98586b54639e9cbe7833b247c6c2d8c8

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2014-Nov-18 10:10:01
Detected languages Chinese - PRC
English - United States
Debug artifacts D:\CODE\OKO\src1.1\beta\bin\x64_release\OneKeyOptimizer.pdb
CompanyName Lenovo(beijing) Limited
FileDescription OneKeyOptimizer
FileVersion 1.1.20.15
InternalName OneKeyOptimizer.exe
LegalCopyright ©2013 Lenovo. All rights reserved.
OriginalFilename OneKeyOptimizer.exe
ProductName OneKeyOptimizer
ProductVersion 1.1.20.15

Plugin Output

Info Matching compiler(s): MASM/TASM - sig1(h)
Suspicious Strings found in the binary may indicate undesirable behavior: Accesses the WMI:
  • ROOT\CIMV2
Miscellaneous malware strings:
  • cmd.exe
Contains domain names:
  • adobe.com
  • http://mcn.lenovo.com.cn
  • http://mcn.lenovo.com.cn/UserFeedback/requests
  • http://mcn.lenovo.com.cn/feedback/index.do?
  • http://mus.lenovo.com.cn
  • http://mus.lenovo.com.cn/feedback/index.do?
  • http://ns.adobe.com
  • http://ns.adobe.com/xap/1.0/
  • http://purl.org
  • http://support.microsoft.com
  • http://support.microsoft.com/kb/%d
  • http://www.w3.org
  • http://www.w3.org/1999/02/22-rdf-syntax-ns#
  • http://www.winimage.com
  • http://www.winimage.com/zLibDll
  • lenovo.com.cn
  • mcn.lenovo.com.cn
  • microsoft.com
  • mus.lenovo.com.cn
  • ns.adobe.com
  • support.microsoft.com
  • winimage.com
  • www.w3.org
  • www.winimage.com
Info Cryptographic algorithms detected in the binary: Uses constants related to CRC32
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • LoadLibraryExW
  • LoadLibraryW
  • GetProcAddress
Functions which can be used for anti-debugging purposes:
  • CreateToolhelp32Snapshot
  • FindWindowW
Code injection capabilities (PowerLoader):
  • GetWindowLongW
  • FindWindowW
Can access the registry:
  • RegFlushKey
  • RegQueryInfoKeyW
  • RegEnumKeyExW
  • RegDeleteValueW
  • RegDeleteKeyW
  • RegSetValueExW
  • RegQueryValueExW
  • RegOpenKeyExW
  • RegCreateKeyExW
  • RegCloseKey
  • SHEnumKeyExW
  • SHGetValueW
Possibly launches other programs:
  • CreateProcessW
  • ShellExecuteW
Uses functions commonly found in keyloggers:
  • AttachThreadInput
  • GetForegroundWindow
Has Internet access capabilities:
  • InternetGetConnectedState
  • WinHttpQueryHeaders
  • WinHttpReceiveResponse
  • WinHttpSendRequest
  • WinHttpOpenRequest
  • WinHttpOpen
  • WinHttpCrackUrl
  • WinHttpGetIEProxyConfigForCurrentUser
  • WinHttpGetProxyForUrl
  • WinHttpSetOption
  • WinHttpCloseHandle
  • WinHttpSetStatusCallback
  • WinHttpConnect
Leverages the raw socket API to access the Internet:
  • #115
  • #52
  • #11
  • #116
  • inet_ntop
Functions related to the privilege level:
  • AdjustTokenPrivileges
  • OpenProcessToken
  • CheckTokenMembership
Interacts with services:
  • QueryServiceConfigW
  • OpenServiceW
  • OpenSCManagerW
Manipulates other processes:
  • Process32NextW
  • Process32FirstW
  • OpenProcess
Changes object ACLs:
  • SetNamedSecurityInfoW
Can take screenshots:
  • GetDC
  • FindWindowW
  • CreateCompatibleDC
Info The PE is digitally signed. Signer: Lenovo (Beijing) Limited
Issuer: VeriSign Class 3 Code Signing 2010 CA
Safe VirusTotal score: 0/71 (Scanned on 2020-05-30 11:11:25) All the AVs think this file is safe.

Hashes

MD5 98586b54639e9cbe7833b247c6c2d8c8
SHA1 67e8f64cf355a57e4bac9b2b60d3b00f412a01b2
SHA256 8411ae88138b4bb7f5cfc5c2acb0c30367c4c4812fca7d1551e1fd9c988dd078
SHA3 4d36213504362215fa8d562faafdb1c75d75a89b1f4fe2c439d87e37103cceea
SSDeep 24576:eCzXVEaCiS22/nQoDMze0ITbCTHGvZphtTwoC+Ow:eWVEaCiSBQEMcbCTmvZVR
Imports Hash 7dd901a3e2a7439e2b5e063ee3d66b30

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x138

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 6
TimeDateStamp 2014-Nov-18 10:10:01
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 11.0
SizeOfCode 0x99a00
SizeOfInitializedData 0xa2c00
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0000000000094F84 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x140000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x140000
SizeOfHeaders 0x400
Checksum 0x1431e3
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 68a36250f1cae869a1500bed7c5aa664
SHA1 0d6327824c5850d08cecb54bd541a85364783be8
SHA256 0adc25bc90dabcfb4f3a156aa8113a5971eb75a98417f9d8cf63d08e62f5219f
SHA3 efdba3aa6e25991cdfb9279e1f7a98dfa1f979e173862a94e3efc70d38b50d46
VirtualSize 0x9985e
VirtualAddress 0x1000
SizeOfRawData 0x99a00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.27954

.rdata

MD5 6a9995988e2e505884c5977d41bd25d2
SHA1 661a1c5b26d2c0ac7c7d857ca94d315abceb2ef4
SHA256 83d1dd736eda70c0e6324193e53384730661e3e2fe5a6acb8bf5f4a3de294468
SHA3 6a449241f58a04e39538233cd056043ad32c5dba0822e3733f753b5b44094f2d
VirtualSize 0x3ea2a
VirtualAddress 0x9b000
SizeOfRawData 0x3ec00
PointerToRawData 0x99e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.23667

.data

MD5 ed47d0863853da088856d452268d1d89
SHA1 616a1c4351856b2ac6f46b6da0ba4723cc203e88
SHA256 9e71738e89dd51fe1f6b944ca5e99cc4d86eaacb837ea878f939f4233ac2f5d5
SHA3 109f00d6896a85a8bb312be48b7a311c6e9dff7cfdd5d26db079b7a6a3ccd12f
VirtualSize 0x5548
VirtualAddress 0xda000
SizeOfRawData 0x1800
PointerToRawData 0xd8a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 4.04343

.pdata

MD5 79de90f11bd5fb05ee120c52e9c1d893
SHA1 6cf1b306b3939a5b13e5d20abd7855ef20a2c3d7
SHA256 bf5f249fb592aadf22a88148eeedfc736037e27bb49a4e636557ec859a04faff
SHA3 cd4fda59aff310bd37b7edb17365e960d655969d73cf6c081c250f29d61fe37a
VirtualSize 0x6390
VirtualAddress 0xe0000
SizeOfRawData 0x6400
PointerToRawData 0xda200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.90345

.rsrc

MD5 67711a313acb019661b36aa9d67a7e42
SHA1 2849e3a722ed1cd6db83c486eb1f136e06475cad
SHA256 f81aa96b50efbeb983373d735ad8b97270dfd2796f01307dc91db19c457dabe5
SHA3 a87ce21cec2dad7a6aebc498c9b7b1dbaf34a57ffdb961aad838cb7273892cb5
VirtualSize 0x56da0
VirtualAddress 0xe7000
SizeOfRawData 0x56e00
PointerToRawData 0xe0600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 6.77696

.reloc

MD5 f0de75948efa5425fc13a18293a5d82a
SHA1 aec2aaf726dae97901868995fbb0fe460b230301
SHA256 e0e931009d1891cdf576a5b2a002fa1d3ca3787e44a6255ce7424f7cbfda98f8
SHA3 222ce79a80d021b69b1d088b9d8bf978b425287795efde4faf1d5d8fcb6a87a3
VirtualSize 0x1754
VirtualAddress 0x13e000
SizeOfRawData 0x1800
PointerToRawData 0x137400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 3.4844

Imports

KERNEL32.dll SetEvent
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetTickCount64
GetSystemDefaultUILanguage
SetThreadLocale
GetThreadLocale
MoveFileExW
MoveFileExA
FormatMessageW
LocalLock
LocalAlloc
GetVersionExW
GetSystemWindowsDirectoryW
GetWindowsDirectoryW
HeapDestroy
GetStartupInfoW
GetExitCodeProcess
TerminateProcess
GetCurrentProcessId
GetProcessTimes
CreateMutexW
SetUnhandledExceptionFilter
SetFilePointer
SetFileAttributesA
ReadFile
GetFileSize
GetFileAttributesA
OutputDebugStringA
lstrlenW
lstrlenA
DosDateTimeToFileTime
WriteFile
SetFileTime
SetFileAttributesW
LocalFileTimeToFileTime
GetFullPathNameW
GetFileTime
GetFileAttributesW
GetSystemTime
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
WritePrivateProfileStructW
GetExitCodeThread
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetUserDefaultUILanguage
GetUserGeoID
GetGeoInfoW
CreateDirectoryExW
GetPrivateProfileStructW
GetPrivateProfileStringW
GetPrivateProfileIntW
SetProcessWorkingSetSize
LocalFree
GetModuleFileNameW
GetSystemDirectoryW
GetLocalTime
GlobalMemoryStatusEx
OpenProcess
CreateProcessW
ResetEvent
RemoveDirectoryW
FindNextFileW
FindFirstFileW
FindClose
CreateFileW
CreateDirectoryW
GetCommandLineW
GetProcessHeap
HeapFree
HeapAlloc
GlobalFree
CreateEventExW
WaitForSingleObjectEx
GetACP
WritePrivateProfileStringW
CreateEventW
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
GetSystemTimeAsFileTime
GetCurrentThreadId
RaiseException
DeleteFileW
WideCharToMultiByte
IsWow64Process
CreateThread
GetCurrentProcess
CloseHandle
OutputDebugStringW
FindResourceW
lstrcmpW
SizeofResource
LockResource
LoadResource
FindResourceExW
GetModuleHandleW
Sleep
WaitForMultipleObjects
QueueUserWorkItem
LeaveCriticalSection
EnterCriticalSection
DeviceIoControl
GetLastError
LoadLibraryW
GetProcAddress
FreeLibrary
WaitForSingleObject
lstrcmpiW
USER32.dll GetWindowLongW
SetWindowLongW
FindWindowExW
MonitorFromWindow
GetMonitorInfoW
DestroyIcon
GetIconInfo
wvsprintfA
SetTimer
AttachThreadInput
ShowWindow
GetWindowPlacement
GetFocus
PostMessageW
GetForegroundWindow
GetCursorPos
ClientToScreen
GetSysColor
SetRect
GetWindowThreadProcessId
GetMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageW
SendMessageW
EnableWindow
CharNextW
MoveWindow
MapWindowPoints
IntersectRect
GetParent
GetDC
RegisterClassExW
DestroyWindow
GetWindowRgn
BroadcastSystemMessageW
MessageBoxW
GetClassNameW
IsWindow
SystemParametersInfoW
LoadImageW
SetWindowTextW
GetWindowTextW
wsprintfW
RegisterWindowMessageW
SetWindowPos
GetSystemMetrics
FindWindowW
IsZoomed
ScreenToClient
GetWindowRect
GetClientRect
SetWindowRgn
SetForegroundWindow
RegisterTouchWindow
KillTimer
IsIconic
wvsprintfW
LoadStringW
LoadCursorW
SetWindowLongPtrW
GetWindowLongPtrW
InvalidateRect
SetFocus
RegisterClassW
PostQuitMessage
DefWindowProcW
CreateWindowExW
GDI32.dll SelectObject
CreateRoundRectRgn
DeleteObject
GetObjectW
GetDeviceCaps
CreateCompatibleDC
CreateRectRgn
DeleteDC
CreateDIBSection
PtInRegion
ADVAPI32.dll SetEntriesInAclW
QueryServiceConfigW
RegFlushKey
LookupPrivilegeValueW
GetTokenInformation
EqualSid
AdjustTokenPrivileges
OpenProcessToken
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
RegSetValueExW
GetUserNameW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
SetNamedSecurityInfoW
SHELL32.dll ShellExecuteW
SHGetFileInfoW
ShellExecuteExW
SHGetSpecialFolderPathW
SHGetFolderPathW
SHChangeNotify
SHFileOperationW
Shell_NotifyIconW
ole32.dll CoCreateGuid
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoSetProxyBlanket
CoUninitialize
CoCreateInstance
CoInitializeSecurity
CoInitializeEx
CoInitialize
OLEAUT32.dll #202
#149
#277
#150
#7
#9
#8
#6
#4
#2
#200
#12
#201
gdiplus.dll GdipCreateBitmapFromHICON
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipMeasureString
GdipDeleteFont
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipAlloc
GdipFree
GdipCloneImage
GdipDisposeImage
GdipSaveImageToFile
GdipDeleteGraphics
GdipGetImageHeight
GdipGetImagePixelFormat
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipGetImageWidth
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
GdiplusShutdown
GdipCreateFromHWND
GdipCreateFromHWNDICM
SHLWAPI.dll SHEnumKeyExW
SHSetValueW
SHEnumValueW
PathStripToRootW
PathRemoveFileSpecW
PathIsDirectoryW
PathFindFileNameW
PathFileExistsA
PathAppendW
PathFileExistsW
wnsprintfW
SHGetValueW
dbghelp.dll MiniDumpWriteDump
DuiLib.dll ?Activate@CListContainerElementUI@DuiLib@@UEAA_NXZ
?Activate@CControlUI@DuiLib@@UEAA_NXZ
??1CListContainerElementUI@DuiLib@@UEAA@XZ
?DrawItemBk@CListContainerElementUI@DuiLib@@QEAAXPEAUHDC__@@AEBUtagRECT@@@Z
?DoEvent@CListContainerElementUI@DuiLib@@UEAAXAEAUtagTEventUI@2@@Z
?Invalidate@CListContainerElementUI@DuiLib@@QEAAXXZ
?GetInterface@CListContainerElementUI@DuiLib@@UEAAPEAXPEB_W@Z
??0CListContainerElementUI@DuiLib@@QEAA@XZ
??1CListUI@DuiLib@@UEAA@XZ
?SetAttribute@CListUI@DuiLib@@UEAAXPEB_W0@Z
?DoEvent@CListUI@DuiLib@@UEAAXAEAUtagTEventUI@2@@Z
?Remove@CListUI@DuiLib@@UEAA_NPEAVCControlUI@2@@Z
?Add@CListUI@DuiLib@@UEAA_NPEAVCControlUI@2@@Z
?GetHeader@CListUI@DuiLib@@UEBAPEAVCListHeaderUI@2@XZ
?GetInterface@CListUI@DuiLib@@UEAAPEAXPEB_W@Z
??0CListUI@DuiLib@@QEAA@XZ
?SetMouseChildEnabled@CContainerUI@DuiLib@@UEAAX_N@Z
??1CContainerUI@DuiLib@@UEAA@XZ
?ApplyAttributeList@CControlUI@DuiLib@@QEAAPEAV12@PEB_W@Z
?SetBorderColor@CControlUI@DuiLib@@QEAAXK@Z
?SetBorderSize@CControlUI@DuiLib@@QEAAXH@Z
?SetBkColor@CControlUI@DuiLib@@QEAAXK@Z
?Create@CWindowWnd@DuiLib@@QEAAPEAUHWND__@@PEAU3@PEB_WKKUtagRECT@@PEAUHMENU__@@@Z
?GetDefaultAttributeList@CPaintManagerUI@DuiLib@@QEBAPEB_WPEB_W@Z
?GetFontInfo@CPaintManagerUI@DuiLib@@QEAAPEAUtagTFontInfo@2@H@Z
?UseParentResource@CPaintManagerUI@DuiLib@@QEAA_NPEAV12@@Z
?SetInitSize@CPaintManagerUI@DuiLib@@QEAAXHH@Z
?GetInitSize@CPaintManagerUI@DuiLib@@QEAA?AUtagSIZE@@XZ
?GetPaintWindow@CPaintManagerUI@DuiLib@@QEBAPEAUHWND__@@XZ
?GetHeight@CDuiRect@DuiLib@@QEBAHXZ
?GetWidth@CDuiRect@DuiLib@@QEBAHXZ
??0CSize@DuiLib@@QEAA@HH@Z
??0CPoint@DuiLib@@QEAA@AEBUtagPOINT@@@Z
?SetBkImage@CControlUI@DuiLib@@QEAAXPEB_W@Z
?OnNcPaint@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnNcHitTest@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnNcCalcSize@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnNcActivate@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnCreate@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?MessageHandler@WindowImplBase@DuiLib@@UEAA_JI_K_JAEA_N@Z
?HandleMessage@WindowImplBase@DuiLib@@UEAA_JI_K_J@Z
?GetClassStyle@WindowImplBase@DuiLib@@UEBAIXZ
?SetButtonHover@CButtonUI@DuiLib@@QEAAXH@Z
?Add@CContainerUI@DuiLib@@UEAA_NPEAVCControlUI@2@@Z
?SetFont@CLabelUI@DuiLib@@QEAAXH@Z
?SetTextColor@CLabelUI@DuiLib@@QEAAXK@Z
?GetCurSel@CTabLayoutUI@DuiLib@@QEBAHXZ
?NeedUpdate@CControlUI@DuiLib@@QEAAXXZ
??1CControlUI@DuiLib@@UEAA@XZ
??0CControlUI@DuiLib@@QEAA@XZ
?SetIcon@CWindowWnd@DuiLib@@QEAAXI@Z
?GetInstance@cPublicWndManager@DuiLib@@SAPEAV12@XZ
?GetInstance@cCheckHealthWndManager@DuiLib@@SAPEAV12@XZ
?GetInstance@cEmWndManager@DuiLib@@SAPEAV12@XZ
?GetInstance@cUpdateWndManager@DuiLib@@SAPEAV12@XZ
?GetInstance@cAccWndManager@DuiLib@@SAPEAV12@XZ
?GetInstance@cCleanWndManager@DuiLib@@SAPEAV12@XZ
?SetTabFocus@CPaintManagerUI@DuiLib@@QEAAXPEAUHWND__@@@Z
?ReloadAllImages@CPaintManagerUI@DuiLib@@QEAAXXZ
?RemoveAllImages@CPaintManagerUI@DuiLib@@QEAAXXZ
?GetWndManagerInstance@CPaintManagerUI@DuiLib@@SAPEAVcBaseWndManager@2@XZ
?ReloadSkin@CPaintManagerUI@DuiLib@@SAXXZ
?GetSizeBox@CPaintManagerUI@DuiLib@@QEAAAEAUtagRECT@@XZ
?Invalidate@CPaintManagerUI@DuiLib@@QEAAXAEAUtagRECT@@@Z
??4CDuiString@DuiLib@@QEAAAEBV01@PEB_W@Z
??0CPoint@DuiLib@@QEAA@XZ
?CenterWindow@CWindowWnd@DuiLib@@QEAAXXZ
?ShowModal@CWindowWnd@DuiLib@@QEAAIXZ
?Create@CWindowWnd@DuiLib@@QEAAPEAUHWND__@@PEAU3@PEB_WKKHHHHPEAUHMENU__@@@Z
?MessageLoop@CPaintManagerUI@DuiLib@@SAXXZ
?GetRoot@CPaintManagerUI@DuiLib@@QEBAPEAVCControlUI@2@XZ
?RemoveNotifier@CPaintManagerUI@DuiLib@@QEAA_NPEAVINotifyUI@2@@Z
?ReapObjects@CPaintManagerUI@DuiLib@@QEAAXPEAVCControlUI@2@@Z
?SetResourcePath@CPaintManagerUI@DuiLib@@SAXPEB_W@Z
?SetInstance@CPaintManagerUI@DuiLib@@SAXPEAUHINSTANCE__@@@Z
?GetInstancePath@CPaintManagerUI@DuiLib@@SA?AVCDuiString@2@XZ
?DoPostPaint@CVerticalLayoutUI@DuiLib@@UEAAXPEAUHDC__@@AEBUtagRECT@@@Z
?OnSize@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnSetFocus@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnMouseWheel@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnMouseMove@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnMouseHover@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnLButtonUp@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnLButtonDown@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnKillFocus@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnKeyDown@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnClose@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?AddAt@CContainerUI@DuiLib@@UEAA_NPEAVCControlUI@2@H@Z
?AddAt@CListUI@DuiLib@@UEAA_NPEAVCControlUI@2@H@Z
?DoPaint@CContainerUI@DuiLib@@UEAAXPEAUHDC__@@AEBUtagRECT@@@Z
?EstimateSize_real@CTextUI@DuiLib@@QEAA?AUtagSIZE@@U3@@Z
?OnClick@WindowImplBase@DuiLib@@MEAAXAEAUtagTNotifyUI@2@@Z
?OnChar@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?InitWindow@WindowImplBase@DuiLib@@UEAAXXZ
?HandleCustomMessage@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?GetZIPFileName@WindowImplBase@DuiLib@@UEBA?AVCDuiString@2@XZ
?GetSuperClassName@CWindowWnd@DuiLib@@MEBAPEB_WXZ
?GetStyle@WindowImplBase@DuiLib@@UEAAJXZ
?GetResourceType@WindowImplBase@DuiLib@@UEBA?AW4UILIB_RESOURCETYPE@2@XZ
?GetResourceID@WindowImplBase@DuiLib@@UEBAPEB_WXZ
?GetMessageMap@WindowImplBase@DuiLib@@MEBAPEBUDUI_MSGMAP@2@XZ
?GetProperty@CWebBrowserUI@DuiLib@@SAJPEAUIDispatch@@PEA_WPEAUtagVARIANT@@@Z
?InvokeMethod@CWebBrowserUI@DuiLib@@SAJPEAUIDispatch@@PEA_WPEAUtagVARIANT@@2H@Z
?GetHtmlWindow@CWebBrowserUI@DuiLib@@QEAAPEAUIDispatch@@XZ
?SetPushedImage@CButtonUI@DuiLib@@QEAAXPEB_W@Z
?SetHotImage@CButtonUI@DuiLib@@QEAAXPEB_W@Z
?UpdateUI@CWebBrowserUI@DuiLib@@UEAAJXZ
?TranslateUrl@CWebBrowserUI@DuiLib@@UEAAJKPEA_WPEAPEA_W@Z
?TranslateAcceleratorW@CWebBrowserUI@DuiLib@@UEAA_JPEAUtagMSG@@@Z
?TranslateAcceleratorW@CWebBrowserUI@DuiLib@@UEAAJPEAUtagMSG@@PEBU_GUID@@K@Z
?ShowUI@CWebBrowserUI@DuiLib@@UEAAJKPEAUIOleInPlaceActiveObject@@PEAUIOleCommandTarget@@PEAUIOleInPlaceFrame@@PEAUIOleInPlaceUIWindow@@@Z
?ShowContextMenu@CWebBrowserUI@DuiLib@@UEAAJKPEAUtagPOINT@@PEAUIUnknown@@PEAUIDispatch@@@Z
?SetVisible@CActiveXUI@DuiLib@@UEAAX_N@Z
?SetPos@CActiveXUI@DuiLib@@UEAAXUtagRECT@@@Z
?SetInternVisible@CActiveXUI@DuiLib@@UEAAX_N@Z
?SetAttribute@CWebBrowserUI@DuiLib@@MEAAXPEB_W0@Z
?ResizeBorder@CWebBrowserUI@DuiLib@@UEAAJPEBUtagRECT@@PEAUIOleInPlaceUIWindow@@H@Z
?ReleaseControl@CWebBrowserUI@DuiLib@@MEAAXXZ
?QueryStatus@CWebBrowserUI@DuiLib@@UEAAJPEBU_GUID@@KQEAU_tagOLECMD@@PEAU_tagOLECMDTEXT@@@Z
?QueryService@CWebBrowserUI@DuiLib@@UEAAJAEBU_GUID@@0PEAPEAX@Z
?OnFrameWindowActivate@CWebBrowserUI@DuiLib@@UEAAJH@Z
?OnDocWindowActivate@CWebBrowserUI@DuiLib@@UEAAJH@Z
?MessageHandler@CActiveXUI@DuiLib@@UEAA_JI_K_JAEA_N@Z
?Invoke@CWebBrowserUI@DuiLib@@UEAAJJAEBU_GUID@@KGPEAUtagDISPPARAMS@@PEAUtagVARIANT@@PEAUtagEXCEPINFO@@PEAI@Z
?HideUI@CWebBrowserUI@DuiLib@@UEAAJXZ
?GetTypeInfoCount@CWebBrowserUI@DuiLib@@UEAAJPEAI@Z
?GetTypeInfo@CWebBrowserUI@DuiLib@@UEAAJIKPEAPEAUITypeInfo@@@Z
?GetOptionKeyPath@CWebBrowserUI@DuiLib@@UEAAJPEAPEA_WK@Z
?GetInterface@CWebBrowserUI@DuiLib@@UEAAPEAXPEB_W@Z
?GetIDsOfNames@CWebBrowserUI@DuiLib@@UEAAJAEBU_GUID@@PEAPEA_WIKPEAJ@Z
?GetExternal@CWebBrowserUI@DuiLib@@UEAAJPEAPEAUIDispatch@@@Z
?GetDropTarget@CWebBrowserUI@DuiLib@@UEAAJPEAUIDropTarget@@PEAPEAU3@@Z
?GetControlFlags@CControlUI@DuiLib@@UEBAIXZ
?GetClass@CWebBrowserUI@DuiLib@@UEBAPEB_WXZ
?FilterDataObject@CWebBrowserUI@DuiLib@@UEAAJPEAUIDataObject@@PEAPEAU3@@Z
?Exec@CWebBrowserUI@DuiLib@@UEAAJPEBU_GUID@@KKPEAUtagVARIANT@@1@Z
?EnableModeless@CWebBrowserUI@DuiLib@@UEAAJH@Z
?Download@CWebBrowserUI@DuiLib@@UEAAJPEAUIMoniker@@PEAUIBindCtx@@KJPEAU_tagBINDINFO@@PEB_W3I@Z
?DoPaint@CActiveXUI@DuiLib@@UEAAXPEAUHDC__@@AEBUtagRECT@@@Z
?DoEvent@CControlUI@DuiLib@@UEAAXAEAUtagTEventUI@2@@Z
?DoCreateControl@CWebBrowserUI@DuiLib@@UEAA_NXZ
?QueryInterface@CWebBrowserUI@DuiLib@@UEAAJAEBU_GUID@@PEAPEAX@Z
?Release@CWebBrowserUI@DuiLib@@UEAAKXZ
?AddRef@CWebBrowserUI@DuiLib@@UEAAKXZ
??1CWebBrowserUI@DuiLib@@UEAA@XZ
?SetWebBrowserEventHandler@CWebBrowserUI@DuiLib@@QEAAXPEAVCWebBrowserEventHandler@2@@Z
?GetControl@CActiveXUI@DuiLib@@QEAAJU_GUID@@PEAPEAX@Z
?IsSelected@COptionUI@DuiLib@@QEBA_NXZ
?SetNormalImage@CButtonUI@DuiLib@@QEAAXPEB_W@Z
?SelectItem@CTabLayoutUI@DuiLib@@QEAA_NH@Z
??1WindowImplBase@DuiLib@@UEAA@XZ
??0WindowImplBase@DuiLib@@QEAA@XZ
??1CDialogBuilder@DuiLib@@QEAA@XZ
?Create@CDialogBuilder@DuiLib@@QEAAPEAVCControlUI@2@VSTRINGorID@2@PEB_WPEAVIDialogBuilderCallback@2@PEAVCPaintManagerUI@2@PEAV32@@Z
??0CDialogBuilder@DuiLib@@QEAA@XZ
??1CMarkup@DuiLib@@QEAA@XZ
?DrawItemText@CListContainerElementUI@DuiLib@@UEAAXPEAUHDC__@@AEBUtagRECT@@@Z
?EnableScrollBar@CContainerUI@DuiLib@@UEAAX_N0@Z
?EnableScrollBar@CListUI@DuiLib@@UEAAX_N0@Z
?EndDown@CContainerUI@DuiLib@@UEAAXXZ
?EndDown@CListUI@DuiLib@@UEAAXXZ
?EndRight@CContainerUI@DuiLib@@UEAAXXZ
?EndRight@CListUI@DuiLib@@UEAAXXZ
?EstimateSize@CControlUI@DuiLib@@UEAA?AUtagSIZE@@U3@@Z
?Expand@CListContainerElementUI@DuiLib@@UEAA_N_N@Z
?ExpandItem@CListUI@DuiLib@@UEAA_NH_N@Z
?FindControl@CContainerUI@DuiLib@@UEAAPEAVCControlUI@2@P6APEAV32@PEAV32@PEAX@Z1I@Z
?FindSelectable@CContainerUI@DuiLib@@UEBAHH_N@Z
?GetChildPadding@CContainerUI@DuiLib@@UEBAHXZ
?GetChildPadding@CListUI@DuiLib@@UEBAHXZ
?GetClassStyle@CWindowWnd@DuiLib@@MEBAIXZ
?GetControlFlags@CListContainerElementUI@DuiLib@@UEBAIXZ
?GetControlFlags@CListUI@DuiLib@@UEBAIXZ
?GetCount@CContainerUI@DuiLib@@UEBAHXZ
?GetCount@CListUI@DuiLib@@UEBAHXZ
?GetCurSel@CListUI@DuiLib@@UEBAHXZ
?GetExpandedItem@CListUI@DuiLib@@UEBAHXZ
?GetHorizontalScrollBar@CContainerUI@DuiLib@@UEBAPEAVCScrollBarUI@2@XZ
?GetHorizontalScrollBar@CListUI@DuiLib@@UEBAPEAVCScrollBarUI@2@XZ
?GetIndex@CListContainerElementUI@DuiLib@@UEBAHXZ
?GetInset@CContainerUI@DuiLib@@UEBA?AUtagRECT@@XZ
?OnSysCommand@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
?OnGetMinMaxInfo@WindowImplBase@DuiLib@@UEAA_JI_K_JAEAH@Z
??0CWebBrowserUI@DuiLib@@QEAA@XZ
?SetVisible@CListContainerElementUI@DuiLib@@UEAAX_N@Z
?SetVisible@CContainerUI@DuiLib@@UEAAX_N@Z
?SetTextCallback@CListUI@DuiLib@@UEAAXPEAVIListCallbackUI@2@@Z
?SetText@CControlUI@DuiLib@@UEAAXPEB_W@Z
?SetScrollPos@CListUI@DuiLib@@UEAAXUtagSIZE@@@Z
?SetScrollPos@CContainerUI@DuiLib@@UEAAXUtagSIZE@@@Z
?SetPos@CListUI@DuiLib@@UEAAXUtagRECT@@@Z
?SetPos@CContainerUI@DuiLib@@UEAAXUtagRECT@@@Z
?SetOwner@CListContainerElementUI@DuiLib@@UEAAXPEAVCControlUI@2@@Z
?SetMouseEnabled@CContainerUI@DuiLib@@UEAAX_N@Z
?SetManager@CContainerUI@DuiLib@@UEAAXPEAVCPaintManagerUI@2@PEAVCControlUI@2@_N@Z
?SetItemIndex@CListUI@DuiLib@@UEAA_NPEAVCControlUI@2@H@Z
?SetItemIndex@CContainerUI@DuiLib@@UEAA_NPEAVCControlUI@2@H@Z
?SetInternVisible@CContainerUI@DuiLib@@UEAAX_N@Z
?SetInset@CContainerUI@DuiLib@@UEAAXUtagRECT@@@Z
?SetIndex@CListContainerElementUI@DuiLib@@UEAAXH@Z
?SetFloatPos@CContainerUI@DuiLib@@MEAAXH@Z
?SetEnabled@CListContainerElementUI@DuiLib@@UEAAX_N@Z
?SetEnabled@CControlUI@DuiLib@@UEAAX_N@Z
?SetDelayedDestroy@CContainerUI@DuiLib@@UEAAX_N@Z
?SetChildPadding@CListUI@DuiLib@@UEAAXH@Z
?SetChildPadding@CContainerUI@DuiLib@@UEAAXH@Z
?SetAutoDestroy@CContainerUI@DuiLib@@UEAAX_N@Z
?SetAttribute@CListContainerElementUI@DuiLib@@UEAAXPEB_W0@Z
?SelectItem@CListUI@DuiLib@@UEAA_NH_N@Z
?Select@CListContainerElementUI@DuiLib@@UEAA_N_N@Z
?ResetSize@CContainerUI@DuiLib@@UEAAXM@Z
?RemoveAt@CListUI@DuiLib@@UEAA_NH@Z
?RemoveAt@CContainerUI@DuiLib@@UEAA_NH@Z
?RemoveAll@CListUI@DuiLib@@UEAAXXZ
?RemoveAll@CContainerUI@DuiLib@@UEAAXXZ
?Remove@CContainerUI@DuiLib@@UEAA_NPEAVCControlUI@2@@Z
?ProcessScrollBar@CContainerUI@DuiLib@@MEAAXUtagRECT@@HH@Z
?PaintText@CControlUI@DuiLib@@UEAAXPEAUHDC__@@@Z
?PaintStatusImage@CControlUI@DuiLib@@UEAAXPEAUHDC__@@@Z
?PageUp@CListUI@DuiLib@@UEAAXXZ
?PageUp@CContainerUI@DuiLib@@UEAAXXZ
?PageRight@CListUI@DuiLib@@UEAAXXZ
?PageRight@CContainerUI@DuiLib@@UEAAXXZ
?PageLeft@CListUI@DuiLib@@UEAAXXZ
?PageLeft@CContainerUI@DuiLib@@UEAAXXZ
?PageDown@CListUI@DuiLib@@UEAAXXZ
?PageDown@CContainerUI@DuiLib@@UEAAXXZ
?LineUp@CListUI@DuiLib@@UEAAXXZ
?LineUp@CContainerUI@DuiLib@@UEAAXXZ
?LineRight@CListUI@DuiLib@@UEAAXXZ
?LineRight@CContainerUI@DuiLib@@UEAAXXZ
?LineLeft@CListUI@DuiLib@@UEAAXXZ
?LineLeft@CContainerUI@DuiLib@@UEAAXXZ
?LineDown@CListUI@DuiLib@@UEAAXXZ
?LineDown@CContainerUI@DuiLib@@UEAAXXZ
?IsSelected@CListContainerElementUI@DuiLib@@UEBA_NXZ
?IsMouseChildEnabled@CContainerUI@DuiLib@@UEBA_NXZ
?IsExpanded@CListContainerElementUI@DuiLib@@UEBA_NXZ
?IsDelayedDestroy@CContainerUI@DuiLib@@UEBA_NXZ
?IsAutoDestroy@CContainerUI@DuiLib@@UEBA_NXZ
?HomeUp@CListUI@DuiLib@@UEAAXXZ
?HomeUp@CContainerUI@DuiLib@@UEAAXXZ
?HomeLeft@CListUI@DuiLib@@UEAAXXZ
?HomeLeft@CContainerUI@DuiLib@@UEAAXXZ
?GetVerticalScrollBar@CListUI@DuiLib@@UEBAPEAVCScrollBarUI@2@XZ
?GetVerticalScrollBar@CContainerUI@DuiLib@@UEBAPEAVCScrollBarUI@2@XZ
?GetTextCallback@CListUI@DuiLib@@UEBAPEAVIListCallbackUI@2@XZ
?GetText@CControlUI@DuiLib@@UEBA?AVCDuiString@2@XZ
?GetScrollRange@CListUI@DuiLib@@UEBA?AUtagSIZE@@XZ
?GetScrollRange@CContainerUI@DuiLib@@UEBA?AUtagSIZE@@XZ
?GetScrollPos@CListUI@DuiLib@@UEBA?AUtagSIZE@@XZ
?GetScrollPos@CContainerUI@DuiLib@@UEBA?AUtagSIZE@@XZ
?GetOwner@CListContainerElementUI@DuiLib@@UEAAPEAVIListOwnerUI@2@XZ
?GetListInfo@CListUI@DuiLib@@UEAAPEAUtagTListInfoUI@2@XZ
?GetList@CListUI@DuiLib@@UEBAPEAVCContainerUI@2@XZ
?GetItemIndex@CListUI@DuiLib@@UEBAHPEAVCControlUI@2@@Z
?GetItemIndex@CContainerUI@DuiLib@@UEBAHPEAVCControlUI@2@@Z
?GetItemAt@CListUI@DuiLib@@UEBAPEAVCControlUI@2@H@Z
?Empty@CDuiString@DuiLib@@QEAAXXZ
?IsEmpty@CDuiString@DuiLib@@QEBA_NXZ
??BCDuiString@DuiLib@@QEBAPEB_WXZ
?GetNextFrameInfo@CGifHandler@DuiLib@@QEAAPEAUtagTImageInfo@2@XZ
?GetCurrentFrameInfo@CGifHandler@DuiLib@@QEAAPEAUtagTImageInfo@2@XZ
?SetTimer@CPaintManagerUI@DuiLib@@QEAA_NPEAVCControlUI@2@II@Z
?KillTimer@CPaintManagerUI@DuiLib@@QEAA_NPEAVCControlUI@2@I@Z
?GetInterface@CControlUI@DuiLib@@UEAAPEAXPEB_W@Z
?DrawImage@CControlUI@DuiLib@@QEAA_NPEAUHDC__@@PEB_W1@Z
?SetVisible@CControlUI@DuiLib@@UEAAX_N@Z
?Invalidate@CControlUI@DuiLib@@QEAAXXZ
?LoadGif@CRenderEngine@DuiLib@@SAPEAVCGifHandler@2@VSTRINGorID@2@PEB_WK@Z
?DrawImage@CRenderEngine@DuiLib@@SAXPEAUHDC__@@PEAUHBITMAP__@@AEBUtagRECT@@222_NE333@Z
??0CButtonUI@DuiLib@@QEAA@XZ
?DoEvent@CButtonUI@DuiLib@@UEAAXAEAUtagTEventUI@2@@Z
?SetAttribute@CButtonUI@DuiLib@@UEAAXPEB_W0@Z
??1CButtonUI@DuiLib@@UEAA@XZ
?Activate@CButtonUI@DuiLib@@UEAA_NXZ
?DoInit@CControlUI@DuiLib@@UEAAXXZ
?DoPaint@CControlUI@DuiLib@@UEAAXPEAUHDC__@@AEBUtagRECT@@@Z
?DoPostPaint@CControlUI@DuiLib@@UEAAXPEAUHDC__@@AEBUtagRECT@@@Z
?EstimateSize@CButtonUI@DuiLib@@UEAA?AUtagSIZE@@U3@@Z
?Event@CControlUI@DuiLib@@UEAAXAEAUtagTEventUI@2@@Z
?FindControl@CControlUI@DuiLib@@UEAAPEAV12@P6APEAV12@PEAV12@PEAX@Z1I@Z
?GetControlFlags@CButtonUI@DuiLib@@UEBAIXZ
?GetFixedHeight@CControlUI@DuiLib@@UEBAHXZ
?GetFixedWidth@CControlUI@DuiLib@@UEBAHXZ
?GetFixedXY@CControlUI@DuiLib@@UEBA?AUtagSIZE@@XZ
?GetHeight@CControlUI@DuiLib@@UEBAHXZ
?GetManager@CControlUI@DuiLib@@UEBAPEAVCPaintManagerUI@2@XZ
?GetMaxHeight@CControlUI@DuiLib@@UEBAHXZ
?GetMaxWidth@CControlUI@DuiLib@@UEBAHXZ
?GetMinHeight@CControlUI@DuiLib@@UEBAHXZ
?GetMinWidth@CControlUI@DuiLib@@UEBAHXZ
?GetName@CControlUI@DuiLib@@UEBA?AVCDuiString@2@XZ
?GetPadding@CControlUI@DuiLib@@UEBA?AUtagRECT@@XZ
?GetParent@CControlUI@DuiLib@@UEBAPEAV12@XZ
?GetPos@CControlUI@DuiLib@@UEBAAEBUtagRECT@@XZ
?GetRelativePos@CControlUI@DuiLib@@UEBA?AUtagTRelativePosUI@2@XZ
?GetShortcut@CControlUI@DuiLib@@UEBA_WXZ
?GetTag@CControlUI@DuiLib@@UEBA_KXZ
?GetText@CLabelUI@DuiLib@@UEBA?AVCDuiString@2@XZ
?GetToolTip@CControlUI@DuiLib@@UEBA?AVCDuiString@2@XZ
?GetToolTipWidth@CControlUI@DuiLib@@UEAAHXZ
?GetUserData@CControlUI@DuiLib@@UEAAAEBVCDuiString@2@XZ
?GetWidth@CControlUI@DuiLib@@UEBAHXZ
?GetX@CControlUI@DuiLib@@UEBAHXZ
?GetY@CControlUI@DuiLib@@UEBAHXZ
?Init@CControlUI@DuiLib@@UEAAXXZ
?IsContextMenuUsed@CControlUI@DuiLib@@UEBA_NXZ
?IsEnabled@CControlUI@DuiLib@@UEBA_NXZ
?IsFloat@CControlUI@DuiLib@@UEBA_NXZ
?IsFocused@CControlUI@DuiLib@@UEBA_NXZ
?IsKeyboardEnabled@CControlUI@DuiLib@@UEBA_NXZ
?IsMouseEnabled@CControlUI@DuiLib@@UEBA_NXZ
?IsRelativePos@CControlUI@DuiLib@@UEBA_NXZ
?IsVisible@CControlUI@DuiLib@@UEBA_NXZ
?PaintBkColor@CControlUI@DuiLib@@UEAAXPEAUHDC__@@@Z
?PaintBkImage@CControlUI@DuiLib@@UEAAXPEAUHDC__@@@Z
?PaintBorder@CControlUI@DuiLib@@UEAAXPEAUHDC__@@@Z
?PaintText@CButtonUI@DuiLib@@UEAAXPEAUHDC__@@@Z
?ResetSize@CControlUI@DuiLib@@UEAAXM@Z
?SetContextMenuUsed@CControlUI@DuiLib@@UEAAX_N@Z
?SetEnabled@CButtonUI@DuiLib@@UEAAX_N@Z
?SetFixedHeight@CControlUI@DuiLib@@UEAAXH@Z
?SetFixedWidth@CControlUI@DuiLib@@UEAAXH@Z
?SetFixedXY@CControlUI@DuiLib@@UEAAXUtagSIZE@@@Z
?SetFloat@CControlUI@DuiLib@@UEAAX_N@Z
?SetFocus@CControlUI@DuiLib@@UEAAXXZ
?SetInternVisible@CControlUI@DuiLib@@UEAAX_N@Z
?SetKeyboardEnabled@CControlUI@DuiLib@@UEAAX_N@Z
?SetManager@CControlUI@DuiLib@@UEAAXPEAVCPaintManagerUI@2@PEAV12@_N@Z
?SetMaxHeight@CControlUI@DuiLib@@UEAAXH@Z
?SetMaxWidth@CControlUI@DuiLib@@UEAAXH@Z
?SetMinHeight@CControlUI@DuiLib@@UEAAXH@Z
?SetMinWidth@CControlUI@DuiLib@@UEAAXH@Z
?SetMouseEnabled@CControlUI@DuiLib@@UEAAX_N@Z
?SetName@CControlUI@DuiLib@@UEAAXPEB_W@Z
?SetPadding@CControlUI@DuiLib@@UEAAXUtagRECT@@@Z
?SetPos@CControlUI@DuiLib@@UEAAXUtagRECT@@@Z
?SetRelativeParentSize@CControlUI@DuiLib@@UEAAXUtagSIZE@@@Z
?SetRelativePos@CControlUI@DuiLib@@UEAAXUtagSIZE@@0@Z
?SetShortcut@CControlUI@DuiLib@@UEAAX_W@Z
?SetTag@CControlUI@DuiLib@@UEAAX_K@Z
?SetText@CLabelUI@DuiLib@@UEAAXPEB_W@Z
?SetToolTip@CControlUI@DuiLib@@UEAAXPEB_W@Z
?SetToolTipWidth@CControlUI@DuiLib@@UEAAXH@Z
?SetUserData@CControlUI@DuiLib@@UEAAXPEB_W@Z
??0CDuiString@DuiLib@@QEAA@PEB_WH@Z
??1CDuiString@DuiLib@@QEAA@XZ
??8CDuiString@DuiLib@@QEBA_NPEB_W@Z
?FindControl@CPaintManagerUI@DuiLib@@QEBAPEAVCControlUI@2@PEB_W@Z
?MessageHandler@CPaintManagerUI@DuiLib@@QEAA_NI_K_JAEA_J@Z
?GetHWND@CWindowWnd@DuiLib@@QEBAPEAUHWND__@@XZ
?ShowWindow@CWindowWnd@DuiLib@@QEAAX_N0@Z
?Close@CWindowWnd@DuiLib@@QEAAXI@Z
?HandleMessage@CWindowWnd@DuiLib@@MEAA_JI_K_J@Z
?OnFinalMessage@WindowImplBase@DuiLib@@UEAAXPEAUHWND__@@@Z
??0CDuiRect@DuiLib@@QEAA@XZ
??0CDuiRect@DuiLib@@QEAA@AEBUtagRECT@@@Z
?Offset@CDuiRect@DuiLib@@QEAAXHH@Z
??0CDuiString@DuiLib@@QEAA@XZ
??0CDuiString@DuiLib@@QEAA@AEBV01@@Z
?GetData@CDuiString@DuiLib@@QEBAPEB_WXZ
??4CDuiString@DuiLib@@QEAAAEBV01@AEBV01@@Z
??HCDuiString@DuiLib@@QEBA?AV01@PEB_W@Z
??YCDuiString@DuiLib@@QEAAAEBV01@AEBV01@@Z
??0CPaintManagerUI@DuiLib@@QEAA@XZ
??1CPaintManagerUI@DuiLib@@QEAA@XZ
?Init@CPaintManagerUI@DuiLib@@QEAAXPEAUHWND__@@@Z
?GetCaptionRect@CPaintManagerUI@DuiLib@@QEAAAEAUtagRECT@@XZ
?GetRoundCorner@CPaintManagerUI@DuiLib@@QEBA?AUtagSIZE@@XZ
?GetInstance@CPaintManagerUI@DuiLib@@SAPEAUHINSTANCE__@@XZ
?AttachDialog@CPaintManagerUI@DuiLib@@QEAA_NPEAVCControlUI@2@@Z
?AddNotifier@CPaintManagerUI@DuiLib@@QEAA_NPEAVINotifyUI@2@@Z
?AddPreMessageFilter@CPaintManagerUI@DuiLib@@QEAA_NPEAVIMessageFilterUI@2@@Z
?RemovePreMessageFilter@CPaintManagerUI@DuiLib@@QEAA_NPEAVIMessageFilterUI@2@@Z
?FindControl@CPaintManagerUI@DuiLib@@QEBAPEAVCControlUI@2@UtagPOINT@@@Z
??0CWindowWnd@DuiLib@@QEAA@XZ
??BCWindowWnd@DuiLib@@QEBAPEAUHWND__@@XZ
?SendMessageW@CWindowWnd@DuiLib@@QEAA_JI_K_J@Z
?PostMessageW@CWindowWnd@DuiLib@@QEAA_JI_K_J@Z
?GetItemAt@CContainerUI@DuiLib@@UEBAPEAVCControlUI@2@H@Z
FbApi.dll FbEnableFastBoot
FbIsSSD
FbIsSmartDriveEnabled
FbIsFastBootEnabled
FbInitialize
FbEnableSmartDrive
FbUninitialize
zd.dll ?DisableIEZoom@@YAXXZ
Metric.dll ?SetValue@cReportData2Metric@metricLib@@SA?AW4eError@2@AEAUSettingChanged@2@PEB_W11@Z
?TurnOnMetric@cReportData2Metric@metricLib@@SAXXZ
?TurnOffMetric@cReportData2Metric@metricLib@@SAXXZ
?ReportData@cReportData2Metric@metricLib@@SA_NAEAUTaskSelected@2@@Z
?SetValue@cReportData2Metric@metricLib@@SA?AW4eError@2@AEAUTaskSelected@2@PEB_W1I1@Z
?ReportData@cReportData2Metric@metricLib@@SA_NAEAUAppStatusValue@2@@Z
?ReportData@cReportData2Metric@metricLib@@SA_NAEAUMessageAction@2@@Z
?ReportData@cReportData2Metric@metricLib@@SA_NAEAUSelfUpdate@2@@Z
?SetValue@cReportData2Metric@metricLib@@SA?AW4eError@2@AEAUAppStatusValue@2@PEB_W@Z
?SetValue@cReportData2Metric@metricLib@@SA?AW4eError@2@AEAUMessageAction@2@PEB_W11@Z
?SetValue@cReportData2Metric@metricLib@@SA?AW4eError@2@AEAUSelfUpdate@2@PEB_W1@Z
?ReportData@cReportData2Metric@metricLib@@SA_NAEAUSettingChanged@2@@Z
UIAutomationCore.DLL UiaHostProviderFromHwnd
UiaReturnRawElementProvider
UiaClientsAreListening
UiaRaiseAutomationEvent
SensApi.dll IsNetworkAlive
WININET.dll InternetGetConnectedState
IPHLPAPI.DLL IcmpSendEcho
IcmpCreateFile
WS2_32.dll #115
#52
#11
#116
inet_ntop
WINHTTP.dll WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpOpenRequest
WinHttpOpen
WinHttpCrackUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpSetOption
WinHttpCloseHandle
WinHttpSetStatusCallback
WinHttpConnect
EnergyManager.dll ?GetDllPowerCtrl@@YAPEAVEnergyManager@@XZ
CheckUpdateDll.dll FreeUpdateList
UploadInstallResult
StartCheckUpdate
VERSION.dll VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
MSVCR110.dll ftell
?what@exception@std@@UEBAPEBDXZ
??1exception@std@@UEAA@XZ
??0exception@std@@QEAA@AEBV01@@Z
??0exception@std@@QEAA@AEBQEBDH@Z
??0exception@std@@QEAA@AEBQEBD@Z
??0exception@std@@QEAA@XZ
_localtime64_s
_swprintf
wprintf
wcstol
calloc
_wcsnicmp
strnlen
iswdigit
sqrt
sprintf
sprintf_s
_wsplitpath
_wmakepath
__RTDynamicCast
_recalloc
_time32
fwrite
fread
fopen
fclose
__crtSetUnhandledExceptionFilter
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_commode
_fmode
_acmdln
_initterm
_initterm_e
__setusermatherr
_configthreadlocale
_ismbblead
_cexit
_exit
exit
__set_app_type
__getmainargs
_amsg_exit
__crtGetShowWindowMode
__C_specific_handler
_time64
_mktime64
_snprintf
printf
_vswprintf
_itow_s
abs
_wcslwr_s
wcspbrk
_XcptFilter
__crtCapturePreviousContext
__crtCaptureCurrentContext
__crtTerminateProcess
__crtUnhandledException
__crt_debugger_hook
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
wcsncpy_s
wcscpy_s
wcscat_s
_stricmp
realloc
_wcsupr
_wcslwr
wcsrchr
wcsncpy
wcsncat
wcscpy
wcschr
wcscat
strstr
strrchr
strncpy
strchr
strcmp
strcat
strcpy
??_V@YAXPEAX@Z
malloc
free
_endthread
_beginthread
_vswprintf_s_l
wcsnlen
strlen
wmemcpy_s
_wtoi
_wcsicmp
_vscwprintf
vswprintf_s
wcsstr
wcscmp
swscanf
_itow
wcslen
memmove
memcpy
??2@YAPEAX_K@Z
memcmp
_purecall
memset
__CxxFrameHandler3
_CxxThrowException
memmove_s
memcpy_s
??3@YAXPEAX@Z
fseek
ferror
_ftelli64
_fseeki64
_itoa
_strlwr
_strupr
_wcsset
?terminate@@YAXXZ
_strnicmp

Delayed Imports

??0EnergyManager@@QEAA@AEBV0@@Z

Ordinal 1
Address 0x2ef4

??0EnergyManager@@QEAA@XZ

Ordinal 2
Address 0x2f04

??4EnergyManager@@QEAAAEAV0@AEBV0@@Z

Ordinal 3
Address 0x2f14

??4cReportData2Metric@metricLib@@QEAAAEAV01@AEBV01@@Z

Ordinal 4
Address 0x5f340

??_7EnergyManager@@6B@

Ordinal 5
Address 0x9d098

104

Type PNG
Language Chinese - PRC
Codepage UNKNOWN
Size 0xa69a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.52678
Detected Filetype PNG graphic file
MD5 fd26b7fe2e793974000548e2f330cbaa
SHA1 65361eeafc521eb0084ccee1e463d59ef0ac58c3
SHA256 9185e88ddcbcb5ae3387b93a3bf6f2d191bc7f193ed02666eed182828583e1d9
SHA3 9bd56a8bcabf2f1be05a743eec8c132991e0d4d8240062af80dee844eb1de1df

106

Type PNG
Language Chinese - PRC
Codepage UNKNOWN
Size 0xa69a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.52678
Detected Filetype PNG graphic file
MD5 fd26b7fe2e793974000548e2f330cbaa
SHA1 65361eeafc521eb0084ccee1e463d59ef0ac58c3
SHA256 9185e88ddcbcb5ae3387b93a3bf6f2d191bc7f193ed02666eed182828583e1d9
SHA3 9bd56a8bcabf2f1be05a743eec8c132991e0d4d8240062af80dee844eb1de1df

103

Type XML
Language Chinese - PRC
Codepage UNKNOWN
Size 0x316
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.15202
MD5 a9ac6529177cb282ec7c032d19796ec0
SHA1 b121e051009c528bfbe1ddebd8d8190ecc44e06a
SHA256 31634019de20e68db3e0537f8e158f01688095f18fe6c37ab3c8a65db5d5bb2e
SHA3 85d85b17cfae2ab1557a5c65a05262e35f9be1eef869be52c2723741fa4b9d5c

105

Type XML
Language Chinese - PRC
Codepage UNKNOWN
Size 0x31a
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.14842
MD5 48b0d2013bd7e53e9399c8984b5f7615
SHA1 34280a5ce0699f8d9bd01c69aa3ca1578ef32090
SHA256 67ce04dc6c8feb89f6e46fd53cdf9331f12f4f74d28ebe186cdfba211dac0771
SHA3 1c81ed24cae33e96c383782a5b1980f903628a19dba746f80c66c98b897deefa

1

Type RT_ICON
Language Chinese - PRC
Codepage UNKNOWN
Size 0xd344
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.9494
Detected Filetype PNG graphic file
MD5 b578a8fa8a14b678eed6372fff578a03
SHA1 d336f2143ce341b191de643a8a7e23f628f70c50
SHA256 335c0d153ea0077a8ee5912d482c8eaeb6d9f61003c787327cb25e0bda8e4a78
SHA3 4bea6eb6782c46883217b6a2d61b4358149e55d24ba51c9d0ba6303b2d136aae

2

Type RT_ICON
Language Chinese - PRC
Codepage UNKNOWN
Size 0xa2df
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 7.98272
Detected Filetype PNG graphic file
MD5 6e30cc84ed9dce0a4082c12fa3223897
SHA1 ed15d5271c42c688b9e6f2c43fa51252372da65b
SHA256 852d332ddb9515365f9c86dda70839fbbb8385bd739be7504e91684df65cfaee
SHA3 b20f75fc419c340f068a7e5df47b151c574bade14c1aeea7d08402e03f1754e3

3

Type RT_ICON
Language Chinese - PRC
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.22997
MD5 2efa0a67489dc2b941895813cf9514e9
SHA1 fe71c4826898cd97538c254ceb127901afc893c4
SHA256 fc33f6a476ddb9af55895fc55e41aaefd451da6243cb2397d8981360e63fd6a3
SHA3 57e96af19b3e50e1e04a56f0b5c536f815489bc618750059298d5da6b3e33666

4

Type RT_ICON
Language Chinese - PRC
Codepage UNKNOWN
Size 0x4228
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.52936
MD5 a3c03528929edb18ce935c6728f0266d
SHA1 39025b870899733c37e7adad538dc765e82e3daf
SHA256 8fcac51cc3c55180936618ae1d4de1a1532e0a6daf7aad30b855a14b51639925
SHA3 10ea71b3b835c339c9f0b4886c426ec61ddccc5d56e671af6e365b6ef78af94b

5

Type RT_ICON
Language Chinese - PRC
Codepage UNKNOWN
Size 0x25a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.94849
MD5 9a238da45ec651cd808d303864a99ea9
SHA1 57a7f98334a0fe9b7c17b1237ad0bf918299e554
SHA256 2c0a4b283c0f8ff4499d63a87b450e4e95a502a053a91f0c78be6be9672b59d0
SHA3 a7078daa5946d30a1262578d22064cb9d0a0685a7c7e131d4240adeac1d39a3b

6

Type RT_ICON
Language Chinese - PRC
Codepage UNKNOWN
Size 0x10a8
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.8788
MD5 371ec17d566ed5c3bc5f90e9af5b8d30
SHA1 dd0c619b8c1ac8b42228e6468c11418d9d349ba3
SHA256 dc3b40c76566e946a5ba21e4c3305302c87362c60e1b3139332b90e2af6e0d35
SHA3 dbc7b5bccb9c94124743d4cdee7a4800ee7e4def639ba09c5cbd3ad45d8c778c

7

Type RT_ICON
Language Chinese - PRC
Codepage UNKNOWN
Size 0x988
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.27883
MD5 f5a8a43d0124625bb34b56514886107a
SHA1 8dd5b550fe0c75a0ee7ed737a2c5aa7cd32fac02
SHA256 f30c013fb8aaa24849c9bf104c06d9f4d3d731b4bb504c99b2daa221d9913e34
SHA3 f20cae70a6ee221992e21dbe9a6950ec075e96120d02643cd77ec83f0ed80cd8

8

Type RT_ICON
Language Chinese - PRC
Codepage UNKNOWN
Size 0x468
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 6.08779
MD5 fcd1a03c75f188bf0fddcc1d38bd2f35
SHA1 429429e78ee3a5e6ec050e33b3a7450b82015453
SHA256 aa7d08157fc299a40a900c7a7d11b2044f94cdaefca0b40b0c1a6c84332c28f3
SHA3 63a3aa12e6c19c9c0d29cb69db3d2ea1274e065c2c6fe0f4e90999f1c1012555

9

Type RT_ICON
Language Chinese - PRC
Codepage UNKNOWN
Size 0x10828
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.47753
MD5 82dd55251150d43879d37f2639c1f897
SHA1 cfca64b9ba5e7cb711dff007bee246004c561ee3
SHA256 5b254407e1da387220e9a71107d71910aebb639a8a9364b028073a5ed1328582
SHA3 54dd58690c0ebda33ca6354ed739974340e95a140880ab24567c3e55372b236d

7 (#2)

Type RT_STRING
Language UNKNOWN
Codepage UNKNOWN
Size 0x2e
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.18832
MD5 0fb6903fec587beece11d0e826500443
SHA1 59944a13c623936c6230bed967ac47115e9b7f3a
SHA256 c7e9443efba2bc06c85069c9fc5f019f4f76422c9a2f93d647af1748dd1306ae
SHA3 94d029475d1aafae36a3d2c98b5431773b35b8bc3f5f06335dd10ba8e4b0ebd5

7 (#3)

Type RT_STRING
Language Chinese - PRC
Codepage UNKNOWN
Size 0x24
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0.848256
MD5 e94b23923d0cbbdcf550d4f89e6b8c9c
SHA1 df5992578153cf09306e02f9cd36cfed8c55d814
SHA256 96a5424eb44a5bafb7e26318a07fff5dfe8b7eeb42f5309de763478eeccfad4e
SHA3 39e7a84b6297067078f24776b2778f6a3883dc352c8f99d3828c420e531688f1

102

Type RT_GROUP_ICON
Language Chinese - PRC
Codepage UNKNOWN
Size 0x76
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.90038
Detected Filetype Icon file
MD5 c36fb330763324fb8a68ebc7e709450c
SHA1 7e389a12b17b471fc0c580215d773c9794fef096
SHA256 96fa9e528b0335f01656a2c7705b761e171987c63d46b567a374cc0e05195943
SHA3 1d4f49ccefae30c3da7453de06ed15927b0868cc67b2333874ea5eaff034d9ec

107

Type RT_GROUP_ICON
Language Chinese - PRC
Codepage UNKNOWN
Size 0x14
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.16096
Detected Filetype Icon file
MD5 9dbca5caee071b0abdc69ca211ba44a6
SHA1 70e0ce1035d87ab73919bb0184fd8f9b5e2b0b26
SHA256 5e1691e14755baf72d0fb04e9af2bf5d308d9e583e4c6af931d598af44742ad6
SHA3 bc6b03cd6a316dcc12af7152975a9c96f26360677fe8d9e14c0770ed36617aca

1 (#2)

Type RT_VERSION
Language Chinese - PRC
Codepage UNKNOWN
Size 0x324
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.44473
MD5 af7175005e99518ded60cc2d290f5a56
SHA1 25aa2783464232eb3426e1d0147697543612ef28
SHA256 ae8d5e055a80d15609544c08ab86363b394645de784b5cc8ed40a437c8431a52
SHA3 61f4703178a779141a51883a371c8a0b207e2807062d4b3101cf679a59b7bcf9

1 (#3)

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x4f6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 5.13278
MD5 e30167c098cf56a3baa80104c3491bc3
SHA1 15fa428a9729d23e28e676665f85455784bf9973
SHA256 3e893aae72f79245bb2a706e85f87cd25e4299f7131cea21afa76b47a0a5da5f
SHA3 8eef6bbb9bfc712a6b240995af044cf689c4d3a3e7865522e3148ba71f14eb45

String Table contents

caption
标题

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 1.1.20.15
ProductVersion 1.1.20.15
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT
VOS_NT_WINDOWS32
VOS_WINCE
VOS__WINDOWS32
FileType VFT_APP
Language Chinese - PRC
CompanyName Lenovo(beijing) Limited
FileDescription OneKeyOptimizer
FileVersion (#2) 1.1.20.15
InternalName OneKeyOptimizer.exe
LegalCopyright ©2013 Lenovo. All rights reserved.
OriginalFilename OneKeyOptimizer.exe
ProductName OneKeyOptimizer
ProductVersion (#2) 1.1.20.15
Resource LangID Chinese - PRC

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2014-Nov-18 10:10:01
Version 0.0
SizeofData 84
AddressOfRawData 0xbb420
PointerToRawData 0xba220
Referenced File D:\CODE\OKO\src1.1\beta\bin\x64_release\OneKeyOptimizer.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2014-Nov-18 10:10:01
Version 0.0
SizeofData 16
AddressOfRawData 0xbb474
PointerToRawData 0xba274

TLS Callbacks

Load Configuration

Size 0x70
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x1400db670

RICH Header

XOR Key 0xd12abe7b
Unmarked objects 0
Imports (50628) 2
ASM objects (50628) 2
C objects (50628) 20
199 (41118) 8
221 (VS2013 build 21005) 2
C objects (VS2008 build 21022) 8
ASM objects (VS2008 build 21022) 1
Imports (VS2008 SP1 build 30729) 2
Imports (VS2012 build 50727 / VS2005 build 50727) 8
C++ objects (50628) 20
188 (30716) 7
190 (30716) 3
Total imports 851
185 (30716) 35
C++ objects (VS2012 build 50727 / VS2005 build 50727) 44
Exports (VS2012 build 50727 / VS2005 build 50727) 1
Resource objects (VS2012 build 50727 / VS2005 build 50727) 1
151 1
Linker (VS2012 build 50727 / VS2005 build 50727) 1

Errors

<-- -->