SoulFire_1[.]5[.]0_x64-setup[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

SoulFire_1.5.0_x64-setup.exe
Size

8.2MB
MD5

17facffb7ff2d037aa7343208fa9e87b
SHA1

6e0cbd7be4d5a636af5ccee1e2430a5bc5d4d5e5
SHA256

16ffaf27dd114ea94909a5efe89b2629e5130946d8abddf7916cd4c90a4de70b
SHA512

61099619f37f6dccf9dd61dde876eb2931749f69a71c9fe3489a1d27521ffc2e6b6d978e6ae21870507170177dadbd9366b9e3ac0197d03f55c5e889ad59e018
SSDEEP

196608:PM7G67Kf/dMZ9E4HPNTleb6U/5DUTXhSdBusW:Pu7QMZ9ETb6UxDSQusW

Score

3^/10

Malware Config

Signatures

Unsigned PE 11 IoCs

Checks for missing Authenticode signature.

resource
SoulFire_1.5.0_x64-setup.exe
unpack001/$PLUGINSDIR/NSISdl.dll
unpack001/$PLUGINSDIR/StartMenu.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsis_tauri_utils.dll
unpack001/soulfire.exe
unpack001/uninstall.exe
unpack002/$PLUGINSDIR/LangDLL.dll
unpack002/$PLUGINSDIR/System.dll
unpack002/$PLUGINSDIR/nsis_tauri_utils.dll

Files

SoulFire_1.5.0_x64-setup.exe
.exe windows:4 windows x86 arch:x86

61259b55b8912888e90f516ca08dc514

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegEnumValueW

shell32

SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW

ole32

OleInitialize
OleUninitialize
CoCreateInstance
IIDFromString
CoTaskMemFree

comctl32

ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked

user32

GetClientRect
EndPaint
DrawTextW
IsWindowEnabled
DispatchMessageW
wsprintfA
CharNextA
CharPrevW
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
GetSystemMetrics
FillRect
AppendMenuW
TrackPopupMenu
OpenClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
PeekMessageW
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EmptyClipboard
CreatePopupMenu

gdi32

SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject

kernel32

GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
lstrcatW
Sleep
lstrcpyA
WriteFile
GetTempFileNameW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
CopyFileW
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
CreateFileW
GetTickCount
MulDiv
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
MoveFileExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/NSISdl.dll
.dll windows:4 windows x86 arch:x86

ed06d61f6957c32cd324837726a5a070

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

wsock32

__WSAFDIsSet
WSAStartup
WSACleanup
send
WSAGetLastError
recv
select
connect
shutdown
closesocket
socket
htons
inet_ntoa
ioctlsocket
gethostbyname

user32

SetWindowLongW
CharPrevA
SetDlgItemTextA
RegisterWindowMessageW
DestroyWindow
EnableWindow
wsprintfA
CallWindowProcW
CreateWindowExW
GetClientRect
ShowWindow
IsWindowVisible
GetFocus
GetDlgItem
FindWindowExW
SetWindowTextA
GetWindowRect
SendMessageW
GetWindowLongW

kernel32

MultiByteToWideChar
WideCharToMultiByte
lstrcpynW
lstrcpyW
CreateFileW
WriteFile
Sleep
DeleteFileW
GetTickCount
MulDiv
GlobalFree
GlobalAlloc
lstrcatA
lstrlenA
lstrcpynA
WaitForSingleObject
CloseHandle
lstrcmpiA
CreateThread
lstrcpyA

Exports

Exports

download
download_quiet

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 882B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/StartMenu.dll
.dll windows:4 windows x86 arch:x86

80469f6834e579db68a646d49780b9d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatW
FindClose
FindNextFileW
lstrcmpW
GetModuleHandleW
lstrcmpiW
MulDiv
lstrcpynW
GlobalAlloc
lstrcpyW
FindFirstFileW
GlobalFree

user32

GetMessageW
TranslateMessage
PostMessageW
DispatchMessageW
GetDlgItem
GetWindowLongW
CheckDlgButton
ShowWindow
LoadIconW
GetClientRect
MoveWindow
DestroyWindow
GetWindowRect
ReleaseDC
GetDC
EnableWindow
SetWindowTextW
SendMessageW
IsDlgButtonChecked
GetWindowTextW
CreateDialogParamW
SetWindowLongW
wsprintfW
ScreenToClient
IsDialogMessageW
CallWindowProcW

gdi32

GetTextMetricsW
SelectObject

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListW

ole32

CoTaskMemFree

Exports

Exports

Init
Select
Show

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError

user32

wsprintfW

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/modern-wizard.bmp
$PLUGINSDIR/nsDialogs.dll
.dll windows:4 windows x86 arch:x86

6b5c4f7d679059f68f1269aad3a5cecd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetFileAttributesW
lstrcpyW
MulDiv
lstrlenW
HeapFree
GetCurrentDirectoryW
lstrcmpiW
GetProcessHeap
HeapReAlloc
GlobalFree
lstrcpynW
GlobalAlloc
SetCurrentDirectoryW
HeapAlloc

user32

DestroyWindow
CallWindowProcW
SetCursor
LoadCursorW
GetPropW
CharPrevW
DrawFocusRect
GetWindowLongW
DrawTextW
GetClientRect
SetWindowLongW
GetDlgItem
GetSysColor
SetWindowPos
CreateDialogParamW
MapDialogRect
GetWindowRect
SetPropW
CreateWindowExW
IsWindow
SetTimer
KillTimer
DispatchMessageW
TranslateMessage
GetMessageW
IsDialogMessageW
ShowWindow
wsprintfW
CharNextW
SendMessageW
MapWindowPoints
RemovePropW
GetWindowTextW

gdi32

SetTextColor

shell32

SHBrowseForFolderW
SHGetPathFromIDListW

comdlg32

GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 638B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsis_tauri_utils.dll
.dll windows:6 windows x86 arch:x86

17cb20871354b907f678c7c220e4ca60

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

nsis_tauri_utils.pdb

Imports

kernel32

OpenProcess
ExitProcess
HeapAlloc
CloseHandle
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
HeapFree
TerminateProcess
GetProcessHeap
GlobalFree
InitializeProcThreadAttributeList
GetLastError
UpdateProcThreadAttribute
CreateProcessW
HeapReAlloc
GlobalAlloc
lstrcpyW

advapi32

GetTokenInformation
OpenProcessToken
EqualSid

user32

GetShellWindow
GetWindowThreadProcessId

Exports

Exports

DllMain
FindProcess
FindProcessCurrentUser
KillProcess
KillProcessCurrentUser
RunAsUser
SemverCompare
memcmp
memcpy
memset

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
soulfire.exe
.exe windows:6 windows x64 arch:x64

4bc26fe75b4a0348bd6690b8909fb71f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

soulfire.pdb

Imports

api-ms-win-core-synch-l1-2-0

WaitOnAddress
WakeByAddressAll
WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

SetFileAttributesW
GetCurrentProcess
DuplicateHandle
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
InitOnceExecuteOnce
TlsAlloc
TlsGetValue
TlsSetValue
RtlVirtualUnwind
LoadLibraryW
SetFilePointerEx
HeapFree
SetHandleInformation
HeapAlloc
GetProcessHeap
GetQueuedCompletionStatusEx
TlsFree
PostQueuedCompletionStatus
SetFileCompletionNotificationModes
CreateIoCompletionPort
WriteFile
ReadFile
GetOverlappedResult
CreateNamedPipeW
CreateEventW
CancelIoEx
SetNamedPipeHandleState
SetFileInformationByHandle
WaitNamedPipeW
CreatePipe
GlobalAlloc
GetCommandLineW
CreateMutexW
GlobalUnlock
GlobalSize
GetCurrentProcessId
GlobalLock
RegisterWaitForSingleObject
SetFileTime
FormatMessageW
GetStdHandle
GetConsoleMode
GetEnvironmentStringsW
lstrlenW
LoadLibraryA
GetExitCodeProcess
GetCurrentDirectoryW
SetLastError
WakeAllConditionVariable
SleepConditionVariableSRW
GetSystemTimeAsFileTime
GlobalFree
WideCharToMultiByte
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
RtlPcToFileHeader
GetCurrentThread
RtlLookupFunctionEntry
MultiByteToWideChar
RaiseException
RtlCaptureContext
QueryPerformanceCounter
SetWaitableTimer
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
CreateWaitableTimerExW
SwitchToThread
GetCurrentThreadId
SetThreadStackGuarantee
GetFileInformationByHandleEx
GetFileInformationByHandle
WaitForSingleObjectEx
CancelIo
CreateFileW
CreateSemaphoreW
ReadDirectoryChangesW
ReleaseSemaphore
LCIDToLocaleName
GetComputerNameExW
AddVectoredExceptionHandler
CompareStringOrdinal
DeleteProcThreadAttributeList
WaitForSingleObject
FreeEnvironmentStringsW
Sleep
UnregisterWait
GetUserPreferredUILanguages
EncodePointer
WriteFileEx
GetUserDefaultUILanguage
SleepEx
TerminateProcess
MoveFileExW
GetModuleHandleW
CreateMutexA
GetTempPathW
CreateThread
WriteConsoleW
GetModuleHandleA
GetProcessId
GetFileAttributesW
OutputDebugStringA
OutputDebugStringW
GetModuleFileNameW
UpdateProcThreadAttribute
InitializeProcThreadAttributeList
CreateProcessW
GetNativeSystemInfo
LoadLibraryExW
GetSystemInfo
FreeLibrary
GetEnvironmentVariableW
GetProcAddress
GetWindowsDirectoryW
GetSystemDirectoryW
GetFullPathNameW
WaitForMultipleObjects
ReadFileEx
ExitProcess
SetEnvironmentVariableW
LoadLibraryExA
GetLastError
CopyFileExW
GetFinalPathNameByHandleW
CreateHardLinkW
CreateSymbolicLinkW
DeviceIoControl
RemoveDirectoryW
DeleteFileW
FindFirstFileExW
CreateDirectoryW
FindClose
FindNextFileW
CloseHandle
HeapReAlloc
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
DeleteCriticalSection
QueryPerformanceFrequency
InitializeCriticalSectionAndSpinCount
ReleaseMutex
GetSystemTimePreciseAsFileTime

user32

GetWindowDC
OffsetRect
GetMenuBarInfo
PostQuitMessage
CheckMenuItem
GetMenuItemInfoW
SetMenuItemInfoW
AppendMenuW
InsertMenuW
CreateAcceleratorTableW
DestroyAcceleratorTable
CreatePopupMenu
CreateMenu
FindWindowW
DestroyMenu
DrawIconEx
DrawMenuBar
SetMenu
DrawTextW
TrackPopupMenu
KillTimer
RegisterClassW
EmptyClipboard
OpenClipboard
IsClipboardFormatAvailable
ToUnicodeEx
GetKeyboardLayout
SystemParametersInfoA
SetPropW
IsWindowVisible
GetMenu
SendInput
RegisterClassExW
DestroyIcon
SetForegroundWindow
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
SetTimer
MonitorFromPoint
EnumDisplayMonitors
GetClipboardData
MapVirtualKeyExW
GetKeyState
GetAsyncKeyState
GetKeyboardState
SetWindowDisplayAffinity
ClipCursor
GetClipCursor
CreateWindowExW
ShowCursor
SetWindowLongW
EnableMenuItem
GetSystemMenu
GetRawInputData
CreateIcon
SystemParametersInfoW
ReleaseCapture
SetCapture
MsgWaitForMultipleObjectsEx
RegisterRawInputDevices
GetWindowLongPtrW
SetWindowLongPtrW
DestroyWindow
GetForegroundWindow
IsProcessDPIAware
SetParent
ShowWindow
RegisterTouchWindow
IsWindow
AdjustWindowRectEx
FlashWindowEx
GetActiveWindow
UpdateWindow
InvalidateRect
SetCursorPos
MapWindowPoints
LoadCursorW
InvalidateRgn
GetWindowPlacement
SetWindowPlacement
RegisterWindowMessageA
ChangeDisplaySettingsExW
GetParent
SetWindowRgn
GetWindowRect
MapVirtualKeyW
GetUpdateRect
ValidateRect
GetMonitorInfoW
SetCursor
MonitorFromWindow
GetCursorPos
FindWindowExW
FillRect
IsWindowEnabled
CloseTouchInputHandle
GetTouchInputInfo
TrackMouseEvent
EnableWindow
MonitorFromRect
GetSystemMetrics
SetClipboardData
ClientToScreen
GetWindowLongW
ScreenToClient
GetDC
CloseClipboard
DefWindowProcW
PostThreadMessageW
PeekMessageW
DispatchMessageW
GetMessageW
RegisterClipboardFormatW
IsIconic
EnumChildWindows
DispatchMessageA
TranslateMessage
GetMessageA
SetWindowPos
GetClientRect
ReleaseDC
RedrawWindow
AdjustWindowRect
RemoveMenu
SendMessageW
PostMessageW
TranslateAcceleratorW

ws2_32

getaddrinfo
freeaddrinfo
WSAIoctl
closesocket
setsockopt
WSASend
WSARecv
getsockopt
getpeername
getsockname
shutdown
listen
send
recv
WSACleanup
WSAGetLastError
WSAStartup
connect
bind
sendto
ioctlsocket
WSASocketW

shell32

SHAppBarMessage
Shell_NotifyIconW
SHGetKnownFolderPath
DragFinish
ShellExecuteW
ShellExecuteExW
Shell_NotifyIconGetRect
DragQueryFileW
SHCreateItemFromParsingName

ole32

CoUninitialize
RegisterDragDrop
CoInitializeEx
CoTaskMemAlloc
OleInitialize
CoTaskMemFree
RevokeDragDrop
CoCreateInstance

comctl32

SetWindowSubclass
DefSubclassProc
TaskDialogIndirect
RemoveWindowSubclass

gdi32

SetBkMode
GetDeviceCaps
SetTextColor
DeleteDC
CreateRectRgn
CreateDIBSection
BitBlt
CombineRgn
DeleteObject
CreateCompatibleDC
CreateSolidBrush
SelectObject
CreateDIBitmap
GetDIBits

dwmapi

DwmEnableBlurBehindWindow
DwmGetWindowAttribute
DwmSetWindowAttribute

shlwapi

SHCreateMemStream

advapi32

ImpersonateAnonymousToken
SystemFunction036
RevertToSelf
RegOpenKeyExW
RegCloseKey
EventRegister
EventSetInformation
EventWriteTransfer
EventUnregister
RegGetValueW
RegQueryValueExW

iphlpapi

GetAdaptersAddresses

secur32

InitializeSecurityContextW
FreeCredentialsHandle
AcquireCredentialsHandleA
AcceptSecurityContext
EncryptMessage
QueryContextAttributesW
DeleteSecurityContext
DecryptMessage
FreeContextBuffer
ApplyControlToken

crypt32

CertFreeCertificateChain
CertDuplicateCertificateChain
CertEnumCertificatesInStore
CertAddCertificateContextToStore
CertOpenStore
CertDuplicateStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertCloseStore
CertVerifyCertificateChainPolicy
CertGetCertificateChain

ntdll

NtWriteFile
NtReadFile
NtDeviceIoControlFile
NtOpenFile
RtlNtStatusToDosError
NtCancelIoFileEx
NtCreateFile
RtlGetVersion

oleaut32

SetErrorInfo
GetErrorInfo
SysFreeString
SysStringLen

bcrypt

BCryptGenRandom

api-ms-win-crt-math-l1-1-0

pow
round
__setusermatherr
trunc
floor

api-ms-win-crt-string-l1-1-0

strcpy_s
strlen
strcmp
wcslen
wcsncmp
_wcsicmp
wcscmp
_strdup

api-ms-win-crt-runtime-l1-1-0

_set_app_type
terminate
_wassert
_register_thread_local_exe_atexit_callback
_crt_atexit
_c_exit
_register_onexit_function
_cexit
abort
__p___argv
__p___argc
_exit
exit
_initterm_e
strerror
_errno
_initterm
_get_initial_narrow_environment
_seh_filter_exe
_initialize_onexit_table
_configure_narrow_argv
_initialize_narrow_environment

api-ms-win-crt-heap-l1-1-0

calloc
_set_new_mode
_callnewh
malloc
free
realloc

api-ms-win-crt-convert-l1-1-0

_ultow_s
wcstol
strtol
_wtoi

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-stdio-l1-1-0

fwrite
ftell
fseek
fread
_set_fmode
fopen
_fileno
fgets
__acrt_iob_func
fflush
__stdio_common_vfprintf
__stdio_common_vsscanf
feof
fclose
__p__commode
_setmode
__stdio_common_vsprintf
fputs
ferror

api-ms-win-crt-utility-l1-1-0

bsearch
qsort_s
qsort

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Exports

Exports

aws_lc_0_22_0_AES_CMAC
aws_lc_0_22_0_AES_cbc_encrypt
aws_lc_0_22_0_AES_cfb128_encrypt
aws_lc_0_22_0_AES_ctr128_encrypt
aws_lc_0_22_0_AES_decrypt
aws_lc_0_22_0_AES_ecb_encrypt
aws_lc_0_22_0_AES_encrypt
aws_lc_0_22_0_AES_ofb128_encrypt
aws_lc_0_22_0_AES_set_decrypt_key
aws_lc_0_22_0_AES_set_encrypt_key
aws_lc_0_22_0_AES_unwrap_key
aws_lc_0_22_0_AES_unwrap_key_padded
aws_lc_0_22_0_AES_wrap_key
aws_lc_0_22_0_AES_wrap_key_padded
aws_lc_0_22_0_ASN1_OBJECT_create
aws_lc_0_22_0_ASN1_OBJECT_free
aws_lc_0_22_0_BIO_append_filename
aws_lc_0_22_0_BIO_callback_ctrl
aws_lc_0_22_0_BIO_clear_flags
aws_lc_0_22_0_BIO_clear_retry_flags
aws_lc_0_22_0_BIO_copy_next_retry
aws_lc_0_22_0_BIO_ctrl
aws_lc_0_22_0_BIO_ctrl_pending
aws_lc_0_22_0_BIO_eof
aws_lc_0_22_0_BIO_find_type
aws_lc_0_22_0_BIO_flush
aws_lc_0_22_0_BIO_free
aws_lc_0_22_0_BIO_free_all
aws_lc_0_22_0_BIO_get_callback_arg
aws_lc_0_22_0_BIO_get_data
aws_lc_0_22_0_BIO_get_ex_data
aws_lc_0_22_0_BIO_get_ex_new_index
aws_lc_0_22_0_BIO_get_fp
aws_lc_0_22_0_BIO_get_init
aws_lc_0_22_0_BIO_get_new_index
aws_lc_0_22_0_BIO_get_retry_flags
aws_lc_0_22_0_BIO_get_retry_reason
aws_lc_0_22_0_BIO_get_shutdown
aws_lc_0_22_0_BIO_gets
aws_lc_0_22_0_BIO_indent
aws_lc_0_22_0_BIO_int_ctrl
aws_lc_0_22_0_BIO_meth_free
aws_lc_0_22_0_BIO_meth_get_callback_ctrl
aws_lc_0_22_0_BIO_meth_get_create
aws_lc_0_22_0_BIO_meth_get_ctrl
aws_lc_0_22_0_BIO_meth_get_destroy
aws_lc_0_22_0_BIO_meth_get_gets
aws_lc_0_22_0_BIO_meth_get_puts
aws_lc_0_22_0_BIO_meth_new
aws_lc_0_22_0_BIO_meth_set_callback_ctrl
aws_lc_0_22_0_BIO_meth_set_create
aws_lc_0_22_0_BIO_meth_set_ctrl
aws_lc_0_22_0_BIO_meth_set_destroy
aws_lc_0_22_0_BIO_meth_set_gets
aws_lc_0_22_0_BIO_meth_set_puts
aws_lc_0_22_0_BIO_meth_set_read
aws_lc_0_22_0_BIO_meth_set_write
aws_lc_0_22_0_BIO_method_name
aws_lc_0_22_0_BIO_method_type
aws_lc_0_22_0_BIO_new
aws_lc_0_22_0_BIO_new_file
aws_lc_0_22_0_BIO_new_fp
aws_lc_0_22_0_BIO_next
aws_lc_0_22_0_BIO_number_read
aws_lc_0_22_0_BIO_number_written
aws_lc_0_22_0_BIO_pending
aws_lc_0_22_0_BIO_pop
aws_lc_0_22_0_BIO_printf
aws_lc_0_22_0_BIO_ptr_ctrl
aws_lc_0_22_0_BIO_push
aws_lc_0_22_0_BIO_puts
aws_lc_0_22_0_BIO_read
aws_lc_0_22_0_BIO_read_asn1
aws_lc_0_22_0_BIO_read_ex
aws_lc_0_22_0_BIO_read_filename
aws_lc_0_22_0_BIO_reset
aws_lc_0_22_0_BIO_rw_filename
aws_lc_0_22_0_BIO_s_file
aws_lc_0_22_0_BIO_seek
aws_lc_0_22_0_BIO_set_callback_arg
aws_lc_0_22_0_BIO_set_callback_ex
aws_lc_0_22_0_BIO_set_close
aws_lc_0_22_0_BIO_set_data
aws_lc_0_22_0_BIO_set_ex_data
aws_lc_0_22_0_BIO_set_flags
aws_lc_0_22_0_BIO_set_fp
aws_lc_0_22_0_BIO_set_init
aws_lc_0_22_0_BIO_set_retry_read
aws_lc_0_22_0_BIO_set_retry_reason
aws_lc_0_22_0_BIO_set_retry_special
aws_lc_0_22_0_BIO_set_retry_write
aws_lc_0_22_0_BIO_set_shutdown
aws_lc_0_22_0_BIO_set_write_buffer_size
aws_lc_0_22_0_BIO_should_io_special
aws_lc_0_22_0_BIO_should_read
aws_lc_0_22_0_BIO_should_retry
aws_lc_0_22_0_BIO_should_write
aws_lc_0_22_0_BIO_snprintf
aws_lc_0_22_0_BIO_tell
aws_lc_0_22_0_BIO_test_flags
aws_lc_0_22_0_BIO_up_ref
aws_lc_0_22_0_BIO_vfree
aws_lc_0_22_0_BIO_vsnprintf
aws_lc_0_22_0_BIO_wpending
aws_lc_0_22_0_BIO_write
aws_lc_0_22_0_BIO_write_all
aws_lc_0_22_0_BIO_write_ex
aws_lc_0_22_0_BIO_write_filename
aws_lc_0_22_0_BLAKE2B256
aws_lc_0_22_0_BLAKE2B256_Final
aws_lc_0_22_0_BLAKE2B256_Init
aws_lc_0_22_0_BLAKE2B256_Update
aws_lc_0_22_0_BN_CTX_end
aws_lc_0_22_0_BN_CTX_free
aws_lc_0_22_0_BN_CTX_get
aws_lc_0_22_0_BN_CTX_new
aws_lc_0_22_0_BN_CTX_secure_new
aws_lc_0_22_0_BN_CTX_start
aws_lc_0_22_0_BN_GENCB_call
aws_lc_0_22_0_BN_GENCB_free
aws_lc_0_22_0_BN_GENCB_get_arg
aws_lc_0_22_0_BN_GENCB_new
aws_lc_0_22_0_BN_GENCB_set
aws_lc_0_22_0_BN_GENCB_set_old
aws_lc_0_22_0_BN_MONT_CTX_copy
aws_lc_0_22_0_BN_MONT_CTX_free
aws_lc_0_22_0_BN_MONT_CTX_new
aws_lc_0_22_0_BN_MONT_CTX_new_consttime
aws_lc_0_22_0_BN_MONT_CTX_new_for_modulus
aws_lc_0_22_0_BN_MONT_CTX_set
aws_lc_0_22_0_BN_abs_is_word
aws_lc_0_22_0_BN_add
aws_lc_0_22_0_BN_add_word
aws_lc_0_22_0_BN_asc2bn
aws_lc_0_22_0_BN_bin2bn
aws_lc_0_22_0_BN_bn2bin
aws_lc_0_22_0_BN_bn2bin_padded
aws_lc_0_22_0_BN_bn2binpad
aws_lc_0_22_0_BN_bn2cbb_padded
aws_lc_0_22_0_BN_bn2dec
aws_lc_0_22_0_BN_bn2hex
aws_lc_0_22_0_BN_bn2le_padded
aws_lc_0_22_0_BN_bn2mpi
aws_lc_0_22_0_BN_clear
aws_lc_0_22_0_BN_clear_bit
aws_lc_0_22_0_BN_clear_free
aws_lc_0_22_0_BN_cmp
aws_lc_0_22_0_BN_cmp_word
aws_lc_0_22_0_BN_copy
aws_lc_0_22_0_BN_count_low_zero_bits
aws_lc_0_22_0_BN_dec2bn
aws_lc_0_22_0_BN_div
aws_lc_0_22_0_BN_div_word
aws_lc_0_22_0_BN_dup
aws_lc_0_22_0_BN_enhanced_miller_rabin_primality_test
aws_lc_0_22_0_BN_equal_consttime
aws_lc_0_22_0_BN_exp
aws_lc_0_22_0_BN_free
aws_lc_0_22_0_BN_from_montgomery
aws_lc_0_22_0_BN_gcd
aws_lc_0_22_0_BN_generate_prime_ex
aws_lc_0_22_0_BN_get_flags
aws_lc_0_22_0_BN_get_u64
aws_lc_0_22_0_BN_get_word
aws_lc_0_22_0_BN_hex2bn
aws_lc_0_22_0_BN_init
aws_lc_0_22_0_BN_is_bit_set
aws_lc_0_22_0_BN_is_negative
aws_lc_0_22_0_BN_is_odd
aws_lc_0_22_0_BN_is_one
aws_lc_0_22_0_BN_is_pow2
aws_lc_0_22_0_BN_is_prime_ex
aws_lc_0_22_0_BN_is_prime_fasttest_ex
aws_lc_0_22_0_BN_is_word
aws_lc_0_22_0_BN_is_zero
aws_lc_0_22_0_BN_le2bn
aws_lc_0_22_0_BN_lshift
aws_lc_0_22_0_BN_lshift1
aws_lc_0_22_0_BN_marshal_asn1
aws_lc_0_22_0_BN_mask_bits
aws_lc_0_22_0_BN_mod_add
aws_lc_0_22_0_BN_mod_add_quick
aws_lc_0_22_0_BN_mod_exp
aws_lc_0_22_0_BN_mod_exp2_mont
aws_lc_0_22_0_BN_mod_exp_mont
aws_lc_0_22_0_BN_mod_exp_mont_consttime
aws_lc_0_22_0_BN_mod_exp_mont_consttime_x2
aws_lc_0_22_0_BN_mod_exp_mont_word
aws_lc_0_22_0_BN_mod_inverse
aws_lc_0_22_0_BN_mod_inverse_blinded
aws_lc_0_22_0_BN_mod_lshift
aws_lc_0_22_0_BN_mod_lshift1
aws_lc_0_22_0_BN_mod_lshift1_quick
aws_lc_0_22_0_BN_mod_lshift_quick
aws_lc_0_22_0_BN_mod_mul
aws_lc_0_22_0_BN_mod_mul_montgomery
aws_lc_0_22_0_BN_mod_pow2
aws_lc_0_22_0_BN_mod_sqr
aws_lc_0_22_0_BN_mod_sqrt
aws_lc_0_22_0_BN_mod_sub
aws_lc_0_22_0_BN_mod_sub_quick
aws_lc_0_22_0_BN_mod_word
aws_lc_0_22_0_BN_mpi2bn
aws_lc_0_22_0_BN_mul
aws_lc_0_22_0_BN_mul_word
aws_lc_0_22_0_BN_new
aws_lc_0_22_0_BN_nnmod
aws_lc_0_22_0_BN_nnmod_pow2
aws_lc_0_22_0_BN_num_bits
aws_lc_0_22_0_BN_num_bits_word
aws_lc_0_22_0_BN_num_bytes
aws_lc_0_22_0_BN_one
aws_lc_0_22_0_BN_parse_asn1_unsigned
aws_lc_0_22_0_BN_primality_test
aws_lc_0_22_0_BN_print
aws_lc_0_22_0_BN_print_fp
aws_lc_0_22_0_BN_pseudo_rand
aws_lc_0_22_0_BN_pseudo_rand_range
aws_lc_0_22_0_BN_rand
aws_lc_0_22_0_BN_rand_range
aws_lc_0_22_0_BN_rand_range_ex
aws_lc_0_22_0_BN_rshift
aws_lc_0_22_0_BN_rshift1
aws_lc_0_22_0_BN_secure_new
aws_lc_0_22_0_BN_set_bit
aws_lc_0_22_0_BN_set_negative
aws_lc_0_22_0_BN_set_u64
aws_lc_0_22_0_BN_set_word
aws_lc_0_22_0_BN_sqr
aws_lc_0_22_0_BN_sqrt
aws_lc_0_22_0_BN_sub
aws_lc_0_22_0_BN_sub_word
aws_lc_0_22_0_BN_to_montgomery
aws_lc_0_22_0_BN_uadd
aws_lc_0_22_0_BN_ucmp
aws_lc_0_22_0_BN_usub
aws_lc_0_22_0_BN_value_one
aws_lc_0_22_0_BN_zero
aws_lc_0_22_0_BORINGSSL_self_test
aws_lc_0_22_0_CBB_add_asn1
aws_lc_0_22_0_CBB_add_asn1_bool
aws_lc_0_22_0_CBB_add_asn1_int64
aws_lc_0_22_0_CBB_add_asn1_int64_with_tag
aws_lc_0_22_0_CBB_add_asn1_octet_string
aws_lc_0_22_0_CBB_add_asn1_oid_from_text
aws_lc_0_22_0_CBB_add_asn1_uint64
aws_lc_0_22_0_CBB_add_asn1_uint64_with_tag
aws_lc_0_22_0_CBB_add_bytes
aws_lc_0_22_0_CBB_add_space
aws_lc_0_22_0_CBB_add_u16
aws_lc_0_22_0_CBB_add_u16_length_prefixed
aws_lc_0_22_0_CBB_add_u16le
aws_lc_0_22_0_CBB_add_u24
aws_lc_0_22_0_CBB_add_u24_length_prefixed
aws_lc_0_22_0_CBB_add_u32
aws_lc_0_22_0_CBB_add_u32le
aws_lc_0_22_0_CBB_add_u64
aws_lc_0_22_0_CBB_add_u64le
aws_lc_0_22_0_CBB_add_u8
aws_lc_0_22_0_CBB_add_u8_length_prefixed
aws_lc_0_22_0_CBB_add_zeros
aws_lc_0_22_0_CBB_cleanup
aws_lc_0_22_0_CBB_data
aws_lc_0_22_0_CBB_did_write
aws_lc_0_22_0_CBB_discard_child
aws_lc_0_22_0_CBB_finish
aws_lc_0_22_0_CBB_flush
aws_lc_0_22_0_CBB_flush_asn1_set_of
aws_lc_0_22_0_CBB_init
aws_lc_0_22_0_CBB_init_fixed
aws_lc_0_22_0_CBB_len
aws_lc_0_22_0_CBB_reserve
aws_lc_0_22_0_CBB_zero
aws_lc_0_22_0_CBS_asn1_bitstring_has_bit
aws_lc_0_22_0_CBS_asn1_oid_to_text
aws_lc_0_22_0_CBS_contains_zero_byte
aws_lc_0_22_0_CBS_copy_bytes
aws_lc_0_22_0_CBS_data
aws_lc_0_22_0_CBS_get_any_asn1
aws_lc_0_22_0_CBS_get_any_asn1_element
aws_lc_0_22_0_CBS_get_any_ber_asn1_element
aws_lc_0_22_0_CBS_get_asn1
aws_lc_0_22_0_CBS_get_asn1_bool
aws_lc_0_22_0_CBS_get_asn1_element
aws_lc_0_22_0_CBS_get_asn1_int64
aws_lc_0_22_0_CBS_get_asn1_uint64
aws_lc_0_22_0_CBS_get_bytes
aws_lc_0_22_0_CBS_get_last_u8
aws_lc_0_22_0_CBS_get_optional_asn1
aws_lc_0_22_0_CBS_get_optional_asn1_bool
aws_lc_0_22_0_CBS_get_optional_asn1_int64
aws_lc_0_22_0_CBS_get_optional_asn1_octet_string
aws_lc_0_22_0_CBS_get_optional_asn1_uint64
aws_lc_0_22_0_CBS_get_u16
aws_lc_0_22_0_CBS_get_u16_length_prefixed
aws_lc_0_22_0_CBS_get_u16le
aws_lc_0_22_0_CBS_get_u24
aws_lc_0_22_0_CBS_get_u24_length_prefixed
aws_lc_0_22_0_CBS_get_u32
aws_lc_0_22_0_CBS_get_u32le
aws_lc_0_22_0_CBS_get_u64
aws_lc_0_22_0_CBS_get_u64_decimal
aws_lc_0_22_0_CBS_get_u64le
aws_lc_0_22_0_CBS_get_u8
aws_lc_0_22_0_CBS_get_u8_length_prefixed
aws_lc_0_22_0_CBS_get_until_first
aws_lc_0_22_0_CBS_init
aws_lc_0_22_0_CBS_is_unsigned_asn1_integer
aws_lc_0_22_0_CBS_is_valid_asn1_bitstring
aws_lc_0_22_0_CBS_is_valid_asn1_integer
aws_lc_0_22_0_CBS_is_valid_asn1_oid
aws_lc_0_22_0_CBS_len
aws_lc_0_22_0_CBS_mem_equal
aws_lc_0_22_0_CBS_parse_generalized_time
aws_lc_0_22_0_CBS_parse_utc_time
aws_lc_0_22_0_CBS_peek_asn1_tag
aws_lc_0_22_0_CBS_skip
aws_lc_0_22_0_CBS_stow
aws_lc_0_22_0_CBS_strdup
aws_lc_0_22_0_CMAC_CTX_copy
aws_lc_0_22_0_CMAC_CTX_free
aws_lc_0_22_0_CMAC_CTX_get0_cipher_ctx
aws_lc_0_22_0_CMAC_CTX_new
aws_lc_0_22_0_CMAC_Final
aws_lc_0_22_0_CMAC_Init
aws_lc_0_22_0_CMAC_Reset
aws_lc_0_22_0_CMAC_Update
aws_lc_0_22_0_CRYPTO_MUTEX_cleanup
aws_lc_0_22_0_CRYPTO_MUTEX_init
aws_lc_0_22_0_CRYPTO_MUTEX_lock_read
aws_lc_0_22_0_CRYPTO_MUTEX_lock_write
aws_lc_0_22_0_CRYPTO_MUTEX_unlock_read
aws_lc_0_22_0_CRYPTO_MUTEX_unlock_write
aws_lc_0_22_0_CRYPTO_STATIC_MUTEX_lock_read
aws_lc_0_22_0_CRYPTO_STATIC_MUTEX_lock_write
aws_lc_0_22_0_CRYPTO_STATIC_MUTEX_unlock_read
aws_lc_0_22_0_CRYPTO_STATIC_MUTEX_unlock_write
aws_lc_0_22_0_CRYPTO_chacha_20
aws_lc_0_22_0_CRYPTO_cleanup_all_ex_data
aws_lc_0_22_0_CRYPTO_free
aws_lc_0_22_0_CRYPTO_free_ex_data
aws_lc_0_22_0_CRYPTO_gcm128_aad
aws_lc_0_22_0_CRYPTO_gcm128_decrypt
aws_lc_0_22_0_CRYPTO_gcm128_decrypt_ctr32
aws_lc_0_22_0_CRYPTO_gcm128_encrypt
aws_lc_0_22_0_CRYPTO_gcm128_encrypt_ctr32
aws_lc_0_22_0_CRYPTO_gcm128_finish
aws_lc_0_22_0_CRYPTO_gcm128_init_key
aws_lc_0_22_0_CRYPTO_gcm128_setiv
aws_lc_0_22_0_CRYPTO_gcm128_tag
aws_lc_0_22_0_CRYPTO_get_ex_data
aws_lc_0_22_0_CRYPTO_get_ex_new_index
aws_lc_0_22_0_CRYPTO_get_fork_generation
aws_lc_0_22_0_CRYPTO_get_snapsafe_active
aws_lc_0_22_0_CRYPTO_get_snapsafe_generation
aws_lc_0_22_0_CRYPTO_get_snapsafe_supported
aws_lc_0_22_0_CRYPTO_get_sysgenid_path
aws_lc_0_22_0_CRYPTO_get_thread_local
aws_lc_0_22_0_CRYPTO_has_asm
aws_lc_0_22_0_CRYPTO_is_confidential_build
aws_lc_0_22_0_CRYPTO_library_init
aws_lc_0_22_0_CRYPTO_malloc
aws_lc_0_22_0_CRYPTO_malloc_init
aws_lc_0_22_0_CRYPTO_memcmp
aws_lc_0_22_0_CRYPTO_new_ex_data
aws_lc_0_22_0_CRYPTO_once
aws_lc_0_22_0_CRYPTO_poly1305_finish
aws_lc_0_22_0_CRYPTO_poly1305_init
aws_lc_0_22_0_CRYPTO_poly1305_update
aws_lc_0_22_0_CRYPTO_pre_sandbox_init
aws_lc_0_22_0_CRYPTO_realloc
aws_lc_0_22_0_CRYPTO_refcount_dec_and_test_zero
aws_lc_0_22_0_CRYPTO_refcount_inc
aws_lc_0_22_0_CRYPTO_secure_malloc_init
aws_lc_0_22_0_CRYPTO_secure_malloc_initialized
aws_lc_0_22_0_CRYPTO_secure_used
aws_lc_0_22_0_CRYPTO_set_ex_data
aws_lc_0_22_0_CRYPTO_set_mem_functions
aws_lc_0_22_0_CRYPTO_set_thread_local
aws_lc_0_22_0_CRYPTO_tls1_prf
aws_lc_0_22_0_CTR_DRBG_clear
aws_lc_0_22_0_CTR_DRBG_free
aws_lc_0_22_0_CTR_DRBG_generate
aws_lc_0_22_0_CTR_DRBG_init
aws_lc_0_22_0_CTR_DRBG_new
aws_lc_0_22_0_CTR_DRBG_reseed
aws_lc_0_22_0_DH_bits
aws_lc_0_22_0_DH_check
aws_lc_0_22_0_DH_check_pub_key
aws_lc_0_22_0_DH_clear_flags
aws_lc_0_22_0_DH_compute_key
aws_lc_0_22_0_DH_compute_key_hashed
aws_lc_0_22_0_DH_compute_key_padded
aws_lc_0_22_0_DH_free
aws_lc_0_22_0_DH_generate_key
aws_lc_0_22_0_DH_get0_g
aws_lc_0_22_0_DH_get0_key
aws_lc_0_22_0_DH_get0_p
aws_lc_0_22_0_DH_get0_pqg
aws_lc_0_22_0_DH_get0_priv_key
aws_lc_0_22_0_DH_get0_pub_key
aws_lc_0_22_0_DH_get0_q
aws_lc_0_22_0_DH_get_rfc7919_2048
aws_lc_0_22_0_DH_get_rfc7919_3072
aws_lc_0_22_0_DH_get_rfc7919_4096
aws_lc_0_22_0_DH_get_rfc7919_8192
aws_lc_0_22_0_DH_new
aws_lc_0_22_0_DH_new_by_nid
aws_lc_0_22_0_DH_num_bits
aws_lc_0_22_0_DH_set0_key
aws_lc_0_22_0_DH_set0_pqg
aws_lc_0_22_0_DH_set_length
aws_lc_0_22_0_DH_size
aws_lc_0_22_0_DH_up_ref
aws_lc_0_22_0_DSA_SIG_free
aws_lc_0_22_0_DSA_SIG_get0
aws_lc_0_22_0_DSA_SIG_marshal
aws_lc_0_22_0_DSA_SIG_new
aws_lc_0_22_0_DSA_SIG_parse
aws_lc_0_22_0_DSA_SIG_set0
aws_lc_0_22_0_DSA_bits
aws_lc_0_22_0_DSA_check_signature
aws_lc_0_22_0_DSA_do_check_signature
aws_lc_0_22_0_DSA_do_sign
aws_lc_0_22_0_DSA_do_verify
aws_lc_0_22_0_DSA_dup_DH
aws_lc_0_22_0_DSA_free
aws_lc_0_22_0_DSA_generate_key
aws_lc_0_22_0_DSA_generate_parameters_ex
aws_lc_0_22_0_DSA_get0_g
aws_lc_0_22_0_DSA_get0_key
aws_lc_0_22_0_DSA_get0_p
aws_lc_0_22_0_DSA_get0_pqg
aws_lc_0_22_0_DSA_get0_priv_key
aws_lc_0_22_0_DSA_get0_pub_key
aws_lc_0_22_0_DSA_get0_q
aws_lc_0_22_0_DSA_get_ex_data
aws_lc_0_22_0_DSA_get_ex_new_index
aws_lc_0_22_0_DSA_marshal_parameters
aws_lc_0_22_0_DSA_marshal_private_key
aws_lc_0_22_0_DSA_marshal_public_key
aws_lc_0_22_0_DSA_new
aws_lc_0_22_0_DSA_parse_parameters
aws_lc_0_22_0_DSA_parse_private_key
aws_lc_0_22_0_DSA_parse_public_key
aws_lc_0_22_0_DSA_print
aws_lc_0_22_0_DSA_print_fp
aws_lc_0_22_0_DSA_set0_key
aws_lc_0_22_0_DSA_set0_pqg
aws_lc_0_22_0_DSA_set_ex_data
aws_lc_0_22_0_DSA_sign
aws_lc_0_22_0_DSA_size
aws_lc_0_22_0_DSA_up_ref
aws_lc_0_22_0_DSA_verify
aws_lc_0_22_0_DSAparams_dup
aws_lc_0_22_0_ECDH_compute_key_fips
aws_lc_0_22_0_ECDSA_SIG_free
aws_lc_0_22_0_ECDSA_SIG_from_bytes
aws_lc_0_22_0_ECDSA_SIG_get0
aws_lc_0_22_0_ECDSA_SIG_get0_r
aws_lc_0_22_0_ECDSA_SIG_get0_s
aws_lc_0_22_0_ECDSA_SIG_marshal
aws_lc_0_22_0_ECDSA_SIG_max_len
aws_lc_0_22_0_ECDSA_SIG_new
aws_lc_0_22_0_ECDSA_SIG_parse
aws_lc_0_22_0_ECDSA_SIG_set0
aws_lc_0_22_0_ECDSA_SIG_to_bytes
aws_lc_0_22_0_ECDSA_do_sign
aws_lc_0_22_0_ECDSA_do_verify
aws_lc_0_22_0_ECDSA_sign
aws_lc_0_22_0_ECDSA_sign_with_nonce_and_leak_private_key_for_testing
aws_lc_0_22_0_ECDSA_size
aws_lc_0_22_0_ECDSA_verify
aws_lc_0_22_0_ECPKParameters_print
aws_lc_0_22_0_EC_GROUP_cmp
aws_lc_0_22_0_EC_GROUP_dup
aws_lc_0_22_0_EC_GROUP_free
aws_lc_0_22_0_EC_GROUP_get0_generator
aws_lc_0_22_0_EC_GROUP_get0_order
aws_lc_0_22_0_EC_GROUP_get0_seed
aws_lc_0_22_0_EC_GROUP_get_asn1_flag
aws_lc_0_22_0_EC_GROUP_get_cofactor
aws_lc_0_22_0_EC_GROUP_get_curve_GFp
aws_lc_0_22_0_EC_GROUP_get_curve_name
aws_lc_0_22_0_EC_GROUP_get_degree
aws_lc_0_22_0_EC_GROUP_get_order
aws_lc_0_22_0_EC_GROUP_get_seed_len
aws_lc_0_22_0_EC_GROUP_method_of
aws_lc_0_22_0_EC_GROUP_new_by_curve_name
aws_lc_0_22_0_EC_GROUP_new_curve_GFp
aws_lc_0_22_0_EC_GROUP_order_bits
aws_lc_0_22_0_EC_GROUP_set_asn1_flag
aws_lc_0_22_0_EC_GROUP_set_generator
aws_lc_0_22_0_EC_GROUP_set_point_conversion_form
aws_lc_0_22_0_EC_GROUP_set_seed
aws_lc_0_22_0_EC_KEY_METHOD_free
aws_lc_0_22_0_EC_KEY_METHOD_new
aws_lc_0_22_0_EC_KEY_METHOD_set_flags
aws_lc_0_22_0_EC_KEY_METHOD_set_init_awslc
aws_lc_0_22_0_EC_KEY_METHOD_set_sign_awslc

Sections

.text
Size: 16.0MB - Virtual size: 16.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10.4MB - Virtual size: 10.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 306KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 825KB - Virtual size: 825KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
uninstall.exe
.exe windows:4 windows x86 arch:x86

61259b55b8912888e90f516ca08dc514

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegEnumValueW

shell32

SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW

ole32

OleInitialize
OleUninitialize
CoCreateInstance
IIDFromString
CoTaskMemFree

comctl32

ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked

user32

GetClientRect
EndPaint
DrawTextW
IsWindowEnabled
DispatchMessageW
wsprintfA
CharNextA
CharPrevW
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
GetSystemMetrics
FillRect
AppendMenuW
TrackPopupMenu
OpenClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
PeekMessageW
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EmptyClipboard
CreatePopupMenu

gdi32

SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject

kernel32

GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
lstrcatW
Sleep
lstrcpyA
WriteFile
GetTempFileNameW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
CopyFileW
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
CreateFileW
GetTickCount
MulDiv
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
MoveFileExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$PLUGINSDIR/LangDLL.dll
.dll windows:4 windows x86 arch:x86

3e8d18bb71c7ebbda2ddc2a4bb03547b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrlenW
GlobalFree
lstrcpynW
lstrcmpW
GlobalAlloc
MulDiv
GetModuleHandleW
lstrcpyW

user32

DialogBoxParamW
SetDlgItemTextW
SendDlgItemMessageW
EndDialog
SetWindowTextW
LoadIconW
ShowWindow
SendMessageW
GetDC

gdi32

GetDeviceCaps
CreateFontIndirectW
DeleteObject

Exports

Exports

LangDialog

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 681B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/System.dll
.dll windows:4 windows x86 arch:x86

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError

user32

wsprintfW

ole32

StringFromGUID2
CLSIDFromString

Exports

Exports

Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 867B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/nsis_tauri_utils.dll
.dll windows:6 windows x86 arch:x86

17cb20871354b907f678c7c220e4ca60

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

nsis_tauri_utils.pdb

Imports

kernel32

OpenProcess
ExitProcess
HeapAlloc
CloseHandle
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
HeapFree
TerminateProcess
GetProcessHeap
GlobalFree
InitializeProcThreadAttributeList
GetLastError
UpdateProcThreadAttribute
CreateProcessW
HeapReAlloc
GlobalAlloc
lstrcpyW

advapi32

GetTokenInformation
OpenProcessToken
EqualSid

user32

GetShellWindow
GetWindowThreadProcessId

Exports

Exports

DllMain
FindProcess
FindProcessCurrentUser
KillProcess
KillProcessCurrentUser
RunAsUser
SemverCompare
memcmp
memcpy
memset

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61259b55b8912888e90f516ca08dc514

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1KB - Virtual size: 128KB

.ndata Size: - Virtual size: 192KB

.rsrc Size: 32KB - Virtual size: 32KB

ed06d61f6957c32cd324837726a5a070

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

wsock32

user32

kernel32

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1KB - Virtual size: 25KB

.reloc Size: 1024B - Virtual size: 882B

80469f6834e579db68a646d49780b9d5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 296B

.reloc Size: 1024B - Virtual size: 578B

fc0224e99e736751432961db63a41b76

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 1024B - Virtual size: 867B

.data Size: 512B - Virtual size: 120B

.reloc Size: 1024B - Virtual size: 662B

6b5c4f7d679059f68f1269aad3a5cecd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1KB - Virtual size: 128KB

.ndata
Size: - Virtual size: 192KB

.rsrc
Size: 32KB - Virtual size: 32KB

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1KB - Virtual size: 25KB

.reloc
Size: 1024B - Virtual size: 882B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 296B

.reloc
Size: 1024B - Virtual size: 578B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 1024B - Virtual size: 867B

.data
Size: 512B - Virtual size: 120B

.reloc
Size: 1024B - Virtual size: 662B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 8KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 638B

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: - Virtual size: 9B

.reloc
Size: 512B - Virtual size: 376B

.text
Size: 16.0MB - Virtual size: 16.0MB

.rdata
Size: 10.4MB - Virtual size: 10.4MB

.data
Size: 306KB - Virtual size: 330KB

.pdata
Size: 825KB - Virtual size: 825KB

.rsrc
Size: 29KB - Virtual size: 28KB

.reloc
Size: 101KB - Virtual size: 100KB