a9bae5620a2c794a3584ebbd6138d9a1d6ff5ecbba038db4d25b5d12bc9cafa9

Sharing

Copy URL Twitter E-mail

General

Target
a9bae5620a2c794a3584ebbd6138d9a1d6ff5ecbba038db4d25b5d12bc9cafa9
Size 2.9MB
Sample260806-vmwdhafp21
SHA256 a9bae5620a2c794a3584ebbd6138d9a1d6ff5ecbba038db4d25b5d12bc9cafa9
MD5 42672dae5e4da239b4b1cb94d52d2af9
SHA1 ae16319c7093a9be6d38562344a452e574390999
SHA512 67e53b1b083c2b426fd40659cdb1bb06904c452e2e8fb8c78c168098049a3cc8985319d78575e51f98e8e95e4b8e86d5ce9c13f5ca81dda6d55e6f2e6f512c5f
SSDEEP 24576:uZd+G5QxnNSXSqKWn2WvBPCqGzfQ9P0jJKfDzylke7nNDQEyR:S+NnNSmgPCqYcPuoaljnND2R
TLSH
T1BFD586BD61995212C1B240308E75911BC95F2C510F36E8BB6FD03FAEC522789B7F3AA5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
a9bae5620a2c794a3584ebbd6138d9a1d6ff5ecbba038db4d25b5d12bc9cafa9

File Explorer

a9bae5620a2c794a3584ebbd6138d9a1d6ff5ecbba038db4d25b5d12bc9cafa9

.exe 2.9MB

a9bae5620a2c794a3584ebbd6138d9a1d6ff5ecbba038db4d25b5d12bc9cafa9

IMPHASH f8b36f0623437284a56538ef372b7ba3
SHA256 a9bae5620a2c794a3584ebbd6138d9a1d6ff5ecbba038db4d25b5d12bc9cafa9
MD5 42672dae5e4da239b4b1cb94d52d2af9
SHA1 ae16319c7093a9be6d38562344a452e574390999
SHA512 67e53b1b083c2b426fd40659cdb1bb06904c452e2e8fb8c78c168098049a3cc8985319d78575e51f98e8e95e4b8e86d5ce9c13f5ca81dda6d55e6f2e6f512c5f
SSDEEP 24576:uZd+G5QxnNSXSqKWn2WvBPCqGzfQ9P0jJKfDzylke7nNDQEyR:S+NnNSmgPCqYcPuoaljnND2R
TLSH
T1BFD586BD61995212C1B240308E75911BC95F2C510F36E8BB6FD03FAEC522789B7F3AA5
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

11:21:2a:b2:ae:e2:09:0f:46:ff:35:f3:22:8e:5d:a3:f0:1d:dd:25:bf:77:25:04:23:c7:2b:1b:e1:ae:91:d4

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

SERIALNUMBER=110111-1535991,CN=NetSarang Computer\, Inc.,O=NetSarang Computer\, Inc.,STREET=85 Gwangnaru-ro 56-gil,L=Gwangjin-gu,ST=Seoul,C=KR,1.3.6.1.4.1.311.60.2.1.3=#13024b52,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 12, 2026

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

Serial Number

69:e7:33:da:85:71:84:cf:cb:a4:ca:db

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 17, 2026 - Mar 18, 2027

Subject

CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE

Serial Number

84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4

Issuer

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 15, 2025 - Jan 10, 2037

Subject

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Serial Number

83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f

Issuer

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 16, 2025 - Jul 16, 2041

Subject

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:4a:aa:81:73:66:9c:90:09:54:e4:21:c9:47:eb:c0

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 9, 2020 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

544799

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

F:\TortoiseSVN\NSC8\bin\Release\Xshell.pdb

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

imm32

ImmReleaseContext ImmSetConversionStatus ImmGetContext ImmGetConversionStatus

dhcpcsvc

DhcpRequestParams

nsactivate

NSACTIVATE_IsActivationSkipDaysExpired NSACTIVATE_IsForceShowActivate NSACTIVATE_GetProductBorrowInterval NSACTIVATE_GetProductBorrowPeriod NSACTIVATE_GetCheckoutData NSACTIVATE_GetConcurrentLocalServerInfo ord8 NSACTIVATE_GetActivateMethod NSACTIVATE_IsProductUseConcurrent NSACTIVATE_GetProductLocalServerAddress NSACTIVATE_CheckCheckoutErrorMessageSkip NSACTIVATE_SetCheckoutErrorMessageTime ord3

nslicense

ord33 ord52 ord20 ord23 ord43 ord48 ord41 ord47 ord32

nsprofile2

??1CProfileFolder@@UAE@XZ ?GetFolderSessionFile@@YA?AV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@PBG@Z ?Enumerate@CProfileFolder@@QAEXIIH@Z ?NewFile@CProfileManager@@SAPAVCProfileFile@@PBG0H@Z ?GetAddExt@CProfileFile@@SAPBGXZ ?AddChild@CProfileFolder@@QAEPAU__POSITION@@PAVCProfileItem@@H@Z ?NewInstance@CProfileFile@@SAPAV1@XZ ?FixChildrenPath@CProfileFolder@@QAEXXZ ?Reset@CProfileFolder@@QAEXXZ ?RemoveChild@CProfileFolder@@QAEHPAVCProfileItem@@@Z ?RenameFW@CProfileManager@@SAHPAVCProfileItem@@PBG@Z ?GetCount@CProfileFolder@@QAEHXZ ?IsAncestor@CProfileItem@@QAEHPAVCProfileFolder@@@Z ?IsFolder@CProfileFolder@@UAEHXZ ?GetExtension@CProfileFile@@SA?AV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@XZ ?HasFolderSession@CProfileFolder@@UAEHXZ ?DelFolderSession@CProfileFolder@@UAEHXZ ?GetHead@?$_CTypedPtrList@VCPtrList@@PAVCProfileItem@@@@QAEAAPAVCProfileItem@@XZ ?GetNext@?$_CTypedPtrList@VCPtrList@@PAVCProfileItem@@@@QAEAAPAVCProfileItem@@AAPAU__POSITION@@@Z ?GetAt@?$_CTypedPtrList@VCPtrList@@PAVCProfileItem@@@@QAEAAPAVCProfileItem@@PAU__POSITION@@@Z ??0?$CTypedPtrList@VCPtrList@@PAVCProfileItem@@@@QAE@H@Z ??1?$CTypedPtrList@VCPtrList@@PAVCProfileItem@@@@UAE@XZ ??0CProfileFile@@QAE@XZ ??1CProfileFile@@UAE@XZ ?IsFolder@CProfileFile@@UAEHXZ ?SetExtension@CProfileFile@@SAXPBG@Z ?SetAddExt@CProfileFile@@SAXPBG@Z ?SetNewInstanceProc@CProfileFile@@SAXP6APAV1@XZ@Z ?Sort@CProfileFolder@@QAEXXZ ?DelFolderSession@CProfileFile@@UAEHXZ ?MutualSave@CProfileFile@@UAEHPBGI@Z ?GetNext@CProfileFolder@@QAEPAVCProfileItem@@AAPAU__POSITION@@@Z ?GetHeadPosition@CProfileFolder@@QAEPAU__POSITION@@XZ ??0CProfileFolder@@QAE@XZ ?GetDefaultSessionFile@@YA?AV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@XZ ?Find@CProfileFolder@@QAEPAVCProfileItem@@PBG@Z ?LoadCustomIcon@CProfileFile@@UAEHPAVCImageList@@0PBGAAH@Z ?ReadCustomIcon@CProfileFile@@UAEHPBG@Z ?GetCustomIconIndex@CProfileFile@@UAEHXZ ?GetSessionImageList@CProfileFile@@UAEHPAVCImageList@@0@Z ?HasFolderSession@CProfileFile@@UAEHXZ

nsresource

?OnEraseTabsArea@CNsVisualManagerWindows@@UAEXPAVCDC@@VCRect@@PBVCMFCBaseTabCtrl@@@Z ?OnFillCaptionBarButton@CNsVisualManagerWindows@@UAEKPAVCDC@@PAVCMFCCaptionBar@@VCRect@@HHHHH@Z ?GetToolbarButtonTextColor@CNsVisualManagerWindows@@UAEKPAVCMFCToolBarButton@@W4AFX_BUTTON_STATE@CMFCVisualManager@@@Z ?OnDrawMenuCheck@CNsVisualManagerWindows@@UAEXPAVCDC@@PAVCMFCToolBarMenuButton@@VCRect@@HH@Z ?GetMenuItemTextColor@CNsVisualManagerWindows@@UAEKPAVCMFCToolBarMenuButton@@HH@Z ?GetHighlightedMenuItemTextColor@CNsVisualManagerWindows@@UAEKPAVCMFCToolBarMenuButton@@@Z ?OnHighlightMenuItem@CNsVisualManagerWindows@@UAEXPAVCDC@@PAVCMFCToolBarMenuButton@@VCRect@@AAK@Z ?GetStatusBarPaneTextColor@CNsVisualManagerWindows@@UAEKPAVCMFCStatusBar@@PAVCMFCStatusBarPaneInfo@@@Z ?OnDrawStatusBarPaneBorder@CNsVisualManagerWindows@@UAEXPAVCDC@@PAVCMFCStatusBar@@VCRect@@II@Z ?OnDrawCaptionButton@CNsVisualManagerWindows@@UAEXPAVCDC@@PAVCMFCCaptionButton@@HHHHH@Z ?OnDrawPaneCaption@CNsVisualManagerWindows@@UAEKPAVCDC@@PAVCDockablePane@@HVCRect@@2@Z ?OnDrawSeparator@CNsVisualManagerWindows@@UAEXPAVCDC@@PAVCBasePane@@VCRect@@H@Z ?OnDrawBarGripper@CNsVisualManagerWindows@@UAEXPAVCDC@@VCRect@@HPAVCBasePane@@@Z ?OnDrawMenuBorder@CNsVisualManagerWindows@@UAEXPAVCDC@@PAVCMFCPopupMenu@@VCRect@@@Z ?OnUpdateSystemColors@CNsVisualManagerWindows@@UAEXXZ ?OnDrawPaneBorder@CNsVisualManagerWindows@@UAEXPAVCDC@@PAVCBasePane@@AAVCRect@@@Z ?OnFillButtonInterior@CNsVisualManagerWindows@@UAEXPAVCDC@@PAVCMFCToolBarButton@@VCRect@@W4AFX_BUTTON_STATE@CMFCVisualManager@@@Z ?GetNsThemeColor@CNsVisualManagerWindows@@UAEKPBG0@Z ?OnFillBarBackground@CNsVisualManagerWindows@@UAEXPAVCDC@@PAVCBasePane@@VCRect@@2H@Z ??1CNsVisualManagerWindows@@UAE@XZ ??0CNsVisualManagerWindows@@QAE@XZ ?SetHeight@CNsStatusBar@@UAEXH@Z ?OnDrawPane@CNsStatusBar@@UAEXPAVCDC@@PAVCMFCStatusBarPaneInfo@@@Z ?CalcFixedLayout@CNsStatusBar@@UAE?AVCSize@@HH@Z ?RecalcLayout@CNsStatusBar@@MAEXXZ ?SetPaneWidthByDPI@CNsStatusBar@@QAEXHH@Z ?DoPaint@CNsStatusBar@@MAEXPAVCDC@@@Z ?SetPaneWidth@CNsStatusBar@@QAEXHH@Z ?SetPaneStyle@CNsStatusBar@@QAEXHI@Z ?GetThisMessageMap@CNsStatusBar@@KGPBUAFX_MSGMAP@@XZ ??1CNsStatusBar@@UAE@XZ ??0CNsStatusBar@@QAE@XZ ?GetThisClass@CNsStatusBar@@SGPAUCRuntimeClass@@XZ ?OnDraw@CNsToolBarButton@@MAEXPAVCDC@@ABVCRect@@PAVCMFCToolBarImages@@HHHHH@Z ?OnLButtonDown@CDragDropToolbar@@IAEXIVCPoint@@@Z ??0CNsToolBarButton@@QAE@XZ ?GetThisClass@CNsToolBarButton@@SGPAUCRuntimeClass@@XZ ?OnPaint@CNsReBar@@UAEXXZ ?CalcFixedLayout@CNsReBar@@UAE?AVCSize@@HH@Z ?SaveState@CNsReBar@@UAEHPBGHI@Z ?LoadState@CNsReBar@@UAEHPBGHI@Z ?Serialize@CNsReBar@@MAEXAAVCArchive@@@Z ?GetThisMessageMap@CNsReBar@@KGPBUAFX_MSGMAP@@XZ ??1CNsReBar@@UAE@XZ ??0CNsReBar@@QAE@XZ ?GetThisClass@CNsReBar@@SGPAUCRuntimeClass@@XZ ?OnClick@CNsToolBarMenuButton@@MAEHPAVCWnd@@H@Z ?OnDraw@CNsToolBarMenuButton@@MAEXPAVCDC@@ABVCRect@@PAVCMFCToolBarImages@@HHHHH@Z ??0CNsToolBarMenuButton@@QAE@XZ ?FindStringExact@CNsComboBox@@QAEHHPBG@Z ?SaveState@CNsViewerApp@@UAEHPBGPAVCFrameImpl@@@Z ?LoadState@CNsViewerApp@@UAEHPBGPAVCFrameImpl@@@Z ?OnIdle@CNsViewerApp@@UAEHJ@Z ?LoadIconFromPath@@YAPAUHICON__@@PBG@Z ?InitViewerInstance@CNsViewerApp@@QAEPAVCNsFrameMgr@@AAUNsFrameInfo@@@Z ?GetFirstRunEvent@CNsViewerApp@@QAEPAXV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z ?GetActiveHwnd@CNsFrameMgr@@QAEPAUHWND__@@XZ ?InitKeyMapping@CNsFrameMgr@@QAEXH@Z ??0CNsViewerApp@@QAE@XZ ??1CNsViewerApp@@UAE@XZ ?GetThisMessageMap@CNsViewerApp@@KGPBUAFX_MSGMAP@@XZ ?OnTabFinishDrag@CNsViewerFrame@@MAEXPAVMultiPaneCtrl@@PAVTabCtrl@@PAU_HTAB@@_N@Z ?OnTabXbuttonClicked@CNsViewerFrame@@MAEXPAVMultiPaneCtrl@@PAVTabCtrl@@PAU_HTAB@@VCPoint@@@Z ?OnTabMButtonUp@CNsViewerFrame@@MAEXPAVMultiPaneCtrl@@PAVTabCtrl@@PAU_HTAB@@VCPoint@@@Z ?OnTabRButtonUp@CNsViewerFrame@@MAEXPAVMultiPaneCtrl@@PAVTabCtrl@@PAU_HTAB@@VCPoint@@@Z ?OnTabLButtonDblClk@CNsViewerFrame@@MAEXPAVMultiPaneCtrl@@PAVTabCtrl@@PAU_HTAB@@VCPoint@@@Z ?OnTabLButtonDown@CNsViewerFrame@@MAEXPAVMultiPaneCtrl@@PAVTabCtrl@@PAU_HTAB@@VCPoint@@@Z ?OnTabSelected@CNsViewerFrame@@MAEXPAVMultiPaneCtrl@@PAVTabCtrl@@PAU_HTAB@@@Z ?OnTabAddRButtonClicked@CNsViewerFrame@@MAEXPAVMultiPaneCtrl@@PAVTabCtrl@@PBVCRect@@VCPoint@@@Z ?OnTabAddButtonClicked@CNsViewerFrame@@MAEXPAVMultiPaneCtrl@@PAVTabCtrl@@PBVCRect@@VCPoint@@@Z ?OnTabRestoreButtonClicked@CNsViewerFrame@@MAEXPAVMultiPaneCtrl@@PAVTabCtrl@@PBVCRect@@VCPoint@@@Z ?OnTabMenuButtonClicked@CNsViewerFrame@@MAEXPAVMultiPaneCtrl@@PAVTabCtrl@@PBVCRect@@VCPoint@@@Z ?OnTabPreDestroy@CNsViewerFrame@@MAEXPAVMultiPaneCtrl@@PAVTabCtrl@@PAU_HTAB@@@Z ?OnTabPostCreate@CNsViewerFrame@@MAEXPAVMultiPaneCtrl@@PAVTabCtrl@@PAU_HTAB@@@Z ?DoesNeedtoSyncFocus@CNsViewerFrame@@MAEHXZ ?NotifyTabMenuButtonClicked@CNsViewerFrame@@MAEXXZ ?NotifyTabPreDestroy@CNsViewerFrame@@MAEXPAUHWND__@@@Z ?PostRestoreChildFrame@CNsViewerFrame@@MAEHXZ ?UpdateFocusInTab@CNsViewerFrame@@UAEXXZ ?Create@CNsViewerFrame@@UAEHAAUNsFrameInfo@@PAVCNsFrameMgr@@HH@Z ?UpdateMultiPane@CNsViewerFrame@@UAEXXZ ?SetPaneFactor@CNsViewerFrame@@UAEXPAU_HNODE@@N@Z ?DeleteAllTabInfo@CNsViewerFrame@@UAEXV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z ?SaveTabInfo@CNsViewerFrame@@UAEXV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@PAU_HTAB@@@Z ?SavePaneInfo@CNsViewerFrame@@UAEXV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@PAU_HNODE@@@Z ?SaveTabLayout@CNsViewerFrame@@UAEXPAU_HNODE@@V?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z ?WindowProc@CNsViewerFrame@@UAEJIIJ@Z ?DestroyWindow@CNsViewerFrame@@UAEHXZ ?OnActivate@CNsViewerFrame@@IAEXIPAVCWnd@@H@Z ?PostMessageToAllCoreOfPane@CNsViewerFrame@@QAEJIIJ@Z ?UnLockScreen@CNsViewerFrame@@QAEXXZ ?SetTabUpdateCmdUI@CNsViewerFrame@@QAEXPAUHWND__@@IW4UPDATECMDTYPE@@H@Z ?OnMenuCommand@CNsViewerFrame@@IAEJIJ@Z ?GetTabCountOfPane@CNsViewerFrame@@IAEHPAUHWND__@@H@Z ?DetachToNewWindow@CNsViewerFrame@@QAEHPAUHWND__@@@Z ?MergePanes@CNsViewerFrame@@IAEXXZ ?GetAllCoreHwndOfPaneUnLocked@CNsViewerFrame@@IAEHPAUHWND__@@PAV?$vector@PAUHWND__@@V?$allocator@PAUHWND__@@@std@@@std@@H@Z ?OnLoadTabLayout@CNsViewerFrame@@QAEPAUHWND__@@PAU_HNODE@@PBG1@Z ?AddPane@CNsViewerFrame@@QAEPAU_HNODE@@PAU2@HN@Z ?GetRootPane@CNsViewerFrame@@QAEPAU_HNODE@@XZ ?DeleteAll@CNsViewerFrame@@UAEXXZ ?IsCustomColorToSelectedTab@CNsViewerFrame@@QAE_NXZ ?GetSelectedTabCustomColor@CNsViewerFrame@@QAEKXZ ?SendMessageToAllCoreSameColor@CNsViewerFrame@@QAEJIIJHK@Z ?AttachChildFrame@CNsViewerFrame@@QAEHPAUHWND__@@H@Z ?DividePane@CNsViewerFrame@@IAEXW4DOCKMARKER@@PAUHWND__@@@Z ?LoadReBarState@CNsReBar@@QAEHPBG@Z ?PostMessageToCore@CNsViewerFrame@@QAEJPAUHWND__@@IIJ@Z ?ViewMultipaneFullScreen@CNsViewerFrame@@IAEXPBG@Z ?ViewFullScreen@CNsViewerFrame@@IAEXPBG@Z ?SetFullScreen@CNsViewerFrame@@IAEHIPAUHINSTANCE__@@H@Z ?SetAutoHide@CFSTitleBar@@QAEXH@Z ?SendMessageToCore@CNsViewerFrame@@QAEJPAUHWND__@@IIJ@Z ?GetTabCustomColor@CNsViewerFrame@@IAEKXZ ?IsCustomColor@CNsViewerFrame@@IAEHXZ ?GetTabUpdateCmdUI@CNsViewerFrame@@QAEPAVCUpdateCmdInfo@@PAUHWND__@@I@Z ?OnDrawTabContent@CNsVisualManagerWindows@@UAEXPAVCDC@@VCRect@@HHPBVCMFCBaseTabCtrl@@K@Z ?IsShowTabAddButton@CNsViewerFrame@@IAEHXZ ?SendMessageToHitCore@CNsViewerFrame@@QAEJIIJ@Z ?GetTabText@CNsViewerFrame@@QAE?AV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@PAUHWND__@@H@Z ?GetAllCoreHwndUnLocked@CNsViewerFrame@@IAEHPAV?$vector@PAUHWND__@@V?$allocator@PAUHWND__@@@std@@@std@@PAUHWND__@@@Z ?GetAllCoreHwndNoConnectUnLocked@CNsViewerFrame@@IAEHPAV?$vector@PAUHWND__@@V?$allocator@PAUHWND__@@@std@@@std@@@Z ?SetTabLock@CNsViewerFrame@@QAEXPAUHWND__@@H@Z ?GetHitCoreHwnd@CNsViewerFrame@@QAEPAUHWND__@@XZ ?CreateChildFrameWithOption@CNsViewerFrame@@QAEHAAUNsFrameParam@@H@Z ?StackArrange@CNsViewerFrame@@IAEXXZ ?HorzArrange@CNsViewerFrame@@IAEXXZ ?VertArrange@CNsViewerFrame@@IAEXXZ ?SendMessageToAllCoreOthers@CNsViewerFrame@@QAEJPAUHWND__@@IIJ@Z ?CreateNewFrame@CNsViewerFrame@@QAEPAUHWND__@@AAUNsFrameParam@@H@Z ?SelectNextPane@CNsViewerFrame@@IAEXH@Z ?SelectPrevPane@CNsViewerFrame@@IAEXH@Z ?SelectPrevTab@CNsViewerFrame@@IAEXXZ ?SelectNextTab@CNsViewerFrame@@IAEXXZ ?SelectRecentTab@CNsViewerFrame@@IAEXXZ ?LockScreen@CNsFrameMgr@@QAEXAAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z ?PostMessageToAllViewer@CNsViewerFrame@@QAEJIIJ@Z ?AddSessionGroup@CNsViewerFrame@@UAEXPBG0@Z ?IsLocked@CNsReBar@@QAEHXZ ?Lock@CNsReBar@@QAEHH@Z ?IsHideTabs@CNsViewerFrame@@IAEHXZ ?HideTabs@CNsViewerFrame@@IAEXH@Z ?ToggleViewMenuBar@CNsViewerFrame@@QAEXXZ ?ShowMenuBar@CNsViewerFrame@@QAEXH@Z ?GetPaneCount@CNsViewerFrame@@IAEHXZ ?MoveTabInPaneForTabMgr@CNsViewerFrame@@QAEXPAUHWND__@@0@Z ?MoveTabToOtherPaneForTabMgr@CNsViewerFrame@@QAEXPAUHWND__@@0@Z ?GetViewerFrameCount@CNsViewerFrame@@IAEHXZ ?OnTimer@CNsViewerFrame@@IAEXI@Z ?SelectTab@CNsViewerFrame@@IAEXH@Z ?OnCopyData@CNsViewerFrame@@IAEHPAVCWnd@@PAUtagCOPYDATASTRUCT@@@Z ?OnSize@CNsViewerFrame@@IAEXIHH@Z ?RemoveMainMenuFromSystemMenu@CNsViewerFrame@@QAEXXZ ?PreTranslateMessage@CNsViewerFrame@@UAEHPAUtagMSG@@@Z ?ChangeTabSystemImage@CNsViewerFrame@@IAEXH@Z ?ChangeTabFontbyDPI@CNsViewerFrame@@IAEXXZ ?GetTabDefaultColor@CNsViewerFrame@@IAEKXZ ?OnCmdMsg@CNsViewerFrame@@UAEHIHPAXPAUAFX_CMDHANDLERINFO@@@Z ?OnSetFocus@CNsViewerFrame@@IAEXPAVCWnd@@@Z ?SavePlacement@CNsViewerFrame@@UAEXXZ ?SaveReBarState@CNsReBar@@QAEHPBG@Z ?LoadPlacement@CNsViewerFrame@@UAEXHH@Z ?IsTabLocked@CNsViewerFrame@@QBEHPAUHWND__@@@Z ?PostCommandToCore@CNsViewerFrame@@QAEJPAUHWND__@@I@Z ?RestoreCoreApp@CNsViewerFrame@@QAEHK@Z ?GetBrokenCoreProcessId@CNsViewerFrame@@QAEKXZ ?PostCommandToHitCore@CNsViewerFrame@@QAEJI@Z ?SetCoreInfoToReg@CNsViewerFrame@@IAEXKIV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@K0@Z ?PostMessageToAllCoreOthers@CNsViewerFrame@@QAEJPAUHWND__@@IIJ@Z ?SetTabToolTipText@CNsViewerFrame@@QAEXPAUHWND__@@V?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z ?SetTabText@CNsViewerFrame@@QAEXPAUHWND__@@V?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z ?SetTabCustomColorSelectedCore@CNsViewerFrame@@IAEXPAUHWND__@@_NK@Z ?SetTabImageIndex@CNsViewerFrame@@QAEXPAUHWND__@@H@Z ?GetSelectedCoreHwnd@CNsViewerFrame@@QAEPAUHWND__@@XZ ?GetCoreId@@YAKPAUHWND__@@@Z ?GetRegistryViewerKey@CNsViewerFrame@@IAE?AV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@XZ ?GetViewerId@@YAXPAUHWND__@@AAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z ?GetSelectedCoreId@CNsViewerFrame@@QAEHXZ ?GetRegistryCoreValue@CNsViewerFrame@@IAEKKPBGK@Z ?GetRegistryCoreValue@CNsViewerFrame@@IAE?AV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@KPBG0@Z ?PostCommandToAllCore@CNsViewerFrame@@QAEJI@Z ?GetAllCoreHwnd@CNsViewerFrame@@IAEHPAV?$vector@PAUHWND__@@V?$allocator@PAUHWND__@@@std@@@std@@@Z ?SetText@CFSTitleBar@@QAEXPBG@Z ?GetTabImageIndex@CNsViewerFrame@@QAEHPAUHWND__@@@Z ?SetTabImageList@CNsViewerFrame@@QAEHPAVCImageList@@0H@Z ?AddBar@CNsReBar@@QAEHPAVCWnd@@PBGPAVCBitmap@@K@Z ?AppendMainMenuToSystemMenu@CNsViewerFrame@@QAEXXZ ?MakeTabList@CNsViewerFrame@@QAEXAAV?$CList@VCTabInfo@@AAV1@@@@Z ?SetTabWidthMax@CNsViewerFrame@@IAEXI@Z ?SetTabDefaultColor@CNsViewerFrame@@IAEXK@Z ?SetTabLayoutBottom@CNsViewerFrame@@IAEXH@Z ?ShowTabAddButton@CNsViewerFrame@@IAEXH@Z ?SetTabNumber@CNsViewerFrame@@QAEXHH@Z ?PreCreateWindow@CNsViewerFrame@@UAEHAAUtagCREATESTRUCTW@@@Z ?CreateChildFrame@CNsViewerFrame@@QAEHAAUNsFrameParam@@@Z ?RemoveChildFrame@CNsViewerFrame@@QAEHPAUHWND__@@@Z ?WriteTabLayout@CNsViewerFrame@@UAEXV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z ?SetExitMode@CNsViewerFrame@@QAEXH@Z ?AllBrokenTab@CNsViewerFrame@@QAEHXZ ?HasBrokenTab@CNsViewerFrame@@QAEHXZ ?IsLock@CNsViewerFrame@@QAEHXZ ?GetFrameCount@CNsFrameMgr@@QAEIXZ ?Lock@CNsViewerFrame@@QAEXV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z ?NsChangeTitleColorbyTheme@@YAXPAUHWND__@@@Z ?SetFont@CNsStatusBar@@QAEXPBUtagLOGFONTW@@@Z ?OnCreate@CNsViewerFrame@@IAEHPAUtagCREATESTRUCTW@@@Z ?SetMenuSysImage@CNsVisualManagerWindows@@QAEXXZ ??1CNsViewerFrame@@UAE@XZ ??0CNsViewerFrame@@QAE@XZ ?GetThisMessageMap@CNsViewerFrame@@KGPBUAFX_MSGMAP@@XZ ?AFX_NSREBAR_WM_CONTEXTMENU@@3IA ?GetThisClass@CNsViewerFrame@@SGPAUCRuntimeClass@@XZ ?GetTabFrameColors@CNsVisualManagerWindows@@UAEXPBVCMFCBaseTabCtrl@@AAK11111AAPAVCBrush@@2@Z ?SetCurSel@CNsComboBox@@QAEXH@Z ?ChangeMessage@CNsComboBox@@QAEXPBG@Z ?SetFont@CNsComboBox@@QAEXPAVCFont@@H@Z ?ResetContent@CNsComboBox@@QAEXXZ ?GetLBText@CNsComboBox@@QAEXHAAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z ?Create@CNsComboBox@@QAEHV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@VCRect@@PAVCWnd@@I@Z ?SetIcon@CNsComboBox@@QAEXH@Z ?SetImageList@CNsComboBox@@QAEXPAVCImageList@@@Z ?SetThemeColor@CNsComboBox@@QAEXXZ ?SetHitCoreHwnd@CNsViewerFrame@@QAEXPAUHWND__@@@Z ?GetTabCount@CNsViewerFrame@@QAEHXZ ??0CTabInfo@@QAE@XZ ??4CTabInfo@@QAEAAV0@ABV0@@Z ??1CTabInfo@@UAE@XZ ?GetThisClass@CNsVisualManagerWindows@@SGPAUCRuntimeClass@@XZ ??1CNsThemeHeaderCtrl@@UAE@XZ ??0CNsThemeHeaderCtrl@@QAE@XZ ?IsLightToolbar@CNsVisualManagerWindows@@QAEHXZ ?SelectTab@CNsViewerFrame@@QAEXPAUHWND__@@@Z ?SetImageFilter@CFilterButton@@QAEXHH@Z ?PostMessageToAllViewerOthers@CNsViewerFrame@@QAEJIIJ@Z ??1CFilterButton@@UAE@XZ ??0CFilterButton@@QAE@XZ ?SendMessageToAllCoreConnect@CNsViewerFrame@@QAEJIIJ@Z ?SendMessageToAllCoreVisible@CNsViewerFrame@@QAEJIIJ@Z ?SendMessageToAllViewerOthers@CNsViewerFrame@@QAEJIIJ@Z ?SendMessageToAllCoreOfPane@CNsViewerFrame@@QAEJIIJ@Z ?SendMessageToSelectedCore@CNsViewerFrame@@QAEJIIJ@Z ?PostCommandToSelectedCore@CNsViewerFrame@@QAEJI@Z ?NsSetDarkTheme@@YAXPAUHWND__@@@Z ?OnDragOver@CDragDropToolbar@@MAEKPAVCOleDataObject@@KVCPoint@@@Z ?OnEraseTabsFrame@CNsVisualManagerWindows@@UAEHPAVCDC@@VCRect@@PBVCMFCBaseTabCtrl@@@Z ?IsDockingTabHasBorder@CNsVisualManagerWindows@@UAEHXZ ?OnFillMiniFrameCaption@CNsVisualManagerWindows@@UAEKPAVCDC@@VCRect@@PAVCPaneFrameWnd@@H@Z ?OnDrawMiniFrameBorder@CNsVisualManagerWindows@@UAEXPAVCDC@@PAVCPaneFrameWnd@@VCRect@@2@Z ?OnFillHeaderCtrlBackground@CNsVisualManagerWindows@@UAEXPAVCMFCHeaderCtrl@@PAVCDC@@VCRect@@@Z ?OnDrawHeaderCtrlBorder@CNsVisualManagerWindows@@UAEXPAVCMFCHeaderCtrl@@PAVCDC@@AAVCRect@@HH@Z ?OnDrawPaneDivider@CNsVisualManagerWindows@@UAEXPAVCDC@@PAVCPaneDivider@@VCRect@@H@Z ?OnFillAutoHideButtonBackground@CNsVisualManagerWindows@@UAEXPAVCDC@@VCRect@@PAVCMFCAutoHideButton@@@Z ?OnBeforeRemoveButton@CDragDropToolbar@@MAEHPAVCMFCToolBarButton@@K@Z ?GetThisMessageMap@CDragDropToolbar@@KGPBUAFX_MSGMAP@@XZ ?GetThisClass@CDragDropToolbar@@SGPAUCRuntimeClass@@XZ ??1CDragDropToolbar@@UAE@XZ ??0CDragDropToolbar@@QAE@XZ ?GetColumnWidth@CNsToolBar@@MBEHXZ ?GetRowHeight@CNsToolBar@@MBEHXZ ?LoadToolBarEx@CNsToolBar@@MAEHIAAVCMFCToolBarInfo@@H@Z ?DoPaint@CNsToolBar@@MAEXPAVCDC@@@Z ?WindowProc@CNsToolBar@@MAEJIIJ@Z ?PreTranslateMessage@CNsToolBar@@MAEHPAUtagMSG@@@Z ?OnDrawAutoHideButtonBorder@CNsVisualManagerWindows@@UAEXPAVCDC@@VCRect@@1PAVCMFCAutoHideButton@@@Z ?GetAutoHideButtonTextColor@CNsVisualManagerWindows@@UAEKPAVCMFCAutoHideButton@@@Z ?AFX_NSREBAR_BOTTOM_WM_CONTEXTMENU@@3IA ?GetThis@CNsVisualManagerWindows@@SAPAV1@XZ ?GetThisClass@CNsToolBarMenuButton@@SGPAUCRuntimeClass@@XZ ??1CNsToolBarButton@@UAE@XZ ??0CNsToolBarButton@@QAE@IHPBGHH@Z ??1CNsToolBarMenuButton@@UAE@XZ ??0CNsToolBarMenuButton@@QAE@IPAUHMENU__@@HPBGH@Z ?IsWhiteIcon@CNsVisualManagerWindows@@QAEHPBG@Z ?GetThisMessageMap@CNsToolBar@@KGPBUAFX_MSGMAP@@XZ ??1CNsToolBar@@UAE@XZ ??0CNsToolBar@@QAE@XZ ?GetThisClass@CNsToolBar@@SGPAUCRuntimeClass@@XZ ?PostMessageToSelectedCore@CNsViewerFrame@@QAEJIIJ@Z ?PostMessageToAllCore@CNsViewerFrame@@QAEJIIJ@Z ?OnListSelChange@CNsComboBox@@MAEXXZ ?MeasureItem@CNsComboBox@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z ?OnCommand@CNsComboBox@@MAEHIJ@Z ?DeleteString@CNsComboBoxDropList@@QAEHI@Z ?InsertItem@CNsComboBox@@QAEXPAUtagCOMBOBOXEXITEMW@@@Z ?SetPreviousSelection@CNsComboBoxDropList@@QAEXH@Z ?SetText@CNsComboBox@@QAEXV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z ?GetIcon@CNsComboBoxDropList@@QAEHH@Z ?PreTranslateMessage@CNsComboBox@@MAEHPAUtagMSG@@@Z ?GetEditCtrl@CNsComboBox@@QAEPAVCNsComboBoxEditCtrl@@XZ ?GetCount@CNsComboBox@@QAEHXZ ?GetThisMessageMap@CNsComboBox@@KGPBUAFX_MSGMAP@@XZ ??1CNsComboBox@@UAE@XZ ??0CNsComboBox@@QAE@XZ ?SendMessageToAllCore@CNsViewerFrame@@QAEJIIJ@Z ?OnDrawTab@CNsVisualManagerWindows@@UAEXPAVCDC@@VCRect@@HHPBVCMFCBaseTabCtrl@@@Z ?OnDrawCaptionButtonIcon@CNsVisualManagerWindows@@UAEXPAVCDC@@PAVCMFCCaptionButton@@W4IMAGES_IDS@CMenuImages@@HHVCPoint@@@Z ?DrawThemeToolBarButtonBackground@CNsVisualManagerWindows@@UAEXPAUHDC__@@HPBUtagRECT@@1@Z ?SetTheme@CNsVisualManagerWindows@@UAEXPBG@Z ?GetThemeNames@CNsVisualManagerWindows@@UAEPAVCStringList@@XZ ?GetCurrentTheme@CNsVisualManagerWindows@@UAE?AV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@XZ ?IsTabLayoutBottom@CNsViewerFrame@@IAEHXZ ?OnKillFocus@CNsToolBar@@IAEXPAVCWnd@@@Z

nssecurity

?NsRunSetMasterPw@@YAXPAVCWnd@@@Z ?CheckMasterPassword@CMngMasterPw@@QAEHPAVCWnd@@@Z ??0CMngMasterPw@@QAE@XZ ??0CNsResetMasterPwDlg@@QAE@PAVCWnd@@@Z ?GetInstance@CMngMasterPwSInst@@SAPAV1@XZ ?RemoveInstance@CMngMasterPwSInst@@SAXXZ ??1CMngMasterPw@@QAE@XZ ??0CNsSetMasterPwDlg@@QAE@HV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z ??0CNsCheckMasterPwDlg@@QAE@PAVCWnd@@V?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@H@Z

nsssh3

?SetNewInstanceProc@CCredentialItem@@SAXP6APAV1@XZ@Z ?DecryptString@CSshUtil@@SAHPBDAAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@W4MAC@1@W4ENC@1@@Z ?NSSSH_ResetLicense@@YAXII@Z ?EncryptString@CSshUtil@@SAHPBDAAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@W4MAC@1@W4ENC@1@@Z ??0CCredentialItem@@QAE@XZ

nsutil2

?SetNotificationFlags@CFolderMonitor@@QAEHK@Z ??1CFolderMonitor@@UAE@XZ ?AddDirectory@CFolderMonitor@@QAEXPBGH@Z ?BeginFolderMoniter@CFolderMonitor@@QAEHXZ ??0CFolderMonitorListener@@QAE@XZ ?RegRecursiveCopy@@YAHPAVCRegistry@@0@Z ?EnumKey@CRegistry@@QAEHKPAGK@Z ?RenameKey@CRegistry@@QAEHPBG0@Z ?DeleteKey@CRegistry@@QAEHPBGH@Z ??0CFolderMonitor@@QAE@PAVCFolderMonitorListener@@@Z ?csFmt@@YA?AV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@IZZ ?SHCreateShortcutEx@@YAJPBGPAUSHORTCUTSTRUCT@@@Z ?GetProductPath@@YAIPBGAAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z ?_WriteApplicationLog@@YAHPBGH@Z ??1CFNameEdit@@UAE@XZ ?AfxGetSessionPath@@YA?AV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@PBG@Z ?SplitNameForSaveAs@@YAHPBGAAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@AAI@Z ?NsCopyStringToClipboard@@YAHPBG@Z ??0CFNameEdit@@QAE@XZ ?CreateEmptyFile@@YAHPBG@Z ?AppendPath@@YAHAAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@PBG@Z ?EnsureFolderExist@@YAHPBG@Z ?GetUserDataFolderPath@@YAPBGH@Z ?EndFolderMoniter@CFolderMonitor@@QAEXXZ ?ChangePathWithEnv@@YAHAAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z ?DoesFolderExist@@YAHPBG@Z ?NsLoadPngImage@@YAHPAVCImageList@@HHH@Z ?EnumValue@CRegistry@@QAEHKPAGK@Z ?Open@CXshellRegistry@@QAEHPBG@Z ?GetImageDPI@@YAHXZ ?MoveFolder@@YAHPBG00@Z ?CopyFolder@@YAXPBG0@Z ?ShowInvalidFileNameMessage@@YAXPAVCWnd@@@Z ?InitAppDPI@@YAXPAVCDC@@@Z ?NsGetQCmdRootPath@@YA?AV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@XZ ?__WriteInfoAppLog@@YAXHPBGZZ ?XSHELL_CLASS_NAME@@3V?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@B ??0CUrlInfo@@QAE@XZ ?GetLastErrorString@@YAXAAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@K@Z ??1CUrlInfo@@UAE@XZ ?SHRenameFile@@YAHPBG0@Z ?GetFnameofPath@@YA?AV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@PBG@Z ?Parse_URL@CUrlInfo@@QAEHPBGH@Z ?NSUTIL_IsUserSupportMenu@@YAHII@Z ?GetAppScaleSize@@YA?AVCSize@@HH@Z ?__WriteDebugAppLog@@YAXHPBGZZ ?NSUTIL_AddUserSupportMenu@@YAXPAVCMFCPopupMenu@@@Z ?GetMsgAckTranslation@@YA?AV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@XZ ?ConvertStaticToHyperlink@@YAHPAUHWND__@@I@Z NsOpenHomePage ?ResetAppDPI@@YAXI@Z MLS_NsGetUserLanguage ??0CNsEdit@@QAE@XZ ??1CNsEdit@@UAE@XZ ?GetAppScale@@YAHH@Z ?AfxGetModulePath@@YAXAAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@PBG@Z ?NsVerifyNetSarangExe@@YAHPBGH@Z ?GetCodePage@CCodePageList@@QAEIH@Z ??0CCodePageList@@QAE@XZ ?MLS_NsChangeLanguage@@YAGPBGAAH@Z ?MLS_NsSaveLanguage@@YAXPBGGH@Z ?ExecuteXtransportForMove@@YAXPBG@Z ?NsChangeDataFolder@@YAHXZ NsOpenHelpPdfFile ?NsExecuteCheckIn@@YAHIIHH@Z ?Configure@CNsExpFeatures@@QAEHII@Z ?GetInstance@CNsExpFeatures@@SAAAV1@XZ ?MakeURL@CUrlInfo@@QBEHAAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@HH@Z ?ResolveShortcut@@YAJPBGAAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@H@Z ?NsIsValidDataFolder@@YAHXZ ?NsCheckLiveUpdate@@YAHIIHH@Z ?DeleteValue@CRegistry@@QAEHPBG@Z ?csFmt@@YA?AV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@PBGZZ ??0CDllLoader@@QAE@PBGH@Z ??1CDllLoader@@UAE@XZ ?IsLoaded@CDllLoader@@QAEHXZ ?GetProcAddress@CDllLoader@@QAEP6GHXZPBD@Z ?NsRunXagent@@YAHHPBG@Z ?_SetWriteAppLog@@YAXHPBG0@Z ?NSUTIL_OnUserSupportMenu@@YAXII@Z ??1CIniFile@@UAE@XZ ??0CIniFile@@QAE@PBG@Z ??0CResizingDialog@@QAE@IPAVCWnd@@@Z ?SetControlInfo@CResizingDialog@@QAEXGG@Z ?Read@CIniFile@@QAEHPBG@Z ?GetValue@CIniFile@@QAE?AV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@PBG00@Z ?GetValue@CIniFile@@QAEHPBG0H@Z ?GetThisMessageMap@CResizingDialog@@KGPBUAFX_MSGMAP@@XZ ?SetValue@CIniFile@@QAEXPBG00@Z ?SetValue@CIniFile@@QAEXPBG0H@Z ?Write@CIniFile@@QAEHPBGHH@Z ?XSHELL_VIEWER_CLASS_NAME@@3V?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@B ?NsLoadAppLangResourceDLL@@YAPAUHINSTANCE__@@PAU1@PBG@Z ?NsIsUpdateIntervalPassed@@YAHIII@Z NsSetLiveUpdateData ?NsHTTPConnection@@YAKV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@AAV12@@Z ?NsSetLastUpdateCheck@@YAXII@Z ?OnInitDialog@CResizingDialog@@MAEHXZ ?GetDialogProfileEntry@CResizingDialog@@UAEXAAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z ?NSSendToast@@YAXV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@000@Z ?NsCheckVCRedistVersion@@YAXXZ ?NsCommonInitialize@@YAXI@Z NsCrashReportInstall ?NsCheckServiceDown@@YAHII@Z ?NsInitDataFolder@@YAXI@Z ?GetImportPrevStatus@@YAIPBG@Z ?SetImportPrevStatus@@YAXPBGI@Z ?NsCommonGUID@@YAPBGXZ ?NsSetLocale@@YAXXZ ?XSHELL_CORE_CLASS_NAME@@3V?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@B ??1CResizingDialog@@UAE@XZ ?PopupOnce@CNsExpFeatures@@QAEXII@Z ?Register@DesktopNotificationManagerCompat@@SAXV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@00@Z ??0CRegistry@@QAE@XZ ??1CRegistry@@UAE@XZ ?OnActivated@DesktopNotificationManagerCompat@@SAXV?$function@$$A6AXVDesktopNotificationActivatedEventArgsCompat@@@Z@std@@@Z ?Open@CRegistry@@QAEHPAUHKEY__@@PBGHK@Z NsCrashReportUninstall ??0CBuffer@@QAE@PBEI@Z ?GetValue@CRegistry@@QAEKPBGK@Z ??1CBuffer@@UAE@XZ ?SetValue@CRegistry@@QAEHPBGK@Z ??0CXshellRegistry@@QAE@PBG@Z ?GetValue@CRegistry@@QAE?AV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@PBGABV23@@Z ?AppendSpace@CBuffer@@QAEPAEI@Z ?Close@CRegistry@@QAEXXZ ?SetValue@CRegistry@@QAEHPBG0@Z ?DeleteAllValues@CRegistry@@QAEHXZ ??1CXshellRegistry@@UAE@XZ ?QueryValue@CRegistry@@QAEHPBGPAGK@Z ?NsGetAboutLicenseText@@YAXIIAAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@H@Z ?XSHELL_FM_CLASS_NAME@@3V?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@B ??0CTimer@@QAE@PAVCTimerListener@@@Z ??1CTimer@@UAE@XZ ?SetListener@CTimer@@QAEPAVCTimerListener@@PAV2@@Z ?Start@CTimer@@QAEHII@Z ?Stop@CTimer@@QAEXI@Z ?NsCheckActivationNeed@@YAHII@Z ?__WriteGlobalAppLog@@YAXHPBGZZ ?NSUTIL_IsNOUMNSet@@YAHII@Z ?_InitApplicationLog@@YAXPBG0HH@Z ??0CTimerListener@@QAE@XZ ?FindIndex@CCodePageList@@QAEHI@Z ?GetCount@CCodePageList@@QAEHXZ ?GetName@CCodePageList@@QAEPBGH@Z ?GetLangID@CCodePageList@@QAEIH@Z ?EndWatch@CNsFolderWatch@@QAEXXZ ??0CNsFolderWatch@@QAE@XZ ??1CNsFolderWatch@@UAE@XZ ?BeginWatch@CNsFolderWatch@@QAEHPBGHPAUHWND__@@IK@Z ?DoesFileExist@@YAHPBG@Z ?GetAppDPI@@YAHXZ ?SHDeleteFile@@YAHPBG@Z

xshelllib

??1CFileManagerWrapper@@UAE@XZ ?MoveToMinWindow@CCommonDockablePane@@QAEHXZ ?SetFontRef@CFileManagerWrapper@@QAEXPAVCFont@@@Z ?FocusOnItem@CFileManagerListCtrl@@QAEHXZ ?AddFolderUpItem@CFileManagerListCtrl@@QAEHXZ ?ClearList@CFileManagerListCtrl@@QAEXXZ ?ShowFMListCtrl@CFileManagerWrapper@@QAEXH@Z ?SetProgress@CFileManagerWrapper@@QAEXI@Z ??1CCommonDockablePane@@UAE@XZ ?SetProgressBySize@CFileManagerWrapper@@QAEXPBG_K@Z ?SetCurrentFolderTitle@CFileManagerListCtrl@@QAEXPBG@Z ?Sort@CFileManagerListCtrl@@QAEXXZ ?AddFileItem@CFileManagerListCtrl@@QAEHV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@Usfx_attrs@@@Z ??0CAdvDialog@@QAE@IPAVCWnd@@@Z ?GetThisMessageMap@CAdvDialog@@KGPBUAFX_MSGMAP@@XZ ?PreTranslateMessage@CAdvDialog@@UAEHPAUtagMSG@@@Z ??1CAdvDialog@@UAE@XZ ??0CFixedFontInfoArray@@QAE@XZ ??1CFixedFontInfoArray@@UAE@XZ ?m_bUseVariablePitch@CFixedFontInfoArray@@2HA ?Enumerate@CFixedFontInfoArray@@QAEXE@Z ?GetSize@?$CArray@PAVCFixedFontInfo@@PAV1@@@QBEHXZ ??ACFixedFontInfoArray@@QAEABVCFixedFontInfo@@H@Z ?GetValue@CGlobalOption@@QAEHPBGH@Z ??0CPopupMenu@@QAE@IH@Z ??1CPopupMenu@@UAE@XZ ?SetValue@CGlobalOption@@QAEXPBGH@Z ?OnEraseBkgnd@CCommonDockablePane@@QAEHPAVCDC@@@Z ?GetThisMessageMap@CCommonDockablePane@@KGPBUAFX_MSGMAP@@XZ ??0CQuickCommandList@@QAE@XZ ??1CQuickCommandList@@UAE@XZ ?Move@CQuickCommandList@@QAEHHH@Z ?Save@CQuickCommandList@@QAEHPBG@Z ?GetCount@CQuickCommandList@@QBEHXZ ?GetInstance@CGlobalOption@@SAAAV1@XZ ??0CFileManagerWrapper@@QAE@XZ ?ShowProgressCtrl@CFileManagerWrapper@@QAEXH@Z ?FindIndex@CQuickCommandList@@QBEPAVCQuickCommand@@H@Z ?Load@CQuickCommandList@@QAEHPBG@Z ?GetName@CTermColorList@@QAEPBGI@Z ?GetCount@CTermColorList@@QAEIXZ ??1CTermColorList@@UAE@XZ ??0CTermColorList@@QAE@H@Z ?AfxGetProfilePath@@YAHPBGAAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z ?LoadV5Registry@CGlobalOption@@QAEXI@Z ??0CGlobalOptionListener@@QAE@XZ ??0CSessGroupList@@QAE@XZ ??1CSessGroupList@@UAE@XZ ?CopyFileItemFromShMem@@YAHAAUFMFileItem@@PBG@Z ?ReLoad@CWebSearchEngineManager@@QAEHXZ ?GetCurActionString@CKeyMapManager@@QAE?AV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@II@Z ?IsPaneViewOn@CCommonDockablePane@@QAEHXZ ?LoadKeymapFile@CKeyMapManager@@QAEPAUHACCEL__@@PAPAU2@H@Z ?AfxOpenHtmlHelp@@YAXPBG0@Z ?Configure@CGlobalOption@@QAEHPAVCGlobalOptionListener@@@Z ?GetDefaultWSE@CWebSearchEngineManager@@QAEPAVCWebSearchEngine@@XZ ??1COptsSecSecreenLockDlg@@UAE@XZ ??0COptsSecSecreenLockDlg@@QAE@PAVCWnd@@@Z ?Save@CGlobalOption@@QAEXI@Z ?ExecuteXshell@@YAXPBG@Z ?Serialize@CQuickCommand@@QAE?AV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@XZ ?AfxGetDefaultLogFolderPath@@YAPBGXZ ?Deserialize@CQuickCommand@@QAEXV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z ?GetNext@CKeymapItemList@@QAEPAVCKeymapItem@@AAPAU__POSITION@@@Z ?GetHeadPosition@CKeymapItemList@@QAEPAU__POSITION@@XZ ?EnumerateAccelerator@CKeymapItemList@@QAEXPAUHACCEL__@@@Z ??1CKeymapItemList@@UAE@XZ ??0CKeymapItemList@@QAE@PAVCKeyMapManager@@@Z ?Load@CWebSearchEngineManager@@QAEHV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z ?GetName@CWebSearchEngine@@QAE?AV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@XZ ?GetInstance@CWebSearchEngineManager@@SAAAV1@XZ ?GetList@CWebSearchEngineManager@@QAEPAV?$CList@PAVCWebSearchEngine@@PAV1@@@XZ ?Enumerate@CSessGroupList@@QAEXXZ ?GetValue@CXshellIniFile@@QAEHPBG0HHH@Z ?AfxIsPersonal@@YAHXZ ??1CKeyMapManager@@QAE@XZ ?Load@CGlobalOption@@QAEXI@Z ??0CKeyMapManager@@QAE@IH@Z ?AfxGetDataFolderPath@@YAPBGXZ ?AfxGetProfileFolderPath@@YAXAAV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z ??1CXshellIniFile@@UAE@XZ ??0CQuickCommand@@QAE@ABV0@@Z ?GetValue@CXshellIniFile@@QAE?AV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@PBG00@Z ??0CXshellIniFile@@QAE@PBG@Z ?GetNext@CQuickCommandList@@QBEPAVCQuickCommand@@AAPAU__POSITION@@@Z ?GetHeadPosition@CQuickCommandList@@QBEPAU__POSITION@@XZ ??1CQuickCommand@@QAE@XZ ?ExistLabel@CQuickCommandList@@QAEHV?$CStringT@GV?$StrTraitMFC_DLL@GV?$ChTraitsCRT@G@ATL@@@@@ATL@@@Z ?Delete@CQuickCommandList@@QAEXPAVCQuickCommand@@@Z ?Add@CQuickCommandList@@QAEPAVCQuickCommand@@PBV2@@Z ?DoModal@CQuickCommandDlg@@QAEHXZ ??4CQuickCommand@@QAEAAV0@ABV0@@Z ??1CQuickCommandDlg@@UAE@XZ ??0CQuickCommandDlg@@QAE@PAVCWnd@@PAVCQuickCommandList@@H@Z ??0CQuickCommand@@QAE@XZ ??0CCommonDockablePane@@QAE@XZ

mfc140u

ord7723 ord7722 ord5228 ord5411 ord5252 ord5790 ord5525 ord9350 ord5760 ord5549 ord5249 ord12168 ord3941 ord12124 ord2682 ord5935 ord13703 ord11717 ord6877 ord14596 ord7923 ord14590 ord3055 ord4494 ord9693 ord4502 ord4988 ord4927 ord4912 ord4997 ord5013 ord4948 ord5003 ord1777 ord1756 ord1770 ord1744 ord1722 ord13878 ord3266 ord9256 ord11002 ord6978 ord12172 ord8965 ord14588 ord11936 ord3838 ord12089 ord9139 ord11726 ord11725 ord5652 ord10288 ord10284 ord10286 ord10287 ord10285 ord14785 ord2760 ord8210 ord3302 ord3305 ord13752 ord6218 ord3403 ord3404 ord4092 ord11396 ord11015 ord9040 ord12131 ord7107 ord1511 ord7441 ord7684 ord13544 ord9209 ord2761 ord13756 ord6220 ord7109 ord462 ord975 ord1451 ord4225 ord9132 ord12220 ord5984 ord6589 ord1476 ord1002 ord1180 ord6489 ord1113 ord3697 ord7495 ord2383 ord8773 ord4477 ord12612 ord9235 ord12173 ord6129 ord6549 ord1133 ord2246 ord7111 ord7496 ord9299 ord11535 ord14131 ord6300 ord8225 ord13122 ord4977 ord4915 ord4905 ord4991 ord5006 ord4945 ord5000 ord1774 ord1747 ord1733 ord12175 ord14577 ord5312 ord8175 ord8317 ord8244 ord8340 ord2725 ord8218 ord2703 ord5441 ord5154 ord5436 ord2694 ord4396 ord4032 ord4792 ord4048 ord12481 ord3311 ord8994 ord8939 ord14198 ord6303 ord8815 ord14129 ord3131 ord14440 ord11755 ord11089 ord11321 ord2634 ord4112 ord2067 ord5080 ord5085 ord3133 ord13216 ord12148 ord4017 ord8806 ord14315 ord4043 ord8143 ord13480 ord11162 ord9000 ord8957 ord2618 ord2113 ord14361 ord11129 ord3064 ord11484 ord9666 ord8997 ord8954 ord12676 ord13487 ord4014 ord4507 ord11264 ord14296 ord7890 ord2685 ord14251 ord5438 ord2543 ord3631 ord4049 ord4034 ord14473 ord13268 ord8558 ord3132 ord14303 ord4182 ord2098 ord11728 ord14282 ord13326 ord2762 ord2784 ord11597 ord4219 ord9126 ord6490 ord1066 ord3872 ord2993 ord8744 ord4222 ord3147 ord9128 ord6497 ord1070 ord3797 ord3696 ord7815 ord14507 ord8171 ord14657 ord12405 ord12348 ord14604 ord4856 ord3236 ord6751 ord7654 ord362 ord1068 ord13087 ord12953 ord14047 ord13293 ord12867 ord3954 ord3693 ord3804 ord13471 ord997 ord1474 ord4571 ord4648 ord266 ord265 ord9333 ord8475 ord12768 ord3961 ord5120 ord8101 ord3217 ord2203 ord4387 ord8691 ord8684 ord3580 ord801 ord8694 ord8695 ord358 ord9377 ord11372 ord13138 ord11713 ord4926 ord4911 ord1769 ord1743 ord1721 ord9247 ord8174 ord8338 ord14313 ord2084 ord8995 ord8940 ord14197 ord14441 ord11771 ord11331 ord1773 ord2646 ord2672 ord8145 ord9002 ord8956 ord11130 ord3066 ord9291 ord8955 ord8962 ord4016 ord4509 ord14298 ord3352 ord12827 ord8390 ord8388 ord13314 ord8060 ord8061 ord8089 ord12651 ord12616 ord3821 ord12872 ord5839 ord5798 ord13318 ord2701 ord12876 ord7903 ord14395 ord12222 ord8845 ord11367 ord10362 ord9087 ord9106 ord2656 ord4181 ord4194 ord2249 ord1731 ord9984 ord9506 ord9511 ord9521 ord8864 ord4713 ord2094 ord4269 ord3330 ord9382 ord4371 ord9023 ord1984 ord14173 ord2659 ord8938 ord12971 ord8426 ord14254 ord7125 ord11392 ord3171 ord7289 ord2178 ord760 ord1307 ord4635 ord2404 ord4776 ord6203 ord2259 ord7969 ord4286 ord4164 ord8631 ord8595 ord8565 ord8537 ord898 ord6795 ord13086 ord8811 ord8365 ord8161 ord974 ord1450 ord14602 ord7221 ord11567 ord5300 ord14377 ord3932 ord13964 ord4881 ord10616 ord13139 ord12142 ord3112 ord9095 ord4599 ord9747 ord11714 ord12828 ord3002 ord6973 ord8207 ord8230 ord13205 ord5023 ord13614 ord5845 ord2385 ord6851 ord1464 ord540 ord1171 ord7647 ord3869 ord3182 ord4884 ord8352 ord5816 ord7909 ord6882 ord5842 ord4196 ord1413 ord4671 ord12642 ord12611 ord2008 ord929 ord6805 ord3184 ord1143 ord4093 ord6226 ord9465 ord4885 ord13575 ord3264 ord4463 ord8529 ord10055 ord13936 ord13042 ord6884 ord13935 ord4466 ord6865 ord2303 ord13654 ord6533 ord4610 ord3207 ord6873 ord10778 ord12644 ord5830 ord8746 ord4227 ord6607 ord2526 ord10626 ord10680 ord11662 ord842 ord1368 ord2614 ord4076 ord7229 ord1255 ord12501 ord764 ord1310 ord648 ord1252 ord11168 ord13423 ord14106 ord6354 ord12602 ord1959 ord7556 ord13428 ord10076 ord884 ord853 ord1374 ord12526 ord8157 ord8874 ord841 ord12552 ord2529 ord9508 ord8873 ord8875 ord6650 ord12163 ord4918 ord4908 ord4996 ord5012 ord4947 ord5002 ord1776 ord1749 ord1735 ord10998 ord12199 ord2908 ord7712 ord2082 ord4317 ord5409 ord4492 ord9798 ord7968 ord7934 ord10168 ord9545 ord9600 ord9705 ord9663 ord12232 ord3000 ord8852 ord6653 ord12833 ord9744 ord9983 ord9674 ord9613 ord9664 ord11883 ord9995 ord3405 ord3626 ord10042 ord9157 ord9169 ord9391 ord11303 ord9195 ord11349 ord12254 ord2059 ord2078 ord9368 ord3281 ord9470 ord7851 ord8337 ord8910 ord11253 ord14707 ord8301 ord6495 ord10250 ord5961 ord5781 ord12887 ord9990 ord2865 ord9452 ord500 ord1142 ord12351 ord2885 ord11385 ord5466 ord2389 ord4890 ord13713 ord2163 ord2151 ord8531 ord13442 ord3215 ord4384 ord4025 ord13474 ord4349 ord9176 ord2345 ord12461 ord2033 ord3209 ord4216 ord2256 ord14600 ord14598 ord11509 ord2943 ord12687 ord9238 ord644 ord7810 ord14128 ord13715 ord8674 ord11634 ord10512 ord364 ord5934 ord4143 ord11590 ord12784 ord6555 ord494 ord6225 ord2750 ord824 ord1355 ord5225 ord4725 ord2162 ord365 ord4091 ord9039 ord11014 ord5962 ord6499 ord6908 ord9719 ord12081 ord10051 ord5419 ord12722 ord2070 ord6274 ord2172 ord1353 ord8483 ord14447 ord13700 ord14591 ord7918 ord2557 ord4495 ord8209 ord8399 ord5033 ord5034 ord1788 ord13709 ord5939 ord13707 ord5938 ord11431 ord5955 ord8832 ord9352 ord11801 ord11796 ord5369 ord3844 ord4587 ord11495 ord10402 ord10840 ord2060 ord5747 ord1854 ord9204 ord11503 ord6839 ord13161 ord7997 ord2307 ord4590 ord5918 ord901 ord1399 ord8374 ord3957 ord4817 ord6861 ord5763 ord12928 ord12219 ord12251 ord8217 ord12247 ord12239 ord3852 ord8000 ord12531 ord14466 ord7941 ord12947 ord4152 ord14595 ord7922 ord14589 ord2486 ord5357 ord8324 ord12865 ord8470 ord11893 ord14216 ord8974 ord9208 ord14308 ord12583 ord5112 ord5885 ord316 ord300 ord310 ord1046 ord1530 ord1533 ord2997 ord4666 ord10667 ord4723 ord7296 ord7073 ord9062 ord8525 ord13144 ord3117 ord9036 ord9099 ord9751 ord8999 ord12949 ord12829 ord3003 ord13208 ord13888 ord11990 ord3388 ord14025 ord3425 ord11710 ord12170 ord14579 ord13792 ord8996 ord8941 ord11761 ord9286 ord3391 ord2607 ord7284 ord7288 ord2342 ord2413 ord9032 ord985 ord1462 ord9330 ord13627 ord13799 ord13794 ord6285 ord890 ord1391 ord566 ord1193 ord9449 ord11673 ord11564 ord5838 ord14074 ord10815 ord14501 ord13085 ord13793 ord8106 ord3959 ord2524 ord13117 ord12114 ord11712 ord11769 ord5535 ord8562 ord482 ord1130 ord4261 ord4161 ord4259 ord4275 ord4188 ord4187 ord4644 ord4185 ord4260 ord6948 ord9734 ord9725 ord9738 ord9932 ord9936 ord9650 ord9672 ord9976 ord9729 ord9732 ord9619 ord9624 ord10420 ord9721 ord10204 ord7670 ord5150 ord9631 ord9625 ord9628 ord10217 ord9766 ord9760 ord10211 ord10240 ord9947 ord10122 ord9955 ord9949 ord10197 ord9707 ord5122 ord5152 ord9681 ord9690 ord9801 ord10247 ord9970 ord9971 ord10244 ord9965 ord9960 ord9904 ord9980 ord9677 ord6362 ord6366 ord9922 ord9924 ord10236 ord9640 ord9644 ord9659 ord9611 ord9918 ord6935 ord6936 ord10221 ord9789 ord9797 ord10109 ord9793 ord8159 ord11466 ord8909 ord10957 ord10865 ord6170 ord9897 ord9803 ord9819 ord9830 ord9828 ord9863 ord9866 ord9852 ord9838 ord9841 ord9842 ord10224 ord10226 ord9808 ord9861 ord10228 ord9855 ord9813 ord9816 ord9810 ord9660 ord9857 ord10232 ord9878 ord9851 ord9846 ord9844 ord12920 ord9822 ord9895 ord6456 ord9888 ord9880 ord9884 ord9869 ord10233 ord9875 ord9834 ord6450 ord6457 ord6447 ord9837 ord10104 ord7673 ord10248 ord6916 ord9912 ord10414 ord3396 ord4602 ord7800 ord10202 ord280 ord1045 ord1525 ord5884 ord4323 ord286 ord296 ord2304 ord4815 ord2215 ord13473 ord2457 ord8182 ord1692 ord1689 ord3009 ord5921 ord285 ord3265 ord3371 ord3372 ord4974 ord5019 ord4942 ord4954 ord4960 ord4966 ord4936 ord12258 ord12262 ord3164 ord7027 ord8062 ord8067 ord13646 ord2010 ord5850 ord1523 ord14137 ord3816 ord2990 ord3166 ord4969 ord5016 ord4939 ord4951 ord4957 ord4963 ord4930 ord8439 ord12983 ord3338 ord6276 ord3230 ord3356 ord3167 ord3340 ord3145 ord3677 ord7819 ord5882 ord2378 ord3605 ord7820 ord5074 ord4374 ord8451 ord12996 ord12737 ord11890 ord2473 ord12680 ord3846 ord12763 ord4663 ord8360 ord759 ord2458 ord14364 ord13320 ord8754 ord13257 ord8032 ord12584 ord4664 ord12884 ord8756 ord12921 ord13648 ord8072 ord8719 ord5852 ord501 ord6196 ord6316 ord1653 ord4742 ord14405 ord5109 ord5117 ord12559 ord13656 ord5427 ord8464 ord2996 ord1526 ord4672 ord8757 ord652 ord1559 ord4398 ord1522 ord1547 ord1924 ord278 ord4972 ord5018 ord4941 ord4953 ord4959 ord4965 ord4933 ord4833 ord6168 ord7757 ord14348 ord8712 ord290 ord2209 ord11962 ord1690 ord2011 ord5512 ord6130 ord4814 ord5514 ord5954 ord822 ord261 ord258 ord3174 ord5110 ord1693 ord8031 ord6956 ord6349 ord14668 ord1659 ord6350 ord14669 ord6348 ord14667 ord11983 ord11982 ord2034 ord4090 ord9398 ord12542 ord12541 ord2801 ord306 ord14416 ord14417 ord14411 ord287 ord291 ord2029 ord6281 ord14547 ord13805 ord8455 ord13000 ord9849 ord4281 ord8219 ord10255 ord9210 ord6531 ord9468 ord14234 ord4882 ord4886 ord8817 ord2522 ord10472 ord13070 ord4649 ord13028 ord5422 ord2520 ord1108 ord450 ord3833 ord7493 ord6486 ord6566 ord3882 ord6559 ord1111 ord458 ord1513 ord1703 ord2409 ord9154 ord10673

kernel32

lstrlenA GetWindowsDirectoryA FreeLibrary LoadLibraryA SetErrorMode FormatMessageA GetTimeZoneInformation GetModuleHandleA GetEnvironmentVariableA GetLastError InitializeCriticalSectionEx GetThreadLocale CreateProcessW CreateFileMappingW MapViewOfFile UnmapViewOfFile GlobalDeleteAtom GlobalGetAtomNameW DeleteAtom OpenFileMappingW GetVersion DeleteCriticalSection SetEvent GetLocalTime GetEnvironmentVariableW CreateFileA DeviceIoControl Sleep GetProcessTimes GetCurrentProcess ResetEvent CreateEventA VirtualAlloc VirtualFree GetDriveTypeA GetVolumeInformationA GetSystemTimeAsFileTime SetNamedPipeHandleState SleepEx WaitNamedPipeA LoadLibraryExA InitializeCriticalSectionAndSpinCount LoadLibraryW UnhandledExceptionFilter SetUnhandledExceptionFilter EnterCriticalSection LeaveCriticalSection GetProcAddress FreeEnvironmentStringsA WriteFile WideCharToMultiByte LocalFileTimeToFileTime MultiByteToWideChar SystemTimeToFileTime ReadFile SetFilePointer GetTickCount GlobalFree GlobalUnlock GlobalLock GlobalAlloc GetPrivateProfileStringW lstrcmpiW OpenEventW CreateThread TerminateProcess IsProcessorFeaturePresent WaitForSingleObjectEx CreateEventW QueryPerformanceCounter GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW GetCurrentDirectoryW TerminateThread SetCurrentDirectoryW GetFileAttributesW DeleteFileW GetTempPathW lstrcpyW MoveFileW GlobalAddAtomW CopyFileW CloseHandle CreateFileW CreateDirectoryW OutputDebugStringW WritePrivateProfileStringW GetPrivateProfileIntW MulDiv FindClose FindNextFileW lstrcmpW GetCurrentProcessId CreateMutexA GetSystemDirectoryA LocalAlloc LocalFree WaitForSingleObject FindFirstFileW GetModuleHandleW lstrlenW ReleaseMutex InitializeCriticalSection GetEnvironmentStrings SetLastError GetFileSize GetVersionExA FindNextFileA SetFileTime FindFirstFileA GetModuleFileNameW GetFileInformationByHandle FileTimeToSystemTime GetDateFormatA

user32

GetForegroundWindow SetMenuInfo GetMenuState SetActiveWindow GetWindowThreadProcessId WindowFromPoint GetSystemMenu CopyAcceleratorTableW GetWindowTextLengthW InsertMenuItemW MessageBoxW SubtractRect SetWindowPos ShowWindow IsIconic IsZoomed EqualRect BringWindowToTop GetWindowDC GetDesktopWindow EnumWindows GetClassNameW FindWindowW SetForegroundWindow MoveWindow CallNextHookEx wsprintfW ModifyMenuW ClientToScreen RemoveMenu LoadMenuW SetClassLongW RegisterClipboardFormatW InvertRect WaitForInputIdle GetScrollInfo SystemParametersInfoW SetMenuDefaultItem GetSubMenu GetMessagePos GetCursorPos IntersectRect VkKeyScanExW UpdateWindow SetFocus GetTopWindow ReleaseCapture FindWindowExW GetMessageW SetCapture DispatchMessageW TranslateMessage IsChild InsertMenuW IsMenu EnableMenuItem InvalidateRect ScreenToClient InflateRect GetKeyState DeleteMenu GetMenuItemID GetMenuItemCount ReleaseDC GetDC DrawFocusRect CopyRect GetSystemMetrics DefWindowProcW GetWindowLongW SetTimer SetWindowLongW CreateWindowExW RegisterClassW DestroyWindow IsWindow SetWindowTextW DrawAnimatedRects GetWindowTextW SetRectEmpty IsWindowVisible GetFocus GetSysColor GetParent LoadIconW RedrawWindow SetCursor GetCursor LoadCursorW PostMessageW PtInRect EnableWindow RegisterWindowMessageW KillTimer SendMessageW OffsetRect GetWindow LoadBitmapW GetWindowRect GetClientRect SetParent GetLastInputInfo AppendMenuW CreatePopupMenu SetMenuItemInfoW DestroyIcon IsRectEmpty GetActiveWindow MessageBoxA GetMenuItemInfoW FlashWindowEx SetWindowsHookExW UnhookWindowsHookEx GetKeyboardLayout CheckMenuItem SendMessageA EndDialog GetDlgItem SetDlgItemTextA GetDlgItemTextA GetDlgItemTextW SetWindowTextA MessageBeep GetWindowLongA CreateDialogIndirectParamA DialogBoxIndirectParamA wsprintfA GetCapture GetDlgCtrlID SetRect

gdi32

CreateCompatibleDC StretchBlt GetObjectW CreateFontIndirectW GetTextExtentPoint32W GetBkColor EnumFontFamiliesExW Polygon PatBlt SetPixel GetPixel BitBlt DeleteDC SelectObject CreateDIBSection DeleteObject GetTextColor CreateCompatibleBitmap GetTextMetricsW

msimg32

AlphaBlend

comdlg32

GetOpenFileNameA

advapi32

RegSetValueExA OpenSCManagerA CloseServiceHandle RegQueryInfoKeyA RegEnumKeyExA RegSetValueExW RegQueryValueExW RegQueryValueExA GetUserNameW GetUserNameA RegCreateKeyExA RegOpenKeyExA RegEnumValueA RegDeleteValueA RegCloseKey RegSetValueW RegCreateKeyW RegOpenKeyW QueryServiceStatus StartServiceA OpenServiceA

shell32

SHGetPathFromIDListW ord680 DragAcceptFiles ord155 ord716 SHGetDesktopFolder Shell_NotifyIconW DragFinish SHBrowseForFolderW SHFileOperationW SHGetSpecialFolderLocation ShellExecuteExW ShellExecuteW

comctl32

ImageList_ReplaceIcon ImageList_SetOverlayImage ImageList_DragShowNolock ImageList_SetDragCursorImage ImageList_BeginDrag ImageList_DragMove ImageList_DragEnter ImageList_DragLeave ImageList_EndDrag ImageList_Draw ImageList_Copy ImageList_GetImageInfo ImageList_AddMasked ord17 ImageList_Remove ImageList_GetImageCount ImageList_GetIcon ImageList_Destroy ImageList_SetBkColor

shlwapi

StrCmpLogicalW PathAppendW PathRemoveFileSpecW PathIsDirectoryW PathRemoveBackslashW

uxtheme

SetWindowTheme

ole32

CoCreateInstance CoSetProxyBlanket CoInitializeSecurity CoInitializeEx CoUninitialize CoInitialize IsAccelerator

oleaut32

VariantInit SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetLBound SafeArrayGetUBound SafeArrayDestroy SysFreeString SysAllocStringLen SysAllocString VariantClear

gdiplus

GdiplusShutdown

msvcp140

?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z

ws2_32

inet_ntoa getnameinfo getsockopt __WSAFDIsSet closesocket connect ioctlsocket recv freeaddrinfo send setsockopt socket WSAGetLastError htonl WSAStartup WSACleanup inet_addr select getaddrinfo

vcruntime140

wcsstr __std_exception_copy __std_exception_destroy _purecall memmove strchr strrchr strstr __std_terminate __current_exception_context _except_handler4_common __RTDynamicCast _CxxThrowException __CxxFrameHandler3 memcmp memset memcpy __current_exception

api-ms-win-crt-string-l1-1-0

isdigit islower isupper isalpha toupper _strnicmp strncmp isspace _stricmp strcat_s strtok strncpy strcspn _strdup strncpy_s isxdigit tolower strcpy strcat wcscpy_s strcpy_s wcscat_s wcsncpy_s _wcsnicmp wcstok_s _wcsdup wcsncmp strlen _wcsicmp

api-ms-win-crt-time-l1-1-0

wcsftime _mktime64 _localtime64 _localtime64_s _time64

api-ms-win-crt-heap-l1-1-0

free calloc _set_new_mode realloc malloc

api-ms-win-crt-convert-l1-1-0

_wtoi strtol strtoul strtod _wtof wcstol atol atoi atof

api-ms-win-crt-runtime-l1-1-0

__p___argc exit _beginthread _invalid_parameter_noinfo_noreturn _errno _invalid_parameter_noinfo _endthread _getpid _seh_filter_exe _set_app_type _configure_wide_argv _initialize_wide_environment _get_wide_winmain_command_line _initterm _initterm_e _cexit _c_exit _register_thread_local_exe_atexit_callback _exit _initialize_onexit_table _register_onexit_function __sys_errlist __sys_nerr __p___wargv _controlfp_s terminate _crt_atexit

api-ms-win-crt-filesystem-l1-1-0

_findclose _stat64i32 _wsplitpath_s _findfirst64i32 _findnext64i32 _wstat64i32

api-ms-win-crt-stdio-l1-1-0

fclose fopen __p__commode __stdio_common_vswprintf _set_fmode __stdio_common_vfprintf __stdio_common_vsprintf _getcwd __stdio_common_vsnprintf_s __stdio_common_vswprintf_s ftell __stdio_common_vswscanf __stdio_common_vsscanf __acrt_iob_func ungetc fseek fread fgetc clearerr _wfopen fflush fgets

api-ms-win-crt-utility-l1-1-0

rand srand qsort bsearch rand_s

api-ms-win-crt-environment-l1-1-0

getenv _wgetenv

api-ms-win-crt-math-l1-1-0

_libm_sse2_sqrt_precise __setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

netapi32

Netbios

wintrust

WinVerifyTrust

crypt32

CryptMsgClose CryptMsgGetParam CryptQueryObject CertGetNameStringA CertFreeCertificateContext CertFindCertificateInStore CertCloseStore

Name

.text

Size

590KB

Virtual Size

589KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.textidx

Size

485KB

Virtual Size

485KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.my_text

Size

512B

Virtual Size

223B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

237KB

Virtual Size

236KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

48KB

Virtual Size

74KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fnp_dir

Size

512B

Virtual Size

100B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fnp_mar

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

90KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=13, id=260, version=30034,

count=7, id=259, version=30034,

count=6, id=257, version=30034,

count=186, id=253, version=28518,

count=16, id=257, productName=VS2019 v16.11.6 build 30137, version=30137,

count=138, id=170, productName=VS2010 SP1 build 40219, version=40219,

count=259, id=224, productName=VS2013 UPD5 build 40629, version=40629,

count=2, id=260, version=28900,

count=43, id=257, version=28900,

count=2372, id=1, productName=Unmarked objects,

count=35, id=261, version=30034,

count=2, id=206, version=61219,

count=40, id=265, version=30137,

count=1, id=256, productName=VS2019 v16.11.6 build 30137, version=30137,

count=1, id=255, productName=VS2019 v16.11.6 build 30137, version=30137,

count=1, id=151,

count=1, id=258, productName=VS2019 v16.11.6 build 30137, version=30137,