Static task
static1
Behavioral task
behavioral1
Sample
1c90a4244eb623af03b20113c8f689fa52de2fea32871ed760705ebb76ad83c8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1c90a4244eb623af03b20113c8f689fa52de2fea32871ed760705ebb76ad83c8.exe
Resource
win10v2004-20220812-en
General
-
Target
1c90a4244eb623af03b20113c8f689fa52de2fea32871ed760705ebb76ad83c8
-
Size
4.9MB
-
MD5
b7f0ac3c190bd74f497cdd908eba6521
-
SHA1
633517dbe641932cb61091d518c09d812d447060
-
SHA256
1c90a4244eb623af03b20113c8f689fa52de2fea32871ed760705ebb76ad83c8
-
SHA512
678d02920d9fa4ee98970f467825e509e26e9b8e568c444e7ed38fa934050b2b1d51d4611edef929dc2cca12ff26b75333806bad15a1159bf14108a4768adddf
-
SSDEEP
98304:hu08VVvIVLwDbkbng9VEGJKzMHLJiKifMwrCQvg:n8VV0+o7g9ViMwLv
Malware Config
Signatures
Files
-
1c90a4244eb623af03b20113c8f689fa52de2fea32871ed760705ebb76ad83c8.exe windows x86
03bf21eff5e882e18411652c643a6bce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringW
FileTimeToLocalFileTime
GetCurrentThreadId
CreateFileMappingW
UnmapViewOfFile
GetCommandLineW
FindCloseChangeNotification
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FindNextChangeNotification
FindFirstChangeNotificationW
MulDiv
GetVolumeInformationW
GetDiskFreeSpaceExW
GetDriveTypeW
GetLogicalDriveStringsW
GlobalFree
GlobalSize
GetFileAttributesExW
CreateSemaphoreA
WaitForSingleObjectEx
GetCurrentDirectoryW
OutputDebugStringA
CompareStringW
CopyFileW
CreateEventA
MapViewOfFile
TerminateProcess
IsProcessorFeaturePresent
WaitForMultipleObjectsEx
ReleaseSemaphore
Module32FirstW
CreateProcessW
GetTempPathW
lstrcmpiW
GetSystemInfo
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
OpenProcess
SetFilePointerEx
FlushFileBuffers
GetFileSizeEx
GetPrivateProfileIntW
DeleteFileW
RemoveDirectoryW
FileTimeToSystemTime
SystemTimeToFileTime
GetSystemTime
SetLastError
LocalAlloc
FindNextFileW
FindFirstFileW
FindClose
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleHandleA
GetModuleFileNameW
InterlockedCompareExchange
CreateEventW
GetTickCount
Sleep
WaitForMultipleObjects
WaitForSingleObject
ResetEvent
SetEvent
TerminateThread
CreateThread
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetFileAttributesW
CreateDirectoryW
SetEndOfFile
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
RaiseException
LocalFree
LoadLibraryW
FreeLibrary
GetVersionExW
GetSystemDirectoryW
GetLastError
WideCharToMultiByte
MultiByteToWideChar
CreateFileW
CloseHandle
ReadFile
WriteFile
GetFileSize
FindResourceExW
FindResourceW
OutputDebugStringW
GetModuleHandleW
SizeofResource
LoadResource
GetCurrentProcess
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetProcAddress
AreFileApisANSI
DeviceIoControl
GetFileInformationByHandle
CreateWaitableTimerA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ResumeThread
SetWaitableTimer
OpenEventA
PeekNamedPipe
GetStdHandle
GetFileType
VerifyVersionInfoA
QueryPerformanceFrequency
GetSystemDirectoryA
VerSetConditionMask
SleepEx
FormatMessageA
ExpandEnvironmentStringsA
LoadLibraryA
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeResource
GetFullPathNameW
FlushInstructionCache
HeapCreate
GetLocalTime
GetVersionExA
LockResource
user32
wsprintfW
CharLowerBuffW
PrivateExtractIconsW
ShowWindow
GetActiveWindow
GetDC
ReleaseDC
OffsetRect
SetWindowPos
SetActiveWindow
GetWindowRect
SystemParametersInfoW
MonitorFromRect
PostMessageW
SetCapture
PostQuitMessage
InflateRect
AttachThreadInput
GetForegroundWindow
SetForegroundWindow
ClientToScreen
GetWindowThreadProcessId
MoveWindow
IsZoomed
GetCursorPos
IsWindow
DestroyWindow
EnableWindow
IsWindowEnabled
GetDesktopWindow
FindWindowW
ScreenToClient
IntersectRect
IsRectEmpty
PtInRect
FindWindowExW
GetParent
SetWindowLongW
GetWindowLongW
RegisterClipboardFormatW
GetClipboardData
CloseClipboard
OpenClipboard
EndDialog
CallWindowProcW
DrawIconEx
GetIconInfo
LoadCursorW
DestroyCursor
SendMessageW
UpdateLayeredWindow
MapVirtualKeyA
SetMenuContextHelpId
UnregisterClassW
SetMenuInfo
GetMenuInfo
TrackPopupMenu
AppendMenuW
GetMenuItemCount
DestroyMenu
CreatePopupMenu
IsMenu
SystemParametersInfoA
DrawTextW
GetSystemMetrics
MsgWaitForMultipleObjects
IsWindowVisible
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
CharNextW
GetSysColor
EnableMenuItem
GetKeyState
GetFocus
EqualRect
SetRect
SetCursor
DestroyIcon
GetClassNameW
UnionRect
SetCaretPos
HideCaret
GetCaretBlinkTime
CreateCaret
SetWindowTextW
InvalidateRect
EndPaint
BeginPaint
UpdateWindow
KillTimer
SetTimer
ReleaseCapture
GetCapture
SetFocus
IsIconic
SetLayeredWindowAttributes
AnimateWindow
TrackMouseEvent
GetMonitorInfoW
MonitorFromWindow
GetWindow
MapWindowPoints
GetClientRect
GetDlgItem
CreateWindowExW
RegisterClassExW
DefWindowProcW
CopyRect
LoadImageW
CreateIconFromResource
LoadBitmapW
GetMenuItemInfoW
gdi32
GetViewportOrgEx
GetObjectW
CreateRoundRectRgn
BitBlt
SetViewportOrgEx
GetCurrentObject
GetDeviceCaps
SetGraphicsMode
CreateBitmap
EnumFontsW
CreateFontIndirectW
CreateSolidBrush
GetStockObject
Rectangle
SetBkMode
StretchBlt
CreateDIBSection
SelectObject
SelectClipRgn
IntersectClipRect
GetRegionData
ExtCreateRegion
DeleteObject
DeleteDC
CreateCompatibleDC
EnumFontFamiliesExW
GetCharABCWidthsW
GetFontData
GetGlyphOutlineW
GetOutlineTextMetricsW
GetFontUnicodeRanges
GetGlyphIndicesW
GetTextExtentPointI
AddFontMemResourceEx
RemoveFontMemResourceEx
SetTextColor
SetTextAlign
GetTextMetricsW
SetWorldTransform
ExtTextOutW
GetTextFaceW
GdiFlush
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegOpenKeyW
CryptImportKey
CryptDestroyKey
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
QueryServiceStatus
OpenServiceW
OpenSCManagerW
CloseServiceHandle
CreateProcessAsUserW
DuplicateTokenEx
FreeSid
AllocateAndInitializeSid
EqualSid
SetTokenInformation
SetNamedSecurityInfoW
GetNamedSecurityInfoW
GetUserNameW
LookupPrivilegeValueW
LookupAccountNameW
GetAce
AddAce
GetAclInformation
InitializeAcl
CopySid
GetLengthSid
GetSidSubAuthorityCount
GetSidSubAuthority
GetSidIdentifierAuthority
InitializeSid
GetSidLengthRequired
IsValidSid
AdjustTokenPrivileges
GetTokenInformation
OpenProcessToken
RegQueryInfoKeyW
RegDeleteValueW
RegSetValueExW
CryptEncrypt
shell32
ord716
CommandLineToArgvW
ShellExecuteW
DragQueryFileW
SHFileOperationW
ShellExecuteExW
SHCreateItemFromIDList
SHCreateShellItemArrayFromIDLists
SHGetMalloc
ord155
ord190
SHGetPathFromIDListW
DragFinish
ord18
ord680
ord727
SHGetFileInfoW
SHGetSpecialFolderPathW
SHChangeNotify
SHCreateDirectoryExW
SHBindToObject
SHBindToParent
SHGetDesktopFolder
SHOpenFolderAndSelectItems
SHBrowseForFolderW
SHGetSpecialFolderLocation
ole32
CoUninitialize
StringFromGUID2
CoCreateGuid
CoInitialize
OleLockRunning
CLSIDFromString
CLSIDFromProgID
CreateBindCtx
CoCreateInstance
OleSetClipboard
OleGetClipboard
OleInitialize
OleUninitialize
CoTaskMemFree
DoDragDrop
CoTaskMemAlloc
CreateStreamOnHGlobal
OleFlushClipboard
RegisterDragDrop
ReleaseStgMedium
OleIsCurrentClipboard
oleaut32
VariantTimeToSystemTime
SystemTimeToVariantTime
SysFreeString
SysAllocStringLen
VariantClear
VariantCopy
VariantInit
SysAllocString
msvcp140
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QBE_NXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?width@ios_base@std@@QAE_J_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?fail@ios_base@std@@QBE_NXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_BADOFF@std@@3_JB
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?is@?$ctype@_W@std@@QBE_NF_W@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?eof@ios_base@std@@QBE_NXZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WXZ
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@ABV_Locinfo@1@I@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
?do_always_noconv@?$codecvt@_WDU_Mbstatet@@@std@@MBE_NXZ
?do_encoding@?$codecvt@_WDU_Mbstatet@@@std@@MBEHXZ
?do_in@?$codecvt@_WDU_Mbstatet@@@std@@MBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
?do_length@?$codecvt@_WDU_Mbstatet@@@std@@MBEHAAU_Mbstatet@@PBD1I@Z
?do_max_length@?$codecvt@_WDU_Mbstatet@@@std@@MBEHXZ
?do_out@?$codecvt@_WDU_Mbstatet@@@std@@MBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
?do_unshift@?$codecvt@_WDU_Mbstatet@@@std@@MBEHAAU_Mbstatet@@PAD1AAPAD@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?_Syserror_map@std@@YAPBDH@Z
_Xtime_get_ticks
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_current_owns
_Mtx_lock
_Mtx_unlock
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_timedwait
_Cnd_broadcast
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
??0task_continuation_context@Concurrency@@AAE@XZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
_Thrd_start
_Thrd_join
_Thrd_id
_Mtx_init
_Mtx_destroy
_Cnd_init
_Cnd_destroy
_Cnd_signal
_Cnd_do_broadcast_at_thread_exit
?bad@ios_base@std@@QBE_NXZ
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?_Xoverflow_error@std@@YAXPBD@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
_Thrd_detach
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?widen@?$ctype@_W@std@@QBE_WD@Z
?narrow@?$ctype@_W@std@@QBED_WD@Z
?exceptions@ios_base@std@@QAEXH@Z
?flags@ios_base@std@@QAEHH@Z
?precision@ios_base@std@@QAE_J_J@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE_W_W@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_K@Z
?_Xbad_alloc@std@@YAXXZ
?_Xbad_function_call@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z
?_Xlength_error@std@@YAXPBD@Z
shlwapi
PathFileExistsW
PathAppendW
PathRemoveFileSpecW
SHEnumKeyExW
PathAddBackslashW
PathFindExtensionW
PathRemoveBackslashW
PathRemoveExtensionW
StrToIntExW
StrCmpW
PathGetDriveNumberW
PathFindFileNameW
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
mpr
WNetEnumResourceW
WNetCloseEnum
WNetOpenEnumW
wtsapi32
WTSFreeMemory
WTSEnumerateSessionsW
vcruntime140
memchr
strstr
strrchr
__std_terminate
_except_handler4_common
__vcrt_InitializeCriticalSectionEx
strchr
memcmp
__std_type_info_compare
wcsstr
wcschr
memset
__RTDynamicCast
__std_exception_copy
_purecall
memcpy
__CxxFrameHandler3
_CxxThrowException
memmove
wcsrchr
__std_exception_destroy
api-ms-win-crt-runtime-l1-1-0
strerror
_errno
__sys_nerr
_beginthreadex
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_invalid_parameter_noinfo
_cexit
_seh_filter_exe
_invalid_parameter_noinfo_noreturn
terminate
_getpid
_set_app_type
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_controlfp_s
_initterm_e
abort
_register_thread_local_exe_atexit_callback
_c_exit
exit
_exit
api-ms-win-crt-heap-l1-1-0
_recalloc
_callnewh
free
realloc
_set_new_mode
calloc
malloc
api-ms-win-crt-string-l1-1-0
isspace
isalnum
tolower
strncmp
_wcsnicmp
_wcslwr
wcscpy_s
strcspn
strspn
wcsncmp
wcsncpy_s
iswspace
strncpy
_wcsupr_s
iswupper
iswlower
iswdigit
towlower
_wcslwr_s
wcstok
wcspbrk
wcsncpy
wmemcpy_s
isprint
isdigit
_wcsicmp
wcsnlen
strcmp
strlen
wcslen
wcscpy
wcscmp
_strdup
isalpha
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
_read
_write
_close
_open
feof
__stdio_common_vswscanf
_wfopen
fopen
_ftelli64
__stdio_common_vswprintf
_fileno
_filelength
__stdio_common_vswprintf_s
rewind
_get_osfhandle
fwrite
_fseeki64
_wfopen_s
fputc
__stdio_common_vsprintf
__acrt_iob_func
__stdio_common_vsnwprintf_s
fgets
fflush
fclose
fread
fseek
ftell
__stdio_common_vfprintf
__stdio_common_vsnprintf_s
fputs
_lseeki64
__stdio_common_vsscanf
api-ms-win-crt-convert-l1-1-0
_itow_s
strtoul
strtol
atoi
strtoll
_wtof
wcstoul
_wtoi
wcstol
api-ms-win-crt-time-l1-1-0
_time64
_mktime64
_localtime64_s
_time32
_gmtime64
api-ms-win-crt-filesystem-l1-1-0
_fstat64
_access
_stat64
_waccess
api-ms-win-crt-utility-l1-1-0
qsort
labs
srand
div
abs
bsearch
rand
api-ms-win-crt-math-l1-1-0
exp
__setusermatherr
fabs
tan
floor
log
_except1
ceil
_finite
sqrt
cos
pow
acos
log2
copysign
atan2
_libm_sse2_pow_precise
sin
fmod
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-multibyte-l1-1-0
_mbspbrk
gdiplus
GdipDrawImageRectI
GdipGraphicsClear
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipGetImageGraphicsContext
GdipSaveImageToFile
GdiplusShutdown
GdiplusStartup
GdipGetImageEncodersSize
GdipReleaseDC
GdipDeletePen
GdipCreatePen1
GdipGetImageEncoders
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipResetClip
GdipDrawImageI
GdipSetClipPath
GdipSetSmoothingMode
GdipAddPathEllipseI
GdipAlloc
GdipCreatePath
GdipLoadImageFromStream
GdipDrawImageRectRectI
GdipFillRectangleI
GdipCreateSolidFill
GdipLoadImageFromStreamICM
GdipDeleteGraphics
GdipCreateFromHDC
GdipCloneImage
GdipSetImageAttributesWrapMode
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipDisposeImage
GdipGetImageHeight
GdipGetImageWidth
GdipDeleteBrush
GdipCloneBrush
GdipFree
GdipDrawLineI
GdipDeletePath
imm32
ImmAssociateContext
ImmReleaseContext
ImmGetContext
ws2_32
socket
__WSAFDIsSet
select
WSACleanup
WSAStartup
WSAIoctl
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
closesocket
bind
send
recv
WSAGetLastError
WSASetLastError
gethostname
ioctlsocket
sendto
recvfrom
listen
accept
freeaddrinfo
getaddrinfo
wldap32
ord143
ord46
ord211
ord60
ord50
ord41
ord22
ord26
ord27
ord32
ord33
ord35
ord79
ord30
ord200
ord301
ord217
usp10
ScriptShape
ScriptItemize
ScriptFreeCache
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 719KB - Virtual size: 719KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ