??4_Init_locks@std@@QAEAAV01@ABV01@@Z
Static task
static1
Behavioral task
behavioral1
Sample
aa2747cb5630e735711836d6dd15f001da03d27ba324f69751458889cf6464d1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
aa2747cb5630e735711836d6dd15f001da03d27ba324f69751458889cf6464d1.exe
Resource
win10v2004-20220901-en
General
-
Target
aa2747cb5630e735711836d6dd15f001da03d27ba324f69751458889cf6464d1
-
Size
631KB
-
MD5
806321a9efa4c8bfea5f64b1e81a84d0
-
SHA1
cc9bfe99296a04ad5a4b6a4da405fc3633034415
-
SHA256
aa2747cb5630e735711836d6dd15f001da03d27ba324f69751458889cf6464d1
-
SHA512
bae72402b8c12f7fcff22d3f27a777a4182b2941c870f14c2bbf070a0a542940a5e714c179e7c3b9add3a77d0f948e61d0d48ed8588c83d28796e8d5ab494638
-
SSDEEP
12288:ujCTLVsJfrsinwolJJoGMWKg8PFUWzx5BmWaiklVOTMngPZ2iuamSIVOTkGfg5y9:ueVs2inwolJJoGMWKg8PFLx2iklETMij
Malware Config
Signatures
Files
-
aa2747cb5630e735711836d6dd15f001da03d27ba324f69751458889cf6464d1.exe windows x86
48eda2e0c4f2beaa998012168d5bcaf7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
qmdataupdate
DoPatch
DoQuery
DoInitCheck
InitUpdateInfo
UninitUpdateInfo
tinyxml
?ToDeclaration@TiXmlNode@@UAEPAVTiXmlDeclaration@@XZ
?ToText@TiXmlText@@UBEPBV1@XZ
?ToText@TiXmlText@@UAEPAV1@XZ
?ToUnknown@TiXmlNode@@UBEPBVTiXmlUnknown@@XZ
?ToUnknown@TiXmlNode@@UAEPAVTiXmlUnknown@@XZ
?ToComment@TiXmlNode@@UBEPBVTiXmlComment@@XZ
?ToComment@TiXmlNode@@UAEPAVTiXmlComment@@XZ
?ToElement@TiXmlNode@@UBEPBVTiXmlElement@@XZ
?NextSiblingElement@TiXmlNode@@QAEPAVTiXmlElement@@PBD@Z
?ToDocument@TiXmlNode@@UBEPBVTiXmlDocument@@XZ
?ToDocument@TiXmlNode@@UAEPAVTiXmlDocument@@XZ
?Parse@TiXmlText@@UAEPBDPBDPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
?Print@TiXmlText@@UBEXPAU_iobuf@@H@Z
??0TiXmlDeclaration@@QAE@PBD00@Z
?RootElement@TiXmlDocument@@QAEPAVTiXmlElement@@XZ
??0TiXmlText@@QAE@PBD@Z
?ToDeclaration@TiXmlNode@@UBEPBVTiXmlDeclaration@@XZ
?LinkEndChild@TiXmlNode@@QAEPAV1@PAV1@@Z
??1TiXmlDeclaration@@UAE@XZ
?GetText@TiXmlElement@@QBEPBDXZ
??0TiXmlDocument@@QAE@XZ
?LoadFile@TiXmlDocument@@QAE_NPB_WW4TiXmlEncoding@@@Z
??1TiXmlDocument@@UAE@XZ
?SaveFile@TiXmlDocument@@QBE_NPB_W@Z
??0TiXmlElement@@QAE@PBD@Z
?SetAttribute@TiXmlElement@@QAEXPBD0@Z
?InsertEndChild@TiXmlNode@@QAEPAV1@ABV1@@Z
??1TiXmlElement@@UAE@XZ
?FirstChildElement@TiXmlNode@@QAEPAVTiXmlElement@@PBD@Z
?NextSiblingElement@TiXmlNode@@QAEPAVTiXmlElement@@XZ
?Attribute@TiXmlElement@@QBEPBDPBD@Z
?LoadXML@TiXmlDocument@@QAE_NPADHW4TiXmlEncoding@@@Z
?Clone@TiXmlText@@MBEPAVTiXmlNode@@XZ
?Accept@TiXmlText@@UBE_NPAVTiXmlVisitor@@@Z
?SetCDATA@TiXmlText@@QAEX_N@Z
??1TiXmlText@@UAE@XZ
?ToElement@TiXmlNode@@UAEPAVTiXmlElement@@XZ
ws2_32
ioctlsocket
closesocket
setsockopt
htonl
htons
sendto
socket
common
?IsDirectoryExist@FS@@YAHPB_W@Z
?AddFileSystem@FS@@YAJW4FILESYSTEM_TYPE@@PB_W1HHH@Z
?RemoveFileSystem@FS@@YAHPB_W@Z
?TrimLeft@CTXStringW@@QAEAAV1@PB_W@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
?GetLocalePath@TXI18N@@YA?AVCTXStringW@@PB_W@Z
??8CTXBSTR@@QBE_NPB_W@Z
??0CTXBSTR@@QAE@XZ
?ValidateBugReport@TXBugReport@@YAXXZ
?SetBugReportUin@TXBugReport@@YAXKPB_W@Z
?InitBugReport@TXBugReport@@YAXPB_W000GGKHHKKP6GHPAUtagBugReportInfo@1@PBD200PAPAXPAKPAX@Z@Z
?InitPlatformGFConfig@Boot@Util@@YAHXZ
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?Replace@CTXStringW@@QAEHPB_W0@Z
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@XZ
?TXAssert@@YAXPB_W0H@Z
??BCTXStringW@@QBEPB_WXZ
?Format@CTXStringW@@QAAXPB_WZZ
?SplitQNC@FS@@YAHPB_WAAVCTXStringW@@1@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
??0CTXStringW@@QAE@PB_W@Z
?RecordTransBegin@Perf@Util@@YA_JPB_WHH00@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
?RecordTransEnd@Perf@Util@@YAJ_JPB_WHH11H@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??0CTXStringW@@QAE@ABV0@@Z
??0CTXStringW@@QAE@PA_W@Z
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
??1CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
??0CTXBSTR@@QAE@PB_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?GetBuffer@CTXStringW@@QAEPA_WXZ
??YCTXStringW@@QAEAAV0@PB_W@Z
?Mid@CTXStringW@@QBE?AV1@HH@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?IsEmpty@CTXStringW@@QBE_NXZ
?DelIdleCallback@Window@Util@@YAJPAVVTXMsgLoopIdleCallback@@@Z
?AddIdleCallback@Window@Util@@YAJPAVVTXMsgLoopIdleCallback@@@Z
?AnsiToUnicode@Convert@Util@@YA_NAAVCTXStringW@@PBDH@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
??1CTXHttpDownloadSink@@UAE@XZ
??0CTXHttpDownloadSink@@IAE@XZ
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnError@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@K@Z
?NotifyIdle@TXTimer@@YAXXZ
??M@YA_NABVCTXStringW@@0@Z
?GetFileName@FS@Util@@YA?AVCTXStringW@@ABV3@@Z
?GetParentDir@File@Util@@YA?AVCTXStringW@@ABV3@@Z
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
?GetPlatformTpc@CoreCenter@Util@@YAHPAPAUITXDataRead@@@Z
?GetPlatformCore@CoreCenter@Util@@YAHPAPAUITXPlatformCore@@@Z
?OnUninitCom@Misc@Util@@YAXXZ
?OnExitCoreCenter@Misc@Util@@YAXXZ
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?ClearDeadQueue@Misc@Util@@YAXXZ
?Find@CTXStringW@@QBEHPB_WH@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?OnExitWinMain@Misc@Util@@YAXXZ
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?IsEmpty@CTXBSTR@@QAEHXZ
??ICTXBSTR@@QAEPAPA_WXZ
?GetLength@CTXStringW@@QBEHXZ
??YCTXStringW@@QAEAAV0@ABV0@@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?MakeLower@CTXStringW@@QAEAAV1@XZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
atl80
ord32
ord31
ord58
ord30
kernel32
OpenProcess
GetVersionExW
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
SetEnvironmentVariableW
GetEnvironmentVariableW
CreateMutexW
OpenMutexW
SetDllDirectoryW
MoveFileExW
FindFirstFileW
TerminateProcess
CreateProcessW
SetCurrentDirectoryW
ProcessIdToSessionId
GetCurrentProcessId
SleepEx
DuplicateHandle
GetCurrentThread
ReleaseMutex
UnmapViewOfFile
GetProcessTimes
GetSystemTimeAsFileTime
OpenEventW
GetModuleFileNameA
GetPrivateProfileIntW
CreateFileMappingW
MapViewOfFile
GetExitCodeProcess
InitializeCriticalSectionAndSpinCount
ResetEvent
GetModuleHandleExW
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLocaleInfoW
GetNumberFormatW
GetCurrencyFormatW
GetDateFormatW
GetTimeFormatW
GetLocaleInfoA
VirtualAllocEx
GetFileAttributesW
WriteProcessMemory
GetSystemInfo
GetSystemDefaultLangID
LoadLibraryA
MoveFileW
GetCommandLineW
CreateFileW
VirtualProtect
SwitchToThread
lstrcmpiW
GetFileSize
SetFilePointer
WriteFile
ExpandEnvironmentStringsW
GetACP
GetThreadLocale
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
IsBadReadPtr
IsBadWritePtr
LoadLibraryW
GetProcAddress
FreeLibrary
InterlockedDecrement
InterlockedIncrement
GetModuleHandleW
GetCurrentThreadId
SetEvent
CopyFileW
DeleteFileW
GetWindowsDirectoryW
GetSystemDirectoryW
GetFullPathNameW
InterlockedCompareExchange
InterlockedExchange
Sleep
WideCharToMultiByte
RaiseException
GetTempPathW
CreateDirectoryW
GetDiskFreeSpaceExW
GetTickCount
CreateEventW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateToolhelp32Snapshot
SetLastError
TerminateThread
ReadProcessMemory
OpenFileMappingW
GetLocalTime
IsDebuggerPresent
UnhandledExceptionFilter
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
VirtualFreeEx
GetLastError
VirtualQuery
lstrcpynW
GetModuleFileNameW
MultiByteToWideChar
lstrlenW
WaitForSingleObject
CloseHandle
GetCurrentProcess
Process32NextW
Process32FirstW
user32
WaitMessage
GetAsyncKeyState
WindowFromPoint
GetWindowRect
GetWindow
GetClassNameW
BeginPaint
FillRect
EndPaint
UnregisterClassA
SetTimer
GetMessageW
TranslateMessage
GetDesktopWindow
MoveWindow
SetParent
ShowWindow
IsWindowVisible
LoadCursorW
SetWindowLongW
GetWindowLongW
CallWindowProcW
IsWindow
GetForegroundWindow
SetWindowPos
BringWindowToTop
FindWindowA
PostMessageW
SetFocus
AttachThreadInput
SystemParametersInfoW
ClientToScreen
ScreenToClient
GetParent
FindWindowW
FindWindowExW
GetClientRect
InvalidateRect
DispatchMessageW
PeekMessageW
KillTimer
MsgWaitForMultipleObjects
PostThreadMessageW
LoadImageW
SendMessageTimeoutW
SendMessageW
GetWindowThreadProcessId
RegisterWindowMessageW
LoadMenuW
GetSubMenu
DestroyMenu
DestroyWindow
GetCursorPos
SetForegroundWindow
TrackPopupMenu
LoadIconW
RegisterClassExW
CreateWindowExW
DefWindowProcW
advapi32
RegOpenKeyW
RegQueryInfoKeyW
RegSetKeySecurity
RegGetKeySecurity
RegNotifyChangeKeyValue
RegEnumValueW
RegEnumKeyExW
RegFlushKey
RegDeleteKeyW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
CreateProcessAsUserW
DuplicateTokenEx
LookupPrivilegeValueW
GetTokenInformation
OpenProcessToken
RegCloseKey
RegQueryValueExW
ole32
OleInitialize
OleUninitialize
CoGetClassObject
shell32
ShellExecuteW
ShellExecuteExW
SHGetSpecialFolderPathW
oleaut32
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VariantClear
VariantInit
VarBstrCmp
LoadTypeLi
LoadRegTypeLi
SysStringLen
SysFreeString
shlwapi
StrStrIW
PathAppendW
PathFileExistsW
PathRemoveFileSpecW
StrFormatByteSizeW
StrFormatKBSizeW
StrFromTimeIntervalW
PathQuoteSpacesW
PathFindFileNameW
PathCombineW
msvcp80
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@_W@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?data@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?rbegin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$reverse_iterator@V?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@XZ
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIABV12@@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIPB_W@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WII@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?length@?$char_traits@D@std@@SAIPBD@Z
?width@ios_base@std@@QBEHXZ
?flags@ios_base@std@@QBEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?eof@?$char_traits@D@std@@SAHXZ
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?width@ios_base@std@@QAEHH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?good@ios_base@std@@QBE_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
psapi
GetModuleFileNameExW
GetModuleBaseNameW
EnumProcessModules
EnumProcesses
msvcr80
wcsncpy_s
_recalloc
_snwprintf_s
_beginthreadex
wcstok_s
tolower
_wtoi64
wcschr
putwchar
_wtol
wcstol
strchr
putchar
rename
fseek
fopen
wcscat_s
wcslen
wcsncat
wcsncpy
_wcsicmp
printf
__wargv
ldiv
_vsnprintf_s
_memicmp
strrchr
_unlink
_except_handler3
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_wsplitpath_s
_time32
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
strncpy_s
wcsncat_s
memcpy_s
_vsnwprintf_s
??3@YAXPAX@Z
memset
__CxxFrameHandler3
_wtoi
??_V@YAXPAX@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??2@YAPAXI@Z
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
strlen
_strnicmp
strnlen
_snprintf_s
strtoul
_purecall
_snwprintf
_wcsnicmp
wcsrchr
_byteswap_ushort
_byteswap_ulong
memmove
realloc
memcpy
fclose
fflush
fwrite
_snprintf
wcscpy_s
malloc
free
_localtime64
_time64
vsprintf_s
memmove_s
_mktime32
swscanf_s
__argc
dbghelp
ImageRvaToSection
MakeSureDirectoryPathExists
imm32
ImmDisableIME
gdi32
DeleteObject
CreateSolidBrush
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
imagehlp
ImageUnload
ImageLoad
comctl32
InitCommonControlsEx
gf
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
Exports
Exports
Sections
.text Size: 320KB - Virtual size: 317KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 132KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 24KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE