Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
77c0a463d64c8c0205236f4761eb9cfe_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
77c0a463d64c8c0205236f4761eb9cfe_JaffaCakes118.dll
Resource
win10v2004-20240729-en
Target
77c0a463d64c8c0205236f4761eb9cfe_JaffaCakes118
Size
1.3MB
MD5
77c0a463d64c8c0205236f4761eb9cfe
SHA1
9cc01da0fe724d7ad044f2af76184bc3e2c4b490
SHA256
b4507db8cbae6295e076c71d821bd92ac328db02f74c8616f982c56c5db773a5
SHA512
5309a0a7eb4ebfdbf3f8973d3ad7dcc4d94793063f3c61805bd05320251185bcf5df0f005c7c5a1a7053823b20a7f4fc4609eddc903f1310d782421a2ac2a2c1
SSDEEP
24576:qVP/QuroibJNdFulFdlwplOdodvyJssX4XA98dEjDOmikf:ZuZ5i20ayLIXA98dEHOmikf
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
R:\TempView\QQ1.81\Output\BinFinal\ChatFrameApp.pdb
CreateCanvas
SetCanvasFilter
DrawTexture
CanvasToTexture
ord34
??4CTXStringW@@QAEAAV0@PA_W@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
??9@YA_NABVCTXStringW@@0@Z
??M@YA_NABVCTXStringW@@0@Z
??0CTXStringW@@QAE@ABU_GUID@@@Z
?DecodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?Find@CTXStringW@@QBEHPB_WH@Z
?GetLength@CTXStringW@@QBEHXZ
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
??0CCmdCodecBase@@QAE@XZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
?AddRef@CCmdCodecBase@@MAGKXZ
?Release@CCmdCodecBase@@MAGKXZ
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
??1CCmdCodecBase@@UAE@XZ
??1CTXCommPack@@UAE@XZ
ord33
?Right@CTXStringW@@QBE?AV1@H@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?GetWord@CTXCommPack@@QAEHAAGHH@Z
?SetBufferIn@CTXCommPack@@QAEXAAVCTXBuffer@@H@Z
??0CTXCommPack@@QAE@XZ
?CombineQNC@FS@@YA?AVCTXStringW@@PB_W0@Z
??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
?Replace@CTXStringW@@QAEHPB_W0@Z
?Delete@CTXStringW@@QAEHHH@Z
?Mid@CTXStringW@@QBE?AV1@HH@Z
?GetDWord@CTXCommPack@@QAEHAAKHH@Z
?GetByte@CTXCommPack@@QAEHAAEH@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
??8@YA_NABVCTXStringW@@PB_W@Z
??9@YA_NABVCTXStringW@@PB_W@Z
?SetAsyncCallback@TXTimer@@YAHP6GXPAX@Z0@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?ToLower@CTXBSTR@@QAEJXZ
?Copy@CTXBSTR@@QBEPA_WXZ
?GetLCID@TXI18N@@YAKXZ
?GetBufferOut@CTXCommPack@@QAEHAAVCTXBuffer@@@Z
?AddBuf@CTXCommPack@@QAEHABVCTXBuffer@@@Z
?AddByte@CTXCommPack@@QAEHE@Z
?AddWord@CTXCommPack@@QAEHGH@Z
?AddDWord@CTXCommPack@@QAEHKH@Z
?Replace@CTXStringA@@QAEHPBD0@Z
??0CTXStringA@@QAE@PBDH@Z
??0CTXStringA@@QAE@PBD@Z
??BCTXStringA@@QBEPBDXZ
??1CTXStringA@@QAE@XZ
??H@YA?AVCTXStringA@@ABV0@PBD@Z
??H@YA?AVCTXStringA@@PBDABV0@@Z
??0CTXStringA@@QAE@ABV0@@Z
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z
??4CTXStringA@@QAEAAV0@ABV0@@Z
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
?IsEmpty@CTXStringA@@QBE_NXZ
?TranslateToName@TXLocation2@@YAHKKKKPAVCTXStringW@@000@Z
??4CTXStringA@@QAEAAV0@PBD@Z
??0CTXStringA@@QAE@XZ
??8CTXBSTR@@QBE_NPA_W@Z
?Empty@CTXStringW@@QAEXXZ
?GetTXDataBuf@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXBuffer@@@Z
?Detach@CTXBSTR@@QAEPA_WXZ
??YCTXBSTR@@QAEAAV0@ABV0@@Z
?Empty@CTXBSTR@@QAEXXZ
?GetConfigData@ModuleConfig@@YAJPB_WPAPAUITXDataRead@@@Z
?GetBuffer@CTXStringW@@QAEPA_WXZ
??9CTXBSTR@@QBE_NABV0@@Z
?GetRegulatedTime@Time@Util@@YA_NAA_J@Z
??0CTXTime@@QAE@_J@Z
?GetSecond@CTXTime@@QBEHXZ
?GetMinute@CTXTime@@QBEHXZ
?GetHour@CTXTime@@QBEHXZ
?AllocSysString@CTXStringW@@QBEPA_WXZ
??YCTXStringW@@QAEAAV0@ABV0@@Z
?AppendBSTR@CTXBSTR@@QAEJPA_W@Z
?CopyTXDataField@Data@Util@@YAHPAUITXDataRead@@PAUITXData@@PB_W2@Z
??0CTXBSTR@@QAE@ABV0@@Z
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
??1Big@@QAE@XZ
??4Big@@QAEAAV0@ABV0@@Z
?IsFileExist@FS@@YAHPB_W@Z
??0CTXFileDialog@@QAE@HPB_W00K0PAUHWND__@@HPAVVFileDialgCallback@@@Z
?DoModal@CTXFileDialog@@QAEHXZ
?GetFileFullName@CTXFileDialog@@QBE?AVCTXStringW@@XZ
??1CTXFileDialog@@QAE@XZ
?GetFileName@FS@Util@@YA?AVCTXStringW@@ABV3@@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
?GetConfigFieldData@ModuleConfig@@YAJPB_W0PAPAUITXDataRead@@@Z
?Format@CTXStringW@@QAAXPB_WZZ
?Length@CTXBSTR@@QBEIXZ
?CopyTo@CTXBSTR@@QBEJPAPA_W@Z
??0CTXStringW@@QAE@PA_W@Z
ord26
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
??8CTXBSTR@@QBE_NPB_W@Z
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
??0CFmtString@@QAE@XZ
?IsEmpty@CTXStringW@@QBE_NXZ
?PropertyStr@CFmtString@@QAEHPB_W0@Z
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
??1CFmtString@@QAE@XZ
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??0CTXBSTR@@QAE@ABU_GUID@@@Z
?LoadXmlByName@FS@Util@@YAHPB_WPAPAUIXMLDOMDocument@@@Z
?GuidFromString@Com@Util@@YAJPA_WAAU_GUID@@@Z
??8CTXBSTR@@QBE_NABV0@@Z
?CreateExtensionSort@Extension@Util@@YAXABU_GUID@@PAPAUITXExtensionSort@@@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?GetString@CTXStringW@@QBEPB_WXZ
?from_binary@@YA?AVBig@@HPAD@Z
??0Big@@QAE@XZ
??0CTXStringW@@QAE@ABV0@@Z
??1CTXStringW@@QAE@XZ
?GetBSTR@CTXStringW@@QBEPA_WXZ
??0CTXBSTR@@QAE@PB_W@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
??1CEcdsa@@QAE@XZ
?QQVerify@CEcdsa@@QAE_NABUCPublicKey@@PBEHABUCSignature@@@Z
??0CEcdsa@@QAE@W4ECCBIT@eccparam@@@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??1CTXBSTR@@QAE@XZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??0CTXStringW@@QAE@PB_W@Z
??BCTXStringW@@QBEPB_WXZ
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
?ConvertXMLStrToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z
?IsEmpty@CTXBSTR@@QAEHXZ
?MakeLower@CTXStringW@@QAEAAV1@XZ
?GetPluginNameList@CoreCenter@Util@@YAHPAPAUITXArrayRead@@@Z
??0CTXBSTR@@QAE@XZ
??ICTXBSTR@@QAEPAPA_WXZ
?QueryPluginCore@CoreCenter@Util@@YAHPA_WPAPAUITXPluginCore@@@Z
??0CTXStringW@@QAE@XZ
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXStringW@@@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??8@YA_NABVCTXStringW@@0@Z
??BCTXBSTR@@QBEPA_WXZ
?DispatchFrameMsg@GF@Util@@YAJPAUIGFFrame@@PAUtagBaseArg@@PAHPAJH@Z
?TopFrameFromPoint@GF@Util@@YAJPAUIGFFrame@@PBUtagPOINT@@PAPAU3@@Z
?PrintFrame@GF@Util@@YAPAUHGTEXTURE__@@PAUIGFFrame@@KH@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?OnElementExtEvent@GF@Util@@YAJPAUITXExtensionAgent@@HPAUITXDataRead@@1@Z
?ScreenPoint2ClientPoint@GF@Util@@YAXPAUIGFFrame@@AAUtagPOINT@@@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?FreeData@Metadata@Util@@YAJAAPA_W@Z
?Get@Metadata@Util@@YAJPAUITXData@@PA_WPAPA_W@Z
?GetService@GF@Util@@YAJABU_GUID@@PA_WPAPAX@Z
?ClosePopupWindows@GF@Util@@YAXXZ
?RawInitGFElementByXtml@GF@Util@@YAJPA_WPAUIGFElement@@10H@Z
?StopSlideFrame@GF@Util@@YAJPAUIGFFrame@@@Z
?SlideFrame@GF@Util@@YAJPAUIGFFrame@@VCRect@@1KDKHKKPAUIGFAnimationEvent@@@Z
?ClearMousePointer@GF@Util@@YAJPAUIGFFrame@@@Z
?GetMajorVer@Version@@YAEXZ
?IncHelper@DataReport@Util@@YAJKPB_WK@Z
?SetDataReportBit@DataReport@Util@@YAJKPB_WE@Z
?GetStatus@Contact@Util@@YAGK@Z
?IsMobileTerminal@Contact@Util@@YAHK@Z
?IsMobileClient@Contact@Util@@YAHK@Z
?IsOnline@Contact@Util@@YAHK@Z
?IsFlagValid@Contact@Util@@YAHKK@Z
?GetStatus@Contact@Util@@YAXKAAGAAVCTXStringW@@@Z
?GetSelfUin@Contact@Util@@YAKXZ
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z
?GetSignFmt@URL@Util@@YAXAAVCFmtString@@@Z
?CreateMsgPack@Msg@Util@@YAHPAPAUITXMsgPack@@@Z
?IsServerControlBitOn@Misc@Util@@YAHK@Z
?GetPublicName@Contact@Util@@YA?AVCTXStringW@@K@Z
?Get32ByteValueAddedSign@Misc@Util@@YA?AVCTXStringW@@XZ
?IsVASFlagValid@Contact@Util@@YAHKE@Z
?IsBuddy@Contact@Util@@YAHK@Z
?GetProgramBinDir@Sys@Util@@YA?AVCTXStringW@@V3@@Z
?OpenUrlWithIE@URL@Util@@YAHABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z
?OpenUrlWithTT@URL@Util@@YAHABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z
?GetMsgTime@Msg@Util@@YA_JPAUITXMsgPack@@@Z
?GetRTypeByUin@Contact@Util@@YAKK@Z
?GetAccountName@Account@Util@@YA?AVCTXStringW@@K@Z
?GetRawName@Contact@Util@@YA?AVCTXStringW@@K@Z
?GetPublicHeadFile@Contact@Util@@YA?AVCTXStringW@@K@Z
?IsEmailMainShow@Contact@Util@@YAHK@Z
?IsInBlackList@Contact@Util@@YAHK@Z
?GetAccountValue@Account@Util@@YA?AVCTXStringW@@K@Z
?IsDiscussExit@Group@Util@@YAHK@Z
?GetDiscussMemStatus@Group@Util@@YAGKK@Z
?GetDiscussMemCombineName@Group@Util@@YA?AVCTXStringW@@KK@Z
?GetDiscussName@Group@Util@@YA?AVCTXStringW@@K@Z
?ConvertGenderIndexToStr@Misc@Util@@YA?AVCTXStringW@@E@Z
?GetGroupMemStatus@Group@Util@@YAGKK@Z
?GetGroupMemCombineName@Group@Util@@YA?AVCTXStringW@@KK@Z
?GetGroupMemHeadFile@Group@Util@@YA?AVCTXStringW@@KK@Z
?GetGroupMemShowName@Group@Util@@YA?AVCTXStringW@@KK@Z
?IsGroupExit@Group@Util@@YAHK@Z
?GetCombineName@Contact@Util@@YA?AVCTXStringW@@K@Z
?GetMsgAbstract@Msg@Util@@YA?AVCTXStringW@@PAUITXMsgPack@@@Z
?GetAccountType@Account@Util@@YAEK@Z
?IsEmailAccount@Misc@Util@@YAHAAVCTXStringW@@@Z
?GetGroupName@Group@Util@@YA?AVCTXStringW@@K@Z
?GetMinorVer@Version@@YAEXZ
?GetPngFile@Status@Contact@Util@@YAHGAAVCTXStringW@@0@Z
?GetAutoRelyContent@Self@Contact@Util@@YAHAAVCTXStringW@@@Z
?Show@MsgBox@Util@@YAHPAUIGFFrame@@VCTXStringW@@1H@Z
?FlashWindowInTaskbar@Misc@Util@@YAXPAUHWND__@@H@Z
?GetXmlContent@CXmlLinkAnalyzer@@QAE?AVCTXBSTR@@PA_W@Z
?GetName@CBasicInfo@Group@Util@@SA?AVCTXStringW@@KW4NAME_TYPE@123@@Z
?GetUinByCode@Group@Util@@YAKK@Z
?QueryTXChatSession@AFChatSession@Util@@YAHPAUIAFChatFrameType@@PAPAUIAFChatSession@@@Z
?IsAppLocked@Misc@Util@@YAHXZ
?MessageBoxW@Misc@Util@@YAHPAUIGFFrame@@PAPAUIAFMessageBoxEx@@VCTXStringW@@2H@Z
?ParseYellowBarInCF@AFChatSession@Util@@YAHVCTXBuffer@@PAPAUITXData@@@Z
?ChatFrameEvent@AFChatSession@Util@@YAHPAUIAFChatFrameType@@W4CFEventType@ChatFrame@@PAUITXData@@@Z
??0CXmlLinkAnalyzer@@QAE@XZ
?Init@CXmlLinkAnalyzer@@QAEHPA_W@Z
?GetContent@CXmlLinkAnalyzer@@QAE?AVCTXBSTR@@PA_WHH@Z
?UnInit@CXmlLinkAnalyzer@@QAEXXZ
??1CXmlLinkAnalyzer@@QAE@XZ
?IsEnableYaHei@Misc@Util@@YAHXZ
?GetTipIconFile@Misc@Util@@YA?AVCTXStringW@@W4IconIndex@@@Z
?MessageBoxW@Misc@Util@@YAHPAUIGFFrame@@VCTXStringW@@1H@Z
?SaveImageFile@SysDialog@Util@@YAHPAUHWND__@@VCTXStringW@@@Z
?GetSysFacePathByIndex@Misc@Util@@YA?AVCTXStringW@@H@Z
?WriteMsgInChatSession@AFChatSession@Util@@YAXPAUIAFChatFrameType@@PAUITXMsgPack@@KPAUITXData@@@Z
?AddResendLinkElem@AFChatSession@Util@@YAHPAUITXMsgPack@@0PAUIAFChatFrameType@@@Z
?SendQQMail@Misc@Util@@YAXKKVCTXStringW@@@Z
?GetMobileUserType@Contact@Util@@YA?AW4MOBILE_USER_TYPE@12@K@Z
??0CBasicInfo@Group@Util@@QAE@K@Z
?GetLevelFlags@CBasicInfo@Group@Util@@QAEKXZ
?GetGradeType@CGroupGrade@Group@Util@@SA?AW4GROUP_GRADE_TYPE@123@K@Z
??1CBasicInfo@Group@Util@@UAE@XZ
?SetPerfReportDataForByte@PerfDataReportUtil@@YAXPA_WE@Z
?SetPerfReportDataForWord@PerfDataReportUtil@@YAXPA_WKH@Z
?ChatFrameEvent@ChatSession@Util@@YAHKW4CFChatType@ChatFrame@@W4CFEventType@4@PAUITXData@@@Z
?IsQQImeExist@@YAHXZ
?GetChatSessionMainHWnd@ChatSession@Util@@YAPAUHWND__@@KH@Z
?DeleteTipInChatSession@ChatSession@Util@@YAHKHPAUITXData@@@Z
?WriteTipInChatSession@ChatSession@Util@@YAHKHPAUITXData@@@Z
?WriteMsgInChatSession@ChatSession@Util@@YAXKHPAUITXMsgPack@@KPAUITXData@@@Z
?GetChatSessionMainWnd@ChatSession@Util@@YAHKHPAPAUIGFFrame@@@Z
?WriteInputMsgInChatSession@ChatSession@Util@@YAXKHPAUITXMsgPack@@PAUITXData@@@Z
?IsChatSessionOpen@ChatSession@Util@@YAHKH@Z
?CreateChatFrameType@ChatSession@Util@@YAHKHPAPAUIAFChatFrameType@@PAUITXData@@@Z
?IsPaiPaiMCS@PaiPai@Misc@Util@@YAHK@Z
?QueryTXChatSession@ChatSession@Util@@YAHKHPAPAUIAFChatSession@@@Z
?WriteMsgTipInChatSession@ChatSession@Util@@YAXKHW4IconIndex@@VCTXStringW@@H@Z
?QueryChatSession@ChatSession@Util@@YAXPAUIAFChatFrameType@@PAPAUIAFChatSession@@@Z
?PopupTipDlg@ChatSession@Util@@YAXVCTXStringW@@0PAPAUIGFPopupWin@@@Z
?IsPaiPaiTempSession@ChatSession@Util@@YAHK@Z
?LoadCharFormatConfig@ChatSession@Util@@YAHAAU_charformatw@@@Z
?SendAutoReplyMsgToBuddy@ChatSession@Util@@YAJK@Z
?InitDefaultCharFormat@ChatSession@Util@@YAHAAU_charformatw@@@Z
?IsQInterLiveUser@QInterLive@Misc@Util@@YAHK@Z
?SetALLCFSettingBtnStatus@ChatSession@Util@@YAHXZ
?NeedSetSettingBtnHighlight@ChatSession@Util@@YAHXZ
?SoSoPicUtil@ChatSession@Util@@YAHKHPAUITXData@@@Z
?InputMsgInChatSession@ChatSession@Util@@YAXKHPAUITXMsgPack@@@Z
?GetTXChatSession@ChatSession@Util@@YAHKHPAUITXData@@PAPAUIAFChatSession@@@Z
?SetRegMainKeyBoolField@API@Registry@@YAHPA_W0HW4__MIDL___MIDL_itf_IRegistry_0000_0003@@W4__MIDL___MIDL_itf_IRegistry_0000_0004@@@Z
?GetRegMainKeyBoolField@API@Registry@@YAHPA_W0PAHW4__MIDL___MIDL_itf_IRegistry_0000_0003@@W4__MIDL___MIDL_itf_IRegistry_0000_0004@@@Z
?SetRegSubKeyBoolField@API@Registry@@YAHPA_W00HW4__MIDL___MIDL_itf_IRegistry_0000_0003@@W4__MIDL___MIDL_itf_IRegistry_0000_0004@@@Z
?GetRegSubKeyBoolField@API@Registry@@YAHPA_W00PAHW4__MIDL___MIDL_itf_IRegistry_0000_0003@@W4__MIDL___MIDL_itf_IRegistry_0000_0004@@@Z
?DecodeServerData_BoolValue@API@AdvConfig@@YAHGPAUITXData@@PAH@Z
?CodeServerData_BoolValue@API@AdvConfig@@YAHGHPAPAUITXData@@@Z
?OpenContactChatSession@ChatSession@Util@@YAXKPAUITXData@@@Z
?GetRegSubKey@API@Registry@@YAHPA_W0PAPAUITXRegistryKey@@W4__MIDL___MIDL_itf_IRegistry_0000_0003@@W4__MIDL___MIDL_itf_IRegistry_0000_0004@@@Z
?GetBuffer@Misc@Util@@YAXPAPAUITXBuffer@@@Z
GetACP
HeapFree
GetVersionExA
HeapReAlloc
HeapSize
GetLocaleInfoA
Sleep
InterlockedCompareExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
HeapDestroy
GetProcessHeap
GetCurrentProcess
FlushInstructionCache
VirtualProtect
SetLastError
GetVersion
GlobalSize
GlobalLock
GlobalUnlock
GetTempPathW
UnhandledExceptionFilter
TerminateProcess
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
SetThreadLocale
GetThreadLocale
RaiseException
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
lstrlenW
lstrcmpiW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetModuleHandleW
GetModuleFileNameW
CopyFileW
GetLongPathNameW
GlobalFree
GlobalAlloc
InterlockedExchange
SetForegroundWindow
ShowWindow
IsZoomed
CharNextW
GetCursorPos
IsIconic
PostQuitMessage
SetRect
SendMessageW
GetParent
RegisterClipboardFormatW
GetClassNameW
OffsetRect
IsWindowVisible
ClientToScreen
GetActiveWindow
GetKeyState
GetWindowPlacement
BringWindowToTop
AttachThreadInput
GetWindowThreadProcessId
GetWindow
IsWindowEnabled
PtInRect
GetForegroundWindow
SetWindowPos
IsWindow
SetWindowPlacement
CopyRect
GetSystemMetrics
SystemParametersInfoW
GetWindowRect
MoveWindow
SetWindowsHookExW
CallNextHookEx
UnhookWindowsHookEx
SetCursor
ReleaseCapture
SetWindowLongW
WindowFromPoint
LoadCursorW
UnregisterClassA
MessageBoxW
RegSetValueExW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
ShellExecuteW
SHGetFileInfoW
DoDragDrop
ReleaseStgMedium
OleDuplicateData
CreateStreamOnHGlobal
StgCreateDocfile
CoCreateGuid
StringFromCLSID
CoTaskMemFree
CoCreateInstance
SysFreeString
VariantInit
SysAllocString
SysStringLen
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
ord30
ord32
ord58
ord61
ord23
ord64
ord22
ord18
ord15
ord31
PathFileExistsW
PathFindFileNameW
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_except_handler4_common
memcpy
toupper
_vsnwprintf
_ltow
_snwprintf
_wtol
memset
_purecall
memmove_s
_time64
wcsncpy_s
wcscpy_s
malloc
memcpy_s
??_V@YAXPAX@Z
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
free
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
__CxxFrameHandler3
_recalloc
_CxxThrowException
??3@YAXPAX@Z
_crt_debugger_hook
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ