DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b866dca616f77538c63484c21e1b6f8ca45b3d19ab3e3aaf909d75f2b5148403.dll
Resource
win7-20230831-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
b866dca616f77538c63484c21e1b6f8ca45b3d19ab3e3aaf909d75f2b5148403.dll
Resource
win10v2004-20230915-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
b866dca616f77538c63484c21e1b6f8ca45b3d19ab3e3aaf909d75f2b5148403
-
Size
2.8MB
-
MD5
592ee78b9c19eb1538867a53db9fd159
-
SHA1
e6f229369398be5acd65491c400528a239265e70
-
SHA256
b866dca616f77538c63484c21e1b6f8ca45b3d19ab3e3aaf909d75f2b5148403
-
SHA512
4ee1a184dc60dc1d8f0282002d5e9cd7b59c0cea97548284d320dc1c2b0cdf27c9cd90f310e1f7ebf3b36651a7e04d39ac366f82e1094cbaddba8cb874d9cd5d
-
SSDEEP
49152:hV7XZh4WKcIyJYxxc+zQKvm/PzxLuSjALraq:j7rexnzbezx
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b866dca616f77538c63484c21e1b6f8ca45b3d19ab3e3aaf909d75f2b5148403
Files
-
b866dca616f77538c63484c21e1b6f8ca45b3d19ab3e3aaf909d75f2b5148403.dll regsvr32 windows:6 windows x86
86fd6a378042ee68e2c9052f3e1363ba
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
imm32
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
whdoc
??4whd_str@@QAEXPB_W@Z
?cat_utf@whd_str@@QAEXD@Z
??0whd_pt@@QAE@MM@Z
?expand@whd_rc@@QAEXM@Z
??0whd_rc@@QAE@ABVwhd_pt@@@Z
?set_wcs@whd_str@@QAEXPB_W@Z
??0whd_irc@@QAE@HHHH@Z
?cross@whd_rc@@QBE_NPBV1@@Z
?contain@whd_rc@@QBE_NPBV1@@Z
?set_utf@whd_str@@QAEXPBD@Z
?set_pos@whd_rc@@QAEXMM@Z
?create@whd_buf@@SAPAV1@PBEH@Z
?open@whd_stm@@SAPAV1@PAVwhd_buf@@H@Z
?parse_name@whd_font@@SA_NPAVwhd_str@@@Z
??0whd_mtx@@QAE@XZ
?w@whd_rc@@QBEMXZ
?icmp_mbs@whd_str@@QAEHPBD@Z
??0whd_utf@@QAE@PBD@Z
??1whd_utf@@UAE@XZ
?len_wcs@whd_str@@QAEHXZ
?split_wcs@whd_str@@QAEX_WPAV1@@Z
?contain@whd_rc@@QBE_NPBVwhd_pt@@@Z
??0whd_irc@@QAE@XZ
?scale@whd_mtx@@QAEXMM@Z
??0whd_mtx@@QAE@M@Z
??_0whd_pt@@QAEXABVwhd_mtx@@@Z
?create@whd_pxm@@SAPAV1@HHHHHPAE@Z
?normalize@whd_rc@@QAEXXZ
??0whd_mbs@@QAE@AAV0@@Z
?create@whd_doc@@SAPAV1@H@Z
?open@whd_doc@@SAPAV1@PAVwhd_stm@@P6G_NPAVwhd_str@@PAXH@Z2@Z
?open@whd_stm@@SAPAV1@P6G_NPBEHPAX@ZH1@Z
??0whd_print@@QAE@XZ
??1whd_print@@UAE@XZ
?transform@whd_mtx@@QAEXMMMMM@Z
?h@whd_rc@@QBEMXZ
?h@whd_irc@@QBEHXZ
??Xwhd_rc@@QAEXM@Z
?get_frame_count@whd_pxm@@SAHPAVwhd_stm@@@Z
?load@whd_pxm@@SAPAV1@PAVwhd_stm@@H@Z
?cmp_utf@whd_str@@QAEHPBD@Z
?cmp@whd_str@@QAEHAAV1@@Z
??0whd_pt@@QAE@XZ
?clip_wcs@whd_str@@QAEXHH@Z
??4whd_mbs@@QAEXPBD@Z
?regist@whd_lib@@SA_NIIPBD@Z
?round@whd_irc@@QAEXABVwhd_rc@@@Z
?initialize@whd_lib@@SA_NXZ
?terminate@whd_lib@@SAXXZ
??0whd_ipt@@QAE@XZ
?rchr_utf@whd_str@@QAEPADD@Z
?len_utf@whd_str@@QAEHXZ
??0whd_str@@QAE@XZ
??1whd_str@@UAE@XZ
??Owhd_str@@QAE_NH@Z
?icmp_utf@whd_str@@QAEHPBD@Z
?get_mbs@whd_str@@QAEPADXZ
??0whd_mbs@@QAE@XZ
??7whd_str@@QAE_NXZ
?get_wcs@whd_str@@QAEPA_WXZ
?set_mbs@whd_str@@QAEXPBD@Z
?get_utf@whd_str@@QAEPADXZ
??0whd_str@@QAE@PB_W@Z
?open@whd_stm@@SAPAV1@PBDH@Z
??0whd_mbs@@QAE@PBD@Z
??1whd_mbs@@UAE@XZ
?cmp_mbs@whd_str@@QAEHPBD@Z
??0whd_ipt@@QAE@HH@Z
??1whd_msg@@UAE@XZ
?offset@whd_rc@@QAEXMM@Z
??4whd_str@@QAEXAAV0@@Z
?cat_mbs@whd_str@@QAEXPBD@Z
??1whd_ext@@UAE@XZ
??0whd_ext@@QAE@XZ
?w@whd_irc@@QBEHXZ
?expand@whd_rc@@QAEXMM@Z
??0whd_msg@@QAE@H@Z
??_5whd_rc@@QAEXABV0@@Z
??Xwhd_rc@@QAEXABVwhd_mtx@@@Z
??0whd_rc@@QAE@MMMM@Z
??4whd_rc@@QAEXABV0@@Z
??0whd_mtx@@QAE@MMMMMM@Z
??0whd_rc@@QAE@XZ
whticket
WHT_FreeTicket
WHT_ReadTicket
xmlkit
?GetChildText@CXmlKit@@QAEPBDPBD@Z
?Next@CXmlKit@@QAEHPBD@Z
?Parent@CXmlKit@@QAEHXZ
?Parse@CXmlKit@@QAEHPBD@Z
??0CXmlKit@@QAE@XZ
?Seek@CXmlKit@@QAEHPBD@Z
?GetAttribute@CXmlKit@@QAEPBDPBD@Z
??1CXmlKit@@UAE@XZ
?GetChildrenCount@CXmlKit@@QAEHPBD@Z
?GetChildText@CXmlKit@@QAEHPBDPAD@Z
?SetCondenseWSpace@CXmlKit@@QAEXH@Z
?GetText@CXmlKit@@QAEPBDXZ
?GetAttribute@CXmlKit@@QAEHPBDPAD@Z
?GetAttribute@CXmlKit@@QAEHPBDAAH@Z
?ExistChild@CXmlKit@@QAEHPBD@Z
?ExistChild@CXmlKit@@QAEHXZ
?Child@CXmlKit@@QAEHXZ
?Child@CXmlKit@@QAEHPBD@Z
?Next@CXmlKit@@QAEHXZ
?AddChild@CXmlKit@@QAEHHPBD@Z
?AddChild@CXmlKit@@QAEHHPBD0@Z
?Root@CXmlKit@@QAEXXZ
?GetXml@CXmlKit@@QAEPBDH@Z
?AddChildNE@CXmlKit@@QAEHHPBD0@Z
?LoadFile@CXmlKit@@QAEHPBD@Z
?Parse@CXmlKit@@QAEHXZ
?Child@CXmlKit@@QAEHPBD00@Z
?GetChildInt@CXmlKit@@QAEHPBD@Z
?GetInt@CXmlKit@@QAEHXZ
?GetChildrenCount@CXmlKit@@QAEHXZ
?GetText@CXmlKit@@QAEHPAD@Z
?AddAttribute@CXmlKit@@QAEHPBDH@Z
?SetAttribute@CXmlKit@@QAEHPBDK@Z
?SeekByAttribute@CXmlKit@@QAEHPBD0@Z
?SetText@CXmlKit@@QAEHPBD@Z
?GetName@CXmlKit@@QAEPBDXZ
?Remove@CXmlKit@@QAEHXZ
?AddAttribute@CXmlKit@@QAEHPBD0@Z
?SetAttribute@CXmlKit@@QAEHPBD0@Z
?AddAttrChild@CXmlKit@@QAEHHPBD000@Z
?SetXmlHeader@CXmlKit@@QAEXPBD0@Z
printdialogex
WHP_DoPrintDialog
vcformkit
VFK_CloseDocument
VFK_GenStoreScript
VFK_OpenDocument
VFK_Initialize
VFK_Terminate
barcodekit
?Encode@CBarcodeKit@@QAEPBDPBD@Z
??1CBarcodeKit@@UAE@XZ
??0CBarcodeKit@@QAE@XZ
mfc140
ord12813
ord5816
ord5777
ord13259
ord12678
ord2699
ord12817
ord7867
ord14309
ord12165
ord8803
ord11314
ord10314
ord11836
ord9044
ord9063
ord2654
ord4172
ord4185
ord2244
ord1726
ord9938
ord9460
ord9465
ord9475
ord8821
ord4703
ord2087
ord4260
ord3323
ord9337
ord4362
ord8980
ord1977
ord14089
ord2657
ord8895
ord12912
ord8386
ord14169
ord4719
ord13360
ord1918
ord14066
ord4443
ord2560
ord6211
ord6210
ord4490
ord1544
ord2403
ord1519
ord554
ord1183
ord503
ord1142
ord4705
ord4725
ord8140
ord5562
ord8467
ord7855
ord7042
ord13230
ord4640
ord9332
ord7287
ord3219
ord3218
ord1345
ord11028
ord5304
ord3597
ord4639
ord7094
ord6523
ord1131
ord7407
ord983
ord1458
ord2022
ord8426
ord3897
ord14155
ord13362
ord13361
ord5305
ord5102
ord7071
ord3157
ord1103
ord13813
ord7622
ord8735
ord13974
ord13976
ord995
ord1470
ord4805
ord1528
ord1522
ord12862
ord7359
ord1422
ord13863
ord13867
ord13376
ord3236
ord6865
ord6261
ord5156
ord13286
ord3332
ord3143
ord6472
ord1069
ord364
ord581
ord1204
ord13994
ord13455
ord7035
ord4210
ord3140
ord9083
ord6464
ord1064
ord908
ord1401
ord6200
ord13034
ord6319
ord3605
ord5373
ord6299
ord7045
ord370
ord1074
ord13223
ord12983
ord7454
ord10574
ord2630
ord2622
ord13530
ord14461
ord7001
ord14044
ord13841
ord2294
ord2397
ord4187
ord14511
ord12582
ord13762
ord13961
ord4457
ord2021
ord13734
ord14322
ord14320
ord7120
ord7195
ord5512
ord5109
ord8717
ord365
ord4083
ord1109
ord12074
ord8996
ord10962
ord11343
ord10421
ord4084
ord3396
ord3395
ord3159
ord6193
ord13677
ord2758
ord12115
ord5938
ord9167
ord6473
ord7398
ord13855
ord8064
ord6851
ord13854
ord6855
ord13314
ord7198
ord652
ord1253
ord1542
ord12444
ord12774
ord9698
ord9628
ord9567
ord9618
ord4818
ord11829
ord3397
ord3618
ord9995
ord9114
ord9126
ord9346
ord11250
ord9152
ord11296
ord12197
ord6143
ord7722
ord2052
ord2071
ord9323
ord3274
ord9424
ord7815
ord14262
ord8298
ord8867
ord11200
ord14025
ord14621
ord8263
ord10860
ord13030
ord2254
ord6178
ord4562
ord2751
ord14487
ord3866
ord2989
ord1177
ord647
ord1249
ord7197
ord13253
ord1252
ord7196
ord1251
ord650
ord9937
ord9948
ord12772
ord9936
ord4816
ord11828
ord9947
ord9110
ord2070
ord14620
ord12773
ord4817
ord9113
ord9112
ord7076
ord7459
ord10963
ord8997
ord5252
ord5413
ord5398
ord2204
ord8171
ord5643
ord7385
ord4230
ord3358
ord3253
ord9095
ord1451
ord7607
ord13004
ord7390
ord4841
ord3230
ord7609
ord13256
ord13262
ord13887
ord4869
ord5401
ord262
ord8313
ord5808
ord899
ord10379
ord533
ord1166
ord4351
ord3174
ord8780
ord5677
ord5697
ord7413
ord7474
ord9183
ord5507
ord12047
ord2678
ord6847
ord9646
ord5011
ord5010
ord5013
ord5009
ord5008
ord12122
ord3297
ord13679
ord6194
ord8266
ord11222
ord11225
ord9463
ord9478
ord9468
ord9940
ord9944
ord9480
ord11065
ord10453
ord8877
ord8869
ord11692
ord9483
ord11070
ord8968
ord11094
ord10000
ord10001
ord7751
ord6911
ord11471
ord10355
ord11827
ord9993
ord9442
ord10228
ord11191
ord11679
ord10301
ord10201
ord11680
ord10264
ord10802
ord11552
ord11112
ord9218
ord9454
ord9455
ord11623
ord11115
ord10932
ord11128
ord11839
ord11624
ord10687
ord11550
ord10234
ord11604
ord8784
ord2549
ord4045
ord8785
ord2438
ord458
ord3808
ord3789
ord3689
ord14421
ord7078
ord462
ord1111
ord7461
ord2748
ord9373
ord8841
ord9192
ord12116
ord3355
ord3248
ord6803
ord1440
ord3686
ord3688
ord6371
ord6324
ord6323
ord14583
ord14582
ord10245
ord8701
ord4211
ord3141
ord9084
ord1708
ord4915
ord4991
ord4976
ord5936
ord6467
ord13276
ord6996
ord5154
ord298
ord4771
ord12635
ord6153
ord12541
ord3813
ord3231
ord6774
ord1403
ord993
ord1468
ord7960
ord2200
ord4349
ord13830
ord4579
ord2313
ord14449
ord2325
ord6732
ord10202
ord6103
ord5742
ord8278
ord12162
ord12194
ord10383
ord8180
ord12190
ord2723
ord5894
ord3844
ord6322
ord14581
ord7964
ord12474
ord14380
ord11928
ord11927
ord2027
ord7905
ord12888
ord4082
ord4143
ord9353
ord14507
ord7886
ord14509
ord12485
ord12484
ord2484
ord5336
ord8285
ord12806
ord8347
ord8429
ord862
ord1380
ord7302
ord7573
ord7415
ord2253
ord2307
ord2322
ord832
ord1360
ord7952
ord4128
ord12227
ord5256
ord11188
ord9293
ord9409
ord11521
ord8871
ord10711
ord10462
ord2252
ord4134
ord5174
ord5559
ord13092
ord10204
ord8183
ord5389
ord5232
ord5754
ord9306
ord5740
kernel32
CreateFileA
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
VerifyVersionInfoW
VerSetConditionMask
WriteFile
GetLocalTime
CreateProcessA
GetLastError
CloseHandle
WaitForSingleObject
GetModuleFileNameA
GetTempPathA
GetFileAttributesA
CreateDirectoryA
SetFileAttributesA
RemoveDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
LocalAlloc
LocalFree
MultiByteToWideChar
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
OutputDebugStringA
WideCharToMultiByte
GetProcAddress
LoadLibraryExA
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionEx
GetTickCount
MulDiv
lstrlenA
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
TryEnterCriticalSection
CopyFileA
GetFileAttributesExA
CreateThread
SetThreadPriority
ResumeThread
TerminateThread
Sleep
FormatMessageA
GetSystemTime
OutputDebugStringW
LockResource
lstrcmpA
Beep
lstrcpynA
LocalHandle
SizeofResource
LoadLibraryA
FindResourceA
LoadResource
user32
ReleaseDC
EnableWindow
SendMessageA
GetDC
CreateIconIndirect
IsWindowVisible
LoadImageA
InvalidateRect
IsWindow
GetCursorPos
GetWindowRect
PtInRect
SetCursor
LoadCursorA
GetClientRect
CreatePopupMenu
AppendMenuA
UpdateWindow
GetSysColor
FillRect
InsertMenuA
CreateMenu
RemoveMenu
GetMenuItemID
GetMenu
LoadAcceleratorsA
TranslateAcceleratorA
InflateRect
GetUpdateRect
InvalidateRgn
GetSubMenu
LoadMenuW
GetDCEx
LockWindowUpdate
GetClassLongA
GetMessagePos
DrawEdge
DrawFocusRect
DrawFrameControl
IsIconic
FindWindowA
SetWindowPos
GetDlgCtrlID
GetClipboardData
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
DeleteMenu
ShowCaret
SetCaretPos
CreateCaret
GetSysColorBrush
DestroyCaret
HideCaret
IntersectRect
IsClipboardFormatAvailable
DestroyCursor
DispatchMessageA
GetMessageA
GetCapture
LoadBitmapA
SetParent
SetWindowTextA
GetWindowTextA
ShowWindow
GetDlgItem
PeekMessageA
GetMenuItemInfoA
SetWindowLongA
GetWindowLongA
GetDoubleClickTime
EqualRect
FrameRect
TrackMouseEvent
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
DrawTextA
ReplyMessage
InSendMessage
GetIconInfo
DestroyIcon
SystemParametersInfoA
GetMenuItemCount
CopyRect
SetFocus
CheckMenuItem
RedrawWindow
SetRect
IsRectEmpty
GetKeyState
SetCursorPos
GetMessageExtraInfo
mouse_event
ClientToScreen
GetDesktopWindow
KillTimer
GetAsyncKeyState
GetFocus
SetCapture
ReleaseCapture
SetTimer
RegisterWindowMessageA
GetSystemMetrics
SetRectEmpty
LoadBitmapW
EnableMenuItem
ScreenToClient
PostMessageA
GetParent
OffsetRect
gdi32
LineTo
SetDIBColorTable
SetTextColor
GetDeviceCaps
StartPage
EndPage
RoundRect
DPtoLP
SetBkMode
StartDocA
EndDoc
CreatePen
CreatePolygonRgn
Ellipse
Polygon
GetRgnBox
OffsetRgn
FillRgn
CreateRectRgn
CombineRgn
CreatePalette
UnrealizeObject
ResizePalette
RealizePalette
GetTextColor
ExtTextOutA
MoveToEx
SetPixel
GetPixel
GetTextExtentPoint32A
EnumFontFamiliesExA
TextOutA
GetTextMetricsA
SetDIBitsToDevice
CreateDIBSection
CreateSolidBrush
Rectangle
PatBlt
CreateRectRgnIndirect
CreateFontIndirectA
GetStockObject
BitBlt
GetObjectA
DeleteDC
DeleteObject
StretchBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
AbortDoc
SetAbortProc
msimg32
AlphaBlend
winspool.drv
StartDocPrinterA
GetPrinterDriverA
ClosePrinter
EndPagePrinter
StartPagePrinter
EndDocPrinter
GetPrinterA
WritePrinter
OpenPrinterA
advapi32
RegCloseKey
RegQueryValueExA
GetUserNameA
RegOpenKeyExA
shell32
SHGetSpecialFolderPathA
ShellExecuteA
comctl32
_TrackMouseEvent
ImageList_Remove
ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_AddMasked
InitializeFlatSB
FlatSB_EnableScrollBar
FlatSB_ShowScrollBar
UninitializeFlatSB
ImageList_GetImageInfo
ImageList_Draw
ImageList_DragEnter
uxtheme
SetWindowTheme
ole32
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
VariantInit
LoadRegTypeLi
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
SysAllocString
VarUdateFromDate
VarDateFromStr
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantChangeType
VariantClear
gdiplus
GdipDrawImagePointRectI
GdipCloneBitmapAreaI
GdipSaveImageToStream
GdipDrawPath
GdipFillPath
GdipAddPathArcI
GdipAddPathLineI
GdipDeletePath
GdipCreatePath
GdipDrawArcI
GdipDrawLineI
GdipResetWorldTransform
GdipDrawLine
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipDrawLinesI
GdipFillEllipseI
GdipDrawImageRectI
GdipFillPolygon
GdipDrawPolygon
GdipCreateFromHWND
GdipDeletePen
GdipCreatePen1
GdipDrawString
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipSetTextRenderingHint
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipCreateFromHDC
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipDeleteGraphics
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectRectI
GdipSetSmoothingMode
GdipSetImageAttributesColorKeys
GdipGetImageGraphicsContext
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipCreateBitmapFromScan0
GdipLoadImageFromFile
GdipCreateBitmapFromStream
GdiplusShutdown
GdipSaveImageToFile
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapSetPixel
GdipBitmapGetPixel
GdipGetImageWidth
GdipGetImageHeight
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromFile
GdipFree
GdipAlloc
GdiplusStartup
msvcp140
?_Xout_of_range@std@@YAXPBD@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??1_Lockit@std@@QAE@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Xlength_error@std@@YAXPBD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0_Lockit@std@@QAE@H@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
rpcrt4
UuidCreate
winmm
PlaySoundA
vcruntime140
wcsstr
_purecall
memset
__current_exception
__current_exception_context
__std_exception_destroy
__std_type_info_destroy_list
memmove
_CxxThrowException
memcpy
memchr
__RTDynamicCast
strrchr
_except_handler4_common
__std_exception_copy
strchr
strstr
__std_terminate
__CxxFrameHandler3
wcsrchr
api-ms-win-crt-stdio-l1-1-0
_get_stream_buffer_pointers
__stdio_common_vswprintf
fgetpos
_fseeki64
fsetpos
setvbuf
ungetc
fputc
fopen
fseek
ftell
fread
fclose
fwrite
fflush
fgetc
__stdio_common_vsscanf
__stdio_common_vsprintf
api-ms-win-crt-heap-l1-1-0
calloc
malloc
realloc
free
_recalloc
api-ms-win-crt-string-l1-1-0
strncpy
strpbrk
strtok
strcpy_s
_stricmp
tolower
wcsncpy
wcstok
toupper
isspace
isupper
islower
strncmp
isalnum
isalpha
__isascii
iscntrl
isdigit
isgraph
isprint
ispunct
isxdigit
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_initterm
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_resetstkoflw
_invalid_parameter_noinfo
_errno
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstol
_atoi64
strtol
atol
atof
atoi
_i64toa
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-multibyte-l1-1-0
_ismbcspace
_mbscmp
_mbschr
_mbsstr
_mbsrchr
api-ms-win-crt-time-l1-1-0
_gmtime64
strftime
_localtime64
_localtime64_s
_mktime64
_time64
api-ms-win-crt-utility-l1-1-0
bsearch
api-ms-win-crt-math-l1-1-0
_libm_sse2_pow_precise
_libm_sse2_cos_precise
_CIfmod
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
_libm_sse2_tan_precise
ceil
_libm_sse2_atan_precise
Exports
Exports
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 899KB - Virtual size: 899KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ