Static task
static1
Behavioral task
behavioral1
Sample
853fdf2671d76dc7b40a9273cd5302c2ce0054c42d49db4d538e6b7c88de8bfd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
853fdf2671d76dc7b40a9273cd5302c2ce0054c42d49db4d538e6b7c88de8bfd.exe
Resource
win10v2004-20220812-en
General
-
Target
853fdf2671d76dc7b40a9273cd5302c2ce0054c42d49db4d538e6b7c88de8bfd
-
Size
1.2MB
-
MD5
4f5deff99748aa7577aabe341e80fac0
-
SHA1
49707bd65967941bfdc4ea3f186f87ea3e30d8f0
-
SHA256
853fdf2671d76dc7b40a9273cd5302c2ce0054c42d49db4d538e6b7c88de8bfd
-
SHA512
88d1c16ff1c05905edb2363f6324ffb62cb45c17592c5fc912c8b33ff99b66de0bd138c6295854da9eadae334f85ff72b1d4735f138bdc8ddd66a37401c4670b
-
SSDEEP
24576:MLO9M2wglc9XxNJhvSbNL/cmjER156BujIPXX6:VeVvKTjEP56IIPXX6
Malware Config
Signatures
Files
-
853fdf2671d76dc7b40a9273cd5302c2ce0054c42d49db4d538e6b7c88de8bfd.exe windows x86
3f1bb338ef17456770c2201164e5b23d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dbghelp
SymInitialize
SymSetOptions
SymGetLineFromAddr64
StackWalk64
MiniDumpWriteDump
SymGetModuleBase64
SymFromAddr
SymFunctionTableAccess64
psapi
GetModuleBaseNameW
QueryWorkingSet
GetModuleInformation
GetModuleBaseNameA
EnumProcessModules
GetMappedFileNameW
GetProcessMemoryInfo
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
urlmon
CoInternetSetFeatureEnabled
wininet
InternetGetCookieA
HttpQueryInfoW
InternetCloseHandle
HttpSendRequestW
InternetConnectW
InternetGetConnectedState
HttpOpenRequestW
InternetReadFile
InternetSetStatusCallbackW
InternetOpenW
InternetCrackUrlW
kernel32
GetModuleFileNameW
CreateFileW
RaiseException
GetPrivateProfileIntW
VirtualProtect
GetCurrentThreadId
DeleteFileW
GetCurrentProcessId
InterlockedCompareExchange
GetPrivateProfileStringW
InterlockedDecrement
LeaveCriticalSection
FlushInstructionCache
SetLastError
EnterCriticalSection
LoadLibraryW
GetProcAddress
FindResourceW
FreeLibrary
LoadResource
LoadLibraryExW
GlobalLock
GetModuleHandleW
GlobalAlloc
InitializeCriticalSectionAndSpinCount
SizeofResource
MulDiv
TerminateProcess
lstrcmpW
MultiByteToWideChar
lstrlenW
GlobalUnlock
lstrcmpiW
DeleteCriticalSection
GlobalFree
WritePrivateProfileStringW
GetExitCodeProcess
GetVersionExW
GetCurrentThread
GetCurrentProcess
InterlockedIncrement
SetUnhandledExceptionFilter
CreateProcessW
SetErrorMode
GetFileSize
CloseHandle
CreateEventW
GetLastError
AreFileApisANSI
InterlockedPopEntrySList
IsProcessorFeaturePresent
InterlockedPushEntrySList
lstrlenA
UnhandledExceptionFilter
GetStartupInfoW
WideCharToMultiByte
GetProcessHeap
HeapFree
HeapAlloc
GetEnvironmentVariableA
WaitForMultipleObjects
ResetEvent
RtlCaptureStackBackTrace
GetDiskFreeSpaceExW
GlobalMemoryStatusEx
CreateIoCompletionPort
PostQueuedCompletionStatus
GetQueuedCompletionStatus
TlsFree
TlsAlloc
TlsSetValue
TlsGetValue
GetWindowsDirectoryW
GetSystemDirectoryW
GetNativeSystemInfo
GetFileInformationByHandle
FlushFileBuffers
SetFileTime
SetFilePointerEx
SetEndOfFile
InterlockedExchange
LocalFree
GetCommandLineW
ResumeThread
DuplicateHandle
CreateToolhelp32Snapshot
HeapSetInformation
Process32NextW
CreatePipe
GetSystemInfo
GetProcessId
Process32FirstW
GetProcessHeaps
AttachConsole
GetTickCount
SetEvent
WaitForSingleObject
WriteFile
VirtualFree
CreateDirectoryW
GetLogicalDriveStringsW
CompareFileTime
TzSpecificLocalTimeToSystemTime
FileTimeToSystemTime
QueryPerformanceFrequency
GetTempFileNameW
FindFirstFileW
MapViewOfFile
UnmapViewOfFile
GetSystemTimeAsFileTime
QueryPerformanceCounter
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
GetStdHandle
AssignProcessToJobObject
OpenProcess
GetProcessTimes
VirtualQueryEx
SetHandleInformation
GetProcessIoCounters
AllocConsole
SetPriorityClass
InterlockedExchangeAdd
ReleaseMutex
OutputDebugStringA
GetModuleHandleA
FormatMessageA
SetFilePointer
CreateMutexW
ExpandEnvironmentStringsW
TryEnterCriticalSection
CreateThread
IsDebuggerPresent
Sleep
FileTimeToLocalFileTime
GetFileAttributesExW
GetFileTime
FindNextFileW
QueryDosDeviceW
RemoveDirectoryW
SetCurrentDirectoryW
CreateFileMappingW
FindClose
VirtualAlloc
GetLongPathNameW
GetCurrentDirectoryW
GetTempPathW
ReadFile
ReplaceFileW
GetFileAttributesW
CopyFileW
MoveFileExW
user32
UnregisterClassA
SetTimer
LoadCursorW
CallWindowProcW
RegisterClassExW
SetWindowLongW
CreateWindowExW
DefWindowProcW
DispatchMessageW
GetClassInfoExW
MoveWindow
GetWindow
RedrawWindow
GetDesktopWindow
MessageBoxW
SetCapture
KillTimer
WaitMessage
GetQueueStatus
CallMsgFilterW
PeekMessageW
MsgWaitForMultipleObjectsEx
WaitForInputIdle
wsprintfW
SystemParametersInfoW
CharUpperW
SetWindowTextW
SendMessageW
ReleaseCapture
IsWindow
SetWindowPos
GetKeyState
GetClassInfoW
RegisterClassW
GetWindowThreadProcessId
WindowFromPoint
InflateRect
OffsetRect
SetRect
EndPaint
ClientToScreen
DestroyWindow
GetWindowTextLengthW
DestroyAcceleratorTable
ScreenToClient
PostQuitMessage
CharNextW
RegisterWindowMessageW
FillRect
IsChild
GetDlgItem
UnregisterClassW
PostMessageW
GetFocus
GetParent
InvalidateRgn
GetClientRect
CreateAcceleratorTableW
SetFocus
BeginPaint
GetDC
TranslateMessage
InvalidateRect
GetWindowLongW
GetWindowTextW
GetClassNameW
ReleaseDC
GetSysColor
gdi32
GetDeviceCaps
GetStockObject
BitBlt
GetObjectW
CreateCompatibleDC
CreateSolidBrush
DeleteObject
DeleteDC
CreateCompatibleBitmap
SelectObject
advapi32
GetTraceEnableFlags
RegSetValueExW
RegCloseKey
RegEnumKeyExW
ConvertSidToStringSidW
CreateProcessAsUserW
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryInfoKeyW
RegCreateKeyExW
OpenProcessToken
RegNotifyChangeKeyValue
RegEnumValueW
RegQueryValueExW
TraceEvent
GetTraceLoggerHandle
UnregisterTraceGuids
GetTraceEnableLevel
RegisterTraceGuidsW
ole32
CoCreateInstance
CoTaskMemRealloc
CLSIDFromProgID
CLSIDFromString
PropVariantClear
CreateStreamOnHGlobal
StringFromGUID2
OleInitialize
OleUninitialize
CoInitialize
CoTaskMemFree
CoGetClassObject
CoTaskMemAlloc
OleLockRunning
CoUninitialize
oleaut32
SysAllocString
SysStringByteLen
SysFreeString
SysStringLen
VariantClear
LoadTypeLi
VariantInit
SysAllocStringLen
OleCreateFontIndirect
VarUI4FromStr
LoadRegTypeLi
CreateErrorInfo
SetErrorInfo
VariantChangeType
GetErrorInfo
DispCallFunc
SysAllocStringByteLen
plugin
?SendControlMessage@PluginIPCGuest@plugin@@QAEXHPBCH@Z
?SendMessageToHost@PluginIPCGuest@plugin@@QAE_NHHHPBCHPACPAH@Z
??1PluginIPCGuest@plugin@@QAE@XZ
??0PluginIPCGuest@plugin@@QAE@XZ
?KeepAlive@PluginIPCGuest@plugin@@QAEXXZ
?Stop@PluginIPCGuest@plugin@@QAEXXZ
?Start@PluginIPCGuest@plugin@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?RemoveObserver@PluginIPCGuest@plugin@@QAEXPAVPluginEventObserver@2@@Z
?AddObserver@PluginIPCGuest@plugin@@QAEXPAVPluginEventObserver@2@@Z
?SetPluginChannelConnected@PluginIPCGuest@plugin@@QAEXPAUPluginChannelConnected@2@@Z
?SetPluginChannelError@PluginIPCGuest@plugin@@QAEXPAUPluginChannelError@2@@Z
?SetPluginControl@PluginIPCGuest@plugin@@QAEXPAUPluginControl@2@@Z
?ReplyControlMessage@PluginIPCGuest@plugin@@QAEXHPBCH@Z
msvcp100
?do_length@?$codecvt@_WDH@std@@MBEHABHPBD1I@Z
??1?$codecvt@_WDH@std@@MAE@XZ
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Xlength_error@std@@YAXPBD@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_Xfunc@tr1@std@@YAXXZ
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Xout_of_range@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@XZ
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE_W_W@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?precision@ios_base@std@@QAE_J_J@Z
?flags@ios_base@std@@QAEHH@Z
?flags@ios_base@std@@QBEHXZ
?exceptions@ios_base@std@@QAEXH@Z
?good@ios_base@std@@QBE_NXZ
?rdstate@ios_base@std@@QBEHXZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?narrow@?$ctype@_W@std@@QBED_WD@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?narrow@?$ctype@D@std@@QBEDDD@Z
?widen@?$ctype@D@std@@QBEDD@Z
?is@?$ctype@D@std@@QBE_NFD@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Incref@facet@locale@std@@QAEXXZ
??Bid@locale@std@@QAEIXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
?max@?$numeric_limits@_J@std@@SA_JXZ
?max@?$numeric_limits@I@std@@SAIXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_BADOFF@std@@3_JB
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
?_Orphan_all@_Container_base12@std@@QAEXXZ
??1_Container_base12@std@@QAE@XZ
??0_Container_base12@std@@QAE@XZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?min@?$numeric_limits@_J@std@@SA_JXZ
?max@?$numeric_limits@H@std@@SAHXZ
?min@?$numeric_limits@H@std@@SAHXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?_Swap_all@_Container_base12@std@@QAEXAAU12@@Z
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
?sync_with_stdio@ios_base@std@@SA_N_N@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QBE_JXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?bad@ios_base@std@@QBE_NXZ
?eof@ios_base@std@@QBE_NXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?id@?$numpunct@D@std@@2V0locale@2@A
?c_str@?$_Yarn@D@std@@QBEPBDXZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@UAE@XZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
?toupper@?$ctype@_W@std@@QBE_W_W@Z
?_Id_cnt@id@locale@std@@0HA
?id@?$codecvt@_WDH@std@@2V0locale@2@A
??0_Locimp@locale@std@@AAE@ABV012@@Z
??1_Locimp@locale@std@@MAE@XZ
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
??0?$codecvt@_WDH@std@@QAE@I@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
msvcr100
fwrite
fclose
??2@YAPAXI@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??8type_info@@QBE_NABV0@@Z
memmove
_set_purecall_handler
signal
memchr
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
_purecall
_set_abort_behavior
_set_invalid_parameter_handler
_CxxThrowException
fseek
exit
swprintf_s
_recalloc
abort
wcsncpy_s
free
malloc
wcsstr
printf
memcpy_s
?terminate@@YAXXZ
_fsopen
_wfsopen
rand
srand
_wfullpath
_time64
ldiv
isspace
_errno
iswspace
wcschr
_strnicmp
tolower
_vscprintf
_localtime64_s
__iob_func
fflush
wcsrchr
fprintf
wcscat_s
_write
_finite
wcsncmp
_wcsicmp
_exit
setvbuf
_open_osfhandle
realloc
_fdopen
fputc
_unlock_file
ungetc
fgetpos
_fseeki64
fgetc
fsetpos
_chsize
_lock_file
fread
_fileno
ftell
_vscwprintf
_vsnwprintf_s
ceil
strchr
_mktime64
isalpha
atoi
isalnum
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
wcscpy_s
__CxxFrameHandler3
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
__wgetmainargs
_cexit
_XcptFilter
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_vsnprintf_s
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
_vsnwprintf
??_V@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
_wfopen_s
_CIlog
memset
memmove_s
memcpy
strerror
strlen
strcpy
strcmp
sprintf
floor
_CIexp
??3@YAXPAX@Z
shlwapi
PathAddBackslashW
SHStrDupW
PathFileExistsW
ws2_32
inet_addr
WSAStartup
freeaddrinfo
WSACleanup
dnsapi
DnsFree
DnsQuery_W
comctl32
InitCommonControlsEx
winmm
timeEndPeriod
timeBeginPeriod
timeGetTime
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
iphlpapi
GetNetworkParams
shell32
SHChangeNotify
SHFileOperationW
CommandLineToArgvW
SHGetFolderPathW
ShellExecuteW
Sections
.text Size: 802KB - Virtual size: 801KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 245KB - Virtual size: 245KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 29KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE