??4_Init_locks@std@@QAEAAV01@ABV01@@Z
Static task
static1
Behavioral task
behavioral1
Sample
a3c6a16cd20786b2a52f9b7014367ecf0a150d49f3a945b18826f4e754cf446f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a3c6a16cd20786b2a52f9b7014367ecf0a150d49f3a945b18826f4e754cf446f.exe
Resource
win10v2004-20220901-en
General
-
Target
a3c6a16cd20786b2a52f9b7014367ecf0a150d49f3a945b18826f4e754cf446f
-
Size
987KB
-
MD5
0e8a1b9e3570fbcbf2d356718f196980
-
SHA1
bc5584ed4023d739ff9119753cf78c486ba79c50
-
SHA256
a3c6a16cd20786b2a52f9b7014367ecf0a150d49f3a945b18826f4e754cf446f
-
SHA512
d24349655c6f4e599809e9ee0469b2938ad849a57a2d82a46ba2465cc395cd1ffa7b9e18c8d66c8309d057656a0366c46cbc567a0142c31547ae660ef232f3d9
-
SSDEEP
12288:P47WTPlwMNeceScg+GBdO6vfCTfOxhqbVGJ8hPCiI9SqRHGYW3k:P4sOMKszdXSTfIhqbVGJ8hPeGp3k
Malware Config
Signatures
Files
-
a3c6a16cd20786b2a52f9b7014367ecf0a150d49f3a945b18826f4e754cf446f.exe windows x86
09ba7f00afa9b794bd96770c743380a1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
bdlogicutils
?GetBDLogicTaskMgr@BDLogicUtils@@YAPAVIBDLogicTaskMgr@1@XZ
?BDLogicUtilsLibrary_Unit@BDLogicUtils@@YAHXZ
?BDLogicUtilsLibrary_Init@BDLogicUtils@@YAHXZ
?GetBDCrashCatcher@BDLogicUtils@@YAPAVIBDCrashCatcher@1@XZ
?GetBDMReportMgr@BDLogicUtils@@YAPAVIBDMReportMgr@1@XZ
imm32
ImmDisableIME
bdmframework
?Stop@CEventHookManager@@QAEHXZ
?Init@CEventHookManager@@QAEHXZ
?Instance@?$CSingleton@VCEventHookManager@@@utils@@SAPAVCEventHookManager@@XZ
?Unit@CPluginMgr@@QAEXXZ
?_b_SetIpcNodeServerName@CIpcClient@IPC@@QAEXPB_W@Z
?Instance@?$CSingleton@VCPluginMgr@@@BDMBase@@SAPAVCPluginMgr@@XZ
?Init@CPluginMgr@@QAEJV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HPB_W@Z
?Stop@CIpcClient@IPC@@QAEHXZ
?Start@CIpcClient@IPC@@QAEHH@Z
?Init@CIpcClient@IPC@@QAEHXZ
?Instance@?$CSingleton@VCIpcClient@IPC@@@utils@@SAPAVCIpcClient@IPC@@XZ
?SetIpcNodeType@CIpcClient@IPC@@QAEXK@Z
?g_pluginLink@@3PAUtagPLUGINLINK@@A
?Stop@CServiceManager@@QAEHXZ
?Stop@TComFactory@@QAEHXZ
?Start@TComFactory@@QAEHXZ
?Instance@?$CSingleton@VTComFactory@@@utils@@SAPAVTComFactory@@XZ
?Init@TComFactory@@QAEHXZ
?SetAPCParam@CServiceManager@@QAEXKPAXPAUHWND__@@@Z
?Instance@?$CSingleton@VCServiceManager@@@utils@@SAPAVCServiceManager@@XZ
?Init@CServiceManager@@QAEHXZ
?SetAPCParam@CEventHookManager@@QAEXKPAXPAUHWND__@@@Z
shlwapi
StrFormatByteSizeW
StrFormatKBSizeW
StrFromTimeIntervalW
wnsprintfW
PathAppendW
PathRemoveFileSpecW
PathFileExistsW
StrRStrIW
PathIsDirectoryW
PathAddBackslashW
SHDeleteKeyW
StrChrW
StrRChrW
kernel32
GetLastError
GetCurrentProcess
GetLocalTime
LoadLibraryW
GetProcAddress
CreateMutexW
GetProcessTimes
OpenMutexW
lstrcmpW
HeapAlloc
GetProcessHeap
HeapFree
GetSystemTimeAsFileTime
GetSystemInfo
GlobalMemoryStatusEx
GetVersionExW
MultiByteToWideChar
WideCharToMultiByte
lstrcmpiW
FileTimeToSystemTime
CreateEventA
GetTickCount
lstrlenA
Sleep
GetWindowsDirectoryW
lstrlenW
GetSystemDefaultLangID
WriteFile
ReadFile
CreateFileW
GetFileSize
FindFirstFileW
FindClose
RemoveDirectoryW
DeleteFileW
MoveFileExW
SetFileAttributesW
FindNextFileW
GetCurrentDirectoryW
GetBinaryTypeW
GetModuleHandleW
GetSystemWow64DirectoryW
DebugBreak
GetSystemWindowsDirectoryW
ExpandEnvironmentStringsW
GetFileSizeEx
CreateFileMappingW
FindResourceExW
MapViewOfFile
UnmapViewOfFile
FreeLibrary
GetSystemDirectoryW
LocalFree
LocalAlloc
ReleaseMutex
GetFileAttributesW
GetCurrentProcessId
ProcessIdToSessionId
CreateProcessW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThread
SetFilePointer
GetLocaleInfoW
GetDateFormatW
GetNumberFormatW
FileTimeToLocalFileTime
SystemTimeToTzSpecificLocalTime
GetCurrencyFormatW
SystemTimeToFileTime
GetTimeFormatW
RaiseException
IsBadReadPtr
GetCurrentThreadId
GetSystemTime
InterlockedDecrement
LoadResource
InterlockedIncrement
LockResource
SizeofResource
Process32NextW
TerminateProcess
OpenProcess
WaitForSingleObject
lstrcpynW
Process32FirstW
CreateToolhelp32Snapshot
FindResourceW
ResetEvent
WaitForMultipleObjects
SetEvent
CreateEventW
GetModuleFileNameW
CloseHandle
SetErrorMode
OutputDebugStringA
GetVersionExA
HeapDestroy
HeapReAlloc
HeapSize
FormatMessageA
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
ExpandEnvironmentStringsA
MoveFileW
DeviceIoControl
CopyFileW
TerminateThread
user32
GetDesktopWindow
PostQuitMessage
InvalidateRect
GetWindowRect
IsWindow
KillTimer
DestroyIcon
UnregisterClassA
SetTimer
IsIconic
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
SetWindowPos
SetActiveWindow
IsWindowVisible
FindWindowExW
PostMessageW
LoadImageW
SetFocus
ShowWindow
ExitWindowsEx
FindWindowW
GetSystemMetrics
GetWindowTextW
GetClassNameW
SendMessageW
wsprintfW
SetForegroundWindow
DestroyWindow
SetWindowLongW
CreateWindowExW
RegisterClassExW
DefWindowProcW
GetWindowLongW
advapi32
RegQueryValueExA
RegQueryValueExW
RegCloseKey
RegOpenKeyExA
LookupPrivilegeValueW
OpenProcessToken
AdjustTokenPrivileges
CreateProcessAsUserW
CloseServiceHandle
StartServiceW
OpenServiceW
OpenSCManagerW
CheckTokenMembership
AllocateAndInitializeSid
FreeSid
RegDeleteKeyW
RegGetKeySecurity
RegNotifyChangeKeyValue
RegFlushKey
RegCreateKeyExW
RegSetKeySecurity
RegEnumKeyExW
RegQueryInfoKeyW
RegEnumValueW
RegDeleteValueW
RegSetValueExW
DuplicateTokenEx
GetTokenInformation
RegOpenKeyExW
shell32
SHGetFolderPathW
SHCreateDirectoryExW
Shell_NotifyIconW
CommandLineToArgvW
SHGetSpecialFolderPathW
ShellExecuteExW
ShellExecuteW
ole32
CoInitialize
CoUninitialize
CoCreateGuid
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
msvcp80
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0ABV12@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
?construct@?$allocator@D@std@@QAEXPADABD@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0PBD1@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V32@0@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?destroy@?$allocator@D@std@@QAEXPAD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@PBD1@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V32@@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?uncaught_exception@std@@YA_NXZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?close@?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PB_WHH@Z
??_D?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??$getline@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?O_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_W@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
msvcr80
memcpy_s
wcsrchr
??_V@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
wcscpy_s
_wcsupr
wcsstr
_vsnwprintf_s
wcschr
tolower
_wtoi
strtoul
_snwprintf
_difftime64
_time64
__CxxFrameHandler3
_CxxThrowException
memmove
free
malloc
atof
wcstombs_s
realloc
ferror
atoi
ftell
fopen_s
fputc
fseek
fread
_vsnprintf_s
fclose
fprintf
strncmp
isspace
strchr
isalnum
isalpha
wcsncpy_s
_wcsicmp
_wcsnicmp
wcsncat_s
_strnicmp
_snprintf_s
_snwprintf_s
_errno
rand
_wtol
_snwscanf_s
swprintf_s
putwchar
putchar
wcstol
isdigit
memset
strerror
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
_vswprintf_c_l
memmove_s
vswprintf_s
_vscwprintf
_beginthreadex
towlower
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
_purecall
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
??2@YAPAXI@Z
??3@YAXPAX@Z
_except_handler3
sprintf
wcstoul
strcpy_s
??0exception@std@@QAE@ABQBDH@Z
_i64toa_s
_itoa
_stricmp
_itoa_s
_atoi64
printf
isupper
??8type_info@@QBE_NABV0@@Z
ispunct
strcspn
_wstat64
_wsplitpath_s
_wmkdir
wcsncat
isprint
_snprintf
fflush
__iob_func
memcpy
swscanf_s
iphlpapi
GetIpForwardTable
imagehlp
MapAndLoad
UnMapAndLoad
psapi
GetProcessImageFileNameW
GetModuleFileNameExW
EnumProcesses
EnumProcessModules
GetModuleBaseNameW
userenv
CreateEnvironmentBlock
wininet
InternetCloseHandle
InternetReadFile
HttpQueryInfoW
HttpOpenRequestW
InternetConnectW
InternetOpenW
InternetCrackUrlW
HttpSendRequestW
netapi32
Netbios
ws2_32
sendto
getsockopt
ioctlsocket
recv
select
closesocket
socket
__WSAFDIsSet
WSAStartup
recvfrom
gethostbyname
htonl
ntohl
WSAGetLastError
send
connect
htons
bdmcommon
?SetMulTimer@timer@util@@YAJIPAUITimerCallback@@I@Z
?EraseTimerCallback@timer@util@@YAJPAUITimerCallback@@I@Z
Exports
Exports
Sections
.text Size: 388KB - Virtual size: 386KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 132KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 340KB - Virtual size: 338KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE