a1591bbd4e11ac232f8795e91cd4a7364817d794501db1f30946a84b9527456f

Sharing

Copy URL Twitter E-mail

General

Target

a1591bbd4e11ac232f8795e91cd4a7364817d794501db1f30946a84b9527456f
Size

743KB
MD5

48467b5f4377c429a4cab6e6d3abf42c
SHA1

5ace6e8010a12239b236ce237cf27ef21928eeee
SHA256

a1591bbd4e11ac232f8795e91cd4a7364817d794501db1f30946a84b9527456f
SHA512

1a2c49f4fbf47cca5cab2b9fb72ba0d5ea6b630de61797e77c9cc2c499c5baed17452f73edc163d7fbbae89e2021bd747276c4fe2d885915cb997e8f2be2b087
SSDEEP

12288:VjNcRHpS2DyhQl9FOR9z7k+/R7pM6ZhMPeS12+7sUAzVuHyrraqr:VB2HpnyhQl9ER9/d/Ra6oPeSNAUQV3rh

Score

1^/10

Malware Config

Signatures

Files

a1591bbd4e11ac232f8795e91cd4a7364817d794501db1f30946a84b9527456f
.dll windows:5 windows x86 arch:x86

c6f8a8f237bc62bc603a341c42cbbc62

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:01
Certificate

Issuer

OU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\, Inc.,C=US

Not Before

16/11/2006, 01:54

Not After

16/11/2026, 01:54

Subject

SERIALNUMBER=07969287,CN=Go Daddy Secure Certification Authority,OU=http://certificates.godaddy.com/repository,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

04:7c:1f:dc:21:08:01
Certificate

Issuer

SERIALNUMBER=07969287,CN=Go Daddy Secure Certification Authority,OU=http://certificates.godaddy.com/repository,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Not Before

23/04/2013, 19:23

Not After

23/04/2016, 19:23

Subject

CN=Zoom Video Communications\, Inc.,O=Zoom Video Communications\, Inc.,L=Santa Clara,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

ad:a0:4f:50:90:41:52:3a:b2:0d:0d:8f:27:0b:55:f6:6a:ed:78:be
Signer

Actual PE Digest

ad:a0:4f:50:90:41:52:3a:b2:0d:0d:8f:27:0b:55:f6:6a:ed:78:be

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\B_35_15371\Bin\Release\zChatUI.pdb

Imports

cmmlib

??_7?$CStringT@_W@Cmm@@6B@
?Assign@?$CStringT@_W@Cmm@@QAEXPB_WI@Z
?Right@?$CStringT@_W@Cmm@@QBE?AV?$CRangeT@PB_W@2@I@Z
??Y?$CStringT@_W@Cmm@@QAEAAV01@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?Left@?$CStringT@_W@Cmm@@QBE?AV?$CRangeT@PB_W@2@I@Z
?Replace@?$CStringT@_W@Cmm@@QAEXPB_W0@Z
?Pos@?$CStringT@_W@Cmm@@QBEHPB_W@Z
?cmm_urlenc@@YAXPBDPADH@Z
?GetZoomAppPropData@Cmm@@YAPAVIZoomAppPropData@zoom_data@@XZ
?cmm_str_convert@@YAIHPADIPB_WI@Z
?SetLength@?$CStringT@D@Cmm@@QAEXI@Z
?MakeLower@?$CStringT@_W@Cmm@@QAEXXZ
??8?$CStringT@_W@Cmm@@QBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??Y?$CStringT@_W@Cmm@@QAEAAV01@PBD@Z
??Y?$CStringT@_W@Cmm@@QAEAAV01@PB_W@Z
??H?$CStringT@_W@Cmm@@QBE?AV01@ABV01@@Z
??0?$CStringT@_W@Cmm@@QAE@PBD@Z
?ReleaseBuffer@?$CStringT@D@Cmm@@QAEXXZ
?GetBuffer@?$CStringT@D@Cmm@@QAEPADI@Z
??B?$CStringT@D@Cmm@@QBEPBDXZ
??0?$CStringT@D@Cmm@@QAE@PBD@Z
??0?$CStringT@D@Cmm@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0?$CStringT@D@Cmm@@QAE@XZ
?ForCurrentProcess@CommandLine@Cmm@@SAPAV12@XZ
?cmm_str_convert@@YAIHPA_WIPBDI@Z
?cmm_urldec@@YAHPBDPAD@Z
??M?$CStringT@_W@Cmm@@QBE_NABV01@@Z
?SetLength@?$CStringT@_W@Cmm@@QAEXI@Z
?Empty@?$CStringT@_W@Cmm@@QAEXXZ
?GetBuffer@?$CStringT@_W@Cmm@@QAEPA_WI@Z
??4?$CStringT@_W@Cmm@@QAEAAV01@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?ZMGetVCardFileName@Cmm@@YAHW4ZoomSnsType@@ABV?$CStringT@_W@1@HAAV31@@Z
??9?$CStringT@_W@Cmm@@QBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?ParseMsg@?$CmmMessageTemplate_1@V?$CStringT@D@Cmm@@@Archive@Cmm@@UAEHPBVCmmMQ_Msg@3@@Z
??1CSBMBMessage_NotifyBeforeTerm@@UAE@XZ
??0CSBMBMessage_NotifyBeforeTerm@@QAE@XZ
??1CSBMBMessage_NotifyAfterInit@@UAE@XZ
??0CSBMBMessage_NotifyAfterInit@@QAE@XZ
??1CSBMBMessage_NotifyClientUnRegistry@@UAE@XZ
??0CSBMBMessage_NotifyClientUnRegistry@@QAE@XZ
??1CSBMBMessage_NotifyClientRegistry@@UAE@XZ
??0CSBMBMessage_NotifyClientRegistry@@QAE@XZ
?GetAppContext@Cmm@@YAPAVISSBAppContext@1@XZ
CmmMQ_GetService
?StringToInt@Cmm@@YAHABV?$CStringT@_W@1@AAH@Z
?IsNewerVersion@Cmm@@YAHABV?$CStringT@D@1@@Z
?ReleaseBuffer@?$CStringT@_W@Cmm@@QAEXXZ
??8?$CStringT@_W@Cmm@@QBE_NPB_W@Z
??4?$CStringT@_W@Cmm@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Format@CTime@Cmm@@QAEIPA_WIPB_W@Z
?GetSecond@CTime@Cmm@@QBEHXZ
??B?$CStringT@_W@Cmm@@QBEPB_WXZ
?GetHour@CTime@Cmm@@QBEHXZ
?GetDay@CTime@Cmm@@QBEHXZ
?GetMonth@CTime@Cmm@@QBEHXZ
?GetYear@CTime@Cmm@@QBEHXZ
?GetTickCount@CTime@Cmm@@SA?AV12@XZ
??1CFileName@Cmm@@UAE@XZ
?GetModuleFileNameW@CFileName@Cmm@@QAEXPAUHINSTANCE__@@@Z
??0CFileName@Cmm@@QAE@XZ
??_7CFileName@Cmm@@6B@
?IsExists@CFileName@Cmm@@QBEHXZ
?Find@?$CStringT@_W@Cmm@@QBEPA_WPB_WH@Z
?GetAt@?$CStringT@_W@Cmm@@QBE_WH@Z
?GetBufferSetLength@?$CStringT@_W@Cmm@@QAEPA_WI@Z
??A?$CStringT@_W@Cmm@@QBE_WH@Z
??Y?$CStringT@_W@Cmm@@QAEAAV01@_W@Z
?MakeSlash@CFileName@Cmm@@QAEXXZ
?GetExt@CFileName@Cmm@@QBEPB_WH@Z
?MakeUpper@?$CStringT@_W@Cmm@@QAEXXZ
??4?$CStringT@_W@Cmm@@QAEAAV01@_W@Z
?ToTimeT@Time@Cmm@@QBE_JXZ
?Now@Time@Cmm@@SA?AV12@XZ
?GetStr@CmmGUID@Cmm@@QAEAAV?$CStringT@_W@2@XZ
??1CmmGUID@Cmm@@QAE@XZ
??0CmmGUID@Cmm@@QAE@XZ
??H?$CStringT@_W@Cmm@@QBE?AV01@PB_W@Z
??0?$CStringT@_W@Cmm@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetSize@CFile@Cmm@@QBE_KXZ
?Close@CFile@Cmm@@QAEXXZ
?Read@CFile@Cmm@@QAEIPAXI@Z
?OpenExisting@CFile@Cmm@@QAEXPB_WW4EAccess@12@@Z
??1CFile@Cmm@@QAE@XZ
?StringToInt64@Cmm@@YAHABV?$CStringT@D@1@AA_J@Z
?GetAsLocalTime@CTime@Cmm@@QBEXAAU_SYSTEMTIME@@@Z
??0CTime@Cmm@@QAE@HHHHHHHH@Z
?ResetTimeZone@CTime@Cmm@@SAXXZ
??4?$CStringT@_W@Cmm@@QAEAAV01@PB_W@Z
?Compare@?$CStringT@_W@Cmm@@QBEHPB_W@Z
?CompareNoCase@?$CStringT@_W@Cmm@@QBEHPB_W@Z
?Trim@?$CStringT@_W@Cmm@@QAEXXZ
??4?$CStringT@_W@Cmm@@QAEAAV01@ABV01@@Z
??1?$CStringT@D@Cmm@@UAE@XZ
??0?$CStringT@_W@Cmm@@QAE@XZ
??0?$CStringT@_W@Cmm@@QAE@ABV01@@Z
??0?$CStringT@_W@Cmm@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0?$CStringT@_W@Cmm@@QAE@PB_W@Z
??1?$CStringT@_W@Cmm@@UAE@XZ
?Format@?$CStringT@_W@Cmm@@QAAXPB_WZZ
?GetMinute@CTime@Cmm@@QBEHXZ
?GetDisplayVersion@Cmm@@YA?AV?$CStringT@D@1@XZ

duilib

?FitWindowRectHdpi@CHighDpi@DuiLib@@SA?AUtagRECT@@AAU3@@Z
?SetEventMask@CRichEditUI@DuiLib@@QAEKK@Z
?GetEventMask@CRichEditUI@DuiLib@@QBEKXZ
?GetData@CDuiString@DuiLib@@QBEPB_WXZ
??1CDuiString@DuiLib@@QAE@XZ
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
?SetPromptText@CRichEditUI@DuiLib@@QAEXPB_W@Z
?SetSelAll@CRichEditUI@DuiLib@@QAEHXZ
??YCEventSource@DuiLib@@QAEXABVCDelegateBase@1@@Z
?HoverItem@CListContainerElementUI@DuiLib@@UAEX_N@Z
?IsItemHovered@CListContainerElementUI@DuiLib@@UBE_NXZ
?DrawItemText@CListContainerElementUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@_N@Z
?DoPaint@CListContainerElementUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@@Z
?SetAttribute@CListContainerElementUI@DuiLib@@UAEXPB_W0@Z
?DoEvent@CListContainerElementUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z
?Activate@CListContainerElementUI@DuiLib@@UAE_NXZ
?Expand@CListContainerElementUI@DuiLib@@UAE_N_N@Z
?IsExpanded@CListContainerElementUI@DuiLib@@UBE_NXZ
?SetEnabled@CListContainerElementUI@DuiLib@@UAEX_N@Z
?SetVisible@CListContainerElementUI@DuiLib@@UAEX_N@Z
?SetOwner@CListContainerElementUI@DuiLib@@UAEXPAVCControlUI@2@@Z
?GetOwner@CListContainerElementUI@DuiLib@@UAEPAVIListOwnerUI@2@XZ
?SetIndex@CListContainerElementUI@DuiLib@@UAEXH@Z
?GetIndex@CListContainerElementUI@DuiLib@@UBEHXZ
?GetInterface@CListContainerElementUI@DuiLib@@UAEPAXPB_W@Z
?GetControlFlags@CListContainerElementUI@DuiLib@@UBEIXZ
?GetClass@CListContainerElementUI@DuiLib@@UBEPB_WXZ
??0CListContainerElementUI@DuiLib@@QAE@XZ
??9CDuiString@DuiLib@@QBE_NPB_W@Z
?GetObjectW@CDelegateBase@DuiLib@@IAEPAXXZ
??1CDelegateBase@DuiLib@@UAE@XZ
??0CDelegateBase@DuiLib@@QAE@PAX0@Z
??0CDelegateBase@DuiLib@@QAE@ABV01@@Z
?ProcessScrollBar@CContainerUI@DuiLib@@MAEXUtagRECT@@HH@Z
?SetFloatPos@CContainerUI@DuiLib@@MAEXH@Z
?GetAccProxyObject@CContainerUI@DuiLib@@UAEPAVCAccProxyObject@2@XZ
?GetHorizontalScrollBar@CContainerUI@DuiLib@@UBEPAVCScrollBarUI@2@XZ
?GetVerticalScrollBar@CContainerUI@DuiLib@@UBEPAVCScrollBarUI@2@XZ
?EnableScrollBar@CContainerUI@DuiLib@@UAEX_N0@Z
?EndRight@CContainerUI@DuiLib@@UAEXXZ
?HomeLeft@CContainerUI@DuiLib@@UAEXXZ
?PageRight@CContainerUI@DuiLib@@UAEXXZ
?PageLeft@CContainerUI@DuiLib@@UAEXXZ
?LineRight@CContainerUI@DuiLib@@UAEXXZ
?LineLeft@CContainerUI@DuiLib@@UAEXXZ
?EndDown@CContainerUI@DuiLib@@UAEXXZ
?HomeUp@CContainerUI@DuiLib@@UAEXXZ
?PageDown@CContainerUI@DuiLib@@UAEXXZ
?PageUp@CContainerUI@DuiLib@@UAEXXZ
?LineDown@CContainerUI@DuiLib@@UAEXXZ
?LineUp@CContainerUI@DuiLib@@UAEXXZ
?SetScrollPos@CContainerUI@DuiLib@@UAEXUtagSIZE@@_N@Z
?GetScrollRange@CContainerUI@DuiLib@@UBE?AUtagSIZE@@_N@Z
?GetScrollPos@CContainerUI@DuiLib@@UBE?AUtagSIZE@@_N@Z
?FindSubControl@CContainerUI@DuiLib@@QAEPAVCControlUI@2@PB_W@Z
?FindControl@CContainerUI@DuiLib@@UAEPAVCControlUI@2@P6GPAV32@PAV32@PAX@Z1I@Z
?SetManager@CContainerUI@DuiLib@@UAEXPAVCPaintManagerUI@2@PAVCControlUI@2@_N@Z
?SetPos@CContainerUI@DuiLib@@UAEXUtagRECT@@_N@Z
?FindSelectable@CContainerUI@DuiLib@@UBEHH_N@Z
?SetMouseChildEnabled@CContainerUI@DuiLib@@UAEX_N@Z
?IsMouseChildEnabled@CContainerUI@DuiLib@@UBE_NXZ
?SetDelayedDestroy@CContainerUI@DuiLib@@UAEX_N@Z
?IsDelayedDestroy@CContainerUI@DuiLib@@UBE_NXZ
?SetAutoDestroy@CContainerUI@DuiLib@@UAEX_N@Z
?IsAutoDestroy@CContainerUI@DuiLib@@UBE_NXZ
?SetChildPadding@CContainerUI@DuiLib@@UAEXH_N@Z
?GetChildPadding@CContainerUI@DuiLib@@UBEH_N@Z
?SetInset@CContainerUI@DuiLib@@UAEXUtagRECT@@_N@Z
?GetInset@CContainerUI@DuiLib@@UBE?AUtagRECT@@_N@Z
?SetMouseEnabled@CContainerUI@DuiLib@@UAEX_N@Z
?SetInternVisible@CContainerUI@DuiLib@@UAEX_N@Z
?RemoveAll@CContainerUI@DuiLib@@UAEXXZ
?RemoveAt@CContainerUI@DuiLib@@UAE_NH@Z
?Remove@CContainerUI@DuiLib@@UAE_NPAVCControlUI@2@@Z
?AddAt@CContainerUI@DuiLib@@UAE_NPAVCControlUI@2@H@Z
?AdjustWindowRectExHdpi@CHighDpi@DuiLib@@SAHPAUtagRECT@@KHK@Z
?GetCount@CContainerUI@DuiLib@@UBEHXZ
?SetItemIndex@CContainerUI@DuiLib@@UAE_NPAVCControlUI@2@H@Z
?GetItemIndex@CContainerUI@DuiLib@@UBEHPAVCControlUI@2@@Z
?GetItemAt@CContainerUI@DuiLib@@UBEPAVCControlUI@2@H@Z
?ShowVirtualKeyboard@CControlUI@DuiLib@@UAE_N_N@Z
?DoPostPaint@CControlUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@@Z
?PaintBorder@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintText@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintStatusImage@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintBkImage@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?PaintBkColor@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z
?EstimateSize@CControlUI@DuiLib@@UAE?AUtagSIZE@@U3@_N@Z
?Event@CControlUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z
?Init@CControlUI@DuiLib@@UAEXXZ
?IsMsgFocusControlWant@CControlUI@DuiLib@@UAE_NIIJ@Z
?SetFloat@CControlUI@DuiLib@@UAEX_N@Z
?IsFloat@CControlUI@DuiLib@@UBE_NXZ
?SetFocus@CControlUI@DuiLib@@UAEXXZ
?IsFocused@CControlUI@DuiLib@@UBE_NXZ
?SetKeyboardEnabled@CControlUI@DuiLib@@UAEX_N@Z
?IsKeyboardEnabled@CControlUI@DuiLib@@UBE_NXZ
?IsMouseEnabled@CControlUI@DuiLib@@UBE_NXZ
?IsEnabled@CControlUI@DuiLib@@UBE_NXZ
?IsVisible@CControlUI@DuiLib@@UBE_NXZ
?SetTag@CControlUI@DuiLib@@UAEXI@Z
?GetTag@CControlUI@DuiLib@@UBEIXZ
?SetUserData@CControlUI@DuiLib@@UAEXPB_W@Z
?GetUserData@CControlUI@DuiLib@@UAEABVCDuiString@2@XZ
?SetContextMenuUsed@CControlUI@DuiLib@@UAEX_N@Z
?IsContextMenuUsed@CControlUI@DuiLib@@UBE_NXZ
?SetShortcut@CControlUI@DuiLib@@UAEX_W@Z
?GetShortcut@CControlUI@DuiLib@@UBE_WXZ
?GetToolTipWidth@CControlUI@DuiLib@@UAEH_N@Z
?SetToolTipWidth@CControlUI@DuiLib@@UAEXH_N@Z
?SetToolTip@CControlUI@DuiLib@@UAEXPB_W@Z
?GetToolTip@CControlUI@DuiLib@@UBE?AVCDuiString@2@XZ
?IsRelativePos@CControlUI@DuiLib@@UBE_NXZ
?GetRelativePos@CControlUI@DuiLib@@UBE?AUtagTRelativePosUI@2@_N@Z
?SetRelativeParentSize@CControlUI@DuiLib@@UAEXUtagSIZE@@_N@Z
?SetRelativePos@CControlUI@DuiLib@@UAEXUtagSIZE@@0_N@Z
?SetMaxHeight@CControlUI@DuiLib@@UAEXH_N@Z
?GetMaxHeight@CControlUI@DuiLib@@UBEH_N@Z
?SetMinHeight@CControlUI@DuiLib@@UAEXH_N@Z
?GetMinHeight@CControlUI@DuiLib@@UBEH_N@Z
?SetMaxWidth@CControlUI@DuiLib@@UAEXH_N@Z
?GetMaxWidth@CControlUI@DuiLib@@UBEH_N@Z
?SetMinWidth@CControlUI@DuiLib@@UAEXH_N@Z
?GetMinWidth@CControlUI@DuiLib@@UBEH_N@Z
?SetFixedHeight@CControlUI@DuiLib@@UAEXH_N@Z
?GetFixedHeight@CControlUI@DuiLib@@UBEH_N@Z
?SetFixedWidth@CControlUI@DuiLib@@UAEXH_N@Z
?GetFixedWidth@CControlUI@DuiLib@@UBEH_N@Z
?SetFixedXY@CControlUI@DuiLib@@UAEXUtagSIZE@@_N@Z
?GetFixedXY@CControlUI@DuiLib@@UBE?AUtagSIZE@@_N@Z
?SetPadding@CControlUI@DuiLib@@UAEXUtagRECT@@_N@Z
?GetPadding@CControlUI@DuiLib@@UBE?AUtagRECT@@_N@Z
?GetY@CControlUI@DuiLib@@UBEH_N@Z
?GetX@CControlUI@DuiLib@@UBEH_N@Z
?GetHeight@CControlUI@DuiLib@@UBEH_N@Z
?GetWidth@CControlUI@DuiLib@@UBEH_N@Z
?GetPos@CControlUI@DuiLib@@UBE?BUtagRECT@@_N@Z
?SetText@CControlUI@DuiLib@@UAEXPB_W@Z
?GetText@CControlUI@DuiLib@@UBE?AVCDuiString@2@XZ
?GetParent@CControlUI@DuiLib@@UBEPAV12@XZ
?GetManager@CControlUI@DuiLib@@UBEPAVCPaintManagerUI@2@XZ
?SetName@CControlUI@DuiLib@@UAEXPB_W@Z
?GetName@CControlUI@DuiLib@@UBE?AVCDuiString@2@XZ
??1CListContainerElementUI@DuiLib@@UAE@XZ
?GetAccProxyObject@CListElementUI@DuiLib@@UAEPAVCAccProxyObject@2@XZ
?SetAttribute@CListElementUI@DuiLib@@UAEXPB_W0@Z
?Activate@CListElementUI@DuiLib@@UAE_NXZ
?SetVisible@CListElementUI@DuiLib@@UAEX_N@Z
?SetEnabled@CListElementUI@DuiLib@@UAEX_N@Z
?GetControlFlags@CListElementUI@DuiLib@@UBEIXZ
?SendMessageW@CWindowWnd@DuiLib@@QAEJIIJ@Z
?GetHWND@CWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
?ToPixel@CHighDpi@DuiLib@@SA?AUtagRECT@@ABU3@@Z
?IsIdenticalScale@CHighDpi@DuiLib@@SA_NXZ
?DoPaint@CListLabelElementUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@@Z
?EstimateSize@CListLabelElementUI@DuiLib@@UAE?AUtagSIZE@@U3@_N@Z
?DoEvent@CListLabelElementUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z
?GetInterface@CListLabelElementUI@DuiLib@@UAEPAXPB_W@Z
?GetClass@CListLabelElementUI@DuiLib@@UBEPB_WXZ
??0CListLabelElementUI@DuiLib@@QAE@XZ
?GetEdit@CComboUI@DuiLib@@QAEPAVCRichEditUI@2@XZ
?SetForeStatusImage@CButtonUI@DuiLib@@QAEXPB_W@Z
?SetDisabledImage@CButtonUI@DuiLib@@QAEXPB_W@Z
?SetPushedImage@CButtonUI@DuiLib@@QAEXPB_W@Z
?SetHotImage@CButtonUI@DuiLib@@QAEXPB_W@Z
?SetNormalImage@CButtonUI@DuiLib@@QAEXPB_W@Z
?IsSelected@COptionUI@DuiLib@@QBE_NXZ
?SetSelectedImage@COptionUI@DuiLib@@QAEXPB_W@Z
?SelectItem@CTabLayoutUI@DuiLib@@QAE_NH@Z
?SetTextColor@CLabelUI@DuiLib@@QAEXK@Z
?DoInit@CControlUI@DuiLib@@UAEXXZ
?FindControl@CControlUI@DuiLib@@UAEPAV12@P6GPAV12@PAV12@PAX@Z1I@Z
?SetMouseEnabled@CControlUI@DuiLib@@UAEX_N@Z
?SetInternVisible@CControlUI@DuiLib@@UAEX_N@Z
?SetPos@CControlUI@DuiLib@@UAEXUtagRECT@@_N@Z
?SetBkColor@CControlUI@DuiLib@@QAEXK@Z
?SetManager@CControlUI@DuiLib@@UAEXPAVCPaintManagerUI@2@PAV12@_N@Z
??1CListLabelElementUI@DuiLib@@UAE@XZ
?GetCheck@CCheckBoxUI@DuiLib@@QBE_NXZ
?SetCheck@CCheckBoxUI@DuiLib@@QAEX_N@Z
?SetShowHtml@CLabelUI@DuiLib@@QAEX_N@Z
?SetBkImage@CControlUI@DuiLib@@QAEXPB_W@Z
?Select@CListContainerElementUI@DuiLib@@UAE_N_N@Z
?IsSelected@CListContainerElementUI@DuiLib@@UBE_NXZ
?SendNotify@CPaintManagerUI@DuiLib@@QAEXPAVCControlUI@2@PB_WIJ_N@Z
?EnsureVisibleEx@CListUI@DuiLib@@QAEXH@Z
?ToLogic@CHighDpi@DuiLib@@SA?AUtagRECT@@ABU3@@Z
?ToLogic@CHighDpi@DuiLib@@SA?AVCRect@@ABV3@@Z
?GetTextSizeGDI@CRenderEngine@DuiLib@@SA?AUtagSIZE@@PAUHDC__@@PAVCPaintManagerUI@2@PB_WHIUtagRECT@@_N@Z
?GetPaintDC@CPaintManagerUI@DuiLib@@QBEPAUHDC__@@XZ
?GetFont@CLabelUI@DuiLib@@QBEHXZ
?SetResourcePath@CPaintManagerUI@DuiLib@@SAXPB_W@Z
?SetResourceDll@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?GetInstancePath@CPaintManagerUI@DuiLib@@SA?AVCDuiString@2@XZ
??BCDuiString@DuiLib@@QBEPB_WXZ
?TranslateMessage@CPaintManagerUI@DuiLib@@SA_NQAUtagMSG@@@Z
?ToPixel@CHighDpi@DuiLib@@SAJJ@Z
?ToPixel@CHighDpi@DuiLib@@SAII@Z
?GetClassStyle@CWindowWnd@DuiLib@@MBEIXZ
??0CWindowWnd@DuiLib@@QAE@XZ
?ToLogic@CHighDpi@DuiLib@@SAHH@Z
?ToPixel@CHighDpi@DuiLib@@SAHH@Z
?CreateFontIndirectHdpi@CHighDpi@DuiLib@@SAPAUHFONT__@@PBUtagLOGFONTW@@@Z
?ScreenToClientHdpi@CHighDpi@DuiLib@@SAHPAUHWND__@@PAUtagPOINT@@@Z
?ClientToScreenHdpi@CHighDpi@DuiLib@@SAHPAUHWND__@@PAUtagPOINT@@@Z
?GetClientRectHdpi@CHighDpi@DuiLib@@SAHPAUHWND__@@PAUtagRECT@@@Z
?GetWindowRectHdpi@CHighDpi@DuiLib@@SAHPAUHWND__@@PAUtagRECT@@@Z
?SetWindowPosHdpi@CHighDpi@DuiLib@@SAHPAUHWND__@@0HHHHI@Z
?MoveWindowHdpi@CHighDpi@DuiLib@@SAHPAUHWND__@@HHHHH@Z
?GetFontInfo@CPaintManagerUI@DuiLib@@QAEPAUtagTFontInfo@2@H@Z
?GetCustomFontCount@CPaintManagerUI@DuiLib@@QBEKXZ
??4CDuiString@DuiLib@@QAEABV01@PB_W@Z
?DrawTextW@CRenderEngine@DuiLib@@SAXPAUHDC__@@PAVCPaintManagerUI@2@AAUtagRECT@@PB_WKHI_N@Z
?DrawColor@CRenderEngine@DuiLib@@SAXPAUHDC__@@ABUtagRECT@@K@Z
?IsEmpty@CDuiString@DuiLib@@QBE_NXZ
?Empty@CDuiString@DuiLib@@QAEXXZ
??0CDuiString@DuiLib@@QAE@XZ
?GetAccProxyObject@CControlUI@DuiLib@@UAEPAVCAccProxyObject@2@XZ
?DoPaint@CControlUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@@Z
?SetAttribute@CControlUI@DuiLib@@UAEXPB_W0@Z
?DoEvent@CControlUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z
?GetAdjustColor@CControlUI@DuiLib@@QAEKK@Z
?Invalidate@CControlUI@DuiLib@@QAEXXZ
?SetEnabled@CControlUI@DuiLib@@UAEX_N@Z
?SetVisible@CControlUI@DuiLib@@UAEX_N@Z
?DrawImage@CControlUI@DuiLib@@QAE_NPAUHDC__@@PB_W1@Z
?Activate@CControlUI@DuiLib@@UAE_NXZ
?GetInterface@CControlUI@DuiLib@@UAEPAXPB_W@Z
??1CControlUI@DuiLib@@UAE@XZ
??0CControlUI@DuiLib@@QAE@XZ
?ToLogic@CHighDpi@DuiLib@@SA?AUtagPOINT@@ABU3@@Z
?ToPixel@CHighDpi@DuiLib@@SA?AVCRect@@ABV3@@Z
?WindowFromPointHdpi@CHighDpi@DuiLib@@SAPAUHWND__@@UtagPOINT@@@Z
?InvalidateRectHdpi@CHighDpi@DuiLib@@SAHPAUHWND__@@PBUtagRECT@@H@Z
?GetNearScreenRectByPointHdpi@CHighDpi@DuiLib@@SA?AUtagRECT@@AAUtagPOINT@@_N@Z
?GetSharedHdpi@CHighDpi@DuiLib@@SAAAV12@XZ
?AccNotifyEvent@DuiLib@@YAXKPAUHWND__@@JJ@Z
??ZCEventSource@DuiLib@@QAEXABVCDelegateBase@1@@Z
?SetFont@CLabelUI@DuiLib@@QAEXH@Z
?SetAttribute@CContainerUI@DuiLib@@UAEXPB_W0@Z
?DoPaint@CContainerUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@@Z
?SetVisible@CContainerUI@DuiLib@@UAEX_N@Z
?DoEvent@CContainerUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z
?GetInterface@CContainerUI@DuiLib@@UAEPAXPB_W@Z
?GetClass@CContainerUI@DuiLib@@UBEPB_WXZ
??1CContainerUI@DuiLib@@UAE@XZ
??0CContainerUI@DuiLib@@QAE@XZ
?GetControlFlags@CControlUI@DuiLib@@UBEIXZ
?GetTextPadding@CLabelUI@DuiLib@@QBE?AUtagRECT@@_N@Z
?GetClass@CControlUI@DuiLib@@UBEPB_WXZ
?SetValue@CProgressUI@DuiLib@@QAEXH@Z
?SetIcon@CIconUI@DuiLib@@QAEXPAUHICON__@@@Z
?ToLogic@CHighDpi@DuiLib@@SA?AUtagSIZE@@ABU3@@Z
?SetTextPadding@CLabelUI@DuiLib@@QAEXUtagRECT@@_N@Z
?ApplyAttributeList@CControlUI@DuiLib@@QAEPAV12@PB_W@Z
?GetFitContentSize@CRichEditUI@DuiLib@@QAE?AUtagSIZE@@H_N@Z
?SetAutoURLDetect@CRichEditUI@DuiLib@@QAE_N_N@Z
?SetForeImage@CButtonUI@DuiLib@@QAEXPB_W@Z
?GetTextServices@CRichEditUI@DuiLib@@QAEPAVITextServices@@XZ
?GetClientArea@CContainerUI@DuiLib@@QBE?AUtagSIZE@@_N@Z
?SetSelAll@CEditUI@DuiLib@@QAEXXZ
?GetGroup@COptionUI@DuiLib@@QBEPB_WXZ
?SetSelAll@CMeetingNumberEditUI@DuiLib@@QAEXXZ
?SetNativeEditBkColor@CMeetingNumberEditUI@DuiLib@@QAEXK@Z
?SetReadOnly@CMeetingNumberEditUI@DuiLib@@QAEX_N@Z
?SetWinObject@CWinObjectUI@DuiLib@@QAEXPAUHWND__@@@Z
?GetNearScreenRectHdpi@CHighDpi@DuiLib@@SA?AUtagRECT@@PAUHWND__@@_N@Z
?GetPaintWindow@CPaintManagerUI@DuiLib@@QBEPAUHWND__@@XZ
?SetBubbleText@CBubbleButtonUI@DuiLib@@QAEXPB_W@Z
?FitWindowRectHdpi@CHighDpi@DuiLib@@SA?AUtagRECT@@HHHH@Z
?SelectItem@CTabLayoutUI@DuiLib@@QAE_NPAVCControlUI@2@@Z
?SetBubbleRect@CBubbleOptionUI@DuiLib@@QAEXUtagRECT@@_N@Z
?SetBubbleText@CBubbleOptionUI@DuiLib@@QAEXPB_W@Z
?KillTimer@CPaintManagerUI@DuiLib@@QAE_NPAVCControlUI@2@I@Z
?SetTimer@CPaintManagerUI@DuiLib@@QAE_NPAVCControlUI@2@II@Z
?GetCursorPosHdpi@CHighDpi@DuiLib@@SAHPAUtagPOINT@@@Z
?SendNotify@CPaintManagerUI@DuiLib@@QAEXAAUtagTNotifyUI@2@_N@Z
?SetPromptText@CMeetingNumberEditUI@DuiLib@@QAEXPB_W@Z
??1CDialogBuilder@DuiLib@@QAE@XZ
??0CDialogBuilder@DuiLib@@QAE@XZ
?Create@CDialogBuilder@DuiLib@@QAEPAVCControlUI@2@VSTRINGorID@2@PB_WPAVIDialogBuilderCallback@2@PAVCPaintManagerUI@2@PAV32@@Z
?Play@CGifImageUI@DuiLib@@QAEXXZ
?Stop@CGifImageUI@DuiLib@@QAEXXZ
??8CDuiString@DuiLib@@QBE_NPB_W@Z
??0CPaintManagerUI@DuiLib@@QAE@XZ
??1CPaintManagerUI@DuiLib@@QAE@XZ
?Init@CPaintManagerUI@DuiLib@@QAEXPAUHWND__@@@Z
?AttachDialog@CPaintManagerUI@DuiLib@@QAE_NPAVCControlUI@2@@Z
?AddNotifier@CPaintManagerUI@DuiLib@@QAE_NPAVINotifyUI@2@@Z
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
?MessageHandler@CPaintManagerUI@DuiLib@@QAE_NIIJAAJ@Z
?PostMessageW@CWindowWnd@DuiLib@@QAEJIIJ@Z
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
?HandleMessage@CWindowWnd@DuiLib@@MAEJIIJ@Z
?Add@CContainerUI@DuiLib@@UAE_NPAVCControlUI@2@@Z

reslib

LoadResXml
ReslibStartup
ReslibShutdown
?LoadMenuW@@YAPAUHMENU__@@I@Z
LoadStringFromRes

msaalib

ZAccCreateProxyObject
ZAccDestroyProxyObject

oleacc

LresultFromObject

kernel32

GetTickCount
GetVersionExW
GetTimeZoneInformation
GetModuleHandleA
GetFileSize
ReadFile
CreateFileW
GlobalFree
LockResource
CloseHandle
lstrcpynW
CopyFileW
GetFileAttributesW
EnumTimeFormatsW
FindFirstFileW
FindClose
GetCommandLineW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetCurrentProcess
GlobalLock
GlobalAlloc
LoadLibraryW
LeaveCriticalSection
GetUserDefaultUILanguage
DeleteCriticalSection
lstrcmpiW
lstrlenW
MultiByteToWideChar
GetModuleFileNameW
SizeofResource
InitializeCriticalSection
GetModuleHandleW
LoadLibraryExW
LoadResource
FindResourceW
OutputDebugStringW
VirtualProtectEx
GetLastError
Sleep
GetCurrentThreadId
EnterCriticalSection
GetProcAddress
SetLastError
RaiseException
FlushInstructionCache
GlobalUnlock
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeLibrary

user32

OpenClipboard
UnregisterClassA
CopyRect
OffsetRect
GetMenu
MoveWindow
SetCapture
SetRectEmpty
SetRect
ReleaseCapture
TrackPopupMenuEx
AppendMenuW
CreatePopupMenu
GetMenuItemCount
RemoveMenu
FillRect
AdjustWindowRectEx
GetSystemMetrics
SetFocus
IntersectRect
FlashWindowEx
GetActiveWindow
mouse_event
TrackPopupMenu
GetSubMenu
DeleteMenu
EnableMenuItem
GetCursorPos
DestroyMenu
CheckMenuItem
EndPaint
UpdateLayeredWindow
TrackMouseEvent
BeginPaint
GetDC
InvalidateRect
GetAncestor
ReleaseDC
IsRectEmpty
SetCursor
GetWindowTextLengthW
IsWindow
ShowWindow
SetWindowLongW
EmptyClipboard
GetWindowLongW
RegisterClassExW
GetClassInfoExW
SetParent
LoadCursorW
CloseClipboard
DestroyWindow
KillTimer
SetTimer
DefWindowProcW
CallWindowProcW
LoadIconW
SetForegroundWindow
LoadImageW
RegisterWindowMessageW
DispatchMessageW
TranslateMessage
GetMessageW
SystemParametersInfoW
PtInRect
CharNextW
RegisterClassW
PostMessageW
PostQuitMessage
IsWindowVisible
MonitorFromRect
GetWindowThreadProcessId
GetMonitorInfoW
SetWindowPos
GetDesktopWindow
MonitorFromWindow
BringWindowToTop
GetWindowPlacement
GetForegroundWindow
SetPropW
GetClientRect
AttachThreadInput
IsIconic
SetClipboardData
MonitorFromPoint
GetWindowRect
RemovePropW
ClientToScreen
GetWindow
DestroyIcon
SetWindowTextW
MapWindowPoints
SendMessageW
SetLayeredWindowAttributes
GetWindowTextW
GetParent
IsZoomed
DrawTextW
CreateWindowExW

gdi32

CreateICW
EnumFontFamiliesW
SetStretchBltMode
CreateCompatibleDC
SelectObject
DeleteObject
SetBrushOrgEx
StretchBlt
BitBlt
GetStockObject
GetObjectW
GetTextMetricsW
CreateDIBSection
CreateSolidBrush
CreateCompatibleBitmap
SetBkMode
SetBkColor
SetTextColor
DeleteDC

comdlg32

CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW

advapi32

RegCloseKey
RegQueryInfoKeyW
GetUserNameW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW

shell32

DragQueryFileW
ShellExecuteW
Shell_NotifyIconW
CommandLineToArgvW
SHGetFileInfoW
DragAcceptFiles
DragFinish

ole32

CreateStreamOnHGlobal
CLSIDFromProgID
PropVariantClear
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance

oleaut32

VarUI4FromStr

shlwapi

SHStrDupW

comctl32

InitCommonControlsEx

msimg32

AlphaBlend

msvcp90

?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z

gdiplus

GdipDeleteStringFormat
GdipReleaseDC
GdipSetStringFormatTrimming
GdipCreateStringFormat
GdipCreateFontFamilyFromName
GdipDrawString
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipSetStringFormatAlign
ord1
GdipSetTextRenderingHint
GdipSetStringFormatLineAlign
GdipMeasureString
GdipSetStringFormatFlags
GdipFillPath
GdipClosePathFigure
GdipSetSmoothingMode
GdipImageGetFrameCount
GdipGetImageWidth
GdipCloneImage
GdipFillRectangleI
GdipSetInterpolationMode
GdipImageGetFrameDimensionsCount
GdipSaveImageToFile
GdipCreateFromHDC
GdipCreateHBITMAPFromBitmap
GdipGetDC
GdipGetImageEncoders
GdipCreateImageAttributes
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipGetImageEncodersSize
GdipAlloc
GdipDisposeImageAttributes
GdipCreateSolidFill
GdipCreateTexture
GdipGetPropertyItem
GdipImageSelectActiveFrame
GdipImageGetFrameDimensionsList
GdipSetImageAttributesWrapMode
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipDrawImageRectRectI
GdipGetImageHeight
GdipCloneBrush
GdipFree
GdipDeleteBrush
GdipCreatePath
GdipDeletePath
GdipCreateHICONFromBitmap
GdipGetPropertyItemSize
GdipDeleteFontFamily
GdipDeleteFont

msvcr90

_CxxThrowException
??_V@YAXPAX@Z
??2@YAPAXI@Z
memmove_s
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
memcpy
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
_purecall
wcschr
swprintf_s
_recalloc
vswprintf_s
wcscpy_s
_wcstoi64
wcsncpy_s
free
malloc
wcsstr
memcpy_s
_wtoi
_wtoi64
_i64tow_s
_wsplitpath_s
_wcsicmp
sprintf_s
_CIsqrt
__RTDynamicCast
sscanf
modf
strpbrk
exit
memset
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
__CxxFrameHandler3
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
??3@YAXPAX@Z

winmm

PlaySoundW

Exports

Exports

??4_Init_locks@std@@QAEAAV01@ABV01@@Z
InitModule
TermModule

Sections

.text
Size: 502KB - Virtual size: 502KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c6f8a8f237bc62bc603a341c42cbbc62

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

03:01Certificate

Key Usages

04:7c:1f:dc:21:08:01Certificate

Extended Key Usages

Key Usages

ad:a0:4f:50:90:41:52:3a:b2:0d:0d:8f:27:0b:55:f6:6a:ed:78:beSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

cmmlib

duilib

reslib

msaalib

oleacc

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

msvcp90

gdiplus

msvcr90

winmm

Exports

Exports

Sections

.text Size: 502KB - Virtual size: 502KB

.rdata Size: 159KB - Virtual size: 158KB

.data Size: 8KB - Virtual size: 17KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 64KB - Virtual size: 63KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

03:01
Certificate

04:7c:1f:dc:21:08:01
Certificate

ad:a0:4f:50:90:41:52:3a:b2:0d:0d:8f:27:0b:55:f6:6a:ed:78:be
Signer

.text
Size: 502KB - Virtual size: 502KB

.rdata
Size: 159KB - Virtual size: 158KB

.data
Size: 8KB - Virtual size: 17KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 64KB - Virtual size: 63KB