g_pAKPluginList
Static task
static1
Behavioral task
behavioral1
Sample
acdf0d3859dc79359c2cb48ae60f44d523021fdc67a4ae6a8616af15b478348d.exe
Resource
win7-20221111-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
acdf0d3859dc79359c2cb48ae60f44d523021fdc67a4ae6a8616af15b478348d.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
acdf0d3859dc79359c2cb48ae60f44d523021fdc67a4ae6a8616af15b478348d
-
Size
12.5MB
-
MD5
f0b52ca6e0228333de9aee6a97352597
-
SHA1
cce688d80167a55a43ad947b1ce02f76540d10df
-
SHA256
acdf0d3859dc79359c2cb48ae60f44d523021fdc67a4ae6a8616af15b478348d
-
SHA512
3cdf19c9a2381b5645224436dd24247afbf52193f7b5638fdfef06ef5b15b060ee8465cf2e718c9eee21c81e8a2f2570d6389892095d42e885b4df5e7c8ff98f
-
SSDEEP
196608:84YLvnWKIU+F1YLBG7PfeVzWrUDIX7nBRwPr9n8pcTjMIqJ:84YbW8+bYd4Pfe5EZXNSTjfi
Score
N/A
Malware Config
Signatures
Files
-
acdf0d3859dc79359c2cb48ae60f44d523021fdc67a4ae6a8616af15b478348d.exe windows x86
2f0b57287a11b00d3d41e3068af15e5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
CallbackMayRunLong
FlsAlloc
FlsGetValue
FlsSetValue
CreateSemaphoreExW
CloseHandle
InitOnceExecuteOnce
SetThreadPriority
GetCurrentThread
GetLastError
InitializeCriticalSectionEx
DeleteCriticalSection
EnterCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
GetLocalTime
GetSystemTime
GetSystemTimeAsFileTime
SystemTimeToFileTime
FileTimeToSystemTime
GetDynamicTimeZoneInformation
SystemTimeToTzSpecificLocalTimeEx
ReleaseSemaphore
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
HeapFree
GetProcessHeap
FormatMessageW
GetOverlappedResultEx
SetLastError
GetLogicalProcessorInformationEx
K32GetProcessMemoryInfo
GetCurrentProcess
OutputDebugStringA
GetTickCount64
SleepEx
WaitForSingleObjectEx
RaiseException
SwitchToThread
ResumeThread
IsDebuggerPresent
TryAcquireSRWLockExclusive
SetThreadpoolWait
CreateEventW
CreateThreadpoolWait
SetEvent
WaitForThreadpoolWaitCallbacks
CloseThreadpoolWait
FlushFileBuffers
WriteFile
TryEnterCriticalSection
ResolveLocaleName
GetLocaleInfoEx
GetUserGeoID
GetGeoInfoW
GetCurrentThreadId
CreateFile2
GetFileInformationByHandleEx
ReadFile
SetFilePointerEx
WerRegisterFile
FindFirstFileExW
FindNextFileW
FindClose
CreateDirectoryW
GetFileAttributesW
DeleteFileW
RemoveDirectoryW
MoveFileExW
CopyFile2
GetFileSizeEx
CreateFileMappingFromApp
MapViewOfFileFromApp
SetEndOfFile
FlushViewOfFile
UnmapViewOfFile
InitializeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
ReleaseSRWLockExclusive
MultiByteToWideChar
WideCharToMultiByte
VirtualFree
InitializeSListHead
GetCurrentProcessId
IsProcessorFeaturePresent
SleepConditionVariableCS
SetFileInformationByHandle
GetFileAttributesExW
DecodePointer
ResolveDelayLoadedAPI
DelayLoadFailureHook
WaitForMultipleObjectsEx
ResetEvent
LoadPackagedLibrary
GetProcAddress
SetThreadIdealProcessorEx
CreateThread
Sleep
ReleaseSRWLockShared
AcquireSRWLockShared
AcquireSRWLockExclusive
microsoft.applications.telemetry.windows.native
?Release@LogManagerProvider@Events@Applications@Microsoft@@SA?AW4status_t@234@AAVILogConfiguration@234@@Z
??DILogConfiguration@Events@Applications@Microsoft@@QAEAAV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VVariant@Events@Applications@Microsoft@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VVariant@Events@Applications@Microsoft@@@std@@@2@@std@@XZ
?GetModules@ILogConfiguration@Events@Applications@Microsoft@@QAEAAV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$shared_ptr@VIModule@Events@Applications@Microsoft@@@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$shared_ptr@VIModule@Events@Applications@Microsoft@@@2@@std@@@2@@std@@XZ
?SetPolicyBitFlags@EventProperties@Events@Applications@Microsoft@@QAEX_K@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_JW4PiiKind@234@W4DataCategory@234@@Z
?DetachEventSource@DebugEventSource@Events@Applications@Microsoft@@UAE_NAAV1234@@Z
?AttachEventSource@DebugEventSource@Events@Applications@Microsoft@@UAE_NAAV1234@@Z
?RemoveEventListener@DebugEventSource@Events@Applications@Microsoft@@UAEXW4DebugEventType@234@AAVDebugEventListener@234@@Z
?AddEventListener@DebugEventSource@Events@Applications@Microsoft@@UAEXW4DebugEventType@234@AAVDebugEventListener@234@@Z
?Get@LogManagerProvider@Events@Applications@Microsoft@@CAPAVILogManager@234@AAVILogConfiguration@234@AAW4status_t@234@@Z
?SetProperty@EventProperties@Events@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBDW4PiiKind@234@W4DataCategory@234@@Z
?SetPriority@EventProperties@Events@Applications@Microsoft@@QAEXW4EventPriority@234@@Z
??0EventProperties@Events@Applications@Microsoft@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?DispatchEvent@DebugEventSource@Events@Applications@Microsoft@@UAE_NVDebugEvent@234@@Z
??1EventProperties@Events@Applications@Microsoft@@UAE@XZ
?SetProperty@EventProperties@Events@Applications@Microsoft@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4PiiKind@234@W4DataCategory@234@@Z
??AILogConfiguration@Events@Applications@Microsoft@@QAEAAVVariant@123@PBD@Z
?AddModule@ILogConfiguration@Events@Applications@Microsoft@@QAEXPBDABV?$shared_ptr@VIModule@Events@Applications@Microsoft@@@std@@@Z
ws2_32
WSAStartup
closesocket
WSAPoll
socket
ioctlsocket
WSAGetLastError
recv
send
setsockopt
shutdown
select
connect
freeaddrinfo
getaddrinfo
WSACleanup
api-ms-win-eventing-provider-l1-1-0
EventSetInformation
EventWriteTransfer
EventUnregister
EventRegister
api-ms-win-core-com-l1-1-0
StringFromGUID2
CoUninitialize
CoInitializeEx
CoGetContextToken
CoTaskMemFree
CoCreateInstanceFromApp
CoCreateGuid
CoTaskMemAlloc
CoCreateFreeThreadedMarshaler
api-ms-win-core-winrt-error-l1-1-0
SetRestrictedErrorInfo
RoOriginateError
RoFailFastWithErrorContext
ntdll
RtlIpv4AddressToStringExA
RtlIpv4StringToAddressExA
RtlIpv6StringToAddressExA
RtlIpv6AddressToStringExA
dwrite
DWriteCreateFactory
rpcrt4
UuidFromStringW
d3d11
D3D11CreateDevice
api-ms-win-core-synch-l1-1-0
CreateEventExW
WaitForSingleObject
api-ms-win-core-datetime-l1-1-1
GetDateFormatEx
GetTimeFormatEx
api-ms-win-gaming-tcui-l1-1-0
ShowProfileCardUI
ProcessPendingGameUI
ShowChangeFriendRelationshipUI
api-ms-win-gaming-tcui-l1-1-2
ShowProfileCardUIForUser
ShowChangeFriendRelationshipUIForUser
api-ms-win-core-winrt-string-l1-1-0
WindowsDeleteString
WindowsGetStringLen
WindowsGetStringRawBuffer
WindowsCompareStringOrdinal
WindowsIsStringEmpty
WindowsConcatString
WindowsCreateString
WindowsDuplicateString
WindowsCreateStringReference
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
RoActivateInstance
RoInitialize
api-ms-win-core-synch-l1-2-1
WaitForMultipleObjects
api-ms-win-core-threadpool-l1-2-0
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
WaitForThreadpoolWorkCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
DisassociateCurrentThreadFromCallback
xaudio2_9
ord1
vccorlib140_app
??0FailureException@Platform@@Q$AAA@XZ
?__abi_WinRTraiseCOMException@@YGXJ@Z
?__abi_WinRTraiseObjectDisposedException@@YGXXZ
?__abi_WinRTraiseDisconnectedException@@YGXXZ
?__abi_WinRTraiseWrongThreadException@@YGXXZ
?__abi_WinRTraiseClassNotRegisteredException@@YGXXZ
?__abi_WinRTraiseChangedStateException@@YGXXZ
?__abi_WinRTraiseOutOfBoundsException@@YGXXZ
??0OutOfBoundsException@Platform@@Q$AAA@XZ
?__abi_WinRTraiseOutOfMemoryException@@YGXXZ
?__abi_WinRTraiseAccessDeniedException@@YGXXZ
?__abi_WinRTraiseFailureException@@YGXXZ
?__abi_WinRTraiseOperationCanceledException@@YGXXZ
?__abi_WinRTraiseNullReferenceException@@YGXXZ
?__abi_WinRTraiseInvalidCastException@@YGXXZ
?__abi_WinRTraiseNotImplementedException@@YGXXZ
?Allocate@Heap@Details@Platform@@SAPAXII@Z
?EventSourceUninitialize@Details@Platform@@YGXPAPAX@Z
?__abi_translateCurrentException@@YGJ_N@Z
?EventSourceRemove@Details@Platform@@YGXPAPAXPAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z
?EventSourceAdd@Details@Platform@@YG?AVEventRegistrationToken@Foundation@Windows@@PAPAXPAUEventLock@12@P$AAVDelegate@2@@Z
?ReleaseTarget@ControlBlock@Details@Platform@@AAEXXZ
?GetIBoxArrayVtable@Details@Platform@@YGPAXPAX@Z
?EventSourceGetTargetArray@Details@Platform@@YGPAXPAXPAUEventLock@12@@Z
?EventSourceGetTargetArraySize@Details@Platform@@YGIPAX@Z
?EventSourceGetTargetArrayEvent@Details@Platform@@YGPAXPAXIPBXPA_J@Z
?GetWeakReference@Details@Platform@@YGPAU__abi_IUnknown@@Q$ADVObject@2@@Z
?ResolveWeakReference@Details@Platform@@YGP$AAVObject@2@ABU_GUID@@PAPAU__abi_IUnknown@@@Z
??0Delegate@Platform@@Q$AAA@XZ
?Allocate@Heap@Details@Platform@@SAPAXI@Z
?__abi_cast_String_to_Object@__abi_details@@YGP$AAVObject@Platform@@P$AAVString@3@@Z
?ToString@Guid@Platform@@QAAP$AAVString@2@XZ
?GetTypeCode@Type@Platform@@SA?AW4TypeCode@2@P$AAV12@@Z
?__abi_make_type_id@@YGP$AAVType@Platform@@ABU__abi_type_descriptor@@@Z
?CreateValue@Details@Platform@@YGP$AAVObject@2@W4TypeCode@2@PBX@Z
?GetIBoxVtable@Details@Platform@@YGPAXPAX@Z
?__abi_ObjectToString@__abi_details@@YGP$AAVString@Platform@@P$AAVObject@3@_N@Z
?ReCreateException@Exception@Platform@@SAP$AAV12@H@Z
?get@FullName@Type@Platform@@Q$AAAP$AAVString@3@XZ
??0DisconnectedException@Platform@@Q$AAA@XZ
?GetCmdArguments@Details@Platform@@YAPAPA_WPAH@Z
?__abi_cast_Object_to_String@__abi_details@@YGP$AAVString@Platform@@_NP$AAVObject@3@@Z
??0NullReferenceException@Platform@@Q$AAA@XZ
??0ChangedStateException@Platform@@Q$AAA@XZ
?AlignedFree@Heap@Details@Platform@@SAXPAX@Z
??0OutOfMemoryException@Platform@@Q$AAA@XZ
??0Object@Platform@@Q$AAA@XZ
?Free@Heap@Details@Platform@@SAXPAX@Z
?EventSourceInitialize@Details@Platform@@YGXPAPAX@Z
?AllocateException@Heap@Details@Platform@@SAPAXII@Z
?__abi_WinRTraiseInvalidArgumentException@@YGXXZ
??0FailureException@Platform@@Q$AAA@P$AAVString@1@@Z
?GetObjectContext@Details@Platform@@YGPAUIUnknown@@XZ
?GetProxyImpl@Details@Platform@@YGJPAUIUnknown@@ABU_GUID@@0PAPAU3@@Z
?ReleaseInContextImpl@Details@Platform@@YGJPAUIUnknown@@0@Z
?get@Message@Exception@Platform@@Q$AAAP$AAVString@3@XZ
?GetType@Object@Platform@@Q$AAAP$AAVType@2@XZ
?Contains@Rect@Foundation@Windows@@QAA_NVPoint@23@@Z
??0COMException@Platform@@Q$AAA@H@Z
?Equals@Boolean@Platform@@QAA_NP$AAVObject@2@@Z
??0GridLength@Xaml@UI@Windows@@QAA@NW4GridUnitType@123@@Z
?InitializeData@Details@Platform@@YAJH@Z
?UninitializeData@Details@Platform@@YAXH@Z
?GetIidsFn@@YGJHPAKPBU__s_GUID@@PAPAVGuid@Platform@@@Z
?GetActivationFactoryByPCWSTR@@YGJPAXAAVGuid@Platform@@PAPAX@Z
msvcp140_app
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?id@?$collate@_W@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
_Wcsxfrm
_Wcscoll
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WXZ
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?bad@ios_base@std@@QBE_NXZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Cnd_destroy
_Cnd_init
_Mtx_destroy
_Mtx_init
_Thrd_id
_Thrd_sleep
_Xtime_get_ticks
_Thrd_start
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7ios_base@std@@6B@
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
??1ios_base@std@@UAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_K@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z
?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
_Cnd_signal
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?good@ios_base@std@@QBE_NXZ
?uncaught_exception@std@@YA_NXZ
?flags@ios_base@std@@QBEHXZ
_Unlock_shared_ptr_spin_lock
_Lock_shared_ptr_spin_lock
?_Winerror_message@std@@YAKKPADK@Z
?_Winerror_map@std@@YAHH@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
??0_Locinfo@std@@QAE@HPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Random_device@std@@YAIXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Incref@facet@locale@std@@UAEXXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@H@Z
??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?id@?$ctype@D@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?id@?$collate@D@std@@2V0locale@2@A
_Strxfrm
_Strcoll
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?_Xbad_alloc@std@@YAXXZ
??Bios_base@std@@QBE_NXZ
?fail@ios_base@std@@QBE_NXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
?_Xout_of_range@std@@YAXPBD@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD4@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_lock
_Mtx_unlock
_Cnd_wait
_Cnd_broadcast
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Cnd_init_in_situ
_Cnd_destroy_in_situ
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_Assign@_ContextCallback@details@Concurrency@@AAEXPAX@Z
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?__ExceptionPtrRethrow@@YAXPBX@Z
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ
?__ExceptionPtrToBool@@YA_NPBX@Z
?_XGetLastError@std@@YAXXZ
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
_Query_perf_counter
_Query_perf_frequency
?_Xinvalid_argument@std@@YAXPBD@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
?width@ios_base@std@@QBE_JXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?width@ios_base@std@@QAE_J_J@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
_Mbrtowc
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
_Thrd_current
?_Syserror_map@std@@YAPBDH@Z
?__ExceptionPtrCompare@@YA_NPBX0@Z
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?id@?$numpunct@_W@std@@2V0locale@2@A
?id@?$numpunct@D@std@@2V0locale@2@A
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
_Thrd_detach
_Thrd_join
_Thrd_hardware_concurrency
?classic@locale@std@@SAABV12@XZ
?_Xruntime_error@std@@YAXPBD@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
concrt140_app
?wait@event@Concurrency@@QAEII@Z
?set@event@Concurrency@@QAEXXZ
??0event@Concurrency@@QAE@XZ
??1event@Concurrency@@QAE@XZ
vcruntime140_app
strstr
longjmp
_CxxThrowException
memset
memchr
memcmp
memcpy
__RTDynamicCast
__RTtypeid
strrchr
__std_type_info_compare
strchr
__std_exception_destroy
_setjmp3
__std_exception_copy
_purecall
__std_terminate
__CxxFrameHandler3
_except_handler4_common
memmove
api-ms-win-crt-runtime-l1-1-0
exit
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_crt_at_quick_exit
_initterm_e
abort
_cexit
_seh_filter_exe
terminate
_invalid_parameter_noinfo_noreturn
_errno
strerror_s
_set_app_type
_get_narrow_winmain_command_line
_controlfp_s
fegetround
fesetround
__fpe_flt_rounds
_initterm
_register_thread_local_exe_atexit_callback
_invalid_parameter_noinfo
_c_exit
_beginthreadex
strerror
_exit
api-ms-win-crt-heap-l1-1-0
_callnewh
realloc
_aligned_free
_aligned_malloc
calloc
free
malloc
_set_new_mode
api-ms-win-crt-math-l1-1-0
_CIasin
__setusermatherr
_except1
_CIfmod
floor
_CIpow
_finite
_fdsign
_dsign
_ldsign
_fdtest
_dtest
_ldtest
log2f
frexp
remainderf
lround
truncf
_CIatan2
fmaxf
fminf
rintf
_CIcosh
roundf
_CIsinh
rint
_CItanh
copysignf
_libm_sse2_acos_precise
_libm_sse2_asin_precise
trunc
modf
ldexp
_libm_sse2_pow_precise
nextafterf
_libm_sse2_atan_precise
_libm_sse2_cos_precise
_libm_sse2_exp_precise
_libm_sse2_tan_precise
_libm_sse2_log10_precise
_libm_sse2_log_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
ceil
api-ms-win-crt-string-l1-1-0
wcsncpy_s
strnlen
strncat_s
strncpy_s
_strlwr_s
_strnicmp
_stricmp
iscntrl
wcsnlen
_strdup
strncmp
strpbrk
toupper
isupper
strncpy
isxdigit
isalnum
wcslen
islower
strcpy_s
ispunct
isspace
strcoll
strcspn
strncat
isdigit
isalpha
tolower
wcsncat_s
api-ms-win-crt-time-l1-1-0
strftime
_mktime64
_localtime64_s
_time64
_gmtime64_s
api-ms-win-crt-convert-l1-1-0
strtof
_wcstoui64
strtol
strtoull
atof
strtod
_strtoui64
_ui64tow_s
_ui64toa_s
_i64tow_s
_i64toa_s
_ultoa_s
_itoa_s
atoi
strtoul
_strtoi64
api-ms-win-crt-stdio-l1-1-0
_get_osfhandle
_fseeki64
_ftelli64
__p__commode
fputc
fclose
fopen_s
fread
ferror
fopen
__stdio_common_vswprintf_s
fwrite
__acrt_iob_func
__stdio_common_vfprintf
_set_fmode
__stdio_common_vsscanf
__stdio_common_vsprintf
_wfsopen
fread_s
__stdio_common_vfprintf_s
__stdio_common_vswscanf
__stdio_common_vsprintf_s
fputs
__stdio_common_vsnwprintf_s
__stdio_common_vsnprintf_s
feof
_get_stream_buffer_pointers
fflush
fgetc
fgetpos
fsetpos
setvbuf
ungetc
getc
freopen
api-ms-win-crt-locale-l1-1-0
_create_locale
_free_locale
___lc_codepage_func
localeconv
setlocale
_configthreadlocale
_setmbcp
api-ms-win-crt-utility-l1-1-0
rand
qsort
srand
api-ms-win-crt-filesystem-l1-1-0
remove
_unlock_file
_wmkdir
_lock_file
api-ms-win-core-winrt-error-l1-1-1
RoReportUnhandledError
api-ms-win-core-memory-l1-1-3
VirtualAllocFromApp
Exports
Exports
Sections
.text Size: 8.7MB - Virtual size: 8.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 966KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 682KB - Virtual size: 681KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ