?CheckTpmDevice@@YAHPAH@Z
?GetTpmVendorId@@YAHPBD@Z
?InitTpmDevice@@YAHXZ
?TpmIoControl@@YAHKPAKK00@Z
BroadcastMessageToGuis
GetInterface
GetPluginHandle
GetSmcPath
SendMessageToGui
SendMessageToPlugin
SendMessageToService
SmcDebugLog
Static task
static1
Behavioral task
behavioral1
Sample
c65e18d59472bdb30d7c23d1065d7ffd57dfa72a949de0562b153549e625de2c.exe
Resource
win7-20220812-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
c65e18d59472bdb30d7c23d1065d7ffd57dfa72a949de0562b153549e625de2c.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
c65e18d59472bdb30d7c23d1065d7ffd57dfa72a949de0562b153549e625de2c
-
Size
2.5MB
-
MD5
0eb4f477198e568f964b94d46f8011d1
-
SHA1
8e65537ab16f3b3181f892b440ab047a86777317
-
SHA256
c65e18d59472bdb30d7c23d1065d7ffd57dfa72a949de0562b153549e625de2c
-
SHA512
514250700abfb4b438df98ed3e8aa8070e086aaa388a67eb7363ec1b70564dc296adb9b308d38a6719b4eba1ee3bd9b7b2ca4dd65ec7898f488e802af269a420
-
SSDEEP
49152:lvSyRb0z15xxXg1ernzsOuzVF1YoTnF7gx7U+BT:Yyo/xxn/l6nF7f+d
Score
N/A
Malware Config
Signatures
Files
-
c65e18d59472bdb30d7c23d1065d7ffd57dfa72a949de0562b153549e625de2c.exe windows x86
0313009937e41870694c2d2ee7d0da44
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
userenv
DestroyEnvironmentBlock
CreateEnvironmentBlock
crypt32
CertCloseStore
CryptMsgClose
CertFreeCertificateContext
CertGetNameStringW
CertFindCertificateInStore
CryptMsgGetParam
CryptQueryObject
trident
?TridentCreateTridentEngine@@YAPAVITridentEngine@@KPADPAVINetPortManager@@PAVISyLog@@PAVITridentState@@PAVITsePromptDialog@@PAVITridentData@@PAVICmcContentUpdateManager@@PAK@Z
?TridentSetEventOutput@@YAXP6AXUSEL_EVENT_LOG@@PAX@Z1@Z
?TridentSetDebugOutput@@YAXP6AXPBDPAX@Z1@Z
?TridentCreateTridentState@@YAPAVITridentState@@XZ
?TridentDeleteTridentState@@YAXPAVITridentState@@@Z
?TridentDeleteTridentEngine@@YAXPAVITridentEngine@@@Z
?TridentDeleteUserInterface@@YAXPAVIUserInterface@@@Z
?TridentCreateTridentInstaller@@YAPAVITridentInstaller@@PAD0@Z
?TridentDeleteTridentInstaller@@YAXPAVITridentInstaller@@@Z
?TridentCreatePrestartingProtection@@YAPAVIPrestartingProtection@@XZ
?TridentDeleteTridentConfig@@YAXPAVITridentConfig@@@Z
?TridentDeleteTridentLocationSensor@@YAXPAVILocationSensor@@@Z
?TridentCreateTridentArbitrator@@YAPAVITridentArbitrator@@XZ
?TridentDeleteTridentArbitrator@@YAXPAVITridentArbitrator@@@Z
?TridentCreateSmcServiceProtection@@YAPAVISmcServiceProtection@@XZ
?TridentDeleteSmcServiceProtection@@YAXPAVISmcServiceProtection@@@Z
?TridentCreateTridentEmailNotification@@YAPAVIEmailNotification@@XZ
?TridentDeleteTridentEmailNotification@@YAXPAVIEmailNotification@@@Z
?TridentCreateTridentLog@@YAPAVITridentLog@@XZ
?TridentDeleteTridentLog@@YAXPAVITridentLog@@@Z
?TridentCreateClassLoader@@YAPAVITridentClassLoader@@XZ
?TridentDeleteClassLoader@@YAXPAVITridentClassLoader@@@Z
?TridentCreateUserInterface@@YAPAVIUserInterface@@XZ
?TridentCreateTridentConfig@@YAPAVITridentConfig@@XZ
?TridentCreateTridentLocationSensor@@YAPAVILocationSensor@@PAVINetPortManager@@W4hi_status@1@PAVITridentData@@@Z
?TridentDeletePrestartingProtection@@YAXPAVIPrestartingProtection@@@Z
dataman
?DmSetDebugOutput@@YAXP6AXPBD@Z@Z
?DmCreateDataManager@@YAPAVIDataManager@@PAK@Z
?DmDeleteDataManager@@YAXPAVIDataManager@@@Z
sylog
?DbgLog@@YAXABVoutputstr@@K@Z
?DbgInitializeLog@@YAXAAVoutputstr@@KH_N@Z
?Enter@Csect@@QAEXPADK@Z
?SlSetDebugOutput@@YAXP6AXPBD@Z@Z
?SlDeleteSyLog@@YAXPAVISyLog@@@Z
?SlCreateSyLog@@YAPAVISyLog@@PAKPBD1111J@Z
?DbgUninitializeLog@@YAXXZ
?SetContext@Csect@@QAEXPADK@Z
?Leave@Csect@@QAEXXZ
??0Csect@@QAE@XZ
?ClearOrdering@Csect@@QAEXXZ
??1Csect@@QAE@XZ
netport
?NpSetDebugOutput@@YAXP6AXPBD@Z@Z
?NpSetEventOutput@@YAXP6AXUSEL_EVENT_LOG@@PAX@Z@Z
?NpCreateNetPortManager@@YAPAVINetPortManager@@XZ
?NpDeleteNetPortManagerInstaller@@YAXPAVINetPortManagerInstaller@@@Z
?NpCreateNetPortManagerInstaller@@YAPAVINetPortManagerInstaller@@PAD0@Z
?NpDeleteNetPortManager@@YAXPAVINetPortManager@@@Z
sylink
SyLinkCreateInstance
?SyLinkSetDebugOutput@@YAXP6AXPADPAX@Z1@Z
SyLinkDeleteInstance
?SyLinkDeleteConfig@@YAXPAVISyLinkConfig@@@Z
?SyLinkCreateConfig@@YAPAVISyLinkConfig@@XZ
?SyLinkDeleteInstaller@@YAXPAVISyLinkInstaller@@@Z
?SyLinkCreateInstaller@@YAPAVISyLinkInstaller@@PBDPAK@Z
tse
??0STseProcessInfo@@QAE@XZ
??1STseProcessInfo@@UAE@XZ
spnet
?SpCreateSeal@@YAPAVISeal@@XZ
?SpNetCreateDesCrypto@@YAPAVIDesCrypto@@PAE@Z
?SpNetDeleteDesCrypto@@YAXPAVIDesCrypto@@@Z
UnzipSignatureFile
?SpNetDeleteEmailNotify@@YAXPAVIEmailNotify@@@Z
?SpNetCreateEmailNotify@@YAPAVIEmailNotify@@PAVISyLog@@PAK@Z
?SpCreateAttackerSeal@@YAPAVIAttackerSeal@@XZ
?SpCreateTsePlugin@@YAPAVITSEPlugIn@@XZ
?SpDeleteTsePlugin@@YAXPAVITSEPlugIn@@@Z
UnzipFileToFolder
?SpNetCreateName2Ip@@YAPAVIName2Ip@@PAVINetPortManager@@PAK@Z
?SpNetDeleteName2Ip@@YAXPAVIName2Ip@@@Z
?SpDeleteSeal@@YAXPAVISeal@@@Z
?SpDeleteAttackerSeal@@YAXPAVIAttackerSeal@@@Z
sssensor
?SsSetPowerBroadcast@@YAXH@Z
?SsGetPowerBroadcastData@@YAXPAIPAJ@Z
idstrafficpipe
?SpDeleteIdsSignatureLib@@YAXPAVIIdsSignatureLib@@@Z
?SpCreateIdsSignatureLib@@YAPAVIIdsSignatureLib@@XZ
ws2_32
recv
send
inet_addr
socket
ntohl
WSASocketA
WSAGetLastError
select
recvfrom
ntohs
closesocket
setsockopt
htons
__WSAFDIsSet
sendto
connect
version
GetFileVersionInfoSizeA
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueA
GetFileVersionInfoA
VerQueryValueW
psapi
EnumProcesses
EnumProcessModules
GetModuleFileNameExA
netapi32
NetApiBufferFree
Netbios
sghi
?HIDeleteHostIntegrity@@YAXPAVIHIEngine@@@Z
?HICreateHostIntegrity@@YAPAVIHIEngine@@PAK@Z
?HISetDebugOutput@@YAXP6AXPBD@Z@Z
shlwapi
PathRemoveBackslashA
SHDeleteKeyA
PathAddBackslashA
wininet
InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle
InternetSetStatusCallback
msi
ord57
ord141
ord67
ord110
ord8
ord33
ord95
tfman
?TeeferInstall@@YAHPADPAH@Z
?TeeferIsInstall@@YAHXZ
wpsman
?WpsDeleteWpsInstaller@@YAXPAVIWpsInstaller@@@Z
?WpsCreateWpsInstaller@@YAPAVIWpsInstaller@@PBD0@Z
mfc80
ord5200
ord1599
ord1655
ord1656
ord1964
ord5175
ord1362
ord4967
ord3345
ord6277
ord3802
ord6279
ord1522
ord2172
ord2178
ord2405
ord2387
ord2385
ord2403
ord2415
ord2392
ord2408
ord2413
ord2396
ord2398
ord2400
ord2394
ord2410
ord2390
ord934
ord930
ord932
ord928
ord923
ord5233
ord5235
ord5960
ord1600
ord4282
ord4722
ord3403
ord5203
ord4185
ord6275
ord5073
ord1908
ord5152
ord4244
ord1401
ord3946
ord1617
ord1620
ord5912
ord6724
ord1551
ord1670
ord1671
ord2020
ord4580
ord4890
ord4735
ord4212
ord5182
ord605
ord3641
ord911
ord5563
ord6067
ord6090
ord2657
ord1892
ord3683
ord4541
ord757
ord566
ord3333
ord4261
ord4481
ord2838
ord5566
ord5213
ord5230
ord4568
ord3948
ord5226
ord5224
ord2931
ord1920
ord3832
ord5382
ord6219
ord5102
ord1010
ord3806
ord5583
ord2018
ord2063
ord4326
ord6276
ord3801
ord6278
ord4014
ord4038
ord2248
ord2324
ord908
ord4081
ord1054
ord298
ord283
ord5419
ord5403
ord2475
ord4035
ord2537
ord1207
ord2731
ord2835
ord4307
ord2714
ord2862
ord2540
ord2646
ord2533
ord3718
ord3719
ord3709
ord2644
ord3949
ord4486
ord4262
ord3182
ord1024
ord558
ord973
ord5529
ord2272
ord5438
ord746
ord5447
ord305
ord5491
ord3934
ord1482
ord2131
ord783
ord774
ord297
ord1917
ord1187
ord1191
ord304
ord6174
ord3997
ord1486
ord4108
ord781
ord6118
ord6703
ord299
ord2902
ord1489
ord293
ord577
ord347
ord416
ord1564
ord651
ord602
ord5637
ord1279
ord3161
ord1280
ord3163
ord1934
ord2322
ord876
ord1123
ord3210
ord1084
ord6752
ord1185
ord6754
ord3397
ord265
ord266
ord762
ord310
ord2469
ord578
ord784
ord764
ord354
msvcr80
__CxxFrameHandler3
vsprintf_s
_ultoa_s
strstr
_invalid_parameter_noinfo
memmove_s
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
sscanf_s
_strlwr_s
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
_stricmp
wcsrchr
_vswprintf_c_l
strchr
wcscpy_s
_beginthread
strncpy_s
memset
strcpy_s
_splitpath_s
strcat_s
??0exception@std@@QAE@ABQBDH@Z
strrchr
atol
isdigit
atoi
strtok_s
fclose
fgets
fscanf_s
_fsopen
_mbsupr
sprintf_s
__RTDynamicCast
_atoi64
_vsnprintf_s
rand
__argv
srand
strncmp
vswprintf_s
_strupr_s
fprintf
fwrite
_mktime64
memchr
_time64
_ui64toa_s
_beginthreadex
isspace
_vscprintf
_difftime64
_time32
strtol
_ltoa_s
_set_errno
memcpy_s
strftime
_localtime64_s
_itoa_s
free
malloc
_mbsicmp
fopen
strtoul
_strtoui64
__argc
atof
_strnicmp
feof
ferror
fread
_findclose
_findfirst64i32
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
?terminate@@YAXXZ
_except_handler4_common
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
wcslen
_endthread
mbstowcs_s
strpbrk
_local_unwind4
wcscat_s
fseek
ftell
_resetstkoflw
_recalloc
calloc
realloc
_setmbcp
memcpy
kernel32
HeapDestroy
HeapSize
HeapReAlloc
GetThreadLocale
RaiseException
GetACP
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedCompareExchange
GetNumberFormatA
GetDateFormatA
GetTimeFormatA
GetShortPathNameA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
_lopen
_lclose
GetFileTime
GetComputerNameA
lstrcpynA
GetShortPathNameW
RemoveDirectoryA
GetStartupInfoA
GetSystemInfo
TerminateThread
SetThreadPriority
ResumeThread
QueryPerformanceCounter
GetCurrentProcessId
GetStringTypeExW
GetStringTypeExA
GetEnvironmentVariableW
lstrcmpiW
lstrcmpiA
CompareStringW
CompareStringA
lstrlenW
GetVersion
InterlockedExchange
FindFirstChangeNotificationA
FindNextChangeNotification
WideCharToMultiByte
GetComputerNameW
GetVersionExA
FindCloseChangeNotification
SetFileAttributesA
ExitProcess
OpenMutexA
DebugBreak
OpenFileMappingA
CreateMutexA
SetConsoleCtrlHandler
GetUserDefaultLangID
GetSystemDefaultLangID
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
InterlockedIncrement
GetExitCodeProcess
OpenEventA
GlobalAlloc
LoadLibraryA
GetModuleHandleA
GetProcAddress
SetLastError
GetLastError
MultiByteToWideChar
WaitForMultipleObjectsEx
CloseHandle
SetEvent
CreateEventA
ResetEvent
Sleep
GetCurrentThreadId
GetExitCodeThread
SleepEx
WaitForSingleObjectEx
WaitForSingleObject
GetTickCount
lstrcpyA
lstrlenA
LoadLibraryExA
GetCurrentProcess
OutputDebugStringA
GetEnvironmentVariableA
FindClose
FindFirstFileA
CopyFileA
DeleteFileA
GetLocaleInfoA
SetEndOfFile
WriteFile
SetFilePointer
ReadFile
GetFileSize
CreateFileA
FindNextFileA
CreateDirectoryA
MoveFileA
GetFileAttributesA
WritePrivateProfileStringA
GetPrivateProfileStringA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
CompareFileTime
LocalFree
FormatMessageW
FreeLibrary
TerminateProcess
CreateThread
WaitForMultipleObjects
ConnectNamedPipe
CreateNamedPipeW
LocalAlloc
OpenProcess
ProcessIdToSessionId
CreateProcessA
GlobalFree
DuplicateHandle
CreatePipe
GetFullPathNameA
ExpandEnvironmentStringsA
HeapFree
HeapAlloc
GetProcessHeap
GetSystemDirectoryA
GetWindowsDirectoryA
FormatMessageA
InterlockedDecrement
FileTimeToSystemTime
FileTimeToLocalFileTime
SetProcessWorkingSetSize
MoveFileExA
GetModuleFileNameA
GetOverlappedResult
user32
ExitWindowsEx
CharUpperW
CharUpperA
EnumWindows
CharLowerW
CharLowerA
SendMessageTimeoutA
MessageBoxA
CharNextA
FindWindowA
GetClassNameA
EnableWindow
GetWindowThreadProcessId
GetDesktopWindow
IsRectEmpty
LoadStringA
wsprintfA
DrawIconEx
FillRect
GetWindowTextA
gdi32
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
advapi32
CryptReleaseContext
GetUserNameA
CryptAcquireContextA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
CloseServiceHandle
OpenServiceA
OpenSCManagerA
EqualSid
LookupAccountNameW
CreateProcessAsUserW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
OpenProcessToken
CryptGenKey
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDeriveKey
CryptGetUserKey
CryptGetProvParam
CryptDestroyKey
CreateProcessAsUserA
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegEnumValueA
RegEnumKeyA
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
GetUserNameW
RegNotifyChangeKeyValue
ChangeServiceConfig2A
GetFileSecurityA
GetTokenInformation
AdjustTokenPrivileges
LookupPrivilegeValueA
GetSidSubAuthority
RegCreateKeyExA
LookupAccountSidW
RegDeleteKeyA
RegSetValueExA
StartServiceCtrlDispatcherA
CreateServiceA
RegisterServiceCtrlHandlerA
StartServiceA
ChangeServiceConfigA
QueryServiceConfigA
QueryServiceStatus
DeleteService
SetServiceStatus
ControlService
RegisterEventSourceA
ReportEventA
DeregisterEventSource
ImpersonateLoggedOnUser
RevertToSelf
RegDeleteValueA
RegEnumKeyExA
RegFlushKey
RegOpenKeyA
DuplicateToken
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
shell32
SHGetSpecialFolderPathA
ExtractIconExW
ShellExecuteExA
ShellExecuteA
ole32
CoCreateInstance
CoUninitialize
StringFromGUID2
CoGetObject
CoInitializeEx
CoFreeUnusedLibraries
oleaut32
VariantInit
VariantChangeType
GetErrorInfo
SetErrorInfo
CreateErrorInfo
SysAllocStringByteLen
SysStringByteLen
SysFreeString
SysAllocString
SysAllocStringLen
VariantClear
msvcp80
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAD@Z
?setf@ios_base@std@@QAEHHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAPAX@Z
?setbase@std@@YA?AU?$_Smanip@H@1@H@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?flags@ios_base@std@@QAEHH@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IBEPBDXZ
?_Unlock@_Mutex@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?rbegin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$reverse_iterator@V?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ
?_Xlen@_String_base@std@@SAXXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?_Xran@_String_base@std@@SAXXZ
?assign@?$char_traits@D@std@@SAXAADABD@Z
?_Move_s@?$char_traits@D@std@@SAPADPADIPBDI@Z
?_Copy_s@?$char_traits@D@std@@SAPADPADIPBDI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??0?$_String_val@DV?$allocator@D@std@@@std@@IAE@V?$allocator@D@1@@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??1strstreambuf@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0strstreambuf@std@@QAE@PBDH@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?good@ios_base@std@@QBE_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?width@ios_base@std@@QAEHH@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?eof@?$char_traits@D@std@@SAHXZ
??$?6_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??_D?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??0?$allocator@_W@std@@QAE@XZ
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
??0?$allocator@D@std@@QAE@XZ
?length@?$char_traits@_W@std@@SAIPB_W@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?eof@?$char_traits@_W@std@@SAGXZ
?eq_int_type@?$char_traits@_W@std@@SA_NABG0@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?max_size@?$allocator@_W@std@@QBEIXZ
?max_size@?$allocator@D@std@@QBEIXZ
??0?$allocator@_W@std@@QAE@ABV01@@Z
??0?$allocator@D@std@@QAE@ABV01@@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBEHXZ
?length@?$char_traits@D@std@@SAIPBD@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEPADXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
setupapi
SetupIterateCabinetA
Exports
Exports
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 396KB - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ