GPackage
Static task
static1
Behavioral task
behavioral1
Sample
29a5ad7794611d239ca54cb9b26ae6f15212f4974e90aaccbf06e8a074dcac44.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
29a5ad7794611d239ca54cb9b26ae6f15212f4974e90aaccbf06e8a074dcac44.exe
Resource
win10v2004-20220901-en
General
-
Target
29a5ad7794611d239ca54cb9b26ae6f15212f4974e90aaccbf06e8a074dcac44
-
Size
336KB
-
MD5
6898818c68ff95ce668c143ebaf955e0
-
SHA1
9d3f39c490f65c6394e57d8f96a2cc012efa0887
-
SHA256
29a5ad7794611d239ca54cb9b26ae6f15212f4974e90aaccbf06e8a074dcac44
-
SHA512
dfd1f3098355b540c0620acccc5842b502ea83513077e1ea178f00adcb261859af72736aba36df80897e6fe9e0156ff3e141ae059e150a1b55d1cc1d2e6db426
-
SSDEEP
3072:n5BZGn/0wq2uIlmHmNZSDyqGYtvt3RUUuLvvxK1PuMSDADeak7dJHB/AO:cqomHmNZ8xRvU5aPuMSsQLH5AO
Malware Config
Signatures
Files
-
29a5ad7794611d239ca54cb9b26ae6f15212f4974e90aaccbf06e8a074dcac44.exe windows x86
50babcf4180ce637feb0042c48017789
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetSaveFileNameA
core
?GBaseCycles@@3_KA
?GCRCTable@@3PAKA
?GMalloc@@3PAVFMalloc@@A
??DFString@@QBEPBGXZ
?GObjObjects@UObject@@0V?$TArray@PAVUObject@@@@A
?appUnwindf@@YAXPBGZZ
?GUnicodeOS@@3HA
?appStricmp@@YAHPBG0@Z
?appStrlen@@YAHPBG@Z
?appFromAnsi@@YAPBGPBDPAGH@Z
?appStrcpy@@YAPAGPAGPBG@Z
??1FString@@QAE@XZ
?appSprintf@@YAHPAGPBGZZ
?appPackage@@YAPBGXZ
??0FString@@QAE@XZ
?LocalizeGeneral@@YAPBGPBG00@Z
?winToANSI@@YAPADPADPBGH@Z
?winGetSizeANSI@@YAHPBG@Z
?appBaseDir@@YAPBGXZ
?GFileManager@@3PAVFFileManager@@A
??HFString@@QAE?AV0@PBG@Z
??0FString@@QAE@PBG@Z
??YFString@@QAEAAV0@PBG@Z
?NotifyExec@FNotifyHook@@UAEXPAXPBG@Z
?NotifyPostChange@FNotifyHook@@UAEXPAX@Z
?NotifyPreChange@FNotifyHook@@UAEXPAX@Z
??_7FNotifyHook@@6B@
??_7FExec@@6B@
?GIsRequestingExit@@3HA
?GIsRunning@@3HA
?appFailAssert@@YAXPBD0H@Z
?GPageSize@@3KA
?Logf@FOutputDevice@@QAAXW4EName@@PBGZZ
?appTimestamp@@YAPBGXZ
?GLogHook@@3PAVFOutputDevice@@A
?SafeString@FName@@SAPBGW4EName@@@Z
??4FString@@QAEAAV0@ABV0@@Z
?Printf@FString@@SA?AV1@PBGZZ
??8FString@@QBEHPBG@Z
?Parse@@YAHPBG0AAVFString@@PAG@Z
?GNull@@3PAVFOutputDevice@@A
?appStrcat@@YAPAGPAGPBG@Z
?appComputerName@@YAPBGXZ
?ParseParam@@YAHPBG0@Z
?Parse@@YAHPBG0PAGH1@Z
?appCmdLine@@YAPBGXZ
?SafeSuppressed@FName@@SAHW4EName@@@Z
?GIsCriticalError@@3HA
?Flush@FOutputDevice@@UAEXXZ
?appRequestExit@@YAXH@Z
?LocalizeError@@YAPBGPBDPBG1@Z
?GIsGuarded@@3HA
?appStrncat@@YAPAGPAGPBGH@Z
?appStrncpy@@YAPAGPAGPBGH@Z
?GErrorHist@@3PAGA
?StaticShutdownAfterError@UObject@@SAXXZ
?appGetSystemErrorMessage@@YAPBGH@Z
?GLog@@3PAVFOutputDevice@@A
?LocalizeError@@YAPBGPBG00@Z
?GConfig@@3PAVFConfigCache@@A
?GIsStarted@@3HA
?GIsEditor@@3HA
?GIsClient@@3HA
?GIsSoaking@@3HA
?GIsSlowTask@@3HA
?appStrcmp@@YAHPBG0@Z
?ClientSteamAuthorized@FFileManager@@UAEHXZ
?GetFileLastModTime@FFileManager@@UAEHPBGAAK11111@Z
?IsCaseSensitive@FFileManager@@UBEHXZ
?GetDriveLetters@FFileManager@@UBEHAAVFString@@@Z
?CalcHomeDir@FFileManager@@UAEPBGXZ
?ExpandPath@FFileManager@@UAE?AVFString@@PBG@Z
?Init@FFileManager@@UAEXH@Z
?winToUNICODE@@YAPAGPAGPBDH@Z
?winGetSizeUNICODE@@YAHPBD@Z
?Logf@FOutputDevice@@QAAXPBGZZ
??0FString@@QAE@ABV0@@Z
?Add@FArray@@QAEHHH@Z
?StaticLoadClass@UObject@@SAPAVUClass@@PAV2@PAV1@PBG2KPAVUPackageMap@@@Z
?StaticConstructObject@UObject@@SAPAV1@PAVUClass@@PAV1@VFName@@K1PAVFOutputDevice@@1@Z
?GError@@3PAVFOutputDeviceError@@A
?GetTransientPackage@UObject@@SAPAVUPackage@@XZ
GIsSSE
??4FString@@QAEAAV0@PBG@Z
?appStrchr@@YAPAGPBGH@Z
?Remove@FArray@@QAEXHHH@Z
??1FArray@@QAE@XZ
?PrivateStaticClass@UPackage@@0VUClass@@A
?LocalizeGeneral@@YAPBGPBDPBG1@Z
?appClipboardCopy@@YAXPBG@Z
?ExportToOutputDevice@UExporter@@SAXPAVUObject@@PAV1@AAVFOutputDevice@@PBGH@Z
?GetDefaultObject@UClass@@QAEPAVUObject@@XZ
??DFName@@QBEPBGXZ
?Parse@@YAHPBG0AAVFName@@@Z
?StaticFindObject@UObject@@SAPAV1@PAVUClass@@PAV1@PBGH@Z
?PrivateStaticClass@UObject@@0VUClass@@A
?appSaveStringToFile@@YAHABVFString@@PBGPAVFFileManager@@KH@Z
??YFString@@QAEAAV0@ABV0@@Z
?Empty@FString@@QAEXXZ
?GetName@UObject@@QBEPBGXZ
??0FName@@QAE@PBGW4EFindName@@@Z
?GetDefaultActor@UClass@@QAEPAVAActor@@XZ
?ParseObject@@YAHPBG0PAVUClass@@AAPAVUObject@@PAV2@@Z
?PrivateStaticClass@UClass@@0V1@A
?ParseCommand@@YAHPAPBGPBG@Z
?appStrfind@@YAPBGPBG0@Z
?appAtoi@@YAHPBG@Z
?GExec@@3PAVFExec@@A
?appSeconds@@YANXZ
?appMsgf@@YA?BHHPBGZZ
?GIsBenchmarking@@3HA
?GFixedTimeStep@@3MA
?GUseFixedTimeStep@@3HA
?Parse@@YAHPBG0AAH@Z
?GSecondsPerCycle@@3NA
?GScriptCycles@@3HA
?appSleep@@YAXM@Z
?GWindowManager@@3PAVUSubsystem@@A
?GCurrentTime@@3NA
?GDeltaTime@@3MA
?GIsRecordingMovie@@3HA
?appLoadFileToString@@YAHAAVFString@@PBGPAVFFileManager@@KH@Z
?Parse@@YAHPBG0AAM@Z
?GBuildLabel@@3PAGA
?GMachineOS@@3PAGA
?GMachineCPU@@3PAGA
?GMachineVideo@@3PAGA
?appSystemTime@@YAXAAH0000000@Z
?LeftChop@FString@@QBE?AV1@H@Z
?GetPathName@UObject@@QBEPBGPAV1@PAG@Z
??DFString@@QBE?AV0@ABV0@@Z
??DFString@@QBE?AV0@PBG@Z
?Realloc@FArray@@IAEXH@Z
?GFileManagerMiscTime@@3MA
?GetError@FArchive@@UAEHXZ
?Flush@FArchive@@UAEXXZ
?DetachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?AttachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?SetStopper@FArchive@@UAEXH@Z
?AtStopper@FArchive@@UAEHXZ
?AtEnd@FArchive@@UAEHXZ
?MapObject@FArchive@@UAEHPAVUObject@@@Z
?MapName@FArchive@@UAEHPAVFName@@@Z
??6FArchive@@UAEAAV0@AAVFName@@@Z
??6FArchive@@UAEAAV0@AAPAVUObject@@@Z
?CountBytes@FArchive@@UAEXKK@Z
?Preload@FArchive@@UAEXPAVUObject@@@Z
?SerializeInt@FArchive@@UAEXAAKK@Z
?SerializeBits@FArchive@@UAEXPAXH@Z
??1FArchive@@UAE@XZ
??0FArchive@@QAE@XZ
?GFileManagerSeekTime@@3MA
?Precache@FArchive@@UAEXH@Z
?TotalSize@FArchive@@UAEHXZ
?appToAnsi@@YAPBDPBGPADH@Z
??9FString@@QBEHPBG@Z
?GFileManagerLoadingTime@@3MA
?GFileManagerBytesRead@@3_KA
??_7FArchive@@6B@
?appStaticString1024@@YAPAGXZ
?appAtof@@YAMPBG@Z
?Log@FOutputDevice@@QAEXPBG@Z
?Left@FString@@QBE?AV1@H@Z
?InStr@FString@@QBEHPBGH@Z
??8FString@@QBEHABV0@@Z
?appStrstr@@YAPAGPBG0@Z
?appExit@@YAXXZ
?appPreExit@@YAXXZ
??HFString@@QAE?AV0@ABV0@@Z
?GDebugger@@3PAVUDebugger@@A
?Log@FOutputDevice@@QAEXW4EName@@PBG@Z
?GTransientNaming@@3HA
?GLazyLoad@@3HA
?GIsScriptable@@3HA
?GIsServer@@3HA
?appInit@@YAXPBG0PAVFMalloc@@PAVFOutputDevice@@PAVFOutputDeviceError@@PAVFFeedbackContext@@PAVFFileManager@@P6APAVFConfigCache@@XZH@Z
engine
?PrivateStaticClass@URenderDevice@@0VUClass@@A
?PrivateStaticClass@UEngine@@0VUClass@@A
?PrivateStaticClass@AActor@@0VUClass@@A
?PrivateStaticClass@UGameEngine@@0VUClass@@A
?UpdateString@FStats@@QAEXAAVFString@@H@Z
?GEngineStats@@3VFEngineStats@@A
?Clear@FStats@@QAEXXZ
?GStats@@3VFStats@@A
window
?OpenWindow@WProperties@@QAEXPAUHWND__@@@Z
??0WObjectProperties@@QAE@VFName@@KPBGPAVWWindow@@H@Z
?ScrollCaret@WEdit@@QAEXXZ
?GLogWindow@@3PAVWLog@@A
??1WObjectProperties@@UAE@XZ
??1WConfigProperties@@UAE@XZ
?SetExec@WTerminal@@QAEXPAVFExec@@@Z
?Paste@WTerminal@@UAEXXZ
?TypeChar@WTerminal@@UAEXG@Z
?OnDestroy@WLog@@UAEXXZ
?OnClose@WLog@@UAE_NXZ
?OnCreate@WLog@@UAEXXZ
??0WConfigProperties@@QAE@VFName@@PBG@Z
?OnCommand@WLog@@UAEXH@Z
?OnSize@WTerminal@@UAEXKHH@Z
?OnSetFocus@WTerminal@@UAEXPAUHWND__@@@Z
?OnCopyData@WLog@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?SetText@WLog@@UAEXPBG@Z
?WndProc@WLog@@UAEJIIJ@Z
?GetWindowClassName@WLog@@UAEXPAG@Z
?GetPackageName@WLog@@UAEPBGXZ
?OpenWindow@WLog@@QAEXHH@Z
??0WLog@@QAE@PBGAAPAVFArchive@@VFName@@PAVWWindow@@@Z
?InitWindowing@@YAXXZ
??1WLog@@UAE@XZ
?SetNotifyHook@WWindow@@QAEXPAVFNotifyHook@@@Z
?Show@WObjectProperties@@UAEXH@Z
?Serialize@WProperties@@UAEXAAVFArchive@@@Z
?GetPackageName@WObjectProperties@@UAEPBGXZ
?DoDestroy@WProperties@@UAEXXZ
?OnShowWindow@WLog@@UAEXH@Z
?CallDefaultProc@WWindow@@UAEJIIJ@Z
?OnSize@WProperties@@UAEXKHH@Z
?OnActivate@WProperties@@UAEXH@Z
?OnPaint@WProperties@@UAEXXZ
?OnInitDialog@WWindow@@UAEXXZ
?OnFinishSplitterDrag@WProperties@@UAEXPAVWDragInterceptor@@H@Z
?OnSetCursor@WProperties@@UAEHXZ
?OnDestroy@WProperties@@UAEXXZ
?GetRoot@WObjectProperties@@UAEPAVFTreeItem@@XZ
?GetDividerWidth@WProperties@@UAEHXZ
?ResizeList@WProperties@@UAEXXZ
?SetItemFocus@WProperties@@UAEXH@Z
?ForceRefresh@WProperties@@UAEXXZ
?BeginSplitterDrag@WProperties@@UAEXXZ
?SetValue@WProperties@@UAEXPBG@Z
?ExpandAll@WProperties@@UAEXXZ
?Show@WWindow@@UAEXH@Z
?GetPackageName@WConfigProperties@@UAEPBGXZ
?GetWindowClassName@WConfigProperties@@UAEXPAG@Z
?GetRoot@WConfigProperties@@UAEPAVFTreeItem@@XZ
??_7WCoolButton@@6B@
??0WCoolButton@@QAE@PAVWWindow@@HUFDelegate@@K@Z
??1WCoolButton@@UAE@XZ
?GetNext@WWizardPage@@UAEPAV1@XZ
??0WCrashBoxDialog@@QAE@PBG0@Z
?hInstanceWindow@@3PAUHINSTANCE__@@A
??_7WWizardPage@@6B@
??1WWindow@@UAE@XZ
??1WDialog@@UAE@XZ
?EndDialog@WDialog@@QAEXH@Z
?OnInitDialog@WDialog@@UAEXXZ
??0WWizardPage@@QAE@PBGHPAVWWizardDialog@@@Z
??_7FDelegate@@6B@
??0WButton@@QAE@PAVWWindow@@HUFDelegate@@P6GJPAUHWND__@@IIJ@Z@Z
??1WWizardPage@@UAE@XZ
??1WButton@@UAE@XZ
?OnClose@WWindow@@UAE_NXZ
?OnDestroy@WWindow@@UAEXXZ
?OnCurrent@WWizardPage@@UAEXXZ
?GetBackText@WWizardPage@@UAEPBGXZ
?GetFinishText@WWizardPage@@UAEPBGXZ
?GetCancelText@WWizardPage@@UAEPBGXZ
?GetShow@WWizardPage@@UAEHXZ
?OnCancel@WWizardPage@@UAEXXZ
?OnInitDialog@WWizardDialog@@UAEXXZ
??0WWizardDialog@@QAE@XZ
??0WLabel@@QAE@PAVWWindow@@HP6GJPAUHWND__@@IIJ@Z@Z
?MaybeDestroy@WWindow@@QAEXXZ
??_7WLabel@@6B@
??1WControl@@UAE@XZ
??1WWizardDialog@@UAE@XZ
??1WLabel@@UAE@XZ
?Unused@FCommandTarget@@UAEXXZ
?Show@WDialog@@UAEXH@Z
?Serialize@WWindow@@UAEXAAVFArchive@@@Z
?DoDestroy@WWindow@@UAEXXZ
?WndProc@WWindow@@UAEJIIJ@Z
?CallDefaultProc@WDialog@@UAEJIIJ@Z
?InterceptControlCommand@WWindow@@UAEHIIJ@Z
?GetText@WWindow@@UAE?AVFString@@XZ
?SetText@WWindow@@UAEXPBG@Z
?GetLength@WWindow@@UAEHXZ
?OnCopyData@WWindow@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?OnSetFocus@WWindow@@UAEXPAUHWND__@@@Z
?OnKillFocus@WWindow@@UAEXPAUHWND__@@@Z
?OnSize@WWindow@@UAEXKHH@Z
?OnWindowPosChanging@WWindow@@UAEXPAH000@Z
?OnMove@WWindow@@UAEXHH@Z
?OnCommand@WWindow@@UAEXH@Z
?OnSysCommand@WWindow@@UAEHH@Z
?OnActivate@WWindow@@UAEXH@Z
?OnKeyDown@WWindow@@UAEXG@Z
?OnCut@WWindow@@UAEXXZ
?OnCopy@WWindow@@UAEXXZ
?OnPaste@WWindow@@UAEXXZ
?OnShowWindow@WWindow@@UAEXH@Z
?OnUndo@WWindow@@UAEXXZ
?OnEraseBkgnd@WWindow@@UAEHXZ
?OnVScroll@WWindow@@UAEXIJ@Z
?OnHScroll@WWindow@@UAEXIJ@Z
?OnKeyUp@WWindow@@UAEXIJ@Z
?OnPaint@WWindow@@UAEXXZ
?OnCreate@WWindow@@UAEXXZ
?OnDrawItem@WWindow@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
??1WCrashBoxDialog@@UAE@XZ
??_7WButton@@6B@
?GetWindowClassName@WObjectProperties@@UAEXPAG@Z
?OnMeasureItem@WWindow@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z
?OnEnterIdle@WWindow@@UAEXXZ
?OnMouseEnter@WWindow@@UAEXXZ
?OnMouseLeave@WWindow@@UAEXXZ
?OnMouseHover@WWindow@@UAEXXZ
?OnTimer@WWindow@@UAEXXZ
?OnReleaseCapture@WWindow@@UAEXXZ
?OnMdiActivate@WWindow@@UAEXH@Z
?OnMouseMove@WWindow@@UAEXKUFPoint@@@Z
?OnLeftButtonDown@WWindow@@UAEXXZ
?OnLeftButtonDoubleClick@WWindow@@UAEXXZ
?OnMiddleButtonDoubleClick@WWindow@@UAEXXZ
?OnRightButtonDoubleClick@WWindow@@UAEXXZ
?OnRightButtonDown@WWindow@@UAEXXZ
?OnLeftButtonUp@WWindow@@UAEXXZ
?OnRightButtonUp@WWindow@@UAEXXZ
?OnFinishSplitterDrag@WWindow@@UAEXPAVWDragInterceptor@@H@Z
?OnSetCursor@WWindow@@UAEHXZ
?OnClose@WWizardDialog@@UAE_NXZ
?OnDestroy@WWizardDialog@@UAEXXZ
?MyDrawEdge@WWindow@@UAEXPAUHDC__@@PAUtagRECT@@H@Z
?DoModal@WDialog@@UAEHPAUHINSTANCE__@@@Z
?LocalizeText@WDialog@@UAEXPBG0@Z
?Advance@WWizardDialog@@UAEXPAVWWizardPage@@@Z
?RefreshPage@WWizardDialog@@UAEXXZ
?OnBack@WWizardDialog@@UAEXXZ
?OnNext@WWizardDialog@@UAEXXZ
?OnFinish@WWizardDialog@@UAEXXZ
?OnCancel@WWizardDialog@@UAEXXZ
?LoadFile@FWindowsBitmap@@QAEHPBG@Z
?GetBitmapHandle@FWindowsBitmap@@QAEPAUHBITMAP__@@XZ
??1FWindowsBitmap@@QAE@XZ
?OnChar@WWindow@@UAEXG@Z
windrv
??0UDebuggerCore@@QAE@PAVWLog@@@Z
?Initialize@UDebuggerCore@@QAEXXZ
?LoadEditPackages@UDebuggerCore@@QAEXXZ
?Close@UDebuggerCore@@QAEXXZ
??1UDebuggerCore@@QAE@XZ
user32
SetPropW
SetPropA
RemovePropW
RemovePropA
PeekMessageA
DispatchMessageA
GetForegroundWindow
GetWindowThreadProcessId
SetFocus
ShowWindow
PeekMessageW
TranslateMessage
DispatchMessageW
MessageBoxW
LoadIconW
LoadIconA
SetForegroundWindow
DestroyWindow
CreateDialogParamW
CreateDialogParamA
GetDlgItem
GetSystemMetrics
SetWindowPos
SendMessageW
SendMessageA
UpdateWindow
kernel32
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
GetSystemInfo
GetLastError
FileTimeToSystemTime
GetFileAttributesExW
VirtualAlloc
VirtualFree
CreateMutexA
CreateMutexW
GetSystemDirectoryW
GetCurrentThreadId
Sleep
SetThreadPriority
GetFileSize
CreateFileA
CreateFileW
SetFilePointer
CloseHandle
SetFileAttributesA
SetFileAttributesW
WriteFile
DeleteFileA
DeleteFileW
GetFileAttributesA
GetFileAttributesW
MoveFileA
MoveFileW
SetCurrentDirectoryA
GetStartupInfoA
GetModuleHandleA
GetWindowsDirectoryW
GetCurrentThread
GetCommandLineW
FindFirstFileW
FindNextFileW
FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryW
RemoveDirectoryA
SetCurrentDirectoryW
CreateDirectoryW
CreateDirectoryA
CopyFileW
CopyFileA
ReadFile
GetLogicalDrives
GetDriveTypeW
GetDriveTypeA
GetCurrentDirectoryW
GetCurrentDirectoryA
GetModuleFileNameW
gdi32
DeleteObject
advapi32
RegFlushKey
shell32
ShellExecuteW
ShellExecuteA
steam_api
SteamApps
SteamAPI_UnregisterCallback
SteamUserStats
SteamAPI_RegisterCallback
SteamAPI_RunCallbacks
SteamFriends
SteamAPI_Shutdown
SteamAPI_Init
SteamMatchmakingServers
msvcr71
_controlfp
?terminate@@YAXXZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
floor
_purecall
__CxxFrameHandler
_CxxThrowException
_vsnwprintf
strncpy
srand
rand
_stat
calloc
free
??1type_info@@UAE@XZ
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
Exports
Exports
Sections
.text Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 148KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ