Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
CAJVieweru.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
CAJVieweru.exe
Resource
win10v2004-20240226-en
Target
CAJVieweru.exe
Size
2.0MB
MD5
8d82d4e6605f1f8e9cb0b177a1549984
SHA1
a59d58513845bf04daf027ca3b6baa6f387faca6
SHA256
e18f63027ed1e4c53ee7f047bc0ed6269249fdd1e095329f7118693c948f6caf
SHA512
0243e6a7570d10255129c00fffaec53bc32722535faba9fec3f6b3b8822ad1ce926413149d7f68e38b3ed3c8222783e22b8ab731fde26dd47c0cd9c81943e5fd
SSDEEP
24576:BkkmUWsZEJ1hfTg6PpjPDcDydVTZAWG62KHnXmobxcS5aAXPtL:BkkmUWsQhbNPpDADmT2R62WnXllPJ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
d:\work\CAJViewer7\bin\CAJVieweru.pdb
?SendMail@@YAHPAUHWND__@@PB_W1111PAVCStringArray@@H1H11@Z
?SetAttrib@CMarkupMSXML@@QAEHPB_W0@Z
?Save@CMarkupMSXML@@QAEHPB_W@Z
?ReadDword@CRegistry@@QAEKV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@K@Z
?WriteDword@CRegistry@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@K@Z
?Show@CPicture@@QAEHPAVCDC@@VCRect@@@Z
?ShowSplashScreen@CSplashWnd@@SAXPAUHINSTANCE__@@IPB_WPAVCWnd@@@Z
?EnableSplashScreen@CSplashWnd@@SAXH@Z
?SetAttrib@CMarkupMSXML@@QAEHPB_WH@Z
?GetChildData@CMarkupMSXML@@QBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetHttpFile@@YAHPB_W0PAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@HPAVCGetHttpFile@@@Z
?SetDoc@CMarkupMSXML@@QAEHPAXH@Z
?GetDataInt@CMarkupMSXML@@QBEHXZ
?FindNode@CMarkupMSXML@@QAEHH@Z
?GetDoc@CMarkupMSXML@@QBE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?SetData@CMarkupMSXML@@QAEHPB_WH@Z
?GetSaveName@CGetHttpFile@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?PostThreadMessageW@CGetHttpFile@@QAEHIIJ@Z
?DeleteKey@CRegistry@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
??0CRegistry@@QAE@XZ
?SetRootKey@CRegistry@@QAEHPAUHKEY__@@@Z
?SetKey@CRegistry@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z
?ReadString@CRegistry@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@0@Z
??1CRegistry@@QAE@XZ
??0CPicture@@QAE@XZ
?Load@CPicture@@QAEHPAUHINSTANCE__@@IPB_W@Z
??1CPicture@@UAE@XZ
??0CMarkupMSXML@@QAE@XZ
?Load@CMarkupMSXML@@QAEHPB_W@Z
?FindElem@CMarkupMSXML@@QAEHPB_W@Z
?FindChildElem@CMarkupMSXML@@QAEHPB_WH@Z
?IntoElem@CMarkupMSXML@@QAEHXZ
?IsOK@CGetHttpFile@@QAEHXZ
?AddAttrib@CMarkupMSXML@@QAEHPB_W0@Z
?SetCallBack@CGetHttpFile@@QAEXPAXP6GX0PAV1@H@Z@Z
?SetURL@CGetHttpFile@@QAEXPB_W@Z
?SetSaveName@CGetHttpFile@@QAEXPB_W@Z
?SetForceGet@CGetHttpFile@@QAEXH@Z
?GetThisClass@CGetHttpFile@@SGPAUCRuntimeClass@@XZ
?GetChildAttrib@CMarkupMSXML@@QBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PB_W@Z
?AddElem@CMarkupMSXML@@QAEHPB_W0@Z
?Close@CGetHttpFile@@QAEXXZ
?GetID@CGetHttpFile@@QBEIXZ
?SetID@CGetHttpFile@@QAEXI@Z
?IsRunning@CGetHttpFile@@QAEHXZ
?PreInit@CGetHttpFile@@QAEXXZ
?Load@CParseHE@@QAEHAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
??1CParseADXML@@QAE@XZ
?GetInterval@CParseADXML@@QAEKXZ
?GetImageData@CParseADXML@@QAEPAXAAH@Z
?GetFlashWidth@CParseADXML@@QAEHXZ
?GetFlashHeight@CParseADXML@@QAEHXZ
?GetFlashData@CParseADXML@@QAEPAXAAH@Z
?GetFlashShowTime@CParseADXML@@QAEHXZ
?GetFlashShowCount@CParseADXML@@QAEHXZ
?GetTipText@CParseADXML@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetURL@CParseADXML@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetADCount@CParseADXML@@QAEHXZ
?GetID@CParseADXML@@QAEHXZ
?Load@CParseADXML@@QAEHAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
??0CParseADXML@@QAE@XZ
??1CParseHE@@QAE@XZ
??0CParseHE@@QAE@XZ
?GetURL@CParseHE@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z
?GetCount@CParseHE@@QAEHXZ
?GetText@CParseHE@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z
??1CMarkupMSXML@@UAE@XZ
?ResetPos@CMarkupMSXML@@QAEXXZ
?GetAttrib@CMarkupMSXML@@QBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PB_W@Z
?OutOfElem@CMarkupMSXML@@QAEHXZ
?GetData@CMarkupMSXML@@QBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?AddNode@CMarkupMSXML@@QAEHHPB_W@Z
?SetRangeParam@CWordHelper@@MAEHW4RANGE_PARAM@CHelperInterface@@J@Z
?SetIndent@CWordHelper@@MAEHHM@Z
?Quit@CWordHelper@@UAEXH@Z
?GetCurPos@CWordHelper@@UAEHAAJ0@Z
?NewParagraph@CWordHelper@@UAEHXZ
?SetParagraphAlign@CWordHelper@@UAEHW4ALIGN_TYPE@CHelperInterface@@@Z
?AddHyperlink@CWordHelper@@UAEHPB_W0@Z
?SetStyle@CWordHelper@@UAEHPB_W@Z
?SetFont@CWordHelper@@UAEHPB_WM@Z
?InsertText@CWordHelper@@UAEHPB_W@Z
?WriteString@CRegistry@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0@Z
?HideSplashScreen@CSplashWnd@@SAXXZ
?Paste@CWordHelper@@UAEHW4PASTE_POS@CHelperInterface@@@Z
?SetSelectionPos@CWordHelper@@UAEHJJ@Z
?ResetSelection@CWordHelper@@UAEXXZ
?Replace@CWordHelper@@UAEHJJPB_W0@Z
?Find@CWordHelper@@UAEJJJPB_W@Z
?GetEnd@CWordHelper@@UAEJXZ
?Close@CWordHelper@@UAEHH@Z
?PrintOut@CWordHelper@@UAEXPB_W@Z
?CreateObject@CWordHelper@@UAEHH@Z
?SetRangeParam@CWPSHelper@@MAEHW4RANGE_PARAM@CHelperInterface@@J@Z
?SetIndent@CWPSHelper@@MAEHHM@Z
?Quit@CWPSHelper@@UAEXH@Z
?GetCurPos@CWPSHelper@@UAEHAAJ0@Z
?NewParagraph@CWPSHelper@@UAEHXZ
?SetParagraphAlign@CWPSHelper@@UAEHW4ALIGN_TYPE@CHelperInterface@@@Z
?AddHyperlink@CWPSHelper@@UAEHPB_W0@Z
?SetStyle@CWPSHelper@@UAEHPB_W@Z
?SetFont@CWPSHelper@@UAEHPB_WM@Z
?InsertText@CWPSHelper@@UAEHPB_W@Z
?Paste@CWPSHelper@@UAEHW4PASTE_POS@CHelperInterface@@@Z
?SetSelectionPos@CWPSHelper@@UAEHJJ@Z
?ResetSelection@CWPSHelper@@UAEXXZ
?Replace@CWPSHelper@@UAEHJJPB_W0@Z
?Find@CWPSHelper@@UAEJJJPB_W@Z
?GetEnd@CWPSHelper@@UAEJXZ
?Close@CWPSHelper@@UAEHH@Z
?PreTranslateAppMessage@CSplashWnd@@SAHPAUtagMSG@@@Z
?Save@CWordHelper@@UAEHXZ
?Open@CWordHelper@@UAEHPB_W@Z
?SelectDoc@CWordHelper@@UAEHH@Z
?NewDoc@CWordHelper@@UAEHXZ
?GetDocs@CWordHelper@@UAEHPAVCStringArray@@@Z
?Show@CWordHelper@@UAEXXZ
?PrintOut@CWPSHelper@@UAEXPB_W@Z
?Save@CWPSHelper@@UAEHXZ
?Open@CWPSHelper@@UAEHPB_W@Z
?SelectDoc@CWPSHelper@@UAEHH@Z
?NewDoc@CWPSHelper@@UAEHXZ
?GetDocs@CWPSHelper@@UAEHPAVCStringArray@@@Z
?Show@CWPSHelper@@UAEXXZ
?CreateObject@CWPSHelper@@UAEHH@Z
?IsOK@CHelperInterface@@QAEHXZ
??0CWordHelper@@QAE@XZ
??0CWPSHelper@@QAE@XZ
?CheckWState@@YAIW4W_TYPE@@@Z
??1CWPSHelper@@UAE@XZ
??1CWordHelper@@UAE@XZ
?AddAttrib@CMarkupMSXML@@QAEHPB_WH@Z
?AddChildElem@CMarkupMSXML@@QAEHPB_W0@Z
?InsertElem@CMarkupMSXML@@QAEHPB_W0@Z
?GetAttribInt@CMarkupMSXML@@QBEHPB_W@Z
?AddElem@CMarkupMSXML@@QAEHPB_WH@Z
?RemoveElem@CMarkupMSXML@@QAEHXZ
ord2708
ord2856
ord2534
ord2640
ord2527
ord3712
ord3713
ord3703
ord2638
ord3943
ord4480
ord4255
ord577
ord3756
ord293
ord5197
ord283
ord4119
ord1894
ord5862
ord3873
ord2311
ord870
ord774
ord5869
ord3079
ord3869
ord2860
ord3678
ord3415
ord3204
ord1925
ord3155
ord2366
ord2077
ord1536
ord4226
ord6271
ord5210
ord2985
ord3158
ord572
ord587
ord2076
ord3156
ord5829
ord3565
ord1637
ord1579
ord736
ord3281
ord1271
ord5633
ord3306
ord709
ord3995
ord4117
ord5637
ord501
ord2254
ord4094
ord2085
ord3238
ord1946
ord2365
ord1274
ord1058
ord1545
ord3189
ord620
ord280
ord1176
ord5710
ord2083
ord1632
ord1562
ord4232
ord651
ord1921
ord777
ord416
ord3946
ord722
ord530
ord1118
ord2310
ord6063
ord2876
ord6116
ord3396
ord1476
ord5867
ord2364
ord4026
ord6219
ord3901
ord5178
ord4206
ord4729
ord4884
ord2011
ord1662
ord1661
ord1542
ord5908
ord1392
ord4256
ord6086
ord4574
ord3590
ord5618
ord5982
ord3343
ord3344
ord3508
ord5398
ord2461
ord3249
ord2895
ord5406
ord1472
ord461
ord1156
ord1053
ord6061
ord2121
ord3927
ord5727
ord325
ord3342
ord1962
ord5981
ord2261
ord2255
ord776
ord5327
ord6293
ord5316
ord6282
ord760
ord5519
ord5643
ord5584
ord2521
ord3677
ord5119
ord334
ord593
ord4101
ord1236
ord4074
ord2651
ord1252
ord578
ord894
ord896
ord2460
ord1906
ord5558
ord5118
ord5712
ord864
ord5562
ord2297
ord1172
ord2250
ord1079
ord1086
ord4559
ord5793
ord5094
ord1449
ord5578
ord3821
ord1678
ord1677
ord2666
ord5450
ord958
ord3024
ord2757
ord4034
ord2832
ord2936
ord4475
ord4257
ord437
ord3503
ord4008
ord6301
ord3103
ord3440
ord4462
ord4460
ord4319
ord2039
ord3055
ord1448
ord5577
ord5381
ord3026
ord2759
ord955
ord364
ord667
ord584
ord6300
ord1961
ord2901
ord1425
ord317
ord432
ord5425
ord3015
ord5442
ord6240
ord724
ord533
ord1174
ord1028
ord1065
ord1178
ord6302
ord3104
ord1479
ord282
ord2926
ord3051
ord2340
ord6111
ord3990
ord5113
ord372
ord5414
ord1785
ord2239
ord1007
ord630
ord3032
ord2012
ord3050
ord3027
ord899
ord2760
ord385
ord5209
ord498
ord1159
ord3334
ord2140
ord5609
ord5524
ord672
ord612
ord5093
ord1117
ord3398
ord5464
ord1047
ord1273
ord3102
ord4059
ord4032
ord6272
ord3795
ord6274
ord4320
ord2054
ord2009
ord5579
ord3800
ord6215
ord5378
ord3826
ord1911
ord2925
ord5220
ord5222
ord3942
ord4562
ord5226
ord3327
ord662
ord745
ord757
ord425
ord557
ord566
ord631
ord2745
ord2279
ord2271
ord386
ord5096
ord1571
ord5221
ord2147
ord956
ord1096
ord1049
ord1121
ord1555
ord3824
ord378
ord628
ord3639
ord1244
ord1182
ord310
ord781
ord1523
ord5711
ord868
ord866
ord1240
ord2122
ord1085
ord3444
ord2739
ord3082
ord3842
ord5930
ord6003
ord629
ord911
ord1430
ord6284
ord5083
ord384
ord666
ord429
ord3019
ord5429
ord5485
ord664
ord5427
ord3017
ord5399
ord2462
ord4061
ord5484
ord6016
ord2463
ord2896
ord784
ord1473
ord286
ord427
ord1237
ord783
ord4063
ord3383
ord4251
ord262
ord1908
ord6015
ord4560
ord2608
ord2615
ord6234
ord2042
ord5152
ord4301
ord1370
ord5408
ord2736
ord5491
ord4699
ord1913
ord4216
ord3034
ord2762
ord6039
ord4476
ord4258
ord755
ord616
ord564
ord368
ord383
ord297
ord304
ord1022
ord2468
ord2260
ord772
ord3928
ord1431
ord285
ord5705
ord897
ord3390
ord1220
ord3676
ord5170
ord3338
ord2027
ord4771
ord602
ord1957
ord1270
ord347
ord1578
ord3301
ord731
ord5212
ord605
ord4089
ord5199
ord2942
ord3176
ord356
ord1153
ord1386
ord713
ord2624
ord5803
ord2155
ord3086
ord2579
ord510
ord4175
ord1636
ord1577
ord3298
ord730
ord1000
ord4974
ord4166
ord4380
ord4395
ord4393
ord4375
ord4378
ord4373
ord4858
ord3968
ord5147
ord1352
ord4267
ord723
ord531
ord1021
ord5641
ord2025
ord1034
ord3099
ord2035
ord4300
ord6278
ord3346
ord1722
ord508
ord5791
ord5441
ord2265
ord5433
ord4585
ord1645
ord1589
ord2981
ord3322
ord754
ord3877
ord326
ord3985
ord2878
ord5004
ord1563
ord2237
ord1904
ord2609
ord5003
ord4129
ord2934
ord4898
ord2419
ord2418
ord1548
ord3939
ord5144
ord1895
ord2164
ord1297
ord4271
ord1954
ord4259
ord2986
ord4244
ord4880
ord4014
ord3070
ord4162
ord3635
ord3435
ord354
ord1883
ord904
ord5713
ord3861
_wfopen
fclose
isdigit
_msize
strcat
sprintf
strchr
strtoul
strcmp
strncpy
calloc
strcpy
swprintf
_strlwr
strncmp
_ultoa
towupper
_wtof
_resetstkoflw
realloc
__p___argc
wcscmp
strlen
memmove
wcsrchr
iswalnum
_CxxThrowException
wcscspn
wcsncpy
malloc
wcscpy
wcstok
wcscat
_except_handler3
_wcsicmp
_wcsnicmp
__p___wargv
_wcsdup
wcslen
_wtoi
qsort
_time64
ceil
free
_localtime64
wcsftime
_purecall
memset
memcpy
__CxxFrameHandler
memcmp
_errno
strtol
isspace
_itow
wcsncmp
_controlfp
??1type_info@@UAE@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
__security_error_handler
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_amsg_exit
_wcmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
_wfullpath
_vsnwprintf
_mbslen
acos
atan
cos
fabs
sin
sqrt
labs
abs
_wtol
_beginthreadex
iswspace
_snwprintf
_ui64toa
_i64toa
_fpclass
_gcvt
_itoa
strtod
_HUGE
_strtoui64
_strtoi64
_wsplitpath
_wtoi64
wcstol
_mktime64
wcschr
GetVersionExA
LocalAlloc
lstrlenA
DeleteCriticalSection
GetSystemTimeAsFileTime
QueryPerformanceCounter
ExitProcess
GetStartupInfoW
GetModuleHandleA
WriteFile
IsBadReadPtr
IsBadCodePtr
GetFileTime
GetDriveTypeW
OpenMutexW
ReleaseMutex
GetProfileIntW
GetTempFileNameW
GetExitCodeProcess
GlobalAlloc
GlobalSize
OpenProcess
GetTempPathW
CreateProcessW
lstrcmpA
RaiseException
GetExitCodeThread
TerminateThread
LocalFree
MulDiv
GlobalLock
GlobalUnlock
MoveFileW
HeapReAlloc
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
lstrcmpW
lstrcpynW
lstrlenW
InterlockedIncrement
InterlockedDecrement
CloseHandle
CreateEventW
SetEvent
ResetEvent
WaitForMultipleObjects
WaitForSingleObject
ReleaseSemaphore
GetSystemInfo
VirtualFree
GetCurrentProcess
GetCurrentThreadId
CreateSemaphoreW
VirtualAlloc
GetLastError
CreateThread
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExW
GlobalFree
FreeLibrary
GetProcAddress
LoadLibraryW
lstrcpyW
GetCurrentProcessId
GetModuleHandleW
SetFileAttributesW
WritePrivateProfileStringW
CreateDirectoryW
OutputDebugStringW
SetCurrentDirectoryW
lstrcatW
lstrcmpiW
CopyFileW
DeleteFileW
Sleep
CreateMutexW
GetTickCount
GetPrivateProfileStringW
GetModuleFileNameW
WideCharToMultiByte
FileTimeToSystemTime
FileTimeToLocalFileTime
LoadLibraryA
GetSystemDirectoryA
ReadFile
CreateFileW
GetPrivateProfileIntW
GetProcessHeap
MultiByteToWideChar
InitializeCriticalSection
CreateMenu
SetPropW
RegisterWindowMessageA
MapWindowPoints
RegisterClipboardFormatW
EmptyClipboard
SetClipboardData
FrameRect
EnableMenuItem
InvalidateRgn
GetCapture
SetCapture
ReleaseCapture
UnionRect
ClientToScreen
DrawIconEx
IsWindow
DefWindowProcW
EqualRect
GetClassInfoW
AdjustWindowRectEx
keybd_event
GetDCEx
GetMessageW
ShowScrollBar
GetActiveWindow
DrawEdge
GetSysColorBrush
GetScrollPos
GetDlgCtrlID
DestroyMenu
GetFocus
KillTimer
SetTimer
RedrawWindow
IsZoomed
DeleteMenu
GetClientRect
EnableWindow
SendMessageW
GetParent
SetRectEmpty
GetSubMenu
LoadMenuW
RemoveMenu
PtInRect
GetKeyState
LockWindowUpdate
GetDC
AppendMenuW
ReleaseDC
DdeInitializeW
DdeCreateStringHandleW
DdeNameService
DdeGetData
PostMessageW
MessageBoxW
EnumChildWindows
GetPropW
DestroyIcon
LoadImageW
SetCursor
LoadCursorW
RemovePropW
DestroyAcceleratorTable
LoadAcceleratorsW
GetIconInfo
InflateRect
RegisterWindowMessageW
GetWindowLongW
GetSysColor
DrawFocusRect
GetSystemMenu
ModifyMenuW
LoadIconW
BringWindowToTop
PostThreadMessageW
OffsetRect
GetSystemMetrics
PeekMessageW
SetScrollRange
GetScrollRange
SetScrollPos
EnumClipboardFormats
GetClipboardData
CloseClipboard
OpenClipboard
GetLastActivePopup
GetWindow
WindowFromPoint
GetDesktopWindow
GetWindowRect
IsIconic
wsprintfW
LoadBitmapW
DdeFreeStringHandle
DdeUninitialize
SetForegroundWindow
ShowWindow
DispatchMessageW
GetClassNameW
MessageBeep
IsWindowVisible
InvalidateRect
UpdateWindow
FillRect
IntersectRect
SetRect
IsRectEmpty
CopyRect
GetCursorPos
ScreenToClient
GetTextExtentPoint32W
Rectangle
CreateBitmap
DeleteObject
StrokeAndFillPath
EndPath
BeginPath
RoundRect
Polyline
GetCurrentPositionEx
PtInRegion
CreateEllipticRgnIndirect
CreateEllipticRgn
ExtCreatePen
GetTextExtentPointW
UnrealizeObject
CreatePen
CreatePatternBrush
PatBlt
Ellipse
ExtTextOutA
PlgBlt
SetDIBitsToDevice
CreateDIBitmap
CreateDIBSection
FillRgn
OffsetRgn
CreatePolygonRgn
CombineRgn
CreateRectRgn
GetRgnBox
GetStockObject
SelectObject
SetBkColor
ExtTextOutW
CreatePalette
GetTextMetricsW
StretchBlt
CreateFontW
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
GetCurrentObject
GetObjectW
CreateFontIndirectW
CreateRectRgnIndirect
StretchDIBits
DeleteDC
CreateDCW
SaveDC
GetViewportOrgEx
SetMapMode
SetViewportOrgEx
RestoreDC
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
StartDocW
DPtoLP
GetDeviceCaps
AlphaBlend
GetFileTitleW
GetJobW
OpenPrinterW
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExW
RegCreateKeyW
IsTextUnicode
GetUserNameW
RegOpenKeyW
SHGetFileInfoW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListW
SHFileOperationW
DragAcceptFiles
Shell_NotifyIconW
SHGetFolderPathW
ShellExecuteW
SHGetSpecialFolderPathW
ImageList_DragMove
ImageList_EndDrag
ImageList_DragEnter
_TrackMouseEvent
ord17
ImageList_GetIcon
ImageList_AddMasked
ImageList_DragLeave
ImageList_Draw
ImageList_BeginDrag
PathFindFileNameW
StrCmpIW
PathFindExtensionW
PathAppendW
PathRemoveFileSpecW
PathMakeSystemFolderW
PathFileExistsW
StrCmpNIW
PathRemoveBackslashW
PathIsURLW
PathAddExtensionW
StrCatW
SHRegGetUSValueW
PathStripPathW
StrCpyW
SHCopyKeyW
StrDupW
PathRemoveExtensionW
UrlEscapeW
PathRenameExtensionW
PathAppendA
PathRelativePathToW
PathIsRelativeW
PathCompactPathW
PathCombineW
PathIsDirectoryW
PathRemoveArgsW
StrCmpW
CoUninitialize
CoInitialize
CLSIDFromProgID
ReleaseStgMedium
CoTaskMemFree
RegisterDragDrop
CoTaskMemAlloc
CoCreateInstance
CoFreeUnusedLibraries
GetActiveObject
VariantClear
VarDateFromStr
SysAllocStringByteLen
SysStringLen
SysAllocString
SysAllocStringLen
SysFreeString
VariantInit
ntohs
gethostbyaddr
htons
getservbyname
getservbyport
inet_ntoa
gethostbyname
inet_addr
WSACreateEvent
WSASetEvent
WSAEventSelect
WSARecv
WSAResetEvent
WSASend
WSAGetOverlappedResult
WSAConnect
WSAGetLastError
WSAEnumNetworkEvents
WSACloseEvent
WSACleanup
WSAStartup
closesocket
WSASocketW
WSASetLastError
htonl
ord657
ord675
ord685
ord665
ord2049
ord1277
ord1274
ord1401
ord4288
ord2375
ord1687
ord2277
ord1308
ord1662
ord1408
ord1417
ord1366
ord660
ord670
ord653
ord996
ord2422
ord2372
ord2274
ord2404
ord2238
ord2300
ord4557
ord3983
ord1736
ord204
ord223
ord3387
ord3698
ord1244
ord82
ord56
ord947
ord2721
ord3511
ord1989
ord2773
ord4329
ord2407
ord2664
ord2202
ord2259
ord910
ord847
ord837
ord3659
ord2266
ord4278
ord4187
ord3634
ord3090
ord2098
ord2345
ord2425
ord1152
ord749
ord3871
ord4312
ord1499
ord3489
ord3903
ord3588
ord2588
ord2587
ord2251
ord2925
ord2758
ord2703
ord2253
ord3116
ord2622
ord2103
ord679
ord2762
ord2753
ord2542
ord2520
ord1370
ord680
ord1476
ord3538
ord3296
ord1173
ord2639
ord2668
ord2656
ord2606
ord2824
ord777
ord674
ord3995
ord1787
ord3848
ord152
ord1485
ord275
ord2133
ord3087
ord3086
ord3088
ord2698
ord4428
ord1461
ord3686
ord3765
ord4305
ord1328
ord1326
ord1116
ord2725
ord933
ord930
ord4469
ord1344
ord1998
ord4427
ord2449
ord3908
ord3642
ord632
ord4385
ord2598
ord2361
ord1081
ord2759
ord3152
ord824
ord1049
ord568
ord3426
ord543
ord1205
ord2523
ord2805
ord2798
ord2795
ord2987
ord1338
ord1026
ord1012
ord630
ord2630
ord3115
ord3045
ord3443
ord2518
ord3722
ord4471
ord2120
ord3407
ord3894
ord678
ord3840
ord2592
ord562
ord4052
ord1498
ord1511
ord2373
ord3890
ord927
ord2208
ord1330
ord1708
ord3788
ord3803
ord2154
ord2153
ord2478
ord2437
ord2477
ord2439
ord3873
ord834
ord805
ord4440
ord1162
ord964
ord2559
ord2552
ord2878
ord2713
ord2555
ord2589
ord2211
ord985
ord645
ord1624
ord961
ord626
ord4510
ord4386
ord2549
ord2582
ord3763
ord537
ord4455
ord992
ord1101
ord1091
ord683
ord667
ord1402
ord2276
ord1307
ord659
ord651
ord2420
ord2370
ord2237
ord3715
ord2696
ord3587
ord1612
ord3990
ord131
ord1953
ord1906
ord3696
ord2688
ord198
ord3007
ord4544
ord4338
ord4134
ord1285
ord738
ord3637
ord776
ord1786
ord4291
ord3960
ord476
ord4229
ord149
ord4294
ord266
ord136
ord274
ord2308
ord47
ord1364
ord205
ord1180
ord57
ord3662
ord1986
ord4492
ord1732
ord276
ord177
ord154
ord13
ord1151
ord4236
ord4347
ord4029
ord252
ord800
ord119
ord4504
ord4476
ord4488
ord4449
ord2482
ord2682
ord2561
ord4404
ord3645
ord3933
ord708
ord2471
ord283
ord163
ord515
ord1631
ord2135
ord2132
ord4105
ord1963
ord4890
ord2138
ord4283
ord1940
ord4401
ord1415
ord486
ord4503
ord2998
ord1921
ord962
ord245
ord106
ord946
ord1293
?EnableFullScreenCloseButton@CUIMDIFrameWnd@@QAEXH@Z
ord265
ord2167
ord134
ord1317
ord1318
ord689
ord1442
ord1443
ord2041
ord3303
ord527
ord3625
ord3767
ord3704
ord3673
ord226
ord86
ord4391
ord426
ord976
ord1891
ord1067
ord1089
ord2726
ord2000
ord4482
ord4311
ord1814
ord2770
ord1957
ord1414
ord4089
ord4277
ord3636
ord748
ord3870
ord4314
ord1500
ord3491
ord3902
ord2586
ord2250
ord2924
ord2702
ord2621
ord2102
ord2755
ord2544
ord682
ord1478
ord3540
ord3298
ord2638
ord2655
ord2605
ord2823
ord774
ord3993
ord142
ord141
ord270
ord3716
ord143
ord271
ord3458
ord2030
ord1910
ord1078
ord3620
ord2223
ord1496
ord1922
ord4361
ord4413
ord4392
ord4005
ord1245
ord3774
ord1125
ord977
ord3658
ord4033
ord2258
ord909
ord2920
ord2633
ord2814
ord768
ord3981
ord1726
ord4079
ord1128
ord32
ord4077
ord187
ord4261
ord1927
ord4253
ord4398
ord1112
ord1096
ord1098
ord4120
ord2166
ord2778
ord3633
ord2922
ord1369
ord3523
ord3295
ord2636
ord2653
ord2601
ord2817
ord771
ord1745
ord797
ord3703
ord1585
ord1746
ord4209
ord4368
ord83
ord1008
ord4143
ord2431
ord2430
ord85
ord225
ord224
ord3793
ord3705
ord2443
ord2532
ord3775
ord4255
ord431
ord512
ord983
ord1084
ord2991
ord806
ord1176
ord3143
ord3668
ord2697
ord1613
ord1782
ord2484
ord138
ord267
ord4373
ord2282
ord1900
ord2672
ord2123
ord1296
ord4260
ord1653
ord1495
ord521
ord3500
ord3565
ord2908
ord2042
ord3249
ord2906
ord2681
ord3503
ord3469
ord3304
ord528
ord2077
ord3624
ord2747
ord2517
ord3472
ord3768
ord2692
ord4556
ord3674
ord254
ord230
ord227
ord121
ord90
ord87
ord2101
ord2603
ord2821
ord772
ord3991
ord1780
ord2446
ord1064
ord3792
ord1660
ord3507
ord1154
timeKillEvent
timeSetEvent
HttpOpenRequestW
InternetSetFilePointer
InternetReadFile
HttpSendRequestW
InternetSetOptionW
InternetConnectW
InternetOpenW
InternetCloseHandle
HttpQueryInfoW
UuidFromStringW
UuidCreate
GetModuleFileNameExW
EnumProcessModules
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ