modiloader | JaffaCakes118_e446bd97230671b6e38682ec9f3da7527c18dbd555efc7f27a52d144cf54edcc

resource	yara_rule
static1/unpack001/default.exe	family_zeppelin

resource	yara_rule
static1/unpack001/amtemu.v0.9.2.win-painter_edited.exe	modiloader_stage2
static1/unpack001/ou55sg33s_1.exe	modiloader_stage2

resource	yara_rule
static1/unpack001/LtHv0O2KZDK4M637.exe	autoit_exe
static1/unpack001/update.exe	autoit_exe

resource	yara_rule
static1/unpack001/5da0116af495e6d8af7241da9b8281d918b9ff9a98a3deab4cca1aec1e456c18	upx
static1/unpack001/good.exe	upx

resource
unpack001/1.bin/1.bin
unpack001/2019-09-02_22-41-10.exe
unpack001/31.exe
unpack001/3DMark 11 Advanced Edition.exe
unpack001/5da0116af495e6d8af7241da9b8281d918b9ff9a98a3deab4cca1aec1e456c18
unpack001/Archive.zip__ccacaxs2tbz2t6ob3e.exe
unpack001/CVWSHSetup[1].bin/WSHSetup[1].exe
unpack001/DiskInternals_Uneraser_v5_keygen.exe
unpack001/ForceOp 2.8.7 - By RaiSence.exe
unpack001/HYDRA.exe
unpack003/#/power.exe
unpack003/#/sant.exe
unpack003/#/ufx.exe
unpack003/#/va.exe
unpack001/Keygen.exe
unpack001/Lonelyscreen.1.2.9.keygen.by.Paradox/Lonelyscreen.1.2.9.keygen.by.Paradox.exe
unpack001/LtHv0O2KZDK4M637.exe
unpack001/Magic_File_v3_keygen_by_KeygenNinja.exe
unpack001/Remouse.Micro.Micro.v3.5.3.serial.maker.by.aaocg.exe
unpack001/Treasure.Vault.3D.Screensaver.keygen.by.Paradox.exe
unpack001/VyprVPN.exe
unpack004/$1/1337/VyprVPN.exe
unpack004/$1/1337/joinResult.exe
unpack005/$1/1337/1111.exe
unpack005/$1/1337/Clipper.exe
unpack005/$PLUGINSDIR/System.dll
unpack004/$PLUGINSDIR/System.dll
unpack001/WSHSetup[1].exe
unpack007/전산 및 비전산자료 보존 요청서/전산 및 비전산자료 보존 요청서(20200525)_꼭 확인하시고 자료보존해주세요.exe
unpack007/전산 및 비전산자료 보존 요청서/전산 및 비전산자료 보존 요청서(20200525)_꼭 확인하시고 자료보존해주세요1.exe
unpack001/___ _ _____ __ ___/전산 및 비전산자료 보존 요청서/전산 및 비전산자료 보존 요청서/전산 및 비전산자료 보존 요청서(20200525)_꼭 확인하시고 자료보존해주세요.exe
unpack001/___ _ _____ __ ___/전산 및 비전산자료 보존 요청서/전산 및 비전산자료 보존 요청서/전산 및 비전산자료 보존 요청서(20200525)_꼭 확인하시고 자료보존해주세요1.exe
unpack001/amtemu.v0.9.2.win-painter_edited.exe
unpack001/default.exe
unpack001/good.exe
unpack008/out.upx
unpack001/infected dot net installer.exe
unpack001/oof.exe
unpack001/ou55sg33s_1.exe
unpack001/update.exe
unpack001/xNet.dll

resource	yara_rule
static1/unpack001/HYDRA.exe	nsis_installer_1
static1/unpack001/HYDRA.exe	nsis_installer_2
static1/unpack001/VyprVPN.exe	nsis_installer_1
static1/unpack001/VyprVPN.exe	nsis_installer_2
static1/unpack004/$1/1337/joinResult.exe	nsis_installer_1
static1/unpack004/$1/1337/joinResult.exe	nsis_installer_2

JaffaCakes118_e446bd97230671b6e38682ec9f3da7527c18dbd555efc7f27a52d144cf54edcc

SHA256 e446bd97230671b6e38682ec9f3da7527c18dbd555efc7f27a52d144cf54edcc
MD5 f69be0b5e5b4b203013e7504fd24751e
SHA1 ccb9cedd5ad3f880f9aa8754c0661ae69eed210e
SHA512 3615aebd1cdd1eab2adee010210cc0f1f198bcd79d75d0d5c216acd17fefac121cff984c82aa1c580971ce49ffac0e77f54abf8d57622d065b4f38ce857dd7af
SSDEEP 3145728:z5Nl80yN+c3dNlPFXjQnIEf4m3WMdrLJHBnG:z3yd9TnUIEg0a
MD5 SHA1 SHA512 SSDEEP

1.bin/1.bin

IMPHASH 5877688b4859ffd051f6be3b8e0cd533
SHA256 7570a7a6830ade05dcf862d5862f12f12445dbd3c0ad7433d90872849e11c267
MD5 af8e86c5d4198549f6375df9378f983c
SHA1 7ab5ed449b891bd4899fba62d027a2cc26a05e6f
SHA512 137f5a281aa15802e300872fdf93b9ee014d2077c29d30e5a029664eb0991af2afbe1e5c53a9d7bff8f0508393a8b7641c5a97b4b0e0061befb79a93506c94e1
SSDEEP 393216:oKzkshyIMtAcwzhQ/CceAocPwz3fwnjWKlDc8F6tB:BzkmSmzS/Be/cPquj7D36r
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

memset wcsncmp memmove wcsncpy wcsstr _wcsnicmp _wcsdup free _wcsicmp wcslen wcscpy wcscmp memcpy tolower wcscat malloc

kernel32

GetModuleHandleW HeapCreate GetStdHandle HeapDestroy ExitProcess WriteFile GetTempFileNameW LoadLibraryExW EnumResourceTypesW FreeLibrary RemoveDirectoryW GetExitCodeProcess EnumResourceNamesW GetCommandLineW LoadResource SizeofResource FreeResource FindResourceW GetNativeSystemInfo GetShortPathNameW GetWindowsDirectoryW GetSystemDirectoryW EnterCriticalSection CloseHandle LeaveCriticalSection InitializeCriticalSection WaitForSingleObject TerminateThread CreateThread Sleep GetProcAddress GetVersionExW WideCharToMultiByte HeapAlloc HeapFree LoadLibraryW GetCurrentProcessId GetCurrentThreadId GetModuleFileNameW GetEnvironmentVariableW SetEnvironmentVariableW GetCurrentProcess TerminateProcess SetUnhandledExceptionFilter HeapSize MultiByteToWideChar CreateDirectoryW SetFileAttributesW GetTempPathW DeleteFileW GetCurrentDirectoryW SetCurrentDirectoryW CreateFileW SetFilePointer TlsFree TlsGetValue TlsSetValue TlsAlloc HeapReAlloc DeleteCriticalSection InterlockedCompareExchange InterlockedExchange GetLastError SetLastError UnregisterWait GetCurrentThread DuplicateHandle RegisterWaitForSingleObject

user32

CharUpperW CharLowerW MessageBoxW DefWindowProcW DestroyWindow GetWindowLongW GetWindowTextLengthW GetWindowTextW UnregisterClassW LoadIconW LoadCursorW RegisterClassExW IsWindowEnabled EnableWindow GetSystemMetrics CreateWindowExW SetWindowLongW SendMessageW SetFocus CreateAcceleratorTableW SetForegroundWindow BringWindowToTop GetMessageW TranslateAcceleratorW TranslateMessage DispatchMessageW DestroyAcceleratorTable PostMessageW GetForegroundWindow GetWindowThreadProcessId IsWindowVisible EnumWindows SetWindowPos

gdi32

GetStockObject

comctl32

InitCommonControlsEx

shell32

ShellExecuteExW SHGetFolderLocation SHGetPathFromIDListW

winmm

timeBeginPeriod

ole32

CoInitialize CoTaskMemFree

shlwapi

PathAddBackslashW PathRenameExtensionW PathQuoteSpacesW PathRemoveArgsW PathRemoveBackslashW

2019-09-02_22-41-10.exe

IMPHASH 0b940f4d2992021389a241ab8513fc6b
SHA256 30f9db1f5838abb6c1580fdfb7f5dcfd7c2ac8cfac50c2edd0c8415d66212c95
MD5 924aa6c26f6f43e0893a40728eac3b32
SHA1 baa9b4c895b09d315ed747b3bd087f4583aa84fc
SHA512 3cb6fd659aff46eaa62b0e647ccebeecb070ba0bb27e1cc037b33caf23c417e75f476e1c08e1b5f3b232c4640995ae5afa43bfd09252d318fe5eec0d18de830a
SSDEEP 6144:2E5sHpScP2xeQhp4wGoqPKNDF50AsurB:PsHIiQv4gBNDFiTuF
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17244

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\huzufawapijoh_fabujavonud39_mihugimosomofexepag-vatipado.pdb

kernel32

DuplicateHandle lstrcatA ExitThread GetModuleHandleA GetLastError CloseHandle LocalAlloc GetProcAddress WTSGetActiveConsoleSessionId GlobalFix GetTickCount GetCurrencyFormatA LocalShrink lstrlenA PeekConsoleInputW GetHandleInformation UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW EncodePointer RaiseException SetLastError RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc LCMapStringW GetFileType FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx GetStringTypeW ReadConsoleW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetProcessHeap DecodePointer CreateFileW WriteConsoleW HeapSize HeapReAlloc SetEndOfFile

advapi32

CreateProcessAsUserA AdjustTokenPrivileges

31.exe

IMPHASH 5877688b4859ffd051f6be3b8e0cd533
SHA256 7570a7a6830ade05dcf862d5862f12f12445dbd3c0ad7433d90872849e11c267
MD5 af8e86c5d4198549f6375df9378f983c
SHA1 7ab5ed449b891bd4899fba62d027a2cc26a05e6f
SHA512 137f5a281aa15802e300872fdf93b9ee014d2077c29d30e5a029664eb0991af2afbe1e5c53a9d7bff8f0508393a8b7641c5a97b4b0e0061befb79a93506c94e1
SSDEEP 393216:oKzkshyIMtAcwzhQ/CceAocPwz3fwnjWKlDc8F6tB:BzkmSmzS/Be/cPquj7D36r
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

memset wcsncmp memmove wcsncpy wcsstr _wcsnicmp _wcsdup free _wcsicmp wcslen wcscpy wcscmp memcpy tolower wcscat malloc

kernel32

GetModuleHandleW HeapCreate GetStdHandle HeapDestroy ExitProcess WriteFile GetTempFileNameW LoadLibraryExW EnumResourceTypesW FreeLibrary RemoveDirectoryW GetExitCodeProcess EnumResourceNamesW GetCommandLineW LoadResource SizeofResource FreeResource FindResourceW GetNativeSystemInfo GetShortPathNameW GetWindowsDirectoryW GetSystemDirectoryW EnterCriticalSection CloseHandle LeaveCriticalSection InitializeCriticalSection WaitForSingleObject TerminateThread CreateThread Sleep GetProcAddress GetVersionExW WideCharToMultiByte HeapAlloc HeapFree LoadLibraryW GetCurrentProcessId GetCurrentThreadId GetModuleFileNameW GetEnvironmentVariableW SetEnvironmentVariableW GetCurrentProcess TerminateProcess SetUnhandledExceptionFilter HeapSize MultiByteToWideChar CreateDirectoryW SetFileAttributesW GetTempPathW DeleteFileW GetCurrentDirectoryW SetCurrentDirectoryW CreateFileW SetFilePointer TlsFree TlsGetValue TlsSetValue TlsAlloc HeapReAlloc DeleteCriticalSection InterlockedCompareExchange InterlockedExchange GetLastError SetLastError UnregisterWait GetCurrentThread DuplicateHandle RegisterWaitForSingleObject

user32

CharUpperW CharLowerW MessageBoxW DefWindowProcW DestroyWindow GetWindowLongW GetWindowTextLengthW GetWindowTextW UnregisterClassW LoadIconW LoadCursorW RegisterClassExW IsWindowEnabled EnableWindow GetSystemMetrics CreateWindowExW SetWindowLongW SendMessageW SetFocus CreateAcceleratorTableW SetForegroundWindow BringWindowToTop GetMessageW TranslateAcceleratorW TranslateMessage DispatchMessageW DestroyAcceleratorTable PostMessageW GetForegroundWindow GetWindowThreadProcessId IsWindowVisible EnumWindows SetWindowPos

gdi32

GetStockObject

comctl32

InitCommonControlsEx

shell32

ShellExecuteExW SHGetFolderLocation SHGetPathFromIDListW

winmm

timeBeginPeriod

ole32

CoInitialize CoTaskMemFree

shlwapi

PathAddBackslashW PathRenameExtensionW PathQuoteSpacesW PathRemoveArgsW PathRemoveBackslashW

3DMark 11 Advanced Edition.exe

IMPHASH fcf1390e9ce472c7270447fc5c61a0c1
SHA256 400b64f8c61623ead9f579b99735b1b0d9febe7c829e8bdafc9b3a3269bbe21c
MD5 236d7524027dbce337c671906c9fe10b
SHA1 7d345aa201b50273176ae0ec7324739d882da32e
SHA512 e5c2f87923b3331719261101b2f606298fb66442e56a49708199d8472c1ac4a72130612d3a9c344310f36fcb3cf39e4637f7dd8fb3841c61b01b95bb3794610a
SSDEEP 196608:8YG+5pO1Ppb1rAMQQkIscfAb3mO5iW8uO2Kq1TIxz2HU6QPXJ0M2m9b/hE4:8/Bv1zsG2fm2bTcWBIXJHVrW4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

123385

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb

kernel32

GetLastError SetLastError FormatMessageW GetCurrentProcess DeviceIoControl SetFileTime CloseHandle CreateDirectoryW RemoveDirectoryW CreateFileW DeleteFileW CreateHardLinkW GetShortPathNameW GetLongPathNameW MoveFileW GetFileType GetStdHandle WriteFile ReadFile FlushFileBuffers SetEndOfFile SetFilePointer SetFileAttributesW GetFileAttributesW FindClose FindFirstFileW FindNextFileW GetVersionExW GetCurrentDirectoryW GetFullPathNameW FoldStringW GetModuleFileNameW GetModuleHandleW FindResourceW FreeLibrary GetProcAddress GetCurrentProcessId ExitProcess SetThreadExecutionState Sleep LoadLibraryW GetSystemDirectoryW CompareStringW AllocConsole FreeConsole AttachConsole WriteConsoleW GetProcessAffinityMask CreateThread SetThreadPriority InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetEvent ResetEvent ReleaseSemaphore WaitForSingleObject CreateEventW CreateSemaphoreW GetSystemTime SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime SystemTimeToFileTime FileTimeToLocalFileTime LocalFileTimeToFileTime FileTimeToSystemTime GetCPInfo IsDBCSLeadByte MultiByteToWideChar WideCharToMultiByte GlobalAlloc LockResource GlobalLock GlobalUnlock GlobalFree LoadResource SizeofResource SetCurrentDirectoryW GetExitCodeProcess GetLocalTime GetTickCount MapViewOfFile UnmapViewOfFile CreateFileMappingW OpenFileMappingW GetCommandLineW SetEnvironmentVariableW ExpandEnvironmentStringsW GetTempPathW MoveFileExW GetLocaleInfoW GetTimeFormatW GetDateFormatW GetNumberFormatW SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize SetStdHandle GetProcessHeap RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead TerminateProcess RtlUnwind EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW QueryPerformanceFrequency GetModuleHandleExW GetModuleFileNameA GetACP HeapFree HeapAlloc HeapReAlloc GetStringTypeW LCMapStringW FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW DecodePointer

gdiplus

GdiplusShutdown GdiplusStartup GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipDisposeImage GdipCloneImage GdipFree GdipAlloc

5da0116af495e6d8af7241da9b8281d918b9ff9a98a3deab4cca1aec1e456c18

SHA256 5da0116af495e6d8af7241da9b8281d918b9ff9a98a3deab4cca1aec1e456c18
MD5 ead18f3a909685922d7213714ea9a183
SHA1 1270bd7fd62acc00447b30f066bb23f4745869bf
SHA512 6e532d9c3d186e4dac38823ae9152056346e283613f0caf088b21a1b3e5f4f6cf3bad8c407168b1072895a386e3be0b8c11ad1cb326d3d3ff0eb8562052def91
SSDEEP 6144:bLUHLyHlwFjxDi2nEZkQ4NXxp0XMgkBWPqdN/jGdfYY7SRA7j4YlvfYAAjJ:4uFi02nEZh4jp0XLuxGdgTm73vL
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

10234

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Archive.zip__ccacaxs2tbz2t6ob3e.exe

IMPHASH ecc8b2d72205d5666936947a45fa8392
SHA256 005d3b2b78fa134092a43e53112e5c8518f14cf66e57e6a3cc723219120baba6
MD5 a3cab1a43ff58b41f61f8ea32319386b
SHA1 94689e1a9e1503f1082b23e6d5984d4587f3b9ec
SHA512 8f084a866c608833c3bf95b528927d9c05e8d4afcd8a52c3434d45c8ba8220c25d2f09e00aade708bbbc83b4edea60baf826750c529e8e9e05b1242c56d0198d
SSDEEP 6144:vU9Q9tD5WuDQa4t3BMgLkzvCOnYxcEaSAOPou8BWinO8DR:8Q9tD5WyQlBBVAnYxRhr8DR
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

181998

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CloseHandle GetSystemTime GetLocalTime lstrlenW GetModuleFileNameW GetModuleHandleW CreateProcessW OutputDebugStringW Sleep GetTempFileNameW GetVersionExW GetVersion MultiByteToWideChar CopyFileW WriteConsoleW SetStdHandle WaitForSingleObject GetExitCodeProcess TerminateProcess GetProcAddress DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetLastError RaiseException InterlockedDecrement GetTempPathW DecodePointer GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage HeapSize GetConsoleMode GetConsoleCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale HeapReAlloc GetFileType HeapAlloc HeapFree GetACP WriteFile GetStdHandle FormatMessageW WideCharToMultiByte CreateDirectoryW CreateFileW FindClose FindFirstFileExW FindNextFileW GetFileAttributesExW SetFilePointerEx GetStringTypeW SetLastError SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime EnterCriticalSection LeaveCriticalSection GetCPInfo EncodePointer CompareStringW LCMapStringW GetLocaleInfoW IsDebuggerPresent LocalFree UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW

user32

wvsprintfW

advapi32

GetUserNameW RegSetValueExW RegQueryValueExW RegOpenKeyExW RegOpenKeyW RegCreateKeyExW RegCreateKeyW

shell32

SHGetFolderPathW

ole32

OleRun CoUninitialize CoCreateInstance CoInitialize

oleaut32

GetErrorInfo SysFreeString SysAllocString SysStringByteLen SysAllocStringByteLen VariantClear VariantInit

wininet

HttpSendRequestW HttpOpenRequestW InternetConnectW InternetCloseHandle InternetOpenW InternetReadFile

urlmon

URLDownloadToFileW

rpcrt4

UuidCreate UuidToStringW

CVE-2018-15982_PoC.swf

SHA256 c61dd1b37cbf2d72e3670e3c8dff28959683e6d85b8507cda25efe1dffc04bdb
MD5 82fe94beb621a4368e76aa4a51998c00
SHA1 b7c79b8f05c3d998e21d01b07b9ba157160581a9
SHA512 055677c2194ff132dc3c50ef900a36a0e4b8e5b85d176047fdefdec049aff4d5e2db1ccffefaf65575b4ca41e81fd24beb3c7cfd2fce6275642638d0cf624d27
SSDEEP 192:gR6qPBBRRcrxFx/pHPn9moz7p/+tqHM41rftZDBLj9b5d/:gwqDcLx/pH/IoBiqH/BfbDBLj9b5h
MD5 SHA1 SHA512 SSDEEP

CVWSHSetup[1].bin/WSHSetup[1].exe

IMPHASH 3c977911c8eee24abac5edc906e5e72c
SHA256 5987a6e42c3412086b7c9067dc25f1aaa659b2b123581899e9df92cb7907a3ed
MD5 cb2b4cd74c7b57a12bd822a168e4e608
SHA1 f2182062719f0537071545b77ca75f39c2922bf5
SHA512 7a38be8c1270b1224be4975ad442a964b2523c849f748e5356156cdce39e494c64ca80b0d99c1d989d77f072902de8972e0b113894c9791fb0cabf856dbba348
SSDEEP 12288:vI3h+hoVEZnvy/hF4CMWZrU7S/iAfMIItotPP2rbPCrF7:vu+hIE9BYO7S/iAOtc4be
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

558174

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeEnvironmentStringsW LoadLibraryW GetStringTypeW HeapCreate HeapSize SetHandleCount FlushFileBuffers GetConsoleCP LCMapStringW IsValidCodePage GetOEMCP GetCPInfo IsProcessorFeaturePresent TerminateProcess IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetEnvironmentStringsW TlsFree GetCurrentProcessId TlsGetValue TlsAlloc GetStartupInfoW HeapSetInformation GetCommandLineA VirtualQuery GetSystemInfo GetModuleHandleW VirtualAlloc VirtualProtect GetModuleFileNameW GetStdHandle WriteConsoleW HeapReAlloc HeapFree HeapAlloc EncodePointer DecodePointer RtlUnwind SetStdHandle LocalFree SetLastError QueryPerformanceCounter FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetSystemTimeAsFileTime TlsSetValue CreateFileW GetCommState SetErrorMode GetLogicalDrives GetVolumePathNameW GetVolumeNameForVolumeMountPointW GetComputerNameExW GetConsoleMode CreateEventA WaitForSingleObject IsDBCSLeadByte lstrcmpiA LoadLibraryExA lstrlenA lstrlenW InitializeCriticalSectionAndSpinCount RaiseException FreeLibrary WriteFile SetFileTime CreateDirectoryA DosDateTimeToFileTime SystemTimeToFileTime GetCurrentProcess DuplicateHandle GetFileType SetFilePointer ExitProcess GetCurrentDirectoryA GetModuleFileNameA FindResourceA LoadResource FreeResource SizeofResource LockResource GetLastError GetModuleHandleA WideCharToMultiByte GlobalAlloc GlobalLock GlobalUnlock CreateFileA GetFileSize CloseHandle ReadFile InterlockedIncrement InterlockedDecrement LoadLibraryA GetProcAddress GetACP MultiByteToWideChar MulDiv GetTickCount GetLocalTime LeaveCriticalSection EnterCriticalSection DeleteCriticalSection GetVersionExA InitializeCriticalSection Sleep GetCurrentThreadId

user32

MessageBoxA SetWindowRgn wvsprintfA OffsetRect SystemParametersInfoA CharPrevA DrawTextA UnionRect GetActiveWindow GetUpdateRect IsWindowVisible SetRect MessageBoxW GetDlgItem CheckMenuRadioItem GetDCEx IsZoomed GetWindowRect UpdateWindow MoveWindow DestroyWindow ReleaseDC GetDC ReleaseCapture SetCapture FillRect LockWindowUpdate SetClassLongA GetClassLongA AttachThreadInput CopyImage SetScrollPos AppendMenuW TrackPopupMenu InvalidateRect InvalidateRgn DefWindowProcA GetMenuCheckMarkDimensions GetClientRect SetTimer EndPaint BeginPaint PtInRect ScreenToClient ClientToScreen GetGUIThreadInfo ShowWindow SetFocus SetCursor LoadCursorA CharNextA IntersectRect GetParent GetMonitorInfoA MonitorFromWindow MapWindowPoints GetFocus GetCursorPos SendMessageA SetWindowPos IsRectEmpty GetWindowTextLengthA EnableWindow SetWindowTextA GetCaretPos GetCaretBlinkTime GetWindowTextA CreateCaret HideCaret ShowCaret SetCaretPos GetSysColor GetKeyState GetWindowLongA KillTimer PostMessageA SetPropA GetPropA CallWindowProcA GetClassInfoExA CreateWindowExA SetWindowLongA IsWindow DispatchMessageA TranslateMessage GetMessageA DialogBoxIndirectParamA EnableMenuItem GetSystemMenu CreateAcceleratorTableA RegisterClassExA RegisterClassA GetWindow IsIconic

gdi32

GetStockObject CreateFontIndirectA GetObjectA SetBkMode SetTextColor CreatePatternBrush CreateSolidBrush DeleteObject GetDeviceCaps RoundRect TextOutA CreatePen GetCharABCWidthsA ExtSelectClipRgn GdiFlush CreateFontA Escape ExtEscape EnumObjects CreateDCA SetDCPenColor DeleteDC SetWindowOrgEx Rectangle RestoreDC BitBlt SaveDC SelectObject CreateCompatibleBitmap CreateCompatibleDC GetTextMetricsA SelectClipRgn CombineRgn CreateRectRgnIndirect GetClipBox CreateRoundRectRgn StretchBlt SetStretchBltMode ExtTextOutA SetBkColor LineTo MoveToEx GetTextExtentPoint32A CreateDIBSection CreatePenIndirect

comdlg32

GetOpenFileNameA

advapi32

MakeAbsoluteSD2 RegCloseKey RegDeleteKeyA RegCreateKeyExA RegOpenKeyExA RegEnumKeyExA IsValidSecurityDescriptor LookupPrivilegeValueW LsaAddAccountRights LookupPrivilegeNameA RegSetValueExA RegQueryInfoKeyW RegDeleteValueA

shell32

ShellExecuteA

ole32

OleLockRunning CoInitialize CoUninitialize CoTaskMemRealloc CoTaskMemAlloc CoTaskMemFree OleInitialize OleUninitialize CreateStreamOnHGlobal CoCreateInstance CLSIDFromString CLSIDFromProgID

oleaut32

BSTR_UserSize VarUI4FromStr SysAllocStringLen VariantInit VariantClear SysFreeString SysAllocString

gdiplus

GdipGetImageWidth GdipGetImageHeight GdipGetPropertyItemSize GdipGetPropertyItem GdipGetFamily GdipCreateFontFromDC GdipCloneBrush GdipSetTextRenderingHint GdipCreateStringFormat GdipSetStringFormatLineAlign GdipSetStringFormatAlign GdipCreateLineBrushI GdipCreateBitmapFromScan0 GdipGetImageGraphicsContext GdipSetSmoothingMode GdipSetCompositingQuality GdipSetInterpolationMode GdipSetPixelOffsetMode GdipDrawString GdipGraphicsClear GdipDrawImage GdipDeleteFontFamily GdipDeleteBrush GdipDeleteStringFormat GdipDeleteFont GdiplusShutdown GdiplusStartup GdipCloneImage GdipDisposeImage GdipFree GdipAlloc GdipLoadImageFromStreamICM GdipLoadImageFromStream GdipCreateFromHDC GdipDrawImageRectI GdipImageSelectActiveFrame GdipDeleteGraphics GdipImageGetFrameDimensionsCount GdipImageGetFrameDimensionsList GdipImageGetFrameCount GdipCreateFontFromLogfontA

imm32

ImmSetCompositionFontA ImmSetCompositionWindow ImmGetContext ImmReleaseContext

comctl32

_TrackMouseEvent ord17

winmm

mmioWrite mmioCreateChunk mmioOpenW mmioAscend

urlmon

CreateAsyncBindCtx

msacm32

acmDriverOpen

netapi32

NetWkstaUserGetInfo

iphlpapi

GetIpNetTable

avifil32

AVIMakeCompressedStream

wsnmp32

ord501

d2d1

ord1

dwrite

DWriteCreateFactory

DiskInternals_Uneraser_v5_keygen.exe

IMPHASH fcf1390e9ce472c7270447fc5c61a0c1
SHA256 a64f6d4168bbb66930b32482a88193c45d8aae6af883714d6688ed407e176a6e
MD5 17c4b227deaa34d22dd0addfb0034e04
SHA1 0cf926384df162bc88ae7c97d1b1b9523ac6b88c
SHA512 691751cf5930563fc33aa269df87284ef5d69ae332faed3a142529babd988c54ec86a3517ea2e71373491bbb39962e801feb731e1d564c7294ae517b754ffc0c
SSDEEP 196608:zGeHGoZMYsFL0NBneaD/TuEIp8TnWh5bpe0RCQElmYzD9gXYToUdYZF0Nz6AV:yKGDYsdUBnTHLIpWnUeXQeEXU6s
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

123385

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb

kernel32

GetLastError SetLastError FormatMessageW GetCurrentProcess DeviceIoControl SetFileTime CloseHandle CreateDirectoryW RemoveDirectoryW CreateFileW DeleteFileW CreateHardLinkW GetShortPathNameW GetLongPathNameW MoveFileW GetFileType GetStdHandle WriteFile ReadFile FlushFileBuffers SetEndOfFile SetFilePointer SetFileAttributesW GetFileAttributesW FindClose FindFirstFileW FindNextFileW GetVersionExW GetCurrentDirectoryW GetFullPathNameW FoldStringW GetModuleFileNameW GetModuleHandleW FindResourceW FreeLibrary GetProcAddress GetCurrentProcessId ExitProcess SetThreadExecutionState Sleep LoadLibraryW GetSystemDirectoryW CompareStringW AllocConsole FreeConsole AttachConsole WriteConsoleW GetProcessAffinityMask CreateThread SetThreadPriority InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetEvent ResetEvent ReleaseSemaphore WaitForSingleObject CreateEventW CreateSemaphoreW GetSystemTime SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime SystemTimeToFileTime FileTimeToLocalFileTime LocalFileTimeToFileTime FileTimeToSystemTime GetCPInfo IsDBCSLeadByte MultiByteToWideChar WideCharToMultiByte GlobalAlloc LockResource GlobalLock GlobalUnlock GlobalFree LoadResource SizeofResource SetCurrentDirectoryW GetExitCodeProcess GetLocalTime GetTickCount MapViewOfFile UnmapViewOfFile CreateFileMappingW OpenFileMappingW GetCommandLineW SetEnvironmentVariableW ExpandEnvironmentStringsW GetTempPathW MoveFileExW GetLocaleInfoW GetTimeFormatW GetDateFormatW GetNumberFormatW SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize SetStdHandle GetProcessHeap RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead TerminateProcess RtlUnwind EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW QueryPerformanceFrequency GetModuleHandleExW GetModuleFileNameA GetACP HeapFree HeapAlloc HeapReAlloc GetStringTypeW LCMapStringW FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW DecodePointer

gdiplus

GdiplusShutdown GdiplusStartup GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipDisposeImage GdipCloneImage GdipFree GdipAlloc

ForceOp 2.8.7 - By RaiSence.exe

IMPHASH fcf1390e9ce472c7270447fc5c61a0c1
SHA256 26509645fe956ff1b7c540b935f88817281b65413c62da67e597eaefb2406680
MD5 0a88ebdd3ae5ab0b006d4eaa2f5bc4b2
SHA1 6bf1215ac7b1fde54442a9d075c84544b6e80d50
SHA512 54c8cde607bd33264c61dbe750a34f8dd190dfa400fc063b61efcd4426f0635c8de42bc3daf8befb14835856b4477fec3bdc8806c555e49684528ff67dd45f37
SSDEEP 24576:sAOcZ1SxlW2YT6EtAcl0URqqqUeiG3STJq3n:64SK2YT6E1l0EqqqU1GwcX
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

123385

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb

kernel32

GetLastError SetLastError FormatMessageW GetCurrentProcess DeviceIoControl SetFileTime CloseHandle CreateDirectoryW RemoveDirectoryW CreateFileW DeleteFileW CreateHardLinkW GetShortPathNameW GetLongPathNameW MoveFileW GetFileType GetStdHandle WriteFile ReadFile FlushFileBuffers SetEndOfFile SetFilePointer SetFileAttributesW GetFileAttributesW FindClose FindFirstFileW FindNextFileW GetVersionExW GetCurrentDirectoryW GetFullPathNameW FoldStringW GetModuleFileNameW GetModuleHandleW FindResourceW FreeLibrary GetProcAddress GetCurrentProcessId ExitProcess SetThreadExecutionState Sleep LoadLibraryW GetSystemDirectoryW CompareStringW AllocConsole FreeConsole AttachConsole WriteConsoleW GetProcessAffinityMask CreateThread SetThreadPriority InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetEvent ResetEvent ReleaseSemaphore WaitForSingleObject CreateEventW CreateSemaphoreW GetSystemTime SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime SystemTimeToFileTime FileTimeToLocalFileTime LocalFileTimeToFileTime FileTimeToSystemTime GetCPInfo IsDBCSLeadByte MultiByteToWideChar WideCharToMultiByte GlobalAlloc LockResource GlobalLock GlobalUnlock GlobalFree LoadResource SizeofResource SetCurrentDirectoryW GetExitCodeProcess GetLocalTime GetTickCount MapViewOfFile UnmapViewOfFile CreateFileMappingW OpenFileMappingW GetCommandLineW SetEnvironmentVariableW ExpandEnvironmentStringsW GetTempPathW MoveFileExW GetLocaleInfoW GetTimeFormatW GetDateFormatW GetNumberFormatW SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize SetStdHandle GetProcessHeap RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead TerminateProcess RtlUnwind EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW QueryPerformanceFrequency GetModuleHandleExW GetModuleFileNameA GetACP HeapFree HeapAlloc HeapReAlloc GetStringTypeW LCMapStringW FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW DecodePointer

gdiplus

GdiplusShutdown GdiplusStartup GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipDisposeImage GdipCloneImage GdipFree GdipAlloc

HYDRA.exe

IMPHASH 3abe302b6d9a1256e6a915429af4ffd2
SHA256 f8c17cb375e8ccad5b0e33dae65694a1bd628f91cac6cf65dd11f50e91130c2d
MD5 c52bc39684c52886712971a92f339b23
SHA1 c5cb39850affb7ed322bfb0a4900e17c54f95a11
SHA512 2d50c1aa6ca237b9dbe97f000a082a223618f2164c8ab42ace9f4e142c318b2fc53e91a476dbe9c2dd459942b61507df5c551bd5c692a2b2a2037e4f6bd2a12b
SSDEEP 49152:HnUXzRe4cjAx+L/G/3JHQZutOnmSzZniyui0EJHezdcc/DK9kTO1S:HUD8djA0LOvJdtOmSlniyuiPFePmS61S
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12785

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTempPathA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess SetEnvironmentVariableA Sleep GetTickCount GetCommandLineA lstrlenA GetVersion SetErrorMode lstrcpynA GetDiskFreeSpaceA GlobalUnlock GetWindowsDirectoryA SetCurrentDirectoryA GetLastError CreateDirectoryA CreateProcessA RemoveDirectoryA CreateFileA GetTempFileNameA ReadFile WriteFile lstrcpyA MoveFileExA lstrcatA GetSystemDirectoryA GetProcAddress GetExitCodeProcess WaitForSingleObject CompareFileTime SetFileAttributesA GetFileAttributesA GetShortPathNameA MoveFileA GetFullPathNameA SetFileTime SearchPathA CloseHandle lstrcmpiA CreateThread GlobalLock lstrcmpA FindFirstFileA FindNextFileA DeleteFileA SetFilePointer GetPrivateProfileStringA FindClose MultiByteToWideChar FreeLibrary MulDiv WritePrivateProfileStringA LoadLibraryExA GetModuleHandleA GlobalAlloc GlobalFree ExpandEnvironmentStringsA

user32

ScreenToClient GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard PostQuitMessage GetWindowRect EnableMenuItem CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndDialog RegisterClassA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx GetDC CreateDialogParamA SetTimer GetDlgItem SetWindowLongA SetForegroundWindow LoadImageA IsWindow SendMessageTimeoutA FindWindowExA OpenClipboard TrackPopupMenu AppendMenuA EndPaint DestroyWindow wsprintfA ShowWindow SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExA SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA SHFileOperationA

advapi32

AdjustTokenPrivileges RegCreateKeyExA RegOpenKeyExA SetFileSecurityA OpenProcessToken LookupPrivilegeValueA RegEnumValueA RegDeleteKeyA RegDeleteValueA RegCloseKey RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

#/power.exe

SHA256 1bee45423044b5a6bf0ad0dd2870117824b000784ce81c5f8a1b930bb8bc0465
MD5 743f47ae7d09fce22d0a7c724461f7e3
SHA1 8e98dd1efb70749af72c57344aab409fb927394e
SHA512 567993c3b798365efa07b7a46fda98494bfe540647f27654764e78b7f60f093d403b77b9abb889cfb09b44f13515ce3c041fc5db05882418313c3b3409dd77bf
SSDEEP 12288:0nMyjYPYhJDDNo6YdXTVq/ywZE8ktb/3o0:ppPEDDy68Yp+8k9/3T
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

442652

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

428KB

Virtual Size

428KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

#/sant.exe

SHA256 3fd826fc0c032721466b94ab3ec7dcfe006cc284e16132af6b91dfbc064b0907
MD5 5effca91c3f1e9c87d364460097f8048
SHA1 28387c043ab6857aaa51865346046cf5dc4c7b49
SHA512 b0dba30fde295d3f7858db9d1463239b30cd84921971032b2afb96f811a53ac12c1e6f72013d2eff397b0b89c371e7c023c951cd2102f94157cba9918cd2c3e0
SSDEEP 192:I0EFK6COuHNlcW/1bXMvP8trt2mS3+dlRXwaziCP4kAIschKp0jeaJYrIC+sD:I0m/50t9bGPMrXSyGCP4kA6LyrIle
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

1

Entry point

5424

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

#/ufx.exe

IMPHASH 3eaa732d4dae53340f9646bdd85dac41
SHA256 dc7ee8b1ffec35c19e1e767265c1b40e6eb6af51157eaa8b05d51329697d16fa
MD5 4ccfdd49dbab092a4cc7b650372c4f91
SHA1 e842881fd09001a871e737c816f5c3d11ea45448
SHA512 ebb8e34a991809094a7e1e28135ef4e81ff4681d6e4afbb7caa2fc4093a3461eecc63b1171ae3f8da9c182d2ee68825fb50cbf7080b704d284feca07acd1b63e
SSDEEP 6144:ma4InuJg58BkgqPoDH49n8Bb/c2aXZGjQ//rAsDGf83wlUY:mat0EAH49n8BQGYtyfiwln
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

119624

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb

comctl32

InitCommonControlsEx

shlwapi

SHAutoComplete

kernel32

ReadFile GetFileAttributesW SetFileAttributesW FindNextFileW GetFullPathNameW GetModuleFileNameW FindResourceW GetModuleHandleW FreeLibrary GetProcAddress LoadLibraryW GetCurrentProcessId GetLocaleInfoW GetNumberFormatW ExpandEnvironmentStringsW WaitForSingleObject DosDateTimeToFileTime GetDateFormatW GetTimeFormatW FileTimeToSystemTime FileTimeToLocalFileTime GetExitCodeProcess GetTempPathW MoveFileExW Sleep UnmapViewOfFile MapViewOfFile GetCommandLineW CreateFileMappingW GetTickCount SetEnvironmentVariableW OpenFileMappingW CreateThread EnterCriticalSection LeaveCriticalSection GetProcessAffinityMask ReleaseSemaphore ResetEvent DeleteCriticalSection SetEvent SetThreadPriority InitializeCriticalSection CreateEventW CreateSemaphoreW SystemTimeToFileTime GetSystemTime LocalFileTimeToFileTime WideCharToMultiByte MultiByteToWideChar CompareStringW IsDBCSLeadByte FindFirstFileW GetFileType SetCurrentDirectoryW WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetLocaleInfoA GetStringTypeW GetStringTypeA LoadLibraryA GetConsoleMode GetConsoleCP InitializeCriticalSectionAndSpinCount QueryPerformanceCounter SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA LCMapStringW LCMapStringA IsValidCodePage GetOEMCP GetACP GetModuleFileNameA ExitProcess HeapSize IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess VirtualAlloc VirtualFree HeapCreate InterlockedDecrement GetCurrentThreadId InterlockedIncrement TlsFree TlsSetValue TlsAlloc TlsGetValue GetStartupInfoA GetCommandLineA RaiseException GetSystemTimeAsFileTime SetEndOfFile SetFilePointer GetStdHandle WriteFile FlushFileBuffers GetLongPathNameW MoveFileW GetShortPathNameW CreateDirectoryW RemoveDirectoryW GlobalAlloc DeleteFileW FindClose CreateFileW DeviceIoControl SetFileTime GetCurrentProcess CloseHandle CreateHardLinkW SetLastError GetLastError GetCurrentDirectoryW CreateFileA GetCPInfo HeapAlloc HeapReAlloc HeapFree RtlUnwind

user32

EnableWindow ShowWindow GetDlgItem MessageBoxW FindWindowExW GetParent MapWindowPoints CreateWindowExW UpdateWindow LoadCursorW RegisterClassExW DefWindowProcW DestroyWindow CopyRect IsWindow CharUpperW OemToCharBuffA LoadIconW PostMessageW GetSysColor SetForegroundWindow WaitForInputIdle IsWindowVisible DialogBoxParamW DestroyIcon SetFocus GetClassNameW SendDlgItemMessageW EndDialog GetDlgItemTextW SetDlgItemTextW wvsprintfW SendMessageW GetDC ReleaseDC PeekMessageW GetMessageW TranslateMessage DispatchMessageW LoadStringW GetWindowRect GetClientRect SetWindowPos GetWindowTextW SetWindowTextW GetSystemMetrics GetWindow GetWindowLongW SetWindowLongW LoadBitmapW

gdi32

GetDeviceCaps CreateCompatibleDC GetObjectW CreateCompatibleBitmap SelectObject StretchBlt DeleteDC DeleteObject

comdlg32

GetSaveFileNameW CommDlgExtendedError GetOpenFileNameW

advapi32

RegOpenKeyExW RegQueryValueExW RegCreateKeyExW RegSetValueExW RegCloseKey SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges

shell32

SHChangeNotify SHGetFileInfoW SHGetMalloc SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW ShellExecuteExW SHFileOperationW

ole32

CLSIDFromString CoCreateInstance OleInitialize OleUninitialize CreateStreamOnHGlobal

oleaut32

VariantInit

#/va.exe

SHA256 3139bf3c4b958c3a019af512aecdb8161b9d6d7432d2c404abda3f42b63f34f1
MD5 c084e736931c9e6656362b0ba971a628
SHA1 ef83b95fc645ad3a161a19ccef3224c72e5472bd
SHA512 cbd6485840a117b52e24586da536cefa94ca087b41eb460d27bc2bd320217957c9e0e96b0daf74343efde2e23a5242e7a99075aabf5f9e18e03b52eb7151ae1f
SSDEEP 1536:k6qvIQATBG8PT6vx3a1JKG8Z8YavU2apUsLLcIbw3PsjQ4YIeuPlP9:MIFTf23eJK9Z8YavLapUsLLcIU3pIeu/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

74920

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

70KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

12B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Keygen.exe

IMPHASH 06ac1f21ee2a357ffb0dd7db52cbbb13
SHA256 88cad5f9433e50af09ac9cad9db06e9003e85be739060b88b64186c05c0d636b
MD5 dbde61502c5c0e17ebc6919f361c32b9
SHA1 189749cf0b66a9f560b68861f98c22cdbcafc566
SHA512 d9b8537f05844ec2f2549e2049e967a8023bfe432e3a9cf25fc0f7ad720e57a5830be733e1812cc806c5b68cd9586a031e394f67fc7e3f7fe390625fd5dedfbb
SSDEEP 24576:uSdQdKdRdOdHdmHBnWs/nROBiGR4+hazer+Vufo/JxBYQ5:hH9DnR1Z+45Ufo/PBL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

memset strncpy _strnicmp strncmp strlen strcmp memmove memcpy sprintf

kernel32

GetModuleHandleA HeapCreate RemoveDirectoryA GetShortPathNameA HeapDestroy ExitProcess GetTempFileNameA FindResourceA LoadResource SizeofResource GetExitCodeProcess HeapFree HeapAlloc LoadLibraryA GetProcAddress FreeLibrary GetCurrentThreadId GetCurrentProcessId InitializeCriticalSection GetCommandLineA GetModuleFileNameA GetEnvironmentVariableA SetEnvironmentVariableA CloseHandle GetCurrentProcess TerminateProcess SetUnhandledExceptionFilter GetVersionExA Sleep HeapReAlloc EnterCriticalSection LeaveCriticalSection SetLastError GetCurrentDirectoryA SetCurrentDirectoryA DeleteFileA GetTempPathA CreateDirectoryA WriteFile CreateFileA SetFilePointer ReadFile

comctl32

InitCommonControls InitCommonControlsEx

user32

MessageBoxA SendMessageA GetWindowThreadProcessId IsWindowVisible IsWindowEnabled GetForegroundWindow EnableWindow EnumWindows DestroyWindow GetSysColor GetSysColorBrush CreateWindowExA GetWindowLongA PostMessageA CallWindowProcA SetWindowLongA SetFocus GetWindowTextLengthA GetWindowTextA RedrawWindow RemovePropA DefWindowProcA SetPropA GetParent GetPropA GetWindow SetActiveWindow UnregisterClassA DestroyAcceleratorTable LoadIconA LoadCursorA RegisterClassA AdjustWindowRect GetSystemMetrics GetActiveWindow GetWindowRect ShowWindow CreateAcceleratorTableA PeekMessageA MsgWaitForMultipleObjects GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA SetCursorPos LoadImageA SetCursor MapWindowPoints MoveWindow SystemParametersInfoA GetKeyState SetCapture GetCursorPos ReleaseCapture GetClientRect FillRect EnumChildWindows DefFrameProcA GetFocus IsChild GetClassNameA

gdi32

GetStockObject SetBkColor SetTextColor CreateSolidBrush DeleteObject

ole32

CoInitialize CoTaskMemFree RevokeDragDrop

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Lonelyscreen.1.2.9.keygen.by.Paradox/FILE_ID.DIZ

SHA256 eac9c33a653ff0a1553e8db0854802c720a3b8d16689ff997ffe19be83b1105b
MD5 45c0cc0eb032d034649f6db49146919b
SHA1 ba16169a372a4c7b821d28580deb039544fde39a
SHA512 9f89d764bc71e863d97afdc1bbfaf680d971be8c4a36a5f7633d97bbdef7f0e0d42f3ca13b463d222dcf372d0c62400ecbb16e4f7f78539614b6bf9d560b854c
MD5 SHA1 SHA512

Lonelyscreen.1.2.9.keygen.by.Paradox/Lonelyscreen.1.2.9.keygen.by.Paradox.exe

IMPHASH fcf1390e9ce472c7270447fc5c61a0c1
SHA256 b2f43148c08f4fe2a0902873813fd7bbb9b513920089939c220826097480396c
MD5 48c356e14b98fb905a36164e28277ae5
SHA1 d7630bd683af02de03aebc8314862c512acd5656
SHA512 278ae5723544691844aae917938c7ab835f5da9c01c59472497112ca9f5d326a2586fa0bc79fbd0d907aab972b3f855c0087656c5e10504adc760b756ada221b
SSDEEP 196608:t7JG5fYHJl9nhdOvPuAZxFa9dfoyG5euyHvf97+pbgEtBRNBL1LFWIHWdgku7:t7BXWGldf+Au6VGBjFmJq
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

123385

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb

kernel32

GetLastError SetLastError FormatMessageW GetCurrentProcess DeviceIoControl SetFileTime CloseHandle CreateDirectoryW RemoveDirectoryW CreateFileW DeleteFileW CreateHardLinkW GetShortPathNameW GetLongPathNameW MoveFileW GetFileType GetStdHandle WriteFile ReadFile FlushFileBuffers SetEndOfFile SetFilePointer SetFileAttributesW GetFileAttributesW FindClose FindFirstFileW FindNextFileW GetVersionExW GetCurrentDirectoryW GetFullPathNameW FoldStringW GetModuleFileNameW GetModuleHandleW FindResourceW FreeLibrary GetProcAddress GetCurrentProcessId ExitProcess SetThreadExecutionState Sleep LoadLibraryW GetSystemDirectoryW CompareStringW AllocConsole FreeConsole AttachConsole WriteConsoleW GetProcessAffinityMask CreateThread SetThreadPriority InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetEvent ResetEvent ReleaseSemaphore WaitForSingleObject CreateEventW CreateSemaphoreW GetSystemTime SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime SystemTimeToFileTime FileTimeToLocalFileTime LocalFileTimeToFileTime FileTimeToSystemTime GetCPInfo IsDBCSLeadByte MultiByteToWideChar WideCharToMultiByte GlobalAlloc LockResource GlobalLock GlobalUnlock GlobalFree LoadResource SizeofResource SetCurrentDirectoryW GetExitCodeProcess GetLocalTime GetTickCount MapViewOfFile UnmapViewOfFile CreateFileMappingW OpenFileMappingW GetCommandLineW SetEnvironmentVariableW ExpandEnvironmentStringsW GetTempPathW MoveFileExW GetLocaleInfoW GetTimeFormatW GetDateFormatW GetNumberFormatW SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize SetStdHandle GetProcessHeap RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead TerminateProcess RtlUnwind EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW QueryPerformanceFrequency GetModuleHandleExW GetModuleFileNameA GetACP HeapFree HeapAlloc HeapReAlloc GetStringTypeW LCMapStringW FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW DecodePointer

gdiplus

GdiplusShutdown GdiplusStartup GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipDisposeImage GdipCloneImage GdipFree GdipAlloc

Lonelyscreen.1.2.9.keygen.by.Paradox/Paradox.nfo

SHA256 b21941a4eb5f581ee0974ab5013432a45fa4b3ad77217e1a7fbbe27dda23e466
MD5 eff299daa83644d00daaa04d849595fb
SHA1 a7b8b47c71a4cbd591d2ad918e1311c6b9e6f892
SHA512 60e4d7fc78bec84eb545e103985355295f7427928fefdc215e4ca2e50b3b1347456897c367727757f6ed660c4d7cb4d4de97527f173c02d06d129481907348b2
SSDEEP 192:+g5+RFUSQpWtT7khY6/VXBpQNIin6bu4pAG:G7NQhYoQ9wsG
MD5 SHA1 SHA512 SSDEEP

LtHv0O2KZDK4M637.exe

IMPHASH eb97e4fc5518ac300a92a11673825e0b
SHA256 3e385633fc19035dadecf79176a763fe675429b611dac5af2775dd3edca23ab9
MD5 5e25abc3a3ad181d2213e47fa36c4a37
SHA1 ba365097003860c8fb9d332f377e2f8103d220e0
SHA512 676596d21cab10389f47a3153d53bbd36b161c77875a4e4aa976032770cb4ec7653c521aaeda98ab4da7777e49f426f4019298d5fc4ed8be2f257e9d0868d681
SSDEEP 196608:Lj43l1SYnShCcjEtOsZ1MJWTqHkzNcWUU5QH7MiXBhxsns3qveh1DCJv/zdM:LGzUCcUOmKoTqH0N9UV7VxHsnpjXK
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

AutoIT Executable

AutoIT scripts compiled to PE executables.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

163658

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

wsock32

WSACleanup socket inet_ntoa setsockopt ntohs recvfrom ioctlsocket htons WSAStartup __WSAFDIsSet select accept listen bind closesocket WSAGetLastError recv sendto send inet_addr gethostbyname gethostname connect

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

winmm

timeGetTime waveOutSetVolume mciSendStringW

comctl32

ImageList_ReplaceIcon ImageList_Destroy ImageList_Remove ImageList_SetDragCursorImage ImageList_BeginDrag ImageList_DragEnter ImageList_DragLeave ImageList_EndDrag ImageList_DragMove InitCommonControlsEx ImageList_Create

mpr

WNetUseConnectionW WNetCancelConnection2W WNetGetConnectionW WNetAddConnection2W

wininet

InternetQueryDataAvailable InternetCloseHandle InternetOpenW InternetSetOptionW InternetCrackUrlW HttpQueryInfoW InternetQueryOptionW HttpOpenRequestW HttpSendRequestW FtpOpenFileW FtpGetFileSize InternetOpenUrlW InternetReadFile InternetConnectW

psapi

GetProcessMemoryInfo

iphlpapi

IcmpCreateFile IcmpCloseHandle IcmpSendEcho

userenv

DestroyEnvironmentBlock UnloadUserProfile CreateEnvironmentBlock LoadUserProfileW

uxtheme

IsThemeActive

kernel32

DuplicateHandle CreateThread WaitForSingleObject HeapAlloc GetProcessHeap HeapFree Sleep GetCurrentThreadId MultiByteToWideChar MulDiv GetVersionExW IsWow64Process GetSystemInfo FreeLibrary LoadLibraryA GetProcAddress SetErrorMode GetModuleFileNameW WideCharToMultiByte lstrcpyW lstrlenW GetModuleHandleW QueryPerformanceCounter VirtualFreeEx OpenProcess VirtualAllocEx WriteProcessMemory ReadProcessMemory CreateFileW SetFilePointerEx SetEndOfFile ReadFile WriteFile FlushFileBuffers TerminateProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW SetFileTime GetFileAttributesW FindFirstFileW SetCurrentDirectoryW GetLongPathNameW GetShortPathNameW DeleteFileW FindNextFileW CopyFileExW MoveFileW CreateDirectoryW RemoveDirectoryW SetSystemPowerState QueryPerformanceFrequency FindResourceW LoadResource LockResource SizeofResource EnumResourceNamesW OutputDebugStringW GetTempPathW GetTempFileNameW DeviceIoControl GetLocalTime CompareStringW GetCurrentProcess EnterCriticalSection LeaveCriticalSection GetStdHandle CreatePipe InterlockedExchange TerminateThread LoadLibraryExW FindResourceExW CopyFileW VirtualFree FormatMessageW GetExitCodeProcess GetPrivateProfileStringW WritePrivateProfileStringW GetPrivateProfileSectionW WritePrivateProfileSectionW GetPrivateProfileSectionNamesW FileTimeToLocalFileTime FileTimeToSystemTime SystemTimeToFileTime LocalFileTimeToFileTime GetDriveTypeW GetDiskFreeSpaceExW GetDiskFreeSpaceW GetVolumeInformationW SetVolumeLabelW CreateHardLinkW SetFileAttributesW CreateEventW SetEvent GetEnvironmentVariableW SetEnvironmentVariableW GlobalLock GlobalUnlock GlobalAlloc GetFileSize GlobalFree GlobalMemoryStatusEx Beep GetSystemDirectoryW HeapReAlloc HeapSize GetComputerNameW GetWindowsDirectoryW GetCurrentProcessId GetProcessIoCounters CreateProcessW GetProcessId SetPriorityClass LoadLibraryW VirtualAlloc IsDebuggerPresent GetCurrentDirectoryW lstrcmpiW DecodePointer GetLastError RaiseException InitializeCriticalSectionAndSpinCount DeleteCriticalSection InterlockedDecrement InterlockedIncrement GetCurrentThread CloseHandle GetFullPathNameW EncodePointer ExitProcess GetModuleHandleExW ExitThread GetSystemTimeAsFileTime ResumeThread GetCommandLineW IsProcessorFeaturePresent IsValidCodePage GetACP GetOEMCP GetCPInfo SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetStringTypeW SetStdHandle GetFileType GetConsoleCP GetConsoleMode RtlUnwind ReadConsoleW GetTimeZoneInformation GetDateFormatW GetTimeFormatW LCMapStringW GetEnvironmentStringsW FreeEnvironmentStringsW WriteConsoleW FindClose SetEnvironmentVariableA

user32

AdjustWindowRectEx CopyImage SetWindowPos GetCursorInfo RegisterHotKey ClientToScreen GetKeyboardLayoutNameW IsCharAlphaW IsCharAlphaNumericW IsCharLowerW IsCharUpperW GetMenuStringW GetSubMenu GetCaretPos IsZoomed MonitorFromPoint GetMonitorInfoW SetWindowLongW SetLayeredWindowAttributes FlashWindow GetClassLongW TranslateAcceleratorW IsDialogMessageW GetSysColor InflateRect DrawFocusRect DrawTextW FrameRect DrawFrameControl FillRect PtInRect DestroyAcceleratorTable CreateAcceleratorTableW SetCursor GetWindowDC GetSystemMetrics GetActiveWindow CharNextW wsprintfW RedrawWindow DrawMenuBar DestroyMenu SetMenu GetWindowTextLengthW CreateMenu IsDlgButtonChecked DefDlgProcW CallWindowProcW ReleaseCapture SetCapture CreateIconFromResourceEx mouse_event ExitWindowsEx SetActiveWindow FindWindowExW EnumThreadWindows SetMenuDefaultItem InsertMenuItemW IsMenu TrackPopupMenuEx GetCursorPos DeleteMenu SetRect GetMenuItemID GetMenuItemCount SetMenuItemInfoW GetMenuItemInfoW SetForegroundWindow IsIconic FindWindowW MonitorFromRect keybd_event SendInput GetAsyncKeyState SetKeyboardState GetKeyboardState GetKeyState VkKeyScanW LoadStringW DialogBoxParamW MessageBeep EndDialog SendDlgItemMessageW GetDlgItem SetWindowTextW CopyRect ReleaseDC GetDC EndPaint BeginPaint GetClientRect GetMenu DestroyWindow EnumWindows GetDesktopWindow IsWindow IsWindowEnabled IsWindowVisible EnableWindow InvalidateRect GetWindowLongW GetWindowThreadProcessId AttachThreadInput GetFocus GetWindowTextW ScreenToClient SendMessageTimeoutW EnumChildWindows CharUpperBuffW GetParent GetDlgCtrlID SendMessageW MapVirtualKeyW PostMessageW GetWindowRect SetUserObjectSecurity CloseDesktop CloseWindowStation OpenDesktopW SetProcessWindowStation GetProcessWindowStation OpenWindowStationW GetUserObjectSecurity MessageBoxW DefWindowProcW SetClipboardData EmptyClipboard CountClipboardFormats CloseClipboard GetClipboardData IsClipboardFormatAvailable OpenClipboard BlockInput GetMessageW LockWindowUpdate DispatchMessageW TranslateMessage PeekMessageW UnregisterHotKey CheckMenuRadioItem CharLowerBuffW MoveWindow SetFocus PostQuitMessage KillTimer CreatePopupMenu RegisterWindowMessageW SetTimer ShowWindow CreateWindowExW RegisterClassExW LoadIconW LoadCursorW GetSysColorBrush GetForegroundWindow MessageBoxA DestroyIcon SystemParametersInfoW LoadImageW GetClassNameW

gdi32

StrokePath DeleteObject GetTextExtentPoint32W ExtCreatePen GetDeviceCaps EndPath SetPixel CloseFigure CreateCompatibleBitmap CreateCompatibleDC SelectObject StretchBlt GetDIBits LineTo AngleArc MoveToEx Ellipse DeleteDC GetPixel CreateDCW GetStockObject GetTextFaceW CreateFontW SetTextColor PolyDraw BeginPath Rectangle SetViewportOrgEx GetObjectW SetBkMode RoundRect SetBkColor CreatePen CreateSolidBrush StrokeAndFillPath

comdlg32

GetOpenFileNameW GetSaveFileNameW

advapi32

GetAce RegEnumValueW RegDeleteValueW RegDeleteKeyW RegEnumKeyExW RegSetValueExW RegOpenKeyExW RegCloseKey RegQueryValueExW RegConnectRegistryW InitializeSecurityDescriptor InitializeAcl AdjustTokenPrivileges OpenThreadToken OpenProcessToken LookupPrivilegeValueW DuplicateTokenEx CreateProcessAsUserW CreateProcessWithLogonW GetLengthSid CopySid LogonUserW AllocateAndInitializeSid CheckTokenMembership RegCreateKeyExW FreeSid GetTokenInformation GetSecurityDescriptorDacl GetAclInformation AddAce SetSecurityDescriptorDacl GetUserNameW InitiateSystemShutdownExW

shell32

DragQueryPoint ShellExecuteExW DragQueryFileW SHEmptyRecycleBinW SHGetPathFromIDListW SHBrowseForFolderW SHCreateShellItem SHGetDesktopFolder SHGetSpecialFolderLocation SHGetFolderPathW SHFileOperationW ExtractIconExW Shell_NotifyIconW ShellExecuteW DragFinish

ole32

CoTaskMemAlloc CoTaskMemFree CLSIDFromString ProgIDFromCLSID CLSIDFromProgID OleSetMenuDescriptor MkParseDisplayName OleSetContainedObject CoCreateInstance IIDFromString StringFromGUID2 CreateStreamOnHGlobal OleInitialize OleUninitialize CoInitialize CoUninitialize GetRunningObjectTable CoGetInstanceFromFile CoGetObject CoSetProxyBlanket CoCreateInstanceEx CoInitializeSecurity

oleaut32

LoadTypeLibEx VariantCopyInd SysReAllocString SysFreeString SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayUnaccessData SafeArrayAccessData SafeArrayAllocData SafeArrayAllocDescriptorEx SafeArrayCreateVector RegisterTypeLi CreateStdDispatch DispCallFunc VariantChangeType SysStringLen VariantTimeToSystemTime VarR8FromDec SafeArrayGetVartype VariantCopy VariantClear OleLoadPicture QueryPathOfRegTypeLi RegisterTypeLibForUser UnRegisterTypeLibForUser UnRegisterTypeLi CreateDispTypeInfo SysAllocString VariantInit

Magic_File_v3_keygen_by_KeygenNinja.exe

IMPHASH 4cfda23baf1e2e983ddfeca47a5c755a
SHA256 72fae9a9d8cfd546975fd86222bc1f7f70133d0845798a683569bb8119ffa3b1
MD5 80e5a163c5396401b58a3b24f2e00d38
SHA1 589accaeeca95b8d69fa7bc14f402925dd338a6a
SHA512 cc0ede6416032035943522e5249ac378da4ba58ab836d13b53907567a65f0c296aa7263523ca23f1843fb86a88d123864e9385f4b97bac870a110f6fd2ddf1e6
SSDEEP 196608:t5N9rzUBJGKoeyIf6Rffyo5JDXdhz10MaIjP:jN9/EJQO6FX5JDXdhZ0Ma0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

120779

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb

comctl32

InitCommonControlsEx

shlwapi

SHAutoComplete

kernel32

FindClose FindNextFileW FindFirstFileW GetVersionExW GetCurrentDirectoryW GetFullPathNameW GetModuleFileNameW FindResourceW GetModuleHandleW FreeLibrary GetProcAddress LoadLibraryW GetCurrentProcessId GetLocaleInfoW GetNumberFormatW SetEnvironmentVariableW ExpandEnvironmentStringsW WaitForSingleObject GetDateFormatW GetTimeFormatW FileTimeToSystemTime FileTimeToLocalFileTime GetExitCodeProcess GetTempPathW MoveFileExW UnmapViewOfFile Sleep MapViewOfFile GetCommandLineW CreateFileMappingW GetTickCount OpenFileMappingW InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection CreateThread GetProcessAffinityMask CreateEventW CreateSemaphoreW ReleaseSemaphore ResetEvent SetEvent SetThreadPriority SystemTimeToFileTime GetSystemTime SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime LocalFileTimeToFileTime WideCharToMultiByte MultiByteToWideChar CompareStringW IsDBCSLeadByte SetFileTime SetFileAttributesW SetCurrentDirectoryW WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle GetLocaleInfoA GetStringTypeW GetStringTypeA LoadLibraryA GetConsoleMode GetConsoleCP InitializeCriticalSectionAndSpinCount QueryPerformanceCounter SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetModuleHandleA LCMapStringW LCMapStringA IsValidCodePage GetOEMCP GetACP GetModuleFileNameA ExitProcess HeapSize IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess VirtualAlloc VirtualFree HeapCreate InterlockedDecrement GetCurrentThreadId InterlockedIncrement TlsFree TlsSetValue TlsAlloc TlsGetValue GetStartupInfoA GetCommandLineA RaiseException GetFileAttributesW FlushFileBuffers ReadFile GetFileType SetEndOfFile SetFilePointer WriteFile GetStdHandle GetLongPathNameW GetShortPathNameW GlobalAlloc MoveFileW CreateFileW CreateDirectoryW DeviceIoControl RemoveDirectoryW DeleteFileW CreateHardLinkW GetCurrentProcess CloseHandle SetLastError GetLastError CreateFileA GetCPInfo GetSystemTimeAsFileTime HeapAlloc HeapReAlloc HeapFree RtlUnwind

user32

EnableWindow GetDlgItem ShowWindow SetWindowLongW GetDC ReleaseDC FindWindowExW GetParent MapWindowPoints CreateWindowExW UpdateWindow LoadCursorW RegisterClassExW DefWindowProcW DestroyWindow CopyRect IsWindow CharUpperW OemToCharBuffA LoadIconW LoadBitmapW PostMessageW GetSysColor SetForegroundWindow MessageBoxW WaitForInputIdle IsWindowVisible DialogBoxParamW DestroyIcon SetFocus GetClassNameW SendDlgItemMessageW EndDialog GetDlgItemTextW SetDlgItemTextW wvsprintfW SendMessageW PeekMessageW GetMessageW TranslateMessage DispatchMessageW LoadStringW GetWindowRect GetClientRect SetWindowPos GetWindowTextW SetWindowTextW GetSystemMetrics GetWindow GetWindowLongW

gdi32

GetDeviceCaps CreateCompatibleDC CreateCompatibleBitmap SelectObject StretchBlt DeleteDC GetObjectW DeleteObject CreateDIBSection

comdlg32

GetSaveFileNameW CommDlgExtendedError GetOpenFileNameW

advapi32

RegOpenKeyExW RegQueryValueExW RegCreateKeyExW RegSetValueExW RegCloseKey SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges

shell32

SHBrowseForFolderW ShellExecuteExW SHGetSpecialFolderLocation SHFileOperationW SHGetPathFromIDListW SHGetMalloc SHChangeNotify SHGetFileInfoW

ole32

CLSIDFromString CoCreateInstance OleInitialize OleUninitialize CreateStreamOnHGlobal

oleaut32

VariantInit

OnlineInstaller.exe

IMPHASH 5bd730b74335de2d8c76ffbc12562b9c
SHA256 59c662a5207c6806046205348b22ee45da3f685fe022556716dbbd6643e61834
MD5 4b042bfd9c11ab6a3fb78fa5c34f55d0
SHA1 b0f506640c205d3fbcfe90bde81e49934b870eab
SHA512 dae5957c8eee5ae7dd106346f7ea349771b693598f3d4d54abb39940c3d1a0b5731c8d4e07c29377838988a1e93dcd8c2946ce0515af87de61bca6de450409d3
SSDEEP 98304:ghXqJiXwwhwvxR7FI6wYroMUQrYeoFj6bjsKzZx7T7:ghXqsX3hs79bxiEbgKX7
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

bd:97:4f:10:ca:6a:09:15:96:cd:31:82:d7:81:68:8f:5d:52:1f:5d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shanghai Talkus Information Co.LTD.,O=Shanghai Talkus Information Co.LTD.,L=Shanghai,ST=Shanghai,C=CN

Chains

Dec 12, 2024

Minor OS version

1

Major OS version

5

Entry point

341217

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\john\Desktop\PRC20180304\Release\InstallerDrvMini.pdb

kernel32

CreateEventW SetEvent SetFilePointer GetTempPathW CopyFileW GetCommandLineW GetSystemInfo CreateThread FlushFileBuffers GetModuleFileNameW SizeofResource LoadLibraryW GetSystemDirectoryW GetModuleHandleW WaitForSingleObject LockResource CreateDirectoryW GetCurrentProcess CreateProcessW LoadResource FreeLibrary FindResourceW GetNativeSystemInfo GetFullPathNameW GetSystemDefaultLangID MultiByteToWideChar WideCharToMultiByte GetProcessHeap HeapFree HeapAlloc LoadLibraryA GetProcAddress SystemTimeToFileTime CloseHandle DeleteCriticalSection DecodePointer GetLastError RaiseException CreateFileW ReadFile WriteConsoleW SetStdHandle SetFilePointerEx GetConsoleMode GetConsoleCP LoadLibraryExW FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetOEMCP IsValidCodePage GetCurrentThreadId HeapSize GetStdHandle GetModuleHandleExW LCMapStringW GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc Sleep InitializeCriticalSectionAndSpinCount WriteFile GetTickCount GetFileSize SetCurrentDirectoryW GetCurrentDirectoryW GetACP FreeResource ExitProcess MulDiv GetFileType SetFileTime DuplicateHandle DosDateTimeToFileTime GetLocalTime InterlockedIncrement InterlockedDecrement GlobalAlloc GlobalLock GlobalUnlock EncodePointer EnterCriticalSection LeaveCriticalSection GetStringTypeW IsDebuggerPresent OutputDebugStringW IsProcessorFeaturePresent RtlUnwind HeapReAlloc GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError TerminateProcess

user32

PostQuitMessage GetActiveWindow GetSystemMetrics MessageBoxW GetGUIThreadInfo InvalidateRgn CreateAcceleratorTableW GetWindowTextLengthW GetWindowTextW SetWindowTextW GetWindowRgn MoveWindow GetSysColor ClientToScreen GetCaretPos SetCaretPos ShowCaret HideCaret GetCaretBlinkTime CreateCaret SetRect wsprintfW GetMessageW TranslateMessage DispatchMessageW SendMessageW PostMessageW DefWindowProcW CallWindowProcW RegisterClassW RegisterClassExW GetClassInfoExW CreateWindowExW IsWindow ShowWindow SetWindowPos IsIconic SetFocus EnableWindow GetMenu SetPropW GetPropW GetClientRect GetWindowRect AdjustWindowRectEx GetWindowLongW SetWindowLongW GetParent GetWindow LoadCursorW LoadImageW MonitorFromWindow GetMonitorInfoW DestroyWindow IsWindowVisible CharNextW GetFocus GetKeyState SetCapture ReleaseCapture SetTimer KillTimer GetDC ReleaseDC BeginPaint EndPaint GetUpdateRect InvalidateRect GetCursorPos ScreenToClient MapWindowPoints IntersectRect UnionRect IsRectEmpty PtInRect wvsprintfW SetCursor InflateRect OffsetRect IsZoomed SetWindowRgn CharPrevW DrawTextW FillRect

advapi32

RegOpenKeyExA LookupPrivilegeValueW RegQueryInfoKeyW RegQueryValueExW OpenSCManagerW OpenProcessToken CloseServiceHandle CreateServiceW RegOpenKeyExW RegEnumKeyExW AdjustTokenPrivileges RegCloseKey RegSetValueExW RegOpenKeyW StartServiceW

ole32

CLSIDFromProgID OleLockRunning CoCreateInstance CoUninitialize CoInitialize CreateStreamOnHGlobal CLSIDFromString CoCreateGuid

iphlpapi

GetAdaptersInfo

wininet

HttpQueryInfoA InternetConnectA HttpOpenRequestA HttpSendRequestA InternetOpenA InternetCloseHandle

gdiplus

GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdipCreateLineBrushI GdipDeleteBrush GdipDrawString GdiplusShutdown GdiplusStartup GdipFree GdipAlloc GdipGetFamily GdipDeleteFont GdipCreateFontFromLogfontA GdipCreateFontFromDC GdipDeleteFontFamily GdipDrawImageRectI GdipDrawImage GdipGraphicsClear GdipCreateBitmapFromScan0 GdipSetInterpolationMode GdipSetTextRenderingHint GdipSetPixelOffsetMode GdipSetSmoothingMode GdipSetCompositingQuality GdipDeleteGraphics GdipCreateFromHDC GdipCloneBrush GdipCreateStringFormat GdipDeleteStringFormat GdipSetStringFormatAlign GdipSetStringFormatLineAlign GdipLoadImageFromStream GdipLoadImageFromStreamICM GdipGetPropertyItem GdipGetPropertyItemSize GdipImageSelectActiveFrame GdipGetImageWidth GdipGetImageHeight GdipImageGetFrameDimensionsCount GdipImageGetFrameDimensionsList GdipImageGetFrameCount

imagehlp

CheckSumMappedFile

comctl32

_TrackMouseEvent ord17

imm32

ImmReleaseContext ImmSetCompositionFontW ImmSetCompositionWindow ImmGetContext

gdi32

SetBkColor SetBkMode StretchBlt SetStretchBltMode SetTextColor CreateDIBSection LineTo TextOutW ExtTextOutW GdiFlush GetTextExtentPoint32W GetClipBox GetCharABCWidthsW CreateSolidBrush CreateRectRgnIndirect CreatePenIndirect CombineRgn ExtSelectClipRgn CreateRoundRectRgn SelectClipRgn GetObjectW GetTextMetricsW SelectObject SaveDC RestoreDC Rectangle GetStockObject CreatePatternBrush PtInRegion CreateRectRgn GetObjectA GetDeviceCaps DeleteObject DeleteDC CreatePen CreateFontIndirectW CreateCompatibleDC CreateCompatibleBitmap BitBlt SetWindowOrgEx RoundRect MoveToEx

oleaut32

VariantClear VariantInit SysFreeString SysAllocString

??0CActiveXUI@DuiLib@@QAE@ABV01@@Z ??0CActiveXUI@DuiLib@@QAE@XZ ??0CButtonUI@DuiLib@@QAE@ABV01@@Z ??0CButtonUI@DuiLib@@QAE@XZ ??0CCheckBoxUI@DuiLib@@QAE@ABV01@@Z ??0CCheckBoxUI@DuiLib@@QAE@XZ ??0CChildLayoutUI@DuiLib@@QAE@ABV01@@Z ??0CChildLayoutUI@DuiLib@@QAE@XZ ??0CComboUI@DuiLib@@QAE@ABV01@@Z ??0CComboUI@DuiLib@@QAE@XZ ??0CContainerUI@DuiLib@@QAE@ABV01@@Z ??0CContainerUI@DuiLib@@QAE@XZ ??0CControlUI@DuiLib@@QAE@ABV01@@Z ??0CControlUI@DuiLib@@QAE@XZ ??0CDateTimeUI@DuiLib@@QAE@ABV01@@Z ??0CDateTimeUI@DuiLib@@QAE@XZ ??0CDelegateBase@DuiLib@@QAE@ABV01@@Z ??0CDelegateBase@DuiLib@@QAE@PAX0@Z ??0CDialogBuilder@DuiLib@@QAE@XZ ??0CDuiPoint@DuiLib@@QAE@ABUtagPOINT@@@Z ??0CDuiPoint@DuiLib@@QAE@J@Z ??0CDuiPoint@DuiLib@@QAE@JJ@Z ??0CDuiPoint@DuiLib@@QAE@PB_W@Z ??0CDuiPoint@DuiLib@@QAE@XZ ??0CDuiPtrArray@DuiLib@@QAE@ABV01@@Z ??0CDuiPtrArray@DuiLib@@QAE@H@Z ??0CDuiRect@DuiLib@@QAE@ABUtagRECT@@@Z ??0CDuiRect@DuiLib@@QAE@JJJJ@Z ??0CDuiRect@DuiLib@@QAE@PB_W@Z ??0CDuiRect@DuiLib@@QAE@XZ ??0CDuiSize@DuiLib@@QAE@ABUtagSIZE@@@Z ??0CDuiSize@DuiLib@@QAE@JJ@Z ??0CDuiSize@DuiLib@@QAE@PB_W@Z ??0CDuiSize@DuiLib@@QAE@UtagRECT@@@Z ??0CDuiSize@DuiLib@@QAE@XZ ??0CDuiString@DuiLib@@QAE@ABV01@@Z ??0CDuiString@DuiLib@@QAE@PB_WH@Z ??0CDuiString@DuiLib@@QAE@XZ ??0CDuiString@DuiLib@@QAE@_W@Z ??0CDuiStringPtrMap@DuiLib@@QAE@H@Z ??0CDuiValArray@DuiLib@@QAE@HH@Z ??0CEditUI@DuiLib@@QAE@ABV01@@Z ??0CEditUI@DuiLib@@QAE@XZ ??0CEventSource@DuiLib@@QAE@ABV01@@Z ??0CEventSource@DuiLib@@QAE@XZ ??0CGifAnimUI@DuiLib@@QAE@ABV01@@Z ??0CGifAnimUI@DuiLib@@QAE@XZ ??0CHorizontalLayoutUI@DuiLib@@QAE@ABV01@@Z ??0CHorizontalLayoutUI@DuiLib@@QAE@XZ ??0CHyperLinkUI@DuiLib@@QAE@ABV01@@Z ??0CHyperLinkUI@DuiLib@@QAE@XZ ??0CLabelUI@DuiLib@@QAE@ABV01@@Z ??0CLabelUI@DuiLib@@QAE@XZ ??0CListContainerElementUI@DuiLib@@QAE@ABV01@@Z ??0CListContainerElementUI@DuiLib@@QAE@XZ ??0CListElementUI@DuiLib@@QAE@ABV01@@Z ??0CListElementUI@DuiLib@@QAE@XZ ??0CListHBoxElementUI@DuiLib@@QAE@ABV01@@Z ??0CListHBoxElementUI@DuiLib@@QAE@XZ ??0CListHeaderItemUI@DuiLib@@QAE@ABV01@@Z ??0CListHeaderItemUI@DuiLib@@QAE@XZ ??0CListHeaderUI@DuiLib@@QAE@ABV01@@Z ??0CListHeaderUI@DuiLib@@QAE@XZ ??0CListLabelElementUI@DuiLib@@QAE@ABV01@@Z ??0CListLabelElementUI@DuiLib@@QAE@XZ ??0CListTextElementUI@DuiLib@@QAE@ABV01@@Z ??0CListTextElementUI@DuiLib@@QAE@XZ ??0CListUI@DuiLib@@QAE@ABV01@@Z ??0CListUI@DuiLib@@QAE@XZ ??0CMarkup@DuiLib@@QAE@PB_W@Z ??0CMarkupNode@DuiLib@@AAE@PAVCMarkup@1@H@Z ??0CMarkupNode@DuiLib@@AAE@XZ ??0CNotifyPump@DuiLib@@QAE@ABV01@@Z ??0CNotifyPump@DuiLib@@QAE@XZ ??0COptionUI@DuiLib@@QAE@ABV01@@Z ??0COptionUI@DuiLib@@QAE@XZ ??0CPaintManagerUI@DuiLib@@QAE@ABV01@@Z ??0CPaintManagerUI@DuiLib@@QAE@XZ ??0CProgressUI@DuiLib@@QAE@ABV01@@Z ??0CProgressUI@DuiLib@@QAE@XZ ??0CRichEditUI@DuiLib@@QAE@ABV01@@Z ??0CRichEditUI@DuiLib@@QAE@XZ ??0CScrollBarUI@DuiLib@@QAE@ABV01@@Z ??0CScrollBarUI@DuiLib@@QAE@XZ ??0CSliderUI@DuiLib@@QAE@ABV01@@Z ??0CSliderUI@DuiLib@@QAE@XZ ??0CTabLayoutUI@DuiLib@@QAE@ABV01@@Z ??0CTabLayoutUI@DuiLib@@QAE@XZ ??0CTextUI@DuiLib@@QAE@ABV01@@Z ??0CTextUI@DuiLib@@QAE@XZ ??0CTileLayoutUI@DuiLib@@QAE@ABV01@@Z ??0CTileLayoutUI@DuiLib@@QAE@XZ ??0CTreeNodeUI@DuiLib@@QAE@ABV01@@Z ??0CTreeNodeUI@DuiLib@@QAE@PAV01@@Z ??0CTreeViewUI@DuiLib@@QAE@ABV01@@Z ??0CTreeViewUI@DuiLib@@QAE@XZ ??0CVerticalLayoutUI@DuiLib@@QAE@ABV01@@Z ??0CVerticalLayoutUI@DuiLib@@QAE@XZ ??0CWaitCursor@DuiLib@@QAE@XZ ??0CWebBrowserUI@DuiLib@@QAE@ABV01@@Z ??0CWebBrowserUI@DuiLib@@QAE@XZ ??0CWindowWnd@DuiLib@@QAE@ABV01@@Z ??0CWindowWnd@DuiLib@@QAE@XZ ??0CWndShadow@@QAE@ABV0@@Z ??0CWndShadow@@QAE@XZ ??0IMessageFilterUI@DuiLib@@QAE@ABV01@@Z ??0IMessageFilterUI@DuiLib@@QAE@XZ ??0INotifyUI@DuiLib@@QAE@ABV01@@Z ??0INotifyUI@DuiLib@@QAE@XZ ??0ITranslateAccelerator@DuiLib@@QAE@ABV01@@Z ??0ITranslateAccelerator@DuiLib@@QAE@XZ ??0STRINGorID@DuiLib@@QAE@I@Z ??0STRINGorID@DuiLib@@QAE@PB_W@Z ??0WindowImplBase@DuiLib@@QAE@ABV01@@Z ??0WindowImplBase@DuiLib@@QAE@XZ ??0tagTDrawInfo@DuiLib@@QAE@ABU01@@Z ??0tagTDrawInfo@DuiLib@@QAE@PB_W@Z ??0tagTDrawInfo@DuiLib@@QAE@XZ ??0tagTFontInfo@DuiLib@@QAE@ABU01@@Z ??0tagTFontInfo@DuiLib@@QAE@XZ ??0tagTImageInfo@DuiLib@@QAE@ABU01@@Z ??0tagTImageInfo@DuiLib@@QAE@XZ ??0tagTResInfo@DuiLib@@QAE@ABU01@@Z ??0tagTResInfo@DuiLib@@QAE@XZ ??1CActiveXUI@DuiLib@@UAE@XZ ??1CButtonUI@DuiLib@@UAE@XZ ??1CCheckBoxUI@DuiLib@@UAE@XZ ??1CChildLayoutUI@DuiLib@@UAE@XZ ??1CComboUI@DuiLib@@UAE@XZ ??1CContainerUI@DuiLib@@UAE@XZ ??1CControlUI@DuiLib@@MAE@XZ ??1CDateTimeUI@DuiLib@@UAE@XZ ??1CDelegateBase@DuiLib@@UAE@XZ ??1CDialogBuilder@DuiLib@@QAE@XZ ??1CDuiPtrArray@DuiLib@@QAE@XZ ??1CDuiString@DuiLib@@QAE@XZ ??1CDuiStringPtrMap@DuiLib@@QAE@XZ ??1CDuiValArray@DuiLib@@QAE@XZ ??1CEditUI@DuiLib@@UAE@XZ ??1CEventSource@DuiLib@@QAE@XZ ??1CGifAnimUI@DuiLib@@UAE@XZ ??1CHorizontalLayoutUI@DuiLib@@UAE@XZ ??1CHyperLinkUI@DuiLib@@UAE@XZ ??1CLabelUI@DuiLib@@UAE@XZ ??1CListContainerElementUI@DuiLib@@UAE@XZ ??1CListElementUI@DuiLib@@UAE@XZ ??1CListHBoxElementUI@DuiLib@@UAE@XZ ??1CListHeaderItemUI@DuiLib@@UAE@XZ ??1CListHeaderUI@DuiLib@@UAE@XZ ??1CListLabelElementUI@DuiLib@@UAE@XZ ??1CListTextElementUI@DuiLib@@UAE@XZ ??1CListUI@DuiLib@@UAE@XZ ??1CMarkup@DuiLib@@QAE@XZ ??1CNotifyPump@DuiLib@@QAE@XZ ??1COptionUI@DuiLib@@UAE@XZ ??1CPaintManagerUI@DuiLib@@QAE@XZ ??1CProgressUI@DuiLib@@UAE@XZ ??1CRenderClip@DuiLib@@QAE@XZ ??1CRichEditUI@DuiLib@@UAE@XZ ??1CScrollBarUI@DuiLib@@UAE@XZ ??1CSliderUI@DuiLib@@UAE@XZ ??1CTabLayoutUI@DuiLib@@UAE@XZ ??1CTextUI@DuiLib@@UAE@XZ ??1CTileLayoutUI@DuiLib@@UAE@XZ ??1CTreeNodeUI@DuiLib@@UAE@XZ ??1CTreeViewUI@DuiLib@@UAE@XZ ??1CVerticalLayoutUI@DuiLib@@UAE@XZ ??1CWaitCursor@DuiLib@@QAE@XZ ??1CWebBrowserUI@DuiLib@@UAE@XZ ??1CWndShadow@@UAE@XZ ??1WindowImplBase@DuiLib@@UAE@XZ ??1tagTDrawInfo@DuiLib@@QAE@XZ ??1tagTFontInfo@DuiLib@@QAE@XZ ??1tagTImageInfo@DuiLib@@QAE@XZ ??1tagTResInfo@DuiLib@@QAE@XZ ??4CActiveXUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CButtonUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CCheckBoxUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CChildLayoutUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CComboUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CContainerUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CControlUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CDateTimeUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CDelegateBase@DuiLib@@QAEAAV01@ABV01@@Z ??4CDialogBuilder@DuiLib@@QAEAAV01@ABV01@@Z ??4CDuiPoint@DuiLib@@QAEAAV01@ABV01@@Z ??4CDuiPtrArray@DuiLib@@QAEAAV01@ABV01@@Z ??4CDuiRect@DuiLib@@QAEAAV01@ABV01@@Z ??4CDuiSize@DuiLib@@QAEAAV01@ABV01@@Z ??4CDuiString@DuiLib@@QAEABV01@ABV01@@Z ??4CDuiString@DuiLib@@QAEABV01@PBD@Z ??4CDuiString@DuiLib@@QAEABV01@PB_W@Z ??4CDuiString@DuiLib@@QAEABV01@_W@Z ??4CDuiStringPtrMap@DuiLib@@QAEAAV01@ABV01@@Z ??4CDuiValArray@DuiLib@@QAEAAV01@ABV01@@Z ??4CEditUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CEventSource@DuiLib@@QAEAAV01@ABV01@@Z ??4CGifAnimUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CHorizontalLayoutUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CHyperLinkUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CLabelUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListContainerElementUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListElementUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListHBoxElementUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListHeaderItemUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListHeaderUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListLabelElementUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListTextElementUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CListUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CMarkup@DuiLib@@QAEAAV01@ABV01@@Z ??4CMarkupNode@DuiLib@@QAEAAV01@ABV01@@Z ??4CNotifyPump@DuiLib@@QAEAAV01@ABV01@@Z ??4COptionUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CPaintManagerUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CProgressUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CRenderClip@DuiLib@@QAEAAV01@ABV01@@Z ??4CRenderEngine@DuiLib@@QAEAAV01@ABV01@@Z ??4CRichEditUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CScrollBarUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CSliderUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CTabLayoutUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CTextUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CTileLayoutUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CTreeNodeUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CTreeViewUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CVerticalLayoutUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CWaitCursor@DuiLib@@QAEAAV01@ABV01@@Z ??4CWebBrowserUI@DuiLib@@QAEAAV01@ABV01@@Z ??4CWindowWnd@DuiLib@@QAEAAV01@ABV01@@Z ??4CWndShadow@@QAEAAV0@ABV0@@Z ??4IMessageFilterUI@DuiLib@@QAEAAV01@ABV01@@Z ??4INotifyUI@DuiLib@@QAEAAV01@ABV01@@Z ??4ITranslateAccelerator@DuiLib@@QAEAAV01@ABV01@@Z ??4STRINGorID@DuiLib@@QAEAAV01@ABV01@@Z ??4WindowImplBase@DuiLib@@QAEAAV01@ABV01@@Z ??4tagTDrawInfo@DuiLib@@QAEAAU01@ABU01@@Z ??4tagTEventUI@DuiLib@@QAEAAU01@ABU01@@Z ??4tagTFontInfo@DuiLib@@QAEAAU01@ABU01@@Z ??4tagTImageInfo@DuiLib@@QAEAAU01@ABU01@@Z ??4tagTPercentInfo@DuiLib@@QAEAAU01@ABU01@@Z ??4tagTResInfo@DuiLib@@QAEAAU01@ABU01@@Z ??8CDuiString@DuiLib@@QBE_NPB_W@Z ??9CDuiString@DuiLib@@QBE_NPB_W@Z ??ACDuiPtrArray@DuiLib@@QBEPAXH@Z ??ACDuiString@DuiLib@@QBE_WH@Z ??ACDuiStringPtrMap@DuiLib@@QBEPB_WH@Z ??ACDuiValArray@DuiLib@@QBEPAXH@Z ??BCDuiString@DuiLib@@QBEPB_WXZ ??BCEventSource@DuiLib@@QAE_NXZ ??BCWindowWnd@DuiLib@@QBEPAUHWND__@@XZ ??BCWndShadow@@QBEPAUHWND__@@XZ ??HCDuiString@DuiLib@@QBE?AV01@ABV01@@Z ??HCDuiString@DuiLib@@QBE?AV01@PB_W@Z ??MCDuiString@DuiLib@@QBE_NPB_W@Z ??NCDuiString@DuiLib@@QBE_NPB_W@Z ??OCDuiString@DuiLib@@QBE_NPB_W@Z ??PCDuiString@DuiLib@@QBE_NPB_W@Z ??RCDelegateBase@DuiLib@@QAE_NPAX@Z ??RCEventSource@DuiLib@@QAE_NPAX@Z ??YCDuiString@DuiLib@@QAEABV01@ABV01@@Z ??YCDuiString@DuiLib@@QAEABV01@PBD@Z ??YCDuiString@DuiLib@@QAEABV01@PB_W@Z ??YCDuiString@DuiLib@@QAEABV01@_W@Z ??YCEventSource@DuiLib@@QAEXABVCDelegateBase@1@@Z ??YCEventSource@DuiLib@@QAEXP6A_NPAX@Z@Z ??ZCEventSource@DuiLib@@QAEXABVCDelegateBase@1@@Z ??ZCEventSource@DuiLib@@QAEXP6A_NPAX@Z@Z ??_7CActiveXUI@DuiLib@@6BCControlUI@1@@ ??_7CActiveXUI@DuiLib@@6BIMessageFilterUI@1@@ ??_7CButtonUI@DuiLib@@6B@ ??_7CCheckBoxUI@DuiLib@@6B@ ??_7CChildLayoutUI@DuiLib@@6BCControlUI@1@@ ??_7CChildLayoutUI@DuiLib@@6BIContainerUI@1@@ ??_7CComboUI@DuiLib@@6B@ ??_7CComboUI@DuiLib@@6BCControlUI@1@@ ??_7CComboUI@DuiLib@@6BIContainerUI@1@@ ??_7CContainerUI@DuiLib@@6BCControlUI@1@@ ??_7CContainerUI@DuiLib@@6BIContainerUI@1@@ ??_7CControlUI@DuiLib@@6B@ ??_7CDateTimeUI@DuiLib@@6B@ ??_7CDelegateBase@DuiLib@@6B@ ??_7CEditUI@DuiLib@@6B@ ??_7CGifAnimUI@DuiLib@@6B@ ??_7CHorizontalLayoutUI@DuiLib@@6BCControlUI@1@@ ??_7CHorizontalLayoutUI@DuiLib@@6BIContainerUI@1@@ ??_7CHyperLinkUI@DuiLib@@6B@ ??_7CLabelUI@DuiLib@@6B@ ??_7CListContainerElementUI@DuiLib@@6B@ ??_7CListContainerElementUI@DuiLib@@6BCControlUI@1@@ ??_7CListContainerElementUI@DuiLib@@6BIContainerUI@1@@ ??_7CListElementUI@DuiLib@@6BCControlUI@1@@ ??_7CListElementUI@DuiLib@@6BIListItemUI@1@@ ??_7CListHBoxElementUI@DuiLib@@6B@ ??_7CListHBoxElementUI@DuiLib@@6BCControlUI@1@@ ??_7CListHBoxElementUI@DuiLib@@6BIContainerUI@1@@ ??_7CListHeaderItemUI@DuiLib@@6B@ ??_7CListHeaderUI@DuiLib@@6BCControlUI@1@@ ??_7CListHeaderUI@DuiLib@@6BIContainerUI@1@@ ??_7CListLabelElementUI@DuiLib@@6BCControlUI@1@@ ??_7CListLabelElementUI@DuiLib@@6BIListItemUI@1@@ ??_7CListTextElementUI@DuiLib@@6BCControlUI@1@@ ??_7CListTextElementUI@DuiLib@@6BIListItemUI@1@@ ??_7CListUI@DuiLib@@6B@ ??_7CListUI@DuiLib@@6BCControlUI@1@@ ??_7CListUI@DuiLib@@6BIContainerUI@1@@ ??_7CNotifyPump@DuiLib@@6B@ ??_7COptionUI@DuiLib@@6B@ ??_7CProgressUI@DuiLib@@6B@ ??_7CRichEditUI@DuiLib@@6B@ ??_7CRichEditUI@DuiLib@@6BCControlUI@1@@ ??_7CRichEditUI@DuiLib@@6BIContainerUI@1@@ ??_7CScrollBarUI@DuiLib@@6B@ ??_7CSliderUI@DuiLib@@6B@ ??_7CTabLayoutUI@DuiLib@@6BCControlUI@1@@ ??_7CTabLayoutUI@DuiLib@@6BIContainerUI@1@@ ??_7CTextUI@DuiLib@@6B@ ??_7CTileLayoutUI@DuiLib@@6BCControlUI@1@@ ??_7CTileLayoutUI@DuiLib@@6BIContainerUI@1@@ ??_7CTreeNodeUI@DuiLib@@6B@ ??_7CTreeNodeUI@DuiLib@@6BCControlUI@1@@ ??_7CTreeNodeUI@DuiLib@@6BIContainerUI@1@@ ??_7CTreeViewUI@DuiLib@@6BCControlUI@1@@ ??_7CTreeViewUI@DuiLib@@6BCListUI@1@@ ??_7CTreeViewUI@DuiLib@@6BIContainerUI@1@@ ??_7CTreeViewUI@DuiLib@@6BINotifyUI@1@@ ??_7CVerticalLayoutUI@DuiLib@@6BCControlUI@1@@ ??_7CVerticalLayoutUI@DuiLib@@6BIContainerUI@1@@ ??_7CWebBrowserUI@DuiLib@@6BCControlUI@1@@ ??_7CWebBrowserUI@DuiLib@@6BIDispatch@@@ ??_7CWebBrowserUI@DuiLib@@6BIDocHostUIHandler@@@ ??_7CWebBrowserUI@DuiLib@@6BIMessageFilterUI@1@@ ??_7CWebBrowserUI@DuiLib@@6BIOleCommandTarget@@@ ??_7CWebBrowserUI@DuiLib@@6BIServiceProvider@@@ ??_7CWebBrowserUI@DuiLib@@6BITranslateAccelerator@1@@ ??_7CWindowWnd@DuiLib@@6B@ ??_7CWndShadow@@6B@ ??_7IMessageFilterUI@DuiLib@@6B@ ??_7INotifyUI@DuiLib@@6B@ ??_7ITranslateAccelerator@DuiLib@@6B@ ??_7WindowImplBase@DuiLib@@6BCNotifyPump@1@@ ??_7WindowImplBase@DuiLib@@6BCWindowWnd@1@@ ??_7WindowImplBase@DuiLib@@6BIDialogBuilderCallback@1@@ ??_7WindowImplBase@DuiLib@@6BIMessageFilterUI@1@@ ??_7WindowImplBase@DuiLib@@6BINotifyUI@1@@ ??_FCDuiPtrArray@DuiLib@@QAEXXZ ??_FCDuiStringPtrMap@DuiLib@@QAEXXZ ??_FCMarkup@DuiLib@@QAEXXZ ??_FCTreeNodeUI@DuiLib@@QAEXXZ ?Activate@CButtonUI@DuiLib@@UAE_NXZ ?Activate@CComboUI@DuiLib@@UAE_NXZ ?Activate@CControlUI@DuiLib@@UAE_NXZ ?Activate@CHyperLinkUI@DuiLib@@UAE_NXZ ?Activate@CListContainerElementUI@DuiLib@@UAE_NXZ ?Activate@CListElementUI@DuiLib@@UAE_NXZ ?Activate@COptionUI@DuiLib@@UAE_NXZ ?Add@CComboUI@DuiLib@@UAE_NPAVCControlUI@2@@Z ?Add@CContainerUI@DuiLib@@UAE_NPAVCControlUI@2@@Z ?Add@CDuiPtrArray@DuiLib@@QAE_NPAX@Z ?Add@CDuiValArray@DuiLib@@QAE_NPBX@Z ?Add@CListUI@DuiLib@@UAE_NPAVCControlUI@2@@Z ?Add@CTabLayoutUI@DuiLib@@UAE_NPAVCControlUI@2@@Z ?Add@CTreeNodeUI@DuiLib@@UAE_NPAVCControlUI@2@@Z ?Add@CTreeViewUI@DuiLib@@UAE_NPAVCControlUI@2@@Z ?AddAt@CComboUI@DuiLib@@UAE_NPAVCControlUI@2@H@Z ?AddAt@CContainerUI@DuiLib@@UAE_NPAVCControlUI@2@H@Z ?AddAt@CListUI@DuiLib@@UAE_NPAVCControlUI@2@H@Z ?AddAt@CTabLayoutUI@DuiLib@@UAE_NPAVCControlUI@2@H@Z ?AddAt@CTreeNodeUI@DuiLib@@UAE_NPAVCControlUI@2@H@Z ?AddAt@CTreeViewUI@DuiLib@@QAEJPAVCTreeNodeUI@2@H@Z ?AddAt@CTreeViewUI@DuiLib@@QAE_NPAVCTreeNodeUI@2@0@Z ?AddAt@CTreeViewUI@DuiLib@@UAE_NPAVCControlUI@2@H@Z ?AddChildNode@CTreeNodeUI@DuiLib@@QAE_NPAV12@@Z ?AddCustomAttribute@CControlUI@DuiLib@@QAEXPB_W0@Z ?AddDefaultAttributeList@CPaintManagerUI@DuiLib@@QAEXPB_W0_N@Z ?AddDelayedCleanup@CPaintManagerUI@DuiLib@@QAEXPAVCControlUI@2@@Z ?AddFont@CPaintManagerUI@DuiLib@@QAEPAUHFONT__@@HPB_WH_N111@Z ?AddImage@CPaintManagerUI@DuiLib@@QAEPBUtagTImageInfo@2@PB_W0K_N1@Z ?AddImage@CPaintManagerUI@DuiLib@@QAEPBUtagTImageInfo@2@PB_WPAUHBITMAP__@@HH_N2@Z ?AddMessageFilter@CPaintManagerUI@DuiLib@@QAE_NPAVIMessageFilterUI@2@@Z ?AddMouseLeaveNeeded@CPaintManagerUI@DuiLib@@QAEXPAVCControlUI@2@@Z ?AddMultiLanguageString@CPaintManagerUI@DuiLib@@SAXHPB_W@Z ?AddNativeWindow@CPaintManagerUI@DuiLib@@QAE_NPAVCControlUI@2@PAUHWND__@@@Z ?AddNotifier@CPaintManagerUI@DuiLib@@QAE_NPAVINotifyUI@2@@Z ?AddOptionGroup@CPaintManagerUI@DuiLib@@QAE_NPB_WPAVCControlUI@2@@Z ?AddPostPaint@CPaintManagerUI@DuiLib@@QAE_NPAVCControlUI@2@@Z ?AddPreMessageFilter@CPaintManagerUI@DuiLib@@QAE_NPAVIMessageFilterUI@2@@Z ?AddRef@CWebBrowserUI@DuiLib@@UAGKXZ ?AddTranslateAccelerator@CPaintManagerUI@DuiLib@@QAE_NPAVITranslateAccelerator@2@@Z ?AddVirtualWnd@CNotifyPump@DuiLib@@QAE_NVCDuiString@2@PAV12@@Z ?AddWindowCustomAttribute@CPaintManagerUI@DuiLib@@QAEXPB_W0@Z ?AdjustColor@CRenderEngine@DuiLib@@SAKKFFF@Z ?AdjustImage@CRenderEngine@DuiLib@@SAX_NPAUtagTImageInfo@2@FFF@Z ?AdjustImagesHSL@CPaintManagerUI@DuiLib@@AAEXXZ ?AdjustSharedImagesHSL@CPaintManagerUI@DuiLib@@CAXXZ ?Append@CDuiString@DuiLib@@QAEXPB_W@Z ?AppendText@CRichEditUI@DuiLib@@QAEHPB_W_N@Z ?Assign@CDuiString@DuiLib@@QAEXPB_WH@Z ?AttachDialog@CPaintManagerUI@DuiLib@@QAE_NPAVCControlUI@2@@Z ?BeforeNavigate2@CWebBrowserUI@DuiLib@@IAEXPAUIDispatch@@AAPAUtagVARIANT@@1111AAPAF@Z ?CalLocation@CTreeNodeUI@DuiLib@@AAEPAV12@PAV12@@Z ?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ ?CharFromPos@CRichEditUI@DuiLib@@QBEHVCDuiPoint@2@@Z ?CheckBoxSelected@CTreeNodeUI@DuiLib@@QAEX_N@Z ?Clear@CRichEditUI@DuiLib@@QAEXXZ ?Clear@tagTDrawInfo@DuiLib@@QAEXXZ ?Close@CWindowWnd@DuiLib@@QAEXI@Z ?CommandStateChange@CWebBrowserUI@DuiLib@@IAEXJF@Z ?Compare@CDuiString@DuiLib@@QBEHPB_W@Z ?CompareNoCase@CDuiString@DuiLib@@QBEHPB_W@Z ?Copy@CRichEditUI@DuiLib@@QAEXXZ ?Create@CDialogBuilder@DuiLib@@QAEPAVCControlUI@2@PAVIDialogBuilderCallback@2@PAVCPaintManagerUI@2@PAV32@@Z ?Create@CDialogBuilder@DuiLib@@QAEPAVCControlUI@2@VSTRINGorID@2@PB_WPAVIDialogBuilderCallback@2@PAVCPaintManagerUI@2@PAV32@@Z ?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z ?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKUtagRECT@@PAUHMENU__@@@Z ?Create@CWndShadow@@QAEXPAUHWND__@@@Z ?CreateARGB32Bitmap@CRenderEngine@DuiLib@@SAPAUHBITMAP__@@PAUHDC__@@HHPAPAK@Z ?CreateControl@CActiveXUI@DuiLib@@QAE_NPB_W@Z ?CreateControl@CActiveXUI@DuiLib@@QAE_NU_GUID@@@Z ?CreateControl@WindowImplBase@DuiLib@@UAEPAVCControlUI@2@PB_W@Z ?CreateDuiWindow@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKK@Z ?Cut@CRichEditUI@DuiLib@@QAEXXZ ?DUI__Trace@DuiLib@@YAXPB_WZZ ?DUI__TraceMsg@DuiLib@@YAPB_WI@Z ?Deflate@CDuiRect@DuiLib@@QAEXHH@Z ?Delete@CControlUI@DuiLib@@UAEXXZ ?DeleteGif@CGifAnimUI@DuiLib@@AAEXXZ ?DoCreateControl@CActiveXUI@DuiLib@@MAE_NXZ ?DoCreateControl@CWebBrowserUI@DuiLib@@UAE_NXZ ?DoEvent@CButtonUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CComboUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CContainerUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CControlUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CDateTimeUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CEditUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CGifAnimUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CHorizontalLayoutUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CHyperLinkUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CLabelUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CListContainerElementUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CListElementUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CListHeaderItemUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CListLabelElementUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CListTextElementUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CListUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CRichEditUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CScrollBarUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CSliderUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CTextUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CTreeNodeUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoEvent@CVerticalLayoutUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?DoInit@CComboUI@DuiLib@@UAEXXZ ?DoInit@CControlUI@DuiLib@@UAEXXZ ?DoInit@CGifAnimUI@DuiLib@@UAEXXZ ?DoInit@CRichEditUI@DuiLib@@UAEXXZ ?DoPaint@CActiveXUI@DuiLib@@UAE_NPAUHDC__@@ABUtagRECT@@PAVCControlUI@2@@Z ?DoPaint@CComboUI@DuiLib@@UAE_NPAUHDC__@@ABUtagRECT@@PAVCControlUI@2@@Z ?DoPaint@CContainerUI@DuiLib@@UAE_NPAUHDC__@@ABUtagRECT@@PAVCControlUI@2@@Z ?DoPaint@CControlUI@DuiLib@@UAE_NPAUHDC__@@ABUtagRECT@@PAV12@@Z ?DoPaint@CGifAnimUI@DuiLib@@UAE_NPAUHDC__@@ABUtagRECT@@PAVCControlUI@2@@Z ?DoPaint@CListContainerElementUI@DuiLib@@UAE_NPAUHDC__@@ABUtagRECT@@PAVCControlUI@2@@Z ?DoPaint@CListHBoxElementUI@DuiLib@@UAE_NPAUHDC__@@ABUtagRECT@@PAVCControlUI@2@@Z ?DoPaint@CListLabelElementUI@DuiLib@@UAE_NPAUHDC__@@ABUtagRECT@@PAVCControlUI@2@@Z ?DoPaint@CRichEditUI@DuiLib@@UAE_NPAUHDC__@@ABUtagRECT@@PAVCControlUI@2@@Z ?DoPaint@CScrollBarUI@DuiLib@@UAE_NPAUHDC__@@ABUtagRECT@@PAVCControlUI@2@@Z ?DoPostPaint@CControlUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@@Z ?DoPostPaint@CHorizontalLayoutUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@@Z ?DoPostPaint@CVerticalLayoutUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@@Z ?DocumentComplete@CWebBrowserUI@DuiLib@@IAEXPAUIDispatch@@AAPAUtagVARIANT@@@Z ?Download@CWebBrowserUI@DuiLib@@UAGJPAUIMoniker@@PAUIBindCtx@@KJPAU_tagBINDINFO@@PB_W3I@Z ?DrawColor@CRenderEngine@DuiLib@@SAXPAUHDC__@@ABUtagRECT@@K@Z ?DrawFrame@CGifAnimUI@DuiLib@@AAEXPAUHDC__@@@Z ?DrawGradient@CRenderEngine@DuiLib@@SAXPAUHDC__@@ABUtagRECT@@KK_NH@Z ?DrawHtmlText@CRenderEngine@DuiLib@@SAXPAUHDC__@@PAVCPaintManagerUI@2@AAUtagRECT@@PB_WKPAU5@PAVCDuiString@2@AAHHI@Z ?DrawImage@CControlUI@DuiLib@@QAE_NPAUHDC__@@AAUtagTDrawInfo@2@@Z ?DrawImage@CRenderEngine@DuiLib@@SAXPAUHDC__@@PAUHBITMAP__@@ABUtagRECT@@222_NE333@Z ?DrawImage@CRenderEngine@DuiLib@@SA_NPAUHDC__@@PAVCPaintManagerUI@2@ABUtagRECT@@2AAUtagTDrawInfo@2@@Z ?DrawItemBk@CListContainerElementUI@DuiLib@@QAEXPAUHDC__@@ABUtagRECT@@@Z ?DrawItemBk@CListElementUI@DuiLib@@QAEXPAUHDC__@@ABUtagRECT@@@Z ?DrawItemText@CListContainerElementUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@@Z ?DrawItemText@CListLabelElementUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@@Z ?DrawItemText@CListTextElementUI@DuiLib@@UAEXPAUHDC__@@ABUtagRECT@@@Z ?DrawLine@CRenderEngine@DuiLib@@SAXPAUHDC__@@ABUtagRECT@@HKH@Z ?DrawRect@CRenderEngine@DuiLib@@SAXPAUHDC__@@ABUtagRECT@@HKH@Z ?DrawRoundRect@CRenderEngine@DuiLib@@SAXPAUHDC__@@ABUtagRECT@@HHHKH@Z ?DrawTextW@CRenderEngine@DuiLib@@SAXPAUHDC__@@PAVCPaintManagerUI@2@AAUtagRECT@@PB_WKHI@Z ?Empty@CDuiPtrArray@DuiLib@@QAEXXZ ?Empty@CDuiRect@DuiLib@@QAEXXZ ?Empty@CDuiString@DuiLib@@QAEXXZ ?Empty@CDuiValArray@DuiLib@@QAEXXZ ?EmptyUndoBuffer@CRichEditUI@DuiLib@@QAEXXZ ?EnableModeless@CWebBrowserUI@DuiLib@@UAGJH@Z ?EnableScrollBar@CContainerUI@DuiLib@@UAEX_N0@Z ?EnableScrollBar@CListUI@DuiLib@@UAEX_N0@Z ?EndDown@CContainerUI@DuiLib@@UAEXXZ ?EndDown@CListUI@DuiLib@@UAEXXZ ?EndDown@CRichEditUI@DuiLib@@UAEXXZ ?EndRight@CContainerUI@DuiLib@@UAEXXZ ?EndRight@CListUI@DuiLib@@UAEXXZ ?EndRight@CRichEditUI@DuiLib@@UAEXXZ ?EnsureVisible@CListUI@DuiLib@@QAEXH@Z ?Equals@CDelegateBase@DuiLib@@QBE_NABV12@@Z ?EstimateSize@CButtonUI@DuiLib@@UAE?AUtagSIZE@@U3@@Z ?EstimateSize@CComboUI@DuiLib@@UAE?AUtagSIZE@@U3@@Z ?EstimateSize@CControlUI@DuiLib@@UAE?AUtagSIZE@@U3@@Z ?EstimateSize@CEditUI@DuiLib@@UAE?AUtagSIZE@@U3@@Z ?EstimateSize@CLabelUI@DuiLib@@UAE?AUtagSIZE@@U3@@Z ?EstimateSize@CListContainerElementUI@DuiLib@@UAE?AUtagSIZE@@U3@@Z ?EstimateSize@CListHeaderItemUI@DuiLib@@UAE?AUtagSIZE@@U3@@Z ?EstimateSize@CListHeaderUI@DuiLib@@UAE?AUtagSIZE@@U3@@Z ?EstimateSize@CListLabelElementUI@DuiLib@@UAE?AUtagSIZE@@U3@@Z ?EstimateSize@CListTextElementUI@DuiLib@@UAE?AUtagSIZE@@U3@@Z ?EstimateSize@COptionUI@DuiLib@@UAE?AUtagSIZE@@U3@@Z ?EstimateSize@CRichEditUI@DuiLib@@UAE?AUtagSIZE@@U3@@Z ?Event@CControlUI@DuiLib@@UAEXAAUtagTEventUI@2@@Z ?Exec@CWebBrowserUI@DuiLib@@UAGJPBU_GUID@@KKPAUtagVARIANT@@1@Z ?Expand@CListContainerElementUI@DuiLib@@UAE_N_N@Z ?Expand@CListElementUI@DuiLib@@UAE_N_N@Z ?ExpandItem@CComboUI@DuiLib@@UAE_NH_N@Z ?ExpandItem@CListUI@DuiLib@@UAE_NH_N@Z ?FilterDataObject@CWebBrowserUI@DuiLib@@UAGJPAUIDataObject@@PAPAU3@@Z ?Find@CDuiPtrArray@DuiLib@@QBEHPAX@Z ?Find@CDuiString@DuiLib@@QBEHPB_WH@Z ?Find@CDuiString@DuiLib@@QBEH_WH@Z ?Find@CDuiStringPtrMap@DuiLib@@QBEPAXPB_W_N@Z ?FindControl@CContainerUI@DuiLib@@UAEPAVCControlUI@2@P6GPAV32@PAV32@PAX@Z1I@Z ?FindControl@CControlUI@DuiLib@@UAEPAV12@P6GPAV12@PAV12@PAX@Z1I@Z ?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z ?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@UtagPOINT@@@Z ?FindId@CWebBrowserUI@DuiLib@@SAJPAUIDispatch@@PA_W@Z ?FindSelectable@CContainerUI@DuiLib@@UBEHH_N@Z ?FindShadowWindow@CWndShadow@@KAPAV1@PAUHWND__@@@Z ?FindSubControl@CContainerUI@DuiLib@@QAEPAVCControlUI@2@PB_W@Z ?FindSubControlByClass@CPaintManagerUI@DuiLib@@QAEPAVCControlUI@2@PAV32@PB_WH@Z ?FindSubControlByName@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PAV32@PB_W@Z ?FindSubControlByPoint@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PAV32@UtagPOINT@@@Z ?FindSubControlsByClass@CPaintManagerUI@DuiLib@@QAEPAVCDuiPtrArray@2@PAVCControlUI@2@PB_W@Z ?Format@CDuiString@DuiLib@@QAAHPB_WZZ ?FreeImage@CRenderEngine@DuiLib@@SAXPAUtagTImageInfo@2@_N@Z ?GenerateBitmap@CRenderEngine@DuiLib@@SAPAUHBITMAP__@@PAVCPaintManagerUI@2@PAVCControlUI@2@UtagRECT@@K@Z ?GenerateBitmap@CRenderEngine@DuiLib@@SAPAUHBITMAP__@@PAVCPaintManagerUI@2@UtagRECT@@PAVCControlUI@2@K@Z ?GenerateClip@CRenderClip@DuiLib@@SAXPAUHDC__@@UtagRECT@@AAV12@@Z ?GenerateRoundClip@CRenderClip@DuiLib@@SAXPAUHDC__@@UtagRECT@@1HHAAV12@@Z ?GetAdjustColor@CControlUI@DuiLib@@QAEKK@Z ?GetAt@CDuiPtrArray@DuiLib@@QBEPAXH@Z ?GetAt@CDuiString@DuiLib@@QBE_WH@Z ?GetAt@CDuiStringPtrMap@DuiLib@@QBEPB_WH@Z ?GetAt@CDuiValArray@DuiLib@@QBEPAXH@Z ?GetAttribute@CControlUI@DuiLib@@UAE?AVCDuiString@2@PB_W@Z ?GetAttributeCount@CMarkupNode@DuiLib@@QAEHXZ ?GetAttributeList@CControlUI@DuiLib@@UAE?AVCDuiString@2@_N@Z ?GetAttributeName@CMarkupNode@DuiLib@@QAEPB_WH@Z ?GetAttributeValue@CMarkupNode@DuiLib@@QAEPB_WH@Z ?GetAttributeValue@CMarkupNode@DuiLib@@QAEPB_WPB_W@Z ?GetAttributeValue@CMarkupNode@DuiLib@@QAE_NHPA_WK@Z ?GetAttributeValue@CMarkupNode@DuiLib@@QAE_NPB_WPA_WK@Z ?GetAutoURLDetect@CRichEditUI@DuiLib@@QBE_NXZ ?GetBkColor2@CControlUI@DuiLib@@QBEKXZ ?GetBkColor3@CControlUI@DuiLib@@QBEKXZ ?GetBkColor@CControlUI@DuiLib@@QBEKXZ ?GetBkDisabledImage@CScrollBarUI@DuiLib@@QAEPB_WXZ ?GetBkHotImage@CScrollBarUI@DuiLib@@QAEPB_WXZ ?GetBkImage@CControlUI@DuiLib@@QAEPB_WXZ ?GetBkImage@CGifAnimUI@DuiLib@@QAEPB_WXZ ?GetBkNormalImage@CScrollBarUI@DuiLib@@QAEPB_WXZ ?GetBkPushedImage@CScrollBarUI@DuiLib@@QAEPB_WXZ ?GetBorderColor@CControlUI@DuiLib@@QBEKXZ ?GetBorderRound@CControlUI@DuiLib@@QBE?AUtagSIZE@@XZ ?GetBorderSize@CControlUI@DuiLib@@QBE?AUtagRECT@@XZ ?GetBorderStyle@CControlUI@DuiLib@@QBEHXZ ?GetButton1Color@CScrollBarUI@DuiLib@@QBEKXZ ?GetButton1DisabledImage@CScrollBarUI@DuiLib@@QAEPB_WXZ ?GetButton1HotImage@CScrollBarUI@DuiLib@@QAEPB_WXZ ?GetButton1NormalImage@CScrollBarUI@DuiLib@@QAEPB_WXZ ?GetButton1PushedImage@CScrollBarUI@DuiLib@@QAEPB_WXZ ?GetButton2Color@CScrollBarUI@DuiLib@@QBEKXZ ?GetButton2DisabledImage@CScrollBarUI@DuiLib@@QAEPB_WXZ ?GetButton2HotImage@CScrollBarUI@DuiLib@@QAEPB_WXZ ?GetButton2NormalImage@CScrollBarUI@DuiLib@@QAEPB_WXZ ?GetButton2PushedImage@CScrollBarUI@DuiLib@@QAEPB_WXZ ?GetCaptionRect@CPaintManagerUI@DuiLib@@QAEAAUtagRECT@@XZ ?GetChangeStep@CSliderUI@DuiLib@@QAEHXZ ?GetCharPos@CRichEditUI@DuiLib@@QBE?AVCDuiPoint@2@J@Z ?GetCheck@CCheckBoxUI@DuiLib@@QBE_NXZ ?GetCheckBox@CTreeNodeUI@DuiLib@@QBEPAVCCheckBoxUI@2@XZ ?GetChild@CMarkupNode@DuiLib@@QAE?AV12@PB_W@Z ?GetChild@CMarkupNode@DuiLib@@QAE?AV12@XZ ?GetChildAlign@CContainerUI@DuiLib@@UBEIXZ ?GetChildLayoutXML@CChildLayoutUI@DuiLib@@QAE?AVCDuiString@2@XZ ?GetChildNode@CTreeNodeUI@DuiLib@@QAEPAV12@H@Z ?GetChildPadding@CContainerUI@DuiLib@@UBEHXZ ?GetChildPadding@CListUI@DuiLib@@UBEHXZ ?GetChildVAlign@CContainerUI@DuiLib@@UBEIXZ ?GetChildVPadding@CTileLayoutUI@DuiLib@@QBEHXZ ?GetClass@CActiveXUI@DuiLib@@UBEPB_WXZ ?GetClass@CButtonUI@DuiLib@@UBEPB_WXZ ?GetClass@CCheckBoxUI@DuiLib@@UBEPB_WXZ ?GetClass@CChildLayoutUI@DuiLib@@UBEPB_WXZ ?GetClass@CComboUI@DuiLib@@UBEPB_WXZ ?GetClass@CContainerUI@DuiLib@@UBEPB_WXZ ?GetClass@CControlUI@DuiLib@@UBEPB_WXZ ?GetClass@CDateTimeUI@DuiLib@@UBEPB_WXZ ?GetClass@CEditUI@DuiLib@@UBEPB_WXZ ?GetClass@CGifAnimUI@DuiLib@@UBEPB_WXZ ?GetClass@CHorizontalLayoutUI@DuiLib@@UBEPB_WXZ ?GetClass@CHyperLinkUI@DuiLib@@UBEPB_WXZ ?GetClass@CLabelUI@DuiLib@@UBEPB_WXZ ?GetClass@CListContainerElementUI@DuiLib@@UBEPB_WXZ ?GetClass@CListElementUI@DuiLib@@UBEPB_WXZ ?GetClass@CListHBoxElementUI@DuiLib@@UBEPB_WXZ ?GetClass@CListHeaderItemUI@DuiLib@@UBEPB_WXZ ?GetClass@CListHeaderUI@DuiLib@@UBEPB_WXZ ?GetClass@CListLabelElementUI@DuiLib@@UBEPB_WXZ ?GetClass@CListTextElementUI@DuiLib@@UBEPB_WXZ ?GetClass@CListUI@DuiLib@@UBEPB_WXZ ?GetClass@COptionUI@DuiLib@@UBEPB_WXZ ?GetClass@CProgressUI@DuiLib@@UBEPB_WXZ ?GetClass@CRichEditUI@DuiLib@@UBEPB_WXZ ?GetClass@CScrollBarUI@DuiLib@@UBEPB_WXZ ?GetClass@CSliderUI@DuiLib@@UBEPB_WXZ ?GetClass@CTabLayoutUI@DuiLib@@UBEPB_WXZ ?GetClass@CTextUI@DuiLib@@UBEPB_WXZ ?GetClass@CTileLayoutUI@DuiLib@@UBEPB_WXZ ?GetClass@CTreeNodeUI@DuiLib@@UBEPB_WXZ ?GetClass@CTreeViewUI@DuiLib@@UBEPB_WXZ ?GetClass@CVerticalLayoutUI@DuiLib@@UBEPB_WXZ ?GetClass@CWebBrowserUI@DuiLib@@UBEPB_WXZ ?GetClassStyle@CWindowWnd@DuiLib@@MBEIXZ ?GetClassStyle@WindowImplBase@DuiLib@@UBEIXZ ?GetClientPos@CContainerUI@DuiLib@@UBE?AUtagRECT@@XZ ?GetClientPos@CControlUI@DuiLib@@UBE?AUtagRECT@@XZ ?GetClientSize@CPaintManagerUI@DuiLib@@QBE?AUtagSIZE@@XZ ?GetClisd@CActiveXUI@DuiLib@@QBE?AU_GUID@@XZ ?GetColumns@CTileLayoutUI@DuiLib@@QBEHXZ ?GetControl@CActiveXUI@DuiLib@@QAEJU_GUID@@PAPAX@Z ?GetControlFlags@CActiveXUI@DuiLib@@UBEIXZ ?GetControlFlags@CButtonUI@DuiLib@@UBEIXZ ?GetControlFlags@CComboUI@DuiLib@@UBEIXZ ?GetControlFlags@CControlUI@DuiLib@@UBEIXZ ?GetControlFlags@CDateTimeUI@DuiLib@@UBEIXZ ?GetControlFlags@CEditUI@DuiLib@@UBEIXZ ?GetControlFlags@CHorizontalLayoutUI@DuiLib@@UBEIXZ ?GetControlFlags@CHyperLinkUI@DuiLib@@UBEIXZ ?GetControlFlags@CListContainerElementUI@DuiLib@@UBEIXZ ?GetControlFlags@CListElementUI@DuiLib@@UBEIXZ ?GetControlFlags@CListHeaderItemUI@DuiLib@@UBEIXZ ?GetControlFlags@CListTextElementUI@DuiLib@@UBEIXZ ?GetControlFlags@CListUI@DuiLib@@UBEIXZ ?GetControlFlags@CRichEditUI@DuiLib@@UBEIXZ ?GetControlFlags@CSliderUI@DuiLib@@UBEIXZ ?GetControlFlags@CTextUI@DuiLib@@UBEIXZ ?GetControlFlags@CVerticalLayoutUI@DuiLib@@UBEIXZ ?GetCount@CContainerUI@DuiLib@@UBEHXZ ?GetCount@CListUI@DuiLib@@UBEHXZ ?GetCountChild@CTreeNodeUI@DuiLib@@QAEJXZ ?GetCover@CControlUI@DuiLib@@UBEPAV12@XZ ?GetCurSel@CComboUI@DuiLib@@UBEHXZ ?GetCurSel@CListUI@DuiLib@@UBEHXZ ?GetCurSel@CTabLayoutUI@DuiLib@@QBEHXZ ?GetCurrentPath@CPaintManagerUI@DuiLib@@SA?AVCDuiString@2@XZ ?GetCustomAttribute@CControlUI@DuiLib@@QBEPB_WPB_W@Z ?GetCustomFontCount@CPaintManagerUI@DuiLib@@QBEK_N@Z ?GetData@CDuiPtrArray@DuiLib@@QAEPAPAXXZ ?GetData@CDuiString@DuiLib@@QBEPB_WXZ ?GetData@CDuiValArray@DuiLib@@QAEPAXXZ ?GetDefaultAttributeList@CPaintManagerUI@DuiLib@@QBEPB_WPB_W@Z ?GetDefaultCharFormat@CRichEditUI@DuiLib@@QBEKAAUCHARFORMAT2W@@@Z ?GetDefaultDisabledColor@CPaintManagerUI@DuiLib@@QBEKXZ ?GetDefaultFontColor@CPaintManagerUI@DuiLib@@QBEKXZ ?GetDefaultFontInfo@CPaintManagerUI@DuiLib@@QAEPAUtagTFontInfo@2@XZ ?GetDefaultLinkFontColor@CPaintManagerUI@DuiLib@@QBEKXZ ?GetDefaultLinkHoverFontColor@CPaintManagerUI@DuiLib@@QBEKXZ ?GetDefaultSelectedBkColor@CPaintManagerUI@DuiLib@@QBEKXZ ?GetDisabledImage@CButtonUI@DuiLib@@QAEPB_WXZ ?GetDisabledImage@CComboUI@DuiLib@@QBEPB_WXZ ?GetDisabledImage@CEditUI@DuiLib@@QAEPB_WXZ ?GetDisabledItemBkColor@CComboUI@DuiLib@@QBEKXZ ?GetDisabledItemBkColor@CListUI@DuiLib@@QBEKXZ ?GetDisabledItemImage@CComboUI@DuiLib@@QBEPB_WXZ ?GetDisabledItemImage@CListUI@DuiLib@@QBEPB_WXZ ?GetDisabledItemTextColor@CComboUI@DuiLib@@QBEKXZ ?GetDisabledItemTextColor@CListUI@DuiLib@@QBEKXZ ?GetDisabledTextColor@CLabelUI@DuiLib@@QBEKXZ ?GetDottedLine@CTreeNodeUI@DuiLib@@QBEPAVCLabelUI@2@XZ ?GetDrawIndex@CListContainerElementUI@DuiLib@@UBEHXZ ?GetDrawIndex@CListElementUI@DuiLib@@UBEHXZ ?GetDropBoxAttributeList@CComboUI@DuiLib@@QAE?AVCDuiString@2@XZ ?GetDropBoxSize@CComboUI@DuiLib@@QBE?AUtagSIZE@@XZ ?GetDropTarget@CWebBrowserUI@DuiLib@@UAGJPAUIDropTarget@@PAPAU3@@Z ?GetEnabledEffect@CLabelUI@DuiLib@@QAE_NXZ ?GetEnabledLuminous@CLabelUI@DuiLib@@QAE_NXZ ?GetEnabledShadow@CLabelUI@DuiLib@@QAE_NXZ ?GetEnabledStroke@CLabelUI@DuiLib@@QAE_NXZ ?GetEventMask@CRichEditUI@DuiLib@@QBEKXZ ?GetExpandedItem@CComboUI@DuiLib@@UBEHXZ ?GetExpandedItem@CListUI@DuiLib@@UBEHXZ ?GetExternal@CWebBrowserUI@DuiLib@@UAGJPAPAUIDispatch@@@Z ?GetFadeAlphaDelta@CButtonUI@DuiLib@@QAEEXZ ?GetFixedColumns@CTileLayoutUI@DuiLib@@QBEHXZ ?GetFixedHeight@CControlUI@DuiLib@@UBEHXZ ?GetFixedWidth@CControlUI@DuiLib@@UBEHXZ ?GetFixedXY@CControlUI@DuiLib@@UBE?AUtagSIZE@@XZ ?GetFloatPercent@CControlUI@DuiLib@@UBE?AUtagTPercentInfo@2@XZ ?GetFn@CDelegateBase@DuiLib@@IAEPAXXZ ?GetFocus@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@XZ ?GetFocusBorderColor@CControlUI@DuiLib@@QBEKXZ ?GetFocusedImage@CButtonUI@DuiLib@@QAEPB_WXZ ?GetFocusedImage@CComboUI@DuiLib@@QBEPB_WXZ ?GetFocusedImage@CEditUI@DuiLib@@QAEPB_WXZ ?GetFocusedImage@CListHeaderItemUI@DuiLib@@QBEPB_WXZ ?GetFocusedTextColor@CButtonUI@DuiLib@@QBEKXZ ?GetFolderButton@CTreeNodeUI@DuiLib@@QBEPAVCCheckBoxUI@2@XZ ?GetFont@CLabelUI@DuiLib@@QBEHXZ ?GetFont@CPaintManagerUI@DuiLib@@QAEPAUHFONT__@@H@Z ?GetFont@CPaintManagerUI@DuiLib@@QAEPAUHFONT__@@PB_WH_N11@Z ?GetFont@CRichEditUI@DuiLib@@QAEHXZ ?GetFontIndex@CPaintManagerUI@DuiLib@@QAEHPAUHFONT__@@_N@Z ?GetFontIndex@CPaintManagerUI@DuiLib@@QAEHPB_WH_N111@Z ?GetFontInfo@CPaintManagerUI@DuiLib@@QAEPAUtagTFontInfo@2@H@Z ?GetFontInfo@CPaintManagerUI@DuiLib@@QAEPAUtagTFontInfo@2@PAUHFONT__@@@Z ?GetForeImage@CButtonUI@DuiLib@@QAEPB_WXZ ?GetForeImage@COptionUI@DuiLib@@QAEPB_WXZ ?GetForeImage@CProgressUI@DuiLib@@QBEPB_WXZ ?GetFoundControls@CPaintManagerUI@DuiLib@@AAEPAVCDuiPtrArray@2@XZ ?GetGradientAngle@CLabelUI@DuiLib@@QAEHXZ ?GetGradientLength@CLabelUI@DuiLib@@QAEHXZ ?GetGroup@COptionUI@DuiLib@@QBEPB_WXZ ?GetHSL@CPaintManagerUI@DuiLib@@SA_NPAF00@Z ?GetHWND@CWindowWnd@DuiLib@@QBEPAUHWND__@@XZ ?GetHWND@CWndShadow@@QBEPAUHWND__@@XZ ?GetHeader@CListUI@DuiLib@@UBEPAVCListHeaderUI@2@XZ ?GetHeight@CControlUI@DuiLib@@UBEHXZ ?GetHeight@CDuiRect@DuiLib@@QBEHXZ ?GetHomePage@CWebBrowserUI@DuiLib@@QAEPB_WXZ ?GetHorizontalScrollBar@CContainerUI@DuiLib@@UBEPAVCScrollBarUI@2@XZ ?GetHorizontalScrollBar@CListUI@DuiLib@@UBEPAVCScrollBarUI@2@XZ ?GetHostInfo@CWebBrowserUI@DuiLib@@UAGJPAU_DOCHOSTUIINFO@@@Z ?GetHotBkColor@CButtonUI@DuiLib@@QBEKXZ ?GetHotForeImage@CButtonUI@DuiLib@@QAEPB_WXZ ?GetHotImage@CButtonUI@DuiLib@@QAEPB_WXZ ?GetHotImage@CComboUI@DuiLib@@QBEPB_WXZ ?GetHotImage@CEditUI@DuiLib@@QAEPB_WXZ ?GetHotImage@CListHeaderItemUI@DuiLib@@QBEPB_WXZ ?GetHotItemBkColor@CComboUI@DuiLib@@QBEKXZ ?GetHotItemBkColor@CListUI@DuiLib@@QBEKXZ ?GetHotItemImage@CComboUI@DuiLib@@QBEPB_WXZ ?GetHotItemImage@CListUI@DuiLib@@QBEPB_WXZ ?GetHotItemTextColor@CComboUI@DuiLib@@QBEKXZ ?GetHotItemTextColor@CListUI@DuiLib@@QBEKXZ ?GetHotTextColor@CButtonUI@DuiLib@@QBEKXZ ?GetHoverTime@CPaintManagerUI@DuiLib@@QBEHXZ ?GetHtmlWindow@CWebBrowserUI@DuiLib@@QAEPAUIDispatch@@XZ ?GetIDsOfNames@CWebBrowserUI@DuiLib@@UAGJABU_GUID@@PAPA_WIKPAJ@Z ?GetImage@CPaintManagerUI@DuiLib@@QAEPBUtagTImageInfo@2@PB_W@Z ?GetImageEx@CPaintManagerUI@DuiLib@@QAEPBUtagTImageInfo@2@PB_W0K_N@Z ?GetIndex@CListContainerElementUI@DuiLib@@UBEHXZ ?GetIndex@CListElementUI@DuiLib@@UBEHXZ ?GetInitSize@CPaintManagerUI@DuiLib@@QAE?AUtagSIZE@@XZ ?GetInset@CContainerUI@DuiLib@@UBE?AUtagRECT@@XZ ?GetInstance@CPaintManagerUI@DuiLib@@SAPAUHINSTANCE__@@XZ ?GetInstancePath@CPaintManagerUI@DuiLib@@SA?AVCDuiString@2@XZ ?GetInterface@CActiveXUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CButtonUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CCheckBoxUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CChildLayoutUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CComboUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CContainerUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CControlUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CDateTimeUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CEditUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CGifAnimUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CHorizontalLayoutUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CHyperLinkUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CLabelUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CListContainerElementUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CListElementUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CListHBoxElementUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CListHeaderItemUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CListHeaderUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CListLabelElementUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CListTextElementUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CListUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@COptionUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CProgressUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CRichEditUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CScrollBarUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CSliderUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CTabLayoutUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CTextUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CTileLayoutUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CTreeNodeUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CTreeViewUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CVerticalLayoutUI@DuiLib@@UAEPAXPB_W@Z ?GetInterface@CWebBrowserUI@DuiLib@@UAEPAXPB_W@Z ?GetItemAt@CContainerUI@DuiLib@@UBEPAVCControlUI@2@H@Z ?GetItemAt@CListUI@DuiLib@@UBEPAVCControlUI@2@H@Z ?GetItemBkColor@CComboUI@DuiLib@@QBEKXZ ?GetItemBkColor@CListUI@DuiLib@@QBEKXZ ?GetItemBkImage@CComboUI@DuiLib@@QBEPB_WXZ ?GetItemBkImage@CListUI@DuiLib@@QBEPB_WXZ ?GetItemButton@CTreeNodeUI@DuiLib@@QBEPAVCOptionUI@2@XZ ?GetItemFixedHeight@CComboUI@DuiLib@@QAEIXZ ?GetItemFixedHeight@CListUI@DuiLib@@QAEIXZ ?GetItemFont@CComboUI@DuiLib@@QAEHH@Z ?GetItemFont@CListUI@DuiLib@@QAEHH@Z ?GetItemHLineColor@CComboUI@DuiLib@@QBEKXZ ?GetItemHLineColor@CListUI@DuiLib@@QBEKXZ ?GetItemHLineSize@CComboUI@DuiLib@@QBEHXZ ?GetItemHLineSize@CListUI@DuiLib@@QBEHXZ ?GetItemHotTextColor@CTreeNodeUI@DuiLib@@QBEKXZ ?GetItemIndex@CContainerUI@DuiLib@@UBEHPAVCControlUI@2@@Z ?GetItemIndex@CListUI@DuiLib@@UBEHPAVCControlUI@2@@Z ?GetItemMinWidth@CTreeViewUI@DuiLib@@UAEIXZ ?GetItemSize@CTileLayoutUI@DuiLib@@QBE?AUtagSIZE@@XZ ?GetItemText@CTreeNodeUI@DuiLib@@QAE?AVCDuiString@2@XZ ?GetItemTextColor@CComboUI@DuiLib@@QBEKXZ ?GetItemTextColor@CListUI@DuiLib@@QBEKXZ ?GetItemTextColor@CTreeNodeUI@DuiLib@@QBEKXZ ?GetItemTextPadding@CComboUI@DuiLib@@QBE?AUtagRECT@@XZ ?GetItemTextPadding@CListUI@DuiLib@@QBE?AUtagRECT@@XZ ?GetItemTextStyle@CComboUI@DuiLib@@QAEIXZ ?GetItemTextStyle@CListUI@DuiLib@@QAEIXZ ?GetItemVLineColor@CComboUI@DuiLib@@QBEKXZ ?GetItemVLineColor@CListUI@DuiLib@@QBEKXZ ?GetItemVLineSize@CComboUI@DuiLib@@QBEHXZ ?GetItemVLineSize@CListUI@DuiLib@@QBEHXZ ?GetLastErrorLocation@CDialogBuilder@DuiLib@@QBEXPA_WK@Z ?GetLastErrorLocation@CMarkup@DuiLib@@QBEXPA_WK@Z ?GetLastErrorMessage@CDialogBuilder@DuiLib@@QBEXPA_WK@Z ?GetLastErrorMessage@CMarkup@DuiLib@@QBEXPA_WK@Z ?GetLastNode@CTreeNodeUI@DuiLib@@AAEPAV12@XZ ?GetLayeredImage@CPaintManagerUI@DuiLib@@QAEPB_WXZ ?GetLayeredInset@CPaintManagerUI@DuiLib@@QAEAAUtagRECT@@XZ ?GetLayeredOpacity@CPaintManagerUI@DuiLib@@QAEEXZ ?GetLength@CDuiString@DuiLib@@QBEHXZ ?GetLimitText@CRichEditUI@DuiLib@@QAEHXZ ?GetLine@CRichEditUI@DuiLib@@QBE?AVCDuiString@2@HH@Z ?GetLineCount@CRichEditUI@DuiLib@@QBEHXZ ?GetLineSize@CScrollBarUI@DuiLib@@QBEHXZ ?GetLinkContent@CListTextElementUI@DuiLib@@QAEPAVCDuiString@2@H@Z ?GetLinkContent@CTextUI@DuiLib@@QAEPAVCDuiString@2@H@Z ?GetList@CListUI@DuiLib@@UBEPAVCContainerUI@2@XZ ?GetListInfo@CComboUI@DuiLib@@UAEPAUtagTListInfoUI@2@XZ ?GetListInfo@CListUI@DuiLib@@UAEPAUtagTListInfoUI@2@XZ ?GetLuminousFuzzy@CLabelUI@DuiLib@@QAEMXZ ?GetManager@CControlUI@DuiLib@@UBEPAVCPaintManagerUI@2@XZ ?GetMarkup@CDialogBuilder@DuiLib@@QAEPAVCMarkup@2@XZ ?GetMaxChar@CEditUI@DuiLib@@QAEIXZ ?GetMaxHeight@CControlUI@DuiLib@@UBEHXZ ?GetMaxInfo@CPaintManagerUI@DuiLib@@QBE?AUtagSIZE@@XZ ?GetMaxValue@CProgressUI@DuiLib@@QBEHXZ ?GetMaxWidth@CControlUI@DuiLib@@UBEHXZ ?GetMessageMap@CNotifyPump@DuiLib@@MBEPBUDUI_MSGMAP@2@XZ ?GetMessageMap@WindowImplBase@DuiLib@@MBEPBUDUI_MSGMAP@2@XZ ?GetMinHeight@CControlUI@DuiLib@@UBEHXZ ?GetMinInfo@CPaintManagerUI@DuiLib@@QBE?AUtagSIZE@@XZ ?GetMinValue@CProgressUI@DuiLib@@QBEHXZ ?GetMinWidth@CControlUI@DuiLib@@UBEHXZ ?GetModuleName@CActiveXUI@DuiLib@@QBE?AVCDuiString@2@XZ ?GetMousePos@CPaintManagerUI@DuiLib@@QBE?AUtagPOINT@@XZ ?GetMultiLanguageString@CPaintManagerUI@DuiLib@@SAPB_WH@Z ?GetName@CControlUI@DuiLib@@UBE?AVCDuiString@2@XZ ?GetName@CMarkupNode@DuiLib@@QBEPB_WXZ ?GetName@CPaintManagerUI@DuiLib@@QBEPB_WXZ ?GetNativeEditBkColor@CEditUI@DuiLib@@QBEKXZ ?GetNativeEditHWND@CEditUI@DuiLib@@QBEPAUHWND__@@XZ ?GetNativeWindow@CActiveXUI@DuiLib@@UBEPAUHWND__@@XZ ?GetNativeWindow@CControlUI@DuiLib@@UBEPAUHWND__@@XZ ?GetNativeWindow@CDateTimeUI@DuiLib@@UBEPAUHWND__@@XZ ?GetNativeWindow@CEditUI@DuiLib@@UBEPAUHWND__@@XZ ?GetNativeWindowCount@CPaintManagerUI@DuiLib@@QBEHXZ ?GetNativeWindowRect@CPaintManagerUI@DuiLib@@QAE?AUtagRECT@@PAUHWND__@@@Z ?GetNodeIndex@CTreeNodeUI@DuiLib@@QAEHXZ ?GetNormalImage@CButtonUI@DuiLib@@QAEPB_WXZ ?GetNormalImage@CComboUI@DuiLib@@QBEPB_WXZ ?GetNormalImage@CEditUI@DuiLib@@QAEPB_WXZ ?GetNormalImage@CListHeaderItemUI@DuiLib@@QBEPB_WXZ ?GetObjectW@CDelegateBase@DuiLib@@IAEPAXXZ ?GetOpacity@CPaintManagerUI@DuiLib@@QBEEXZ ?GetOptionGroup@CPaintManagerUI@DuiLib@@QAEPAVCDuiPtrArray@2@PB_W@Z ?GetOptionKeyPath@CWebBrowserUI@DuiLib@@UAGJPAPA_WK@Z ?GetOwner@CListContainerElementUI@DuiLib@@UAEPAVIListOwnerUI@2@XZ ?GetOwner@CListElementUI@DuiLib@@UAEPAVIListOwnerUI@2@XZ ?GetOwner@CScrollBarUI@DuiLib@@QBEPAVCContainerUI@2@XZ ?GetPadding@CControlUI@DuiLib@@UBE?AUtagRECT@@XZ ?GetPaintDC@CPaintManagerUI@DuiLib@@QBEPAUHDC__@@XZ ?GetPaintManager@CPaintManagerUI@DuiLib@@SAPAV12@PB_W@Z ?GetPaintManagers@CPaintManagerUI@DuiLib@@SAPAVCDuiPtrArray@2@XZ ?GetPaintOffscreenBitmap@CPaintManagerUI@DuiLib@@QAEPAUHBITMAP__@@XZ ?GetPaintWindow@CPaintManagerUI@DuiLib@@QBEPAUHWND__@@XZ ?GetParaFormat@CRichEditUI@DuiLib@@QBEKAAUPARAFORMAT2@@@Z ?GetParent@CControlUI@DuiLib@@UBEPAV12@XZ ?GetParent@CMarkupNode@DuiLib@@QAE?AV12@XZ ?GetParentNode@CTreeNodeUI@DuiLib@@QAEPAV12@XZ ?GetPasswordChar@CEditUI@DuiLib@@QBE_WXZ ?GetPlugins@CPaintManagerUI@DuiLib@@SAPAVCDuiPtrArray@2@XZ ?GetPos@CControlUI@DuiLib@@UBEABUtagRECT@@XZ ?GetPostPaintCount@CPaintManagerUI@DuiLib@@QBEHXZ ?GetProperty@CWebBrowserUI@DuiLib@@SAJPAUIDispatch@@PA_WPAUtagVARIANT@@@Z ?GetPushedImage@CButtonUI@DuiLib@@QAEPB_WXZ ?GetPushedImage@CComboUI@DuiLib@@QBEPB_WXZ ?GetPushedImage@CListHeaderItemUI@DuiLib@@QBEPB_WXZ ?GetPushedTextColor@CButtonUI@DuiLib@@QBEKXZ ?GetRailDisabledImage@CScrollBarUI@DuiLib@@QAEPB_WXZ ?GetRailHotImage@CScrollBarUI@DuiLib@@QAEPB_WXZ ?GetRailNormalImage@CScrollBarUI@DuiLib@@QAEPB_WXZ ?GetRailPushedImage@CScrollBarUI@DuiLib@@QAEPB_WXZ ?GetRelativePos@CControlUI@DuiLib@@UBE?AUtagRECT@@XZ ?GetResourceDll@CPaintManagerUI@DuiLib@@SAPAUHINSTANCE__@@XZ ?GetResourceID@WindowImplBase@DuiLib@@UBEPB_WXZ ?GetResourcePath@CPaintManagerUI@DuiLib@@SAABVCDuiString@2@XZ ?GetResourceType@WindowImplBase@DuiLib@@UBE?AW4UILIB_RESOURCETYPE@2@XZ ?GetResourceZip@CPaintManagerUI@DuiLib@@SAABVCDuiString@2@XZ ?GetResourceZipHandle@CPaintManagerUI@DuiLib@@SAPAXXZ ?GetRoot@CMarkup@DuiLib@@QAE?AVCMarkupNode@2@XZ ?GetRoot@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@XZ ?GetRoundCorner@CPaintManagerUI@DuiLib@@QBE?AUtagSIZE@@XZ ?GetRows@CTileLayoutUI@DuiLib@@QBEHXZ ?GetScrollPos@CContainerUI@DuiLib@@UBE?AUtagSIZE@@XZ ?GetScrollPos@CListUI@DuiLib@@UBE?AUtagSIZE@@XZ ?GetScrollPos@CScrollBarUI@DuiLib@@QBEHXZ ?GetScrollRange@CContainerUI@DuiLib@@UBE?AUtagSIZE@@XZ ?GetScrollRange@CListUI@DuiLib@@UBE?AUtagSIZE@@XZ ?GetScrollRange@CScrollBarUI@DuiLib@@QBEHXZ ?GetScrollSelect@CListUI@DuiLib@@QAE_NXZ ?GetScrollUnit@CScrollBarUI@DuiLib@@QBEHXZ ?GetSel@CRichEditUI@DuiLib@@QBEXAAJ0@Z ?GetSel@CRichEditUI@DuiLib@@QBEXAAU_charrange@@@Z ?GetSelItemHotTextColor@CTreeNodeUI@DuiLib@@QBEKXZ ?GetSelItemTextColor@CTreeNodeUI@DuiLib@@QBEKXZ ?GetSelText@CRichEditUI@DuiLib@@QBE?AVCDuiString@2@XZ ?GetSelectBkColor@COptionUI@DuiLib@@QAEKXZ ?GetSelectCloseFlag@CComboUI@DuiLib@@QAE_NXZ ?GetSelectedHotImage@COptionUI@DuiLib@@QAEPB_WXZ ?GetSelectedImage@COptionUI@DuiLib@@QAEPB_WXZ ?GetSelectedItemBkColor@CComboUI@DuiLib@@QBEKXZ ?GetSelectedItemBkColor@CListUI@DuiLib@@QBEKXZ ?GetSelectedItemImage@CComboUI@DuiLib@@QBEPB_WXZ ?GetSelectedItemImage@CListUI@DuiLib@@QBEPB_WXZ ?GetSelectedItemTextColor@CComboUI@DuiLib@@QBEKXZ ?GetSelectedItemTextColor@CListUI@DuiLib@@QBEKXZ ?GetSelectedTextColor@COptionUI@DuiLib@@QAEKXZ ?GetSelectionCharFormat@CRichEditUI@DuiLib@@QBEKAAUCHARFORMAT2W@@@Z ?GetSelectionType@CRichEditUI@DuiLib@@QBEGXZ ?GetSepColor@CListHeaderItemUI@DuiLib@@QBEKXZ ?GetSepHeight@CVerticalLayoutUI@DuiLib@@QBEHXZ ?GetSepImage@CListHeaderItemUI@DuiLib@@QBEPB_WXZ ?GetSepWidth@CHorizontalLayoutUI@DuiLib@@QBEHXZ ?GetSepWidth@CListHeaderItemUI@DuiLib@@QBEKXZ ?GetShadowOffset@CLabelUI@DuiLib@@QAE?AVRectF@Gdiplus@@XZ ?GetShadowWindowIndex@CWndShadow@@KAHPAUHWND__@@@Z ?GetShortcut@CControlUI@DuiLib@@UBE_WXZ ?GetShowButton1@CScrollBarUI@DuiLib@@QAE_NXZ ?GetShowButton2@CScrollBarUI@DuiLib@@QAE_NXZ ?GetShowText@CComboUI@DuiLib@@QBE_NXZ ?GetSibling@CMarkupNode@DuiLib@@QAE?AV12@XZ ?GetSize@CDuiPtrArray@DuiLib@@QBEHXZ ?GetSize@CDuiStringPtrMap@DuiLib@@QBEHXZ ?GetSize@CDuiValArray@DuiLib@@QBEHXZ ?GetSizeBox@CPaintManagerUI@DuiLib@@QAEAAUtagRECT@@XZ ?GetStrokeColor@CLabelUI@DuiLib@@QAEKXZ ?GetStyle@WindowImplBase@DuiLib@@UAEJXZ ?GetSubControlFixedHeight@CContainerUI@DuiLib@@QAEHPB_W@Z ?GetSubControlFixedWdith@CContainerUI@DuiLib@@QAEHPB_W@Z ?GetSubControlText@CContainerUI@DuiLib@@QAE?AVCDuiString@2@PB_W@Z ?GetSubControlUserData@CContainerUI@DuiLib@@QAE?BVCDuiString@2@PB_W@Z ?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ ?GetTag@CControlUI@DuiLib@@UBEIXZ ?GetText@CComboUI@DuiLib@@UBE?AVCDuiString@2@XZ ?GetText@CControlUI@DuiLib@@UBE?AVCDuiString@2@XZ ?GetText@CListTextElementUI@DuiLib@@QBEPB_WH@Z ?GetText@CRichEditUI@DuiLib@@UBE?AVCDuiString@2@XZ ?GetTextCallback@CListUI@DuiLib@@UBEPAVIListCallbackUI@2@XZ ?GetTextColor1@CLabelUI@DuiLib@@QAEKXZ ?GetTextColor@CLabelUI@DuiLib@@QBEKXZ ?GetTextColor@CListHeaderItemUI@DuiLib@@QBEKXZ ?GetTextColor@CRichEditUI@DuiLib@@QAEKXZ ?GetTextLength@CRichEditUI@DuiLib@@QBEJK@Z ?GetTextPadding@CComboUI@DuiLib@@QBE?AUtagRECT@@XZ ?GetTextPadding@CLabelUI@DuiLib@@QBE?AUtagRECT@@XZ ?GetTextPadding@CListHeaderItemUI@DuiLib@@QBE?AUtagRECT@@XZ ?GetTextPadding@CRichEditUI@DuiLib@@QBE?AUtagRECT@@XZ ?GetTextRange@CRichEditUI@DuiLib@@QBE?AVCDuiString@2@JJ@Z ?GetTextShadowColorA@CLabelUI@DuiLib@@QAEKXZ ?GetTextShadowColorB@CLabelUI@DuiLib@@QAEKXZ ?GetTextSize@CRenderEngine@DuiLib@@SA?AUtagSIZE@@PAUHDC__@@PAVCPaintManagerUI@2@PB_WHI@Z ?GetTextStyle@CLabelUI@DuiLib@@QBEIXZ ?GetTextStyle@CListHeaderItemUI@DuiLib@@QBEKXZ ?GetThumbColor@CScrollBarUI@DuiLib@@QBEKXZ ?GetThumbDisabledImage@CScrollBarUI@DuiLib@@QAEPB_WXZ ?GetThumbHotImage@CScrollBarUI@DuiLib@@QAEPB_WXZ ?GetThumbHotImage@CSliderUI@DuiLib@@QBEPB_WXZ ?GetThumbImage@CSliderUI@DuiLib@@QBEPB_WXZ ?GetThumbNormalImage@CScrollBarUI@DuiLib@@QAEPB_WXZ ?GetThumbPushedImage@CScrollBarUI@DuiLib@@QAEPB_WXZ ?GetThumbPushedImage@CSliderUI@DuiLib@@QBEPB_WXZ ?GetThumbRect@CHorizontalLayoutUI@DuiLib@@QBE?AUtagRECT@@_N@Z ?GetThumbRect@CListHeaderItemUI@DuiLib@@QBE?AUtagRECT@@XZ ?GetThumbRect@CSliderUI@DuiLib@@QBE?AUtagRECT@@XZ ?GetThumbRect@CVerticalLayoutUI@DuiLib@@QBE?AUtagRECT@@_N@Z ?GetTime@CDateTimeUI@DuiLib@@QAEAAU_SYSTEMTIME@@XZ ?GetToolTip@CControlUI@DuiLib@@UBE?AVCDuiString@2@XZ ?GetToolTipWidth@CControlUI@DuiLib@@UAEHXZ ?GetTooltipWindow@CPaintManagerUI@DuiLib@@QBEPAUHWND__@@XZ ?GetTooltipWindowWidth@CPaintManagerUI@DuiLib@@QBEHXZ ?GetTreeIndex@CTreeNodeUI@DuiLib@@QAEHXZ ?GetTreeNodeHoriznotal@CTreeNodeUI@DuiLib@@QBEPAVCHorizontalLayoutUI@2@XZ ?GetTreeNodes@CTreeNodeUI@DuiLib@@QAE?AVCDuiPtrArray@2@XZ ?GetTreeView@CTreeNodeUI@DuiLib@@QAEPAVCTreeViewUI@2@XZ ?GetTxDropTarget@CRichEditUI@DuiLib@@QAEPAUIDropTarget@@XZ ?GetTypeInfo@CWebBrowserUI@DuiLib@@UAGJIKPAPAUITypeInfo@@@Z ?GetTypeInfoCount@CWebBrowserUI@DuiLib@@UAGJPAI@Z ?GetUserData@CControlUI@DuiLib@@UAEABVCDuiString@2@XZ ?GetValue@CMarkupNode@DuiLib@@QBEPB_WXZ ?GetValue@CProgressUI@DuiLib@@QBEHXZ ?GetVerticalScrollBar@CContainerUI@DuiLib@@UBEPAVCScrollBarUI@2@XZ ?GetVerticalScrollBar@CListUI@DuiLib@@UBEPAVCScrollBarUI@2@XZ ?GetVirtualWnd@CControlUI@DuiLib@@QBE?AVCDuiString@2@XZ ?GetVisibleCheckBtn@CTreeNodeUI@DuiLib@@QAE_NXZ ?GetVisibleCheckBtn@CTreeViewUI@DuiLib@@UAE_NXZ ?GetVisibleFolderBtn@CTreeNodeUI@DuiLib@@QAE_NXZ ?GetVisibleFolderBtn@CTreeViewUI@DuiLib@@UAE_NXZ ?GetVisibleTag@CTreeNodeUI@DuiLib@@QAE_NXZ ?GetWebBrowser2@CWebBrowserUI@DuiLib@@QAEPAUIWebBrowser2@@XZ ?GetWidth@CControlUI@DuiLib@@UBEHXZ ?GetWidth@CDuiRect@DuiLib@@QBEHXZ ?GetWinStyle@CRichEditUI@DuiLib@@QAEJXZ ?GetWindowAttribute@CPaintManagerUI@DuiLib@@QAE?AVCDuiString@2@PB_W@Z ?GetWindowAttributeList@CPaintManagerUI@DuiLib@@QAE?AVCDuiString@2@_N@Z ?GetWindowCustomAttribute@CPaintManagerUI@DuiLib@@QBEPB_WPB_W@Z ?GetWindowStyls@CEditUI@DuiLib@@QBEHXZ ?GetWindowXML@CPaintManagerUI@DuiLib@@QAE?AVCDuiString@2@XZ ?GetX@CControlUI@DuiLib@@UBEHXZ ?GetY@CControlUI@DuiLib@@UBEHXZ ?GetZIPFileName@WindowImplBase@DuiLib@@UBE?AVCDuiString@2@XZ ?GetZoom@CRichEditUI@DuiLib@@QBE_NAAH0@Z ?GoBack@CWebBrowserUI@DuiLib@@QAEXXZ ?GoForward@CWebBrowserUI@DuiLib@@QAEXXZ ?HandleCustomMessage@WindowImplBase@DuiLib@@UAEJIIJAAH@Z ?HandleMessage@CWindowWnd@DuiLib@@MAEJIIJ@Z ?HandleMessage@WindowImplBase@DuiLib@@UAEJIIJ@Z ?HasAttribute@CMarkupNode@DuiLib@@QAE_NPB_W@Z ?HasAttributes@CMarkupNode@DuiLib@@QAE_NXZ ?HasChildren@CMarkupNode@DuiLib@@QBE_NXZ ?HasSiblings@CMarkupNode@DuiLib@@QBE_NXZ ?HideSelection@CRichEditUI@DuiLib@@QAEX_N0@Z ?HideUI@CWebBrowserUI@DuiLib@@UAGJXZ ?HomeLeft@CContainerUI@DuiLib@@UAEXXZ ?HomeLeft@CListUI@DuiLib@@UAEXXZ ?HomeLeft@CRichEditUI@DuiLib@@UAEXXZ ?HomeUp@CContainerUI@DuiLib@@UAEXXZ ?HomeUp@CListUI@DuiLib@@UAEXXZ ?HomeUp@CRichEditUI@DuiLib@@UAEXXZ ?Inflate@CDuiRect@DuiLib@@QAEXHH@Z ?Init@CChildLayoutUI@DuiLib@@UAEXXZ ?Init@CControlUI@DuiLib@@UAEXXZ ?Init@CPaintManagerUI@DuiLib@@QAEXPAUHWND__@@PB_W@Z ?InitControls@CPaintManagerUI@DuiLib@@QAE_NPAVCControlUI@2@0@Z ?InitGifImage@CGifAnimUI@DuiLib@@AAEXXZ ?InitWindow@WindowImplBase@DuiLib@@UAEXXZ ?Initialize@CWndShadow@@SA_NPAUHINSTANCE__@@@Z ?Insert@CDuiStringPtrMap@DuiLib@@QAE_NPB_WPAX@Z ?InsertAt@CDuiPtrArray@DuiLib@@QAE_NHPAX@Z ?InsertText@CRichEditUI@DuiLib@@QAEHJPB_W_N@Z ?Invalidate@CControlUI@DuiLib@@QAEXXZ ?Invalidate@CListContainerElementUI@DuiLib@@QAEXXZ ?Invalidate@CListElementUI@DuiLib@@QAEXXZ ?Invalidate@CPaintManagerUI@DuiLib@@QAEXAAUtagRECT@@@Z ?Invalidate@CPaintManagerUI@DuiLib@@QAEXXZ ?Invalidate@CTreeNodeUI@DuiLib@@QAEXXZ ?Invoke@CWebBrowserUI@DuiLib@@UAGJJABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z ?InvokeMethod@CWebBrowserUI@DuiLib@@SAJPAUIDispatch@@PA_WPAUtagVARIANT@@2H@Z ?IsAlternateBk@CComboUI@DuiLib@@QBE_NXZ ?IsAlternateBk@CListUI@DuiLib@@QBE_NXZ ?IsAutoDestroy@CContainerUI@DuiLib@@UBE_NXZ ?IsAutoNavigation@CWebBrowserUI@DuiLib@@QAE_NXZ ?IsAutoPlay@CGifAnimUI@DuiLib@@QBE_NXZ ?IsAutoSelAll@CEditUI@DuiLib@@QAE_NXZ ?IsAutoSize@CGifAnimUI@DuiLib@@QBE_NXZ ?IsCachedResourceZip@CPaintManagerUI@DuiLib@@SA_NXZ ?IsCaptured@CPaintManagerUI@DuiLib@@QAE_NXZ ?IsCheckBoxSelected@CTreeNodeUI@DuiLib@@QBE_NXZ ?IsColorHSL@CControlUI@DuiLib@@QBE_NXZ ?IsContextMenuUsed@CControlUI@DuiLib@@UBE_NXZ ?IsDelayCreate@CActiveXUI@DuiLib@@QBE_NXZ ?IsDelayedDestroy@CContainerUI@DuiLib@@UBE_NXZ ?IsDragable@CListHeaderItemUI@DuiLib@@QBE_NXZ ?IsEmpty@CDuiPtrArray@DuiLib@@QBE_NXZ ?IsEmpty@CDuiString@DuiLib@@QBE_NXZ ?IsEmpty@CDuiValArray@DuiLib@@QBE_NXZ ?IsEnabled@CControlUI@DuiLib@@UBE_NXZ ?IsExpandable@CListContainerElementUI@DuiLib@@QBE_NXZ ?IsExpanded@CListContainerElementUI@DuiLib@@UBE_NXZ ?IsExpanded@CListElementUI@DuiLib@@UBE_NXZ ?IsFloat@CControlUI@DuiLib@@UBE_NXZ ?IsFocused@CControlUI@DuiLib@@UBE_NXZ ?IsForceUseSharedRes@CPaintManagerUI@DuiLib@@QBE_NXZ ?IsHasChild@CTreeNodeUI@DuiLib@@QBE_NXZ ?IsHorizontal@CProgressUI@DuiLib@@QAE_NXZ ?IsHorizontal@CScrollBarUI@DuiLib@@QAE_NXZ ?IsImmMode@CSliderUI@DuiLib@@QBE_NXZ ?IsItemShowHtml@CComboUI@DuiLib@@QAE_NXZ ?IsItemShowHtml@CListUI@DuiLib@@QAE_NXZ ?IsKeyboardEnabled@CControlUI@DuiLib@@UBE_NXZ ?IsLayered@CPaintManagerUI@DuiLib@@QAE_NXZ ?IsModify@CRichEditUI@DuiLib@@QBE_NXZ ?IsMouseChildEnabled@CContainerUI@DuiLib@@UBE_NXZ ?IsMouseEnabled@CControlUI@DuiLib@@UBE_NXZ ?IsMultiLine@CLabelUI@DuiLib@@QAE_NXZ ?IsNoActivate@CPaintManagerUI@DuiLib@@QAE_NXZ ?IsNull@CDuiRect@DuiLib@@QBE_NXZ ?IsNumberOnly@CEditUI@DuiLib@@QBE_NXZ ?IsPainting@CPaintManagerUI@DuiLib@@QAE_NXZ ?IsPasswordMode@CEditUI@DuiLib@@QBE_NXZ ?IsReadOnly@CDateTimeUI@DuiLib@@QBE_NXZ ?IsReadOnly@CEditUI@DuiLib@@QBE_NXZ ?IsReadOnly@CRichEditUI@DuiLib@@QAE_NXZ ?IsRich@CRichEditUI@DuiLib@@QAE_NXZ ?IsSelected@CListContainerElementUI@DuiLib@@UBE_NXZ ?IsSelected@CListElementUI@DuiLib@@UBE_NXZ ?IsSelected@COptionUI@DuiLib@@QBE_NXZ ?IsSepImmMode@CHorizontalLayoutUI@DuiLib@@QBE_NXZ ?IsSepImmMode@CVerticalLayoutUI@DuiLib@@QBE_NXZ ?IsShowHtml@CLabelUI@DuiLib@@QAE_NXZ ?IsShowHtml@CListHeaderItemUI@DuiLib@@QAE_NXZ ?IsShowUpdateRect@CPaintManagerUI@DuiLib@@QBE_NXZ ?IsStatic@CHyperLinkUI@DuiLib@@QBE_NXZ ?IsTransparent@CRichEditUI@DuiLib@@QAE_NXZ ?IsUpdateNeeded@CControlUI@DuiLib@@QBE_NXZ ?IsUpdateNeeded@CPaintManagerUI@DuiLib@@QBE_NXZ ?IsValid@CMarkup@DuiLib@@QBE_NXZ ?IsValid@CMarkupNode@DuiLib@@QBE_NXZ ?IsVisible@CControlUI@DuiLib@@UBE_NXZ ?IsWantCtrlReturn@CRichEditUI@DuiLib@@QAE_NXZ ?IsWantReturn@CRichEditUI@DuiLib@@QAE_NXZ ?IsWantTab@CRichEditUI@DuiLib@@QAE_NXZ ?IsWordWrap@CRichEditUI@DuiLib@@QAE_NXZ ?Join@CDuiRect@DuiLib@@QAEXABUtagRECT@@@Z ?KillTimer@CPaintManagerUI@DuiLib@@QAEXPAVCControlUI@2@@Z ?KillTimer@CPaintManagerUI@DuiLib@@QAE_NPAVCControlUI@2@I@Z ?Left@CDuiString@DuiLib@@QBE?AV12@H@Z ?LineDown@CContainerUI@DuiLib@@UAEXXZ ?LineDown@CListUI@DuiLib@@UAEXXZ ?LineDown@CRichEditUI@DuiLib@@UAEXXZ ?LineFromChar@CRichEditUI@DuiLib@@QBEJJ@Z ?LineIndex@CRichEditUI@DuiLib@@QBEHH@Z ?LineLeft@CContainerUI@DuiLib@@UAEXXZ ?LineLeft@CListUI@DuiLib@@UAEXXZ ?LineLeft@CRichEditUI@DuiLib@@UAEXXZ ?LineLength@CRichEditUI@DuiLib@@QBEHH@Z ?LineRight@CContainerUI@DuiLib@@UAEXXZ ?LineRight@CListUI@DuiLib@@UAEXXZ ?LineRight@CRichEditUI@DuiLib@@UAEXXZ ?LineScroll@CRichEditUI@DuiLib@@QAE_NHH@Z ?LineUp@CContainerUI@DuiLib@@UAEXXZ ?LineUp@CListUI@DuiLib@@UAEXXZ ?LineUp@CRichEditUI@DuiLib@@UAEXXZ ?Load@CMarkup@DuiLib@@QAE_NPB_W@Z ?LoadFromFile@CMarkup@DuiLib@@QAE_NPB_WH@Z ?LoadFromMem@CMarkup@DuiLib@@QAE_NPAEKH@Z ?LoadGifFromFile@CGifAnimUI@DuiLib@@AAEPAVImage@Gdiplus@@PB_W@Z ?LoadGifFromMemory@CGifAnimUI@DuiLib@@AAEPAVImage@Gdiplus@@PAXI@Z ?LoadImageW@CRenderEngine@DuiLib@@SAPAUtagTImageInfo@2@VSTRINGorID@2@PB_WK@Z ?LoadPlugin@CPaintManagerUI@DuiLib@@SA_NPB_W@Z ?LoopDispatch@CNotifyPump@DuiLib@@QAE_NAAUtagTNotifyUI@2@@Z ?MakeLower@CDuiString@DuiLib@@QAEXXZ ?MakeShadow@CWndShadow@@IAEXPAIPAUHWND__@@PAUtagRECT@@@Z ?MakeUpper@CDuiString@DuiLib@@QAEXXZ ?MessageHandler@CActiveXUI@DuiLib@@UAEJIIJAA_N@Z ?MessageHandler@CPaintManagerUI@DuiLib@@QAE_NIIJAAJ@Z ?MessageHandler@CRichEditUI@DuiLib@@UAEJIIJAA_N@Z ?MessageHandler@WindowImplBase@DuiLib@@UAEJIIJAA_N@Z ?MessageLoop@CPaintManagerUI@DuiLib@@SAXXZ ?Mid@CDuiString@DuiLib@@QBE?AV12@HH@Z ?Move@CActiveXUI@DuiLib@@UAEXUtagSIZE@@_N@Z ?Move@CComboUI@DuiLib@@UAEXUtagSIZE@@_N@Z ?Move@CContainerUI@DuiLib@@UAEXUtagSIZE@@_N@Z ?Move@CControlUI@DuiLib@@UAEXUtagSIZE@@_N@Z ?Move@CDateTimeUI@DuiLib@@UAEXUtagSIZE@@_N@Z ?Move@CEditUI@DuiLib@@UAEXUtagSIZE@@_N@Z ?Move@CListUI@DuiLib@@UAEXUtagSIZE@@_N@Z ?Move@CRichEditUI@DuiLib@@UAEXUtagSIZE@@_N@Z ?Navigate2@CWebBrowserUI@DuiLib@@QAEXPB_W@Z ?NavigateComplete2@CWebBrowserUI@DuiLib@@IAEXPAUIDispatch@@AAPAUtagVARIANT@@@Z ?NavigateError@CWebBrowserUI@DuiLib@@IAEXPAUIDispatch@@AAPAUtagVARIANT@@11AAPAF@Z ?NavigateHomePage@CWebBrowserUI@DuiLib@@QAEXXZ ?NavigateUrl@CWebBrowserUI@DuiLib@@QAEXPB_W@Z ?NeedParentUpdate@CControlUI@DuiLib@@QAEXXZ ?NeedUpdate@CControlUI@DuiLib@@QAEXXZ ?NeedUpdate@CPaintManagerUI@DuiLib@@QAEXXZ ?NewWindow3@CWebBrowserUI@DuiLib@@IAEXPAPAUIDispatch@@AAPAFKPA_W2@Z ?Normalize@CDuiRect@DuiLib@@QAEXXZ ?Notify@CTreeViewUI@DuiLib@@UAEXAAUtagTNotifyUI@2@@Z ?Notify@WindowImplBase@DuiLib@@UAEXAAUtagTNotifyUI@2@@Z ?NotifyPump@CNotifyPump@DuiLib@@QAEXAAUtagTNotifyUI@2@@Z ?Offset@CDuiRect@DuiLib@@QAEXHH@Z ?OnChar@WindowImplBase@DuiLib@@UAEJIIJAAH@Z ?OnCheckBoxChanged@CTreeViewUI@DuiLib@@UAE_NPAX@Z ?OnClick@WindowImplBase@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z ?OnClose@WindowImplBase@DuiLib@@UAEJIIJAAH@Z ?OnCreate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z ?OnDBClickItem@CTreeViewUI@DuiLib@@UAE_NPAX@Z ?OnDestroy@WindowImplBase@DuiLib@@UAEJIIJAAH@Z ?OnDocWindowActivate@CWebBrowserUI@DuiLib@@UAGJH@Z ?OnFinalMessage@CWindowWnd@DuiLib@@MAEXPAUHWND__@@@Z ?OnFinalMessage@WindowImplBase@DuiLib@@UAEXPAUHWND__@@@Z ?OnFolderChanged@CTreeViewUI@DuiLib@@UAE_NPAX@Z ?OnFrameWindowActivate@CWebBrowserUI@DuiLib@@UAGJH@Z ?OnGetMinMaxInfo@WindowImplBase@DuiLib@@UAEJIIJAAH@Z ?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z ?OnKillFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z ?OnLButtonDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z ?OnLButtonUp@WindowImplBase@DuiLib@@UAEJIIJAAH@Z ?OnMouseHover@WindowImplBase@DuiLib@@UAEJIIJAAH@Z ?OnMouseMove@WindowImplBase@DuiLib@@UAEJIIJAAH@Z ?OnMouseWheel@WindowImplBase@DuiLib@@UAEJIIJAAH@Z ?OnNcActivate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z ?OnNcCalcSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z ?OnNcHitTest@WindowImplBase@DuiLib@@UAEJIIJAAH@Z ?OnNcPaint@WindowImplBase@DuiLib@@UAEJIIJAAH@Z ?OnSetFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z ?OnSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z ?OnSysCommand@WindowImplBase@DuiLib@@UAEJIIJAAH@Z ?OnTimer@CGifAnimUI@DuiLib@@AAEXI@Z ?OnTxNotify@CRichEditUI@DuiLib@@UAEXKPAX@Z ?OnTxViewChanged@CRichEditUI@DuiLib@@UAE_NXZ ?PageDown@CContainerUI@DuiLib@@UAEXXZ ?PageDown@CListUI@DuiLib@@UAEXXZ ?PageDown@CRichEditUI@DuiLib@@UAEXXZ ?PageLeft@CContainerUI@DuiLib@@UAEXXZ ?PageLeft@CListUI@DuiLib@@UAEXXZ ?PageLeft@CRichEditUI@DuiLib@@UAEXXZ ?PageRight@CContainerUI@DuiLib@@UAEXXZ ?PageRight@CListUI@DuiLib@@UAEXXZ ?PageRight@CRichEditUI@DuiLib@@UAEXXZ ?PageUp@CContainerUI@DuiLib@@UAEXXZ ?PageUp@CListUI@DuiLib@@UAEXXZ ?PageUp@CRichEditUI@DuiLib@@UAEXXZ ?Paint@CControlUI@DuiLib@@UAE_NPAUHDC__@@ABUtagRECT@@PAV12@@Z ?PaintBk@CScrollBarUI@DuiLib@@QAEXPAUHDC__@@@Z ?PaintBkColor@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z ?PaintBkImage@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z ?PaintBorder@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z ?PaintButton1@CScrollBarUI@DuiLib@@QAEXPAUHDC__@@@Z ?PaintButton2@CScrollBarUI@DuiLib@@QAEXPAUHDC__@@@Z ?PaintRail@CScrollBarUI@DuiLib@@QAEXPAUHDC__@@@Z ?PaintStatusImage@CButtonUI@DuiLib@@UAEXPAUHDC__@@@Z ?PaintStatusImage@CComboUI@DuiLib@@UAEXPAUHDC__@@@Z ?PaintStatusImage@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z ?PaintStatusImage@CEditUI@DuiLib@@UAEXPAUHDC__@@@Z ?PaintStatusImage@CListHeaderItemUI@DuiLib@@UAEXPAUHDC__@@@Z ?PaintStatusImage@COptionUI@DuiLib@@UAEXPAUHDC__@@@Z ?PaintStatusImage@CProgressUI@DuiLib@@UAEXPAUHDC__@@@Z ?PaintStatusImage@CSliderUI@DuiLib@@UAEXPAUHDC__@@@Z ?PaintText@CButtonUI@DuiLib@@UAEXPAUHDC__@@@Z ?PaintText@CComboUI@DuiLib@@UAEXPAUHDC__@@@Z ?PaintText@CControlUI@DuiLib@@UAEXPAUHDC__@@@Z ?PaintText@CEditUI@DuiLib@@UAEXPAUHDC__@@@Z ?PaintText@CHyperLinkUI@DuiLib@@UAEXPAUHDC__@@@Z ?PaintText@CLabelUI@DuiLib@@UAEXPAUHDC__@@@Z ?PaintText@CListHeaderItemUI@DuiLib@@UAEXPAUHDC__@@@Z ?PaintText@COptionUI@DuiLib@@UAEXPAUHDC__@@@Z ?PaintText@CTextUI@DuiLib@@UAEXPAUHDC__@@@Z ?PaintThumb@CScrollBarUI@DuiLib@@QAEXPAUHDC__@@@Z ?ParentProc@CWndShadow@@KGJPAUHWND__@@IIJ@Z ?Paste@CRichEditUI@DuiLib@@QAEXXZ ?PauseGif@CGifAnimUI@DuiLib@@QAEXXZ ?PlayGif@CGifAnimUI@DuiLib@@QAEXXZ ?PosFromChar@CRichEditUI@DuiLib@@QBE?AVCDuiPoint@2@I@Z ?PostAsyncNotify@CPaintManagerUI@DuiLib@@AAEXXZ ?PostMessageW@CWindowWnd@DuiLib@@QAEJIIJ@Z ?PreMessageHandler@CPaintManagerUI@DuiLib@@QAE_NIIJAAJ@Z ?PreMultiply@CWndShadow@@IAEKKE@Z ?ProcessMultiLanguageTokens@CPaintManagerUI@DuiLib@@SAXAAVCDuiString@2@@Z ?ProcessScrollBar@CContainerUI@DuiLib@@MAEXUtagRECT@@HH@Z ?ProgressChange@CWebBrowserUI@DuiLib@@IAEXJJ@Z ?QueryInterface@CWebBrowserUI@DuiLib@@UAGJABU_GUID@@PAPAX@Z ?QueryService@CWebBrowserUI@DuiLib@@UAGJABU_GUID@@0PAPAX@Z ?QueryStatus@CWebBrowserUI@DuiLib@@UAGJPBU_GUID@@KQAU_tagOLECMD@@PAU_tagOLECMDTEXT@@@Z ?ReapObjects@CPaintManagerUI@DuiLib@@QAEXPAVCControlUI@2@@Z ?Redo@CRichEditUI@DuiLib@@QAE_NXZ ?Refresh2@CWebBrowserUI@DuiLib@@QAEXH@Z ?Refresh@CWebBrowserUI@DuiLib@@QAEXXZ ?RegisterEventHandler@CWebBrowserUI@DuiLib@@IAEJH@Z ?RegisterSuperclass@CWindowWnd@DuiLib@@QAE_NXZ ?RegisterWindowClass@CWindowWnd@DuiLib@@QAE_NXZ ?Release@CMarkup@DuiLib@@QAEXXZ ?Release@CWebBrowserUI@DuiLib@@UAGKXZ ?ReleaseCapture@CPaintManagerUI@DuiLib@@QAEXXZ ?ReleaseControl@CActiveXUI@DuiLib@@MAEXXZ ?ReleaseControl@CWebBrowserUI@DuiLib@@MAEXXZ ?ReloadImages@CPaintManagerUI@DuiLib@@QAEXXZ ?ReloadSharedImages@CPaintManagerUI@DuiLib@@SAXXZ ?ReloadSkin@CPaintManagerUI@DuiLib@@SAXXZ ?Remove@CComboUI@DuiLib@@UAE_NPAVCControlUI@2@_N@Z ?Remove@CContainerUI@DuiLib@@UAE_NPAVCControlUI@2@_N@Z ?Remove@CDuiPtrArray@DuiLib@@QAE_NHH@Z ?Remove@CDuiStringPtrMap@DuiLib@@QAE_NPB_W@Z ?Remove@CDuiValArray@DuiLib@@QAE_NHH@Z ?Remove@CListUI@DuiLib@@UAE_NPAVCControlUI@2@_N@Z ?Remove@CTabLayoutUI@DuiLib@@UAE_NPAVCControlUI@2@_N@Z ?Remove@CTreeViewUI@DuiLib@@UAE_NPAVCControlUI@2@_N@Z ?RemoveAll@CComboUI@DuiLib@@UAEXXZ ?RemoveAll@CContainerUI@DuiLib@@UAEXXZ ?RemoveAll@CDuiStringPtrMap@DuiLib@@QAEXXZ ?RemoveAll@CListUI@DuiLib@@UAEXXZ ?RemoveAll@CTabLayoutUI@DuiLib@@UAEXXZ ?RemoveAll@CTreeViewUI@DuiLib@@UAEXXZ ?RemoveAllCustomAttribute@CControlUI@DuiLib@@QAEXXZ ?RemoveAllDefaultAttributeList@CPaintManagerUI@DuiLib@@QAEX_N@Z ?RemoveAllFonts@CPaintManagerUI@DuiLib@@QAEX_N@Z ?RemoveAllImages@CPaintManagerUI@DuiLib@@QAEX_N@Z ?RemoveAllMultiLanguageString@CPaintManagerUI@DuiLib@@SAXXZ ?RemoveAllOptionGroups@CPaintManagerUI@DuiLib@@QAEXXZ ?RemoveAllTimers@CPaintManagerUI@DuiLib@@QAEXXZ ?RemoveAllWindowCustomAttribute@CPaintManagerUI@DuiLib@@QAEXXZ ?RemoveAt@CComboUI@DuiLib@@UAE_NH_N@Z ?RemoveAt@CContainerUI@DuiLib@@UAE_NH_N@Z ?RemoveAt@CListUI@DuiLib@@UAE_NH_N@Z ?RemoveAt@CTreeNodeUI@DuiLib@@QAE_NPAV12@@Z ?RemoveAt@CTreeViewUI@DuiLib@@UAE_NH_N@Z ?RemoveCustomAttribute@CControlUI@DuiLib@@QAE_NPB_W@Z ?RemoveDefaultAttributeList@CPaintManagerUI@DuiLib@@QAE_NPB_W_N@Z ?RemoveFont@CPaintManagerUI@DuiLib@@QAEXH_N@Z ?RemoveFont@CPaintManagerUI@DuiLib@@QAEXPAUHFONT__@@_N@Z ?RemoveImage@CPaintManagerUI@DuiLib@@QAEXPB_W_N@Z ?RemoveMessageFilter@CPaintManagerUI@DuiLib@@QAE_NPAVIMessageFilterUI@2@@Z ?RemoveMouseLeaveNeeded@CPaintManagerUI@DuiLib@@QAE_NPAVCControlUI@2@@Z ?RemoveMultiLanguageString@CPaintManagerUI@DuiLib@@SA_NH@Z ?RemoveNativeWindow@CPaintManagerUI@DuiLib@@QAE_NPAUHWND__@@@Z ?RemoveNotifier@CPaintManagerUI@DuiLib@@QAE_NPAVINotifyUI@2@@Z ?RemoveOptionGroup@CPaintManagerUI@DuiLib@@QAEXPB_WPAVCControlUI@2@@Z ?RemovePostPaint@CPaintManagerUI@DuiLib@@QAE_NPAVCControlUI@2@@Z ?RemovePreMessageFilter@CPaintManagerUI@DuiLib@@QAE_NPAVIMessageFilterUI@2@@Z ?RemoveTranslateAccelerator@CPaintManagerUI@DuiLib@@QAE_NPAVITranslateAccelerator@2@@Z ?RemoveVirtualWnd@CNotifyPump@DuiLib@@QAE_NVCDuiString@2@@Z ?RemoveWindowAttribute@CPaintManagerUI@DuiLib@@QAE_NPB_W@Z ?RemoveWindowCustomAttribute@CPaintManagerUI@DuiLib@@QAE_NPB_W@Z ?RenameControl@CPaintManagerUI@DuiLib@@QAE_NPAVCControlUI@2@PB_W@Z ?Replace@CDuiString@DuiLib@@QAEHPB_W0@Z ?ReplaceSel@CRichEditUI@DuiLib@@QAEXPB_W_N@Z ?ReplaceSelW@CRichEditUI@DuiLib@@QAEXPB_W_N@Z ?ResetOffset@CDuiRect@DuiLib@@QAEXXZ ?Resize@CDuiPtrArray@DuiLib@@QAEXH@Z ?Resize@CDuiStringPtrMap@DuiLib@@QAEXH@Z ?ResizeBorder@CWebBrowserUI@DuiLib@@UAGJPBUtagRECT@@PAUIOleInPlaceUIWindow@@H@Z ?ResizeClient@CWindowWnd@DuiLib@@QAEXHH@Z ?ResponseDefaultKeyEvent@WindowImplBase@DuiLib@@MAEJI@Z ?ReverseFind@CDuiString@DuiLib@@QBEH_W@Z ?Right@CDuiString@DuiLib@@QBE?AV12@H@Z ?Scroll@CListUI@DuiLib@@QAEXHH@Z ?ScrollCaret@CRichEditUI@DuiLib@@QAEXXZ ?Select@CListContainerElementUI@DuiLib@@UAE_N_N0@Z ?Select@CListElementUI@DuiLib@@UAE_N_N0@Z ?Select@CTreeNodeUI@DuiLib@@UAE_N_N0@Z ?SelectItem@CComboUI@DuiLib@@UAE_NH_N0@Z ?SelectItem@CListUI@DuiLib@@UAE_NH_N0@Z ?SelectItem@CTabLayoutUI@DuiLib@@QAE_NH_N@Z ?SelectItem@CTabLayoutUI@DuiLib@@QAE_NPAVCControlUI@2@_N@Z ?Selected@COptionUI@DuiLib@@UAEX_N0@Z ?SendMessageW@CWindowWnd@DuiLib@@QAEJIIJ@Z ?SendNotify@CPaintManagerUI@DuiLib@@QAEXAAUtagTNotifyUI@2@_N1@Z ?SendNotify@CPaintManagerUI@DuiLib@@QAEXPAVCControlUI@2@PB_WIJ_N2@Z ?Set@CDuiStringPtrMap@DuiLib@@QAEPAXPB_WPAX@Z ?SetAlternateBk@CComboUI@DuiLib@@QAEX_N@Z ?SetAlternateBk@CListUI@DuiLib@@QAEX_N@Z ?SetAt@CDuiPtrArray@DuiLib@@QAE_NHPAX@Z ?SetAt@CDuiString@DuiLib@@QAEXH_W@Z ?SetAttribute@CActiveXUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CButtonUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CChildLayoutUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CComboUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CContainerUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CControlUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CEditUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CGifAnimUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CHorizontalLayoutUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CLabelUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CListContainerElementUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CListElementUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CListHeaderItemUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CListUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@COptionUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CProgressUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CRichEditUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CScrollBarUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CSliderUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CTabLayoutUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CTileLayoutUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CTreeNodeUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CTreeViewUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CVerticalLayoutUI@DuiLib@@UAEXPB_W0@Z ?SetAttribute@CWebBrowserUI@DuiLib@@MAEXPB_W0@Z ?SetAttributeList@CControlUI@DuiLib@@UAEXPB_W@Z ?SetAutoDestroy@CContainerUI@DuiLib@@UAEX_N@Z ?SetAutoNavigation@CWebBrowserUI@DuiLib@@QAEX_N@Z ?SetAutoPlay@CGifAnimUI@DuiLib@@QAEX_N@Z ?SetAutoSelAll@CEditUI@DuiLib@@QAEX_N@Z ?SetAutoSize@CGifAnimUI@DuiLib@@QAEX_N@Z ?SetAutoSize@CLabelUI@DuiLib@@QAEX_N@Z ?SetAutoURLDetect@CRichEditUI@DuiLib@@QAE_N_N@Z ?SetBkColor2@CControlUI@DuiLib@@QAEXK@Z ?SetBkColor3@CControlUI@DuiLib@@QAEXK@Z ?SetBkColor@CControlUI@DuiLib@@QAEXK@Z ?SetBkDisabledImage@CScrollBarUI@DuiLib@@QAEXPB_W@Z ?SetBkHotImage@CScrollBarUI@DuiLib@@QAEXPB_W@Z ?SetBkImage@CControlUI@DuiLib@@QAEXPB_W@Z ?SetBkImage@CGifAnimUI@DuiLib@@QAEXPB_W@Z ?SetBkNormalImage@CScrollBarUI@DuiLib@@QAEXPB_W@Z ?SetBkPushedImage@CScrollBarUI@DuiLib@@QAEXPB_W@Z ?SetBorderColor@CControlUI@DuiLib@@QAEXK@Z ?SetBorderRound@CControlUI@DuiLib@@QAEXUtagSIZE@@@Z ?SetBorderSize@CControlUI@DuiLib@@QAEXH@Z ?SetBorderSize@CControlUI@DuiLib@@QAEXUtagRECT@@@Z ?SetBorderStyle@CControlUI@DuiLib@@QAEXH@Z ?SetButton1Color@CScrollBarUI@DuiLib@@QAEXK@Z ?SetButton1DisabledImage@CScrollBarUI@DuiLib@@QAEXPB_W@Z ?SetButton1HotImage@CScrollBarUI@DuiLib@@QAEXPB_W@Z ?SetButton1NormalImage@CScrollBarUI@DuiLib@@QAEXPB_W@Z ?SetButton1PushedImage@CScrollBarUI@DuiLib@@QAEXPB_W@Z ?SetButton2Color@CScrollBarUI@DuiLib@@QAEXK@Z ?SetButton2DisabledImage@CScrollBarUI@DuiLib@@QAEXPB_W@Z ?SetButton2HotImage@CScrollBarUI@DuiLib@@QAEXPB_W@Z ?SetButton2NormalImage@CScrollBarUI@DuiLib@@QAEXPB_W@Z ?SetButton2PushedImage@CScrollBarUI@DuiLib@@QAEXPB_W@Z ?SetCaptionRect@CPaintManagerUI@DuiLib@@QAEXAAUtagRECT@@@Z ?SetCapture@CPaintManagerUI@DuiLib@@QAEXXZ ?SetChangeStep@CSliderUI@DuiLib@@QAEXH@Z ?SetCheck@CCheckBoxUI@DuiLib@@QAEX_N0@Z ?SetChildAlign@CContainerUI@DuiLib@@UAEXI@Z ?SetChildLayoutXML@CChildLayoutUI@DuiLib@@QAEXVCDuiString@2@@Z ?SetChildPadding@CContainerUI@DuiLib@@UAEXH@Z ?SetChildPadding@CListUI@DuiLib@@UAEXH@Z ?SetChildVAlign@CContainerUI@DuiLib@@UAEXI@Z ?SetChildVPadding@CTileLayoutUI@DuiLib@@QAEXH@Z ?SetColor@CWndShadow@@QAE_NK@Z ?SetColorHSL@CControlUI@DuiLib@@QAEX_N@Z ?SetContextMenuUsed@CControlUI@DuiLib@@UAEX_N@Z ?SetCover@CControlUI@DuiLib@@UAEXPAV12@@Z ?SetCurrentPath@CPaintManagerUI@DuiLib@@SAXPB_W@Z ?SetDarkness@CWndShadow@@QAE_NI@Z ?SetDefaultCharFormat@CRichEditUI@DuiLib@@QAE_NAAUCHARFORMAT2W@@@Z ?SetDefaultDisabledColor@CPaintManagerUI@DuiLib@@QAEXK_N@Z ?SetDefaultFont@CPaintManagerUI@DuiLib@@QAEXPB_WH_N111@Z ?SetDefaultFontColor@CPaintManagerUI@DuiLib@@QAEXK_N@Z ?SetDefaultLinkFontColor@CPaintManagerUI@DuiLib@@QAEXK_N@Z ?SetDefaultLinkHoverFontColor@CPaintManagerUI@DuiLib@@QAEXK_N@Z ?SetDefaultSelectedBkColor@CPaintManagerUI@DuiLib@@QAEXK_N@Z ?SetDelayCreate@CActiveXUI@DuiLib@@QAEX_N@Z ?SetDelayedDestroy@CContainerUI@DuiLib@@UAEX_N@Z ?SetDisabledImage@CButtonUI@DuiLib@@QAEXPB_W@Z ?SetDisabledImage@CComboUI@DuiLib@@QAEXPB_W@Z ?SetDisabledImage@CEditUI@DuiLib@@QAEXPB_W@Z ?SetDisabledItemBkColor@CComboUI@DuiLib@@QAEXK@Z ?SetDisabledItemBkColor@CListUI@DuiLib@@QAEXK@Z ?SetDisabledItemImage@CComboUI@DuiLib@@QAEXPB_W@Z ?SetDisabledItemImage@CListUI@DuiLib@@QAEXPB_W@Z ?SetDisabledItemTextColor@CComboUI@DuiLib@@QAEXK@Z ?SetDisabledItemTextColor@CListUI@DuiLib@@QAEXK@Z ?SetDisabledTextColor@CLabelUI@DuiLib@@QAEXK@Z ?SetDragable@CListHeaderItemUI@DuiLib@@QAEX_N@Z ?SetDrawIndex@CListContainerElementUI@DuiLib@@UAEXH@Z ?SetDrawIndex@CListElementUI@DuiLib@@UAEXH@Z ?SetDropAcceptFile@CRichEditUI@DuiLib@@QAE_N_N@Z ?SetDropBoxAttributeList@CComboUI@DuiLib@@QAEXPB_W@Z ?SetDropBoxSize@CComboUI@DuiLib@@QAEXUtagSIZE@@@Z ?SetEnabled@CButtonUI@DuiLib@@UAEX_N@Z ?SetEnabled@CComboUI@DuiLib@@UAEX_N@Z ?SetEnabled@CControlUI@DuiLib@@UAEX_N@Z ?SetEnabled@CEditUI@DuiLib@@UAEX_N@Z ?SetEnabled@CListContainerElementUI@DuiLib@@UAEX_N@Z ?SetEnabled@CListElementUI@DuiLib@@UAEX_N@Z ?SetEnabled@CListHeaderItemUI@DuiLib@@UAEX_N@Z ?SetEnabled@COptionUI@DuiLib@@UAEX_N@Z ?SetEnabled@CScrollBarUI@DuiLib@@UAEX_N@Z ?SetEnabled@CSliderUI@DuiLib@@UAEX_N@Z ?SetEnabledEffect@CLabelUI@DuiLib@@QAEX_N@Z ?SetEnabledLuminous@CLabelUI@DuiLib@@QAEX_N@Z ?SetEnabledShadow@CLabelUI@DuiLib@@QAEX_N@Z ?SetEnabledStroke@CLabelUI@DuiLib@@QAEX_N@Z ?SetEventMask@CRichEditUI@DuiLib@@QAEKK@Z ?SetExpandable@CListContainerElementUI@DuiLib@@QAEX_N@Z ?SetFadeAlphaDelta@CButtonUI@DuiLib@@QAEXE@Z ?SetFiveStatusImage@CButtonUI@DuiLib@@QAEXPB_W@Z ?SetFixedColumns@CTileLayoutUI@DuiLib@@QAEXH@Z ?SetFixedHeight@CControlUI@DuiLib@@UAEXH@Z ?SetFixedHeight@CLabelUI@DuiLib@@UAEXH@Z ?SetFixedHeight@CListLabelElementUI@DuiLib@@UAEXH@Z ?SetFixedWidth@CControlUI@DuiLib@@UAEXH@Z ?SetFixedWidth@CLabelUI@DuiLib@@UAEXH@Z ?SetFixedWidth@CListLabelElementUI@DuiLib@@UAEXH@Z ?SetFixedXY@CControlUI@DuiLib@@UAEXUtagSIZE@@@Z ?SetFloat@CControlUI@DuiLib@@UAEX_N@Z ?SetFloatPercent@CControlUI@DuiLib@@UAEXUtagTPercentInfo@2@@Z ?SetFloatPos@CContainerUI@DuiLib@@MAEXH@Z ?SetFocus@CControlUI@DuiLib@@UAEXXZ ?SetFocus@CPaintManagerUI@DuiLib@@QAEXPAVCControlUI@2@_N@Z ?SetFocus@CScrollBarUI@DuiLib@@UAEXXZ ?SetFocusBorderColor@CControlUI@DuiLib@@QAEXK@Z ?SetFocusNeeded@CPaintManagerUI@DuiLib@@QAEXPAVCControlUI@2@@Z ?SetFocusedImage@CButtonUI@DuiLib@@QAEXPB_W@Z ?SetFocusedImage@CComboUI@DuiLib@@QAEXPB_W@Z ?SetFocusedImage@CEditUI@DuiLib@@QAEXPB_W@Z ?SetFocusedImage@CListHeaderItemUI@DuiLib@@QAEXPB_W@Z ?SetFocusedTextColor@CButtonUI@DuiLib@@QAEXK@Z ?SetFont@CLabelUI@DuiLib@@QAEXH@Z ?SetFont@CListHeaderItemUI@DuiLib@@QAEXH@Z ?SetFont@CRichEditUI@DuiLib@@QAEXH@Z ?SetFont@CRichEditUI@DuiLib@@QAEXPB_WH_N11@Z ?SetForceUseSharedRes@CPaintManagerUI@DuiLib@@QAEX_N@Z ?SetForeImage@CButtonUI@DuiLib@@QAEXPB_W@Z ?SetForeImage@COptionUI@DuiLib@@QAEXPB_W@Z ?SetForeImage@CProgressUI@DuiLib@@QAEXPB_W@Z ?SetGradientAngle@CLabelUI@DuiLib@@QAEXH@Z ?SetGradientLength@CLabelUI@DuiLib@@QAEXH@Z ?SetGroup@COptionUI@DuiLib@@QAEXPB_W@Z ?SetHSL@CPaintManagerUI@DuiLib@@SAX_NFFF@Z ?SetHomePage@CWebBrowserUI@DuiLib@@QAEXPB_W@Z ?SetHorizontal@CProgressUI@DuiLib@@QAEX_N@Z ?SetHorizontal@CScrollBarUI@DuiLib@@QAEX_N@Z ?SetHotBkColor@CButtonUI@DuiLib@@QAEXK@Z ?SetHotForeImage@CButtonUI@DuiLib@@QAEXPB_W@Z ?SetHotImage@CButtonUI@DuiLib@@QAEXPB_W@Z ?SetHotImage@CComboUI@DuiLib@@QAEXPB_W@Z ?SetHotImage@CEditUI@DuiLib@@QAEXPB_W@Z ?SetHotImage@CListHeaderItemUI@DuiLib@@QAEXPB_W@Z ?SetHotItemBkColor@CComboUI@DuiLib@@QAEXK@Z ?SetHotItemBkColor@CListUI@DuiLib@@QAEXK@Z ?SetHotItemImage@CComboUI@DuiLib@@QAEXPB_W@Z ?SetHotItemImage@CListUI@DuiLib@@QAEXPB_W@Z ?SetHotItemTextColor@CComboUI@DuiLib@@QAEXK@Z ?SetHotItemTextColor@CListUI@DuiLib@@QAEXK@Z ?SetHotTextColor@CButtonUI@DuiLib@@QAEXK@Z ?SetHoverTime@CPaintManagerUI@DuiLib@@QAEXH@Z ?SetIcon@CWindowWnd@DuiLib@@QAEXI@Z ?SetImage@CWndShadow@@QAE_NPB_WUtagRECT@@1@Z ?SetImmMode@CSliderUI@DuiLib@@QAEX_N@Z ?SetIndex@CListContainerElementUI@DuiLib@@UAEXH@Z ?SetIndex@CListElementUI@DuiLib@@UAEXH@Z ?SetInitSize@CPaintManagerUI@DuiLib@@QAEXHH@Z ?SetInset@CContainerUI@DuiLib@@UAEXUtagRECT@@@Z ?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z ?SetInternVisible@CActiveXUI@DuiLib@@UAEX_N@Z ?SetInternVisible@CContainerUI@DuiLib@@UAEX_N@Z ?SetInternVisible@CControlUI@DuiLib@@UAEX_N@Z ?SetInternVisible@CEditUI@DuiLib@@UAEX_N@Z ?SetItemBkColor@CComboUI@DuiLib@@QAEXK@Z ?SetItemBkColor@CListUI@DuiLib@@QAEXK@Z ?SetItemBkImage@CComboUI@DuiLib@@QAEXPB_W@Z ?SetItemBkImage@CListUI@DuiLib@@QAEXPB_W@Z ?SetItemCheckBox@CTreeViewUI@DuiLib@@UAE_N_NPAVCTreeNodeUI@2@@Z ?SetItemExpand@CTreeViewUI@DuiLib@@UAEX_NPAVCTreeNodeUI@2@@Z ?SetItemFixedHeight@CComboUI@DuiLib@@QAEXI@Z ?SetItemFixedHeight@CListUI@DuiLib@@QAEXI@Z ?SetItemFont@CComboUI@DuiLib@@QAEXH@Z ?SetItemFont@CListUI@DuiLib@@QAEXH@Z ?SetItemHLineColor@CComboUI@DuiLib@@QAEXK@Z ?SetItemHLineColor@CListUI@DuiLib@@QAEXK@Z ?SetItemHLineSize@CComboUI@DuiLib@@QAEXH@Z ?SetItemHLineSize@CListUI@DuiLib@@QAEXH@Z ?SetItemHotTextColor@CTreeNodeUI@DuiLib@@QAEXK@Z ?SetItemHotTextColor@CTreeViewUI@DuiLib@@UAEXK@Z ?SetItemIndex@CComboUI@DuiLib@@UAE_NPAVCControlUI@2@H@Z ?SetItemIndex@CContainerUI@DuiLib@@UAE_NPAVCControlUI@2@H@Z ?SetItemIndex@CListUI@DuiLib@@UAE_NPAVCControlUI@2@H@Z ?SetItemMinWidth@CTreeViewUI@DuiLib@@UAEXI@Z ?SetItemShowHtml@CComboUI@DuiLib@@QAEX_N@Z ?SetItemShowHtml@CListUI@DuiLib@@QAEX_N@Z ?SetItemSize@CTileLayoutUI@DuiLib@@QAEXUtagSIZE@@@Z ?SetItemText@CTreeNodeUI@DuiLib@@QAEXPB_W@Z ?SetItemTextColor@CComboUI@DuiLib@@QAEXK@Z ?SetItemTextColor@CListUI@DuiLib@@QAEXK@Z ?SetItemTextColor@CTreeNodeUI@DuiLib@@QAEXK@Z ?SetItemTextColor@CTreeViewUI@DuiLib@@UAEXK@Z ?SetItemTextPadding@CComboUI@DuiLib@@QAEXUtagRECT@@@Z ?SetItemTextPadding@CListUI@DuiLib@@QAEXUtagRECT@@@Z ?SetItemTextStyle@CComboUI@DuiLib@@QAEXI@Z ?SetItemTextStyle@CListUI@DuiLib@@QAEXI@Z ?SetItemVLineColor@CComboUI@DuiLib@@QAEXK@Z ?SetItemVLineColor@CListUI@DuiLib@@QAEXK@Z ?SetItemVLineSize@CComboUI@DuiLib@@QAEXH@Z ?SetItemVLineSize@CListUI@DuiLib@@QAEXH@Z ?SetKeyboardEnabled@CControlUI@DuiLib@@UAEX_N@Z ?SetLayered@CPaintManagerUI@DuiLib@@QAEX_N@Z ?SetLayeredImage@CPaintManagerUI@DuiLib@@QAEXPB_W@Z ?SetLayeredInset@CPaintManagerUI@DuiLib@@QAEXAAUtagRECT@@@Z ?SetLayeredOpacity@CPaintManagerUI@DuiLib@@QAEXE@Z ?SetLimitText@CRichEditUI@DuiLib@@QAEXH@Z ?SetLineSize@CScrollBarUI@DuiLib@@QAEXH@Z ?SetLuminousFuzzy@CLabelUI@DuiLib@@QAEXM@Z ?SetManager@CContainerUI@DuiLib@@UAEXPAVCPaintManagerUI@2@PAVCControlUI@2@_N@Z ?SetManager@CControlUI@DuiLib@@UAEXPAVCPaintManagerUI@2@PAV12@_N@Z ?SetManager@COptionUI@DuiLib@@UAEXPAVCPaintManagerUI@2@PAVCControlUI@2@_N@Z ?SetMaxChar@CEditUI@DuiLib@@QAEXI@Z ?SetMaxHeight@CControlUI@DuiLib@@UAEXH@Z ?SetMaxInfo@CPaintManagerUI@DuiLib@@QAEXHH@Z ?SetMaxValue@CProgressUI@DuiLib@@QAEXH@Z ?SetMaxWidth@CControlUI@DuiLib@@UAEXH@Z ?SetMinHeight@CControlUI@DuiLib@@UAEXH@Z ?SetMinInfo@CPaintManagerUI@DuiLib@@QAEXHH@Z ?SetMinValue@CProgressUI@DuiLib@@QAEXH@Z ?SetMinWidth@CControlUI@DuiLib@@UAEXH@Z ?SetModify@CRichEditUI@DuiLib@@QBEX_N@Z ?SetModuleName@CActiveXUI@DuiLib@@QAEXPB_W@Z ?SetMouseChildEnabled@CContainerUI@DuiLib@@UAEX_N@Z ?SetMouseEnabled@CContainerUI@DuiLib@@UAEX_N@Z ?SetMouseEnabled@CControlUI@DuiLib@@UAEX_N@Z ?SetMultiExpanding@CListUI@DuiLib@@QAEX_N@Z ?SetMultiItemIndex@CComboUI@DuiLib@@UAE_NPAVCControlUI@2@HH@Z ?SetMultiItemIndex@CContainerUI@DuiLib@@UAE_NPAVCControlUI@2@HH@Z ?SetMultiItemIndex@CListUI@DuiLib@@UAE_NPAVCControlUI@2@HH@Z ?SetMultiLine@CLabelUI@DuiLib@@QAEX_N@Z ?SetName@CControlUI@DuiLib@@UAEXPB_W@Z ?SetNativeEditBkColor@CEditUI@DuiLib@@QAEXK@Z ?SetNextTabControl@CPaintManagerUI@DuiLib@@QAE_N_N@Z ?SetNoActivate@CPaintManagerUI@DuiLib@@QAEX_N@Z ?SetNormalImage@CButtonUI@DuiLib@@QAEXPB_W@Z ?SetNormalImage@CComboUI@DuiLib@@QAEXPB_W@Z ?SetNormalImage@CEditUI@DuiLib@@QAEXPB_W@Z ?SetNormalImage@CListHeaderItemUI@DuiLib@@QAEXPB_W@Z ?SetNumberOnly@CEditUI@DuiLib@@QAEX_N@Z ?SetOpacity@CPaintManagerUI@DuiLib@@QAEXE@Z ?SetOwner@CListContainerElementUI@DuiLib@@UAEXPAVCControlUI@2@@Z ?SetOwner@CListElementUI@DuiLib@@UAEXPAVCControlUI@2@@Z ?SetOwner@CListLabelElementUI@DuiLib@@UAEXPAVCControlUI@2@@Z ?SetOwner@CListTextElementUI@DuiLib@@UAEXPAVCControlUI@2@@Z ?SetOwner@CScrollBarUI@DuiLib@@QAEXPAVCContainerUI@2@@Z ?SetPadding@CControlUI@DuiLib@@UAEXUtagRECT@@@Z ?SetPainting@CPaintManagerUI@DuiLib@@QAEX_N@Z ?SetParaFormat@CRichEditUI@DuiLib@@QAE_NAAUPARAFORMAT2@@@Z ?SetParentNode@CTreeNodeUI@DuiLib@@QAEXPAV12@@Z ?SetPasswordChar@CEditUI@DuiLib@@QAEX_W@Z ?SetPasswordMode@CEditUI@DuiLib@@QAEX_N@Z ?SetPos@CActiveXUI@DuiLib@@UAEXUtagRECT@@_N@Z ?SetPos@CComboUI@DuiLib@@UAEXUtagRECT@@_N@Z ?SetPos@CContainerUI@DuiLib@@UAEXUtagRECT@@_N@Z ?SetPos@CControlUI@DuiLib@@UAEXUtagRECT@@_N@Z ?SetPos@CDateTimeUI@DuiLib@@UAEXUtagRECT@@_N@Z ?SetPos@CEditUI@DuiLib@@UAEXUtagRECT@@_N@Z ?SetPos@CHorizontalLayoutUI@DuiLib@@UAEXUtagRECT@@_N@Z ?SetPos@CListHBoxElementUI@DuiLib@@UAEXUtagRECT@@_N@Z ?SetPos@CListUI@DuiLib@@UAEXUtagRECT@@_N@Z ?SetPos@CRichEditUI@DuiLib@@UAEXUtagRECT@@_N@Z ?SetPos@CScrollBarUI@DuiLib@@UAEXUtagRECT@@_N@Z ?SetPos@CTabLayoutUI@DuiLib@@UAEXUtagRECT@@_N@Z ?SetPos@CTileLayoutUI@DuiLib@@UAEXUtagRECT@@_N@Z ?SetPos@CVerticalLayoutUI@DuiLib@@UAEXUtagRECT@@_N@Z ?SetPosition@CWndShadow@@QAE_NHH@Z ?SetPostPaintIndex@CPaintManagerUI@DuiLib@@QAE_NPAVCControlUI@2@H@Z ?SetPreserveWhitespace@CMarkup@DuiLib@@QAEX_N@Z ?SetProperty@CWebBrowserUI@DuiLib@@SAJPAUIDispatch@@PA_WPAUtagVARIANT@@@Z ?SetPushedImage@CButtonUI@DuiLib@@QAEXPB_W@Z ?SetPushedImage@CComboUI@DuiLib@@QAEXPB_W@Z ?SetPushedImage@CListHeaderItemUI@DuiLib@@QAEXPB_W@Z ?SetPushedTextColor@CButtonUI@DuiLib@@QAEXK@Z ?SetRailDisabledImage@CScrollBarUI@DuiLib@@QAEXPB_W@Z ?SetRailHotImage@CScrollBarUI@DuiLib@@QAEXPB_W@Z ?SetRailNormalImage@CScrollBarUI@DuiLib@@QAEXPB_W@Z ?SetRailPushedImage@CScrollBarUI@DuiLib@@QAEXPB_W@Z ?SetReadOnly@CDateTimeUI@DuiLib@@QAEX_N@Z ?SetReadOnly@CEditUI@DuiLib@@QAEX_N@Z ?SetReadOnly@CRichEditUI@DuiLib@@QAEX_N@Z ?SetReplaceSel@CEditUI@DuiLib@@QAEXPB_W@Z ?SetResourceDll@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z ?SetResourcePath@CPaintManagerUI@DuiLib@@SAXPB_W@Z ?SetResourceZip@CPaintManagerUI@DuiLib@@SAXPAXI@Z ?SetResourceZip@CPaintManagerUI@DuiLib@@SAXPB_W_N@Z ?SetRich@CRichEditUI@DuiLib@@QAEX_N@Z ?SetRoundCorner@CPaintManagerUI@DuiLib@@QAEXHH@Z ?SetScrollPos@CContainerUI@DuiLib@@UAEXUtagSIZE@@@Z ?SetScrollPos@CListUI@DuiLib@@UAEXUtagSIZE@@@Z ?SetScrollPos@CRichEditUI@DuiLib@@UAEXUtagSIZE@@@Z ?SetScrollPos@CScrollBarUI@DuiLib@@QAEXH_N@Z ?SetScrollRange@CScrollBarUI@DuiLib@@QAEXH@Z ?SetScrollSelect@CListUI@DuiLib@@QAEX_N@Z ?SetScrollUnit@CScrollBarUI@DuiLib@@QAEXH@Z ?SetSel@CEditUI@DuiLib@@QAEXJJ@Z ?SetSel@CRichEditUI@DuiLib@@QAEHAAU_charrange@@@Z ?SetSel@CRichEditUI@DuiLib@@QAEHJJ@Z ?SetSelAll@CEditUI@DuiLib@@QAEXXZ ?SetSelAll@CRichEditUI@DuiLib@@QAEHXZ ?SetSelItemHotTextColor@CTreeNodeUI@DuiLib@@QAEXK@Z ?SetSelItemHotTextColor@CTreeViewUI@DuiLib@@UAEXK@Z ?SetSelItemTextColor@CTreeNodeUI@DuiLib@@QAEXK@Z ?SetSelItemTextColor@CTreeViewUI@DuiLib@@UAEXK@Z ?SetSelNone@CRichEditUI@DuiLib@@QAEHXZ ?SetSelectCloseFlag@CComboUI@DuiLib@@QAEX_N@Z ?SetSelectedBkColor@COptionUI@DuiLib@@QAEXK@Z ?SetSelectedHotImage@COptionUI@DuiLib@@QAEXPB_W@Z ?SetSelectedImage@COptionUI@DuiLib@@QAEXPB_W@Z ?SetSelectedItemBkColor@CComboUI@DuiLib@@QAEXK@Z ?SetSelectedItemBkColor@CListUI@DuiLib@@QAEXK@Z ?SetSelectedItemImage@CComboUI@DuiLib@@QAEXPB_W@Z ?SetSelectedItemImage@CListUI@DuiLib@@QAEXPB_W@Z ?SetSelectedItemTextColor@CComboUI@DuiLib@@QAEXK@Z ?SetSelectedItemTextColor@CListUI@DuiLib@@QAEXK@Z ?SetSelectedTextColor@COptionUI@DuiLib@@QAEXK@Z ?SetSelectionCharFormat@CRichEditUI@DuiLib@@QAE_NAAUCHARFORMAT2W@@@Z ?SetSepColor@CListHeaderItemUI@DuiLib@@QAEXK@Z ?SetSepHeight@CVerticalLayoutUI@DuiLib@@QAEXH@Z ?SetSepImage@CListHeaderItemUI@DuiLib@@QAEXPB_W@Z ?SetSepImmMode@CHorizontalLayoutUI@DuiLib@@QAEX_N@Z ?SetSepImmMode@CVerticalLayoutUI@DuiLib@@QAEX_N@Z ?SetSepWidth@CHorizontalLayoutUI@DuiLib@@QAEXH@Z ?SetSepWidth@CListHeaderItemUI@DuiLib@@QAEXH@Z ?SetShadowOffset@CLabelUI@DuiLib@@QAEXHH@Z ?SetSharpness@CWndShadow@@QAE_NI@Z ?SetShortcut@CControlUI@DuiLib@@UAEX_W@Z ?SetShowButton1@CScrollBarUI@DuiLib@@QAEX_N@Z ?SetShowButton2@CScrollBarUI@DuiLib@@QAEX_N@Z ?SetShowHtml@CLabelUI@DuiLib@@QAEX_N@Z ?SetShowHtml@CListHeaderItemUI@DuiLib@@QAEX_N@Z ?SetShowText@CComboUI@DuiLib@@QAEX_N@Z ?SetShowUpdateRect@CPaintManagerUI@DuiLib@@QAEX_N@Z ?SetSize@CWndShadow@@QAE_NH@Z ?SetSizeBox@CPaintManagerUI@DuiLib@@QAEXAAUtagRECT@@@Z ?SetStrokeColor@CLabelUI@DuiLib@@QAEXK@Z ?SetSubControlFixedHeight@CContainerUI@DuiLib@@QAE_NPB_WH@Z ?SetSubControlFixedWdith@CContainerUI@DuiLib@@QAE_NPB_WH@Z ?SetSubControlText@CContainerUI@DuiLib@@QAE_NPB_W0@Z ?SetSubControlUserData@CContainerUI@DuiLib@@QAE_NPB_W0@Z ?SetTag@CControlUI@DuiLib@@UAEXI@Z ?SetText@CControlUI@DuiLib@@UAEXPB_W@Z ?SetText@CEditUI@DuiLib@@UAEXPB_W@Z ?SetText@CLabelUI@DuiLib@@UAEXPB_W@Z ?SetText@CListLabelElementUI@DuiLib@@UAEXPB_W@Z ?SetText@CListTextElementUI@DuiLib@@QAEXHPB_W@Z ?SetText@CRichEditUI@DuiLib@@UAEXPB_W@Z ?SetTextCallback@CListUI@DuiLib@@UAEXPAVIListCallbackUI@2@@Z ?SetTextColor1@CLabelUI@DuiLib@@QAEXK@Z ?SetTextColor@CLabelUI@DuiLib@@QAEXK@Z ?SetTextColor@CListHeaderItemUI@DuiLib@@QAEXK@Z ?SetTextColor@CRichEditUI@DuiLib@@QAEXK@Z ?SetTextPadding@CComboUI@DuiLib@@QAEXUtagRECT@@@Z ?SetTextPadding@CLabelUI@DuiLib@@QAEXUtagRECT@@@Z ?SetTextPadding@CListHeaderItemUI@DuiLib@@QAEXUtagRECT@@@Z ?SetTextPadding@CRichEditUI@DuiLib@@QAEXUtagRECT@@@Z ?SetTextShadowColorA@CLabelUI@DuiLib@@QAEXK@Z ?SetTextShadowColorB@CLabelUI@DuiLib@@QAEXK@Z ?SetTextStyle@CLabelUI@DuiLib@@QAEXI@Z ?SetTextStyle@CListHeaderItemUI@DuiLib@@QAEXI@Z ?SetThumbColor@CScrollBarUI@DuiLib@@QAEXK@Z ?SetThumbDisabledImage@CScrollBarUI@DuiLib@@QAEXPB_W@Z ?SetThumbHotImage@CScrollBarUI@DuiLib@@QAEXPB_W@Z ?SetThumbHotImage@CSliderUI@DuiLib@@QAEXPB_W@Z ?SetThumbImage@CSliderUI@DuiLib@@QAEXPB_W@Z ?SetThumbNormalImage@CScrollBarUI@DuiLib@@QAEXPB_W@Z ?SetThumbPushedImage@CScrollBarUI@DuiLib@@QAEXPB_W@Z ?SetThumbPushedImage@CSliderUI@DuiLib@@QAEXPB_W@Z ?SetThumbSize@CSliderUI@DuiLib@@QAEXUtagSIZE@@@Z ?SetTime@CDateTimeUI@DuiLib@@QAEXPAU_SYSTEMTIME@@@Z ?SetTimer@CPaintManagerUI@DuiLib@@QAE_NPAVCControlUI@2@II@Z ?SetToolTip@CControlUI@DuiLib@@UAEXPB_W@Z ?SetToolTipWidth@CControlUI@DuiLib@@UAEXH@Z ?SetTooltipWindowWidth@CPaintManagerUI@DuiLib@@QAEXH@Z ?SetTransparent@CRichEditUI@DuiLib@@QAEX_N@Z ?SetTreeView@CTreeNodeUI@DuiLib@@QAEXPAVCTreeViewUI@2@@Z ?SetUndoLimit@CRichEditUI@DuiLib@@QAEII@Z ?SetUserData@CControlUI@DuiLib@@UAEXPB_W@Z ?SetValue@CProgressUI@DuiLib@@QAEXH@Z ?SetVirtualWnd@CControlUI@DuiLib@@QAEXPB_W@Z ?SetVisible@CActiveXUI@DuiLib@@UAEX_N@Z ?SetVisible@CContainerUI@DuiLib@@UAEX_N@Z ?SetVisible@CControlUI@DuiLib@@UAEX_N@Z ?SetVisible@CEditUI@DuiLib@@UAEX_N@Z ?SetVisible@CGifAnimUI@DuiLib@@UAEX_N@Z ?SetVisible@CListContainerElementUI@DuiLib@@UAEX_N@Z ?SetVisible@CListElementUI@DuiLib@@UAEX_N@Z ?SetVisible@CScrollBarUI@DuiLib@@UAEX_N@Z ?SetVisibleCheckBtn@CTreeNodeUI@DuiLib@@QAEX_N@Z ?SetVisibleCheckBtn@CTreeViewUI@DuiLib@@UAEX_N@Z ?SetVisibleFolderBtn@CTreeNodeUI@DuiLib@@QAEX_N@Z ?SetVisibleFolderBtn@CTreeViewUI@DuiLib@@UAEX_N@Z ?SetVisibleTag@CTreeNodeUI@DuiLib@@QAEX_N@Z ?SetWantCtrlReturn@CRichEditUI@DuiLib@@QAEX_N@Z ?SetWantReturn@CRichEditUI@DuiLib@@QAEX_N@Z ?SetWantTab@CRichEditUI@DuiLib@@QAEX_N@Z ?SetWebBrowserEventHandler@CWebBrowserUI@DuiLib@@QAEXPAVCWebBrowserEventHandler@2@@Z ?SetWinStyle@CRichEditUI@DuiLib@@QAEXJ@Z ?SetWindowAttribute@CPaintManagerUI@DuiLib@@QAEXPB_W0@Z ?SetWindowAttributeList@CPaintManagerUI@DuiLib@@QAEXPB_W@Z ?SetWordCharFormat@CRichEditUI@DuiLib@@QAE_NAAUCHARFORMAT2W@@@Z ?SetWordWrap@CRichEditUI@DuiLib@@QAEX_N@Z ?SetZoom@CRichEditUI@DuiLib@@QAE_NHH@Z ?SetZoomOff@CRichEditUI@DuiLib@@QAE_NXZ ?ShowContextMenu@CWebBrowserUI@DuiLib@@UAGJKPAUtagPOINT@@PAUIUnknown@@PAUIDispatch@@@Z ?ShowModal@CWindowWnd@DuiLib@@QAEIXZ ?ShowUI@CWebBrowserUI@DuiLib@@UAGJKPAUIOleInPlaceActiveObject@@PAUIOleCommandTarget@@PAUIOleInPlaceFrame@@PAUIOleInPlaceUIWindow@@@Z ?ShowWindow@CWindowWnd@DuiLib@@QAEX_N0@Z ?SmallFormat@CDuiString@DuiLib@@QAAHPB_WZZ ?SortItems@CListUI@DuiLib@@QAE_NP6GHIII@ZI@Z ?StopGif@CGifAnimUI@DuiLib@@QAEXXZ ?StreamIn@CRichEditUI@DuiLib@@QAEJHAAU_editstream@@@Z ?StreamOut@CRichEditUI@DuiLib@@QAEJHAAU_editstream@@@Z ?Subclass@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@@Z ?Term@CPaintManagerUI@DuiLib@@SAXXZ ?ToString@CDuiPoint@DuiLib@@QAE?AVCDuiString@2@XZ ?ToString@CDuiRect@DuiLib@@QAE?AVCDuiString@2@XZ ?ToString@CDuiSize@DuiLib@@QAE?AVCDuiString@2@XZ ?ToString@CDuiString@DuiLib@@QAE?AV12@XZ ?TranslateAcceleratorW@CPaintManagerUI@DuiLib@@QAE_NPAUtagMSG@@@Z ?TranslateAcceleratorW@CWebBrowserUI@DuiLib@@UAEJPAUtagMSG@@@Z ?TranslateAcceleratorW@CWebBrowserUI@DuiLib@@UAGJPAUtagMSG@@PBU_GUID@@K@Z ?TranslateMessage@CPaintManagerUI@DuiLib@@SA_NQAUtagMSG@@@Z ?TranslateUrl@CWebBrowserUI@DuiLib@@UAGJKPA_WPAPA_W@Z ?TxSendMessage@CRichEditUI@DuiLib@@UBEJIIJPAJ@Z ?Undo@CRichEditUI@DuiLib@@QAE_NXZ ?Union@CDuiRect@DuiLib@@QAEXAAV12@@Z ?Unsubclass@CWindowWnd@DuiLib@@QAEXXZ ?Update@CWndShadow@@IAEXPAUHWND__@@@Z ?UpdateText@CDateTimeUI@DuiLib@@QAEXXZ ?UpdateUI@CWebBrowserUI@DuiLib@@UAGJXZ ?UseOldClipBegin@CRenderClip@DuiLib@@SAXPAUHDC__@@AAV12@@Z ?UseOldClipEnd@CRenderClip@DuiLib@@SAXPAUHDC__@@AAV12@@Z ?UsedVirtualWnd@CPaintManagerUI@DuiLib@@QAEX_N@Z ?WndProc@CWndShadow@@KGJPAUHWND__@@IIJ@Z ?_Failed@CMarkup@DuiLib@@AAE_NPB_W0@Z ?_GetBaseMessageMap@CNotifyPump@DuiLib@@KGPBUDUI_MSGMAP@2@XZ ?_GetBaseMessageMap@WindowImplBase@DuiLib@@KGPBUDUI_MSGMAP@2@XZ ?_MapAttributes@CMarkupNode@DuiLib@@AAEXXZ ?_Parse@CDialogBuilder@DuiLib@@AAEPAVCControlUI@2@PAVCMarkupNode@2@PAV32@PAVCPaintManagerUI@2@@Z ?_Parse@CMarkup@DuiLib@@AAE_NAAPA_WK@Z ?_Parse@CMarkup@DuiLib@@AAE_NXZ ?_ParseAttributes@CMarkup@DuiLib@@AAE_NAAPA_W@Z ?_ParseData@CMarkup@DuiLib@@AAE_NAAPA_W0D@Z ?_ParseMetaChar@CMarkup@DuiLib@@AAEXAAPA_W0@Z ?_ReserveElement@CMarkup@DuiLib@@AAEPAUtagXMLELEMENT@12@XZ ?_SkipIdentifier@CMarkup@DuiLib@@ABEXAAPA_W@Z ?_SkipIdentifier@CMarkup@DuiLib@@ABEXAAPB_W@Z ?_SkipWhitespace@CMarkup@DuiLib@@ABEXAAPA_W@Z ?_SkipWhitespace@CMarkup@DuiLib@@ABEXAAPB_W@Z ?__ControlProc@CWindowWnd@DuiLib@@KGJPAUHWND__@@IIJ@Z ?__FindControlFromClass@CPaintManagerUI@DuiLib@@CGPAVCControlUI@2@PAV32@PAX@Z ?__FindControlFromCount@CPaintManagerUI@DuiLib@@CGPAVCControlUI@2@PAV32@PAX@Z ?__FindControlFromName@CPaintManagerUI@DuiLib@@CGPAVCControlUI@2@PAV32@PAX@Z ?__FindControlFromNameHash@CPaintManagerUI@DuiLib@@CGPAVCControlUI@2@PAV32@PAX@Z ?__FindControlFromPoint@CPaintManagerUI@DuiLib@@CGPAVCControlUI@2@PAV32@PAX@Z ?__FindControlFromShortcut@CPaintManagerUI@DuiLib@@CGPAVCControlUI@2@PAV32@PAX@Z ?__FindControlFromTab@CPaintManagerUI@DuiLib@@CGPAVCControlUI@2@PAV32@PAX@Z ?__FindControlsFromClass@CPaintManagerUI@DuiLib@@CGPAVCControlUI@2@PAV32@PAX@Z ?__FindControlsFromUpdate@CPaintManagerUI@DuiLib@@CGPAVCControlUI@2@PAV32@PAX@Z ?__WndProc@CWindowWnd@DuiLib@@KGJPAUHWND__@@IIJ@Z ?_messageEntries@CNotifyPump@DuiLib@@0QBUDUI_MSGMAP_ENTRY@2@B ?_messageEntries@WindowImplBase@DuiLib@@0QBUDUI_MSGMAP_ENTRY@2@B ?m_H@CPaintManagerUI@DuiLib@@0FA ?m_L@CPaintManagerUI@DuiLib@@0FA ?m_S@CPaintManagerUI@DuiLib@@0FA ?m_SharedResInfo@CPaintManagerUI@DuiLib@@0UtagTResInfo@2@A ?m_aPlugins@CPaintManagerUI@DuiLib@@0VCDuiPtrArray@2@A ?m_aPreMessages@CPaintManagerUI@DuiLib@@0VCDuiPtrArray@2@A ?m_bCachedResourceZip@CPaintManagerUI@DuiLib@@0_NA ?m_bUseHSL@CPaintManagerUI@DuiLib@@0_NA ?m_hInstance@CPaintManagerUI@DuiLib@@0PAUHINSTANCE__@@A ?m_hResourceInstance@CPaintManagerUI@DuiLib@@0PAUHINSTANCE__@@A ?m_hResourceZip@CPaintManagerUI@DuiLib@@0PAXA ?m_lpResourceZIPBuffer@WindowImplBase@DuiLib@@1PAEA ?m_pStrResourcePath@CPaintManagerUI@DuiLib@@0VCDuiString@2@A ?m_pStrResourceZip@CPaintManagerUI@DuiLib@@0VCDuiString@2@A ?messageMap@CNotifyPump@DuiLib@@1UDUI_MSGMAP@2@B ?messageMap@WindowImplBase@DuiLib@@1UDUI_MSGMAP@2@B ?s_ShadowArray@CWndShadow@@1VCDuiValArray@DuiLib@@A ?s_UpdateLayeredWindow@CWndShadow@@1P6GHPAUHWND__@@PAUHDC__@@PAUtagPOINT@@PAUtagSIZE@@12KPAU_BLENDFUNCTION@@K@ZA ?s_hInstance@CWndShadow@@1PAUHINSTANCE__@@A

generic

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=35, id=223, productName=VS2013 build 21005, version=21005,

count=2, id=225, version=20806,

count=79, id=225, productName=VS2013 build 21005, version=21005,

count=207, id=224, productName=VS2013 build 21005, version=21005,

count=36, id=225, productName=VS2013 UPD4 build 31101, version=31101,

count=13, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=29, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=371, id=1, productName=Unmarked objects,

count=8, id=224, productName=VS2013 UPD4 build 31101, version=31101,

count=13, id=229, version=31101,

count=1, id=220, productName=VS2013 UPD4 build 31101, version=31101,

count=1, id=219, productName=VS2013 build 21005, version=21005,

count=1, id=151,

count=1, id=222, productName=VS2013 UPD4 build 31101, version=31101,

Remouse.Micro.Micro.v3.5.3.serial.maker.by.aaocg.exe

IMPHASH fcf1390e9ce472c7270447fc5c61a0c1
SHA256 970645912c0c0b6eb857236e6bcbfcafcb0eaf0f19d2b278c5b180ee31bb8a5d
MD5 edcc1a529ea8d2c51592d412d23c057e
SHA1 1d62d278fe69be7e3dde9ae96cc7e6a0fa960331
SHA512 c8d9fc14c74c87284ed92d7879e5968129572b8fc4e921f48a14b82b98f26737f89daa87213cd9068fa53a8ef84b8e07f1ce053f06790d417ff8dc621b346cab
SSDEEP 196608:xQc+2jD8ZyCMeiA24G4jLonzU04DjmLy8OVKLlVT7H39:2c+cD4DMvA24PLMzU0+mLyJVKfX9
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

123385

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb

kernel32

GetLastError SetLastError FormatMessageW GetCurrentProcess DeviceIoControl SetFileTime CloseHandle CreateDirectoryW RemoveDirectoryW CreateFileW DeleteFileW CreateHardLinkW GetShortPathNameW GetLongPathNameW MoveFileW GetFileType GetStdHandle WriteFile ReadFile FlushFileBuffers SetEndOfFile SetFilePointer SetFileAttributesW GetFileAttributesW FindClose FindFirstFileW FindNextFileW GetVersionExW GetCurrentDirectoryW GetFullPathNameW FoldStringW GetModuleFileNameW GetModuleHandleW FindResourceW FreeLibrary GetProcAddress GetCurrentProcessId ExitProcess SetThreadExecutionState Sleep LoadLibraryW GetSystemDirectoryW CompareStringW AllocConsole FreeConsole AttachConsole WriteConsoleW GetProcessAffinityMask CreateThread SetThreadPriority InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetEvent ResetEvent ReleaseSemaphore WaitForSingleObject CreateEventW CreateSemaphoreW GetSystemTime SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime SystemTimeToFileTime FileTimeToLocalFileTime LocalFileTimeToFileTime FileTimeToSystemTime GetCPInfo IsDBCSLeadByte MultiByteToWideChar WideCharToMultiByte GlobalAlloc LockResource GlobalLock GlobalUnlock GlobalFree LoadResource SizeofResource SetCurrentDirectoryW GetExitCodeProcess GetLocalTime GetTickCount MapViewOfFile UnmapViewOfFile CreateFileMappingW OpenFileMappingW GetCommandLineW SetEnvironmentVariableW ExpandEnvironmentStringsW GetTempPathW MoveFileExW GetLocaleInfoW GetTimeFormatW GetDateFormatW GetNumberFormatW SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize SetStdHandle GetProcessHeap RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead TerminateProcess RtlUnwind EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW QueryPerformanceFrequency GetModuleHandleExW GetModuleFileNameA GetACP HeapFree HeapAlloc HeapReAlloc GetStringTypeW LCMapStringW FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW DecodePointer

gdiplus

GdiplusShutdown GdiplusStartup GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipDisposeImage GdipCloneImage GdipFree GdipAlloc

SecurityTaskManager_Setup.exe

IMPHASH 60f2858f8c859062bd16000a4cb2a2ed
SHA256 bc2d5417a6bf47d53c20c280f6e4b1a3e00dc0b6bbd3e26b2e591fd2f2dc4cc3
MD5 444439bc44c476297d7f631a152ce638
SHA1 820fcb951d1ac8c2fda1a1ae790f52eb1f8edf2e
SHA512 160f4b095d37a9f4c6279a4a19f072e170c5f819d0e8e588b2503711b9e2eaac9567b48a9e42bf15af50ba60e64ef97a64e003230369aec0b032cb2030fdca00
SSDEEP 49152:4s+HgXcROcfipeyNcRmyQLCUOE+N+2JLKmltavtaKhGiD79l+90U:4s+9ROcapelxQLGEjscg6939l+V
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Digest

34:ca:3b:ec:66:91:d5:89:73:f6:2f:21:cc:cf:fc:81:0e:d2:32:b1:0e:21:d3:5f:b7:09:69:c4:62:9a:ff:84

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=A. & M. Neuber Software,O=A. & M. Neuber Software,L=Halle,ST=Sachsen-Anhalt,C=DE

Chains

Nov 11, 2019

CN=A. & M. Neuber Software,O=A. & M. Neuber Software,L=Halle,ST=Sachsen-Anhalt,C=DE

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Subject

CN=A. & M. Neuber Software,O=A. & M. Neuber Software,L=Halle,ST=Sachsen-Anhalt,C=DE

Serial Number

6f:40:31:34:14:43:67:52:4d:df:4d:72:20:12:ea:3d

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jul 12, 2018 - Jul 23, 2021

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Dec 10, 2013 - Dec 9, 2023

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

0

Major OS version

4

Entry point

44830

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

SHGetPathFromIDListA SHGetSpecialFolderLocation ShellExecuteExA SHGetMalloc

user32

BeginPaint GetSysColor GetClientRect SetRect EndPaint LoadCursorA GetLastActivePopup ShowWindow PostMessageA SendMessageA EnableWindow GetTopWindow SetWindowLongA GetWindowLongA SetWindowTextA SetForegroundWindow SetActiveWindow SetDlgItemTextA CharUpperBuffA LoadIconA SetWindowWord SendDlgItemMessageA GetDlgItem InvalidateRect UpdateWindow LoadStringA MessageBoxA SetTimer GetMessageA KillTimer PostQuitMessage DialogBoxParamA GetDlgItemTextA EndDialog GetWindowRect GetSystemMetrics SetWindowPos PeekMessageA TranslateMessage DispatchMessageA SetCursor CharNextA GetWindowWord DefWindowProcA RegisterClassA GetParent

kernel32

GetConsoleCP GetLocaleInfoA GetStringTypeW GetStringTypeA GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA LCMapStringW LCMapStringA GetStdHandle HeapCreate HeapDestroy VirtualAlloc VirtualFree EnterCriticalSection LeaveCriticalSection DeleteCriticalSection HeapSize Sleep GetCurrentThreadId SetLastError TlsFree TlsSetValue TlsAlloc TlsGetValue GetVersionExA FindClose FindFirstFileA SetCurrentDirectoryA CreateDirectoryA SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime LocalAlloc GetDriveTypeA GetEnvironmentVariableA DeleteFileA SetFileAttributesA GetConsoleMode SetEndOfFile SetFilePointer CloseHandle UnmapViewOfFile MapViewOfFile CreateFileMappingA GetFileSize CreateFileA GetWindowsDirectoryA MoveFileExA GlobalFree GlobalUnlock GlobalHandle _lclose _llseek _lread _lopen GlobalLock GlobalAlloc GlobalMemoryStatus GetVersion GetModuleFileNameA WriteFile GetSystemTime CreateProcessA LocalFree ExitProcess FormatMessageA GetLastError GetModuleHandleA GetVolumeInformationA FindNextFileA GetTickCount WideCharToMultiByte WaitForSingleObject SetErrorMode GetLocalTime lstrlenA CreateFileW ReadFile LoadLibraryA InitializeCriticalSection SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers RemoveDirectoryA MultiByteToWideChar RtlUnwind HeapAlloc HeapFree HeapReAlloc RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA GetProcessHeap GetStartupInfoA GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetProcAddress

gdi32

SetTextColor SetTextAlign GetBkColor GetTextExtentPoint32A ExtTextOutA CreateDCA GetDeviceCaps CreateFontIndirectA DeleteDC SelectObject DeleteObject SetBkColor

comctl32

ord17

Treasure.Vault.3D.Screensaver.keygen.by.Paradox.exe

IMPHASH fcf1390e9ce472c7270447fc5c61a0c1
SHA256 4a5da8ebf650091c99c7a9d329ecb87533c337ab9e5642ff0355485ed419ec40
MD5 8103aad9a6f5ee1fb4f764fc5782822a
SHA1 4fb4f963243d7cb65394e59de787aebe020b654c
SHA512 e65b7d2bdfda07a2ca22d109d39d98395915ee9ec486c44f358885e03bc3e9f9be0ce81706accbe412243ef8d62b9e364f6b1961cfe4469f3c3892821fccfae8
SSDEEP 196608:CQq8NSRYBrs7LgUGCdpV9KhK7ByrkisRdslNn9YOa5QfKJIJM0hI/oVytz:CQq8NkYBCPGCdpbyK7ByrkikdsGOynq2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

123385

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Projects\WinRAR\sfx\build\sfxrar32\Release\sfxrar.pdb

kernel32

GetLastError SetLastError FormatMessageW GetCurrentProcess DeviceIoControl SetFileTime CloseHandle CreateDirectoryW RemoveDirectoryW CreateFileW DeleteFileW CreateHardLinkW GetShortPathNameW GetLongPathNameW MoveFileW GetFileType GetStdHandle WriteFile ReadFile FlushFileBuffers SetEndOfFile SetFilePointer SetFileAttributesW GetFileAttributesW FindClose FindFirstFileW FindNextFileW GetVersionExW GetCurrentDirectoryW GetFullPathNameW FoldStringW GetModuleFileNameW GetModuleHandleW FindResourceW FreeLibrary GetProcAddress GetCurrentProcessId ExitProcess SetThreadExecutionState Sleep LoadLibraryW GetSystemDirectoryW CompareStringW AllocConsole FreeConsole AttachConsole WriteConsoleW GetProcessAffinityMask CreateThread SetThreadPriority InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetEvent ResetEvent ReleaseSemaphore WaitForSingleObject CreateEventW CreateSemaphoreW GetSystemTime SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime SystemTimeToFileTime FileTimeToLocalFileTime LocalFileTimeToFileTime FileTimeToSystemTime GetCPInfo IsDBCSLeadByte MultiByteToWideChar WideCharToMultiByte GlobalAlloc LockResource GlobalLock GlobalUnlock GlobalFree LoadResource SizeofResource SetCurrentDirectoryW GetExitCodeProcess GetLocalTime GetTickCount MapViewOfFile UnmapViewOfFile CreateFileMappingW OpenFileMappingW GetCommandLineW SetEnvironmentVariableW ExpandEnvironmentStringsW GetTempPathW MoveFileExW GetLocaleInfoW GetTimeFormatW GetDateFormatW GetNumberFormatW SetFilePointerEx GetConsoleMode GetConsoleCP HeapSize SetStdHandle GetProcessHeap RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead TerminateProcess RtlUnwind EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW QueryPerformanceFrequency GetModuleHandleExW GetModuleFileNameA GetACP HeapFree HeapAlloc HeapReAlloc GetStringTypeW LCMapStringW FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW DecodePointer

gdiplus

GdiplusShutdown GdiplusStartup GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdipDisposeImage GdipCloneImage GdipFree GdipAlloc

VyprVPN.exe

IMPHASH 4f67aeda01a0484282e8c59006b0b352
SHA256 08fb58bfaee81d99cbb71bf71ba8f2ab4f107563c5b0c3f20484d096b337e50d
MD5 f1d5f022e71b8bc9e3241fbb72e87be2
SHA1 1b8abac6f9ffc3571b14c68ae1bc5e7568b4106c
SHA512 f16130958a3ff33b21623881cbdeec018dd031b4aeb01bbb676c4bdeb1ec1d4f7d312efab48b4125eaaf6ea1c8b0aa4e037b1959af1f10c2a55fbc2da9f3924f
SSDEEP 24576:nTadGsNY1i8fWCsSpqq5M0bOk61uyG2CWm3U9X+Y0ttcN0sH2U9:nsGsm1qSp/MzRuI19X+Y0w39
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12843

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CopyFileA Sleep GetTickCount CreateFileA GetFileSize GetModuleFileNameA ReadFile GetFileAttributesA SetFileAttributesA ExitProcess SetEnvironmentVariableA GetWindowsDirectoryA GetTempPathA GetCommandLineA lstrlenA GetVersion GetCurrentProcess GetFullPathNameA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryA CreateProcessA RemoveDirectoryA GetTempFileNameA WriteFile lstrcpyA MoveFileExA lstrcatA GetSystemDirectoryA GetProcAddress CloseHandle SetCurrentDirectoryA MoveFileA CompareFileTime GetShortPathNameA SearchPathA lstrcmpiA SetFileTime lstrcmpA ExpandEnvironmentStringsA lstrcpynA SetErrorMode GlobalFree FindFirstFileA FindNextFileA DeleteFileA SetFilePointer GetPrivateProfileStringA FindClose MultiByteToWideChar FreeLibrary MulDiv WritePrivateProfileStringA LoadLibraryExA GetModuleHandleA GetExitCodeProcess WaitForSingleObject GlobalAlloc

user32

ScreenToClient GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard PostQuitMessage GetWindowRect EnableMenuItem CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndDialog RegisterClassA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx GetDC CreateDialogParamA SetTimer GetDlgItem SetWindowLongA SetForegroundWindow LoadImageA IsWindow SendMessageTimeoutA FindWindowExA OpenClipboard TrackPopupMenu AppendMenuA EndPaint DestroyWindow wsprintfA ShowWindow SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegDeleteKeyA SetFileSecurityA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegOpenKeyExA RegEnumValueA RegDeleteValueA RegCloseKey RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$1/1337/VyprVPN.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 8321b2785893442efeedddc40f0979563e8e2fc1a51cc3e4ee93d6f36d4e154d
MD5 25e9776bb3965060ac5d9234fd25a11d
SHA1 5df6e261a930c0068c94542ef5180722a513e4fb
SHA512 8735acb4bad98ad06b9cee96cda9a3c5026e5f584bd4efb782cf9a8a6f3ea9e39f7d280497dabbb5f6662a6a63bb9a6674c4c020bc73669517b05d0e708d0d7c
SSDEEP 6144:VVvHxWMk/gYIXgT2/ZIj8O+++7HmCIo7pHdmOj59zVSIbMs/gGIXgTk/ZIj8O++S:VVZ0IXW+7HmW9fIXA+7HmW9
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

1685902

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\root\source\repos\Project\Project\obj\Release\VyprVPN.pdb

$1/1337/joinResult.exe

IMPHASH 4f67aeda01a0484282e8c59006b0b352
SHA256 640c30cfa519be11c02c4e51bf18979a93266887cc9ef19076b3d0f1f20528b6
MD5 79022fbafee9fe740a5230f87bd33171
SHA1 42bf0f7bf41009fd0009535a8b1162cbe60dce6f
SHA512 48e0d4a18d99dce4398de73895a157e13293115b52ee5158f9ea6fc73c4d5f4133e1cebba14ff5482b8c4f7dfeebfe3b003df1caf351314f1cc16944818df4b3
SSDEEP 24576:l/Fc5T6rz9SjcS4c4da17v6JS42ybaU7cryOZO4Y8qoDUsNr+k+:l9L9bS944lv6JS4AU78O4yo4sNrg
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

12843

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CopyFileA Sleep GetTickCount CreateFileA GetFileSize GetModuleFileNameA ReadFile GetFileAttributesA SetFileAttributesA ExitProcess SetEnvironmentVariableA GetWindowsDirectoryA GetTempPathA GetCommandLineA lstrlenA GetVersion GetCurrentProcess GetFullPathNameA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryA CreateProcessA RemoveDirectoryA GetTempFileNameA WriteFile lstrcpyA MoveFileExA lstrcatA GetSystemDirectoryA GetProcAddress CloseHandle SetCurrentDirectoryA MoveFileA CompareFileTime GetShortPathNameA SearchPathA lstrcmpiA SetFileTime lstrcmpA ExpandEnvironmentStringsA lstrcpynA SetErrorMode GlobalFree FindFirstFileA FindNextFileA DeleteFileA SetFilePointer GetPrivateProfileStringA FindClose MultiByteToWideChar FreeLibrary MulDiv WritePrivateProfileStringA LoadLibraryExA GetModuleHandleA GetExitCodeProcess WaitForSingleObject GlobalAlloc

user32

ScreenToClient GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard PostQuitMessage GetWindowRect EnableMenuItem CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndDialog RegisterClassA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx GetDC CreateDialogParamA SetTimer GetDlgItem SetWindowLongA SetForegroundWindow LoadImageA IsWindow SendMessageTimeoutA FindWindowExA OpenClipboard TrackPopupMenu AppendMenuA EndPaint DestroyWindow wsprintfA ShowWindow SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegDeleteKeyA SetFileSecurityA OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges RegOpenKeyExA RegEnumValueA RegDeleteValueA RegCloseKey RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$1/1337/1111.exe

SHA256 5390fc20629a4a350dc8f0482472f9962f50364b7818b2d510beb4e520581ad4
MD5 32373185ece79936dfd0fd41d2848a2e
SHA1 591f92bcaeeea85e8bba6988ef0d1afcea35fbbd
SHA512 443b8df46dd6009285500148d2c4e0654e20e24b897fb29a9eded1cb21da6c495feaa1df81043ed4818f6ea511813c926e9f645b3ec4c8ab5c2c79f0fb5859dc
SSDEEP 24576:odLgKtbMn52LmBs9MGfof321RnkcRWiZES8bLg8iPznpJy5OfH3bOn+BYSYu:odUrnow4gG1XWj7OpJy5OPrOnE
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

217535

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

Size

246KB

Virtual Size

428KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

31KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

1KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

5KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

17KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

174KB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

932KB

Virtual Size

936KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

$1/1337/Clipper.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 4ff04b9be72efe982594832d51681c08334f4d8512c3560c646c21f88fd5e532
MD5 c7e43ab36c3da3371fc915de9dc5106f
SHA1 f1bb12ae485853c1a28a8306604ef3eb3939068d
SHA512 383a02a7a338ca66077f5d577ae7f63f95cf1b711f1338e9dd11867a62d6dc298e0fd01878adc273669f5f1e8cffb0aa4ea3efa75ffb870616a0d3fef3cb454e
SSDEEP 384:Dk3mLUtUURltJYbiXDnRXts39Rizw+8n7syMN1gCZhNZDJRWs:Q3mGlvpRXts39Mw+8n7syMN1gCZhNZT
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

24222

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 8c8a576201f68de1a3f26fc723b9f30f
SHA256 681382f3134de5c6272a49dd13651c8c201b89c247b471191496e7335702fa59
MD5 2ae993a2ffec0c137eb51c8832691bcb
SHA1 98e0b37b7c14890f8a599f35678af5e9435906e1
SHA512 2501371eb09c01746119305ba080f3b8c41e64535ff09cee4f51322530366d0bd5322ea5290a466356598027e6cda8ab360caef62dcaf560d630742e2dd9bcd9
SSDEEP 192:vPtkumJX7zB22kGwfy0mtVgkCPOsE1un:k702k5qpdsEQn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9995

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 8c8a576201f68de1a3f26fc723b9f30f
SHA256 681382f3134de5c6272a49dd13651c8c201b89c247b471191496e7335702fa59
MD5 2ae993a2ffec0c137eb51c8832691bcb
SHA1 98e0b37b7c14890f8a599f35678af5e9435906e1
SHA512 2501371eb09c01746119305ba080f3b8c41e64535ff09cee4f51322530366d0bd5322ea5290a466356598027e6cda8ab360caef62dcaf560d630742e2dd9bcd9
SSDEEP 192:vPtkumJX7zB22kGwfy0mtVgkCPOsE1un:k702k5qpdsEQn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9995

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

WSHSetup[1].exe

IMPHASH 3c977911c8eee24abac5edc906e5e72c
SHA256 5987a6e42c3412086b7c9067dc25f1aaa659b2b123581899e9df92cb7907a3ed
MD5 cb2b4cd74c7b57a12bd822a168e4e608
SHA1 f2182062719f0537071545b77ca75f39c2922bf5
SHA512 7a38be8c1270b1224be4975ad442a964b2523c849f748e5356156cdce39e494c64ca80b0d99c1d989d77f072902de8972e0b113894c9791fb0cabf856dbba348
SSDEEP 12288:vI3h+hoVEZnvy/hF4CMWZrU7S/iAfMIItotPP2rbPCrF7:vu+hIE9BYO7S/iAOtc4be
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

558174

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeEnvironmentStringsW LoadLibraryW GetStringTypeW HeapCreate HeapSize SetHandleCount FlushFileBuffers GetConsoleCP LCMapStringW IsValidCodePage GetOEMCP GetCPInfo IsProcessorFeaturePresent TerminateProcess IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetEnvironmentStringsW TlsFree GetCurrentProcessId TlsGetValue TlsAlloc GetStartupInfoW HeapSetInformation GetCommandLineA VirtualQuery GetSystemInfo GetModuleHandleW VirtualAlloc VirtualProtect GetModuleFileNameW GetStdHandle WriteConsoleW HeapReAlloc HeapFree HeapAlloc EncodePointer DecodePointer RtlUnwind SetStdHandle LocalFree SetLastError QueryPerformanceCounter FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetSystemTimeAsFileTime TlsSetValue CreateFileW GetCommState SetErrorMode GetLogicalDrives GetVolumePathNameW GetVolumeNameForVolumeMountPointW GetComputerNameExW GetConsoleMode CreateEventA WaitForSingleObject IsDBCSLeadByte lstrcmpiA LoadLibraryExA lstrlenA lstrlenW InitializeCriticalSectionAndSpinCount RaiseException FreeLibrary WriteFile SetFileTime CreateDirectoryA DosDateTimeToFileTime SystemTimeToFileTime GetCurrentProcess DuplicateHandle GetFileType SetFilePointer ExitProcess GetCurrentDirectoryA GetModuleFileNameA FindResourceA LoadResource FreeResource SizeofResource LockResource GetLastError GetModuleHandleA WideCharToMultiByte GlobalAlloc GlobalLock GlobalUnlock CreateFileA GetFileSize CloseHandle ReadFile InterlockedIncrement InterlockedDecrement LoadLibraryA GetProcAddress GetACP MultiByteToWideChar MulDiv GetTickCount GetLocalTime LeaveCriticalSection EnterCriticalSection DeleteCriticalSection GetVersionExA InitializeCriticalSection Sleep GetCurrentThreadId

user32

MessageBoxA SetWindowRgn wvsprintfA OffsetRect SystemParametersInfoA CharPrevA DrawTextA UnionRect GetActiveWindow GetUpdateRect IsWindowVisible SetRect MessageBoxW GetDlgItem CheckMenuRadioItem GetDCEx IsZoomed GetWindowRect UpdateWindow MoveWindow DestroyWindow ReleaseDC GetDC ReleaseCapture SetCapture FillRect LockWindowUpdate SetClassLongA GetClassLongA AttachThreadInput CopyImage SetScrollPos AppendMenuW TrackPopupMenu InvalidateRect InvalidateRgn DefWindowProcA GetMenuCheckMarkDimensions GetClientRect SetTimer EndPaint BeginPaint PtInRect ScreenToClient ClientToScreen GetGUIThreadInfo ShowWindow SetFocus SetCursor LoadCursorA CharNextA IntersectRect GetParent GetMonitorInfoA MonitorFromWindow MapWindowPoints GetFocus GetCursorPos SendMessageA SetWindowPos IsRectEmpty GetWindowTextLengthA EnableWindow SetWindowTextA GetCaretPos GetCaretBlinkTime GetWindowTextA CreateCaret HideCaret ShowCaret SetCaretPos GetSysColor GetKeyState GetWindowLongA KillTimer PostMessageA SetPropA GetPropA CallWindowProcA GetClassInfoExA CreateWindowExA SetWindowLongA IsWindow DispatchMessageA TranslateMessage GetMessageA DialogBoxIndirectParamA EnableMenuItem GetSystemMenu CreateAcceleratorTableA RegisterClassExA RegisterClassA GetWindow IsIconic

gdi32

GetStockObject CreateFontIndirectA GetObjectA SetBkMode SetTextColor CreatePatternBrush CreateSolidBrush DeleteObject GetDeviceCaps RoundRect TextOutA CreatePen GetCharABCWidthsA ExtSelectClipRgn GdiFlush CreateFontA Escape ExtEscape EnumObjects CreateDCA SetDCPenColor DeleteDC SetWindowOrgEx Rectangle RestoreDC BitBlt SaveDC SelectObject CreateCompatibleBitmap CreateCompatibleDC GetTextMetricsA SelectClipRgn CombineRgn CreateRectRgnIndirect GetClipBox CreateRoundRectRgn StretchBlt SetStretchBltMode ExtTextOutA SetBkColor LineTo MoveToEx GetTextExtentPoint32A CreateDIBSection CreatePenIndirect

comdlg32

GetOpenFileNameA

advapi32

MakeAbsoluteSD2 RegCloseKey RegDeleteKeyA RegCreateKeyExA RegOpenKeyExA RegEnumKeyExA IsValidSecurityDescriptor LookupPrivilegeValueW LsaAddAccountRights LookupPrivilegeNameA RegSetValueExA RegQueryInfoKeyW RegDeleteValueA

shell32

ShellExecuteA

ole32

OleLockRunning CoInitialize CoUninitialize CoTaskMemRealloc CoTaskMemAlloc CoTaskMemFree OleInitialize OleUninitialize CreateStreamOnHGlobal CoCreateInstance CLSIDFromString CLSIDFromProgID

oleaut32

BSTR_UserSize VarUI4FromStr SysAllocStringLen VariantInit VariantClear SysFreeString SysAllocString

gdiplus

GdipGetImageWidth GdipGetImageHeight GdipGetPropertyItemSize GdipGetPropertyItem GdipGetFamily GdipCreateFontFromDC GdipCloneBrush GdipSetTextRenderingHint GdipCreateStringFormat GdipSetStringFormatLineAlign GdipSetStringFormatAlign GdipCreateLineBrushI GdipCreateBitmapFromScan0 GdipGetImageGraphicsContext GdipSetSmoothingMode GdipSetCompositingQuality GdipSetInterpolationMode GdipSetPixelOffsetMode GdipDrawString GdipGraphicsClear GdipDrawImage GdipDeleteFontFamily GdipDeleteBrush GdipDeleteStringFormat GdipDeleteFont GdiplusShutdown GdiplusStartup GdipCloneImage GdipDisposeImage GdipFree GdipAlloc GdipLoadImageFromStreamICM GdipLoadImageFromStream GdipCreateFromHDC GdipDrawImageRectI GdipImageSelectActiveFrame GdipDeleteGraphics GdipImageGetFrameDimensionsCount GdipImageGetFrameDimensionsList GdipImageGetFrameCount GdipCreateFontFromLogfontA

imm32

ImmSetCompositionFontA ImmSetCompositionWindow ImmGetContext ImmReleaseContext

comctl32

_TrackMouseEvent ord17

winmm

mmioWrite mmioCreateChunk mmioOpenW mmioAscend

urlmon

CreateAsyncBindCtx

msacm32

acmDriverOpen

netapi32

NetWkstaUserGetInfo

iphlpapi

GetIpNetTable

avifil32

AVIMakeCompressedStream

wsnmp32

ord501

d2d1

ord1

dwrite

DWriteCreateFactory

___ _ _ _/전산 및 비전산자료 보존 요청서.tgz

SHA256 04eb8b5e59d657f4c00573d1d49c24932e10ad503be1a802d24c86463319764e
MD5 7fb27e920c0d272d03a1b1258b81ede8
SHA1 6273137ac4b396ff99b6d227e5207273b2d19fab
SHA512 9924847acdf1188ab14060bad5771e01d88cff233bcf81fe83d1b795a68d4eb42316fe35c0ece66160a160669cd23ea072c0f6c50626db991d4484a45ce8cf90
SSDEEP 12288:+HpIr3xwSfqKtsHsNFO9ZdX/WAYqDwrmjJwX3bdiuaRCu:jnfHyZdX/WAYQ4mjJwXVaRCu
MD5 SHA1 SHA512 SSDEEP

전산 및 비전산자료 보존 요청서.tgz

SHA256 6c026192f63a7188f8cc99abfb485247ee9fbbd2a30b0a803d16563089b47508
MD5 b1602e7eb62e878f576d24c35e89e149
SHA1 7002c1858c56bc9a2f4a925561f1f294db9584ae
SHA512 49cb47b78f394b0572fc8f2343b35f269e096d54139335afcd8dfc4a2d6ab942f6015bb27de955ed8112b4afba53960d6bf7c1c10b1be441260a9170fcd705d2
SSDEEP 24576:MPT9hifJKZd1jWOY2emPOuDMdFPTWDJIDMd:MhhiRqBiKPOuDMdFSDJIDMd
MD5 SHA1 SHA512 SSDEEP

전산 및 비전산자료 보존 요청서/전산 및 비전산자료 보존 요청서(20200525)_꼭 확인하시고 자료보존해주세요.exe

IMPHASH 93b970b63b735db9b186365630218e72
SHA256 291f381da3286ea93c38bb325e19f35744349c3543708135d8be731f4bafb6e2
MD5 54bef758433c98353b61bf1e2aecefb2
SHA1 06feb43c6d58eab893396f63aa2e1d0e4542f7d1
SHA512 3bfb51f9bee7033ebde0f418b88327b7c7a322b3e0572d92ad4cdf37c9fbed22d518c9ce2d8d5638381542bef83077d8054184b9f613b815df6906a99fd4526f
SSDEEP 12288:fPT9h+l+ofoa/sHoNFU9Zd1jWOYE9QjmJl/2hgDMjhP:fPT9hifJKZd1jWOY2emPOuDMd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

26369

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaNodeProcessorMask ScrollConsoleScreenBufferW HeapAlloc SetProcessAffinityMask SetNamedPipeHandleState GetPrivateProfileStringW GetOverlappedResult SetVolumeMountPointW DeleteVolumeMountPointW GetVolumeNameForVolumeMountPointA SetMailslotInfo IsDBCSLeadByteEx LoadResource GlobalAlloc GetProcAddress LoadLibraryW IsWow64Process SetEnvironmentVariableW FindFirstFileExA UnmapViewOfFile RaiseException RtlUnwind GetCommandLineW HeapSetInformation GetStartupInfoW GetLastError HeapFree IsProcessorFeaturePresent TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA MultiByteToWideChar WideCharToMultiByte HeapReAlloc LCMapStringW GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle SetFilePointer SetEndOfFile GetProcessHeap ReadFile WriteConsoleW CreateFileW

user32

GetClipCursor GetCursor

advapi32

RevertToSelf

전산 및 비전산자료 보존 요청서/전산 및 비전산자료 보존 요청서(20200525)_꼭 확인하시고 자료보존해주세요1.exe

IMPHASH 93b970b63b735db9b186365630218e72
SHA256 aaf7bb9ad358726ca367f1827686dc15fea925f26ab1e201a2768c67472e8890
MD5 8399865e44e7d6a193f8c8acf547eb31
SHA1 17e3bee5debada69dadec0b748256925a1a8b1ac
SHA512 bf9ceb3a36ca874dceb9ccfec8e7635f5f11f83f04226ceb4e2b4b2548dbcecf2618fe5063bec068b1571867984d0beece6b5f9be0747a13ddb53f9a09aa4d61
SSDEEP 3072:tPTcPP3LvQjfIY9Spek01stm+XIm1EWaVw3ItNVFZUyfUNjhb+P0I1fcj:tPTcPfL43SW1stDXaXw3ItNVTUVjhGy
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

26369

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaNodeProcessorMask ScrollConsoleScreenBufferW HeapAlloc SetProcessAffinityMask SetNamedPipeHandleState GetPrivateProfileStringW GetOverlappedResult SetVolumeMountPointW DeleteVolumeMountPointW GetVolumeNameForVolumeMountPointA SetMailslotInfo IsDBCSLeadByteEx LoadResource GlobalAlloc GetProcAddress LoadLibraryW IsWow64Process SetEnvironmentVariableW FindFirstFileExA UnmapViewOfFile RaiseException RtlUnwind GetCommandLineW HeapSetInformation GetStartupInfoW GetLastError HeapFree IsProcessorFeaturePresent TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA MultiByteToWideChar WideCharToMultiByte HeapReAlloc LCMapStringW GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle SetFilePointer SetEndOfFile GetProcessHeap ReadFile WriteConsoleW CreateFileW

user32

GetClipCursor GetCursor

advapi32

RevertToSelf

___ _ _ _/전산 및 비전산자료 보존 요청서/전산 및 비전산자료 보존 요청서/전산 및 비전산자료 보존 요청서(20200525)_꼭 확인하시고 자료보존해주세요.exe

IMPHASH 93b970b63b735db9b186365630218e72
SHA256 291f381da3286ea93c38bb325e19f35744349c3543708135d8be731f4bafb6e2
MD5 54bef758433c98353b61bf1e2aecefb2
SHA1 06feb43c6d58eab893396f63aa2e1d0e4542f7d1
SHA512 3bfb51f9bee7033ebde0f418b88327b7c7a322b3e0572d92ad4cdf37c9fbed22d518c9ce2d8d5638381542bef83077d8054184b9f613b815df6906a99fd4526f
SSDEEP 12288:fPT9h+l+ofoa/sHoNFU9Zd1jWOYE9QjmJl/2hgDMjhP:fPT9hifJKZd1jWOY2emPOuDMd
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

26369

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaNodeProcessorMask ScrollConsoleScreenBufferW HeapAlloc SetProcessAffinityMask SetNamedPipeHandleState GetPrivateProfileStringW GetOverlappedResult SetVolumeMountPointW DeleteVolumeMountPointW GetVolumeNameForVolumeMountPointA SetMailslotInfo IsDBCSLeadByteEx LoadResource GlobalAlloc GetProcAddress LoadLibraryW IsWow64Process SetEnvironmentVariableW FindFirstFileExA UnmapViewOfFile RaiseException RtlUnwind GetCommandLineW HeapSetInformation GetStartupInfoW GetLastError HeapFree IsProcessorFeaturePresent TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA MultiByteToWideChar WideCharToMultiByte HeapReAlloc LCMapStringW GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle SetFilePointer SetEndOfFile GetProcessHeap ReadFile WriteConsoleW CreateFileW

user32

GetClipCursor GetCursor

advapi32

RevertToSelf

___ _ _ _/전산 및 비전산자료 보존 요청서/전산 및 비전산자료 보존 요청서/전산 및 비전산자료 보존 요청서(20200525)_꼭 확인하시고 자료보존해주세요1.exe

IMPHASH 93b970b63b735db9b186365630218e72
SHA256 aaf7bb9ad358726ca367f1827686dc15fea925f26ab1e201a2768c67472e8890
MD5 8399865e44e7d6a193f8c8acf547eb31
SHA1 17e3bee5debada69dadec0b748256925a1a8b1ac
SHA512 bf9ceb3a36ca874dceb9ccfec8e7635f5f11f83f04226ceb4e2b4b2548dbcecf2618fe5063bec068b1571867984d0beece6b5f9be0747a13ddb53f9a09aa4d61
SSDEEP 3072:tPTcPP3LvQjfIY9Spek01stm+XIm1EWaVw3ItNVFZUyfUNjhb+P0I1fcj:tPTcPfL43SW1stDXaXw3ItNVTUVjhGy
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

26369

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetNumaNodeProcessorMask ScrollConsoleScreenBufferW HeapAlloc SetProcessAffinityMask SetNamedPipeHandleState GetPrivateProfileStringW GetOverlappedResult SetVolumeMountPointW DeleteVolumeMountPointW GetVolumeNameForVolumeMountPointA SetMailslotInfo IsDBCSLeadByteEx LoadResource GlobalAlloc GetProcAddress LoadLibraryW IsWow64Process SetEnvironmentVariableW FindFirstFileExA UnmapViewOfFile RaiseException RtlUnwind GetCommandLineW HeapSetInformation GetStartupInfoW GetLastError HeapFree IsProcessorFeaturePresent TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW SetLastError GetCurrentThreadId InterlockedDecrement EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage CloseHandle CreateFileA MultiByteToWideChar WideCharToMultiByte HeapReAlloc LCMapStringW GetStringTypeW GetConsoleCP GetConsoleMode FlushFileBuffers SetStdHandle SetFilePointer SetEndOfFile GetProcessHeap ReadFile WriteConsoleW CreateFileW

user32

GetClipCursor GetCursor

advapi32

RevertToSelf

amtemu.v0.9.2.win-painter_edited.exe

IMPHASH 06ac1f21ee2a357ffb0dd7db52cbbb13
SHA256 1b94ce5e3fb24f02cd970bf09031482d4e2bafebcaafc3f477a735d483e13dbd
MD5 88124e4aba906259af28a466774431ea
SHA1 fbc1c27e0d7177238ec99481ffa7d839d1f51594
SHA512 cdc0af6ea2686d35e4a77f4eb802ba9e41819b052253071a397601bec4d6232e5351d21b5d8ab4644e9f6ffd67057ec8c6f2db8605b429afcdf7b3ecd8005e2d
SSDEEP 49152:fvWgpcDFzwTqIFMLr1qe0ErgHBBFQ5RSRfR2AVP+Czk/gcsNFtgAS/t5XoAwD:lOD62CMf1qe0EKQ5k3bVP+IahB3XoAwD
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ModiLoader Second Stage
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

memset strncpy _strnicmp strncmp strlen strcmp memmove memcpy sprintf

kernel32

GetModuleHandleA HeapCreate RemoveDirectoryA GetShortPathNameA HeapDestroy ExitProcess GetTempFileNameA FindResourceA LoadResource SizeofResource GetExitCodeProcess HeapFree HeapAlloc LoadLibraryA GetProcAddress FreeLibrary GetCurrentThreadId GetCurrentProcessId InitializeCriticalSection GetCommandLineA GetModuleFileNameA GetEnvironmentVariableA SetEnvironmentVariableA CloseHandle GetCurrentProcess TerminateProcess SetUnhandledExceptionFilter GetVersionExA Sleep HeapReAlloc EnterCriticalSection LeaveCriticalSection SetLastError GetCurrentDirectoryA SetCurrentDirectoryA DeleteFileA GetTempPathA CreateDirectoryA WriteFile CreateFileA SetFilePointer ReadFile

comctl32

InitCommonControls InitCommonControlsEx

user32

MessageBoxA SendMessageA GetWindowThreadProcessId IsWindowVisible IsWindowEnabled GetForegroundWindow EnableWindow EnumWindows DestroyWindow GetSysColor GetSysColorBrush CreateWindowExA GetWindowLongA PostMessageA CallWindowProcA SetWindowLongA SetFocus GetWindowTextLengthA GetWindowTextA RedrawWindow RemovePropA DefWindowProcA SetPropA GetParent GetPropA GetWindow SetActiveWindow UnregisterClassA DestroyAcceleratorTable LoadIconA LoadCursorA RegisterClassA AdjustWindowRect GetSystemMetrics GetActiveWindow GetWindowRect ShowWindow CreateAcceleratorTableA PeekMessageA MsgWaitForMultipleObjects GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA SetCursorPos LoadImageA SetCursor MapWindowPoints MoveWindow SystemParametersInfoA GetKeyState SetCapture GetCursorPos ReleaseCapture GetClientRect FillRect EnumChildWindows DefFrameProcA GetFocus IsChild GetClassNameA

gdi32

GetStockObject SetBkColor SetTextColor CreateSolidBrush DeleteObject

ole32

CoInitialize CoTaskMemFree RevokeDragDrop

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

api.exe

IMPHASH aea9c61b49d66485f9f13c0f478d0b02
SHA256 3f1e28e961239c01602b1ce7555f51778c9f369b059ef07b75a7d9dee70ff8b1
MD5 3561a1c35184a0b60b89f4b560a9660d
SHA1 e39442388db90a088a8eb8ce46d4f61182334a1b
SHA512 7a83a669e8a72d6ec83952c9d57cc8059a6fff6f3564dab69ad50ca939a7d8e3f3d7d9ed74f8d06d060a39f8c4525fcfdcdecf2550c6fe57da0bef3df1f5ee75
SSDEEP 393216:2NyEpgUqc9K6HraFEX/31Jkw38WG+tyJsv6tWKFdu9CyfC6FxmWUnnML:2NyEpgUH9baFGnMWndFJUnM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Digest

bf:d4:05:d9:39:75:60:c2:35:19:a3:f5:bc:e0:31:cd:8d:33:8a:26

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Adlice,O=Adlice,L=Sautron,C=FR

Chains

May 4, 2020

CN=Adlice,O=Adlice,L=Sautron,C=FR

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Minor OS version

1

Major OS version

5

Entry point

10869539

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\Adlice\Diag\RelWithDebInfo\Diag.pdb

ws2_32

inet_ntoa WSAIoctl getnameinfo freeaddrinfo getaddrinfo

winmm

PlaySoundW

kernel32

GetStdHandle SwitchToFiber DeleteFiber CreateFiber QueryPerformanceCounter GetSystemTimeAsFileTime ConvertFiberToThread ConvertThreadToFiber LoadLibraryA GetConsoleMode SetConsoleMode ReadConsoleA ReadConsoleW FormatMessageA InitializeCriticalSection SleepEx QueryPerformanceFrequency GetSystemDirectoryA VerifyVersionInfoA ExpandEnvironmentStringsA CreateFileMappingA SwitchToThread CompareStringW GetUserDefaultLCID GetLocalTime SetThreadPriority GetThreadPriority WaitForSingleObjectEx OutputDebugStringW GetConsoleWindow LCMapStringW GetStartupInfoW GetCurrencyFormatW GetUserDefaultUILanguage GetLogicalDrives SetEndOfFile FindCloseChangeNotification FindFirstChangeNotificationW FindNextChangeNotification FindFirstFileExW GetTimeZoneInformation IsValidLanguageGroup IsValidLocale GetUserDefaultLangID CheckRemoteDebuggerPresent GlobalAlloc GlobalUnlock GlobalLock GlobalSize ExitProcess SetEvent ResetEvent WaitForMultipleObjects CloseHandle CreateEventW OpenEventW GetDriveTypeW GetVolumeInformationW GetModuleHandleExW ReadProcessMemory GetModuleHandleW GetProcAddress GetLongPathNameW lstrcmpW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount TryEnterCriticalSection DeleteCriticalSection ExpandEnvironmentStringsW GetSystemDirectoryW GetTempPathW GetStringTypeW EncodePointer DecodePointer GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeSListHead IsDebuggerPresent InterlockedPushEntrySList LoadLibraryExW SetConsoleCtrlHandler ExitThread FreeLibraryAndExitThread GetCommandLineA SetStdHandle GetFullPathNameA GetConsoleCP HeapReAlloc GetACP EnumSystemLocalesW HeapSize SetEnvironmentVariableA WriteConsoleW FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW LockResource LoadResource SizeofResource FindResourceW GetFileSizeEx CreateMutexA HeapCreate HeapDestroy GetFileSize CreateFileA VirtualQueryEx AreFileApisANSI TlsFree TlsSetValue TlsGetValue TlsAlloc OpenProcess GetCurrentThreadId GetTempFileNameW GetComputerNameW MultiByteToWideChar WideCharToMultiByte GetSystemTime SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime SystemTimeToFileTime FileTimeToSystemTime CompareFileTime GetTimeFormatW GetDateFormatW LocalFree GetCommandLineW GetCurrentProcess GetCurrentProcessId FreeLibrary GlobalMemoryStatusEx GetLastError SetErrorMode Sleep GetSystemInfo GetSystemTimes FormatMessageW LoadLibraryW GetCurrentDirectoryW GetProcessTimes TerminateProcess GetExitCodeProcess GetProcessId TerminateThread SetLastError WaitForSingleObject DuplicateHandle GetModuleHandleA CreateProcessW CreateJobObjectW AssignProcessToJobObject TerminateJobObject CreateToolhelp32Snapshot Process32FirstW Process32NextW SetFilePointer lstrcpyW lstrcmpA GetVolumePathNameW GetVolumeNameForVolumeMountPointW IsBadWritePtr IsBadReadPtr GetDiskFreeSpaceW lstrlenW SetFilePointerEx GetFileType GetFileInformationByHandle VirtualFree VirtualAlloc LocalAlloc CancelIo WaitNamedPipeW CreateNamedPipeW PeekNamedPipe SetNamedPipeHandleState SetHandleInformation FlushFileBuffers ReadFile WriteFile Module32NextW Module32FirstW CreateRemoteThread OpenThread CreateThread RaiseException GetVersionExA OutputDebugStringA GetEnvironmentVariableW GetModuleFileNameA Thread32First Thread32Next GetShortPathNameW GetFullPathNameW VerSetConditionMask GetVersionExW GetLocaleInfoW GetGeoInfoW GetUserGeoID GetThreadLocale ReleaseMutex CreateMutexW FindClose GetFileTime CreateDirectoryW ResumeThread RemoveDirectoryW CreateFileW SetFileAttributesW GetFileAttributesW GetFileAttributesExW DeleteFileW FindFirstFileW LockFileEx UnlockFile HeapCompact DeleteFileA FlushViewOfFile GetFileAttributesA FindNextFileW GetDiskFreeSpaceA GetTempPathA HeapValidate UnlockFileEx LockFile CopyFileW MoveFileW MoveFileExW InterlockedDecrement HeapAlloc HeapFree GetProcessHeap GetModuleFileNameW DeviceIoControl DefineDosDeviceW QueryDosDeviceW MapViewOfFile GetCurrentThread GetTickCount CreateFileMappingW UnmapViewOfFile

user32

ClientToScreen TrackMouseEvent GetDesktopWindow GetParent SetParent GetCursorInfo CreateIconIndirect CreateCursor LoadCursorW GetCursor SetCursorPos GetClipboardFormatNameW NotifyWinEvent SetMenuItemInfoW TrackPopupMenuEx GetMenu MapVirtualKeyW ToUnicode ToAscii GetKeyboardState RegisterClipboardFormatW GetKeyState IsZoomed SetCaretPos HideCaret DestroyCaret CreateCaret GetKeyboardLayout GetAsyncKeyState DestroyCursor AdjustWindowRectEx GetWindowRect SetWindowTextW InvalidateRect GetUpdateRect EndPaint BeginPaint SetForegroundWindow GetForegroundWindow ReleaseCapture SetCapture GetCapture SetFocus IsIconic IsWindowVisible SetWindowPlacement GetWindowPlacement SetWindowPos MoveWindow FlashWindowEx IsChild MessageBeep GetCaretBlinkTime GetDoubleClickTime CharNextExA CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW SetWindowLongW GetWindowLongW KillTimer SetTimer MsgWaitForMultipleObjectsEx GetQueueStatus UnregisterClassW RegisterClassW PeekMessageW DispatchMessageW TranslateMessage FindWindowA SendMessageA MessageBoxW GetUserObjectInformationW GetProcessWindowStation EnumWindows GetMessageExtraInfo GetWindowTextW RealGetWindowClassW GetAncestor GetKeyboardLayoutList GetClassInfoW RegisterClassExW GetFocus GetClientRect GetCursorPos ChildWindowFromPointEx GetSysColorBrush LoadImageW GetMonitorInfoW EnumDisplayMonitors LoadIconW SetClipboardViewer ChangeClipboardChain SetCursor DrawIconEx ReleaseDC GetClassNameW EnumChildWindows GetDC ScreenToClient GetIconInfo GetSystemMenu EnableMenuItem ShowWindow PostMessageW SetWindowRgn SystemParametersInfoW GetSysColor DestroyIcon GetWindowThreadProcessId GetSystemMetrics DestroyWindow CreateWindowExW DefWindowProcW RegisterWindowMessageW SendMessageW

gdi32

SelectClipRgn GetRegionData CreateRectRgn CombineRgn CreateDIBSection SelectObject GetDIBits DeleteObject DeleteDC SetGraphicsMode CreateBitmap ExtTextOutW SetWorldTransform SetTextAlign SetTextColor GdiFlush SetBkMode GetCharABCWidthsI GetTextExtentPoint32W GetOutlineTextMetricsW GetGlyphOutlineW GetCharABCWidthsFloatW GetCharABCWidthsW GetBitmapBits SwapBuffers SetPixelFormat GetPixelFormat DescribePixelFormat ChoosePixelFormat GetTextFaceW GetObjectW GetTextMetricsW RemoveFontMemResourceEx AddFontMemResourceEx RemoveFontResourceExW AddFontResourceExW GetStockObject GetFontData CreateFontIndirectW EnumFontFamiliesExW CreateDCW CreateCompatibleBitmap GetDeviceCaps OffsetRgn BitBlt CreateCompatibleDC

shell32

ShellExecuteW ShellExecuteExW ord51 CommandLineToArgvW SHGetFolderPathW Shell_NotifyIconW ExtractIconExW SHGetSpecialFolderPathW SHGetFileInfoW SHGetPathFromIDListW SHBrowseForFolderW SHGetMalloc

ole32

OleGetClipboard OleSetClipboard OleUninitialize OleInitialize RevokeDragDrop RegisterDragDrop CoLockObjectExternal StringFromCLSID CoInitialize CoCreateGuid CoSetProxyBlanket CoCreateInstance CoInitializeSecurity CoInitializeEx CoUninitialize CoTaskMemFree OleFlushClipboard OleIsCurrentClipboard ReleaseStgMedium CoGetMalloc CoTaskMemAlloc StringFromGUID2 DoDragDrop

oleaut32

VariantChangeType SysAllocStringLen VariantInit SystemTimeToVariantTime SysStringLen SysFreeString SysAllocString VariantClear

advapi32

QueryServiceConfig2W LookupPrivilegeValueA GetUserNameW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW CreateProcessAsUserW DuplicateTokenEx RegCloseKey RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegEnumKeyExW RegEnumValueW RegOpenKeyExW RegQueryInfoKeyW RegSetValueExW DeregisterEventSource RegisterEventSourceW ReportEventW RegQueryValueExW ChangeServiceConfigW ChangeServiceConfig2W CloseServiceHandle ControlService RegFlushKey CryptGenRandom CryptEnumProvidersW CryptSignHashW CryptDestroyHash CryptCreateHash CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptDestroyKey CryptReleaseContext CryptAcquireContextW SetNamedSecurityInfoW GetNamedSecurityInfoW GetExplicitEntriesFromAclW RegSetKeySecurity RegGetKeySecurity GetAce SetEntriesInAclW CheckTokenMembership SetSecurityDescriptorOwner SetSecurityDescriptorDacl IsValidSecurityDescriptor InitializeSecurityDescriptor InitializeAcl FreeSid AllocateAndInitializeSid ConvertStringSidToSidW ConvertSidToStringSidW LookupAccountNameW LookupAccountSidW CopySid GetLengthSid IsValidSid GetTokenInformation StartServiceW QueryServiceStatusEx QueryServiceStatus CreateServiceW QueryServiceConfigW OpenServiceW OpenSCManagerW EnumServicesStatusW EnumDependentServicesW DeleteService GetSecurityInfo

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

userenv

DestroyEnvironmentBlock CreateEnvironmentBlock GetProfilesDirectoryW

wininet

InternetGetConnectedState

psapi

GetModuleFileNameExW GetProcessImageFileNameW GetModuleInformation GetModuleBaseNameW

iphlpapi

GetUdpTable GetTcpTable

shlwapi

PathUnExpandEnvStringsW PathUnquoteSpacesW PathSearchAndQualifyW PathRemoveFileSpecW PathRemoveBlanksW StrFormatByteSizeW StrDupW StrCmpIW PathRemoveBackslashW PathRemoveArgsW PathQuoteSpacesW PathIsNetworkPathW PathIsRelativeW PathIsPrefixW PathIsDirectoryW PathGetDriveNumberW PathGetArgsW PathFindFileNameW PathFindExtensionW AssocQueryStringW PathAddBackslashW PathAppendW PathFileExistsW

ntdll

NtQueryVirtualMemory RtlUnwind memcmp islower isupper isdigit wcsncmp wcstombs strpbrk strtol strstr atoi _stricmp wcsstr _strnicmp strtoul strspn strcmp strrchr strncpy qsort NtQueryKey NtCreateKey NtSetValueKey NtDeleteValueKey NtDeleteKey NtOpenKey isalnum _wtoi64 strcspn _wcsicmp memchr tolower isspace toupper wcsrchr floor strchr ceil strncmp memset memcpy memmove bsearch NtUnloadDriver NtLoadDriver RtlInitUnicodeString wcschr

mpr

WNetGetConnectionW

wsock32

getsockname getsockopt ntohs WSAStartup WSACleanup WSAGetLastError recv send WSASetLastError accept bind closesocket connect listen setsockopt socket getpeername htons __WSAFDIsSet select htonl recvfrom shutdown sendto gethostname WSAAsyncSelect inet_ntoa

wtsapi32

WTSEnumerateSessionsW

crypt32

CertGetCertificateContextProperty CryptDecodeObject CryptMsgClose CryptMsgGetParam CertCloseStore CertFindCertificateInStore CertFreeCertificateContext CertNameToStrW CertGetNameStringW CryptQueryObject CertOpenStore CertEnumCertificatesInStore CertDuplicateCertificateContext

wintrust

CryptCATAdminCalcHashFromFileHandle CryptCATAdminEnumCatalogFromHash CryptCATAdminReleaseContext CryptCATCatalogInfoFromContext CryptCATAdminReleaseCatalogContext WinVerifyTrust CryptCATAdminAcquireContext

opengl32

glClearDepth glClearColor glClear glColorMask glCopyTexImage2D glCopyTexSubImage2D glCullFace glDeleteTextures glDepthFunc glDepthMask glDepthRange glDisable glDrawArrays glDrawElements glEnable glFinish glFlush glFrontFace glGenTextures glGetBooleanv glGetError glGetFloatv glBlendFunc glClearStencil glBindTexture glGetIntegerv glGetString glGetTexParameterfv glGetTexParameteriv glHint glIsEnabled glIsTexture glLineWidth glPixelStorei glPolygonOffset glReadPixels glScissor glStencilFunc glStencilMask glStencilOp glTexImage2D glTexParameterf glTexParameterfv glTexParameteri glTexParameteriv glTexSubImage2D glViewport

imm32

ImmGetVirtualKey ImmGetDefaultIMEWnd ImmGetContext ImmReleaseContext ImmAssociateContext ImmGetCompositionStringW ImmNotifyIME ImmSetCompositionWindow ImmSetCandidateWindow

Name

.text

Size

12.5MB

Virtual Size

12.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.5MB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

162KB

Virtual Size

318KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

13B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.qtmetad

Size

1024B

Virtual Size

588B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

1024B

Virtual Size

576B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

292B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5.1MB

Virtual Size

5.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

595KB

Virtual Size

595KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=43, id=241, version=40116,

count=194, id=243, version=40116,

count=40, id=242, version=40116,

count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=5, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=6, id=199, version=41118,

count=22, id=259, version=24123,

count=71, id=261, version=24123,

count=33, id=260, version=24123,

count=11, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=130, id=260, productName=VS2015 UPD3 build 24213, version=24213,

count=2, id=264, version=24215,

count=768, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,

count=47, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=4, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=833, id=1, productName=Unmarked objects,

count=683, id=261, productName=VS2015 UPD3 build 24213, version=24213,

count=322, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,

count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=2, id=151,

count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,

default.exe

IMPHASH 8acb34bed3caa60cae3f08f75d53f727
SHA256 516475caf3fbd1f0c0283572550528f1f9e7b502dce5fb6b89d40f366a150bfd
MD5 f42abb7569dbc2ff5faa7e078cb71476
SHA1 04530a6165fc29ab536bab1be16f6b87c46288e6
SHA512 3277534a02435538e144dea3476416e1d9117fcddef3dcb4379b82f33516c3e87767c3b0d2b880e61a3d803b583c96d772a0bdeecbfc109fe66444e9b29216af
SSDEEP 6144:zia1vcaEaA+HPsISAzG44DQFu/U3buRKlemZ9DnGAeWBES+:zHctWvVSAx4DQFu/U3buRKlemZ9DnGAn
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Detects Zeppelin payload
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

198184

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExA RegOpenKeyExA RegCloseKey RegSetValueExW RegSetValueExA RegQueryValueExW RegQueryValueExA RegOpenKeyExW RegOpenKeyExA RegEnumKeyExA RegDeleteValueA RegDeleteKeyA RegCreateKeyExW RegCreateKeyExA RegCloseKey OpenProcessToken LookupPrivilegeValueA AdjustTokenPrivileges

user32

GetKeyboardType DestroyWindow LoadStringA MessageBoxA CharNextA TranslateMessage PeekMessageA MsgWaitForMultipleObjects MessageBoxA LoadStringA GetSystemMetrics DispatchMessageA CharNextW CharLowerBuffW CharNextA CharLowerBuffA CharLowerA CharUpperA CharToOemA

kernel32

GetACP Sleep VirtualFree VirtualAlloc GetTickCount QueryPerformanceCounter GetCurrentThreadId InterlockedDecrement InterlockedIncrement VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenA lstrcpynA LoadLibraryExA GetThreadLocale GetStartupInfoA GetProcAddress GetModuleHandleA GetModuleFileNameA GetLocaleInfoA GetCommandLineA FreeLibrary FindFirstFileA FindClose ExitProcess ExitThread CreateThread WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle TlsSetValue TlsGetValue LocalAlloc GetModuleHandleA WriteProcessMemory WriteFile WaitForSingleObject VirtualQuery VirtualAllocEx TerminateThread TerminateProcess SetLastError SetFileTime SetFilePointer SetFileAttributesW SetEvent SetEndOfFile ResumeThread ResetEvent ReadFile OpenProcess MoveFileW LoadLibraryA LeaveCriticalSection InitializeCriticalSection GlobalUnlock GlobalReAlloc GlobalHandle GlobalLock GlobalFree GlobalAlloc GetVersionExA GetUserDefaultLangID GetTickCount GetThreadLocale GetStdHandle GetProcAddress GetModuleHandleA GetModuleFileNameW GetModuleFileNameA GetLocaleInfoA GetLocalTime GetLastError GetFullPathNameA GetFileAttributesW GetFileAttributesA GetExitCodeThread GetEnvironmentVariableW GetEnvironmentVariableA GetDriveTypeA GetDiskFreeSpaceA GetDateFormatA GetCurrentThreadId GetCurrentProcess GetCommandLineW GetCPInfo InterlockedIncrement InterlockedExchange InterlockedDecrement FreeLibrary FormatMessageA FindNextFileW FindFirstFileW FindClose FileTimeToLocalFileTime FileTimeToDosDateTime ExitThread ExitProcess EnumCalendarInfoA EnterCriticalSection DuplicateHandle DeleteFileW DeleteCriticalSection CreateThread CreateRemoteThread CreateProcessW CreateProcessA CreatePipe CreateFileW CreateFileA CreateEventA CreateDirectoryW CopyFileW CompareStringW CompareStringA CloseHandle Sleep

mpr

WNetOpenEnumW WNetEnumResourceW WNetCloseEnum

wininet

InternetReadFile InternetOpenUrlA InternetOpenA InternetConnectA InternetCloseHandle HttpSendRequestA HttpOpenRequestA HttpAddRequestHeadersA

shell32

ShellExecuteW SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetMalloc

Name

.text

Size

181KB

Virtual Size

180KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

12B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

efd97b1038e063779fb32a3ab35adc481679a5c6c8e3f4f69c44987ff08b6ea4.js

SHA256 efd97b1038e063779fb32a3ab35adc481679a5c6c8e3f4f69c44987ff08b6ea4
MD5 4339e3b6d6cf2603cc780e8e032e82f6
SHA1 195c244a037815ec13d469e3b28e62a0e10bed56
SHA512 a87c47c998f667eb8ac280f4e6dc3df182d721c44267c68ee042c17e8168115e38f2e1d59c6928ca595bb93b3bfd112cbd7bffb0ee6ff8ca81f469056f26ff87
SSDEEP 12288:obIkK9q/oPvPrNAuPfZpAvJvqWTe57Zb8Pyfdyr4G8HdsNhAwpC:obDcnrNtPfZpYvqWTeDQIdyrb8HqhNpC
MD5 SHA1 SHA512 SSDEEP

good.exe

SHA256 90d3580e187b631a9150bbb4a640b84c6fa990437febdc42f687cc7b3ce1deac
MD5 b034e2a7cd76b757b7c62ce514b378b4
SHA1 27d15f36cb5e3338a19a7f6441ece58439f830f2
SHA512 1cea6503cf244e1efb6ef68994a723f549126fc89ef8a38c76cdcc050d2a4524e96402591d1d150d927a12dcac81084a8275a929cf6e5933fdf62502c9c84385
SSDEEP 3072:VMb/kbqjO/3FxV8l8wiEXHPV9r99rWhzAxH7wpjv4z:VMxo3Z8BvV9rL6h2H7wJ4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

42852240

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

out.upx

SHA256 7f12d8502c88112a227dd460e61a24f5c363f4bb8fec0f72ed432ead21842fb6
MD5 d501947d4aa37f0b20d0280027f88d7a
SHA1 d4d0e6c07e2d0148b7ae9894470b6a861670bcc4
SHA512 0540d023841600687769c998f268f14c058e30e97224cec05de1a9942a55d2fa71697e80e55511e4be7d65154a8ddd103058dcca6f80b6e53f505d0acf3269aa
SSDEEP 6144:kQq1GtUiiCWWipL2LNC1PL94LuAhLR94:k6WbpCLNaP54R3
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

56573

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

infected dot net installer.exe

SHA256 1371b24900cbd474a6bc2804f0e79dbd7b0429368be6190f276db912d73eb104
MD5 6eb2b081d12ad12c2ce50da34438651d
SHA1 2092c0733ec3a3c514568b6009ee53b9d2ad8dc4
SHA512 881d14d87a7f254292f962181eee79137f612d13994ff4da0eb3d86b0217bcbac39e04778c66d1e4c3df8a5b934cbb6130b43c0d4f3915d5e8471e9314d82c1b
SSDEEP 49152:znsHyjtk2MYC5GDbQ2cRQh9GexmCxBxVV56CmWQax:znsmtk2aj2cROGom6mGvx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

633728

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

615KB

Virtual Size

614KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

57B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

oof.exe

SHA256 8f9067f2bd4a374539a40fddb8915600c9fd6ba3e5db20cbddcb3c5f22d9da44
MD5 0760d43d4adebe20fa0b5e5a7bca1714
SHA1 a0a9dae5e9be39bca31021dd9cf565fcdefb8474
SHA512 7e60c2726711bb8e822375f93cfb9ced7d172f3f0ae07041cbeea8c4cdb45488d1de90ee77dfef52aa86722a5dcbe521d1affeace3aec8811e851f693d74ef77
SSDEEP 12288:9TEUsvsVEcwaFNaxr7IwFnm1p7BmC10sHo0AhHL:9oBvRcxuxrksqRNI0i
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

376064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

363KB

Virtual Size

363KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

25KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

258KB

Virtual Size

258KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

ou55sg33s_1.exe

SHA256 a9963808a1a358d6ee26ab88bdab4add50512de1a863aa79937815444ee64da8
MD5 347d7700eb4a4537df6bb7492ca21702
SHA1 983189dab4b523e19f8efd35eee4d7d43d84aca2
SHA512 5efb1bce5b5fe74c886126c7bf3627628842a73d31550aee61b71e462b0cc4256b07ae2dc8c207917c5e134c15b8b1d5f3bbbd76724a9b12188f32ba48c25ac9
SSDEEP 12288:Y71ezsKspcx7aSekHeX/BoVrWyrl/XYUx58wT7tRw:IYzsDyAS/HeyWql/XYUz8wTDw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

ModiLoader Second Stage
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

205740

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

202KB

Virtual Size

202KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

12B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

384KB

Virtual Size

384KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

update.exe

IMPHASH eb97e4fc5518ac300a92a11673825e0b
SHA256 3e32145dca0843c6d5258129821afaaeb653ddef7982912fe85ad4b326807402
MD5 c5c8d4f5d9f26bac32d43854af721fb3
SHA1 e4119a28baa102a28ff9b681f6bbb0275c9627c7
SHA512 09f39bccb210f96788193d597463c75d3213afd21ed93ac8c843f150d7cb8630f941f54cd8737cc88177dadeb479e8181b40a7f5219e40c948ff18d1955b4828
SSDEEP 196608:/CKcbhJ7Th2zINlZGI4KXt8ioZR4KVl8e/BGZfsKu97K1RdF4N/55H+oHVdxv:6f/xG+ifj4KVBZGZfKMP4X5eGXxv
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

AutoIT Executable

AutoIT scripts compiled to PE executables.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

163850

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

wsock32

WSACleanup socket inet_ntoa setsockopt ntohs recvfrom ioctlsocket htons WSAStartup __WSAFDIsSet select accept listen bind closesocket WSAGetLastError recv sendto send inet_addr gethostbyname gethostname connect

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

winmm

timeGetTime waveOutSetVolume mciSendStringW

comctl32

ImageList_ReplaceIcon ImageList_Destroy ImageList_Remove ImageList_SetDragCursorImage ImageList_BeginDrag ImageList_DragEnter ImageList_DragLeave ImageList_EndDrag ImageList_DragMove InitCommonControlsEx ImageList_Create

mpr

WNetUseConnectionW WNetCancelConnection2W WNetGetConnectionW WNetAddConnection2W

wininet

InternetQueryDataAvailable InternetCloseHandle InternetOpenW InternetSetOptionW InternetCrackUrlW HttpQueryInfoW InternetQueryOptionW HttpOpenRequestW HttpSendRequestW FtpOpenFileW FtpGetFileSize InternetOpenUrlW InternetReadFile InternetConnectW

psapi

GetProcessMemoryInfo

iphlpapi

IcmpCreateFile IcmpCloseHandle IcmpSendEcho

userenv

DestroyEnvironmentBlock UnloadUserProfile CreateEnvironmentBlock LoadUserProfileW

uxtheme

IsThemeActive

kernel32

DuplicateHandle CreateThread WaitForSingleObject HeapAlloc GetProcessHeap HeapFree Sleep GetCurrentThreadId MultiByteToWideChar MulDiv GetVersionExW IsWow64Process GetSystemInfo FreeLibrary LoadLibraryA GetProcAddress SetErrorMode GetModuleFileNameW WideCharToMultiByte lstrcpyW lstrlenW GetModuleHandleW QueryPerformanceCounter VirtualFreeEx OpenProcess VirtualAllocEx WriteProcessMemory ReadProcessMemory CreateFileW SetFilePointerEx SetEndOfFile ReadFile WriteFile FlushFileBuffers TerminateProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW SetFileTime GetFileAttributesW FindFirstFileW SetCurrentDirectoryW GetLongPathNameW GetShortPathNameW DeleteFileW FindNextFileW CopyFileExW MoveFileW CreateDirectoryW RemoveDirectoryW SetSystemPowerState QueryPerformanceFrequency FindResourceW LoadResource LockResource SizeofResource EnumResourceNamesW OutputDebugStringW GetTempPathW GetTempFileNameW DeviceIoControl GetLocalTime CompareStringW GetCurrentProcess EnterCriticalSection LeaveCriticalSection GetStdHandle CreatePipe InterlockedExchange TerminateThread LoadLibraryExW FindResourceExW CopyFileW VirtualFree FormatMessageW GetExitCodeProcess GetPrivateProfileStringW WritePrivateProfileStringW GetPrivateProfileSectionW WritePrivateProfileSectionW GetPrivateProfileSectionNamesW FileTimeToLocalFileTime FileTimeToSystemTime SystemTimeToFileTime LocalFileTimeToFileTime GetDriveTypeW GetDiskFreeSpaceExW GetDiskFreeSpaceW GetVolumeInformationW SetVolumeLabelW CreateHardLinkW SetFileAttributesW CreateEventW SetEvent GetEnvironmentVariableW SetEnvironmentVariableW GlobalLock GlobalUnlock GlobalAlloc GetFileSize GlobalFree GlobalMemoryStatusEx Beep GetSystemDirectoryW HeapReAlloc HeapSize GetComputerNameW GetWindowsDirectoryW GetCurrentProcessId GetProcessIoCounters CreateProcessW GetProcessId SetPriorityClass LoadLibraryW VirtualAlloc IsDebuggerPresent GetCurrentDirectoryW lstrcmpiW DecodePointer GetLastError RaiseException InitializeCriticalSectionAndSpinCount DeleteCriticalSection InterlockedDecrement InterlockedIncrement GetCurrentThread CloseHandle GetFullPathNameW EncodePointer ExitProcess GetModuleHandleExW ExitThread GetSystemTimeAsFileTime ResumeThread GetCommandLineW IsProcessorFeaturePresent IsValidCodePage GetACP GetOEMCP GetCPInfo SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetStringTypeW SetStdHandle GetFileType GetConsoleCP GetConsoleMode RtlUnwind ReadConsoleW GetTimeZoneInformation GetDateFormatW GetTimeFormatW LCMapStringW GetEnvironmentStringsW FreeEnvironmentStringsW WriteConsoleW FindClose SetEnvironmentVariableA

user32

AdjustWindowRectEx CopyImage SetWindowPos GetCursorInfo RegisterHotKey ClientToScreen GetKeyboardLayoutNameW IsCharAlphaW IsCharAlphaNumericW IsCharLowerW IsCharUpperW GetMenuStringW GetSubMenu GetCaretPos IsZoomed MonitorFromPoint GetMonitorInfoW SetWindowLongW SetLayeredWindowAttributes FlashWindow GetClassLongW TranslateAcceleratorW IsDialogMessageW GetSysColor InflateRect DrawFocusRect DrawTextW FrameRect DrawFrameControl FillRect PtInRect DestroyAcceleratorTable CreateAcceleratorTableW SetCursor GetWindowDC GetSystemMetrics GetActiveWindow CharNextW wsprintfW RedrawWindow DrawMenuBar DestroyMenu SetMenu GetWindowTextLengthW CreateMenu IsDlgButtonChecked DefDlgProcW CallWindowProcW ReleaseCapture SetCapture CreateIconFromResourceEx mouse_event ExitWindowsEx SetActiveWindow FindWindowExW EnumThreadWindows SetMenuDefaultItem InsertMenuItemW IsMenu TrackPopupMenuEx GetCursorPos DeleteMenu SetRect GetMenuItemID GetMenuItemCount SetMenuItemInfoW GetMenuItemInfoW SetForegroundWindow IsIconic FindWindowW MonitorFromRect keybd_event SendInput GetAsyncKeyState SetKeyboardState GetKeyboardState GetKeyState VkKeyScanW LoadStringW DialogBoxParamW MessageBeep EndDialog SendDlgItemMessageW GetDlgItem SetWindowTextW CopyRect ReleaseDC GetDC EndPaint BeginPaint GetClientRect GetMenu DestroyWindow EnumWindows GetDesktopWindow IsWindow IsWindowEnabled IsWindowVisible EnableWindow InvalidateRect GetWindowLongW GetWindowThreadProcessId AttachThreadInput GetFocus GetWindowTextW ScreenToClient SendMessageTimeoutW EnumChildWindows CharUpperBuffW GetParent GetDlgCtrlID SendMessageW MapVirtualKeyW PostMessageW GetWindowRect SetUserObjectSecurity CloseDesktop CloseWindowStation OpenDesktopW SetProcessWindowStation GetProcessWindowStation OpenWindowStationW GetUserObjectSecurity MessageBoxW DefWindowProcW SetClipboardData EmptyClipboard CountClipboardFormats CloseClipboard GetClipboardData IsClipboardFormatAvailable OpenClipboard BlockInput GetMessageW LockWindowUpdate DispatchMessageW TranslateMessage PeekMessageW UnregisterHotKey CheckMenuRadioItem CharLowerBuffW MoveWindow SetFocus PostQuitMessage KillTimer CreatePopupMenu RegisterWindowMessageW SetTimer ShowWindow CreateWindowExW RegisterClassExW LoadIconW LoadCursorW GetSysColorBrush GetForegroundWindow MessageBoxA DestroyIcon SystemParametersInfoW LoadImageW GetClassNameW

gdi32

StrokePath DeleteObject GetTextExtentPoint32W ExtCreatePen GetDeviceCaps EndPath SetPixel CloseFigure CreateCompatibleBitmap CreateCompatibleDC SelectObject StretchBlt GetDIBits LineTo AngleArc MoveToEx Ellipse DeleteDC GetPixel CreateDCW GetStockObject GetTextFaceW CreateFontW SetTextColor PolyDraw BeginPath Rectangle SetViewportOrgEx GetObjectW SetBkMode RoundRect SetBkColor CreatePen CreateSolidBrush StrokeAndFillPath

comdlg32

GetOpenFileNameW GetSaveFileNameW

advapi32

GetAce RegEnumValueW RegDeleteValueW RegDeleteKeyW RegEnumKeyExW RegSetValueExW RegOpenKeyExW RegCloseKey RegQueryValueExW RegConnectRegistryW InitializeSecurityDescriptor InitializeAcl AdjustTokenPrivileges OpenThreadToken OpenProcessToken LookupPrivilegeValueW DuplicateTokenEx CreateProcessAsUserW CreateProcessWithLogonW GetLengthSid CopySid LogonUserW AllocateAndInitializeSid CheckTokenMembership RegCreateKeyExW FreeSid GetTokenInformation GetSecurityDescriptorDacl GetAclInformation AddAce SetSecurityDescriptorDacl GetUserNameW InitiateSystemShutdownExW

shell32

DragQueryPoint ShellExecuteExW DragQueryFileW SHEmptyRecycleBinW SHGetPathFromIDListW SHBrowseForFolderW SHCreateShellItem SHGetDesktopFolder SHGetSpecialFolderLocation SHGetFolderPathW SHFileOperationW ExtractIconExW Shell_NotifyIconW ShellExecuteW DragFinish

ole32

CoTaskMemAlloc CoTaskMemFree CLSIDFromString ProgIDFromCLSID CLSIDFromProgID OleSetMenuDescriptor MkParseDisplayName OleSetContainedObject CoCreateInstance IIDFromString StringFromGUID2 CreateStreamOnHGlobal OleInitialize OleUninitialize CoInitialize CoUninitialize GetRunningObjectTable CoGetInstanceFromFile CoGetObject CoSetProxyBlanket CoCreateInstanceEx CoInitializeSecurity

oleaut32

LoadTypeLibEx VariantCopyInd SysReAllocString SysFreeString SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayUnaccessData SafeArrayAccessData SafeArrayAllocData SafeArrayAllocDescriptorEx SafeArrayCreateVector RegisterTypeLi CreateStdDispatch DispCallFunc VariantChangeType SysStringLen VariantTimeToSystemTime VarR8FromDec SafeArrayGetVartype VariantCopy VariantClear OleLoadPicture QueryPathOfRegTypeLi RegisterTypeLibForUser UnRegisterTypeLibForUser UnRegisterTypeLi CreateDispTypeInfo SysAllocString VariantInit

vir1.xls

SHA256 7a5d5f4ceb3c815d6fb882777d0859b9757e27edd5a95eb1c2b88dc438d09c92
MD5 f5ec41ec42ebdec9404692dde8fb9d15
SHA1 39f10e1ea5153fa70be025a2d392dcf62966412e
SHA512 359fddc66f069137e030d2a039ddcfc76ab0e22769ff58f3a0571bae81fb94f87aed23c995eeab545c578e065339f3c1ea2b0623d33835f44054672f717f9952
SSDEEP 6144:4ZOljkO5kq4v/+4K+B0H4SJQ7CAW/H/E1P3zTscM:4ZOWOP4OB+B0YyozTscM
MD5 SHA1 SHA512 SSDEEP

office2007

xNet.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5d9c2b1822bcaa71ddeaa5426d4312d8e174766ae8864c7add29d7f44cea87f2
MD5 bf1f76644bddd20339548ebacf7a48eb
SHA1 38114702114105eb3df3f74bf4c68ef7db436f47
SHA512 76132c9e29a0a3054cd41c56d5184951d392a2abd1995e14b34c40f14b154914a6990c107e7fcf4139344759ae6048e9ecf0bdaf0447c1cd589dfacbf901b7c5
SSDEEP 3072:sCMhzHWHfyqxjqCgRGAQIO7ScwpY3wisz0YsXhqnV+xnEd4:sCM52n4RSVPwIhqnV+xnEd
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

108010

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

Sharing

General

Malware Config

Extracted

Signatures

File Explorer

JaffaCakes118_e446bd97230671b6e38682ec9f3da7527c18dbd555efc7f27a52d144cf54edcc

1.bin/1.bin

msvcrt

kernel32

user32

gdi32

comctl32

shell32

winmm

ole32

shlwapi

generic

2019-09-02_22-41-10.exe

kernel32

advapi32

generic

31.exe

msvcrt

kernel32

user32

gdi32

comctl32

shell32

winmm

ole32

shlwapi

generic

3DMark 11 Advanced Edition.exe

kernel32

gdiplus

generic

5da0116af495e6d8af7241da9b8281d918b9ff9a98a3deab4cca1aec1e456c18

generic

Archive.zip__ccacaxs2tbz2t6ob3e.exe

kernel32

user32

advapi32

shell32

ole32

oleaut32

wininet

urlmon

rpcrt4

generic

CVE-2018-15982_PoC.swf

CVWSHSetup[1].bin/WSHSetup[1].exe

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

gdiplus

imm32

comctl32

winmm

urlmon

msacm32

netapi32

iphlpapi

avifil32

wsnmp32

d2d1

dwrite

generic

DiskInternals_Uneraser_v5_keygen.exe

kernel32

gdiplus

generic

ForceOp 2.8.7 - By RaiSence.exe

kernel32

gdiplus

#/power.exe

#/sant.exe

#/ufx.exe

#/va.exe