O:\src\pywin32\build\temp.win32-2.7\Release\pywintypes.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4833608b35f0b388e0c82250a7f8e8ba10026ddb4a3ce50a7508c3c213828dc2_NeikiAnalytics.dll
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
4833608b35f0b388e0c82250a7f8e8ba10026ddb4a3ce50a7508c3c213828dc2_NeikiAnalytics.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
4833608b35f0b388e0c82250a7f8e8ba10026ddb4a3ce50a7508c3c213828dc2_NeikiAnalytics.exe
-
Size
184KB
-
MD5
e4b9c466d12f1eec33ae16c572301ac0
-
SHA1
ea23c8c21f1da87df668d87209b8217d494c48ca
-
SHA256
4833608b35f0b388e0c82250a7f8e8ba10026ddb4a3ce50a7508c3c213828dc2
-
SHA512
45e96808291ca141c38f3e96a12b1b61b5863a695fb682a9b8640b76d29ee32acac77314b86e3300989dc7fc125ccd4d9296c86813ca3084b60e860d048f6177
-
SSDEEP
3072:K5z1B1kNtTUo+cJt9du4EnVn+JnCAgzY7bi0OcgU70fsNOKBXuFWexg2lQBV+UdN:KN1BCtTUoPJt9du4EnViWY7bi0170ENH
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4833608b35f0b388e0c82250a7f8e8ba10026ddb4a3ce50a7508c3c213828dc2_NeikiAnalytics.exe
Files
-
4833608b35f0b388e0c82250a7f8e8ba10026ddb4a3ce50a7508c3c213828dc2_NeikiAnalytics.exe.dll windows:5 windows x86 arch:x86
65d2f170b5141415ae2f3c82705ce2ed
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
advapi32
InitializeAcl
IsValidAcl
AddAce
GetAce
GetExplicitEntriesFromAclW
GetLengthSid
AddAuditAccessAce
DeleteAce
SetEntriesInAclW
GetEffectiveRightsFromAclW
GetAuditedPermissionsFromAclW
RegCloseKey
GetSecurityDescriptorDacl
GetSecurityDescriptorSacl
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetAclInformation
GetSecurityDescriptorControl
MakeSelfRelativeSD
GetSecurityDescriptorLength
IsValidSecurityDescriptor
MakeAbsoluteSD
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorSacl
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
IsValidSid
InitializeSid
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
CopySid
EqualSid
AllocateAndInitializeSid
IsTextUnicode
user32
wsprintfA
wsprintfW
ole32
CLSIDFromProgID
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
CoCreateGuid
CLSIDFromString
oleaut32
SysAllocStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
SysFreeString
SysStringLen
python27
PyEval_AcquireThread
PyEval_ReleaseThread
PyThreadState_Delete
PyThreadState_Clear
PyErr_SetObject
PyUnicode_DecodeMBCS
PyLong_FromUnsignedLong
PyLong_AsUnsignedLong
PyObject_AsWriteBuffer
PyDict_GetItemString
PyRun_StringFlags
PyImport_ImportModule
PyExc_Exception
PyEval_InitThreads
PyUnicode_Type
PyModule_AddIntConstant
PyModule_GetDict
Py_InitModule4
PyObject_CallObject
PyCallable_Check
PyInt_AsUnsignedLongMask
PyDict_SetItemString
PyInt_AsLong
PyFloat_FromDouble
PyObject_HasAttrString
PySequence_Tuple
PyErr_NoMemory
PyBool_FromLong
PyString_AsString
PyLong_FromUnsignedLongLong
PyLong_FromLongLong
PyLong_AsUnsignedLongLong
PyErr_Occurred
PyLong_AsLongLong
PyExc_PendingDeprecationWarning
PyErr_WarnEx
PyObject_CheckReadBuffer
PyObject_AsReadBuffer
PyUnicodeUCS2_AsWideChar
PyObject_GenericSetAttr
PyErr_Fetch
PyThreadState_New
PyObject_Print
_Py_HashPointer
_Py_TrueStruct
_Py_NotImplementedStruct
_Py_ZeroStruct
PyEval_SaveThread
PyEval_RestoreThread
PyExc_WindowsError
PyExc_AttributeError
PyString_AsStringAndSize
PyString_FromString
PyString_FromStringAndSize
PyType_Type
PyObject_GenericGetAttr
PySequence_Check
PyTuple_SetItem
Py_BuildValue
PyTuple_New
PyArg_ParseTupleAndKeywords
PyExc_ValueError
PyMapping_Check
PyObject_CallMethod
PyDict_New
PySequence_Size
PyTuple_GetItem
PySequence_GetItem
PyDict_SetItem
PyErr_Clear
PyObject_GetAttrString
PyExc_NotImplementedError
PyInt_FromLong
PyArg_ParseTuple
_Py_NoneStruct
PyExc_TypeError
PyErr_SetString
PyExc_MemoryError
PyErr_Format
PyUnicodeUCS2_FromWideChar
PyMem_Free
PyMem_Malloc
PyUnicode_EncodeMBCS
PyString_Size
PyEval_CallObjectWithKeywords
Py_FatalError
PyThreadState_Swap
Py_MakePendingCalls
PyList_New
PyList_Append
PyErr_Restore
PyUnicodeUCS2_AsUnicode
PyNumber_Check
PyExc_SystemError
PyType_Ready
PyErr_BadArgument
msvcr90
_crt_debugger_hook
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
?terminate@@YAXXZ
fprintf
__iob_func
strncpy
wcsncpy
strftime
_mktime64
_localtime64
__CxxFrameHandler3
_snwprintf
??2@YAPAXI@Z
malloc
free
memset
realloc
memcpy
??3@YAXPAX@Z
_strdup
kernel32
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
GetModuleHandleA
LoadLibraryA
GetProcAddress
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
TlsFree
LeaveCriticalSection
EnterCriticalSection
DosDateTimeToFileTime
FormatMessageA
TlsGetValue
LocalAlloc
TlsSetValue
MultiByteToWideChar
GetDateFormatA
GetTimeFormatA
SystemTimeToFileTime
FileTimeToSystemTime
GetTimeZoneInformation
SetLastError
lstrlenA
CloseHandle
GetLastError
LocalFree
Exports
Exports
??0PyACL@@QAE@HH@Z
??0PyACL@@QAE@PAU_ACL@@@Z
??0PyDEVMODEA@@QAE@G@Z
??0PyDEVMODEA@@QAE@PAU_devicemodeA@@@Z
??0PyDEVMODEA@@QAE@XZ
??0PyDEVMODEW@@QAE@G@Z
??0PyDEVMODEW@@QAE@PAU_devicemodeW@@@Z
??0PyDEVMODEW@@QAE@XZ
??0PyHANDLE@@QAE@ABV0@@Z
??0PyHANDLE@@QAE@PAX@Z
??0PyHKEY@@QAE@ABV0@@Z
??0PyHKEY@@QAE@PAX@Z
??0PyIID@@QAE@ABU_GUID@@@Z
??0PyOVERLAPPED@@QAE@PBVsMyOverlapped@0@@Z
??0PyOVERLAPPED@@QAE@XZ
??0PySECURITY_ATTRIBUTES@@QAE@ABU_SECURITY_ATTRIBUTES@@@Z
??0PySECURITY_ATTRIBUTES@@QAE@XZ
??0PySECURITY_DESCRIPTOR@@QAE@H@Z
??0PySECURITY_DESCRIPTOR@@QAE@PAX@Z
??0PySID@@QAE@HPAX@Z
??0PySID@@QAE@PAX@Z
??0PyTime@@QAE@ABU_FILETIME@@@Z
??0PyTime@@QAE@ABU_SYSTEMTIME@@@Z
??0PyTime@@QAE@N@Z
??0PyTime@@QAE@_J@Z
??0PyWAVEFORMATEX@@QAE@ABUtWAVEFORMATEX@@@Z
??0PyWAVEFORMATEX@@QAE@XZ
??0PyWin_AutoFreeBstr@@QAE@PA_W@Z
??0sMyOverlapped@PyOVERLAPPED@@QAE@ABU_OVERLAPPED@@@Z
??0sMyOverlapped@PyOVERLAPPED@@QAE@XZ
??1PyACL@@QAE@XZ
??1PyDEVMODEA@@IAE@XZ
??1PyDEVMODEW@@IAE@XZ
??1PyHANDLE@@UAE@XZ
??1PyHKEY@@UAE@XZ
??1PyOVERLAPPED@@QAE@XZ
??1PySECURITY_ATTRIBUTES@@QAE@XZ
??1PySECURITY_DESCRIPTOR@@QAE@XZ
??1PySID@@QAE@XZ
??1PyWAVEFORMATEX@@QAE@XZ
??1PyWin_AutoFreeBstr@@QAE@XZ
??4PyACL@@QAEAAV0@ABV0@@Z
??4PyDEVMODEA@@QAEAAV0@ABV0@@Z
??4PyDEVMODEW@@QAEAAV0@ABV0@@Z
??4PyHANDLE@@QAEAAV0@ABV0@@Z
??4PyHKEY@@QAEAAV0@ABV0@@Z
??4PyIID@@QAEAAV0@ABV0@@Z
??4PyOVERLAPPED@@QAEAAV0@ABV0@@Z
??4PySECURITY_ATTRIBUTES@@QAEAAV0@ABV0@@Z
??4PySECURITY_DESCRIPTOR@@QAEAAV0@ABV0@@Z
??4PySID@@QAEAAV0@ABV0@@Z
??4PyTime@@QAEAAV0@ABV0@@Z
??4PyWAVEFORMATEX@@QAEAAV0@ABV0@@Z
??4PyWin_AutoFreeBstr@@QAEAAV0@ABV0@@Z
??4sMyOverlapped@PyOVERLAPPED@@QAEAAV01@ABV01@@Z
??BPyHANDLE@@QAEPAXXZ
??BPyWin_AutoFreeBstr@@QAEPA_WXZ
??_7PyHANDLE@@6B@
??_7PyHKEY@@6B@
??_FPyIID@@QAEXXZ
??_FPySECURITY_DESCRIPTOR@@QAEXXZ
??_FPyWin_AutoFreeBstr@@QAEXXZ
?AddAccessAllowedAce@PyACL@@SAPAU_object@@PAU2@0@Z
?AddAccessAllowedAceEx@PyACL@@SAPAU_object@@PAU2@0@Z
?AddAccessAllowedObjectAce@PyACL@@SAPAU_object@@PAU2@0@Z
?AddAccessDeniedAce@PyACL@@SAPAU_object@@PAU2@0@Z
?AddAccessDeniedAceEx@PyACL@@SAPAU_object@@PAU2@0@Z
?AddAccessDeniedObjectAce@PyACL@@SAPAU_object@@PAU2@0@Z
?AddAuditAccessAce@PyACL@@SAPAU_object@@PAU2@0@Z
?AddAuditAccessAceEx@PyACL@@SAPAU_object@@PAU2@0@Z
?AddAuditAccessObjectAce@PyACL@@SAPAU_object@@PAU2@0@Z
?AddMandatoryAce@PyACL@@SAPAU_object@@PAU2@0@Z
?Clear@PyDEVMODEA@@SAPAU_object@@PAU2@0@Z
?Clear@PyDEVMODEW@@SAPAU_object@@PAU2@0@Z
?Close@PyHANDLE@@SAPAU_object@@PAU2@0@Z
?Close@PyHANDLE@@UAEHXZ
?Close@PyHKEY@@UAEHXZ
?DeleteAce@PyACL@@SAPAU_object@@PAU2@0@Z
?Detach@PyHANDLE@@SAPAU_object@@PAU2@0@Z
?Format@PyTime@@SAPAU_object@@PAU2@0@Z
?FreeAbsoluteSD@@YAXPAX@Z
?GetACL@PyACL@@QAEPAU_ACL@@XZ
?GetAce@PyACL@@SAPAU_object@@PAU2@0@Z
?GetAceCount@PyACL@@SAPAU_object@@PAU2@0@Z
?GetAclRevision@PyACL@@SAPAU_object@@PAU2@0@Z
?GetAclSize@PyACL@@SAPAU_object@@PAU2@0@Z
?GetDEVMODE@PyDEVMODEA@@QAEPAU_devicemodeA@@XZ
?GetDEVMODE@PyDEVMODEW@@QAEPAU_devicemodeW@@XZ
?GetLength@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?GetLength@PySID@@SAPAU_object@@PAU2@0@Z
?GetOverlapped@PyOVERLAPPED@@QAEPAU_OVERLAPPED@@XZ
?GetPythonTraceback@@YAPADPAU_object@@00@Z
?GetSA@PySECURITY_ATTRIBUTES@@QAEPAU_SECURITY_ATTRIBUTES@@XZ
?GetSD@PySECURITY_DESCRIPTOR@@QAEPAXXZ
?GetSID@PySID@@QAEPAXXZ
?GetSecurityDescriptorControl@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?GetSecurityDescriptorDacl@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?GetSecurityDescriptorGroup@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?GetSecurityDescriptorOwner@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?GetSecurityDescriptorSacl@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?GetSidIdentifierAuthority@PySID@@SAPAU_object@@PAU2@0@Z
?GetSubAuthority@PySID@@SAPAU_object@@PAU2@0@Z
?GetSubAuthorityCount@PySID@@SAPAU_object@@PAU2@0@Z
?GetTime@PyTime@@QAEHPAN@Z
?GetTime@PyTime@@QAEHPAU_FILETIME@@@Z
?GetTime@PyTime@@QAEHPAU_SYSTEMTIME@@@Z
?GetTypeName@PyHANDLE@@UAEPBDXZ
?GetTypeName@PyHKEY@@UAEPBDXZ
?Initialize@PyACL@@SAPAU_object@@PAU2@0@Z
?Initialize@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?Initialize@PySID@@SAPAU_object@@PAU2@0@Z
?IsEqual@PyIID@@QAEHAAV1@@Z
?IsEqual@PyIID@@QAEHABU_GUID@@@Z
?IsEqual@PyIID@@QAEHPAU_object@@@Z
?IsSelfRelative@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?IsValid@PyACL@@SAPAU_object@@PAU2@0@Z
?IsValid@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?IsValid@PySID@@SAPAU_object@@PAU2@0@Z
?PyACLType@@3U_typeobject@@A
?PyDEVMODEAType@@3U_typeobject@@A
?PyDEVMODEWType@@3U_typeobject@@A
?PyGetAuditedPermissionsFromAcl@PyACL@@SAPAU_object@@PAU2@0@Z
?PyGetEffectiveRightsFromAcl@PyACL@@SAPAU_object@@PAU2@0@Z
?PyGetExplicitEntriesFromAcl@PyACL@@SAPAU_object@@PAU2@0@Z
?PyHANDLEType@@3U_typeobject@@A
?PyIIDType@@3U_typeobject@@A
?PyOVERLAPPEDType@@3U_typeobject@@A
?PyObject_FromWIN32_FIND_DATAA@@YAPAU_object@@PAU_WIN32_FIND_DATAA@@@Z
?PyObject_FromWIN32_FIND_DATAW@@YAPAU_object@@PAU_WIN32_FIND_DATAW@@@Z
?PySECURITY_ATTRIBUTESType@@3U_typeobject@@A
?PySECURITY_DESCRIPTORType@@3U_typeobject@@A
?PySIDType@@3U_typeobject@@A
?PySetEntriesInAcl@PyACL@@SAPAU_object@@PAU2@0@Z
?PySocket_AsSOCKET@@YAHPAU_object@@PAI@Z
?PyTimeType@@3U_typeobject@@A
?PyWAVEFORMATEXType@@3U_typeobject@@A
?PyWinCoreString_FromIID@@YAPAU_object@@ABU_GUID@@@Z
?PyWinCoreString_FromString@@YAPAU_object@@PBDH@Z
?PyWinCoreString_FromString@@YAPAU_object@@PB_WH@Z
?PyWinExc_ApiError@@3PAU_object@@A
?PyWinExc_COMError@@3PAU_object@@A
?PyWinGlobals_Ensure@@YAHXZ
?PyWinGlobals_Free@@YAXXZ
?PyWinInterpreterLock_Acquire@@YAXXZ
?PyWinInterpreterLock_Release@@YAXXZ
?PyWinLong_AsVoidPtr@@YAHPAU_object@@PAPAX@Z
?PyWinLong_FromHANDLE@@YAPAU_object@@PAX@Z
?PyWinLong_FromVoidPtr@@YAPAU_object@@PBX@Z
?PyWinMethod_NewACL@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewHANDLE@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewIID@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewOVERLAPPED@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewSECURITY_ATTRIBUTES@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewSECURITY_DESCRIPTOR@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewSID@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewTime@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewTimeStamp@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewWAVEFORMATEX@@YAPAU_object@@PAU1@0@Z
?PyWinObject_AsACL@@YAHPAU_object@@PAPAU_ACL@@H@Z
?PyWinObject_AsBstr@@YAHPAU_object@@PAPA_WHPAK@Z
?PyWinObject_AsCharArray@@YAHPAU_object@@PAPAPADPAKH@Z
?PyWinObject_AsDATE@@YAHPAU_object@@PAN@Z
?PyWinObject_AsDEVMODE@@YAHPAU_object@@PAPAU_devicemodeA@@H@Z
?PyWinObject_AsDEVMODE@@YAHPAU_object@@PAPAU_devicemodeW@@H@Z
?PyWinObject_AsDWORDArray@@YAHPAU_object@@PAPAKPAKH@Z
?PyWinObject_AsFILETIME@@YAHPAU_object@@PAU_FILETIME@@@Z
?PyWinObject_AsHANDLE@@YAHPAU_object@@PAPAX@Z
?PyWinObject_AsHKEY@@YAHPAU_object@@PAPAUHKEY__@@@Z
?PyWinObject_AsIID@@YAHPAU_object@@PAU_GUID@@@Z
?PyWinObject_AsLARGE_INTEGER@@YAHPAU_object@@PAT_LARGE_INTEGER@@@Z
?PyWinObject_AsMSG@@YAHPAU_object@@PAUtagMSG@@@Z
?PyWinObject_AsMultipleString@@YAHPAU_object@@PAPADHPAK@Z
?PyWinObject_AsMultipleString@@YAHPAU_object@@PAPA_WHPAK@Z
?PyWinObject_AsOVERLAPPED@@YAHPAU_object@@PAPAU_OVERLAPPED@@H@Z
?PyWinObject_AsPARAM@@YAHPAU_object@@PAI@Z
?PyWinObject_AsPOINT@@YAHPAU_object@@PAUtagPOINT@@@Z
?PyWinObject_AsPfnAllocatedWCHAR@@YAHPAU_object@@P6APAXK@ZPAPA_WHPAK@Z
?PyWinObject_AsPyOVERLAPPED@@YAHPAU_object@@PAPAVPyOVERLAPPED@@H@Z
?PyWinObject_AsRECT@@YAHPAU_object@@PAUtagRECT@@@Z
?PyWinObject_AsReadBuffer@@YAHPAU_object@@PAPAXPAKH@Z
?PyWinObject_AsResourceIdA@@YAHPAU_object@@PAPADH@Z
?PyWinObject_AsResourceIdW@@YAHPAU_object@@PAPA_WH@Z
?PyWinObject_AsSECURITY_ATTRIBUTES@@YAHPAU_object@@PAPAU_SECURITY_ATTRIBUTES@@H@Z
?PyWinObject_AsSECURITY_DESCRIPTOR@@YAHPAU_object@@PAPAXH@Z
?PyWinObject_AsSID@@YAHPAU_object@@PAPAXH@Z
?PyWinObject_AsSYSTEMTIME@@YAHPAU_object@@PAU_SYSTEMTIME@@@Z
?PyWinObject_AsString@@YAHPAU_object@@PAPADHPAK@Z
?PyWinObject_AsTaskAllocatedWCHAR@@YAHPAU_object@@PAPA_WHPAK@Z
?PyWinObject_AsULARGE_INTEGER@@YAHPAU_object@@PAT_ULARGE_INTEGER@@@Z
?PyWinObject_AsWAVEFORMATEX@@YAHPAU_object@@PAPAUtWAVEFORMATEX@@H@Z
?PyWinObject_AsWCHAR@@YAHPAU_object@@PAPA_WHPAK@Z
?PyWinObject_AsWCHARArray@@YAHPAU_object@@PAPAPA_WPAKH@Z
?PyWinObject_AsWriteBuffer@@YAHPAU_object@@PAPAXPAKH@Z
?PyWinObject_CloseHANDLE@@YAHPAU_object@@@Z
?PyWinObject_CloseHKEY@@YAHPAU_object@@@Z
?PyWinObject_FreeBstr@@YAXPA_W@Z
?PyWinObject_FreeCharArray@@YAXPAPADK@Z
?PyWinObject_FreeMultipleString@@YAXPAD@Z
?PyWinObject_FreeMultipleString@@YAXPA_W@Z
?PyWinObject_FreeResourceId@@YAXPAD@Z
?PyWinObject_FreeResourceId@@YAXPA_W@Z
?PyWinObject_FreeString@@YAXPAD@Z
?PyWinObject_FreeString@@YAXPA_W@Z
?PyWinObject_FreeTaskAllocatedWCHAR@@YAXPA_W@Z
?PyWinObject_FreeWCHAR@@YAXPA_W@Z
?PyWinObject_FreeWCHARArray@@YAXPAPA_WK@Z
?PyWinObject_FromBstr@@YAPAU_object@@QA_WH@Z
?PyWinObject_FromDATE@@YAPAU_object@@N@Z
?PyWinObject_FromDEVMODE@@YAPAU_object@@PAU_devicemodeA@@@Z
?PyWinObject_FromDEVMODE@@YAPAU_object@@PAU_devicemodeW@@@Z
?PyWinObject_FromFILETIME@@YAPAU_object@@ABU_FILETIME@@@Z
?PyWinObject_FromHANDLE@@YAPAU_object@@PAX@Z
?PyWinObject_FromHKEY@@YAPAU_object@@PAUHKEY__@@@Z
?PyWinObject_FromIID@@YAPAU_object@@ABU_GUID@@@Z
?PyWinObject_FromIO_COUNTERS@@YAPAU_object@@PAU_IO_COUNTERS@@@Z
?PyWinObject_FromLARGE_INTEGER@@YAPAU_object@@AAT_LARGE_INTEGER@@@Z
?PyWinObject_FromMSG@@YAPAU_object@@PBUtagMSG@@@Z
?PyWinObject_FromMultipleString@@YAPAU_object@@PAD@Z
?PyWinObject_FromMultipleString@@YAPAU_object@@PA_W@Z
?PyWinObject_FromOLECHAR@@YAPAU_object@@PB_W@Z
?PyWinObject_FromOLECHAR@@YAPAU_object@@PB_WH@Z
?PyWinObject_FromOVERLAPPED@@YAPAU_object@@PBU_OVERLAPPED@@@Z
?PyWinObject_FromRECT@@YAPAU_object@@PAUtagRECT@@@Z
?PyWinObject_FromSECURITY_ATTRIBUTES@@YAPAU_object@@ABU_SECURITY_ATTRIBUTES@@@Z
?PyWinObject_FromSECURITY_DESCRIPTOR@@YAPAU_object@@PAX@Z
?PyWinObject_FromSID@@YAPAU_object@@PAX@Z
?PyWinObject_FromSYSTEMTIME@@YAPAU_object@@ABU_SYSTEMTIME@@@Z
?PyWinObject_FromTCHAR@@YAPAU_object@@PBDH@Z
?PyWinObject_FromTimeStamp@@YAPAU_object@@ABT_LARGE_INTEGER@@@Z
?PyWinObject_FromULARGE_INTEGER@@YAPAU_object@@AAT_ULARGE_INTEGER@@@Z
?PyWinSequence_Tuple@@YAPAU_object@@PAU1@PAK@Z
?PyWinThreadState_Clear@@YAXXZ
?PyWinThreadState_Ensure@@YAHXZ
?PyWinThreadState_Free@@YAXXZ
?PyWinTimeObject_Fromtime_t@@YAPAU_object@@_J@Z
?PyWinTime_Check@@YAHPAU_object@@@Z
?PyWin_AcquireGlobalLock@@YAXXZ
?PyWin_CopyString@@YAPADPBD@Z
?PyWin_CopyString@@YAPA_WPB_W@Z
?PyWin_GetErrorMessageModule@@YAPAUHINSTANCE__@@K@Z
?PyWin_InterpreterState@@3PAU_is@@A
?PyWin_MakePendingCalls@@YAXXZ
?PyWin_NewUnicode@@YAPAU_object@@PAU1@0@Z
?PyWin_RegisterErrorMessageModule@@YAHKKPAUHINSTANCE__@@@Z
?PyWin_ReleaseGlobalLock@@YAXXZ
?PyWin_SetAPIError@@YAPAU_object@@PADJ@Z
?PyWin_SetBasicCOMError@@YAPAU_object@@J@Z
?SetACL@PyACL@@QAEHPAU_ACL@@@Z
?SetBstr@PyWin_AutoFreeBstr@@QAEXPA_W@Z
?SetSD@PySECURITY_DESCRIPTOR@@QAEHPAX@Z
?SetSecurityDescriptorControl@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?SetSecurityDescriptorDacl@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?SetSecurityDescriptorGroup@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?SetSecurityDescriptorOwner@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?SetSecurityDescriptorSacl@PySECURITY_DESCRIPTOR@@SAPAU_object@@PAU2@0@Z
?SetSubAuthority@PySID@@SAPAU_object@@PAU2@0@Z
?_MakeAbsoluteSD@@YAHPAXPAPAX@Z
?asLong@PyTime@@QAEJXZ
?asStr@PyHANDLE@@QAEPAU_object@@XZ
?binaryFailureFunc@PyHANDLE@@SAPAU_object@@PAU2@0@Z
?binaryFailureFunc@PyTime@@SAPAU_object@@PAU2@0@Z
?compare@PyTime@@QAEHPAU_object@@@Z
?compareFunc@PyTime@@SAHPAU_object@@0@Z
?deallocFunc@PyACL@@SAXPAU_object@@@Z
?deallocFunc@PyDEVMODEA@@SAXPAU_object@@@Z
?deallocFunc@PyDEVMODEW@@SAXPAU_object@@@Z
?deallocFunc@PyHANDLE@@SAXPAU_object@@@Z
?deallocFunc@PyIID@@SAXPAU_object@@@Z
?deallocFunc@PyOVERLAPPED@@SAXPAU_object@@@Z
?deallocFunc@PySECURITY_ATTRIBUTES@@SAXPAU_object@@@Z
?deallocFunc@PySECURITY_DESCRIPTOR@@SAXPAU_object@@@Z
?deallocFunc@PySID@@SAXPAU_object@@@Z
?deallocFunc@PyTime@@SAXPAU_object@@@Z
?deallocFunc@PyWAVEFORMATEX@@SAXPAU_object@@@Z
?floatFunc@PyTime@@SAPAU_object@@PAU2@@Z
?get_DeviceName@PyDEVMODEA@@SAPAU_object@@PAU2@PAX@Z
?get_DeviceName@PyDEVMODEW@@SAPAU_object@@PAU2@PAX@Z
?get_DriverData@PyDEVMODEA@@SAPAU_object@@PAU2@PAX@Z
?get_DriverData@PyDEVMODEW@@SAPAU_object@@PAU2@PAX@Z
?get_FormName@PyDEVMODEA@@SAPAU_object@@PAU2@PAX@Z
?get_FormName@PyDEVMODEW@@SAPAU_object@@PAU2@PAX@Z
?get_handle@PyHANDLE@@SAPAU_object@@PAU2@PAX@Z
?getattro@PyOVERLAPPED@@SAPAU_object@@PAU2@0@Z
?getattro@PySECURITY_ATTRIBUTES@@SAPAU_object@@PAU2@0@Z
?getattro@PyTime@@SAPAU_object@@PAU2@0@Z
?getreadbuf@PySECURITY_DESCRIPTOR@@SAHPAU_object@@HPAPAX@Z
?getreadbuf@PySID@@SAHPAU_object@@HPAPAX@Z
?getsegcount@PySECURITY_DESCRIPTOR@@SAHPAU_object@@PAH@Z
?getsegcount@PySID@@SAHPAU_object@@PAH@Z
?getset@PyDEVMODEA@@2PAUPyGetSetDef@@A
?getset@PyDEVMODEW@@2PAUPyGetSetDef@@A
?getset@PyHANDLE@@2PAUPyGetSetDef@@A
?hash@PyHANDLE@@QAEJXZ
?hash@PyIID@@QAEJXZ
?hash@PyTime@@QAEJXZ
?hashFunc@PyHANDLE@@SAJPAU_object@@@Z
?hashFunc@PyIID@@SAJPAU_object@@@Z
?hashFunc@PyOVERLAPPED@@SAJPAU_object@@@Z
?hashFunc@PyTime@@SAJPAU_object@@@Z
?intFunc@PyHANDLE@@SAPAU_object@@PAU2@@Z
?intFunc@PyTime@@SAPAU_object@@PAU2@@Z
?longFunc@PyHANDLE@@SAPAU_object@@PAU2@@Z
?members@PyDEVMODEA@@2PAUPyMemberDef@@A
?members@PyDEVMODEW@@2PAUPyMemberDef@@A
?members@PyOVERLAPPED@@2PAUPyMemberDef@@A
?members@PySECURITY_ATTRIBUTES@@2PAUPyMemberDef@@A
?members@PyWAVEFORMATEX@@2PAUPyMemberDef@@A
?methods@PyACL@@2PAUPyMethodDef@@A
?methods@PyDEVMODEA@@2PAUPyMethodDef@@A
?methods@PyDEVMODEW@@2PAUPyMethodDef@@A
?methods@PyHANDLE@@2PAUPyMethodDef@@A
?methods@PySECURITY_ATTRIBUTES@@2PAUPyMethodDef@@A
?methods@PySECURITY_DESCRIPTOR@@2PAUPyMethodDef@@A
?methods@PySID@@2PAUPyMethodDef@@A
?methods@PyTime@@2PAUPyMethodDef@@A
?modify_in_place@PyDEVMODEA@@QAEXXZ
?modify_in_place@PyDEVMODEW@@QAEXXZ
?nonzeroFunc@PyHANDLE@@SAHPAU_object@@@Z
?nonzeroFunc@PyTime@@SAHPAU_object@@@Z
?print@PyHANDLE@@QAEHPAU_iobuf@@H@Z
?printFunc@PyHANDLE@@SAHPAU_object@@PAU_iobuf@@H@Z
?repr@PyIID@@QAEPAU_object@@XZ
?repr@PyTime@@QAEPAU_object@@XZ
?reprFunc@PyIID@@SAPAU_object@@PAU2@@Z
?reprFunc@PyTime@@SAPAU_object@@PAU2@@Z
?richcompare@PyHANDLE@@QAEPAU_object@@PAU2@H@Z
?richcompare@PyIID@@QAEPAU_object@@PAU2@H@Z
?richcompare@PySID@@QAEPAU_object@@PAU2@H@Z
?richcompare@PyTime@@QAEPAU_object@@PAU2@H@Z
?richcompareFunc@PyHANDLE@@SAPAU_object@@PAU2@0H@Z
?richcompareFunc@PyIID@@SAPAU_object@@PAU2@0H@Z
?richcompareFunc@PyOVERLAPPED@@SAPAU_object@@PAU2@0H@Z
?richcompareFunc@PySID@@SAPAU_object@@PAU2@0H@Z
?richcompareFunc@PyTime@@SAPAU_object@@PAU2@0H@Z
?set_DeviceName@PyDEVMODEA@@SAHPAU_object@@0PAX@Z
?set_DeviceName@PyDEVMODEW@@SAHPAU_object@@0PAX@Z
?set_DriverData@PyDEVMODEA@@SAHPAU_object@@0PAX@Z
?set_DriverData@PyDEVMODEW@@SAHPAU_object@@0PAX@Z
?set_FormName@PyDEVMODEA@@SAHPAU_object@@0PAX@Z
?set_FormName@PyDEVMODEW@@SAHPAU_object@@0PAX@Z
?setattro@PyOVERLAPPED@@SAHPAU_object@@00@Z
?setattro@PySECURITY_ATTRIBUTES@@SAHPAU_object@@00@Z
?str@PyIID@@QAEPAU_object@@XZ
?str@PyTime@@QAEPAU_object@@XZ
?strFunc@PyHANDLE@@SAPAU_object@@PAU2@@Z
?strFunc@PyIID@@SAPAU_object@@PAU2@@Z
?strFunc@PySID@@SAPAU_object@@PAU2@@Z
?strFunc@PyTime@@SAPAU_object@@PAU2@@Z
?ternaryFailureFunc@PyHANDLE@@SAPAU_object@@PAU2@00@Z
?ternaryFailureFunc@PyTime@@SAPAU_object@@PAU2@00@Z
?tp_new@PyDEVMODEA@@SAPAU_object@@PAU_typeobject@@PAU2@1@Z
?tp_new@PyDEVMODEW@@SAPAU_object@@PAU_typeobject@@PAU2@1@Z
?unaryFailureFunc@PyHANDLE@@SAPAU_object@@PAU2@@Z
?unaryFailureFunc@PyTime@@SAPAU_object@@PAU2@@Z
_DllMain@12
initpywintypes
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ