?gUDPServer@@3VCUDPServer@@A
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5b6005d862325b3a71c2246045cbf883a11687228d7311e06c9426869453adeb.exe
Resource
win7-20230831-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
5b6005d862325b3a71c2246045cbf883a11687228d7311e06c9426869453adeb.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
5b6005d862325b3a71c2246045cbf883a11687228d7311e06c9426869453adeb
-
Size
1.9MB
-
MD5
14c0f1ef5c32e44fa7856d4b3d211a5d
-
SHA1
5168506d426c28345c193341e0c770c41cf15375
-
SHA256
5b6005d862325b3a71c2246045cbf883a11687228d7311e06c9426869453adeb
-
SHA512
4848d082e044fd78d4b2ff80a954ff026150d6c9a54f8792a1e48d8e1dcf6b1a54447c8529da604220bd678a5f5f9626a7e8966901bc16218f5e2ea4b6dd0e97
-
SSDEEP
12288:liY9grrWlPH8PDPmaXFAQpt+hLiI3Z8qs6DBulAwV694Asnvjm+RqZ2CiiX60V9:QYSrrVPSa9+hLbZHs61eAHbYbm+Rmfb
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b6005d862325b3a71c2246045cbf883a11687228d7311e06c9426869453adeb
Files
-
5b6005d862325b3a71c2246045cbf883a11687228d7311e06c9426869453adeb.exe windows:4 windows x86
bc45610b8db6d2dabd930ac917e5baff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
motoctl
?LoadGlobalFontLib@PlotFontLib@@SAXXZ
?GetMAC@NET_Machine@@QAEXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetIP@NET_Machine@@QAEXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetID@NET_Machine@@QAEXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetProfileFloat@@YAMPB_W0M@Z
?inet_ntoaW@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@Uin_addr@@@Z
?WriteProfileFloat@@YAXPB_W0M@Z
?inet_addrW@@YAKPB_W@Z
?GetSubNet@@YAHAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetTolPtNum@PlotChar@@QBEJXZ
??0OL_BSpline@@QAE@XZ
?CalOrg@OL_BSpline@@QBE?AVOL_2dFloatPoint@@I@Z
?Subdivide@OL_BSpline@@QBEHAAPAM0AAPAIMM@Z
??1OL_BSpline@@QAE@XZ
?CheckPtBuf@PlotShape@@QAEHH@Z
?GetGlobalFontLib@PlotFontLib@@SAPAV1@XZ
?FindPlotString@PlotFontLib@@QAEHABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AAVPlotChar@@@Z
?Rotate@PlotShape@@QAEXMMMM@Z
?CreateCircle@PlotShape@@QAEXM@Z
??0OL_2dFloatPoint@@QAE@XZ
??1OL_2dFloatPoint@@UAE@XZ
?GetReadConfigData@CPackage@@QAEPADQADHPAH@Z
??0NET_Machine@@QAE@XZ
?LoadTcpConfigData@NET_Machine@@QAEXPAE@Z
?TcpClearJetSendBuf@NET_Machine@@QAEXXZ
?TcpClearCmdSendBuf@NET_Machine@@QAEXXZ
?RecvData@NET_Machine@@QAEHXZ
?ProcData@NET_Machine@@QAEXXZ
?TcpCanWrite@NET_Machine@@QAEHXZ
?PrintSend@@YAXPAUDataHeader@@H@Z
?SendTcpCmdData@NET_Machine@@QAEHXZ
?SendJetData@NET_Machine@@QAEHXZ
?SendGetCardState@NET_Machine@@QAEXXZ
??0CPackage@@QAE@XZ
?PackageReadConfigData@CPackage@@QAEHQAD@Z
??1CPackage@@QAE@XZ
?LoadConfigFromFile@NET_Machine@@QAEXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SaveConfigToFile@NET_Machine@@QAEXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?DynamicSel@OL_Selection@@QAEXHAAUstructRender@@K@Z
?Initialize@OL_Selection@@QAEXNNNJPAVCWnd@@@Z
?BoxSelection@OL_Selection@@QAEHABVCPoint@@0AAVPlotShapeList@@@Z
?PointSelection@OL_Selection@@QAEHABVCPoint@@AAVPlotShapeList@@@Z
?GetSelShape@OL_Selection@@QAEPAVPlotShape@@XZ
?Render@PlotShapeList@@QAEXAAUstructRender@@@Z
?GetArea@PlotShape@@QBEABVCArea@@XZ
?Render@PlotShape@@QAEXAAUstructRender@@@Z
??0OL_Selection@@QAE@XZ
??1OL_Selection@@UAE@XZ
?ProcPCMsg@NET_Machine@@QAEXIPAEH@Z
?NewCmdSendCheck@NET_Machine@@QAEHI@Z
?ProcMcuMsg@NET_Machine@@QAEXIPAEH@Z
?LoadSettings@NET_Machine@@QAEXPAE@Z
?SetToReadRejettime_Resolution@NET_Machine@@QAEXXZ
?SendIdInfo@NET_Machine@@SAXPAX@Z
??0NET_Machine@@QAE@KQAE0@Z
?InitVal@NET_Machine@@QAEXXZ
?ProTimeout@NET_Machine@@QAEXI@Z
?GetTolJetPt@NET_Machine@@QAEHXZ
?CreateTcpCmd@NET_Machine@@QAEHEE@Z
?CreateTcpCmd@NET_Machine@@QAEHEPBEH@Z
?PrintBroadcast@@YAXXZ
??1NET_Machine@@QAE@XZ
?SetLangID@@YAXH@Z
?SetWarmUpLines@@YAXH@Z
?SetThickTransverseLine@@YAXH@Z
?SetTransverseLineThickeningMultiple@@YAXM@Z
??0OL_Object@@QAE@XZ
??1OL_Object@@UAE@XZ
??_7CArea@@6B@
??4CArea@@QAEAAV0@ABV0@@Z
??1CArea@@UAE@XZ
?ConverPWCharToPChar@@YAHPB_WPADH@Z
??0PlotChar@@QAE@XZ
?FindPlotString@PlotFontLibArray@@QAEHABV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@AAVPlotChar@@@Z
?Rotate@PlotChar@@QAEXMMMM@Z
?CalArea@PlotChar@@QAEABVShxBox@@XZ
?GetArea@PlotChar@@QBEABVShxBox@@XZ
?Move@PlotChar@@QAEXMM@Z
?Width@ShxBox@@QBEJXZ
?Height@ShxBox@@QBEJXZ
?Scale@PlotChar@@QAEXMM@Z
?Append@PlotShape@@QAEXABVPlotChar@@@Z
?Move@PlotShape@@QAEXMM@Z
??1PlotChar@@UAE@XZ
?ToPltString@PlotShape@@QAEXAAV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?AddPointAtLastPl@PlotShape@@QAEXMM@Z
??0HpglStreamExplainer@@QAE@XZ
?LoadHpglFile@HpglAnalyzer@@QAEHQB_W@Z
??1HpglStreamExplainer@@UAE@XZ
?Transform@HpglStreamExplainer@@QAEXAAVPlotShapeList@@@Z
?GetLineType@PlotShape@@QBEFXZ
?Dash@PlotShape@@QAEXAAVOL_List@@ABUstructDash@@@Z
?CalArea@PlotShape@@QAEABVCArea@@XZ
?SetLineType@PlotShape@@QAEXF@Z
?ChangeAddr@NET_AutoModifyAddr@@SAXPAX@Z
?Ping@CMyPing@@QAEHIK@Z
?MyMessageBox@@YAHHPAUHWND__@@PB_W1I@Z
?SearchMach@NET_AutoModifyAddr@@SAXPAX@Z
?GetInterfaceList@@YAHQAU_INTERFACE_INFO@@@Z
?ConvertStmid@NET_Machine@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@QAE@Z
?ConvertMac@NET_Machine@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@QAE@Z
?TcpWriteEEROM@NET_Machine@@QAEHQAEKKH@Z
?SetCardData@NET_Machine@@QAEHPAGPAJHH@Z
?TcpReadEEROM@NET_Machine@@QAEHQAEKKH@Z
?GetCardData@NET_Machine@@QAEHPAGPAJHH@Z
?WriteEEROM@NET_Machine@@QAEHGHPAEHH@Z
?WriteData@NET_Machine@@QAEHGJHH@Z
?WaitReturn@NET_Machine@@QAEHHPAHH@Z
?WriteMultiData@NET_Machine@@QAEHPAGPAJHHH@Z
?NewCmdCancel@NET_Machine@@QAEHH@Z
?WaitReadEEROMReturn@NET_Machine@@QAEHHPAGPAEPAHH@Z
?ReadEEROM@NET_Machine@@QAEHGHHH@Z
?WaitReadDataReturn@NET_Machine@@QAEHHPAGPAJPAHH@Z
?ReadMultiData@NET_Machine@@QAEHPAGHHH@Z
?IsTcpMach@NET_Machine@@QBEHXZ
?SaveStandardSetupFile@NET_Machine@@QAEHXZ
?GetXScale@NET_Machine@@QAEMXZ
??1OL_List@@UAE@XZ
?GetNext@OL_List@@QBEPAVOL_Object@@PAV2@@Z
?GetHead@OL_List@@QBEPAVOL_Object@@XZ
?GetLimitLast@NET_Machine@@QAEXAAULimit_PARAM@@JJH@Z
?GetLimit@NET_Machine@@QAEXAAULimit_PARAM@@JH@Z
?GetJetInfo@NET_Machine@@QAEXQAH0@Z
?SetMauIndex@PlotShape@@QAEXE@Z
?AddTail@PlotShapeList@@UAEHPAVOL_Object@@@Z
?GetPenIndex@PlotShape@@QBEFXZ
?GetPrtTaskPointer@Net_TaskData@@QAEHXZ
?Area@CArea@@QBENXZ
?LoadStandardSetupFile@NET_Machine@@QAEHQAE@Z
?UseOtherData@NET_Machine@@QAEHQAE@Z
?InitOtherData@NET_Machine@@QAEXXZ
?GetExeModulePath@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetGlobalFontLib@PlotFontLibArray@@SAPAV1@XZ
?LoadGlobalFontLib@PlotFontLibArray@@QAEXXZ
?ReleasePen@CBinaryPolyLineList@@SAXXZ
?SetRectData@@YAXPAPAVPlotShapeList@@HJPAV1@@Z
??0SortRect_GeneticAlgorithm@@QAE@XZ
?SetParam@GeneticAlgorithmBasic@@QAEXHMMH@Z
?GoOut@OL_Object@@QAEXXZ
?GetMauIndex@PlotShape@@QAEEXZ
??0PlotShapeList@@QAE@XZ
??1PlotShapeList@@UAE@XZ
?SetPenIndex@PlotShape@@QAEXH@Z
?AddPoint@PlotShape@@QAEXMMH@Z
?SetChromosomeSize@GeneticAlgorithmBasic@@QAEXH@Z
?StartCalculate@SortRect_GeneticAlgorithm@@QAEXXZ
?GetTail@OL_List@@QBEPAVOL_Object@@XZ
??0PlotShape@@QAE@XZ
?CutByHLine@PlotShapeList@@QAEXJPAV1@0@Z
?CutByVLine@PlotShapeList@@QAEXJPAV1@0@Z
?Scale@PlotShapeList@@QAEXMM@Z
?Move@PlotShapeList@@QAEXJJ@Z
?Rotate@PlotShapeList@@QAEXJABVCArea@@@Z
?Mirror@PlotShapeList@@QAEXABVCArea@@@Z
?CalArea@PlotShapeList@@QAEABVCArea@@H@Z
?GetArea@PlotShapeList@@QAEABVCArea@@XZ
??4PlotShapeCutList@@QAEXABV0@@Z
?GetPres@OL_Object@@UAEPAV1@XZ
?GetNext@OL_Object@@UAEPAV1@XZ
?GetObjList@OL_Object@@UAEPAVOL_List@@PAV1@@Z
?Type@OL_Object@@UAE?AW4ObjectType@@XZ
?Flush@OL_Object@@UAEXXZ
?NewCopy@PlotShape@@UBEPAV1@XZ
?GetShapeName@PlotShape@@UAEPB_WXZ
?GetResult@SortRect_Individual@@QAEMPAVPlotShapeList@@@Z
??1SortRect_GeneticAlgorithm@@UAE@XZ
?SortRects_LowestHorizontalLine@@YAXQAPAVPlotShapeList@@HAAV?$CArray@UHorizontalLine@@AAU1@@@PAV1@@Z
?Width@CArea@@QBEJXZ
?Height@CArea@@QBEJXZ
?ClearRectData@@YAXXZ
??0OL_List@@QAE@XZ
?ClearData@Net_TaskData@@QAEXXZ
??1PlotShapeCutList@@UAE@XZ
?InsertBehind@OL_List@@UAEHPAVOL_Object@@0@Z
?InsertFront@OL_List@@UAEHPAVOL_Object@@0@Z
?FindObject@OL_List@@UBEPAVOL_Object@@PAV2@@Z
?AddHead@OL_List@@UAEHPAVOL_Object@@@Z
?GoOut@OL_List@@UAEPAVOL_Object@@PAV2@@Z
?GoIn@OL_List@@UAEHPAVOL_Object@@@Z
?IsInList@OL_List@@UBEHPAVOL_Object@@@Z
?Clear@OL_List@@UAEXXZ
?Replace@OL_List@@UAEHPAVOL_Object@@0@Z
?CopyFrom@OL_List@@UAEXPAV1@@Z
?Append@OL_List@@UAEXPAV1@@Z
??0PlotShapeCutList@@QAE@XZ
?Count@OL_List@@QBEHXZ
?GetYScale@NET_Machine@@QAEMXZ
?GetJetPt@NET_Machine@@QAEHXZ
?SetData@Net_TaskData@@QAEHPAVPlotShapeCutList@@K@Z
??1PlotShape@@UAE@XZ
serv
?SetAutoDir@CTCPServer1@@SAXABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?FindClient@CTCPClient1@@SAHPAV1@@Z
?SendShapeList@CTCPClient1@@QAEHPAVPlotShapeCutList@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?DeleteBuf@CTCPClient1@@SAXPA_W@Z
?Create1@CTCPServer1@@QAEHI@Z
?AddToSendBufW@CTCPClient1@@QAEHPB_WJ@Z
?SendToAllClient@CTCPServer1@@SAXAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@J@Z
?GetGlobalServer@CTCPServer1@@SAPAV1@XZ
mfc80u
ord4858
ord4855
ord4233
ord1352
ord340
ord4585
ord5163
ord3484
ord3641
ord4581
ord393
ord2411
ord2412
ord2415
ord2414
ord2413
ord3734
ord4438
ord4437
ord4784
ord4198
ord4775
ord4382
ord4974
ord4165
ord4172
ord4771
ord4380
ord4395
ord4393
ord4375
ord4378
ord4373
ord4857
ord4854
ord3968
ord6763
ord5910
ord5147
ord5200
ord3338
ord1351
ord5170
ord1547
ord4267
ord6764
ord3459
ord416
ord1555
ord1960
ord1959
ord651
ord3671
ord4175
ord4166
ord4381
ord2084
ord596
ord3869
ord4300
ord1962
ord3646
ord3585
ord3082
ord3281
ord6058
ord756
ord565
ord589
ord5637
ord330
ord5643
ord5972
ord3676
ord5920
ord4112
ord1707
ord5493
ord3467
ord642
ord745
ord4230
ord1549
ord1628
ord2081
ord3157
ord557
ord5638
ord6033
ord5727
ord775
ord3483
ord4642
ord5712
ord3189
ord620
ord4232
ord658
ord6116
ord1198
ord4770
ord547
ord3395
ord6061
ord3079
ord2863
ord5736
ord6005
ord2364
ord1271
ord3155
ord6749
ord6751
ord3390
ord751
ord2869
ord1642
ord1586
ord6010
ord4192
ord3923
ord5351
ord3981
ord1903
ord2072
ord2068
ord2030
ord1343
ord4985
ord1336
ord1342
ord5141
ord6265
ord5198
ord2396
ord4960
ord5157
ord1953
ord3319
ord562
ord1121
ord1049
ord5971
ord4025
ord956
ord334
ord5113
ord1110
ord593
ord5221
ord4461
ord3677
ord757
ord4032
ord4008
ord6272
ord3795
ord6274
ord4320
ord2054
ord2009
ord5579
ord3800
ord1007
ord5096
ord6215
ord5378
ord3826
ord1911
ord2925
ord1473
ord1248
ord3645
ord1545
ord3396
ord2255
ord531
ord723
ord4109
ord764
ord762
ord266
ord577
ord899
ord2311
ord293
ord774
ord4100
ord5524
ord3990
ord1479
ord870
ord2895
ord282
ord6700
ord6111
ord1079
ord5406
ord1194
ord462
ord1430
ord629
ord5083
ord384
ord3383
ord1287
ord1118
ord1616
ord496
ord495
ord283
ord776
ord896
ord354
ord3176
ord4256
ord4480
ord3943
ord2638
ord3703
ord3713
ord3712
ord2527
ord2640
ord2534
ord2856
ord2708
ord4301
ord2829
ord2725
ord2531
ord5196
ord1590
ord1646
ord1647
ord1955
ord5171
ord1353
ord4961
ord3339
ord6275
ord3796
ord6273
ord1513
ord2163
ord2169
ord2399
ord2381
ord2379
ord2397
ord2409
ord2386
ord2402
ord2407
ord2390
ord2392
ord2394
ord2388
ord2404
ord2384
ord931
ord927
ord929
ord925
ord920
ord5229
ord5231
ord5956
ord1591
ord4276
ord4716
ord3397
ord5199
ord4179
ord6271
ord5067
ord1899
ord5148
ord4238
ord1392
ord3940
ord1608
ord1611
ord5908
ord6720
ord1542
ord1661
ord1662
ord2011
ord4574
ord4884
ord4729
ord4206
ord5178
ord605
ord6232
ord1871
ord3635
ord3435
ord4026
ord5803
ord1176
ord1178
ord1472
ord4119
ord1875
ord1883
ord3103
ord2651
ord6301
ord3756
ord6302
ord1476
ord4101
ord2260
ord3249
ord1172
ord5316
ord265
ord6282
ord2310
ord777
ord6086
ord5327
ord6293
ord1784
ord3546
ord516
ord4714
ord5207
ord4207
ord4184
ord4838
ord4861
ord4611
ord4791
ord5064
ord5066
ord5065
ord6744
ord718
ord709
ord3995
ord4117
ord501
ord6171
ord6063
ord4730
ord3661
ord2027
ord977
ord280
ord287
ord578
ord903
ord2313
ord310
ord1781
ord2155
ord1872
ord5829
ord1873
ord1777
ord1779
ord1870
ord591
ord572
ord3165
ord4255
ord2985
ord5210
ord4228
ord1393
ord5911
ord6721
ord1538
ord2080
ord4092
ord1474
ord1922
ord1785
ord2254
ord3287
ord3983
ord860
ord3547
ord4266
ord1512
ord4274
ord5208
ord1573
ord1318
ord526
ord721
ord3662
ord2366
ord5398
ord2460
ord4577
ord4948
ord656
ord3221
ord1559
ord1630
ord1894
ord3444
ord5416
ord616
ord4258
ord4476
ord2832
ord6039
ord5930
ord2762
ord3034
ord4216
ord1913
ord4846
ord4251
ord5491
ord2736
ord5408
ord1370
ord5588
ord5152
ord2042
ord2007
ord6234
ord2615
ord2608
ord4560
ord4699
ord3946
ord4076
ord897
ord781
ord5319
ord297
ord3051
ord5862
ord3873
ord5558
ord6166
ord6094
ord3927
ord2860
ord2489
ord5742
ord3126
ord5867
ord3104
ord368
ord5705
ord630
ord3032
ord2012
ord3050
ord894
ord3027
ord2760
ord385
ord631
ord2745
ord2279
ord2271
ord386
ord900
ord3639
ord784
ord304
ord3901
ord3460
ord740
ord742
ord635
ord552
ord553
ord395
ord4259
ord4271
ord1297
ord2164
ord5201
ord5144
ord3939
ord1548
ord4013
ord2418
ord2419
ord2986
ord5352
ord940
ord4898
ord2933
ord4129
ord5006
ord5003
ord2609
ord1904
ord2237
msvcr80
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
atoi
atol
atof
free
setlocale
toupper
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
_invalid_parameter_noinfo
_CIatan
_CIsqrt
_CIsin
_CIcos
malloc
_purecall
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_wtol
memcpy
memmove_s
_ltow
system
fgetws
_wfopen
fputws
fclose
clock
_localtime64_s
_time64
_wtoi
_wtof
_beginthread
memset
swprintf_s
__CxxFrameHandler3
_localtime64
memcpy_s
_CIatan2
kernel32
LoadLibraryW
GetModuleHandleW
GetProcAddress
SetLastError
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
WaitForMultipleObjects
SetEvent
MultiByteToWideChar
CreateMutexW
InterlockedCompareExchange
GetStartupInfoW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FileTimeToSystemTime
GetSystemTime
SystemTimeToFileTime
GetCurrentProcess
GetLastError
CopyFileW
GetModuleFileNameW
Sleep
WideCharToMultiByte
InterlockedDecrement
FormatMessageW
lstrlenW
InterlockedExchange
LocalFree
LocalAlloc
user32
SetForegroundWindow
EnableWindow
InvalidateRect
ExitWindowsEx
GetSubMenu
LoadMenuW
GetDlgItem
SetWindowTextW
GetWindowRect
SendMessageW
ScreenToClient
PostMessageW
MessageBoxW
DrawTextW
FillRect
OffsetRect
SetWindowLongW
SetCursor
LoadCursorW
LoadBitmapW
LoadImageW
GetSysColor
GetParent
PostQuitMessage
GetDC
GetCursorPos
DestroyIcon
LoadIconW
KillTimer
SetTimer
IsWindowVisible
GetClientRect
SetMenu
gdi32
SelectObject
CreateFontW
CreateSolidBrush
Rectangle
CreatePen
GetObjectW
GetTextMetricsW
GetStockObject
advapi32
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
shell32
Shell_NotifyIconW
ShellExecuteExW
SHBrowseForFolderW
ShellExecuteW
SHGetPathFromIDListW
comctl32
ImageList_Create
ole32
CoUninitialize
CoInitialize
CoCreateInstance
OleRun
oleaut32
VariantClear
GetErrorInfo
VariantCopy
VariantInit
SysFreeString
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringByteLen
ws2_32
WSAStartup
recv
getpeername
__WSAFDIsSet
accept
inet_ntoa
ntohs
recvfrom
select
sendto
inet_addr
listen
htons
getsockname
bind
socket
closesocket
send
msvcp80
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
?setbase@std@@YA?AU?$_Smanip@H@1@H@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??$?5DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@JH@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
Exports
Exports
Sections
.text Size: 700KB - Virtual size: 698KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 636KB - Virtual size: 634KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 560KB - Virtual size: 559KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ