Static task
static1
Behavioral task
behavioral1
Sample
1c5353df0d2fa71ebec5eece34b028c10d0f6b27a5d42c8e5f95f8606a30f397.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1c5353df0d2fa71ebec5eece34b028c10d0f6b27a5d42c8e5f95f8606a30f397.exe
Resource
win10v2004-20230915-en
General
-
Target
1c5353df0d2fa71ebec5eece34b028c10d0f6b27a5d42c8e5f95f8606a30f397
-
Size
647KB
-
MD5
1f1cee57c5e1f83218f46b2548527b5d
-
SHA1
a9d132b80e2f2cc4f51a8e58c9f59f4503ea60d8
-
SHA256
1c5353df0d2fa71ebec5eece34b028c10d0f6b27a5d42c8e5f95f8606a30f397
-
SHA512
8dae93f7aa2d51f29a0c73792fd2597c5799cfc8bc0955f2c89fe26e009792047ef98ca09fae95ce44a7e4d9c9def5c40982814570c06ee790a79bb8b016100e
-
SSDEEP
12288:HM5e2LJLATnBhDqWYFXYP6tjLzaaJOdcKcEFwTa0gaJsP:s5fLJcTWlJOdcKcEFwTWa+P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c5353df0d2fa71ebec5eece34b028c10d0f6b27a5d42c8e5f95f8606a30f397
Files
-
1c5353df0d2fa71ebec5eece34b028c10d0f6b27a5d42c8e5f95f8606a30f397.exe windows:5 windows x86
36edf303ab8ae3b0dfab008ce775f5fe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
hook
SetMaxSpeed
SetModifyHost
SetHttpHook
HttpHook_Init
HttpDetoursAttach
SetExtendMethod
GetMediaTcpTime
HttpHook_Release
libcurl
curl_global_init
curl_easy_getinfo
curl_easy_init
curl_easy_setopt
curl_slist_append
curl_easy_perform
curl_slist_free_all
curl_easy_cleanup
ws2_32
socket
WSAAddressToStringA
htons
inet_ntoa
inet_addr
WSACleanup
WSAStartup
brbase
?SysMultiByteToWide@base@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$BasicStringPiece@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@1@I@Z
?GenerateGUID@base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?DirectoryExists@file_util@@YA_NABVFilePath@base@@@Z
?Delete@file_util@@YA_NABVFilePath@base@@_N@Z
?CopyDirectory@file_util@@YA_NABVFilePath@base@@0_N@Z
?Shutdown@SequencedWorkerPool@base@@QAEXH@Z
??0SequencedWorkerPool@base@@QAE@IABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0Thread@base@@QAE@PBD@Z
??1Thread@base@@UAE@XZ
?Run@Thread@base@@MAEXPAVMessageLoop@2@@Z
??0LogMessage@logging@@QAE@PBDHPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?PostDelayedTask@MessageLoop@base@@QAEXABVLocation@tracked_objects@@ABV?$Callback@$$A6AXXZ@2@VTimeDelta@2@@Z
?PostNonNestableDelayedTask@MessageLoop@base@@QAEXABVLocation@tracked_objects@@ABV?$Callback@$$A6AXXZ@2@VTimeDelta@2@@Z
?Destruct@TaskRunnerTraits@base@@SAXPBVTaskRunner@2@@Z
?NeedsLazyInstance@internal@base@@YA_NPAH@Z
?CompleteLazyInstance@internal@base@@YAXPAHHPAXP6AX1@Z@Z
??0FilePath@base@@QAE@XZ
?QuitWhenIdleClosure@MessageLoop@base@@SA?AV?$Callback@$$A6AXXZ@2@XZ
?SysWideToNativeMB@base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@@Z
?GetSwitchValueASCII@CommandLine@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
?OpenFile@file_util@@YAPAU_iobuf@@ABVFilePath@base@@PBD@Z
?CloseFile@file_util@@YA_NPAU_iobuf@@@Z
?IsType@MessageLoop@base@@UBE_NW4Type@12@@Z
?DoIdleWork@MessageLoop@base@@EAE_NXZ
?DoDelayedWork@MessageLoop@base@@EAE_NPAVTimeTicks@2@@Z
?Snapshot@ProcessIterator@base@@QAE?AV?$list@UProcessEntry@base@@V?$allocator@UProcessEntry@base@@@std@@@std@@XZ
??1ProcessIterator@base@@UAE@XZ
??0ProcessIterator@base@@QAE@PBVProcessFilter@1@@Z
?KillProcess@base@@YA_NPAXH_N@Z
?CreateDoubleValue@Value@base@@SAPAVFundamentalValue@2@N@Z
?CreateIntegerValue@Value@base@@SAPAVFundamentalValue@2@H@Z
?Set@DictionaryValue@base@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVValue@2@@Z
?CreateStringValue@Value@base@@SAPAVStringValue@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?DirName@FilePath@base@@QBE?AV12@XZ
?BaseName@FilePath@base@@QBE?AV12@XZ
??1AtExitManager@base@@QAE@XZ
??0AtExitManager@base@@QAE@XZ
?EnableTerminationOnOutOfMemory@base@@YAXXZ
?EnableTerminationOnHeapCorruption@base@@YAXXZ
?Init@CommandLine@@SA_NHPBQBD@Z
?IntToString@base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?ThreadMain@Thread@base@@EAEXXZ
??0ScopedCOMInitializer@win@base@@QAE@XZ
?Stop@Thread@base@@QAEXXZ
?HasSwitch@CommandLine@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SysUTF8ToWide@base@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$BasicStringPiece@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@1@@Z
?SysNativeMBToWide@base@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$BasicStringPiece@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@1@@Z
?SysWideToUTF8@base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@3@@Z
?StringToInt@base@@YA_NABV?$BasicStringPiece@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@1@PAH@Z
?SplitStringUsingSubstr@base@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@3@@Z
?StringToUint64@base@@YA_NABV?$BasicStringPiece@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@1@PA_K@Z
?ReplaceSubstringsAfterOffset@@YAXPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IABV12@1@Z
?Uint64ToString16@base@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_K@Z
?UintToString@base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z
?Uint64ToString@base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_K@Z
?Int64ToString@base@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J@Z
?WriteFile@file_util@@YAHABVFilePath@base@@PBDH@Z
?AppendToFile@file_util@@YAHABVFilePath@base@@PBDH@Z
?Append@FilePath@base@@QBE?AV12@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??4FilePath@base@@QAEAAV01@ABV01@@Z
?Get@PathService@@SA_NHPAVFilePath@base@@@Z
?Int64ToString16@base@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_J@Z
?FindNext@Pickle@@KAPBDIPBD0@Z
?ReadUInt32@PickleIterator@@QAE_NPAI@Z
?ReadUInt64@PickleIterator@@QAE_NPA_K@Z
?ReadFloat@PickleIterator@@QAE_NPAM@Z
?ReadString@PickleIterator@@QAE_NPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?WriteBytes@Pickle@@QAE_NPBXH@Z
?WriteString@Pickle@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0PickleIterator@@QAE@ABVPickle@@@Z
?Start@Thread@base@@QAE_NXZ
?IsRunning@Thread@base@@QBE_NXZ
??0DictionaryValue@base@@QAE@XZ
??0ListValue@base@@QAE@XZ
?Insert@ListValue@base@@QAE_NIPAVValue@2@@Z
?Write@JSONWriter@base@@SAXQBVValue@2@PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Read@JSONReader@base@@SAPAVValue@2@ABV?$BasicStringPiece@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@Z
?GetDictionary@DictionaryValue@base@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAPAV12@@Z
?HasKey@DictionaryValue@base@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetList@DictionaryValue@base@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAPAVListValue@2@@Z
?GetDictionary@ListValue@base@@QAE_NIPAPAVDictionaryValue@2@@Z
?GetString@ListValue@base@@QBE_NIPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetInteger@DictionaryValue@base@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAH@Z
?GetString@DictionaryValue@base@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAV34@@Z
?GetInteger@ListValue@base@@QBE_NIPAH@Z
??1WeakPtrBase@internal@base@@QAE@XZ
?StringToInt@base@@YA_NABV?$BasicStringPiece@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@1@PAH@Z
??0WeakReferenceOwner@internal@base@@QAE@XZ
??1WeakReferenceOwner@internal@base@@QAE@XZ
?GetRef@WeakReferenceOwner@internal@base@@QBE?AVWeakReference@23@XZ
??1WeakReference@internal@base@@QAE@XZ
??0WeakPtrBase@internal@base@@IAE@ABVWeakReference@12@@Z
?is_valid@WeakReference@internal@base@@QBE_NXZ
?WriteStringNoSize@Pickle@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?WriteSplit@Pickle@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?WriteIntString@Pickle@@QAE_NH@Z
?WriteChars@Pickle@@QAE_NPBXH@Z
??0Pickle@@QAE@XZ
??0FilePath@base@@QAE@ABV01@@Z
?ReadInt@PickleIterator@@QAE_NPAH@Z
??0CommandLine@@QAE@ABVFilePath@base@@@Z
??1CommandLine@@QAE@XZ
?AppendArg@CommandLine@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?LaunchProcess@base@@YA_NABVCommandLine@@ABULaunchOptions@1@PAPAX@Z
?GetProcId@base@@YAKPAX@Z
?Base64Encode@base@@YA_NABV?$BasicStringPiece@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@1@PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?ReadWString@PickleIterator@@QAE_NPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?WriteWString@Pickle@@QAE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0CommandLine@@QAE@W4NoProgram@0@@Z
?ParseFromString@CommandLine@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?AppendSwitchASCII@CommandLine@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GetCommandLineString@CommandLine@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetProcessCount@base@@YAHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBVProcessFilter@1@@Z
?CreateProcessMetrics@ProcessMetrics@base@@SAPAV12@PAX@Z
?GetWorkingSetSize@ProcessMetrics@base@@QBEIXZ
??1ProcessMetrics@base@@QAE@XZ
?CreateDirectoryW@file_util@@YA_NABVFilePath@base@@@Z
?DoWork@MessageLoop@base@@EAE_NXZ
??1PowerMonitor@base@@QAE@XZ
??1SystemMonitor@base@@QAE@XZ
?Run@RunLoop@base@@QAEXXZ
??1RunLoop@base@@QAE@XZ
??0RunLoop@base@@QAE@XZ
?PostTask@MessageLoop@base@@QAEXABVLocation@tracked_objects@@ABV?$Callback@$$A6AXXZ@2@@Z
??1Win32ErrorLogMessage@logging@@QAE@XZ
?GetLastSystemErrorCode@logging@@YAKXZ
??0Win32ErrorLogMessage@logging@@QAE@PBDHHK@Z
?GetMinLogLevel@logging@@YAHXZ
?SetName@PlatformThread@base@@SAXPBD@Z
?AddTraceEventEtw@TraceLog@debug@base@@SAXDPBDPBX0@Z
?StartWithOptions@Thread@base@@QAE_NABUOptions@12@@Z
??0PowerMonitor@base@@QAE@XZ
??0SystemMonitor@base@@QAE@XZ
?current@MessageLoop@base@@SAPAV12@XZ
??1MessageLoop@base@@UAE@XZ
??0MessageLoop@base@@QAE@W4Type@01@@Z
?Initialize@StatisticsRecorder@base@@SAXXZ
??0CallbackBase@internal@base@@IAE@PAVBindStateBase@12@@Z
?Release@RefCountedThreadSafeBase@subtle@base@@IBE_NXZ
?AddRef@RefCountedThreadSafeBase@subtle@base@@IBEXXZ
??0RefCountedThreadSafeBase@subtle@base@@IAE@XZ
??1RefCountedThreadSafeBase@subtle@base@@IAE@XZ
?PathExists@file_util@@YA_NABVFilePath@base@@@Z
??1FilePath@base@@QAE@XZ
??0FilePath@base@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?UintToString16@base@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@I@Z
?GetProgramCounter@tracked_objects@@YAPBXXZ
??0Location@tracked_objects@@QAE@PBD0HPBX@Z
??1CallbackBase@internal@base@@IAE@XZ
?Unlock@LockImpl@internal@base@@QAEXXZ
?Lock@LockImpl@internal@base@@QAEXXZ
??1LockImpl@internal@base@@QAE@XZ
??0LockImpl@internal@base@@QAE@XZ
??1LogMessage@logging@@QAE@XZ
??0LogMessage@logging@@QAE@PBDHH@Z
?ForCurrentProcess@CommandLine@@SAPAV1@XZ
?AddTraceEvent@TraceLog@debug@base@@QAEXDPBEPBD_KHPAPBD0PB_KE@Z
?RegisterIOHandler@MessageLoopForIO@base@@QAEXPAXPAVIOHandler@MessagePumpForIO@2@@Z
?GetCategoryGroupEnabled@TraceLog@debug@base@@SAPBEPBD@Z
?Now@Time@base@@SA?AV12@XZ
?WaitForIOCompletion@MessageLoopForIO@base@@QAE_NKPAVIOHandler@MessagePumpForIO@2@@Z
??6@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AAV01@PB_W@Z
?CurrentId@PlatformThread@base@@SAKXZ
?NowFromSystemTraceTime@TimeTicks@base@@SA?AV12@XZ
?AddTraceEventWithThreadIdAndTimestamp@TraceLog@debug@base@@QAEXDPBEPBD_KHABVTimeTicks@3@HPAPBD0PB_KE@Z
??0Pickle@@QAE@H@Z
??0Pickle@@QAE@ABV0@@Z
??0Pickle@@QAE@PBDH@Z
??1Pickle@@UAE@XZ
?GetInstance@TraceLog@debug@base@@SAPAV123@XZ
?InitializeWindowClass@win@base@@YAXPB_WP6GJPAUHWND__@@IIJ@ZIHHPAUHICON__@@PAUHBRUSH__@@033PAUtagWNDCLASSEXW@@@Z
librtmp
RTMP_SetupURL
RTMP_SendPacket
RTMP_IsConnected
RTMP_Free
RTMP_Close
RTMP_Init
RTMP_Alloc
RTMPPacket_Reset
RTMPPacket_Alloc
RTMP_ConnectStream
RTMP_EnableWrite
RTMP_Connect
nettoolkit
Network
kernel32
LocalFree
HeapSize
HeapDestroy
DeleteCriticalSection
FormatMessageA
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetSystemTimeAsFileTime
IsDebuggerPresent
UnhandledExceptionFilter
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
DecodePointer
EncodePointer
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
GlobalMemoryStatusEx
GetSystemTimes
GetProcessTimes
InterlockedExchangeAdd
ConnectNamedPipe
CancelIo
CreateNamedPipeW
DuplicateHandle
GetNamedPipeInfo
HeapReAlloc
TerminateProcess
GetCurrentThreadId
OpenEventA
SetEvent
ResetEvent
CreateEventA
UnmapViewOfFile
WriteFile
CreateFileW
ReadFile
SetFilePointer
GetFileSize
GetFileInformationByHandle
InterlockedExchange
GetNativeSystemInfo
QueryPerformanceCounter
GetTickCount
QueryPerformanceFrequency
GetCurrentThread
SetThreadAffinityMask
LoadLibraryA
GetCurrentProcess
SystemTimeToFileTime
CreateProcessA
GetStartupInfoA
lstrcatA
GetSystemDirectoryA
OpenProcess
lstrcpyA
GetProcessHeap
FileTimeToSystemTime
HeapFree
HeapAlloc
WaitForSingleObject
lstrlenA
FindResourceExW
FindResourceW
CloseHandle
GetLastError
SetUnhandledExceptionFilter
Sleep
GetLocalTime
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
LoadLibraryW
GetProcAddress
FreeLibrary
GetCurrentProcessId
DeleteFileW
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
LoadResource
LockResource
SizeofResource
user32
SendMessageA
LoadCursorW
LoadIconW
RegisterClassExW
DestroyWindow
GetClientRect
MoveWindow
DefWindowProcW
CreateWindowExW
GetWindowLongW
SetWindowLongW
SendMessageW
ShowWindow
SetWindowPos
GetWindowThreadProcessId
GetDesktopWindow
gdi32
CreateFontIndirectW
ole32
OleUninitialize
OleInitialize
CoCreateGuid
msvcp100
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1_Container_base12@std@@QAE@XZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
?toupper@?$ctype@D@std@@QBEDD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?toupper@?$ctype@_W@std@@QBE_W_W@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?_BADOFF@std@@3_JB
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?uncaught_exception@std@@YA_NXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
msvcr100
??2@YAPAXI@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
??3@YAXPAX@Z
memmove
_purecall
memchr
wcsrtombs_s
abort
fread
fseek
ftell
wcscpy_s
_localtime64_s
_time64
sprintf_s
strftime
_access_s
atoi
_waccess_s
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
free
??_V@YAXPAX@Z
wmemcpy_s
memcpy_s
_mktime64
memmove_s
strcpy_s
_wcsicmp
wcsftime
fclose
tolower
??8type_info@@QBE_NABV0@@Z
sprintf
_wfsopen
ferror
fwrite
sscanf_s
_wfindfirst64i32
_wfindnext64i32
_findclose
_recalloc
vsprintf_s
calloc
srand
rand
swprintf_s
_vsnprintf_s
exit
fopen
__CxxFrameHandler3
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
memset
memcpy
_CxxThrowException
strerror
??0exception@std@@QAE@ABQBD@Z
comctl32
InitCommonControlsEx
shlwapi
PathAppendA
Sections
.text Size: 392KB - Virtual size: 391KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ