Static task
static1
Behavioral task
behavioral1
Sample
3665b0b2ce5aee6161439a6e85f378f75089e8b958a48f5e92b4d71820e90695.exe
Resource
win7-20230831-en
windows7-x64
Behavioral task
behavioral2
Sample
3665b0b2ce5aee6161439a6e85f378f75089e8b958a48f5e92b4d71820e90695.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
General
-
Target
3665b0b2ce5aee6161439a6e85f378f75089e8b958a48f5e92b4d71820e90695
-
Size
7.6MB
-
MD5
781be068015f52f4d8768490907168c1
-
SHA1
2032d9c8296279236114fb3aa756e1ee26d6e66e
-
SHA256
3665b0b2ce5aee6161439a6e85f378f75089e8b958a48f5e92b4d71820e90695
-
SHA512
3331cc2b1cccd9929e2ac490f82cca017b534544445f1f2dc9a69ccbaf2832cbdc9c5821b1e0d84c196f1ae522d42edd214c6d72ea945254db1a9dadbee8ec28
-
SSDEEP
98304:lZU2I5wru0ZpJoQOWeZ5kcPTVAwnly4rUGZ+NWt000Qu7fF0:lZU26CZZpJEWeZ3PTVAbclYt0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3665b0b2ce5aee6161439a6e85f378f75089e8b958a48f5e92b4d71820e90695
Files
-
3665b0b2ce5aee6161439a6e85f378f75089e8b958a48f5e92b4d71820e90695.exe windows:6 windows x64
b8742e44c351697320b6961180feda2c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ws2_32
select
winmm
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
libcurl
curl_easy_init
curl_slist_free_all
curl_slist_append
curl_easy_setopt
curl_easy_perform
curl_easy_cleanup
curl_easy_getinfo
curl_multi_timeout
curl_multi_strerror
curl_easy_strerror
curl_multi_cleanup
curl_multi_perform
curl_multi_fdset
curl_multi_remove_handle
curl_multi_add_handle
curl_multi_init
curl_easy_reset
curl_multi_info_read
libmpg123-0
mpg123_exit
mpg123_new
mpg123_open
mpg123_getformat
mpg123_format
mpg123_format_none
mpg123_strerror
mpg123_plain_strerror
mpg123_delete
mpg123_close
mpg123_length
mpg123_init
mpg123_seek
mpg123_tell
mpg123_read
mpg123_scan
libuv
uv_close
uv_loop_init
uv_tcp_init
uv_tcp_bind
uv_ip4_addr
uv_listen
uv_loop_close
vorbisfile
ov_clear
ov_pcm_total
ov_pcm_seek
ov_pcm_tell
ov_info
ov_read
ov_fopen
openal32
alGetError
alGenSources
alDeleteSources
alSourcef
alSourcei
alGetSourcef
alGetSourcei
alSourcePlay
alSourcePause
alcCreateContext
alcMakeContextCurrent
alcDestroyContext
alcOpenDevice
alcCloseDevice
alGenBuffers
alIsBuffer
alBufferData
alSourceUnqueueBuffers
alSourceQueueBuffers
alSourceStop
alDeleteBuffers
sqlite3
sqlite3_reset
sqlite3_finalize
sqlite3_column_text
sqlite3_column_int
sqlite3_step
sqlite3_close
sqlite3_open
sqlite3_prepare_v2
sqlite3_bind_text
zlib1
gzopen
inflateInit2_
gzclose
get_crc_table
uncompress
inflateEnd
inflate
crc32
inflateReset
adler32
deflateEnd
deflate
deflateReset
inflateReset2
deflateInit2_
inflateValidate
gzread
sdl2
SDL_ShowSimpleMessageBox
SDL_PollEvent
SDL_SetClipboardText
SDL_GetError
SDL_GetDisplayUsableBounds
SDL_CreateWindow
SDL_GetWindowSize
SDL_GetWindowFromID
SDL_CaptureMouse
SDL_Init
SDL_GetWindowWMInfo
SDL_free
SDL_wcslen
SDL_iconv_string
SDL_SetMainReady
SDL_SetRelativeMouseMode
SDL_calloc
v8
?ToBoolean@Value@v8@@QEBA?AV?$Local@VBoolean@v8@@@2@PEAVIsolate@2@@Z
?Value@Boolean@v8@@QEBA_NXZ
?Value@Number@v8@@QEBANXZ
?ToNumber@Value@v8@@QEBA?AV?$MaybeLocal@VNumber@v8@@@2@V?$Local@VContext@v8@@@2@@Z
?ToBigInt@Value@v8@@QEBA?AV?$MaybeLocal@VBigInt@v8@@@2@V?$Local@VContext@v8@@@2@@Z
?IsNumber@Value@v8@@QEBA_NXZ
?IsBoolean@Value@v8@@QEBA_NXZ
?IsBigInt@Value@v8@@QEBA_NXZ
?VisitHandlesWithClassIds@Isolate@v8@@QEAAXPEAVPersistentHandleVisitor@2@@Z
?New@Float64Array@v8@@SA?AV?$Local@VFloat64Array@v8@@@2@V?$Local@VArrayBuffer@v8@@@2@_K1@Z
?New@Float32Array@v8@@SA?AV?$Local@VFloat32Array@v8@@@2@V?$Local@VArrayBuffer@v8@@@2@_K1@Z
?New@Int32Array@v8@@SA?AV?$Local@VInt32Array@v8@@@2@V?$Local@VArrayBuffer@v8@@@2@_K1@Z
?New@Uint32Array@v8@@SA?AV?$Local@VUint32Array@v8@@@2@V?$Local@VArrayBuffer@v8@@@2@_K1@Z
?New@Int16Array@v8@@SA?AV?$Local@VInt16Array@v8@@@2@V?$Local@VArrayBuffer@v8@@@2@_K1@Z
?New@Uint16Array@v8@@SA?AV?$Local@VUint16Array@v8@@@2@V?$Local@VArrayBuffer@v8@@@2@_K1@Z
?New@Int8Array@v8@@SA?AV?$Local@VInt8Array@v8@@@2@V?$Local@VArrayBuffer@v8@@@2@_K1@Z
?New@Uint8Array@v8@@SA?AV?$Local@VUint8Array@v8@@@2@V?$Local@VArrayBuffer@v8@@@2@_K1@Z
?ByteLength@ArrayBufferView@v8@@QEAA_KXZ
?ByteOffset@ArrayBufferView@v8@@QEAA_KXZ
?Buffer@ArrayBufferView@v8@@QEAA?AV?$Local@VArrayBuffer@v8@@@2@XZ
?GetBackingStore@ArrayBuffer@v8@@QEAA?AV?$shared_ptr@VBackingStore@v8@@@std@@XZ
?NewBackingStore@ArrayBuffer@v8@@SA?AV?$unique_ptr@VBackingStore@v8@@U?$default_delete@VBackingStore@v8@@@std@@@std@@PEAX_KP6AX010@Z0@Z
??0HandleScope@v8@@QEAA@PEAVIsolate@1@@Z
??1HandleScope@v8@@QEAA@XZ
?CreateHandle@HandleScope@v8@@KAPEA_KPEAVIsolate@internal@2@_K@Z
?BindToCurrentContext@UnboundScript@v8@@QEAA?AV?$Local@VScript@v8@@@2@XZ
?Compile@Script@v8@@SA?AV?$MaybeLocal@VScript@v8@@@2@V?$Local@VContext@v8@@@2@V?$Local@VString@v8@@@2@PEAVScriptOrigin@2@@Z
?Run@Script@v8@@QEAA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@@Z
??0CachedData@ScriptCompiler@v8@@QEAA@PEBEHW4BufferPolicy@012@@Z
??1CachedData@ScriptCompiler@v8@@QEAA@XZ
?CompileUnboundScript@ScriptCompiler@v8@@SA?AV?$MaybeLocal@VUnboundScript@v8@@@2@PEAVIsolate@2@PEAVSource@12@W4CompileOptions@12@W4NoCacheReason@12@@Z
?CreateCodeCache@ScriptCompiler@v8@@SAPEAUCachedData@12@V?$Local@VUnboundScript@v8@@@2@@Z
?Get@Message@v8@@QEBA?AV?$Local@VString@v8@@@2@XZ
?GetScriptOrigin@Message@v8@@QEBA?AVScriptOrigin@2@XZ
?GetStackTrace@Message@v8@@QEBA?AV?$Local@VStackTrace@v8@@@2@XZ
?GetFrame@StackTrace@v8@@QEBA?AV?$Local@VStackFrame@v8@@@2@PEAVIsolate@2@I@Z
?GetFrameCount@StackTrace@v8@@QEBAHXZ
?CurrentStackTrace@StackTrace@v8@@SA?AV?$Local@VStackTrace@v8@@@2@PEAVIsolate@2@HW4StackTraceOptions@12@@Z
?GetLineNumber@StackFrame@v8@@QEBAHXZ
?GetScriptName@StackFrame@v8@@QEBA?AV?$Local@VString@v8@@@2@XZ
?GetFunctionName@StackFrame@v8@@QEBA?AV?$Local@VString@v8@@@2@XZ
?Stringify@JSON@v8@@SA?AV?$MaybeLocal@VString@v8@@@2@V?$Local@VContext@v8@@@2@V?$Local@VValue@v8@@@2@V?$Local@VString@v8@@@2@@Z
?IsFunction@Value@v8@@QEBA_NXZ
?IsObject@Value@v8@@QEBA_NXZ
?ToString@Value@v8@@QEBA?AV?$MaybeLocal@VString@v8@@@2@V?$Local@VContext@v8@@@2@@Z
?ToObject@Value@v8@@QEBA?AV?$MaybeLocal@VObject@v8@@@2@V?$Local@VContext@v8@@@2@@Z
?TypeOf@Value@v8@@QEAA?AV?$Local@VString@v8@@@2@PEAVIsolate@2@@Z
?NewFromUtf8@String@v8@@SA?AV?$MaybeLocal@VString@v8@@@2@PEAVIsolate@2@PEBDW4NewStringType@2@H@Z
??0Utf8Value@String@v8@@QEAA@PEAVIsolate@2@V?$Local@VValue@v8@@@2@@Z
??1Utf8Value@String@v8@@QEAA@XZ
?Get@Object@v8@@QEAA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@V?$Local@VValue@v8@@@2@@Z
?Get@Object@v8@@QEAA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@I@Z
?GetOwnPropertyNames@Object@v8@@QEAA?AV?$MaybeLocal@VArray@v8@@@2@V?$Local@VContext@v8@@@2@@Z
?GetConstructorName@Object@v8@@QEAA?AV?$Local@VString@v8@@@2@XZ
?CallAsFunction@Object@v8@@QEAA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@V?$Local@VValue@v8@@@2@HQEAV52@@Z
?Length@Array@v8@@QEBAIXZ
?NewDefaultAllocator@Allocator@ArrayBuffer@v8@@SAPEAV123@XZ
??0CreateParams@Isolate@v8@@QEAA@XZ
??1CreateParams@Isolate@v8@@QEAA@XZ
?New@Isolate@v8@@SAPEAV12@AEBUCreateParams@12@@Z
?GetCurrent@Isolate@v8@@SAPEAV12@XZ
?Enter@Isolate@v8@@QEAAXXZ
?Exit@Isolate@v8@@QEAAXXZ
?New@BigInt@v8@@SA?AV?$Local@VBigInt@v8@@@2@PEAVIsolate@2@_J@Z
?GetCurrentContext@Isolate@v8@@QEAA?AV?$Local@VContext@v8@@@2@XZ
?SetPromiseRejectCallback@Isolate@v8@@QEAAXP6AXVPromiseRejectMessage@2@@Z@Z
?SetFatalErrorHandler@Isolate@v8@@QEAAXP6AXPEBD0@Z@Z
?SetOOMErrorHandler@Isolate@v8@@QEAAXP6AXPEBD_N@Z@Z
?AddMessageListener@Isolate@v8@@QEAA_NP6AXV?$Local@VMessage@v8@@@2@V?$Local@VValue@v8@@@2@@Z1@Z
?SetCaptureStackTraceForUncaughtExceptions@Isolate@v8@@QEAAX_NHW4StackTraceOptions@StackTrace@2@@Z
?SetFlagsFromString@V8@v8@@SAXPEBD_K@Z
?InitializePlatform@V8@v8@@SAXPEAVPlatform@2@@Z
?Initialize@V8@v8@@CA_NH@Z
?GlobalizeReference@V8@v8@@CAPEA_KPEAVIsolate@internal@2@PEA_K@Z
?DisposeGlobal@V8@v8@@CAXPEA_K@Z
?ToLocalEmpty@V8@v8@@CAXXZ
??0TryCatch@v8@@QEAA@PEAVIsolate@1@@Z
??1TryCatch@v8@@QEAA@XZ
?HasCaught@TryCatch@v8@@QEBA_NXZ
?Message@TryCatch@v8@@QEBA?AV?$Local@VMessage@v8@@@2@XZ
?Global@Context@v8@@QEAA?AV?$Local@VObject@v8@@@2@XZ
?New@Context@v8@@SA?AV?$Local@VContext@v8@@@2@PEAVIsolate@2@PEAVExtensionConfiguration@2@V?$MaybeLocal@VObjectTemplate@v8@@@2@V?$MaybeLocal@VValue@v8@@@2@UDeserializeInternalFieldsCallback@2@PEAVMicrotaskQueue@2@@Z
?Enter@Context@v8@@QEAAXXZ
?Exit@Context@v8@@QEAAXXZ
?Set@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@V?$Local@VValue@v8@@@2@1@Z
?New@External@v8@@SA?AV?$Local@VExternal@v8@@@2@PEAVIsolate@2@PEAX@Z
?Set@Template@v8@@QEAAXV?$Local@VName@v8@@@2@V?$Local@VData@v8@@@2@W4PropertyAttribute@2@@Z
?SetAccessorProperty@Template@v8@@QEAAXV?$Local@VName@v8@@@2@V?$Local@VFunctionTemplate@v8@@@2@1W4PropertyAttribute@2@W4AccessControl@2@@Z
?New@FunctionTemplate@v8@@SA?AV?$Local@VFunctionTemplate@v8@@@2@PEAVIsolate@2@P6AXAEBV?$FunctionCallbackInfo@VValue@v8@@@2@@ZV?$Local@VValue@v8@@@2@V?$Local@VSignature@v8@@@2@HW4ConstructorBehavior@2@W4SideEffectType@2@PEBVCFunction@2@@Z
?GetFunction@FunctionTemplate@v8@@QEAA?AV?$MaybeLocal@VFunction@v8@@@2@V?$Local@VContext@v8@@@2@@Z
?InstanceTemplate@FunctionTemplate@v8@@QEAA?AV?$Local@VObjectTemplate@v8@@@2@XZ
?Inherit@FunctionTemplate@v8@@QEAAXV?$Local@VFunctionTemplate@v8@@@2@@Z
?PrototypeTemplate@FunctionTemplate@v8@@QEAA?AV?$Local@VObjectTemplate@v8@@@2@XZ
?SetClassName@FunctionTemplate@v8@@QEAAXV?$Local@VString@v8@@@2@@Z
?NewInstance@ObjectTemplate@v8@@QEAA?AV?$MaybeLocal@VObject@v8@@@2@V?$Local@VContext@v8@@@2@@Z
?SetInternalFieldCount@ObjectTemplate@v8@@QEAAXH@Z
?SetAlignedPointerInInternalField@Object@v8@@QEAAXHPEAX@Z
?SlowGetAlignedPointerFromInternalField@Object@v8@@AEAAPEAXH@Z
?MakeWeak@V8@v8@@CAXPEA_KPEAXP6AXAEBV?$WeakCallbackInfo@X@2@@ZW4WeakCallbackType@2@@Z
?MakeWeak@V8@v8@@CAXPEAPEA_K@Z
?ClearWeak@V8@v8@@CAPEAXPEA_K@Z
?Parse@JSON@v8@@SA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@V?$Local@VString@v8@@@2@@Z
?IsArray@Value@v8@@QEBA_NXZ
?IsArrayBuffer@Value@v8@@QEBA_NXZ
?IsTypedArray@Value@v8@@QEBA_NXZ
?IsUint8Array@Value@v8@@QEBA_NXZ
?IsUint8ClampedArray@Value@v8@@QEBA_NXZ
?IsInt8Array@Value@v8@@QEBA_NXZ
?IsUint16Array@Value@v8@@QEBA_NXZ
?IsInt16Array@Value@v8@@QEBA_NXZ
?IsUint32Array@Value@v8@@QEBA_NXZ
?IsInt32Array@Value@v8@@QEBA_NXZ
?IsFloat32Array@Value@v8@@QEBA_NXZ
?IsFloat64Array@Value@v8@@QEBA_NXZ
?IsProxy@Value@v8@@QEBA_NXZ
?Set@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@IV?$Local@VValue@v8@@@2@@Z
?Has@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@V?$Local@VValue@v8@@@2@@Z
?SetAccessorProperty@Object@v8@@QEAAXV?$Local@VName@v8@@@2@V?$Local@VFunction@v8@@@2@1W4PropertyAttribute@2@W4AccessControl@2@@Z
?InternalFieldCount@Object@v8@@QEBAHXZ
?IsCallable@Object@v8@@QEBA_NXZ
?New@Object@v8@@SA?AV?$Local@VObject@v8@@@2@PEAVIsolate@2@@Z
?New@Array@v8@@SA?AV?$Local@VArray@v8@@@2@PEAVIsolate@2@H@Z
?New@Number@v8@@SA?AV?$Local@VNumber@v8@@@2@PEAVIsolate@2@N@Z
?Int64Value@BigInt@v8@@QEBA_JPEA_N@Z
?Dispose@Isolate@v8@@QEAAXXZ
?New@Function@v8@@SA?AV?$MaybeLocal@VFunction@v8@@@2@V?$Local@VContext@v8@@@2@P6AXAEBV?$FunctionCallbackInfo@VValue@v8@@@2@@ZV?$Local@VValue@v8@@@2@HW4ConstructorBehavior@2@W4SideEffectType@2@@Z
?GetTarget@Proxy@v8@@QEAA?AV?$Local@VValue@v8@@@2@XZ
??1BackingStore@v8@@QEAA@XZ
?Data@BackingStore@v8@@QEBAPEAXXZ
?ByteLength@BackingStore@v8@@QEBA_KXZ
?New@ArrayBuffer@v8@@SA?AV?$Local@VArrayBuffer@v8@@@2@PEAVIsolate@2@_K@Z
?New@ArrayBuffer@v8@@SA?AV?$Local@VArrayBuffer@v8@@@2@PEAVIsolate@2@V?$shared_ptr@VBackingStore@v8@@@std@@@Z
v8_libplatform
?NewDefaultPlatform@platform@v8@@YA?AV?$unique_ptr@VPlatform@v8@@U?$default_delete@VPlatform@v8@@@std@@@std@@HW4IdleTaskSupport@12@W4InProcessStackDumping@12@V?$unique_ptr@VTracingController@v8@@U?$default_delete@VTracingController@v8@@@std@@@4@@Z
kernel32
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitOnceComplete
InitOnceBeginInitialize
CreateSemaphoreW
InitializeCriticalSectionEx
DeleteCriticalSection
InitializeConditionVariable
WakeConditionVariable
SleepConditionVariableCS
WaitForSingleObjectEx
SetThreadPriority
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
IsDebuggerPresent
GetStartupInfoW
RaiseException
HeapAlloc
HeapFree
GetProcessHeap
MoveFileW
GetModuleFileNameW
CloseHandle
SetFileAttributesW
RemoveDirectoryW
ReadFile
GetFileSize
GetFileAttributesExW
GetFileAttributesW
FindFirstFileExW
DeleteFileW
CreateFileW
CreateDirectoryW
FormatMessageW
LoadLibraryW
WideCharToMultiByte
GetLastError
FindNextFileW
FindFirstFileW
FindClose
GetUserDefaultLCID
GetUserDefaultUILanguage
GetCommandLineW
LocalFree
WaitForSingleObject
ReleaseSemaphore
InitializeSListHead
EnterCriticalSection
VirtualQuery
GetCurrentThreadId
FreeLibrary
LoadLibraryA
GetCurrentProcessId
LeaveCriticalSection
GetTickCount
GetSystemInfo
SleepEx
GetStdHandle
OutputDebugStringW
MultiByteToWideChar
SetConsoleTextAttribute
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
GetModuleHandleW
GetProcAddress
GetLocaleInfoA
user32
SetFocus
OffsetRect
DrawTextW
SetWindowLongPtrW
GetWindowRect
GetClientRect
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetWindowPos
ShowWindow
DestroyWindow
CreateWindowExW
CallWindowProcW
PostMessageW
SendMessageW
EnumDisplaySettingsW
GetDC
ReleaseDC
SendMessageA
gdi32
MoveToEx
GetTextMetricsW
SetTextColor
SetBkMode
SelectObject
SaveDC
RemoveFontResourceW
RestoreDC
LineTo
GetStockObject
GetDIBits
DeleteObject
DeleteDC
CreatePen
CreateFontIndirectA
CreateCompatibleDC
CreateBitmap
AddFontResourceW
GetDeviceCaps
shell32
ShellExecuteW
SHGetFolderPathW
SHCreateDirectoryExW
CommandLineToArgvW
advapi32
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegCloseKey
msvcp140
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?bad@ios_base@std@@QEBA_NXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?setf@ios_base@std@@QEAAHHH@Z
?_Syserror_map@std@@YAPEBDH@Z
_Thrd_detach
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??Bios_base@std@@QEBA_NXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
_Cnd_do_broadcast_at_thread_exit
_Cnd_signal
_Cnd_broadcast
_Cnd_wait
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Thrd_join
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
_Thrd_sleep
_Xtime_get_ticks
?id@?$collate@D@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
??Bid@locale@std@@QEAA_KXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
_Strxfrm
_Strcoll
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Xbad_alloc@std@@YAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
_Thrd_id
_Query_perf_frequency
_Query_perf_counter
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
??0task_continuation_context@Concurrency@@AEAA@XZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Random_device@std@@YAIXZ
_Mtx_current_owns
_Cnd_timedwait
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
vcruntime140
__RTDynamicCast
_purecall
memset
memmove
memcpy
__std_exception_copy
memcmp
__std_exception_destroy
_CxxThrowException
__intrinsic_setjmp
__C_specific_handler_noexcept
__vcrt_GetModuleFileNameW
__vcrt_LoadLibraryExW
memchr
__std_terminate
strchr
__std_type_info_name
__std_type_info_compare
wcsrchr
longjmp
__RTtypeid
strrchr
strstr
__C_specific_handler
__current_exception
__current_exception_context
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_register_onexit_function
terminate
_beginthreadex
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_initialize_narrow_environment
abort
_crt_atexit
_configure_narrow_argv
_errno
_set_app_type
_seh_filter_exe
exit
api-ms-win-crt-convert-l1-1-0
strtoll
strtod
strtof
atoi
atof
strtoul
strtol
api-ms-win-crt-stdio-l1-1-0
fgetc
__stdio_common_vsprintf_s
fgetpos
fputc
fsetpos
_fseeki64
setvbuf
ungetc
ftell
fseek
__stdio_common_vsprintf
fputs
fgets
fopen
_set_fmode
__stdio_common_vsscanf
fflush
_ftelli64
__p__commode
ferror
fclose
__stdio_common_vfwprintf
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsnprintf_s
fwrite
fread
_fileno
_get_stream_buffer_pointers
api-ms-win-crt-time-l1-1-0
clock
_localtime64
_time64
api-ms-win-crt-heap-l1-1-0
calloc
_callnewh
_set_new_mode
malloc
realloc
free
_aligned_malloc
_aligned_free
api-ms-win-crt-math-l1-1-0
atan2f
powf
log2
floor
__setusermatherr
sinf
tanf
ceil
asinf
roundf
trunc
cosf
floorf
acosf
cbrtf
log
_fdclass
fmodf
log2f
logf
acos
atan2
round
fminf
fmaxf
cos
fmod
pow
sqrt
sqrtf
ceilf
sin
api-ms-win-crt-string-l1-1-0
tolower
isalnum
strcat_s
isalpha
isspace
strncmp
strcmp
strncat
_stricmp
strncpy
strcpy_s
api-ms-win-crt-filesystem-l1-1-0
_fstat64i32
_unlock_file
_lock_file
api-ms-win-crt-utility-l1-1-0
srand
rand
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 226KB - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 258KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ