E:\projets\malcat\DemoRelease64\malcat.pdb
Static task
static1
Behavioral task
behavioral1
Sample
malcat.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
malcat.exe
Resource
win10v2004-20240508-en
General
-
Target
malcat.exe
-
Size
11.0MB
-
MD5
b7491873fb48c37befcbbf3f06ec09ec
-
SHA1
cd7410be32b59183df8eb710ab98dce5543eb6b6
-
SHA256
abac7469cee79f72f0905454b3dd8e3549b6a92072c609fcc3bf253604f83861
-
SHA512
adcd4b18bf42f867094ae7128add15f5c5a7d2b595aadf8b51415692b9437cbda459bb8948bd8d35aa728c7a3fcc4e819151cd2a3fbd16606ad472eb4113e8bc
-
SSDEEP
196608:yfSDcjlJaDLGZ686hqqIkD4K5ywkqCIXXDtvxZ7I:qZDaDLGZ6nhqqIkD4K5KqCI1xZk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource malcat.exe
Files
-
malcat.exe.exe windows:6 windows x64 arch:x64
52886785edf6e749ed933d7199d02aee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
cgraph
agclose
agxset
agattr
agfstout
agnode
agedge
agnxtout
agxget
Agstrictdirected
agsubg
agopen
gvc
gvContext
gvFreeContext
gvLayout
gvFreeLayout
gvAddLibrary
gvplugin_dot_layout
gvplugin_dot_layout_LTX_library
kanal
?ComputeSha1@kanal@@YA?AVSHA1@@PEBE_K@Z
??0FileBuffer@kanal@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@1@Z
?GetPybindLock@KScript@kanal@@QEAAAEAVrecursive_mutex@std@@XZ
?GetPython@AnalysisEnvironment@kanal@@QEAAAEAVKScript@2@XZ
?wstring2path@@YA?AVpath@filesystem@std@@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@@Z
?path2wstring@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBVpath@filesystem@2@@Z
?ContainsNoCase@@YA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?GetPyEnv@Analysis@kanal@@QEAAAEAVKScript@2@XZ
?Redo@UndoRedoManager@kanal@@QEAA_NXZ
?Undo@UndoRedoManager@kanal@@QEAA_NXZ
?GetRedoeableOperation@UndoRedoManager@kanal@@QEBAPEAVUndoableOperation@2@XZ
?GetUndoeableOperation@UndoRedoManager@kanal@@QEBAPEAVUndoableOperation@2@XZ
??0SelectedRange@kanal@@QEAA@_K0@Z
?Select@Analysis@kanal@@QEAAX$$QEAVSelectedRange@2@@Z
??1LocalizedNote@kanal@@QEAA@XZ
?GetNormalizedPath@VirtualFile@kanal@@QEBA?BV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?Error@Analysis@kanal@@QEAAXW4AnalysisErrorCode@2@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I_K@Z
?HasAnnotation@Analysis@kanal@@QEAA_NI@Z
??0FileSnippet@kanal@@QEAA@V?$shared_ptr@VFile@kanal@@@std@@_K1AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@@Z
?GetVirtualFileSystem@FileType@kanal@@QEBAAEBV?$list@VVirtualFile@kanal@@V?$allocator@VVirtualFile@kanal@@@std@@@std@@XZ
?GetStart@LocalizedNote@kanal@@QEBA_KXZ
?GetIdString@HardwareId@kanal@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetApplicationName@AnalysisEnvironment@kanal@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0ActivationCode@kanal@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Rva2Ea@MappingAnnotation@kanal@@QEBA_K_K@Z
??0FileBuffer@kanal@@QEAA@$$QEAV?$vector@EV?$allocator@E@std@@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@1@Z
??0NumberPattern@kanal@@QEAA@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N1111111@Z
??0StructurePattern@kanal@@QEAA@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N11@Z
??0RegexPattern@kanal@@QEAA@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N111@Z
??0StringPattern@kanal@@QEAA@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N1111@Z
??0HexPattern@kanal@@QEAA@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0Signatures@kanal@@QEAA@AEAVAnalysis@1@@Z
?Tag2Category@ScanRule@kanal@@SA?AW4ScanRuleCategory@12@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?ByteToWcharCustom@@YA_WEW4AsciiCharset@@@Z
?ContainsNoCase@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?Transform@Transformer@kanal@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBE_KAEBV34@AEBV?$vector@V?$variant@_NM_JV?$vector@EV?$allocator@E@std@@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@std@@V?$allocator@V?$variant@_NM_JV?$vector@EV?$allocator@E@std@@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@std@@@2@@4@@Z
?GetTransform@Transformer@kanal@@QEAA?AUTransformInfo@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetAvailableTransforms@Transformer@kanal@@QEAAAEBV?$vector@UTransformInfo@kanal@@V?$allocator@UTransformInfo@kanal@@@std@@@std@@XZ
?IsDynamic@UserTypeDefinition@kanal@@QEBA_NXZ
?InstanciateType@FileStructure@kanal@@QEAA?AVStructAccess@2@_KAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?ParseTypesDefinitions@FileStructure@kanal@@QEAA?AV?$unordered_map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VUserTypeDefinition@kanal@@U?$hash@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@U?$equal_to@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VUserTypeDefinition@kanal@@@std@@@2@@std@@XZ
?FullAccess@FileStructure@kanal@@QEBA?AV?$vector@VStructAccess@kanal@@V?$allocator@VStructAccess@kanal@@@std@@@std@@VStructAccess@2@_K@Z
??0FileStructure@kanal@@QEAA@AEAVAnalysis@1@@Z
??4LocalizedNote@kanal@@QEAAAEAV01@AEBV01@@Z
??0StructAccess@kanal@@QEAA@AEBV01@@Z
?Contains@LocalizedNote@kanal@@QEBA_N_K@Z
?GetSize@LocalizedNote@kanal@@UEBA_KXZ
?GetIntelligenceServicesConfig@Intelligence@kanal@@SA?AV?$vector@UIntelligenceServiceConfig@kanal@@V?$allocator@UIntelligenceServiceConfig@kanal@@@std@@@std@@XZ
?CommitUserFlags@Analysis@kanal@@QEAAXXZ
?SearchInFile@Analysis@kanal@@QEAAXV?$shared_ptr@VFindPattern@kanal@@@std@@@Z
??0FileMapped@kanal@@QEAA@AEBVpath@filesystem@std@@@Z
?MakePythonBindings@AnalysisEnvironment@kanal@@SAXAEAVmodule_@pybind11@@@Z
?ResolveDataPath@AnalysisEnvironment@kanal@@QEBA?AVpath@filesystem@std@@AEBV345@@Z
?NewAnalysis@AnalysisEnvironment@kanal@@QEAA?AV?$shared_ptr@VAnalysis@kanal@@@std@@V?$shared_ptr@VFile@kanal@@@4@@Z
??0AnalysisEnvironment@kanal@@QEAA@AEBVpath@filesystem@std@@00000@Z
??0CFile@kanal@@QEAA@AEBVpath@filesystem@std@@@Z
?GetArchitecture@FileType@kanal@@QEBA?AW4FileArchitecture@2@XZ
?GetCategory@FileType@kanal@@QEBA?AW4FileCategory@2@XZ
?PathExtractParent@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV12@_W@Z
?UndoAll@UndoRedoManager@kanal@@QEAA_NXZ
?RestoreSavePoint@UndoRedoManager@kanal@@QEAA_NXZ
?GetLastSelection@Selected@kanal@@QEBAAEBVSelectedRange@2@XZ
?GetEntryPoint@Analysis@kanal@@QEBA_KXZ
?IsDirty@Analysis@kanal@@QEBA_NXZ
?KesakodeLookup@Analysis@kanal@@QEAAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0_N@Z
?CheckIntelligence@Analysis@kanal@@QEAAX_N@Z
?InvalidateCache@Analysis@kanal@@QEAAXXZ
?Invalidate@Analysis@kanal@@QEAAXXZ
?Interrupt@Analysis@kanal@@QEAAXXZ
?GetBookmark@UserBookmarks@kanal@@QEBA_KI@Z
?PathExtractFilename@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV12@@Z
??0LocalizedNote@kanal@@QEAA@AEBV01@@Z
?GetFullSig@FunctionPrototype@kanal@@QEBA?BV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
?ContainsVa@MappingAnnotation@kanal@@QEBA_N_K@Z
?CstringEscape@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV12@@Z
??0Functions@kanal@@QEAA@AEAVAnalysis@1@@Z
??0CrossReference@kanal@@QEAA@AEAVAnalysis@1@@Z
??0Strings@kanal@@QEAA@AEAVAnalysis@1@@Z
?IsControlFlow@Instruction@kanal@@QEBA_NXZ
??0CFG@kanal@@QEAA@AEAVAnalysis@1@@Z
??0Symbols@kanal@@QEAA@AEAVAnalysis@1@@Z
??0Constants@kanal@@QEAA@AEAVAnalysis@1@@Z
?end@MultiAnnotation@kanal@@QEBA?AVMultiIterator@2@XZ
?find@MultiAnnotation@kanal@@QEBA?AVMultiIterator@2@_K@Z
?GetEnd@LocalizedNote@kanal@@QEBA_KXZ
?GetFullName@FunctionPrototype@kanal@@QEBA?BV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?Match@SigScanner@kanal@@QEBA?AV?$optional@VSigMatch@kanal@@@std@@PEBE_K@Z
?GetSymbolsAt@Symbols@kanal@@QEBA?AV?$vector@VSymbol@kanal@@V?$allocator@VSymbol@kanal@@@std@@@std@@_K@Z
?HasDefaultName@Function@kanal@@QEBA_NXZ
??1AtomicNote@kanal@@QEAA@XZ
pcre2_compile_8
pcre2_match_8
pcre2_match_data_create_8
pcre2_get_ovector_pointer_8
pcre2_code_free_8
pcre2_match_data_free_8
?GetSha256@Entropy@kanal@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?ppa@Analysis@kanal@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_K_N1@Z
?ConvertFromUtf16@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@_N@Z
?ReadEnum@FieldAccess@kanal@@QEBA?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?TruncatedString@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV12@_KV12@@Z
?TruncatedString@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV12@_KV12@@Z
??1Region@kanal@@UEAA@XZ
?RunTemplate@Analysis@kanal@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@Vpath@filesystem@4@@Z
?GetEntropyForRange@Entropy@kanal@@QEBAE_K0@Z
?GetSha1@Entropy@kanal@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetMd5@Entropy@kanal@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetTlsh@Entropy@kanal@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetImpHash@Entropy@kanal@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?begin@MultiAnnotation@kanal@@QEBA?AVMultiIterator@2@XZ
?ConvertFromUtf8@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV?$vector@EV?$allocator@E@std@@@2@@Z
??0Entropy@kanal@@QEAA@AEAVAnalysis@1@@Z
?GetRule@Signatures@kanal@@QEBAPEBVScanRule@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?CstringEscape@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV12@@Z
?ContainsNoCase@@YA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
?ToString@AnalysisError@kanal@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?RunScript@KScript@kanal@@QEAA_NAEBVpath@filesystem@std@@AEBV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@5@PEAX_N@Z
??0Kesakode@kanal@@QEAA@AEAVAnalysis@1@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1_N@Z
?find_or_next@MultiAnnotation@kanal@@QEBA?AVMultiIterator@2@_K@Z
?source@MultiIterator@kanal@@QEAA?AV?$shared_ptr@VAnnotation@kanal@@@std@@XZ
?eof@MultiIterator@kanal@@UEBA_NXZ
?AddAnnotation@MultiAnnotation@kanal@@QEAAXI@Z
??0MultiAnnotation@kanal@@QEAA@AEAVAnalysis@1@_N@Z
??0Loops@kanal@@QEAA@AEAVAnalysis@1@@Z
?toSEHException@@YAHHPEAU_EXCEPTION_POINTERS@@PEAPEAVSEHException@@@Z
??0DiffAnnotation@kanal@@QEAA@AEAVAnalysis@1@V?$weak_ptr@VAnalysis@kanal@@@std@@_NW4DiffMode@01@E_K4@Z
?Compute@Exceptions@kanal@@UEAAXXZ
?Expand@UserComment@kanal@@QEBA?AV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@XZ
?GetLog@Analysis@kanal@@QEBA?BV?$vector@UAnalysisError@kanal@@V?$allocator@UAnalysisError@kanal@@@std@@@std@@XZ
?GetNiceID@Annotation@kanal@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0LocalizedNote@kanal@@QEAA@_K0@Z
??0FindPattern@kanal@@QEAA@XZ
??0UserType@kanal@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0NamedNote@kanal@@QEAA@XZ
??0Serialisable@kanal@@QEAA@XZ
??0CategorizedNote@kanal@@QEAA@XZ
?SetCorpusDirectories@Analysis@kanal@@QEAAXAEBV?$vector@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@Vpath@filesystem@2@@std@@V?$allocator@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@Vpath@filesystem@2@@std@@@2@@std@@@Z
?FullAccess@FileStructure@kanal@@QEBA?AV?$vector@VStructAccess@kanal@@V?$allocator@VStructAccess@kanal@@@std@@@std@@_K@Z
??0FunctionPrototype@kanal@@QEAA@$$QEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0$$QEAV?$vector@UFunctionParameter@kanal@@V?$allocator@UFunctionParameter@kanal@@@std@@@3@$$QEAUType@1@$$QEAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@3@_N44W4Visbility@1@@Z
?GetAlignment@DiffAnnotation@kanal@@QEBA_K_K@Z
?Invalidate@Analysis@kanal@@QEAAXI@Z
?GetAnnotations@Analysis@kanal@@QEAA?AV?$unordered_map@IV?$shared_ptr@VAnnotation@kanal@@@std@@U?$hash@I@2@U?$equal_to@I@2@V?$allocator@U?$pair@$$CBIV?$shared_ptr@VAnnotation@kanal@@@std@@@std@@@2@@std@@XZ
?Bookmark@Analysis@kanal@@QEAAXI_K@Z
?IsFileDirty@Analysis@kanal@@QEBA_NXZ
?IsProjectDirty@Analysis@kanal@@QEBA_NXZ
?Save@Analysis@kanal@@QEAA_NAEBVpath@filesystem@std@@@Z
?Load@Analysis@kanal@@QEAA_NAEBVpath@filesystem@std@@@Z
?RegisterCB@Analysis@kanal@@QEAAXV?$function@$$A6AXIE@Z@std@@@Z
?RegisterCB@Analysis@kanal@@QEAAXV?$function@$$A6AXW4AnalysisStatus@kanal@@@Z@std@@@Z
?RegisterCB@Analysis@kanal@@QEAAXV?$function@$$A6AXXZ@std@@@Z
?ClearAllCallbacks@Analysis@kanal@@QEAAXXZ
?SetIntelligenceServices@Analysis@kanal@@QEAAXAEBV?$vector@UIntelligenceService@kanal@@V?$allocator@UIntelligenceService@kanal@@@std@@@std@@@Z
?ReadPointer@Analysis@kanal@@QEAA_K_K@Z
??0UserTypeOperation@kanal@@QEAA@_KAEBVUserType@1@@Z
?ToXml@DebugFunction@kanal@@UEBA_NAEAVxml_node@pugi@@@Z
?FromXml@DebugFunction@kanal@@UEAA_NAEBVxml_node@pugi@@@Z
??0UserLabelOperation@kanal@@QEAA@_KAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0UserHighlightOperation@kanal@@QEAA@_K0W4NoteCategory@1@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2@Z
?Ea2Rva@MappingAnnotation@kanal@@QEBAI_K@Z
??0FileMoveOperation@kanal@@QEAA@_K0_J@Z
?MagicMask@Selected@kanal@@QEAA_K_N000@Z
?ChainTransform@Transformer@kanal@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBE_KAEBV?$vector@U?$pair@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$variant@_NM_JV?$vector@EV?$allocator@E@std@@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@std@@V?$allocator@V?$variant@_NM_JV?$vector@EV?$allocator@E@std@@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@std@@@2@@2@@std@@V?$allocator@U?$pair@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$variant@_NM_JV?$vector@EV?$allocator@E@std@@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@std@@V?$allocator@V?$variant@_NM_JV?$vector@EV?$allocator@E@std@@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@std@@@2@@2@@std@@@2@@4@@Z
??0FileDeleteOperation@kanal@@QEAA@_K0_N@Z
?ToXml@Type@kanal@@UEBA_NAEAVxml_node@pugi@@@Z
?FromXml@Type@kanal@@UEAA_NAEBVxml_node@pugi@@@Z
??0YaraPattern@kanal@@QEAA@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?Do@UndoRedoManager@kanal@@QEAA_NV?$shared_ptr@VUndoableOperation@kanal@@@std@@@Z
?SetSavePoint@UndoRedoManager@kanal@@QEAAXXZ
??0FileInsertOperation@kanal@@QEAA@_K0_N@Z
??0UserCommentOperation@kanal@@QEAA@_KAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0UserFunctionOperation@kanal@@QEAA@_K0AEBVDebugFunction@1@@Z
?SaveAs@File@kanal@@QEAA_NAEBVpath@filesystem@std@@@Z
?ReadCopyVector@File@kanal@@QEAA?AV?$vector@EV?$allocator@E@std@@@std@@_K0@Z
?CstringEscape@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBE_K@Z
?Open@FileType@kanal@@QEBA?AUFileUnpackingResult@2@AEBVVirtualFile@2@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?ComputeSha256@kanal@@YA?AVSHA256@@PEBE_K@Z
?ComputeHistogram@kanal@@YA?AV?$vector@IV?$allocator@I@std@@@std@@PEBE_K@Z
?ComputeMd5@kanal@@YA?AVMD5@@PEBE_K@Z
?ConvertToPhysicalInterval@MappingAnnotation@kanal@@QEBA?AV?$interval@_K@@_K0@Z
?ComputeCrc32@kanal@@YA?AVCRC32@@PEBE_K@Z
?ComputeTlsh@kanal@@YA?AVTlsh@@PEBE_K@Z
?getHash@SHA1@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getHash@MD5@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getHash@SHA256@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getHash@Tlsh@@QEBAPEBDH@Z
??1Tlsh@@QEAA@XZ
?getHash@CRC32@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0FieldAccess@kanal@@QEAA@AEBV01@@Z
?ConvertToUtf8@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@Z
??0Anomalies@kanal@@QEAA@AEAVAnalysis@1@@Z
??0StructAccess@kanal@@QEAA@VFieldAccess@1@_KPEBVStructure@1@@Z
??0FieldAccess@kanal@@QEAA@AEBVFileTypeLayout@1@AEBVField@1@_KE$$QEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??AFieldAccess@kanal@@QEBA?BV01@I@Z
?GetCount@FieldAccess@kanal@@QEBA_KXZ
?GetTarget@FieldAccess@kanal@@QEBA_KAEBVAnalysis@2@@Z
?Write@FieldAccess@kanal@@QEBA_NAEBV?$variant@_NECGFIH_K_JMNV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@VFieldAccess@kanal@@@std@@@Z
?GetFile@FieldAccess@kanal@@QEBAAEAVFile@2@XZ
?ReadCopy@File@kanal@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_K0@Z
?ConvertToUtf16@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@_N@Z
?ConvertFromUtf8@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEBE_K@Z
?BytesToWcharsCustom@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@W4AsciiCharset@@@Z
?ConvertFromUtf16@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEBE_K_N@Z
??0NamedNote@kanal@@QEAA@AEBV01@@Z
??0Note@kanal@@QEAA@AEBV01@@Z
??1Note@kanal@@QEAA@XZ
??AFileTypeLayout@kanal@@QEBA?BVFieldAccess@1@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Has@FileTypeLayout@kanal@@QEBA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??AFieldAccess@kanal@@QEBA?BV01@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetFileInterval@FieldAccess@kanal@@QEBA?BV?$interval@_K@@XZ
?GetSize@FieldAccess@kanal@@QEBA_KXZ
?Read@FieldAccess@kanal@@QEBA?AV?$variant@_NECGFIH_K_JMNV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@VFieldAccess@kanal@@@std@@XZ
?ReadCStringAscii@File@kanal@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_K0@Z
?ReadCStringUtf8@File@kanal@@QEAA?AU?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_K@std@@_K0@Z
?ReadCStringUtf16@File@kanal@@QEAA?AU?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_K@std@@_K0_N@Z
?GetAnnotation@Analysis@kanal@@QEAA?AV?$shared_ptr@VAnnotation@kanal@@@std@@I@Z
?find@Annotation@kanal@@QEBA?AViterator@12@_K@Z
?GetInstructionStart@CFG@kanal@@QEBA_K_KPEBVBasicBlock@2@@Z
?Run@Analysis@kanal@@QEAA?AW4AnalysisStatus@2@XZ
?GetFiletypeName@FileType@kanal@@QEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
kernel32
QueryPerformanceFrequency
GetEnvironmentVariableW
IsDebuggerPresent
TerminateProcess
GlobalMemoryStatusEx
GetVersionExW
GetNativeSystemInfo
GetModuleFileNameW
LoadResource
LockResource
SizeofResource
FindResourceW
GetComputerNameW
IsValidCodePage
GetCPInfo
OutputDebugStringW
RtlCaptureContext
GetACP
FreeLibrary
LoadLibraryW
WriteFile
ReadFile
SetHandleInformation
SetNamedPipeHandleState
PeekNamedPipe
SetEvent
CreateEventW
WaitForMultipleObjects
GetExitCodeProcess
CreateThread
GetStartupInfoW
IsProcessorFeaturePresent
CreateProcessW
IsBadReadPtr
IsBadStringPtrA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemDirectoryA
RtlVirtualUnwind
RtlLookupFunctionEntry
LoadLibraryA
MulDiv
GlobalAlloc
InitializeSListHead
QueryPerformanceCounter
GetCurrentProcessId
GetCommandLineW
SetCurrentDirectoryW
GetLongPathNameW
GetFileSize
FindFirstFileW
FormatMessageW
CreatePipe
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
GetTempPathW
AreFileApisANSI
CloseHandle
GetLastError
SetLastError
GetModuleHandleW
GetProcAddress
ExitProcess
CopyFileW
LocalFree
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
ReadConsoleOutputCharacterA
SetConsoleCursorPosition
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterW
WriteConsoleW
WriteConsoleA
AttachConsole
FreeConsole
GetStdHandle
GlobalFree
GlobalHandle
GetTempFileNameW
ExpandEnvironmentStringsW
GetDriveTypeW
GetLogicalDriveStringsW
GlobalLock
GlobalSize
GetFileType
MultiByteToWideChar
WideCharToMultiByte
SetErrorMode
RaiseException
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseSemaphore
ReleaseMutex
WaitForSingleObject
CreateMutexW
Sleep
CreateSemaphoreW
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
SetThreadPriority
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GlobalUnlock
user32
GetDC
ReleaseDC
GetUpdateRgn
InvalidateRect
RedrawWindow
ScrollWindow
EnableScrollBar
GetClientRect
GetWindowRect
SetCursorPos
GetCursorPos
ClientToScreen
ScreenToClient
MapWindowPoints
WindowFromPoint
ChildWindowFromPointEx
GetSysColor
FillRect
InflateRect
PtInRect
GetWindowLongW
GetParent
SetParent
GetWindow
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
IsDialogMessageW
SetScrollInfo
GetScrollInfo
SystemParametersInfoW
CreateDialogParamW
GetDlgItem
CopyRect
OffsetRect
MonitorFromWindow
GetMonitorInfoW
IsMenu
keybd_event
GetWindowTextLengthW
HideCaret
ShowCaret
DrawTextW
GetMenuItemInfoW
TrackPopupMenu
GetMenuItemCount
GetSystemMetrics
IsWindowEnabled
EnableWindow
ReleaseCapture
SetCapture
SetProcessDPIAware
DrawFocusRect
GetMenuItemID
GetSysColorBrush
CheckMenuRadioItem
GetDesktopWindow
mouse_event
ValidateRgn
GetWindowTextW
MessageBeep
GetClassNameW
CreateAcceleratorTableW
DestroyAcceleratorTable
TranslateAcceleratorW
GetMessageW
ValidateRect
GetWindowDC
BeginPaint
EndPaint
GetCapture
MapVirtualKeyW
VkKeyScanW
UpdateWindow
NotifyWinEvent
SetLayeredWindowAttributes
CreateIconIndirect
DrawStateW
SetRect
IsClipboardFormatAvailable
ChangeDisplaySettingsExW
EnumDisplaySettingsW
MonitorFromPoint
EnumDisplayMonitors
wsprintfW
AdjustWindowRectEx
ShowCursor
CreateCaret
DestroyCaret
SetCaretPos
FlashWindowEx
MoveWindow
SetWindowPos
GetWindowPlacement
IsIconic
IsZoomed
CreateDialogIndirectParamW
GetDialogBaseUnits
DrawMenuBar
GetSystemMenu
EnableMenuItem
SetForegroundWindow
SetWindowTextW
SetWindowLongW
GetWindowLongPtrW
SetWindowLongPtrW
TranslateMessage
RegisterHotKey
UnregisterHotKey
GetMessagePos
ShowWindow
GetIconInfo
GetMessageTime
LoadImageW
LoadIconW
PostQuitMessage
LoadBitmapW
CallWindowProcW
DdeFreeStringHandle
DdeQueryStringW
DdeCreateStringHandleW
DdeGetLastError
IsWindow
AnimateWindow
DdeFreeDataHandle
DdeGetData
DdeCreateDataHandle
DdeClientTransaction
DdeNameService
DdePostAdvise
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
SetFocus
GetActiveWindow
GetFocus
SetRectEmpty
DdeDisconnect
DdeConnect
DdeUninitialize
DdeInitializeW
KillTimer
SetTimer
MsgWaitForMultipleObjects
SetWindowRgn
DispatchMessageW
DestroyWindow
UnregisterClassW
DefWindowProcW
WaitForInputIdle
SendMessageW
PeekMessageW
LoadCursorW
SetCursor
BringWindowToTop
DestroyCursor
CreateWindowExW
GetDoubleClickTime
GetCaretBlinkTime
RegisterClassW
PostMessageW
PostThreadMessageW
MessageBoxW
DestroyIcon
DrawIconEx
RegisterClipboardFormatW
GetClipboardFormatNameW
UnionRect
ChildWindowFromPoint
FindWindowExW
GetComboBoxInfo
GetClassInfoW
IsRectEmpty
GetProcessDefaultLayout
CreateMenu
CreatePopupMenu
DestroyMenu
GetSubMenu
InsertMenuW
AppendMenuW
ModifyMenuW
RemoveMenu
SetMenuInfo
InsertMenuItemW
SetMenuItemInfoW
RegisterWindowMessageW
SetMenu
DrawEdge
DrawFrameControl
CheckMenuItem
GetKeyState
GetPropW
GetAsyncKeyState
GetMenuState
msvcp140
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAJ@Z
?__ExceptionPtrSwap@@YAXPEAX0@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?uncaught_exception@std@@YA_NXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?_Incref@facet@locale@std@@UEAAXXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
_Cnd_signal
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Winerror_message@std@@YAKKPEADK@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Winerror_map@std@@YAHH@Z
?_Throw_C_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCompare@@YA_NPEBX0@Z
_Mtx_lock
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Cnd_do_broadcast_at_thread_exit
_Cnd_destroy
_Cnd_wait
_Mtx_init
_Thrd_start
_Thrd_id
_Mtx_destroy
_Cnd_init
_Thrd_join
_Mtx_unlock
?_Xbad_function_call@std@@YAXXZ
_Thrd_detach
_Query_perf_frequency
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Query_perf_counter
_Cnd_init_in_situ
_Cnd_destroy_in_situ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??Bid@locale@std@@QEAA_KXZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
python38
PyInstanceMethod_Type
PyExc_MemoryError
PyDict_GetItemWithError
PyCapsule_GetContext
PyFrame_GetLineNumber
PyGILState_Release
PyBytes_AsStringAndSize
_Py_NoneStruct
PyTuple_New
PyDict_Size
PyByteArray_AsString
PyErr_SetString
PyErr_WriteUnraisable
PyNumber_Add
PyExc_ValueError
PyDict_Next
PyErr_Format
PyDict_Type
_Py_FalseStruct
PyType_IsSubtype
PyErr_Restore
PyObject_GC_UnTrack
_Py_Dealloc
PyTuple_GetItem
PyCapsule_GetPointer
PyErr_Fetch
PyObject_CallFunctionObjArgs
PyObject_ClearWeakRefs
PyList_New
PyUnicode_DecodeUTF16
PyType_Ready
PyObject_GetAttrString
PyErr_Clear
PyList_Append
PyTuple_Size
PyThread_tss_get
PyException_SetTraceback
PyCapsule_New
PyCapsule_GetName
PyBytes_Size
PyDict_New
PyException_SetContext
PyInstanceMethod_New
PyObject_IsInstance
PyObject_SetAttrString
PyExc_RuntimeError
PyUnicode_AsUTF8AndSize
PyUnicode_DecodeUTF8
PyErr_Occurred
PyErr_NormalizeException
PyBytes_AsString
PyImport_ImportModule
PyThreadState_Get
PyWeakref_NewRef
PyCFunction_Type
PyExc_ImportError
PyMem_Calloc
PyBaseObject_Type
PySequence_List
PyUnicode_AsEncodedString
PyThread_tss_create
PyExc_OverflowError
PyMem_Free
PyTuple_SetItem
PyThread_tss_set
PyObject_CallObject
PyObject_HasAttrString
PyProperty_Type
_Py_NotImplementedStruct
PyByteArray_Size
PyGILState_Ensure
PyCapsule_SetContext
PyThread_tss_alloc
PyExc_TypeError
PyCFunction_NewEx
PyCapsule_Type
PyEval_GetBuiltins
PyDict_Copy
PyObject_Str
PyUnicode_AsUTF8String
PyCallable_Check
PyExc_IndexError
PyCapsule_SetPointer
_Py_TrueStruct
PyExc_SystemError
PyObject_SetItem
PyException_SetCause
PyDict_DelItemString
PyUnicode_FromString
_PyType_Lookup
PyObject_Repr
PyByteArray_Type
PyType_Type
PySequence_Tuple
PyUnicode_FromStringAndSize
_PyObject_GetDictPtr
PySequence_Size
PyLong_AsUnsignedLong
PySequence_GetItem
PyFloat_AsDouble
PyLong_AsUnsignedLongLong
PyFloat_Type
PyLong_AsLong
PySequence_Check
PyNumber_Check
PyNumber_Long
PyNumber_Float
PyLong_FromLongLong
PyLong_FromUnsignedLongLong
PyImport_AppendInittab
PyModule_Create2
PyExc_BufferError
PyObject_SetAttr
PyObject_Malloc
PyLong_FromSsize_t
PyDict_Contains
PyObject_GenericSetDict
PyFloat_FromDouble
PyList_Size
PyObject_GenericGetDict
PyUnicode_FromFormat
PyList_GetItem
PyObject_GetItem
PyModule_Type
PyBuffer_Release
Py_IsInitialized
ws2_32
inet_ntoa
inet_addr
htons
htonl
WSASetLastError
WSAGetLastError
socket
shutdown
setsockopt
sendto
getservbyname
getservbyport
ntohl
gethostbyaddr
send
select
recvfrom
recv
listen
getsockopt
getsockname
connect
closesocket
bind
accept
__WSAFDIsSet
WSAAsyncSelect
WSACleanup
WSAStartup
gethostbyname
ioctlsocket
ntohs
comctl32
ImageList_Copy
ImageList_ReplaceIcon
ImageList_BeginDrag
ImageList_GetImageInfo
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_SetDragCursorImage
ImageList_GetIconSize
ImageList_GetIcon
ImageList_Remove
ImageList_Replace
ImageList_Draw
ImageList_SetBkColor
ImageList_Add
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
ord17
ImageList_EndDrag
ord16
rpcrt4
RpcStringFreeW
UuidToStringW
oleacc
CreateStdAccessibleObject
LresultFromObject
uxtheme
GetThemeSysColor
GetThemeSysFont
OpenThemeData
CloseThemeData
GetCurrentThemeName
IsThemeActive
GetThemePartSize
DrawThemeBackground
SetWindowTheme
IsAppThemed
GetThemeInt
GetThemeFont
GetThemeBackgroundContentRect
GetThemeMargins
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
GetThemeColor
IsThemePartDefined
GetThemeBackgroundExtent
shlwapi
AssocQueryStringW
SHAutoComplete
PathMatchSpecW
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
msimg32
GradientFill
AlphaBlend
imm32
ImmReleaseContext
ImmSetCompositionFontW
ImmSetCompositionWindow
ImmGetContext
vcruntime140
strchr
_CxxThrowException
memset
strstr
memmove
wcschr
strrchr
wcsstr
memcmp
__RTCastToVoid
__CxxFrameHandler3
longjmp
__RTDynamicCast
__intrinsic_setjmp
memcpy
__std_exception_destroy
__std_exception_copy
__C_specific_handler
__RTtypeid
__std_terminate
__std_type_info_name
memchr
__std_type_info_compare
_set_se_translator
_purecall
api-ms-win-crt-heap-l1-1-0
_aligned_malloc
_set_new_mode
calloc
free
_callnewh
_aligned_free
malloc
realloc
api-ms-win-crt-string-l1-1-0
wcsncat
islower
strncpy
isalnum
isspace
isdigit
isalpha
isgraph
isxdigit
strcpy_s
_strdup
iswalnum
iswxdigit
iswprint
tolower
strcat_s
strncpy_s
wcsncpy
ispunct
strcmp
toupper
strncmp
isupper
_wcsicmp
wcspbrk
towlower
towupper
iswspace
iswdigit
iswalpha
api-ms-win-crt-runtime-l1-1-0
terminate
_beginthreadex
_invalid_parameter_noinfo_noreturn
abort
_register_thread_local_exe_atexit_callback
_c_exit
exit
_exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_errno
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
__stdio_common_vsprintf
_set_fmode
__p__commode
__stdio_common_vsprintf_s
__acrt_iob_func
__stdio_common_vfwprintf
fflush
_wsopen_dispatch
__stdio_common_vsscanf
_open_osfhandle
__stdio_common_vswscanf
_fileno
_get_osfhandle
_close
__stdio_common_vswprintf_p
__stdio_common_vswprintf
_write
fwrite
_ftelli64
_fseeki64
fread
ferror
feof
fclose
clearerr
_wfopen
_telli64
_lseeki64
_commit
_read
api-ms-win-crt-math-l1-1-0
sin
cos
ceil
lround
floor
ceilf
sqrt
floorf
_fdopen
fmodf
atan2f
fmod
atan2
pow
tan
sinf
sqrtf
tanf
__setusermatherr
acosf
cosf
lroundf
api-ms-win-crt-time-l1-1-0
_get_timezone
_time64
_localtime64
strftime
_gmtime64
wcsftime
_mktime64
_tzset
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
setlocale
_create_locale
_free_locale
_configthreadlocale
api-ms-win-crt-convert-l1-1-0
strtoll
wcstod
_wcstod_l
wcstol
wcstoul
_wcstoi64
_wcstoui64
_wtol
atof
atoi
_wtoi
strtol
strtoul
api-ms-win-crt-utility-l1-1-0
qsort
bsearch
rand_s
api-ms-win-crt-filesystem-l1-1-0
_wmkdir
_wrmdir
_wremove
_wrename
api-ms-win-crt-environment-l1-1-0
_wgetenv
getenv
_wgetcwd
gdi32
CreateSolidBrush
GetGraphicsMode
GetViewportExtEx
CreateFontIndirectW
ExtCreateRegion
GetRegionData
OffsetRgn
StretchBlt
SetStretchBltMode
GetStockObject
Arc
Ellipse
ExtFloodFill
GetClipBox
GetObjectType
GetPixel
MaskBlt
Pie
PolyPolygon
Rectangle
RoundRect
SelectClipRgn
ExtSelectClipRgn
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPixel
SetPolyFillMode
StretchDIBits
SetROP2
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmapIndirect
CreateBitmap
BitBlt
SetTextColor
SetBkMode
SetBkColor
GdiFlush
SetBrushOrgEx
GetTextMetricsW
SelectPalette
SelectObject
RealizePalette
GetOutlineTextMetricsW
GetDeviceCaps
ExcludeClipRect
CreateRectRgn
GetObjectW
DeleteObject
GetWindowExtEx
GetWorldTransform
SetWorldTransform
ModifyWorldTransform
ExtTextOutW
CreatePolygonRgn
DPtoLP
EndPage
StartPage
EndDoc
StartDocW
SetAbortProc
EnumFontFamiliesExW
CreateDCW
PlayEnhMetaFile
GetEnhMetaFileHeader
GetEnhMetaFileW
DeleteEnhMetaFile
CreateEnhMetaFileW
CloseEnhMetaFile
GetSystemPaletteEntries
SetViewportOrgEx
GetTextExtentExPointW
GetCharABCWidthsW
GetPaletteEntries
GetNearestPaletteIndex
SetDIBColorTable
GetDIBColorTable
CreateDIBSection
GetDIBits
CreatePalette
CreateDIBitmap
MoveToEx
LineTo
GetBkColor
CreateICW
GetTextExtentPoint32W
CreateRectRgnIndirect
RectInRegion
PtInRegion
GetRgnBox
EqualRgn
CombineRgn
ExtCreatePen
CreatePen
CreatePatternBrush
CreateHatchBrush
SetWindowOrgEx
SetWindowExtEx
SetViewportExtEx
PolyBezier
Polyline
Polygon
LPtoDP
winspool.drv
DocumentPropertiesW
GetPrinterW
OpenPrinterW
ClosePrinter
comdlg32
CommDlgExtendedError
GetSaveFileNameW
ChooseFontW
ChooseColorW
PrintDlgW
PageSetupDlgW
GetOpenFileNameW
advapi32
RegOpenKeyExW
RegEnumValueW
GetUserNameW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegSetValueExW
shell32
DragAcceptFiles
DragFinish
DragQueryPoint
DragQueryFileW
ExtractIconExW
ExtractIconW
SHGetFolderPathW
CommandLineToArgvW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc
SHGetFileInfoW
ShellExecuteExW
ord6
ole32
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
OleSetClipboard
RegisterDragDrop
CoLockObjectExternal
CoInitializeEx
CoUninitialize
CoTaskMemAlloc
ReleaseStgMedium
RevokeDragDrop
CoTaskMemFree
OleUninitialize
OleInitialize
CoCreateInstance
oleaut32
SafeArrayLock
VarBstrFromCy
SafeArrayGetVartype
SafeArrayDestroy
SafeArrayUnlock
SystemTimeToVariantTime
SysStringLen
VariantInit
SysFreeString
SysAllocString
SafeArrayCreate
Sections
.text Size: 7.0MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 165KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ