Static task
static1
Behavioral task
behavioral1
Sample
91def1038c2d8809fa6608f2dc1df48896c8057b464707a5c698791038dbc589.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
91def1038c2d8809fa6608f2dc1df48896c8057b464707a5c698791038dbc589.exe
Resource
win10v2004-20220812-en
General
-
Target
91def1038c2d8809fa6608f2dc1df48896c8057b464707a5c698791038dbc589
-
Size
2.3MB
-
MD5
73692e876c33397d4b70ba0aa71b409f
-
SHA1
e1f45316a501b4601467ff3e7eb54356874459ab
-
SHA256
91def1038c2d8809fa6608f2dc1df48896c8057b464707a5c698791038dbc589
-
SHA512
e3c129702b1eecc9cb0333e0e9e93262275bc76dafb3012a08846edb1c8f7ce91ee478fe11c121bdbcccb7f1dbac046f35e4bc34830cea6a7d9640bb209748a9
-
SSDEEP
49152:QWdqeXwjK4AvNWDmwbREM9qIYn3Y2l8XW8NJQ7yIoD:8jKnSn9iUIyI
Malware Config
Signatures
Files
-
91def1038c2d8809fa6608f2dc1df48896c8057b464707a5c698791038dbc589.exe windows x64
46a46a87f261bbc05bb582781bc3f0a1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
wsock32
gethostname
WSAGetLastError
gethostbyname
WSACleanup
WSAStartup
rpcrt4
RpcServerListen
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcServerRegisterIf
RpcServerUseProtseqEpW
RpcMgmtStopServerListening
NdrServerCall2
RpcImpersonateClient
RpcRevertToSelfEx
RpcBindingFree
RpcStringFreeW
user32
wsprintfW
LoadStringW
bestdutl
?GetCurrentDate@@YAXPEAU_DATE_TIME@@@Z
?MakeBEError@@YAJW4ndmp_error@@@Z
?set_z_print_function@@YAP6AXGPEADPEA_W@ZP6AXG01@Z@Z
?BE_Zprintf_2@@YAXPEB_WGZZ
?MakeBEError@@YAJW4ndmp_auth_error@@@Z
mounter
?CleanupOrphanedVirtualDisks@@YAXXZ
becluster
?GetInstance@Cluster@@SA?AV?$shared_ptr@VCluster@@@boost@@PEB_W@Z
?Instance@VmDll@@SAPEAV1@XZ
?IsCluster@Cluster@@SA_NPEB_W@Z
?ClusterPrepareSharedVolumeForBackup@ResourceGlue@@QEAAKPEB_WPEA_WPEAK12@Z
?GetInstance@ResourceGlue@@SA?AV?$shared_ptr@VResourceGlue@@@beclass@@XZ
?ClusterIsPathOnSharedVolume@ResourceGlue@@QEAAHPEB_W@Z
?ClusterGetVolumePathName@ResourceGlue@@QEAAHPEB_WPEA_WK@Z
?ClusterGetVolumeNameForVolumeMountPoint@ResourceGlue@@QEAAHPEB_WPEA_WK@Z
?BEGetComputerName@@YAHPEA_WPEAK@Z
?GetInstance@MSCSClusterGlue@@SA?AV?$shared_ptr@VMSCSClusterGlue@@@beclass@@XZ
?RestoreClusterDatabase@MSCSClusterGlue@@QEAAKPEB_WH0@Z
?BEGetComputerName@@YAAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetInstanceRef@BEComputerName@@SAAEAV1@XZ
?GetBEComputerName@BEComputerName@@QEAAAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
beerrors_en
?GetErrorName@@YAPEBDK@Z
benetapi
NETNameDisconnectFromNameServer
NETNameConnectToNameServer
ndmpcomm
xdr_ndmp_notify_mover_paused_request
xdr_ndmp_notify_mover_halted_request
xdr_ndmp_notify_data_halted_request
xdr_ndmp_mover_stop_reply
xdr_ndmp_mover_abort_reply
xdr_ndmp_mover_close_reply
xdr_ndmp_mover_continue_reply
xdr_ndmp_mover_get_state_reply
xdr_ndmp_mover_read_reply
xdr_ndmp_mover_read_request
xdr_ndmp_mover_listen_reply
xdr_ndmp_mover_listen_request
xdr_ndmp_mover_connect_reply
xdr_ndmp_mover_connect_request
xdr_ndmp_mover_set_window_reply
xdr_ndmp_mover_set_window_request
xdr_ndmp_mover_set_record_size_reply
xdr_ndmp_mover_set_record_size_request
xdr_ndmp_data_abort_reply
xdr_ndmp_data_stop_reply
xdr_ndmp_data_get_env_reply
xdr_ndmp_data_get_state_reply
xdr_ndmp_data_start_recover_reply
xdr_ndmp_data_start_recover_request
xdr_ndmp_data_start_backup_reply
xdr_ndmp_data_start_backup_request
xdr_ndmp_data_listen_reply
xdr_ndmp_data_listen_request
xdr_ndmp_data_connect_reply
xdr_ndmp_data_connect_request
xdr_ndmp_tape_mtio_reply
xdr_ndmp_tape_mtio_request
xdr_ndmp_tape_fd_update_reply
xdr_ndmp_tape_fd_update_request
xdr_ndmp_tape_close_reply
xdr_ndmp_validate_credentials_reply
xdr_ndmp_tape_open_request
xdr_ndmp_notify_data_read_request
xdr_ndmp_config_get_tape_info_reply
xdr_ndmp_get_agent_properties_reply
xdr_ndmp_prop_get_reply
xdr_ndmp_prop_set_request
xdr_ndmp_prop_set_reply
xdr_ndmp_snapshot_get_providers_request
?ndmpSendRequest@@YAHPEAXW4ndmp_message_id@@W4ndmp_error@@0PEAPEAXK@Z
xdr_ndmp_fh_add_file_request
?ndmpSetCodePage@@YAXPEAXI@Z
??0NdmpPvalSet@@QEAA@XZ
?ndmpCreateConnection@@YAPEAXPEAUtag_NdmpMsgHandler@@@Z
?ndmpConnectEx@@YAHPEAXPEADKAEBUBENetworkOptions@@_NPEAW4ndmpConnectError@@PEAK3@Z
?ndmpGetVersion@@YAGPEAX@Z
?set@NdmpPvalSet@@QEAA_NPEAD0@Z
??1NdmpPvalSet@@QEAA@XZ
?ndmpClose@@YAXPEAX@Z
?ndmpDestroyConnection@@YAXPEAX@Z
xdr_ndmp_log_message_request_v4
?ndmpSetPKCSSessionInfo@@YAXPEAX0@Z
xdr_ndmp_snapshot_get_providers_reply
xdr_ndmp_pkcs_session_request
xdr_ndmp_pkcs_session_reply
xdr_ndmp_pkcs_data_request
xdr_ndmp_pkcs_data_reply
xdr_ndmp_config_get_fs_info_reply
xdr_ndmp_get_last_error_request
xdr_ndmp_get_last_error_reply
?GetExtendedAttribFromNRDSCache@@YAIPEAD@Z
?ndmpcSspiAuthenticate@@YAHPEAX@Z
?ndmpSetAuthorized@@YAXPEAXH@Z
?LogError@@YAXKPEBDZZ
?ndmpGetPKCSSessionInfo@@YAPEAXPEAX@Z
?ndmpFreeMessage@@YAXPEAX@Z
?ndmpSetVersion@@YAXPEAXG@Z
xdr_ndmp_config_get_scsi_info_reply
xdr_ndmp_log_message_request
xdr_ndmp_fh_add_dir_request
xdr_ndmp_fh_add_node_request
?ndmpGetCodePage@@YAIPEAX@Z
xdr_ndmp_config_get_butype_info_reply
xdr_ndmp_config_get_host_info_reply
xdr_ndmp_config_get_server_info_reply
xdr_ndmp_config_get_auth_attr_request
xdr_ndmp_config_get_auth_attr_reply
xdr_ndmp_config_get_connection_type_reply
xdr_ndmp_get_agent_properties_request
xdr_ndmp_connect_client_auth_reply
xdr_ndmp_connect_open_request
xdr_ndmp_connect_open_reply
xdr_ndmp_notify_connected_request
xdr_ndmp_bews_browse_scan_begin_request
xdr_ndmp_bews_browse_scan_begin_reply
xdr_ndmp_bews_browse_scan_next_request
xdr_ndmp_bews_browse_scan_next_reply
xdr_ndmp_bews_browse_scan_end_request
xdr_ndmp_bews_browse_scan_end_reply
xdr_ndmp_snap_dir_list_request
xdr_ndmp_snap_dir_list_reply
?ndmpConnect@@YAHPEAXPEADKKKPEAUndmp_addr@@PEAW4ndmpConnectError@@@Z
xdr_ndmp_browse_scan_begin_request
xdr_ndmp_browse_scan_begin_reply
xdr_ndmp_browse_scan_next_request
xdr_ndmp_browse_scan_next_reply
xdr_ndmp_browse_scan_end_request
xdr_ndmp_validate_credentials_request
xdr_ndmp_tape_open_reply
xdr_ndmp_browse_scan_end_reply
xdr_ndmp_connect_client_auth_request
bemsdk
?GetByteSize@CBemSharepointFarm@@UEAAHXZ
?Unserialize@CBemSharepointFarm@@UEAAHPEAEPEAVCPersist@@@Z
?Serialize@CBemSharepointFarm@@UEAAHPEAVCPersist@@@Z
??0CBemSharepointFarm@@QEAA@PEAVCBEConnection@@@Z
?Query@CBemSharepointFarm@@QEAAHAEAV?$CObjectArray@VCBemSharepointFarm@@@@@Z
??0mstring@@QEAA@PEB_W@Z
?GetServerCount@CBemSharepointFarm@@QEBAHXZ
?Get@CBemSharepointFarm@@UEAAHXZ
?GetObjectName@CServantObject@@QEBAPEB_WXZ
??Ymstring@@QEAAAEAV0@PEB_W@Z
?GetServer@CBemSharepointFarm@@QEBAPEAVCSharepointFarmServer@@H@Z
?GetName@CSharepointFarmServer@@QEAAPEB_WXZ
?AddRef@CServantObject@@QEAAKXZ
?ClearErrors@CBEError@@QEAAXXZ
?AddError@CBEError@@QEAA_NJPEB_W@Z
?SetBeginIndex@CBEFilter@@QEAAXH@Z
?SetEndIndex@CBEFilter@@QEAAXH@Z
?GetTemporaryRestoreLocation@CBemBEC@@QEBA?BVmstring@@XZ
?c_str@mstring@@QEBAPEB_WXZ
??0CBEError@@QEAA@XZ
?Reset@CBemLoginAccount@@UEAAXXZ
??0CBemLoginAccountX@@QEAA@PEAVCBEConnection@@@Z
?GetErrorCode@CBEError@@QEBAJH@Z
?GetErrorDescription@CBEError@@QEBAPEB_WH@Z
??1CBEError@@QEAA@XZ
?SetVirtualID@CBEFilter@@QEAAXK@Z
?ClearBlocks@CObjectArrayBase@@SAXAEAV?$list@PEAU?$ObjectBlock@VCServantObject@@@@V?$allocator@PEAU?$ObjectBlock@VCServantObject@@@@@std@@@std@@@Z
?GetNumErrors@CBEError@@QEBAHXZ
??1mstring@@QEAA@XZ
?Release@CServantObject@@QEAAKXZ
?Reset@CServantObject@@UEAAXXZ
?Decrypt@CBemLoginAccountX@@QEAAHXZ
?GetAccountName@CBemLoginAccount@@QEBAPEB_WXZ
?GetPassword@CBemLoginAccount@@QEBAPEB_WXZ
?ClearPassword@CBemLoginAccount@@QEAAX_N@Z
??1CBemLoginAccountX@@UEAA@XZ
??1CRPCConnection@@UEAA@XZ
?FreeMemory@CRPCConnection@@UEAAXPEAX@Z
?AllocateMemory@CRPCConnection@@UEAAPEAXI@Z
?FreeSerializeObject@CRPCConnection@@UEAAXPEAVCPersist@@@Z
?GetSerializeObject@CRPCConnection@@UEAAPEAVCPersist@@XZ
?SendRequestInNewOut@CRPCConnection@@UEAAJJKPEAEPEAKPEAPEAE12@Z
?SendRequestInOut@CRPCConnection@@UEAAJJKPEAEPEAK1PEAPEAE@Z
?SendRequestIn@CRPCConnection@@UEAAJJKPEAEPEAKPEAPEAE@Z
?SendRequest@CRPCConnection@@UEAAJJPEAKPEAPEAE@Z
?CancelConnect@CRPCConnection@@UEAAKXZ
?GetConnectionID@CRPCConnection@@UEBA_KXZ
?TestConnection@CRPCConnection@@UEBA_NXZ
??0CBemBEC@@QEAA@PEAVCBEConnection@@@Z
?Serialize@CBemBEC@@UEAAHPEAVCPersist@@@Z
?Unserialize@CBemBEC@@UEAAHPEAEPEAVCPersist@@@Z
?GetByteSize@CBemBEC@@UEAAHXZ
?GetXml@CServantObject@@UEAA?AVmstring@@XZ
?GetInnerXml@CServantObject@@UEAA?AVmstring@@XZ
?GetObjectType@CBemBEC@@UEBAHXZ
?Reset@CBemBEC@@UEAAXXZ
?Get@CBemBEC@@UEAAHXZ
?Update@CBemBEC@@UEAAHXZ
?Validate@CBemBEC@@UEAA_NXZ
??1CBemSharepointFarm@@UEAA@XZ
??1CBemBEC@@UEAA@XZ
?Get@CBemLoginAccountX@@UEAAHXZ
?GetObjectType@CBemSharepointFarm@@UEBAHXZ
?Release@CBEConnection@@QEAAKXZ
??0CRPCConnection@@QEAA@XZ
?Connect@CRPCConnection@@UEAAHPEB_W00KKK@Z
?Disconnect@CRPCConnection@@UEAAHXZ
?IsConnected@CRPCConnection@@UEBA_NXZ
?DeleteBlock@CObjectArrayBase@@SAXPEAU?$ObjectBlock@VCServantObject@@@@@Z
advapi32
ReportEventW
DeregisterEventSource
CheckTokenMembership
LookupPrivilegeValueW
AdjustTokenPrivileges
LsaOpenPolicy
LsaNtStatusToWinError
LsaEnumerateAccountRights
LsaClose
LsaFreeMemory
OpenProcessToken
GetTokenInformation
ConvertSidToStringSidW
AllocateAndInitializeSid
EqualSid
FreeSid
SetKernelObjectSecurity
SetServiceStatus
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
RegisterServiceCtrlHandlerW
StartServiceCtrlDispatcherW
RegEnumValueW
RegConnectRegistryW
RegSetValueExW
RegEnumKeyW
RegRestoreKeyW
RegSaveKeyW
RegCreateKeyExW
RegSetKeySecurity
RegGetKeySecurity
RegEnumKeyExW
RegQueryInfoKeyW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
QueryServiceStatus
CloseServiceHandle
OpenServiceW
OpenSCManagerW
ImpersonateLoggedOnUser
RevertToSelf
RegisterEventSourceW
kernel32
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
QueryPerformanceCounter
GetProcessHeap
HeapFree
GetSystemTime
SystemTimeToFileTime
GetVolumeInformationW
WideCharToMultiByte
GetSystemDirectoryW
GetDriveTypeW
CreateFileW
DeviceIoControl
GetCurrentThreadId
RtlLookupFunctionEntry
ExpandEnvironmentStringsW
GetWindowsDirectoryW
GetEnvironmentVariableW
SetEnvironmentVariableW
CreateEventW
LoadLibraryA
SetConsoleCtrlHandler
SetUnhandledExceptionFilter
DebugBreak
SetErrorMode
GetVersionExW
GetLastError
LocalFree
SetLastError
LoadLibraryExW
CreateEventA
GetCurrentProcess
Sleep
GetModuleFileNameW
SearchPathW
FindFirstFileW
SetThreadLocale
GetLocaleInfoW
FreeLibrary
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
SetEvent
WaitForSingleObject
CloseHandle
RtlCaptureContext
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TlsAlloc
TlsFree
HeapAlloc
TlsGetValue
CreateMutexA
TlsSetValue
GetDiskFreeSpaceExW
QueryDosDeviceW
ResetEvent
FormatMessageW
LocalAlloc
lstrlenW
GetTickCount
FileTimeToLocalFileTime
MultiByteToWideChar
DeleteFileW
WriteFile
lstrlenA
GetCompressedFileSizeW
FindClose
SetFileAttributesW
GetFileAttributesW
GetCurrentProcessId
ReleaseMutex
UnmapViewOfFile
MapViewOfFile
CreateMutexW
CreateFileMappingW
OpenEventW
CreateProcessW
__C_specific_handler
FileTimeToSystemTime
OutputDebugStringW
beclass
??0DateTime@@QEAA@AEBU_FILETIME@@@Z
?FormatTime@DateTime@@QEBAAEAVwcstring@@AEAV2@@Z
?SaveDWORD@Configuration@@QEAA_NPEB_WK@Z
?InitializeSecurity@ComClientEnv@@UEAAKPEAXJPEAUtagSOLE_AUTHENTICATION_SERVICE@@0KK0K0@Z
?get_EventsMsgLib@ErrorMessageBase@@IEAAPEAUHINSTANCE__@@XZ
?BaseInit@ErrorMessageBase@@IEAAHXZ
?Close@Configuration@@QEAAXXZ
??0Win32ExceptionHandler@@QEAA@XZ
??1Win32ExceptionHandler@@QEAA@XZ
?Call@WorkerThread@@QEAAXPEAVThreadCall@@@Z
?StartThread@WorkerThread@@QEAAHK@Z
?StopThread@WorkerThread@@UEAAXXZ
?Run@WorkerThread@@UEAAKXZ
??0WorkerThread@@QEAA@W4ComThreadingModel@0@PEBD@Z
??1WorkerThread@@UEAA@XZ
?get_volume_name_for_mount_point@beclass@@YA?AVwcstring@@AEBV2@@Z
?comparei@@YAH_W0@Z
?Save@Configuration@@QEAA_NPEB_WAEBVwcstring@@@Z
?Load@Configuration@@QEAA_NPEB_WAEAVwcstring@@0@Z
?Load@Configuration@@QEAA_NPEB_WPEAEPEAK@Z
?LoadDWORD@Configuration@@QEAA_NPEB_WAEAK@Z
?GetLogLevel@DebugLog@@QEBAKXZ
??0DateTime@@QEAA@W4PredefinedTime@0@@Z
?FormatDate@DateTime@@QEBAAEAVwcstring@@AEAV2@H@Z
?print@DebugLog@@QEAAHPEB_WZZ
CMS_GetProd
?Load@Configuration@@QEAA_NPEB_WAEAVwcstring@@@Z
?FormatTime@DateTime@@QEBAAEAVwcstring@@AEAV2@I@Z
?_Get@StringResourceMgr@@AEAAAEBVwcstring@@I@Z
?assign@wcstring@@QEAAAEAV1@PEBD_KW4codePage@cstring@@@Z
?NTFS_GetFileVersionInfo@@YAKPEB_WPEAK1111@Z
?NTFS_LinkFileToSharedData@@YAKPEB_W0K@Z
?NTFS_WriteDiskQuotaProperties@@YAKPEA_WPEAEK@Z
?NTFS_WriteDiskQuotaData@@YAKPEA_WPEAEK@Z
?NTFS_GetEnvironmentVariable@@YAKPEB_WPEA_WK@Z
?NTFS_GetBootDrive@@YAKPEA_W0@Z
?Save@Configuration@@QEAA_NPEB_WAEAV?$vector@Vwcstring@@V?$allocator@Vwcstring@@@std@@@std@@@Z
??0CModuleVersion@@QEAA@XZ
??0EventLog@@QEAA@XZ
?Open@EventLog@@QEAAHPEB_W0G0@Z
?LogEvent@EventLog@@QEAAHGGKPEAXKHPEAPEB_W@Z
?LogEvent@EventLog@@QEAAHGGKPEAXKHPEB_WZZ
?Close@EventLog@@QEAAXXZ
??1EventLog@@QEAA@XZ
?DestroyInstance@SettingsMonitor@@SAXXZ
?Open@Configuration@@QEAA_NW4openMode@1@PEB_W1I@Z
??0LogFileFactory@@QEAA@AEBVStringResourceMgr@@H@Z
?CreateDirectoryPath@@YA_NAEBVwcstring@@@Z
?GetComputerNameInString@@YAHAEAVwcstring@@@Z
?CreateDebugLog@LogFileFactory@@QEAAPEAVDebugLog@@PEB_W00HH@Z
Set_BESockZPrintf
?GetInstance@SettingsMonitor@@SAPEAV1@XZ
?RegisterCreateDebugLog@SettingsMonitor@@QEAAPEBXP6AJKPEAX@Z0@Z
?RegisterMaxDebugFileEnabled@SettingsMonitor@@QEAAPEBXP6AJKPEAX@Z0@Z
?RegisterMaxDebugFileSize@SettingsMonitor@@QEAAPEBXP6AJKPEAX@Z0@Z
?RegisterMaxRetention@SettingsMonitor@@QEAAPEBXP6AJKPEAX@Z0@Z
?RegisterMaxDebugFileCount@SettingsMonitor@@QEAAPEBXP6AJKPEAX@Z0@Z
?RegisterMaxDebugFileLimitMode@SettingsMonitor@@QEAAPEBXP6AJKPEAX@Z0@Z
?RegisterMaxDebugFileAppend@SettingsMonitor@@QEAAPEBXP6AJKPEAX@Z0@Z
??1LogFileFactory@@QEAA@XZ
??0StringResourceMgr@@QEAA@PEAUHINSTANCE__@@@Z
??0StringResourceMgr@@QEAA@XZ
??0SecurityDescriptor@@QEAA@XZ
?AttachObject@SecurityDescriptor@@QEAAJPEAX@Z
?Allow@SecurityDescriptor@@QEAAJPEAXK@Z
??1SecurityDescriptor@@QEAA@XZ
??1DebugLog@@QEAA@XZ
?UpdateSettings@DebugLog@@QEAAHXZ
??0Configuration@@QEAA@PEAUHKEY__@@@Z
?Open@Configuration@@QEAA_NPEB_W0I@Z
?Load@Configuration@@QEAA_NPEB_WAEAKK@Z
??1Configuration@@QEAA@XZ
?AssertPrivilege@@YAHPEB_WH@Z
?AtomicIncrement@@YAJPEAJ@Z
?AtomicDecrement@@YAJPEAJ@Z
?Load@Configuration@@QEAA_NPEB_WAEAV?$vector@Vwcstring@@V?$allocator@Vwcstring@@@std@@@std@@@Z
?SplitUncPath@@YAHAEBVwcstring@@AEAV1@1@Z
??0MultiThreadedCom@@QEAA@P6AJPEAXK@ZK@Z
?get_volume_name_for_mount_point@beclass@@YA?AVcstring@@AEBV2@@Z
??Rget_raw_vol_name@beclass@@QEAA_NAEAVwcstring@@@Z
?GetValue@CModuleVersion@@QEAAPEA_WPEB_W@Z
?GetFileVersionInfoW@CModuleVersion@@QEAAHPEB_W_N@Z
??0SGMonClient@@QEAA@W4eClient@0@P6AX_N@Z@Z
??1CModuleVersion@@UEAA@XZ
??1vol_it@beclass@@QEAA@XZ
??0vol_it@beclass@@QEAA@AEBV01@@Z
??Rmore_free_space@beclass@@QEAA_NAEBVwcstring@@0@Z
??B?$get@Uoccupied_space@beclass@@@beclass@@QEBA?AT_ULARGE_INTEGER@@XZ
??B?$get@Ufree_space@beclass@@@beclass@@QEBA?AT_ULARGE_INTEGER@@XZ
??Rtranslate_vol_name@beclass@@QEAAXAEAVwcstring@@@Z
?get_volume_path_name@beclass@@YA?AVwcstring@@AEBV2@@Z
??Evol_it@beclass@@QEAAAEAV01@XZ
??Dvol_it@beclass@@QEBA?AVwcstring@@XZ
??9vol_it@beclass@@QEBA_NAEBV01@@Z
??Runmounted_drive@beclass@@QEAA_NAEBVwcstring@@@Z
??Runrecognized_fs@beclass@@QEAA_NAEBVwcstring@@@Z
??Rnon_fixed_drive@beclass@@QEAA_NAEBVwcstring@@@Z
?RANWEncryptAndAsciify@@YA_NIPEADPEBD@Z
?BEConvertServerNamePlus@beclass@@YAKAEBVwcstring@@AEAV2@W4_COMPUTER_NAME_FORMAT@1@_NPEA_NPEAK@Z
?BEGetFQDN@beclass@@YAKAEAVwcstring@@@Z
??0vol_it@beclass@@QEAA@XZ
?end@vol_it@beclass@@SA?AV12@XZ
?Logon@Win32Impersonator@@QEAAKPEB_W0@Z
?assign@cstring@@QEAAAEAV1@PEB_W_K@Z
?EncryptAndAsciify@@YA_NIPEADHPEBDH@Z
?WhoAmI@Impersonator@@SA?AVwcstring@@XZ
?EU_Open@@YAPEAUEU_HAND@@FFPEACFPEAF1@Z
?EU_Close@@YAXPEAUEU_HAND@@@Z
?EU_Encrypt@@YAFPEAUEU_HAND@@PEACF@Z
?CreateMD5Digest@md5_ndmp@@QEAAXPEAD@Z
??1md5_ndmp@@QEAA@XZ
??0md5_ndmp@@QEAA@XZ
??1CNetConfigEng@@UEAA@XZ
?ReleaseAdapterInfoList@CNetConfigEng@@QEAAKPEAPEAPEAVCAdapterInfo@@@Z
?GetNetworkId@CAdapterInfo@@QEBAPEB_WXZ
?GetIpMask@CAdapterInfo@@QEBAPEB_WXZ
?GetIpAddress@CAdapterInfo@@QEBAPEB_WXZ
?PrintAdapterInfo@CAdapterInfo@@QEBAXXZ
?GetMacAddress@CAdapterInfo@@QEBAPEB_WXZ
?GetAdapterInfoList@CNetConfigEng@@QEAAKPEAPEAPEAVCAdapterInfo@@@Z
?Initialize@CNetConfigEng@@QEAAKXZ
??0CNetConfigEng@@QEAA@XZ
?RawsRegisterDebugLevel@SettingsMonitor@@QEAAPEBXP6AJKPEAX@Z0@Z
msvcr80
wcsncpy_s
wcschr
strncpy
wprintf_s
swscanf_s
swprintf_s
getenv
_wcsdup
printf
iswdigit
_wcslwr_s
_gmtime64
wcstok_s
setlocale
wcscpy_s
wcscat_s
strncpy_s
__crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
_cexit
_exit
_XcptFilter
__getmainargs
_amsg_exit
wcsrchr
_vswprintf
__CxxFrameHandler3
??1exception@std@@UEAA@XZ
??0exception@std@@QEAA@AEBQEBD@Z
?what@exception@std@@UEBAPEBDXZ
??3@YAXPEAX@Z
??0exception@std@@QEAA@XZ
_purecall
swscanf
memset
_wcsicmp
wcsncat
wcsncpy
malloc
free
_invalid_parameter_noinfo
_CxxThrowException
??0exception@std@@QEAA@AEBV01@@Z
??0bad_cast@std@@QEAA@PEBD@Z
??1bad_cast@std@@UEAA@XZ
??0bad_cast@std@@QEAA@AEBV01@@Z
??2@YAPEAX_K@Z
__RTDynamicCast
memmove_s
??8type_info@@QEBA_NAEBV0@@Z
_wcsnicmp
tolower
_getch
_kbhit
_beginthreadex
_set_invalid_parameter_handler
_stricmp
exit
wcsstr
memcpy
??_V@YAXPEAX@Z
??_U@YAPEAX_K@Z
realloc
calloc
vwprintf
_wstrtime
_wstrdate
_vsnwprintf
_snwprintf
_swprintf
_wstat64i32
_wgetenv
_wcsupr
fclose
fread
_wfopen
_wremove
towupper
wcstol
towlower
wcsncmp
??0exception@std@@QEAA@AEBQEBDH@Z
_wtoi
memcpy_s
_i64tow
_strdup
wcstombs
mbstowcs
wprintf
msvcp80
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PEB_W@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAXAEAV12@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?endl@std@@YAAEAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AEAV21@@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAXXZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBAHPEB_W@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2_KB
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEA_W_K@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@PEB_W@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBAH_K0PEB_W@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA_KPEB_W_K@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@AEBV01@@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXAEAV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA?AV12@_K0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PEBDAEBV10@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@_K0@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAHAEBV12@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_KPEBD_K1@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAXXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@D@Z
??$?5DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAEAV?$basic_istream@DU?$char_traits@D@std@@@0@AEAV10@AEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA_K_W_K@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@PEB_W@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V32@0@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA_KAEBV12@_K@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@AEBV10@0@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?5_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAEAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AEAV10@AEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@AEBV10@PEB_W@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA_KPEB_W_K@Z
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@_K0_W@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@PEBD@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@_KPEB_W@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV12@AEBV12@@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA_KPEB_W_K@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA_K_W_K@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@PEB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z
?_Lock@_Mutex@std@@QEAAXXZ
?_Unlock@_Mutex@std@@QEAAXXZ
??1_Lockit@std@@QEAA@XZ
?facet_Register@facet@locale@std@@CAXPEAV123@@Z
?_Incref@facet@locale@std@@QEAAXXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@PEB_W_K@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PEB_WAEBV10@@Z
??_D?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAXXZ
?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@H@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@_KAEBV12@@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBAHAEBV12@@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA_K_W_K@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@@Z
?_Getfacet@locale@std@@QEBAPEBVfacet@12@_K@Z
??Bid@locale@std@@QEAA_KXZ
?id@?$ctype@_W@std@@2V0locale@2@A
??0_Lockit@std@@QEAA@H@Z
?deallocate@?$allocator@_W@std@@QEAAXPEA_W_K@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@AEBV12@_K1@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z
?flush@std@@YAAEAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AEAV21@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@PEAV32@@Z
?seekpos@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA?AV?$fpos@H@2@V32@H@Z
?seekoff@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA?AV?$fpos@H@2@_JHH@Z
?underflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?pbackfail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGG@Z
?at@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBAAEB_W_K@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBAAEB_W_K@Z
?_Xran@_String_base@std@@SAXXZ
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA_KPEB_W_K1@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@_K0PEB_W0@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA_KPEB_W_K@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA_K_W_K@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@_W@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAX_K_W@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@AEBV10@_W@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA_K_W_K@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@_K0@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA?AV12@_K0@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@_K_W@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@PEB_W@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@AEBV12@@Z
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@H@Z
?str@?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??_D?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAXXZ
??$?6_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAEAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AEAV10@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@AEBV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@AEBV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@AEBV01@@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA_K_W_K@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2_KB
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@PEB_W_K@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
??_7ios_base@std@@6B@
?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z
??1ios_base@std@@UEAA@XZ
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@XZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??4locale@std@@QEAAAEAV01@AEBV01@@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?exceptions@ios_base@std@@QEAAXH@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??1locale@std@@QEAA@XZ
?widen@?$ctype@_W@std@@QEBA_WD@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@PEB_W@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAX_K@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@_K_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@PEB_W_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
?narrow@?$ctype@_W@std@@QEBAD_WD@Z
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAX_K@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBA?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?allocate@?$allocator@_W@std@@QEAAPEA_W_KPEBX@Z
?copy@?$char_traits@_W@std@@SAPEA_WPEA_WPEB_W_K@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?_Xsgetn_s@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_K_J@Z
oleaut32
SysFreeString
SysAllocStringLen
VariantInit
VariantClear
SysAllocString
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
VariantChangeType
GetErrorInfo
SysStringLen
shlwapi
PathFileExistsW
ws2_32
inet_addr
gethostbyaddr
inet_ntoa
ole32
CLSIDFromString
CLSIDFromProgID
OleRun
CoSetProxyBlanket
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitializeEx
CoInitializeSecurity
CoCreateGuid
CoTaskMemAlloc
bedscomn
?DLE_GetNext@@YAJPEAPEAUGENERIC_DLE@@@Z
?DLE_GetFirstChild@@YAJPEAUGENERIC_DLE@@PEAPEAU1@@Z
?DLE_GetFirst@@YAJPEAUHEAD_DLE@@PEAPEAUGENERIC_DLE@@@Z
?FS_InitDleList@@YAJPEAPEAUHEAD_DLE@@PEAUBE_CFG@@@Z
?FS_DeinitDleList@@YAXPEAUHEAD_DLE@@@Z
?FS_FindFirstObj@@YAJPEAUFSYS_HAND_STRUCT@@PEAUDBLK@@PEA_W@Z
?FS_CreateIMGBrowserDLE@@YAJPEAUBE_CFG@@PEAUHEAD_DLE@@AEBVwcstring@@222HHHHPEAPEAUGENERIC_DLE@@@Z
?FS_CreatePdiDLE@@YAJPEAUBE_CFG@@PEAUHEAD_DLE@@PEB_WPEAPEAUGENERIC_DLE@@@Z
?DLE_FindByName@@YAJPEAUHEAD_DLE@@PEB_WFPEAPEAUGENERIC_DLE@@PEAU2@@Z
?FS_CreateTempDLE@@YAJPEAUBE_CFG@@PEB_WPEAUHEAD_DLE@@HPEAPEAUGENERIC_DLE@@@Z
?FS_AttachToDLE@@YAJPEAPEAUFSYS_HAND_STRUCT@@PEAUGENERIC_DLE@@PEAUBE_CFG@@PEA_W3IGPEAXPEAVSnapshotVolume@@IPEAU_IPC_HAND@@@Z
?FS_DetachDLE@@YAJPEAUFSYS_HAND_STRUCT@@PEAXPEAPEAX@Z
?FS_DeletePdi@@YAJPEB_W@Z
?FS_ResolveDevName@@YAJPEAUBE_CFG@@PEA_W1PEAH222K@Z
?FS_IsServerDomainController@@YA_NPEA_W@Z
?FS_IsDSInRestoreMode@@YA_NXZ
?FS_IsServiceRunning@@YA_NPEB_W0H@Z
?FS_FindNextObj@@YAJPEAUFSYS_HAND_STRUCT@@PEAUDBLK@@@Z
?FS_FindObjClose@@YAJPEAUFSYS_HAND_STRUCT@@PEAUDBLK@@@Z
?FS_SetAttrib1FromDBLK@@YAJPEAUFSYS_HAND_STRUCT@@PEAUDBLK@@I@Z
?FS_GetAttrib1FromDBLK@@YAIPEAUFSYS_HAND_STRUCT@@PEAUDBLK@@@Z
?FS_GetOS_InfoFromDBLK@@YAJPEAUFSYS_HAND_STRUCT@@PEAUDBLK@@PEAE@Z
?FS_GetOSid_verFromDBLK@@YAJPEAUFSYS_HAND_STRUCT@@PEAUDBLK@@PEAG2@Z
?get_DLE_fsysObjPtr@@YAPEAVFS_DleBase@@_K@Z
?FS_GetAttrib2FromDBLK@@YAIPEAUFSYS_HAND_STRUCT@@PEAUDBLK@@@Z
?get_func_tabs@@YAXPEAPEAU_FUNC_LIST@@@Z
serdll
?SN_IsAuthorized@@YAHH@Z
?SN_IsInstalled@@YAHHPEB_W@Z
becrypto
?SymSetEncryptionIV@@YAJPEAXPEBEH@Z
?XORBuffer@sha256@@QEAA_NIPEAE@Z
?CreateSHA256Digest@sha256@@QEAAXPEAD@Z
??1sha256@@QEAA@XZ
?SetSHA256Password@sha256@@QEAAXPEBD_K@Z
?SetSHA256UserName@sha256@@QEAAXPEBD_K@Z
?SymInitEncrypt@@YAHPEAPEAX@Z
?SymGeneratePseudorandomKey@@YAJPEAEI@Z
?SymSetEncryptionMethod@@YAJPEAXG@Z
?SymSetEncryptionKey@@YAJPEAXPEBEH@Z
?ASymGetPublicKey@@YAPEAEPEAXPEAI@Z
?ASymEncrypt@@YAXPEAX00IPEAIPEAH@Z
?ASymDeInit@@YAXPEAX@Z
?SymDeInitEncrypt@@YAHPEAX@Z
?ASymInit@@YAHPEAPEAXI@Z
?ASymSetPublicKey@@YAXPEAXPEBEI@Z
??0sha256@@QEAA@XZ
mpr
WNetCancelConnection2W
WNetAddConnection2W
bebsdu
?BSD_RemoveAll@@YAXPEAUBSD_LIST@@@Z
?BSD_AddFSE@@YAXPEAUBSD@@PEAUFSE@@@Z
?FSE_SetModDate@@YAJPEAUFSE@@PEAU_DATE_TIME@@1@Z
?FSE_SetBakDate@@YAJPEAUFSE@@PEAU_DATE_TIME@@@Z
?BSD_CreatFSE@@YAJPEAPEAUFSE@@FPEAXF1FHH@Z
?BSD_Add@@YAJPEAUBSD_LIST@@PEAPEAUBSD@@PEAUBE_CFG@@PEAXPEAUGENERIC_DLE@@IGFPEAU_DATE_TIME@@EEAEBU_SSGUID@@_N7PEA_WH8HPEAU2@EE7766K8HQEA_WII@Z
?BSD_OpenList@@YAJPEAPEAUBSD_LIST@@@Z
?BSD_MatchPathAndFile@@YA?AW4BSDMATCHRESULT@@PEAUBSD@@PEAPEAUFSE@@HHPEA_W2FIIPEAU_DATE_TIME@@33HH0PEAUFSYS_HAND_STRUCT@@PEAUDBLK@@PEAHPEAI5@Z
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 381KB - Virtual size: 390KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 560KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE