Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
04ef4db389581fe5b0cdc924e7f4323b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
04ef4db389581fe5b0cdc924e7f4323b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
04ef4db389581fe5b0cdc924e7f4323b_JaffaCakes118
Size
1.7MB
MD5
04ef4db389581fe5b0cdc924e7f4323b
SHA1
881f7e7b00448df598804967ed53a2fefa4d0e93
SHA256
636837e92c72b5616fa4a30c2a0ac0c742fc51855730ac34d2b63dbd79d6f6d5
SHA512
76e5000aab3d6a87f853f6db9d470a6d16aae8a08273224351e98afa0c6040a5ec449e5dfc6e9b90ec71d2c9febfff1187eb20bce493859b9a2082d81db4d667
SSDEEP
24576:Si6z1WYeJdCJvaEPxA1FCRd/4VvzQp+Yy5SZXllkmErMe:Si6z1WYwCJvl61sRd/49zayS1ljEA
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ord3
ord1
ord2
ord20
ord35
ord48
ord16
ord21
ord25
ord50
ord52
lua_createtable
lua_pushvalue
lua_tointeger
lua_rawgeti
lua_pcall
luaL_checklstring
luaL_loadstring
luaL_checkinteger
lua_toboolean
lua_type
lua_pushnil
lua_pushstring
luaL_checkudata
lua_pushboolean
lua_pushnumber
lua_getfield
lua_pushinteger
lua_rawseti
lua_setfield
ImageNtHeader
CheckSumMappedFile
_XL_InitGraphicLib@4
_XL_AddRefBitmap@4
_XL_ReleaseBitmap@4
_XL_PaintBitmap@16
_XL_GetBitmapInfo@8
_XL_AlphaPaintBitmap@44
_XLLRT_ReleaseRunTime@4
_XLLRT_ReleaseEnv@4
_XLLRT_RegisterGlobalObj@24
_XLLRT_GetEnv@4
_XLLRT_RemoveRuntimeFromEnv@8
_XLLRT_AddRuntimeToEnv@12
_XLLRT_DestoryEnv@4
_XLLRT_RegisterGlobalAPI@12
_XLLRT_CreateEnv@4
_XLLRT_AddChunk@8
_XLLRT_ReleaseChunk@4
_XLLRT_GetChunkID@4
_XLLRT_AddRefChunk@4
_XLLRT_AppendChunkCode@12
_XLLRT_CreateCodeChunk@4
_XLLRT_CreateCodeChunkFromFile@12
_XLLRT_AddRefEnv@4
_XLLRT_FireContainerEvent@12
_XLLRT_PushXLObject@12
XLLRT_GetLuaState
_XLLRT_IsEventContainerEmpty@4
_XLLRT_GetRuntimeFromEnv@8
_XLLRT_ReleaseEventContainer@4
_XLLRT_RunChunk@8
_XLLRT_AddFunctionToContainer@8
_XLLRT_RemoveContainerFunction@8
_XLLRT_GetChunk@8
_XLLRT_ClearContainer@8
_XLLRT_CreateEventContainer@4
_XLLRT_CreateRunTime@4
ord900
ord1908
ord1123
ord1139
ord4032
ord4008
ord6272
ord3795
ord6274
ord2054
ord2009
ord5579
ord3800
ord1007
ord5096
ord6215
ord5378
ord3826
ord1911
ord2925
ord5220
ord5222
ord3942
ord5226
ord5562
ord3327
ord566
ord1386
ord1156
ord2011
ord593
ord5524
ord1135
ord5113
ord334
ord1049
ord3824
ord1121
ord1067
ord3635
ord3435
ord5178
ord4206
ord4729
ord4884
ord1662
ord1661
ord1542
ord5908
ord1392
ord5199
ord2856
ord4256
ord354
ord605
ord2651
ord4574
ord6063
ord3756
ord777
ord4388
ord896
ord5803
ord2086
ord1582
ord4234
ord3311
ord741
ord1785
ord5609
ord3204
ord1925
ord3157
ord1271
ord2362
ord3198
ord3155
ord1270
ord5633
ord2255
ord709
ord602
ord6033
ord5638
ord3995
ord4117
ord5637
ord502
ord347
ord501
ord3296
ord5727
ord5635
ord1920
ord284
ord2444
ord2159
ord504
ord5489
ord2697
ord3195
ord380
ord710
ord629
ord1430
ord5319
ord2897
ord5083
ord384
ord589
ord330
ord2656
ord1416
ord1959
ord4314
ord1957
ord3570
ord3787
ord5482
ord5558
ord860
ord6061
ord4347
ord2461
ord2121
ord2155
ord3176
ord3842
ord1883
ord6232
ord3590
ord3422
ord1784
ord1118
ord6002
ord1719
ord2361
ord757
ord557
ord1030
ord1476
ord1031
ord2340
ord1571
ord1864
ord5398
ord2077
ord1536
ord4226
ord3158
ord587
ord715
ord1634
ord1572
ord3286
ord630
ord6284
ord383
ord3082
ord2012
ord385
ord1970
ord4109
ord1281
ord5485
ord6165
ord2310
ord1906
ord4642
ord2282
ord6161
ord2260
ord6059
ord4686
ord2254
ord3448
ord1545
ord620
ord3189
ord4112
ord4078
ord261
ord5711
ord563
ord753
ord2942
ord1922
ord1474
ord4092
ord1538
ord4228
ord3165
ord591
ord578
ord300
ord1111
ord5829
ord326
ord5867
ord4061
ord866
ord427
ord664
ord3882
ord476
ord701
ord5427
ord744
ord5342
ord5091
ord556
ord5705
ord894
ord5484
ord6171
ord258
ord310
ord2313
ord2364
ord2869
ord1642
ord1586
ord6010
ord4192
ord3923
ord5351
ord3981
ord1903
ord2072
ord2068
ord2030
ord1343
ord1336
ord1342
ord5141
ord5198
ord2396
ord4960
ord5157
ord1953
ord3319
ord5735
ord2472
ord5736
ord3671
ord6265
ord4290
ord4094
ord2085
ord3238
ord1946
ord1274
ord2365
ord562
ord751
ord5841
ord2474
ord1461
ord6140
ord2863
ord4333
ord2932
ord758
ord567
ord1962
ord290
ord2784
ord5865
ord4232
ord6251
ord2788
ord1562
ord2867
ord1006
ord2151
ord3395
ord4755
ord1632
ord3224
ord3396
ord3869
ord3645
ord2083
ord658
ord1155
ord3021
ord3379
ord2861
ord4060
ord3877
ord5864
ord1589
ord3793
ord5519
ord5584
ord2870
ord4344
ord2878
ord1645
ord3322
ord663
ord426
ord5426
ord2872
ord865
ord3674
ord754
ord4041
ord5400
ord1236
ord1443
ord6306
ord4320
ord4562
ord5209
ord2460
ord4026
ord1058
ord3677
ord4535
ord2134
ord1064
ord590
ord331
ord287
ord6282
ord5316
ord6293
ord5327
ord265
ord3249
ord2537
ord530
ord1522
ord722
ord1176
ord594
ord335
ord3163
ord4475
ord2936
ord2832
ord2538
ord4177
ord2929
ord5305
ord3629
ord3603
ord3594
ord4119
ord3983
ord3990
ord6166
ord6172
ord2579
ord6167
ord6173
ord776
ord2261
ord4101
ord4100
ord3927
ord4074
ord2311
ord2926
ord282
ord6111
ord2895
ord1479
ord1220
ord6086
ord280
ord3752
ord283
ord1894
ord2366
ord1079
ord1178
ord1182
ord3678
ord293
ord774
ord577
ord899
ord870
ord2827
ord572
ord760
ord3331
ord1198
ord4255
ord4480
ord3943
ord2638
ord3703
ord3713
ord3712
ord2985
ord2527
ord2640
ord2534
ord2708
ord4301
ord2829
ord2725
ord2531
ord5196
ord1590
ord1646
ord1647
ord1955
ord5171
ord1353
ord4961
ord3339
ord6275
ord3796
ord6273
ord1513
ord2163
ord2169
ord2399
ord2381
ord2379
ord2397
ord2409
ord2386
ord2402
ord2407
ord2390
ord2392
ord2394
ord2388
ord2404
ord2384
ord931
ord927
ord929
ord925
ord920
ord5229
ord5231
ord5956
ord1591
ord4276
ord4716
ord3397
ord5210
ord4179
ord6271
ord5067
ord1899
ord5148
ord4238
ord1393
ord3940
ord1608
ord1611
ord5911
ord266
ord1472
ord2243
ord2244
ord314
ord2241
ord1086
ord762
ord764
ord3627
ord581
ord1162
ord1087
ord1200
ord315
ord765
ord745
_stricmp
_wrename
_localtime64
_time64
malloc
sprintf
wcsrchr
wcsncat
iswalpha
iswctype
_vscwprintf
vswprintf
_snprintf
fclose
fwrite
_wfopen
fread
?swprintf@@YAHPA_WIPB_WZZ
_resetstkoflw
_beginthreadex
atoi
_c_exit
_exit
_XcptFilter
_cexit
_wcmdln
_amsg_exit
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__dllonexit
_onexit
exit
memset
__security_error_handler
_controlfp
__CxxFrameHandler
free
_CxxThrowException
memcpy
??0exception@@QAE@ABV0@@Z
memcmp
??1exception@@UAE@XZ
??0exception@@QAE@XZ
memmove
wcscmp
_except_handler3
__p___wargv
_wputenv
wcslen
_wcsnicmp
__p___argc
_purecall
_flushall
_wtoi
strlen
wcscat
wcsncpy
_itow
_wchdir
sqrt
abs
rand
wcscpy
srand
time
_wtoi64
_wcslwr
wcschr
wcsstr
wcstoul
_wcsrev
_wcsicmp
swprintf
_wcsdup
fabs
wcstok
TerminateProcess
Sleep
Process32FirstW
MultiByteToWideChar
ReleaseMutex
OpenFileMappingW
GetLastError
GetCommandLineW
SetPriorityClass
Process32NextW
CreateToolhelp32Snapshot
DeleteCriticalSection
HeapSize
GetModuleFileNameW
GetCurrentThreadId
GlobalLock
GlobalUnlock
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
UnmapViewOfFile
CloseHandle
CreateFileMappingW
MapViewOfFile
GetProcAddress
FreeLibrary
LoadLibraryW
lstrlenW
GetVersionExW
GetThreadLocale
GetLocaleInfoA
WaitForSingleObject
InterlockedExchange
UnhandledExceptionFilter
SetFileAttributesW
lstrcmpiW
CreateDirectoryW
RemoveDirectoryW
MoveFileW
ExitProcess
GetModuleHandleW
MapViewOfFileEx
CompareStringW
RaiseException
FileTimeToSystemTime
lstrcatW
GlobalSize
SizeofResource
FindResourceExW
IsBadReadPtr
lstrcmpiA
PostQueuedCompletionStatus
CreateEventW
ReadDirectoryChangesW
GetQueuedCompletionStatus
CreateThread
CreateIoCompletionPort
lstrcpynA
WriteFile
LoadLibraryExW
EnumResourceNamesW
lstrcpynW
LeaveCriticalSection
EnterCriticalSection
VirtualQuery
TerminateThread
GetStartupInfoW
ResetEvent
GetLocalTime
GetPrivateProfileIntW
LocalFree
LocalAlloc
GetModuleHandleA
QueryPerformanceCounter
GetSystemTimeAsFileTime
OpenProcess
GetCurrentProcessId
InterlockedIncrement
InterlockedDecrement
GetTickCount
SetThreadLocale
SetEvent
OpenEventW
OutputDebugStringW
CreateMutexW
OpenMutexW
WideCharToMultiByte
CreateProcessW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetCurrentDirectoryW
GetTempPathW
DeleteFileW
CopyFileW
lstrlenA
LockResource
LoadResource
FindResourceW
SetLastError
GlobalAlloc
CreateFileW
ReadFile
HeapReAlloc
HeapDestroy
GetVersionExA
GetPrivateProfileSectionNamesW
GetSystemDirectoryW
lstrcpyW
GlobalFree
FindClose
GetDriveTypeW
GetDiskFreeSpaceExW
FindFirstFileW
GetFileAttributesW
FindNextFileW
GetLogicalDriveStringsW
GetFileSize
SetFilePointer
GetACP
InitializeCriticalSection
ResumeThread
BringWindowToTop
InsertMenuW
RegisterWindowMessageW
SetWindowsHookExW
GetDesktopWindow
ScreenToClient
PostQuitMessage
GetFocus
IsChild
GetKeyState
CallNextHookEx
IsClipboardFormatAvailable
GetWindowThreadProcessId
GetClipboardData
CloseClipboard
CreateWindowExW
DestroyWindow
GetSystemMetrics
MonitorFromPoint
GetMonitorInfoW
OffsetRect
UnhookWindowsHookEx
SystemParametersInfoW
GetClipboardOwner
OpenClipboard
KillTimer
GetDlgCtrlID
SetTimer
MoveWindow
FillRect
IsWindowEnabled
ExitWindowsEx
EnableMenuItem
EqualRect
CreatePopupMenu
UpdateWindow
SetActiveWindow
LoadIconW
IsWindow
DialogBoxParamW
GetActiveWindow
SendMessageTimeoutW
MessageBoxW
SetParent
SetWindowLongW
DefWindowProcW
GetWindowLongW
CallWindowProcW
EnableWindow
RemoveMenu
TrackPopupMenuEx
keybd_event
CreateAcceleratorTableW
DestroyAcceleratorTable
GetIconInfo
TranslateAcceleratorW
CreateMenu
GetMenuItemInfoW
SetMenuItemInfoW
SetPropW
GetPropW
RemovePropW
GetDCEx
GetMessageW
DispatchMessageW
RedrawWindow
TranslateMessage
AnimateWindow
TrackMouseEvent
SetClassLongW
AdjustWindowRectEx
GetMenu
InflateRect
DrawEdge
GetSubMenu
InvalidateRect
SendDlgItemMessageW
SetDlgItemTextW
GetDlgItem
SetWindowPos
MapWindowPoints
GetWindow
GetParent
SetWindowContextHelpId
MapDialogRect
CreateDialogParamW
EndDialog
SetWindowTextW
PtInRect
SetCursor
LoadCursorW
GetWindowRect
GetClientRect
ShowWindow
IntersectRect
CopyRect
GetMenuItemCount
SetRect
GetMenuItemID
SendMessageW
PostMessageW
SetForegroundWindow
wsprintfW
DrawTextW
GetCursorPos
GetClassNameW
CharNextW
GetWindowTextLengthW
GetWindowTextW
DdeQueryStringW
DdeGetData
DdeInitializeW
DdeCreateStringHandleW
DdeNameService
DrawFocusRect
LoadBitmapW
ChangeClipboardChain
SetClipboardViewer
LoadImageW
GetForegroundWindow
AttachThreadInput
WindowFromPoint
GetAncestor
GetCapture
SetWindowRgn
SetLayeredWindowAttributes
SetFocus
DrawIconEx
DrawIcon
DestroyCursor
ReleaseDC
EmptyClipboard
SetClipboardData
GetSysColor
RegisterClipboardFormatW
GetDC
DestroyIcon
GetLastActivePopup
IsIconic
ClientToScreen
SetRectEmpty
IsRectEmpty
DrawStateW
ReleaseCapture
SetCapture
BeginPaint
EndPaint
IsWindowVisible
ExtTextOutW
SetBkColor
SetViewportOrgEx
MoveToEx
LineTo
GetDeviceCaps
PatBlt
TextOutW
Rectangle
CreateBrushIndirect
RoundRect
GetTextColor
CreatePen
GetCurrentObject
StretchBlt
GetPixel
SetTextColor
SetBkMode
SelectClipRgn
GetStockObject
FrameRgn
DeleteDC
PtInRegion
DeleteObject
SelectObject
CombineRgn
CreateRoundRectRgn
CreatePolygonRgn
CreateRectRgn
GetTextExtentPoint32W
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectW
CreateFontIndirectW
CreateSolidBrush
TransparentBlt
AlphaBlend
GetSaveFileNameW
GetOpenFileNameW
RegSetValueExW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCreateKeyExW
RegOpenKeyW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyW
RegDeleteValueW
ShellExecuteExW
SHGetSpecialFolderPathW
SHChangeNotify
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
SHGetFileInfoW
ExtractIconExW
SHFileOperationW
ShellExecuteW
Shell_NotifyIconW
ImageList_Draw
ImageList_LoadImageW
ImageList_EndDrag
ImageList_DragMove
ImageList_DragShowNolock
ImageList_GetIconSize
_TrackMouseEvent
ImageList_Destroy
ImageList_DragLeave
StrCmpNIW
PathIsUNCW
PathIsRootW
SHEnumKeyExW
SHSetValueW
PathRemoveBlanksA
SHDeleteKeyW
SHRegSetUSValueW
SHRegCreateUSKeyW
PathFileExistsW
PathIsURLW
PathFindExtensionW
StrCmpNIA
StrStrIW
SHRegGetPathW
PathIsRelativeW
PathRemoveBackslashW
PathAddBackslashW
PathFindFileNameA
StrStrIA
StrCpyW
PathRemoveFileSpecW
SHRegWriteUSValueW
StrCmpW
StrCpyNW
SHGetValueW
PathMakeSystemFolderW
PathStripToRootW
PathIsDirectoryW
PathFindFileNameW
StrCmpIW
StrFormatByteSizeW
PathAppendW
StrStrW
PathCombineW
CreateStreamOnHGlobal
OleInitialize
CoUninitialize
CoCreateInstance
CoInitialize
StringFromIID
CoTaskMemFree
CLSIDFromString
IIDFromString
RevokeDragDrop
RegisterDragDrop
CLSIDFromProgID
SafeArrayRedim
LoadTypeLi
LoadRegTypeLi
DispCallFunc
SafeArrayCopy
VariantCopy
GetErrorInfo
SafeArrayCreateVector
SafeArrayAccessData
OleLoadPicture
SafeArrayCreate
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
VarBstrCat
SafeArrayUnaccessData
SafeArrayDestroy
SysAllocStringByteLen
VariantClear
VariantInit
VarBstrCmp
SysAllocStringLen
SysStringByteLen
SysStringLen
SysAllocString
SysFreeString
ord64
ord22
ord17
ord20
ord30
ord66
ord32
ord65
ord45
ord43
ord44
ord31
ord54
ord58
ord11
ord48
ord60
ord42
ord47
ord37
ord35
ord10
ord61
ord23
ord18
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
PlaySoundW
?_Unlock@_Mutex@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?clear@ios_base@std@@QAEXH_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1locale@std@@QAE@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@XZ
?open@?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAEXPBDHH@Z
??0locale@std@@QAE@PBDH@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PB_WH@Z
?close@?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
sqlite3_step
sqlite3_column_int
sqlite3_bind_text16
sqlite3_bind_int
sqlite3_finalize
sqlite3_reset
sqlite3_open16
sqlite3_close
sqlite3_prepare16_v2
sqlite3_column_text16
mini_unzip_dll
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
WinVerifyTrust
WTHelperProvDataFromStateData
CertGetNameStringW
ntohs
ntohl
htons
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ