J:\LXLIB8\Release\WINCORE.pdb
Static task
static1
General
-
Target
WINCORE.dll
-
Size
142KB
-
MD5
5cde7682c9ea4981a50a1552d87d68a4
-
SHA1
aa7e116c7d549b196f938b6414c047d73de7ec36
-
SHA256
c840c9f8b05a7af31b6e6e7569225c92a11f4b23d2148d11e1181714191e81c9
-
SHA512
865780e02ea4e9a59e884537461a628fb36d17cb9897f1a0e45381c8a6c68aa9080fab5ad2a10b2a167ace04c94990cef83ba8979919cca5019a876f6b81fbc5
-
SSDEEP
3072:YXJeAYHeEVbfkwJLQVhqqJXYJxFkWpEOvPHK4tJ:8sAYHdbcwJLyhVWpEOvPHPz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource WINCORE.dll
Files
-
WINCORE.dll.dll windows:5 windows x86 arch:x86
5a26f03b56aa42e20f3d587d3781c80a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
lxlcore
filestem
?contains@BOX@@QBEHABVPOINT@@@Z
roundfpc
?chktok@@YAHPAPADPAD@Z
?chkchr@@YAHPAPADD@Z
?remove@DPA@@QAEPADPAX@Z
??0DPA@@QAE@H@Z
?add@DPA@@QAEHPAXH@Z
??1DPA@@QAE@XZ
stpcpy
pathtrim
?add@DIDX@@QAEHPADPAX@Z
charrpl
?fmtrgb@@YAHPADKH@Z
?getrgb@@YAHPAPADPAK@Z
mkpath
strippath
?set@BOX@@QAEAAV1@HHHH@Z
strnzcpy
?add@PROPLIST@@QAEHPBD0@Z
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
comctl32
ord410
ord413
ord412
msimg32
GradientFill
kernel32
MoveFileA
GetTickCount
CreateToolhelp32Snapshot
Module32First
Module32Next
MultiByteToWideChar
TerminateProcess
FindCloseChangeNotification
FindNextChangeNotification
Sleep
FindClose
GetCurrentThreadId
FindFirstChangeNotificationA
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
GetVersion
FreeLibrary
LoadLibraryA
GlobalMemoryStatusEx
LocalFree
LocalAlloc
GetLastError
FreeResource
LockResource
LoadResource
FindResourceA
GetTimeFormatA
GetDateFormatA
GetLocaleInfoA
GetTimeZoneInformation
FileTimeToDosDateTime
GetProfileStringA
WideCharToMultiByte
GetEnvironmentVariableA
SetUnhandledExceptionFilter
ResumeThread
GetThreadContext
SuspendThread
OpenThread
Thread32First
Thread32Next
DeleteFileA
SetEvent
OpenEventA
GlobalAddAtomA
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
GetCurrentProcess
GetCurrentProcessId
GetProcAddress
GetModuleFileNameA
InterlockedDecrement
InterlockedIncrement
GlobalFree
CreateFileA
WriteFile
CloseHandle
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalDeleteAtom
GetModuleHandleA
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
FindFirstFileA
user32
DdeQueryStringA
SetWindowTextA
SetFocus
SetWindowPos
DeferWindowPos
SetWindowLongA
CreateWindowExA
InvalidateRect
LoadIconA
LoadCursorA
RegisterClassA
BeginDeferWindowPos
DdeNameService
DdeInitializeA
IsClipboardFormatAvailable
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
WaitMessage
GetScrollPos
PostMessageA
GetAsyncKeyState
GetScrollInfo
DrawTextA
FillRect
GetParent
EnumChildWindows
EnumWindows
GetClassNameA
SetWindowPlacement
IsWindowVisible
GetWindowPlacement
AdjustWindowRectEx
ScreenToClient
MapVirtualKeyA
GetKeyNameTextA
GetAncestor
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
PeekMessageA
MessageBeep
MessageBoxA
CloseClipboard
DdeCreateDataHandle
DdeUnaccessData
DdeAccessData
DdeFreeDataHandle
DdeGetData
DdeClientTransaction
DdeUninitialize
DdeDisconnect
DdeFreeStringHandle
DdeConnect
DdeCreateStringHandleA
PostThreadMessageA
GetDC
ReleaseDC
GetPropA
SendMessageA
IsIconic
IsZoomed
MapWindowPoints
GetWindowLongA
PtInRect
GetCursorPos
WindowFromPoint
UnregisterClassA
SetPropA
EndDeferWindowPos
IsWindow
RemovePropA
CallWindowProcA
DefWindowProcA
MonitorFromRect
GetMonitorInfoA
GetWindowRect
GetSystemMetrics
GetClientRect
gdi32
CreateBitmap
CreateFontA
SetBkColor
BitBlt
SetTextColor
SetPixel
CreateCompatibleDC
SetBkMode
CreateBrushIndirect
GetDeviceCaps
CreateICA
EnumFontsA
DeleteDC
SelectPalette
RealizePalette
GetDIBits
GetObjectA
GetStockObject
CreatePen
CreateSolidBrush
SelectObject
Rectangle
GetPixel
DeleteObject
advapi32
GetLengthSid
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegOpenKeyA
SetSecurityInfo
AddAccessAllowedAceEx
InitializeAcl
RegSetValueA
RegQueryValueExA
RegDeleteValueA
RegEnumKeyA
RegEnumValueA
AllocateAndInitializeSid
RegCloseKey
ole32
CoRevokeClassObject
CoRegisterClassObject
StringFromCLSID
CoTaskMemFree
dbghelp
MiniDumpWriteDump
msvcp120
?_Locinfo_dtor@_Locinfo@std@@SAXPAV12@@Z
_Getctype
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??_7?$ctype@D@std@@6B@
??_7_Facet_base@std@@6B@
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
??1_Lockit@std@@QAE@XZ
?_Id_cnt@id@locale@std@@0HA
?id@?$ctype@D@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
?uncaught_exception@std@@YA_NXZ
?_Locinfo_ctor@_Locinfo@std@@SAXPAV12@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?do_narrow@?$ctype@D@std@@MBEDDD@Z
?do_narrow@?$ctype@D@std@@MBEPBDPBD0DPAD@Z
?do_tolower@?$ctype@D@std@@MBEPBDPADPBD@Z
?do_widen@?$ctype@D@std@@MBEDD@Z
?do_widen@?$ctype@D@std@@MBEPBDPBD0PAD@Z
?do_toupper@?$ctype@D@std@@MBEDD@Z
?do_toupper@?$ctype@D@std@@MBEPBDPADPBD@Z
?do_tolower@?$ctype@D@std@@MBEDD@Z
msvcr120
_ltoa
??_V@YAXPAX@Z
??3@YAXPAX@Z
vsprintf
??2@YAPAXI@Z
__CxxFrameHandler3
exit
wcstombs
sprintf
free
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?_set_new_mode@@YAHH@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
malloc
fclose
fwrite
fopen
_CxxThrowException
_access
_beginthread
realloc
toupper
_isctype
bsearch
qsort
??0exception@std@@QAE@ABQBD@Z
_localtime64
_gmtime64
_time64
_snprintf
atol
_vsnprintf
memmove
ftell
fseek
fgetc
strncpy
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
getenv
_purecall
?what@exception@std@@UBEPBDXZ
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
_except_handler4_common
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__clean_type_info_names_internal
memset
memcpy
?terminate@@YAXXZ
Exports
Exports
??0BASEWIN@@QAE@ABV0@@Z
??0BASEWIN@@QAE@KPAUHWND__@@H@Z
??0BASEWIN@@QAE@PAUHWND__@@@Z
??0BASEWIN@@QAE@PBDKPAUHWND__@@H@Z
??0CFactory@@QAE@ABV0@@Z
??0CFactory@@QAE@PBUCFactoryData@@@Z
??0CUnknown@@QAE@ABV0@@Z
??0CUnknown@@QAE@PAUIUnknown@@@Z
??0DDESERVER@@QAE@ABV0@@Z
??0DDESERVER@@QAE@XZ
??0DDESVRDATA@@QAE@PAVDDESERVER@@PAUHSZ__@@@Z
??0EXCEPTION_HANDLER@@QAE@XZ
??0FILEMONITOR@@QAE@XZ
??0REGISTRY32@@QAE@ABV0@@Z
??0REGISTRY32@@QAE@PAUHKEY__@@PBD@Z
??0REGISTRY@@QAE@ABV0@@Z
??0REGISTRY@@QAE@XZ
??0STRINGTABLE@@QAE@H@Z
??0STRINGTABLE@@QAE@PBDHPAUHINSTANCE__@@@Z
??1BASEWIN@@UAE@XZ
??1CFactory@@QAE@XZ
??1CUnknown@@UAE@XZ
??1DDESERVER@@QAE@XZ
??1EXCEPTION_HANDLER@@QAE@XZ
??1FILEMONITOR@@QAE@XZ
??1REGISTRY32@@UAE@XZ
??1REGISTRY@@UAE@XZ
??1STRINGTABLE@@QAE@XZ
??4BASEWIN@@QAEAAV0@ABV0@@Z
??4CFactory@@QAEAAV0@ABV0@@Z
??4CUnknown@@QAEAAV0@ABV0@@Z
??4DDESERVER@@QAEAAV0@ABV0@@Z
??4DDESVRDATA@@QAEAAV0@ABV0@@Z
??4DDESVRDATA@@QAEXAAPAUHDDEDATA__@@@Z
??4DDESVRDATA@@QAEXPBD@Z
??4EXCEPTION_HANDLER@@QAEAAV0@ABV0@@Z
??4FILEMONITOR@@QAEAAV0@ABV0@@Z
??4REGISTRY32@@QAEAAV0@ABV0@@Z
??4REGISTRY@@QAEAAV0@ABV0@@Z
??4STRINGTABLE@@QAEAAV0@AAV0@@Z
??ASTRINGTABLE@@QAEPBDK@Z
??_7BASEWIN@@6B@
??_7CFactory@@6B@
??_7CUnknown@@6B@
??_7DDESERVER@@6B@
??_7REGISTRY32@@6B@
??_7REGISTRY@@6B@
??_FBASEWIN@@QAEXXZ
??_FSTRINGTABLE@@QAEXXZ
?ActiveComponents@CUnknown@@SAJXZ
?AddRef@CFactory@@UAGKXZ
?CanUnloadNow@CFactory@@SAJXZ
?CloseExe@CFactory@@SAXXZ
?CreateBrush@@YAPAUHBRUSH__@@IKJ@Z
?CreateFontA@@YAPAUHFONT__@@PBDHHK@Z
?CreateInstance@CFactory@@UAGJPAUIUnknown@@ABU_GUID@@PAPAX@Z
?CreateMiniDump@EXCEPTION_HANDLER@@AAEXPAU_EXCEPTION_POINTERS@@KPADK@Z
?DDBtoDIB@@YAPAXPBDPAUHBITMAP__@@PAUHPALETTE__@@IH@Z
?FillBox@@YAXPAUHDC__@@ABVBOX@@PAUHBRUSH__@@@Z
?FillPolygon@@YAXPAUHDC__@@HHHHK@Z
?FillRect@@YAXPAUHDC__@@PBUtagRECT@@K@Z
?FinalRelease@CUnknown@@UAEXXZ
?FinishQI@CUnknown@@QAEJPAUIUnknown@@PAPAX@Z
?GetClassObject@CFactory@@SAJABU_GUID@@0PAPAX@Z
?GetOuterUnknown@CUnknown@@IBEPAUIUnknown@@XZ
?GetScrollTrackPos32@@YAHPAUHWND__@@H@Z
?GradientFillRect@@YAXPAUHDC__@@PAUtagRECT@@KKH@Z
?Init@CUnknown@@UAEJXZ
?InitMinidumpInfo@EXCEPTION_HANDLER@@AAEXXZ
?IsLocked@CFactory@@SAHXZ
?IsParentWindow@@YAHPAUHWND__@@0@Z
?LockServer@CFactory@@UAGJH@Z
?ModuleSignature@EXCEPTION_HANDLER@@AAEHPADPBD@Z
?NondelegatingAddRef@CUnknown@@UAGKXZ
?NondelegatingQueryInterface@CUnknown@@UAGJABU_GUID@@PAPAX@Z
?NondelegatingRelease@CUnknown@@UAGKXZ
?ParseCommandLine@CFactory@@SAHPAD@Z
?QueryInterface@CFactory@@UAGJABU_GUID@@PAPAX@Z
?Rectangle@@YAXPAUHDC__@@ABUtagRECT@@KK@Z
?RegisterAll@CFactory@@SAJXZ
?RegisterServer@@YAJPAUHINSTANCE__@@ABU_GUID@@PBD22@Z
?Release@CFactory@@UAGKXZ
?SetFactoryData@CFactory@@SAXPAUCFactoryData@@J@Z
?StartFactories@CFactory@@SAHXZ
?StartFactory@CFactory@@SAHPAUCFactoryData@@@Z
?StopFactories@CFactory@@SAXXZ
?StopFactory@CFactory@@SAXPAUCFactoryData@@@Z
?TransparentBlt@@YAXPAUHDC__@@HHHH0HHK@Z
?UnregisterAll@CFactory@@SAJXZ
?UnregisterServer@@YAJABU_GUID@@PBD1@Z
?addtohistory@@YAXPBDQAPADPAHH@Z
?adjust_colour@@YAKKH@Z
?ascii_to_html@@YAPADPBDPADHH@Z
?assign@DDESVRDATA@@QAEXPAXK@Z
?associate@@YAHPAD000@Z
?bigfilesize@@YA_KPBD@Z
?callrecoveryproc@EXCEPTION_HANDLER@@QAEHPBD@Z
?capitalise@@YAPADPADH@Z
?caption@BASEWIN@@UAAXPBDZZ
?centre@BASEWIN@@QAEXPAUHWND__@@@Z
?chainhook@BASEWIN@@QAEJPAUHWND__@@IIJ@Z
?chainsubclass@BASEWIN@@QAEJPAUHWND__@@IIJ@Z
?clearrestart@EXCEPTION_HANDLER@@QAEXXZ
?clearsubclass@BASEWIN@@QAEHXZ
?clientarea@BASEWIN@@QAE?AVBOX@@XZ
?clientheight@BASEWIN@@QAEHXZ
?clientsize@BASEWIN@@QAE?AVPOINT@@XZ
?clientwidth@BASEWIN@@QAEHXZ
?close@REGISTRY32@@AAEHH@Z
?close@REGISTRY32@@AAEHXZ
?closehkey@REGISTRY32@@QAEHXZ
?cls_dclk_noDC@@3PADA
?cls_noDC@@3PADA
?cls_ownDC@@3PADA
?cls_tooltip@@3PADA
?code@EXCEPTION_HANDLER@@QAEHXZ
?colour_bpp@@YAHPAUHDC__@@@Z
?conversations@DDESERVER@@0V?$GDPA@UDDECONV@DDESERVER@@@@A
?createkey@REGISTRY32@@QAEHPBD@Z
?createrecoverydump@EXCEPTION_HANDLER@@QAEXXZ
?data@DDESVRDATA@@QAEPAXXZ
?dde_clearerror@DDESERVER@@QAEXXZ
?dde_getlasterror@DDESERVER@@QAEPBDXZ
?dde_noerror@DDESERVER@@QAEHXZ
?dde_seterror@DDESERVER@@QAAXPADZZ
?ddeclnt_connect@@YAPAUHCONV__@@PAD@Z
?ddeclnt_disconnect@@YAXPAUHCONV__@@@Z
?ddeclnt_execute@@YAHPAUHCONV__@@PADH@Z
?ddeclnt_init@@YAHXZ
?ddeclnt_poke@@YAHPAUHCONV__@@PADPAXKH@Z
?ddeclnt_releasedata@@YAXXZ
?ddeclnt_request@@YAHPAUHCONV__@@PADPAPAXPAKK@Z
?ddeclnt_request@@YAHPAUHCONV__@@PADPAXKPAKH@Z
?ddeclnt_term@@YAXXZ
?ddesvr_callback@DDESERVER@@CGPAUHDDEDATA__@@IIPAUHCONV__@@PAUHSZ__@@1PAU2@KK@Z
?ddesvr_init@DDESERVER@@QAEHPAD@Z
?ddesvr_term@DDESERVER@@QAEXXZ
?deferlist@BASEWIN@@0PAXA
?delay@@YAXG@Z
?dosfileinfo@@YAHPBDPAG1PAE@Z
?drawfftext@@YAXPAUHDC__@@AAUtagRECT@@HPADHPAUHBRUSH__@@@Z
?drawfilepath@@YAHPAUHWND__@@PAD1HH@Z
?empty@STRINGTABLE@@QAEXXZ
?encode_base64@@YAIPBDPAPADI@Z
?encode_quoted_printable@@YAHPBDIPAD@Z
?enumfirst@REGISTRY32@@EAEPADPBDH@Z
?enumfirstkey@REGISTRY@@QAEPBDPBD@Z
?enumfirstval@REGISTRY@@QAEPBDPBD@Z
?enumnext@REGISTRY32@@UAEPADXZ
?error@@YAXKZZ
?error@@YAXPBDZZ
?escape_eols@@YAHPADPBDH@Z
?excp@@3VEXCEPTION_HANDLER@@A
?exedeferlist@BASEWIN@@QAEHXZ
?expandeols@@YAHPAD0H@Z
?fail@EXCEPTION_HANDLER@@AAEXH@Z
?findchild@@YAPAUHWND__@@PAU1@IPBDII@Z
?findparent@@YAPAUHWND__@@PAU1@II@Z
?findwindow@@YAPAUHWND__@@PAUHINSTANCE__@@PBD@Z
?fittoscreen@@YAHPAUtagRECT@@@Z
?fittoscreen@BASEWIN@@QAEXXZ
?flags@STRINGTABLE@@QAEKK@Z
?fmt_dos_time@@YAKIIIIII@Z
?fmt_rfc822_date@@YAPADJ@Z
?fmtcsn@@YAPADJPAD@Z
?fmtwindate64@@YAPAD_JPAD@Z
?fmtwindate@@YAPADJPAD@Z
?fmtwindatetime64@@YAPAD_JPAD1H@Z
?fmtwindatetime@@YAPADJPAD0H@Z
?fmtwintime64@@YAPAD_JPADH@Z
?fmtwintime@@YAPADJH@Z
?fromutf8@@YAPADPBD@Z
?fromutf8@@YAPADPBDPADH@Z
?get@DDESVRDATA@@QAEXPAXKK@Z
?getOSinfo@@YA?AW4OSCODE@@PAUOSINFO@@@Z
?getOSname@@YAPBDW4OSCODE@@@Z
?getOSversion@@YAPADPAD@Z
?getbin@REGISTRY@@QAEHPBD0PAXKPBX@Z
?getbool@REGISTRY@@QAEHPBD0H@Z
?getclientwindowrect@@YAPAUtagRECT@@PAUHWND__@@0PAU1@@Z
?getclipboardtext@@YAPADXZ
?getcontext@BASEWIN@@UAEPAUAPPLNCONTEXT@@XZ
?getdata@REGISTRY32@@EAEHPBD0KPAXKPBXK@Z
?getdllversion@@YAKPBD@Z
?getenvvar@@YAPADPAD@Z
?getfontdescs@@YAHAAV?$GDIDX@UFONT_DESC@@@@H@Z
?getfontnames@@YAHAAVDIDX@@H@Z
?getkeytext@@YAHKPAD@Z
?getkeytext@@YAPBDK@Z
?getmemoryinfo@@YAXPAUMEMORYINFO@@@Z
?getprofilebool@@YAHPAD0H@Z
?getprofilelong@@YAJPAD0J@Z
?getshiftkeytext@@YAPADKPADPBD1@Z
?getsize@REGISTRY32@@EAEHPBD0@Z
?getstr@REGISTRY@@QAEHPBD0PADKPBX@Z
?gettextsize@@YA?AUtagPOINT@@PBDPAUHFONT__@@PAUHWND__@@H@Z
?getval@REGISTRY@@QAEHPBD0PAK@Z
?getval@REGISTRY@@QAEKPBD0K@Z
?getversioninfo@@YAHPBDPAUVERSIONINFO@@@Z
?getwindowcenterorg@@YAXPAUHWND__@@0PAH1@Z
?handle@DDESVRDATA@@QAEPAUHDDEDATA__@@XZ
?hint@@YAXKZZ
?hint@@YAXPBDZZ
?hookcallback@@YGJPAUHWND__@@IIJ@Z
?hookcbf@BASEWIN@@QAEHPAV1@@Z
?ierror@@YAXKZZ
?ierror@@YAXPBDZZ
?info@@YAXKZZ
?info@@YAXPBDZZ
?initdeferlist@BASEWIN@@QAEHH@Z
?initialise@BASEWIN@@SAHQBD@Z
?initialise@REGISTRY32@@AAEXPAUHKEY__@@PBD@Z
?invalidate@BASEWIN@@UAEXPAVBOX@@H@Z
?inwindow@BASEWIN@@QAEHVPOINT@@@Z
?isadminuser@@YAHXZ
?ischildof@BASEWIN@@QAEHPAUHWND__@@@Z
?ischildof@BASEWIN@@QAEHPAVBASEHWND@@@Z
?iseh2@EXCEPTION_HANDLER@@AAEHKPAXK@Z
?iseh@EXCEPTION_HANDLER@@QAEHKPAX@Z
?isexpired@@YAHHH@Z
?ismouseinrect@BASEWIN@@QAEHXZ
?ismouseover@BASEWIN@@QAEHXZ
?isoscode@@YAHW4OSCODE@@@Z
?isoswin64@@YAHXZ
?isoswine@@YAHXZ
?isparentof@BASEWIN@@QAEHPAUHWND__@@@Z
?isparentof@BASEWIN@@QAEHPAVBASEHWND@@@Z
?isplatform@@YAHI@Z
?item@STRINGTABLE@@QAEHHPAKPAPBD@Z
?leteveryone@REGISTRY32@@QAEHPBD@Z
?load@STRINGTABLE@@QAEHPBDPAUHINSTANCE__@@@Z
?loadarray@STRINGTABLE@@QAEHGQAPADHH@Z
?loadarray@STRINGTABLE@@QAEHKQAPADHHD@Z
?loadstrings@STRINGTABLE@@AAEHPBDPAUHINSTANCE__@@@Z
?loadwindowpos@@YAHPAUHWND__@@PBD@Z
?locate@BASEWIN@@QAEXAAUtagRECT@@I@Z
?locate@BASEWIN@@QAEXAAVBOX@@I@Z
?locate@BASEWIN@@UAEXHHHHI@Z
?locate_ext@BASEWIN@@QAEXHHHHI@Z
?locate_over@BASEWIN@@QAEXPAUHWND__@@K@Z
?lock@DDESVRDATA@@QAEXXZ
?log@EXCEPTION_HANDLER@@QAAXPADZZ
?message@EXCEPTION_HANDLER@@QAEPADXZ
?module@EXCEPTION_HANDLER@@AAEPBDXZ
?moveto@BASEWIN@@QAEXHHI@Z
?name@STRINGTABLE@@QAEPBDXZ
?notifycmd@BASEWIN@@QAEJPAUHWND__@@GG@Z
?numDIBcolours@@YAIPAX@Z
?open@REGISTRY32@@AAEHPBDK@Z
?openhkey@REGISTRY32@@QAEPAUHKEY__@@PBDK@Z
?oprintf@@YAXAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@KZZ
?palettesize@@YAGPAX@Z
?pollbreak@@YAHXZ
?prompt@@YAXKZZ
?prompt@@YAXPBDZZ
?putbin@REGISTRY@@QAEHPBD0PAXK@Z
?putbool@REGISTRY@@QAEHPBD0H@Z
?putdata@REGISTRY32@@EAEHPBD0KPBXK@Z
?putstr@REGISTRY@@QAEHPBD00@Z
?putval@REGISTRY@@QAEHPBD0K@Z
?raise@EXCEPTION_HANDLER@@QAAXHPADZZ
?reg_getproplist@@YAHPBDAAVPROPLIST@@@Z
?reg_getstr@@YAPBDPBD00@Z
?reg_putproplist@@YAHPBDAAVPROPLIST@@@Z
?removekey@REGISTRY32@@UAEHPBD@Z
?removevalue@REGISTRY32@@UAEHPBD0@Z
?reportlog@EXCEPTION_HANDLER@@QAEXPAD@Z
?s_cActiveComponents@CUnknown@@0JA
?s_cFactoryDataEntries@CFactory@@2JA
?s_cServerLocks@CFactory@@2JA
?s_dwThreadID@CFactory@@2KA
?s_hModule@CFactory@@2PAUHINSTANCE__@@A
?s_pFactoryDataArray@CFactory@@2PAUCFactoryData@@A
?savewindowpos@@YAHPAUHWND__@@PBD@Z
?seh@EXCEPTION_HANDLER@@QAEHKPAX@Z
?servers@DDESERVER@@0V?$GDPA@VDDESERVER@@@@A
?setclipboarddata@@YAHHPAXH@Z
?setclipboardtext@@YAHPBDHH@Z
?setdefaulttrap@EXCEPTION_HANDLER@@QAEXXZ
?setrecoveryproc@EXCEPTION_HANDLER@@QAEXP6GHPBD@Z@Z
?setredraw@BASEWIN@@QAEXH@Z
?setrestart@EXCEPTION_HANDLER@@QAEXPADK@Z
?setrootkey@REGISTRY32@@UAEPAUHKEY__@@PAU2@@Z
?setrootkey@REGISTRY@@UAEPAUHKEY__@@PAU2@@Z
?setsilent@EXCEPTION_HANDLER@@QAEXH@Z
?setsubclass@BASEWIN@@QAEHPAV1@@Z
?setsubkey@REGISTRY32@@QAEXPBD@Z
?setthreadname@@YAXKPBD@Z
?settranslator@STRINGTABLE@@QAEXPAVITRANSLATE@@PBD@Z
?showattop@BASEWIN@@QAEXXZ
?shrinkeols@@YAHPAD0H@Z
?size@DDESVRDATA@@QAEKXZ
?size@REGISTRY@@QAEHPBD0@Z
?sizeto@BASEWIN@@QAEXHHI@Z
?start@FILEMONITOR@@QAEHPADPAUHWND__@@I@Z
?state@BASEWIN@@QAEFXZ
?status@@YAXKZZ
?status@@YAXPBDZZ
?stop@FILEMONITOR@@QAEXXZ
?string@STRINGTABLE@@QAEHKPAPBDPAK@Z
?string@STRINGTABLE@@QAEPBDKH@Z
?sub_key@REGISTRY32@@QAEPBDXZ
?subclasscallback@@YGJPAUHWND__@@IIJIK@Z
?takefocus@BASEWIN@@UAEXH@Z
?terminate@BASEWIN@@SAHXZ
?thispropname@@3PBDB
?time64_to_systemtime@@YAAAU_SYSTEMTIME@@_JAAU1@H@Z
?time_to_systemtime@@YAAAU_SYSTEMTIME@@JAAU1@H@Z
?toutf8@@YAPADPBD@Z
?toutf8@@YAPADPBDPADH@Z
?translate_wm_mousewheel@@YAXPAUHWND__@@IJH@Z
?unescape_eols@@YAHPADPBDH@Z
?unhookcbf@BASEWIN@@QAEHXZ
?unlock@DDESVRDATA@@QAEXXZ
?watchthread@FILEMONITOR@@CAXPAX@Z
?wincallback@@YGJPAUHWND__@@IIJ@Z
?window_to_clientrect@@YAXPAUtagRECT@@KHK@Z
?windowarea@BASEWIN@@QAE?AVBOX@@XZ
?windowheight@BASEWIN@@QAEHXZ
?windowsize@BASEWIN@@QAE?AVPOINT@@XZ
?windowwidth@BASEWIN@@QAEHXZ
?zap@REGISTRY32@@AAEHXZ
applngetmessage
applnpumpmessages
entercriticalsection
getactivewinhdl
getapplncmdinfotable
getapplncolour
getapplncontext
getapplnctrlfont
getapplngraphicsinstance
getapplnkeytranslator
getapplnlanguageinstance
getapplnmessage
getapplnmoduleinstance
getapplnname
getapplnregistry
getapplnstring
getapplnstringtranslator
getapplntitle
getapplnwinhdl
getdialogwinhdl
getframewinhdl
getlxlibgraphicsinstance
getlxliblanguageinstance
getprocesscontext
getprocessinstance
leavecriticalsection
reg_enumfirst
reg_enumnext
reg_getbin
reg_getbool
reg_getdw
reg_getrgb
reg_getsize
reg_getstr
reg_getval
reg_init
reg_putbin
reg_putbool
reg_putrgb
reg_putstr
reg_putval
reg_removekey
reg_removevalue
reg_setrootkey
reg_size
reg_term
setapplncontext
setdialogwinhdl
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 13B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.debug_o Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ