??4_Init_locks@std@@QAEAAV01@ABV01@@Z
Static task
static1
Behavioral task
behavioral1
Sample
bfc18163acd178816f08af3752f2d715b55f2efaa624aec289077b39fc9687bd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bfc18163acd178816f08af3752f2d715b55f2efaa624aec289077b39fc9687bd.exe
Resource
win10v2004-20220812-en
General
-
Target
bfc18163acd178816f08af3752f2d715b55f2efaa624aec289077b39fc9687bd
-
Size
891KB
-
MD5
00a5c3ba9c20565b7bfe5787432994f0
-
SHA1
f18597b72921e23a239446f09199f513bd8fec13
-
SHA256
bfc18163acd178816f08af3752f2d715b55f2efaa624aec289077b39fc9687bd
-
SHA512
2122b0f1ddc1b959aff4246af77086940ef0601450aabb7f6eb9bc945011ae69c8e7a83d82ef2406f8121b46d2cf4dcfbbb5a17db4196ab947a3589bca471053
-
SSDEEP
12288:K1mFUBWqU5PI475Jan7VmTOPdZck56ClYLAFUeqrr:S2OVmTOlZck56oYLmtqrr
Malware Config
Signatures
Files
-
bfc18163acd178816f08af3752f2d715b55f2efaa624aec289077b39fc9687bd.exe windows x86
2a4061ac516f16ceab058bffe78e266b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmDisableIME
bdmskin
?GetEnableDrag@CBDMControlUI@BDMSkin@@UAE_NXZ
?SetAngle@CBDMControlUI@BDMSkin@@UAEXM@Z
?Event@CBDMControlUI@BDMSkin@@UAEXAAUtagTEventUI@@@Z
?SetPos@CBDMControlUI@BDMSkin@@UAEXUtagRECT@@@Z
?EstimateSize@CBDMLabelUI@BDMSkin@@UAE?AUtagSIZE@@U3@@Z
?SetEnableDrop@CBDMControlUI@BDMSkin@@UAEX_N@Z
?GetAlpha@CBDMControlUI@BDMSkin@@UAEEXZ
?SetRelativePos@CBDMControlUI@BDMSkin@@UAEXUtagSIZE@@0@Z
?SetFixedWidth@CBDMControlUI@BDMSkin@@UAEXH@Z
?SetFont@CBDMLabelUI@BDMSkin@@QAEXH@Z
?SetEnableDrag@CBDMControlUI@BDMSkin@@UAEX_N@Z
?PaintFirstBkImage@CBDMControlUI@BDMSkin@@UAEXPAUHDC__@@ABUtagRECT@@@Z
?GetFixedXY@CBDMControlUI@BDMSkin@@UBE?AUtagSIZE@@XZ
?GetShortcut@CBDMControlUI@BDMSkin@@UBE_WXZ
?SetTextColor@CBDMLabelUI@BDMSkin@@QAEXK@Z
?SendLeaveDragNotify@CBDMControlUI@BDMSkin@@UAEXXZ
?PaintDragImage@CBDMControlUI@BDMSkin@@UAEXPAUHDC__@@@Z
?SetEnabled@CBDMControlUI@BDMSkin@@UAEX_N@Z
?SetUserData@CBDMControlUI@BDMSkin@@UAEXPB_W@Z
?GetControlFlags@CBDMLabelUI@BDMSkin@@UBEIXZ
?SendEnterDragNotify@CBDMControlUI@BDMSkin@@UAEXXZ
?DoInit@CBDMControlUI@BDMSkin@@UAEXXZ
?SetFocus@CBDMControlUI@BDMSkin@@UAEXXZ
?SetBkColor3@CBDMControlUI@BDMSkin@@UAEXK@Z
?GetContainer@CBDMLabelUI@BDMSkin@@UAEPAVIContainerUI@ExpandInterface@2@XZ
?GetLeaveDrag@CBDMControlUI@BDMSkin@@UAE_NXZ
?PaintBkColor@CBDMControlUI@BDMSkin@@UAEXPAUHDC__@@@Z
?NeedUpdate@CBDMControlUI@BDMSkin@@UAEXXZ
?SetBkColor2@CBDMControlUI@BDMSkin@@UAEXK@Z
?GetInterface@CBDMLabelUI@BDMSkin@@UAEPAXPB_W@Z
?GetEnterDrag@CBDMControlUI@BDMSkin@@UAE_NXZ
?PaintBkImage@CBDMControlUI@BDMSkin@@UAEXPAUHDC__@@@Z
?GetPos@CBDMControlUI@BDMSkin@@UBEABUtagRECT@@XZ
?GetBkImage@CBDMControlUI@BDMSkin@@UAEPB_WXZ
?GetClass@CBDMLabelUI@BDMSkin@@UBEPB_WXZ
?SetLeaveDrag@CBDMControlUI@BDMSkin@@UAEX_N@Z
?PaintBorder@CBDMControlUI@BDMSkin@@UAEXPAUHDC__@@@Z
?SetRelativeParentSize@CBDMControlUI@BDMSkin@@UAEXUtagSIZE@@@Z
?GetMinWidth@CBDMControlUI@BDMSkin@@UBEHXZ
??0CBDMLabelUI@BDMSkin@@QAE@XZ
?SetEnterDrag@CBDMControlUI@BDMSkin@@UAEX_N@Z
?PaintStatusImage@CBDMControlUI@BDMSkin@@UAEXPAUHDC__@@@Z
?GetText@CBDMControlUI@BDMSkin@@UBE?AVCStdString@Utils@2@XZ
?SetManager@CBDMControlUI@BDMSkin@@UAEXPAVIControlManger@ExpandInterface@2@PAVIControlUI@42@_N@Z
?SetDrawIcon@CBDMControlUI@BDMSkin@@UAEX_NPAUHICON__@@UtagRECT@@@Z
?SetBeDragDropOver@CBDMControlUI@BDMSkin@@UAEX_NPAUIDataObject@@@Z
?Activate@CBDMControlUI@BDMSkin@@UAE_N_N@Z
?SetFloat@CBDMControlUI@BDMSkin@@UAEX_N@Z
?GetMaxHeight@CBDMControlUI@BDMSkin@@UBEHXZ
?GetTipInitTimer@CBDMControlUI@BDMSkin@@UAEHXZ
?SetDragDrop@CBDMControlUI@BDMSkin@@UAEX_N@Z
?NeedParentUpdate@CBDMControlUI@BDMSkin@@UAEXXZ
?GetFixedWidth@CBDMControlUI@BDMSkin@@UBEHXZ
?DoPostPaint@CBDMControlUI@BDMSkin@@UAEXPAUHDC__@@ABUtagRECT@@@Z
?SetTipInitTimer@CBDMControlUI@BDMSkin@@UAEXH@Z
?GetGrayImage@CBDMControlUI@BDMSkin@@UAE_NXZ
?ApplyAttributeList@CBDMControlUI@BDMSkin@@UAEPAVIControlUI@ExpandInterface@2@PB_W@Z
?GetManager@CBDMControlUI@BDMSkin@@UAEPAVIControlManger@ExpandInterface@2@XZ
?SetPadding@CBDMControlUI@BDMSkin@@UAEXUtagRECT@@@Z
?GetScrollWheelSize@CBDMControlUI@BDMSkin@@UAEKXZ
?SetGrayImage@CBDMControlUI@BDMSkin@@UAEX_N@Z
?IsFocused@CBDMControlUI@BDMSkin@@UBE_NXZ
?GetBorderColor@CBDMControlUI@BDMSkin@@UBEKXZ
?GetFocusBorderColor@CBDMControlUI@BDMSkin@@UBEKXZ
?SetScrollWheelSize@CBDMControlUI@BDMSkin@@UAEXK@Z
?ClearMenu@CBDMControlUI@BDMSkin@@UAEXXZ
?SetContextMenuUsed@CBDMControlUI@BDMSkin@@UAEX_N@Z
?IsContextMenuUsed@CBDMControlUI@BDMSkin@@UBE_NXZ
?SetTag@CBDMControlUI@BDMSkin@@UAEXI@Z
?SetHoverPlay@CBDMControlUI@BDMSkin@@UAEX_N@Z
?HideMenu@CBDMControlUI@BDMSkin@@UAEHXZ
?IsUpdateNeeded@CBDMControlUI@BDMSkin@@UBE_NXZ
?GetPadding@CBDMControlUI@BDMSkin@@UBE?AUtagRECT@@XZ
?GetBorderSize@CBDMControlUI@BDMSkin@@UBEHXZ
?SetLeavePlay@CBDMControlUI@BDMSkin@@UAEX_N@Z
?ShowMenu@CBDMControlUI@BDMSkin@@UAEHPAUtagPOINT@@H@Z
?IsEnabled@CBDMControlUI@BDMSkin@@UBE_NXZ
?GetHeight@CBDMControlUI@BDMSkin@@UBEHXZ
?SetToolTipMaxWidth@CBDMControlUI@BDMSkin@@UAEXK@Z
??_DCBDMLabelUI@BDMSkin@@QAEXXZ
?SetPlayTimeSpace@CBDMControlUI@BDMSkin@@UAEXK@Z
?ResetMenuItem@CBDMControlUI@BDMSkin@@UAEHPAPAPA_WH@Z
?SetText@CBDMControlUI@BDMSkin@@UAEXPB_W@Z
?IsFloat@CBDMControlUI@BDMSkin@@UBE_NXZ
?SetToolTip@CBDMControlUI@BDMSkin@@UAEXPB_W@Z
?GetPlayTimeSpace@CBDMControlUI@BDMSkin@@UAEKXZ
?ResetMenuItem@CBDMControlUI@BDMSkin@@UAEHVCStdPtrArray@Utils@2@0H@Z
?DoEvent@CBDMLabelUI@BDMSkin@@UAEXAAUtagTEventUI@@_N@Z
?SetVisible@CBDMControlUI@BDMSkin@@UAEX_N@Z
?GetFixedHeight@CBDMControlUI@BDMSkin@@UBEHXZ
?SetPlayFileLen@CBDMControlUI@BDMSkin@@UAEXK@Z
?CreateMenuWnd@CBDMControlUI@BDMSkin@@UAEHPB_W0@Z
?SetBkImage@CBDMControlUI@BDMSkin@@UAEXPB_W@Z
?GetUserData@CBDMControlUI@BDMSkin@@UAEABVCStdString@Utils@2@XZ
?SetFocusBorderColor@CBDMControlUI@BDMSkin@@UAEXK@Z
?GetPlayFileLen@CBDMControlUI@BDMSkin@@UAEKXZ
?SetAngleRes@CBDMControlUI@BDMSkin@@UAEX_NMPB_W@Z
?SetBorderSize@CBDMControlUI@BDMSkin@@UAEXH@Z
?GetToolTipMaxWidth@CBDMControlUI@BDMSkin@@UBEKXZ
?SetShortcut@CBDMControlUI@BDMSkin@@UAEX_W@Z
?SetPlayImage@CBDMControlUI@BDMSkin@@UAEXPB_W@Z
?StartAngleChange@CBDMControlUI@BDMSkin@@UAEXMMKKHVCStdString@Utils@2@@Z
?GetWidth@CBDMControlUI@BDMSkin@@UBEHXZ
?GetToolTip@CBDMControlUI@BDMSkin@@UBE?AVCStdString@Utils@2@XZ
?SetMaxWidth@CBDMControlUI@BDMSkin@@UAEXH@Z
?GetDragFilePath@CBDMControlUI@BDMSkin@@UAEPB_WXZ
?StartFadeInFadeOut@CBDMControlUI@BDMSkin@@UAEXEEKK_N0@Z
?GetBorderRound@CBDMControlUI@BDMSkin@@UBE?AUtagSIZE@@XZ
?GetTag@CBDMControlUI@BDMSkin@@UBEIXZ
?SetBorderRound@CBDMControlUI@BDMSkin@@UAEXUtagSIZE@@@Z
?SetDragFilePath@CBDMControlUI@BDMSkin@@UAEXPB_W@Z
?PlayAnimationSToE@CBDMControlUI@BDMSkin@@UAEXHH@Z
?GetBkColor@CBDMControlUI@BDMSkin@@UBEKXZ
?GetBkColor3@CBDMControlUI@BDMSkin@@UBEKXZ
?IsRelativePos@CBDMControlUI@BDMSkin@@UBE_NXZ
?GetDragData@CBDMControlUI@BDMSkin@@UAEXAAW4BDM_CLIPFORMAT@@AAPB_W@Z
?SetAnimationIndex@CBDMControlUI@BDMSkin@@UAEXH@Z
?IsMouseEnabled@CBDMControlUI@BDMSkin@@UBE_NXZ
?GetBkColor2@CBDMControlUI@BDMSkin@@UBEKXZ
?SetMinWidth@CBDMControlUI@BDMSkin@@UAEXH@Z
?SetDragData@CBDMControlUI@BDMSkin@@UAEXW4BDM_CLIPFORMAT@@PB_W@Z
?SubAnimationIndex@CBDMControlUI@BDMSkin@@UAEXXZ
?SetBorderColor@CBDMControlUI@BDMSkin@@UAEXK@Z
?GetRelativePos@CBDMControlUI@BDMSkin@@UBE?AUtagTRelativePosUI@@XZ
?SetMouseEnabled@CBDMControlUI@BDMSkin@@UAEX_N@Z
?GetDropFile@CBDMControlUI@BDMSkin@@UAEXAAVCStdPtrArray@Utils@2@@Z
?AddAnimationIndex@CBDMControlUI@BDMSkin@@UAEXXZ
?GetName@CBDMControlUI@BDMSkin@@UBE?AVCStdString@Utils@2@XZ
?SetBkColor@CBDMControlUI@BDMSkin@@UAEXK@Z
?IsVisible@CBDMControlUI@BDMSkin@@UBE_NXZ
?GetReDeleteCtrl@CBDMControlUI@BDMSkin@@UAEPAVIControlUI@ExpandInterface@2@XZ
?SetDropFile@CBDMControlUI@BDMSkin@@UAEXVCStdPtrArray@Utils@2@@Z
?StopAnimation@CBDMControlUI@BDMSkin@@UAEXXZ
?SetName@CBDMControlUI@BDMSkin@@UAEXPB_W@Z
?Invalidate@CBDMControlUI@BDMSkin@@UAEXXZ
?GetMaxWidth@CBDMControlUI@BDMSkin@@UBEHXZ
?CalcText@CRenderEngine@BDMSkin@@SAXPAUHDC__@@PAVIControlManger@ExpandInterface@2@AAUtagRECT@@PB_WKHI_N@Z
?IsNeedReDelete@CBDMControlUI@BDMSkin@@UAE_NXZ
?SetDragImage@CBDMControlUI@BDMSkin@@UAEXPB_W@Z
?StartAnimationLeave@CBDMControlUI@BDMSkin@@UAEXXZ
?SetMaxHeight@CBDMControlUI@BDMSkin@@UAEXH@Z
?SetMinHeight@CBDMControlUI@BDMSkin@@UAEXH@Z
?SetNeedReDelete@CBDMControlUI@BDMSkin@@UAEX_N@Z
?SetAlpha@CBDMLabelUI@BDMSkin@@UAEXE@Z
?GetDragImage@CBDMControlUI@BDMSkin@@UAEPB_WXZ
?StartRoundPlay@CBDMControlUI@BDMSkin@@UAEX_N0EEKK@Z
?GetY@CBDMControlUI@BDMSkin@@UBEHXZ
?DoPaint@CBDMControlUI@BDMSkin@@UAEXPAUHDC__@@ABUtagRECT@@@Z
?IsReadyDelete@CBDMControlUI@BDMSkin@@UAE_NXZ
?PaintText@CBDMLabelUI@BDMSkin@@UAEXPAUHDC__@@@Z
?GetEnableBeDrag@CBDMControlUI@BDMSkin@@UAE_NXZ
?StartAnimationEnter@CBDMControlUI@BDMSkin@@UAEXXZ
?GetX@CBDMControlUI@BDMSkin@@UBEHXZ
?GetParent@CBDMControlUI@BDMSkin@@UBEPAVIControlUI@ExpandInterface@2@XZ
?SetReadyDelete@CBDMControlUI@BDMSkin@@UAEX_N@Z
?SetFixedXY@CBDMControlUI@BDMSkin@@UAEXUtagSIZE@@@Z
?SetInternVisible@CBDMControlUI@BDMSkin@@UAEX_N@Z
?SetChangeAngleImage@CBDMControlUI@BDMSkin@@UAEXPB_W@Z
?SetEnableBeDrag@CBDMControlUI@BDMSkin@@UAEX_N@Z
?GetAttribute@CBDMLabelUI@BDMSkin@@UAE?AVCStdString@Utils@2@PB_W@Z
?Close@CBDMBaseWnd@BDMSkin@@QAEXXZ
??BCStdString@Utils@BDMSkin@@QBEPB_WXZ
??1CBDMControlManger@BDMSkin@@QAE@XZ
??4CStdString@Utils@BDMSkin@@QAEABV012@PB_W@Z
?GetValue@CBDMProgressUI@BDMSkin@@QBEHXZ
?BDMSkinCheckHasFile@BDMSkin@@YA_NPAVIResourceManager@ExpandInterface@1@PB_W@Z
??1CStdString@Utils@BDMSkin@@QAE@XZ
??0CStdString@Utils@BDMSkin@@QAE@XZ
?Format@CStdString@Utils@BDMSkin@@QAAHPB_WZZ
??YCStdString@Utils@BDMSkin@@QAEABV012@PB_W@Z
?GetData@CStdString@Utils@BDMSkin@@QBEPB_WXZ
?MessageLoop@IControlManger@ExpandInterface@BDMSkin@@SAXXZ
?CenterWindow@CBDMBaseWnd@BDMSkin@@QAEXPAUHWND__@@@Z
?ShowWindow@CBDMBaseWnd@BDMSkin@@QAEX_N0@Z
?SetFixedHeight@CBDMControlUI@BDMSkin@@UAEXH@Z
?FindControl@CBDMControlUI@BDMSkin@@UAEPAVIControlUI@ExpandInterface@2@P6GPAV342@PAV342@PAX@Z1I@Z
?SetChangeAngle@CBDMControlUI@BDMSkin@@UAEXM@Z
?GetEnableDrop@CBDMControlUI@BDMSkin@@UAE_NXZ
?GetMinHeight@CBDMControlUI@BDMSkin@@UBEHXZ
?SetAttribute@CBDMLabelUI@BDMSkin@@UAEXPB_W0@Z
??0CStdString@Utils@BDMSkin@@QAE@ABV012@@Z
??0CStdString@Utils@BDMSkin@@QAE@PB_W@Z
?PostMessageW@CBDMBaseWnd@BDMSkin@@IAEJIIJ@Z
?OnFinalMessage@CBDMBaseWnd@BDMSkin@@MAEXPAUHWND__@@@Z
?GetClassStyle@CBDMBaseWnd@BDMSkin@@MBEIXZ
?GetSuperClassName@CBDMBaseWnd@BDMSkin@@MBEPB_WXZ
?ShowModal@CBDMBaseWnd@BDMSkin@@QAE_NPAUtagRECT@@H@Z
?GetHWND@CBDMBaseWnd@BDMSkin@@QBEPAUHWND__@@XZ
?GetObjectW@CBDMDelegateBase@ExpandInterface@BDMSkin@@IAEPAXXZ
?Equals@CBDMDelegateBase@ExpandInterface@BDMSkin@@UBE_NABV123@@Z
??1CBDMDelegateBase@ExpandInterface@BDMSkin@@UAE@XZ
?ReverseFind@CStdString@Utils@BDMSkin@@QBEH_W@Z
??0CBDMDelegateBase@ExpandInterface@BDMSkin@@QAE@PAX0@Z
?BDMSkinLibSetPrivateResDir@BDMSkin@@YAXPAVIResourceManager@ExpandInterface@1@PB_W1@Z
?BDMSkinLibInit@BDMSkin@@YAHPB_W00@Z
?BDMLangGetLangMgr@BDMSkin@@YAPAVIBDMLangMgr@1@XZ
?SetResourceZip@IResourceManager@ExpandInterface@BDMSkin@@SAXPB_W@Z
?Left@CStdString@Utils@BDMSkin@@QBE?AV123@H@Z
??0CBDMDelegateBase@ExpandInterface@BDMSkin@@QAE@ABV012@@Z
??8CStdString@Utils@BDMSkin@@QBE_NPB_W@Z
??YCBDMEventSource@ExpandInterface@BDMSkin@@QAEXAAVCBDMDelegateBase@12@@Z
?SetValue@CBDMProgressUI@BDMSkin@@QAEXH_N@Z
??1CBDMBaseWnd@BDMSkin@@UAE@XZ
??4CStdString@Utils@BDMSkin@@QAEABV012@ABV012@@Z
?AttachDialog@CBDMControlManger@BDMSkin@@QAE_NPAVIControlUI@ExpandInterface@2@@Z
?AddNotifier@CBDMControlManger@BDMSkin@@QAE_NPAVINotifyUI@ExpandInterface@2@@Z
??0CRect@Utils@BDMSkin@@QAE@XZ
?Offset@CRect@Utils@BDMSkin@@QAEXHH@Z
??0CBDMBaseWnd@BDMSkin@@QAE@XZ
?SendMessageW@CBDMBaseWnd@BDMSkin@@IAEJIIJ@Z
??0CBDMControlManger@BDMSkin@@QAE@XZ
??_7INotifyUI@ExpandInterface@BDMSkin@@6B@
?Create@CBDMBaseWnd@BDMSkin@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
?HandleMessage@CBDMBaseWnd@BDMSkin@@MAEJIIJ@Z
??BCBDMBaseWnd@BDMSkin@@QBEPAUHWND__@@XZ
?IsEmpty@CStdString@Utils@BDMSkin@@QBE_NXZ
??1CBDMDialogBuilder@BDMSkin@@QAE@XZ
??0CBDMDialogBuilder@BDMSkin@@QAE@XZ
?Create@CBDMDialogBuilder@BDMSkin@@QAEPAVIControlUI@ExpandInterface@2@VSTRINGorID@Utils@2@PB_WPAVIDialogBuilderCallback@2@PAVIControlManger@42@PAV342@@Z
?BDMSkinInsertFileToRes@BDMSkin@@YA_NPB_W0_N@Z
shlwapi
StrFormatKBSizeW
wnsprintfW
StrChrW
StrRChrW
PathIsDirectoryW
PathAppendW
StrFromTimeIntervalW
StrFormatByteSizeW
SHDeleteKeyW
StrRStrIW
PathAddBackslashW
PathRemoveFileSpecW
PathFileExistsW
bdlogicutils
?GetBDCrashCatcher@BDLogicUtils@@YAPAVIBDCrashCatcher@1@XZ
?BDLogicUtilsLibrary_Init@BDLogicUtils@@YAHXZ
?GetIReportClientAgent@BDLogicUtils@@YAPAVIReportClientAgent@1@XZ
?GetBDLogicTaskMgr@BDLogicUtils@@YAPAVIBDLogicTaskMgr@1@XZ
?BDLogicUtilsLibrary_Unit@BDLogicUtils@@YAHXZ
kernel32
CreateFileW
WriteFile
OutputDebugStringA
GetCurrentDirectoryW
GetVersionExW
ReleaseMutex
GetFileSize
ReadFile
FindFirstFileW
FindClose
GetSystemDirectoryW
DeviceIoControl
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
HeapFree
GetProcessHeap
HeapAlloc
GetWindowsDirectoryW
GetSystemDefaultLangID
GetSystemInfo
FindNextFileW
RemoveDirectoryW
GetBinaryTypeW
DebugBreak
IsBadReadPtr
GetSystemWow64DirectoryW
GetSystemWindowsDirectoryW
GetFileSizeEx
GetLocaleInfoW
GetNumberFormatW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatW
SystemTimeToTzSpecificLocalTime
GetCurrencyFormatW
GetTimeFormatW
GetCurrentProcessId
lstrcmpiW
ProcessIdToSessionId
GetCurrentThreadId
ConnectNamedPipe
DisconnectNamedPipe
WaitNamedPipeW
OpenThread
HeapReAlloc
HeapDestroy
GetVersionExA
RaiseException
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
ExpandEnvironmentStringsW
CopyFileW
MoveFileW
TerminateThread
GetTickCount
SystemTimeToFileTime
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ExpandEnvironmentStringsA
ResetEvent
LoadLibraryW
CreateEventA
GetLocalTime
SetFileAttributesW
GetFileAttributesW
LoadResource
SizeofResource
FindResourceW
FindResourceExW
LockResource
CreateMutexW
OpenMutexW
LocalFree
GetSystemTimeAsFileTime
GetProcessTimes
lstrlenW
lstrlenA
CreateProcessW
GetModuleHandleW
GetLastError
lstrcpynW
InterlockedIncrement
SetEvent
TerminateProcess
DeleteFileW
WideCharToMultiByte
GetCurrentProcess
FreeLibrary
Process32NextW
WaitForSingleObject
CreateEventW
InterlockedDecrement
MultiByteToWideChar
Process32FirstW
CloseHandle
GetProcAddress
MoveFileExW
Sleep
OpenProcess
GetModuleFileNameW
HeapSize
FormatMessageA
SetErrorMode
LocalAlloc
CreateToolhelp32Snapshot
user32
DestroyIcon
GetWindowLongW
SetWindowLongW
PostQuitMessage
SendMessageW
SetTimer
KillTimer
GetForegroundWindow
wsprintfW
PostMessageW
IsZoomed
GetClientRect
FindWindowW
InvalidateRect
UnregisterClassA
LoadImageW
GetWindowRect
SetWindowPos
ShowWindow
SetForegroundWindow
IsWindowVisible
EnableWindow
GetSystemMetrics
DestroyWindow
SetWindowRgn
ScreenToClient
AttachThreadInput
GetWindowThreadProcessId
SetFocus
BringWindowToTop
GetWindowTextW
IsWindow
GetClassNameW
IsIconic
GetDesktopWindow
gdi32
CreateRoundRectRgn
DeleteObject
advapi32
RegDeleteKeyW
RegGetKeySecurity
RegNotifyChangeKeyValue
RegFlushKey
RegSetKeySecurity
RegCreateKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
RegEnumValueW
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegCloseKey
GetTokenInformation
CreateProcessAsUserW
RegDeleteValueW
LookupPrivilegeValueW
RegOpenKeyExW
DuplicateTokenEx
OpenProcessToken
RegSetValueExW
InitializeSecurityDescriptor
AllocateAndInitializeSid
SetSecurityDescriptorDacl
FreeSid
CheckTokenMembership
shell32
SHGetSpecialFolderPathW
SHCreateDirectoryExW
CommandLineToArgvW
Shell_NotifyIconW
SHGetFolderPathW
ole32
StgCreateDocfile
CoCreateInstance
CoCreateGuid
CoInitialize
StgIsStorageFile
StgOpenStorage
CoUninitialize
msvcp80
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V32@@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?construct@?$allocator@D@std@@QAEXPADABD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?destroy@?$allocator@D@std@@QAEXPAD@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0PBD1@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V32@0@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@PBD1@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0ABV12@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
msvcr80
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_except_handler3
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_snwprintf
strerror
memset
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__set_app_type
??_V@YAXPAX@Z
strtoul
malloc
_purecall
??2@YAPAXI@Z
free
??3@YAXPAX@Z
_time64
_invalid_parameter_noinfo
realloc
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
wcsrchr
??0exception@std@@QAE@XZ
wcsncpy_s
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
towlower
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
__RTDynamicCast
memcpy_s
_wcsicmp
wcsstr
wcschr
iswalnum
memmove_s
tolower
wcscpy_s
_vsnwprintf_s
_difftime64
strcpy_s
??0exception@std@@QAE@ABQBDH@Z
sprintf
wcstoul
wcsncat_s
_beginthreadex
printf
_stricmp
isdigit
_itoa
_i64toa_s
_itoa_s
_atoi64
isspace
atoi
isupper
_snwprintf_s
_snprintf_s
rand
ispunct
strcspn
??8type_info@@QBE_NABV0@@Z
isalnum
strchr
_wstat64
_wsplitpath_s
_wmkdir
wcsncat
strncmp
isprint
ftell
fopen_s
fputc
fseek
fread
fclose
_vsnprintf_s
fprintf
ferror
memmove
isalpha
_wcsnicmp
_strnicmp
_errno
_wtol
putchar
wcstol
putwchar
wcscat_s
_snwscanf_s
_wcsupr
_vscwprintf
vswprintf_s
__CxxFrameHandler3
_snprintf
fflush
__iob_func
_CxxThrowException
memcpy
_unlock
__dllonexit
_encode_pointer
wininet
InternetReadFile
InternetCloseHandle
HttpSendRequestW
InternetConnectW
InternetOpenW
InternetCrackUrlW
HttpOpenRequestW
HttpQueryInfoW
netapi32
Netbios
psapi
EnumProcesses
EnumProcessModules
GetModuleFileNameExW
GetProcessImageFileNameW
GetModuleBaseNameW
wtsapi32
WTSQueryUserToken
userenv
CreateEnvironmentBlock
ws2_32
socket
closesocket
WSAStartup
WSAGetLastError
select
getsockopt
recv
sendto
__WSAFDIsSet
send
gethostbyname
htons
connect
htonl
ioctlsocket
recvfrom
ntohl
imagehlp
UnMapAndLoad
MapAndLoad
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
Exports
Exports
Sections
.text Size: 316KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 136KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE