SoulFire_1[.]3[.]0_x64-setup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SoulFire_1.3.0_x64-setup.exe
Size

7.9MB
MD5

967a727dd98061c0580eda8eeaff6d77
SHA1

15d189d3bffe2c79daf3ab9bb8ea9826d8985a68
SHA256

b9208d15fbf6fb85f2a5568ca1529fa1bb911a617c283d406f1326c4edfd92cc
SHA512

1d844576cd3d1582635609a654c216d1c1cd4e324a683c33fbd6ebf664845ab0672a61daec63f6a15da45efb715b0b4fb8d97287faa9ad07e3279ed05eb42241
SSDEEP

196608:NtAnyG88ClcRfRmIWjGTOHIAVrX20RZ9E6+ySh2OAHUTpyx:NtaBCidrTmVrG0a6+ySTAHUVG

Score

3^/10

Malware Config

Signatures

Unsigned PE 11 IoCs

Checks for missing Authenticode signature.

resource
SoulFire_1.3.0_x64-setup.exe
unpack001/$PLUGINSDIR/NSISdl.dll
unpack001/$PLUGINSDIR/StartMenu.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsis_tauri_utils.dll
unpack001/soulfire.exe
unpack001/uninstall.exe
unpack002/$PLUGINSDIR/LangDLL.dll
unpack002/$PLUGINSDIR/System.dll
unpack002/$PLUGINSDIR/nsis_tauri_utils.dll

Files

SoulFire_1.3.0_x64-setup.exe
.exe windows:4 windows x86 arch:x86

61259b55b8912888e90f516ca08dc514

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegEnumValueW

shell32

SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW

ole32

OleInitialize
OleUninitialize
CoCreateInstance
IIDFromString
CoTaskMemFree

comctl32

ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked

user32

GetClientRect
EndPaint
DrawTextW
IsWindowEnabled
DispatchMessageW
wsprintfA
CharNextA
CharPrevW
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
GetSystemMetrics
FillRect
AppendMenuW
TrackPopupMenu
OpenClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
PeekMessageW
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EmptyClipboard
CreatePopupMenu

gdi32

SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject

kernel32

GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
lstrcatW
Sleep
lstrcpyA
WriteFile
GetTempFileNameW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
CopyFileW
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
CreateFileW
GetTickCount
MulDiv
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
MoveFileExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/NSISdl.dll
.dll windows:4 windows x86 arch:x86

ed06d61f6957c32cd324837726a5a070

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

wsock32

__WSAFDIsSet
WSAStartup
WSACleanup
send
WSAGetLastError
recv
select
connect
shutdown
closesocket
socket
htons
inet_ntoa
ioctlsocket
gethostbyname

user32

SetWindowLongW
CharPrevA
SetDlgItemTextA
RegisterWindowMessageW
DestroyWindow
EnableWindow
wsprintfA
CallWindowProcW
CreateWindowExW
GetClientRect
ShowWindow
IsWindowVisible
GetFocus
GetDlgItem
FindWindowExW
SetWindowTextA
GetWindowRect
SendMessageW
GetWindowLongW

kernel32

MultiByteToWideChar
WideCharToMultiByte
lstrcpynW
lstrcpyW
CreateFileW
WriteFile
Sleep
DeleteFileW
GetTickCount
MulDiv
GlobalFree
GlobalAlloc
lstrcatA
lstrlenA
lstrcpynA
WaitForSingleObject
CloseHandle
lstrcmpiA
CreateThread
lstrcpyA

Exports

Exports

download
download_quiet

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 882B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/StartMenu.dll
.dll windows:4 windows x86 arch:x86

80469f6834e579db68a646d49780b9d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatW
FindClose
FindNextFileW
lstrcmpW
GetModuleHandleW
lstrcmpiW
MulDiv
lstrcpynW
GlobalAlloc
lstrcpyW
FindFirstFileW
GlobalFree

user32

GetMessageW
TranslateMessage
PostMessageW
DispatchMessageW
GetDlgItem
GetWindowLongW
CheckDlgButton
ShowWindow
LoadIconW
GetClientRect
MoveWindow
DestroyWindow
GetWindowRect
ReleaseDC
GetDC
EnableWindow
SetWindowTextW
SendMessageW
IsDlgButtonChecked
GetWindowTextW
CreateDialogParamW
SetWindowLongW
wsprintfW
ScreenToClient
IsDialogMessageW
CallWindowProcW

gdi32

GetTextMetricsW
SelectObject

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW

ole32

CoTaskMemFree

Exports

Exports

Init
Select
Show

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError

user32

wsprintfW

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:4 windows x86 arch:x86

6b5c4f7d679059f68f1269aad3a5cecd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileAttributesW
lstrcpyW
MulDiv
lstrlenW
HeapFree
GetCurrentDirectoryW
lstrcmpiW
GetProcessHeap
HeapReAlloc
GlobalFree
lstrcpynW
GlobalAlloc
SetCurrentDirectoryW
HeapAlloc

user32

DestroyWindow
CallWindowProcW
SetCursor
LoadCursorW
GetPropW
CharPrevW
DrawFocusRect
GetWindowLongW
DrawTextW
GetClientRect
SetWindowLongW
GetDlgItem
GetSysColor
SetWindowPos
CreateDialogParamW
MapDialogRect
GetWindowRect
SetPropW
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
CharNextW
SendMessageW
MapWindowPoints
RemovePropW
GetWindowTextW

gdi32

SetTextColor

shell32

SHBrowseForFolderW
SHGetPathFromIDListW

comdlg32

GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 638B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsis_tauri_utils.dll
.dll windows:6 windows x86 arch:x86

17cb20871354b907f678c7c220e4ca60

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

nsis_tauri_utils.pdb

Imports

kernel32

OpenProcess
ExitProcess
HeapAlloc
CloseHandle
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
HeapFree
TerminateProcess
GetProcessHeap
GlobalFree
InitializeProcThreadAttributeList
GetLastError
UpdateProcThreadAttribute
CreateProcessW
HeapReAlloc
GlobalAlloc
lstrcpyW

advapi32

GetTokenInformation
OpenProcessToken
EqualSid

user32

GetShellWindow
GetWindowThreadProcessId

Exports

Exports

DllMain
FindProcess
FindProcessCurrentUser
KillProcess
KillProcessCurrentUser
RunAsUser
SemverCompare
memcmp
memcpy
memset

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
soulfire.exe
.exe windows:6 windows x64 arch:x64

4c6275c8ca73a6fc634cf016bbe9dbdc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

soulfire.pdb

Imports

api-ms-win-core-synch-l1-2-0

WaitOnAddress
WakeByAddressAll
WakeByAddressSingle

bcryptprimitives

ProcessPrng

user32

SetWindowTextW
SystemParametersInfoA
SetPropW
AdjustWindowRectEx
GetMenu
GetRawInputData
SendInput
GetKeyboardLayout
SetWindowDisplayAffinity
RedrawWindow
ClipCursor
GetClipCursor
ShowCursor
SetWindowLongW
EnableMenuItem
GetSystemMenu
GetWindowTextLengthW
EnumDisplayMonitors
CreateIcon
DestroyIcon
MapVirtualKeyExW
GetKeyState
GetAsyncKeyState
GetKeyboardState
SystemParametersInfoW
GetClientRect
AdjustWindowRect
ReleaseCapture
ToUnicodeEx
SetCapture
SetWindowLongPtrW
GetMessageA
GetWindowTextW
MsgWaitForMultipleObjectsEx
RegisterRawInputDevices
DispatchMessageA
IsProcessDPIAware
ReleaseDC
MonitorFromPoint
RegisterClassW
TranslateAcceleratorW
KillTimer
TrackPopupMenu
GetDC
SetParent
MapVirtualKeyW
SetClipboardData
MapWindowPoints
RegisterWindowMessageA
ShowWindow
SetForegroundWindow
GetClipboardData
IsClipboardFormatAvailable
OpenClipboard
EnumChildWindows
EmptyClipboard
GetWindowLongPtrW
GetParent
SetWindowRgn
RegisterClassExW
FindWindowExW
IsWindowEnabled
EnableWindow
SetTimer
RegisterClipboardFormatW
GetMenuItemInfoW
CheckMenuItem
DrawIconEx
SetMenu
DrawMenuBar
RemoveMenu
DestroyMenu
CreatePopupMenu
GetWindowRect
GetUpdateRect
DestroyAcceleratorTable
ValidateRect
CloseClipboard
CreateAcceleratorTableW
GetMonitorInfoW
MonitorFromWindow
GetCursorPos
CloseTouchInputHandle
GetTouchInputInfo
TrackMouseEvent
InsertMenuW
MonitorFromRect
GetWindowLongW
ScreenToClient
AppendMenuW
SendMessageW
SetMenuItemInfoW
PostQuitMessage
GetForegroundWindow
GetMenuBarInfo
OffsetRect
GetWindowDC
FillRect
DrawTextW
RegisterTouchWindow
GetSystemMetrics
IsWindow
CreateWindowExW
IsWindowVisible
FlashWindowEx
GetActiveWindow
SetCursorPos
DestroyWindow
SetCursor
LoadCursorW
InvalidateRgn
SetWindowPos
GetWindowPlacement
SetWindowPlacement
PeekMessageW
ChangeDisplaySettingsExW
ClientToScreen
IsIconic
PostMessageW
DefWindowProcW
PostThreadMessageW
DispatchMessageW
TranslateMessage
GetMessageW
CreateMenu

kernel32

TlsGetValue
TlsSetValue
RtlVirtualUnwind
LoadLibraryW
GetConsoleMode
SetConsoleMode
CreateEventW
GetCurrentThreadId
GetModuleHandleW
MoveFileExW
SetFileAttributesW
CreateNamedPipeW
TlsAlloc
InitOnceExecuteOnce
AcquireSRWLockShared
HeapAlloc
HeapFree
GetProcessHeap
SetLastError
WakeAllConditionVariable
SleepConditionVariableSRW
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
RtlPcToFileHeader
GetCurrentThread
GetFileInformationByHandleEx
RaiseException
GetFileInformationByHandle
WaitForSingleObjectEx
CancelIo
CreateFileW
EncodePointer
CreateSemaphoreW
ReadDirectoryChangesW
lstrlenW
SetNamedPipeHandleState
GetComputerNameExW
AcquireSRWLockExclusive
InitializeCriticalSectionAndSpinCount
GetUserPreferredUILanguages
GetModuleHandleA
GetQueuedCompletionStatusEx
GetProcAddress
GetSystemInfo
GetNativeSystemInfo
TlsFree
RegisterWaitForSingleObject
PostQueuedCompletionStatus
SetFileCompletionNotificationModes
GetUserDefaultUILanguage
LCIDToLocaleName
GetLastError
GlobalLock
GlobalSize
GlobalUnlock
GlobalAlloc
WaitNamedPipeW
ReleaseSRWLockShared
CreateIoCompletionPort
UnregisterWait
FormatMessageW
SetHandleInformation
WriteFile
ReleaseSRWLockExclusive
ReadFile
CreateMutexA
GetTempPathW
CreateThread
WriteConsoleW
UpdateProcThreadAttribute
InitializeProcThreadAttributeList
CreateProcessW
GetWindowsDirectoryW
GetSystemDirectoryW
GetFullPathNameW
WaitForMultipleObjects
ReadFileEx
ExitProcess
SetEnvironmentVariableW
GetFileType
CopyFileExW
GetFinalPathNameByHandleW
CreateHardLinkW
CreateSymbolicLinkW
DeviceIoControl
RemoveDirectoryW
DeleteFileW
FindFirstFileW
CreateDirectoryW
FindClose
InitializeSRWLock
CancelIoEx
DeleteCriticalSection
FindNextFileW
ReleaseMutex
HeapReAlloc
GetSystemTimePreciseAsFileTime
QueryPerformanceFrequency
GetProcessId
TerminateProcess
GetExitCodeProcess
GetFileAttributesW
OutputDebugStringA
OutputDebugStringW
GetModuleFileNameW
SleepEx
GetOverlappedResult
WriteFileEx
MultiByteToWideChar
LoadLibraryExW
WideCharToMultiByte
FreeLibrary
GetEnvironmentVariableW
GetCurrentProcessId
GetStdHandle
SetFilePointerEx
DuplicateHandle
GetCurrentProcess
SetFileInformationByHandle
GetCommandLineW
CreatePipe
GetEnvironmentStringsW
GetCurrentDirectoryW
RtlLookupFunctionEntry
RtlCaptureContext
GetConsoleScreenBufferInfo
QueryPerformanceCounter
SetWaitableTimer
CreateWaitableTimerExW
SwitchToThread
SetThreadStackGuarantee
AddVectoredExceptionHandler
CompareStringOrdinal
DeleteProcThreadAttributeList
FreeEnvironmentStringsW
Sleep
ReleaseSemaphore
WaitForSingleObject
GlobalFree
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetFileTime
SetConsoleTextAttribute
LoadLibraryA
LoadLibraryExA
CloseHandle

comctl32

TaskDialogIndirect
SetWindowSubclass
DefSubclassProc
RemoveWindowSubclass

ole32

CoInitializeEx
CoUninitialize
CoTaskMemAlloc
RevokeDragDrop
CoCreateInstance
OleInitialize
RegisterDragDrop
CoTaskMemFree

gdi32

CreateCompatibleDC
DeleteDC
BitBlt
SelectObject
SetBkMode
GetDeviceCaps
CreateRectRgn
CreateDIBitmap
CombineRgn
CreateDIBSection
DeleteObject
CreateSolidBrush
GetDIBits
SetTextColor

dwmapi

DwmSetWindowAttribute
DwmGetWindowAttribute
DwmEnableBlurBehindWindow

ws2_32

getaddrinfo
freeaddrinfo
WSAIoctl
closesocket
setsockopt
WSASend
WSARecv
getsockopt
getpeername
getsockname
shutdown
listen
send
recv
WSACleanup
WSAGetLastError
WSAStartup
connect
bind
sendto
ioctlsocket
WSASocketW

shell32

ShellExecuteW
DragQueryFileW
DragFinish
SHAppBarMessage
SHGetKnownFolderPath
Shell_NotifyIconGetRect
Shell_NotifyIconW
SHCreateItemFromParsingName
ShellExecuteExW

advapi32

RegQueryValueExW
RegCloseKey
SystemFunction036
RevertToSelf
ImpersonateAnonymousToken
EventRegister
EventSetInformation
EventWriteTransfer
EventUnregister
RegGetValueW
RegOpenKeyExW

iphlpapi

GetAdaptersAddresses

secur32

AcquireCredentialsHandleA
FreeCredentialsHandle
EncryptMessage
DecryptMessage
QueryContextAttributesW
DeleteSecurityContext
AcceptSecurityContext
InitializeSecurityContextW
ApplyControlToken
FreeContextBuffer

crypt32

CertDuplicateCertificateContext
CertVerifyCertificateChainPolicy
CertGetCertificateChain
CertDuplicateStore
CertDuplicateCertificateChain
CertEnumCertificatesInStore
CertFreeCertificateContext
CertAddCertificateContextToStore
CertOpenStore
CertCloseStore
CertFreeCertificateChain

shlwapi

SHCreateMemStream

ntdll

NtCreateFile
RtlNtStatusToDosError
NtWriteFile
NtCancelIoFileEx
RtlGetVersion
NtReadFile
NtDeviceIoControlFile
NtOpenFile

oleaut32

SysFreeString
SetErrorInfo
GetErrorInfo
SysStringLen

bcrypt

BCryptGenRandom

api-ms-win-crt-math-l1-1-0

__setusermatherr
pow
round
floor
trunc

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
terminate
_seh_filter_exe
_initialize_onexit_table
_set_app_type
_configure_narrow_argv
_wassert
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
exit
abort
_exit
__p___argc
__p___argv
_cexit
_c_exit
strerror
_errno
_register_thread_local_exe_atexit_callback
_crt_atexit

api-ms-win-crt-string-l1-1-0

strcpy_s
strlen
strcmp
wcsncmp
wcslen
_wcsicmp
wcscmp
_strdup

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
_set_new_mode
free
calloc
realloc

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-stdio-l1-1-0

fflush
__stdio_common_vfprintf
__stdio_common_vsscanf
fputs
fclose
feof
ferror
_fileno
fopen
fread
fseek
ftell
fwrite
_setmode
_set_fmode
__acrt_iob_func
__p__commode
__stdio_common_vsprintf
fgets

api-ms-win-crt-utility-l1-1-0

qsort
bsearch
qsort_s

api-ms-win-crt-convert-l1-1-0

wcstol
_wtoi
_ultow_s

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Exports

Exports

aws_lc_0_21_2_AES_CMAC
aws_lc_0_21_2_AES_cbc_encrypt
aws_lc_0_21_2_AES_cfb128_encrypt
aws_lc_0_21_2_AES_ctr128_encrypt
aws_lc_0_21_2_AES_decrypt
aws_lc_0_21_2_AES_ecb_encrypt
aws_lc_0_21_2_AES_encrypt
aws_lc_0_21_2_AES_ofb128_encrypt
aws_lc_0_21_2_AES_set_decrypt_key
aws_lc_0_21_2_AES_set_encrypt_key
aws_lc_0_21_2_AES_unwrap_key
aws_lc_0_21_2_AES_unwrap_key_padded
aws_lc_0_21_2_AES_wrap_key
aws_lc_0_21_2_AES_wrap_key_padded
aws_lc_0_21_2_ASN1_OBJECT_create
aws_lc_0_21_2_ASN1_OBJECT_free
aws_lc_0_21_2_BIO_append_filename
aws_lc_0_21_2_BIO_callback_ctrl
aws_lc_0_21_2_BIO_clear_flags
aws_lc_0_21_2_BIO_clear_retry_flags
aws_lc_0_21_2_BIO_copy_next_retry
aws_lc_0_21_2_BIO_ctrl
aws_lc_0_21_2_BIO_ctrl_pending
aws_lc_0_21_2_BIO_eof
aws_lc_0_21_2_BIO_find_type
aws_lc_0_21_2_BIO_flush
aws_lc_0_21_2_BIO_free
aws_lc_0_21_2_BIO_free_all
aws_lc_0_21_2_BIO_get_callback_arg
aws_lc_0_21_2_BIO_get_data
aws_lc_0_21_2_BIO_get_ex_data
aws_lc_0_21_2_BIO_get_ex_new_index
aws_lc_0_21_2_BIO_get_fp
aws_lc_0_21_2_BIO_get_init
aws_lc_0_21_2_BIO_get_new_index
aws_lc_0_21_2_BIO_get_retry_flags
aws_lc_0_21_2_BIO_get_retry_reason
aws_lc_0_21_2_BIO_get_shutdown
aws_lc_0_21_2_BIO_gets
aws_lc_0_21_2_BIO_indent
aws_lc_0_21_2_BIO_int_ctrl
aws_lc_0_21_2_BIO_meth_free
aws_lc_0_21_2_BIO_meth_get_callback_ctrl
aws_lc_0_21_2_BIO_meth_get_create
aws_lc_0_21_2_BIO_meth_get_ctrl
aws_lc_0_21_2_BIO_meth_get_destroy
aws_lc_0_21_2_BIO_meth_get_gets
aws_lc_0_21_2_BIO_meth_get_puts
aws_lc_0_21_2_BIO_meth_new
aws_lc_0_21_2_BIO_meth_set_callback_ctrl
aws_lc_0_21_2_BIO_meth_set_create
aws_lc_0_21_2_BIO_meth_set_ctrl
aws_lc_0_21_2_BIO_meth_set_destroy
aws_lc_0_21_2_BIO_meth_set_gets
aws_lc_0_21_2_BIO_meth_set_puts
aws_lc_0_21_2_BIO_meth_set_read
aws_lc_0_21_2_BIO_meth_set_write
aws_lc_0_21_2_BIO_method_name
aws_lc_0_21_2_BIO_method_type
aws_lc_0_21_2_BIO_new
aws_lc_0_21_2_BIO_new_file
aws_lc_0_21_2_BIO_new_fp
aws_lc_0_21_2_BIO_next
aws_lc_0_21_2_BIO_number_read
aws_lc_0_21_2_BIO_number_written
aws_lc_0_21_2_BIO_pending
aws_lc_0_21_2_BIO_pop
aws_lc_0_21_2_BIO_printf
aws_lc_0_21_2_BIO_ptr_ctrl
aws_lc_0_21_2_BIO_push
aws_lc_0_21_2_BIO_puts
aws_lc_0_21_2_BIO_read
aws_lc_0_21_2_BIO_read_asn1
aws_lc_0_21_2_BIO_read_ex
aws_lc_0_21_2_BIO_read_filename
aws_lc_0_21_2_BIO_reset
aws_lc_0_21_2_BIO_rw_filename
aws_lc_0_21_2_BIO_s_file
aws_lc_0_21_2_BIO_seek
aws_lc_0_21_2_BIO_set_callback_arg
aws_lc_0_21_2_BIO_set_callback_ex
aws_lc_0_21_2_BIO_set_close
aws_lc_0_21_2_BIO_set_data
aws_lc_0_21_2_BIO_set_ex_data
aws_lc_0_21_2_BIO_set_flags
aws_lc_0_21_2_BIO_set_fp
aws_lc_0_21_2_BIO_set_init
aws_lc_0_21_2_BIO_set_retry_read
aws_lc_0_21_2_BIO_set_retry_reason
aws_lc_0_21_2_BIO_set_retry_special
aws_lc_0_21_2_BIO_set_retry_write
aws_lc_0_21_2_BIO_set_shutdown
aws_lc_0_21_2_BIO_set_write_buffer_size
aws_lc_0_21_2_BIO_should_io_special
aws_lc_0_21_2_BIO_should_read
aws_lc_0_21_2_BIO_should_retry
aws_lc_0_21_2_BIO_should_write
aws_lc_0_21_2_BIO_snprintf
aws_lc_0_21_2_BIO_tell
aws_lc_0_21_2_BIO_test_flags
aws_lc_0_21_2_BIO_up_ref
aws_lc_0_21_2_BIO_vfree
aws_lc_0_21_2_BIO_vsnprintf
aws_lc_0_21_2_BIO_wpending
aws_lc_0_21_2_BIO_write
aws_lc_0_21_2_BIO_write_all
aws_lc_0_21_2_BIO_write_ex
aws_lc_0_21_2_BIO_write_filename
aws_lc_0_21_2_BN_CTX_end
aws_lc_0_21_2_BN_CTX_free
aws_lc_0_21_2_BN_CTX_get
aws_lc_0_21_2_BN_CTX_new
aws_lc_0_21_2_BN_CTX_secure_new
aws_lc_0_21_2_BN_CTX_start
aws_lc_0_21_2_BN_GENCB_call
aws_lc_0_21_2_BN_GENCB_free
aws_lc_0_21_2_BN_GENCB_get_arg
aws_lc_0_21_2_BN_GENCB_new
aws_lc_0_21_2_BN_GENCB_set
aws_lc_0_21_2_BN_GENCB_set_old
aws_lc_0_21_2_BN_MONT_CTX_copy
aws_lc_0_21_2_BN_MONT_CTX_free
aws_lc_0_21_2_BN_MONT_CTX_new
aws_lc_0_21_2_BN_MONT_CTX_new_consttime
aws_lc_0_21_2_BN_MONT_CTX_new_for_modulus
aws_lc_0_21_2_BN_MONT_CTX_set
aws_lc_0_21_2_BN_abs_is_word
aws_lc_0_21_2_BN_add
aws_lc_0_21_2_BN_add_word
aws_lc_0_21_2_BN_asc2bn
aws_lc_0_21_2_BN_bin2bn
aws_lc_0_21_2_BN_bn2bin
aws_lc_0_21_2_BN_bn2bin_padded
aws_lc_0_21_2_BN_bn2binpad
aws_lc_0_21_2_BN_bn2cbb_padded
aws_lc_0_21_2_BN_bn2dec
aws_lc_0_21_2_BN_bn2hex
aws_lc_0_21_2_BN_bn2le_padded
aws_lc_0_21_2_BN_bn2mpi
aws_lc_0_21_2_BN_clear
aws_lc_0_21_2_BN_clear_bit
aws_lc_0_21_2_BN_clear_free
aws_lc_0_21_2_BN_cmp
aws_lc_0_21_2_BN_cmp_word
aws_lc_0_21_2_BN_copy
aws_lc_0_21_2_BN_count_low_zero_bits
aws_lc_0_21_2_BN_dec2bn
aws_lc_0_21_2_BN_div
aws_lc_0_21_2_BN_div_word
aws_lc_0_21_2_BN_dup
aws_lc_0_21_2_BN_enhanced_miller_rabin_primality_test
aws_lc_0_21_2_BN_equal_consttime
aws_lc_0_21_2_BN_exp
aws_lc_0_21_2_BN_free
aws_lc_0_21_2_BN_from_montgomery
aws_lc_0_21_2_BN_gcd
aws_lc_0_21_2_BN_generate_prime_ex
aws_lc_0_21_2_BN_get_flags
aws_lc_0_21_2_BN_get_u64
aws_lc_0_21_2_BN_get_word
aws_lc_0_21_2_BN_hex2bn
aws_lc_0_21_2_BN_init
aws_lc_0_21_2_BN_is_bit_set
aws_lc_0_21_2_BN_is_negative
aws_lc_0_21_2_BN_is_odd
aws_lc_0_21_2_BN_is_one
aws_lc_0_21_2_BN_is_pow2
aws_lc_0_21_2_BN_is_prime_ex
aws_lc_0_21_2_BN_is_prime_fasttest_ex
aws_lc_0_21_2_BN_is_word
aws_lc_0_21_2_BN_is_zero
aws_lc_0_21_2_BN_le2bn
aws_lc_0_21_2_BN_lshift
aws_lc_0_21_2_BN_lshift1
aws_lc_0_21_2_BN_marshal_asn1
aws_lc_0_21_2_BN_mask_bits
aws_lc_0_21_2_BN_mod_add
aws_lc_0_21_2_BN_mod_add_quick
aws_lc_0_21_2_BN_mod_exp
aws_lc_0_21_2_BN_mod_exp2_mont
aws_lc_0_21_2_BN_mod_exp_mont
aws_lc_0_21_2_BN_mod_exp_mont_consttime
aws_lc_0_21_2_BN_mod_exp_mont_word
aws_lc_0_21_2_BN_mod_inverse
aws_lc_0_21_2_BN_mod_inverse_blinded
aws_lc_0_21_2_BN_mod_lshift
aws_lc_0_21_2_BN_mod_lshift1
aws_lc_0_21_2_BN_mod_lshift1_quick
aws_lc_0_21_2_BN_mod_lshift_quick
aws_lc_0_21_2_BN_mod_mul
aws_lc_0_21_2_BN_mod_mul_montgomery
aws_lc_0_21_2_BN_mod_pow2
aws_lc_0_21_2_BN_mod_sqr
aws_lc_0_21_2_BN_mod_sqrt
aws_lc_0_21_2_BN_mod_sub
aws_lc_0_21_2_BN_mod_sub_quick
aws_lc_0_21_2_BN_mod_word
aws_lc_0_21_2_BN_mpi2bn
aws_lc_0_21_2_BN_mul
aws_lc_0_21_2_BN_mul_word
aws_lc_0_21_2_BN_new
aws_lc_0_21_2_BN_nnmod
aws_lc_0_21_2_BN_nnmod_pow2
aws_lc_0_21_2_BN_num_bits
aws_lc_0_21_2_BN_num_bits_word
aws_lc_0_21_2_BN_num_bytes
aws_lc_0_21_2_BN_one
aws_lc_0_21_2_BN_parse_asn1_unsigned
aws_lc_0_21_2_BN_primality_test
aws_lc_0_21_2_BN_print
aws_lc_0_21_2_BN_print_fp
aws_lc_0_21_2_BN_pseudo_rand
aws_lc_0_21_2_BN_pseudo_rand_range
aws_lc_0_21_2_BN_rand
aws_lc_0_21_2_BN_rand_range
aws_lc_0_21_2_BN_rand_range_ex
aws_lc_0_21_2_BN_rshift
aws_lc_0_21_2_BN_rshift1
aws_lc_0_21_2_BN_secure_new
aws_lc_0_21_2_BN_set_bit
aws_lc_0_21_2_BN_set_negative
aws_lc_0_21_2_BN_set_u64
aws_lc_0_21_2_BN_set_word
aws_lc_0_21_2_BN_sqr
aws_lc_0_21_2_BN_sqrt
aws_lc_0_21_2_BN_sub
aws_lc_0_21_2_BN_sub_word
aws_lc_0_21_2_BN_to_montgomery
aws_lc_0_21_2_BN_uadd
aws_lc_0_21_2_BN_ucmp
aws_lc_0_21_2_BN_usub
aws_lc_0_21_2_BN_value_one
aws_lc_0_21_2_BN_zero
aws_lc_0_21_2_BORINGSSL_self_test
aws_lc_0_21_2_CBB_add_asn1
aws_lc_0_21_2_CBB_add_asn1_bool
aws_lc_0_21_2_CBB_add_asn1_int64
aws_lc_0_21_2_CBB_add_asn1_int64_with_tag
aws_lc_0_21_2_CBB_add_asn1_octet_string
aws_lc_0_21_2_CBB_add_asn1_oid_from_text
aws_lc_0_21_2_CBB_add_asn1_uint64
aws_lc_0_21_2_CBB_add_asn1_uint64_with_tag
aws_lc_0_21_2_CBB_add_bytes
aws_lc_0_21_2_CBB_add_space
aws_lc_0_21_2_CBB_add_u16
aws_lc_0_21_2_CBB_add_u16_length_prefixed
aws_lc_0_21_2_CBB_add_u16le
aws_lc_0_21_2_CBB_add_u24
aws_lc_0_21_2_CBB_add_u24_length_prefixed
aws_lc_0_21_2_CBB_add_u32
aws_lc_0_21_2_CBB_add_u32le
aws_lc_0_21_2_CBB_add_u64
aws_lc_0_21_2_CBB_add_u64le
aws_lc_0_21_2_CBB_add_u8
aws_lc_0_21_2_CBB_add_u8_length_prefixed
aws_lc_0_21_2_CBB_add_zeros
aws_lc_0_21_2_CBB_cleanup
aws_lc_0_21_2_CBB_data
aws_lc_0_21_2_CBB_did_write
aws_lc_0_21_2_CBB_discard_child
aws_lc_0_21_2_CBB_finish
aws_lc_0_21_2_CBB_flush
aws_lc_0_21_2_CBB_flush_asn1_set_of
aws_lc_0_21_2_CBB_init
aws_lc_0_21_2_CBB_init_fixed
aws_lc_0_21_2_CBB_len
aws_lc_0_21_2_CBB_reserve
aws_lc_0_21_2_CBB_zero
aws_lc_0_21_2_CBS_asn1_bitstring_has_bit
aws_lc_0_21_2_CBS_asn1_oid_to_text
aws_lc_0_21_2_CBS_contains_zero_byte
aws_lc_0_21_2_CBS_copy_bytes
aws_lc_0_21_2_CBS_data
aws_lc_0_21_2_CBS_get_any_asn1
aws_lc_0_21_2_CBS_get_any_asn1_element
aws_lc_0_21_2_CBS_get_any_ber_asn1_element
aws_lc_0_21_2_CBS_get_asn1
aws_lc_0_21_2_CBS_get_asn1_bool
aws_lc_0_21_2_CBS_get_asn1_element
aws_lc_0_21_2_CBS_get_asn1_int64
aws_lc_0_21_2_CBS_get_asn1_uint64
aws_lc_0_21_2_CBS_get_bytes
aws_lc_0_21_2_CBS_get_last_u8
aws_lc_0_21_2_CBS_get_optional_asn1
aws_lc_0_21_2_CBS_get_optional_asn1_bool
aws_lc_0_21_2_CBS_get_optional_asn1_int64
aws_lc_0_21_2_CBS_get_optional_asn1_octet_string
aws_lc_0_21_2_CBS_get_optional_asn1_uint64
aws_lc_0_21_2_CBS_get_u16
aws_lc_0_21_2_CBS_get_u16_length_prefixed
aws_lc_0_21_2_CBS_get_u16le
aws_lc_0_21_2_CBS_get_u24
aws_lc_0_21_2_CBS_get_u24_length_prefixed
aws_lc_0_21_2_CBS_get_u32
aws_lc_0_21_2_CBS_get_u32le
aws_lc_0_21_2_CBS_get_u64
aws_lc_0_21_2_CBS_get_u64_decimal
aws_lc_0_21_2_CBS_get_u64le
aws_lc_0_21_2_CBS_get_u8
aws_lc_0_21_2_CBS_get_u8_length_prefixed
aws_lc_0_21_2_CBS_get_until_first
aws_lc_0_21_2_CBS_init
aws_lc_0_21_2_CBS_is_unsigned_asn1_integer
aws_lc_0_21_2_CBS_is_valid_asn1_bitstring
aws_lc_0_21_2_CBS_is_valid_asn1_integer
aws_lc_0_21_2_CBS_is_valid_asn1_oid
aws_lc_0_21_2_CBS_len
aws_lc_0_21_2_CBS_mem_equal
aws_lc_0_21_2_CBS_parse_generalized_time
aws_lc_0_21_2_CBS_parse_utc_time
aws_lc_0_21_2_CBS_peek_asn1_tag
aws_lc_0_21_2_CBS_skip
aws_lc_0_21_2_CBS_stow
aws_lc_0_21_2_CBS_strdup
aws_lc_0_21_2_CMAC_CTX_copy
aws_lc_0_21_2_CMAC_CTX_free
aws_lc_0_21_2_CMAC_CTX_get0_cipher_ctx
aws_lc_0_21_2_CMAC_CTX_new
aws_lc_0_21_2_CMAC_Final
aws_lc_0_21_2_CMAC_Init
aws_lc_0_21_2_CMAC_Reset
aws_lc_0_21_2_CMAC_Update
aws_lc_0_21_2_CRYPTO_MUTEX_cleanup
aws_lc_0_21_2_CRYPTO_MUTEX_init
aws_lc_0_21_2_CRYPTO_MUTEX_lock_read
aws_lc_0_21_2_CRYPTO_MUTEX_lock_write
aws_lc_0_21_2_CRYPTO_MUTEX_unlock_read
aws_lc_0_21_2_CRYPTO_MUTEX_unlock_write
aws_lc_0_21_2_CRYPTO_STATIC_MUTEX_lock_read
aws_lc_0_21_2_CRYPTO_STATIC_MUTEX_lock_write
aws_lc_0_21_2_CRYPTO_STATIC_MUTEX_unlock_read
aws_lc_0_21_2_CRYPTO_STATIC_MUTEX_unlock_write
aws_lc_0_21_2_CRYPTO_chacha_20
aws_lc_0_21_2_CRYPTO_cleanup_all_ex_data
aws_lc_0_21_2_CRYPTO_free
aws_lc_0_21_2_CRYPTO_free_ex_data
aws_lc_0_21_2_CRYPTO_gcm128_aad
aws_lc_0_21_2_CRYPTO_gcm128_decrypt
aws_lc_0_21_2_CRYPTO_gcm128_decrypt_ctr32
aws_lc_0_21_2_CRYPTO_gcm128_encrypt
aws_lc_0_21_2_CRYPTO_gcm128_encrypt_ctr32
aws_lc_0_21_2_CRYPTO_gcm128_finish
aws_lc_0_21_2_CRYPTO_gcm128_init_key
aws_lc_0_21_2_CRYPTO_gcm128_setiv
aws_lc_0_21_2_CRYPTO_gcm128_tag
aws_lc_0_21_2_CRYPTO_get_ex_data
aws_lc_0_21_2_CRYPTO_get_ex_new_index
aws_lc_0_21_2_CRYPTO_get_fork_generation
aws_lc_0_21_2_CRYPTO_get_snapsafe_active
aws_lc_0_21_2_CRYPTO_get_snapsafe_generation
aws_lc_0_21_2_CRYPTO_get_snapsafe_supported
aws_lc_0_21_2_CRYPTO_get_sysgenid_path
aws_lc_0_21_2_CRYPTO_get_thread_local
aws_lc_0_21_2_CRYPTO_has_asm
aws_lc_0_21_2_CRYPTO_is_confidential_build
aws_lc_0_21_2_CRYPTO_library_init
aws_lc_0_21_2_CRYPTO_malloc
aws_lc_0_21_2_CRYPTO_malloc_init
aws_lc_0_21_2_CRYPTO_memcmp
aws_lc_0_21_2_CRYPTO_new_ex_data
aws_lc_0_21_2_CRYPTO_once
aws_lc_0_21_2_CRYPTO_poly1305_finish
aws_lc_0_21_2_CRYPTO_poly1305_init
aws_lc_0_21_2_CRYPTO_poly1305_update
aws_lc_0_21_2_CRYPTO_pre_sandbox_init
aws_lc_0_21_2_CRYPTO_realloc
aws_lc_0_21_2_CRYPTO_refcount_dec_and_test_zero
aws_lc_0_21_2_CRYPTO_refcount_inc
aws_lc_0_21_2_CRYPTO_secure_malloc_init
aws_lc_0_21_2_CRYPTO_secure_malloc_initialized
aws_lc_0_21_2_CRYPTO_secure_used
aws_lc_0_21_2_CRYPTO_set_ex_data
aws_lc_0_21_2_CRYPTO_set_mem_functions
aws_lc_0_21_2_CRYPTO_set_thread_local
aws_lc_0_21_2_CRYPTO_tls1_prf
aws_lc_0_21_2_CTR_DRBG_clear
aws_lc_0_21_2_CTR_DRBG_free
aws_lc_0_21_2_CTR_DRBG_generate
aws_lc_0_21_2_CTR_DRBG_init
aws_lc_0_21_2_CTR_DRBG_new
aws_lc_0_21_2_CTR_DRBG_reseed
aws_lc_0_21_2_DH_bits
aws_lc_0_21_2_DH_check
aws_lc_0_21_2_DH_check_pub_key
aws_lc_0_21_2_DH_clear_flags
aws_lc_0_21_2_DH_compute_key
aws_lc_0_21_2_DH_compute_key_hashed
aws_lc_0_21_2_DH_compute_key_padded
aws_lc_0_21_2_DH_free
aws_lc_0_21_2_DH_generate_key
aws_lc_0_21_2_DH_get0_g
aws_lc_0_21_2_DH_get0_key
aws_lc_0_21_2_DH_get0_p
aws_lc_0_21_2_DH_get0_pqg
aws_lc_0_21_2_DH_get0_priv_key
aws_lc_0_21_2_DH_get0_pub_key
aws_lc_0_21_2_DH_get0_q
aws_lc_0_21_2_DH_get_rfc7919_2048
aws_lc_0_21_2_DH_get_rfc7919_3072
aws_lc_0_21_2_DH_get_rfc7919_4096
aws_lc_0_21_2_DH_get_rfc7919_8192
aws_lc_0_21_2_DH_new
aws_lc_0_21_2_DH_new_by_nid
aws_lc_0_21_2_DH_num_bits
aws_lc_0_21_2_DH_set0_key
aws_lc_0_21_2_DH_set0_pqg
aws_lc_0_21_2_DH_set_length
aws_lc_0_21_2_DH_size
aws_lc_0_21_2_DH_up_ref
aws_lc_0_21_2_DSA_SIG_free
aws_lc_0_21_2_DSA_SIG_get0
aws_lc_0_21_2_DSA_SIG_marshal
aws_lc_0_21_2_DSA_SIG_new
aws_lc_0_21_2_DSA_SIG_parse
aws_lc_0_21_2_DSA_SIG_set0
aws_lc_0_21_2_DSA_bits
aws_lc_0_21_2_DSA_check_signature
aws_lc_0_21_2_DSA_do_check_signature
aws_lc_0_21_2_DSA_do_sign
aws_lc_0_21_2_DSA_do_verify
aws_lc_0_21_2_DSA_dup_DH
aws_lc_0_21_2_DSA_free
aws_lc_0_21_2_DSA_generate_key
aws_lc_0_21_2_DSA_generate_parameters_ex
aws_lc_0_21_2_DSA_get0_g
aws_lc_0_21_2_DSA_get0_key
aws_lc_0_21_2_DSA_get0_p
aws_lc_0_21_2_DSA_get0_pqg
aws_lc_0_21_2_DSA_get0_priv_key
aws_lc_0_21_2_DSA_get0_pub_key
aws_lc_0_21_2_DSA_get0_q
aws_lc_0_21_2_DSA_get_ex_data
aws_lc_0_21_2_DSA_get_ex_new_index
aws_lc_0_21_2_DSA_marshal_parameters
aws_lc_0_21_2_DSA_marshal_private_key
aws_lc_0_21_2_DSA_marshal_public_key
aws_lc_0_21_2_DSA_new
aws_lc_0_21_2_DSA_parse_parameters
aws_lc_0_21_2_DSA_parse_private_key
aws_lc_0_21_2_DSA_parse_public_key
aws_lc_0_21_2_DSA_print
aws_lc_0_21_2_DSA_print_fp
aws_lc_0_21_2_DSA_set0_key
aws_lc_0_21_2_DSA_set0_pqg
aws_lc_0_21_2_DSA_set_ex_data
aws_lc_0_21_2_DSA_sign
aws_lc_0_21_2_DSA_size
aws_lc_0_21_2_DSA_up_ref
aws_lc_0_21_2_DSA_verify
aws_lc_0_21_2_DSAparams_dup
aws_lc_0_21_2_ECDH_compute_key_fips
aws_lc_0_21_2_ECDSA_SIG_free
aws_lc_0_21_2_ECDSA_SIG_from_bytes
aws_lc_0_21_2_ECDSA_SIG_get0
aws_lc_0_21_2_ECDSA_SIG_get0_r
aws_lc_0_21_2_ECDSA_SIG_get0_s
aws_lc_0_21_2_ECDSA_SIG_marshal
aws_lc_0_21_2_ECDSA_SIG_max_len
aws_lc_0_21_2_ECDSA_SIG_new
aws_lc_0_21_2_ECDSA_SIG_parse
aws_lc_0_21_2_ECDSA_SIG_set0
aws_lc_0_21_2_ECDSA_SIG_to_bytes
aws_lc_0_21_2_ECDSA_do_sign
aws_lc_0_21_2_ECDSA_do_verify
aws_lc_0_21_2_ECDSA_sign
aws_lc_0_21_2_ECDSA_sign_with_nonce_and_leak_private_key_for_testing
aws_lc_0_21_2_ECDSA_size
aws_lc_0_21_2_ECDSA_verify
aws_lc_0_21_2_ECPKParameters_print
aws_lc_0_21_2_EC_GROUP_cmp
aws_lc_0_21_2_EC_GROUP_dup
aws_lc_0_21_2_EC_GROUP_free
aws_lc_0_21_2_EC_GROUP_get0_generator
aws_lc_0_21_2_EC_GROUP_get0_order
aws_lc_0_21_2_EC_GROUP_get0_seed
aws_lc_0_21_2_EC_GROUP_get_asn1_flag
aws_lc_0_21_2_EC_GROUP_get_cofactor
aws_lc_0_21_2_EC_GROUP_get_curve_GFp
aws_lc_0_21_2_EC_GROUP_get_curve_name
aws_lc_0_21_2_EC_GROUP_get_degree
aws_lc_0_21_2_EC_GROUP_get_order
aws_lc_0_21_2_EC_GROUP_get_seed_len
aws_lc_0_21_2_EC_GROUP_method_of
aws_lc_0_21_2_EC_GROUP_new_by_curve_name
aws_lc_0_21_2_EC_GROUP_new_curve_GFp
aws_lc_0_21_2_EC_GROUP_order_bits
aws_lc_0_21_2_EC_GROUP_set_asn1_flag
aws_lc_0_21_2_EC_GROUP_set_generator
aws_lc_0_21_2_EC_GROUP_set_point_conversion_form
aws_lc_0_21_2_EC_GROUP_set_seed
aws_lc_0_21_2_EC_KEY_check_fips
aws_lc_0_21_2_EC_KEY_check_key
aws_lc_0_21_2_EC_KEY_dup
aws_lc_0_21_2_EC_KEY_free
aws_lc_0_21_2_EC_KEY_generate_key
aws_lc_0_21_2_EC_KEY_generate_key_fips
aws_lc_0_21_2_EC_KEY_get0_group
aws_lc_0_21_2_EC_KEY_get0_private_key
aws_lc_0_21_2_EC_KEY_get0_public_key
aws_lc_0_21_2_EC_KEY_get_conv_form

Sections

.text
Size: 15.3MB - Virtual size: 15.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10.0MB - Virtual size: 10.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 292KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 778KB - Virtual size: 778KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
uninstall.exe
.exe windows:4 windows x86 arch:x86

61259b55b8912888e90f516ca08dc514

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegEnumValueW

shell32

SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW

ole32

OleInitialize
OleUninitialize
CoCreateInstance
IIDFromString
CoTaskMemFree

comctl32

ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked

user32

GetClientRect
EndPaint
DrawTextW
IsWindowEnabled
DispatchMessageW
wsprintfA
CharNextA
CharPrevW
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
GetSystemMetrics
FillRect
AppendMenuW
TrackPopupMenu
OpenClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
PeekMessageW
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EmptyClipboard
CreatePopupMenu

gdi32

SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject

kernel32

GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
lstrcatW
Sleep
lstrcpyA
WriteFile
GetTempFileNameW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
CopyFileW
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
CreateFileW
GetTickCount
MulDiv
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
MoveFileExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/LangDLL.dll
.dll windows:4 windows x86 arch:x86

3e8d18bb71c7ebbda2ddc2a4bb03547b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
GlobalFree
lstrcpynW
lstrcmpW
GlobalAlloc
MulDiv
GetModuleHandleW
lstrcpyW

user32

DialogBoxParamW
SetDlgItemTextW
SendDlgItemMessageW
EndDialog
SetWindowTextW
LoadIconW
ShowWindow
SendMessageW
GetDC

gdi32

GetDeviceCaps
CreateFontIndirectW
DeleteObject

Exports

Exports

LangDialog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 681B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError

user32

wsprintfW

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsis_tauri_utils.dll
.dll windows:6 windows x86 arch:x86

17cb20871354b907f678c7c220e4ca60

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

nsis_tauri_utils.pdb

Imports

kernel32

OpenProcess
ExitProcess
HeapAlloc
CloseHandle
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
HeapFree
TerminateProcess
GetProcessHeap
GlobalFree
InitializeProcThreadAttributeList
GetLastError
UpdateProcThreadAttribute
CreateProcessW
HeapReAlloc
GlobalAlloc
lstrcpyW

advapi32

GetTokenInformation
OpenProcessToken
EqualSid

user32

GetShellWindow
GetWindowThreadProcessId

Exports

Exports

DllMain
FindProcess
FindProcessCurrentUser
KillProcess
KillProcessCurrentUser
RunAsUser
SemverCompare
memcmp
memcpy
memset

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61259b55b8912888e90f516ca08dc514

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1KB - Virtual size: 128KB

.ndata Size: - Virtual size: 192KB

.rsrc Size: 18KB - Virtual size: 17KB

ed06d61f6957c32cd324837726a5a070

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

wsock32

user32

kernel32

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 25KB

.reloc Size: 1024B - Virtual size: 882B

80469f6834e579db68a646d49780b9d5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 296B

.reloc Size: 1024B - Virtual size: 578B

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 1024B - Virtual size: 867B

.data Size: 512B - Virtual size: 120B

.reloc Size: 1024B - Virtual size: 662B

6b5c4f7d679059f68f1269aad3a5cecd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1KB - Virtual size: 128KB

.ndata
Size: - Virtual size: 192KB

.rsrc
Size: 18KB - Virtual size: 17KB

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 25KB

.reloc
Size: 1024B - Virtual size: 882B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 296B

.reloc
Size: 1024B - Virtual size: 578B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 1024B - Virtual size: 867B

.data
Size: 512B - Virtual size: 120B

.reloc
Size: 1024B - Virtual size: 662B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 8KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 638B

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: - Virtual size: 9B

.reloc
Size: 512B - Virtual size: 376B

.text
Size: 15.3MB - Virtual size: 15.3MB

.rdata
Size: 10.0MB - Virtual size: 10.0MB

.data
Size: 292KB - Virtual size: 315KB

.pdata
Size: 778KB - Virtual size: 778KB

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 97KB - Virtual size: 97KB