Static task
static1
Behavioral task
behavioral1
Sample
da1429470662c3e08760d1b617c3e435700fcba54d4ab85b76b5afe2417b43bc.exe
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral2
Sample
da1429470662c3e08760d1b617c3e435700fcba54d4ab85b76b5afe2417b43bc.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
General
-
Target
da1429470662c3e08760d1b617c3e435700fcba54d4ab85b76b5afe2417b43bc
-
Size
15.9MB
-
MD5
8f92f42009e796951755a00775ef703b
-
SHA1
4bd292e80a68af76406513724abd70b7352b895e
-
SHA256
da1429470662c3e08760d1b617c3e435700fcba54d4ab85b76b5afe2417b43bc
-
SHA512
dbc4396abf7e4c38c87c5b6c29ce10df5a37868ecd84d8b68867b1533f278aef5d2a323ba358b007880d1e1fd940c61ba71e8ce16263820f0530a9ebafd32ffa
-
SSDEEP
393216:/qYFcpzNh+VSHVu+L+Bkntm2AHLDR174dNR+p21z9E7UZFRIQmk7IKAS1KxLAgDS:SacpBh+VSHVu+L+Bkntm2AHLDR174dND
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da1429470662c3e08760d1b617c3e435700fcba54d4ab85b76b5afe2417b43bc
Files
-
da1429470662c3e08760d1b617c3e435700fcba54d4ab85b76b5afe2417b43bc.exe windows:5 windows x86
52a57205ed7f7a66b6ea53118f2f4663
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
elementskill
?GetNativeName@ElementSkill@GNET@@SAPBDI@Z
?GetRequiredBook@ElementSkill@GNET@@SAHIH@Z
?GetExecuteTime@ElementSkill@GNET@@SAHIH@Z
?GetVersion@ElementSkill@GNET@@SAHXZ
?InitGetSkillLevelFunPtr@ElementSkill@GNET@@SAXP6AHH@Z@Z
?GoblinCondition@ElementSkill@GNET@@SAHIAAUGoblinUseRequirement@2@H@Z
?GetComboSkActivated@ElementSkill@GNET@@SAXABUComboSkillState@2@AAV?$skill_array_interface@U?$pair@IH@std@@@2@@Z
?SetAbility@ElementSkill@GNET@@SAHIH@Z
?SetLevel@ElementSkill@GNET@@SAHIH@Z
?LoadSkillData@ElementSkill@GNET@@SAXPAX@Z
?LearnCondition@ElementSkill@GNET@@SAHIAAULearnRequirement@2@H@Z
?Condition@ElementSkill@GNET@@SAHIAAUUseRequirement@2@H@Z
?PetLearn@ElementSkill@GNET@@SAHIAAUPetRequirement@2@H@Z
??0?$skill_array_interface@I@GNET@@QAE@XZ
?GetGfxFileName@ElementSkill@GNET@@SAPBDH@Z
?GetGfxHangPoint@ElementSkill@GNET@@SAPBDH@Z
?GetGfxTarget@ElementSkill@GNET@@SADH@Z
?Create@ElementSkill@GNET@@SAPAV12@IH@Z
?Destroy@ElementSkill@GNET@@QAEXXZ
?GoblinLearn@ElementSkill@GNET@@SAHIAAUGoblinRequirement@2@H@Z
?GetEffect@ElementSkill@GNET@@SAPBDI@Z
?Query@VisibleState@GNET@@SAPBV12@HH@Z
?GetName@ElementSkill@GNET@@SAPB_WI@Z
?IsValidForm@ElementSkill@GNET@@SA_NID@Z
?GetCommonCoolDown@ElementSkill@GNET@@SAHI@Z
??0SkillStr@GNET@@QAE@XZ
??1?$skill_array_interface@I@GNET@@UAE@XZ
?GetIcon@ElementSkill@GNET@@SAPBDI@Z
??0?$skill_array_interface@U?$pair@IH@std@@@GNET@@QAE@XZ
?InitStaticData@ElementSkill@GNET@@SAXXZ
?GetComboSkPreSkill@ElementSkill@GNET@@SAHI@Z
?GetInherentSkills@ElementSkill@GNET@@SAXHAAV?$skill_array_interface@I@2@@Z
?NextSkill@ElementSkill@GNET@@SAII@Z
?IsMovingSkill@ElementSkill@GNET@@SA_NI@Z
?GetMaxAbility@ElementSkill@GNET@@SAHIH@Z
?GetAbility@ElementSkill@GNET@@SAHI@Z
??0?$skill_array_interface@U?$pair@IH@std@@@GNET@@QAE@ABV01@@Z
??1?$skill_array_interface@U?$pair@IH@std@@@GNET@@UAE@XZ
?IsOverridden@ElementSkill@GNET@@SA_NI@Z
?GetSkillRuneAttr@ElementSkill@GNET@@SAHH@Z
?GetType@ElementSkill@GNET@@SADI@Z
?IsGoblinSkill@ElementSkill@GNET@@SA_NI@Z
?Query@TeamState@GNET@@SAPBV12@H@Z
?GetRequiredMoney@ElementSkill@GNET@@SAHIH@Z
?GetRequiredSp@ElementSkill@GNET@@SAHIH@Z
?GetRequiredRealmLevel@ElementSkill@GNET@@SAHIH@Z
?GetRequiredLevel@ElementSkill@GNET@@SAHIH@Z
?GetAbilityPercent@ElementSkill@GNET@@SAHI@Z
ftdriver
?CreateFTManager@@YAPAVIFTManager@@HHH@Z
speedtreert
??1STextures@CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0SGeometry@CSpeedTreeRT@@QAE@XZ
?Authorize@CSpeedTreeRT@@SAXPBD@Z
??0CSpeedTreeRT@@QAE@XZ
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
??1CSpeedTreeRT@@QAE@XZ
??2CSpeedTreeRT@@SAPAXI@Z
??3CSpeedTreeRT@@SAXPAX@Z
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?GetDiscreteLeafLodLevel@CSpeedTreeRT@@QBEGM@Z
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?SetTime@CSpeedTreeRT@@SAXM@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
imm32
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmIsIME
ImmGetDescriptionW
ImmGetProperty
ImmGetContext
ImmReleaseContext
ImmAssociateContext
ImmGetCandidateListW
ImmNotifyIME
ImmSetCandidateWindow
ws2_32
htons
ntohs
recv
send
sendto
ioctlsocket
connect
setsockopt
WSACleanup
closesocket
WSAStartup
inet_ntoa
gethostbyname
WSAGetLastError
getaddrinfo
__WSAFDIsSet
bind
select
inet_addr
getsockname
socket
d3d9
Direct3DCreate9
d3dx9_43
D3DXVec4Transform
D3DXGetImageInfoFromFileInMemory
D3DXCreateEffectCompiler
D3DXCreateTextureFromFileInMemoryEx
D3DXSaveSurfaceToFileA
D3DXGetShaderConstantTable
D3DXMatrixPerspectiveFovLH
D3DXQuaternionRotationMatrix
D3DXLoadSurfaceFromFileInMemory
D3DXPlaneTransform
D3DXDeclaratorFromFVF
D3DXMatrixOrthoOffCenterLH
D3DXMatrixLookAtLH
D3DXCompileShader
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXMatrixRotationX
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXLoadSurfaceFromSurface
D3DXMatrixInverse
D3DXMatrixRotationY
D3DXMatrixRotationZ
D3DXMatrixRotationAxis
D3DXMatrixMultiply
D3DXSaveVolumeToFileA
D3DXVec3TransformCoord
D3DXAssembleShader
D3DXCreateBuffer
D3DXGetImageInfoFromFileA
D3DXMatrixRotationQuaternion
glu32
gluNewTess
gluTessBeginPolygon
gluTessBeginContour
gluTessVertex
gluTessEndContour
gluTessEndPolygon
gluTessProperty
gluTessCallback
gluDeleteTess
dsound
ord11
shlwapi
PathFileExistsW
PathAppendW
PathIsFileSpecA
PathCombineA
PathRemoveFileSpecA
PathFileExistsA
PathFindExtensionA
PathFindFileNameA
PathIsDirectoryW
PathRemoveFileSpecW
PathCanonicalizeA
StrToIntW
wininet
InternetReadFile
InternetCloseHandle
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetOpenA
InternetConnectA
HttpQueryInfoA
InternetOpenUrlW
winmm
timeKillEvent
timeGetTime
timeSetEvent
timeEndPeriod
timeBeginPeriod
dbghelp
SymGetLineFromAddr64
SymInitialize
SymFunctionTableAccess64
SymCleanup
StackWalk64
SymGetSymFromAddr64
SymGetModuleBase64
physxloader
NxGetPhysicsSDKAllocator
NxGetCookingLib
NxGetUtilLib
NxReleasePhysicsSDK
NxCreatePhysicsSDK
kernel32
CreateNamedPipeW
GetLogicalProcessorInformation
CreateEventA
TryEnterCriticalSection
SetCriticalSectionSpinCount
TlsFree
TlsAlloc
WaitNamedPipeW
LoadLibraryExA
InterlockedPushEntrySList
InterlockedPopEntrySList
EncodePointer
LocalFree
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
SetNamedPipeHandleState
FindNextFileW
FindFirstFileW
GetPrivateProfileIntW
OpenEventW
OpenMutexW
SetEnvironmentVariableW
GetEnvironmentVariableW
VirtualProtectEx
VirtualQuery
GetThreadContext
OpenThread
GetThreadPriority
VirtualFree
VirtualAlloc
FormatMessageA
WinExec
GlobalSize
GlobalReAlloc
IsDBCSLeadByte
GetWindowsDirectoryA
LocalAlloc
TlsSetValue
TlsGetValue
IsDBCSLeadByteEx
lstrlenW
SetFilePointer
SetThreadAffinityMask
FindResourceW
lstrcmpiW
lstrcmpW
MulDiv
SizeofResource
LoadResource
LoadLibraryExW
QueueUserAPC
SetLastError
CreateSemaphoreW
ReleaseSemaphore
OpenFile
GetPrivateProfileStringA
GetPrivateProfileIntA
SuspendThread
DuplicateHandle
GetVersion
QueryPerformanceFrequency
QueryPerformanceCounter
IsDebuggerPresent
SetCurrentDirectoryA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
CreateFileMappingW
WritePrivateProfileStringW
GetPrivateProfileStringW
SetThreadPriorityBoost
SetThreadPriority
SignalObjectAndWait
GetDiskFreeSpaceA
OutputDebugStringW
CreateProcessW
CreateMutexA
CreateProcessA
ConnectNamedPipe
WriteFile
GlobalFree
ResumeThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetTickCount
GetCommandLineA
GetFileAttributesA
CreateDirectoryA
CreateFileW
FindFirstFileA
FindNextFileA
CloseHandle
GetLastError
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
FreeLibrary
GetModuleFileNameA
GetModuleFileNameW
GetProcAddress
lstrcpyW
LoadLibraryW
IsBadReadPtr
Sleep
LoadLibraryA
DecodePointer
RaiseException
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSectionAndSpinCount
ReadFile
OutputDebugStringA
SetEvent
WaitForSingleObject
CreateEventW
TerminateProcess
CreateThread
VirtualProtect
GetModuleHandleA
OpenProcess
VirtualQueryEx
ReadProcessMemory
CreateToolhelp32Snapshot
Process32First
Process32Next
GetSystemInfo
GetVersionExW
GlobalMemoryStatus
lstrlenA
GetSystemTime
SystemTimeToFileTime
CreateFileA
GetModuleHandleW
FlushInstructionCache
ReleaseMutex
CreateMutexW
IsBadWritePtr
GlobalAlloc
GlobalLock
GlobalUnlock
WideCharToMultiByte
DeleteFileA
MultiByteToWideChar
GetCurrentDirectoryW
ExitThread
DeleteFileW
GetFileSize
ResetEvent
GetExitCodeThread
GetLocalTime
WaitForMultipleObjects
CopyFileA
GetNativeSystemInfo
GetStartupInfoA
GetCurrentDirectoryA
GetCommandLineW
ExitProcess
FindClose
user32
GetClipboardData
SetCaretPos
IsWindowUnicode
GetWindowDC
MsgWaitForMultipleObjects
GetQueueStatus
CreateAcceleratorTableW
KillTimer
SetTimer
keybd_event
GetFocus
SetFocus
PostThreadMessageW
GetDlgItem
DestroyWindow
IsChild
GetClassInfoExW
CallWindowProcW
GetMessageW
GetKeyboardLayout
LoadCursorW
AdjustWindowRect
SetForegroundWindow
UpdateWindow
GetSystemMetrics
MoveWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
wsprintfW
MessageBoxW
ReleaseCapture
SetCapture
GetCapture
GetGUIThreadInfo
ChangeDisplaySettingsW
LoadIconW
SetCursor
EndPaint
BeginPaint
GetForegroundWindow
PeekMessageW
DispatchMessageW
TranslateMessage
SetWindowTextW
SetWindowLongW
AdjustWindowRectEx
InvalidateRect
GetAsyncKeyState
GetMenuBarInfo
EnumChildWindows
SetActiveWindow
GetActiveWindow
IsWindow
SendMessageW
GetClassNameW
FindWindowW
GetWindowLongW
GetWindowTextW
IsWindowEnabled
IsZoomed
IsIconic
IsWindowVisible
SetWindowPos
ShowWindow
GetClientRect
SetCursorPos
PostMessageW
ScreenToClient
GetCursorPos
ClientToScreen
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
PostQuitMessage
EnumWindows
CallNextHookEx
SetWindowsHookExW
FindWindowA
PtInRect
IsRectEmpty
GetWindowRect
GetWindow
GetWindowThreadProcessId
GetTopWindow
GetClassNameA
GetWindowTextA
UnregisterClassW
MessageBoxA
GetKeyState
CreateCaret
DestroyCursor
DestroyAcceleratorTable
GetDC
ReleaseDC
InvalidateRgn
RedrawWindow
GetWindowTextLengthW
GetSysColor
FillRect
SetWindowLongA
GetDesktopWindow
GetParent
GetAncestor
EnumDisplaySettingsW
SetRect
IntersectRect
LoadCursorFromFileA
RegisterWindowMessageW
RegisterClipboardFormatW
WindowFromDC
CharNextW
EnumThreadWindows
UnhookWindowsHookEx
gdi32
GetGlyphOutlineW
EnumFontFamiliesExW
CreatePolygonRgn
PtInRegion
CreateFontIndirectW
GetDIBits
SetMapMode
GetTextExtentPoint32W
CreateFontW
ExtTextOutW
CreateEllipticRgn
SetTextAlign
SetTextColor
SetBkColor
GetObjectW
SelectObject
GetDeviceCaps
DeleteObject
DeleteDC
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
GetStockObject
BitBlt
CreateDIBSection
advapi32
OpenProcessToken
OpenThreadToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
shell32
ShellExecuteA
Shell_NotifyIconW
ShellExecuteExA
SHOpenFolderAndSelectItems
SHGetFolderPathW
ShellExecuteW
ole32
CoTaskMemAlloc
StringFromGUID2
CLSIDFromProgID
CoTaskMemRealloc
CoCreateInstance
CoGetClassObject
CreateStreamOnHGlobal
CoTaskMemFree
OleInitialize
OleUninitialize
OleLockRunning
CoUninitialize
CoInitialize
CLSIDFromString
CoFreeUnusedLibraries
oleaut32
OleCreateFontIndirect
DispCallFunc
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
VariantCopy
VariantClear
VariantInit
SysStringLen
SysAllocStringLen
SysAllocString
SysFreeString
msvcp140
?c_str@?$_Yarn@D@std@@QBEPBDXZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Syserror_map@std@@YAPBDH@Z
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_XGetLastError@std@@YAXXZ
?__ExceptionPtrRethrow@@YAXPBX@Z
_FNan
_Nan
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$collate@_W@std@@2V0locale@2@A
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Thrd_start
_Thrd_join
_Thrd_hardware_concurrency
_Thrd_id
_Mtx_init
_Mtx_destroy
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
_Wcsxfrm
_Wcscoll
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??7ios_base@std@@QBE_NXZ
?id@?$ctype@D@std@@2V0locale@2@A
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
_Mtx_lock
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??Bios_base@std@@QBE_NXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?is@?$ctype@D@std@@QBE_NFD@Z
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?fail@ios_base@std@@QBE_NXZ
?_Xbad_function_call@std@@YAXXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_BADOFF@std@@3_JB
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
?_Xout_of_range@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
_Mtx_unlock
_Cnd_init
_Cnd_destroy
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_broadcast
_Cnd_signal
_Cnd_do_broadcast_at_thread_exit
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
urlmon
URLDownloadToFileW
vcruntime140
_except_handler4_common
strchr
wcschr
wcsrchr
_local_unwind4
__std_type_info_hash
__RTDynamicCast
wcsstr
__std_exception_destroy
__std_exception_copy
_CxxThrowException
strstr
_purecall
memset
memmove
memcpy
__std_terminate
__CxxFrameHandler3
strrchr
__std_type_info_name
longjmp
__telemetry_main_invoke_trigger
_setjmp3
__telemetry_main_return_trigger
__vcrt_InitializeCriticalSectionEx
memchr
api-ms-win-crt-utility-l1-1-0
qsort
rand
srand
ldiv
api-ms-win-crt-math-l1-1-0
_libm_sse2_cos_precise
_libm_sse2_sin_precise
floor
_libm_sse2_sqrt_precise
_CIcosh
_libm_sse2_log_precise
__setusermatherr
_libm_sse2_exp_precise
_libm_sse2_pow_precise
_dtest
_CIfmod
_CIsinh
frexp
ldexp
modf
_libm_sse2_acos_precise
_except1
_fpclass
_isnan
_libm_sse2_tan_precise
_libm_sse2_log10_precise
round
ceil
_libm_sse2_asin_precise
_CIatan2
_fdtest
_CItanh
_libm_sse2_atan_precise
api-ms-win-crt-heap-l1-1-0
_recalloc
calloc
realloc
malloc
free
_set_new_mode
api-ms-win-crt-stdio-l1-1-0
fwrite
__stdio_common_vswprintf_s
__stdio_common_vfprintf
fread
fopen
fclose
fputs
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vswscanf
__stdio_common_vfwprintf
fflush
__p__commode
clearerr
ftell
fseek
fgetwc
fgetws
_set_fmode
fgets
_pclose
_wfopen
__stdio_common_vsprintf_s
tmpnam
tmpfile
fgetpos
feof
_popen
getc
ferror
freopen
__stdio_common_vswprintf
_get_stream_buffer_pointers
fgetc
ungetc
__stdio_common_vfscanf
setvbuf
_fileno
_fseeki64
_ftelli64
_chsize_s
fsetpos
fputc
__acrt_iob_func
api-ms-win-crt-time-l1-1-0
_localtime64_s
_gmtime64
strftime
_gmtime64_s
_time64
_localtime64
_difftime64
clock
asctime
_mktime64
api-ms-win-crt-string-l1-1-0
strcpy_s
strtok
strncat
_wcsupr
_wcslwr
_wcsicmp
wcsncmp
strcoll
_strupr
_strlwr
isspace
isalpha
isalnum
strcspn
iscntrl
iswdigit
wcsncat
strpbrk
toupper
isupper
tolower
isxdigit
ispunct
islower
strncpy_s
strncmp
strncpy
wcsncpy
_strnicmp
_stricmp
isdigit
wcscat_s
wcscpy_s
wcsncpy_s
api-ms-win-crt-filesystem-l1-1-0
_wremove
_mkdir
_access
_findnext64i32
rename
_splitpath
_findfirst64i32
_lock_file
_fstat64i32
_findclose
_stat64i32
_unlock_file
_rmdir
remove
api-ms-win-crt-convert-l1-1-0
_wtof
strtoll
atof
strtoull
_itow
atoi
_itoa
_atoi64
wcstod
strtod
strtoul
_wtoi
atol
_itow_s
strtol
_wtoi64
api-ms-win-crt-runtime-l1-1-0
abort
terminate
_configure_wide_argv
_set_app_type
_get_wide_winmain_command_line
exit
_initterm
_wassert
system
strerror
_seh_filter_exe
_initterm_e
_errno
_resetstkoflw
_exit
_getpid
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_invalid_parameter_noinfo
_controlfp_s
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_register_onexit_function
_initialize_wide_environment
_beginthread
_beginthreadex
_crt_atexit
api-ms-win-crt-locale-l1-1-0
localeconv
_configthreadlocale
setlocale
api-ms-win-crt-environment-l1-1-0
getenv
Sections
.text Size: 13.1MB - Virtual size: 13.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 645KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ