8fda04156a2790d0d577e746802e6f72[.]bin

Sharing

Copy URL

Twitter E-mail

General

Target

8fda04156a2790d0d577e746802e6f72.bin
Size

7.6MB
MD5

e9d21ec5110c643c3c575d7f568ee38a
SHA1

04920a038325c9e56102f67235262cb5a6a6b188
SHA256

16f51e99ecab998e5bc310ca48892c614abe12dfbbbdc2a82542ef49b6d614b8
SHA512

5021684dc07c1a7f50d5fc59842b35a991888c97741ffb812593bd3abfecb0ef5a0226b6d9742ba5f98373442103900b057b9aeb990c067c712c42dd9d1a99e6
SSDEEP

196608:GiWppIwkJgY2b22/NYAW8Uc9WJFgNq1gxl78QmujJvP9vREbZnDC:aIwkJrg2CYAW9cvPmWJn9vREtnDC

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack002/-L@test_File_2024_as_P@ssKey-/SetupFile.exe
unpack002/-L@test_File_2024_as_P@ssKey-/win32-64/AppReadiness.dll
unpack002/-L@test_File_2024_as_P@ssKey-/win32-64/SharedVoiceAgents.dll
unpack002/-L@test_File_2024_as_P@ssKey-/win32-64/WwaApi.dll

Files

8fda04156a2790d0d577e746802e6f72.bin
.zip

Password: infected
115603ef5577f5f6d49e4613230eec3ebf6c0ef5312de3e93996618011045fbc.zip
.zip

Password: infected
-L@test_File_2024_as_P@ssKey-/FullInfo.xml
-L@test_File_2024_as_P@ssKey-/SetupFile.exe
.exe windows:6 windows x86 arch:x86

Password: infected

1aae8bf580c846f39c71c05898e57e88

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler

Sections

.text
Size: 7.2MB - Virtual size: 7.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8.3MB - Virtual size: 8.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 385KB - Virtual size: 587KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 409KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-L@test_File_2024_as_P@ssKey-/win32-64/AppReadiness.dll
.dll windows:10 windows x64 arch:x64

Password: infected

f42db4ef6f888d8daf1a604b90098993

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

AppReadiness.pdb

Imports

msvcrt

wcsrchr
toupper
wcstoul
__CxxFrameHandler3
memmove_s
realloc
_ui64tow_s
memcmp
??1type_info@@UEAA@XZ
_onexit
__dllonexit
_unlock
_lock
?terminate@@YAXXZ
_initterm
free
_amsg_exit
_XcptFilter
memmove
memcpy
_CxxThrowException
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBQEBD@Z
_callnewh
malloc
_vsnprintf_s
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@XZ
??1exception@@UEAA@XZ
_purecall
??3@YAXPEAX@Z
mbstowcs
wcstok_s
memcpy_s
_vsnwprintf
??_V@YAXPEAX@Z
__C_specific_handler
sprintf_s
memset

api-ms-win-core-com-l1-1-0

CoGetMalloc
CoResumeClassObjects
PropVariantClear
CoImpersonateClient
CoGetApartmentType
CoTaskMemRealloc
GetHGlobalFromStream
CreateStreamOnHGlobal
CoRevertToSelf
CoGetCallContext
CoFreeUnusedLibraries
CoTaskMemAlloc
CoInitializeSecurity
CoRegisterClassObject
CoRevokeClassObject
CoDisconnectContext
StringFromGUID2
CoTaskMemFree
CoCreateGuid
CoCreateInstance
CoWaitForMultipleHandles
CoCreateFreeThreadedMarshaler

api-ms-win-core-libraryloader-l1-2-0

LoadResource
LockResource
FindResourceExW
DisableThreadLibraryCalls
GetModuleHandleW
FreeLibrary
GetModuleHandleExW
GetModuleFileNameA
GetProcAddress
LoadLibraryExW

api-ms-win-core-synch-l1-1-0

ReleaseMutex
SetEvent
CreateMutexExW
InitializeCriticalSection
InitializeSRWLock
AcquireSRWLockShared
AcquireSRWLockExclusive
WaitForSingleObjectEx
DeleteCriticalSection
InitializeCriticalSectionEx
CreateSemaphoreExW
OpenSemaphoreW
CreateEventExW
EnterCriticalSection
WaitForSingleObject
ReleaseSemaphore
ResetEvent
LeaveCriticalSection
ReleaseSRWLockExclusive
ReleaseSRWLockShared

api-ms-win-core-heap-l1-1-0

HeapFree
HeapAlloc
GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RaiseException
SetLastError

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString
WindowsIsStringEmpty
WindowsGetStringRawBuffer
WindowsStringHasEmbeddedNull
WindowsDuplicateString
WindowsCreateStringReference
WindowsDeleteString

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventProviderEnabled
EventWrite
EventRegister
EventSetInformation
EventUnregister

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage
GetTraceEnableFlags
RegisterTraceGuidsW
UnregisterTraceGuids
GetTraceLoggerHandle
GetTraceEnableLevel

api-ms-win-core-processthreads-l1-1-0

OpenProcessToken
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
GetCurrentThread
OpenThreadToken
CreateThread
GetProcessId
GetCurrentThreadId

api-ms-win-core-winrt-l1-1-0

RoRegisterActivationFactories
RoActivateInstance
RoGetActivationFactory
RoUninitialize
RoInitialize
RoRevokeActivationFactories

api-ms-win-core-winrt-error-l1-1-0

RoTransformError
SetRestrictedErrorInfo
RoOriginateErrorW
RoOriginateError

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringW
DebugBreak

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW
Sleep
InitOnceComplete
InitOnceExecuteOnce
InitOnceBeginInitialize
WakeAllConditionVariable

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetSystemTime
GetTickCount
GetVersionExW
GetWindowsDirectoryW
GetSystemDirectoryW
GetLocalTime

api-ms-win-core-com-l1-1-1

RoGetAgileReference

api-ms-win-core-string-l1-1-0

CompareStringOrdinal

api-ms-win-security-base-l1-1-0

IsValidSid
CheckTokenMembership
AllocateAndInitializeSid
FreeSid
ImpersonateLoggedOnUser
GetTokenInformation
RevertToSelf
DuplicateTokenEx
GetSidSubAuthority
CreateWellKnownSid

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW
RegOpenUserClassesRoot
RegCreateKeyExW
RegFlushKey
RegDeleteValueW
RegGetValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteTreeW
RegCloseKey
RegSetValueExW
RegQueryValueExW

api-ms-win-core-kernel32-legacy-l1-1-0

RegisterWaitForSingleObject
MoveFileW
GetComputerNameW

api-ms-win-core-threadpool-legacy-l1-1-0

CreateTimerQueueTimer
DeleteTimerQueueTimer
UnregisterWaitEx

ntdll

RtlGetPersistedStateLocation
RtlIsMultiUsersInSessionSku
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlSubscribeWnfStateChangeNotification
NtQueryWnfStateData
RtlInitUnicodeString
RtlGetDeviceFamilyInfoEnum
NtQuerySystemInformation
RtlIsStateSeparationEnabled
NtQuerySystemTime
RtlNtStatusToDosError
RtlGetSessionProperties

api-ms-win-core-winrt-error-l1-1-1

RoGetMatchingRestrictedErrorInfo

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

api-ms-win-core-synch-l1-2-1

CreateSemaphoreW
WaitForMultipleObjects

api-ms-win-security-lsalookup-l2-1-0

LookupAccountSidW

samcli

NetUserGetInfo

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime

api-ms-win-core-file-l1-1-0

GetFileAttributesW
DeleteFileW
CompareFileTime
CreateFileW
GetFileAttributesExW
GetFileSize
CreateDirectoryW
FindNextFileW
RemoveDirectoryW
FindClose
WriteFile
ReadFile
FindFirstFileW

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW
ConvertStringSidToSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW

api-ms-win-security-lsalookup-l1-1-0

LsaLookupGetDomainInfo
LsaLookupFreeMemory
LsaLookupClose
LsaLookupOpenLocalPolicy

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalFree

api-ms-win-service-core-l1-1-0

SetServiceStatus
RegisterServiceCtrlHandlerExW

api-ms-win-core-path-l1-1-0

PathCchRemoveFileSpec
PathCchAppend
PathCchAddExtension
PathAllocCombine
PathCchCombine

api-ms-win-eventing-controller-l1-1-0

StopTraceW
EnableTraceEx2
StartTraceW

api-ms-win-core-debug-l1-1-1

CheckRemoteDebuggerPresent

api-ms-win-shcore-sysinfo-l1-1-0

IsOS

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrStrIW
StrRChrW
QISearch

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-appmodel-runtime-l1-1-1

FindPackagesByPackageFamily

propsys

PropVariantToUInt32
PSCreateMemoryPropertyStore
PropVariantToStringAlloc

api-ms-win-shcore-registry-l1-1-0

SHDeleteValueW

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-shcore-stream-l1-1-0

SHCreateStreamOnFileW

rpcrt4

UuidCreate

api-ms-win-core-heap-obsolete-l1-1-0

GlobalSize
GlobalLock
GlobalUnlock

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

appxdeploymentclient

ord28
ord67
ord12
ord2
ord59
ord66

combase

ord68
ord66
ord67
ord69

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

ServiceMain

Sections

.text
Size: 396KB - Virtual size: 396KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-L@test_File_2024_as_P@ssKey-/win32-64/AppResolver.dll
.dll windows:10 windows x64 arch:x64

Password: infected

e6b2102af5406429cae151fcfcea5ca3

Code Sign

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:ed
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:29

Not After

02-12-2021 21:29

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:c9:09:7d:fe:1c:e0:f2:3e:18:7d:fc:ea:2f:83:da:2f:ad:ee:2a:d9:90:e9:8c:96:f5:7d:19:fe:a8:ad:95
Signer

Actual PE Digest

1d:c9:09:7d:fe:1c:e0:f2:3e:18:7d:fc:ea:2f:83:da:2f:ad:ee:2a:d9:90:e9:8c:96:f5:7d:19:fe:a8:ad:95

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

AppResolver.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-string-l1-1-0

wcsspn
memset
wcscmp

api-ms-win-crt-private-l1-1-0

_o__itow_s
_o__purecall
_o__register_onexit_function
_o__seh_filter_dll
_o__set_errno
_o__ui64tow_s
_o__wcstoui64
memmove
_o__wtoi
_o_free
_o_malloc
_o_towupper
__C_specific_handler
_o__get_errno
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_onexit_table
_o__execute_onexit_table
_o__errno
_o__crt_atexit
_o__configure_narrow_argv
_o__cexit
_o__callnewh
wcschr
wcsrchr
_CxxThrowException
_o__initialize_narrow_environment
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
__std_terminate
__CxxFrameHandler3
memcmp
memcpy

api-ms-win-core-winrt-string-l1-1-0

WindowsDeleteString
WindowsCreateString
WindowsCreateStringReference
WindowsGetStringRawBuffer
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WindowsDuplicateString

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer
EventSetInformation
EventRegister
EventUnregister
EventActivityIdControl

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError
RoOriginateErrorW
SetRestrictedErrorInfo

api-ms-win-core-synch-l1-1-0

WaitForSingleObject
CreateSemaphoreExW
CreateMutexExW
InitializeCriticalSectionEx
ReleaseSemaphore
OpenSemaphoreW
ReleaseMutex
InitializeCriticalSection
InitializeSRWLock
OpenEventW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
AcquireSRWLockShared
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
CreateEventExW

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW
GetModuleFileNameA
GetModuleHandleExW
DisableThreadLibraryCalls
GetProcAddress
GetModuleFileNameW

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapReAlloc
GetProcessHeap
HeapFree

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentThreadId
ProcessIdToSessionId
OpenProcessToken
GetProcessTimes
GetCurrentThread
OpenThreadToken
TerminateProcess
GetCurrentProcess

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

api-ms-win-core-debug-l1-1-0

DebugBreak
IsDebuggerPresent
OutputDebugStringW

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
RaiseException
SetLastError
GetLastError
UnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-1

OpenProcess
IsProcessorFeaturePresent

api-ms-win-shell-namespace-l1-1-0

SHCreateItemWithParent
ILFree
ILIsEqual
ILCloneFirst
ILClone
SHCreateItemFromParsingName
SHCreateItemFromIDList
SHParseDisplayName
SHBindToParent
ILCombine
SHBindToFolderIDListParentEx
ILIsParent
ILFindLastID
SHGetIDListFromObject
ILGetSize
SHBindToObject

bcp47langs

GetUserLanguages

shcore

IStream_Read
IUnknown_QueryService
SHTaskPoolQueueTask
GetScaleFactorForDevice
ord109
IStream_Size
SHSetValueW
SHGetValueW
ord123
ord170
SHAnsiToUnicode
ord145
ord193
ord190
ord188
SHQueryValueExW
SHTaskPoolGetUniqueContext
ord213
IUnknown_GetSite
IUnknown_Set
ord192
SHStrDupW
ord130
ord122

windows.storage

ord942
SHGetKnownFolderPath
SHGetDesktopFolder

gdi32

StretchDIBits
GetObjectW
CreateCompatibleDC
CreateDIBSection
GdiAlphaBlend
DeleteDC
DeleteObject
SelectObject

ntdll

RtlPublishWnfStateData
NtQueryInformationProcess
RtlNtStatusToDosError
NtQueryWnfStateData
RtlAcquireSRWLockExclusive
RtlSubscribeWnfStateChangeNotification
RtlCompareUnicodeString
RtlNtStatusToDosErrorNoTeb
RtlUnsubscribeWnfNotificationWaitForCompletion
NtQueryInformationToken
RtlAllocateHeap
RtlReleaseSRWLockExclusive
RtlFreeHeap
RtlInitUnicodeString

ole32

CoUninitialize
PropVariantClear
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoGetMalloc
StringFromGUID2
CoCreateGuid
CoInitializeEx
CoMarshalInterThreadInterfaceInStream
CoReleaseMarshalData
CoGetInterfaceAndReleaseStream
CreateBindCtx
CoCreateFreeThreadedMarshaler
ReleaseStgMedium
CoAllowSetForegroundWindow
CoWaitForMultipleHandles
CoGetCallContext
RoGetAgileReference

shlwapi

StrDupW
StrCmpW
PathGetArgsW
AssocCreate
PathGetDriveNumberW
PathIsUNCW
PathIsRelativeW
PathIsURLW
ord487
ord219
PathCommonPrefixW
PathFindExtensionW
PathIsPrefixW
PathUnquoteSpacesW
ord156
PathRemoveBlanksW
PathRemoveExtensionW
PathRemoveFileSpecW
PathParseIconLocationW
ord158
ord157
PathFindFileNameW
PathIsFileSpecW
ord154
PathFileExistsW
StrStrIW
SHStrDupA
ord217
ord174
ord24
ord236
ord460
StrChrW
ord172

slc

SLGetWindowsInformationDWORD

user32

MonitorFromPoint
PostMessageW
FindWindowW
SetWindowLongPtrW
DefWindowProcW
GetWindowLongPtrW
SendNotifyMessageW
SetTimer
DestroyWindow
KillTimer
SetWindowTextW
InsertMenuW
LoadStringA
CharUpperBuffW
GetWindowThreadProcessId
CopyImage
GetSysColor
SystemParametersInfoW
CreateIconIndirect
DestroyIcon
ReleaseDC
GetDC
LoadStringW
GetMenuDefaultItem
CreatePopupMenu
RegisterClipboardFormatW
DestroyMenu

msvcp_win

?_Xlength_error@std@@YAXPEBD@Z

api-ms-win-core-localization-l1-2-0

GetThreadPreferredUILanguages
GetUserDefaultLCID
FormatMessageW
GetUserGeoID

api-ms-win-core-path-l1-1-0

PathCchAppend
PathCchCombine
PathCchRemoveFileSpec
PathCchRemoveBackslash
PathAllocCombine
PathCchRemoveExtension
PathCchFindExtension

api-ms-win-core-string-l1-1-0

CompareStringOrdinal

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize
InitOnceComplete

api-ms-win-core-file-l1-1-0

CreateFileW
DeleteFileW
CreateDirectoryW
CompareFileTime
GetFileSizeEx
GetLongPathNameW

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolTimer
SetThreadpoolTimer
CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc
LocalReAlloc

api-ms-win-core-winrt-l1-1-0

RoActivateInstance
RoGetActivationFactory

api-ms-win-core-memory-l1-1-0

CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
ReadProcessMemory

api-ms-win-core-memory-l1-1-1

PrefetchVirtualMemory

api-ms-win-core-string-obsolete-l1-1-0

lstrlenW

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-core-largeinteger-l1-1-0

MulDiv

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-core-registry-l1-1-0

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegGetValueW
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
RegQueryInfoKeyW

userenv

GetProfileType

api-ms-win-core-heap-obsolete-l1-1-0

GlobalUnlock
GlobalLock

api-ms-win-core-localization-obsolete-l1-2-0

GetUserDefaultUILanguage

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-core-winrt-error-l1-1-1

RoGetMatchingRestrictedErrorInfo

api-ms-win-security-base-l1-1-0

GetFileSecurityW
GetAce
GetSidSubAuthority
GetTokenInformation
GetSecurityDescriptorSacl

api-ms-win-shcore-stream-l1-1-0

SHCreateStreamOnFileW

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-appmodel-runtime-l1-1-1

GetStagedPackagePathByFullName

api-ms-win-appmodel-runtime-l1-1-0

ClosePackageInfo
GetPackageInfo
OpenPackageInfoByFullName
PackageFamilyNameFromFullName

api-ms-win-appmodel-runtime-internal-l1-1-2

GetEffectivePackageStatusForUser

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject

Sections

.text
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-L@test_File_2024_as_P@ssKey-/win32-64/AppVCatalog.dll
.dll windows:10 windows x64 arch:x64

Password: infected

7c4575987a9eac1d5a9ecd3cd6e766f8

Code Sign

33:00:00:02:ec:65:79:ad:1e:67:08:90:13:00:00:00:00:02:ec
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:29

Not After

02-12-2021 21:29

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7e:b7:85:69:42:41:3f:ae:97:24:ec:42:eb:88:96:b9:f0:76:58:63:42:b1:31:2e:d0:a3:4c:47:c3:7f:82:52
Signer

Actual PE Digest

7e:b7:85:69:42:41:3f:ae:97:24:ec:42:eb:88:96:b9:f0:76:58:63:42:b1:31:2e:d0:a3:4c:47:c3:7f:82:52

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

AppVCatalog.pdb

Imports

msvcp_win

??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_BADOFF@std@@3_JB
?_Xlength_error@std@@YAXPEBD@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z
?exceptions@ios_base@std@@QEAAXH@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
?uncaught_exception@std@@YA_NXZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?_Xout_of_range@std@@YAXPEBD@Z

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-string-l1-1-0

memset
wcsncmp

api-ms-win-crt-private-l1-1-0

_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__purecall
_o__register_onexit_function
_o__resetstkoflw
_o__seh_filter_dll
_o__stricmp
memmove
_o__ultow_s
_o__waccess
_o__wcsnicmp
_o__wcsupr_s
_o__wsplitpath_s
_o__wtoi
_o_free
_o_iswalpha
_o_iswdigit
_o_malloc
_o_terminate
_o_towupper
_o_wcscpy_s
_CxxThrowException
_o__execute_onexit_table
_o__errno
_o__crt_atexit
_o__configure_narrow_argv
_o__cexit
_o__callnewh
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___stdio_common_vsnprintf_s
_o__wcsicmp
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
wcschr
__C_specific_handler
strrchr
__std_terminate
__CxxFrameHandler3
__RTDynamicCast
memcmp
memcpy

shlwapi

PathFileExistsW

kernel32

VirtualProtect
LoadLibraryExA
GetSystemInfo
VirtualQuery
InitializeCriticalSectionAndSpinCount
FreeLibrary
IsWow64Process
FindFirstFileW
ReadFile
WriteFile
SetFileTime
GetTempPathW
SetFileAttributesW
GetFileAttributesExW
MoveFileExW
GetTempFileNameW
CopyFileExW
GetFileTime
GetFileSizeEx
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapDestroy
HeapReAlloc
HeapSize
FileTimeToSystemTime
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteFileW
CreateHardLinkW
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileExW
IsDebuggerPresent
DebugBreak
GetModuleHandleW
GetProcessHeap
GetCurrentProcessId
LocalFree
CreateMutexExW
GetProcAddress
HeapAlloc
RaiseException
CloseHandle
OpenSemaphoreW
WaitForSingleObjectEx
GetCurrentThread
OutputDebugStringW
FormatMessageW
ReleaseMutex
GetCurrentThreadId
CreateFileW
WaitForSingleObject
GetModuleHandleExW
ReleaseSemaphore
GetCurrentProcess
SetLastError
HeapFree
CreateSemaphoreExW
GetModuleFileNameA
SystemTimeToFileTime
AcquireSRWLockShared
GetLocalTime
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
GetLastError
Sleep
GetFileAttributesW
CreateEventW

advapi32

RegQueryValueExW
EventWriteTransfer
RegCloseKey
EventActivityIdControl
GetTokenInformation
OpenThreadToken
GetLengthSid
ConvertSidToStringSidW
DuplicateToken
SetThreadToken
OpenProcessToken
IsValidSid
CopySid
RegCreateKeyExW
RegDeleteKeyValueW
RegDeleteKeyExW
RegSetKeyValueW
EventUnregister
EventSetInformation
EventRegister
RevertToSelf
ImpersonateLoggedOnUser
RegOpenCurrentUser
RegQueryInfoKeyW
RegDeleteTreeW
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW

ole32

CoTaskMemFree
CLSIDFromString
CoCreateInstance

oleaut32

SysFreeString
VariantClear
VariantInit
SysAllocString
VariantCopy

shell32

ord165
SHGetKnownFolderPath

appvpolicy

ord3
ord10
ord6
ord8
ord9
ord7

appvmanifest

ord3

Exports

Exports

Deinitialize
GetClientCatalog
GetComponent
Initialize
InitializeISV

Sections

.text
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-L@test_File_2024_as_P@ssKey-/win32-64/AppVEntStreamingManager.dll
.dll windows:10 windows x64 arch:x64

Password: infected

d6835219736978e1be5af46ac008a8a2

Code Sign

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:ed
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:29

Not After

02-12-2021 21:29

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7d:0a:b4:c2:4d:b2:1c:5e:fc:ff:19:f6:d2:ce:f9:a9:15:f1:4c:f3:b6:f9:1f:d9:9d:e4:ef:da:c2:06:e3:ea
Signer

Actual PE Digest

7d:0a:b4:c2:4d:b2:1c:5e:fc:ff:19:f6:d2:ce:f9:a9:15:f1:4c:f3:b6:f9:1f:d9:9d:e4:ef:da:c2:06:e3:ea

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

AppVEntStreamingManager.pdb

Imports

msvcp_win

?_Xlength_error@std@@YAXPEBD@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z
?_BADOFF@std@@3_JB
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z
?exceptions@ios_base@std@@QEAAXH@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?uncaught_exception@std@@YA_NXZ

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-string-l1-1-0

memset
wcsncmp

api-ms-win-crt-private-l1-1-0

_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__purecall
_o__register_onexit_function
_o__resetstkoflw
_o__seh_filter_dll
_o__stricmp
memmove
_o__wcsicmp
_o__wcsnicmp
_o__wsplitpath_s
_o__wtoi
_o_calloc
_o_free
_o_iswalpha
_o_iswdigit
_o_malloc
_o_terminate
_o_wcscpy_s
_CxxThrowException
_o__execute_onexit_table
_o__errno
_o__crt_atexit
_o__configure_narrow_argv
_o__cexit
_o__callnewh
_o___stdio_common_vswprintf_s
_o___std_type_info_destroy_list
_o___std_exception_destroy
_o___std_exception_copy
strrchr
wcschr
__std_terminate
__C_specific_handler
__CxxFrameHandler3
__RTDynamicCast
memcmp
memcpy

appvfilesystemmetadata

ord2

appvmanifest

ord2

appvstreammap

ord1

fltlib

FilterAttach
FilterReplyMessage
FilterSendMessage
FilterConnectCommunicationPort
FilterGetMessage

advapi32

GetSecurityDescriptorGroup
GetTokenInformation
OpenThreadToken
GetLengthSid
ConvertSidToStringSidW
DuplicateToken
OpenProcessToken
IsValidSid
CopySid
EventUnregister
EventSetInformation
EventRegister
GetSidIdentifierAuthority
PerfSetCounterSetInfo
MakeAbsoluteSD
MakeSelfRelativeSD
LookupAccountSidW
GetSecurityDescriptorLength
ConvertStringSecurityDescriptorToSecurityDescriptorW
InitializeAcl
InitializeSecurityDescriptor
CheckTokenMembership
SetThreadToken
AddAce
GetSecurityDescriptorOwner
PerfStartProviderEx
InitializeSid
ConvertStringSidToSidW
GetNamedSecurityInfoW
GetSecurityDescriptorControl
SetNamedSecurityInfoW
PerfStopProvider
GetSidLengthRequired
GetSidSubAuthority
GetSidSubAuthorityCount
EqualSid
GetAce
EventWriteTransfer
GetAclInformation
GetSecurityDescriptorDacl
AdjustTokenPrivileges
SetSecurityDescriptorDacl
GetSecurityDescriptorSacl
LookupPrivilegeValueW
ImpersonateLoggedOnUser
RevertToSelf
EventActivityIdControl
PerfDeleteInstance
PerfCreateInstance
PerfSetULongCounterValue
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
RegCloseKey

kernel32

DuplicateHandle
WaitForThreadpoolTimerCallbacks
GetVolumePathNameW
VirtualAlloc
DeleteFileW
Sleep
FindClose
RemoveDirectoryW
FindNextFileW
FindFirstFileW
QueryDosDeviceW
TerminateProcess
GetModuleHandleW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WideCharToMultiByte
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
OpenProcess
CreateThreadpoolWork
SubmitThreadpoolWork
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
CreateThreadpoolCleanupGroup
SetThreadpoolThreadMaximum
CloseThreadpoolCleanupGroupMembers
CloseThreadpoolCleanupGroup
SetThreadpoolThreadMinimum
CreateThreadpool
CloseThreadpool
RaiseException
SetEvent
CreateEventW
GetVersionExW
GetFileAttributesW
VirtualFree
SetLastError
CreateDirectoryW
DisableThreadLibraryCalls
DeleteCriticalSection
LocalFree
CloseHandle
GetCurrentThread
GetLastError
GetCurrentThreadId
CloseThreadpoolTimer
LeaveCriticalSection
GetCurrentProcess
EnterCriticalSection
LoadLibraryExW
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
GetQueuedCompletionStatus
WaitForMultipleObjectsEx
PostQueuedCompletionStatus
CreateThread
CreateIoCompletionPort
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
GetDriveTypeW
MoveFileExW
FreeLibrary
GetSystemDirectoryW
LoadLibraryA
LoadLibraryW
GetNativeSystemInfo
InitializeCriticalSectionAndSpinCount
SetFileAttributesW
GetTempFileNameW
CopyFileExW
ExpandEnvironmentStringsW
GetTempPathW
GetTickCount64
SetThreadpoolTimer
CreateThreadpoolTimer
WaitForSingleObject
GetSystemInfo
QueueUserWorkItem
CallbackMayRunLong
ResetEvent
InitializeCriticalSection
RtlCompareMemory
HeapDestroy

ntdll

RtlEnumerateGenericTableWithoutSplayingAvl
RtlSubscribeWnfStateChangeNotification
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlNtStatusToDosError
RtlCompareUnicodeString
RtlInitializeGenericTableAvl
RtlDeleteElementGenericTableAvl
RtlEqualUnicodeString
RtlLookupElementGenericTableAvl
RtlIsGenericTableEmptyAvl
RtlCopyUnicodeString
RtlEnumerateGenericTableAvl
RtlInsertElementGenericTableAvl

ole32

CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeEx
CLSIDFromString
CoTaskMemFree
CreateStreamOnHGlobal

oleaut32

VariantCopy
VariantClear
SysFreeString
SysAllocString

shlwapi

PathCreateFromUrlW

userenv

UnloadUserProfile

Exports

Exports

Deinitialize
GetComponent
Initialize
InitializeISV

Sections

.text
Size: 460KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-L@test_File_2024_as_P@ssKey-/win32-64/SHCore.dll
.dll windows:10 windows x64 arch:x64

Password: infected

2c4cb476a1713adf312799fab977c9e4

Code Sign

33:00:00:02:66:bd:15:80:ef:a7:5c:d6:d3:00:00:00:00:02:66
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04-03-2020 18:30

Not After

03-03-2021 18:30

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

75:56:f9:31:40:78:b1:3a:e9:a9:3b:5a:4e:03:da:93:a1:fc:22:23:7a:2c:41:81:06:85:af:b7:92:00:1c:f5
Signer

Actual PE Digest

75:56:f9:31:40:78:b1:3a:e9:a9:3b:5a:4e:03:da:93:a1:fc:22:23:7a:2c:41:81:06:85:af:b7:92:00:1c:f5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

shcore.pdb

Imports

msvcrt

_callnewh
_unlock
floor
_lock
_onexit
__C_specific_handler
__dllonexit
_initterm
__CxxFrameHandler3
memcpy
malloc
_amsg_exit
_XcptFilter
free
_purecall
memcmp
_vsnwprintf
memcpy_s
memmove
memset

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameA
FreeLibraryAndExitThread
GetModuleHandleW
GetModuleFileNameW
DisableThreadLibraryCalls
GetModuleHandleExW
LoadLibraryExW
SizeofResource
LoadResource
FindResourceExW
FreeLibrary
GetProcAddress
LockResource

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize
Sleep
InitOnceComplete
InitOnceExecuteOnce
SleepConditionVariableSRW
WakeAllConditionVariable

api-ms-win-core-synch-l1-1-0

LeaveCriticalSection
WaitForSingleObject
CreateEventW
ReleaseMutex
ReleaseSRWLockExclusive
SetEvent
ReleaseSemaphore
AcquireSRWLockExclusive
EnterCriticalSection
CreateEventExW
WaitForMultipleObjectsEx
OpenSemaphoreW
OpenEventW
ReleaseSRWLockShared
InitializeCriticalSectionEx
CreateMutexExW
CreateMutexW
CreateSemaphoreExW
InitializeCriticalSection
AcquireSRWLockShared
InitializeSRWLock
DeleteCriticalSection
WaitForSingleObjectEx
TryAcquireSRWLockExclusive

api-ms-win-core-heap-l1-1-0

HeapFree
GetProcessHeap
HeapReAlloc
HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

SetLastError
SetUnhandledExceptionFilter
GetLastError
UnhandledExceptionFilter
RaiseException

api-ms-win-eventing-provider-l1-1-0

EventSetInformation
EventWriteTransfer
EventUnregister
EventProviderEnabled
EventRegister

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-core-processthreads-l1-1-0

OpenThreadToken
TlsGetValue
CreateThread
GetThreadPriority
TlsAlloc
GetCurrentThread
ResumeThread
SetThreadPriority
TlsSetValue
TerminateProcess
GetStartupInfoW
TlsFree
GetCurrentProcessId
OpenProcessToken
GetProcessId
GetCurrentThreadId
GetCurrentProcess

api-ms-win-core-localization-l1-2-0

GetLocaleInfoW
FormatMessageW

api-ms-win-core-debug-l1-1-0

DebugBreak
IsDebuggerPresent
OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetVersionExW
GetTickCount
GetTickCount64
GetSystemTimeAsFileTime

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolWait
WaitForThreadpoolWaitCallbacks
FreeLibraryWhenCallbackReturns
CallbackMayRunLong
SetThreadpoolWait
TrySubmitThreadpoolCallback
CreateThreadpoolTimer
SetThreadpoolTimer
CloseThreadpoolTimer
CloseThreadpoolWait
DisassociateCurrentThreadFromCallback
WaitForThreadpoolTimerCallbacks

api-ms-win-core-heap-l2-1-0

LocalFree
LocalReAlloc
LocalAlloc

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrToIntW
StrDupA
QISearch
StrDupW
StrCmpNIW
StrCmpNICW
StrCmpICW
StrChrW

api-ms-win-core-registry-l1-1-0

RegDeleteKeyExW
RegEnumValueW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegQueryInfoKeyA
RegQueryInfoKeyW
RegEnumKeyExA
RegEnumValueA
RegDeleteValueW
RegGetValueW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyExA
RegDeleteValueA
RegOpenKeyExA

api-ms-win-security-base-l1-1-0

CheckTokenMembership
RevertToSelf
ImpersonateLoggedOnUser
AdjustTokenPrivileges
GetTokenInformation

api-ms-win-core-memory-l1-1-0

CreateFileMappingW
UnmapViewOfFile
OpenFileMappingW
MapViewOfFile

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-file-l1-1-0

GetDriveTypeW
SetFilePointer
DeleteFileW
SetEndOfFile
GetVolumeInformationByHandleW
LockFileEx
GetFileAttributesExW
GetFileSizeEx
CreateFileW
ReadFile
SetFileInformationByHandle
GetFileAttributesW
CreateDirectoryW
FlushFileBuffers
SetFilePointerEx
GetFileInformationByHandle
WriteFile
UnlockFileEx

api-ms-win-core-shlwapi-legacy-l1-1-0

PathFindFileNameW
PathUnExpandEnvStringsA
PathCombineW
PathIsRelativeW
PathFileExistsW
PathFindExtensionW
PathRemoveFileSpecW
PathGetDriveNumberW
PathIsUNCW
PathUnExpandEnvStringsW

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW
ExpandEnvironmentStringsA

api-ms-win-core-wow64-l1-1-1

Wow64SetThreadDefaultGuestMachine

ntdll

memmove_s
_vsnprintf_s
wcsncmp
wcschr
wcsrchr
RtlAreLongPathsEnabled
toupper
NtQuerySystemInformation
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
NtQueryInformationProcess
NtCreateFile
RtlInitUnicodeString
RtlNtStatusToDosError
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlQueryWnfStateData
RtlSubscribeWnfStateChangeNotification
NtQuerySystemInformationEx

api-ms-win-core-sysinfo-l1-2-0

GetOsSafeBootMode

api-ms-win-core-string-l2-1-1

SHLoadIndirectString

api-ms-win-core-largeinteger-l1-1-0

MulDiv

api-ms-win-core-quirks-l1-1-0

QuirkIsEnabled

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-io-l1-1-0

DeviceIoControl
GetOverlappedResult
CancelIoEx

api-ms-win-core-file-l2-1-0

ReplaceFileW
GetFileInformationByHandleEx

api-ms-win-core-file-l1-2-0

CreateFile2

api-ms-win-core-threadpool-legacy-l1-1-0

DeleteTimerQueueTimer
QueueUserWorkItem
CreateTimerQueueTimer

rpcrt4

I_RpcBindingInqLocalClientPID

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-version-l1-1-0

GetFileVersionInfoExW
GetFileVersionInfoSizeExW
VerQueryValueW

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW
lstrcmpW

api-ms-win-core-localization-obsolete-l1-2-0

GetUserDefaultUILanguage

api-ms-win-core-atoms-l1-1-0

GlobalDeleteAtom
GlobalGetAtomNameW
GlobalAddAtomExW

api-ms-win-core-path-l1-1-0

PathCchAddBackslashEx

combase

ord134

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

CommandLineToArgvW
CreateRandomAccessStreamOnFile
CreateRandomAccessStreamOverStream
CreateStreamOverRandomAccessStream
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
GetCurrentProcessExplicitAppUserModelID
GetDpiForMonitor
GetDpiForShellUIComponent
GetFeatureEnabledState
GetFeatureVariant
GetProcessDpiAwareness
GetProcessReference
GetScaleFactorForDevice
GetScaleFactorForMonitor
IStream_Copy
IStream_Read
IStream_ReadStr
IStream_Reset
IStream_Size
IStream_Write
IStream_WriteStr
IUnknown_AtomicRelease
IUnknown_GetSite
IUnknown_QueryService
IUnknown_Set
IUnknown_SetSite
IsOS
IsProcessInIsolatedContainer
RecordFeatureError
RecordFeatureUsage
RegisterScaleChangeEvent
RegisterScaleChangeNotifications
RevokeScaleChangeNotifications
SHAnsiToAnsi
SHAnsiToUnicode
SHCopyKeyA
SHCopyKeyW
SHCreateMemStream
SHCreateStreamOnFileA
SHCreateStreamOnFileEx
SHCreateStreamOnFileW
SHCreateThread
SHCreateThreadRef
SHCreateThreadWithHandle
SHDeleteEmptyKeyA
SHDeleteEmptyKeyW
SHDeleteKeyA
SHDeleteKeyW
SHDeleteValueA
SHDeleteValueW
SHEnumKeyExA
SHEnumKeyExW
SHEnumValueA
SHEnumValueW
SHGetThreadRef
SHGetValueA
SHGetValueW
SHOpenRegStream2A
SHOpenRegStream2W
SHOpenRegStreamA
SHOpenRegStreamW
SHQueryInfoKeyA
SHQueryInfoKeyW
SHQueryValueExA
SHQueryValueExW
SHRegDuplicateHKey
SHRegGetIntW
SHRegGetPathA
SHRegGetPathW
SHRegGetValueA
SHRegGetValueFromHKCUHKLM
SHRegGetValueW
SHRegSetPathA
SHRegSetPathW
SHReleaseThreadRef
SHSetThreadRef
SHSetValueA
SHSetValueW
SHStrDupA
SHStrDupW
SHTaskPoolAllowThreadReuse
SHTaskPoolDoNotWaitForMoreTasks
SHTaskPoolGetCurrentThreadLifetime
SHTaskPoolGetUniqueContext
SHTaskPoolQueueTask
SHTaskPoolSetThreadReuseAllowed
SHUnicodeToAnsi
SHUnicodeToUnicode
SetCurrentProcessExplicitAppUserModelID
SetProcessDpiAwareness
SetProcessReference
SubscribeFeatureStateChangeNotification
UnregisterScaleChangeEvent
UnsubscribeFeatureStateChangeNotification

Sections

.text
Size: 448KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-L@test_File_2024_as_P@ssKey-/win32-64/SharedVoiceAgents.dll
.dll windows:10 windows x64 arch:x64

Password: infected

28ec3c26de982f7f5523b06c359c7559

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

SharedVoiceAgents.pdb

Imports

msvcp110_win

?_Xbad_alloc@std@@YAXXZ
?_Xbad_function_call@std@@YAXXZ
??0_Lockit@std@@QEAA@H@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Winerror_map@std@@YAPEBDH@Z
??1_Lockit@std@@QEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z

msvcrt

_vsnwprintf_s
_errno
_itow_s
_wcsicmp
wcsrchr
memmove_s
?name@type_info@@QEBAPEBDXZ
strnlen
mbstowcs_s
_wtof
swscanf_s
iswspace
iswdigit
_wtoi64
swprintf_s
_i64tow_s
??8type_info@@QEBAHAEBV0@@Z
__RTtypeid
memset
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
_onexit
__dllonexit
_unlock
_lock
__C_specific_handler
_initterm
free
_amsg_exit
_XcptFilter
_callnewh
malloc
_vsnprintf_s
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@XZ
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBQEBDH@Z
_wtoi
_create_locale
_wtof_l
_free_locale
towupper
iswalnum
iswalpha
srand
rand
ispunct
??1exception@@UEAA@XZ
_purecall
memcpy_s
_vsnwprintf
__CxxFrameHandler3
??3@YAXPEAX@Z
_CxxThrowException
memcmp
memcpy
memmove
wcscmp

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameA
DisableThreadLibraryCalls
GetModuleHandleExW
GetModuleHandleW
GetProcAddress

api-ms-win-core-synch-l1-1-0

ReleaseMutex
CreateMutexExW
WaitForSingleObject
OpenSemaphoreW
ReleaseSemaphore
CreateSemaphoreExW
CreateEventExW
ResetEvent
InitializeCriticalSection
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
SetEvent
DeleteCriticalSection
EnterCriticalSection
AcquireSRWLockShared
WaitForSingleObjectEx
ReleaseSRWLockShared
CreateEventW
LeaveCriticalSection
InitializeCriticalSectionEx

api-ms-win-core-heap-l1-1-0

HeapAlloc
GetProcessHeap
HeapFree

api-ms-win-core-errorhandling-l1-1-0

RaiseException
SetUnhandledExceptionFilter
SetLastError
UnhandledExceptionFilter
GetLastError

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
GetCurrentProcess
TerminateProcess
GetCurrentProcessId

api-ms-win-core-localization-l1-2-0

FormatMessageW
ResolveLocaleName
LocaleNameToLCID

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
DebugBreak
IsDebuggerPresent

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-synch-l1-2-0

InitOnceComplete
InitOnceBeginInitialize
Sleep
SleepConditionVariableSRW
WakeAllConditionVariable

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTime
GetSystemTimeAsFileTime
GetTickCount64
GetTickCount

api-ms-win-eventing-provider-l1-1-0

EventSetInformation
EventWriteTransfer
EventUnregister
EventRegister
EventActivityIdControl

api-ms-win-core-winrt-string-l1-1-0

WindowsDeleteString
WindowsGetStringRawBuffer
WindowsCreateStringReference

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory
RoActivateInstance

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalFree

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime
GetTimeZoneInformation
SystemTimeToFileTime

api-ms-win-core-file-l1-1-0

GetFileAttributesW
CreateDirectoryW
FileTimeToLocalFileTime
FindFirstFileW
CreateFileW
FindNextFileW

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer
CloseThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks

api-ms-win-core-winrt-registration-l1-1-0

RoGetActivatableClassRegistration

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-core-memory-l1-1-0

CreateFileMappingW
UnmapViewOfFile
MapViewOfFile

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler
CoWaitForMultipleHandles

api-ms-win-core-registry-l1-1-0

RegGetValueW

api-ms-win-core-datetime-l1-1-0

GetTimeFormatW
GetDateFormatW

speechpal

CreateSpeechPalHelperFactory

Exports

Exports

RegisterVoiceAgents

Sections

.text
Size: 571KB - Virtual size: 571KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RT_CODE
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 255KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-L@test_File_2024_as_P@ssKey-/win32-64/WwaApi.dll
.dll regsvr32 windows:10 windows x64 arch:x64

a9faccdfa6196e65fad7a13c50bf71ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

WwaApi.pdb

Imports

msvcrt

memcpy_s
_purecall
malloc
free
_XcptFilter
_amsg_exit
_initterm
__C_specific_handler
_lock
_unlock
__dllonexit
_onexit
memcmp
_vsnwprintf
memset

api-ms-win-core-com-l1-1-0

CreateStreamOnHGlobal
CoMarshalInterface
CoCreateInstance
CoReleaseMarshalData
CoWaitForMultipleHandles
CoGetApartmentType
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-winrt-error-l1-1-0

RoTransformError
RoOriginateErrorW
SetRestrictedErrorInfo
GetRestrictedErrorInfo
RoOriginateError

api-ms-win-core-winrt-error-l1-1-1

IsErrorPropagationEnabled
RoReportFailedDelegate
RoGetMatchingRestrictedErrorInfo

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference
WindowsCreateString
HSTRING_UserUnmarshal64
HSTRING_UserUnmarshal
WindowsDeleteString
HSTRING_UserFree
HSTRING_UserSize64
HSTRING_UserFree64
WindowsDuplicateString
HSTRING_UserSize
HSTRING_UserMarshal64
WindowsIsStringEmpty
WindowsCompareStringOrdinal
WindowsStringHasEmbeddedNull
WindowsGetStringRawBuffer
HSTRING_UserMarshal

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
UnregisterTraceGuids
GetTraceLoggerHandle

api-ms-win-core-misc-l1-1-0

FormatMessageW
Sleep

api-ms-win-core-debug-l1-1-0

OutputDebugStringW
DebugBreak
IsDebuggerPresent

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-heap-l1-1-0

HeapFree
GetProcessHeap
HeapAlloc

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
GetCurrentThreadId
TerminateProcess
OpenProcessToken
GetCurrentProcess

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-synch-l1-1-0

SetEvent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionEx
CreateEventExW
CreateSemaphoreExW
ReleaseSemaphore
WaitForSingleObject
ReleaseMutex
WaitForSingleObjectEx
OpenSemaphoreW
CreateMutexExW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
InitializeSRWLock

api-ms-win-core-synch-l1-2-0

WakeAllConditionVariable
InitOnceExecuteOnce
SleepConditionVariableSRW

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-core-errorhandling-l1-1-0

SetLastError
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RaiseException

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW
FreeLibrary
LoadStringW
GetModuleFileNameA
GetModuleHandleW
LoadLibraryExW
GetProcAddress

api-ms-win-downlevel-advapi32-l1-1-1

GetTokenInformation

api-ms-win-downlevel-kernel32-l1-1-0

QueueUserWorkItem

api-ms-win-downlevel-shlwapi-l2-1-1

SHGetThreadRef

api-ms-win-shcore-taskpool-l1-1-0

SHTaskPoolQueueTask

ntdll

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlIsCriticalSectionLocked
RtlDeleteCriticalSection

rpcrt4

IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
NdrStubCall3
CStdStubBuffer_CountRefs
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
NdrOleFree
CStdStubBuffer_DebugServerQueryInterface
IUnknown_AddRef_Proxy
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Connect
CStdStubBuffer_QueryInterface
NdrDllGetClassObject
NdrCStdStubBuffer_Release
NdrCStdStubBuffer2_Release
NdrDllCanUnloadNow
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrStubForwardingFunction
CStdStubBuffer_Invoke

urlmon

CreateUri

combase

ord10
ord20
ord15
ord9
ord16
ord8
ord7
ord5
ord34
ord33
ord18
CStdStubBuffer2_QueryInterface
ord12
ord6
CStdStubBuffer2_Disconnect
ord22
ord14
ord19
CStdStubBuffer2_Connect
ord11
ord13
ord32
CStdStubBuffer2_CountRefs
ord21
ord2
ord17

oleaut32

SysStringLen
SysAllocString
SysAllocStringLen
SysFreeString

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

Exports

Exports

DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 305KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-L@test_File_2024_as_P@ssKey-/win32-64/wxmsw32u_xrc_gcc_custom.dll
.dll windows:4 windows x64 arch:x64

61f52898006c9551a4c4108c1f7e8236

Code Sign

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01-01-2004 00:00

Not After

31-12-2028 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-05-2021 00:00

Not After

31-12-2028 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22-03-2021 00:00

Not After

21-03-2036 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

31:83:0c:37:0a:d7:e4:97:63:3b:6e:b3:a0:2d:69:e6
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

18-02-2022 00:00

Not After

17-02-2025 23:59

Subject

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

c6:fa:e0:2b:b8:f2:7f:d5:49:02:55:df:fc:25:e9:19:f1:0f:06:3b:62:40:96:6c:8b:6a:bd:cf:74:84:e7:b0
Signer

Actual PE Digest

c6:fa:e0:2b:b8:f2:7f:d5:49:02:55:df:fc:25:e9:19:f1:0f:06:3b:62:40:96:6c:8b:6a:bd:cf:74:84:e7:b0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

wxbase32u_gcc_custom

_Z15wxExpandEnvVarsRK8wxString
_Z18wxGetUTCTimeMillisv
_Z19wxGet_wxConvLibcPtrv
_Z7wxSplitRK8wxStringww
_ZN10wxDateTime3SetERK2tm
_ZN10wxDateTime8GetTmNowEP2tm
_ZN10wxFileName10FileExistsERK8wxString
_ZN10wxFileName6AssignERK8wxString12wxPathFormat
_ZN10wxFileName6AssignERKS_
_ZN10wxFileName9NormalizeEiRK8wxString12wxPathFormat
_ZN11wxClassInfo8RegisterEv
_ZN11wxClassInfo8sm_firstE
_ZN11wxClassInfo9FindClassERK8wxString
_ZN11wxClassInfoD1Ev
_ZN12wxEvtHandler10QueueEventEP7wxEvent
_ZN12wxEvtHandler12ProcessEventER7wxEvent
_ZN12wxEvtHandler15DoSetClientDataEPv
_ZN12wxEvtHandler16SearchEventTableER12wxEventTableR7wxEvent
_ZN12wxEvtHandler17DoSetClientObjectEP12wxClientData
_ZN12wxEvtHandler21WXReservedEvtHandler1EPv
_ZN12wxEvtHandler21WXReservedEvtHandler2EPv
_ZN12wxEvtHandler6DoBindEiiiP14wxEventFunctorP8wxObject
_ZN12wxEvtHandlerC2Ev
_ZN12wxEvtHandlerD2Ev
_ZN12wxFileSystem12ChangePathToERK8wxStringb
_ZN12wxFileSystem13FileNameToURLERK10wxFileName
_ZN12wxFileSystem8FindNextEv
_ZN12wxFileSystem8OpenFileERK8wxStringi
_ZN12wxFileSystem9FindFirstERK8wxStringi
_ZN12wxFileSystemD1Ev
_ZN13wxInputStream7ReadAllEPvy
_ZN14wxEventFunctorD2Ev
_ZN14wxFormatString7AsWCharEv
_ZN14wxTranslations21GetUntranslatedStringERK8wxString
_ZN14wxTranslations3GetEv
_ZN16wxEventHashTableC1ERK12wxEventTable
_ZN16wxEventHashTableD1Ev
_ZN17_wxHashTableBase211DeleteNodesEyPP21_wxHashTable_NodeBasePFvS1_E
_ZN17_wxHashTableBase212GetNextPrimeEm
_ZN17_wxHashTableBase213CopyHashTableEPP21_wxHashTable_NodeBaseyPS_S2_PFyS3_S1_EPFS1_S1_E
_ZN17_wxHashTableBase216DummyProcessNodeEP21_wxHashTable_NodeBase
_ZN17wxCriticalSection5EnterEv
_ZN17wxCriticalSection5LeaveEv
_ZN17wxStringTokenizer12GetNextTokenEv
_ZN17wxStringTokenizer9SetStringERK8wxStringS2_21wxStringTokenizerMode
_ZN17wxStringTokenizerC1ERK8wxStringS2_21wxStringTokenizerMode
_ZN21wxClientDataContainerC2Ev
_ZN5wxDir11GetAllFilesERK8wxStringP13wxArrayStringS2_i
_ZN5wxLog17GetComponentLevelERK8wxString
_ZN5wxLog22IsThreadLoggingEnabledEv
_ZN5wxLog5OnLogEmRK8wxStringRK15wxLogRecordInfo
_ZN5wxLog8ms_doLogE
_ZN7wxEventC2Eii
_ZN7wxTimer4InitEv
_ZN7wxTimer8SetOwnerEP12wxEvtHandleri
_ZN7wxTimerD1Ev
_ZN8wxModule12ms_classInfoE
_ZN8wxModule14RegisterModuleEPS_
_ZN8wxModule17InitializeModulesEv
_ZN8wxObject3RefERKS_
_ZN8wxObject5UnRefEv
_ZN8wxString10ConvertStrEPKcyRK8wxMBConv
_ZN8wxString13DoFormatWcharEPKwz
_ZN8wxString13DoPrintfWcharEPKwz
_ZN8wxString4nposE
_ZN8wxString7FormatVERKS_Pc
_ZN8wxString8TruncateEy
_ZN8wxString9FromAsciiEPKc
_ZN8wxString9MakeLowerEv
_ZN8wxThread11TestDestroyEv
_ZN8wxThread12GetCurrentIdEv
_ZN8wxThread15ms_idMainThreadE
_ZN8wxThreadD2Ev
_ZN9wxPrivate18GetUntypedNullDataEv
_ZNK10wxFileName11GetFullPathE12wxPathFormat
_ZNK12wxEvtHandler15DoGetClientDataEv
_ZNK12wxEvtHandler17DoGetClientObjectEv
_ZNK13wxArrayString5IndexERK8wxStringbb
_ZNK14wxTranslations19GetTranslatedStringERK8wxStringS2_S2_
_ZNK17wxStringTokenizer13HasMoreTokensEv
_ZNK20wxArgNormalizerWcharIRK8wxStringE3getEv
_ZNK8wxMBConv14DoConvertMB2WCEPKcy
_ZNK8wxObject12CloneRefDataEPK12wxRefCounter
_ZNK8wxObject12GetClassInfoEv
_ZNK8wxObject13CreateRefDataEv
_ZNK8wxString10StartsWithERKS_PS_
_ZNK8wxString11BeforeFirstE9wxUniCharPS_
_ZNK8wxString3MidEyy
_ZNK8wxString4FindE9wxUniCharb
_ZNK8wxString6AsCharERK8wxMBConv
_ZNK8wxString6ToLongEPli
_ZNK8wxString7MatchesERKS_
_ZNK8wxString7ToULongEPmi
_ZNK8wxString7compareEPKc
_ZNK8wxString7compareEPKw
_ZNK8wxString7compareERKS_
_ZNK8wxString8EndsWithERKS_PS_
_ZNK8wxString8IsSameAsE9wxUniCharb
_ZNK8wxString9AfterLastE9wxUniChar
_ZNK8wxString9CmpNoCaseERKS_
_ZNK8wxString9ToCDoubleEPd
_ZTV12wxFileSystem
_ZTV12wxMBConvUTF8
_ZTV17wxStringTokenizer
_ZTV7wxTimer
_ZTV8wxFSFile
_ZTV8wxModule
_ZTV8wxObject
_Zpl9wxUniCharRK8wxString
_ZplRK8wxString9wxUniChar
_ZplRK8wxStringPKc
_ZplRK8wxStringPKw
_ZplRK8wxStringS1_
wxConvLibcPtr
wxEVT_NULL
wxEmptyString
wxPendingDelete

wxbase32u_xml_gcc_custom

_ZN13wxXmlDocument4LoadER13wxInputStreamRK8wxStringi
_ZN13wxXmlDocumentC1Ev
_ZN9wxXmlNode12AddAttributeERK8wxStringS2_
_ZN9wxXmlNodeC1ERKS_
_ZN9wxXmlNodeD1Ev
_ZNK13wxXmlDocument7GetRootEv
_ZNK9wxXmlNode12GetAttributeERK8wxStringPS0_
_ZNK9wxXmlNode12GetAttributeERK8wxStringS2_
_ZNK9wxXmlNode12HasAttributeERK8wxString
_ZNK9wxXmlNode14GetNodeContentEv
_ZTV13wxXmlDocument

wxmsw32u_core_gcc_custom

_Z17wxSetFocusToChildP8wxWindowPS0_
_Z19wxGetTopLevelParentP12wxWindowBase
_ZN10wxBoxSizer12ms_classInfoE
_ZN10wxCheckBox6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizelRK11wxValidatorS4_
_ZN10wxComboBox6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizeRK13wxArrayStringlRK11wxValidatorS4_
_ZN10wxFontBase12SetPointSizeEi
_ZN10wxFontBase18SetDefaultEncodingE14wxFontEncoding
_ZN10wxListCtrl10InsertItemERK10wxListItem
_ZN10wxListCtrl12ms_classInfoE
_ZN10wxListCtrl4InitEv
_ZN10wxListCtrl6CreateEP8wxWindowiRK7wxPointRK6wxSizelRK11wxValidatorRK8wxString
_ZN10wxListbook6CreateEP8wxWindowiRK7wxPointRK6wxSizelRK8wxString
_ZN10wxMenuBase4InitEl
_ZN10wxMenuBase6EnableEib
_ZN10wxMenuBaseD2Ev
_ZN10wxMenuItem11DoSetBitmapERK14wxBitmapBundleb
_ZN10wxMenuItemC1EP6wxMenuiRK8wxStringS4_10wxItemKindS1_
_ZN10wxNotebook6CreateEP8wxWindowiRK7wxPointRK6wxSizelRK8wxString
_ZN10wxNotebookC1Ev
_ZN10wxRadioBox4InitEv
_ZN10wxRadioBox6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizeRK13wxArrayStringilRK11wxValidatorS4_
_ZN10wxSpinCtrl4InitEv
_ZN10wxSpinCtrl6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizeliiiS4_
_ZN10wxTextCtrl6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizelRK11wxValidatorS4_
_ZN10wxTextCtrlC1Ev
_ZN10wxToolbook4InitEv
_ZN10wxToolbook6CreateEP8wxWindowiRK7wxPointRK6wxSizelRK8wxString
_ZN10wxTreeCtrl4InitEv
_ZN10wxTreeCtrl6CreateEP8wxWindowiRK7wxPointRK6wxSizelRK11wxValidatorRK8wxString
_ZN10wxTreebook6CreateEP8wxWindowiRK7wxPointRK6wxSizelRK8wxString
_ZN11wxAnimation4LoadER13wxInputStream15wxAnimationType
_ZN11wxAnimationC1EP15wxAnimationImpl
_ZN11wxAnimationC1Ev
_ZN11wxAnyButton11DoSetBitmapERK14wxBitmapBundleN15wxAnyButtonBase5StateE
_ZN11wxAnyButton13MSWWindowProcEjyx
_ZN11wxAnyButton16DoSetLabelMarkupERK8wxString
_ZN11wxAnyButton18DoSetBitmapMarginsEii
_ZN11wxAnyButton19DoSetBitmapPositionE11wxDirection
_ZN11wxAnyButton19SetBackgroundColourERK8wxColour
_ZN11wxAnyButton19SetForegroundColourERK8wxColour
_ZN11wxAnyButton8SetLabelERK8wxString
_ZN11wxAnyButton9MSWOnDrawEPPv
_ZN11wxAnyButtonD2Ev
_ZN11wxComboCtrl11AnimateShowERK6wxRecti
_ZN11wxComboCtrl4InitEv
_ZN11wxComboCtrl6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizelRK11wxValidatorS4_
_ZN11wxComboCtrl8OnResizeEv
_ZN11wxComboCtrlD2Ev
_ZN11wxFrameBaseC2Ev
_ZN11wxFrameBaseD2Ev
_ZN11wxGridSizerC1Eiiii
_ZN11wxIdManager9ReserveIdEi
_ZN11wxImageList3AddERK6wxIcon
_ZN11wxImageList3AddERK8wxBitmapS2_
_ZN11wxImageList6CreateEiibi
_ZN11wxPanelBase10InitDialogEv
_ZN11wxPanelBase6CreateEP8wxWindowiRK7wxPointRK6wxSizelRK8wxString
_ZN11wxScrollBar6CreateEP8wxWindowiRK7wxPointRK6wxSizelRK11wxValidatorRK8wxString
_ZN11wxSizerItem10DoSetSizerEP7wxSizer
_ZN11wxSizerItem11DoSetSpacerERK6wxSize
_ZN11wxSizerItem11DoSetWindowEP8wxWindow
_ZN11wxSizerItem4FreeEv
_ZN11wxSizerItemC1Ev
_ZN11wxStaticBox6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizelS4_
_ZN11wxStaticBox6CreateEP8wxWindowiS1_RK7wxPointRK6wxSizelRK8wxString
_ZN11wxStatusBar6CreateEP8wxWindowilRK8wxString
_ZN11wxStatusBarC1Ev
_ZN11wxTextEntry10ForceUpperEv
_ZN11wxTextEntry12SetMaxLengthEm
_ZN11wxTextEntry14DoSetSelectionElli
_ZN11wxTextEntry20DoAutoCompleteCustomEP15wxTextCompleter
_ZN11wxTextEntry20MSWProcessSpecialKeyER10wxKeyEvent
_ZN11wxTextEntry21DoAutoCompleteStringsERK13wxArrayString
_ZN11wxTextEntry23DoAutoCompleteFileNamesEi
_ZN11wxTextEntryC2Ev
_ZN11wxTextEntryD2Ev
_ZN11wxWrapSizerC1Eii
_ZN12wxColourBase10FromStringERK8wxString
_ZN12wxDialogBase11IsEscapeKeyERK10wxKeyEvent
_ZN12wxDialogBase15ShowWindowModalEv
_ZN12wxDialogBase18DoLayoutAdaptationEv
_ZN12wxDialogBase21CanDoLayoutAdaptationEv
_ZN12wxDialogBase26SendWindowModalDialogEventEi
_ZN12wxDialogBaseC2Ev
_ZN12wxFontMapper17CharsetToEncodingERK8wxStringb
_ZN12wxFontMapperC1Ev
_ZN12wxFontMapperD1Ev
_ZN12wxIconBundleC1ER13wxInputStream12wxBitmapType
_ZN12wxSpinButton6CreateEP8wxWindowiRK7wxPointRK6wxSizelRK8wxString
_ZN12wxSpinButtonD2Ev
_ZN12wxStaticLine6CreateEP8wxWindowiRK7wxPointRK6wxSizelRK8wxString
_ZN12wxStaticText6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizelS4_
_ZN12wxWindowBase10GetCaptureEv
_ZN12wxWindowBase10InitDialogEv
_ZN12wxWindowBase10SetMaxSizeERK6wxSize
_ZN12wxWindowBase10SetMinSizeERK6wxSize
_ZN12wxWindowBase11CopyToolTipEP9wxToolTip
_ZN12wxWindowBase11RemoveChildEPS_
_ZN12wxWindowBase12DoNavigateInEi
_ZN12wxWindowBase12SetValidatorERK11wxValidator
_ZN12wxWindowBase13SendSizeEventEi
_ZN12wxWindowBase14DoSetSizeHintsEiiiiii
_ZN12wxWindowBase14SendIdleEventsER11wxIdleEvent
_ZN12wxWindowBase14SetNextHandlerEP12wxEvtHandler
_ZN12wxWindowBase14UpdateWindowUIEl
_ZN12wxWindowBase15ClearBackgroundEv
_ZN12wxWindowBase16DoMoveInTabOrderEP8wxWindowNS_11WindowOrderE
_ZN12wxWindowBase16DoSetToolTipTextERK8wxString
_ZN12wxWindowBase16DoSetVirtualSizeEii
_ZN12wxWindowBase16DoUpdateWindowUIER15wxUpdateUIEvent
_ZN12wxWindowBase16SetWindowVariantE15wxWindowVariant
_ZN12wxWindowBase17InheritAttributesEv
_ZN12wxWindowBase17ToggleWindowStyleEi
_ZN12wxWindowBase17WXReservedWindow1EPv
_ZN12wxWindowBase17WXReservedWindow2EPv
_ZN12wxWindowBase17WXReservedWindow3EPv
_ZN12wxWindowBase18DoSetWindowVariantE15wxWindowVariant
_ZN12wxWindowBase18InvalidateBestSizeEv
_ZN12wxWindowBase18SetBackgroundStyleE17wxBackgroundStyle
_ZN12wxWindowBase18SetPreviousHandlerEP12wxEvtHandler
_ZN12wxWindowBase19SetBackgroundColourERK8wxColour
_ZN12wxWindowBase19SetForegroundColourERK8wxColour
_ZN12wxWindowBase20InformFirstDirectionEiii
_ZN12wxWindowBase20TransferDataToWindowEv
_ZN12wxWindowBase22TransferDataFromWindowEv
_ZN12wxWindowBase25GetClassDefaultAttributesE15wxWindowVariant
_ZN12wxWindowBase29WXSetInitialFittingClientSizeEiP7wxSizer
_ZN12wxWindowBase3FitEv
_ZN12wxWindowBase6EnableEb
_ZN12wxWindowBase6LayoutEv
_ZN12wxWindowBase7DestroyEv
_ZN12wxWindowBase7FromDIPERK6wxSizePKS_
_ZN12wxWindowBase8AddChildEPS_
_ZN12wxWindowBase8DoCentreEi
_ZN12wxWindowBase8SetSizerEP7wxSizerb
_ZN12wxWindowBase8TryAfterER7wxEvent
_ZN12wxWindowBase8ValidateEv
_ZN12wxWindowBase9FindFocusEv
_ZN12wxWindowBase9FitInsideEv
_ZN12wxWindowBase9TryBeforeER7wxEvent
_ZN12wxWindowBaseC2Ev
_ZN12wxWindowBaseD2Ev
_ZN12wxWizardPage4InitEv
_ZN12wxWizardPage6CreateEP8wxWizardRK14wxBitmapBundle
_ZN13wxArtProvider13GetIconBundleERK8wxStringS2_
_ZN13wxArtProvider15GetBitmapBundleERK8wxStringS2_RK6wxSize
_ZN13wxArtProvider9GetBitmapERK8wxStringS2_RK6wxSize
_ZN13wxControlBase12GetLabelTextERK8wxString
_ZN13wxControlBase15EscapeMnemonicsERK8wxString
_ZN13wxControlBase16DoSetLabelMarkupERK8wxString
_ZN13wxControlBase16DoUpdateWindowUIER15wxUpdateUIEvent
_ZN13wxControlBase7SetFontERK6wxFont
_ZN13wxControlBaseD2Ev
_ZN13wxGBSizerItem6SetPosERK12wxGBPosition
_ZN13wxGBSizerItem7SetSpanERK8wxGBSpan
_ZN13wxGBSizerItemC1Ev
_ZN13wxListBoxBaseD2Ev
_ZN13wxRadioButton4InitEv
_ZN13wxRadioButton6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizelRK11wxValidatorS4_
_ZN13wxToolBarBaseC2Ev
_ZN13wxToolBarBaseD2Ev
_ZN13wxWindowIDRef6AssignEi
_ZN14wxBitmapBundle11FromBitmapsERKSt6vectorI8wxBitmapSaIS1_EE
_ZN14wxBitmapBundle7FromSVGEPcRK6wxSize
_ZN14wxBitmapBundleC1ERK8wxBitmap
_ZN14wxBitmapBundleC1ERKS_
_ZN14wxBitmapBundleC1Ev
_ZN14wxBitmapBundleD1Ev
_ZN14wxBitmapBundleaSERKS_
_ZN14wxBitmapButton17CreateCloseButtonEP8wxWindowiRK8wxString
_ZN14wxBitmapButton6CreateEP8wxWindowiRK14wxBitmapBundleRK7wxPointRK6wxSizelRK11wxValidatorRK8wxString
_ZN14wxBookCtrlBase10DeletePageEy
_ZN14wxBookCtrlBase10InsertPageEyP8wxWindowRK8wxStringbi
_ZN14wxBookCtrlBase11SetPageSizeERK6wxSize
_ZN14wxBookCtrlBase12DoRemovePageEy
_ZN14wxBookCtrlBase14DoSetSelectionEyi
_ZN14wxBookCtrlBase20DoInvalidateBestSizeEv
_ZN14wxBookCtrlBase26DoSetSelectionAfterRemovalEy
_ZN14wxBookCtrlBase28DoSetSelectionAfterInsertionEyb
_ZN14wxBookCtrlBase4InitEv
_ZN14wxBookCtrlBase6CreateEP8wxWindowiRK7wxPointRK6wxSizelRK8wxString
_ZN14wxBookCtrlBase6DoSizeEv
_ZN14wxCheckListBox6CreateEP8wxWindowiRK7wxPointRK6wxSizeRK13wxArrayStringlRK11wxValidatorRK8wxString
_ZN14wxCheckListBoxC1Ev
_ZN14wxGridBagSizer3AddEP13wxGBSizerItem
_ZN14wxGridBagSizerC1Eii
_ZN14wxListCtrlBase12InsertColumnElRK10wxListItem
_ZN14wxMenuItemBase3NewEP6wxMenuiRK8wxStringS4_10wxItemKindS1_
_ZN14wxRadioBoxBase14SetItemToolTipEjRK8wxString
_ZN14wxRadioBoxBaseD2Ev
_ZN14wxScrollHelper16AdjustScrollbarsEv
_ZN14wxScrollHelper16DoShowScrollbarsE21wxScrollbarVisibilityS0_
_ZN14wxScrollHelper8DoScrollEii
_ZN14wxScrollHelperC2EP8wxWindow
_ZN14wxStaticBitmap4InitEv
_ZN14wxStaticBitmap8DoCreateEP8wxWindowiRK7wxPointRK6wxSizelRK8wxString
_ZN14wxToggleButton12ms_classInfoE
_ZN14wxToggleButton4InitEv
_ZN14wxToggleButton6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizelRK11wxValidatorS4_
_ZN14wxTreeCtrlBaseC2Ev
_ZN14wxTreeCtrlBaseD2Ev
_ZN15wxAnyButtonBase17SetBitmapPositionE11wxDirection
_ZN15wxComboCtrlBase10DoSetValueERK8wxStringi
_ZN15wxComboCtrlBase10DrawButtonER4wxDCRK6wxRecti
_ZN15wxComboCtrlBase11DoShowPopupERK6wxRecti
_ZN15wxComboCtrlBase11SetEditableEb
_ZN15wxComboCtrlBase12DoSetMarginsERK7wxPoint
_ZN15wxComboCtrlBase12DoSetToolTipEP9wxToolTip
_ZN15wxComboCtrlBase12SetSelectionEll
_ZN15wxComboCtrlBase13OnButtonClickEv
_ZN15wxComboCtrlBase13OnThemeChangeEv
_ZN15wxComboCtrlBase16PositionTextCtrlEii
_ZN15wxComboCtrlBase17DoSetPopupControlEP12wxComboPopup
_ZN15wxComboCtrlBase17SetButtonPositionEiiii
_ZN15wxComboCtrlBase17SetInsertionPointEl
_ZN15wxComboCtrlBase19SetBackgroundColourERK8wxColour
_ZN15wxComboCtrlBase19SetForegroundColourERK8wxColour
_ZN15wxComboCtrlBase3CutEv
_ZN15wxComboCtrlBase4CopyEv
_ZN15wxComboCtrlBase4InitEv
_ZN15wxComboCtrlBase4RedoEv
_ZN15wxComboCtrlBase4ShowEb
_ZN15wxComboCtrlBase4UndoEv
_ZN15wxComboCtrlBase5PasteEv
_ZN15wxComboCtrlBase5PopupEv
_ZN15wxComboCtrlBase6EnableEb
_ZN15wxComboCtrlBase6RemoveEll
_ZN15wxComboCtrlBase7ReplaceEllRK8wxString
_ZN15wxComboCtrlBase7SetFontERK6wxFont
_ZN15wxComboCtrlBase7SetHintERK8wxString
_ZN15wxComboCtrlBase9HidePopupEb
_ZN15wxComboCtrlBase9ShowPopupEv
_ZN15wxComboCtrlBase9WriteTextERK8wxString
_ZN15wxComboCtrlBaseD2Ev
_ZN15wxDirPickerCtrl6CreateEP8wxWindowiRK8wxStringS4_RK7wxPointRK6wxSizelRK11wxValidatorS4_
_ZN15wxFlexGridSizer12ms_classInfoE
_ZN15wxFlexGridSizer14AddGrowableColEyi
_ZN15wxFlexGridSizer14AddGrowableRowEyi
_ZN15wxFlexGridSizerC1Eiiii
_ZN15wxHyperlinkCtrl6CreateEP8wxWindowiRK8wxStringS4_RK7wxPointRK6wxSizelS4_
_ZN15wxItemContainer15DoInsertOneItemERK8wxStringj
_ZN15wxItemContainer5ClearEv
_ZN15wxItemContainerD2Ev
_ZN15wxStaticBoxBaseC2Ev
_ZN15wxTextEntryBase10AppendTextERK8wxString
_ZN15wxTextEntryBase11ChangeValueERK8wxString
_ZN15wxTextEntryBase20WXReservedTextEntry1EPv
_ZN15wxTextEntryBase20WXReservedTextEntry2EPv
_ZN15wxTextEntryBase20WXReservedTextEntry3EPv
_ZN16wxBitmapComboBox4InitEv
_ZN16wxBitmapComboBox6AppendERK8wxStringRK14wxBitmapBundle
_ZN16wxBitmapComboBox6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizeiPS3_lRK11wxValidatorS4_
_ZN16wxFilePickerCtrl6CreateEP8wxWindowiRK8wxStringS4_S4_RK7wxPointRK6wxSizelRK11wxValidatorS4_
_ZN16wxFontEnumerator12GetFacenamesE14wxFontEncodingb
_ZN16wxGenericDirCtrl6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizelS4_iS4_
_ZN16wxGenericDirCtrlC1Ev
_ZN16wxInfoBarGeneric4InitEv
_ZN16wxInfoBarGeneric6CreateEP8wxWindowi
_ZN16wxNonOwnedWindow12DoClearShapeEv
_ZN16wxNonOwnedWindow14DoSetPathShapeERK14wxGraphicsPath
_ZN16wxNonOwnedWindow16DoSetRegionShapeERK8wxRegion
_ZN16wxNonOwnedWindow8ReparentEP12wxWindowBase
_ZN16wxScrolledWindow12ms_classInfoE
_ZN16wxSpinCtrlDouble11DoSetDigitsEj
_ZN16wxSpinCtrlDouble6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizelddddS4_
_ZN16wxSpinCtrlDouble9SetDigitsEj
_ZN16wxSplitterWindow10InitializeEP8wxWindow
_ZN16wxSplitterWindow14SetSashGravityEd
_ZN16wxSplitterWindow18SetMinimumPaneSizeEi
_ZN16wxSplitterWindow4InitEv
_ZN16wxSplitterWindow6CreateEP8wxWindowiRK7wxPointRK6wxSizelRK8wxString
_ZN16wxSplitterWindow7DoSplitE11wxSplitModeP8wxWindowS2_i
_ZN16wxStaticBoxSizer12ms_classInfoE
_ZN16wxStaticBoxSizerC1EP11wxStaticBoxi
_ZN16wxStaticTextBase4WrapEi
_ZN17wxEditableListBox10SetStringsERK13wxArrayString
_ZN17wxEditableListBox6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizelS4_
_ZN17wxGenericFileCtrl6CreateEP8wxWindowiRK8wxStringS4_S4_lRK7wxPointRK6wxSizeS4_
_ZN18wxAcceleratorEntry10FromStringERK8wxString
_ZN18wxControlContainer12SetLastFocusEP8wxWindow
_ZN18wxControlContainer13HandleOnFocusER12wxFocusEvent
_ZN18wxControlContainer21HandleOnNavigationKeyER20wxNavigationKeyEvent
_ZN18wxControlContainer21HandleOnWindowDestroyEP12wxWindowBase
_ZN18wxControlContainerC1Ev
_ZN18wxScrollHelperBase11DoPrepareDCER4wxDC
_ZN18wxScrollHelperBase12ScrollLayoutEv
_ZN18wxScrollHelperBase13SetScrollRateEii
_ZN18wxScrollHelperBase13SetScrollbarsEiiiiiib
_ZN18wxScrollHelperBase15EnableScrollingEbb
_ZN18wxScrollHelperBase22ScrollDoSetVirtualSizeEii
_ZN18wxScrollHelperBaseD2Ev
_ZN18wxScrolledT_Helper14FilterBestSizeEPK8wxWindowPK14wxScrollHelperRK6wxSize
_ZN18wxScrolledT_Helper19FilterMSWWindowProcEjx
_ZN18wxStaticBitmapBaseD2Ev
_ZN19wxActivityIndicator6CreateEP8wxWindowiRK7wxPointRK6wxSizelRK8wxString
_ZN19wxCommandLinkButton6CreateEP8wxWindowiRK8wxStringS4_RK7wxPointRK6wxSizelRK11wxValidatorS4_
_ZN19wxTopLevelWindowMSW14SetTransparentEh
_ZN19wxTopLevelWindowMSW14ShowFullScreenEbl
_ZN19wxTopLevelWindowMSW17CanSetTransparentEv
_ZN19wxTopLevelWindowMSW17EnableCloseButtonEb
_ZN19wxTopLevelWindowMSW18SetLayoutDirectionE17wxLayoutDirection
_ZN19wxTopLevelWindowMSW20EnableMaximizeButtonEb
_ZN19wxTopLevelWindowMSW20EnableMinimizeButtonEb
_ZN19wxTopLevelWindowMSW20RequestUserAttentionEi
_ZN19wxTopLevelWindowMSW20SetContentProtectionE19wxContentProtection
_ZN19wxTopLevelWindowMSW21ShowWithoutActivatingEv
_ZN19wxTopLevelWindowMSW24MSWUpdateFontOnDPIChangeERK6wxSize
_ZN19wxTopLevelWindowMSW5RaiseEv
_ZN19wxTopLevelWindowMSW6DoThawEv
_ZN19wxTopLevelWindowMSW7DestroyEv
_ZN19wxTopLevelWindowMSW7IconizeEb
_ZN19wxTopLevelWindowMSW7RestoreEv
_ZN19wxTopLevelWindowMSW8DoFreezeEv
_ZN19wxTopLevelWindowMSW8MaximizeEb
_ZN19wxTopLevelWindowMSW8SetIconsERK12wxIconBundle
_ZN19wxTopLevelWindowMSW8SetTitleERK8wxString
_ZN19wxTopLevelWindowMSWD2Ev
_ZN20wxBitmapComboBoxBase4InitEv
_ZN20wxBitmapToggleButton12ms_classInfoE
_ZN20wxBitmapToggleButton6CreateEP8wxWindowiRK14wxBitmapBundleRK7wxPointRK6wxSizelRK11wxValidatorRK8wxString
_ZN20wxOwnerDrawnComboBox4InitEv
_ZN20wxOwnerDrawnComboBox6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizeRK13wxArrayStringlRK11wxValidatorS4_
_ZN20wxTopLevelWindowBase10SetMaxSizeERK6wxSize
_ZN20wxTopLevelWindowBase10SetMinSizeERK6wxSize
_ZN20wxTopLevelWindowBase14WXReservedTLW1EPv
_ZN20wxTopLevelWindowBase14WXReservedTLW2EPv
_ZN20wxTopLevelWindowBase14WXReservedTLW3EPv
_ZN20wxTopLevelWindowBase16DoUpdateWindowUIER15wxUpdateUIEvent
_ZN20wxTopLevelWindowBase26GetRectForTopLevelChildrenEPiS0_S0_S0_
_ZN20wxTopLevelWindowBase6LayoutEv
_ZN20wxTopLevelWindowBase8DoCentreEi
_ZN20wxXmlResourceHandler12ms_classInfoE
_ZN20wxXmlResourceHandler15AddWindowStylesEv
_ZN20wxXmlResourceHandler8AddStyleERK8wxStringi
_ZN21wxPropertySheetDialog4InitEv
_ZN21wxPropertySheetDialog6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizelS4_
_ZN21wxSpinCtrlGenericBase4InitEv
_ZN21wxSpinCtrlGenericBaseD2Ev
_ZN22wxControlContainerBase10DoSetFocusEv
_ZN22wxControlContainerBase22UpdateCanFocusChildrenEv
_ZN22wxGenericAnimationCtrl4InitEv
_ZN22wxGenericAnimationCtrl6CreateEP8wxWindowiRK11wxAnimationRK7wxPointRK6wxSizelRK8wxString
_ZN22wxGenericHyperlinkCtrl4InitEv
_ZN22wxStdDialogButtonSizer7RealizeEv
_ZN22wxStdDialogButtonSizer9AddButtonEP8wxButton
_ZN22wxStdDialogButtonSizerC1Ev
_ZN22wxSystemSettingsNative7GetFontE12wxSystemFont
_ZN22wxSystemSettingsNative9GetColourE14wxSystemColour
_ZN24wxGenericCollapsiblePane4InitEv
_ZN24wxGenericCollapsiblePane6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizelRK11wxValidatorS4_
_ZN28_WX_LIST_HELPER_wxWindowList14DeleteFunctionEP8wxWindow
_ZN30_WX_LIST_HELPER_wxMenuItemList14DeleteFunctionEP10wxMenuItem
_ZN6wxFont11SetFaceNameERK8wxString
_ZN6wxFont13SetUnderlinedEb
_ZN6wxFont16SetNumericWeightEi
_ZN6wxFont16SetStrikethroughEb
_ZN6wxFont22SetFractionalPointSizeEd
_ZN6wxFont8SetStyleE11wxFontStyle
_ZN6wxFont9SetFamilyE12wxFontFamily
_ZN6wxFontC1ERK10wxFontInfo
_ZN6wxFontD1Ev
_ZN6wxIcon14CopyFromBitmapERK8wxBitmap
_ZN6wxIconD1Ev
_ZN6wxMenu12ms_classInfoE
_ZN6wxMenu4InitEv
_ZN7wxFrame12ms_classInfoE
_ZN7wxFrame4InitEv
_ZN7wxFrame6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizelS4_
_ZN7wxGauge6CreateEP8wxWindowiiRK7wxPointRK6wxSizelRK11wxValidatorRK8wxString
_ZN7wxImage8LoadFileER13wxInputStream12wxBitmapTypei
_ZN7wxSizer12SetSizeHintsEP8wxWindow
_ZN7wxSizer12ms_classInfoE
_ZN7wxSizer3FitEP8wxWindow
_ZN7wxSizer9FitInsideEP8wxWindow
_ZN8wxBitmap15CreateFromImageERK7wxImagei
_ZN8wxBitmapD1Ev
_ZN8wxButton12ms_classInfoE
_ZN8wxButton6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizelRK11wxValidatorS4_
_ZN8wxChoice12SetSelectionEi
_ZN8wxChoice6CreateEP8wxWindowiRK7wxPointRK6wxSizeRK13wxArrayStringlRK11wxValidatorRK8wxString
_ZN8wxChoiceD2Ev
_ZN8wxColour4InitEv
_ZN8wxCursorC1Ev
_ZN8wxCursorD1Ev
_ZN8wxDialog13MSWWindowProcEjyx
_ZN8wxDialog18SetWindowStyleFlagEl
_ZN8wxDialog4InitEv
_ZN8wxDialog4ShowEb
_ZN8wxDialog6CreateEP8wxWindowiRK8wxStringRK7wxPointRK6wxSizelS4_
_ZN8wxDialog8EndModalEi
_ZN8wxDialog9ShowModalEv
_ZN8wxDialogD2Ev
_ZN8wxSlider4InitEv
_ZN8wxSlider6CreateEP8wxWindowiiiiRK7wxPointRK6wxSizelRK11wxValidatorRK8wxString
_ZN8wxWindow10MSWCommandEjt
_ZN8wxWindow11DoPopupMenuEP6wxMenuii
_ZN8wxWindow11MSWOnNotifyEixPx
_ZN8wxWindow11MSWOnScrollEittP6HWND__
_ZN8wxWindow11ScrollLinesEi
_ZN8wxWindow11ScrollPagesEi
_ZN8wxWindow11WarpPointerEii
_ZN8wxWindow12DoMoveWindowEiiii
_ZN8wxWindow12DoSetToolTipEP9wxToolTip
_ZN8wxWindow12ScrollWindowEiiPK6wxRect
_ZN8wxWindow12SetScrollPosEiib
_ZN8wxWindow12SetScrollbarEiiiib
_ZN8wxWindow12SetupColoursEv
_ZN8wxWindow12ms_classInfoE
_ZN8wxWindow13MSWOnDrawItemEiPPv
_ZN8wxWindow13MSWWindowProcEjyx
_ZN8wxWindow13SetDropTargetEP12wxDropTarget
_ZN8wxWindow13SetExtraStyleEl
_ZN8wxWindow13sm_eventTableE
_ZN8wxWindow14DoCaptureMouseEv
_ZN8wxWindow14DoReleaseMouseEv
_ZN8wxWindow14OnInternalIdleEv
_ZN8wxWindow14RegisterHotKeyEiii
_ZN8wxWindow15AssociateHandleEP6HWND__
_ZN8wxWindow15DoSetClientSizeEii
_ZN8wxWindow15DragAcceptFilesEb
_ZN8wxWindow15SetFocusFromKbdEv
_ZN8wxWindow16DissociateHandleEv
_ZN8wxWindow16HandleMenuSelectEttP7HMENU__
_ZN8wxWindow16LoadNativeDialogEPS_RK8wxString
_ZN8wxWindow16LoadNativeDialogEPS_i
_ZN8wxWindow16MSWDefWindowProcEjyx
_ZN8wxWindow16MSWDestroyWindowEv
_ZN8wxWindow16MSWHandleMessageEPxjyx
_ZN8wxWindow16MSWOnMeasureItemEiPPv
_ZN8wxWindow16UnregisterHotKeyEi
_ZN8wxWindow17EnableTouchEventsEi
_ZN8wxWindow17MSWProcessMessageEP6tagMSG
_ZN8wxWindow17MSWShowWithEffectEb12wxShowEffectj
_ZN8wxWindow17SetDoubleBufferedEb
_ZN8wxWindow18SetLayoutDirectionE17wxLayoutDirection
_ZN8wxWindow18SetWindowStyleFlagEl
_ZN8wxWindow19HandleSettingChangeEyx
_ZN8wxWindow19MSWTranslateMessageEP6tagMSG
_ZN8wxWindow20CreateWindowFromHWNDEPS_P6HWND__
_ZN8wxWindow20MSWFindMenuFromHMENUEP7HMENU__
_ZN8wxWindow21MSWGetBgBrushForChildEP5HDC__PS_
_ZN8wxWindow23AdoptAttributesFromHWNDEv
_ZN8wxWindow24DoSendMenuOpenCloseEventEiP6wxMenu
_ZN8wxWindow24EndRepositioningChildrenEv
_ZN8wxWindow24MSWUpdateFontOnDPIChangeERK6wxSize
_ZN8wxWindow26BeginRepositioningChildrenEv
_ZN8wxWindow26MSWShouldPreProcessMessageEP6tagMSG
_ZN8wxWindow4InitEv
_ZN8wxWindow4ShowEb
_ZN8wxWindow5LowerEv
_ZN8wxWindow5RaiseEv
_ZN8wxWindow5SetIdEi
_ZN8wxWindow6DoThawEv
_ZN8wxWindow6UpdateEv
_ZN8wxWindow7RefreshEbPK6wxRect
_ZN8wxWindow7SetFontERK6wxFont
_ZN8wxWindow8DoEnableEb
_ZN8wxWindow8DoFreezeEv
_ZN8wxWindow8ReparentEP12wxWindowBase
_ZN8wxWindow8SetFocusEv
_ZN8wxWindow8SetLabelERK8wxString
_ZN8wxWindow9DoSetSizeEiiiii
_ZN8wxWindow9SetCursorERK8wxCursor
_ZN8wxWindowD2Ev
_ZN8wxWizard4InitEv
_ZN8wxWizard6CreateEP8wxWindowiRK8wxStringRK14wxBitmapBundleRK7wxPointl
_ZN9wxControl11MSWOnNotifyEixPx
_ZN9wxControl12ms_classInfoE
_ZN9wxControl14ProcessCommandER14wxCommandEvent
_ZN9wxControl15MSWControlColorEP5HDC__P6HWND__
_ZN9wxControl17DoMSWControlColorEP5HDC__8wxColourP6HWND__
_ZN9wxControl25GetClassDefaultAttributesE15wxWindowVariant
_ZN9wxListBox4InitEv
_ZN9wxListBox6CreateEP8wxWindowiRK7wxPointRK6wxSizeRK13wxArrayStringlRK11wxValidatorRK8wxString
_ZN9wxMenuBar12ms_classInfoE
_ZN9wxMenuBarC1El
_ZN9wxToolBar4InitEv
_ZN9wxToolBar6CreateEP8wxWindowiRK7wxPointRK6wxSizelRK8wxString
_ZNK10wxFontBase12GetPointSizeEv
_ZNK11wxAnimation4IsOkEv
_ZNK11wxAnyButton11DoGetBitmapEN15wxAnyButtonBase5StateE
_ZNK11wxAnyButton11MSWIsPushedEv
_ZNK11wxAnyButton13DoGetBestSizeEv
_ZNK11wxAnyButton18DoGetBitmapMarginsEv
_ZNK11wxComboCtrl12GetClassInfoEv
_ZNK11wxComboCtrl13GetEventTableEv
_ZNK11wxComboCtrl16IsKeyPopupToggleERK10wxKeyEvent
_ZNK11wxComboCtrl17GetEventHashTableEv
_ZNK11wxComboCtrl17PrepareBackgroundER4wxDCRK6wxRecti
_ZNK11wxComboCtrl19GetNativeTextIndentEv
_ZNK11wxGridSizer12CalcRowsColsERiS0_
_ZNK12wxDialogBase11GetModalityEv
_ZNK12wxDialogBase13GetEventTableEv
_ZNK12wxDialogBase17GetEventHashTableEv
_ZNK12wxWindowBase10FindWindowERK8wxString
_ZNK12wxWindowBase10IsTopLevelEv
_ZNK12wxWindowBase11DoIsExposedEii
_ZNK12wxWindowBase11DoIsExposedEiiii
_ZNK12wxWindowBase11GetBestSizeEv
_ZNK12wxWindowBase12IsDescendantEPS_

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_strdup
_unlock
_wtoi
abort
calloc
fgetwc
free
fwrite
iswctype
localeconv
malloc
memcpy
memmove
memset
realloc
strcmp
strlen
strncmp
strtol
towlower
ungetwc
vfprintf
wcslen
wcstol
wcstoul

libgcc_s_seh-1

_Unwind_Resume

libstdc++-6

_ZNKSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE4findEPKwyy
_ZNKSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE4findEwy
_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE10_M_replaceEyyPKwy
_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE14_M_replace_auxEyyyw
_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE4swapERS4_
_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE8_M_eraseEyy
_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE9_M_appendEPKwy
_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE9_M_assignERKS4_
_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE9_M_createERyy
_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE9_M_mutateEyyPKwy
_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEEC1ERKS4_
_ZNSt8ios_base4InitC1Ev
_ZNSt8ios_base4InitD1Ev
_ZSt19__throw_logic_errorPKc
_ZSt20__throw_length_errorPKc
_ZSt24__throw_out_of_range_fmtPKcz
_ZSt28__throw_bad_array_new_lengthv
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZdaPv
_ZdlPvy
_Znay
_Znwy
__cxa_begin_catch
__cxa_end_catch
__cxa_rethrow
__cxa_throw_bad_array_new_length
__gxx_personality_seh0

Exports

Exports

_Z23wxXmlInitResourceModulev
_ZN13wxXmlResource10AddHandlerEP20wxXmlResourceHandler
_ZN13wxXmlResource10DoGetXRCIDEPKci
_ZN13wxXmlResource10DoLoadFileERK8wxString
_ZN13wxXmlResource10LoadBitmapERK8wxString
_ZN13wxXmlResource10LoadDialogEP8wxDialogP8wxWindowRK8wxString
_ZN13wxXmlResource10LoadDialogEP8wxWindowRK8wxString
_ZN13wxXmlResource11LoadMenuBarEP8wxWindowRK8wxString
_ZN13wxXmlResource11LoadToolBarEP8wxWindowRK8wxString
_ZN13wxXmlResource11ReportErrorEPK9wxXmlNodeRK8wxString
_ZN13wxXmlResource11ms_instanceE
_ZN13wxXmlResource12DoLoadObjectEP8wxObjectP8wxWindowRK8wxStringS6_b
_ZN13wxXmlResource12DoLoadObjectEP8wxWindowRK8wxStringS4_b
_ZN13wxXmlResource12FindResourceERK8wxStringS2_b
_ZN13wxXmlResource12LoadAllFilesERK8wxString
_ZN13wxXmlResource12LoadDocumentEP13wxXmlDocumentRK8wxString
_ZN13wxXmlResource13ClearHandlersEv
_ZN13wxXmlResource13DoReportErrorERK8wxStringPK9wxXmlNodeS2_
_ZN13wxXmlResource13FindXRCIDByIdEi
_ZN13wxXmlResource13InsertHandlerEP20wxXmlResourceHandler
_ZN13wxXmlResource14DoLoadDocumentERK13wxXmlDocument
_ZN13wxXmlResource15InitAllHandlersEv
_ZN13wxXmlResource15UpdateResourcesEv
_ZN13wxXmlResource18AddSubclassFactoryEP20wxXmlSubclassFactory
_ZN13wxXmlResource19DoCreateResFromNodeER9wxXmlNodeP8wxObjectS3_P20wxXmlResourceHandler
_ZN13wxXmlResource20AttachUnknownControlERK8wxStringP8wxWindowS4_
_ZN13wxXmlResource20ConvertFileNameToURLERK8wxString
_ZN13wxXmlResource20ms_subclassFactoriesE
_ZN13wxXmlResource3GetEv
_ZN13wxXmlResource3SetEPS_
_ZN13wxXmlResource4LoadERK8wxString
_ZN13wxXmlResource6UnloadERK8wxString
_ZN13wxXmlResource8LoadFileERK10wxFileName
_ZN13wxXmlResource8LoadIconERK8wxString
_ZN13wxXmlResource8LoadMenuERK8wxString
_ZN13wxXmlResource9IsArchiveERK8wxString
_ZN13wxXmlResource9LoadFrameEP7wxFrameP8wxWindowRK8wxString
_ZN13wxXmlResource9LoadFrameEP8wxWindowRK8wxString
_ZN13wxXmlResource9LoadPanelEP7wxPanelP8wxWindowRK8wxString
_ZN13wxXmlResource9LoadPanelEP8wxWindowRK8wxString
_ZN13wxXmlResource9SetDomainERK8wxString
_ZN13wxXmlResourceC1ERK8wxStringiS2_
_ZN13wxXmlResourceC1EiRK8wxString
_ZN13wxXmlResourceC2ERK8wxStringiS2_
_ZN13wxXmlResourceC2EiRK8wxString
_ZN13wxXmlResourceD0Ev
_ZN13wxXmlResourceD1Ev
_ZN13wxXmlResourceD2Ev
_ZN16wxIconXmlHandler12ms_classInfoE
_ZN16wxIconXmlHandler14wxCreateObjectEv
_ZN16wxIconXmlHandler16DoCreateResourceEv
_ZN16wxIconXmlHandler9CanHandleEP9wxXmlNode
_ZN16wxIconXmlHandlerC1Ev
_ZN16wxIconXmlHandlerC2Ev
_ZN16wxMenuXmlHandler12ms_classInfoE
_ZN16wxMenuXmlHandler14wxCreateObjectEv
_ZN16wxMenuXmlHandler16DoCreateResourceEv
_ZN16wxMenuXmlHandler9CanHandleEP9wxXmlNode
_ZN16wxMenuXmlHandlerC1Ev
_ZN16wxMenuXmlHandlerC2Ev
_ZN17wxFrameXmlHandler12ms_classInfoE
_ZN17wxFrameXmlHandler14wxCreateObjectEv
_ZN17wxFrameXmlHandler16DoCreateResourceEv
_ZN17wxFrameXmlHandler9CanHandleEP9wxXmlNode
_ZN17wxFrameXmlHandlerC1Ev
_ZN17wxFrameXmlHandlerC2Ev
_ZN17wxGaugeXmlHandler12ms_classInfoE
_ZN17wxGaugeXmlHandler14wxCreateObjectEv
_ZN17wxGaugeXmlHandler16DoCreateResourceEv
_ZN17wxGaugeXmlHandler9CanHandleEP9wxXmlNode
_ZN17wxGaugeXmlHandlerC1Ev
_ZN17wxGaugeXmlHandlerC2Ev
_ZN17wxPanelXmlHandler12ms_classInfoE
_ZN17wxPanelXmlHandler14wxCreateObjectEv
_ZN17wxPanelXmlHandler16DoCreateResourceEv
_ZN17wxPanelXmlHandler9CanHandleEP9wxXmlNode
_ZN17wxPanelXmlHandlerC1Ev
_ZN17wxPanelXmlHandlerC2Ev
_ZN17wxSizerXmlHandler12AddSizerItemEP11wxSizerItem
_ZN17wxSizerXmlHandler12Handle_sizerEv
_ZN17wxSizerXmlHandler12SetGrowablesEP15wxFlexGridSizerPKwb
_ZN17wxSizerXmlHandler12ms_classInfoE
_ZN17wxSizerXmlHandler13DoCreateSizerERK8wxString
_ZN17wxSizerXmlHandler13GetSizerFlagsEv
_ZN17wxSizerXmlHandler13Handle_spacerEv
_ZN17wxSizerXmlHandler13MakeSizerItemEv
_ZN17wxSizerXmlHandler14wxCreateObjectEv
_ZN17wxSizerXmlHandler15SetFlexibleModeEP15wxFlexGridSizer
_ZN17wxSizerXmlHandler16DoCreateResourceEv
_ZN17wxSizerXmlHandler16Handle_sizeritemEv
_ZN17wxSizerXmlHandler17Handle_wxBoxSizerEv
_ZN17wxSizerXmlHandler18Handle_wxGridSizerEv
_ZN17wxSizerXmlHandler18Handle_wxWrapSizerEv
_ZN17wxSizerXmlHandler21Handle_wxGridBagSizerEv
_ZN17wxSizerXmlHandler22Handle_wxFlexGridSizerEv
_ZN17wxSizerXmlHandler22SetSizerItemAttributesEP11wxSizerItem
_ZN17wxSizerXmlHandler23Handle_wxStaticBoxSizerEv
_ZN17wxSizerXmlHandler25ValidateGridSizerChildrenEv
_ZN17wxSizerXmlHandler8GetGBPosEv
_ZN17wxSizerXmlHandler9CanHandleEP9wxXmlNode
_ZN17wxSizerXmlHandler9GetGBSpanEv
_ZN17wxSizerXmlHandlerC1Ev
_ZN17wxSizerXmlHandlerC2Ev
_ZN18wxBitmapXmlHandler12ms_classInfoE
_ZN18wxBitmapXmlHandler14wxCreateObjectEv
_ZN18wxBitmapXmlHandler16DoCreateResourceEv
_ZN18wxBitmapXmlHandler9CanHandleEP9wxXmlNode
_ZN18wxBitmapXmlHandlerC1Ev
_ZN18wxBitmapXmlHandlerC2Ev
_ZN18wxButtonXmlHandler12ms_classInfoE
_ZN18wxButtonXmlHandler14wxCreateObjectEv
_ZN18wxButtonXmlHandler16DoCreateResourceEv
_ZN18wxButtonXmlHandler9CanHandleEP9wxXmlNode
_ZN18wxButtonXmlHandlerC1Ev
_ZN18wxButtonXmlHandlerC2Ev
_ZN18wxChoiceXmlHandler12ms_classInfoE
_ZN18wxChoiceXmlHandler14wxCreateObjectEv
_ZN18wxChoiceXmlHandler16DoCreateResourceEv
_ZN18wxChoiceXmlHandler9CanHandleEP9wxXmlNode
_ZN18wxChoiceXmlHandlerC1Ev
_ZN18wxChoiceXmlHandlerC2Ev
_ZN18wxDialogXmlHandler12ms_classInfoE
_ZN18wxDialogXmlHandler14wxCreateObjectEv
_ZN18wxDialogXmlHandler16DoCreateResourceEv
_ZN18wxDialogXmlHandler9CanHandleEP9wxXmlNode
_ZN18wxDialogXmlHandlerC1Ev
_ZN18wxDialogXmlHandlerC2Ev
_ZN18wxSliderXmlHandler12ms_classInfoE
_ZN18wxSliderXmlHandler14wxCreateObjectEv
_ZN18wxSliderXmlHandler16DoCreateResourceEv
_ZN18wxSliderXmlHandler9CanHandleEP9wxXmlNode
_ZN18wxSliderXmlHandlerC1Ev
_ZN18wxSliderXmlHandlerC2Ev
_ZN18wxWizardXmlHandler12ms_classInfoE
_ZN18wxWizardXmlHandler14wxCreateObjectEv
_ZN18wxWizardXmlHandler16DoCreateResourceEv
_ZN18wxWizardXmlHandler9CanHandleEP9wxXmlNode
_ZN18wxWizardXmlHandlerC1Ev
_ZN18wxWizardXmlHandlerC2Ev
_ZN19wxInfoBarXmlHandler12ms_classInfoE
_ZN19wxInfoBarXmlHandler13GetShowEffectERK8wxString
_ZN19wxInfoBarXmlHandler14wxCreateObjectEv
_ZN19wxInfoBarXmlHandler16DoCreateResourceEv
_ZN19wxInfoBarXmlHandler9CanHandleEP9wxXmlNode
_ZN19wxInfoBarXmlHandlerC1Ev
_ZN19wxInfoBarXmlHandlerC2Ev
_ZN19wxListBoxXmlHandler12ms_classInfoE
_ZN19wxListBoxXmlHandler14wxCreateObjectEv
_ZN19wxListBoxXmlHandler16DoCreateResourceEv
_ZN19wxListBoxXmlHandler9CanHandleEP9wxXmlNode
_ZN19wxListBoxXmlHandlerC1Ev
_ZN19wxListBoxXmlHandlerC2Ev
_ZN19wxMenuBarXmlHandler12ms_classInfoE
_ZN19wxMenuBarXmlHandler14wxCreateObjectEv
_ZN19wxMenuBarXmlHandler16DoCreateResourceEv
_ZN19wxMenuBarXmlHandler9CanHandleEP9wxXmlNode
_ZN19wxMenuBarXmlHandlerC1Ev
_ZN19wxMenuBarXmlHandlerC2Ev
_ZN19wxToolBarXmlHandler12ms_classInfoE
_ZN19wxToolBarXmlHandler14wxCreateObjectEv
_ZN19wxToolBarXmlHandler16DoCreateResourceEv
_ZN19wxToolBarXmlHandler9CanHandleEP9wxXmlNode
_ZN19wxToolBarXmlHandlerC1Ev
_ZN19wxToolBarXmlHandlerC2Ev
_ZN20wxCheckBoxXmlHandler12ms_classInfoE
_ZN20wxCheckBoxXmlHandler14wxCreateObjectEv
_ZN20wxCheckBoxXmlHandler16DoCreateResourceEv
_ZN20wxCheckBoxXmlHandler9CanHandleEP9wxXmlNode
_ZN20wxCheckBoxXmlHandlerC1Ev
_ZN20wxCheckBoxXmlHandlerC2Ev
_ZN20wxComboBoxXmlHandler12ms_classInfoE
_ZN20wxComboBoxXmlHandler14wxCreateObjectEv
_ZN20wxComboBoxXmlHandler16DoCreateResourceEv
_ZN20wxComboBoxXmlHandler9CanHandleEP9wxXmlNode
_ZN20wxComboBoxXmlHandlerC1Ev
_ZN20wxComboBoxXmlHandlerC2Ev
_ZN20wxFileCtrlXmlHandler12ms_classInfoE
_ZN20wxFileCtrlXmlHandler14wxCreateObjectEv
_ZN20wxFileCtrlXmlHandler16DoCreateResourceEv
_ZN20wxFileCtrlXmlHandler9CanHandleEP9wxXmlNode
_ZN20wxFileCtrlXmlHandlerC1Ev
_ZN20wxFileCtrlXmlHandlerC2Ev
_ZN20wxListCtrlXmlHandler12ms_classInfoE
_ZN20wxListCtrlXmlHandler13GetImageIndexEP10wxListCtrli
_ZN20wxListCtrlXmlHandler13HandleListColEv
_ZN20wxListCtrlXmlHandler14HandleListCtrlEv
_ZN20wxListCtrlXmlHandler14HandleListItemEv
_ZN20wxListCtrlXmlHandler14wxCreateObjectEv
_ZN20wxListCtrlXmlHandler16DoCreateResourceEv
_ZN20wxListCtrlXmlHandler21HandleCommonItemAttrsER10wxListItem
_ZN20wxListCtrlXmlHandler9CanHandleEP9wxXmlNode
_ZN20wxListCtrlXmlHandlerC1Ev
_ZN20wxListCtrlXmlHandlerC2Ev
_ZN20wxListbookXmlHandler12ms_classInfoE
_ZN20wxListbookXmlHandler14wxCreateObjectEv
_ZN20wxListbookXmlHandler16DoCreateResourceEv
_ZN20wxListbookXmlHandler9CanHandleEP9wxXmlNode
_ZN20wxListbookXmlHandlerC1Ev
_ZN20wxListbookXmlHandlerC2Ev
_ZN20wxNotebookXmlHandler12ms_classInfoE
_ZN20wxNotebookXmlHandler14wxCreateObjectEv
_ZN20wxNotebookXmlHandler16DoCreateResourceEv
_ZN20wxNotebookXmlHandler9CanHandleEP9wxXmlNode
_ZN20wxNotebookXmlHandlerC1Ev
_ZN20wxNotebookXmlHandlerC2Ev
_ZN20wxRadioBoxXmlHandler12ms_classInfoE
_ZN20wxRadioBoxXmlHandler14wxCreateObjectEv
_ZN20wxRadioBoxXmlHandler16DoCreateResourceEv
_ZN20wxRadioBoxXmlHandler9CanHandleEP9wxXmlNode
_ZN20wxRadioBoxXmlHandlerC1Ev
_ZN20wxRadioBoxXmlHandlerC2Ev
_ZN20wxSpinCtrlXmlHandler12ms_classInfoE
_ZN20wxSpinCtrlXmlHandler14wxCreateObjectEv
_ZN20wxSpinCtrlXmlHandler16DoCreateResourceEv
_ZN20wxSpinCtrlXmlHandler9CanHandleEP9wxXmlNode
_ZN20wxSpinCtrlXmlHandlerC1Ev
_ZN20wxSpinCtrlXmlHandlerC2Ev
_ZN20wxTextCtrlXmlHandler12ms_classInfoE
_ZN20wxTextCtrlXmlHandler14wxCreateObjectEv
_ZN20wxTextCtrlXmlHandler16DoCreateResourceEv
_ZN20wxTextCtrlXmlHandler9CanHandleEP9wxXmlNode
_ZN20wxTextCtrlXmlHandlerC1Ev
_ZN20wxTextCtrlXmlHandlerC2Ev
_ZN20wxToolbookXmlHandler12ms_classInfoE
_ZN20wxToolbookXmlHandler14wxCreateObjectEv
_ZN20wxToolbookXmlHandler16DoCreateResourceEv
_ZN20wxToolbookXmlHandler9CanHandleEP9wxXmlNode
_ZN20wxToolbookXmlHandlerC1Ev
_ZN20wxToolbookXmlHandlerC2Ev
_ZN20wxTreeCtrlXmlHandler12ms_classInfoE
_ZN20wxTreeCtrlXmlHandler14wxCreateObjectEv
_ZN20wxTreeCtrlXmlHandler16DoCreateResourceEv
_ZN20wxTreeCtrlXmlHandler9CanHandleEP9wxXmlNode
_ZN20wxTreeCtrlXmlHandlerC1Ev
_ZN20wxTreeCtrlXmlHandlerC2Ev
_ZN20wxTreebookXmlHandler12ms_classInfoE
_ZN20wxTreebookXmlHandler14wxCreateObjectEv
_ZN20wxTreebookXmlHandler16DoCreateResourceEv
_ZN20wxTreebookXmlHandler9CanHandleEP9wxXmlNode
_ZN20wxTreebookXmlHandler9DoAddPageEP14wxBookCtrlBaseyRKN24wxBookCtrlXmlHandlerBase13PageWithAttrsE
_ZN20wxTreebookXmlHandlerC1Ev
_ZN20wxTreebookXmlHandlerC2Ev
_ZN21wxComboCtrlXmlHandler12ms_classInfoE
_ZN21wxComboCtrlXmlHandler14wxCreateObjectEv
_ZN21wxComboCtrlXmlHandler16DoCreateResourceEv
_ZN21wxComboCtrlXmlHandler9CanHandleEP9wxXmlNode
_ZN21wxComboCtrlXmlHandlerC1Ev
_ZN21wxComboCtrlXmlHandlerC2Ev
_ZN21wxScrollBarXmlHandler12ms_classInfoE
_ZN21wxScrollBarXmlHandler14wxCreateObjectEv
_ZN21wxScrollBarXmlHandler16DoCreateResourceEv
_ZN21wxScrollBarXmlHandler9CanHandleEP9wxXmlNode
_ZN21wxScrollBarXmlHandlerC1Ev
_ZN21wxScrollBarXmlHandlerC2Ev
_ZN21wxStaticBoxXmlHandler12ms_classInfoE
_ZN21wxStaticBoxXmlHandler14wxCreateObjectEv
_ZN21wxStaticBoxXmlHandler16DoCreateResourceEv
_ZN21wxStaticBoxXmlHandler9CanHandleEP9wxXmlNode
_ZN21wxStaticBoxXmlHandlerC1Ev
_ZN21wxStaticBoxXmlHandlerC2Ev
_ZN21wxStatusBarXmlHandler12ms_classInfoE
_ZN21wxStatusBarXmlHandler14wxCreateObjectEv
_ZN21wxStatusBarXmlHandler16DoCreateResourceEv
_ZN21wxStatusBarXmlHandler9CanHandleEP9wxXmlNode
_ZN21wxStatusBarXmlHandlerC1Ev
_ZN21wxStatusBarXmlHandlerC2Ev
_ZN22wxSimplebookXmlHandler12ms_classInfoE
_ZN22wxSimplebookXmlHandler14wxCreateObjectEv
_ZN22wxSimplebookXmlHandler16DoCreateResourceEv
_ZN22wxSimplebookXmlHandler9CanHandleEP9wxXmlNode
_ZN22wxSimplebookXmlHandlerC1Ev
_ZN22wxSimplebookXmlHandlerC2Ev
_ZN22wxSpinButtonXmlHandler12ms_classInfoE
_ZN22wxSpinButtonXmlHandler14wxCreateObjectEv
_ZN22wxSpinButtonXmlHandler16DoCreateResourceEv
_ZN22wxSpinButtonXmlHandler9CanHandleEP9wxXmlNode
_ZN22wxSpinButtonXmlHandlerC1Ev
_ZN22wxSpinButtonXmlHandlerC2Ev
_ZN22wxStaticLineXmlHandler12ms_classInfoE
_ZN22wxStaticLineXmlHandler14wxCreateObjectEv
_ZN22wxStaticLineXmlHandler16DoCreateResourceEv
_ZN22wxStaticLineXmlHandler9CanHandleEP9wxXmlNode
_ZN22wxStaticLineXmlHandlerC1Ev
_ZN22wxStaticLineXmlHandlerC2Ev
_ZN22wxStaticTextXmlHandler12ms_classInfoE
_ZN22wxStaticTextXmlHandler14wxCreateObjectEv
_ZN22wxStaticTextXmlHandler16DoCreateResourceEv
_ZN22wxStaticTextXmlHandler9CanHandleEP9wxXmlNode
_ZN22wxStaticTextXmlHandlerC1Ev
_ZN22wxStaticTextXmlHandlerC2Ev
_ZN23wxRadioButtonXmlHandler12ms_classInfoE
_ZN23wxRadioButtonXmlHandler14wxCreateObjectEv
_ZN23wxRadioButtonXmlHandler16DoCreateResourceEv
_ZN23wxRadioButtonXmlHandler9CanHandleEP9wxXmlNode
_ZN23wxRadioButtonXmlHandlerC1Ev
_ZN23wxRadioButtonXmlHandlerC2Ev
_ZN24wxBitmapButtonXmlHandler12ms_classInfoE
_ZN24wxBitmapButtonXmlHandler14wxCreateObjectEv
_ZN24wxBitmapButtonXmlHandler16DoCreateResourceEv
_ZN24wxBitmapButtonXmlHandler20SetBitmapIfSpecifiedEP14wxBitmapButtonMS0_FvRK14wxBitmapBundleEPKcS8_
_ZN24wxBitmapButtonXmlHandler9CanHandleEP9wxXmlNode
_ZN24wxBitmapButtonXmlHandlerC1Ev
_ZN24wxBitmapButtonXmlHandlerC2Ev
_ZN24wxBookCtrlXmlHandlerBase12DoCreatePageEP14wxBookCtrlBase
_ZN24wxBookCtrlXmlHandlerBase13DoCreatePagesEP14wxBookCtrlBase
_ZN24wxBookCtrlXmlHandlerBase9DoAddPageEP14wxBookCtrlBaseyRKNS_13PageWithAttrsE
_ZN24wxBookCtrlXmlHandlerBaseC1Ev
_ZN24wxBookCtrlXmlHandlerBaseC2Ev
_ZN24wxBookCtrlXmlHandlerBaseD0Ev
_ZN24wxBookCtrlXmlHandlerBaseD1Ev
_ZN24wxBookCtrlXmlHandlerBaseD2Ev
_ZN24wxCheckListBoxXmlHandler12ms_classInfoE
_ZN24wxCheckListBoxXmlHandler14wxCreateObjectEv
_ZN24wxCheckListBoxXmlHandler16DoCreateResourceEv
_ZN24wxCheckListBoxXmlHandler9CanHandleEP9wxXmlNode
_ZN24wxCheckListBoxXmlHandlerC1Ev
_ZN24wxCheckListBoxXmlHandlerC2Ev
_ZN24wxStaticBitmapXmlHandler12ms_classInfoE
_ZN24wxStaticBitmapXmlHandler14wxCreateObjectEv
_ZN24wxStaticBitmapXmlHandler16DoCreateResourceEv
_ZN24wxStaticBitmapXmlHandler9CanHandleEP9wxXmlNode
_ZN24wxStaticBitmapXmlHandlerC1Ev
_ZN24wxStaticBitmapXmlHandlerC2Ev
_ZN24wxToggleButtonXmlHandler12ms_classInfoE
_ZN24wxToggleButtonXmlHandler14wxCreateObjectEv
_ZN24wxToggleButtonXmlHandler16DoCreateResourceEv
_ZN24wxToggleButtonXmlHandler20DoCreateToggleButtonEP8wxObject
_ZN24wxToggleButtonXmlHandler26DoCreateBitmapToggleButtonEP8wxObject
_ZN24wxToggleButtonXmlHandler9CanHandleEP9wxXmlNode
_ZN24wxToggleButtonXmlHandlerC1Ev
_ZN24wxToggleButtonXmlHandlerC2Ev
_ZN24wxXmlResourceHandlerImpl11GetBoolAttrERK8wxStringb
_ZN24wxXmlResourceHandlerImpl11GetFilePathEPK9wxXmlNode
_ZN24wxXmlResourceHandlerImpl11GetNodeTextEPK9wxXmlNodei
_ZN24wxXmlResourceHandlerImpl11GetPairIntsERK8wxString
_ZN24wxXmlResourceHandlerImpl11GetPositionERK8wxString
_ZN24wxXmlResourceHandlerImpl11ReportErrorEP9wxXmlNodeRK8wxString
_ZN24wxXmlResourceHandlerImpl11ReportErrorERK8wxString
_ZN24wxXmlResourceHandlerImpl11SetupWindowEP8wxWindow
_ZN24wxXmlResourceHandlerImpl12GetAnimationERK8wxStringP19wxAnimationCtrlBase
_ZN24wxXmlResourceHandlerImpl12GetDimensionERK8wxStringiP8wxWindow
_ZN24wxXmlResourceHandlerImpl12GetDirectionERK8wxString11wxDirection
_ZN24wxXmlResourceHandlerImpl12GetImageListERK8wxString
_ZN24wxXmlResourceHandlerImpl12GetParamNodeERK8wxString
_ZN24wxXmlResourceHandlerImpl13GetIconBundleERK8wxStringS2_
_ZN24wxXmlResourceHandlerImpl13GetParamValueEPK9wxXmlNode
_ZN24wxXmlResourceHandlerImpl13GetParamValueERK8wxString
_ZN24wxXmlResourceHandlerImpl14CreateChildrenEP8wxObjectb
_ZN24wxXmlResourceHandlerImpl14CreateResourceEP9wxXmlNodeP8wxObjectS3_
_ZN24wxXmlResourceHandlerImpl14GetNodeContentEPK9wxXmlNode
_ZN24wxXmlResourceHandlerImpl15GetBitmapBundleEPK9wxXmlNodeRK8wxString6wxSize
_ZN24wxXmlResourceHandlerImpl15GetBitmapBundleERK8wxStringS2_6wxSize
_ZN24wxXmlResourceHandlerImpl16GetCurFileSystemEv
_ZN24wxXmlResourceHandlerImpl16ReportParamErrorERK8wxStringS2_
_ZN24wxXmlResourceHandlerImpl17CreateResFromNodeEP9wxXmlNodeP8wxObjectS3_
_ZN24wxXmlResourceHandlerImpl23CreateChildrenPrivatelyEP8wxObjectP9wxXmlNode
_ZN24wxXmlResourceHandlerImpl5GetIDEv
_ZN24wxXmlResourceHandlerImpl7GetBoolERK8wxStringb
_ZN24wxXmlResourceHandlerImpl7GetFontERK8wxStringP8wxWindow
_ZN24wxXmlResourceHandlerImpl7GetIconEPK9wxXmlNodeRK8wxString6wxSize
_ZN24wxXmlResourceHandlerImpl7GetIconERK8wxStringS2_6wxSize
_ZN24wxXmlResourceHandlerImpl7GetLongERK8wxStringl
_ZN24wxXmlResourceHandlerImpl7GetNameEv
_ZN24wxXmlResourceHandlerImpl7GetSizeERK8wxStringP8wxWindow
_ZN24wxXmlResourceHandlerImpl8GetFloatERK8wxStringf
_ZN24wxXmlResourceHandlerImpl8GetStyleERK8wxStringi
_ZN24wxXmlResourceHandlerImpl8HasParamERK8wxString
_ZN24wxXmlResourceHandlerImpl9GetBitmapEPK9wxXmlNodeRK8wxString6wxSize
_ZN24wxXmlResourceHandlerImpl9GetBitmapERK8wxStringS2_6wxSize
_ZN24wxXmlResourceHandlerImpl9GetColourERK8wxStringRK8wxColour
_ZN24wxXmlResourceHandlerImplC1EP20wxXmlResourceHandler
_ZN24wxXmlResourceHandlerImplC2EP20wxXmlResourceHandler
_ZN25wxAnimationCtrlXmlHandler12ms_classInfoE
_ZN25wxAnimationCtrlXmlHandler14wxCreateObjectEv
_ZN25wxAnimationCtrlXmlHandler16DoCreateResourceEv
_ZN25wxAnimationCtrlXmlHandler9CanHandleEP9wxXmlNode
_ZN25wxAnimationCtrlXmlHandlerC1Ev
_ZN25wxAnimationCtrlXmlHandlerC2Ev
_ZN25wxDirPickerCtrlXmlHandler12ms_classInfoE
_ZN25wxDirPickerCtrlXmlHandler14wxCreateObjectEv
_ZN25wxDirPickerCtrlXmlHandler16DoCreateResourceEv
_ZN25wxDirPickerCtrlXmlHandler9CanHandleEP9wxXmlNode
_ZN25wxDirPickerCtrlXmlHandlerC1Ev
_ZN25wxDirPickerCtrlXmlHandlerC2Ev
_ZN25wxHyperlinkCtrlXmlHandler12ms_classInfoE
_ZN25wxHyperlinkCtrlXmlHandler14wxCreateObjectEv
_ZN25wxHyperlinkCtrlXmlHandler16DoCreateResourceEv
_ZN25wxHyperlinkCtrlXmlHandler9CanHandleEP9wxXmlNode
_ZN25wxHyperlinkCtrlXmlHandlerC1Ev
_ZN25wxHyperlinkCtrlXmlHandlerC2Ev
_ZN25wxUnknownWidgetXmlHandler12ms_classInfoE
_ZN25wxUnknownWidgetXmlHandler14wxCreateObjectEv
_ZN25wxUnknownWidgetXmlHandler16DoCreateResourceEv
_ZN25wxUnknownWidgetXmlHandler9CanHandleEP9wxXmlNode
_ZN25wxUnknownWidgetXmlHandlerC1Ev
_ZN25wxUnknownWidgetXmlHandlerC2Ev
_ZN26wxBitmapComboBoxXmlHandler12ms_classInfoE
_ZN26wxBitmapComboBoxXmlHandler14wxCreateObjectEv
_ZN26wxBitmapComboBoxXmlHandler16DoCreateResourceEv
_ZN26wxBitmapComboBoxXmlHandler9CanHandleEP9wxXmlNode
_ZN26wxBitmapComboBoxXmlHandlerC1Ev
_ZN26wxBitmapComboBoxXmlHandlerC2Ev
_ZN26wxFilePickerCtrlXmlHandler12ms_classInfoE
_ZN26wxFilePickerCtrlXmlHandler14wxCreateObjectEv
_ZN26wxFilePickerCtrlXmlHandler16DoCreateResourceEv
_ZN26wxFilePickerCtrlXmlHandler9CanHandleEP9wxXmlNode
_ZN26wxFilePickerCtrlXmlHandlerC1Ev
_ZN26wxFilePickerCtrlXmlHandlerC2Ev
_ZN26wxGenericDirCtrlXmlHandler12ms_classInfoE
_ZN26wxGenericDirCtrlXmlHandler14wxCreateObjectEv
_ZN26wxGenericDirCtrlXmlHandler16DoCreateResourceEv
_ZN26wxGenericDirCtrlXmlHandler9CanHandleEP9wxXmlNode
_ZN26wxGenericDirCtrlXmlHandlerC1Ev
_ZN26wxGenericDirCtrlXmlHandlerC2Ev
_ZN26wxScrolledWindowXmlHandler12ms_classInfoE
_ZN26wxScrolledWindowXmlHandler14wxCreateObjectEv
_ZN26wxScrolledWindowXmlHandler16DoCreateResourceEv
_ZN26wxScrolledWindowXmlHandler9CanHandleEP9wxXmlNode
_ZN26wxScrolledWindowXmlHandlerC1Ev
_ZN26wxScrolledWindowXmlHandlerC2Ev
_ZN26wxSpinCtrlDoubleXmlHandler12ms_classInfoE
_ZN26wxSpinCtrlDoubleXmlHandler14wxCreateObjectEv
_ZN26wxSpinCtrlDoubleXmlHandler16DoCreateResourceEv
_ZN26wxSpinCtrlDoubleXmlHandler9CanHandleEP9wxXmlNode
_ZN26wxSpinCtrlDoubleXmlHandlerC1Ev
_ZN26wxSpinCtrlDoubleXmlHandlerC2Ev
_ZN26wxSplitterWindowXmlHandler12ms_classInfoE
_ZN26wxSplitterWindowXmlHandler14wxCreateObjectEv
_ZN26wxSplitterWindowXmlHandler16DoCreateResourceEv
_ZN26wxSplitterWindowXmlHandler9CanHandleEP9wxXmlNode
_ZN26wxSplitterWindowXmlHandlerC1Ev
_ZN26wxSplitterWindowXmlHandlerC2Ev
_ZN27wxCollapsiblePaneXmlHandler12ms_classInfoE
_ZN27wxCollapsiblePaneXmlHandler14wxCreateObjectEv
_ZN27wxCollapsiblePaneXmlHandler16DoCreateResourceEv
_ZN27wxCollapsiblePaneXmlHandler9CanHandleEP9wxXmlNode
_ZN27wxCollapsiblePaneXmlHandlerC1Ev
_ZN27wxCollapsiblePaneXmlHandlerC2Ev
_ZN27wxEditableListBoxXmlHandler12ms_classInfoE
_ZN27wxEditableListBoxXmlHandler14wxCreateObjectEv
_ZN27wxEditableListBoxXmlHandler16DoCreateResourceEv
_ZN27wxEditableListBoxXmlHandler9CanHandleEP9wxXmlNode
_ZN27wxEditableListBoxXmlHandlerC1Ev
_ZN27wxEditableListBoxXmlHandlerC2Ev
_ZN29wxActivityIndicatorXmlHandler12ms_classInfoE
_ZN29wxActivityIndicatorXmlHandler14wxCreateObjectEv
_ZN29wxActivityIndicatorXmlHandler16DoCreateResourceEv
_ZN29wxActivityIndicatorXmlHandler9CanHandleEP9wxXmlNode
_ZN29wxActivityIndicatorXmlHandlerC1Ev
_ZN29wxActivityIndicatorXmlHandlerC2Ev
_ZN29wxCommandLinkButtonXmlHandler12ms_classInfoE
_ZN29wxCommandLinkButtonXmlHandler14wxCreateObjectEv
_ZN29wxCommandLinkButtonXmlHandler16DoCreateResourceEv
_ZN29wxCommandLinkButtonXmlHandler9CanHandleEP9wxXmlNode
_ZN29wxCommandLinkButtonXmlHandlerC1Ev
_ZN29wxCommandLinkButtonXmlHandlerC2Ev
_ZN30wxOwnerDrawnComboBoxXmlHandler12ms_classInfoE
_ZN30wxOwnerDrawnComboBoxXmlHandler14wxCreateObjectEv
_ZN30wxOwnerDrawnComboBoxXmlHandler16DoCreateResourceEv
_ZN30wxOwnerDrawnComboBoxXmlHandler9CanHandleEP9wxXmlNode
_ZN30wxOwnerDrawnComboBoxXmlHandlerC1Ev
_ZN30wxOwnerDrawnComboBoxXmlHandlerC2Ev
_ZN31wxPropertySheetDialogXmlHandler12ms_classInfoE
_ZN31wxPropertySheetDialogXmlHandler14wxCreateObjectEv
_ZN31wxPropertySheetDialogXmlHandler16DoCreateResourceEv
_ZN31wxPropertySheetDialogXmlHandler9CanHandleEP9wxXmlNode
_ZN31wxPropertySheetDialogXmlHandlerC1Ev
_ZN31wxPropertySheetDialogXmlHandlerC2Ev
_ZN32wxStdDialogButtonSizerXmlHandler12ms_classInfoE
_ZN32wxStdDialogButtonSizerXmlHandler14wxCreateObjectEv
_ZN32wxStdDialogButtonSizerXmlHandler16DoCreateResourceEv
_ZN32wxStdDialogButtonSizerXmlHandler9CanHandleEP9wxXmlNode
_ZN32wxStdDialogButtonSizerXmlHandlerC1Ev
_ZN32wxStdDialogButtonSizerXmlHandlerC2Ev
_ZNK13wxXmlResource14DoFindResourceEP9wxXmlNodeRK8wxStringS4_b
_ZNK13wxXmlResource26GetResourceNodeAndLocationERK8wxStringS2_bPS0_
_ZNK16wxIconXmlHandler12GetClassInfoEv
_ZNK16wxMenuXmlHandler12GetClassInfoEv
_ZNK17wxFrameXmlHandler12GetClassInfoEv
_ZNK17wxGaugeXmlHandler12GetClassInfoEv
_ZNK17wxPanelXmlHandler12GetClassInfoEv
_ZNK17wxSizerXmlHandler11IsSizerNodeEP9wxXmlNode
_ZNK17wxSizerXmlHandler12GetClassInfoEv
_ZNK18wxBitmapXmlHandler12GetClassInfoEv
_ZNK18wxButtonXmlHandler12GetClassInfoEv
_ZNK18wxChoiceXmlHandler12GetClassInfoEv
_ZNK18wxDialogXmlHandler12GetClassInfoEv
_ZNK18wxSliderXmlHandler12GetClassInfoEv
_ZNK18wxWizardXmlHandler12GetClassInfoEv
_ZNK19wxInfoBarXmlHandler12GetClassInfoEv
_ZNK19wxListBoxXmlHandler12GetClassInfoEv
_ZNK19wxMenuBarXmlHandler12GetClassInfoEv
_ZNK19wxToolBarXmlHandler12GetClassInfoEv
_ZNK20wxCheckBoxXmlHandler12GetClassInfoEv
_ZNK20wxComboBoxXmlHandler12GetClassInfoEv
_ZNK20wxFileCtrlXmlHandler12GetClassInfoEv
_ZNK20wxListCtrlXmlHandler12GetClassInfoEv
_ZNK20wxListbookXmlHandler12GetClassInfoEv
_ZNK20wxNotebookXmlHandler12GetClassInfoEv
_ZNK20wxRadioBoxXmlHandler12GetClassInfoEv

Sections

.text
Size: 466KB - Virtual size: 466KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

Password: infected

1aae8bf580c846f39c71c05898e57e88

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 7.2MB - Virtual size: 7.2MB

.rdata Size: 8.3MB - Virtual size: 8.3MB

.data Size: 385KB - Virtual size: 587KB

.idata Size: 1KB - Virtual size: 1KB

.reloc Size: 409KB - Virtual size: 408KB

.symtab Size: 512B - Virtual size: 4B

.rsrc Size: 76KB - Virtual size: 75KB

Password: infected

f42db4ef6f888d8daf1a604b90098993

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

api-ms-win-core-com-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-eventing-classicprovider-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-errorhandling-l1-1-2

api-ms-win-core-handle-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-com-l1-1-1

api-ms-win-core-string-l1-1-0

api-ms-win-security-base-l1-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-kernel32-legacy-l1-1-0

api-ms-win-core-threadpool-legacy-l1-1-0

ntdll

api-ms-win-core-winrt-error-l1-1-1

api-ms-win-core-sysinfo-l1-2-0

api-ms-win-core-kernel32-legacy-l1-1-1

api-ms-win-core-synch-l1-2-1

api-ms-win-security-lsalookup-l2-1-0

samcli

api-ms-win-core-timezone-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-security-sddl-l1-1-0

api-ms-win-security-lsalookup-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-service-core-l1-1-0

api-ms-win-core-path-l1-1-0

api-ms-win-eventing-controller-l1-1-0

api-ms-win-core-debug-l1-1-1

api-ms-win-shcore-sysinfo-l1-1-0

api-ms-win-core-shlwapi-obsolete-l1-1-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-appmodel-runtime-l1-1-1

propsys

api-ms-win-shcore-registry-l1-1-0

api-ms-win-core-registry-l1-1-1

api-ms-win-core-file-l1-2-0

.text
Size: 7.2MB - Virtual size: 7.2MB

.rdata
Size: 8.3MB - Virtual size: 8.3MB

.data
Size: 385KB - Virtual size: 587KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 409KB - Virtual size: 408KB

.symtab
Size: 512B - Virtual size: 4B

.rsrc
Size: 76KB - Virtual size: 75KB

.text
Size: 396KB - Virtual size: 396KB

.rdata
Size: 194KB - Virtual size: 193KB

.data
Size: 10KB - Virtual size: 13KB

.pdata
Size: 23KB - Virtual size: 23KB

.didat
Size: 512B - Virtual size: 504B

.rsrc
Size: 34KB - Virtual size: 33KB

.reloc
Size: 8KB - Virtual size: 7KB

33:00:00:02:ed:2c:45:e4:c1:45:cf:48:44:00:00:00:00:02:ed
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

1d:c9:09:7d:fe:1c:e0:f2:3e:18:7d:fc:ea:2f:83:da:2f:ad:ee:2a:d9:90:e9:8c:96:f5:7d:19:fe:a8:ad:95
Signer