Static task
static1
Behavioral task
behavioral1
Sample
ccc3ea2f9565358860fc199262a9d390f312b807c2ffecc02db8b0ffe2432ea7.exe
Resource
win7-20220812-en
windows7-x64
Behavioral task
behavioral2
Sample
ccc3ea2f9565358860fc199262a9d390f312b807c2ffecc02db8b0ffe2432ea7.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
General
-
Target
ccc3ea2f9565358860fc199262a9d390f312b807c2ffecc02db8b0ffe2432ea7
-
Size
4.9MB
-
MD5
76f1ada09cc4c528db7b1656ca71308c
-
SHA1
3e275c3808f20ecd6dd2ea5241950aba4509784f
-
SHA256
ccc3ea2f9565358860fc199262a9d390f312b807c2ffecc02db8b0ffe2432ea7
-
SHA512
f0c73992f75456afe41c0b20345554ba54c7ef576ff85672c352271f3549808cedaf8f1e5e1c1ac5b2d11a4c3cefc2000301c1116fe90c7d7cb6033fb4626f63
-
SSDEEP
49152:ozC3MnrgCftHFy0A612uqBZk2JX8mticI4/bMenIL8jkELACCtv55FSsqhoNS:MJFO61YZkG8E3jkELACCtv55F3S
Malware Config
Signatures
Files
-
ccc3ea2f9565358860fc199262a9d390f312b807c2ffecc02db8b0ffe2432ea7.exe windows x86
d3e6aeb3ff811f25f60fa5d6c61f23f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
gdiplus
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageRectRectI
GdipCloneImage
GdipBitmapGetPixel
GdipDrawImageRectI
GdipGetImageWidth
GdiplusShutdown
GdipBitmapSetPixel
GdipGetImageHeight
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipFree
GdipDisposeImage
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipSaveImageToStream
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
GdipAlloc
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
mfc71
ord5490
ord3675
ord4394
ord553
ord742
ord3204
ord5172
ord4296
ord2367
ord3891
ord3078
ord3079
ord5731
ord3318
ord1962
ord5202
ord6269
ord5145
ord4241
ord1350
ord1343
ord4990
ord1353
ord2039
ord2077
ord2081
ord1912
ord3987
ord5355
ord3929
ord4197
ord6014
ord1592
ord1648
ord4306
ord6065
ord3758
ord5613
ord4273
ord3109
ord5174
ord1361
ord3344
ord5151
ord3974
ord4861
ord4864
ord4379
ord4384
ord4381
ord4399
ord4401
ord4386
ord4777
ord4591
ord4181
ord4172
ord4781
ord4204
ord4790
ord4443
ord4444
ord3500
ord3654
ord2003
ord4299
ord4041
ord4016
ord5738
ord5859
ord3077
ord5927
ord2145
ord2144
ord5737
ord5924
ord6120
ord330
ord589
ord3286
ord5644
ord2375
ord1053
ord3432
ord6144
ord5205
ord5584
ord4250
ord4360
ord6081
ord980
ord2036
ord651
ord591
ord718
ord4872
ord5368
ord2811
ord4013
ord5658
ord1425
ord2719
ord3302
ord4675
ord4648
ord4594
ord5846
ord1385
ord3952
ord3444
ord3577
ord2371
ord2938
ord4327
ord431
ord4267
ord5169
ord4278
ord1905
ord2426
ord943
ord2939
ord4310
ord5014
ord5011
ord1914
ord1604
ord3757
ord3241
ord2961
ord5208
ord4021
ord2272
ord1187
ord1191
ord2475
ord1931
ord1483
ord4098
ord2089
ord1547
ord4234
ord2991
ord3171
ord416
ord1794
ord1892
ord3641
ord2899
ord2657
ord2164
ord1564
ord1063
ord6236
ord354
ord4580
ord3182
ord4262
ord5203
ord1401
ord5912
ord1551
ord1670
ord1671
ord4890
ord4735
ord4212
ord5182
ord2948
ord3997
ord5529
ord6067
ord4125
ord2168
ord6205
ord548
ord2097
ord1649
ord1593
ord4242
ord3319
ord743
ord501
ord709
ord347
ord602
ord1279
ord3161
ord5637
ord1308
ord313
ord1198
ord5420
ord2176
ord2086
ord1545
ord4232
ord3164
ord587
ord1643
ord1581
ord3292
ord715
ord442
ord675
ord1793
ord1412
ord2497
ord2451
ord4353
ord3336
ord5567
ord4569
ord5227
ord383
ord629
ord2746
ord5323
ord5625
ord1439
ord1917
ord559
ord747
ord3174
ord6174
ord6180
ord5419
ord6305
ord4085
ord2271
ord298
ord1791
ord3667
ord6306
ord516
ord3293
ord2974
ord4720
ord5211
ord4736
ord4213
ord4190
ord4844
ord4867
ord4617
ord4797
ord5070
ord5072
ord5071
ord4109
ord2292
ord4951
ord4118
ord2368
ord3989
ord2264
ord6035
ord6037
ord1161
ord570
ord759
ord2249
ord1740
ord1916
ord378
ord628
ord3441
ord1024
ord1185
ord5714
ord6006
ord5715
ord745
ord722
ord557
ord530
ord5727
ord782
ord4108
ord5642
ord3761
ord3850
ord3592
ord2018
ord4081
ord6168
ord2248
ord3830
ord2990
ord757
ord566
ord355
ord4320
ord1929
ord6017
ord1395
ord6283
ord5969
ord3677
ord3584
ord2370
ord2875
ord1651
ord1595
ord4198
ord1352
ord4991
ord1345
ord1351
ord4966
ord5161
ord562
ord751
ord4316
ord758
ord2234
ord567
ord3944
ord6009
ord2869
ord3085
ord5723
ord2553
ord1657
ord611
ord2442
ord4029
ord363
ord3466
ord5012
ord4019
ord5165
ord2955
ord395
ord1979
ord6282
ord5833
ord372
ord1729
ord5986
ord2654
ord3423
ord563
ord753
ord3086
ord6048
ord4888
ord1009
ord4115
ord6255
ord3388
ord5089
ord384
ord3430
ord5702
ord2427
ord3070
ord3553
ord3552
ord2328
ord1068
ord3849
ord3668
ord1327
ord1582
ord5212
ord4280
ord1521
ord4272
ord528
ord524
ord526
ord721
ord4583
ord519
ord518
ord1199
ord356
ord1096
ord4100
ord2094
ord3244
ord1955
ord1283
ord3591
ord3682
ord565
ord756
ord1652
ord1596
ord2985
ord3326
ord752
ord952
ord1000
ord1389
ord4352
ord1470
ord1971
ord5976
ord2699
ord2747
ord6062
ord2325
ord1645
ord1586
ord3304
ord730
ord3287
ord1290
ord2866
ord386
ord631
ord2280
ord2288
ord2748
ord5871
ord6119
ord5873
ord3882
ord3141
ord3450
ord3645
ord368
ord616
ord6043
ord4705
ord4257
ord4474
ord2621
ord2904
ord3931
ord2751
ord5795
ord5993
ord5930
ord5931
ord2169
ord785
ord5807
ord1966
ord5647
ord4123
ord4001
ord2321
ord3459
ord3636
ord6028
ord4719
ord4734
ord4211
ord4910
ord4465
ord4625
ord4584
ord4494
ord4972
ord3200
ord2943
ord4464
ord2263
ord5635
ord5634
ord5641
ord4455
ord3361
ord3082
ord5588
ord5888
ord6057
ord5523
ord3294
ord2975
ord739
ord3315
ord1589
ord1647
ord620
ord3195
ord1554
ord3596
ord5985
ord5929
ord3348
ord4564
ord5059
ord3328
ord1598
ord1654
ord2878
ord3991
ord5868
ord3057
ord3038
ord1565
ord5938
ord308
ord1873
ord3875
ord4749
msvcr71
iswspace
_localtime64
isdigit
calloc
atof
_ismbcdigit
_mktime64
_time64
wcsncmp
_ismbcspace
ceil
_access
rand
strtod
_ismbcalpha
_atoi64
strchr
isspace
wcscmp
wcschr
??9type_info@@QBEHABV0@@Z
_stat
_findfirsti64
_findclose
strcmp
_stricmp
time
gmtime
localtime
mktime
_strlwr
_strupr
_mktemp
_vsnprintf
_getmbcp
_rmdir
_errno
_getcwd
_chdir
_mbsnbcnt
_mbsdec
_mbsnbcmp
_mbscspn
memmove
fgetpos
strncmp
fwrite
_mbslen
strcpy
_mbsninc
_mbsnextc
_ismbblead
_mbsinc
_beginthreadex
fgets
_mbstok
strtoul
_setmode
fread
_mbsnicmp
_mbsstr
sqrt
abs
_splitpath
_makepath
memcpy
_CxxThrowException
strlen
__CxxFrameHandler
memset
_except_handler3
_mbsnbcpy
_ismbcalnum
sprintf
strncpy
sscanf
_snprintf
?name@type_info@@QBEPBDXZ
strstr
_tempnam
_findfirst
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
towlower
tolower
towupper
toupper
wcslen
wcscpy
??0bad_cast@@QAE@ABV0@@Z
??0bad_cast@@QAE@PBD@Z
??1bad_cast@@UAE@XZ
_resetstkoflw
_mbsicmp
_mbscmp
_strnicmp
_mbschr
atoi
floor
fclose
fprintf
__doserrno
fopen
_mbspbrk
malloc
realloc
fseek
ftell
_purecall
??0exception@@QAE@XZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
__p___argv
_mbsrchr
_strdup
__RTtypeid
??8type_info@@QBEHABV0@@Z
free
__RTDynamicCast
_CIpow
__dllonexit
_onexit
??1type_info@@UAE@XZ
_c_exit
_exit
_XcptFilter
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__security_error_handler
?terminate@@YAXXZ
_setmbcp
_CIfmod
_controlfp
kernel32
lstrcmpA
MulDiv
IsDBCSLeadByte
EnumDateFormatsA
GetUserDefaultLCID
GetDateFormatA
GetPrivateProfileSectionA
ExitProcess
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetNumberFormatA
GetTempFileNameA
GlobalReAlloc
SetEnvironmentVariableA
SizeofResource
GetLongPathNameA
IsBadReadPtr
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileA
FindNextFileA
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
InterlockedExchange
RaiseException
InitializeCriticalSection
DeleteCriticalSection
InterlockedCompareExchange
GetModuleFileNameA
FreeLibrary
GetModuleHandleA
LoadLibraryA
Sleep
DeleteFileA
FormatMessageA
GlobalSize
GlobalLock
GlobalUnlock
GlobalFree
CloseHandle
ReadFile
WaitForSingleObject
CreateNamedPipeA
ResumeThread
ConnectNamedPipe
PeekNamedPipe
WriteFile
FlushFileBuffers
DisconnectNamedPipe
CallNamedPipeA
GetEnvironmentVariableW
lstrlenA
WideCharToMultiByte
GetStringTypeExW
GetEnvironmentVariableA
CompareStringW
MultiByteToWideChar
lstrlenW
GetStringTypeExA
GetLastError
lstrcmpiA
lstrcmpiW
CompareStringA
GetVersion
GetSystemDefaultLCID
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
CreateSemaphoreA
ReleaseSemaphore
GetTickCount
GetCurrentThreadId
CreateThread
GetCurrentProcess
LocalAlloc
LocalFree
InterlockedDecrement
InterlockedIncrement
GetLocalTime
GetTempPathA
SetEvent
ReleaseMutex
OpenMutexA
CreateMutexA
GetCurrentThread
SetUnhandledExceptionFilter
SuspendThread
TerminateThread
WaitForMultipleObjects
GetWindowsDirectoryA
SetThreadLocale
GlobalAlloc
LockResource
LoadResource
FindResourceA
GetUserDefaultLangID
GetFileAttributesA
WinExec
lstrcatA
GetStartupInfoA
lstrcpyA
CreateEventA
GetDiskFreeSpaceExA
SetFileAttributesA
GetVolumeInformationA
GetShortPathNameA
GetFullPathNameA
IsBadWritePtr
ResetEvent
GlobalMemoryStatus
GetSystemDefaultLangID
SetEndOfFile
GetFileSize
SetLastError
CreateFileA
SetFilePointer
GetSystemInfo
GetDiskFreeSpaceA
FindClose
SetCurrentDirectoryA
FreeResource
GetCurrentDirectoryA
user32
DestroyMenu
AppendMenuA
CreatePopupMenu
SetFocus
SetClassLongA
GetMessagePos
TranslateAcceleratorA
LoadAcceleratorsA
GetPriorityClipboardFormat
GetClipboardData
IsClipboardFormatAvailable
SetClipboardData
CloseClipboard
GetClipboardOwner
EmptyClipboard
OpenClipboard
RegisterClipboardFormatA
UnionRect
MoveWindow
RegisterWindowMessageA
InvertRect
EqualRect
DestroyIcon
CreateWindowExA
IntersectRect
WindowFromDC
SetMenuItemInfoA
DrawTextA
DrawStateA
DrawIconEx
DrawFrameControl
MapWindowPoints
SetParent
LoadStringA
MessageBoxA
SetWindowTextA
GetDlgCtrlID
IsWindowEnabled
IsDialogMessageA
IsWindowVisible
GetWindowTextA
ModifyMenuA
MapDialogRect
WinHelpA
IsChild
GetFocus
IsMenu
GetWindow
MessageBeep
DestroyCursor
DrawFocusRect
GetNextDlgTabItem
AdjustWindowRect
DestroyWindow
SetRect
WaitForInputIdle
GetDesktopWindow
LoadBitmapA
IsRectEmpty
CopyIcon
SetForegroundWindow
wsprintfA
PostQuitMessage
ExitWindowsEx
FillRect
LoadImageA
KillTimer
ShowCursor
GetSystemMenu
CharUpperA
CharLowerW
CharLowerA
CharUpperW
RedrawWindow
InsertMenuA
RemoveMenu
DeleteMenu
GetSubMenu
SetMenu
LoadMenuA
SetCapture
WaitMessage
ReleaseCapture
GetWindowDC
GetMenuItemInfoA
AdjustWindowRectEx
WindowFromPoint
GetActiveWindow
GetMenu
SetCursor
PtInRect
GetClassNameA
ChildWindowFromPoint
ScreenToClient
GetCursorPos
IsWindow
ClientToScreen
SetTimer
GetSystemMetrics
TranslateMessage
PeekMessageA
DispatchMessageA
GetMessageA
CheckMenuItem
GetMenuItemID
GetMenuItemCount
IsZoomed
GetCapture
DrawEdge
GetKeyState
GetWindowRect
OffsetRect
ReleaseDC
CopyRect
GetDC
SetWindowLongA
GetWindowLongA
SystemParametersInfoA
CallWindowProcA
InvalidateRect
InflateRect
GetSysColor
GetClientRect
EnableWindow
BringWindowToTop
LoadIconA
GetSysColorBrush
LoadCursorA
UpdateWindow
SetWindowPos
OpenIcon
IsIconic
PostMessageA
GetParent
SendMessageA
DrawMenuBar
UnregisterClassA
EnableMenuItem
SetRectEmpty
gdi32
CreateFontIndirectA
RoundRect
CloseFigure
GetTextExtentPointW
GetCharABCWidthsA
GetCharWidthW
GetCharABCWidthsW
GetPath
GetCurrentPositionEx
TextOutW
SetPixel
EnumFontFamiliesExA
FillPath
CreateRectRgn
Pie
PathToRegion
GetOutlineTextMetricsA
Arc
GetPaletteEntries
ExtCreatePen
StrokePath
StrokeAndFillPath
EndPath
BeginPath
PolyBezier
Polyline
PtInRegion
OffsetRgn
GetRgnBox
Polygon
PaintRgn
GetMiterLimit
GetViewportOrgEx
CreateBitmap
GetWindowOrgEx
SetMiterLimit
GetTextMetricsA
CreateBrushIndirect
CreateHatchBrush
CreateICA
RestoreDC
SetMetaRgn
SaveDC
CreateRoundRectRgn
CreateEllipticRgnIndirect
AbortDoc
EndPage
StartPage
StartDocA
SetAbortProc
EndDoc
CreateDCA
CreateSolidBrush
CreatePen
GetDIBits
DeleteObject
StretchDIBits
GetMapMode
GetWindowExtEx
GetViewportExtEx
DeleteDC
Rectangle
DPtoLP
LPtoDP
CreateDIBSection
SetDIBitsToDevice
GetTextFaceA
GetBkColor
Ellipse
SelectPalette
CreateDIBitmap
CreatePalette
GetTextExtentPointA
SetTextJustification
TextOutA
ExtTextOutA
GetTextExtentPoint32A
SelectObject
BitBlt
StretchBlt
SetDIBits
CreateCompatibleBitmap
CreateCompatibleDC
FillRgn
CombineRgn
CreateRectRgnIndirect
RealizePalette
CreateHalftonePalette
GetDeviceCaps
PatBlt
CreateFontA
GetStockObject
GetObjectA
comdlg32
PrintDlgA
CommDlgExtendedError
winspool.drv
EnumJobsA
ClosePrinter
OpenPrinterA
DocumentPropertiesA
DeviceCapabilitiesA
advapi32
AdjustTokenPrivileges
RegCloseKey
LookupPrivilegeValueA
RegOpenKeyExA
RegEnumKeyExA
ImpersonateSelf
OpenThreadToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
RevertToSelf
FreeSid
RegEnumValueA
RegQueryInfoKeyA
RegDeleteValueA
RegCreateKeyExA
OpenProcessToken
RegQueryValueA
RegOpenKeyA
GetUserNameA
RegSetValueA
RegSetValueExA
RegQueryValueExA
RegDeleteKeyA
shell32
ShellExecuteExA
DragQueryPoint
SHGetDesktopFolder
DragQueryFileA
ShellExecuteA
SHBrowseForFolderA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
DragAcceptFiles
comctl32
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_AddMasked
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_BeginDrag
ImageList_DragMove
ImageList_DragEnter
ImageList_DragLeave
ImageList_EndDrag
ord17
shlwapi
SHDeleteKeyA
PathFileExistsA
ole32
CoUninitialize
CoCreateInstance
CreateStreamOnHGlobal
GetHGlobalFromStream
CoInitialize
oleaut32
SysFreeString
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
CreateErrorInfo
SetErrorInfo
VariantInit
VariantChangeType
SysAllocString
VariantClear
GetErrorInfo
msvcp71
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGI@Z
?empty@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE_NXZ
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AVconst_iterator@12@XZ
?resize@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z
?_Myptr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEPAGXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?is_open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QBE_NXZ
?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?is_open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QBE_NXZ
?eof@ios_base@std@@QBE_NXZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?length@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?_Id_cnt@id@locale@std@@0HA
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?rend@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$reverse_iterator@Vconst_iterator@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@2@XZ
?rbegin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$reverse_iterator@Vconst_iterator@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@2@XZ
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AVconst_iterator@12@XZ
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IABV12@@Z
??0locale@std@@QAE@XZ
?push_back@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXG@Z
?tolower@?$ctype@G@std@@QBEGG@Z
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AViterator@12@XZ
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AViterator@12@XZ
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IPBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
??$?MGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?at@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?clear@ios_base@std@@QAEXH_N@Z
?_Lock@_Mutex@std@@QAEXXZ
?_Unlock@_Mutex@std@@QAEXXZ
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?clear@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
?reserve@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?to_char_type@?$char_traits@G@std@@SAGABG@Z
?to_int_type@?$char_traits@G@std@@SAGABG@Z
?eq_int_type@?$char_traits@G@std@@SA_NABG0@Z
?eof@?$char_traits@G@std@@SAGXZ
?to_char_type@?$char_traits@D@std@@SADABH@Z
?to_int_type@?$char_traits@D@std@@SAHABD@Z
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?eof@?$char_traits@D@std@@SAHXZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@QAEXXZ
??1locale@std@@QAE@XZ
?is@?$ctype@D@std@@QBE_NFD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
?is@?$ctype@G@std@@QBE_NFG@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@@Z
?rdstate@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBEHXZ
?width@ios_base@std@@QAEHH@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGXZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
?size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?_Myptr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEXXZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEABGI@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGD@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Register@facet@locale@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$ctype@G@std@@2V0locale@2@A
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
rpcrt4
UuidCreate
UuidToStringA
RpcStringFreeA
wininet
InternetCanonicalizeUrlA
msvfw32
DrawDibDraw
DrawDibClose
DrawDibBegin
DrawDibRealize
DrawDibOpen
DrawDibSetPalette
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 320KB - Virtual size: 318KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 32KB - Virtual size: 802KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 13B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE