1@HPAU21@@Z
?continueFreeData@QMapData@@QAEXH@Z
?write@QIODevice@@QAE_JPBD@Z
?deleteLater@QObject@@QAEXXZ
?indexOf@QString@@QBEHABV1@HW4CaseSensitivity@Qt@@@Z
?truncate@QString@@QAEXH@Z
?section@QString@@QBE?AV1@ABV1@HHV?$QFlags@W4SectionFlag@QString@@@@@Z
??AQString@@QAE?AVQCharRef@@H@Z
??0QChar@@QAE@D@Z
??4QByteArray@@QAEAAV0@$$QAV0@@Z
??1QCryptographicHash@@QAE@XZ
??0QString@@QAE@ABVQByteArray@@@Z
?toHex@QByteArray@@QBE?AV1@XZ
?result@QCryptographicHash@@QBE?AVQByteArray@@XZ
?addData@QCryptographicHash@@QAEXABVQByteArray@@@Z
?read@QIODevice@@QAE?AVQByteArray@@_J@Z
?bytesAvailable@QIODevice@@UBE_JXZ
??0QCryptographicHash@@QAE@W4Algorithm@0@@Z
?resize@QFile@@QAE_N_J@Z
?copy@QFile@@SA_NABVQString@@0@Z
??1QTextStream@@UAE@XZ
??6QTextStream@@QAEAAV0@PBD@Z
??6QTextStream@@QAEAAV0@ABVQString@@@Z
?toString@QDateTime@@QBE?AVQString@@W4DateFormat@Qt@@@Z
?currentDateTime@QDateTime@@SA?AV1@XZ
??0QTextStream@@QAE@PAVQString@@V?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?setCodec@QTextStream@@QAEXPBD@Z
?setDevice@QTextStream@@QAEXPAVQIODevice@@@Z
?setFileName@QFile@@QAEXABVQString@@@Z
??6QTextStream@@QAEAAV0@VQChar@@@Z
??0QTextStream@@QAE@XZ
??0QFile@@QAE@XZ
?flush@@YAAAVQTextStream@@AAV1@@Z
?endl@@YAAAVQTextStream@@AAV1@@Z
??8QDateTime@@QBE_NABV0@@Z
??6@YAAAVQDataStream@@AAV0@ABVQDateTime@@@Z
??6QDataStream@@QAEAAV0@F@Z
?registerType@QMetaType@@SAHPBDP6AXPAX@ZP6APAXPBX@Z@Z
?registerTypedef@QMetaType@@SAHPBDH@Z
??5@YAAAVQDataStream@@AAV0@AAVQString@@@Z
??5@YAAAVQDataStream@@AAV0@AAVQDateTime@@@Z
??5QDataStream@@QAEAAV0@AAF@Z
?free@QVectorData@@SAXPAU1@H@Z
?qBadAlloc@@YAXXZ
?allocate@QVectorData@@SAPAU1@HH@Z
?qMemSet@@YAPAXPAXHI@Z
?reallocate@QVectorData@@SAPAU1@PAU1@HHH@Z
?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z
??YQString@@QAEAAV0@PBD@Z
?rename@QDir@@QAE_NABVQString@@0@Z
?toNativeSeparators@QDir@@SA?AVQString@@ABV2@@Z
??0QString@@QAE@PBVQChar@@H@Z
??0QChar@@QAE@XZ
?compare@QString@@QBEHABV1@W4CaseSensitivity@Qt@@@Z
?path@QDir@@QBE?AVQString@@XZ
?toAscii@QString@@QBE?AVQByteArray@@XZ
?QStringList_join@QtPrivate@@YA?AVQString@@PBVQStringList@@ABV2@@Z
??6QDataStream@@QAEAAV0@_N@Z
?atEnd@QDataStream@@QBE_NXZ
??5QDataStream@@QAEAAV0@AAH@Z
?toShort@QString@@QBEFPA_NH@Z
??5QDataStream@@QAEAAV0@AA_N@Z
?arg@QString@@QBE?AV1@JHHABVQChar@@@Z
?remove@QListData@@QAEXH@Z
??5QDataStream@@QAEAAV0@AA_J@Z
??0QFutureInterfaceBase@@QAE@W4State@0@@Z
??1QFutureInterfaceBase@@UAE@XZ
??0QFutureInterfaceBase@@QAE@ABV0@@Z
?isRunning@QFutureInterfaceBase@@QBE_NXZ
??4QFutureInterfaceBase@@QAEAAV0@ABV0@@Z
??4QByteArray@@QAEAAV0@PBD@Z
?fromTime_t@QDateTime@@SA?AV1@I@Z
?start@QThreadPool@@QAEXPAVQRunnable@@H@Z
?globalInstance@QThreadPool@@SAPAV1@XZ
?reportStarted@QFutureInterfaceBase@@QAEXXZ
?setRunnable@QFutureInterfaceBase@@QAEXPAVQRunnable@@@Z
?reportFinished@QFutureInterfaceBase@@QAEXXZ
??1UnhandledException@QtConcurrent@@UAE@XZ
??0UnhandledException@QtConcurrent@@QAE@XZ
?reportException@QFutureInterfaceBase@@QAEXABVException@QtConcurrent@@@Z
?isCanceled@QFutureInterfaceBase@@QBE_NXZ
??4QDateTime@@QAEAAV0@ABV0@@Z
??1QLibrary@@UAE@XZ
?resolve@QLibrary@@QAEPAXPBD@Z
??0QLibrary@@QAE@ABVQString@@PAVQObject@@@Z
??1QDebug@@QAE@XZ
??6QDebug@@QAEAAV0@P6AAAVQTextStream@@AAV1@@Z@Z
??6QDebug@@QAEAAV0@PBD@Z
?qCritical@@YA?AVQDebug@@XZ
??1QWaitCondition@@QAE@XZ
??1QMutex@@QAE@XZ
?applicationFilePath@QCoreApplication@@SA?AVQString@@XZ
?qErrnoWarning@@YAXHPBDZZ
?wait@QWaitCondition@@QAE_NPAVQMutex@@K@Z
??0QMutex@@QAE@W4RecursionMode@0@@Z
??0QWaitCondition@@QAE@XZ
??8QString@@QBE_NABVQLatin1String@@@Z
?arguments@QCoreApplication@@SA?AVQStringList@@XZ
?fromAscii@QChar@@SA?AV1@D@Z
??4QCharRef@@QAEAAV0@ABVQChar@@@Z
?toFloat@QString@@QBEMPA_N@Z
??MQString@@QBE_NABV0@@Z
?shared_null@QMapData@@2U1@A
?toLatin1@QString@@QBE?AVQByteArray@@XZ
?tr@QObject@@SA?AVQString@@PBD0@Z
??6QDataStream@@QAEAAV0@H@Z
??6@YAAAVQDataStream@@AAV0@ABVQString@@@Z
?detach@QByteArray@@QAEXXZ
??0QByteArray@@QAE@PBDH@Z
??0QDataStream@@QAE@PAVQByteArray@@V?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
??1QDataStream@@UAE@XZ
?applicationPid@QCoreApplication@@SA_JXZ
?execute@QProcess@@SAHABVQString@@ABVQStringList@@@Z
?startDetached@QProcess@@SA_NABVQString@@ABVQStringList@@0PA_J@Z
?append@QListData@@QAEPAPAXXZ
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?fromUtf16@QString@@SA?AV1@PBGH@Z
?arg@QString@@QBE?AV1@HHHABVQChar@@@Z
?setQObjectShared@ExternalRefCountData@QtSharedPointer@@QAEXPBVQObject@@_N@Z
?separator@QDir@@SA?AVQChar@@XZ
?changeGuard@QMetaObject@@SAXPAPAVQObject@@PAV2@@Z
?removeGuard@QMetaObject@@SAXPAPAVQObject@@@Z
?shared_null@QListData@@2UData@1@A
?utf16@QString@@QBEPBGXZ
??0QVariant@@QAE@PBD@Z
?value@QSettings@@QBE?AVQVariant@@ABVQString@@ABV2@@Z
?toByteArray@QVariant@@QBE?AVQByteArray@@XZ
??0QSettings@@QAE@W4Scope@0@ABVQString@@1PAVQObject@@@Z
??0QByteArray@@QAE@PBD@Z
??0QVariant@@QAE@ABVQByteArray@@@Z
?setValue@QSettings@@QAEXABVQString@@ABVQVariant@@@Z
??1QSettings@@UAE@XZ
??YQString@@QAEAAV0@VQChar@@@Z
??0QCoreApplication@@QAE@AAHPAPADH@Z
?exec@QCoreApplication@@SAHXZ
??1QCoreApplication@@UAE@XZ
??0QThread@@QAE@PAVQObject@@@Z
?connect@QObject@@SA_NPBV1@PBD01W4ConnectionType@Qt@@@Z
?start@QThread@@QAEXW4Priority@1@@Z
?singleShot@QTimer@@SAXHPAVQObject@@PBD@Z
??4QString@@QAEAAV0@$$QAV0@@Z
?quit@QThread@@QAEXXZ
?wait@QThread@@QAE_NK@Z
??1QThread@@UAE@XZ
?exec@QThread@@IAEHXZ
??0QDateTime@@QAE@ABV0@@Z
??0QDateTime@@QAE@XZ
??1QDateTime@@QAE@XZ
?staticMetaObject@QThread@@2UQMetaObject@@B
?qt_metacall@QThread@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?activate@QMetaObject@@SAXPAVQObject@@PBU1@HPAPAX@Z
?qt_metacast@QThread@@UAEPAXPBD@Z
?staticMetaObject@QObject@@2UQMetaObject@@B
?qt_metacall@QObject@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QObject@@UAEPAXPBD@Z
??0QObject@@QAE@PAV0@@Z
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ
??0QDir@@QAE@ABVQString@@@Z
?entryInfoList@QDir@@QBE?AV?$QList@VQFileInfo@@@@V?$QFlags@W4Filter@QDir@@@@V?$QFlags@W4SortFlag@QDir@@@@@Z
?filePath@QFileInfo@@QBE?AVQString@@XZ
?isFile@QFileInfo@@QBE_NXZ
?absoluteFilePath@QFileInfo@@QBE?AVQString@@XZ
?relativeFilePath@QDir@@QBE?AVQString@@ABV2@@Z
?contains@QString@@QBE?AVQBool@@ABV1@W4CaseSensitivity@Qt@@@Z
??1QDir@@QAE@XZ
?rehash@QHashData@@QAEXH@Z
??4QString@@QAEAAV0@ABV0@@Z
?disconnectNotify@QObject@@MAEXPBD@Z
?connectNotify@QObject@@MAEXPBD@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
??1QObject@@UAE@XZ
?detach_helper2@QHashData@@QAEPAU1@P6AXPAUNode@1@PAX@ZP6AX0@ZHH@Z
?free_helper@QHashData@@QAEXP6AXPAUNode@1@@Z@Z
?detach@QListData@@QAEPAUData@1@H@Z
?allocateNode@QHashData@@QAEPAXH@Z
?qHash@@YAIABVQString@@@Z
??0QFileInfo@@QAE@ABV0@@Z
??1QFileInfo@@QAE@XZ
??8QString@@QBE_NABV0@@Z
?shared_null@QHashData@@2U1@A
?shared_null@QByteArray@@0UData@1@A
??0QBuffer@@QAE@PAVQByteArray@@PAVQObject@@@Z
?open@QBuffer@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?setDevice@QXmlStreamWriter@@QAEXPAVQIODevice@@@Z
?writeStartDocument@QXmlStreamWriter@@QAEXXZ
?writeStartElement@QXmlStreamWriter@@QAEXABVQString@@@Z
?writeAttribute@QXmlStreamWriter@@QAEXABVQString@@0@Z
??0QVariant@@QAE@_N@Z
?toString@QVariant@@QBE?AVQString@@XZ
?writeTextElement@QXmlStreamWriter@@QAEXABVQString@@0@Z
?writeEndElement@QXmlStreamWriter@@QAEXXZ
?writeEndDocument@QXmlStreamWriter@@QAEXXZ
??1QBuffer@@UAE@XZ
?write@QIODevice@@QAE_JPBD_J@Z
?remove@QFile@@SA_NABVQString@@@Z
?rename@QFile@@SA_NABVQString@@0@Z
??0QXmlStreamWriter@@QAE@XZ
?setAutoFormatting@QXmlStreamWriter@@QAEX_N@Z
??1QXmlStreamWriter@@QAE@XZ
?fromAscii@QString@@SA?AV1@PBDH@Z
??0QFile@@QAE@ABVQString@@@Z
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
??0QChar@@QAE@UQLatin1Char@@@Z
?errorString@QIODevice@@QBE?AVQString@@XZ
?arg@QString@@QBE?AV1@ABV1@HABVQChar@@@Z
??1QFile@@UAE@XZ
?readAll@QIODevice@@QAE?AVQByteArray@@XZ
?close@QFile@@UAEXXZ
?qFree@@YAXPAX@Z
??1QByteArray@@QAE@XZ
??0QString@@QAE@ABV0@@Z
?trimmed@QString@@QBE?AV1@XZ
?append@QString@@QAEAAV1@ABV1@@Z
??0QVariant@@QAE@ABVQString@@@Z
?toBool@QVariant@@QBE_NXZ
??1QVariant@@QAE@XZ
??9QString@@QBE_NPBD@Z
??4QString@@QAEAAV0@PBD@Z
??8QString@@QBE_NPBD@Z
?fromAscii_helper@QString@@CAPAUData@1@PBDH@Z
?clear@QString@@QAEXXZ
?free@QString@@CAXPAUData@1@@Z
??1QString@@QAE@XZ
?shared_null@QString@@0UData@1@A
?ignorableWhitespace@QXmlDefaultHandler@@UAE_NABVQString@@@Z
?processingInstruction@QXmlDefaultHandler@@UAE_NABVQString@@0@Z
?endPrefixMapping@QXmlDefaultHandler@@UAE_NABVQString@@@Z
?startPrefixMapping@QXmlDefaultHandler@@UAE_NABVQString@@0@Z
?startDocument@QXmlDefaultHandler@@UAE_NXZ
??0QXmlDefaultHandler@@QAE@XZ
??0QXmlInputSource@@QAE@PAVQIODevice@@@Z
?skippedEntity@QXmlDefaultHandler@@UAE_NABVQString@@@Z
?warning@QXmlDefaultHandler@@UAE_NABVQXmlParseException@@@Z
?error@QXmlDefaultHandler@@UAE_NABVQXmlParseException@@@Z
?notationDecl@QXmlDefaultHandler@@UAE_NABVQString@@00@Z
?unparsedEntityDecl@QXmlDefaultHandler@@UAE_NABVQString@@000@Z
?resolveEntity@QXmlDefaultHandler@@UAE_NABVQString@@0AAPAVQXmlInputSource@@@Z
?setDocumentLocator@QXmlDefaultHandler@@UAEXPAVQXmlLocator@@@Z
?endDTD@QXmlDefaultHandler@@UAE_NXZ
?startEntity@QXmlDefaultHandler@@UAE_NABVQString@@@Z
?endEntity@QXmlDefaultHandler@@UAE_NABVQString@@@Z
?startCDATA@QXmlDefaultHandler@@UAE_NXZ
?endCDATA@QXmlDefaultHandler@@UAE_NXZ
?comment@QXmlDefaultHandler@@UAE_NABVQString@@@Z
?attributeDecl@QXmlDefaultHandler@@UAE_NABVQString@@0000@Z
?internalEntityDecl@QXmlDefaultHandler@@UAE_NABVQString@@0@Z
?externalEntityDecl@QXmlDefaultHandler@@UAE_NABVQString@@00@Z
??1QXmlDefaultHandler@@UAE@XZ
?value@QXmlAttributes@@QBE?AVQString@@ABV2@@Z
??1QXmlSimpleReader@@UAE@XZ
??1QXmlInputSource@@UAE@XZ
?parse@QXmlSimpleReader@@UAE_NABVQXmlInputSource@@@Z
?setData@QXmlInputSource@@UAEXABVQByteArray@@@Z
??0QXmlInputSource@@QAE@XZ
?setErrorHandler@QXmlSimpleReader@@UAEXPAVQXmlErrorHandler@@@Z
?setContentHandler@QXmlSimpleReader@@UAEXPAVQXmlContentHandler@@@Z
??0QXmlSimpleReader@@QAE@XZ
?endDocument@QXmlDefaultHandler@@UAE_NXZ
?startDTD@QXmlDefaultHandler@@UAE_NABVQString@@00@Z
?fromName@QHostInfo@@SA?AV1@ABVQString@@@Z
?error@QHostInfo@@QBE?AW4HostInfoError@1@XZ
??1QHostInfo@@QAE@XZ
?metaObject@QNetworkAccessManager@@UBEPBUQMetaObject@@XZ
??0QNetworkAccessManager@@QAE@PAVQObject@@@Z
??0QNetworkRequest@@QAE@ABVQUrl@@@Z
?setUrl@QNetworkRequest@@QAEXABVQUrl@@@Z
?get@QNetworkAccessManager@@QAEPAVQNetworkReply@@ABVQNetworkRequest@@@Z
??1QNetworkRequest@@QAE@XZ
??0QNetworkProxy@@QAE@W4ProxyType@0@ABVQString@@G11@Z
?setProxy@QNetworkAccessManager@@QAEXABVQNetworkProxy@@@Z
??1QNetworkProxy@@QAE@XZ
?setRawHeader@QNetworkRequest@@QAEXABVQByteArray@@0@Z
?qt_metacast@QNetworkAccessManager@@UAEPAXPBD@Z
?qt_metacall@QNetworkAccessManager@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?createRequest@QNetworkAccessManager@@MAEPAVQNetworkReply@@W4Operation@1@ABVQNetworkRequest@@PAVQIODevice@@@Z
??1QNetworkAccessManager@@UAE@XZ
?manager@QNetworkReply@@QBEPAVQNetworkAccessManager@@XZ
?error@QNetworkReply@@QBE?AW4NetworkError@1@XZ
lstrcmpA
ResumeThread
GlobalReAlloc
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenA
lstrcpynA
SetLastError
MulDiv
MultiByteToWideChar
GetModuleHandleA
EnumResourceNamesA
GetSystemDirectoryA
GetVolumeInformationA
GetSystemInfo
DeleteFileA
ReleaseMutex
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetVersionExA
SetFileAttributesA
CopyFileA
FlushFileBuffers
GetFileAttributesA
CreateDirectoryA
CreateFileA
GetCommandLineA
GlobalFree
LoadLibraryA
GetProcAddress
FreeLibrary
DeviceIoControl
Sleep
CreateMutexA
GetComputerNameW
GetModuleHandleW
FormatMessageW
InterlockedDecrement
GetLastError
WideCharToMultiByte
lstrcpyW
WriteFile
GetCurrentProcess
CreateFileW
GetFileType
GetFileInformationByHandle
GetSystemTime
SystemTimeToFileTime
GetFileSize
SetFilePointer
ReadFile
FileTimeToSystemTime
InterlockedIncrement
InitializeCriticalSectionAndSpinCount
lstrlenW
OpenProcess
TerminateProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
FindFirstFileW
SetFileAttributesW
DeleteFileW
FindNextFileW
FindClose
RemoveDirectoryW
GetVersionExW
LocalFree
HeapAlloc
GetProcessHeap
HeapFree
GetStartupInfoW
QueryPerformanceCounter
GetACP
CreateThread
GetOEMCP
IsValidCodePage
GetFullPathNameA
PeekNamedPipe
GetCurrentDirectoryW
GetConsoleCP
GetConsoleMode
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
InterlockedExchange
EncodePointer
EnumSystemLocalesA
IsValidLocale
GetDriveTypeW
SetEndOfFile
CompareStringW
SetEnvironmentVariableA
WriteConsoleW
SetHandleCount
DecodePointer
RtlUnwind
RaiseException
ExitProcess
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetEvent
CloseHandle
CreateEventA
ReleaseSemaphore
OpenEventA
ResetEvent
WaitForMultipleObjects
SetWaitableTimer
CreateWaitableTimerA
HeapSetInformation
GetSystemTimeAsFileTime
GetTimeZoneInformation
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
HeapReAlloc
GetTimeFormatA
GetDateFormatA
SetStdHandle
ExitThread
LCMapStringW
GetCPInfo
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapSize
IsProcessorFeaturePresent
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
HeapCreate
LoadLibraryW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
FormatMessageA
RegCloseKey
OpenServiceW
OpenSCManagerW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CloseServiceHandle
RegQueryValueExA
RegOpenKeyExA
SetServiceStatus
RegisterServiceCtrlHandlerExW
ShellExecuteExW
SHAppBarMessage
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
SHGetFolderPathW
CoInitialize
CoUninitialize
CoCreateInstance
CoSetProxyBlanket
CoInitializeSecurity
CoTaskMemFree
CreateStreamOnHGlobal
NdrClientCall2
NdrServerCall2
RpcMgmtWaitServerListen
RpcMgmtStopServerListening
RpcServerListen
RpcServerRegisterIf
RpcServerUseProtseqEpW
RpcBindingFree
RpcMgmtSetCancelTimeout
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcStringFreeW
CryptUnprotectData
CryptProtectData
EnumProcesses
EnumProcessModules
GetModuleBaseNameW
InternetOpenUrlA
InternetOpenA
InternetConnectA
HttpOpenRequestA
InternetSetStatusCallback
InternetSetOptionA
HttpSendRequestA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
GetAdaptersInfo
ShowScrollBar
SystemParametersInfoA
EndDialog
GetSysColorBrush
UpdateWindow
GetScrollRange
SetFocus
GetNextDlgTabItem
PtInRect
KillTimer
ShowWindow
DefWindowProcA
RegisterClassExA
DialogBoxParamW
DispatchMessageA
TranslateMessage
IsDialogMessageA
GetMessageA
GetWindowPlacement
UnionRect
SetRect
GetSysColor
GetWindowTextA
GetWindowTextLengthA
EndPaint
BeginPaint
SetWindowTextA
MonitorFromRect
GetMonitorInfoA
EnumWindows
EnableScrollBar
GetCapture
GetCursorPos
WindowFromPoint
GetWindowRect
MapWindowPoints
TrackMouseEvent
CallWindowProcA
GetParent
LoadCursorA
SetCursor
GetClassNameA
GetPropA
InvalidateRect
FillRect
GetDC
ReleaseDC
CreateWindowExW
SendMessageW
CreateWindowExA
MoveWindow
GetClientRect
GetScrollPos
ScrollWindowEx
SetScrollPos
EnumChildWindows
SetWindowLongA
DestroyWindow
RemovePropA
LoadBitmapA
GetDlgItem
GetWindowLongA
GetSystemMetrics
SetScrollRange
PostMessageA
SetWindowTextW
SetWindowPos
AnimateWindow
GetWindowThreadProcessId
RedrawWindow
MessageBoxW
SetPropA
SendMessageA
LoadImageA
SetTimer
DPtoLP
GetTextMetricsA
SetBrushOrgEx
BitBlt
SetBkMode
GetDeviceCaps
CreateCompatibleBitmap
CreatePatternBrush
CreateCompatibleDC
SetBkColor
SetTextColor
CreateSolidBrush
TextOutW
DeleteDC
GetStockObject
GetTextExtentPoint32A
SelectObject
GetTextExtentPoint32W
DeleteObject
GetObjectA
CreateFontIndirectA
EnumFontFamiliesExA
GetTextExtentExPointW
SetTextAlign
CreatePen
CreateDIBSection
LineTo
MoveToEx
SysAllocString
VariantClear
SysFreeString
OleLoadPicturePath
OleLoadPicture
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ