ulib.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1a5ef905bcf3522aae22f64f26de7a168e364534ae7f1eca9459471380dc55c0.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a5ef905bcf3522aae22f64f26de7a168e364534ae7f1eca9459471380dc55c0.dll
Resource
win10v2004-20240508-en
General
-
Target
1a5ef905bcf3522aae22f64f26de7a168e364534ae7f1eca9459471380dc55c0
-
Size
401KB
-
MD5
fe79c05f16217e1566b0d1fbbe837def
-
SHA1
a231a0d6e81d947f63d17967584bcae9db60e4de
-
SHA256
1a5ef905bcf3522aae22f64f26de7a168e364534ae7f1eca9459471380dc55c0
-
SHA512
9802fa68c4e630412510be55f47db18d479d0b5169f3d927b1142351a6970ccac69ab62d988d663849a92cb16850b32999cb6820e0dc64a8f59a14f2e4f5291c
-
SSDEEP
3072:ziQqab/88eiCdnCoHToWU+xJ3azya3lIdcZ5HRSGQM2QJvhScfTNnXbv1jghiYEW:ziQHbCLP40n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a5ef905bcf3522aae22f64f26de7a168e364534ae7f1eca9459471380dc55c0
Files
-
1a5ef905bcf3522aae22f64f26de7a168e364534ae7f1eca9459471380dc55c0.dll windows:5 windows x86 arch:x86
ca79b1af741fc016186dba37a6b49923
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_wcslwr
_wcsupr
_wcsicmp
wcscmp
isalpha
wcschr
wcsrchr
wcsstr
wcsspn
wcscspn
towupper
isdigit
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
free
atol
iswctype
sprintf
setlocale
wprintf
wctomb
wcslen
wcscat
isprint
toupper
isspace
strcspn
mbtowc
_except_handler3
strchr
wcsncmp
swprintf
wcscpy
qsort
memmove
ntdll
RtlAllocateHeap
RtlFreeHeap
NtDelayExecution
RtlPrefixUnicodeString
RtlInitUnicodeString
RtlSizeHeap
NtQuerySecurityObject
NtClose
NtQueryInformationFile
NtOpenFile
RtlDosPathNameToNtPathName_U
RtlOemToUnicodeN
RtlMultiByteToUnicodeN
RtlUnicodeToOemN
RtlUnicodeToMultiByteN
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
CompareStringW
MultiByteToWideChar
FindFirstFileW
GetStdHandle
GetSystemTime
GetDateFormatW
GetSystemDefaultLCID
GetTimeFormatW
CompareFileTime
SystemTimeToFileTime
FileTimeToSystemTime
GetTempPathW
GetTempFileNameW
GlobalFree
LocalFileTimeToFileTime
FileTimeToLocalFileTime
GetFileType
GetDriveTypeW
SearchPathW
GetEnvironmentVariableW
GetSystemDirectoryW
LoadLibraryW
GetProcAddress
FreeLibrary
GetVolumeInformationW
LocalAlloc
SetLastError
DeviceIoControl
LocalFree
DeleteVolumeMountPointW
WriteFile
GetLargestConsoleWindowSize
SetConsoleWindowInfo
SetConsoleScreenBufferSize
WriteConsoleW
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
IsDBCSLeadByte
GetCurrentProcess
GetCommandLineW
GetLastError
FormatMessageW
InterlockedDecrement
GetModuleHandleW
LoadLibraryExW
InterlockedCompareExchange
SetThreadLocale
GetUserDefaultLCID
GetConsoleOutputCP
CloseHandle
SetCommState
GetCommTimeouts
GetCommState
SetCommTimeouts
CreateFileW
CreateDirectoryW
FindClose
FindNextFileW
RemoveDirectoryW
DeleteFileW
SetFileAttributesW
PrivCopyFileExW
GetFileAttributesW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
SetFilePointerEx
ReadFile
SetFileTime
MoveFileW
SetConsoleMode
GetConsoleMode
SetConsoleCtrlHandler
FlushConsoleInputBuffer
PeekConsoleInputW
GetNumberOfConsoleInputEvents
WideCharToMultiByte
GetFullPathNameW
FindVolumeMountPointClose
FindNextVolumeMountPointW
FindFirstVolumeMountPointW
SetErrorMode
GetVolumeNameForVolumeMountPointW
ExitProcess
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
GetConsoleCP
SetConsoleCP
SetConsoleOutputCP
user32
wsprintfA
CharUpperW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
IsTextUnicode
Exports
Exports
??0ARGUMENT_LEXEMIZER@@QAE@XZ
??0ARRAY@@QAE@XZ
??0BDSTRING@@QAE@ABV0@@Z
??0BDSTRING@@QAE@XZ
??0BITVECTOR@@QAE@XZ
??0BSTRING@@IAE@XZ
??0BSTRING@@QAE@ABV0@@Z
??0BYTE_STREAM@@QAE@XZ
??0CHKDSK_MESSAGE@@QAE@XZ
??0CLASS_DESCRIPTOR@@QAE@XZ
??0COMM_DEVICE@@QAE@XZ
??0CONT_MEM@@QAE@XZ
??0DSTRING@@QAE@ABV0@@Z
??0DSTRING@@QAE@XZ
??0FLAG_ARGUMENT@@QAE@XZ
??0FSN_FILTER@@QAE@XZ
??0FSTRING@@QAE@ABV0@@Z
??0FSTRING@@QAE@XZ
??0HMEM@@QAE@XZ
??0KEYBOARD@@QAE@XZ
??0LIST@@QAE@XZ
??0LONG_ARGUMENT@@QAE@XZ
??0MACHINE@@QAE@XZ
??0MEM_ALLOCATOR@@QAE@XZ
??0MEM_BLOCK_MGR@@QAE@XZ
??0MESSAGE@@QAE@XZ
??0MULTIPLE_PATH_ARGUMENT@@QAE@XZ
??0OBJECT@@IAE@XZ
??0OBJECT@@QAE@ABV0@@Z
??0PATH@@QAE@XZ
??0PATH_ARGUMENT@@QAE@XZ
??0PRINT_STREAM@@QAE@XZ
??0PROGRAM@@IAE@XZ
??0REST_OF_LINE_ARGUMENT@@QAE@XZ
??0SCREEN@@QAE@XZ
??0SORTED_LIST@@QAE@XZ
??0STREAM_MESSAGE@@QAE@XZ
??0STRING_ARGUMENT@@QAE@XZ
??0STRING_ARRAY@@QAE@XZ
??0TIMEINFO@@QAE@XZ
??0TIMEINFO_ARGUMENT@@QAE@XZ
??0WSTRING@@IAE@XZ
??0WSTRING@@QAE@ABV0@@Z
??1ARGUMENT_LEXEMIZER@@UAE@XZ
??1ARRAY@@UAE@XZ
??1BDSTRING@@UAE@XZ
??1BITVECTOR@@UAE@XZ
??1BSTRING@@UAE@XZ
??1BYTE_STREAM@@UAE@XZ
??1CHKDSK_MESSAGE@@UAE@XZ
??1COMM_DEVICE@@UAE@XZ
??1DSTRING@@UAE@XZ
??1FSN_FILTER@@UAE@XZ
??1FSTRING@@UAE@XZ
??1HMEM@@UAE@XZ
??1LIST@@UAE@XZ
??1MEM_ALLOCATOR@@UAE@XZ
??1MEM_BLOCK_MGR@@UAE@XZ
??1MESSAGE@@UAE@XZ
??1MULTIPLE_PATH_ARGUMENT@@UAE@XZ
??1OBJECT@@UAE@XZ
??1PATH@@UAE@XZ
??1PATH_ARGUMENT@@UAE@XZ
??1PRINT_STREAM@@UAE@XZ
??1PROGRAM@@UAE@XZ
??1SCREEN@@UAE@XZ
??1SORTED_LIST@@UAE@XZ
??1STREAM_MESSAGE@@UAE@XZ
??1STRING_ARGUMENT@@UAE@XZ
??1TIMEINFO_ARGUMENT@@UAE@XZ
??1WSTRING@@UAE@XZ
??4BDSTRING@@QAEAAV0@ABV0@@Z
??4BSTRING@@QAEAAV0@ABV0@@Z
??4DSTRING@@QAEAAV0@ABV0@@Z
??4FSTRING@@QAEAAV0@ABV0@@Z
??4OBJECT@@QAEAAV0@ABV0@@Z
??4WSTRING@@QAEAAV0@ABV0@@Z
??8WSTRING@@QBEEABV0@@Z
??9WSTRING@@QBEEABV0@@Z
??MTIMEINFO@@QBEEV0@@Z
??MWSTRING@@QBEEABV0@@Z
??NWSTRING@@QBEEABV0@@Z
??OTIMEINFO@@QBEEV0@@Z
??OWSTRING@@QBEEABV0@@Z
??PWSTRING@@QBEEABV0@@Z
??_7BDSTRING@@6B@
??_7BSTRING@@6B@
??_7DSTRING@@6B@
??_7FSTRING@@6B@
??_7OBJECT@@6B@
??_7WSTRING@@6B@
?Acquire@CONT_MEM@@UAEPAXKK@Z
?Acquire@HMEM@@UAEPAXKK@Z
?Alloc@MEM_BLOCK_MGR@@QAEPAXXZ
?Allocate@MEM_ALLOCATOR@@QAEPAXK@Z
?AnalyzePath@PATH@@QAE?AW4PATH_ANALYZE_CODE@@PAVWSTRING@@PAV1@0@Z
?AppendBase@PATH@@QAEEPBVWSTRING@@E@Z
?AppendDelimiter@PATH@@QAEEXZ
?AppendString@PATH@@QAEEPBVWSTRING@@@Z
?Cast@FILE_STREAM@@SGPAV1@PBVOBJECT@@@Z
?Cast@KEYBOARD@@SGPAV1@PBVOBJECT@@@Z
?Cast@SCREEN@@SGPAV1@PBVOBJECT@@@Z
?ChangeScreenSize@SCREEN@@QAEEGGPAE@Z
?CharNextW@MBSTR@@SGPADPAD@Z
?CheckSpace@WSTRING@@CGHPAG@Z
?CommitState@COMM_DEVICE@@QAEEXZ
?Compare@OBJECT@@UBEJPBV1@@Z
?ComputeCountSet@BITVECTOR@@ABEKXZ
?Construct@BDSTRING@@AAEXXZ
?Construct@BSTRING@@IAEXXZ
?Construct@DSTRING@@AAEXXZ
?Construct@OBJECT@@IAEXXZ
?Construct@WSTRING@@IAEXXZ
?ConvertOemToUnicodeN@WSTRING@@CGEPAGKPAKPADK@Z
?ConvertToLocal@TIMEINFO@@QAEEXZ
?ConvertToUTC@TIMEINFO@@QAEEXZ
?ConvertUnicodeToOemN@WSTRING@@CGEPADKPAKPAGK@Z
?Copy@FSN_FILE@@QBEEPAVPATH@@PAW4_COPY_ERROR@@KP6GKT_LARGE_INTEGER@@222KKPAX33@Z3PAH@Z
?CreateDirectoryPath@FSN_DIRECTORY@@QBEPAV1@PBVPATH@@@Z
?DeleteAllMembers@ARRAY@@UAEEXZ
?DeleteAllMembers@SEQUENTIAL_CONTAINER@@UAEEXZ
?DeleteAllMembers@SORTED_LIST@@UAEEXZ
?DeleteChAt@BSTRING@@QAEXKK@Z
?DeleteChAt@WSTRING@@QAEXKK@Z
?DeleteDirectory@FSN_DIRECTORY@@QAEEXZ
?DisableBreakHandling@KEYBOARD@@SGEXZ
?DisableLineMode@KEYBOARD@@QAEEXZ
?Display@MESSAGE@@QAAEPBDZZ
?DisplayMessage@PROGRAM@@UBAEKW4MESSAGE_TYPE@@PADZZ
?DisplayMessage@PROGRAM@@UBEEKW4MESSAGE_TYPE@@@Z
?DisplayMsg@MESSAGE@@QAAEKPBDZZ
?DisplayMsg@MESSAGE@@QAAEKW4MESSAGE_TYPE@@KPBDZZ
?DisplayMsg@MESSAGE@@QAEEK@Z
?DisplayMsg@MESSAGE@@QAEEKW4MESSAGE_TYPE@@K@Z
?DisplaySystemError@SYSTEM@@SGXKH@Z
?DoNotRestoreConsoleMode@KEYBOARD@@UAEXXZ
?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?DoesNodeMatch@FSN_FILTER@@QAEEPAVFSNODE@@@Z
?DumpDataToLog@MESSAGE@@QAEEPAXK@Z
?EnableBreakHandling@KEYBOARD@@SGEXZ
?EnableLineMode@KEYBOARD@@QAEEXZ
?EndsWithDelimiter@PATH@@QBEEXZ
?EraseScreen@SCREEN@@QAEEXZ
?EraseScreenAndResetAttribute@SCREEN@@QAEEXZ
?ExitProgram@PROGRAM@@SGXK@Z
?Fatal@PROGRAM@@UBAXKKPADZZ
?Fatal@PROGRAM@@UBEXXZ
?FillAndReadByte@BYTE_STREAM@@AAEEPAE@Z
?FindFirstFileW@@YGPAXPBVPATH@@PAU_WIN32_FIND_DATAW@@@Z
?Flush@KEYBOARD@@QAEEXZ
?Free@MEM_BLOCK_MGR@@QAEEPAX@Z
?FreeLibraryHandle@SYSTEM@@SGXPAX@Z
?GetClassDescriptor@OBJECT@@QBEPBVCLASS_DESCRIPTOR@@XZ
?GetFileSecurityBackup@SYSTEM@@SGEPBVPATH@@KPAU_SECURITY_ATTRIBUTES@@PAK@Z
?GetLexeme@ARGUMENT@@QAEPAVWSTRING@@XZ
?GetLexemeAt@ARGUMENT_LEXEMIZER@@QAEPAVWSTRING@@K@Z
?GetNext@FSN_DIRECTORY@@QAEPAVFSNODE@@PAPAXPAK@Z
?GetPFlagBreak@KEYBOARD@@QBEQAHXZ
?GetPattern@ARGUMENT@@QAEPAVWSTRING@@XZ
?GetStandardError@PROGRAM@@UAEPAVSTREAM@@XZ
?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ
?GetStandardOutput@PROGRAM@@UAEPAVSTREAM@@XZ
?GetWSTR@WSTRING@@QBEPBGXZ
?Get_Standard_Error_Stream@@YGPAVSTREAM@@XZ
?Get_Standard_Input_Stream@@YGPAVSTREAM@@XZ
?Get_Standard_Output_Stream@@YGPAVSTREAM@@XZ
?GotABreak@KEYBOARD@@SGEXZ
?HasWildCard@PATH@@QBEEXZ
?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?Initialize@ARRAY@@QAEEKK@Z
?Initialize@BITVECTOR@@QAEEKW4BIT@@PAK@Z
?Initialize@BSTRING@@QAEEPBDK@Z
?Initialize@BSTRING@@QAEEXZ
?Initialize@BYTE_STREAM@@QAEEPAVSTREAM@@K@Z
?Initialize@CHKDSK_MESSAGE@@QAEEPAVSTREAM@@00@Z
?Initialize@CLASS_DESCRIPTOR@@QAEEXZ
?Initialize@COMM_DEVICE@@QAEEPBVPATH@@PAE@Z
?Initialize@CONT_MEM@@QAEEPAXK@Z
?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z
?Initialize@FLAG_ARGUMENT@@QAEEPAVWSTRING@@@Z
?Initialize@FSN_FILTER@@QAEEXZ
?Initialize@FSTRING@@QAEPAVWSTRING@@PAGK@Z
?Initialize@HMEM@@QAEEXZ
?Initialize@KEYBOARD@@QAEEEE@Z
?Initialize@LIST@@QAEEXZ
?Initialize@LONG_ARGUMENT@@QAEEPAD@Z
?Initialize@MACHINE@@QAEEXZ
?Initialize@MEM_ALLOCATOR@@QAEE_KK@Z
?Initialize@MEM_BLOCK_MGR@@QAEEKK@Z
?Initialize@MESSAGE@@QAEEXZ
?Initialize@MULTIPLE_PATH_ARGUMENT@@QAEEPADEE@Z
?Initialize@PATH@@QAEEPBGE@Z
?Initialize@PATH@@QAEEPBV1@E@Z
?Initialize@PATH@@QAEEPBVWSTRING@@E@Z
?Initialize@PATH_ARGUMENT@@QAEEPADE@Z
?Initialize@PRINT_STREAM@@QAEEPBVPATH@@@Z
?Initialize@PROGRAM@@QAEEKKK@Z
?Initialize@REST_OF_LINE_ARGUMENT@@QAEEXZ
?Initialize@SCREEN@@QAEEXZ
?Initialize@SORTED_LIST@@QAEEE@Z
?Initialize@STREAM_MESSAGE@@QAEEPAVSTREAM@@00@Z
?Initialize@STRING_ARGUMENT@@QAEEPAD@Z
?Initialize@STRING_ARRAY@@QAEEKKK@Z
?Initialize@TIMEINFO@@QAEEPAU_FILETIME@@@Z
?Initialize@TIMEINFO@@QAEXPBV1@@Z
?Initialize@TIMEINFO_ARGUMENT@@QAEEPAD@Z
?Initialize@WSTRING@@QAEEJ@Z
?Initialize@WSTRING@@QAEEPBDK@Z
?Initialize@WSTRING@@QAEEPBGK@Z
?Initialize@WSTRING@@QAEEPBV1@KK@Z
?Initialize@WSTRING@@QAEEXZ
?Insert@LIST@@QAEEPAVOBJECT@@PAVITERATOR@@@Z
?InsertString@WSTRING@@QAEEKPBV1@KK@Z
?IsCorrectVersion@SYSTEM@@SGEXZ
?IsDrive@PATH@@QBEEXZ
?IsEmpty@FSN_DIRECTORY@@QBEEXZ
?IsFMR@MACHINE@@QAEEXZ
?IsGuidVolName@PATH@@QAEEXZ
?IsInAutoChk@MESSAGE@@UAEEXZ
?IsInSetup@MESSAGE@@UAEEXZ
?IsKeyAvailable@KEYBOARD@@QBEEPAE@Z
?IsKeyPressed@MESSAGE@@UAEEKK@Z
?IsLoggingEnabled@MESSAGE@@QAEEXZ
?IsPC98@MACHINE@@QAEEXZ
?IsPCAT@MACHINE@@QAEEXZ
?IsSameClass@OBJECT@@QBEEPBV1@@Z
?IsSameObject@OBJECT@@QBEEPBV1@@Z
?IsSuppressedMessage@MESSAGE@@UAEEXZ
?IsValueSet@ARGUMENT@@QAEEXZ
?IsYesResponse@CHKDSK_MESSAGE@@UAEEE@Z
?IsYesResponse@MESSAGE@@UAEEE@Z
?IsYesResponse@STREAM_MESSAGE@@UAEEE@Z
?Lock@MESSAGE@@QAEXXZ
?Log@MESSAGE@@QAAEPBDZZ
?LogMessage@MESSAGE@@QAEEPBVWSTRING@@@Z
?LogMsg@MESSAGE@@QAAEKPBDZZ
?LogMsg@MESSAGE@@QAEEK@Z
?MachinePlatform@@3VMACHINE@@A
?MakeDirectory@SYSTEM@@SGPAVFSN_DIRECTORY@@PBVPATH@@0PAW4_COPY_ERROR@@P6GKT_LARGE_INTEGER@@222KKPAX33@Z3PAHK@Z
?MakeFile@SYSTEM@@SGPAVFSN_FILE@@PBVPATH@@@Z
?MakeTemporaryFile@SYSTEM@@SGPAVFSN_FILE@@PBVWSTRING@@PBVPATH@@@Z
?ModifyName@PATH@@QAEEPBVWSTRING@@@Z
?MoveCursorTo@SCREEN@@QAEEGG@Z
?NewBuf@BDSTRING@@UAEEK@Z
?NewBuf@DSTRING@@UAEEK@Z
?NewBuf@FSTRING@@UAEEK@Z
?NextChar@BSTRING@@QAEKK@Z
?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z
?Put@ARRAY@@UAEEPAVOBJECT@@@Z
?Put@LIST@@UAEEPAVOBJECT@@@Z
?Put@SORTED_LIST@@UAEEPAVOBJECT@@@Z
?PutMultipleSwitch@ARGUMENT_LEXEMIZER@@QAEXPBD@Z
?PutMultipleSwitch@ARGUMENT_LEXEMIZER@@QAEXPBVWSTRING@@@Z
?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z
?PutString@BSTRING@@IAEXPADK@Z
?PutString@WSTRING@@IAEXPAG@Z
?PutString@WSTRING@@IAEXPAGK@Z
?PutSwitches@ARGUMENT_LEXEMIZER@@QAEXPBD@Z
?PutSwitches@ARGUMENT_LEXEMIZER@@QAEXPBVWSTRING@@@Z
?QueryByteCount@WSTRING@@QBEKXZ
?QueryChAt@WSTRING@@QBEGK@Z
?QueryChCount@BSTRING@@QBEKXZ
?QueryChCount@WSTRING@@QBEKXZ
?QueryClassId@OBJECT@@QBEKXZ
?QueryCodePage@SCREEN@@QAEKXZ
?QueryComponentArray@PATH@@QBEPAVARRAY@@PAV2@@Z
?QueryCurrentDosDriveName@SYSTEM@@SGEPAVWSTRING@@@Z
?QueryDate@TIMEINFO@@QBEEPAVWSTRING@@@Z
?QueryDirectory@SYSTEM@@SGPAVFSN_DIRECTORY@@PBVPATH@@E@Z
?QueryDriveType@SYSTEM@@SG?AW4DRIVE_TYPE@@PBVWSTRING@@@Z
?QueryEnvironmentVariable@SYSTEM@@SGPAVWSTRING@@PBV2@@Z
?QueryFile@SYSTEM@@SGPAVFSN_FILE@@PBVPATH@@EPAE@Z
?QueryFileType@SYSTEM@@SG?AW4FILE_TYPE@@PBVWSTRING@@@Z
?QueryFsnodeArray@FSN_DIRECTORY@@QBEPAVARRAY@@PAVFSN_FILTER@@@Z
?QueryFullPath@PATH@@QBEPAV1@XZ
?QueryFullPathString@PATH@@QBEPAVWSTRING@@XZ
?QueryGuidString@PATH@@QAEPAVWSTRING@@PAV2@PAE0@Z
?QueryInvalidArgument@ARGUMENT_LEXEMIZER@@QAEPAVWSTRING@@XZ
?QueryIterator@ARRAY@@UBEPAVITERATOR@@XZ
?QueryIterator@LIST@@UBEPAVITERATOR@@XZ
?QueryIterator@SORTED_LIST@@UBEPAVITERATOR@@XZ
?QueryLibraryEntryPoint@SYSTEM@@SGP6GHXZPBVWSTRING@@0PAPAX@Z
?QueryLocalTimeFromUTime@SYSTEM@@SGEPBVTIMEINFO@@PAV2@@Z
?QueryMemberCount@SORTED_LIST@@UBEKXZ
?QueryMountPointPath@PATH@@QAEPAV1@XZ
?QueryNextLoggedMessage@MESSAGE@@QAEEPAVFSTRING@@@Z
?QueryNumber@WSTRING@@QBEEPAJKK@Z
?QueryPackedLog@MESSAGE@@QAEEPAVHMEM@@PAK@Z
?QueryPath@PATH@@QBEPAV1@XZ
?QueryResourceString@BASE_SYSTEM@@SAEPAVWSTRING@@KPBDZZ
?QueryResourceStringV@BASE_SYSTEM@@SGEPAVWSTRING@@KPBDPAD@Z
?QueryRoot@PATH@@QAEPAVWSTRING@@XZ
?QuerySTR@BSTRING@@QBEPADKKPADKE@Z
?QuerySTR@WSTRING@@QBEPADKKPADKE@Z
?QueryScreenSize@SCREEN@@QBEXPAG000@Z
?QueryStream@FSN_FILE@@QAEPAVFILE_STREAM@@W4STREAMACCESS@@K@Z
?QueryString@WSTRING@@QBEPAV1@KK@Z
?QueryStringInput@MESSAGE@@UAEEPAVWSTRING@@@Z
?QuerySystemDirectory@SYSTEM@@SGPAVPATH@@XZ
?QueryTime@TIMEINFO@@QBEEPAVWSTRING@@@Z
?QueryTimeOut@COMM_DEVICE@@QBEEXZ
?QueryVolumeLabel@SYSTEM@@SGPAVWSTRING@@PAVPATH@@PAU_VOL_SERIAL_NUMBER@@@Z
?QueryWCExpansion@PATH@@QAEPAV1@PAV1@@Z
?QueryWSTR@WSTRING@@QBEPAGKKPAGKE@Z
?QueryWindowsErrorMessage@SYSTEM@@SGEKPAVWSTRING@@@Z
?ReadAt@FILE_STREAM@@QAEEPAEK_JW4SEEKORIGIN@@PAK@Z
?ReadLine@STREAM@@QAEEPAVWSTRING@@E@Z
?ReadMbLine@STREAM@@QAEEPADKPAKEK@Z
?ReadWLine@STREAM@@QAEEPAGKPAKEK@Z
?Remove@ARRAY@@UAEPAVOBJECT@@PAVITERATOR@@@Z
?RemoveNode@SYSTEM@@SGEPAPAVFSNODE@@E@Z
?Replace@WSTRING@@QAEEKKPBV1@KK@Z
?ReplaceWithChars@BSTRING@@QAEEKKDK@Z
?ReplaceWithChars@WSTRING@@QAEEKKGK@Z
?ResetBit@BITVECTOR@@QAEXKK@Z
?ResetConversions@WSTRING@@SGXXZ
?ResetLoggingIterator@MESSAGE@@QAEXXZ
?Resize@BDSTRING@@UAEEK@Z
?Resize@DSTRING@@UAEEK@Z
?Resize@FSTRING@@UAEEK@Z
?Resize@HMEM@@QAEEKK@Z
?SearchPathW@SYSTEM@@SGPAVPATH@@PAVWSTRING@@0@Z
?SelectResponse@MESSAGE@@UAAKKZZ
?Set@CHKDSK_MESSAGE@@UAEEKW4MESSAGE_TYPE@@K@Z
?Set@STREAM_MESSAGE@@UAEEKW4MESSAGE_TYPE@@K@Z
?SetAllowSwitchGlomming@ARGUMENT_LEXEMIZER@@QAEXE@Z
?SetAnsiConversions@WSTRING@@SGXXZ
?SetAttributes@FSN_FILTER@@QAEEKKK@Z
?SetBaudRate@COMM_DEVICE@@QAEEK@Z
?SetBit@BITVECTOR@@QAEXKK@Z
?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z
?SetChAt@WSTRING@@QAEGGK@Z
?SetClassDescriptor@OBJECT@@IAEXPBVCLASS_DESCRIPTOR@@@Z
?SetCodePage@SCREEN@@QAEEK@Z
?SetConsoleConversions@WSTRING@@SGXXZ
?SetDataBits@COMM_DEVICE@@QAEEK@Z
?SetDevice@PATH@@QAEEPBVWSTRING@@@Z
?SetDotsOnly@MESSAGE@@UAEEE@Z
?SetDtrControl@COMM_DEVICE@@QAEEW4DTR_CONTROL@@@Z
?SetFileName@FSN_FILTER@@QAEEPBD@Z
?SetFileName@FSN_FILTER@@QAEEPBVWSTRING@@@Z
?SetIdsr@COMM_DEVICE@@QAEEE@Z
?SetLoggingEnabled@MESSAGE@@QAEXE@Z
?SetName@PATH@@QAEEPBVWSTRING@@@Z
?SetNoSpcBetweenDstAndSwitch@ARGUMENT_LEXEMIZER@@QAEXE@Z
?SetOcts@COMM_DEVICE@@QAEEE@Z
?SetOdsr@COMM_DEVICE@@QAEEE@Z
?SetOemConversions@WSTRING@@SGXXZ
?SetOutputCodePage@SCREEN@@QAEEK@Z
?SetParity@COMM_DEVICE@@QAEEW4PARITY@@@Z
?SetRtsControl@COMM_DEVICE@@QAEEW4RTS_CONTROL@@@Z
?SetSize@BITVECTOR@@QAEKKW4BIT@@@Z
?SetStopBits@COMM_DEVICE@@QAEEW4STOPBITS@@@Z
?SetTimeInfo@FSN_FILTER@@QAEEPBVTIMEINFO@@W4FSN_TIME@@G@Z
?SetTimeOut@COMM_DEVICE@@QAEEE@Z
?SetXon@COMM_DEVICE@@QAEEE@Z
?SkipWhite@WSTRING@@SGPAGPAG@Z
?Sort@STRING_ARRAY@@UAEEE@Z
?Strcat@WSTRING@@QAEEPBV1@@Z
?Strchr@BSTRING@@QBEKDK@Z
?Strchr@WSTRING@@QBEKGK@Z
?Strcmp@WSTRING@@QBEJPBV1@@Z
?Strcmp@WSTRING@@QBEJPBV1@K@Z
?Strcmp@WSTRING@@QBEJPBV1@KKKK@Z
?Strcmp@WSTRING@@SGHPAG0@Z
?Strcmpis@MBSTR@@SGHPAD0@Z
?Strcmpis@WSTRING@@SGHPAG0@Z
?Strcmps@MBSTR@@SGHPAD0@Z
?Strcmps@WSTRING@@SGHPAG0@Z
?Strcspn@WSTRING@@QBEKPBV1@K@Z
?Stricmp@MBSTR@@SGHPAD0@Z
?Stricmp@WSTRING@@QBEJPBV1@@Z
?Stricmp@WSTRING@@QBEJPBV1@K@Z
?Stricmp@WSTRING@@QBEJPBV1@KKKK@Z
?Stricmp@WSTRING@@SGHPAG0@Z
?Strlwr@WSTRING@@QAEPAV1@KK@Z
?Strlwr@WSTRING@@QAEPAV1@XZ
?Strrchr@WSTRING@@QBEKGK@Z
?Strspn@WSTRING@@QBEKPBV1@K@Z
?Strstr@MBSTR@@SGPADPAD0@Z
?Strstr@WSTRING@@QBEKPBV1@@Z
?Strupr@WSTRING@@QAEPAV1@KK@Z
?Strupr@WSTRING@@QAEPAV1@XZ
?SyncLength@WSTRING@@QAEKXZ
?Traverse@FSN_DIRECTORY@@QBEEPAXPAVFSN_FILTER@@PAVPATH@@P6GE0PAVFSNODE@@2@Z@Z
?Truncate@WSTRING@@QAEKK@Z
?TruncateBase@PATH@@QAEEXZ
?TruncateDelimiter@PATH@@QAEXXZ
?TruncateNameAtColon@PATH@@QAEXXZ
?UlibRealloc@@YGPAXPAXK@Z
?Unlock@MESSAGE@@QAEXXZ
?Usage@PROGRAM@@UBEXXZ
?UseAlternateName@FSNODE@@QAEEXZ
?ValidateVersion@PROGRAM@@UBEXKK@Z
?WaitForUserSignal@MESSAGE@@UAEEXZ
?WriteByte@STREAM@@QAEEE@Z
?_UseAnsiConversions@WSTRING@@0EA
?_UseAnsiConversionsPrev@WSTRING@@0EA
?_UseConsoleConversions@WSTRING@@0EA
?_UseConsoleConversionsPrev@WSTRING@@0EA
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ