e:\chatroom\client\windows\trunk\new\bin\LiaoClient.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Documento_Legal_Procesado_N#456789098765.rar
Resource
win7-20240221-es
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Documento_Legal_Procesado_N#456789098765.rar
Resource
win10v2004-20240226-es
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
Documento_Legal_Procesado_N#456789098765..exe
Resource
win7-20240220-es
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
Documento_Legal_Procesado_N#456789098765..exe
Resource
win10v2004-20240426-es
windows10-2004-x64
5 signatures
150 seconds
General
-
Target
Documento_Legal_Procesado_N#456789098765.tar
-
Size
1.4MB
-
MD5
c3d9a18cadb8576fe18635d34f677174
-
SHA1
36e49b80747a05f3aca1de6a23a1f20d7f16f438
-
SHA256
2bb33982a96914e407b4fc2a6775869a03dc014b1fd73c135e70ec892d9f9920
-
SHA512
54d75de9d83f658fc2ac2267d4d4c5c3852aa353e08422e1fafdf3c0113c39b24cff5d770459d4a7334713e2228c102499dc9045298cef2cc57a5b4f3432f01f
-
SSDEEP
24576:cv62l1GJMs8KpdvuhdzT9Qzmc6/gSLEpI8L31N0n6zRmXe8V/wP:/UIOsDpdvqdzTdcvSQa8T1N06zRkwP
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Documento_Legal_Procesado_N#456789098765..exe
Files
-
Documento_Legal_Procesado_N#456789098765.tar.rar
Password: 2024
-
Documento_Legal_Procesado_N#456789098765..exe.exe windows:5 windows x86 arch:x86
Password: 2024
64baaeb50da85ddd9902142c14a50374
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetProcessHeap
GetFileAttributesW
GetUserDefaultLCID
GetStringTypeExW
HeapFree
LCMapStringW
InterlockedCompareExchange
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
SleepEx
VerifyVersionInfoA
VerSetConditionMask
FormatMessageA
PeekNamedPipe
GetFileType
GetStdHandle
ExpandEnvironmentStringsA
HeapDestroy
HeapAlloc
HeapReAlloc
HeapSize
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
WideCharToMultiByte
CreateSemaphoreW
ReleaseSemaphore
SetLastError
lstrcmpW
FlushInstructionCache
LoadLibraryExW
lstrcmpiW
InterlockedIncrement
RaiseException
MultiByteToWideChar
LocalUnlock
LocalLock
GlobalMemoryStatusEx
GetComputerNameW
GetACP
IsDebuggerPresent
lstrcpyW
LocalAlloc
ReadFile
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
FormatMessageW
GetPrivateProfileStringW
GetPrivateProfileIntW
QueryPerformanceCounter
QueryPerformanceFrequency
GetExitCodeThread
Sleep
ResetEvent
FindClose
FindFirstFileW
SystemTimeToFileTime
FileTimeToSystemTime
CreateThread
GlobalFree
MoveFileW
FreeResource
SizeofResource
LoadResource
FindResourceW
SetCurrentDirectoryW
CopyFileW
OpenProcess
LocalFree
GlobalUnlock
GlobalLock
MulDiv
lstrlenW
InterlockedExchange
GlobalAlloc
GetTickCount
GetVersionExW
SetPriorityClass
DeviceIoControl
GetCurrentProcessId
CreateMutexA
GetComputerNameA
GetLastError
CloseHandle
LoadLibraryW
GetLocalTime
GetModuleFileNameA
GlobalDeleteAtom
CreateDirectoryW
CreateEventW
InitializeCriticalSection
WaitForMultipleObjects
CreateFileW
GetModuleFileNameW
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
WriteFile
SetEndOfFile
SetEvent
WaitForSingleObject
TerminateThread
DeleteCriticalSection
GetCurrentThreadId
CreateFileA
FreeLibrary
IsBadReadPtr
VirtualQuery
LoadLibraryA
GetModuleHandleW
WriteProcessMemory
GetCurrentProcess
GetProcAddress
InterlockedDecrement
OutputDebugStringW
ResumeThread
DeleteFileW
GetSystemDefaultLangID
user32
EndPaint
DrawIcon
BeginPaint
UpdateWindow
UpdateLayeredWindow
GetWindowDC
EqualRect
CallWindowProcW
RegisterClassExW
GetClassInfoExW
RegisterWindowMessageW
ReleaseCapture
CreateAcceleratorTableW
GetFocus
DestroyAcceleratorTable
GetSysColor
SetCapture
InvalidateRgn
GetWindowTextLengthW
WaitMessage
DispatchMessageW
TranslateMessage
IsDialogMessageW
PeekMessageW
CreateDialogIndirectParamW
MapWindowPoints
GetClientRect
GetActiveWindow
MessageBeep
GetDialogBaseUnits
GetAsyncKeyState
RedrawWindow
GetWindowTextW
WinHelpW
SetFocus
CheckDlgButton
GetSystemMenu
EnableMenuItem
EnableWindow
GetClassNameW
FillRect
GetDlgItem
DestroyIcon
DrawTextW
LoadStringW
SetTimer
KillTimer
SendMessageW
GetLastActivePopup
SetRect
GetWindow
InvalidateRect
CreateWindowExW
RegisterClassW
DefWindowProcW
CharNextW
IntersectRect
SetWindowRgn
MonitorFromWindow
GetMonitorInfoW
SetWindowLongW
GetWindowLongW
PostMessageW
CallNextHookEx
SetWindowsHookExW
UnhookWindowsHookEx
wsprintfW
MessageBoxW
UnregisterClassA
DestroyWindow
IsWindow
FindWindowA
CreateWindowExA
MessageBoxA
GetDC
GetDesktopWindow
ReleaseDC
SetWindowPos
GetSystemMetrics
GetWindowRect
ClientToScreen
IsWindowVisible
GetCursorPos
PtInRect
WindowFromPoint
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetCursor
LoadCursorW
PostQuitMessage
IsIconic
SetForegroundWindow
SystemParametersInfoW
MoveWindow
IsZoomed
LoadIconW
SetWindowTextW
ScreenToClient
GetKeyState
ShowWindow
GetParent
IsChild
gdi32
SetTextColor
GetTextExtentPoint32W
CreateFontIndirectW
StretchDIBits
SetStretchBltMode
CombineRgn
CreateRectRgn
CreateSolidBrush
CreateRoundRectRgn
GetStockObject
CreateDCW
BitBlt
ExtTextOutW
SetBkColor
CreateCompatibleBitmap
GetDeviceCaps
GetObjectW
SetDIBColorTable
SelectObject
DeleteObject
CreateDIBSection
CreateCompatibleDC
DeleteDC
advapi32
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegQueryInfoKeyW
CryptDestroyKey
CryptEncrypt
CryptReleaseContext
CryptImportKey
CryptAcquireContextA
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
shell32
SHGetSpecialFolderPathW
ShellExecuteW
SHFileOperationW
ShellExecuteExW
ole32
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
StringFromGUID2
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
OleInitialize
OleUninitialize
OleCreate
OleDraw
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CoCreateInstance
OleCreateStaticFromData
OleSetContainedObject
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleDuplicateData
ReleaseStgMedium
oleaut32
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
SysAllocStringLen
SysStringLen
OleLoadPicture
SysAllocString
VariantInit
VariantClear
SysFreeString
GetErrorInfo
version
VerQueryValueW
Exports
Exports
??0CActiveXUI@DuiLib@@QAE@ABV01@@Z
??0CButtonUI@DuiLib@@QAE@ABV01@@Z
??0CCheckBoxUI@DuiLib@@QAE@ABV01@@Z
??0CCheckBoxUI@DuiLib@@QAE@XZ
??0CChildLayoutUI@DuiLib@@QAE@ABV01@@Z
??0CComboUI@DuiLib@@QAE@ABV01@@Z
??0CContainerUI@DuiLib@@QAE@ABV01@@Z
??0CControlUI@DuiLib@@QAE@ABV01@@Z
??0CDateTimeUI@DuiLib@@QAE@ABV01@@Z
??0CEditUI@DuiLib@@QAE@ABV01@@Z
??0CEventSource@DuiLib@@QAE@ABV01@@Z
??0CEventSource@DuiLib@@QAE@XZ
??0CGifAnimUI@DuiLib@@QAE@ABV01@@Z
??0CHorizontalLayoutUI@DuiLib@@QAE@ABV01@@Z
??0CLabelUI@DuiLib@@QAE@ABV01@@Z
??0CListContainerElementUI@DuiLib@@QAE@ABV01@@Z
??0CListElementUI@DuiLib@@QAE@ABV01@@Z
??0CListHBoxElementUI@DuiLib@@QAE@ABV01@@Z
??0CListHeaderItemUI@DuiLib@@QAE@ABV01@@Z
??0CListHeaderUI@DuiLib@@QAE@ABV01@@Z
??0CListLabelElementUI@DuiLib@@QAE@ABV01@@Z
??0CListTextElementUI@DuiLib@@QAE@ABV01@@Z
??0CListUI@DuiLib@@QAE@ABV01@@Z
??0CMarkup@@QAE@ABV0@@Z
??0CMarkup@@QAE@H@Z
??0CMarkup@@QAE@UMCD_CSTR@@@Z
??0CMarkup@@QAE@XZ
??0CNotifyPump@DuiLib@@QAE@ABV01@@Z
??0CNotifyPump@DuiLib@@QAE@XZ
??0COptionUI@DuiLib@@QAE@ABV01@@Z
??0CPaintManagerUI@DuiLib@@QAE@ABV01@@Z
??0CProgressUI@DuiLib@@QAE@ABV01@@Z
??0CRichEditUI@DuiLib@@QAE@ABV01@@Z
??0CScrollBarUI@DuiLib@@QAE@ABV01@@Z
??0CSliderUI@DuiLib@@QAE@ABV01@@Z
??0CTabLayoutUI@DuiLib@@QAE@ABV01@@Z
??0CTextUI@DuiLib@@QAE@ABV01@@Z
??0CTileLayoutUI@DuiLib@@QAE@ABV01@@Z
??0CTreeNodeUI@DuiLib@@QAE@ABV01@@Z
??0CTreeViewUI@DuiLib@@QAE@ABV01@@Z
??0CVerticalLayoutUI@DuiLib@@QAE@ABV01@@Z
??0CWebBrowserUI@DuiLib@@QAE@ABV01@@Z
??0CWindowWnd@DuiLib@@QAE@ABV01@@Z
??0CWndShadow@@QAE@ABV0@@Z
??0ChangeSkinDll@@QAE@ABV0@@Z
??0IMessageFilterUI@DuiLib@@QAE@ABV01@@Z
??0IMessageFilterUI@DuiLib@@QAE@XZ
??0INotifyUI@DuiLib@@QAE@ABV01@@Z
??0INotifyUI@DuiLib@@QAE@XZ
??0ITranslateAccelerator@DuiLib@@QAE@ABV01@@Z
??0ITranslateAccelerator@DuiLib@@QAE@XZ
??0LiaoFaceDll@@QAE@ABV0@@Z
??0RedPacketsDll@@QAE@ABV0@@Z
??0RichEditDll@DuiLib@@QAE@ABV01@@Z
??0UserInfoPanelX@@QAE@ABV0@@Z
??0VideoCapture@@QAE@ABV0@@Z
??0WindowImplBase@DuiLib@@QAE@ABV01@@Z
??0WindowImplBase@DuiLib@@QAE@XZ
??0tagTDrawInfo@DuiLib@@QAE@ABU01@@Z
??0tagTFontInfo@DuiLib@@QAE@ABU01@@Z
??0tagTFontInfo@DuiLib@@QAE@XZ
??0tagTImageInfo@DuiLib@@QAE@ABU01@@Z
??0tagTImageInfo@DuiLib@@QAE@XZ
??0tagTResInfo@DuiLib@@QAE@ABU01@@Z
??0tagTResInfo@DuiLib@@QAE@XZ
??1CButtonUI@DuiLib@@UAE@XZ
??1CCheckBoxUI@DuiLib@@UAE@XZ
??1CChildLayoutUI@DuiLib@@UAE@XZ
??1CComboUI@DuiLib@@UAE@XZ
??1CDateTimeUI@DuiLib@@UAE@XZ
??1CDialogBuilder@DuiLib@@QAE@XZ
??1CEditUI@DuiLib@@UAE@XZ
??1CHorizontalLayoutUI@DuiLib@@UAE@XZ
??1CListContainerElementUI@DuiLib@@UAE@XZ
??1CListElementUI@DuiLib@@UAE@XZ
??1CListHBoxElementUI@DuiLib@@UAE@XZ
??1CListHeaderItemUI@DuiLib@@UAE@XZ
??1CListHeaderUI@DuiLib@@UAE@XZ
??1CListLabelElementUI@DuiLib@@UAE@XZ
??1CListUI@DuiLib@@UAE@XZ
??1CMarkup@@QAE@XZ
??1CNotifyPump@DuiLib@@QAE@XZ
??1CProgressUI@DuiLib@@UAE@XZ
??1CScrollBarUI@DuiLib@@UAE@XZ
??1CSliderUI@DuiLib@@UAE@XZ
??1CTabLayoutUI@DuiLib@@UAE@XZ
??1CTileLayoutUI@DuiLib@@UAE@XZ
??1CVerticalLayoutUI@DuiLib@@UAE@XZ
??1WindowImplBase@DuiLib@@UAE@XZ
??1tagTDrawInfo@DuiLib@@QAE@XZ
??1tagTFontInfo@DuiLib@@QAE@XZ
??1tagTImageInfo@DuiLib@@QAE@XZ
??1tagTResInfo@DuiLib@@QAE@XZ
??4CActiveXUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CButtonUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CCheckBoxUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CChildLayoutUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CComboUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CContainerUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CControlUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CDateTimeUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CDelegateBase@DuiLib@@QAEAAV01@ABV01@@Z
??4CDialogBuilder@DuiLib@@QAEAAV01@ABV01@@Z
??4CDuiPoint@DuiLib@@QAEAAV01@ABV01@@Z
??4CDuiPtrArray@DuiLib@@QAEAAV01@ABV01@@Z
??4CDuiRect@DuiLib@@QAEAAV01@ABV01@@Z
??4CDuiSize@DuiLib@@QAEAAV01@ABV01@@Z
??4CDuiStringPtrMap@DuiLib@@QAEAAV01@ABV01@@Z
??4CDuiValArray@DuiLib@@QAEAAV01@ABV01@@Z
??4CEditUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CEventSource@DuiLib@@QAEAAV01@ABV01@@Z
??4CGifAnimUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CHorizontalLayoutUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CLabelUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CListContainerElementUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CListElementUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CListHBoxElementUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CListHeaderItemUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CListHeaderUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CListLabelElementUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CListTextElementUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CListUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CMarkup@@QAEXABV0@@Z
??4CMarkup@DuiLib@@QAEAAV01@ABV01@@Z
??4CMarkupNode@DuiLib@@QAEAAV01@ABV01@@Z
??4CNotifyPump@DuiLib@@QAEAAV01@ABV01@@Z
??4COptionUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CPaintManagerUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CProgressUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CRenderClip@DuiLib@@QAEAAV01@ABV01@@Z
??4CRenderEngine@DuiLib@@QAEAAV01@ABV01@@Z
??4CRichEditUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CScrollBarUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CSliderUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CTabLayoutUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CTextUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CTileLayoutUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CTreeNodeUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CTreeViewUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CVerticalLayoutUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CWaitCursor@DuiLib@@QAEAAV01@ABV01@@Z
??4CWebBrowserUI@DuiLib@@QAEAAV01@ABV01@@Z
??4CWindowWnd@DuiLib@@QAEAAV01@ABV01@@Z
??4CWndShadow@@QAEAAV0@ABV0@@Z
??4ChangeSkinDll@@QAEAAV0@ABV0@@Z
??4IMessageFilterUI@DuiLib@@QAEAAV01@ABV01@@Z
??4INotifyUI@DuiLib@@QAEAAV01@ABV01@@Z
??4ITranslateAccelerator@DuiLib@@QAEAAV01@ABV01@@Z
??4LiaoFaceDll@@QAEAAV0@ABV0@@Z
??4RedPacketsDll@@QAEAAV0@ABV0@@Z
??4RichEditDll@DuiLib@@QAEAAV01@ABV01@@Z
??4STRINGorID@DuiLib@@QAEAAV01@ABV01@@Z
??4UserInfoPanelX@@QAEAAV0@ABV0@@Z
??4VideoCapture@@QAEAAV0@ABV0@@Z
??4VideoCoder@@QAEAAV0@ABV0@@Z
??4WindowImplBase@DuiLib@@QAEAAV01@ABV01@@Z
??4tagTDrawInfo@DuiLib@@QAEAAU01@ABU01@@Z
??4tagTEventUI@DuiLib@@QAEAAU01@ABU01@@Z
??4tagTFontInfo@DuiLib@@QAEAAU01@ABU01@@Z
??4tagTImageInfo@DuiLib@@QAEAAU01@ABU01@@Z
??4tagTPercentInfo@DuiLib@@QAEAAU01@ABU01@@Z
??4tagTResInfo@DuiLib@@QAEAAU01@ABU01@@Z
??_7CActiveXUI@DuiLib@@6BCControlUI@1@@
??_7CActiveXUI@DuiLib@@6BIMessageFilterUI@1@@
??_7CButtonUI@DuiLib@@6B@
??_7CCheckBoxUI@DuiLib@@6B@
??_7CChildLayoutUI@DuiLib@@6BCControlUI@1@@
??_7CChildLayoutUI@DuiLib@@6BIContainerUI@1@@
??_7CComboUI@DuiLib@@6B@
??_7CComboUI@DuiLib@@6BCControlUI@1@@
??_7CComboUI@DuiLib@@6BIContainerUI@1@@
??_7CContainerUI@DuiLib@@6BCControlUI@1@@
??_7CContainerUI@DuiLib@@6BIContainerUI@1@@
??_7CControlUI@DuiLib@@6B@
??_7CDateTimeUI@DuiLib@@6B@
??_7CEditUI@DuiLib@@6B@
??_7CGifAnimUI@DuiLib@@6B@
??_7CHorizontalLayoutUI@DuiLib@@6BCControlUI@1@@
??_7CHorizontalLayoutUI@DuiLib@@6BIContainerUI@1@@
??_7CLabelUI@DuiLib@@6B@
??_7CListContainerElementUI@DuiLib@@6B@
??_7CListContainerElementUI@DuiLib@@6BCControlUI@1@@
??_7CListContainerElementUI@DuiLib@@6BIContainerUI@1@@
??_7CListElementUI@DuiLib@@6BCControlUI@1@@
??_7CListElementUI@DuiLib@@6BIListItemUI@1@@
??_7CListHBoxElementUI@DuiLib@@6B@
??_7CListHBoxElementUI@DuiLib@@6BCControlUI@1@@
??_7CListHBoxElementUI@DuiLib@@6BIContainerUI@1@@
??_7CListHeaderItemUI@DuiLib@@6B@
??_7CListHeaderUI@DuiLib@@6BCControlUI@1@@
??_7CListHeaderUI@DuiLib@@6BIContainerUI@1@@
??_7CListLabelElementUI@DuiLib@@6BCControlUI@1@@
??_7CListLabelElementUI@DuiLib@@6BIListItemUI@1@@
??_7CListTextElementUI@DuiLib@@6BCControlUI@1@@
??_7CListTextElementUI@DuiLib@@6BIListItemUI@1@@
??_7CListUI@DuiLib@@6B@
??_7CListUI@DuiLib@@6BCControlUI@1@@
??_7CListUI@DuiLib@@6BIContainerUI@1@@
??_7CNotifyPump@DuiLib@@6B@
??_7COptionUI@DuiLib@@6B@
??_7CProgressUI@DuiLib@@6B@
??_7CRichEditUI@DuiLib@@6B@
??_7CRichEditUI@DuiLib@@6BCControlUI@1@@
??_7CRichEditUI@DuiLib@@6BIContainerUI@1@@
??_7CScrollBarUI@DuiLib@@6B@
??_7CSliderUI@DuiLib@@6B@
??_7CTabLayoutUI@DuiLib@@6BCControlUI@1@@
??_7CTabLayoutUI@DuiLib@@6BIContainerUI@1@@
??_7CTextUI@DuiLib@@6B@
??_7CTileLayoutUI@DuiLib@@6BCControlUI@1@@
??_7CTileLayoutUI@DuiLib@@6BIContainerUI@1@@
??_7CTreeNodeUI@DuiLib@@6B@
??_7CTreeNodeUI@DuiLib@@6BCControlUI@1@@
??_7CTreeNodeUI@DuiLib@@6BIContainerUI@1@@
??_7CTreeViewUI@DuiLib@@6BCControlUI@1@@
??_7CTreeViewUI@DuiLib@@6BCListUI@1@@
??_7CTreeViewUI@DuiLib@@6BIContainerUI@1@@
??_7CTreeViewUI@DuiLib@@6BINotifyUI@1@@
??_7CVerticalLayoutUI@DuiLib@@6BCControlUI@1@@
??_7CVerticalLayoutUI@DuiLib@@6BIContainerUI@1@@
??_7CWebBrowserUI@DuiLib@@6BCControlUI@1@@
??_7CWebBrowserUI@DuiLib@@6BIDispatch@@@
??_7CWebBrowserUI@DuiLib@@6BIDocHostUIHandler@@@
??_7CWebBrowserUI@DuiLib@@6BIMessageFilterUI@1@@
??_7CWebBrowserUI@DuiLib@@6BIOleCommandTarget@@@
??_7CWebBrowserUI@DuiLib@@6BIServiceProvider@@@
??_7CWebBrowserUI@DuiLib@@6BITranslateAccelerator@1@@
??_7CWindowWnd@DuiLib@@6B@
??_7CWndShadow@@6B@
??_7ChangeSkinDll@@6B@
??_7IMessageFilterUI@DuiLib@@6B@
??_7INotifyUI@DuiLib@@6B@
??_7ITranslateAccelerator@DuiLib@@6B@
??_7LiaoFaceDll@@6B@
??_7RedPacketsDll@@6B@
??_7RichEditDll@DuiLib@@6B@
??_7UserInfoPanelX@@6B@
??_7VideoCapture@@6B@
??_7WindowImplBase@DuiLib@@6BCNotifyPump@1@@
??_7WindowImplBase@DuiLib@@6BCWindowWnd@1@@
??_7WindowImplBase@DuiLib@@6BIDialogBuilderCallback@1@@
??_7WindowImplBase@DuiLib@@6BIMessageFilterUI@1@@
??_7WindowImplBase@DuiLib@@6BINotifyUI@1@@
??_FCDuiPtrArray@DuiLib@@QAEXXZ
??_FCDuiStringPtrMap@DuiLib@@QAEXXZ
??_FCMarkup@DuiLib@@QAEXXZ
??_FCTreeNodeUI@DuiLib@@QAEXXZ
?AddAttrib@CMarkup@@QAE_NUMCD_CSTR@@0@Z
?AddAttrib@CMarkup@@QAE_NUMCD_CSTR@@H@Z
?AddChildAttrib@CMarkup@@QAE_NUMCD_CSTR@@0@Z
?AddChildAttrib@CMarkup@@QAE_NUMCD_CSTR@@H@Z
?AddChildElem@CMarkup@@QAE_NUMCD_CSTR@@0H@Z
?AddChildElem@CMarkup@@QAE_NUMCD_CSTR@@HH@Z
?AddChildSubDoc@CMarkup@@QAE_NUMCD_CSTR@@@Z
?AddElem@CMarkup@@QAE_NUMCD_CSTR@@0H@Z
?AddElem@CMarkup@@QAE_NUMCD_CSTR@@HH@Z
?AddNode@CMarkup@@QAE_NHUMCD_CSTR@@@Z
?AddSubDoc@CMarkup@@QAE_NUMCD_CSTR@@@Z
?DecodeCharUTF16@CMarkup@@SAHAAPBGPBG@Z
?DecodeCharUTF8@CMarkup@@SAHAAPBDPBD@Z
?DetectUTF8@CMarkup@@SA_NPBDHPAHPA_N@Z
?EncodeCharUTF16@CMarkup@@SAXHPAGAAH@Z
?EncodeCharUTF8@CMarkup@@SAXHPADAAH@Z
?EscapeText@CMarkup@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UMCD_CSTR@@H@Z
?FindChildElem@CMarkup@@QAE_NUMCD_CSTR@@@Z
?FindElem@CMarkup@@QAE_NUMCD_CSTR@@@Z
?FindNode@CMarkup@@QAEHH@Z
?GetAttrib@CMarkup@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UMCD_CSTR@@@Z
?GetAttribName@CMarkup@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?GetCheckBox@CTreeNodeUI@DuiLib@@QBEPAVCCheckBoxUI@2@XZ
?GetChildAttrib@CMarkup@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UMCD_CSTR@@@Z
?GetChildData@CMarkup@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetChildSubDoc@CMarkup@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetChildTagName@CMarkup@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetData@CMarkup@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetDeclaredEncoding@CMarkup@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UMCD_CSTR@@@Z
?GetDoc@CMarkup@@QBEABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetDocFlags@CMarkup@@QBEHXZ
?GetDottedLine@CTreeNodeUI@DuiLib@@QBEPAVCLabelUI@2@XZ
?GetElemContent@CMarkup@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetEncodingCodePage@CMarkup@@SAHUMCD_CSTR@@@Z
?GetError@CMarkup@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetFolderButton@CTreeNodeUI@DuiLib@@QBEPAVCCheckBoxUI@2@XZ
?GetItemButton@CTreeNodeUI@DuiLib@@QBEPAVCOptionUI@2@XZ
?GetNodeType@CMarkup@@QAEHXZ
?GetNthAttrib@CMarkup@@QBE_NHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?GetResult@CMarkup@@QBEABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetSubDoc@CMarkup@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetTagName@CMarkup@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetTreeNodeHoriznotal@CTreeNodeUI@DuiLib@@QBEPAVCHorizontalLayoutUI@2@XZ
?InitWindow@WindowImplBase@DuiLib@@UAEXXZ
?InsertChildElem@CMarkup@@QAE_NUMCD_CSTR@@0H@Z
?InsertChildElem@CMarkup@@QAE_NUMCD_CSTR@@HH@Z
?InsertChildSubDoc@CMarkup@@QAE_NUMCD_CSTR@@@Z
?InsertElem@CMarkup@@QAE_NUMCD_CSTR@@0H@Z
?InsertElem@CMarkup@@QAE_NUMCD_CSTR@@HH@Z
?InsertNode@CMarkup@@QAE_NHUMCD_CSTR@@@Z
?InsertSubDoc@CMarkup@@QAE_NUMCD_CSTR@@@Z
?IntoElem@CMarkup@@QAE_NXZ
?IsWellFormed@CMarkup@@QAE_NXZ
?Load@CMarkup@@QAE_NUMCD_CSTR@@@Z
?OutOfElem@CMarkup@@QAE_NXZ
?PreMultiply@CWndShadow@@IAEKKE@Z
?ReadTextFile@CMarkup@@SA_NUMCD_CSTR@@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAV34@PAH2@Z
?RemoveChildElem@CMarkup@@QAE_NXZ
?RemoveElem@CMarkup@@QAE_NXZ
?RemoveNode@CMarkup@@QAE_NXZ
?ResetChildPos@CMarkup@@QAEXXZ
?ResetMainPos@CMarkup@@QAEXXZ
?ResetPos@CMarkup@@QAEXXZ
?RestorePos@CMarkup@@QAE_NUMCD_CSTR@@H@Z
?Save@CMarkup@@QAE_NUMCD_CSTR@@@Z
?SavePos@CMarkup@@QAE_NUMCD_CSTR@@H@Z
?SetAttrib@CMarkup@@QAE_NUMCD_CSTR@@0H@Z
?SetAttrib@CMarkup@@QAE_NUMCD_CSTR@@HH@Z
?SetChildAttrib@CMarkup@@QAE_NUMCD_CSTR@@0H@Z
?SetChildAttrib@CMarkup@@QAE_NUMCD_CSTR@@HH@Z
?SetChildData@CMarkup@@QAE_NH@Z
?SetChildData@CMarkup@@QAE_NUMCD_CSTR@@H@Z
?SetData@CMarkup@@QAE_NH@Z
?SetData@CMarkup@@QAE_NUMCD_CSTR@@H@Z
?SetDoc@CMarkup@@QAE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetDoc@CMarkup@@QAE_NPB_W@Z
?SetDocFlags@CMarkup@@QAEXH@Z
?SetElemContent@CMarkup@@QAE_NUMCD_CSTR@@@Z
?SetMapSize@CMarkup@@QAE_NHH@Z
?UTF16To8@CMarkup@@SAHPADPBGH@Z
?UTF8To16@CMarkup@@SAHPAGPBDH@Z
?UnescapeText@CMarkup@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UMCD_CSTR@@HH@Z
?WriteTextFile@CMarkup@@SA_NUMCD_CSTR@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAV34@PAH2@Z
?x_AddElem@CMarkup@@IAE_NPB_W0H@Z
?x_AddElem@CMarkup@@IAE_NPB_WHH@Z
?x_AddNode@CMarkup@@IAE_NHPB_WH@Z
?x_AddSubDoc@CMarkup@@IAE_NPB_WH@Z
?x_Adjust@CMarkup@@IAEXHH_N@Z
?x_AdjustForNode@CMarkup@@IAEXHHH@Z
?x_AllocElemPos@CMarkup@@IAE_NH@Z
?x_CheckSavedPos@CMarkup@@IAEXXZ
?x_CreateNode@CMarkup@@KA_NAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HPB_W@Z
?x_DocChange@CMarkup@@IAEXHHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?x_EncodeCDATASection@CMarkup@@KA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_W@Z
?x_FindElem@CMarkup@@IBEHHHAAUPathPos@@@Z
?x_GetAttrib@CMarkup@@IBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HPB_W@Z
?x_GetData@CMarkup@@IAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?x_GetElemContent@CMarkup@@IBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?x_GetFreePos@CMarkup@@IAEHXZ
?x_GetParent@CMarkup@@IAEHH@Z
?x_GetPath@CMarkup@@IBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?x_GetSubDoc@CMarkup@@IAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?x_GetTagName@CMarkup@@IBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?x_InitMarkup@CMarkup@@IAEXXZ
?x_InsertNew@CMarkup@@IAEHHAAHAAUNodePos@@@Z
?x_LinkElem@CMarkup@@IAEXHHH@Z
?x_ParseDoc@CMarkup@@IAE_NXZ
?x_ParseElem@CMarkup@@IAEHHAAUTokenPos@@@Z
?x_ReleasePos@CMarkup@@IAEHH@Z
?x_ReleaseSubDoc@CMarkup@@IAEHH@Z
?x_RemoveElem@CMarkup@@IAEHH@Z
?x_RemoveNode@CMarkup@@IAEXHAAH000@Z
?x_SetAttrib@CMarkup@@IAE_NHPB_W0H@Z
?x_SetAttrib@CMarkup@@IAE_NHPB_WHH@Z
?x_SetData@CMarkup@@IAE_NHH@Z
?x_SetData@CMarkup@@IAE_NHPB_WH@Z
?x_SetElemContent@CMarkup@@IAE_NPB_W@Z
?x_SetPos@CMarkup@@IAEXHHH@Z
?x_UnlinkElem@CMarkup@@IAEHH@Z
?x_UnlinkPrevElem@CMarkup@@IAEHHHH@Z
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 373KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 612KB - Virtual size: 611KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.v-lizer Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE