??4_Init_locks@std@@QAEAAV01@ABV01@@Z
Static task
static1
Behavioral task
behavioral1
Sample
d09f0f6ba179738fddc74486a47a638a7fc339c06743d514bde8c83647570679.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d09f0f6ba179738fddc74486a47a638a7fc339c06743d514bde8c83647570679.exe
Resource
win10v2004-20230220-en
General
-
Target
d09f0f6ba179738fddc74486a47a638a7fc339c06743d514bde8c83647570679
-
Size
5.4MB
-
MD5
c941e4376540bdb3540b8d113b4458a1
-
SHA1
74279d4abaaa667096ca20349f8dcffb17b70fe0
-
SHA256
d09f0f6ba179738fddc74486a47a638a7fc339c06743d514bde8c83647570679
-
SHA512
6abbccf9c480f0dc7bda359c08ced71e5ec212da1c747916e319c879d2932249cf4c77e67e8dec8621e192a8c3bf39bb3e8d9e7f73ee2b185dc084ca2c3ec40c
-
SSDEEP
98304:AlFkf73ixicmsHUCvAQzATvkCAe2uTHZv14fo1ag1n/nd8k:AlWWxlvA/MSHZMrg/nd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d09f0f6ba179738fddc74486a47a638a7fc339c06743d514bde8c83647570679
Files
-
d09f0f6ba179738fddc74486a47a638a7fc339c06743d514bde8c83647570679.exe windows x86
b8cc40983771f493397745817e02a428
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
wldap32
ord26
ord30
ord50
ord32
ord35
ord79
ord33
ord301
ord27
ord41
ord46
ord143
ord217
ord211
ord22
ord200
ord60
freeimage
_FreeImage_GetFileTypeU@8
_FreeImage_GetInfo@4
_FreeImage_GetBits@4
_FreeImage_GetInfoHeader@4
_FreeImage_GetMetadata@16
_FreeImage_GetFIFFromFilenameU@4
_FreeImage_AllocateT@28
_FreeImage_GetColorsUsed@4
_FreeImage_GetHeight@4
_FreeImage_GetWidth@4
_FreeImage_GetBPP@4
_FreeImage_GetPitch@4
_FreeImage_IsTransparent@4
_FreeImage_ConvertTo32Bits@4
_FreeImage_ConvertTo24Bits@4
_FreeImage_Unload@4
_FreeImage_GetTagType@4
_FreeImage_CloneTag@4
_FreeImage_GetScanLine@8
_FreeImage_GetPixelColor@16
freeimageplus
??0fipWinImage@@QAE@W4FREE_IMAGE_TYPE@@III@Z
??4fipWinImage@@QAEAAV0@ABV0@@Z
??4fipTag@@QAEAAV0@PAUFITAG@@@Z
?draw@fipWinImage@@QBEXPAUHDC__@@AAUtagRECT@@H@Z
?drawBySrc@fipWinImage@@QBEXPAUHDC__@@AAUtagRECT@@1H@Z
?clear@fipWinImage@@UAEXXZ
?isValid@fipWinImage@@UBEHXZ
??1fipWinImage@@UAE@XZ
??0fipMemoryIO@@QAE@PAEK@Z
??1fipMemoryIO@@UAE@XZ
?getFileType@fipMemoryIO@@QBE?AW4FREE_IMAGE_FORMAT@@XZ
?toString@fipTag@@QBEPBDW4FREE_IMAGE_MDMODEL@@PAD@Z
?getValue@fipTag@@QBEPBXXZ
?getMetadata@fipImage@@QBEHW4FREE_IMAGE_MDMODEL@@PBDAAVfipTag@@@Z
??1fipTag@@UAE@XZ
??0fipTag@@QAE@XZ
?getData@fipImage@@QAEPAUFIBITMAP@@XZ
?copyToClipboard@fipWinImage@@QBEHPAUHWND__@@@Z
?saveU@fipImage@@QBEHW4FREE_IMAGE_FORMAT@@PB_WH@Z
?saveU@fipImage@@QBEHPB_WH@Z
?rotate@fipImage@@QAEHNPBX@Z
??1fipImage@@UAE@XZ
??4fipImage@@QAEAAV0@PAUFIBITMAP@@@Z
??0fipImage@@QAE@W4FREE_IMAGE_TYPE@@III@Z
?flipVertical@fipImage@@QAEHXZ
?flipHorizontal@fipImage@@QAEHXZ
?identifyFIFU@fipImage@@SA?AW4FREE_IMAGE_FORMAT@@PB_W@Z
?rescale@fipImage@@QAEHIIW4FREE_IMAGE_FILTER@@@Z
?getWidth@fipImage@@QBEIXZ
?loadU@fipImage@@QAEHPB_WH@Z
?loadFromMemory@fipImage@@QAEHAAVfipMemoryIO@@H@Z
?getHeight@fipImage@@QBEIXZ
ws2_32
shutdown
gethostname
ioctlsocket
select
__WSAFDIsSet
recvfrom
sendto
listen
accept
getservbyport
gethostbyaddr
getservbyname
htonl
inet_ntoa
gethostbyname
inet_addr
WSASetLastError
connect
socket
getpeername
getsockopt
htons
bind
ntohs
getsockname
setsockopt
WSAIoctl
recv
WSAStartup
WSACleanup
WSAGetLastError
send
closesocket
kernel32
FindResourceW
SizeofResource
LockResource
LoadResource
FindResourceExW
GetLocalTime
GetCurrentThreadId
ReadFile
GetFileSize
CreateFileW
FreeResource
MultiByteToWideChar
GetLastError
lstrlenA
WideCharToMultiByte
GetVersionExW
GetPrivateProfileStringW
InterlockedExchange
GetPrivateProfileIntW
GetCurrentProcess
FlushInstructionCache
SetLastError
RaiseException
InterlockedIncrement
GlobalMemoryStatus
CreateMutexW
WaitForSingleObject
GetModuleHandleW
GetFileAttributesW
UnmapViewOfFile
OpenFileMappingW
MapViewOfFile
WaitNamedPipeW
Sleep
WriteFile
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
OpenEventW
CreateEventW
SetEvent
GetExitCodeThread
TerminateProcess
GetCurrentProcessId
LocalFree
lstrlenW
lstrcmpiW
LoadLibraryExW
GetTickCount
WaitForMultipleObjects
ResetEvent
OutputDebugStringW
GetWindowsDirectoryW
FileTimeToLocalFileTime
FileTimeToSystemTime
CopyFileW
GetCommandLineW
FindClose
GlobalAddAtomW
GlobalDeleteAtom
TerminateThread
CreateProcessW
GetExitCodeProcess
GetTempPathW
RemoveDirectoryW
FindNextFileW
QueryPerformanceFrequency
QueryPerformanceCounter
lstrcpynW
lstrcatW
InterlockedCompareExchange
SetUnhandledExceptionFilter
VirtualQuery
IsBadReadPtr
CreateThread
SystemTimeToFileTime
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCurrentThread
GetEnvironmentVariableA
ResumeThread
GetThreadContext
SetThreadContext
VirtualFree
VirtualAlloc
VirtualProtect
SetFilePointer
WritePrivateProfileStringW
Module32FirstW
GetSystemDirectoryW
GetComputerNameA
GetDiskFreeSpaceExW
LoadLibraryA
LocalAlloc
GetUserDefaultLangID
GetSystemTime
GetCommandLineA
GetVersionExA
GetSystemDirectoryA
GetModuleHandleA
SleepEx
PeekNamedPipe
GetFileType
GetStdHandle
FormatMessageA
MoveFileExA
FindFirstFileW
CreateDirectoryW
DeleteFileW
GetModuleFileNameW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
OpenProcess
ProcessIdToSessionId
FreeLibrary
GetProcAddress
LoadLibraryW
CloseHandle
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetVersion
FlushConsoleInputBuffer
IsDebuggerPresent
UnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetThreadLocale
GetLocaleInfoA
GetACP
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
MulDiv
InterlockedDecrement
user32
KillTimer
DrawIconEx
LoadIconW
DestroyIcon
IsWindowVisible
EqualRect
SetRectEmpty
GetDlgItem
GetDlgCtrlID
IntersectRect
OffsetRect
DrawTextW
PostThreadMessageW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
GetFocus
IsChild
IsDialogMessageW
BeginPaint
EndPaint
MonitorFromWindow
GetMonitorInfoW
SetCapture
ReleaseCapture
GetCursorPos
SetFocus
SetCursor
GetNextDlgTabItem
ScreenToClient
ShowWindow
UpdateLayeredWindow
PtInRect
SetRect
IsRectEmpty
GetSystemMetrics
EnumDisplayDevicesW
IsWindowEnabled
SendMessageW
UnionRect
IsIconic
SetWindowTextW
IsZoomed
GetKeyState
RegisterHotKey
UnregisterHotKey
GetLastActivePopup
SwitchToThisWindow
ShowScrollBar
GetScrollInfo
SetWindowRgn
GetWindowTextW
GetWindowTextLengthW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
FillRect
EnumWindows
wsprintfW
GetMenuItemCount
GetMenuStringW
GetSubMenu
GetMenuItemInfoW
DestroyMenu
CreatePopupMenu
ClientToScreen
CallWindowProcW
InflateRect
CharNextW
LoadBitmapW
LoadImageW
DefWindowProcW
CreateWindowExW
SetWindowLongW
FindWindowW
RegisterClassExW
InvalidateRect
ReleaseDC
GetDC
LoadCursorW
SetTimer
CopyRect
GetDesktopWindow
GetActiveWindow
PostMessageW
GetClassInfoExW
GetProcessWindowStation
GetUserObjectInformationW
UnregisterClassA
MapWindowPoints
GetClientRect
GetWindowLongW
GetWindowRect
GetWindow
GetParent
MoveWindow
RegisterWindowMessageW
DestroyWindow
IsWindow
SetActiveWindow
SetForegroundWindow
AttachThreadInput
SetWindowPos
SystemParametersInfoW
GetForegroundWindow
GetWindowThreadProcessId
BringWindowToTop
EnableWindow
DestroyCursor
CreateIconIndirect
CharLowerBuffW
MessageBoxA
FindWindowExW
SendMessageTimeoutW
RedrawWindow
GetClassNameW
EnumDisplaySettingsW
gdi32
Rectangle
SetViewportOrgEx
ExtTextOutW
DeleteObject
GetDeviceCaps
SaveDC
RestoreDC
CreateBitmap
CreateCompatibleBitmap
StretchBlt
CreateSolidBrush
GetDIBits
CreateDIBitmap
GetClipBox
EndPage
StartPage
EndDoc
StartDocW
SetBkMode
CreateFontIndirectW
CombineRgn
CreateRectRgnIndirect
CreateRoundRectRgn
RectInRegion
OffsetRgn
GetCurrentObject
GetTextColor
RoundRect
GetClipRgn
GetTextExtentPoint32W
MoveToEx
LineTo
TextOutW
GetViewportOrgEx
SetStretchBltMode
DeleteDC
CreatePen
GetStockObject
CreateRectRgn
GetObjectW
SelectClipRgn
BitBlt
CreateCompatibleDC
CreateDIBSection
SetTextColor
SelectObject
SetBkColor
ExtSelectClipRgn
winspool.drv
DeviceCapabilitiesW
EnumPrintersW
ord203
comdlg32
GetOpenFileNameW
PrintDlgExW
GetSaveFileNameW
advapi32
CloseServiceHandle
SetSecurityDescriptorSacl
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
GetUserNameW
GetAclInformation
CryptDecrypt
CryptCreateHash
CryptSetHashParam
CryptSignHashA
CryptDestroyHash
CryptExportKey
CryptGetUserKey
CryptAcquireContextA
CryptGetProvParam
CryptDestroyKey
CryptReleaseContext
CryptEnumProvidersA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
AddAce
GetSecurityDescriptorSacl
InitializeAcl
EqualSid
IsValidSid
GetLengthSid
LookupAccountNameW
CopySid
QueryServiceStatusEx
OpenProcessToken
RevertToSelf
ImpersonateLoggedOnUser
RegOpenKeyExW
RegOpenCurrentUser
RegCloseKey
RegQueryValueExW
RegOpenKeyW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
OpenServiceW
OpenSCManagerW
SetNamedSecurityInfoW
SetEntriesInAclW
BuildExplicitAccessWithNameW
DeleteAce
GetAce
GetNamedSecurityInfoW
RegQueryInfoKeyW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegEnumKeyExW
shell32
ShellExecuteW
SHGetSpecialFolderPathW
DragAcceptFiles
DragQueryFileW
ShellExecuteExW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetPathFromIDListW
SHFileOperationW
SHGetSpecialFolderLocation
SHGetMalloc
SHParseDisplayName
SHBindToParent
ord155
SHCreateDirectoryExW
SHChangeNotify
ord680
ole32
CLSIDFromString
CoUninitialize
CoInitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
CoInitializeEx
CreateStreamOnHGlobal
CoCreateGuid
oleaut32
SysStringLen
VariantClear
SystemTimeToVariantTime
VarUI4FromStr
SysFreeString
VariantTimeToSystemTime
shlwapi
PathRemoveFileSpecW
PathAddBackslashW
PathFileExistsW
PathFindFileNameW
StrToIntA
StrToIntW
PathFindExtensionW
StrCmpW
PathRemoveBackslashW
UrlCreateFromPathW
StrRetToBufW
StrCmpLogicalW
PathIsDirectoryW
PathAppendW
comctl32
_TrackMouseEvent
msimg32
AlphaBlend
msvcp80
?push_back@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEX_W@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?str@?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
?at@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIABV12@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WII@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEAB_WI@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@II@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??_D?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
?str@?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHPB_W@Z
gdiplus
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipSetInterpolationMode
GdipGraphicsClear
GdipDrawImageRectI
GdipLoadImageFromFile
GdipGetImageHeight
GdipGetImageWidth
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromStreamICM
GdipSaveImageToFile
GdipCreateHBITMAPFromBitmap
GdipGetImagePixelFormat
GdipCloneImage
GdipDrawImageRectRectI
GdipImageRotateFlip
GdipDrawImageRectRect
GdipDrawImagePointsRectI
GdipLoadImageFromStream
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipFree
GdipDeleteFontFamily
GdiplusStartup
GdiplusShutdown
GdipAlloc
GdipBitmapSetPixel
GdipCreateLineBrushFromRectWithAngleI
GdipFillRectangle
GdipDrawRectangleI
GdipDrawLine
GdipSetPenMode
GdipSetPenStartCap
GdipSetPenEndCap
GdipSetPenDashStyle
GdipDrawImageI
GdipGetFontSize
GdipAddPathStringI
GdipGetFamily
GdipSetPixelOffsetMode
GdipSetCompositingQuality
GdipDrawPath
GdipFillPath
GdipAddPathArcI
GdipResetWorldTransform
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipSetClipPath
GdipSetSmoothingMode
GdipAddPathRectangleI
GdipClosePathFigure
GdipAddPathPieI
GdipDeletePath
GdipCreatePath
GdipMeasureString
GdipDrawString
GdipSetTextRenderingHint
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipCreateStringFormat
GdipCreateFontFromLogfontW
GdipDeleteFont
GdipCreateFont
GdipFillRectangleI
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipBitmapLockBits
GdipCreatePen1
GdipDrawLinesI
GdipDeletePen
GdipCloneFontFamily
GdipGetFontCollectionFamilyList
GdipPrivateAddFontFile
GdipDeletePrivateFontCollection
GdipNewPrivateFontCollection
GdipAddPathEllipseI
GdipCloneBitmapAreaI
GdipCreateRegionRectI
GdipDeleteRegion
GdipCombineRegionRectI
GdipSetClipRegion
GdipResetClip
GdipSaveGraphics
GdipBitmapUnlockBits
GdipRestoreGraphics
GdipSetClipRectI
GdipCreateBitmapFromFile
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipBitmapGetPixel
GdipCloneBitmapArea
GdipGetCompositingQuality
GdipScaleWorldTransform
GdipCreateMatrix
GdipDeleteMatrix
GdipTranslateMatrix
GdipRotateMatrix
GdipTransformMatrixPoints
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipImageSelectActiveFrame
GdipDrawImageRect
GdipDrawLineI
GdipSetClipRect
GdipAddPathLineI
GdipCreateAdjustableArrowCap
GdipDeleteCustomLineCap
GdipSetPenCustomEndCap
GdipDrawEllipseI
GdipGetPathWorldBoundsI
GdipSetCompositingMode
GdipCreateRegionPath
GdipAddPathPath
GdipCombineRegionPath
GdipTransformPath
GdipStringFormatGetGenericTypographic
GdipCreateFontFamilyFromName
GdipCreateBitmapFromStream
GdipGetFontCollectionFamilyCount
msvcr80
_recalloc
??_V@YAXPAX@Z
vsprintf_s
_vscprintf
iswspace
swprintf_s
free
??3@YAXPAX@Z
wcscmp
memcpy
_wtof
wcscspn
wcsspn
_mbsicmp
calloc
strlen
_mbscmp
strcmp
_beginthreadex
memcmp
_waccess
wcsncpy_s
_snwprintf
labs
_vsnwprintf_s
malloc
floor
ceil
atoi
_mbschr
__RTDynamicCast
abs
wcscpy_s
vswprintf_s
_vscwprintf
wcschr
_time64
_wtoi
memset
_purecall
_wfopen
?what@exception@std@@UBEPBDXZ
abort
toupper
_itow_s
sqrt
srand
_time32
rand
_localtime64_s
wcscat
sprintf_s
wcscat_s
fabs
clock
_wcsupr_s
_wstat32
_get_errno
fread
_mbsinc
fopen
fwrite
ftell
realloc
fseek
_wrename
fputws
setlocale
??2@YAPAXI@Z
_wfindfirst64i32
_wfindnext64i32
_findclose
wcstok
_getpid
_fileno
isspace
_strnicmp
tolower
strcpy_s
strcat_s
memmove
_itoa_s
strncpy_s
wcsncmp
_mktime64
_wtoi64
_vsnwprintf
fputc
_vsnprintf_s
fprintf
ferror
strncmp
strchr
isalnum
isalpha
_vswprintf
wcstol
_wcsnicmp
wcspbrk
_wtol
sprintf
pow
atan2
??8type_info@@QBE_NABV0@@Z
__iob_func
_errno
_mbspbrk
strstr
strncpy
strerror
strtoul
strtol
strrchr
_stat64
feof
sscanf
qsort
fputs
setvbuf
strpbrk
memchr
_fstat64
_lseeki64
strcspn
strspn
fgets
__sys_nerr
_gmtime64
_strtoi64
__CxxFrameHandler3
_CxxThrowException
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
isupper
printf
raise
_vsnprintf
_setmode
isdigit
isxdigit
_getch
signal
getenv
_stat64i32
_open
_close
_unlink
_write
_read
_access
_strdup
_stricmp
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
fwprintf
memmove_s
fclose
??0exception@std@@QAE@XZ
fflush
__set_app_type
_except_handler4_common
_invalid_parameter_noinfo
_wcslwr_s
wcsrchr
wcslen
wcsstr
_wcsicmp
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
memcpy_s
imm32
ImmAssociateContext
rpcrt4
UuidCreate
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
crypt32
CertDuplicateCertificateContext
CertFindCertificateInStore
CertOpenStore
CertGetCertificateContextProperty
CertFreeCertificateContext
CertEnumCertificatesInStore
CertCloseStore
Exports
Exports
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 673KB - Virtual size: 672KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 118KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ