5[.]87v[.]demo-ru[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

5.87v.demo-ru.exe
Size

32.7MB
MD5

931189974e6a1485f124eaf711d50d61
SHA1

bd6fbfc990b438eacb2a8cea9d5dfe8c6d6d68c4
SHA256

5ed6864c5f23680a3a997c9f68bf5d1cb72efe0c12375ed456bbe138a4b67711
SHA512

b188744f1ae06303d7d03f5b636905c72bf5fd17fb30e42aa06abe1ab4ab89aabe2aca7d0e94cde49922b52b6937f03f6a8e0f0c50c0da780ee3655c7b2be56e
SSDEEP

786432:BvUp7gBX+aCfW+QEvS+fBUKbdrerkg8vh6KVyN2YqnVwF7R0mg1:B8Rkui+QEhfn9MkgiByNkEKmy

Score

3^/10

Malware Config

Signatures

Unsigned PE 17 IoCs

Checks for missing Authenticode signature.

resource
5.87v.demo-ru.exe
unpack001/$PLUGINSDIR/INetC.dll
unpack001/CLIENT/Client2.exe
unpack001/CLIENT/Client2AutoUpdate.exe
unpack001/CLIENT/Client2Service.exe
unpack001/CLIENT/CrashRpt1403.dll
unpack001/CLIENT/CrashSender1403.exe
unpack001/CLIENT/SetupClient2.exe
unpack001/CLIENT/language.dll
unpack001/CLIENT/offer.dll
unpack001/CrashRpt1403.dll
unpack001/CrashSender1403.exe
unpack001/LOG3View.exe
unpack001/PassClean.exe
unpack001/Server.exe
unpack001/SetupServer.exe
unpack001/language.dll

Files

5.87v.demo-ru.exe
.exe windows:4 windows x86 arch:x86

Password: 8765к4увапро

9dda1a1d1f8a1d13ae0297b47046b26e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumValueW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExW
RegCreateKeyExW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHFileOperationW
ShellExecuteExW

ole32

CoCreateInstance
OleUninitialize
OleInitialize
IIDFromString
CoTaskMemFree

comctl32

ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_Create

user32

MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
CreatePopupMenu
AppendMenuW
TrackPopupMenu
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
IsWindowEnabled
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CharPrevW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
CharNextA
wsprintfA
DispatchMessageW
CreateWindowExW
PeekMessageW
GetSystemMetrics

gdi32

GetDeviceCaps
SetBkColor
SelectObject
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor

kernel32

RemoveDirectoryW
lstrcmpiA
GetTempFileNameW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
WriteFile
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
CreateFileW
GetTickCount
Sleep
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
MulDiv
lstrcpyA
MoveFileExW
lstrcatW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
CopyFileW

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/INetC.dll
.dll windows:5 windows x86 arch:x86

Password: 8765к4увапро

2c10f6f3e9eaa15d70f14c96e757b2e2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wininet

FtpCreateDirectoryW
FtpOpenFileW
InternetGetLastResponseInfoW
InternetSetFilePointer
InternetSetOptionW
InternetQueryOptionW
HttpAddRequestHeadersA
InternetCloseHandle
InternetErrorDlg
HttpOpenRequestW
HttpAddRequestHeadersW
HttpEndRequestW
InternetConnectW
InternetCrackUrlW
InternetOpenW
HttpQueryInfoW
HttpSendRequestExW
HttpSendRequestW
InternetWriteFile
InternetReadFile

comctl32

ord17

shlwapi

UrlCombineW

kernel32

GlobalFree
WideCharToMultiByte
lstrlenA
CreateFileA
GlobalAlloc
WaitForSingleObject
TerminateThread
MultiByteToWideChar
GetModuleHandleW
MulDiv
lstrcmpiW
CreateFileW
GetFileSize
CloseHandle
CreateThread
GetTickCount
SetFilePointer
GetProcAddress
LoadLibraryA
lstrlenW
WriteFile
ReadFile
lstrcatW
LocalFree
lstrcpyW
LocalAlloc
lstrcmpW
lstrcpynW
GetLastError
DeleteFileW
SleepEx

user32

wsprintfA
FindWindowExW
CreateDialogParamW
EnableWindow
IsWindowVisible
IsDialogMessageW
GetMessageW
TranslateMessage
DispatchMessageW
RedrawWindow
KillTimer
DestroyWindow
UpdateWindow
LoadIconW
SetTimer
wsprintfW
IsWindow
MessageBoxW
GetParent
ShowWindow
SetWindowLongW
GetWindowLongW
SetWindowTextW
SendDlgItemMessageW
GetDlgItem
PostMessageW
GetWindowTextW
SendMessageW
SetDlgItemTextW
SetWindowPos
SystemParametersInfoW
GetClientRect
GetWindowRect

gdi32

SetBkColor
DeleteObject
SetTextColor
CreateSolidBrush

Exports

Exports

get
head
post
put

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CLIENT/Client2.exe
.exe windows:6 windows x64 arch:x64

Password: 8765к4увапро

393be3e2a5dd1a71a8f29b4fd86d774b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Sources\VCPP\cz_2022\ReleaseDemo\x64\Client2.pdb

Imports

language

?RW_PrivacyTab@@3QEBDEB
?RW_SecurityTab@@3QEBDEB
?RW_GeneralTab@@3QEBDEB
?RW_NoBrowserOptions@@3QEBDEB
?RW_NoSupportInfo@@3QEBDEB
?RW_NoAddFromInternet@@3QEBDEB
?RW_NoAddFromCDorFloppy@@3QEBDEB
?RW_NoWindowsSetupPage@@3QEBDEB
?RW_NoAddPage@@3QEBDEB
?RW_NoRemovePage@@3QEBDEB
?RW_NoAddRemovePrograms@@3QEBDEB
?RW_NoShellSearchButton@@3QEBDEB
?RW_NoFileMenu@@3QEBDEB
?RW_NoViewContextMenu@@3QEBDEB
?RW_NoDesktop@@3QEBDEB
?RW_NoChangeStartMenu@@3QEBDEB
?RW_NO_CLOSE@@3QEBDEB
?RW_NO_RUN@@3QEBDEB
?RW_NO_FIND@@3QEBDEB
?RW_ProgramsTab@@3QEBDEB
?RW_DisableRegistryTools@@3QEBDEB
?RW_NoLowDiskSpaceChecks@@3QEBDEB
?RW_AdvancedTab@@3QEBDEB
?RW_ContentTab@@3QEBDEB
?TEXT_SPECIAL_CLIENT_OCCUPY_MIN@@3QEBDEB
?TEXT_SPECIAL_CLIENT_OCCUPY_COMPUTER_FOR@@3QEBDEB
?TEXT_SPECIAL_CLIENT_PASSWORD@@3QEBDEB
?RW_NoFolderOptions@@3QEBDEB
?RW_NoDispBackgroundPage@@3QEBDEB
?TEXT_GROUP_SPECIAL_CLIENT@@3QEBDEB
?TEXT_SPECIAL_CLIENT_LOCK_MESSAGE@@3QEBDEB
?SITMODE_BALANCE_TIMER@@3QEBDEB
?SITMODE_TIMER@@3QEBDEB
?USBPLUG_NOTIFY_VOLUME@@3QEBDEB
?GOGA_USER_ACCEPT@@3QEBDEB
?GOGA_USER_TITLE@@3QEBDEB
?TEXT_SPECIAL_CLIENT_CONN_ERROR@@3QEBDEB
?UNABLE_TO_FINISH_WORK_AS_PENDING_ORDERS@@3QEBDEB
?FORMAT_CCP_REMAINING_DEPOSIT@@3QEBDEB
?ERR_MESSAGE_POS_ITEM_LIST_RECEIVE_ERROR@@3QEBDEB
?TEXT_BUTTON_ORDER@@3QEBDEB
?RW_NoDispCPL@@3QEBDEB
?RW_NoDrives@@3QEBDEB
?RW_NoTrayContextMenu@@3QEBDEB
?RW_NoDispSettingsPage@@3QEBDEB
?RW_NoDispAppearancePage@@3QEBDEB
?RW_NoDispScrSavPage@@3QEBDEB
?RW_Advanced@@3QEBDEB
?RW_NO_ADD_PRINTER@@3QEBDEB
?RW_NO_RECENT_DOCS_HISTORY@@3QEBDEB
?RW_AUTOMATIC_CLEAN_RECENTDOCS@@3QEBDEB
?TYPE_SPECIAL_CLIENT_PWD@@3QEBDEB
?OK_V@@3QEBDEB
?VALUTA@@3QEBDEB
?T_BLOCK_INFO@@3QEBDEB
?T_ADMINPASSWORD@@3QEBDEB
?TEXT_SPECIAL_CLIENT_BUTTON_START@@3QEBDEB
?TEXT_SPECIAL_CLIENT_BUTTON_START_TIMER@@3QEBDEB
?TEXT_SPECIAL_CLIENT_BUTTON_BALANCE@@3QEBDEB
?TEXT_SPECIAL_CLIENT_ERR_WRONG_ADMIN_PASSWORD@@3QEBDEB
?TEXT_SPECIAL_CLIENT_CLEANUP_DATA@@3QEBDEB
?TEXT_SPECIAL_CLIENT_BUTTON_START_ENTER_ADMIN@@3QEBDEB
?FORMAT_CCP_DEBT@@3QEBDEB
?FORMAT_CCP_CURRENT_TIMER_PAY_SUM@@3QEBDEB
?FORMAT_CCP_REMAINING_BALANCE@@3QEBDEB
?TEXT_SPECIAL_CLIENT_ENTER_ADMIN_INFO@@3QEBDEB
?ERR_MANDATORY_USER_PROFILE@@3QEBDEB
?FORMAT_CCP_OPERATION_END@@3QEBDEB
?FORMAT_CCP_OPERATION_BEGIN@@3QEBDEB
?CCP_STATE_SPENT@@3QEBDEB
?CCP_STATE_REMAINING@@3QEBDEB
?CCP_STATE_NO_CONNECTION_WITH_SERVER@@3QEBDEB
?CCP_CHK_SHOW_ALWAYS_ON_TOP@@3QEBDEB
?RW_NoChangingWallpaper@@3QEBDEB
?RW_ConnectionsTab@@3QEBDEB
?RW_DisableChangePassword@@3QEBDEB
?RW_NoSetTaskBar@@3QEBDEB
?T_GID_EXPLORER@@3QEBDEB
?T_GID_NETWORK@@3QEBDEB
?T_UDALENIE_PUNKTA_IZBRANNOE@@3QEBDEB
?T_UDALENIE_PUNKTA_RECENT_DOCUMENTS@@3QEBDEB
?CLIENT_BANNER_PAUSE_MODE@@3QEBDEB
?T_GID_STARTMENU@@3QEBDEB
?CANCEL_V@@3QEBDEB
?TEXT_SPECIAL_CLIENT_USERNAME@@3QEBDEB
?CCP_YESNO_SURE@@3QEBDEB
?CCP_STOP_SESSION@@3QEBDEB
?CLIENT_CONTROL_PANEL@@3QEBDEB
?T_HR@@3QEBDEB
?T_MIN@@3QEBDEB
?WARNING_V@@3QEBDEB
?T_CALL_OPERATOR@@3QEBDEB
?ERR_MESSAGE_ORDER_NOT_SETUP@@3QEBDEB
?ADDSERV_PAY_LATER_ADD_TO_DEBT@@3QEBDEB
?LOG3_REPORT_USLU_Z_KOLVO@@3QEBDEB
?DU_K_OPLATE@@3QEBDEB
?DU_BLANK_VIBERITE_USLUGU@@3QEBDEB
?DU_OPLATIT@@3QEBDEB
?DU_DOPOLNITELNIE_USLUGI@@3QEBDEB
?SETUPCLIENT2_NAPOMINANIYA_DEFAULT_FREE@@3QEBDEB
?SETUPCLIENT2_NAPOMINANIYA_DEFAULT_TIMEOUT@@3QEBDEB
?SETUPCLIENT2_NAPOMINANIYA_DEFAULT_OTRABOTANNO@@3QEBDEB
?SETUPCLIENT2_NAPOMINANIYA_DEFAULT_DOKONCA@@3QEBDEB
?UDP_ERROR_CANT_START@@3QEBDEB
?MSG_SETTINGS_ERR@@3QEBDEB
?MSG_OLE_ERR@@3QEBDEB
?MSG_SOCK_ERR@@3QEBDEB
?ERROR_V@@3QEBDEB
?T_DISABLE_CMD@@3QEBDEB
?T_NO_CHANGE_ANIMATION@@3QEBDEB
?T_GID_APPLET_SCREEN@@3QEBDEB
?T_GID_INTERNET_EXPLORER@@3QEBDEB
?T_GID_ADDREMOVE_PROGRAMS@@3QEBDEB
?T_NO_ACTIVE_DESKTOP@@3QEBDEB
?T_GID_DESKTOP@@3QEBDEB
?T_NO_SMHELP@@3QEBDEB
?T_START_MENU_LOGOFF@@3QEBDEB
?T_GID_SYSTEM_SETUP@@3QEBDEB
?TF_AFTER_USER_EXITS_SYSTEM@@3QEBDEB
?T_GID_SECURITY@@3QEBDEB

kernel32

OutputDebugStringA
GetModuleFileNameW
GetModuleHandleExW
LoadLibraryW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
EncodePointer
GetSystemDirectoryW
GetModuleHandleW
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomA
GlobalFindAtomA
GlobalGetAtomNameA
CompareStringA
SuspendThread
ReleaseSemaphore
WaitForMultipleObjects
CreateSemaphoreA
FlushFileBuffers
GetFileSize
LockFile
GlobalAlloc
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
GetVolumeInformationA
DuplicateHandle
LoadLibraryExA
MoveFileA
GetThreadLocale
GetStringTypeExA
GetCurrentThread
GetPrivateProfileIntA
GetPrivateProfileStringA
GetTickCount64
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
GetAtomNameA
FileTimeToSystemTime
SystemTimeToFileTime
GlobalFlags
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
VirtualProtect
GetOEMCP
FileTimeToLocalFileTime
GetFileAttributesExA
GetFileSizeEx
GetFileTime
LocalFileTimeToFileTime
SetFileAttributesA
SetFileTime
SystemTimeToTzSpecificLocalTime
SetErrorMode
GetACP
lstrcpyA
LocalLock
LocalUnlock
VerifyVersionInfoA
FindResourceExW
SearchPathA
GetProfileIntA
GetDiskFreeSpaceA
ReplaceFileA
GetUserDefaultLCID
GetTickCount
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
MulDiv
lstrcmpA
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
SetLastError
WritePrivateProfileStringA
DeleteFileA
GetFullPathNameA
GetCurrentProcessId
VerifyVersionInfoW
VerSetConditionMask
HeapSize
HeapReAlloc
HeapDestroy
DecodePointer
GetSystemTime
CreateJobObjectA
SetInformationJobObject
AssignProcessToJobObject
CreateProcessA
TerminateThread
CopyFileW
GetShortPathNameA
CreateDirectoryW
ExpandEnvironmentStringsW
GetTempFileNameA
GetTempPathA
ResetEvent
InitializeCriticalSection
DeviceIoControl
GetFileAttributesA
CreateFileA
ResumeThread
WinExec
GlobalFree
Sleep
WTSGetActiveConsoleSessionId
LocalFree
LocalAlloc
GetModuleFileNameA
GetWindowsDirectoryA
SetPriorityClass
SetThreadPriority
GetCurrentThreadId
CreateThread
CreateEventA
CreateMutexA
ReleaseMutex
SetEvent
GetProcessHeap
HeapFree
HeapAlloc
FindNextFileA
FindFirstFileA
FindClose
GetCurrentDirectoryA
GetCommandLineA
GetModuleHandleA
GetCurrentProcess
Module32Next
Module32First
Process32Next
Process32First
CreateToolhelp32Snapshot
TerminateProcess
LoadLibraryA
GetProcAddress
FreeLibrary
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
OpenProcess
CloseHandle
GetCPInfo
WideCharToMultiByte
MultiByteToWideChar
FindResourceA
lstrlenA
lstrcmpiA
FindResourceW
SizeofResource
LockResource
LoadResource
GetVersionExA
GetVersion
CopyFileA
IsDebuggerPresent
FormatMessageA
GlobalLock
GlobalUnlock
SleepConditionVariableSRW
GlobalSize
OutputDebugStringW
RaiseException
InitializeCriticalSectionEx
GetLocaleInfoEx
LCMapStringEx
GetStringTypeW
CompareStringEx
GetStdHandle
TryEnterCriticalSection
GetThreadPriority
PulseEvent
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
QueryPerformanceFrequency
GetSystemInfo
GetLocalTime
MoveFileExA
FormatMessageW
CreateFileW
GetFileInformationByHandle
GetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
DeleteFileW
GetDiskFreeSpaceExW
GetFileAttributesW
GetFileAttributesExW
GetFullPathNameW
RemoveDirectoryW
SetFileAttributesW
SetFilePointerEx
GetWindowsDirectoryW
CreateDirectoryExW
CopyFileExW
MoveFileExW
AreFileApisANSI
RtlUnwindEx
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
GetDriveTypeW
GetFileType
PeekNamedPipe
ExitProcess
ExitThread
FreeLibraryAndExitThread
SetEnvironmentVariableW
VirtualAlloc
VirtualQuery
GetCommandLineW
SetStdHandle
HeapQueryInformation
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
GetTempPathW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetExitCodeProcess
CreateProcessW
GetTimeZoneInformation
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetConsoleCtrlHandler
WriteConsoleW
ReleaseSRWLockShared
AcquireSRWLockShared
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
ReadFile

user32

GetUpdateRect
MonitorFromRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SendNotifyMessageA
InSendMessage
WindowFromDC
SubtractRect
GetWindowRgn
GetTabbedTextExtentW
LoadMenuW
GetTopWindow
GetClassNameA
GetClassLongPtrA
GetClassLongA
SetWindowLongPtrA
GetWindowLongPtrA
SetWindowLongA
PtInRect
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
SetActiveWindow
UpdateWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetDlgCtrlID
GetDlgItem
IsIconic
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
GetClassInfoExA
GetClassInfoA
CallWindowProcA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
DestroyMenu
MapVirtualKeyA
GetKeyNameTextA
IsWindow
IntersectRect
ScreenToClient
EndPaint
BeginPaint
GetWindowDC
GetMenuStringA
EnumWindows
EnumDisplaySettingsA
OpenDesktopA
MessageBeep
ExitWindowsEx
UnregisterClassA
BlockInput
GetClipCursor
PostThreadMessageA
PeekMessageA
IsDialogMessageA
CallNextHookEx
EnumChildWindows
SwitchDesktop
FindWindowA
SetCapture
SetWinEventHook
SystemParametersInfoW
LoadIconW
UnhookWindowsHookEx
SetWindowsHookExA
MessageBoxA
UnregisterDeviceNotification
RegisterDeviceNotificationA
RegisterHotKey
GetThreadDesktop
CreateDesktopA
GetWindowThreadProcessId
GetShellWindow
GetDoubleClickTime
SetForegroundWindow
GetForegroundWindow
mouse_event
keybd_event
ShowWindow
GetUserObjectInformationA
CloseDesktop
OpenInputDesktop
LoadCursorA
SetParent
SetClassLongPtrA
GetWindowTextA
RedrawWindow
KillTimer
SetTimer
SetFocus
SetWindowPos
MoveWindow
CreateWindowExA
RegisterClassA
PostQuitMessage
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
SetThreadDesktop
GetIconInfo
CreateIconIndirect
LoadImageA
DestroyCursor
GetParent
GetWindowLongA
OffsetRect
InflateRect
FrameRect
DrawFocusRect
WindowFromPoint
ClientToScreen
SetCursor
GetWindowRect
GetClientRect
InvalidateRect
DrawStateA
GetActiveWindow
GetNextDlgTabItem
IsMenu
PostMessageA
SendMessageA
SystemParametersInfoA
DrawIconEx
IsZoomed
GetTabbedTextExtentA
IsClipboardFormatAvailable
GetDialogBaseUnits
LoadImageW
TrackMouseEvent
UnionRect
IsRectEmpty
DestroyIcon
LoadBitmapW
GetDesktopWindow
CopyRect
SetRect
FillRect
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
GetMenuItemInfoA
DeleteMenu
RemoveMenu
ModifyMenuA
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
CreatePopupMenu
CreateMenu
GetMenuState
GetSystemMetrics
EnableWindow
DrawEdge
GetSystemMenu
MapDialogRect
GetAsyncKeyState
MapVirtualKeyExA
IsCharLowerA
GetComboBoxInfo
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
CopyImage
RealChildWindowFromPoint
RegisterClipboardFormatA
WaitMessage
ShowOwnedPopups
EndDialog
CreateDialogIndirectParamA
GetKeyboardLayout
CharUpperBuffA
DrawIcon
CopyIcon
SetCursorPos
DrawFrameControl
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
InvertRect
HideCaret
GetNextDlgGroupItem
LockWindowUpdate
GetDCEx
ReuseDDElParam
UnpackDDElParam
GetMenuBarInfo
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
ReleaseCapture
EnumDisplayMonitors
SetLayeredWindowAttributes
MonitorFromPoint
EnableScrollBar
UpdateLayeredWindow
SetMenuDefaultItem
GetMenuDefaultItem
NotifyWinEvent
LoadCursorW
ClipCursor
SetWindowRgn
BringWindowToTop
CharUpperA
MsgWaitForMultipleObjectsEx
SetRectEmpty
GetCursorPos
SetWindowTextA
ScrollWindowEx
IsWindowEnabled
SendDlgItemMessageA
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
GetWindow
UnhookWinEvent
GetLastActivePopup

gdi32

SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
StartDocA
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
SetTextCharacterExtra
MoveToEx
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
SetTextAlign
SetStretchBltMode
SetROP2
SetPolyFillMode
GetLayout
ExtCreatePen
CreateRectRgnIndirect
GetMapMode
SetRectRgn
SetLayout
SetMapMode
SetGraphicsMode
SetMapperFlags
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
PlayMetaFile
OffsetClipRgn
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetObjectType
GetCurrentPositionEx
GetClipRgn
ExcludeClipRect
CreateRectRgn
CreatePatternBrush
CreateDIBPatternBrushPt
CreateDCA
CopyMetaFileA
GetClipBox
DPtoLP
GetBkColor
CreateFontA
GetCharWidthA
StretchDIBits
GetTextMetricsA
CreateRoundRectRgn
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
EnumFontFamiliesExA
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetDIBits
StretchBlt
SetDIBColorTable
CreateEllipticRgn
GetTextColor
CreatePolygonRgn
Polygon
Polyline
LPtoDP
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetRgnBox
OffsetRgn
GetCurrentObject
ExtFloodFill
SetPaletteEntries
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
SetPixelV
GetROP2
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPointA
GetTextFaceA
SetTextColor
SetBkColor
GetStockObject
CreateBitmap
ExtTextOutA
TextOutA
GetObjectA
CreateDIBSection
SetPixel
SelectObject
Rectangle
RectVisible
PtVisible
PatBlt
GetTextExtentPoint32W
GetTextExtentPoint32A
GetPixel
GetDeviceCaps
GetBkMode
Escape
Ellipse
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
SetDIBitsToDevice
CreateHatchBrush
CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt

msimg32

AlphaBlend
TransparentBlt

winspool.drv

GetJobA
ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

CryptReleaseContext
CryptAcquireContextW
RegQueryValueExW
RegEnumKeyExW
RegCreateKeyExA
RegOpenCurrentUser
StartServiceA
QueryServiceStatus
OpenServiceA
OpenSCManagerA
DeleteService
CreateServiceA
ControlService
CloseServiceHandle
ConvertSidToStringSidA
RegSetValueExW
RegSetValueExA
RegOpenKeyExW
RegEnumValueA
RegDeleteValueA
GetUserNameA
LookupPrivilegeValueA
LookupAccountSidA
GetTokenInformation
DuplicateTokenEx
AdjustTokenPrivileges
OpenProcessToken
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
CryptGenRandom
CryptAcquireContextA
CryptDeriveKey
CryptDestroyKey
CryptGetHashParam
CryptEncrypt
CryptDecrypt
CryptCreateHash
CryptHashData
CryptDestroyHash
RegSetValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegEnumKeyExA
SetFileSecurityA
GetFileSecurityA

shell32

ShellExecuteExA
ShellExecuteA
SHBrowseForFolderA
SHAppBarMessage
SHGetDesktopFolder
ExtractIconA
SHAddToRecentDocs
DragFinish
DragQueryFileA
SHGetFileInfoA
SHGetFolderPathW
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc

comctl32

ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_Draw
ImageList_AddMasked
ImageList_GetIcon
ImageList_GetIconSize
_TrackMouseEvent

shlwapi

StrStrIA
PathMatchSpecA
PathRemoveFileSpecA
PathIsUNCA
PathStripToRootA
PathFindExtensionA
PathFindFileNameA
PathRemoveExtensionA
StrFormatKBSizeA
PathRemoveFileSpecW

uxtheme

GetCurrentThemeName
GetThemeColor
DrawThemeText
DrawThemeParentBackground
GetWindowTheme
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
DrawThemeBackground
CloseThemeData
OpenThemeData
IsAppThemed
GetThemeSysColor

ole32

CoGetClassObject
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoCreateGuid
StringFromCLSID
CoTaskMemAlloc
CoTaskMemFree
ReadClassStg
WriteClassStg
CoTreatAsClass
CreateBindCtx
WriteFmtUserTypeStg
ReadFmtUserTypeStg
OleDuplicateData
ReleaseStgMedium
OleRegGetUserType
SetConvertStg
CoInitialize
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
StringFromGUID2
CoDisconnectObject
CLSIDFromProgID
OleQueryCreateFromData
OleQueryLinkFromData
CoGetMalloc
OleIsRunning
GetRunningObjectTable
CreateOleAdviseHolder
CreateDataAdviseHolder
OleGetIconOfClass
OleSetContainedObject
OleSaveToStream
OleSave
OleLoad
OleCreateFromFile
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleCreate
CreateItemMoniker
CreateGenericComposite
GetHGlobalFromILockBytes
WriteClassStm
StgCreateDocfileOnILockBytes
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleRegEnumVerbs
OleRegGetMiscStatus
CreateFileMoniker
CreateILockBytesOnHGlobal
StgIsStorageFile
StgOpenStorageOnILockBytes
StgOpenStorage
StgCreateDocfile
OleLockRunning
OleSetMenuDescriptor
PropVariantCopy
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleRun
CLSIDFromString

oleaut32

SafeArrayRedim
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetUBound
SysReAllocStringLen
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
SysStringLen
VariantCopy
VariantChangeType
VariantClear
SafeArrayDestroy
SafeArrayAllocDescriptor
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VarDateFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
VarDecFromStr
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SafeArrayCreate
VariantInit
GetErrorInfo
SetErrorInfo
CreateErrorInfo
SafeArrayAllocData
SafeArrayGetLBound
SysFreeString
SystemTimeToVariantTime
SysAllocString

ws2_32

setsockopt
shutdown
gethostname
getsockopt
ntohl
__WSAFDIsSet
ioctlsocket
WSAStringToAddressA
WSAAddressToStringA
WSAAsyncSelect
WSASetLastError
WSACleanup
WSAStartup
gethostbyname
socket
sendto
send
select
recvfrom
recv
inet_ntoa
htonl
getsockname
getpeername
connect
closesocket
bind
accept
WSAGetLastError
listen
inet_addr
htons
ntohs
WSASocketA
WSAIoctl

oledlg

ord8

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipCreateBitmapFromFile
GdipGetImageGraphicsContext

winmm

PlaySoundA
timeGetTime
mmioDescend
waveInReset
waveInStop
waveInStart
waveInAddBuffer
waveInUnprepareHeader
waveInPrepareHeader
waveInClose
waveInOpen
waveInGetDevCapsA
waveInGetNumDevs
waveOutReset
waveOutRestart
waveOutPause
waveOutWrite
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutClose
waveOutOpen
waveOutSetVolume
waveOutGetVolume
waveOutGetDevCapsA
waveOutGetNumDevs
waveInGetErrorTextA
waveOutGetErrorTextA
mmioRead
mmioClose
mmioOpenA
mmioAscend

setupapi

SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceRegistryPropertyA

iphlpapi

GetExtendedUdpTable
GetAdaptersInfo

psapi

GetModuleFileNameExA

crashrpt1403

ord12
ord8
ord9
ord24
ord11

wtsapi32

WTSQueryUserToken

openvr_api

VR_IsInterfaceVersionValid
VR_InitInternal2
VR_ShutdownInternal
VR_GetInitToken
VR_GetGenericInterface

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

Sections

.text
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 658KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 269KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CLIENT/Client2AutoUpdate.exe
.exe windows:6 windows x64 arch:x64

Password: 8765к4увапро

9e3d312b524907a7240c5140667a9b7b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Sources\VCPP\cz_2022\Release\x64\Client2AutoUpdate.pdb

Imports

kernel32

GetFileType
SetStdHandle
QueryPerformanceFrequency
GetCommandLineW
FreeLibraryAndExitThread
ExitThread
CreateThread
HeapQueryInformation
VirtualQuery
ExitProcess
GetSystemInfo
GetFullPathNameW
GetDriveTypeW
InterlockedFlushSList
InterlockedPushEntrySList
RtlPcToFileHeader
RtlUnwindEx
RaiseException
OutputDebugStringW
GetStdHandle
GetTempPathW
FlsAlloc
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
SetFilePointerEx
GetTimeZoneInformation
GetStringTypeW
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleCtrlHandler
CreateFileW
WriteConsoleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
FlsGetValue
RtlCaptureContext
LocalUnlock
LocalLock
GetTickCount
GetUserDefaultLCID
ReplaceFileA
GetTempFileNameA
GetDiskFreeSpaceA
SearchPathA
GetProfileIntA
GetTickCount64
GetTempPathA
VerifyVersionInfoA
VerSetConditionMask
GetWindowsDirectoryA
FindResourceExW
lstrcpyA
GetACP
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCPInfo
GetOEMCP
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
SetErrorMode
SystemTimeToTzSpecificLocalTime
SetFileTime
SetFileAttributesA
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
GetVersionExA
GetCurrentThread
GlobalFindAtomA
FindResourceA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetSystemDirectoryW
EncodePointer
ResumeThread
SuspendThread
SetThreadPriority
GetCurrentThreadId
CreateEventA
WaitForSingleObject
SetEvent
GetStringTypeExA
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryExA
GetCurrentProcess
DuplicateHandle
CloseHandle
GetVolumeInformationA
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFileSize
FlushFileBuffers
CreateFileA
GlobalAddAtomA
GlobalFlags
FreeLibrary
GetModuleFileNameA
GetCurrentProcessId
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
CompareStringA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetThreadLocale
SystemTimeToFileTime
FileTimeToSystemTime
GetAtomNameA
GlobalGetAtomNameA
lstrcmpA
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
LoadLibraryW
GetModuleHandleExW
GetModuleFileNameW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
DecodePointer
OutputDebugStringA
SetLastError
GetLastError
FormatMessageA
MulDiv
LocalFree
GlobalLock
GlobalUnlock
GlobalSize
MultiByteToWideChar
GlobalAlloc
InitializeCriticalSectionAndSpinCount
GlobalFree
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
WinExec
CopyFileA
Sleep
DeleteFileA
FindClose
FindFirstFileA
SetCurrentDirectoryA
GetFullPathNameA
GetCommandLineA
VirtualAlloc
RtlUnwind

user32

LoadCursorW
InvertRect
HideCaret
EnableScrollBar
MessageBeep
GetIconInfo
DrawIconEx
LoadImageA
IsRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
GetDialogBaseUnits
LoadImageW
TrackMouseEvent
InvalidateRect
KillTimer
SetTimer
DeleteMenu
SetCursor
ShowOwnedPopups
MapDialogRect
GetAsyncKeyState
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
OffsetRect
SetRectEmpty
CopyImage
SystemParametersInfoA
GetMenuItemInfoA
DestroyMenu
IntersectRect
InflateRect
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
GetTopWindow
GetClassLongPtrA
GetClassLongA
SetWindowLongPtrA
GetWindowLongPtrA
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetClientRect
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsMenu
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyA
DefFrameProcA
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
PostMessageA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
FillRect
ScreenToClient
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
CallNextHookEx
SetWindowsHookExA
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
CharUpperA
DestroyIcon
RealChildWindowFromPoint
GetClassNameA
GetDesktopWindow
GetKeyNameTextA
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateA
SetClassLongPtrA
SetWindowRgn
SetParent
DrawEdge
DrawFrameControl
IsZoomed
LoadMenuW
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
NotifyWinEvent
GetMenuItemCount
InsertMenuA
AppendMenuA
RemoveMenu
UnregisterClassA
GetWindowTextA
GetWindowTextLengthA
UnhookWindowsHookEx
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
LoadCursorA
SendMessageA
EnableWindow
IsWindowEnabled
MessageBoxA
GetWindowLongA
GetParent
GetWindowThreadProcessId
GetLastActivePopup
SetFocus
SetScrollPos
GetScrollPos
GetWindow
IsWindow
ShowWindow
MoveWindow
SetWindowPos
GetDlgItem
SetDlgItemInt
GetDlgItemInt
SetDlgItemTextA
DrawMenuBar
GetDlgItemTextA
CheckDlgButton
CheckRadioButton
IsDlgButtonChecked
SendDlgItemMessageA
GetDlgCtrlID
GetFocus
ScrollWindowEx
SetWindowTextA
SetWindowLongA
IsDialogMessageA
GetWindowRect
ClientToScreen
PtInRect
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
SendNotifyMessageA
MonitorFromRect
InSendMessage
CreateMenu
WindowFromDC
GetWindowRgn
DestroyCursor
GetDCEx
GetTabbedTextExtentA
GetTabbedTextExtentW
EnumChildWindows
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffA
RegisterClipboardFormatA
ModifyMenuA
GetDoubleClickTime
SetMenuDefaultItem
LockWindowUpdate
SetRect
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
WaitMessage
PostThreadMessageA
GetComboBoxInfo
ReuseDDElParam
UnpackDDElParam
GetMenuBarInfo
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
UnionRect
UpdateLayeredWindow
MonitorFromPoint

gdi32

SetBkColor
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextColor
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
StartDocA
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
GetObjectA
MoveToEx
TextOutA
ExtTextOutA
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectA
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetTextExtentPoint32A
GetTextMetricsA
EnumFontFamiliesExA
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
SelectPalette
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetDIBits
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
GetCurrentObject
CreateFontA
GetCharWidthA
StretchDIBits
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPointA
GetTextExtentPoint32W
GetTextFaceA
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
PlayMetaFile
OffsetClipRgn
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetCurrentPositionEx
GetClipRgn
GetClipBox
Escape
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateDIBPatternBrushPt
CreateCompatibleDC
CreateBitmap
BitBlt
DeleteObject
DeleteDC
GetDeviceCaps
CreateDCA
GetSystemPaletteEntries
ExcludeClipRect
CopyMetaFileA

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterA
DocumentPropertiesA
GetJobA
ClosePrinter

advapi32

GetFileSecurityA
SetFileSecurityA
RegEnumValueA
RegOpenKeyExW
RegEnumKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueA
RegCloseKey
CryptDecrypt
CryptDestroyKey
CryptEncrypt
CryptDeriveKey
CryptGenRandom
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptReleaseContext
CryptAcquireContextA
StartServiceA
CreateServiceA
RegSetValueExA
DeleteService
QueryServiceStatus
ControlService
RegDeleteValueA
CloseServiceHandle
OpenServiceA
OpenSCManagerA
RegQueryValueExA
RegOpenKeyExA

shell32

ExtractIconA
SHGetFileInfoA
SHAddToRecentDocs
ShellExecuteA
SHGetPathFromIDListA
ShellExecuteExA
SHAppBarMessage
SHBrowseForFolderA
SHGetMalloc
DragFinish
DragQueryFileA
SHGetDesktopFolder
SHGetSpecialFolderLocation

shlwapi

PathRemoveExtensionA
PathIsUNCA
PathStripToRootA
StrFormatKBSizeA
PathFindExtensionA
PathRemoveFileSpecW
PathFindFileNameA

uxtheme

IsThemeBackgroundPartiallyTransparent
GetThemePartSize
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetWindowTheme
IsAppThemed
GetThemeSysColor

ole32

IsAccelerator
OleRegGetMiscStatus
OleRegEnumVerbs
StgCreateDocfileOnILockBytes
WriteClassStm
GetHGlobalFromILockBytes
CreateGenericComposite
CreateItemMoniker
OleTranslateAccelerator
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
OleLoad
OleSave
CreateStreamOnHGlobal
OleCreate
OleCreateMenuDescriptor
CreateFileMoniker
CreateILockBytesOnHGlobal
StgIsStorageFile
StgOpenStorageOnILockBytes
StgOpenStorage
StgCreateDocfile
OleLockRunning
OleSaveToStream
OleSetContainedObject
OleGetIconOfClass
OleRun
OleSetMenuDescriptor
PropVariantCopy
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoInitializeEx
CoInitialize
CoCreateGuid
CoUninitialize
CoDisconnectObject
StringFromGUID2
CLSIDFromString
CoCreateInstance
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CreateDataAdviseHolder
CreateOleAdviseHolder
GetRunningObjectTable
OleIsRunning
CoGetMalloc
OleQueryLinkFromData
OleQueryCreateFromData
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoGetClassObject
CoRegisterClassObject
CoRevokeClassObject
CoRegisterMessageFilter
CLSIDFromProgID
OleDestroyMenuDescriptor

oleaut32

RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
VarDecFromStr
VarBstrFromDec
VarBstrFromDate
VarBstrFromCy
VarCyFromStr
VarDateFromStr
VariantChangeType
VariantCopy
VariantClear
SafeArrayPtrOfIndex
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SysAllocString
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayRedim
SafeArrayDestroy
SafeArrayDestroyData
VariantInit
SafeArrayCreate
SafeArrayAllocData
SafeArrayAllocDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysReAllocStringLen
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
SysFreeString
SafeArrayAccessData
SafeArrayDestroyDescriptor

gdiplus

GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipDrawImageRectI

oleacc

LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundA

oledlg

ord8

Sections

.text
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 920KB - Virtual size: 920KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CLIENT/Client2Service.exe
.exe windows:6 windows x64 arch:x64

Password: 8765к4увапро

d70f05131b507a2598ce5a9f760b3238

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Sources\VCPP\cz_2022\ReleaseDemo\x64\Client2Service.pdb

Imports

kernel32

ProcessIdToSessionId
OpenProcess
GetModuleFileNameA
VerifyVersionInfoW
CreateProcessA
CreateToolhelp32Snapshot
Process32First
Process32Next
SetEndOfFile
CreateThread
Sleep
CreateEventA
CreateMutexA
WaitForSingleObject
ReleaseMutex
SetEvent
GetLastError
CloseHandle
GetCommandLineA
WTSGetActiveConsoleSessionId
VerSetConditionMask
WriteConsoleW
HeapSize
CreateFileW
GetProcessHeap
SetStdHandle
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
LocalFree
GetLocaleInfoEx
EncodePointer
DecodePointer
MultiByteToWideChar
WideCharToMultiByte
LCMapStringEx
GetStringTypeW
CompareStringEx
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineW
GetCurrentThread
HeapFree
HeapAlloc
GetTempPathW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
SetConsoleCtrlHandler
GetTimeZoneInformation
OutputDebugStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
RtlUnwind

advapi32

RegisterServiceCtrlHandlerA
CreateProcessAsUserA
AdjustTokenPrivileges
StartServiceCtrlDispatcherA
SetServiceStatus
OpenProcessToken
LookupPrivilegeValueA
DuplicateTokenEx

crashrpt1403

ord9
ord8

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

shlwapi

PathFileExistsA

Sections

.text
Size: 696KB - Virtual size: 695KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CLIENT/CrashRpt1403.dll
.dll windows:6 windows x64 arch:x64

Password: 8765к4увапро

9ba6c1e2fbd0aa8871d7c42ffbe04a12

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Sources\VCPP\CrashRpt143\bin\x64\CrashRpt1403.pdb

Imports

rpcrt4

UuidToStringA
RpcStringFreeA

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

shell32

SHFileOperationW
SHGetSpecialFolderPathW

gdi32

SetLayout

kernel32

WriteFile
FlushFileBuffers
SetStdHandle
GetConsoleOutputCP
GetConsoleMode
GetTimeZoneInformation
RtlCaptureContext
CreateFileW
GetFileAttributesW
DebugBreak
OutputDebugStringW
CloseHandle
SetUnhandledExceptionFilter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
WaitForSingleObject
CreateEventW
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateThread
GetCurrentThreadId
CreateProcessW
FreeLibrary
GetProcAddress
LoadLibraryW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
GetLastError
InitializeCriticalSectionAndSpinCount
GetSystemInfo
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
CreateDirectoryW
GetFileAttributesExW
GetTempFileNameW
GetTempPathW
GetModuleFileNameW
GetModuleHandleW
GlobalAlloc
GlobalFree
FormatMessageW
GetPrivateProfileStringW
WritePrivateProfileStringW
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
HeapSize
SetFilePointerEx
GetFileSizeEx
GetStringTypeW
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
HeapReAlloc
RaiseException
WriteConsoleW
FindNextFileW
FindFirstFileExW
IsDebuggerPresent
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
RtlUnwindEx
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RtlUnwind
SetConsoleCtrlHandler
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
FindClose

user32

GetWindowLongW
MapWindowPoints
GetWindowRect
GetClientRect
SetWindowLongW
MoveWindow
MessageBoxW
GetWindow
CharNextW
LoadStringW
GetDC
GetActiveWindow

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

ole32

CoCreateGuid

Exports

Exports

crAddFile2A
crAddFile2W
crAddPropertyA
crAddPropertyW
crAddRegKeyA
crAddRegKeyW
crAddScreenshot
crAddScreenshot2
crAddVideo
crEmulateCrash
crExceptionFilter
crGenerateErrorReport
crGetLastErrorMsgA
crGetLastErrorMsgW
crInstallA
crInstallToCurrentThread2
crInstallW
crSetCrashCallbackA
crSetCrashCallbackW
crUninstall
crUninstallFromCurrentThread

Sections

.text
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CLIENT/CrashSender1403.exe
.exe windows:6 windows x64 arch:x64

Password: 8765к4увапро

3219e37c631ec4cdb43db39c410ad405

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Sources\VCPP\CrashRpt143\bin\x64\CrashSender1403.pdb

Imports

psapi

GetProcessMemoryInfo

ws2_32

htonl
connect
closesocket
inet_ntoa
htons
inet_addr
ntohs
WSAGetLastError
WSASetLastError
WSACleanup
WSAStartup
getservbyname
getservbyport
gethostbyname
gethostbyaddr
socket
send
recv

dnsapi

DnsFree
DnsQuery_W

wininet

InternetCloseHandle
InternetConnectW
InternetReadFile
InternetWriteFile
InternetQueryOptionW
InternetSetOptionW
HttpOpenRequestW
HttpQueryInfoW
HttpEndRequestW
HttpSendRequestExW
InternetOpenW

rpcrt4

UuidToStringA
RpcStringFreeA

gdi32

CreateDCW
SetViewportOrgEx
TextOutW
CreateHalftonePalette
GetDIBColorTable
CreateDIBSection
SetStretchBltMode
StretchBlt
SetDIBits
SelectPalette
SelectClipRgn
GetDIBits
CreateRectRgn
SetLayout
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
CreatePen
DeleteDC
DeleteObject
GetStockObject
SelectObject
SetBkMode
SetTextColor
GetObjectW
RealizePalette
CreateSolidBrush
SetBkColor
BitBlt
CreateFontW
CreatePalette
Polygon

shell32

CommandLineToArgvW
SHFileOperationW
ExtractIconW
ShellExecuteW
SHGetSpecialFolderPathW
SHGetFileInfoW
Shell_NotifyIconW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetCurrentThread
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapSize
GetTimeFormatW
GetModuleHandleExW
ExitProcess
PeekNamedPipe
GetFileType
GetDriveTypeW
TlsFree
TlsSetValue
TlsGetValue
HeapReAlloc
SetCurrentDirectoryW
GetStdHandle
TlsAlloc
RtlUnwind
InterlockedFlushSList
RtlUnwindEx
CloseHandle
GetSystemInfo
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
lstrlenW
CreateDirectoryW
GetFileAttributesW
GetFileAttributesExW
GetTempFileNameW
GetTempPathW
DebugBreak
OutputDebugStringW
GetLastError
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
SetConsoleCtrlHandler
SetStdHandle
GlobalFree
FormatMessageW
lstrlenA
GetPrivateProfileStringW
WritePrivateProfileStringW
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
CreateEventW
WideCharToMultiByte
CreateFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileSizeEx
GetFullPathNameW
SetLastError
GetProcessTimes
OpenProcess
GetSystemTime
ReadProcessMemory
CopyFileW
FileTimeToSystemTime
GetCommandLineW
DecodePointer
RaiseException
GetCurrentThreadId
LoadLibraryExW
LoadResource
SizeofResource
FindResourceW
MulDiv
lstrcmpW
lstrcmpiW
CompareStringW
GetVersionExW
GetFileInformationByHandle
ReadFile
WriteFile
CreateMutexW
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateThread
CreateProcessW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
InitializeCriticalSection
Sleep
GlobalUnlock
GlobalLock
GetSystemDirectoryA
LoadLibraryA
GetTimeZoneInformation
FindFirstFileExW
RtlPcToFileHeader
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
GetProcessHeap
HeapFree
HeapAlloc
EncodePointer
IsDebuggerPresent
IsValidCodePage
GetCurrentDirectoryW
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
SetFilePointerEx
GlobalAlloc
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
FlushFileBuffers
SetEndOfFile
LoadLibraryW
WriteConsoleW

user32

EndDialog
GetActiveWindow
LoadMenuW
DestroyMenu
EnableMenuItem
GetSubMenu
DeleteMenu
TrackPopupMenu
SetMenuItemInfoW
SetWindowTextW
CheckMenuRadioItem
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoW
PostQuitMessage
FlashWindow
DialogBoxParamW
EnableWindow
GetMenu
DrawIcon
DrawTextExW
AdjustWindowRectEx
MessageBoxW
CopyRect
LoadIconW
GetIconInfo
IsDialogMessageW
PostMessageW
SetProcessDefaultLayout
CharUpperW
SetTimer
KillTimer
DrawTextExA
SetScrollInfo
GetScrollInfo
AnimateWindow
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
GetSystemMetrics
IntersectRect
EnumWindows
GetWindowThreadProcessId
EnumDisplayMonitors
GetCursorInfo
SystemParametersInfoW
LoadImageW
DrawFocusRect
GetSysColorBrush
GetSysColor
ScreenToClient
GetCursorPos
SetCursor
GetWindowTextLengthW
GetWindowTextW
RedrawWindow
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
DestroyIcon
LoadCursorW
GetClassNameW
GetParent
GetDesktopWindow
SetWindowLongPtrW
GetWindowLongPtrW
PtInRect
UpdateWindow
DrawTextW
IsWindowEnabled
ReleaseCapture
SetCapture
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
CreateDialogParamW
IsWindowVisible
SetWindowPos
DestroyWindow
IsWindow
CreateWindowExW
UnregisterClassW
CallWindowProcW
DefWindowProcW
SendMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
GetGuiResources
GetWindow
SetWindowLongW
GetWindowLongW
MapWindowPoints
GetWindowRect
GetClientRect
GetDC
CharNextW
MoveWindow
LoadStringW
OffsetRect
FillRect
SetRectEmpty
ShowWindow

advapi32

RegCloseKey
RegEnumValueW
AdjustTokenPrivileges
OpenProcessToken
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
LookupPrivilegeValueW

ole32

CoTaskMemFree
CoCreateGuid
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize

oleaut32

VarUI4FromStr
VarDecFromStr
VarDecCmp
SysFreeString
VarDateFromStr
VarR8FromStr
VarI4FromStr

comctl32

_TrackMouseEvent
ImageList_Create
ImageList_ReplaceIcon
ImageList_Remove
InitCommonControlsEx

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CLIENT/SOUND/01.wav
CLIENT/SOUND/02.wav
CLIENT/SOUND/03.wav
CLIENT/SOUND/04.wav
CLIENT/SOUND/less5.wav
CLIENT/SOUND/timeout.wav
CLIENT/SetupClient2.exe
.exe windows:6 windows x64 arch:x64

Password: 8765к4увапро

c9cf965d84a4f1576d60c45be1bea013

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Sources\VCPP\cz_2022\ReleaseDemo\x64\SetupClient2.pdb

Imports

language

?ERR_MANDATORY_USER_PROFILE@@3QEBDEB
?ERROR_V@@3QEBDEB
?RW_NoSetFolders@@3QEBDEB
?RW_IeDisablePasswordCaching@@3QEBDEB
?RW_IeMyPics_Hoverbar@@3QEBDEB
?WARNING_V@@3QEBDEB
?DOSTUP_ZAPRESHEN@@3QEBDEB
?MSG_SETTINGS_ERR@@3QEBDEB
?CLIENT2_SETUP_FIRST_ENTER_PASS@@3QEBDEB
?SETUPCLIENT2_NAPOMINANIYA_DEFAULT_DOKONCA@@3QEBDEB
?RW_IeNoBrowserContextMenu@@3QEBDEB
?RW_IeNoTheaterMode@@3QEBDEB
?RW_IeNoBrowserClose@@3QEBDEB
?RW_IeNoBrowserSaveWebComplete@@3QEBDEB
?RW_IeNoBrowserSaveAs@@3QEBDEB
?RW_IeNoFileOpen@@3QEBDEB
?RW_IeNoFileNew@@3QEBDEB
?RW_IeNoFileMenu@@3QEBDEB
?RW_RestrictAnonymous@@3QEBDEB
?RW_NtfsDisableLastAccessUpdate@@3QEBDEB
?RW_ClearPageFileAtShutdown@@3QEBDEB
?RW_ShowPopups@@3QEBDEB
?RW_DisablePwdCaching@@3QEBDEB
?RW_DisableCMD@@3QEBDEB
?RW_NoChangeKeyboardNavigationIndicators@@3QEBDEB
?RW_NoChangeAnimation@@3QEBDEB
?RW_NoVirtMemPage@@3QEBDEB
?RW_NoFileSysPage@@3QEBDEB
?RW_NoConfigPage@@3QEBDEB
?RW_NoDevMgrPage@@3QEBDEB
?RW_NoNetSetupSecurityPage@@3QEBDEB
?RW_NoNetSetupIDPage@@3QEBDEB
?RW_NoNetSetup@@3QEBDEB
?RW_NoAdminPage@@3QEBDEB
?RW_NoProfilePage@@3QEBDEB
?RW_NoPwdPage@@3QEBDEB
?RW_NoSecCPL@@3QEBDEB
?RW_SeparateProcessXP@@3QEBDEB
?RW_SeparateProcess@@3QEBDEB
?RW_NoDFSTab@@3QEBDEB
?RW_ClassicShell@@3QEBDEB
?RW_NoActiveDesktop@@3QEBDEB
?RW_PaintDesktopVersion@@3QEBDEB
?RW_NoEntireNetwork@@3QEBDEB
?RW_NoNetHood@@3QEBDEB
?RW_NO_REAL_MODE@@3QEBDEB
?RW_MSDOS_DISABLED@@3QEBDEB
?RW_NO_LOGOFF@@3QEBDEB
?RW_NO_SMHELP@@3QEBDEB
?RW_START_MENU_LOGOFF@@3QEBDEB
?RW_UDALENIE_PUNKTA_DOCUMENTI@@3QEBDEB
?RW_UDALENIE_PUNKTA_IZBRANNOE@@3QEBDEB
?C2SETUP_REGISTRY_WINDOWS@@3QEBDEB
?T_DISABLE_CMD@@3QEBDEB
?T_NO_CHANGE_ANIMATION@@3QEBDEB
?T_GID_APPLET_SCREEN@@3QEBDEB
?T_GID_INTERNET_EXPLORER@@3QEBDEB
?T_GID_ADDREMOVE_PROGRAMS@@3QEBDEB
?T_NO_ACTIVE_DESKTOP@@3QEBDEB
?T_GID_DESKTOP@@3QEBDEB
?T_NO_SMHELP@@3QEBDEB
?T_START_MENU_LOGOFF@@3QEBDEB
?T_GID_SYSTEM_SETUP@@3QEBDEB
?TF_AFTER_USER_EXITS_SYSTEM@@3QEBDEB
?SETUPCLIENT2_NAPOMINANIYA_DEFAULT_OTRABOTANNO@@3QEBDEB
?SETUPCLIENT2_NAPOMINANIYA_DEFAULT_TIMEOUT@@3QEBDEB
?SETUPCLIENT2_NAPOMINANIYA_DEFAULT_FREE@@3QEBDEB
?SETCL2_LOCAL_IP_ADDRESS_ANY@@3QEBDEB
?T_OFF1@@3QEBDEB
?T_OFF2@@3QEBDEB
?CLIENT2_SETUP_WINDOW_TITLE@@3QEBDEB
?CLIENT2_SETUP_GROUP_NETWORK@@3QEBDEB
?CLIENT2_SETUP_GROUP_BLOCKING@@3QEBDEB
?CLIENT2_SETUP_IP_ADRES_SERVERA@@3QEBDEB
?CLIENT2_SETUP_PORT_SERVERA@@3QEBDEB
?CLIENT2_SETUP_GROUP_COMMON@@3QEBDEB
?CLIENT2_SETUP_NOMER_COMPUTERA@@3QEBDEB
?IB_SETUP_BN_ADDRULE@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE_IP@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION_IP@@3QEBDEB
?C2SETUP_AUTORUN@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION_MASK@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE_PORT@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION_PORT@@3QEBDEB
?IB_SETUP_ADDRULE_PROTOCOL@@3QEBDEB
?IB_SETUP_ADDRULE_ACTION@@3QEBDEB
?IB_SETUP_ADDRULE_PROTOCOL_ALL@@3QEBDEB
?IB_SETUP_ADDRULE_PROTOCOL_TCP@@3QEBDEB
?IB_SETUP_ADDRULE_PROTOCOL_UDP@@3QEBDEB
?IB_SETUP_ADDRULE_PROTOCOL_ICMP@@3QEBDEB
?IB_SETUP_ADDRULE_ACTION_FORWARD@@3QEBDEB
?IB_SETUP_ADDRULE_ACTION_DROP@@3QEBDEB
?IB_SETUP_BN_EDITRULE@@3QEBDEB
?DU_RU_ADD@@3QEBDEB
?DU_RU_REMOVE@@3QEBDEB
?IB_SETUP_BN_VVERH@@3QEBDEB
?IB_SETUP_BN_VNIZ@@3QEBDEB
?BI_BLOCKING_IMAGES@@3QEBDEB
?BI_INTERVAL_SMENY_KARTINOK@@3QEBDEB
?T_STRETCH_TO_SCREEN_SIZE@@3QEBDEB
?BI_ADDITIONAL_PARAMS@@3QEBDEB
?LOCK_WINDOW_POSITION@@3QEBDEB
?LOCK_WINDOW_POSITION_CENTER@@3QEBDEB
?LOCK_WINDOW_POSITION_TOP_LEFT@@3QEBDEB
?DARK_THEME@@3QEBDEB
?DOG_ARENDY_TITLE@@3QEBDEB
?DOG_ARENDY_MANUAL@@3QEBDEB
?DOGA_RTF_SELECT@@3QEBDEB
?DOGA_RTF_CANCEL@@3QEBDEB
?KANP_AFTERRESET@@3QEBDEB
?CLIENT_SETTINGS_KANP_EXCEPTIONS@@3QEBDEB
?KANP_SETTINGS_EXCEPTIONS_DESCRIPTION@@3QEBDEB
?KANP_SETTINGS_ADD_PROGRAM@@3QEBDEB
?KANP_SETTINGS_ADD_DIRECTORY@@3QEBDEB
?SETUPCLIENT2_NAPOMINANIYA_LABEL_DOKONCA@@3QEBDEB
?SETUPCLIENT2_NAPOMINANIYA_LABEL_OTRABOTANNO@@3QEBDEB
?SETUPCLIENT2_NAPOMINANIYA_LABEL_TIMEOUT@@3QEBDEB
?SETUPCLIENT2_NAPOMINANIYA_LABEL_FREE@@3QEBDEB
?SETUPCLIENT2_NAPOMINANIYA_TITLE@@3QEBDEB
?STR_USER_HOTKEY@@3QEBDEB
?NOV_ST_DESCR@@3QEBDEB
?OK_V@@3QEBDEB
?WND_PATH_TITLE@@3QEBDEB
?IB_SETUP_BN_REMOVERULE@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE_IP_SHORT@@3QEBDEB
?C2SETUP_OFF@@3QEBDEB
?C2SETUP_RUN_ON_CLOSE@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION_IP_SHORT@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE_MASK_SHORT@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION_MASK_SHORT@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE_PORT_SHORT@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION_PORT_SHORT@@3QEBDEB
?IB_SETUP_ADDRULE_PROTOCOL_SHORT@@3QEBDEB
?IB_SETUP_ADDRULE_ACTION_SHORT@@3QEBDEB
?IB_SETUP_ALL@@3QEBDEB
?C2SETUP_RUN_ON_CLOSE_SERVICE@@3QEBDEB
?T_OFF_COMBO@@3QEBDEB
?SETUPCLIENT2_BUTTON_NAPOMINANIYA@@3QEBDEB
?TT_SETUP_SERVER_NOFC@@3QEBDEB
?SETUPCLINET2_AUTOMATION@@3QEBDEB
?SETCL2_DENY_TASK_MANAGER@@3QEBDEB
?SETCL2_AUTOCONF_DESCRIPTION@@3QEBDEB
?SETCL2_AUTOCONF_FAILED@@3QEBDEB
?T_OFF_DESKTOP@@3QEBDEB
?WINMGMT_DISABLED_WARNING@@3QEBDEB
?SETCL2_LOCAL_IP_ADDRESS@@3QEBDEB
?SETCL2_ALLOW_SEVERAL_COPIES@@3QEBDEB
?SETCL2_AUTOSTART_REGISTRY_HKLM@@3QEBDEB
?SETCL2_AUTOSTART_REGISTRY_HKCU@@3QEBDEB
?SETCL2_AUTOSTART_SERVICE_RECOMMENDED@@3QEBDEB
?BUT_GAMES@@3QEBDEB
?BUT_INET@@3QEBDEB
?STATE_FREE@@3QEBDEB
?T_GID_SECURITY@@3QEBDEB
?T_GID_STARTMENU@@3QEBDEB
?T_UDALENIE_PUNKTA_RECENT_DOCUMENTS@@3QEBDEB
?T_UDALENIE_PUNKTA_IZBRANNOE@@3QEBDEB
?T_GID_NETWORK@@3QEBDEB
?T_GID_EXPLORER@@3QEBDEB
?RW_NoSetTaskBar@@3QEBDEB
?RW_DisableChangePassword@@3QEBDEB
?RW_NoLowDiskSpaceChecks@@3QEBDEB
?RW_DisableRegistryTools@@3QEBDEB
?RW_NoDrives@@3QEBDEB
?RW_NoTrayContextMenu@@3QEBDEB
?RW_NoDispSettingsPage@@3QEBDEB
?RW_NoDispAppearancePage@@3QEBDEB
?RW_NoDispScrSavPage@@3QEBDEB
?RW_NoChangingWallpaper@@3QEBDEB
?RW_NoDispBackgroundPage@@3QEBDEB
?RW_NoDispCPL@@3QEBDEB
?RW_NoFolderOptions@@3QEBDEB
?RW_Advanced@@3QEBDEB
?RW_AdvancedTab@@3QEBDEB
?RW_ProgramsTab@@3QEBDEB
?RW_ConnectionsTab@@3QEBDEB
?RW_ContentTab@@3QEBDEB
?RW_PrivacyTab@@3QEBDEB
?RW_SecurityTab@@3QEBDEB
?RW_GeneralTab@@3QEBDEB
?RW_NoBrowserOptions@@3QEBDEB
?RW_NoSupportInfo@@3QEBDEB
?RW_NoAddFromInternet@@3QEBDEB
?RW_NoAddFromCDorFloppy@@3QEBDEB
?RW_NoWindowsSetupPage@@3QEBDEB
?RW_NoAddPage@@3QEBDEB
?RW_NoRemovePage@@3QEBDEB
?RW_NoAddRemovePrograms@@3QEBDEB
?RW_NoShellSearchButton@@3QEBDEB
?RW_NoFileMenu@@3QEBDEB
?RW_NoViewContextMenu@@3QEBDEB
?RW_NoDesktop@@3QEBDEB
?RW_NoChangeStartMenu@@3QEBDEB
?RW_NO_CLOSE@@3QEBDEB
?RW_NO_RUN@@3QEBDEB
?RW_NO_FIND@@3QEBDEB
?RW_AUTOMATIC_CLEAN_RECENTDOCS@@3QEBDEB
?RW_NO_RECENT_DOCS_HISTORY@@3QEBDEB
?SETCL2_TIP_AUTOSTART_SERVICE_RECOMMENDED@@3QEBDEB
?SETCL2_TIP_AUTOSTART_REGISTRY_HKLM@@3QEBDEB
?SETCL2_TIP_AUTOSTART_REGISTRY_HKCU@@3QEBDEB
?SETCL2_TIP_LOCAL_IP_ADDRESS@@3QEBDEB
?TEXT_CLIENT_UNLOCK_MODE_NONE@@3QEBDEB
?TEXT_CLIENT_UNLOCK_MODE_PASSWORD@@3QEBDEB
?TEXT_CLIENT_UNLOCK_MODE_SPECIAL_CLIENT@@3QEBDEB
?TEXT_CLIENT_UNLOCK_ADMIN_PASSWORD@@3QEBDEB
?CLIENT_SETTINGS_PASSWORD_LABEL@@3QEBDEB
?SETUP_CLIENT_ENABLE_VOICE_CHAT@@3QEBDEB
?SETUP_CLIENT_VOICE_CHAT_PORT@@3QEBDEB
?SETUPCLINET2_CDHACKDLL_DETECT@@3QEBDEB
?BLOCK_RUN_IN_IE@@3QEBDEB
?SETUPCLINET2_AUTOMATION_RESTORE_WALLPAPERS_ON_TIME_RESET@@3QEBDEB
?LOCK_CLIENT_AFTER_N_MINUTES@@3QEBDEB
?LOCK_CLIENT_GE_TWO_MINUTES@@3QEBDEB
?SETUPCL2_IDLE_APP_SELECTION_GROUP@@3QEBDEB
?SETUPCL2_LAUNCH_DELAY@@3QEBDEB
?CLIENT_SETTINGS_BLOCK_VR_HELMET@@3QEBDEB
?CAFE_STEAM_ACCOUNT@@3QEBDEB
?CAFE_STEAM_LOGIN@@3QEBDEB
?CAFE_STEAM_PASSWORD@@3QEBDEB
?CLOSE_STEAM_LOGIN_CLUB_OR_ANONYMOUS@@3QEBDEB
?CLOSE_BROWSERS_DELETE_COOKIES@@3QEBDEB
?CANCEL_V@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE_MASK@@3QEBDEB
?RW_NO_ADD_PRINTER@@3QEBDEB

kernel32

RaiseException
RtlUnwindEx
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
GetDriveTypeW
GetFullPathNameW
GetSystemInfo
VirtualAlloc
VirtualQuery
CreateThread
ExitThread
FreeLibraryAndExitThread
GetCommandLineA
GetCommandLineW
HeapQueryInformation
QueryPerformanceFrequency
SetStdHandle
GetFileType
ExitProcess
GetStdHandle
GetTempPathW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetStringTypeW
GetTimeZoneInformation
GetConsoleOutputCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindFirstFileExW
Sleep
LoadResource
LockResource
SizeofResource
FindResourceW
WinExec
WideCharToMultiByte
OutputDebugStringW
GetSystemTime
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CloseHandle
ReleaseMutex
HeapAlloc
HeapFree
GetProcessHeap
CreateMutexA
LocalAlloc
LocalFree
FormatMessageA
DecodePointer
HeapDestroy
HeapReAlloc
HeapSize
VerSetConditionMask
VerifyVersionInfoW
OutputDebugStringA
EncodePointer
SetLastError
GetCurrentThreadId
GetSystemDirectoryW
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetModuleHandleExW
GetProcAddress
LoadLibraryExW
LoadLibraryW
GlobalDeleteAtom
lstrcmpW
FindResourceA
GlobalAddAtomA
GlobalFindAtomA
GlobalGetAtomNameA
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
MultiByteToWideChar
CompareStringA
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GlobalSize
MulDiv
CopyFileA
GetLastError
CreateFileA
DeleteFileA
FindClose
FindFirstFileA
FlushFileBuffers
GetFileSize
GetFullPathNameA
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
WriteFile
GetVolumeInformationA
DuplicateHandle
GetCurrentProcess
GetModuleFileNameA
GetModuleHandleA
LoadLibraryExA
GetShortPathNameA
lstrcmpiA
MoveFileA
GetThreadLocale
GetStringTypeExA
GetCurrentProcessId
lstrcmpA
VirtualProtect
FileTimeToSystemTime
SystemTimeToFileTime
WaitForSingleObject
ReleaseSemaphore
CreateEventA
WaitForMultipleObjects
CreateSemaphoreA
SetEvent
SetThreadPriority
SuspendThread
ResumeThread
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentThread
GetTickCount64
GlobalFlags
GetACP
lstrcpyA
InitializeCriticalSection
GetAtomNameA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetOEMCP
GetCPInfo
FileTimeToLocalFileTime
GetFileAttributesA
GetFileAttributesExA
GetFileSizeEx
GetFileTime
LocalFileTimeToFileTime
SetFileAttributesA
SetFileTime
SystemTimeToTzSpecificLocalTime
SetErrorMode
GetCurrentDirectoryA
VerifyVersionInfoA
FindResourceExW
GetWindowsDirectoryA
SearchPathA
GetProfileIntA
GetTempPathA
GetDiskFreeSpaceA
GetTempFileNameA
ReplaceFileA
GetUserDefaultLCID
GetTickCount
LocalLock
LocalUnlock
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleCtrlHandler
CreateFileW
WriteConsoleW
GetVersionExA
RtlUnwind

user32

BeginPaint
EndPaint
ValidateRect
ScrollWindow
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropA
GetPropA
RemovePropA
AdjustWindowRectEx
ScreenToClient
MapWindowPoints
CopyRect
EqualRect
SetWindowLongA
GetWindowLongPtrA
SetWindowLongPtrA
GetClassLongA
GetClassLongPtrA
GetClassNameA
GetTopWindow
GetLastActivePopup
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
LoadIconA
SetScrollInfo
GetScrollInfo
WinHelpA
MonitorFromWindow
GetMonitorInfoA
ShowWindow
MoveWindow
SetDlgItemInt
GetDlgItemInt
SetDlgItemTextA
GetDlgItemTextA
CheckDlgButton
CheckRadioButton
IsDlgButtonChecked
IsWindowEnabled
ScrollWindowEx
SetWindowTextA
IsDialogMessageA
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetActiveWindow
GetDesktopWindow
GetMenuStringA
GetMenuState
InsertMenuA
AppendMenuA
RemoveMenu
CharUpperA
DrawTextA
DrawTextExA
GrayStringA
TabbedTextOutA
GetWindowDC
ClientToScreen
FillRect
GetWindowThreadProcessId
DrawStateA
IsZoomed
MessageBeep
SystemParametersInfoA
GetAsyncKeyState
SetCapture
EnableScrollBar
SetCursor
HideCaret
DrawFocusRect
InvertRect
IsRectEmpty
LoadCursorA
LoadCursorW
NotifyWinEvent
DrawEdge
DrawFrameControl
GetSysColorBrush
GetKeyNameTextA
MapVirtualKeyA
MapDialogRect
IntersectRect
MsgWaitForMultipleObjectsEx
UnregisterClassA
TranslateMessage
SetForegroundWindow
PostQuitMessage
RegisterClipboardFormatA
SetWindowContextHelpId
RealChildWindowFromPoint
TrackMouseEvent
DestroyIcon
LoadImageW
DestroyMenu
GetMenuItemInfoA
CopyImage
GetDialogBaseUnits
LoadMenuW
GetSystemMenu
DeleteMenu
CreatePopupMenu
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
UnionRect
MonitorFromPoint
SetLayeredWindowAttributes
EnumDisplayMonitors
BringWindowToTop
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
GetMenuBarInfo
UnpackDDElParam
ReuseDDElParam
SetParent
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
ModifyMenuA
PostThreadMessageA
WaitMessage
GetKeyboardLayout
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
CopyAcceleratorTableA
EnumChildWindows
LockWindowUpdate
SetClassLongPtrA
GetComboBoxInfo
SetCursorPos
SetRect
GetDoubleClickTime
CopyIcon
CharNextA
InvalidateRgn
GetNextDlgGroupItem
FrameRect
CharUpperBuffA
MonitorFromRect
IsClipboardFormatAvailable
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
IsCharLowerA
MapVirtualKeyExA
SubtractRect
GetUpdateRect
SendNotifyMessageA
InSendMessage
DestroyCursor
WindowFromDC
CreateMenu
GetDCEx
GetWindowRgn
GetTabbedTextExtentA
GetTabbedTextExtentW
OffsetRect
InvalidateRect
ReleaseCapture
GetCapture
GetClientRect
GetParent
EnableWindow
SendMessageA
LoadIconW
DrawIcon
GetSystemMetrics
IsIconic
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenuEx
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
GetKeyState
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
IsChild
DestroyWindow
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
PostMessageA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
SetRectEmpty
SendDlgItemMessageA
GetWindow
GetWindowLongA
GetWindowTextLengthA
GetWindowTextA
GetScrollPos
SetScrollPos
SetFocus
GetIconInfo
DrawIconEx
InflateRect
GetSysColor
WindowFromPoint
GetCursorPos
RedrawWindow
SetWindowRgn
ReleaseDC
GetDC
KillTimer
SetTimer
ShowOwnedPopups
IsWindow
LoadImageA
MessageBoxA
GetWindowRect
GetMessageA
PtInRect

gdi32

GetSystemPaletteEntries
LPtoDP
GetCurrentObject
CreateFontA
GetCharWidthA
StretchDIBits
ExtFloodFill
SetPaletteEntries
RoundRect
GetViewportOrgEx
EnumFontFamiliesExA
GetBoundsRect
PtInRegion
SetPixelV
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
GetNearestPaletteIndex
Rectangle
GetWindowOrgEx
GetPaletteEntries
EndDoc
StartPage
SetViewportOrgEx
SetViewportExtEx
PolylineTo
PolyBezierTo
ExtTextOutA
TextOutA
MoveToEx
ExtCreatePen
SetArcDirection
SelectClipPath
PolyDraw
ArcTo
StartDocA
SetColorAdjustment
ModifyWorldTransform
SetWorldTransform
CreatePalette
PlayMetaFileRecord
SetTextJustification
SetTextAlign
SetTextCharacterExtra
SetStretchBltMode
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetGraphicsMode
SetMapperFlags
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
PlayMetaFile
OffsetClipRgn
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetCurrentPositionEx
GetClipRgn
GetClipBox
ExcludeClipRect
Escape
OffsetRgn
GetRgnBox
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateDIBPatternBrushPt
CreateCompatibleDC
BitBlt
GetDeviceCaps
CreateDCA
CopyMetaFileA
GetObjectA
SetTextColor
SetBkColor
CreateBitmap
CreatePolygonRgn
SetDIBColorTable
StretchBlt
SetPixel
RealizePalette
GetDIBits
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
CreateDIBSection
CreateCompatibleBitmap
DPtoLP
SetRectRgn
GetMapMode
Polyline
Polygon
PatBlt
GetBkColor
Ellipse
CreateEllipticRgn
GetTextExtentPoint32A
CreateRectRgnIndirect
CreateFontIndirectA
DeleteObject
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgn
CombineRgn
DeleteDC
GetTextMetricsA
GetTextColor
EnumMetaFile
ScaleViewportExtEx
GetStockObject
FrameRgn
FillRgn
EndPage
GetTextFaceA
GetTextExtentPoint32W
GetTextExtentPointA
GetTextAlign
GetStretchBltMode
GetPolyFillMode
GetNearestColor
GetBkMode
GetROP2
SetAbortProc
AbortDoc
ScaleWindowExtEx

msimg32

TransparentBlt
AlphaBlend

comdlg32

CommDlgExtendedError

winspool.drv

DocumentPropertiesA
ClosePrinter
GetJobA
OpenPrinterA

advapi32

CryptReleaseContext
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
CloseServiceHandle
ControlService
CreateServiceA
DeleteService
OpenSCManagerA
OpenServiceA
QueryServiceStatus
StartServiceA
RegCloseKey
RegCreateKeyExA
CryptAcquireContextA
GetFileSecurityA
CryptGenRandom
RegOpenKeyExW
RegQueryValueExW
QueryServiceConfigA
RegOpenCurrentUser
RegSetValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegEnumKeyExA
RegEnumValueA
SetFileSecurityA

shell32

SHAddToRecentDocs
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetDesktopFolder
DragQueryFileA
DragFinish
ShellExecuteExA
ShellExecuteA
SHGetFileInfoA
ExtractIconA
SHAppBarMessage

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA
PathRemoveExtensionA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
StrFormatKBSizeA
PathFindExtensionA

uxtheme

GetThemeSysColor
GetWindowTheme
IsThemeBackgroundPartiallyTransparent
IsAppThemed
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetThemePartSize
DrawThemeText
DrawThemeParentBackground

ole32

OleSetMenuDescriptor
CoCreateInstance
OleQueryCreateFromData
OleQueryLinkFromData
CoGetMalloc
OleIsRunning
GetRunningObjectTable
CreateOleAdviseHolder
CreateDataAdviseHolder
OleGetIconOfClass
OleSetContainedObject
OleSaveToStream
OleSave
OleLoad
OleCreateFromFile
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleCreate
CreateItemMoniker
CreateGenericComposite
GetHGlobalFromILockBytes
WriteClassStm
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleRegEnumVerbs
OleRegGetMiscStatus
PropVariantCopy
OleRun
RegisterDragDrop
CoLockObjectExternal
CreateFileMoniker
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
OleLockRunning
RevokeDragDrop
OleGetClipboard
DoDragDrop
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
CoGetClassObject
CreateStreamOnHGlobal
CoDisconnectObject
CLSIDFromProgID
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
CoInitialize
StringFromGUID2
CLSIDFromString
CoInitializeEx
CoUninitialize
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID

oleaut32

OleCreateFontIndirect
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
VarDecFromStr
VarBstrFromDec
VarBstrFromDate
VarBstrFromCy
VarCyFromStr
VarDateFromStr
VariantCopy
SafeArrayPtrOfIndex
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayRedim
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SafeArrayCreate
SafeArrayAllocData
SafeArrayAllocDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysReAllocStringLen
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SysAllocString
SysFreeString
VariantClear

oledlg

ord8

gdiplus

GdipFree
GdiplusStartup
GdipCloneImage
GdipAlloc
GdiplusShutdown
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageRectI
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDisposeImage

iphlpapi

GetIpAddrTable

crashrpt1403

ord8
ord24
ord9

ws2_32

WSACleanup
WSAStartup
inet_ntoa
ntohl
gethostname
bind
closesocket
htons
inet_addr
recvfrom
gethostbyname
setsockopt
socket
sendto

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 373B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 863B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CLIENT/client2.vbs
.vbs
CLIENT/crashrpt_lang.ini
CLIENT/czclient.ssa
CLIENT/dbghelp.dll
.dll windows:10 windows x64 arch:x64

Password: 8765к4увапро

c2a265611426f9f34c59e87a7c46fba1

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:32

Not After

01-09-2022 18:32

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

72:7b:78:38:fd:04:d4:18:b0:a3:ba:25:23:cc:4b:d1:5d:0f:ff:ae:ba:2a:9f:84:84:4c:25:1d:3e:67:87:14
Signer

Actual PE Digest

72:7b:78:38:fd:04:d4:18:b0:a3:ba:25:23:cc:4b:d1:5d:0f:ff:ae:ba:2a:9f:84:84:4c:25:1d:3e:67:87:14

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

dbghelp.pdb

Imports

api-ms-win-crt-string-l1-1-0

memset
wcsnlen
strlen
wcsncmp
strcmp
strcspn
strncmp
wcscmp

api-ms-win-crt-time-l1-1-0

_time64
_ctime64

api-ms-win-crt-locale-l1-1-0

_unlock_locales
_lock_locales

api-ms-win-crt-runtime-l1-1-0

__doserrno
_initterm
_initterm_e

api-ms-win-crt-private-l1-1-0

_o__filelengthi64
_o__fullpath
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__itoa_s
_o__lseeki64
_o__ltoa
_o__mbscmp
_o__memicmp
_o__open_osfhandle
_o__purecall
_o__read
_o__register_onexit_function
_o__seh_filter_dll
_o__splitpath_s
_o__stricmp
_o__strlwr
_o__strnicmp
_o___stdio_common_vsprintf_s
_o__aligned_malloc
_o__wcsdup
_o__wcsicmp
_o__wcslwr
_o__wcsnicmp
_o__wctime64
_o__wdupenv_s
_o__wfsopen
_o__wfullpath
_o__wgetenv
_o__wmakepath_s
_o__wsplitpath_s
_o__wtoi
_o_abort
_o_atoi
_o_atol
_o_bsearch
_o_calloc
_o_ceilf
_o_fclose
_o_fflush
_o_fread
_o_free
_o_frexp
_o_fseek
_o_ftell
_o_isspace
_o_iswprint
_o_iswspace
_o_iswxdigit
_o_localeconv
_o_malloc
_o_qsort
_o_realloc
_o_setlocale
_o_strcat_s
_o_strcpy_s
_o_strncat_s
_o_strncpy_s
_o_terminate
_o_tolower
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcsncat_s
_o_wcsncpy_s
_o_wcstoul
_o_wmemcpy_s
__uncaught_exception
_CxxThrowException
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___stdio_common_vfprintf
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
_o___pctype_func
_o__execute_onexit_table
_o__errno
_o__crt_atexit
_o__configure_narrow_argv
_o__close
_o__aligned_free
_o____mb_cur_max_func
_o____lc_locale_name_func
_o____lc_codepage_func
wcsrchr
strstr
_o__cexit
_o__calloc_base
_o__callnewh
wcsstr
wcschr
__C_specific_handler
__CxxFrameHandler3
memcpy
__unDName
strchr
strrchr
__unDNameEx
memcmp
memmove
_o___stdio_common_vswprintf_s
_o___stdio_common_vsscanf

api-ms-win-core-file-l1-1-0

CreateFileA
GetFinalPathNameByHandleW
RemoveDirectoryW
SetFilePointerEx
GetFileSize
DeleteFileW
FindClose
CreateFileW
SetEndOfFile
GetFileType
SetFileAttributesW
SetFileTime
GetFileInformationByHandle
GetFileSizeEx
GetFileAttributesA
CreateDirectoryW
FindNextFileW
FindFirstFileW
WriteFile
ReadFile
SetFilePointer
CreateDirectoryA
GetFileAttributesW
GetFullPathNameW

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
SetErrorMode
GetLastError
SetLastError
RaiseException
UnhandledExceptionFilter

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionEx
OpenProcess
LeaveCriticalSection
EnterCriticalSection
TryAcquireSRWLockExclusive
InitializeCriticalSection
ReleaseSRWLockExclusive
AcquireSRWLockShared
InitializeCriticalSectionAndSpinCount
InitializeSRWLock
AcquireSRWLockExclusive
DeleteCriticalSection
ReleaseSRWLockShared

api-ms-win-core-processenvironment-l1-1-0

GetEnvironmentVariableW
ExpandEnvironmentStringsW
SetEnvironmentVariableA

api-ms-win-core-misc-l1-1-0

FormatMessageW
Sleep
LocalAlloc
LocalFree

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
TerminateProcess
GetCurrentProcess
GetCurrentThread
TlsGetValue
OpenThreadToken
TlsFree
TlsAlloc
GetCurrentProcessId
TlsSetValue

api-ms-win-core-heap-l1-1-0

HeapReAlloc
GetProcessHeap
HeapFree
HeapAlloc

api-ms-win-core-sysinfo-l1-1-0

GetVersionExA
GetSystemInfo
GetSystemDirectoryW
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
SystemTimeToFileTime

api-ms-win-core-libraryloader-l1-1-0

GetProcAddress
FreeLibrary
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
LoadLibraryExA
GetModuleHandleExW

api-ms-win-security-base-l1-1-0

GetFileSecurityW
AccessCheck
RevertToSelf
ImpersonateSelf

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte

api-ms-win-core-memory-l1-1-0

VirtualFree
VirtualQuery
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
VirtualAlloc
VirtualProtect
MapViewOfFileEx
ReadProcessMemory

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
OutputDebugStringA
IsDebuggerPresent
DebugBreak

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-localization-l1-1-0

LCMapStringW
LCMapStringEx

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc
CoTaskMemFree

oleaut32

SysFreeString

ntdll

RtlUTF8ToUnicodeN
RtlRunOnceExecuteOnce

api-ms-win-downlevel-kernel32-l2-1-0

CreateFileMappingA

api-ms-win-core-localregistry-l1-1-0

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-threadpool-l1-1-0

CloseThreadpoolWork
WaitForThreadpoolWorkCallbacks
SubmitThreadpoolWork
CreateThreadpoolWork

api-ms-win-core-sysinfo-l1-2-0

GetNativeSystemInfo

Exports

Exports

DbgHelpCreateUserDump
DbgHelpCreateUserDumpW
EnumDirTree
EnumDirTreeW
EnumerateLoadedModules
EnumerateLoadedModules64
EnumerateLoadedModulesEx
EnumerateLoadedModulesExW
EnumerateLoadedModulesW64
ExtensionApiVersion
FindDebugInfoFile
FindDebugInfoFileEx
FindDebugInfoFileExW
FindExecutableImage
FindExecutableImageEx
FindExecutableImageExW
FindFileInPath
FindFileInSearchPath
GetSymLoadError
GetTimestampForLoadedLibrary
ImageDirectoryEntryToData
ImageDirectoryEntryToDataEx
ImageNtHeader
ImageRvaToSection
ImageRvaToVa
ImagehlpApiVersion
ImagehlpApiVersionEx
MakeSureDirectoryPathExists
MiniDumpReadDumpStream
MiniDumpWriteDump
RangeMapAddPeImageSections
RangeMapCreate
RangeMapFree
RangeMapRead
RangeMapRemove
RangeMapWrite
RemoveInvalidModuleList
ReportSymbolLoadSummary
SearchTreeForFile
SearchTreeForFileW
SetCheckUserInterruptShared
SetSymLoadError
StackWalk
StackWalk2
StackWalk64
StackWalkEx
SymAddSourceStream
SymAddSourceStreamA
SymAddSourceStreamW
SymAddSymbol
SymAddSymbolW
SymAddrIncludeInlineTrace
SymAllocDiaString
SymCleanup
SymCompareInlineTrace
SymDeleteSymbol
SymDeleteSymbolW
SymEnumLines
SymEnumLinesW
SymEnumProcesses
SymEnumSourceFileTokens
SymEnumSourceFiles
SymEnumSourceFilesW
SymEnumSourceLines
SymEnumSourceLinesW
SymEnumSym
SymEnumSymbols
SymEnumSymbolsEx
SymEnumSymbolsExW
SymEnumSymbolsForAddr
SymEnumSymbolsForAddrW
SymEnumSymbolsW
SymEnumTypes
SymEnumTypesByName
SymEnumTypesByNameW
SymEnumTypesW
SymEnumerateModules
SymEnumerateModules64
SymEnumerateModulesW64
SymEnumerateSymbols
SymEnumerateSymbols64
SymEnumerateSymbolsW
SymEnumerateSymbolsW64
SymFindDebugInfoFile
SymFindDebugInfoFileW
SymFindExecutableImage
SymFindExecutableImageW
SymFindFileInPath
SymFindFileInPathW
SymFreeDiaString
SymFromAddr
SymFromAddrW
SymFromIndex
SymFromIndexW
SymFromInlineContext
SymFromInlineContextW
SymFromName
SymFromNameW
SymFromToken
SymFromTokenW
SymFunctionTableAccess
SymFunctionTableAccess64
SymFunctionTableAccess64AccessRoutines
SymGetDiaSession
SymGetDiaSource
SymGetExtendedOption
SymGetFileLineOffsets64
SymGetHomeDirectory
SymGetHomeDirectoryW
SymGetLineFromAddr
SymGetLineFromAddr64
SymGetLineFromAddrEx
SymGetLineFromAddrW64
SymGetLineFromInlineContext
SymGetLineFromInlineContextW
SymGetLineFromName
SymGetLineFromName64
SymGetLineFromNameEx
SymGetLineFromNameW64
SymGetLineNext
SymGetLineNext64
SymGetLineNextEx
SymGetLineNextW64
SymGetLinePrev
SymGetLinePrev64
SymGetLinePrevEx
SymGetLinePrevW64
SymGetModuleBase
SymGetModuleBase64
SymGetModuleInfo
SymGetModuleInfo64
SymGetModuleInfoW
SymGetModuleInfoW64
SymGetOmapBlockBase
SymGetOmaps
SymGetOptions
SymGetScope
SymGetScopeW
SymGetSearchPath
SymGetSearchPathW
SymGetSourceFile
SymGetSourceFileChecksum
SymGetSourceFileChecksumW
SymGetSourceFileFromToken
SymGetSourceFileFromTokenByTokenName
SymGetSourceFileFromTokenByTokenNameW
SymGetSourceFileFromTokenW
SymGetSourceFileToken
SymGetSourceFileTokenByTokenName
SymGetSourceFileTokenByTokenNameW
SymGetSourceFileTokenW
SymGetSourceFileW
SymGetSourceVarFromToken
SymGetSourceVarFromTokenW
SymGetSymFromAddr
SymGetSymFromAddr64
SymGetSymFromName
SymGetSymFromName64
SymGetSymNext
SymGetSymNext64
SymGetSymPrev
SymGetSymPrev64
SymGetSymbolFile
SymGetSymbolFileW
SymGetTypeFromName
SymGetTypeFromNameW
SymGetTypeInfo
SymGetTypeInfoEx
SymGetUnwindInfo
SymInitialize
SymInitializeW
SymLoadModule
SymLoadModule64
SymLoadModuleEx
SymLoadModuleExW
SymMatchFileName
SymMatchFileNameW
SymMatchString
SymMatchStringA
SymMatchStringW
SymNext
SymNextW
SymPrev
SymPrevW
SymQueryInlineTrace
SymRefreshModuleList
SymRegisterCallback
SymRegisterCallback64
SymRegisterCallbackW64
SymRegisterFunctionEntryCallback
SymRegisterFunctionEntryCallback64
SymRegisterGetSourcePathPartCallback
SymRegisterSourceFileUrlListCallback
SymSearch
SymSearchW
SymSetContext
SymSetDiaSession
SymSetExtendedOption
SymSetHomeDirectory
SymSetHomeDirectoryW
SymSetOptions
SymSetParentWindow
SymSetScopeFromAddr
SymSetScopeFromIndex
SymSetScopeFromInlineContext
SymSetSearchPath
SymSetSearchPathW
SymSetServiceManager
SymSrvDeltaName
SymSrvDeltaNameW
SymSrvGetFileIndexInfo
SymSrvGetFileIndexInfoW
SymSrvGetFileIndexString
SymSrvGetFileIndexStringW
SymSrvGetFileIndexes
SymSrvGetFileIndexesW
SymSrvGetSupplement
SymSrvGetSupplementW
SymSrvIsStore
SymSrvIsStoreW
SymSrvStoreFile
SymSrvStoreFileW
SymSrvStoreSupplement
SymSrvStoreSupplementW
SymUnDName
SymUnDName64
SymUnloadModule
SymUnloadModule64
UnDecorateSymbolName
UnDecorateSymbolNameW
WinDbgExtensionDllInit
_EFN_DumpImage
block
chksym
dbghelp
dh
fptr
homedir
inlinedbg
itoldyouso
lmi
lminfo
omap
optdbgdump
optdbgdumpaddr
srcfiles
stack_force_ebp
stackdbg
sym
symsrv
vc7fpo

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 372KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mrdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CLIENT/language.dll
.dll windows:6 windows x64 arch:x64

894b54c3c53980ad207e2ed90caa6d31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW

Exports

Exports

?ABSENT_T@@3QEBDEB
?ACCESS_DENIED@@3QEBDEB
?ADDITIONAL_SERVICES_ADD_EDIT_BARCODE@@3QEBDEB
?ADDITIONAL_SERVICES_EDIT_POLICY_ALLOWED@@3QEBDEB
?ADDITIONAL_SERVICES_EDIT_POLICY_DENIED@@3QEBDEB
?ADDITIONAL_SERVICES_EDIT_POLICY_DENIED_BUT_ADDING@@3QEBDEB
?ADDITIONAL_SERVICES_PAY_FROM_DEPOSIT@@3QEBDEB
?ADDSERV_PAY_LATER_ADD_TO_DEBT@@3QEBDEB
?ALLOW_SELF_REGISTER_VIA_TELEGRAM@@3QEBDEB
?ALLOW_SHARE_BALANCE_MINUTES@@3QEBDEB
?ALL_STAT_TODAY@@3QEBDEB
?ALREADY_RUN@@3QEBDEB
?ANALIZ_FILTER@@3QEBDEB
?AP_CONPHO_LEFT@@3QEBDEB
?AP_CONPHO_RIGHT1@@3QEBDEB
?AP_CONPHO_RIGHT2@@3QEBDEB
?AP_CONPHO_RIGHT3@@3QEBDEB
?AP_COPYRT2@@3QEBDEB
?AP_EMAILA_LEFT2@@3QEBDEB
?AP_EMAILA_LEFT@@3QEBDEB
?AP_HOMEPA_LEFT2@@3QEBDEB
?AP_HOMEPA_LEFT@@3QEBDEB
?AP_HOMEPA_RIGHT@@3QEBDEB
?AP_INFOPR_LEFT@@3QEBDEB
?AP_INFOPR_RIGHT@@3QEBDEB
?AP_NOVVER_LEFT@@3QEBDEB
?AP_NOVVER_RIGHT@@3QEBDEB
?AP_SERNUM_LEFT@@3QEBDEB
?AP_ST_LICENSE_DETAILS_EXPIRATION_BY@@3QEBDEB
?AP_ST_LICENSE_DETAILS_UNLIMITED@@3QEBDEB
?AP_ST_LICENSE_LABEL@@3QEBDEB
?AP_TITLE@@3QEBDEB
?AP_USERNAME_LEFT@@3QEBDEB
?ASK_FFM_STATIC@@3QEBDEB
?ASK_FFM_TITLE@@3QEBDEB
?ASK_QUESTION@@3QEBDEB
?ASK_ST_MIN@@3QEBDEB
?ASK_ST_PRO@@3QEBDEB
?ASK_TO_ADD_FIRST_FREE_MB@@3QEBDEB
?ASMT_HH@@3QEBDEB
?ASMT_MM@@3QEBDEB
?AUTOASSIGN_AFTER_SUM@@3QEBDEB
?AUTOASSIGN_GROUP@@3QEBDEB
?AUTOMATION_ASK_SHUTDOWN_ON_RESET@@3QEBDEB
?AUTOMATION_DONTSHOW_CLOSESESSION_DIALOG_ON_EXIT@@3QEBDEB
?AUTOMATION_DONTSHOW_PAYMENT_DETAILS_WINDOW_ON_TIMER_STOP@@3QEBDEB
?AUTOMATION_DONT_SEND_MIN_FOR_NAPOMINANIE@@3QEBDEB
?AUTOMATION_MINIMIZE_TO_SYSTEM_TRAY@@3QEBDEB
?AUTOMATION_SHOW_PAY_SUM_FOR_ADMIN@@3QEBDEB
?AUTORESTART_WARNING@@3QEBDEB
?AUTORESTART_WARNING_COMPNUM@@3QEBDEB
?AUTO_SHUTDOWN_EXCEPTION@@3QEBDEB
?AUTO_SHUTDOWN_TITLE_EXCEPTION@@3QEBDEB
?AU_CH1@@3QEBDEB
?AU_CH2@@3QEBDEB
?AU_CH3@@3QEBDEB
?AU_CH4@@3QEBDEB
?BADKEY_MESSAGE@@3QEBDEB
?BALANCE_EXPORT_ITEM@@3QEBDEB
?BALANCE_EXPORT_PRICE@@3QEBDEB
?BALANCE_EXPORT_QUANTITY@@3QEBDEB
?BALANCE_EXPORT_SUM@@3QEBDEB
?BALANCE_MIN_GROUP@@3QEBDEB
?BALANCE_MONEY_DEPOSIT@@3QEBDEB
?BI_ADDITIONAL_PARAMS@@3QEBDEB
?BI_BLOCKING_IMAGES@@3QEBDEB
?BI_INTERVAL_SMENY_KARTINOK@@3QEBDEB
?BL2_ERR1@@3QEBDEB
?BL2_ERR2@@3QEBDEB
?BL2_ERR3@@3QEBDEB
?BL2_ERR4@@3QEBDEB
?BLOCK_RUN_IN_IE@@3QEBDEB
?BOSSMODE_PASSWORD_ENTER_WARNING@@3QEBDEB
?BOSS_LOG@@3QEBDEB
?BUTTON_ADD@@3QEBDEB
?BUTTON_ADD_TO_ORDER_LIST@@3QEBDEB
?BUTTON_BALANCE_EXPORT@@3QEBDEB
?BUTTON_DELETE@@3QEBDEB
?BUTTON_DOWN@@3QEBDEB
?BUTTON_EDIT@@3QEBDEB
?BUTTON_NAME_FREE_TIMER@@3QEBDEB
?BUTTON_NAME_PRICE_SETTINGS@@3QEBDEB
?BUTTON_REMOVE_FROM_ORDER_LIST@@3QEBDEB
?BUTTON_UP@@3QEBDEB
?BUT_CLIENT_SOUND_VOLUME@@3QEBDEB
?BUT_GAMES@@3QEBDEB
?BUT_HARDWARE@@3QEBDEB
?BUT_INET@@3QEBDEB
?BUT_PAUSE@@3QEBDEB
?BUT_RESET@@3QEBDEB
?BUT_SND_DIRECT_SOUND@@3QEBDEB
?BUT_SND_NO@@3QEBDEB
?BUT_SND_PC_SPEAKER@@3QEBDEB
?BUT_START@@3QEBDEB
?BUT_STAT@@3QEBDEB
?C2SETUP_AUTORUN@@3QEBDEB
?C2SETUP_OFF@@3QEBDEB
?C2SETUP_REGISTRY@@3QEBDEB
?C2SETUP_REGISTRY_WINDOWS@@3QEBDEB
?C2SETUP_RUN_ON_CLOSE@@3QEBDEB
?C2SETUP_RUN_ON_CLOSE_SERVICE@@3QEBDEB
?C2SETUP_SERVICE@@3QEBDEB
?CAFE_STEAM_ACCOUNT@@3QEBDEB
?CAFE_STEAM_LOGIN@@3QEBDEB
?CAFE_STEAM_PASSWORD@@3QEBDEB
?CANCEL_SELL_GAME_CARD@@3QEBDEB
?CANCEL_V@@3QEBDEB
?CANTOPENFILE@@3QEBDEB
?CANT_AQUIRE_CONTEXT@@3QEBDEB
?CANT_DOBAV_QUEUE_FULL@@3QEBDEB
?CANT_DOBAV_TK_TIMER@@3QEBDEB
?CANT_OPENCREATE_CONFIG@@3QEBDEB
?CANT_SIT_FREE_ON_ALLNIGHT_MODE@@3QEBDEB
?CCP_CHK_SHOW_ALWAYS_ON_TOP@@3QEBDEB
?CCP_STATE_NO_CONNECTION_WITH_SERVER@@3QEBDEB
?CCP_STATE_REMAINING@@3QEBDEB
?CCP_STATE_SPENT@@3QEBDEB
?CCP_STOP_SESSION@@3QEBDEB
?CCP_YESNO_SURE@@3QEBDEB
?CHANGE_ALT_NAME@@3QEBDEB
?CLBAN_SERVER@@3QEBDEB
?CLBAN_SERVER_ACT_NAPOM@@3QEBDEB
?CLBAN_SERVER_SKOROST_OBNOV@@3QEBDEB
?CLIENT2_SETUP_FIRST_ENTER_PASS@@3QEBDEB
?CLIENT2_SETUP_GROUP_BLOCKING@@3QEBDEB
?CLIENT2_SETUP_GROUP_COMMON@@3QEBDEB
?CLIENT2_SETUP_GROUP_NETWORK@@3QEBDEB
?CLIENT2_SETUP_IP_ADRES_SERVERA@@3QEBDEB
?CLIENT2_SETUP_NOMER_COMPUTERA@@3QEBDEB
?CLIENT2_SETUP_PORT_SERVERA@@3QEBDEB
?CLIENT2_SETUP_VKL_OTKL_AVTOZAP_PROGR@@3QEBDEB
?CLIENT2_SETUP_WINDOW_TITLE@@3QEBDEB
?CLIENT_BANNER_PAUSE_MODE@@3QEBDEB
?CLIENT_COMPUTER_AUTOMATION_TITLE@@3QEBDEB
?CLIENT_CONTROL_PANEL@@3QEBDEB
?CLIENT_DB_OPERATOR_CANT_START_SESSION@@3QEBDEB
?CLIENT_DB_OPERATOR_CANT_USE_BALANCE_MINUTES@@3QEBDEB
?CLIENT_DB_OPERATOR_CANT_USE_BALANCE_MINUTES_AND_DEPOSIT@@3QEBDEB
?CLIENT_SETTINGS_BLOCK_VR_HELMET@@3QEBDEB
?CLIENT_SETTINGS_KANP_EXCEPTIONS@@3QEBDEB
?CLIENT_SETTINGS_PASSWORD_LABEL@@3QEBDEB
?CLOSE_BROWSERS_DELETE_COOKIES@@3QEBDEB
?CLOSE_CHROME_DELETE_COOKIES@@3QEBDEB
?CLOSE_STEAM_LOGIN_ANONYMOUS@@3QEBDEB
?CLOSE_STEAM_LOGIN_CLUB_OR_ANONYMOUS@@3QEBDEB
?CLVINFO_CHECK@@3QEBDEB
?CLVINFO_COMPUTER@@3QEBDEB
?CLVINFO_CONNECTION_ERROR@@3QEBDEB
?CLVINFO_ERRFILE_CANT_CALCULATE@@3QEBDEB
?CLVINFO_ERRFILE_WRONG_MD5@@3QEBDEB
?CLVINFO_OFFLINE@@3QEBDEB
?CLVINFO_OFFLINE_851@@3QEBDEB
?CLVINFO_SSA_FILE_ERROR@@3QEBDEB
?CLVINFO_SSA_FILE_WRONG_VERSION@@3QEBDEB
?CLVINFO_TITLE@@3QEBDEB
?CLVINFO_UPDATE@@3QEBDEB
?CLVINFO_VERSION@@3QEBDEB
?CLVUPD_ERROR_SSA_ERROR@@3QEBDEB
?CLVUPD_ERROR_SSA_OF_WRONG_VER@@3QEBDEB
?CLVUPD_SEND_FILE@@3QEBDEB
?CLVUPD_SEND_FILE_ERROR@@3QEBDEB
?CLVUPD_UPDATE_START@@3QEBDEB
?COMMAND_TELEGRAM_FREE_COMPUTERS@@3QEBDEB
?COMMAND_TELEGRAM_NEWS@@3QEBDEB
?COMPUTER_RELEASE_LIST_COMPUTER@@3QEBDEB
?COMPUTER_RELEASE_LIST_RELEASE_AT@@3QEBDEB
?CONF_NAP_SIG@@3QEBDEB
?CTRL_CLIENT_SOUND_GET_ERROR@@3QEBDEB
?CTRL_CLIENT_SOUND_MUTE_ON_RESET@@3QEBDEB
?CTRL_CLIENT_SOUND_SET_ON_TIME_OPEN@@3QEBDEB
?CTRL_CLIENT_SOUND_STD_SOUND_SETTINGS@@3QEBDEB
?CTRL_CLIENT_SOUND_UNMUTE_ON_TIME_OPEN@@3QEBDEB
?CTRL_CLIENT_SOUND_UPR_TITLE@@3QEBDEB
?CTRL_CLIENT_SOUND_VOLUME_MASTER@@3QEBDEB
?CTRL_CLIENT_SOUND_VOLUME_OFF@@3QEBDEB
?CTRL_CLIENT_SOUND_VOLUME_SET@@3QEBDEB
?CTRL_CLIENT_SOUND_VOLUME_SET_DEFAULT@@3QEBDEB
?CTRL_CLIENT_SOUND_VOLUME_WAVE@@3QEBDEB
?DARK_THEME@@3QEBDEB
?DB_NAME_RESERVATION@@3QEBDEB
?DB_NAME_SETTINGS@@3QEBDEB
?DB_OPEN_ERROR@@3QEBDEB
?DEFAULT_TELEGRAM_BOT_WELCOME_MESSAGE@@3QEBDEB
?DEF_CATEGORY_PS4_NAME@@3QEBDEB
?DEF_CATEGORY_REGULAR_NAME@@3QEBDEB
?DEF_CATEGORY_VIP_NAME@@3QEBDEB
?DEF_NEW_PACKET_NAME@@3QEBDEB
?DEF_PRICE_PACKET_NAME_DAY@@3QEBDEB
?DEF_PRICE_PACKET_NAME_NIGHT@@3QEBDEB
?DEF_RESET_REPORT_DATA_DESCR@@3QEBDEB
?DEF_RESET_REPORT_DATA_DESCR_USLUGI@@3QEBDEB
?DELETE_CATEGORY_WARNING@@3QEBDEB
?DENIED_REBATE_100@@3QEBDEB
?DENIED_RETURN_REST_FOR_BLOCK_SECURITY_SETTINGS@@3QEBDEB
?DENY_CALL_OPERATOR@@3QEBDEB
?DENY_CANCEL_SELL_CARD@@3QEBDEB
?DENY_RETURN_REST_FOR_BLOCK@@3QEBDEB
?DENY_SETTING_SPENT_AMOUNT_TO_ZERO@@3QEBDEB
?DEPOSIT_ENTER_FILL_UP_AMOUNT@@3QEBDEB
?DEPOSIT_ENTER_WITHDRAW_AMOUNT@@3QEBDEB
?DEPOSIT_FILL_UP@@3QEBDEB
?DEPOSIT_OPERATION_ERROR_BY_REMOTE_CLIENT@@3QEBDEB
?DEPOSIT_OPERATION_ERROR_TRY_ON_FREE_COMPUTER@@3QEBDEB
?DEPOSIT_WITHDRAW_MONEY@@3QEBDEB
?DEP_HIDE_CLIENT_FROM_TASK_MANAGER@@3QEBDEB
?DEP_HIDE_CLIENT_ON_WARNING@@3QEBDEB
?DEP_VISTA_TO_DISABLE@@3QEBDEB
?DESCR_PDB_ADD_USER@@3QEBDEB
?DESCR_PDB_CHANGE_INFO@@3QEBDEB
?DESCR_PDB_DELETE_USER@@3QEBDEB
?DESCR_SECURITY_PROBLEM_ID_QUERY_ERROR_MAYBE_USER_ABSENT@@3QEBDEB
?DESCR_SECURITY_PROBLEM_PDB_CORRUPTED_RECORD@@3QEBDEB
?DESCR_SECURITY_PROBLEM_PDB_LENGTH_CHANGED@@3QEBDEB
?DF_AUTOMATION@@3QEBDEB
?DF_AUTOSKIDKA@@3QEBDEB
?DF_AUTOSMENATARIFA@@3QEBDEB
?DF_B_SPISOK@@3QEBDEB
?DF_B_VRNANASTR@@3QEBDEB
?DF_OKRUGLENIEOPLATI@@3QEBDEB
?DF_RESTART_ALL@@3QEBDEB
?DF_SHUTDOWN_ALL@@3QEBDEB
?DIAG_NETWORK_WITH_CLIENTS_TITLE@@3QEBDEB
?DLINA_BOLSHE_99@@3QEBDEB
?DOGA_RTF_CANCEL@@3QEBDEB
?DOGA_RTF_SELECT@@3QEBDEB
?DOG_ARENDY_MANUAL@@3QEBDEB
?DOG_ARENDY_TITLE@@3QEBDEB
?DONT_APPLY_GROUP_DISCOUNT_FOR_PRICING_BLOCKS@@3QEBDEB
?DONT_APPLY_GROUP_DISCOUNT_FOR_PRICING_PACKET@@3QEBDEB
?DOSTUP_ZAPRESHEN@@3QEBDEB
?DU_BLANK_VIBERITE_USLUGU@@3QEBDEB
?DU_DOPOLNITELNIE_USLUGI@@3QEBDEB
?DU_KOLICHESTVO@@3QEBDEB
?DU_K_OPLATE@@3QEBDEB
?DU_LOG3_ITOGO@@3QEBDEB
?DU_LOG3_USLUGI@@3QEBDEB
?DU_OPLATIT@@3QEBDEB
?DU_POGASHENIE_DOLGA@@3QEBDEB
?DU_REDAKTOR_USLUG@@3QEBDEB
?DU_RU_ADD@@3QEBDEB
?DU_RU_CENA@@3QEBDEB
?DU_RU_NAZV@@3QEBDEB
?DU_RU_REMOVE@@3QEBDEB
?DU_ZERO_KOLVO@@3QEBDEB
?ENTER_AMOUNT_OF_DEPOSIT_TO_SHARE@@3QEBDEB
?ENTER_AMOUNT_OF_MINUTES_TO_SHARE@@3QEBDEB
?ENTER_PASSWORD_TO_CLOSE_SESSION@@3QEBDEB
?ENTER_PHONE_NUMBER_TO_SHARE_BALANCE_MINUTES@@3QEBDEB
?ENTER_PHONE_NUMBER_TO_SHARE_DEPOSIT@@3QEBDEB
?ERROR_ACCESS_DENIED_FOR_FUNCTION@@3QEBDEB
?ERROR_CZ_RUN_PLEASE_EXIT@@3QEBDEB
?ERROR_DENIED_IN_SETTINGS@@3QEBDEB
?ERROR_DIDNOT_FIND_PRICE_PER_HOUR_FOR_CATEGORY@@3QEBDEB
?ERROR_NOT_ENOUGH_AMOUNT_OF_SERVICE@@3QEBDEB
?ERROR_RBACKUP_RESTORE@@3QEBDEB
?ERROR_RBACKUP_SAVE@@3QEBDEB
?ERROR_TYPE_NAME_AND_PRICE_ADDSERV@@3QEBDEB
?ERROR_V@@3QEBDEB
?ERROR_YOU_CAN_USE_THIS_TARIFF_CATEGORY@@3QEBDEB
?ERR_LOG3_START@@3QEBDEB
?ERR_MANDATORY_USER_PROFILE@@3QEBDEB
?ERR_MESSAGE_ORDER_NOT_SETUP@@3QEBDEB
?ERR_MESSAGE_POS_ITEM_LIST_RECEIVE_ERROR@@3QEBDEB
?ERR_NOT_ENOUGH_AMOUNT_TO_TAKE@@3QEBDEB
?ERR_PACKET_TIME_IS_FROM_TO@@3QEBDEB
?ERR_RECEIVING_CASH_AMOUNT@@3QEBDEB
?ERR_VOZVRAT_AFTER_PAUSE@@3QEBDEB
?ERR_WRONG_AMOUNT@@3QEBDEB
?FDF_L3GFNP_TEXT@@3QEBDEB
?FILTER_LOG3_ARCHIVE@@3QEBDEB
?FORMAT_AU_CH5@@3QEBDEB
?FORMAT_CCP_CURRENT_TIMER_PAY_SUM@@3QEBDEB
?FORMAT_CCP_DEBT@@3QEBDEB
?FORMAT_CCP_OPERATION_BEGIN@@3QEBDEB
?FORMAT_CCP_OPERATION_END@@3QEBDEB
?FORMAT_CCP_REMAINING_BALANCE@@3QEBDEB
?FORMAT_CCP_REMAINING_DEPOSIT@@3QEBDEB
?FORMAT_HALFNIGHT_PRICE@@3QEBDEB
?FORMAT_LOG3_GAMES_TO_INTERNET@@3QEBDEB
?FORMAT_LOG3_OPERATION_DESCRIPTION_CANCEL_USLUGA_CARD_CATEGORY@@3QEBDEB
?FORMAT_LOG3_OPERATION_DESCRIPTION_USLUGA_CARD@@3QEBDEB
?FORMAT_LOG3_OPERATION_DESCRIPTION_USLUGA_CARD_CATEGORY@@3QEBDEB
?FORMAT_LOG3_OPERATION_DESCRIPTION_USLUGA_FILLUP_DEPOSIT@@3QEBDEB
?FORMAT_LOG3_OPERATION_DESCRIPTION_USLUGA_WITHDRAW_DEPOSIT@@3QEBDEB
?FORMAT_LOG3_REPORT_SECU_SPISOK_BLOCK@@3QEBDEB
?FORMAT_LOG3_REPORT_SECU_SPISOK_CEN@@3QEBDEB
?FORMAT_LOG3_REPORT_SECU_SPISOK_CEN_NOCH@@3QEBDEB
?FORMAT_LOG3_REPORT_SECU_SPISOK_CEN_POLNOCHI@@3QEBDEB
?FORMAT_LOG3_REPORT_SECU_SPISOK_PACKET@@3QEBDEB
?FORMAT_LOG3_REPORT_SECU_SPISOK_PER_HOUR@@3QEBDEB
?FORMAT_MIN_OF@@3QEBDEB
?FORMAT_NIGHT_CENA_ZA_NIGHT@@3QEBDEB
?FORMAT_PARAMBEZ_PRICES_DENY_SWITCHING_GAMES_INET@@3QEBDEB
?FORMAT_PAY_FOR@@3QEBDEB
?FORMAT_PERSONS_DB_ADMIN_HEADER_BALANCE@@3QEBDEB
?FORMAT_PERSONS_INFORMATION_FREE_TIME@@3QEBDEB
?FORMAT_PERSONS_INFORMATION_SPENT_FREE_TIME@@3QEBDEB
?FORMAT_PERSONS_INFORMATION_SPENT_SUM@@3QEBDEB
?FORMAT_PERSONS_INFORMATION_SPENT_SUM_AND_TOTAL@@3QEBDEB
?FORMAT_PERSONS_INFORMATION_SPENT_TIME@@3QEBDEB
?FORMAT_PERSONS_INFORMATION_SUM@@3QEBDEB
?FORMAT_PERSONS_INFORMATION_TIME@@3QEBDEB
?FORMAT_PRICE_BLOCK_STRING@@3QEBDEB
?FORMAT_PRICE_H@@3QEBDEB
?FORMAT_PRICE_PACKET_STRING@@3QEBDEB
?FORMAT_PRICE_PER_HOUR_STRING@@3QEBDEB
?FORMAT_SECSET_TC_DONT_USE_FOR_GAMES@@3QEBDEB
?FORMAT_STR_BALANCE_MINUTES@@3QEBDEB
?FORMAT_STR_BALANCE_TIMER_START_NOT_ENOUGH@@3QEBDEB
?FORMAT_STR_BALANCE_TIMER_START_NOT_ENOUGH_CATEGORY@@3QEBDEB
?FORMAT_STR_CANCEL_SELL_CARD_QUESTION_CATEGORY@@3QEBDEB
?FORMAT_STR_CARDS@@3QEBDEB
?FORMAT_STR_CARDS_ADD@@3QEBDEB
?FORMAT_STR_CARDS_ADD_CATEGORY@@3QEBDEB
?FORMAT_STR_CARDS_EDIT@@3QEBDEB
?FORMAT_STR_CARDS_EDIT_CATEGORY@@3QEBDEB
?FORMAT_STR_CARDS_SELL_QUESTION@@3QEBDEB
?FORMAT_STR_CARDS_SELL_QUESTION_CATEGORY@@3QEBDEB
?FORMAT_STR_CDB_GROUPS_DISCOUNT@@3QEBDEB
?FORMAT_STR_ERR_ADD_GAMES_AFTER_INET_ON_RESTRICTION@@3QEBDEB
?FORMAT_STR_TIP_DENY_TRAFCTRL_IN_GAMES_MODE@@3QEBDEB
?FORMAT_TEXT_SPECIAL_CLIENT_BALANCE_REPORT@@3QEBDEB
?FORMAT_TOTAL_CASH_AMOUNT@@3QEBDEB
?FORMAT_TOTAL_DOLG_AMOUNT@@3QEBDEB
?FORMAT_T_ERR_CHANGE_SEAT_LOCKED_GAMES_INET@@3QEBDEB
?FREE_LIMIT_OUT@@3QEBDEB
?FULL_STAT_ZA@@3QEBDEB
?FUNCTION_NOW_ALLOWED_WHEN_WORKING_WITH_BALANCE_OR_DEPOSIT@@3QEBDEB
?GOGA_USER_ACCEPT@@3QEBDEB
?GOGA_USER_TITLE@@3QEBDEB
?GS_FREE_WORK@@3QEBDEB
?GS_FREE_WORK_BY_REASON@@3QEBDEB
?HALFNIGHT_USE_EXACTLY_HALF_PRICE@@3QEBDEB
?HEADER_PRICES_FOR_BLOCK@@3QEBDEB
?HEADER_PRICES_FOR_HOUR@@3QEBDEB
?HEADER_PRICES_FOR_PACKET@@3QEBDEB
?HN_HALFNIGHT@@3QEBDEB
?HN_NIGHT@@3QEBDEB
?HOWTO_F11_VOICE_CALL@@3QEBDEB
?HTTP_LOG_ERROR_CANTSTART@@3QEBDEB
?HTTP_LOG_OK_STARTED@@3QEBDEB
?HWM_AUTOCHECK_START_STOP@@3QEBDEB
?HWM_BUT_CHECK@@3QEBDEB
?HWM_BUT_SAVE@@3QEBDEB
?HWM_BUT_SHOW@@3QEBDEB
?HWM_CONF_CHANGED@@3QEBDEB
?HWM_DENY_CHECK@@3QEBDEB
?HWM_DENY_SAVE@@3QEBDEB
?HWM_ERR_LOAD@@3QEBDEB
?HWM_HW_RECV_OK@@3QEBDEB
?HWM_IDENTICAL_TO_ETALON@@3QEBDEB
?HWM_NOW@@3QEBDEB
?HWM_TITLE@@3QEBDEB
?HWM_WARN_DIFF@@3QEBDEB
?HWM_WAS@@3QEBDEB
?HW_LB_CPU@@3QEBDEB
?HW_LB_HDD@@3QEBDEB
?HW_LB_RAM@@3QEBDEB
?HW_LB_VIDEO@@3QEBDEB
?IB_FILE_SAVE_ERROR@@3QEBDEB
?IB_SETUP_ADDRULE_ACTION@@3QEBDEB
?IB_SETUP_ADDRULE_ACTION_DROP@@3QEBDEB
?IB_SETUP_ADDRULE_ACTION_FORWARD@@3QEBDEB
?IB_SETUP_ADDRULE_ACTION_SHORT@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION_IP@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION_IP_SHORT@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION_MASK@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION_MASK_SHORT@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION_PORT@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION_PORT_SHORT@@3QEBDEB
?IB_SETUP_ADDRULE_PROTOCOL@@3QEBDEB
?IB_SETUP_ADDRULE_PROTOCOL_ALL@@3QEBDEB
?IB_SETUP_ADDRULE_PROTOCOL_ICMP@@3QEBDEB
?IB_SETUP_ADDRULE_PROTOCOL_SHORT@@3QEBDEB
?IB_SETUP_ADDRULE_PROTOCOL_TCP@@3QEBDEB
?IB_SETUP_ADDRULE_PROTOCOL_UDP@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE_IP@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE_IP_SHORT@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE_MASK@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE_MASK_SHORT@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE_PORT@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE_PORT_SHORT@@3QEBDEB
?IB_SETUP_ALL@@3QEBDEB
?IB_SETUP_BN_ADDRULE@@3QEBDEB
?IB_SETUP_BN_EDITRULE@@3QEBDEB
?IB_SETUP_BN_INETBLOCKING@@3QEBDEB
?IB_SETUP_BN_REMOVERULE@@3QEBDEB
?IB_SETUP_BN_VNIZ@@3QEBDEB
?IB_SETUP_BN_VVERH@@3QEBDEB
?IB_SETUP_CHK_INETBLOCKING@@3QEBDEB
?IB_SETUP_TITLE@@3QEBDEB
?ID_CLIENT@@3QEBDEB
?INFOPORT_T_COMPNSPISOKPROCESSOV@@3QEBDEB
?INFOPORT_T_DESTROY@@3QEBDEB
?INFOPORT_T_ERROR_CONNECT@@3QEBDEB
?INFOPORT_T_ERROR_TRANSFER@@3QEBDEB
?INFOPORT_T_ERROR_TRANSFER_MODULES@@3QEBDEB
?INFOPORT_T_REFRESH@@3QEBDEB
?INFOPORT_T_SPISOKPROCESSOV@@3QEBDEB
?IS_REBRANDING_MODE@@3_NB
?IS_ROUNDOFF_ADD_SERVICES@@3QEBDEB
?IZM_OP_FROM@@3QEBDEB
?KANP_AFTERRESET@@3QEBDEB
?KANP_SETTINGS_ADD_DIRECTORY@@3QEBDEB
?KANP_SETTINGS_ADD_PROGRAM@@3QEBDEB
?KANP_SETTINGS_EXCEPTIONS_DESCRIPTION@@3QEBDEB
?KILL_ACTIVE_PROCESS@@3QEBDEB
?L3_CHOICE_SMENA_BUT_CLOSE@@3QEBDEB
?L3_CHOICE_SMENA_BUT_CREATE@@3QEBDEB
?L3_CHOICE_SMENA_EXIT@@3QEBDEB
?L3_CHOICE_SMENA_RUN@@3QEBDEB
?L3_CHOICE_SMENA_SOZDANA@@3QEBDEB
?L3_CHOICE_SMENA_STATUS_ENTERNAME@@3QEBDEB
?L3_CHOICE_SMENA_STATUS_PRESSCREATE@@3QEBDEB
?L3_SMENA_SURECLOSE@@3QEBDEB
?LABEL_ACTIONS@@3QEBDEB
?LABEL_ACTION_PERSONS_CLEAR_ALL_SPENT_SUM@@3QEBDEB
?LABEL_ALLOW_CROSS_BOUNDARY_PRICE_USAGE@@3QEBDEB
?LABEL_BLOCK_MIN_DURATION@@3QEBDEB
?LABEL_CHK_DENY_SHARE_BALANCE_MINUTES@@3QEBDEB
?LABEL_CLAN@@3QEBDEB
?LABEL_CLEAR_USERNAME_IN_LOGIN_DIALOG@@3QEBDEB
?LABEL_DELAY_CLIENT_COMPUTER_CLEANUP@@3QEBDEB
?LABEL_DENY_PAY_SERVICES_FROM_DEPOSIT@@3QEBDEB
?LABEL_DENY_USE_THIS_TARIFF@@3QEBDEB
?LABEL_ENABLE_EXTENDED_LOGGING@@3QEBDEB
?LABEL_GROUP_UNTIL@@3QEBDEB
?LABEL_INDICATOR_STATE_BUSY@@3QEBDEB
?LABEL_INDICATOR_STATE_BUSY_TIMER@@3QEBDEB
?LABEL_ITEM_QUANTITY_ADD@@3QEBDEB
?LABEL_ITEM_QUANTITY_CURRENT@@3QEBDEB
?LABEL_ITEM_QUANTITY_REMOVE@@3QEBDEB
?LABEL_ITEM_QUANTITY_SORT@@3QEBDEB
?LABEL_LOG3_PERSONS_CLEAR_ALL_SPENT_SUM@@3QEBDEB
?LABEL_LOG3_PERSONS_SHARE_DEPOSIT@@3QEBDEB
?LABEL_LOG3_PERSONS_SHARE_MINUTES@@3QEBDEB
?LABEL_ORDER_LIST@@3QEBDEB
?LABEL_PACKET_NAME@@3QEBDEB
?LABEL_PRICE_FOR_BLOCK@@3QEBDEB
?LABEL_PRICE_FOR_PACKET@@3QEBDEB
?LABEL_PRICE_PER_HOUR@@3QEBDEB
?LABEL_PRICE_PER_HOUR_DAY_TYPE@@3QEBDEB
?LABEL_PRICE_PER_HOUR_HOUR_FROM@@3QEBDEB
?LABEL_PRICE_PER_HOUR_HOUR_TO@@3QEBDEB
?LABEL_TELEGRAM_BOT@@3QEBDEB
?LABEL_TELEGRAM_BOT_ENABLE@@3QEBDEB
?LABEL_TELEGRAM_BOT_TOKEN@@3QEBDEB
?LABEL_TELEGRAM_NEWS@@3QEBDEB
?LABEL_TELEGRAM_START_MENU@@3QEBDEB
?LABEL_TELEGRAM_WELCOME@@3QEBDEB
?LABEL_WARNING_PERSONS_CLEAR_ALL_SPENT_SUM@@3QEBDEB
?LANGUAGE_CHARSET@@3EB
?LANGUAGE_CODE@@3QEBDEB
?LICENSE_EXPIRATION_WARNING@@3QEBDEB
?LICENSE_EXPIRED@@3QEBDEB
?LICINFO_ADDRESS@@3QEBDEB
?LICINFO_BUY_DATE@@3QEBDEB
?LICINFO_CITY@@3QEBDEB
?LICINFO_COMPANY@@3QEBDEB
?LICINFO_COUNTRY@@3QEBDEB
?LICINFO_EMAIL@@3QEBDEB
?LICINFO_FIO@@3QEBDEB
?LICINFO_INDEX@@3QEBDEB
?LICINFO_PHONE@@3QEBDEB
?LICINFO_TITLE@@3QEBDEB
?LINK_DISCONNECT_WITH_COMPUTER@@3QEBDEB
?LIST_OF_MODULES_OF_PROCESS@@3QEBDEB
?LOCK_CLIENT_AFTER_N_MINUTES@@3QEBDEB
?LOCK_CLIENT_GE_TWO_MINUTES@@3QEBDEB
?LOCK_WINDOW_POSITION@@3QEBDEB
?LOCK_WINDOW_POSITION_CENTER@@3QEBDEB
?LOCK_WINDOW_POSITION_TOP_LEFT@@3QEBDEB
?LOG3VIEW_DELETE_OLD_SESSIONS@@3QEBDEB
?LOG3VIEW_RESTART_WAIT@@3QEBDEB
?LOG3_ADDITIONAL_SERVICE_UNBLOCK_USB@@3QEBDEB
?LOG3_BUTTON_EXPORT@@3QEBDEB
?LOG3_BUTTON_PRINT@@3QEBDEB
?LOG3_BUTTON_SERVICE@@3QEBDEB
?LOG3_BUTTON_SHOW_REFRESH@@3QEBDEB
?LOG3_BUT_MAIN_REPORT@@3QEBDEB
?LOG3_CHOICE_SMENA_BUTTON_CANCEL@@3QEBDEB
?LOG3_CHOICE_SMENA_BUTTON_OK@@3QEBDEB
?LOG3_CHOICE_SMENA_MAIN_WINDOW@@3QEBDEB
?LOG3_CHOICE_SMENA_RECORD_ERROR@@3QEBDEB
?LOG3_COMBO_COMPUTER_ALL@@3QEBDEB
?LOG3_COMBO_COMPUTER_N@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_5MIN@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_GRUB@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_IZOP@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_LIFL@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_MAIN@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_PRIC@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_PROC@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_SECU@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_STAT@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_USLU@@3QEBDEB
?LOG3_COMBO_TIMEMODE_ALLTIME@@3QEBDEB
?LOG3_COMBO_TIMEMODE_SELTIME@@3QEBDEB

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CLIENT/offer.dll
.dll windows:6 windows x64 arch:x64

6e094d01ab7b203a649dd050511b13f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Sources\VCPP\cz_2022\ReleaseDemo\x64\offer.pdb

Imports

kernel32

CloseHandle
OpenMutexA
WriteConsoleW
CreateFileW
OutputDebugStringW
ReadConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
GetModuleFileNameW
GetCurrentThread
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetTempPathW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
GetStdHandle
GetFileType
SetConsoleCtrlHandler
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
ReadFile
RtlUnwind

user32

SendMessageA
CallNextHookEx

Exports

Exports

CBTProc
KeyboardProc
KeyboardProcNT
SetNotificationHWND

Sections

.text
Size: 368KB - Virtual size: 367KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Shared
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CLIENT/openvr_api.dll
.dll windows:6 windows x64 arch:x64

f7caf48a1429469e00e82f3503900b99

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2013 12:00

Not After

15-01-2038 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

07-10-2021 00:00

Not After

09-10-2024 23:59

Subject

CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

5a:f5:4c:83:37:ab:0f:d6:37:19:39:b1:9a:89:23:71:39:16:ea:71
Signer

Actual PE Digest

5a:f5:4c:83:37:ab:0f:d6:37:19:39:b1:9a:89:23:71:39:16:ea:71

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

c:\buildslave\steamvr_rel_hotfix_win64\build\src\openvr_api\Retailopenvr_api\win64\2017\openvr_api.pdb

Imports

kernel32

FindClose
GetModuleFileNameW
WideCharToMultiByte
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryExA
MultiByteToWideChar
GetACP
SetEnvironmentVariableA
GetEnvironmentVariableA
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
TryEnterCriticalSection
SetLastError
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
LoadLibraryW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
LoadLibraryExW
GetCurrentProcess
TerminateProcess
ReadFile
GetDriveTypeW
GetFullPathNameW
GetCurrentDirectoryW
CreateFileW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetCurrentThread
HeapFree
GetStdHandle
GetConsoleMode
ReadConsoleW
SetFilePointerEx
WriteFile
GetConsoleCP
HeapAlloc
SetStdHandle
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
HeapReAlloc
GetTimeZoneInformation
FlushFileBuffers
HeapSize
SetEndOfFile
WriteConsoleW
Sleep
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
DuplicateHandle
ReleaseSemaphore
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
CreateTimerQueue

shell32

SHGetFolderPathW

Exports

Exports

LiquidVR
VRControlPanel
VRHeadsetView
VRPaths
VRVirtualDisplay
VR_GetGenericInterface
VR_GetInitToken
VR_GetRuntimePath
VR_GetStringForHmdError
VR_GetVRInitErrorAsEnglishDescription
VR_GetVRInitErrorAsSymbol
VR_InitInternal
VR_InitInternal2
VR_IsHmdPresent
VR_IsInterfaceVersionValid
VR_IsRuntimeInstalled
VR_RuntimePath
VR_ShutdownInternal

Sections

.text
Size: 531KB - Virtual size: 530KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CLIENT/vrblock.jpg
.jpg
ComputerZal.chm
.chm
CrashRpt1403.dll
.dll windows:6 windows x64 arch:x64

9ba6c1e2fbd0aa8871d7c42ffbe04a12

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Sources\VCPP\CrashRpt143\bin\x64\CrashRpt1403.pdb

Imports

rpcrt4

UuidToStringA
RpcStringFreeA

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

shell32

SHFileOperationW
SHGetSpecialFolderPathW

gdi32

SetLayout

kernel32

WriteFile
FlushFileBuffers
SetStdHandle
GetConsoleOutputCP
GetConsoleMode
GetTimeZoneInformation
RtlCaptureContext
CreateFileW
GetFileAttributesW
DebugBreak
OutputDebugStringW
CloseHandle
SetUnhandledExceptionFilter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
WaitForSingleObject
CreateEventW
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateThread
GetCurrentThreadId
CreateProcessW
FreeLibrary
GetProcAddress
LoadLibraryW
lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
GetLastError
InitializeCriticalSectionAndSpinCount
GetSystemInfo
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
CreateDirectoryW
GetFileAttributesExW
GetTempFileNameW
GetTempPathW
GetModuleFileNameW
GetModuleHandleW
GlobalAlloc
GlobalFree
FormatMessageW
GetPrivateProfileStringW
WritePrivateProfileStringW
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
HeapSize
SetFilePointerEx
GetFileSizeEx
GetStringTypeW
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
HeapReAlloc
RaiseException
WriteConsoleW
FindNextFileW
FindFirstFileExW
IsDebuggerPresent
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
RtlUnwindEx
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RtlUnwind
SetConsoleCtrlHandler
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
FindClose

user32

GetWindowLongW
MapWindowPoints
GetWindowRect
GetClientRect
SetWindowLongW
MoveWindow
MessageBoxW
GetWindow
CharNextW
LoadStringW
GetDC
GetActiveWindow

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

ole32

CoCreateGuid

Exports

Exports

crAddFile2A
crAddFile2W
crAddPropertyA
crAddPropertyW
crAddRegKeyA
crAddRegKeyW
crAddScreenshot
crAddScreenshot2
crAddVideo
crEmulateCrash
crExceptionFilter
crGenerateErrorReport
crGetLastErrorMsgA
crGetLastErrorMsgW
crInstallA
crInstallToCurrentThread2
crInstallW
crSetCrashCallbackA
crSetCrashCallbackW
crUninstall
crUninstallFromCurrentThread

Sections

.text
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CrashSender1403.exe
.exe windows:6 windows x64 arch:x64

3219e37c631ec4cdb43db39c410ad405

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Sources\VCPP\CrashRpt143\bin\x64\CrashSender1403.pdb

Imports

psapi

GetProcessMemoryInfo

ws2_32

htonl
connect
closesocket
inet_ntoa
htons
inet_addr
ntohs
WSAGetLastError
WSASetLastError
WSACleanup
WSAStartup
getservbyname
getservbyport
gethostbyname
gethostbyaddr
socket
send
recv

dnsapi

DnsFree
DnsQuery_W

wininet

InternetCloseHandle
InternetConnectW
InternetReadFile
InternetWriteFile
InternetQueryOptionW
InternetSetOptionW
HttpOpenRequestW
HttpQueryInfoW
HttpEndRequestW
HttpSendRequestExW
InternetOpenW

rpcrt4

UuidToStringA
RpcStringFreeA

gdi32

CreateDCW
SetViewportOrgEx
TextOutW
CreateHalftonePalette
GetDIBColorTable
CreateDIBSection
SetStretchBltMode
StretchBlt
SetDIBits
SelectPalette
SelectClipRgn
GetDIBits
CreateRectRgn
SetLayout
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
CreatePen
DeleteDC
DeleteObject
GetStockObject
SelectObject
SetBkMode
SetTextColor
GetObjectW
RealizePalette
CreateSolidBrush
SetBkColor
BitBlt
CreateFontW
CreatePalette
Polygon

shell32

CommandLineToArgvW
SHFileOperationW
ExtractIconW
ShellExecuteW
SHGetSpecialFolderPathW
SHGetFileInfoW
Shell_NotifyIconW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetCurrentThread
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapSize
GetTimeFormatW
GetModuleHandleExW
ExitProcess
PeekNamedPipe
GetFileType
GetDriveTypeW
TlsFree
TlsSetValue
TlsGetValue
HeapReAlloc
SetCurrentDirectoryW
GetStdHandle
TlsAlloc
RtlUnwind
InterlockedFlushSList
RtlUnwindEx
CloseHandle
GetSystemInfo
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
lstrlenW
CreateDirectoryW
GetFileAttributesW
GetFileAttributesExW
GetTempFileNameW
GetTempPathW
DebugBreak
OutputDebugStringW
GetLastError
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
SetConsoleCtrlHandler
SetStdHandle
GlobalFree
FormatMessageW
lstrlenA
GetPrivateProfileStringW
WritePrivateProfileStringW
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
CreateEventW
WideCharToMultiByte
CreateFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileSizeEx
GetFullPathNameW
SetLastError
GetProcessTimes
OpenProcess
GetSystemTime
ReadProcessMemory
CopyFileW
FileTimeToSystemTime
GetCommandLineW
DecodePointer
RaiseException
GetCurrentThreadId
LoadLibraryExW
LoadResource
SizeofResource
FindResourceW
MulDiv
lstrcmpW
lstrcmpiW
CompareStringW
GetVersionExW
GetFileInformationByHandle
ReadFile
WriteFile
CreateMutexW
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetExitCodeProcess
CreateThread
CreateProcessW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
InitializeCriticalSection
Sleep
GlobalUnlock
GlobalLock
GetSystemDirectoryA
LoadLibraryA
GetTimeZoneInformation
FindFirstFileExW
RtlPcToFileHeader
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
GetProcessHeap
HeapFree
HeapAlloc
EncodePointer
IsDebuggerPresent
IsValidCodePage
GetCurrentDirectoryW
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
SetFilePointerEx
GlobalAlloc
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
FlushFileBuffers
SetEndOfFile
LoadLibraryW
WriteConsoleW

user32

EndDialog
GetActiveWindow
LoadMenuW
DestroyMenu
EnableMenuItem
GetSubMenu
DeleteMenu
TrackPopupMenu
SetMenuItemInfoW
SetWindowTextW
CheckMenuRadioItem
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoW
PostQuitMessage
FlashWindow
DialogBoxParamW
EnableWindow
GetMenu
DrawIcon
DrawTextExW
AdjustWindowRectEx
MessageBoxW
CopyRect
LoadIconW
GetIconInfo
IsDialogMessageW
PostMessageW
SetProcessDefaultLayout
CharUpperW
SetTimer
KillTimer
DrawTextExA
SetScrollInfo
GetScrollInfo
AnimateWindow
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
GetSystemMetrics
IntersectRect
EnumWindows
GetWindowThreadProcessId
EnumDisplayMonitors
GetCursorInfo
SystemParametersInfoW
LoadImageW
DrawFocusRect
GetSysColorBrush
GetSysColor
ScreenToClient
GetCursorPos
SetCursor
GetWindowTextLengthW
GetWindowTextW
RedrawWindow
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
DestroyIcon
LoadCursorW
GetClassNameW
GetParent
GetDesktopWindow
SetWindowLongPtrW
GetWindowLongPtrW
PtInRect
UpdateWindow
DrawTextW
IsWindowEnabled
ReleaseCapture
SetCapture
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
CreateDialogParamW
IsWindowVisible
SetWindowPos
DestroyWindow
IsWindow
CreateWindowExW
UnregisterClassW
CallWindowProcW
DefWindowProcW
SendMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
GetGuiResources
GetWindow
SetWindowLongW
GetWindowLongW
MapWindowPoints
GetWindowRect
GetClientRect
GetDC
CharNextW
MoveWindow
LoadStringW
OffsetRect
FillRect
SetRectEmpty
ShowWindow

advapi32

RegCloseKey
RegEnumValueW
AdjustTokenPrivileges
OpenProcessToken
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
LookupPrivilegeValueW

ole32

CoTaskMemFree
CoCreateGuid
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize

oleaut32

VarUI4FromStr
VarDecFromStr
VarDecCmp
SysFreeString
VarDateFromStr
VarR8FromStr
VarI4FromStr

comctl32

_TrackMouseEvent
ImageList_Create
ImageList_ReplaceIcon
ImageList_Remove
InitCommonControlsEx

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LOG3View.exe
.exe windows:6 windows x64 arch:x64

e3efba3348d4aef67a4aad69b90c9a10

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Sources\VCPP\cz_2022\ReleaseDemo\x64\LOG3View.pdb

Imports

language

?LOG3_COMBO_REPORT_TYPE_USLU@@3QEBDEB
?DU_LOG3_ITOGO@@3QEBDEB
?DU_LOG3_USLUGI@@3QEBDEB
?LOG3_ERROR_CLEAN_BASE_TOTALLY_CZ_RUNED@@3QEBDEB
?LOG3_WARNING_CLEAN_BASE_TOTALLY@@3QEBDEB
?LOG3_REPORT_SECU_VSEGO_NA_NASTR@@3QEBDEB
?LOG3_REPORT_SECU_SPISOK_VR_NAS@@3QEBDEB
?LOG3_REPORT_SECU_SPISOK_SKIDOK@@3QEBDEB
?LOG3_REPORT_PRIC_L2_PUSTO@@3QEBDEB
?LOG3_REPORT_PRIC_L2_OBJ_COMP@@3QEBDEB
?LOG3_REPORT_PRIC_L1_PUSTO@@3QEBDEB
?LOG3_REPORT_PRIC_L1_OBJ_TIME@@3QEBDEB
?LOG3_REPORT_PRIC_Z_NASTROIKA@@3QEBDEB
?LOG3_REPORT_PRIC_Z_SKIDKI@@3QEBDEB
?LOG3_REPORT_PRIC_Z_OBJECT@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_PRIC@@3QEBDEB
?LOG3_REPORT_IZOP_Z_COMMENT@@3QEBDEB
?LOG3_REPORT_IZOP_Z_COMPNUM@@3QEBDEB
?LOG3_REPORT_IZOP_Z_TS@@3QEBDEB
?LOG3_REPORT_IZOP_Z_OPSTART@@3QEBDEB
?LOG3_REPORT_IZOP_Z_TIME@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_IZOP@@3QEBDEB
?LOG3_REPORT_5MIN_Z_KOL@@3QEBDEB
?LOG3_REPORT_5MIN_Z_TIMEEND@@3QEBDEB
?LOG3_REPORT_5MIN_Z_TIMEBEGIN@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_5MIN@@3QEBDEB
?LOG3_GRUB_TIMERSTART_V_TIMERMODE@@3QEBDEB
?LOG3_GRUB_CHANGESMADE_V_TIMERMODE@@3QEBDEB
?LOG3_GRUB_ANULATE_V_TIMERMODE@@3QEBDEB
?LOG3_GRUB_VOZVRAT_V_TIMERMODE@@3QEBDEB
?LOG3_GRUB_PERESADKA_V_TIMERMODE@@3QEBDEB
?LOG3_GRUB_RESET_V_TIMERMODE@@3QEBDEB
?LOG3_GRUB_PLUS_V_TIMEMODE@@3QEBDEB
?LOG3_GRUB_TIMERANULATE_POSLE_VOZVRATA@@3QEBDEB
?LOG3_GRUB_CHANGESTIMER_POSLE_VOZVRATA@@3QEBDEB
?LOG3_PROCUSED_COL_COMPNUM@@3QEBDEB
?LOG3_PROCUSED_COL_PROCESS@@3QEBDEB
?LOG3_PROCUSED_TYPE_ALL@@3QEBDEB
?LOG3_PROCUSED_TYPE_POPULARITY_RATING@@3QEBDEB
?LOG3_PROCUSED_COL_TOTAL_TIME@@3QEBDEB
?LOG3_STAT_TYPE_SPECIAL_CLIENTS@@3QEBDEB
?ID_CLIENT@@3QEBDEB
?NO_AVAILABLE_REPORTS@@3QEBDEB
?T_TAKEN@@3QEBDEB
?FORMAT_LOG3_GAMES_TO_INTERNET@@3QEBDEB
?TEMP_TAG_GAMES@@3QEBDEB
?TEMP_TAG_INTERNET@@3QEBDEB
?FORMAT_LOG3_REPORT_SECU_SPISOK_PER_HOUR@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TIMEBACK@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_LTO@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_CON_YES@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_CON_NO@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PLUS_FREE_PO_PRICHINE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TIMERSTART_FREE_PO_PRICHINE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PLUS_SO_SKIDKOY@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PLUS_NACHALO_OP@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PLUS_OBICHNO@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TIMERSTART_OBICHNO@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PLUS_TARIF@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_RESET@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_ZAMETKA@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PERESADKA_NA@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PLUS_COMPNUM@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TIMERSTOP_FREE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TIMERSTOP_OBICHNO@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_VOZVRATOSTATKA@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PRICHINA@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_ANULATE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_CHANGESMADE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TIMERANULATE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_COMPUTERZAL_EXIT@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_RESTART_ONE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_SHUTDOWN_ONE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_KAP@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_MESS@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_USLUGA@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_IPF_INFO_USING@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_IPF_INFO_NOTUSING@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_VOZVRATOSTATKA_TRANSFER_TO@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PERESADKA_S_TO_FREE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PERESADKA_SWAP_SEATS@@3QEBDEB
?FORMAT_LOG3_REPORT_SECU_SPISOK_BLOCK@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_FINE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_SESSION_CREATED@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_SESSION_CLOSED@@3QEBDEB
?PERSONS_DB_LOG3_PERSON_ID@@3QEBDEB
?DESCR_SECURITY_PROBLEM_PDB_LENGTH_CHANGED@@3QEBDEB
?DESCR_SECURITY_PROBLEM_PDB_CORRUPTED_RECORD@@3QEBDEB
?DESCR_PDB_ADD_USER@@3QEBDEB
?DESCR_PDB_CHANGE_INFO@@3QEBDEB
?DESCR_PDB_DELETE_USER@@3QEBDEB
?DESCR_SECURITY_PROBLEM_ID_QUERY_ERROR_MAYBE_USER_ABSENT@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TRAFCTRL_PAY@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_SECURITY_NOTE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_SECURITY_NOTE_ALL@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PRNCTRL_PRINT@@3QEBDEB
?PRNCTRL_BW@@3QEBDEB
?PRNCTRL_COLOR@@3QEBDEB
?PRNCTRL_FORMAT_UNKNOWN@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_USLUGA_0_COMPUTER@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TIMERSTART_OBICHNO_BALANCE@@3QEBDEB
?LOG3_REPORT_USLU_Z_NAZV@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PLUS_OBICHNO_BALANCE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PAUSE_SET@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PAUSE_RESET@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_MOVEMINUTES_FROM@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_MOVEMINUTES_TO@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TAKE_CASH@@3QEBDEB
?VERNULI_N_MIN@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_LOGOFF_ONE@@3QEBDEB
?ST_AP_BLOCK@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PLUS_PACKET@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TIMERSTOP_DEPOSIT_BALANCE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PLUS_DEPOSIT_MIN@@3QEBDEB
?T_BLOCK_SPACE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PLUS_PACKET_DEPOSIT@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_USLUGA_FROM_DEPOSIT@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_ZAMETKA_0_COMP@@3QEBDEB
?DB_NAME_RESERVATION@@3QEBDEB
?DB_NAME_SETTINGS@@3QEBDEB
?T_MIN@@3QEBDEB
?BALANCE_MONEY_DEPOSIT@@3QEBDEB
?DEF_CATEGORY_REGULAR_NAME@@3QEBDEB
?DEF_CATEGORY_VIP_NAME@@3QEBDEB
?DEF_CATEGORY_PS4_NAME@@3QEBDEB
?TITLE_TYPE_DAY_ANY@@3QEBDEB
?LOG3_GRUB_TIMERSTOP_POSLE_VOZVRATA@@3QEBDEB
?LOG3_GRUB_CHANGESMADE_POSLE_VOZVRATA@@3QEBDEB
?LOG3_GRUB_ANULATE_POSLE_VOZVRATA@@3QEBDEB
?LOG3_GRUB_PERESADKA_POSLE_VOZVRATA@@3QEBDEB
?LOG3_GRUB_RESET_POSLE_VOZVRATA@@3QEBDEB
?LOG3_GRUB_TIMERSTART_POSLE_PERESADKI@@3QEBDEB
?LOG3_GRUB_TIMERANULATE_POSLE_PERESADKI@@3QEBDEB
?LOG3_GRUB_CHANGESTIMER_POSLE_PERESADKI@@3QEBDEB
?LOG3_GRUB_TIMERSTOP_POSLE_PERESADKI@@3QEBDEB
?LOG3_GRUB_CHANGESMADE_POSLE_PERESADKI@@3QEBDEB
?LOG3_GRUB_ANULATE_POSLE_PERESADKI@@3QEBDEB
?LOG3_GRUB_VOZVRAT_POSLE_PERESADKI@@3QEBDEB
?LOG3_GRUB_SBROS_POSLE_PERESADKI@@3QEBDEB
?LOG3_GRUB_TIMERANULATE_NA_FREE@@3QEBDEB
?LOG3_GRUB_CHANGESTIMER_NA_FREE@@3QEBDEB
?LOG3_GRUB_TIMERSTOP_NA_FREE@@3QEBDEB
?LOG3_GRUB_CHANGESMADE_NA_FREE@@3QEBDEB
?LOG3_GRUB_ANULATE_NA_FREE@@3QEBDEB
?LOG3_GRUB_VOZVRATOSTATKA_S_FREE@@3QEBDEB
?LOG3_GRUB_PERESADKA_S_FREE@@3QEBDEB
?LOG3_GRUB_RESET_NA_FREE@@3QEBDEB
?LOG3_GRUB_TIMERANULATE_NA_ZANYATOM@@3QEBDEB
?LOG3_GRUB_TIMERCHANGE_NA_ZANYATOM@@3QEBDEB
?LOG3_GRUB_TIMERSTOP_NA_ZANYATOM@@3QEBDEB
?LOG3_GRUB_TIMERMODE_NA_ZANYATOM@@3QEBDEB
?LOG3_GRUB_ERROR_PERESADKA_NA_ZANYATIY@@3QEBDEB
?LOG3_REPORT_GRUB_Z_DESCRIPTION@@3QEBDEB
?LOG3_REPORT_GRUB_Z_DATETIME@@3QEBDEB
?LOG3_REPORT_GRUB_Z_ID@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_GRUB@@3QEBDEB
?LOG3_REPORT_SECU_ERROR_GRUB@@3QEBDEB
?LOG3_REPORT_SECU_ERROR_TIMEBACK_HIDDEN@@3QEBDEB
?LOG3_REPORT_SECU_ERROR_TIMEBACK@@3QEBDEB
?LOG3_REPORT_SECU_ERROR_5MIN@@3QEBDEB
?LOG3_REPORT_SECU_Z_DESCR@@3QEBDEB
?LOG3_REPORT_SECU_Z_PARAM@@3QEBDEB
?LOG3_REPORT_MAIN_L_PUSTO@@3QEBDEB
?LOG3_REPORT_MAIN_Z2_MONEY@@3QEBDEB
?LOG3_REPORT_MAIN_Z2_TIME@@3QEBDEB
?LOG3_REPORT_MAIN_Z_FREE@@3QEBDEB
?LOG3_REPORT_MAIN_Z_NOCONN@@3QEBDEB
?LOG3_REPORT_MAIN_Z_N@@3QEBDEB
?TITLE_TYPE_DAY_WORKING@@3QEBDEB
?TITLE_TYPE_DAY_NON_WORKING@@3QEBDEB
?FORMAT_LOG3_REPORT_SECU_SPISOK_PACKET@@3QEBDEB
?HEADER_PRICES_FOR_HOUR@@3QEBDEB
?LOG3_BUTTON_SERVICE@@3QEBDEB
?LOG3_PRINT_ERROR_LISTCLEAN@@3QEBDEB
?LOG3_REPORT_STAT_T_ZAPIS_ISPORCHENA@@3QEBDEB
?LOG3_REPORT_STAT_Z_DESCRIPTION@@3QEBDEB
?HEADER_PRICES_FOR_BLOCK@@3QEBDEB
?HEADER_PRICES_FOR_PACKET@@3QEBDEB
?REPORT_ADDITIONAL_SERVICES_CMB_ALL@@3QEBDEB
?REPORT_ADDITIONAL_SERVICES_CMB_SERVICE@@3QEBDEB
?REPORT_ADDITIONAL_SERVICES_CMB_DEPOSIT@@3QEBDEB
?REPORT_ADDITIONAL_SERVICES_CMB_CARD@@3QEBDEB
?REPORT_ADDITIONAL_SERVICES_CMB_USB@@3QEBDEB
?LOG3_COMBO_TIMEMODE_TIME_INTERVAL_BETWEEN_DATES@@3QEBDEB
?RBACKUP_MAIN@@3QEBDEB
?RBACKUP_SAVE@@3QEBDEB
?RBACKUP_RESTORE@@3QEBDEB
?FILTER_LOG3_ARCHIVE@@3QEBDEB
?ERROR_CZ_RUN_PLEASE_EXIT@@3QEBDEB
?WARNING_RBACKUP_RESTORE@@3QEBDEB
?ERROR_RBACKUP_SAVE@@3QEBDEB
?ERROR_RBACKUP_RESTORE@@3QEBDEB
?SESTODEL_SELECT_SESSIONS@@3QEBDEB
?SESTODEL_SURE_WANT@@3QEBDEB
?LOG3_SERVICE_BUT_CLEANBASE_UKOROTIT@@3QEBDEB
?LOG3_SERVICE_TRUNCATE_ZAPISEY@@3QEBDEB
?LOG3_SERVICE_TRUNCATE_UKOR_DO_CHISLA@@3QEBDEB
?LOG3_SERVICE_TRUNCATE_UKOR_DO_DATI@@3QEBDEB
?DB_OPEN_ERROR@@3QEBDEB
?PERSONS_DB_OPEN_ERROR@@3QEBDEB
?UPGRADE_CAN_TAKE_TIME@@3QEBDEB
?PRNCTRL_OPEN_ERROR@@3QEBDEB
?PROCESS_DB_OPEN_ERROR@@3QEBDEB
?LANGUAGE_CHARSET@@3EB
?LOG3_REPORT_USLU_Z_KOLVO@@3QEBDEB
?LOG3_REPORT_USLU_Z_SUMM@@3QEBDEB
?LOG3_REPORT_USLU_ITOGO@@3QEBDEB
?LOG3_BUTTON_EXPORT@@3QEBDEB
?FDF_L3GFNP_TEXT@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_LIFL@@3QEBDEB
?LOG3_REPORT_LIFL_Z_COMPUTER@@3QEBDEB
?LOG3_REPORT_LIFL_Z_DESCRIPTION@@3QEBDEB
?LOG3_REPORT_LIFL_NOFILTER@@3QEBDEB
?LOG3_REPORT_SECU_ERROR_BADRECORDS_CURRENT@@3QEBDEB
?LOG3_REPORT_SECU_ERROR_ID_CURRENT@@3QEBDEB
?LOG3_REPORT_SECU_ERROR_ID_LOST_CURRENT@@3QEBDEB
?SESTODEL_NOSESSIONS_TODEL@@3QEBDEB
?LOG3_STAT_TYPE_FULL@@3QEBDEB
?LOG3_STAT_TYPE_FINANCE@@3QEBDEB
?LOG3_STAT_TYPE_TECHNICAL@@3QEBDEB
?LOG3_STAT_TYPE_FREE_TIME@@3QEBDEB
?LOG3_STAT_TYPE_CONNECTIONS@@3QEBDEB
?LOG3_STAT_TYPE_ZAMETKI@@3QEBDEB
?LOG3VIEW_RESTART_WAIT@@3QEBDEB
?LOG3_STAT_TYPE_SECURITY_NOTE@@3QEBDEB
?LOG3_PROCUSED_COL_TIME@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_PROC@@3QEBDEB
?PRNCTRL_SECURITY@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TIMERSTOP_OBICHNO_BALANCE@@3QEBDEB
?PRNCTRL_COLOR2@@3QEBDEB
?LOG3_REPORT_STAT_Z_DATETIME@@3QEBDEB
?LOG3_REPORT_STAT_Z_ID@@3QEBDEB
?LOG3_BUTTON_PRINT@@3QEBDEB
?LOG3_BUTTON_SHOW_REFRESH@@3QEBDEB
?LOG3_COMBO_COMPUTER_N@@3QEBDEB
?LOG3_COMBO_COMPUTER_ALL@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_SECU@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_MAIN@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_5MIN_METKA@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PERESADKA_TRANSFER_TO@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_STAT@@3QEBDEB
?LOG3_COMBO_TIMEMODE_SELTIME@@3QEBDEB
?LOG3_COMBO_TIMEMODE_ALLTIME@@3QEBDEB
?LOG3_COMBO_TIMEMODE_ZA_DEN@@3QEBDEB
?LOG3_COMBO_TIMEMODE_VIBSMENA@@3QEBDEB
?LOG3_COMBO_TIMEMODE_TEKSMENA@@3QEBDEB
?LOG3_MAIN_WINDOW_TEXT@@3QEBDEB
?ERR_LOG3_START@@3QEBDEB
?WARNING_V@@3QEBDEB
?WIN_TITLE@@3QEBDEB
?SETUP_SERVER_PROGRAM_BEFORE_REVIEW_REPORTS@@3QEBDEB
?ACCESS_DENIED@@3QEBDEB
?LOG3_SMENA_CHOICE_CANT_CHOICE@@3QEBDEB
?LOG3_CHOICE_SMENA_RECORD_ERROR@@3QEBDEB
?LOG3_CHOICE_SMENA_BUTTON_CANCEL@@3QEBDEB
?LOG3_CHOICE_SMENA_BUTTON_OK@@3QEBDEB
?LOG3_CHOICE_SMENA_MAIN_WINDOW@@3QEBDEB
?OK_V@@3QEBDEB
?WND_PATH_TITLE@@3QEBDEB
?LOG3VIEW_DELETE_OLD_SESSIONS@@3QEBDEB
?LOG3_SERVICE_BUT_CLEANBASE_COMPLETELY@@3QEBDEB
?LOG3_SERVICE_BUT_CLEANBASE@@3QEBDEB
?CANCEL_V@@3QEBDEB
?VALUTA@@3QEBDEB
?ERR_MANDATORY_USER_PROFILE@@3QEBDEB
?ERROR_V@@3QEBDEB
?DEF_PRICE_PACKET_NAME_NIGHT@@3QEBDEB
?DEF_PRICE_PACKET_NAME_DAY@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_COMPUTERZAL_RUN@@3QEBDEB

kernel32

OutputDebugStringW
RaiseException
CreateFileMappingW
LockFileEx
HeapCompact
GetSystemInfo
DeleteFileW
WaitForSingleObjectEx
FlushViewOfFile
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsValidCodePage
CreateDirectoryW
GetStringTypeW
GetFileAttributesExW
FormatMessageW
HeapValidate
LocalAlloc
GetCurrentDirectoryW
GetFileAttributesW
CreateFileW
CreateMutexW
GetTempPathW
UnlockFileEx
GetDiskFreeSpaceW
GetFullPathNameW
HeapCreate
AreFileApisANSI
TryEnterCriticalSection
VirtualLock
VirtualUnlock
MoveFileExW
InitializeSRWLock
ReleaseSRWLockShared
AcquireSRWLockShared
GetStdHandle
GetFileType
VirtualAlloc
VirtualFree
GetEnvironmentVariableW
SwitchToFiber
DeleteFiber
CreateFiberEx
GetSystemDirectoryA
ConvertFiberToThread
ConvertThreadToFiberEx
FindFirstFileW
FindNextFileW
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
RtlPcToFileHeader
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
GetDriveTypeW
PeekNamedPipe
ExitProcess
LoadResource
LockResource
SizeofResource
FindResourceW
WideCharToMultiByte
GetLastError
GetSystemTime
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CreateFileA
GetFileInformationByHandle
GetFileSize
ReadFile
SetFilePointer
WriteFile
CloseHandle
GetLocalTime
GetTickCount
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
FileTimeToSystemTime
SystemTimeToFileTime
GetVersion
GetVersionExA
lstrcmpiA
lstrlenA
FindResourceA
MultiByteToWideChar
GetCPInfo
FindFirstFileA
FindNextFileA
TerminateProcess
OpenProcess
CreateMutexA
Sleep
GetCurrentProcessId
WinExec
DecodePointer
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentDirectoryA
DeleteFileA
FindClose
MoveFileA
GetFileAttributesA
SetFileAttributesA
GetWindowsDirectoryA
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
lstrcpyA
SetLastError
GlobalSize
LocalFree
MulDiv
FormatMessageA
CopyFileA
FlushFileBuffers
GetFullPathNameA
LockFile
SetEndOfFile
UnlockFile
GetVolumeInformationA
OutputDebugStringA
DuplicateHandle
GetCurrentProcess
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
LoadLibraryExA
LoadLibraryW
GetShortPathNameA
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
GetThreadLocale
GetStringTypeExA
WaitForSingleObject
EncodePointer
GetCurrentThreadId
GetSystemDirectoryW
GetModuleHandleW
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomA
GlobalFindAtomA
GlobalGetAtomNameA
CompareStringA
lstrcmpA
SetEvent
CreateEventA
SetThreadPriority
SuspendThread
ResumeThread
GetCurrentThread
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
ReleaseSemaphore
ReleaseMutex
WaitForMultipleObjects
CreateSemaphoreA
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
FindFirstFileExW
LocalReAlloc
GetAtomNameA
FileTimeToLocalFileTime
GetFileAttributesExA
GetFileSizeEx
GetFileTime
LocalFileTimeToFileTime
SetFileTime
SystemTimeToTzSpecificLocalTime
SetErrorMode
GetACP
GlobalFlags
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
VirtualProtect
GetOEMCP
VerSetConditionMask
VerifyVersionInfoA
FindResourceExW
GetTempPathA
GetTickCount64
GetProfileIntA
SearchPathA
GetDiskFreeSpaceA
GetTempFileNameA
ReplaceFileA
GetUserDefaultLCID
LocalLock
LocalUnlock
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
VirtualQuery
SetCurrentDirectoryW
SetFilePointerEx
GetConsoleOutputCP
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetTimeZoneInformation
SetConsoleCtrlHandler
SetStdHandle
QueryPerformanceFrequency
HeapQueryInformation
GetCommandLineW
GetCommandLineA
FreeLibraryAndExitThread
ExitThread
CreateThread

user32

DeferWindowPos
EndDeferWindowPos
IsWindowVisible
GetDlgItem
GetDlgCtrlID
SetFocus
GetKeyState
GetCapture
GetMenu
SetMenu
TrackPopupMenu
TrackPopupMenuEx
SetActiveWindow
GetForegroundWindow
SetForegroundWindow
BeginPaint
EndPaint
ValidateRect
RedrawWindow
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
AdjustWindowRectEx
ScreenToClient
MapWindowPoints
EqualRect
PtInRect
SetWindowLongA
GetWindowLongPtrA
SetWindowLongPtrA
GetClassLongA
GetClassLongPtrA
GetClassNameA
GetTopWindow
GetLastActivePopup
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
LoadIconA
SetScrollInfo
GetScrollInfo
WinHelpA
MonitorFromWindow
GetMonitorInfoA
ShowWindow
MoveWindow
SetDlgItemInt
GetDlgItemInt
SetDlgItemTextA
GetDlgItemTextA
CheckDlgButton
CheckRadioButton
IsDlgButtonChecked
IsWindowEnabled
ScrollWindowEx
SetWindowTextA
IsDialogMessageA
CreateDialogIndirectParamA
EndDialog
GetWindowDC
IntersectRect
GetKeyNameTextA
MapVirtualKeyA
DestroyMenu
GetMessageA
TranslateMessage
GetCursorPos
GetWindowThreadProcessId
PostQuitMessage
ShowOwnedPopups
MsgWaitForMultipleObjectsEx
LoadCursorA
TrackMouseEvent
LoadImageW
RealChildWindowFromPoint
CopyImage
GetAsyncKeyState
MapDialogRect
GetDialogBaseUnits
BringWindowToTop
ReleaseCapture
LoadAcceleratorsA
LoadMenuA
InsertMenuItemA
GetMenuBarInfo
UnpackDDElParam
ReuseDDElParam
GetSystemMenu
IsRectEmpty
SetParent
WaitMessage
SetCapture
LoadCursorW
GetNextDlgGroupItem
MessageBeep
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
GetMenuDefaultItem
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
SetClassLongPtrA
SetWindowRgn
DrawFrameControl
IsZoomed
LoadMenuW
SetWindowPlacement
CopyIcon
UnionRect
GetDCEx
LockWindowUpdate
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
PostThreadMessageA
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CopyAcceleratorTableA
SetMenuDefaultItem
GetDoubleClickTime
RegisterClipboardFormatA
CharUpperBuffA
IsClipboardFormatAvailable
EnumChildWindows
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
SendNotifyMessageA
MonitorFromRect
InSendMessage
WindowFromDC
GetWindowRgn
GetTabbedTextExtentA
GetTabbedTextExtentW
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
SetRectEmpty
SendDlgItemMessageA
CharUpperA
GetMenuStringA
GetFocus
UnregisterClassA
LoadIconW
GetWindow
EnumWindows
GetWindowTextA
GetUpdateRect
UpdateWindow
DrawIcon
TranslateAcceleratorA
DestroyAcceleratorTable
CreateAcceleratorTableA
KillTimer
IsIconic
GetIconInfo
CreateIconIndirect
LoadImageA
DestroyCursor
GetParent
GetWindowLongA
OffsetRect
InflateRect
FrameRect
DrawFocusRect
WindowFromPoint
ClientToScreen
SetCursor
GetWindowRect
GetClientRect
InvalidateRect
DrawStateA
GetActiveWindow
GetNextDlgTabItem
IsMenu
PostMessageA
SystemParametersInfoA
DrawIconEx
DestroyIcon
LoadBitmapW
CopyRect
SetRect
FillRect
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
GetMenuItemInfoA
DeleteMenu
RemoveMenu
ModifyMenuA
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
CreatePopupMenu
CreateMenu
GetMenuState
GetSystemMetrics
DrawEdge
EnableWindow
SendMessageA
GetDesktopWindow
MessageBoxA
BeginDeferWindowPos
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsWindow
CreateWindowExA
SetCursorPos
ClipCursor
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
GetClassInfoExA
SetTimer

gdi32

RestoreDC
PlayMetaFile
OffsetClipRgn
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetObjectType
GetCurrentPositionEx
GetClipRgn
GetClipBox
ExcludeClipRect
CreateRectRgn
CreatePatternBrush
CreateDIBPatternBrushPt
CreateDCA
CopyMetaFileA
MoveToEx
EndPage
StartPage
EndDoc
StartDocA
SetBkMode
LineTo
SetRectRgn
CreateRectRgnIndirect
CreateFontA
SetTextColor
SetBkColor
SelectClipRgn
CreateBitmap
ExtTextOutA
TextOutA
GetObjectA
CreateDIBSection
SetPixel
SelectObject
Rectangle
RectVisible
PtVisible
PatBlt
SetMapperFlags
GetTextExtentPoint32A
GetPixel
GetDeviceCaps
GetBkMode
Escape
Ellipse
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
CreateHatchBrush
CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetNearestPaletteIndex
SaveDC
ExtSelectClipRgn
GetStockObject
SelectPalette
CreatePalette
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetDIBits
StretchBlt
SetDIBColorTable
CreateEllipticRgn
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
EnumFontFamiliesExA
GetRgnBox
OffsetRgn
GetCurrentObject
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
AbortDoc
SetAbortProc
GetROP2
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPointA
GetTextFaceA
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
GetMapMode
DPtoLP
GetBkColor
GetCharWidthA
StretchDIBits
GetTextMetricsA
GetTextExtentPoint32W

msimg32

TransparentBlt
AlphaBlend

comdlg32

CommDlgExtendedError
PrintDlgA

winspool.drv

DocumentPropertiesA
ClosePrinter
GetJobA
OpenPrinterA

advapi32

RegDeleteValueA
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
CryptDeriveKey
RegSetValueExA
CryptDestroyKey
CryptEnumProvidersW
CryptSignHashW
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegEnumKeyExA
SetFileSecurityA
GetFileSecurityA
CryptGetHashParam
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExW
RegSetValueA
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptDecrypt
CryptEncrypt

shell32

SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
ExtractIconA
SHAddToRecentDocs
DragFinish
DragQueryFileA
SHGetFileInfoA
SHBrowseForFolderA
SHAppBarMessage
SHGetMalloc
ShellExecuteExA

comctl32

ImageList_GetImageInfo
_TrackMouseEvent
ImageList_GetIconSize
ImageList_GetIcon
ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_Draw
ImageList_AddMasked

shlwapi

PathStripToRootA
PathFindExtensionA
PathFindFileNameA
PathRemoveExtensionA
PathRemoveFileSpecW
StrFormatKBSizeA
PathIsUNCA

uxtheme

GetThemeSysColor
GetWindowTheme
GetCurrentThemeName
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeParentBackground
DrawThemeText
GetThemeColor

ole32

StringFromCLSID
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
CoRegisterClassObject
CoGetClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
OleQueryCreateFromData
OleQueryLinkFromData
CoGetMalloc
OleIsRunning
GetRunningObjectTable
CreateOleAdviseHolder
CreateDataAdviseHolder
OleRun
OleGetIconOfClass
OleSetContainedObject
OleSaveToStream
OleSave
OleLoad
OleCreateFromFile
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleCreate
CreateItemMoniker
CreateGenericComposite
GetHGlobalFromILockBytes
WriteClassStm
StgCreateDocfileOnILockBytes
OleRegEnumVerbs
OleRegGetMiscStatus
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateFileMoniker
CreateILockBytesOnHGlobal
StgIsStorageFile
StgOpenStorageOnILockBytes
StgOpenStorage
StgCreateDocfile
OleLockRunning
OleSetMenuDescriptor
PropVariantCopy
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CreateStreamOnHGlobal
CLSIDFromString
CoDisconnectObject
StringFromGUID2
CoInitializeEx
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc

oleaut32

VariantCopy
SafeArrayPtrOfIndex
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayRedim
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SafeArrayCreate
SafeArrayAllocData
SafeArrayAllocDescriptor
SysReAllocStringLen
SysStringLen
RegisterTypeLi
LoadRegTypeLi
VarBstrFromCy
LoadTypeLi
VarDateFromStr
VariantTimeToSystemTime
SystemTimeToVariantTime
VariantChangeType
VariantClear
VariantInit
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
SysFreeString
VarBstrFromDate
VarBstrFromDec
VarDecFromStr
VarUdateFromDate
SysAllocString
VarCyFromStr

oledlg

ord8

winmm

PlaySoundA

crashrpt1403

ord8
ord24
ord9

ws2_32

WSAStartup
gethostbyname
select
ntohs
WSAGetLastError
getsockname
ioctlsocket
inet_ntoa
inet_addr
htonl
htons
shutdown
gethostbyaddr
getservbyport
getservbyname
WSASetLastError
recv
send
accept
bind
closesocket
connect
listen
setsockopt
socket
WSACleanup
getsockopt

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

bcrypt

BCryptGenRandom

crypt32

CertCloseStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertFindCertificateInStore
CertDuplicateCertificateContext
CertOpenStore
CertEnumCertificatesInStore

Sections

.text
Size: 8.2MB - Virtual size: 8.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 360KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
PassClean.exe
.exe windows:6 windows x64 arch:x64

6d1294ffd04d7409f31689ac85e583eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Sources\VCPP\cz_2022\ReleaseDemo\x64\PassClean.pdb

Imports

language

?DEF_CATEGORY_VIP_NAME@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_RESET@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PLUS_TARIF@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TIMERSTART_OBICHNO@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PLUS_OBICHNO@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PLUS_NACHALO_OP@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PLUS_SO_SKIDKOY@@3QEBDEB
?DEF_CATEGORY_PS4_NAME@@3QEBDEB
?BALANCE_MONEY_DEPOSIT@@3QEBDEB
?T_MIN@@3QEBDEB
?DB_NAME_SETTINGS@@3QEBDEB
?DB_NAME_RESERVATION@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_ZAMETKA_0_COMP@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_USLUGA_FROM_DEPOSIT@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PLUS_PACKET_DEPOSIT@@3QEBDEB
?T_BLOCK_SPACE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PLUS_DEPOSIT_MIN@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TIMERSTOP_DEPOSIT_BALANCE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PLUS_PACKET@@3QEBDEB
?ST_AP_BLOCK@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_LOGOFF_ONE@@3QEBDEB
?VERNULI_N_MIN@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TAKE_CASH@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_MOVEMINUTES_TO@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_MOVEMINUTES_FROM@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PAUSE_RESET@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PAUSE_SET@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PLUS_OBICHNO_BALANCE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TIMERSTOP_OBICHNO_BALANCE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TIMERSTART_OBICHNO_BALANCE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_USLUGA_0_COMPUTER@@3QEBDEB
?PRNCTRL_FORMAT_UNKNOWN@@3QEBDEB
?PRNCTRL_COLOR@@3QEBDEB
?PRNCTRL_BW@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PRNCTRL_PRINT@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_SECURITY_NOTE_ALL@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_SECURITY_NOTE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TRAFCTRL_PAY@@3QEBDEB
?DESCR_SECURITY_PROBLEM_ID_QUERY_ERROR_MAYBE_USER_ABSENT@@3QEBDEB
?DESCR_PDB_DELETE_USER@@3QEBDEB
?DESCR_PDB_CHANGE_INFO@@3QEBDEB
?DESCR_PDB_ADD_USER@@3QEBDEB
?DESCR_SECURITY_PROBLEM_PDB_CORRUPTED_RECORD@@3QEBDEB
?DESCR_SECURITY_PROBLEM_PDB_LENGTH_CHANGED@@3QEBDEB
?PERSONS_DB_LOG3_PERSON_ID@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_SESSION_CLOSED@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_SESSION_CREATED@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_FINE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PERESADKA_TRANSFER_TO@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PERESADKA_SWAP_SEATS@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PERESADKA_S_TO_FREE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_VOZVRATOSTATKA_TRANSFER_TO@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_IPF_INFO_NOTUSING@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_COMPUTERZAL_RUN@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_IPF_INFO_USING@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_USLUGA@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_MESS@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_KAP@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_SHUTDOWN_ONE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_RESTART_ONE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_COMPUTERZAL_EXIT@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TIMERANULATE@@3QEBDEB
?DEF_CATEGORY_REGULAR_NAME@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TIMERSTART_FREE_PO_PRICHINE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PLUS_FREE_PO_PRICHINE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_CON_NO@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_CON_YES@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_LTO@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TIMEBACK@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_5MIN_METKA@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_CHANGESMADE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_ANULATE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PRICHINA@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_VOZVRATOSTATKA@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TIMERSTOP_OBICHNO@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_TIMERSTOP_FREE@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PLUS_COMPNUM@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_PERESADKA_NA@@3QEBDEB
?TITLE_TYPE_DAY_ANY@@3QEBDEB
?LOG3_OPERATION_DESCRIPTION_ZAMETKA@@3QEBDEB
?TITLE_TYPE_DAY_WORKING@@3QEBDEB
?ERR_MANDATORY_USER_PROFILE@@3QEBDEB
?RP_PASSCLEAN@@3QEBDEB
?MSG_SETTINGS_ERR@@3QEBDEB
?PC_PAROL_NA_NASTROIKI_KLIENTA@@3QEBDEB
?ERR_LOG3_START@@3QEBDEB
?PC_CLEANED@@3QEBDEB
?PC_PAROL_NA_VHOD_V_PROGRAMMU@@3QEBDEB
?PROGRAM_FOR_CL_PASS@@3QEBDEB
?CANT_AQUIRE_CONTEXT@@3QEBDEB
?CANT_OPENCREATE_CONFIG@@3QEBDEB
?VALUTA@@3QEBDEB
?PROCESS_DB_OPEN_ERROR@@3QEBDEB
?PRNCTRL_OPEN_ERROR@@3QEBDEB
?UPGRADE_CAN_TAKE_TIME@@3QEBDEB
?PERSONS_DB_OPEN_ERROR@@3QEBDEB
?WARNING_V@@3QEBDEB
?DB_OPEN_ERROR@@3QEBDEB
?ERROR_V@@3QEBDEB
?DEF_PRICE_PACKET_NAME_NIGHT@@3QEBDEB
?DEF_PRICE_PACKET_NAME_DAY@@3QEBDEB
?TITLE_TYPE_DAY_NON_WORKING@@3QEBDEB

kernel32

SuspendThread
ResumeThread
GetCurrentThread
GetVersionExA
FreeLibrary
LoadLibraryExW
GlobalDeleteAtom
lstrcmpA
CompareStringA
GetModuleHandleW
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GlobalAddAtomA
EncodePointer
GetSystemDirectoryW
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GetAtomNameA
GetCurrentProcessId
GetFileAttributesExA
GetFileSizeEx
GetFileTime
LocalFileTimeToFileTime
SetFileTime
SystemTimeToTzSpecificLocalTime
SetErrorMode
GlobalFlags
GetACP
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
lstrcpyA
VirtualProtect
GetOEMCP
GetCPInfo
VerSetConditionMask
VerifyVersionInfoA
FindResourceExW
GetTempPathA
GetTickCount64
GetProfileIntA
SearchPathA
Sleep
GetDiskFreeSpaceA
GetTempFileNameA
ReplaceFileA
GetUserDefaultLCID
LocalLock
LocalUnlock
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
IsDebuggerPresent
SetThreadPriority
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
CreateSemaphoreA
WaitForMultipleObjects
CreateEventA
CreateMutexA
ReleaseMutex
ReleaseSemaphore
GetStringTypeExA
GetThreadLocale
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
lstrcmpiA
GetShortPathNameA
LoadLibraryW
LoadLibraryExA
GetProcAddress
GetModuleHandleExW
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetCurrentProcess
DuplicateHandle
OutputDebugStringA
GetVolumeInformationA
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameA
FlushFileBuffers
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
SetLastError
MultiByteToWideChar
GetCurrentThreadId
WaitForSingleObject
SetEvent
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
DecodePointer
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetTickCount
GetLocalTime
CloseHandle
WriteFile
SetFilePointer
ReadFile
GetFileSize
GetFileInformationByHandle
CreateFileA
GetSystemTime
GetWindowsDirectoryA
SetFileAttributesA
GetFileAttributesA
GetStartupInfoW
OutputDebugStringW
RaiseException
CreateFileMappingW
LockFileEx
SystemTimeToFileTime
FileTimeToSystemTime
MoveFileA
FindResourceA
GetLastError
FindNextFileA
FindFirstFileA
FindClose
DeleteFileA
GetCurrentDirectoryA
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
GetSystemInfo
DeleteFileW
WaitForSingleObjectEx
LoadLibraryA
FlushViewOfFile
GetFileAttributesExW
FormatMessageW
HeapValidate
GetFileAttributesW
CreateFileW
CreateMutexW
GetTempPathW
UnlockFileEx
GetDiskFreeSpaceW
GetFullPathNameW
HeapCreate
AreFileApisANSI
TryEnterCriticalSection
VirtualLock
VirtualUnlock
MoveFileExW
InitializeSRWLock
ReleaseSRWLockShared
AcquireSRWLockShared
GetStdHandle
GetFileType
VirtualAlloc
VirtualFree
GetEnvironmentVariableW
SwitchToFiber
DeleteFiber
CreateFiberEx
GetSystemDirectoryA
ConvertFiberToThread
ConvertThreadToFiberEx
FindFirstFileW
FindNextFileW
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
RtlPcToFileHeader
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
FindFirstFileExW
GetDriveTypeW
PeekNamedPipe
VirtualQuery
CreateThread
ExitThread
FreeLibraryAndExitThread
GetCommandLineA
GetCommandLineW
HeapQueryInformation
QueryPerformanceFrequency
SetStdHandle
ExitProcess
SetConsoleCtrlHandler
GetTimeZoneInformation
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
CreateDirectoryW
GetConsoleOutputCP
SetFilePointerEx
SetCurrentDirectoryW
GetCurrentDirectoryW
GetStringTypeW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
FileTimeToLocalFileTime
HeapCompact

user32

LockWindowUpdate
SetRect
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
PostThreadMessageA
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
UnionRect
FrameRect
CopyIcon
SetCursorPos
GetSystemMenu
LoadMenuW
IsZoomed
DrawFrameControl
DrawEdge
SetParent
SetWindowRgn
SetClassLongPtrA
DrawStateA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
GetKeyNameTextA
MapVirtualKeyA
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
MessageBeep
GetIconInfo
DrawIconEx
IsRectEmpty
DrawFocusRect
GetNextDlgGroupItem
ReuseDDElParam
UnpackDDElParam
GetMenuBarInfo
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
GetMenuDefaultItem
CreatePopupMenu
MapDialogRect
GetAsyncKeyState
GetMenuItemInfoA
DestroyMenu
LoadImageW
TrackMouseEvent
IntersectRect
InflateRect
LoadCursorW
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
DestroyIcon
InvalidateRect
KillTimer
SetTimer
DeleteMenu
SystemParametersInfoA
CopyImage
GetDialogBaseUnits
RealChildWindowFromPoint
LoadCursorA
GetSysColorBrush
IsDialogMessageA
SetWindowTextA
ScrollWindowEx
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
SetMenuDefaultItem
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
GetWindow
GetTopWindow
GetClassNameA
GetClassLongPtrA
GetClassLongA
SetWindowLongPtrA
GetWindowLongPtrA
SetWindowLongA
PtInRect
EqualRect
CopyRect
AdjustWindowRectEx
GetWindowRect
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
UpdateWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
IsChild
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
OffsetRect
SetRectEmpty
SendDlgItemMessageA
FillRect
GetSysColor
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
UnhookWindowsHookEx
SetCursor
ShowOwnedPopups
PostQuitMessage
PostMessageA
CallNextHookEx
SetWindowsHookExA
GetCursorPos
ValidateRect
GetKeyState
IsWindowVisible
PeekMessageA
GetTabbedTextExtentW
GetTabbedTextExtentA
DestroyCursor
GetWindowRgn
WindowFromDC
CreateMenu
InSendMessage
MonitorFromRect
SendNotifyMessageA
SubtractRect
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
EnumChildWindows
GetDCEx
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffA
RegisterClipboardFormatA
ModifyMenuA
GetDlgItemInt
DispatchMessageA
TranslateMessage
GetMessageA
SetActiveWindow
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
GetDoubleClickTime
EndDialog
CreateDialogIndirectParamA
DestroyWindow
IsWindow
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
GetLastActivePopup
GetWindowThreadProcessId
GetParent
GetWindowLongA
IsWindowEnabled
MsgWaitForMultipleObjectsEx
CharUpperA
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
UnregisterClassA
LoadIconW
GetClientRect
DrawIcon
GetSystemMetrics
EnableWindow
IsIconic
SendMessageA
LoadImageA
GetDesktopWindow
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
MapWindowPoints

gdi32

ScaleWindowExtEx
CreateFontIndirectA
GetTextExtentPoint32A
GetTextMetricsA
CombineRgn
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
CreateCompatibleBitmap
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetDIBits
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
ScaleViewportExtEx
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
EnumFontFamiliesExA
CreateFontA
SetTextAlign
GetCharWidthA
StretchDIBits
Rectangle
GetRgnBox
OffsetRgn
GetCurrentObject
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPointA
GetTextExtentPoint32W
GetTextFaceA
SetTextColor
SetTextCharacterExtra
SetStretchBltMode
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
PolylineTo
PolyBezierTo
ExtTextOutA
TextOutA
MoveToEx
GetObjectA
ExtCreatePen
SetArcDirection
SelectClipPath
PolyDraw
ArcTo
StartDocA
SetColorAdjustment
ModifyWorldTransform
SetWorldTransform
EnumMetaFile
PlayMetaFileRecord
GetDeviceCaps
CreateDCA
CopyMetaFileA
GetTextColor
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetGraphicsMode
SetMapperFlags
SetBkMode
SetBkColor
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
PlayMetaFile
OffsetClipRgn
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetCurrentPositionEx
GetClipRgn
GetClipBox
ExcludeClipRect
Escape
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateDIBPatternBrushPt
CreateCompatibleDC
BitBlt
CreateBitmap
SetTextJustification

msimg32

TransparentBlt
AlphaBlend

winspool.drv

GetJobA
ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueA
CryptReleaseContext
CryptDeriveKey
CryptDestroyKey
CryptGetHashParam
CryptGenRandom
CryptEncrypt
CryptDecrypt
CryptEnumProvidersW
CryptSignHashW
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
GetFileSecurityA
SetFileSecurityA
RegEnumKeyExA
RegEnumValueA
CryptAcquireContextA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegSetValueA
RegCloseKey
CryptDestroyHash
CryptHashData
CryptCreateHash

shell32

SHAddToRecentDocs
ExtractIconA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileA
DragFinish
ShellExecuteA
ShellExecuteExA
SHAppBarMessage
SHBrowseForFolderA
SHGetMalloc
SHGetFileInfoA

shlwapi

PathFindExtensionA
PathIsUNCA
PathRemoveExtensionA
StrFormatKBSizeA
PathRemoveFileSpecW
PathFindFileNameA
PathStripToRootA

uxtheme

DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
IsAppThemed
GetWindowTheme
GetThemeSysColor

ole32

CreateILockBytesOnHGlobal
CreateFileMoniker
StringFromCLSID
CoTaskMemAlloc
CoTaskMemFree
ReadClassStg
WriteClassStg
CoTreatAsClass
CreateBindCtx
WriteFmtUserTypeStg
ReadFmtUserTypeStg
OleDuplicateData
ReleaseStgMedium
OleRegGetUserType
SetConvertStg
CoUninitialize
CoCreateGuid
CoCreateInstance
CoInitialize
StringFromGUID2
CoDisconnectObject
CLSIDFromString
CoInitializeEx
CreateStreamOnHGlobal
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
PropVariantCopy
OleSetMenuDescriptor
OleLockRunning
StgCreateDocfile
StgOpenStorage
StgOpenStorageOnILockBytes
OleCreateMenuDescriptor
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
CoRegisterClassObject
CoGetClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
OleQueryCreateFromData
OleQueryLinkFromData
CoGetMalloc
OleIsRunning
GetRunningObjectTable
CreateOleAdviseHolder
CreateDataAdviseHolder
OleRun
OleGetIconOfClass
OleSetContainedObject
OleSaveToStream
OleSave
OleLoad
OleCreateFromFile
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleCreate
CreateItemMoniker
CreateGenericComposite
GetHGlobalFromILockBytes
WriteClassStm
StgCreateDocfileOnILockBytes
OleRegEnumVerbs
OleRegGetMiscStatus
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
StgIsStorageFile

oleaut32

VarBstrFromDec
VarBstrFromDate
VarBstrFromCy
VarDecFromStr
SysAllocString
VarDateFromStr
VariantCopy
SafeArrayPtrOfIndex
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayUnlock
VarCyFromStr
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayRedim
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SafeArrayCreate
SafeArrayAllocData
SafeArrayAllocDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysReAllocStringLen
SysStringLen
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
VariantChangeType
VariantClear
VariantInit
SafeArrayLock
SysAllocStringByteLen
SysStringByteLen
SysFreeString
SysAllocStringLen

oledlg

ord8

ws2_32

inet_ntoa
ioctlsocket
getsockname
getsockopt
ntohs
select
gethostbyname
WSAStartup
WSACleanup
WSAGetLastError
htonl
htons
gethostbyaddr
getservbyport
getservbyname
WSASetLastError
recv
send
accept
bind
closesocket
connect
listen
inet_addr
setsockopt
socket
shutdown

gdiplus

GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipAlloc
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFileICM
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdiplusShutdown
GdipCreateBitmapFromFile
GdipFree
GdipCreateBitmapFromScan0

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

bcrypt

BCryptGenRandom

crypt32

CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetCertificateContextProperty
CertCloseStore
CertOpenStore

Sections

.text
Size: 7.8MB - Virtual size: 7.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 388KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SOUND/01.wav
SOUND/02.wav
SOUND/03.wav
SOUND/04.wav
SOUND/less5.wav
SOUND/order.mp3
SOUND/timeout.wav
Server.exe
.exe windows:6 windows x64 arch:x64

d4f4268b620186f573fe6c59495b5b18

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Sources\VCPP\cz_2022\ReleaseDemo\x64\Server.pdb

Imports

language

?LOG3_GRUB_TIMERMODE_NA_ZANYATOM@@3QEBDEB
?LOG3_GRUB_ERROR_PERESADKA_NA_ZANYATIY@@3QEBDEB
?LOG3_REPORT_SECU_ERROR_GRUB@@3QEBDEB
?LOG3_REPORT_SECU_ERROR_TIMEBACK_HIDDEN@@3QEBDEB
?LOG3_REPORT_SECU_ERROR_TIMEBACK@@3QEBDEB
?LOG3_REPORT_SECU_ERROR_5MIN@@3QEBDEB
?LOG3_REPORT_SECU_Z_DESCR@@3QEBDEB
?LOG3_REPORT_SECU_Z_PARAM@@3QEBDEB
?LOG3_REPORT_MAIN_L_PUSTO@@3QEBDEB
?LOG3_REPORT_MAIN_Z2_MONEY@@3QEBDEB
?LOG3_REPORT_MAIN_Z2_TIME@@3QEBDEB
?LOG3_REPORT_MAIN_Z_FREE@@3QEBDEB
?LOG3_REPORT_MAIN_Z_NOCONN@@3QEBDEB
?LOG3_REPORT_MAIN_Z_N@@3QEBDEB
?LOG3_REPORT_STAT_T_ZAPIS_ISPORCHENA@@3QEBDEB
?LOG3_REPORT_STAT_Z_DESCRIPTION@@3QEBDEB
?LOG3_REPORT_STAT_Z_DATETIME@@3QEBDEB
?LOG3_REPORT_STAT_Z_ID@@3QEBDEB
?LOG3_COMBO_COMPUTER_ALL@@3QEBDEB
?LOG3_COMBO_TIMEMODE_SELTIME@@3QEBDEB
?LOG3_COMBO_TIMEMODE_ALLTIME@@3QEBDEB
?LOG3_COMBO_TIMEMODE_ZA_DEN@@3QEBDEB
?LOG3_COMBO_TIMEMODE_VIBSMENA@@3QEBDEB
?LOG3_COMBO_TIMEMODE_TEKSMENA@@3QEBDEB
?DB_OPEN_ERROR@@3QEBDEB
?WORK_MONITOR_SAVE_JPEG@@3QEBDEB
?WORK_MONITOR_REFRESH_SPEED@@3QEBDEB
?WORK_MONITOR_QUALITY@@3QEBDEB
?WORK_MONITOR_TITLE_OF_COMPUTER@@3QEBDEB
?V_MINUTAH@@3QEBDEB
?T_VOZ_F_PRESENT_BALANCE_MIN@@3QEBDEB
?VOICE_SETTINGS_CLIENT@@3QEBDEB
?VOICE_SETTINGS_ADMIN@@3QEBDEB
?VOICE_SETTINGS_ABOUT_TIMEOUT@@3QEBDEB
?VOICE_SETTINGS_ABOUT_5MIN_LEFT@@3QEBDEB
?ERROR_TYPE_NAME_AND_PRICE_ADDSERV@@3QEBDEB
?TEXT_ST_COUNT_OF_AVAILABLE_ITEMS@@3QEBDEB
?TEXT_CHK_UNLIMITED_COUNT@@3QEBDEB
?TEXT_CHK_ALLOWED_REMOTELY@@3QEBDEB
?T_USLUGI_CENA@@3QEBDEB
?T_USLUGI_NAZV@@3QEBDEB
?TITLE_USLUGI_ADD_EDIT@@3QEBDEB
?UBP_ICON_SELECTION_CHOOSE_ONE@@3QEBDEB
?UBP_ICON_SELECTION@@3QEBDEB
?PROCESS_LIST_SHOW_SYSTEM@@3QEBDEB
?PROCESS_LIST_COLUMN_PATH@@3QEBDEB
?PROCESS_LIST_COLUMN_WEIGHT@@3QEBDEB
?PROCESS_LIST_COLUMN_NAME@@3QEBDEB
?PROCESS_LIST_COLUMN_ID@@3QEBDEB
?INFOPORT_T_ERROR_TRANSFER_MODULES@@3QEBDEB
?PROCESSVIEW_MODULES@@3QEBDEB
?INFOPORT_T_DESTROY@@3QEBDEB
?INFOPORT_T_ERROR_TRANSFER@@3QEBDEB
?INFOPORT_T_REFRESH@@3QEBDEB
?INFOPORT_T_COMPNSPISOKPROCESSOV@@3QEBDEB
?SZP_PROCESS@@3QEBDEB
?SZP_N@@3QEBDEB
?UBP_TITLE@@3QEBDEB
?VOICE_SETTINGS_TITLE@@3QEBDEB
?MAIN_SETTING_TITLE@@3QEBDEB
?PARAMBEZ_SWITCH_REZHIM_TO_ADMIN@@3QEBDEB
?PARAMBEZ_SWITCH_REZHIM_TO_BOSS@@3QEBDEB
?PARAMBEZ_TITLE@@3QEBDEB
?SPPR_REMINDERLIST@@3QEBDEB
?SPPR_BLACKLIST@@3QEBDEB
?SPPR_TITLE@@3QEBDEB
?DF_OKRUGLENIEOPLATI@@3QEBDEB
?DF_B_VRNANASTR@@3QEBDEB
?RRV_FULL_DESCR@@3QEBDEB
?RRV_TOTAL_SUM@@3QEBDEB
?RRV_TITLE@@3QEBDEB
?RCF_BUTTON_NAME_LOGOFF@@3QEBDEB
?BUT_CLIENT_SOUND_VOLUME@@3QEBDEB
?WORK_MONITOR_TITLE@@3QEBDEB
?INFOPORT_T_SPISOKPROCESSOV@@3QEBDEB
?KILL_ACTIVE_PROCESS@@3QEBDEB
?SHUTDOWN_COMPUTER@@3QEBDEB
?RESTART_COMPUTER@@3QEBDEB
?LOG3_ITEM_QUANTITY_REMOVED@@3QEBDEB
?LOG3_ITEM_QUANTITY_ADDED@@3QEBDEB
?LABEL_ITEM_QUANTITY_SORT@@3QEBDEB
?IB_SETUP_BN_VNIZ@@3QEBDEB
?IB_SETUP_BN_VVERH@@3QEBDEB
?DU_RU_REMOVE@@3QEBDEB
?DU_RU_ADD@@3QEBDEB
?PARAMBEZ_BOT_TITLE@@3QEBDEB
?TAB_STORAGE_TITLE@@3QEBDEB
?PARAMBEZ_EMAIL_TITLE@@3QEBDEB
?PARAMBEZ_HWCTRL_TITLE@@3QEBDEB
?PARAMBEZ_INTERFACE_TITLE@@3QEBDEB
?PARAMBEZ_OTHER_TITLE@@3QEBDEB
?PARAMBEZ_CDB_TITLE@@3QEBDEB
?PARAMBEZ_REPORTS_TITLE@@3QEBDEB
?PARAMBEZ_PASSWORDS_TITLE@@3QEBDEB
?PARAMBEZ_PRICES_TITLE@@3QEBDEB
?TREE_REPORT_FOR_ADMIN@@3QEBDEB
?TREE_REPORT_FOR_BOSS@@3QEBDEB
?LOG3_STAT_TYPE_SPECIAL_CLIENTS@@3QEBDEB
?LOG3_PROCUSED_TYPE_POPULARITY_RATING@@3QEBDEB
?LOG3_PROCUSED_TYPE_ALL@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_PROC@@3QEBDEB
?LOG3_STAT_TYPE_SECURITY_NOTE@@3QEBDEB
?LOG3_STAT_TYPE_ZAMETKI@@3QEBDEB
?LOG3_STAT_TYPE_CONNECTIONS@@3QEBDEB
?LOG3_STAT_TYPE_FREE_TIME@@3QEBDEB
?LOG3_STAT_TYPE_TECHNICAL@@3QEBDEB
?LOG3_STAT_TYPE_FINANCE@@3QEBDEB
?LOG3_STAT_TYPE_FULL@@3QEBDEB
?RBACKUP_DENY_RESTORE@@3QEBDEB
?RBACKUP_DENY_SAVE@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_USLU@@3QEBDEB
?RP_POLICY_DENY_CURRENT@@3QEBDEB
?RP_POLICY_DENY_TRUNCATE@@3QEBDEB
?RP_POLICY_DENY_ANY@@3QEBDEB
?RP_ACTIVATE@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_PRIC@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_IZOP@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_5MIN@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_GRUB@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_SECU@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_MAIN@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_STAT@@3QEBDEB
?ADDITIONAL_SERVICES_EDIT_POLICY_DENIED@@3QEBDEB
?ADDITIONAL_SERVICES_EDIT_POLICY_DENIED_BUT_ADDING@@3QEBDEB
?ADDITIONAL_SERVICES_EDIT_POLICY_ALLOWED@@3QEBDEB
?LABEL_ALLOW_CROSS_BOUNDARY_PRICE_USAGE@@3QEBDEB
?SECU_USE_TIMEOUT_MODE@@3QEBDEB
?FORMAT_PARAMBEZ_PRICES_DENY_SWITCHING_GAMES_INET@@3QEBDEB
?ZAPRET_DELITSA_S_BLOCKA_ILI_PAKETA@@3QEBDEB
?DENY_RETURN_REST_FOR_BLOCK@@3QEBDEB
?PARAMBEZ_DISCOUNT_MODE_PRICE__SPECIAL_APPLIED_TO_TIME_LENGTH@@3QEBDEB
?PARAMBEZ_DISCOUNT_MODE_PRICE__NORMAL_CHEAPER_HOUR@@3QEBDEB
?T_MIN_SUM_VOZVRAT@@3QEBDEB
?PARAMBEZ_PRICES_DIAPAZON_ERROR@@3QEBDEB
?PARAMBEZ_PRICES_MIN_MINUT_TIMER@@3QEBDEB
?PARAMBEZ_PRICES_DENY_CHANGE_TIME_USING_DISCOUNT@@3QEBDEB
?PARAMBEZ_PRICES_FREE_LIMIT@@3QEBDEB
?PARAMBEZ_PRICES_ANULATE_TIME@@3QEBDEB
?PARAMBEZ_PRICES_NO_EDIT_NASTR_TIME@@3QEBDEB
?PARAMBEZ_PRICES_NO_EDIT_DISCOUNTS@@3QEBDEB
?PARAMBEZ_PRICES_NO_EDIT_PRICES@@3QEBDEB
?PARAMBEZ_PASSWORD_REQUIRE_PASSWORD_TO_CLOSE_SESSION@@3QEBDEB
?PARAMBEZ_PASSWORDS_INTERNETCONTROL@@3QEBDEB
?PARAMBEZ_PASSWORDS_ENTERPROGRAM@@3QEBDEB
?RP_PASS_ADMIN@@3QEBDEB
?RP_PASS_BOSS@@3QEBDEB
?LABEL_CLEAR_USERNAME_IN_LOGIN_DIALOG@@3QEBDEB
?LABEL_DELAY_CLIENT_COMPUTER_CLEANUP@@3QEBDEB
?CLOSE_BROWSERS_DELETE_COOKIES@@3QEBDEB
?DENY_CALL_OPERATOR@@3QEBDEB
?CLOSE_STEAM_LOGIN_CLUB_OR_ANONYMOUS@@3QEBDEB
?T_CLOSE_MAIL_RU_GAME_CENTER@@3QEBDEB
?CLIENT_COMPUTER_AUTOMATION_TITLE@@3QEBDEB
?SHOW_CLIENT_CONTROL_PANEL@@3QEBDEB
?CLIENT_CONTROL_PANEL@@3QEBDEB
?REMOTE_CONTROL_ACCESS_PASSWORD@@3QEBDEB
?REMOTE_CONTROL_ALLOW@@3QEBDEB
?REMOTE_CONTROL_GROUP_TITLE@@3QEBDEB
?AUTO_SHUTDOWN_TITLE_EXCEPTION@@3QEBDEB
?AUTO_SHUTDOWN_EXCEPTION@@3QEBDEB
?SW_OFF_AFTER_MINUTES@@3QEBDEB
?STR_MIN_SHOW_PAY_SUM@@3QEBDEB
?T_PROC_DONT_WRITE_CLIENT2@@3QEBDEB
?T_PROC_HIDE_CLIENT2@@3QEBDEB
?T_ST_GRP_PROC_STAT@@3QEBDEB
?LABEL_DENY_PAY_SERVICES_FROM_DEPOSIT@@3QEBDEB
?DENY_SETTING_SPENT_AMOUNT_TO_ZERO@@3QEBDEB
?DONT_APPLY_GROUP_DISCOUNT_FOR_PRICING_BLOCKS@@3QEBDEB
?DONT_APPLY_GROUP_DISCOUNT_FOR_PRICING_PACKET@@3QEBDEB
?CLIENT_DB_OPERATOR_CANT_USE_BALANCE_MINUTES_AND_DEPOSIT@@3QEBDEB
?TEXT_DENY_WITHDRAW_DEPOSIT@@3QEBDEB
?TEXT_DENY_FILLUP_DEPOSIT@@3QEBDEB
?DENY_CANCEL_SELL_CARD@@3QEBDEB
?CLIENT_DB_OPERATOR_CANT_START_SESSION@@3QEBDEB
?REFERRER_TITLE_PERCENT@@3QEBDEB
?PARAMBEZ_CDB_DENY_EDIT_BALANCE_SETTINGS@@3QEBDEB
?PARAMBEZ_CDB_DENY_ADD_EDIT_GROUPS@@3QEBDEB
?PARAMBEZ_CDB_DENY_CLIENT_INFO@@3QEBDEB
?PARAMBEZ_CDB_DENY_DELETE_CLIENT@@3QEBDEB
?PARAMBEZ_CDB_DENY_CHANGE_INFO@@3QEBDEB
?PARAMBEZ_CDB_DENY_ALL@@3QEBDEB
?LIST_OF_MODULES_OF_PROCESS@@3QEBDEB
?PS_SENDMESSAGE@@3QEBDEB
?NO_CONNECTION_WITH_REMOTE@@3QEBDEB
?REMOTE_USER_TYPED_WRONG_PASS_OR_NOT_TYPED@@3QEBDEB
?SPECIAL_CLIENT_AUTHORIZATION@@3QEBDEB
?REMOTE_CHECK_PASS_USER_TYPES@@3QEBDEB
?PERSONS_SEL_PASSWORD_INVALID@@3QEBDEB
?PERSONS_SEL_PASSWORD_CORRECT@@3QEBDEB
?PERSONS_SEL_CHECK_PASSWORD@@3QEBDEB
?PERSONS_SEL_OK@@3QEBDEB
?PERSONS_SEL_TITLE@@3QEBDEB
?TEXT_IS_PAY_FROM_DEPOSITE@@3QEBDEB
?DEPOSIT_OPERATION_ERROR_TRY_ON_FREE_COMPUTER@@3QEBDEB
?TEXT_SPECIAL_CLIENT_NOT_ENOUGH_BALANCE_OR_DEPOSIT@@3QEBDEB
?ERROR_DENIED_IN_SETTINGS@@3QEBDEB
?BUTTON_NAME_FREE_TIMER@@3QEBDEB
?PERSON_OPERATIONS_QUICK_START_LABEL@@3QEBDEB
?GS_FREE_WORK@@3QEBDEB
?PERSONS_OP_TITLE@@3QEBDEB
?PERSON_INFO_NO_CLAN@@3QEBDEB
?PERSON_INFO_CLAN@@3QEBDEB
?SET_SPENT_AMOUNT_TO_ZERO@@3QEBDEB
?FORMAT_PERSONS_INFORMATION_SPENT_SUM_AND_TOTAL@@3QEBDEB
?PERSONS_INFORMATION_FIRST_ADDED_TO_DB@@3QEBDEB
?FORMAT_PERSONS_INFORMATION_SPENT_FREE_TIME@@3QEBDEB
?FORMAT_PERSONS_INFORMATION_SPENT_TIME@@3QEBDEB
?STR_GROUP@@3QEBDEB
?PERSONS_INFORMATION_STATISTICS@@3QEBDEB
?PERSONS_INFORMATION_LAST_OPERATION@@3QEBDEB
?PERSONS_INFORMATION_TITLE@@3QEBDEB
?NOTIFY_CLIENT_SELL_CARD@@3QEBDEB
?FORMAT_LOG3_OPERATION_DESCRIPTION_CANCEL_USLUGA_CARD_CATEGORY@@3QEBDEB
?FORMAT_STR_CANCEL_SELL_CARD_QUESTION_CATEGORY@@3QEBDEB
?CANCEL_SELL_GAME_CARD@@3QEBDEB
?FORMAT_LOG3_OPERATION_DESCRIPTION_USLUGA_CARD_CATEGORY@@3QEBDEB
?FORMAT_STR_CARDS_SELL_QUESTION_CATEGORY@@3QEBDEB
?STR_CARDS_SELL@@3QEBDEB
?STR_CARDS_AE_PRICE@@3QEBDEB
?STR_CARDS_AE_MINUT@@3QEBDEB
?FORMAT_STR_CARDS_EDIT_CATEGORY@@3QEBDEB
?FORMAT_STR_CARDS_ADD_CATEGORY@@3QEBDEB
?IB_SETUP_BN_EDITRULE@@3QEBDEB
?IB_SETUP_BN_REMOVERULE@@3QEBDEB
?IB_SETUP_BN_ADDRULE@@3QEBDEB
?MINUT_T@@3QEBDEB
?NOTIFY_CLIENT_FILL_DEPOSIT@@3QEBDEB
?FORMAT_LOG3_OPERATION_DESCRIPTION_USLUGA_WITHDRAW_DEPOSIT@@3QEBDEB
?FORMAT_LOG3_OPERATION_DESCRIPTION_USLUGA_FILLUP_DEPOSIT@@3QEBDEB
?BALANCE_MIN_GROUP@@3QEBDEB
?DEPOSIT_ENTER_WITHDRAW_AMOUNT@@3QEBDEB
?DEPOSIT_ENTER_FILL_UP_AMOUNT@@3QEBDEB
?DEPOSIT_WITHDRAW_MONEY@@3QEBDEB
?DEPOSIT_FILL_UP@@3QEBDEB
?STR_BALANCE_NOT_CHOOSEN@@3QEBDEB
?STR_BALANCE_EDIT@@3QEBDEB
?STR_BALANCE_FILL@@3QEBDEB
?PERSON_ADMIN_COLUMN_CLAN@@3QEBDEB
?PERSON_ADMIN_COLUMN_PHONE@@3QEBDEB
?PERSON_ADMIN_COLUMN_F_L_NAME@@3QEBDEB
?STR_CDB_BALANCE@@3QEBDEB
?STR_CDB_GROUPS@@3QEBDEB
?PERSONS_DB_SURE_WANT_TO_KILL_PERSON@@3QEBDEB
?PERSONS_DB_ADMIN_HEADER_NICKNAME@@3QEBDEB
?PERSONS_DB_INFO@@3QEBDEB
?PERSONS_DB_DELETE@@3QEBDEB
?PERSONS_DB_EDIT@@3QEBDEB
?PERSONS_DB_ADD@@3QEBDEB
?LABEL_CHK_DENY_SHARE_BALANCE_MINUTES@@3QEBDEB
?LABEL_CLAN@@3QEBDEB
?LABEL_GROUP_UNTIL@@3QEBDEB
?PERSON_ADD_EDIT_ST_CARD_N@@3QEBDEB
?REFERRER_ID@@3QEBDEB
?STR_GROUP2@@3QEBDEB
?PERSONS_DB_ADDEDIT_BUT_PICTURE_INFO_NO2@@3QEBDEB
?PERSONS_DB_ADDEDIT_BUT_BROWSE2@@3QEBDEB
?STR_NO_GROUP@@3QEBDEB
?PERSONS_DB_ADDEDIT_BUT_PICTURE_INFO_KB@@3QEBDEB
?PERSONS_DB_ADDEDIT_TITLE_EDIT@@3QEBDEB
?PERSONS_DB_ADDEDIT_TITLE_ADD@@3QEBDEB
?PERSONS_DB_ADDEDIT_BUT_SEX_FEMALE@@3QEBDEB
?PERSONS_DB_ADDEDIT_BUT_SEX_MALE@@3QEBDEB
?PERSONS_DB_ADDEDIT_ST_PASSWORD@@3QEBDEB
?PERSONS_DB_ADDEDIT_ST_ADDRESS@@3QEBDEB
?PERSONS_DB_ADDEDIT_ST_COMMENT@@3QEBDEB
?PERSONS_DB_ADDEDIT_ST_SEX@@3QEBDEB
?T_PAYMENT_ADJ_STR@@3QEBDEB
?T_PAYMENT_ADJ_TITLE@@3QEBDEB
?WND_PATH_TITLE@@3QEBDEB
?IS_ROUNDOFF_ADD_SERVICES@@3QEBDEB
?T_ROUNDOFF_DONT@@3QEBDEB
?OKR_OKRUGLYAT_OPLATU_DO@@3QEBDEB
?REMINDER_DLG_SECONDS@@3QEBDEB
?REMINDER_DLG_REMIND_EVERY@@3QEBDEB
?NAPOMINAT_ZA5@@3QEBDEB
?CLBAN_SERVER_ACT_NAPOM@@3QEBDEB
?CLBAN_SERVER@@3QEBDEB
?L3_SMENA_SURECLOSE@@3QEBDEB
?L3_CHOICE_SMENA_RUN@@3QEBDEB
?L3_CHOICE_SMENA_BUT_CLOSE@@3QEBDEB
?L3_CHOICE_SMENA_SOZDANA@@3QEBDEB
?L3_CHOICE_SMENA_EXIT@@3QEBDEB
?L3_CHOICE_SMENA_BUT_CREATE@@3QEBDEB
?L3_CHOICE_SMENA_STATUS_PRESSCREATE@@3QEBDEB
?L3_CHOICE_SMENA_STATUS_ENTERNAME@@3QEBDEB
?T_IF_CHANGE_SEAT_TO_ANOTHER_COMPUTER_MOVEMINUTES@@3QEBDEB
?WOL_SWITCH_ON@@3QEBDEB
?PERSONS_DB_IF_BUTTON@@3QEBDEB
?T_FINE@@3QEBDEB
?DU_POGASHENIE_DOLGA@@3QEBDEB
?T_IB5@@3QEBDEB
?T_IB4@@3QEBDEB
?T_IB3@@3QEBDEB
?T_IB1@@3QEBDEB
?T_WORKWITH@@3QEBDEB
?LABEL_DENY_USE_THIS_TARIFF@@3QEBDEB
?AUTOASSIGN_AFTER_SUM@@3QEBDEB
?AUTOASSIGN_GROUP@@3QEBDEB
?GS_FREE_WORK_BY_REASON@@3QEBDEB
?STR_GROUPS_DELETE_WARNING@@3QEBDEB
?STR_GROUPS_EDIT_NAME@@3QEBDEB
?STR_GROUPS_ADD_NAME@@3QEBDEB
?STR_CDB_GROUPS_SETTINGS@@3QEBDEB
?STR_CDB_GROUPS_TITLE@@3QEBDEB
?STR_CDB_GROUPS_BUTTON_DELETE@@3QEBDEB
?STR_CDB_GROUPS_BUTTON_EDIT@@3QEBDEB
?STR_CDB_GROUPS_BUTTON_ADD@@3QEBDEB
?TITLE_TIMER_FREE@@3QEBDEB
?PRICHINA_1@@3QEBDEB
?PRICHINA_DEF@@3QEBDEB
?TITLE_FREEPRICHINA@@3QEBDEB
?T_FINE_DLG_MIN_PO_PRICHINE@@3QEBDEB
?T_FINE_DLG_TITLE@@3QEBDEB
?BUTTON_REMOVE_FROM_ORDER_LIST@@3QEBDEB
?BUTTON_ADD_TO_ORDER_LIST@@3QEBDEB
?LABEL_ORDER_LIST@@3QEBDEB
?ADDITIONAL_SERVICES_PAY_FROM_DEPOSIT@@3QEBDEB
?BALANCE_EXPORT_SUM@@3QEBDEB
?BALANCE_EXPORT_QUANTITY@@3QEBDEB
?BALANCE_EXPORT_PRICE@@3QEBDEB
?BALANCE_EXPORT_ITEM@@3QEBDEB
?BUTTON_BALANCE_EXPORT@@3QEBDEB
?ADDITIONAL_SERVICES_ADD_EDIT_BARCODE@@3QEBDEB
?PAY_LATER_IMPOSSIBLE@@3QEBDEB
?ADDSERV_PAY_LATER_ADD_TO_DEBT@@3QEBDEB
?DU_K_OPLATE@@3QEBDEB
?DU_KOLICHESTVO@@3QEBDEB
?DU_BLANK_VIBERITE_USLUGU@@3QEBDEB
?DU_REDAKTOR_USLUG@@3QEBDEB
?DU_OPLATIT@@3QEBDEB
?DU_DOPOLNITELNIE_USLUGI@@3QEBDEB
?T4COMPUTER@@3QEBDEB
?COMPUTER_RELEASE_LIST_RELEASE_AT@@3QEBDEB
?COMPUTER_RELEASE_LIST_COMPUTER@@3QEBDEB
?T_PECHAT@@3QEBDEB
?LOG3_COMBO_COMPUTER_N@@3QEBDEB
?UPGRADE_ALL@@3QEBDEB
?CLVINFO_OFFLINE_851@@3QEBDEB
?CLVUPD_UPDATE_START@@3QEBDEB
?CLVUPD_SEND_FILE_ERROR@@3QEBDEB
?CLVUPD_SEND_FILE@@3QEBDEB
?CLVUPD_ERROR_SSA_OF_WRONG_VER@@3QEBDEB
?CLVUPD_ERROR_SSA_ERROR@@3QEBDEB
?CLVINFO_ERRFILE_WRONG_MD5@@3QEBDEB
?CLVINFO_ERRFILE_CANT_CALCULATE@@3QEBDEB
?CLVINFO_SSA_FILE_WRONG_VERSION@@3QEBDEB
?CLVINFO_SSA_FILE_ERROR@@3QEBDEB
?CLVINFO_VERSION@@3QEBDEB
?CLVINFO_UPDATE@@3QEBDEB
?CLVINFO_CHECK@@3QEBDEB
?T_DEFAULT@@3QEBDEB
?CTRL_CLIENT_SOUND_UNMUTE_ON_TIME_OPEN@@3QEBDEB
?CTRL_CLIENT_SOUND_MUTE_ON_RESET@@3QEBDEB
?CTRL_CLIENT_SOUND_SET_ON_TIME_OPEN@@3QEBDEB
?CTRL_CLIENT_SOUND_STD_SOUND_SETTINGS@@3QEBDEB
?CTRL_CLIENT_SOUND_UPR_TITLE@@3QEBDEB
?INFOPORT_T_ERROR_CONNECT@@3QEBDEB
?CTRL_CLIENT_SOUND_GET_ERROR@@3QEBDEB
?CTRL_CLIENT_SOUND_VOLUME_SET_DEFAULT@@3QEBDEB
?CTRL_CLIENT_SOUND_VOLUME_SET@@3QEBDEB
?CTRL_CLIENT_SOUND_VOLUME_OFF@@3QEBDEB
?CTRL_CLIENT_SOUND_VOLUME_MASTER@@3QEBDEB
?TITLE_CLIENT_SOUND_VOLUME@@3QEBDEB
?HWM_CONF_CHANGED@@3QEBDEB
?HWM_BUT_SHOW@@3QEBDEB
?HWM_NOW@@3QEBDEB
?HWM_WAS@@3QEBDEB
?HWM_WARN_DIFF@@3QEBDEB
?HWM_IDENTICAL_TO_ETALON@@3QEBDEB
?HWM_ERR_LOAD@@3QEBDEB
?HWM_HW_RECV_OK@@3QEBDEB
?HWM_BUT_SAVE@@3QEBDEB
?HWM_BUT_CHECK@@3QEBDEB
?CLVINFO_OFFLINE@@3QEBDEB
?CLVINFO_COMPUTER@@3QEBDEB
?REMOTE_USB_CONNECTIONS_LOCKED@@3QEBDEB
?HW_LB_RAM@@3QEBDEB
?HW_LB_CPU@@3QEBDEB
?HW_LB_VIDEO@@3QEBDEB
?HW_LB_HDD@@3QEBDEB
?BUT_HARDWARE@@3QEBDEB
?CLVINFO_CONNECTION_ERROR@@3QEBDEB
?T_SURE_TRANSFER_TO@@3QEBDEB
?T_TRANSFER_TO@@3QEBDEB
?T_SWAP_SEATS@@3QEBDEB
?T_CHANGE_SEAT_FROM@@3QEBDEB
?DENIED_REBATE_100@@3QEBDEB
?NASTRLIMIT@@3QEBDEB
?T_NANASTROIKU@@3QEBDEB
?T_BMINUT@@3QEBDEB
?T_CHAN_ER5@@3QEBDEB
?T_ANULATE@@3QEBDEB
?CHANGE_ALT_NAME@@3QEBDEB
?ASK_ST_PRO@@3QEBDEB
?ASK_ST_MIN@@3QEBDEB
?DF_AUTOSKIDKA@@3QEBDEB
?AUTOMATION_DONTSHOW_PAYMENT_DETAILS_WINDOW_ON_TIMER_STOP@@3QEBDEB
?AUTOMATION_MINIMIZE_TO_SYSTEM_TRAY@@3QEBDEB
?AUTOMATION_DONT_SEND_MIN_FOR_NAPOMINANIE@@3QEBDEB
?AUTOMATION_SHOW_PAY_SUM_FOR_ADMIN@@3QEBDEB
?AUTOMATION_ASK_SHUTDOWN_ON_RESET@@3QEBDEB
?T_SWITCH_OFF_SOUND_SIGNALS@@3QEBDEB
?AUTOMATION_DONTSHOW_CLOSESESSION_DIALOG_ON_EXIT@@3QEBDEB
?WARN_ON_LINK_DISCONNECT@@3QEBDEB
?KANP_AFTERRESET@@3QEBDEB
?RESTART_ON_RESET@@3QEBDEB
?SZP_VESTI_PROTOKOL@@3QEBDEB
?AU_CH4@@3QEBDEB
?LOG3_GRUB_PLUS_V_TIMEMODE@@3QEBDEB
?AU_CH1@@3QEBDEB
?DF_AUTOMATION@@3QEBDEB
?STR_RESTART_FREE_ONLY@@3QEBDEB
?STR_RESTART_ALL@@3QEBDEB
?PERSONS_DB_TITLE@@3QEBDEB
?CLVINFO_TITLE@@3QEBDEB
?SPISOK_ZAP_PROCESSOV@@3QEBDEB
?DF_SHUTDOWN_ALL@@3QEBDEB
?DF_RESTART_ALL@@3QEBDEB
?DF_B_SPISOK@@3QEBDEB
?TITLE_FUNC_DOP@@3QEBDEB
?AP_ST_LICENSE_DETAILS_UNLIMITED@@3QEBDEB
?AP_ST_LICENSE_LABEL@@3QEBDEB
?AP_HOMEPA_RIGHT@@3QEBDEB
?AP_NOVVER_RIGHT@@3QEBDEB
?AP_EMAILA_LEFT2@@3QEBDEB
?AP_HOMEPA_LEFT2@@3QEBDEB
?AP_CONPHO_RIGHT3@@3QEBDEB
?AP_CONPHO_RIGHT2@@3QEBDEB
?AP_CONPHO_RIGHT1@@3QEBDEB
?AP_CONPHO_LEFT@@3QEBDEB
?AP_INFOPR_LEFT@@3QEBDEB
?AP_NOVVER_LEFT@@3QEBDEB
?AP_SERNUM_LEFT@@3QEBDEB
?AP_USERNAME_LEFT@@3QEBDEB
?AP_TITLE@@3QEBDEB
?IS_REBRANDING_MODE@@3_NB
?LANGUAGE_CODE@@3QEBDEB
?AP_INFOPR_RIGHT@@3QEBDEB
?T_PROC_HIDE_CLIENT2_NAME@@3QEBDEB
?LOG3_GRUB_TIMERSTOP_NA_ZANYATOM@@3QEBDEB
?T_NEWVER_FOUND_TEXT@@3QEBDEB
?T_NEWVER_FOUND_HEADER@@3QEBDEB
?T_ENTER_BOSS_PASSWORD@@3QEBDEB
?FREE_LIMIT_OUT@@3QEBDEB
?ERROR_ACCESS_DENIED_FOR_FUNCTION@@3QEBDEB
?WARNING_BOSSMODE_ACTIVATED@@3QEBDEB
?BOSSMODE_PASSWORD_ENTER_WARNING@@3QEBDEB
?SPPR_SIGNAL_COMPUTER@@3QEBDEB
?WARN_PASS_NOTFOUND_EX@@3QEBDEB
?UDP_ERROR_CANT_START@@3QEBDEB
?ERR_LOG3_START@@3QEBDEB
?CANT_AQUIRE_CONTEXT@@3QEBDEB
?CANT_OPENCREATE_CONFIG@@3QEBDEB
?BADKEY_MESSAGE@@3QEBDEB
?HTTP_LOG_OK_STARTED@@3QEBDEB
?HTTP_LOG_ERROR_CANTSTART@@3QEBDEB
?MSG_SOCK_ERR@@3QEBDEB
?WRONG_PASS_ENTERED@@3QEBDEB
?ALREADY_RUN@@3QEBDEB
?REGISTRED_NUM@@3QEBDEB
?REGISTRED_NAME@@3QEBDEB
?T_WRR_ERROR_DESCRIPTION@@3QEBDEB
?T_WRR_ENABLE_DESCRIPTION@@3QEBDEB
?T_WRR_DISABLE_DESCRIPTION@@3QEBDEB
?T_WRR_ENABLE_RESTRICTIONS@@3QEBDEB
?T_WRR_DISABLE_RESTRICTIONS@@3QEBDEB
?VOICE_STATUS_DISCONNECTED@@3QEBDEB
?VOICE_STATUS_CONFIRMED@@3QEBDEB
?VOICE_STATUS_CONNECTING@@3QEBDEB
?VOICE_CALL_TITLE@@3QEBDEB
?VOICE_CALL_HANGUP@@3QEBDEB
?TELEGRAM_PHONE_NUMBER_ENTER_ERROR_LESS_CHARACTERS@@3QEBDEB
?TELEGRAM_SHARE_DEPOSIT_NOT_ENOUGH@@3QEBDEB
?TELEGRAM_SHARE_MINUTES_ERROR_NOT_ENOUGH_MINUTES@@3QEBDEB
?LABEL_TELEGRAM_START_MENU@@3QEBDEB
?LABEL_LOG3_PERSONS_SHARE_DEPOSIT@@3QEBDEB
?LABEL_LOG3_PERSONS_SHARE_MINUTES@@3QEBDEB
?YOUR_ACCOUNT_WAS_FILLED_WITH_DEPOSIT@@3QEBDEB
?YOUR_ACCOUNT_WAS_FILLED_WITH_MINUTES@@3QEBDEB
?SHARING_COMPLETED@@3QEBDEB
?ENTER_PHONE_NUMBER_TO_SHARE_DEPOSIT@@3QEBDEB
?TELEGRAM_MESSAGE_YOU_HAVE_REACHED_THE_LIMIT_OF_DEPOSIT_TO_SHARE_FOR_24H@@3QEBDEB
?ENTER_AMOUNT_OF_DEPOSIT_TO_SHARE@@3QEBDEB
?SHARE_MY_DEPOSIT@@3QEBDEB
?YOUR_LIMIT_TO_SHARE_MINUTES_FOR_TODAY_IS@@3QEBDEB
?TELEGRAM_MESSAGE_YOU_HAVE_REACHED_THE_LIMIT_OF_MINUTES_TO_SHARE_FOR_24H@@3QEBDEB
?PHONE_NUMBER_NOT_FOUND@@3QEBDEB
?ENTER_PHONE_NUMBER_TO_SHARE_BALANCE_MINUTES@@3QEBDEB
?ENTER_AMOUNT_OF_MINUTES_TO_SHARE@@3QEBDEB
?SHARE_NEXT_CATEGORY@@3QEBDEB
?SHARE_THIS_CATEGORY_MINUTES@@3QEBDEB
?YOU_HAVE_X_MINUTES_OF_CATEGORY@@3QEBDEB
?SHARE_MY_BALANCE_MINUTES@@3QEBDEB
?TELEGRAM_MESSAGE_LOGIN_IS_IN_USE@@3QEBDEB
?TELEGRAM_MESSAGE_EMPTY_PASSWORD_IS_NO_ALLOWED@@3QEBDEB
?TELEGRAM_MESSAGE_EMPTY_LOGIN_IS_NO_ALLOWED@@3QEBDEB
?TELEGRAM_MESSAGE_ENTER_NEW_PASSWORD@@3QEBDEB
?TELEGRAM_MESSAGE_ENTER_NEW_LOGIN@@3QEBDEB
?TELEGRAM_COMMAND_BACK@@3QEBDEB
?TELEGRAM_COMMAND_CHANGE_PASSWORD@@3QEBDEB

kernel32

GetFileInformationByHandle
GetFileSize
ReadFile
SetFilePointer
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
VerSetConditionMask
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetSystemDirectoryW
LoadLibraryW
MoveFileExW
WaitForSingleObjectEx
GetEnvironmentVariableA
GetFileType
PeekNamedPipe
CreateFileW
GetFileSizeEx
SwitchToThread
GetNativeSystemInfo
TryAcquireSRWLockExclusive
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
RtlPcToFileHeader
InitOnceBeginInitialize
InitOnceComplete
ReleaseSRWLockShared
AcquireSRWLockShared
TryAcquireSRWLockShared
SetFileInformationByHandle
GetTempPathW
InitOnceExecuteOnce
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
CreateFileA
GetSystemTimeAsFileTime
GetTickCount64
FreeLibraryWhenCallbackReturns
GetTickCount
QueryPerformanceFrequency
QueryPerformanceCounter
GetSystemTime
SetFileAttributesA
FileTimeToSystemTime
FindNextFileA
FindFirstFileA
FindClose
GetWindowsDirectoryA
lstrlenA
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetFileInformationByHandleEx
CreateSymbolicLinkW
GetLocaleInfoEx
EncodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
GlobalSize
lstrcatA
lstrcpyA
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetModuleHandleW
lstrcpynA
GetCurrentProcessorNumber
GetVolumeInformationA
GetLocalTime
CreateMutexA
RaiseException
DecodePointer
CreateDirectoryA
GetVersion
GetCurrentProcess
CreateEventA
DuplicateHandle
FormatMessageW
FormatMessageA
LocalFree
TlsFree
TlsSetValue
TlsGetValue
QueueUserAPC
CreateEventW
SleepEx
PostQueuedCompletionStatus
MulDiv
CopyFileA
ReleaseSemaphore
GetVersionExA
GetQueuedCompletionStatus
CreateIoCompletionPort
SetLastError
GetExitCodeThread
DeleteFileA
GetCurrentDirectoryA
WinExec
MoveFileA
CreateProcessA
GetTempFileNameA
GetTempPathA
SystemTimeToFileTime
GetComputerNameW
CreateWaitableTimerA
WaitForMultipleObjects
CancelWaitableTimer
SetWaitableTimer
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
ResetEvent
LoadLibraryA
ResumeThread
TerminateThread
CreateThread
WaitForSingleObject
SetEvent
Beep
InitializeCriticalSection
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
WriteConsoleA
GetConsoleMode
GetFullPathNameA
SetThreadPriority
GetStringTypeW
VerifyVersionInfoW
OutputDebugStringW
ExpandEnvironmentStringsA
CreateFileMappingW
LockFileEx
HeapCompact
GetSystemInfo
DeleteFileW
FlushViewOfFile
GetFileAttributesExW
HeapValidate
GetFileAttributesW
CreateMutexW
UnlockFileEx
GetDiskFreeSpaceW
GetFullPathNameW
HeapCreate
AreFileApisANSI
TryEnterCriticalSection
VirtualLock
VirtualUnlock
GetThreadPriority
PulseEvent
MoveFileExA
InitializeSRWLock
VirtualAlloc
VirtualFree
SwitchToFiber
DeleteFiber
CreateFiberEx
FindFirstFileW
FindNextFileW
GetSystemDirectoryA
GetEnvironmentVariableW
ConvertFiberToThread
ConvertThreadToFiberEx
SetConsoleMode
ReadConsoleA
ReadConsoleW
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
VirtualQuery
GetDriveTypeW
ExitThread
FreeLibraryAndExitThread
SetConsoleCtrlHandler
ExitProcess
FindFirstFileExW
SetStdHandle
SetFilePointerEx
TzSpecificLocalTimeToSystemTime
GetCommandLineA
GetCommandLineW
HeapQueryInformation
GetConsoleOutputCP
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetTimeZoneInformation
CreateDirectoryW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetDynamicTimeZoneInformation
GetCurrentThreadId
GetCurrentProcessId
Sleep
WriteFile
GetFileAttributesA
GetStdHandle
K32GetModuleFileNameExA
OpenProcess
CloseHandle
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByte
MultiByteToWideChar
FindResourceA
lstrcmpiA
LoadLibraryExA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetLastError
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
WriteConsoleW
TlsAlloc
ReleaseMutex
CreateSemaphoreA
lstrcmpA
OutputDebugStringA
GetModuleFileNameW
GetModuleHandleExW
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomA
GlobalFindAtomA
LoadResource
GlobalGetAtomNameA
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
CompareStringA
SuspendThread
FlushFileBuffers
LockFile
SetEndOfFile
UnlockFile
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
FileTimeToLocalFileTime
GetFileAttributesExA
GetFileTime
LocalFileTimeToFileTime
SetFileTime
SystemTimeToTzSpecificLocalTime
VirtualProtect
GetCurrentThread
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
LocalAlloc
GlobalReAlloc
GlobalHandle
LocalReAlloc
GetAtomNameA
GlobalFlags
GetACP
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetOEMCP
VerifyVersionInfoA
SetErrorMode
FindResourceExW
LocalLock
LocalUnlock
SearchPathA
GetProfileIntA
GetDiskFreeSpaceA
ReplaceFileA
GetUserDefaultLCID
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW

user32

SetWindowRgn
SetWindowLongPtrA
GetWindowDC
GetMenuItemRect
GetMenu
CreateWindowExA
CallWindowProcA
GetIconInfo
CreateIconIndirect
DestroyCursor
OffsetRect
DrawFocusRect
WindowFromPoint
ClientToScreen
DrawStateA
GetActiveWindow
GetNextDlgTabItem
IsMenu
SystemParametersInfoA
DrawIconEx
LoadBitmapW
SetRect
GetSysColorBrush
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
GetMenuItemInfoA
DeleteMenu
RemoveMenu
ModifyMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
CreateMenu
GetMenuState
DrawEdge
PeekMessageA
FillRect
PostThreadMessageA
keybd_event
LoadIconW
GetKeyState
DispatchMessageA
TranslateMessage
CopyIcon
LoadCursorA
SetWindowLongA
InflateRect
SetCursor
MessageBeep
ReleaseDC
GetDC
ReleaseCapture
SetCapture
GetWindowLongA
DestroyAcceleratorTable
GetSystemMetrics
LoadIconA
UnregisterClassA
FindWindowA
SetClassLongPtrA
CreateAcceleratorTableA
CharNextW
EnumWindows
GetWindowTextA
MessageBoxW
GetWindow
UpdateWindow
PtInRect
ScreenToClient
GetWindowRect
LoadImageA
DestroyIcon
LoadBitmapA
GetDesktopWindow
CopyRect
FrameRect
GetCursorPos
SetForegroundWindow
SetActiveWindow
SetMenuDefaultItem
TranslateAcceleratorA
GetFocus
SetFocus
SetWindowPlacement
DrawFrameControl
IsWindow
PostMessageA
GetParent
GetSysColor
RedrawWindow
GetAsyncKeyState
InvalidateRect
MessageBoxA
AppendMenuA
CreatePopupMenu
GetClientRect
KillTimer
SetTimer
EnableWindow
SendMessageA
CharNextA
BeginDeferWindowPos
CharUpperA
IntersectRect
BringWindowToTop
LoadAcceleratorsA
LoadMenuA
InsertMenuItemA
GetMenuBarInfo
UnpackDDElParam
ReuseDDElParam
GetKeyNameTextA
MapVirtualKeyA
MapDialogRect
PostQuitMessage
ShowOwnedPopups
IsZoomed
NotifyWinEvent
RealChildWindowFromPoint
TrackMouseEvent
LoadImageW
CopyImage
GetDialogBaseUnits
LoadMenuW
GetSystemMenu
LoadCursorW
GetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
MonitorFromPoint
SetLayeredWindowAttributes
EnumDisplayMonitors
SetParent
GetNextDlgGroupItem
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
IsClipboardFormatAvailable
GetTabbedTextExtentA
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CopyAcceleratorTableA
EnumChildWindows
RegisterClipboardFormatA
LockWindowUpdate
HideCaret
InvertRect
SetCursorPos
DrawIcon
CharUpperBuffA
GetDCEx
MonitorFromRect
DrawMenuBar
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
GetUpdateRect
SendNotifyMessageA
InSendMessage
GetComboBoxInfo
GetDoubleClickTime
GetWindowRgn
GetTabbedTextExtentW
DeferWindowPos
EndDeferWindowPos
IsIconic
GetDlgItem
IsWindowVisible
WindowFromDC
RegisterWindowMessageA
IsRectEmpty
GetMenuStringA
UnhookWindowsHookEx
MsgWaitForMultipleObjectsEx
BeginPaint
EndPaint
SendDlgItemMessageA
SetRectEmpty
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoA
GetMessagePos
GetMessageTime
DefWindowProcA
RegisterClassA
GetClassInfoA
GetClassInfoExA
IsChild
DestroyWindow
ShowWindow
GetDlgCtrlID
GetCapture
GetUserObjectInformationW
GetProcessWindowStation
ClipCursor
SetMenu
TrackPopupMenu
TrackPopupMenuEx
GetForegroundWindow
GetWindowPlacement
ValidateRect
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropA
GetPropA
RemovePropA
GetWindowTextLengthA
AdjustWindowRectEx
MapWindowPoints
EqualRect
GetWindowLongPtrA
GetClassLongA
GetClassLongPtrA
GetClassNameA
GetTopWindow
GetLastActivePopup
SetWindowsHookExA
CallNextHookEx
SetScrollInfo
GetScrollInfo
WinHelpA
MonitorFromWindow
GetMonitorInfoA
MoveWindow
SetDlgItemInt
GetDlgItemInt
SetDlgItemTextA
GetDlgItemTextA
CheckDlgButton
CheckRadioButton
IsDlgButtonChecked
IsWindowEnabled
ScrollWindowEx
SetWindowTextA
IsDialogMessageA
CreateDialogIndirectParamA
EndDialog
GetWindowThreadProcessId
DestroyMenu
GetMessageA
SetWindowPos
WaitMessage
DefFrameProcA

gdi32

SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
StartDocA
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
MoveToEx
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetMapMode
FillRgn
DPtoLP
GetBkColor
GetCharWidthA
StretchDIBits
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
EnumFontFamiliesExA
GetDIBits
RealizePalette
SetMapperFlags
SetDIBColorTable
OffsetRgn
PlayMetaFile
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
CreateEllipticRgn
Polygon
Polyline
LPtoDP
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
ExtFloodFill
SetPaletteEntries
RoundRect
GetViewportOrgEx
GetWindowOrgEx
GetBoundsRect
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
GetROP2
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPointA
GetTextFaceA
SetPixelV
CreateRoundRectRgn
CreateRectRgn
CombineRgn
SetBkMode
PtInRegion
GetRgnBox
CreateRectRgnIndirect
SetTextColor
SetBkColor
CreateBitmap
ExtTextOutA
SetGraphicsMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
StretchBlt
SetDIBitsToDevice
TextOutA
CreateDIBSection
SetPixel
OffsetClipRgn
LineTo
RectVisible
PtVisible
RestoreDC
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetObjectType
GetCurrentPositionEx
GetClipRgn
ExcludeClipRect
CreatePatternBrush
CreateDIBPatternBrushPt
CreateDCA
CopyMetaFileA
GetTextMetricsA
GetCurrentObject
GetClipBox
CreatePolygonRgn
GetTextColor
FrameRgn
PatBlt
GetTextExtentPoint32W
GetPixel
GetDeviceCaps
GetBkMode
Escape
Ellipse
CreatePen
CreateHatchBrush
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteObject
GetTextExtentPoint32A
CreateFontIndirectA
DeleteDC
GetObjectA
Rectangle
GetStockObject
CreateBrushIndirect
SetRectRgn
CreateSolidBrush
CreateFontA

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterW
EnumJobsW
ReadPrinter
FindFirstPrinterChangeNotification
FindNextPrinterChangeNotification
FindClosePrinterChangeNotification
ClosePrinter
OpenPrinterA
DocumentPropertiesA
GetJobA
EnumPrintersW

advapi32

CryptDestroyKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyW
RegSetValueExA
RegQueryInfoKeyA
RegQueryValueA
CryptAcquireContextA
GetFileSecurityA
SetFileSecurityA
RegEnumValueA
RegEnumKeyA
RegOpenKeyExW
RegSetValueA
CryptImportKey
CryptAcquireContextW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptDecrypt
CryptEncrypt
CryptGetHashParam
RegCloseKey
CryptDeriveKey
RegQueryValueExA
CryptGenRandom
CryptEnumProvidersW
CryptSignHashW
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptReleaseContext

shell32

ShellExecuteA
ShellExecuteExA
SHGetFileInfoA
DragQueryFileA
DragFinish
SHAddToRecentDocs
ExtractIconA
SHAppBarMessage
SHGetMalloc
SHGetPathFromIDListA
SHGetDesktopFolder
SHBrowseForFolderA
SHGetSpecialFolderLocation
Shell_NotifyIconA

comctl32

InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_Draw
ImageList_AddMasked
ImageList_GetIcon
ImageList_GetIconSize
_TrackMouseEvent
ord17
ImageList_GetImageInfo

shlwapi

PathIsUNCA
PathStripToRootA
PathFindExtensionA
PathMatchSpecA
PathRemoveExtensionA
PathRemoveFileSpecW
UrlUnescapeA
StrFormatKBSizeA
PathFindFileNameA

uxtheme

GetCurrentThemeName
GetWindowTheme
GetThemeSysColor
IsAppThemed
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
DrawThemeText
IsThemeBackgroundPartiallyTransparent
GetThemeColor
DrawThemeParentBackground

ole32

CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
CreateStreamOnHGlobal
CoUninitialize
CoRegisterClassObject
CoRevokeClassObject
StringFromGUID2
CoInitialize
CoInitializeEx
StringFromCLSID
ReadClassStg
WriteClassStg
CoTreatAsClass
CreateBindCtx
WriteFmtUserTypeStg
CLSIDFromProgID
CoRegisterMessageFilter
CoGetClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
OleQueryCreateFromData
OleQueryLinkFromData
CoGetMalloc
OleIsRunning
GetRunningObjectTable
CreateOleAdviseHolder
CreateDataAdviseHolder
OleRun
OleGetIconOfClass
OleSetContainedObject
OleSaveToStream
OleSave
OleLoad
OleCreateFromFile
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleCreate
CreateItemMoniker
CreateGenericComposite
GetHGlobalFromILockBytes
WriteClassStm
StgCreateDocfileOnILockBytes
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleRegEnumVerbs
OleRegGetMiscStatus
PropVariantCopy
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
CreateFileMoniker
CreateILockBytesOnHGlobal
StgIsStorageFile
StgOpenStorageOnILockBytes
StgOpenStorage
StgCreateDocfile
OleLockRunning
OleSetMenuDescriptor
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CLSIDFromString
CoDisconnectObject
CoCreateGuid
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg

oleaut32

SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayRedim
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SafeArrayCreate
SafeArrayAllocData
SafeArrayAllocDescriptor
SysReAllocStringLen
VarDateFromStr
SysAllocStringByteLen
SysStringByteLen
VarUdateFromDate
SystemTimeToVariantTime
SafeArrayUnlock
SafeArrayCopy
VariantTimeToSystemTime
SysAllocStringLen
OleLoadPicture
OleCreatePictureIndirect
VariantChangeType
VariantCopy
VariantClear
VariantInit
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
SysStringLen
SysFreeString
SysAllocString
VarBstrFromDate
VarBstrFromDec
VarDecFromStr
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
UnRegisterTypeLi
GetErrorInfo
SetErrorInfo
SafeArrayPutElement
SafeArrayPtrOfIndex
RegisterTypeLi
CreateErrorInfo
VarBstrFromCy
VarCyFromStr

ws2_32

WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
WSASocketA
inet_ntoa
listen
inet_pton
getnameinfo
freeaddrinfo
getaddrinfo
WSASocketW
WSAGetLastError
WSACleanup
shutdown
send
select
recv
getsockopt
getsockname
getpeername
WSAResetEvent
connect
__WSAFDIsSet
gethostname
socket
setsockopt
sendto
recvfrom
inet_addr
htons
closesocket
bind
WSAStartup
gethostbyname
ntohs
getservbyname
ntohl
WSAAddressToStringA
WSAStringToAddressA
gethostbyaddr
getservbyport
WSAEventSelect
WSASetEvent
WSAWaitForMultipleEvents
WSASetLastError
inet_ntop
WSAIoctl
accept
htonl
WSAAsyncSelect
ioctlsocket

oledlg

ord8

urlmon

URLDownloadToFileA

gdiplus

GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown

iphlpapi

GetExtendedUdpTable
GetAdaptersInfo

bcrypt

BCryptGenRandom

crypt32

CertCloseStore
CertFreeCertificateContext
CertOpenSystemStoreW
CertOpenStore
CertFindCertificateInStore
CryptStringToBinaryW
PFXImportCertStore
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertFindExtension
CertGetNameStringW
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertEnumCertificatesInStore

winmm

waveInReset
timeGetTime
mmioAscend
mmioDescend
mmioRead
mmioClose
mmioOpenA
mciSendStringA
waveOutGetErrorTextA
waveInGetErrorTextA
waveOutGetNumDevs
waveOutGetDevCapsA
waveOutGetVolume
waveOutSetVolume
waveOutOpen
waveOutClose
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
waveOutPause
waveOutRestart
waveOutReset
waveInGetNumDevs
waveInGetDevCapsA
waveInOpen
waveInClose
waveInPrepareHeader
waveInUnprepareHeader
waveInAddBuffer
waveInStart
waveInStop
PlaySoundA

wsnmp32

ord101
ord200
ord201
ord203
ord204
ord220
ord300
ord302
ord400
ord402
ord500
ord600
ord602
ord903
ord900

crashrpt1403

ord9
ord24
ord11
ord12
ord8

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

wininet

HttpSendRequestExA
DeleteUrlCacheEntry
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetErrorDlg
InternetOpenA
InternetCloseHandle
InternetConnectA
InternetOpenUrlA
InternetReadFile
InternetSetFilePointer
InternetWriteFile
InternetQueryDataAvailable
InternetFindNextFileA
InternetQueryOptionA
InternetSetOptionA
InternetGetLastResponseInfoA
InternetSetStatusCallback
FtpFindFirstFileA
FtpGetFileA
FtpPutFileA
FtpDeleteFileA
FtpRenameFileA
FtpOpenFileA
FtpCreateDirectoryA
FtpRemoveDirectoryA
FtpSetCurrentDirectoryA
FtpGetCurrentDirectoryA
FtpCommandA
InternetGetCookieA
GopherFindFirstFileA
GopherOpenFileA
GopherGetAttributeA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
GopherCreateLocatorA
HttpEndRequestA
HttpQueryInfoA
InternetSetCookieA

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

Sections

.text
Size: 14.3MB - Virtual size: 14.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 168KB - Virtual size: 767KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 714KB - Virtual size: 713KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SetupServer.exe
.exe windows:6 windows x64 arch:x64

8c1a194a83a436719b08c5b2e4380abd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Sources\VCPP\cz_2022\ReleaseDemo\x64\SetupServer.pdb

Imports

language

?ALREADY_RUN@@3QEBDEB
?WARNING_V@@3QEBDEB
?CANT_OPENCREATE_CONFIG@@3QEBDEB
?CANT_AQUIRE_CONTEXT@@3QEBDEB
?OK_V@@3QEBDEB
?CANCEL_V@@3QEBDEB
?SETUP_ZAGLAVIE@@3QEBDEB
?SETUP_OSNOVNIE_NASTROIKI@@3QEBDEB
?SETUP_NUMBER_OF_CLIENT_COMPUTERS@@3QEBDEB
?SETUP_PORT_SERVERA@@3QEBDEB
?SETUP_INTERNET_CONTROL@@3QEBDEB
?SETUP_HTTP_PORT@@3QEBDEB
?SETUP_HTTP_PASS@@3QEBDEB
?ERROR_V@@3QEBDEB
?SETUP_KONFIGURATOR_NAPOM_ZVUKA@@3QEBDEB
?TT_SETUP_SERVER_NOFC@@3QEBDEB
?BUT_SND_DIRECT_SOUND@@3QEBDEB
?BUT_SND_PC_SPEAKER@@3QEBDEB
?BUT_SND_NO@@3QEBDEB
?DLINA_BOLSHE_99@@3QEBDEB
?ERR_MANDATORY_USER_PROFILE@@3QEBDEB
?ODINAKOWIE_PORTI@@3QEBDEB

kernel32

ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlLookupFunctionEntry
RtlCaptureContext
LocalUnlock
LocalLock
GetTickCount
GetUserDefaultLCID
ReplaceFileA
GetTempFileNameA
GetDiskFreeSpaceA
Sleep
SearchPathA
GetProfileIntA
GetTickCount64
GetTempPathA
FindResourceExW
VerifyVersionInfoA
VerSetConditionMask
GetWindowsDirectoryA
GetCPInfo
IsProcessorFeaturePresent
VirtualProtect
lstrcpyA
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetCurrentDirectoryA
GetACP
GlobalFlags
SetErrorMode
SystemTimeToTzSpecificLocalTime
SetFileTime
SetFileAttributesA
FlsSetValue
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
SystemTimeToFileTime
FileTimeToSystemTime
GetAtomNameA
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetOEMCP
OutputDebugStringW
RaiseException
RtlUnwindEx
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
GetSystemInfo
VirtualAlloc
VirtualQuery
CreateThread
ExitThread
FreeLibraryAndExitThread
GetCommandLineA
GetCommandLineW
HeapQueryInformation
QueryPerformanceFrequency
SetStdHandle
GetFileType
TlsAlloc
InitializeCriticalSection
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetSystemDirectoryW
EncodePointer
GetCurrentProcessId
GlobalAddAtomA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetModuleHandleW
CompareStringA
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetVersionExA
ExitProcess
GetStdHandle
GetTempPathW
FlsAlloc
FlsGetValue
GetCurrentThread
ResumeThread
SuspendThread
RtlVirtualUnwind
SetThreadPriority
GetCurrentThreadId
CreateEventA
SetEvent
FindResourceA
GetStringTypeExA
GetThreadLocale
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryW
LoadLibraryExA
GetProcAddress
GetModuleHandleExW
GetModuleFileNameW
GetCurrentProcess
DuplicateHandle
OutputDebugStringA
GetVolumeInformationA
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
DeleteFileA
CreateFileA
WaitForSingleObject
MultiByteToWideChar
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
SetLastError
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
DecodePointer
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
lstrlenA
GetModuleHandleA
GetModuleFileNameA
CreateMutexA
CloseHandle
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetSystemTime
GetLastError
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
GetStringTypeW
GetConsoleOutputCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetConsoleCtrlHandler
CreateFileW
WriteConsoleW
RtlUnwind

user32

LockWindowUpdate
SetRect
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
PostThreadMessageA
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
UnionRect
FrameRect
CopyIcon
SetCursorPos
GetSystemMenu
LoadMenuW
IsZoomed
DrawFrameControl
DrawEdge
SetParent
SetClassLongPtrA
DrawStateA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
MessageBeep
IsRectEmpty
DrawFocusRect
GetNextDlgGroupItem
ReuseDDElParam
UnpackDDElParam
GetMenuBarInfo
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
GetMenuDefaultItem
CreatePopupMenu
MapDialogRect
GetAsyncKeyState
GetMenuItemInfoA
DestroyMenu
LoadImageW
IntersectRect
LoadCursorW
ReleaseCapture
SetCapture
WaitMessage
DestroyIcon
InvalidateRect
DeleteMenu
SystemParametersInfoA
CopyImage
GetDialogBaseUnits
RealChildWindowFromPoint
LoadCursorA
GetSysColorBrush
IsDialogMessageA
SetWindowTextA
ScrollWindowEx
IsDlgButtonChecked
CheckRadioButton
SetMenuDefaultItem
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
GetTopWindow
GetClassNameA
GetClassLongPtrA
GetClassLongA
SetWindowLongPtrA
GetWindowLongPtrA
SetWindowLongA
PtInRect
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowRect
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
SetForegroundWindow
GetForegroundWindow
UpdateWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
IsChild
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
RegisterWindowMessageA
OffsetRect
SetRectEmpty
SendDlgItemMessageA
GetWindow
GetWindowTextLengthA
GetWindowTextA
GetScrollPos
SetScrollPos
SetFocus
FillRect
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
GetDoubleClickTime
ModifyMenuA
RegisterClipboardFormatA
CharUpperBuffA
IsClipboardFormatAvailable
GetUpdateRect
GetDCEx
EnumChildWindows
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
SendNotifyMessageA
MonitorFromRect
InSendMessage
CreateMenu
WindowFromDC
GetWindowRgn
GetTabbedTextExtentW
GetTabbedTextExtentA
CheckDlgButton
DrawTextA
UnhookWindowsHookEx
CopyRect
MapVirtualKeyA
GetKeyNameTextA
GetLastActivePopup
GetWindowThreadProcessId
SetCursor
ShowOwnedPopups
PostQuitMessage
PostMessageA
CallNextHookEx
SetWindowsHookExA
ValidateRect
GetKeyState
IsWindowVisible
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
GetDesktopWindow
GetWindowLongA
SetActiveWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamA
DestroyWindow
DestroyCursor
LoadBitmapW
GetParent
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
CharUpperA
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
GetIconInfo
DrawIconEx
InflateRect
GetSysColor
WindowFromPoint
GetCursorPos
RedrawWindow
SetWindowRgn
ReleaseDC
GetDC
KillTimer
SetTimer
IsWindow
UnregisterClassA
LoadIconW
GetClientRect
DrawIcon
GetSystemMetrics
EnableWindow
IsIconic
SendMessageA
LoadImageA
MessageBoxA
TrackMouseEvent

gdi32

ExtTextOutA
PolyBezierTo
PolylineTo
SetViewportExtEx
SetMapMode
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectA
GetTextExtentPoint32A
GetTextMetricsA
GetMapMode
SetRectRgn
DPtoLP
CreateCompatibleBitmap
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetDIBits
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
Polygon
Polyline
LPtoDP
MoveToEx
CreateFontA
GetCharWidthA
StretchDIBits
Rectangle
GetRgnBox
OffsetRgn
GetCurrentObject
RoundRect
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPointA
GetTextExtentPoint32W
GetTextFaceA
SetGraphicsMode
SetMapperFlags
SetBkMode
GetObjectA
ExtCreatePen
SetArcDirection
SelectClipPath
PolyDraw
ArcTo
StartDocA
SetColorAdjustment
ModifyWorldTransform
SetWorldTransform
EnumMetaFile
PlayMetaFileRecord
SetTextJustification
SetTextAlign
SetTextColor
SetTextCharacterExtra
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkColor
SelectPalette
SelectObject
ExtSelectClipRgn
TextOutA
GetLayout
EnumFontFamiliesExA
GetStockObject
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
PlayMetaFile
OffsetClipRgn
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetCurrentPositionEx
GetClipRgn
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateDIBPatternBrushPt
CreateCompatibleDC
BitBlt
PatBlt
CreateRectRgnIndirect
CreateBitmap
GetDeviceCaps
CreateDCA
CopyMetaFileA
CreatePolygonRgn
SetLayout
FrameRgn
FillRgn
DeleteObject
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgn
CombineRgn

msimg32

TransparentBlt
AlphaBlend

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA
GetJobA

advapi32

RegDeleteValueA
CryptReleaseContext
CryptGenRandom
GetFileSecurityA
SetFileSecurityA
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
CryptAcquireContextA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegSetValueA
RegCloseKey

shell32

SHAddToRecentDocs
ExtractIconA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileA
DragFinish
ShellExecuteA
ShellExecuteExA
SHAppBarMessage
SHBrowseForFolderA
SHGetMalloc
SHGetFileInfoA

shlwapi

PathFindExtensionA
PathIsUNCA
PathRemoveExtensionA
PathRemoveFileSpecW
StrFormatKBSizeA
PathFindFileNameA
PathStripToRootA

uxtheme

DrawThemeText
DrawThemeParentBackground
GetThemeSysColor
GetWindowTheme
IsAppThemed
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData

ole32

CoCreateGuid
CoCreateInstance
CoInitialize
OleGetIconOfClass
OleRun
CoInitializeEx
StringFromGUID2
CoDisconnectObject
CLSIDFromString
CreateStreamOnHGlobal
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
PropVariantCopy
OleSetMenuDescriptor
OleLockRunning
StgCreateDocfile
StgOpenStorage
StgOpenStorageOnILockBytes
StgIsStorageFile
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CreateILockBytesOnHGlobal
CreateFileMoniker
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleRegGetMiscStatus
OleRegEnumVerbs
StgCreateDocfileOnILockBytes
WriteClassStm
GetHGlobalFromILockBytes
CreateGenericComposite
CreateItemMoniker
OleCreate
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
CoUninitialize
OleLoad
OleSave
OleSaveToStream
CreateDataAdviseHolder
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
CoRegisterClassObject
CoGetClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
OleQueryCreateFromData
OleQueryLinkFromData
CoGetMalloc
OleIsRunning
GetRunningObjectTable
CreateOleAdviseHolder
OleSetContainedObject

oleaut32

SysAllocString
VarDecFromStr
VarBstrFromDec
VarBstrFromDate
VarBstrFromCy
VarCyFromStr
VarDateFromStr
VariantCopy
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayRedim
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SafeArrayCreate
SafeArrayAllocData
SafeArrayAllocDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysReAllocStringLen
SysStringLen
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
SysFreeString
SafeArrayPtrOfIndex

oledlg

ord8

crashrpt1403

ord8
ord24
ord9

winmm

PlaySoundA

gdiplus

GdipDisposeImage
GdipFree
GdipAlloc
GdiplusShutdown
GdipCloneImage
GdiplusStartup
GdipDrawImageRectI
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipGetImageGraphicsContext
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 373B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 1024B - Virtual size: 863B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
crashrpt_lang.ini
dbghelp.dll
.dll windows:10 windows x64 arch:x64

c2a265611426f9f34c59e87a7c46fba1

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:32

Not After

01-09-2022 18:32

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

72:7b:78:38:fd:04:d4:18:b0:a3:ba:25:23:cc:4b:d1:5d:0f:ff:ae:ba:2a:9f:84:84:4c:25:1d:3e:67:87:14
Signer

Actual PE Digest

72:7b:78:38:fd:04:d4:18:b0:a3:ba:25:23:cc:4b:d1:5d:0f:ff:ae:ba:2a:9f:84:84:4c:25:1d:3e:67:87:14

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

dbghelp.pdb

Imports

api-ms-win-crt-string-l1-1-0

memset
wcsnlen
strlen
wcsncmp
strcmp
strcspn
strncmp
wcscmp

api-ms-win-crt-time-l1-1-0

_time64
_ctime64

api-ms-win-crt-locale-l1-1-0

_unlock_locales
_lock_locales

api-ms-win-crt-runtime-l1-1-0

__doserrno
_initterm
_initterm_e

api-ms-win-crt-private-l1-1-0

_o__filelengthi64
_o__fullpath
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__itoa_s
_o__lseeki64
_o__ltoa
_o__mbscmp
_o__memicmp
_o__open_osfhandle
_o__purecall
_o__read
_o__register_onexit_function
_o__seh_filter_dll
_o__splitpath_s
_o__stricmp
_o__strlwr
_o__strnicmp
_o___stdio_common_vsprintf_s
_o__aligned_malloc
_o__wcsdup
_o__wcsicmp
_o__wcslwr
_o__wcsnicmp
_o__wctime64
_o__wdupenv_s
_o__wfsopen
_o__wfullpath
_o__wgetenv
_o__wmakepath_s
_o__wsplitpath_s
_o__wtoi
_o_abort
_o_atoi
_o_atol
_o_bsearch
_o_calloc
_o_ceilf
_o_fclose
_o_fflush
_o_fread
_o_free
_o_frexp
_o_fseek
_o_ftell
_o_isspace
_o_iswprint
_o_iswspace
_o_iswxdigit
_o_localeconv
_o_malloc
_o_qsort
_o_realloc
_o_setlocale
_o_strcat_s
_o_strcpy_s
_o_strncat_s
_o_strncpy_s
_o_terminate
_o_tolower
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcsncat_s
_o_wcsncpy_s
_o_wcstoul
_o_wmemcpy_s
__uncaught_exception
_CxxThrowException
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___stdio_common_vfprintf
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
_o___pctype_func
_o__execute_onexit_table
_o__errno
_o__crt_atexit
_o__configure_narrow_argv
_o__close
_o__aligned_free
_o____mb_cur_max_func
_o____lc_locale_name_func
_o____lc_codepage_func
wcsrchr
strstr
_o__cexit
_o__calloc_base
_o__callnewh
wcsstr
wcschr
__C_specific_handler
__CxxFrameHandler3
memcpy
__unDName
strchr
strrchr
__unDNameEx
memcmp
memmove
_o___stdio_common_vswprintf_s
_o___stdio_common_vsscanf

api-ms-win-core-file-l1-1-0

CreateFileA
GetFinalPathNameByHandleW
RemoveDirectoryW
SetFilePointerEx
GetFileSize
DeleteFileW
FindClose
CreateFileW
SetEndOfFile
GetFileType
SetFileAttributesW
SetFileTime
GetFileInformationByHandle
GetFileSizeEx
GetFileAttributesA
CreateDirectoryW
FindNextFileW
FindFirstFileW
WriteFile
ReadFile
SetFilePointer
CreateDirectoryA
GetFileAttributesW
GetFullPathNameW

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
SetErrorMode
GetLastError
SetLastError
RaiseException
UnhandledExceptionFilter

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionEx
OpenProcess
LeaveCriticalSection
EnterCriticalSection
TryAcquireSRWLockExclusive
InitializeCriticalSection
ReleaseSRWLockExclusive
AcquireSRWLockShared
InitializeCriticalSectionAndSpinCount
InitializeSRWLock
AcquireSRWLockExclusive
DeleteCriticalSection
ReleaseSRWLockShared

api-ms-win-core-processenvironment-l1-1-0

GetEnvironmentVariableW
ExpandEnvironmentStringsW
SetEnvironmentVariableA

api-ms-win-core-misc-l1-1-0

FormatMessageW
Sleep
LocalAlloc
LocalFree

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
TerminateProcess
GetCurrentProcess
GetCurrentThread
TlsGetValue
OpenThreadToken
TlsFree
TlsAlloc
GetCurrentProcessId
TlsSetValue

api-ms-win-core-heap-l1-1-0

HeapReAlloc
GetProcessHeap
HeapFree
HeapAlloc

api-ms-win-core-sysinfo-l1-1-0

GetVersionExA
GetSystemInfo
GetSystemDirectoryW
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
SystemTimeToFileTime

api-ms-win-core-libraryloader-l1-1-0

GetProcAddress
FreeLibrary
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
LoadLibraryExA
GetModuleHandleExW

api-ms-win-security-base-l1-1-0

GetFileSecurityW
AccessCheck
RevertToSelf
ImpersonateSelf

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte

api-ms-win-core-memory-l1-1-0

VirtualFree
VirtualQuery
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
VirtualAlloc
VirtualProtect
MapViewOfFileEx
ReadProcessMemory

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
OutputDebugStringA
IsDebuggerPresent
DebugBreak

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-localization-l1-1-0

LCMapStringW
LCMapStringEx

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc
CoTaskMemFree

oleaut32

SysFreeString

ntdll

RtlUTF8ToUnicodeN
RtlRunOnceExecuteOnce

api-ms-win-downlevel-kernel32-l2-1-0

CreateFileMappingA

api-ms-win-core-localregistry-l1-1-0

RegQueryValueExW
RegCloseKey
RegOpenKeyExW

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-threadpool-l1-1-0

CloseThreadpoolWork
WaitForThreadpoolWorkCallbacks
SubmitThreadpoolWork
CreateThreadpoolWork

api-ms-win-core-sysinfo-l1-2-0

GetNativeSystemInfo

Exports

Exports

DbgHelpCreateUserDump
DbgHelpCreateUserDumpW
EnumDirTree
EnumDirTreeW
EnumerateLoadedModules
EnumerateLoadedModules64
EnumerateLoadedModulesEx
EnumerateLoadedModulesExW
EnumerateLoadedModulesW64
ExtensionApiVersion
FindDebugInfoFile
FindDebugInfoFileEx
FindDebugInfoFileExW
FindExecutableImage
FindExecutableImageEx
FindExecutableImageExW
FindFileInPath
FindFileInSearchPath
GetSymLoadError
GetTimestampForLoadedLibrary
ImageDirectoryEntryToData
ImageDirectoryEntryToDataEx
ImageNtHeader
ImageRvaToSection
ImageRvaToVa
ImagehlpApiVersion
ImagehlpApiVersionEx
MakeSureDirectoryPathExists
MiniDumpReadDumpStream
MiniDumpWriteDump
RangeMapAddPeImageSections
RangeMapCreate
RangeMapFree
RangeMapRead
RangeMapRemove
RangeMapWrite
RemoveInvalidModuleList
ReportSymbolLoadSummary
SearchTreeForFile
SearchTreeForFileW
SetCheckUserInterruptShared
SetSymLoadError
StackWalk
StackWalk2
StackWalk64
StackWalkEx
SymAddSourceStream
SymAddSourceStreamA
SymAddSourceStreamW
SymAddSymbol
SymAddSymbolW
SymAddrIncludeInlineTrace
SymAllocDiaString
SymCleanup
SymCompareInlineTrace
SymDeleteSymbol
SymDeleteSymbolW
SymEnumLines
SymEnumLinesW
SymEnumProcesses
SymEnumSourceFileTokens
SymEnumSourceFiles
SymEnumSourceFilesW
SymEnumSourceLines
SymEnumSourceLinesW
SymEnumSym
SymEnumSymbols
SymEnumSymbolsEx
SymEnumSymbolsExW
SymEnumSymbolsForAddr
SymEnumSymbolsForAddrW
SymEnumSymbolsW
SymEnumTypes
SymEnumTypesByName
SymEnumTypesByNameW
SymEnumTypesW
SymEnumerateModules
SymEnumerateModules64
SymEnumerateModulesW64
SymEnumerateSymbols
SymEnumerateSymbols64
SymEnumerateSymbolsW
SymEnumerateSymbolsW64
SymFindDebugInfoFile
SymFindDebugInfoFileW
SymFindExecutableImage
SymFindExecutableImageW
SymFindFileInPath
SymFindFileInPathW
SymFreeDiaString
SymFromAddr
SymFromAddrW
SymFromIndex
SymFromIndexW
SymFromInlineContext
SymFromInlineContextW
SymFromName
SymFromNameW
SymFromToken
SymFromTokenW
SymFunctionTableAccess
SymFunctionTableAccess64
SymFunctionTableAccess64AccessRoutines
SymGetDiaSession
SymGetDiaSource
SymGetExtendedOption
SymGetFileLineOffsets64
SymGetHomeDirectory
SymGetHomeDirectoryW
SymGetLineFromAddr
SymGetLineFromAddr64
SymGetLineFromAddrEx
SymGetLineFromAddrW64
SymGetLineFromInlineContext
SymGetLineFromInlineContextW
SymGetLineFromName
SymGetLineFromName64
SymGetLineFromNameEx
SymGetLineFromNameW64
SymGetLineNext
SymGetLineNext64
SymGetLineNextEx
SymGetLineNextW64
SymGetLinePrev
SymGetLinePrev64
SymGetLinePrevEx
SymGetLinePrevW64
SymGetModuleBase
SymGetModuleBase64
SymGetModuleInfo
SymGetModuleInfo64
SymGetModuleInfoW
SymGetModuleInfoW64
SymGetOmapBlockBase
SymGetOmaps
SymGetOptions
SymGetScope
SymGetScopeW
SymGetSearchPath
SymGetSearchPathW
SymGetSourceFile
SymGetSourceFileChecksum
SymGetSourceFileChecksumW
SymGetSourceFileFromToken
SymGetSourceFileFromTokenByTokenName
SymGetSourceFileFromTokenByTokenNameW
SymGetSourceFileFromTokenW
SymGetSourceFileToken
SymGetSourceFileTokenByTokenName
SymGetSourceFileTokenByTokenNameW
SymGetSourceFileTokenW
SymGetSourceFileW
SymGetSourceVarFromToken
SymGetSourceVarFromTokenW
SymGetSymFromAddr
SymGetSymFromAddr64
SymGetSymFromName
SymGetSymFromName64
SymGetSymNext
SymGetSymNext64
SymGetSymPrev
SymGetSymPrev64
SymGetSymbolFile
SymGetSymbolFileW
SymGetTypeFromName
SymGetTypeFromNameW
SymGetTypeInfo
SymGetTypeInfoEx
SymGetUnwindInfo
SymInitialize
SymInitializeW
SymLoadModule
SymLoadModule64
SymLoadModuleEx
SymLoadModuleExW
SymMatchFileName
SymMatchFileNameW
SymMatchString
SymMatchStringA
SymMatchStringW
SymNext
SymNextW
SymPrev
SymPrevW
SymQueryInlineTrace
SymRefreshModuleList
SymRegisterCallback
SymRegisterCallback64
SymRegisterCallbackW64
SymRegisterFunctionEntryCallback
SymRegisterFunctionEntryCallback64
SymRegisterGetSourcePathPartCallback
SymRegisterSourceFileUrlListCallback
SymSearch
SymSearchW
SymSetContext
SymSetDiaSession
SymSetExtendedOption
SymSetHomeDirectory
SymSetHomeDirectoryW
SymSetOptions
SymSetParentWindow
SymSetScopeFromAddr
SymSetScopeFromIndex
SymSetScopeFromInlineContext
SymSetSearchPath
SymSetSearchPathW
SymSetServiceManager
SymSrvDeltaName
SymSrvDeltaNameW
SymSrvGetFileIndexInfo
SymSrvGetFileIndexInfoW
SymSrvGetFileIndexString
SymSrvGetFileIndexStringW
SymSrvGetFileIndexes
SymSrvGetFileIndexesW
SymSrvGetSupplement
SymSrvGetSupplementW
SymSrvIsStore
SymSrvIsStoreW
SymSrvStoreFile
SymSrvStoreFileW
SymSrvStoreSupplement
SymSrvStoreSupplementW
SymUnDName
SymUnDName64
SymUnloadModule
SymUnloadModule64
UnDecorateSymbolName
UnDecorateSymbolNameW
WinDbgExtensionDllInit
_EFN_DumpImage
block
chksym
dbghelp
dh
fptr
homedir
inlinedbg
itoldyouso
lmi
lminfo
omap
optdbgdump
optdbgdumpaddr
srcfiles
stack_force_ebp
stackdbg
sym
symsrv
vc7fpo

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 372KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mrdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
example.wav
file_id.diz
language.dll
.dll windows:6 windows x64 arch:x64

894b54c3c53980ad207e2ed90caa6d31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW

Exports

Exports

?ABSENT_T@@3QEBDEB
?ACCESS_DENIED@@3QEBDEB
?ADDITIONAL_SERVICES_ADD_EDIT_BARCODE@@3QEBDEB
?ADDITIONAL_SERVICES_EDIT_POLICY_ALLOWED@@3QEBDEB
?ADDITIONAL_SERVICES_EDIT_POLICY_DENIED@@3QEBDEB
?ADDITIONAL_SERVICES_EDIT_POLICY_DENIED_BUT_ADDING@@3QEBDEB
?ADDITIONAL_SERVICES_PAY_FROM_DEPOSIT@@3QEBDEB
?ADDSERV_PAY_LATER_ADD_TO_DEBT@@3QEBDEB
?ALLOW_SELF_REGISTER_VIA_TELEGRAM@@3QEBDEB
?ALLOW_SHARE_BALANCE_MINUTES@@3QEBDEB
?ALL_STAT_TODAY@@3QEBDEB
?ALREADY_RUN@@3QEBDEB
?ANALIZ_FILTER@@3QEBDEB
?AP_CONPHO_LEFT@@3QEBDEB
?AP_CONPHO_RIGHT1@@3QEBDEB
?AP_CONPHO_RIGHT2@@3QEBDEB
?AP_CONPHO_RIGHT3@@3QEBDEB
?AP_COPYRT2@@3QEBDEB
?AP_EMAILA_LEFT2@@3QEBDEB
?AP_EMAILA_LEFT@@3QEBDEB
?AP_HOMEPA_LEFT2@@3QEBDEB
?AP_HOMEPA_LEFT@@3QEBDEB
?AP_HOMEPA_RIGHT@@3QEBDEB
?AP_INFOPR_LEFT@@3QEBDEB
?AP_INFOPR_RIGHT@@3QEBDEB
?AP_NOVVER_LEFT@@3QEBDEB
?AP_NOVVER_RIGHT@@3QEBDEB
?AP_SERNUM_LEFT@@3QEBDEB
?AP_ST_LICENSE_DETAILS_EXPIRATION_BY@@3QEBDEB
?AP_ST_LICENSE_DETAILS_UNLIMITED@@3QEBDEB
?AP_ST_LICENSE_LABEL@@3QEBDEB
?AP_TITLE@@3QEBDEB
?AP_USERNAME_LEFT@@3QEBDEB
?ASK_FFM_STATIC@@3QEBDEB
?ASK_FFM_TITLE@@3QEBDEB
?ASK_QUESTION@@3QEBDEB
?ASK_ST_MIN@@3QEBDEB
?ASK_ST_PRO@@3QEBDEB
?ASK_TO_ADD_FIRST_FREE_MB@@3QEBDEB
?ASMT_HH@@3QEBDEB
?ASMT_MM@@3QEBDEB
?AUTOASSIGN_AFTER_SUM@@3QEBDEB
?AUTOASSIGN_GROUP@@3QEBDEB
?AUTOMATION_ASK_SHUTDOWN_ON_RESET@@3QEBDEB
?AUTOMATION_DONTSHOW_CLOSESESSION_DIALOG_ON_EXIT@@3QEBDEB
?AUTOMATION_DONTSHOW_PAYMENT_DETAILS_WINDOW_ON_TIMER_STOP@@3QEBDEB
?AUTOMATION_DONT_SEND_MIN_FOR_NAPOMINANIE@@3QEBDEB
?AUTOMATION_MINIMIZE_TO_SYSTEM_TRAY@@3QEBDEB
?AUTOMATION_SHOW_PAY_SUM_FOR_ADMIN@@3QEBDEB
?AUTORESTART_WARNING@@3QEBDEB
?AUTORESTART_WARNING_COMPNUM@@3QEBDEB
?AUTO_SHUTDOWN_EXCEPTION@@3QEBDEB
?AUTO_SHUTDOWN_TITLE_EXCEPTION@@3QEBDEB
?AU_CH1@@3QEBDEB
?AU_CH2@@3QEBDEB
?AU_CH3@@3QEBDEB
?AU_CH4@@3QEBDEB
?BADKEY_MESSAGE@@3QEBDEB
?BALANCE_EXPORT_ITEM@@3QEBDEB
?BALANCE_EXPORT_PRICE@@3QEBDEB
?BALANCE_EXPORT_QUANTITY@@3QEBDEB
?BALANCE_EXPORT_SUM@@3QEBDEB
?BALANCE_MIN_GROUP@@3QEBDEB
?BALANCE_MONEY_DEPOSIT@@3QEBDEB
?BI_ADDITIONAL_PARAMS@@3QEBDEB
?BI_BLOCKING_IMAGES@@3QEBDEB
?BI_INTERVAL_SMENY_KARTINOK@@3QEBDEB
?BL2_ERR1@@3QEBDEB
?BL2_ERR2@@3QEBDEB
?BL2_ERR3@@3QEBDEB
?BL2_ERR4@@3QEBDEB
?BLOCK_RUN_IN_IE@@3QEBDEB
?BOSSMODE_PASSWORD_ENTER_WARNING@@3QEBDEB
?BOSS_LOG@@3QEBDEB
?BUTTON_ADD@@3QEBDEB
?BUTTON_ADD_TO_ORDER_LIST@@3QEBDEB
?BUTTON_BALANCE_EXPORT@@3QEBDEB
?BUTTON_DELETE@@3QEBDEB
?BUTTON_DOWN@@3QEBDEB
?BUTTON_EDIT@@3QEBDEB
?BUTTON_NAME_FREE_TIMER@@3QEBDEB
?BUTTON_NAME_PRICE_SETTINGS@@3QEBDEB
?BUTTON_REMOVE_FROM_ORDER_LIST@@3QEBDEB
?BUTTON_UP@@3QEBDEB
?BUT_CLIENT_SOUND_VOLUME@@3QEBDEB
?BUT_GAMES@@3QEBDEB
?BUT_HARDWARE@@3QEBDEB
?BUT_INET@@3QEBDEB
?BUT_PAUSE@@3QEBDEB
?BUT_RESET@@3QEBDEB
?BUT_SND_DIRECT_SOUND@@3QEBDEB
?BUT_SND_NO@@3QEBDEB
?BUT_SND_PC_SPEAKER@@3QEBDEB
?BUT_START@@3QEBDEB
?BUT_STAT@@3QEBDEB
?C2SETUP_AUTORUN@@3QEBDEB
?C2SETUP_OFF@@3QEBDEB
?C2SETUP_REGISTRY@@3QEBDEB
?C2SETUP_REGISTRY_WINDOWS@@3QEBDEB
?C2SETUP_RUN_ON_CLOSE@@3QEBDEB
?C2SETUP_RUN_ON_CLOSE_SERVICE@@3QEBDEB
?C2SETUP_SERVICE@@3QEBDEB
?CAFE_STEAM_ACCOUNT@@3QEBDEB
?CAFE_STEAM_LOGIN@@3QEBDEB
?CAFE_STEAM_PASSWORD@@3QEBDEB
?CANCEL_SELL_GAME_CARD@@3QEBDEB
?CANCEL_V@@3QEBDEB
?CANTOPENFILE@@3QEBDEB
?CANT_AQUIRE_CONTEXT@@3QEBDEB
?CANT_DOBAV_QUEUE_FULL@@3QEBDEB
?CANT_DOBAV_TK_TIMER@@3QEBDEB
?CANT_OPENCREATE_CONFIG@@3QEBDEB
?CANT_SIT_FREE_ON_ALLNIGHT_MODE@@3QEBDEB
?CCP_CHK_SHOW_ALWAYS_ON_TOP@@3QEBDEB
?CCP_STATE_NO_CONNECTION_WITH_SERVER@@3QEBDEB
?CCP_STATE_REMAINING@@3QEBDEB
?CCP_STATE_SPENT@@3QEBDEB
?CCP_STOP_SESSION@@3QEBDEB
?CCP_YESNO_SURE@@3QEBDEB
?CHANGE_ALT_NAME@@3QEBDEB
?CLBAN_SERVER@@3QEBDEB
?CLBAN_SERVER_ACT_NAPOM@@3QEBDEB
?CLBAN_SERVER_SKOROST_OBNOV@@3QEBDEB
?CLIENT2_SETUP_FIRST_ENTER_PASS@@3QEBDEB
?CLIENT2_SETUP_GROUP_BLOCKING@@3QEBDEB
?CLIENT2_SETUP_GROUP_COMMON@@3QEBDEB
?CLIENT2_SETUP_GROUP_NETWORK@@3QEBDEB
?CLIENT2_SETUP_IP_ADRES_SERVERA@@3QEBDEB
?CLIENT2_SETUP_NOMER_COMPUTERA@@3QEBDEB
?CLIENT2_SETUP_PORT_SERVERA@@3QEBDEB
?CLIENT2_SETUP_VKL_OTKL_AVTOZAP_PROGR@@3QEBDEB
?CLIENT2_SETUP_WINDOW_TITLE@@3QEBDEB
?CLIENT_BANNER_PAUSE_MODE@@3QEBDEB
?CLIENT_COMPUTER_AUTOMATION_TITLE@@3QEBDEB
?CLIENT_CONTROL_PANEL@@3QEBDEB
?CLIENT_DB_OPERATOR_CANT_START_SESSION@@3QEBDEB
?CLIENT_DB_OPERATOR_CANT_USE_BALANCE_MINUTES@@3QEBDEB
?CLIENT_DB_OPERATOR_CANT_USE_BALANCE_MINUTES_AND_DEPOSIT@@3QEBDEB
?CLIENT_SETTINGS_BLOCK_VR_HELMET@@3QEBDEB
?CLIENT_SETTINGS_KANP_EXCEPTIONS@@3QEBDEB
?CLIENT_SETTINGS_PASSWORD_LABEL@@3QEBDEB
?CLOSE_BROWSERS_DELETE_COOKIES@@3QEBDEB
?CLOSE_CHROME_DELETE_COOKIES@@3QEBDEB
?CLOSE_STEAM_LOGIN_ANONYMOUS@@3QEBDEB
?CLOSE_STEAM_LOGIN_CLUB_OR_ANONYMOUS@@3QEBDEB
?CLVINFO_CHECK@@3QEBDEB
?CLVINFO_COMPUTER@@3QEBDEB
?CLVINFO_CONNECTION_ERROR@@3QEBDEB
?CLVINFO_ERRFILE_CANT_CALCULATE@@3QEBDEB
?CLVINFO_ERRFILE_WRONG_MD5@@3QEBDEB
?CLVINFO_OFFLINE@@3QEBDEB
?CLVINFO_OFFLINE_851@@3QEBDEB
?CLVINFO_SSA_FILE_ERROR@@3QEBDEB
?CLVINFO_SSA_FILE_WRONG_VERSION@@3QEBDEB
?CLVINFO_TITLE@@3QEBDEB
?CLVINFO_UPDATE@@3QEBDEB
?CLVINFO_VERSION@@3QEBDEB
?CLVUPD_ERROR_SSA_ERROR@@3QEBDEB
?CLVUPD_ERROR_SSA_OF_WRONG_VER@@3QEBDEB
?CLVUPD_SEND_FILE@@3QEBDEB
?CLVUPD_SEND_FILE_ERROR@@3QEBDEB
?CLVUPD_UPDATE_START@@3QEBDEB
?COMMAND_TELEGRAM_FREE_COMPUTERS@@3QEBDEB
?COMMAND_TELEGRAM_NEWS@@3QEBDEB
?COMPUTER_RELEASE_LIST_COMPUTER@@3QEBDEB
?COMPUTER_RELEASE_LIST_RELEASE_AT@@3QEBDEB
?CONF_NAP_SIG@@3QEBDEB
?CTRL_CLIENT_SOUND_GET_ERROR@@3QEBDEB
?CTRL_CLIENT_SOUND_MUTE_ON_RESET@@3QEBDEB
?CTRL_CLIENT_SOUND_SET_ON_TIME_OPEN@@3QEBDEB
?CTRL_CLIENT_SOUND_STD_SOUND_SETTINGS@@3QEBDEB
?CTRL_CLIENT_SOUND_UNMUTE_ON_TIME_OPEN@@3QEBDEB
?CTRL_CLIENT_SOUND_UPR_TITLE@@3QEBDEB
?CTRL_CLIENT_SOUND_VOLUME_MASTER@@3QEBDEB
?CTRL_CLIENT_SOUND_VOLUME_OFF@@3QEBDEB
?CTRL_CLIENT_SOUND_VOLUME_SET@@3QEBDEB
?CTRL_CLIENT_SOUND_VOLUME_SET_DEFAULT@@3QEBDEB
?CTRL_CLIENT_SOUND_VOLUME_WAVE@@3QEBDEB
?DARK_THEME@@3QEBDEB
?DB_NAME_RESERVATION@@3QEBDEB
?DB_NAME_SETTINGS@@3QEBDEB
?DB_OPEN_ERROR@@3QEBDEB
?DEFAULT_TELEGRAM_BOT_WELCOME_MESSAGE@@3QEBDEB
?DEF_CATEGORY_PS4_NAME@@3QEBDEB
?DEF_CATEGORY_REGULAR_NAME@@3QEBDEB
?DEF_CATEGORY_VIP_NAME@@3QEBDEB
?DEF_NEW_PACKET_NAME@@3QEBDEB
?DEF_PRICE_PACKET_NAME_DAY@@3QEBDEB
?DEF_PRICE_PACKET_NAME_NIGHT@@3QEBDEB
?DEF_RESET_REPORT_DATA_DESCR@@3QEBDEB
?DEF_RESET_REPORT_DATA_DESCR_USLUGI@@3QEBDEB
?DELETE_CATEGORY_WARNING@@3QEBDEB
?DENIED_REBATE_100@@3QEBDEB
?DENIED_RETURN_REST_FOR_BLOCK_SECURITY_SETTINGS@@3QEBDEB
?DENY_CALL_OPERATOR@@3QEBDEB
?DENY_CANCEL_SELL_CARD@@3QEBDEB
?DENY_RETURN_REST_FOR_BLOCK@@3QEBDEB
?DENY_SETTING_SPENT_AMOUNT_TO_ZERO@@3QEBDEB
?DEPOSIT_ENTER_FILL_UP_AMOUNT@@3QEBDEB
?DEPOSIT_ENTER_WITHDRAW_AMOUNT@@3QEBDEB
?DEPOSIT_FILL_UP@@3QEBDEB
?DEPOSIT_OPERATION_ERROR_BY_REMOTE_CLIENT@@3QEBDEB
?DEPOSIT_OPERATION_ERROR_TRY_ON_FREE_COMPUTER@@3QEBDEB
?DEPOSIT_WITHDRAW_MONEY@@3QEBDEB
?DEP_HIDE_CLIENT_FROM_TASK_MANAGER@@3QEBDEB
?DEP_HIDE_CLIENT_ON_WARNING@@3QEBDEB
?DEP_VISTA_TO_DISABLE@@3QEBDEB
?DESCR_PDB_ADD_USER@@3QEBDEB
?DESCR_PDB_CHANGE_INFO@@3QEBDEB
?DESCR_PDB_DELETE_USER@@3QEBDEB
?DESCR_SECURITY_PROBLEM_ID_QUERY_ERROR_MAYBE_USER_ABSENT@@3QEBDEB
?DESCR_SECURITY_PROBLEM_PDB_CORRUPTED_RECORD@@3QEBDEB
?DESCR_SECURITY_PROBLEM_PDB_LENGTH_CHANGED@@3QEBDEB
?DF_AUTOMATION@@3QEBDEB
?DF_AUTOSKIDKA@@3QEBDEB
?DF_AUTOSMENATARIFA@@3QEBDEB
?DF_B_SPISOK@@3QEBDEB
?DF_B_VRNANASTR@@3QEBDEB
?DF_OKRUGLENIEOPLATI@@3QEBDEB
?DF_RESTART_ALL@@3QEBDEB
?DF_SHUTDOWN_ALL@@3QEBDEB
?DIAG_NETWORK_WITH_CLIENTS_TITLE@@3QEBDEB
?DLINA_BOLSHE_99@@3QEBDEB
?DOGA_RTF_CANCEL@@3QEBDEB
?DOGA_RTF_SELECT@@3QEBDEB
?DOG_ARENDY_MANUAL@@3QEBDEB
?DOG_ARENDY_TITLE@@3QEBDEB
?DONT_APPLY_GROUP_DISCOUNT_FOR_PRICING_BLOCKS@@3QEBDEB
?DONT_APPLY_GROUP_DISCOUNT_FOR_PRICING_PACKET@@3QEBDEB
?DOSTUP_ZAPRESHEN@@3QEBDEB
?DU_BLANK_VIBERITE_USLUGU@@3QEBDEB
?DU_DOPOLNITELNIE_USLUGI@@3QEBDEB
?DU_KOLICHESTVO@@3QEBDEB
?DU_K_OPLATE@@3QEBDEB
?DU_LOG3_ITOGO@@3QEBDEB
?DU_LOG3_USLUGI@@3QEBDEB
?DU_OPLATIT@@3QEBDEB
?DU_POGASHENIE_DOLGA@@3QEBDEB
?DU_REDAKTOR_USLUG@@3QEBDEB
?DU_RU_ADD@@3QEBDEB
?DU_RU_CENA@@3QEBDEB
?DU_RU_NAZV@@3QEBDEB
?DU_RU_REMOVE@@3QEBDEB
?DU_ZERO_KOLVO@@3QEBDEB
?ENTER_AMOUNT_OF_DEPOSIT_TO_SHARE@@3QEBDEB
?ENTER_AMOUNT_OF_MINUTES_TO_SHARE@@3QEBDEB
?ENTER_PASSWORD_TO_CLOSE_SESSION@@3QEBDEB
?ENTER_PHONE_NUMBER_TO_SHARE_BALANCE_MINUTES@@3QEBDEB
?ENTER_PHONE_NUMBER_TO_SHARE_DEPOSIT@@3QEBDEB
?ERROR_ACCESS_DENIED_FOR_FUNCTION@@3QEBDEB
?ERROR_CZ_RUN_PLEASE_EXIT@@3QEBDEB
?ERROR_DENIED_IN_SETTINGS@@3QEBDEB
?ERROR_DIDNOT_FIND_PRICE_PER_HOUR_FOR_CATEGORY@@3QEBDEB
?ERROR_NOT_ENOUGH_AMOUNT_OF_SERVICE@@3QEBDEB
?ERROR_RBACKUP_RESTORE@@3QEBDEB
?ERROR_RBACKUP_SAVE@@3QEBDEB
?ERROR_TYPE_NAME_AND_PRICE_ADDSERV@@3QEBDEB
?ERROR_V@@3QEBDEB
?ERROR_YOU_CAN_USE_THIS_TARIFF_CATEGORY@@3QEBDEB
?ERR_LOG3_START@@3QEBDEB
?ERR_MANDATORY_USER_PROFILE@@3QEBDEB
?ERR_MESSAGE_ORDER_NOT_SETUP@@3QEBDEB
?ERR_MESSAGE_POS_ITEM_LIST_RECEIVE_ERROR@@3QEBDEB
?ERR_NOT_ENOUGH_AMOUNT_TO_TAKE@@3QEBDEB
?ERR_PACKET_TIME_IS_FROM_TO@@3QEBDEB
?ERR_RECEIVING_CASH_AMOUNT@@3QEBDEB
?ERR_VOZVRAT_AFTER_PAUSE@@3QEBDEB
?ERR_WRONG_AMOUNT@@3QEBDEB
?FDF_L3GFNP_TEXT@@3QEBDEB
?FILTER_LOG3_ARCHIVE@@3QEBDEB
?FORMAT_AU_CH5@@3QEBDEB
?FORMAT_CCP_CURRENT_TIMER_PAY_SUM@@3QEBDEB
?FORMAT_CCP_DEBT@@3QEBDEB
?FORMAT_CCP_OPERATION_BEGIN@@3QEBDEB
?FORMAT_CCP_OPERATION_END@@3QEBDEB
?FORMAT_CCP_REMAINING_BALANCE@@3QEBDEB
?FORMAT_CCP_REMAINING_DEPOSIT@@3QEBDEB
?FORMAT_HALFNIGHT_PRICE@@3QEBDEB
?FORMAT_LOG3_GAMES_TO_INTERNET@@3QEBDEB
?FORMAT_LOG3_OPERATION_DESCRIPTION_CANCEL_USLUGA_CARD_CATEGORY@@3QEBDEB
?FORMAT_LOG3_OPERATION_DESCRIPTION_USLUGA_CARD@@3QEBDEB
?FORMAT_LOG3_OPERATION_DESCRIPTION_USLUGA_CARD_CATEGORY@@3QEBDEB
?FORMAT_LOG3_OPERATION_DESCRIPTION_USLUGA_FILLUP_DEPOSIT@@3QEBDEB
?FORMAT_LOG3_OPERATION_DESCRIPTION_USLUGA_WITHDRAW_DEPOSIT@@3QEBDEB
?FORMAT_LOG3_REPORT_SECU_SPISOK_BLOCK@@3QEBDEB
?FORMAT_LOG3_REPORT_SECU_SPISOK_CEN@@3QEBDEB
?FORMAT_LOG3_REPORT_SECU_SPISOK_CEN_NOCH@@3QEBDEB
?FORMAT_LOG3_REPORT_SECU_SPISOK_CEN_POLNOCHI@@3QEBDEB
?FORMAT_LOG3_REPORT_SECU_SPISOK_PACKET@@3QEBDEB
?FORMAT_LOG3_REPORT_SECU_SPISOK_PER_HOUR@@3QEBDEB
?FORMAT_MIN_OF@@3QEBDEB
?FORMAT_NIGHT_CENA_ZA_NIGHT@@3QEBDEB
?FORMAT_PARAMBEZ_PRICES_DENY_SWITCHING_GAMES_INET@@3QEBDEB
?FORMAT_PAY_FOR@@3QEBDEB
?FORMAT_PERSONS_DB_ADMIN_HEADER_BALANCE@@3QEBDEB
?FORMAT_PERSONS_INFORMATION_FREE_TIME@@3QEBDEB
?FORMAT_PERSONS_INFORMATION_SPENT_FREE_TIME@@3QEBDEB
?FORMAT_PERSONS_INFORMATION_SPENT_SUM@@3QEBDEB
?FORMAT_PERSONS_INFORMATION_SPENT_SUM_AND_TOTAL@@3QEBDEB
?FORMAT_PERSONS_INFORMATION_SPENT_TIME@@3QEBDEB
?FORMAT_PERSONS_INFORMATION_SUM@@3QEBDEB
?FORMAT_PERSONS_INFORMATION_TIME@@3QEBDEB
?FORMAT_PRICE_BLOCK_STRING@@3QEBDEB
?FORMAT_PRICE_H@@3QEBDEB
?FORMAT_PRICE_PACKET_STRING@@3QEBDEB
?FORMAT_PRICE_PER_HOUR_STRING@@3QEBDEB
?FORMAT_SECSET_TC_DONT_USE_FOR_GAMES@@3QEBDEB
?FORMAT_STR_BALANCE_MINUTES@@3QEBDEB
?FORMAT_STR_BALANCE_TIMER_START_NOT_ENOUGH@@3QEBDEB
?FORMAT_STR_BALANCE_TIMER_START_NOT_ENOUGH_CATEGORY@@3QEBDEB
?FORMAT_STR_CANCEL_SELL_CARD_QUESTION_CATEGORY@@3QEBDEB
?FORMAT_STR_CARDS@@3QEBDEB
?FORMAT_STR_CARDS_ADD@@3QEBDEB
?FORMAT_STR_CARDS_ADD_CATEGORY@@3QEBDEB
?FORMAT_STR_CARDS_EDIT@@3QEBDEB
?FORMAT_STR_CARDS_EDIT_CATEGORY@@3QEBDEB
?FORMAT_STR_CARDS_SELL_QUESTION@@3QEBDEB
?FORMAT_STR_CARDS_SELL_QUESTION_CATEGORY@@3QEBDEB
?FORMAT_STR_CDB_GROUPS_DISCOUNT@@3QEBDEB
?FORMAT_STR_ERR_ADD_GAMES_AFTER_INET_ON_RESTRICTION@@3QEBDEB
?FORMAT_STR_TIP_DENY_TRAFCTRL_IN_GAMES_MODE@@3QEBDEB
?FORMAT_TEXT_SPECIAL_CLIENT_BALANCE_REPORT@@3QEBDEB
?FORMAT_TOTAL_CASH_AMOUNT@@3QEBDEB
?FORMAT_TOTAL_DOLG_AMOUNT@@3QEBDEB
?FORMAT_T_ERR_CHANGE_SEAT_LOCKED_GAMES_INET@@3QEBDEB
?FREE_LIMIT_OUT@@3QEBDEB
?FULL_STAT_ZA@@3QEBDEB
?FUNCTION_NOW_ALLOWED_WHEN_WORKING_WITH_BALANCE_OR_DEPOSIT@@3QEBDEB
?GOGA_USER_ACCEPT@@3QEBDEB
?GOGA_USER_TITLE@@3QEBDEB
?GS_FREE_WORK@@3QEBDEB
?GS_FREE_WORK_BY_REASON@@3QEBDEB
?HALFNIGHT_USE_EXACTLY_HALF_PRICE@@3QEBDEB
?HEADER_PRICES_FOR_BLOCK@@3QEBDEB
?HEADER_PRICES_FOR_HOUR@@3QEBDEB
?HEADER_PRICES_FOR_PACKET@@3QEBDEB
?HN_HALFNIGHT@@3QEBDEB
?HN_NIGHT@@3QEBDEB
?HOWTO_F11_VOICE_CALL@@3QEBDEB
?HTTP_LOG_ERROR_CANTSTART@@3QEBDEB
?HTTP_LOG_OK_STARTED@@3QEBDEB
?HWM_AUTOCHECK_START_STOP@@3QEBDEB
?HWM_BUT_CHECK@@3QEBDEB
?HWM_BUT_SAVE@@3QEBDEB
?HWM_BUT_SHOW@@3QEBDEB
?HWM_CONF_CHANGED@@3QEBDEB
?HWM_DENY_CHECK@@3QEBDEB
?HWM_DENY_SAVE@@3QEBDEB
?HWM_ERR_LOAD@@3QEBDEB
?HWM_HW_RECV_OK@@3QEBDEB
?HWM_IDENTICAL_TO_ETALON@@3QEBDEB
?HWM_NOW@@3QEBDEB
?HWM_TITLE@@3QEBDEB
?HWM_WARN_DIFF@@3QEBDEB
?HWM_WAS@@3QEBDEB
?HW_LB_CPU@@3QEBDEB
?HW_LB_HDD@@3QEBDEB
?HW_LB_RAM@@3QEBDEB
?HW_LB_VIDEO@@3QEBDEB
?IB_FILE_SAVE_ERROR@@3QEBDEB
?IB_SETUP_ADDRULE_ACTION@@3QEBDEB
?IB_SETUP_ADDRULE_ACTION_DROP@@3QEBDEB
?IB_SETUP_ADDRULE_ACTION_FORWARD@@3QEBDEB
?IB_SETUP_ADDRULE_ACTION_SHORT@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION_IP@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION_IP_SHORT@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION_MASK@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION_MASK_SHORT@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION_PORT@@3QEBDEB
?IB_SETUP_ADDRULE_DESTINATION_PORT_SHORT@@3QEBDEB
?IB_SETUP_ADDRULE_PROTOCOL@@3QEBDEB
?IB_SETUP_ADDRULE_PROTOCOL_ALL@@3QEBDEB
?IB_SETUP_ADDRULE_PROTOCOL_ICMP@@3QEBDEB
?IB_SETUP_ADDRULE_PROTOCOL_SHORT@@3QEBDEB
?IB_SETUP_ADDRULE_PROTOCOL_TCP@@3QEBDEB
?IB_SETUP_ADDRULE_PROTOCOL_UDP@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE_IP@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE_IP_SHORT@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE_MASK@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE_MASK_SHORT@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE_PORT@@3QEBDEB
?IB_SETUP_ADDRULE_SOURCE_PORT_SHORT@@3QEBDEB
?IB_SETUP_ALL@@3QEBDEB
?IB_SETUP_BN_ADDRULE@@3QEBDEB
?IB_SETUP_BN_EDITRULE@@3QEBDEB
?IB_SETUP_BN_INETBLOCKING@@3QEBDEB
?IB_SETUP_BN_REMOVERULE@@3QEBDEB
?IB_SETUP_BN_VNIZ@@3QEBDEB
?IB_SETUP_BN_VVERH@@3QEBDEB
?IB_SETUP_CHK_INETBLOCKING@@3QEBDEB
?IB_SETUP_TITLE@@3QEBDEB
?ID_CLIENT@@3QEBDEB
?INFOPORT_T_COMPNSPISOKPROCESSOV@@3QEBDEB
?INFOPORT_T_DESTROY@@3QEBDEB
?INFOPORT_T_ERROR_CONNECT@@3QEBDEB
?INFOPORT_T_ERROR_TRANSFER@@3QEBDEB
?INFOPORT_T_ERROR_TRANSFER_MODULES@@3QEBDEB
?INFOPORT_T_REFRESH@@3QEBDEB
?INFOPORT_T_SPISOKPROCESSOV@@3QEBDEB
?IS_REBRANDING_MODE@@3_NB
?IS_ROUNDOFF_ADD_SERVICES@@3QEBDEB
?IZM_OP_FROM@@3QEBDEB
?KANP_AFTERRESET@@3QEBDEB
?KANP_SETTINGS_ADD_DIRECTORY@@3QEBDEB
?KANP_SETTINGS_ADD_PROGRAM@@3QEBDEB
?KANP_SETTINGS_EXCEPTIONS_DESCRIPTION@@3QEBDEB
?KILL_ACTIVE_PROCESS@@3QEBDEB
?L3_CHOICE_SMENA_BUT_CLOSE@@3QEBDEB
?L3_CHOICE_SMENA_BUT_CREATE@@3QEBDEB
?L3_CHOICE_SMENA_EXIT@@3QEBDEB
?L3_CHOICE_SMENA_RUN@@3QEBDEB
?L3_CHOICE_SMENA_SOZDANA@@3QEBDEB
?L3_CHOICE_SMENA_STATUS_ENTERNAME@@3QEBDEB
?L3_CHOICE_SMENA_STATUS_PRESSCREATE@@3QEBDEB
?L3_SMENA_SURECLOSE@@3QEBDEB
?LABEL_ACTIONS@@3QEBDEB
?LABEL_ACTION_PERSONS_CLEAR_ALL_SPENT_SUM@@3QEBDEB
?LABEL_ALLOW_CROSS_BOUNDARY_PRICE_USAGE@@3QEBDEB
?LABEL_BLOCK_MIN_DURATION@@3QEBDEB
?LABEL_CHK_DENY_SHARE_BALANCE_MINUTES@@3QEBDEB
?LABEL_CLAN@@3QEBDEB
?LABEL_CLEAR_USERNAME_IN_LOGIN_DIALOG@@3QEBDEB
?LABEL_DELAY_CLIENT_COMPUTER_CLEANUP@@3QEBDEB
?LABEL_DENY_PAY_SERVICES_FROM_DEPOSIT@@3QEBDEB
?LABEL_DENY_USE_THIS_TARIFF@@3QEBDEB
?LABEL_ENABLE_EXTENDED_LOGGING@@3QEBDEB
?LABEL_GROUP_UNTIL@@3QEBDEB
?LABEL_INDICATOR_STATE_BUSY@@3QEBDEB
?LABEL_INDICATOR_STATE_BUSY_TIMER@@3QEBDEB
?LABEL_ITEM_QUANTITY_ADD@@3QEBDEB
?LABEL_ITEM_QUANTITY_CURRENT@@3QEBDEB
?LABEL_ITEM_QUANTITY_REMOVE@@3QEBDEB
?LABEL_ITEM_QUANTITY_SORT@@3QEBDEB
?LABEL_LOG3_PERSONS_CLEAR_ALL_SPENT_SUM@@3QEBDEB
?LABEL_LOG3_PERSONS_SHARE_DEPOSIT@@3QEBDEB
?LABEL_LOG3_PERSONS_SHARE_MINUTES@@3QEBDEB
?LABEL_ORDER_LIST@@3QEBDEB
?LABEL_PACKET_NAME@@3QEBDEB
?LABEL_PRICE_FOR_BLOCK@@3QEBDEB
?LABEL_PRICE_FOR_PACKET@@3QEBDEB
?LABEL_PRICE_PER_HOUR@@3QEBDEB
?LABEL_PRICE_PER_HOUR_DAY_TYPE@@3QEBDEB
?LABEL_PRICE_PER_HOUR_HOUR_FROM@@3QEBDEB
?LABEL_PRICE_PER_HOUR_HOUR_TO@@3QEBDEB
?LABEL_TELEGRAM_BOT@@3QEBDEB
?LABEL_TELEGRAM_BOT_ENABLE@@3QEBDEB
?LABEL_TELEGRAM_BOT_TOKEN@@3QEBDEB
?LABEL_TELEGRAM_NEWS@@3QEBDEB
?LABEL_TELEGRAM_START_MENU@@3QEBDEB
?LABEL_TELEGRAM_WELCOME@@3QEBDEB
?LABEL_WARNING_PERSONS_CLEAR_ALL_SPENT_SUM@@3QEBDEB
?LANGUAGE_CHARSET@@3EB
?LANGUAGE_CODE@@3QEBDEB
?LICENSE_EXPIRATION_WARNING@@3QEBDEB
?LICENSE_EXPIRED@@3QEBDEB
?LICINFO_ADDRESS@@3QEBDEB
?LICINFO_BUY_DATE@@3QEBDEB
?LICINFO_CITY@@3QEBDEB
?LICINFO_COMPANY@@3QEBDEB
?LICINFO_COUNTRY@@3QEBDEB
?LICINFO_EMAIL@@3QEBDEB
?LICINFO_FIO@@3QEBDEB
?LICINFO_INDEX@@3QEBDEB
?LICINFO_PHONE@@3QEBDEB
?LICINFO_TITLE@@3QEBDEB
?LINK_DISCONNECT_WITH_COMPUTER@@3QEBDEB
?LIST_OF_MODULES_OF_PROCESS@@3QEBDEB
?LOCK_CLIENT_AFTER_N_MINUTES@@3QEBDEB
?LOCK_CLIENT_GE_TWO_MINUTES@@3QEBDEB
?LOCK_WINDOW_POSITION@@3QEBDEB
?LOCK_WINDOW_POSITION_CENTER@@3QEBDEB
?LOCK_WINDOW_POSITION_TOP_LEFT@@3QEBDEB
?LOG3VIEW_DELETE_OLD_SESSIONS@@3QEBDEB
?LOG3VIEW_RESTART_WAIT@@3QEBDEB
?LOG3_ADDITIONAL_SERVICE_UNBLOCK_USB@@3QEBDEB
?LOG3_BUTTON_EXPORT@@3QEBDEB
?LOG3_BUTTON_PRINT@@3QEBDEB
?LOG3_BUTTON_SERVICE@@3QEBDEB
?LOG3_BUTTON_SHOW_REFRESH@@3QEBDEB
?LOG3_BUT_MAIN_REPORT@@3QEBDEB
?LOG3_CHOICE_SMENA_BUTTON_CANCEL@@3QEBDEB
?LOG3_CHOICE_SMENA_BUTTON_OK@@3QEBDEB
?LOG3_CHOICE_SMENA_MAIN_WINDOW@@3QEBDEB
?LOG3_CHOICE_SMENA_RECORD_ERROR@@3QEBDEB
?LOG3_COMBO_COMPUTER_ALL@@3QEBDEB
?LOG3_COMBO_COMPUTER_N@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_5MIN@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_GRUB@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_IZOP@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_LIFL@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_MAIN@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_PRIC@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_PROC@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_SECU@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_STAT@@3QEBDEB
?LOG3_COMBO_REPORT_TYPE_USLU@@3QEBDEB
?LOG3_COMBO_TIMEMODE_ALLTIME@@3QEBDEB
?LOG3_COMBO_TIMEMODE_SELTIME@@3QEBDEB

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
license.txt

Sharing

General

Malware Config

Signatures

Files

Password: 8765к4увапро

9dda1a1d1f8a1d13ae0297b47046b26e

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1KB - Virtual size: 126KB

.ndata Size: - Virtual size: 64KB

.rsrc Size: 4KB - Virtual size: 4KB

Password: 8765к4увапро

2c10f6f3e9eaa15d70f14c96e757b2e2

Headers

DLL Characteristics

File Characteristics

Imports

wininet

comctl32

shlwapi

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 22KB

.rsrc Size: 212KB - Virtual size: 212KB

.reloc Size: 3KB - Virtual size: 2KB

Password: 8765к4увапро

393be3e2a5dd1a71a8f29b4fd86d774b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

language

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

ws2_32

oledlg

gdiplus

winmm

setupapi

iphlpapi

psapi

crashrpt1403

wtsapi32

openvr_api

oleacc

imm32

Sections

.text Size: 4.9MB - Virtual size: 4.9MB

.rdata Size: 1.4MB - Virtual size: 1.4MB

.data Size: 72KB - Virtual size: 658KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1KB - Virtual size: 126KB

.ndata
Size: - Virtual size: 64KB

.rsrc
Size: 4KB - Virtual size: 4KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 22KB

.rsrc
Size: 212KB - Virtual size: 212KB

.reloc
Size: 3KB - Virtual size: 2KB

.text
Size: 4.9MB - Virtual size: 4.9MB

.rdata
Size: 1.4MB - Virtual size: 1.4MB

.data
Size: 72KB - Virtual size: 658KB

.pdata
Size: 269KB - Virtual size: 269KB

_RDATA
Size: 512B - Virtual size: 500B

.rsrc
Size: 174KB - Virtual size: 174KB

.reloc
Size: 86KB - Virtual size: 86KB

.text
Size: 2.9MB - Virtual size: 2.9MB

.rdata
Size: 920KB - Virtual size: 920KB

.data
Size: 40KB - Virtual size: 71KB

.pdata
Size: 164KB - Virtual size: 164KB

_RDATA
Size: 512B - Virtual size: 500B

.rsrc
Size: 39KB - Virtual size: 38KB

.reloc
Size: 76KB - Virtual size: 76KB

.text
Size: 696KB - Virtual size: 695KB

.rdata
Size: 131KB - Virtual size: 130KB

.data
Size: 8KB - Virtual size: 17KB

.pdata
Size: 34KB - Virtual size: 34KB

_RDATA
Size: 512B - Virtual size: 500B

.rsrc
Size: 39KB - Virtual size: 38KB

.reloc
Size: 4KB - Virtual size: 3KB