AppMarket[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

AppMarket.exe
Size

6.4MB
MD5

b32964b1f283ce35a96e14fdf8f8f6fa
SHA1

5cf288aba9cfecea125bda66d2359a7266169404
SHA256

6068aea2fcf490fe6e2125a1eb50b7059424b6d3da5394bf4ab3245ba2f25cf3
SHA512

8856c6275f0f68e1eb203b925ad98267718f35673938ebd8f1ae1604467f2bddbc290d06f40631fc56eb7389a05029312c5750616789cf57b4621c8435ce2f7a
SSDEEP

98304:aruISuaSkYpzwmJOBMT32kubUm7QYS5t2FyBzkwo2TRlecBkq:6Ja0JOBMz3HmcYS72ELTR4En

Score

1^/10

Malware Config

Signatures

Files

AppMarket.exe
.exe windows:6 windows x86 arch:x86

62d2da5d0bcbdd7a9a5275b83b71b2df

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25/11/2020, 00:00

Not After

22/02/2024, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

fd:42:41:d1:60:13:2a:46:e5:04:4c:09:23:79:91:a5:e0:61:21:14:4e:30:35:f5:25:47:38:76:ee:ff:d6:a5
Signer

Actual PE Digest

fd:42:41:d1:60:13:2a:46:e5:04:4c:09:23:79:91:a5:e0:61:21:14:4e:30:35:f5:25:47:38:76:ee:ff:d6:a5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\workplace\AndroidEmulator\7KMarket_Git_Release64\Basic\Client\Output\Binfinal\AppMarket\AppMarket.pdb

Imports

caterpillar_sdk

?action_duration@ChainedTask@@QBE?AV?$duration@_JU?$ratio@$00$0PECEA@@std@@@chrono@std@@XZ
?InitSDK@CaterpillarClient@@SAXXZ
?data@ChainedTask@@QBE?AV?$shared_ptr@VTaskData@@@std@@XZ
?CurrentActionName@ChainedTask@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?shared_from_this@?$enable_shared_from_this@VChainedTask@@@std@@QAE?AV?$shared_ptr@VChainedTask@@@2@XZ
?set_queue@ChainedTask@@QAEX_N@Z
?TaskExternalLog@ChainedTask@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HH0@Z
?TaskDone@ChainedTask@@MAEXXZ
?OnTaskSuccess@ChainedTask@@MAEXXZ
?OnTaskStop@ChainedTask@@MAEXXZ
?WaitForDone@ChainedTask@@QAEXV?$duration@_JU?$ratio@$00$0DOI@@std@@@chrono@std@@@Z
?value@TaskData@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
?last_error_message@ChainedTask@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?OnTaskFail@ChainedTask@@MAEXXZ
?OnActionSuccess@ChainedTask@@MAEXXZ
?OnActionStop@ChainedTask@@MAEXXZ
?StopTask@CaterpillarClient@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?OnActionFail@ChainedTask@@MAEXXZ
?set_last_error_message@ChainedTask@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0ChainedTask@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@$$QBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@2@0V?$function@$$A6AXV?$shared_ptr@VChainedTask@@@std@@W4TaskState@@@Z@2@@Z
??1Action@@QAE@XZ
?NotifyDone@ChainedTask@@QAEXXZ
?Stop@ChainedTask@@UAEX_N@Z
?Start@ChainedTask@@QAEXXZ
?Connect@ChainedTask@@UAEX$$QBUAction@@@Z
??1ChainedTask@@UAE@XZ
??0Action@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$function@$$A6A_NV?$shared_ptr@VChainedTask@@@std@@@Z@2@V?$function@$$A6AXV?$shared_ptr@VChainedTask@@@std@@W4ActionResult@@@Z@2@@Z
?UninitSDK@CaterpillarClient@@SAXXZ
?set_value@TaskData@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z

minicorelib

?removeObj@WeakGuard@minilib@@SAXPAPAVTObject@2@@Z
?addObj@WeakGuard@minilib@@SAXPAPAVTObject@2@@Z
??1TObject@minilib@@UAE@XZ
??0TObject@minilib@@QAE@PAV01@@Z
?forceClose@Window@minilib@@QAEXXZ
?hide@Window@minilib@@QAEXXZ
?handle@Window@minilib@@QBEPAUHWND__@@XZ
??0IWindowMessageFilter@minilib@@QAE@XZ
??1IWindowMessageFilter@minilib@@UAE@XZ
??0File@minilib@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??1File@minilib@@QAE@XZ
?open@File@minilib@@QAE_NW4OpenMode@12@@Z
?write@File@minilib@@QAEHPBEH@Z
?readAll@File@minilib@@QAE?AVBuffer@2@XZ
?exists@File@minilib@@SA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?applicationDirPath@Utils@minilib@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?toUtf8@Utils@minilib@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z
?instance@DPI@Windows@@SAPAV12@XZ
?scaleX@DPI@Windows@@QBEHH@Z
?fromUtf8@Utils@minilib@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?toUtf8@Utils@minilib@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PB_WH@Z
?appDataPath@Utils@minilib@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
??0Timer@minilib@@QAE@XZ
??1Timer@minilib@@QAE@XZ
?start@Timer@minilib@@QAEXH@Z
?stop@Timer@minilib@@QAEXXZ
?timeOutEvent@Timer@minilib@@QAEAAV?$Event@$$A6AXPAVTimer@minilib@@@ZVmutex@std@@@2@XZ
?writeLine@File@minilib@@QAEHABVBuffer@2@@Z
?remove@File@minilib@@SA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0Path@minilib@@QAE@XZ
?fullPath@Path@minilib@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?absoluteDir@Path@minilib@@QBE?AV12@XZ
??1Path@minilib@@QAE@XZ
?toLower@Ascii@@SAHH@Z
?fromUtf8@Utils@minilib@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBDH@Z
?makeSureDirExist@Utils@minilib@@YAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?appProcessName@Utils@minilib@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?post@AppBase@minilib@@QAEX$$QAV?$function@$$A6AXXZ@std@@@Z
?postDelayed@AppBase@minilib@@QAEX$$QAV?$function@$$A6AXXZ@std@@H@Z
?async@AppUI@@YAX$$QAV?$Callback@$$A6AXXZ@minilib@@@Z
?asyncDelayed@AppUI@@YAX$$QAV?$Callback@$$A6AXXZ@minilib@@H@Z
?static_pplScheduler@AppUI@@YA?AV?$shared_ptr@Uscheduler_interface@Concurrency@@@std@@XZ
?static_pplScheduler@concurrency_@@YAAAV?$shared_ptr@Uscheduler_interface@Concurrency@@@std@@XZ
?close@File@minilib@@QAEXXZ
?removeDir@Utils@minilib@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?pool@WorkerPool@minilib@@SAPAV12@XZ
?async@WorkerPool@minilib@@SAX$$QAV?$Callback@$$A6AXXZ@2@@Z
?stop@WorkerPool@minilib@@QAEXXZ
?interval@Timer@minilib@@QBEHXZ
?isActive@Timer@minilib@@QBE_NXZ
?scaleY@DPI@Windows@@QBEHH@Z
??0AppBase@minilib@@QAE@XZ
??1AppBase@minilib@@UAE@XZ
?instance@AppBase@minilib@@SAPAV12@XZ
?run@AppBase@minilib@@QAEXXZ
?quit@AppBase@minilib@@QAEXXZ
?runLoop@AppBase@minilib@@MAEXXZ
??0Path@minilib@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?setSize@File@minilib@@QAE_N_J@Z
?seek@File@minilib@@QAE_N_J@Z
?getDPIScale@DPI@Windows@@QBEMXZ
?size@File@minilib@@QBE_JXZ
?fileName@Path@minilib@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?extension@Path@minilib@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?threadId@AppUI@@YA?AVid@thread@std@@XZ

cef_frame

CreateBrowser
TbsAppInstance
IsNameReolveError

gmesdk

ITMGContextGetInstance
QAVSDK_AuthBuffer_GenAuthBuffer

comctl32

InitCommonControlsEx

common

?InitPlatformCoreConfig@Boot@Util@@YAHXZ
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
??8@YA_NPB_WABVCTXBSTR@@@Z
??ICTXBSTR@@QAEPAPA_WXZ
??0CTXBSTR@@QAE@XZ
?SetAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z
?Detach@CTXBSTR@@QAEPA_WXZ
?Empty@CTXStringW@@QAEXXZ
??4CTXStringW@@QAEAAV0@PA_W@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z
?GetString@CTXStringW@@QBEPB_WXZ
??BCTXStringA@@QBEPBDXZ
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
?Left@CTXStringW@@QBE?AV1@H@Z
?Mid@CTXStringW@@QBE?AV1@HH@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?Delete@CTXStringW@@QAEHHH@Z
?IsEmpty@CTXStringW@@QBE_NXZ
?GetLength@CTXStringW@@QBEHXZ
??YCTXStringW@@QAEAAV0@PB_W@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??0CTXStringW@@QAE@ABV0@@Z
?AppendFormat@CTXStringW@@QAAXPB_WZZ
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?GetBuffer@CTXStringW@@QAEPA_WXZ
?Format@CTXStringW@@QAAXPB_WZZ
??0CTXStringW@@QAE@XZ
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?InitPlatformGFConfig@Boot@Util@@YAHXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
??M@YA_NABVCTXStringA@@0@Z
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?ClearDeadQueue@Misc@Util@@YAXXZ
?OnExitCoreCenter@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?OnUninitCom@Misc@Util@@YAXXZ
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
ord4
ord6
ord10
ord5
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@PB_W@Z
??BCTXStringW@@QBEPB_WXZ
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
?TXLoadString@@YAPB_WPB_W0@Z
?TXAssert@@YAHPB_W0H@Z
??0CTXStringA@@QAE@XZ
??1CTXStringA@@QAE@XZ
?SetConfigFile@TXI18N@@YAHPB_W0@Z
?Format@CTXStringA@@QAAXPBDZZ
??0CTXStringW@@QAE@UtagEN@@PBDH@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
??7CTXStringW@@QBE_NXZ
??0CTXBSTR@@QAE@PB_W@Z
??1CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
??0CTXStringW@@QAE@PA_W@Z
??H@YA?AVCTXStringW@@_WABV0@@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z

gf

?ScaleRECT@DPI@GF@Util@@YAXPAUtagRECT@@@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@PAUITXCore@@H@Z
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
?ScaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z
?UnscaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z
?UnscaleLONG@DPI@GF@Util@@YAXPAJ@Z
?IsScaleIgnore@DPI@GF@Util@@YA_NXZ
?HandleMessageScale@DPI@GF@Util@@YAXPAUtagBaseArg@@@Z
??0CDPIScaleIgnoreResetHelper@@QAE@XZ
??1CDPIScaleIgnoreResetHelper@@QAE@XZ
?ScaleX@DPI@GF@Util@@YAHH@Z

xgraphic32

SetColor
FillSolidRectEx
DrawEllipse

ws2_32

WSAAddressToStringW
WSASocketW
WSARecv
WSAIoctl
WSASetLastError
WSACleanup
WSAStartup
listen
sendto
recvfrom
gethostname
getsockopt
getsockname
getpeername
bind
accept
__WSAFDIsSet
freeaddrinfo
getaddrinfo
WSAGetLastError
socket
setsockopt
select
recv
ioctlsocket
connect
closesocket
WSASend
send
ntohs
ntohl
htons
htonl

comdlg32

GetOpenFileNameW

ximage

?Destroy@CxImage@@QAE_NXZ
??0CxImage@@QAE@K@Z
?Save@CxImage@@QAE_NPB_WK@Z
?Resample2@CxImage@@QAE_NJJW4InterpolationMethod@1@W4OverflowMethod@1@QAV1@_N@Z
?Load@CxImage@@QAE_NPB_WK@Z

wininet

InternetReadFile
InternetOpenW
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionW
DeleteUrlCacheEntryW

wldap32

ord133
ord301
ord167
ord46
ord127
ord147
ord26
ord27
ord14
ord208
ord41
ord145
ord142
ord216
ord118
ord79

zlib

zlibVersion
inflateInit_

libeay32

ord4445
ord224
ord253
ord222
ord227
ord298
ord3212
ord3189
ord1802
ord52
ord109
ord89
ord66
ord1800
ord196
ord197
ord1804
ord2604
ord2949

ssleay32

ord35
ord138
ord48
ord75
ord74
ord83
ord8
ord170
ord43
ord78
ord143
ord151
ord108
ord158
ord45
ord6
ord58
ord96
ord155
ord183
ord12

msvcp140

?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_XGetLastError@std@@YAXXZ
?_Xinvalid_argument@std@@YAXPBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAHH@Z
?_Winerror_message@std@@YAKKPADK@Z
_Stat
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
_Thrd_join
_Thrd_id
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_broadcast
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
??0task_continuation_context@Concurrency@@AAE@XZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
_Thrd_hardware_concurrency
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
_Xtime_get_ticks
_To_byte
_Query_perf_counter
_Query_perf_frequency
_Mtx_current_owns
_Cnd_timedwait
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
??Bios_base@std@@QBE_NXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
?classic@locale@std@@SAABV12@XZ
?toupper@?$ctype@D@std@@QBEDD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?eof@ios_base@std@@QBE_NXZ
?fail@ios_base@std@@QBE_NXZ
?bad@ios_base@std@@QBE_NXZ
?exceptions@ios_base@std@@QBEHXZ
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
_Thrd_sleep
?id@?$ctype@D@std@@2V0locale@2@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PB_W_J@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?read@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_W_J@Z
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_JH@Z
?tellg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?_Assign@_ContextCallback@details@Concurrency@@AAEXPAX@Z
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_W@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
_To_wide
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@PBD3@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
_Remove_dir
_Lstat
_Unlink
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
_Strcoll
_Strxfrm
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?c_str@?$_Yarn@D@std@@QBEPBDXZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
?is@?$ctype@D@std@@QBE_NFD@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$collate@D@std@@2V0locale@2@A
_Thrd_yield
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??_D?$basic_iostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
??Bid@locale@std@@QAEIXZ
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_BADOFF@std@@3_JB
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?setf@ios_base@std@@QAEHHH@Z
?flags@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?uncaught_exception@std@@YA_NXZ
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Cnd_signal
_Cnd_wait
_Cnd_destroy
_Cnd_init
_Mtx_destroy
_Mtx_init
_Thrd_detach
_Thrd_start
?_Xbad_function_call@std@@YAXXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z

kernel32

GetNumberFormatW
GetCurrencyFormatW
FormatMessageA
ExpandEnvironmentStringsA
GetStdHandle
GetFileType
SignalObjectAndWait
OpenFileMappingW
ReleaseSemaphore
CreateSemaphoreW
IsDebuggerPresent
FileTimeToLocalFileTime
ProcessIdToSessionId
FlushInstructionCache
SetThreadContext
GetThreadContext
ResumeThread
VirtualAlloc
GetTimeFormatW
GetDateFormatW
K32GetModuleFileNameExA
OpenEventW
OutputDebugStringA
SetEndOfFile
FlushFileBuffers
FreeResource
SetHandleInformation
GetACP
QueryPerformanceFrequency
QueryPerformanceCounter
GlobalFree
K32GetProcessImageFileNameW
ReadDirectoryChangesW
CancelIoEx
Wow64RevertWow64FsRedirection
Wow64DisableWow64FsRedirection
CompareFileTime
ExpandEnvironmentStringsW
GetProcessTimes
GlobalAddAtomW
GlobalUnlock
GlobalLock
GlobalSize
SetEnvironmentVariableW
GetTempFileNameW
GetFileSizeEx
LoadLibraryExA
CreateFileA
Module32NextW
Module32FirstW
Thread32Next
Thread32First
ReadProcessMemory
VirtualAllocEx
SuspendThread
OpenThread
GetStartupInfoW
InitializeSListHead
SetErrorMode
SetUnhandledExceptionFilter
DuplicateHandle
SearchPathW
GetFileInformationByHandle
SetFileTime
LocalFileTimeToFileTime
VerifyVersionInfoW
GetModuleHandleA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetCurrentProcessId
QueueUserAPC
SleepEx
InitializeCriticalSectionAndSpinCount
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateIoCompletionPort
SetLastError
VerSetConditionMask
lstrcmpW
SetFileAttributesW
K32GetModuleFileNameExW
GetSystemTimeAsFileTime
RaiseException
EnumResourceNamesW
K32GetPerformanceInfo
GetSystemPowerStatus
GetSystemTimes
IsProcessorFeaturePresent
PeekNamedPipe
CreatePipe
OutputDebugStringW
GetVersion
GetUserDefaultLangID
SystemTimeToTzSpecificLocalTime
MoveFileW
GetFullPathNameW
GetCurrentDirectoryW
SetCurrentDirectoryW
WTSGetActiveConsoleSessionId
GetSystemWindowsDirectoryW
RemoveDirectoryW
QueryDosDeviceW
GetLogicalDriveStringsW
GetLocaleInfoW
GetEnvironmentVariableW
SwitchToThread
ResetEvent
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
OpenProcess
GetExitCodeProcess
GetFileAttributesExA
DeleteFileA
lstrcpyW
GlobalAlloc
SystemTimeToFileTime
GetTempPathA
CreateWaitableTimerW
WaitForMultipleObjects
GetSystemTime
GlobalMemoryStatusEx
CreateProcessA
CreateThread
CancelWaitableTimer
SetWaitableTimer
GetFileAttributesExW
GetPrivateProfileSectionW
GetPrivateProfileStringW
GetFileAttributesW
GetCommandLineW
CreateDirectoryW
IsWow64Process
DeviceIoControl
GetLogicalDrives
GetDiskFreeSpaceExW
CopyFileW
GetModuleFileNameW
GetTickCount
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
WaitForSingleObjectEx
UnhandledExceptionFilter
CreateProcessW
WriteFile
SetFilePointerEx
SetFilePointer
ReadFile
GetFileSize
CreateFileW
FileTimeToSystemTime
MoveFileExW
GetLocalTime
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
IsBadWritePtr
IsBadReadPtr
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrcpynW
FormatMessageW
LocalFree
LoadLibraryExW
WriteProcessMemory
VirtualQuery
VirtualProtect
GetVersionExW
GetSystemDirectoryW
GetSystemInfo
TerminateThread
GetCurrentThreadId
GetCurrentThread
TerminateProcess
GetCurrentProcess
OpenMutexW
CreateMutexW
ReleaseMutex
GetTempPathW
GetDriveTypeW
GetSystemDefaultLangID
GetUserDefaultUILanguage
WideCharToMultiByte
MultiByteToWideChar
FindResourceW
SizeofResource
LockResource
LoadResource
GetModuleHandleW
FindResourceExW
GetLastError
CreateEventW
WaitForSingleObject
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
LoadLibraryW
Sleep
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
LoadLibraryA
lstrcpynA
GetProcAddress
GetModuleFileNameA
FreeLibrary

user32

MsgWaitForMultipleObjects
SetWindowPos
SendMessageTimeoutW
CharUpperW
CharNextW
RegisterHotKey
UnregisterHotKey
UnregisterClassW
RegisterClassExW
CreateWindowExW
BringWindowToTop
MonitorFromRect
SetTimer
KillTimer
AttachThreadInput
GetWindowThreadProcessId
GetClientRect
WindowFromPoint
EqualRect
EnumThreadWindows
GetClassNameW
SetForegroundWindow
MessageBoxA
IsWindowVisible
MsgWaitForMultipleObjectsEx
UpdateWindow
GetKeyState
GetParent
SendMessageTimeoutA
PostMessageW
PeekMessageW
DispatchMessageW
LoadIconW
GetWindowRect
MoveWindow
GetDesktopWindow
GetIconInfoExW
CreateIconFromResource
DestroyIcon
GetMonitorInfoW
MonitorFromWindow
FindWindowA
EnumDisplayDevicesW
EnumDisplayDevicesA
EnumDisplaySettingsW
PostMessageA
LoadImageW
FindWindowW
RegisterClassExA
DefWindowProcW
GetSystemMetrics
GetLastInputInfo
ExitWindowsEx
wsprintfW
FindWindowExW
SetWindowLongW
GetWindowLongW
GetCursorPos
SetCursorPos
MessageBoxW
GetWindowTextW
SetWindowTextW
ReleaseDC
GetDC
EnableWindow
DestroyWindow
IsWindow
CreateWindowExA
SendMessageW
IsIconic
IsZoomed
GetForegroundWindow
EnumWindows
PostThreadMessageW
ShowWindow
SystemParametersInfoW
SetActiveWindow

advapi32

CryptEnumProvidersA
CryptGenRandom
CryptAcquireContextA
ImpersonateLoggedOnUser
RegEnumKeyExW
RegQueryValueExA
CloseServiceHandle
RegCloseKey
RegCreateKeyExW
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
BuildExplicitAccessWithNameW
RegQueryInfoKeyW
OpenProcessToken
AdjustTokenPrivileges
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptReleaseContext
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
QueryServiceStatus
RegSetValueExA
RegOpenKeyExA
RegGetValueW
RegRenameKey
QueryServiceConfigW
CreateServiceW
ChangeServiceConfigW
RegOpenKeyA
RegSetKeyValueW
RegDeleteKeyW
OpenServiceW
OpenSCManagerW
DeleteService
ControlService
LookupPrivilegeValueW

ole32

CoUninitialize
CoInitialize
CreateStreamOnHGlobal
CoCreateGuid
CLSIDFromString
StringFromGUID2
CoCreateInstance
CoInitializeEx
PropVariantClear
OleInitialize
OleUninitialize
GetHGlobalFromStream
CoAddRefServerProcess
CoReleaseServerProcess

shell32

SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
SHGetPathFromIDListW
ord190
ord155
SHGetMalloc
SHBrowseForFolderW
SHGetDesktopFolder
SHChangeNotify
SHGetFolderPathW
ShellExecuteExW
CommandLineToArgvW
SHCreateDirectoryExW
SHFileOperationW
Shell_NotifyIconW
ord165
ShellExecuteW
SHOpenFolderAndSelectItems

oleaut32

VariantInit
VariantClear
SysAllocString
SysStringLen
VariantTimeToSystemTime
LoadRegTypeLi
VarBstrCmp
SystemTimeToVariantTime
LoadTypeLi
SysFreeString

shlwapi

PathAddBackslashW
PathAppendA
PathFileExistsA
PathFileExistsW
PathFindFileNameW
PathAppendW
StrStrIA
PathCombineW
PathRemoveFileSpecW
PathIsDirectoryW
StrStrIW
PathRemoveFileSpecA
PathRemoveBackslashW
SHStrDupW
SHGetValueW
SHDeleteKeyW
SHCopyKeyW
wnsprintfW
StrFormatByteSizeW
StrRChrA
StrFromTimeIntervalW
StrFormatKBSizeW

iphlpapi

GetAdaptersInfo
GetIfEntry
GetIfTable

opengl32

wglGetProcAddress
glGetString
wglGetCurrentContext
wglDeleteContext
wglCreateContext
wglMakeCurrent

urlmon

URLDownloadToFileW
URLDownloadToFileA

psapi

GetProcessMemoryInfo

wtsapi32

WTSQueryUserToken

pocofoundation

??0AtomicCounter@Poco@@QAE@H@Z
??1AtomicCounter@Poco@@QAE@XZ
??0BadCastException@Poco@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
??0Var@Dynamic@Poco@@QAE@XZ
??1Var@Dynamic@Poco@@QAE@XZ
??4Var@Dynamic@Poco@@QAEAAV012@ABV012@@Z
?type@Var@Dynamic@Poco@@QBEABVtype_info@@XZ
?isInteger@Var@Dynamic@Poco@@QBE_NXZ
?isBoolean@Var@Dynamic@Poco@@QBE_NXZ
?isString@Var@Dynamic@Poco@@QBE_NXZ
??0BadCastException@Poco@@QAE@ABV01@@Z
??0InvalidAccessException@Poco@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
??0NullPointerException@Poco@@QAE@H@Z
?format@Poco@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@ABVAny@1@1@Z
??0Exception@Poco@@QAE@ABV01@@Z
??0InvalidAccessException@Poco@@QAE@ABV01@@Z
??0LogicException@Poco@@QAE@ABV01@@Z
??0NullPointerException@Poco@@QAE@ABV01@@Z
??0RuntimeException@Poco@@QAE@ABV01@@Z
??1BadCastException@Poco@@UAE@XZ
??1InvalidAccessException@Poco@@UAE@XZ
??1NullPointerException@Poco@@UAE@XZ
?digestToHex@DigestEngine@Poco@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$vector@EV?$allocator@E@std@@@4@@Z
??0DigestOutputStream@Poco@@QAE@AAVDigestEngine@1@@Z
?close@DigestOutputStream@Poco@@QAEXXZ
?getPort@URI@Poco@@QBEGXZ
??1URI@Poco@@QAE@XZ
??0URI@Poco@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?release@RefCountedObject@Poco@@QBEXXZ
??1Timespan@Poco@@QAE@XZ
??0Timespan@Poco@@QAE@JJ@Z
?displayText@Exception@Poco@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??1SHA1Engine@Poco@@UAE@XZ
??0SHA1Engine@Poco@@QAE@XZ
?update@DigestEngine@Poco@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?update@DigestEngine@Poco@@QAEXPBXI@Z
??1DigestEngine@Poco@@UAE@XZ
??0DigestEngine@Poco@@QAE@XZ
?assertion@Bugcheck@Poco@@SAXPBD0H0@Z
??_DDigestOutputStream@Poco@@QAEXXZ
?copyStream@StreamCopier@Poco@@SA_JAAV?$basic_istream@DU?$char_traits@D@std@@@std@@AAV?$basic_ostream@DU?$char_traits@D@std@@@4@I@Z
?digest@MD5Engine@Poco@@UAEABV?$vector@EV?$allocator@E@std@@@std@@XZ
??1MD5Engine@Poco@@UAE@XZ
??0MD5Engine@Poco@@QAE@XZ

pocojson

?asVar@ParseHandler@JSON@Poco@@UBE?AVVar@Dynamic@3@XZ
?value@ParseHandler@JSON@Poco@@UAEXH@Z
?value@ParseHandler@JSON@Poco@@UAEXI@Z
?value@ParseHandler@JSON@Poco@@UAEX_J@Z
?value@ParseHandler@JSON@Poco@@UAEX_K@Z
?value@ParseHandler@JSON@Poco@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?value@ParseHandler@JSON@Poco@@UAEXN@Z
?value@ParseHandler@JSON@Poco@@UAEX_N@Z
?null@ParseHandler@JSON@Poco@@UAEXXZ
?asStruct@Handler@JSON@Poco@@UBE?AV?$Struct@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Dynamic@3@XZ
?parse@Parser@JSON@Poco@@QAE?AVVar@Dynamic@3@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@@Z
??1Parser@JSON@Poco@@UAE@XZ
??0Parser@JSON@Poco@@QAE@ABV?$SharedPtr@VHandler@JSON@Poco@@VReferenceCounter@3@V?$ReleasePolicy@VHandler@JSON@Poco@@@3@@2@I@Z
??1ParseHandler@JSON@Poco@@UAE@XZ
??0ParseHandler@JSON@Poco@@QAE@_N@Z
?has@Object@JSON@Poco@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?get@Object@JSON@Poco@@QBE?AVVar@Dynamic@3@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?key@ParseHandler@JSON@Poco@@UAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?endArray@ParseHandler@JSON@Poco@@UAEXXZ
?startArray@ParseHandler@JSON@Poco@@UAEXXZ
?endObject@ParseHandler@JSON@Poco@@UAEXXZ
?startObject@ParseHandler@JSON@Poco@@UAEXXZ
?reset@ParseHandler@JSON@Poco@@UAEXXZ

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

dxgi

CreateDXGIFactory

d3d9

Direct3DCreate9

rpcrt4

UuidCreate
UuidToStringW
RpcStringFreeW

gdi32

CreateDCW
DeleteDC
CreateFontIndirectW
GetObjectW
GetDeviceCaps
SetPixelFormat
ChoosePixelFormat
GetStockObject
GetTextExtentPoint32W
SelectObject
DeleteObject

netapi32

NetApiBufferFree
NetWkstaGetInfo

winhttp

WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpWriteData
WinHttpSetTimeouts
WinHttpOpenRequest
WinHttpReadData
WinHttpCrackUrl
WinHttpConnect
WinHttpAddRequestHeaders
WinHttpQueryDataAvailable
WinHttpSetOption
WinHttpCloseHandle
WinHttpOpen

poconet

?abort@HTTPSession@Net@Poco@@UAEXXZ
?getReason@HTTPResponse@Net@Poco@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??1HTTPResponse@Net@Poco@@UAE@XZ
??0HTTPResponse@Net@Poco@@QAE@XZ
?write@HTTPRequest@Net@Poco@@UBEXAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
??1HTTPRequest@Net@Poco@@UAE@XZ
??0HTTPRequest@Net@Poco@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00@Z
?connect@HTTPSession@Net@Poco@@MAEXABVSocketAddress@23@@Z
?mustReconnect@HTTPClientSession@Net@Poco@@MBE_NXZ
?peekResponse@HTTPClientSession@Net@Poco@@UAE_NAAVHTTPResponse@23@@Z
?proxyAuthenticate@HTTPClientSession@Net@Poco@@MAEXAAVHTTPRequest@23@@Z
?setContentLength@HTTPMessage@Net@Poco@@QAEX_J@Z
?end@NameValueCollection@Net@Poco@@QBE?AV?$_List_const_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@std@@@std@@@std@@XZ
?begin@NameValueCollection@Net@Poco@@QBE?AV?$_List_const_iterator@V?$_List_val@U?$_List_simple_types@U?$pair@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@std@@@std@@@std@@XZ
?add@NameValueCollection@Net@Poco@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
??1HTTPClientSession@Net@Poco@@UAE@XZ
??0HTTPClientSession@Net@Poco@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@G@Z
?socket@HTTPSession@Net@Poco@@QAEAAVStreamSocket@23@XZ
?setTimeout@HTTPSession@Net@Poco@@QAEXABVTimespan@3@@Z
?setReceiveTimeout@Socket@Net@Poco@@QAEXABVTimespan@3@@Z
?registerFactory@HTTPStreamFactory@Net@Poco@@SAXXZ
?getStatus@HTTPResponse@Net@Poco@@QBE?AW4HTTPStatus@123@XZ
pocoNetworkInitializer
?proxyRequestPrefix@HTTPClientSession@Net@Poco@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?read@HTTPSession@Net@Poco@@MAEHPAD_J@Z
?receiveResponse@HTTPClientSession@Net@Poco@@UAEAAV?$basic_istream@DU?$char_traits@D@std@@@std@@AAVHTTPResponse@23@@Z
?secure@HTTPClientSession@Net@Poco@@UBE_NXZ
?sendRequest@HTTPClientSession@Net@Poco@@UAEAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AAVHTTPRequest@23@@Z
?write@HTTPClientSession@Net@Poco@@MAEHPBD_J@Z
?HTTP_1_1@HTTPMessage@Net@Poco@@2V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@B
?toString@IPAddress@Net@Poco@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0HostEntry@Net@Poco@@QAE@XZ
??0HostEntry@Net@Poco@@QAE@ABV012@@Z
??4HostEntry@Net@Poco@@QAEAAV012@ABV012@@Z
??1HostEntry@Net@Poco@@QAE@XZ
?hostByName@DNS@Net@Poco@@SA?AVHostEntry@23@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z

poconetssl

?registerFactory@HTTPSStreamFactory@Net@Poco@@SAXXZ
??0Context@Net@Poco@@QAE@W4Usage@012@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@11W4VerificationMode@012@H_N1@Z
??1Context@Net@Poco@@UAE@XZ
?secure@HTTPSClientSession@Net@Poco@@UBE_NXZ
?read@HTTPSClientSession@Net@Poco@@MAEHPAD_J@Z
?proxyRequestPrefix@HTTPSClientSession@Net@Poco@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?proxyAuthenticate@HTTPSClientSession@Net@Poco@@MAEXAAVHTTPRequest@23@@Z
?connect@HTTPSClientSession@Net@Poco@@MAEXABVSocketAddress@23@@Z
?abort@HTTPSClientSession@Net@Poco@@UAEXXZ
??1HTTPSClientSession@Net@Poco@@UAE@XZ
??0HTTPSClientSession@Net@Poco@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@GV?$AutoPtr@VContext@Net@Poco@@@2@@Z
?initializeSSL@Net@Poco@@YAXXZ

vcruntime140

_except_handler4_common
__vcrt_InitializeCriticalSectionEx
__RTDynamicCast
strrchr
__std_type_info_name
__std_terminate
memmove
_CxxThrowException
__CxxFrameHandler3
memcpy
memset
_purecall
__std_exception_copy
__std_exception_destroy
wcsstr
memchr
strchr
strstr
wcsrchr
wcschr
__std_type_info_compare
_set_purecall_handler

api-ms-win-crt-runtime-l1-1-0

_controlfp_s
_invalid_parameter_noinfo
_register_thread_local_exe_atexit_callback
_set_invalid_parameter_handler
terminate
_c_exit
_exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_errno
_invalid_parameter_noinfo_noreturn
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_beginthreadex
_register_onexit_function
exit
strerror
__sys_nerr
_initialize_onexit_table

api-ms-win-crt-string-l1-1-0

strncpy_s
strncat_s
_wcslwr
isalnum
isspace
strpbrk
wcsnlen
strnlen
_strdup
wcsncmp
towlower
_wcsupr_s
iswdigit
wmemcpy_s
wcsncat_s
wcsncpy_s
_wcsicmp
tolower
strncmp
wcsncpy
_strnicmp
islower
isupper
isgraph
_wcsdup
toupper
towupper
wcscspn
wcsspn
isalpha
wcscpy_s
wcstok_s
isdigit
_wcslwr_s
_wcsnicmp
isxdigit
strncpy
isprint
wcscoll
_wcsicoll
_stricmp
wcscat_s

api-ms-win-crt-heap-l1-1-0

free
_free_base
_callnewh
_set_new_mode
realloc
_recalloc
_malloc_base
calloc
malloc

api-ms-win-crt-convert-l1-1-0

_wtoi
wcstol
_wtol
atoi
_itoa
_ecvt_s
strtod
wcstod
strtoul
_itow
_wtoi64
_strtoi64
_i64toa_s
mbstowcs_s
wcstoull
strtol
wcstoul
wcstoll
atoll
strtoull
strtoll
atol
_ltoa
_strtoui64
_wcstoui64

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
_fseeki64
fsetpos
fputc
__stdio_common_vfwprintf_s
__acrt_iob_func
fgetpos
fgetc
fflush
_get_stream_buffer_pointers
putchar
putwchar
setvbuf
ungetc
__stdio_common_vsprintf_s
__stdio_common_vsnwprintf_s
_lseeki64
__stdio_common_vsnprintf_s
fgets
fclose
_wfopen
_ftelli64
_close
__stdio_common_vswscanf
__stdio_common_vfprintf_s
_write
ftell
fseek
__stdio_common_vswprintf_s
fputs
__stdio_common_vfprintf
__stdio_common_vsscanf
__stdio_common_vswprintf
_read
_open
ungetwc
fread
fopen
fputwc
fgetwc
__p__commode
ferror
_set_fmode
fwrite

api-ms-win-crt-math-l1-1-0

_libm_sse2_pow_precise
_dtest
_finite
_isnan
_dsign
__setusermatherr
ceil
_CIfmod
_except1
floor

api-ms-win-crt-locale-l1-1-0

_configthreadlocale
setlocale
localeconv

api-ms-win-crt-utility-l1-1-0

srand
rand
ldiv
qsort

api-ms-win-crt-time-l1-1-0

_time64
strftime
_gmtime64
wcsftime
_localtime64
_localtime64_s
_time32
_mktime64

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file
_wsplitpath_s
_stat64
_waccess
_fstat64

api-ms-win-crt-multibyte-l1-1-0

_mbsinc
_mbslwr_s
_mbsrchr
_mbsstr

api-ms-win-crt-environment-l1-1-0

getenv

beacon_sdk

?set_common_param_getters@BeaconClient@@SAXABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$function@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$function@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@2@@std@@@2@@std@@@Z
?InitSDK@BeaconClient@@SAXABUBeaconConfig@@@Z
?UninitSDK@BeaconClient@@SAXXZ
?BeaconDeviceId@BeaconClient@@SAABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?set_common_params@BeaconClient@@SAXABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@Z
?Report@BeaconClient@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@3@W4RequestPriority@Beacon@@@Z

Exports

Exports

AmdPowerXpressRequestHighPerformance
GetModuleHandle64
GetProcAddress64
NvOptimusEnablement
X64Call

Sections

.text
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 831KB - Virtual size: 831KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 193B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 549KB - Virtual size: 549KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tvm0
Size: 115KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 297KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62d2da5d0bcbdd7a9a5275b83b71b2df

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

fd:42:41:d1:60:13:2a:46:e5:04:4c:09:23:79:91:a5:e0:61:21:14:4e:30:35:f5:25:47:38:76:ee:ff:d6:a5Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

caterpillar_sdk

minicorelib

cef_frame

gmesdk

comctl32

common

gf

xgraphic32

ws2_32

comdlg32

ximage

wininet

wldap32

zlib

libeay32

ssleay32

msvcp140

kernel32

user32

advapi32

ole32

shell32

oleaut32

shlwapi

iphlpapi

opengl32

urlmon

psapi

wtsapi32

pocofoundation

pocojson

version

dxgi

d3d9

rpcrt4

gdi32

netapi32

winhttp

poconet

poconetssl

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

api-ms-win-crt-environment-l1-1-0

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

fd:42:41:d1:60:13:2a:46:e5:04:4c:09:23:79:91:a5:e0:61:21:14:4e:30:35:f5:25:47:38:76:ee:ff:d6:a5
Signer

.text
Size: 4.6MB - Virtual size: 4.6MB

.rdata
Size: 831KB - Virtual size: 831KB

.data
Size: 44KB - Virtual size: 136KB

.tls
Size: 512B - Virtual size: 193B

.gfids
Size: 512B - Virtual size: 100B

.rsrc
Size: 549KB - Virtual size: 549KB

.tvm0
Size: 115KB - Virtual size: 116KB

.reloc
Size: 297KB - Virtual size: 300KB