Static task
static1
Behavioral task
behavioral1
Sample
86bdf15ba711b6b1a769b696d9e604d152bf92dfd7bcb7803049524ec9b54dfd.exe
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral2
Sample
86bdf15ba711b6b1a769b696d9e604d152bf92dfd7bcb7803049524ec9b54dfd.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
General
-
Target
86bdf15ba711b6b1a769b696d9e604d152bf92dfd7bcb7803049524ec9b54dfd
-
Size
9.0MB
-
MD5
d26f93574cad8deb49886e5eb5a58f8d
-
SHA1
582aa0f8e2d7a570ea10a7f00420cc92a0171865
-
SHA256
86bdf15ba711b6b1a769b696d9e604d152bf92dfd7bcb7803049524ec9b54dfd
-
SHA512
8db30b05208c70b0b9241e3f2979f1fe1c512d85bd0596abdfc5aad62e933e7231f0363ccb6e06e333670b606378105a97605286ede607439d7f9b270653e9fd
-
SSDEEP
196608:sEhflJRtM2AZ7YnpW5ZDAYoJNg4VZGqDDcCn:sEhflJ27YnA5ZD5oJNgtqDDJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86bdf15ba711b6b1a769b696d9e604d152bf92dfd7bcb7803049524ec9b54dfd
Files
-
86bdf15ba711b6b1a769b696d9e604d152bf92dfd7bcb7803049524ec9b54dfd.exe windows:6 windows x86
bbe6ae3d2e227ab0799d20cbe8030126
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
xscope
?setSampleWindow@xscope@@YAXH@Z
?smooth@xscope@@YAHPBN00HNPAN1@Z
?setSpeedAmplitude@xscope@@YAXN@Z
?getBodeGraph@xscope@@YAHPBNHNPAN11AAH@Z
mfc140
ord8718
ord14328
ord2992
ord5898
ord1695
ord1528
ord305
ord3005
ord14238
ord12503
ord8146
ord5861
ord5102
ord4315
ord12725
ord5491
ord5492
ord493
ord7097
ord2387
ord1507
ord1403
ord3351
ord3231
ord6774
ord7619
ord1389
ord890
ord13011
ord1106
ord4640
ord5192
ord12963
ord14040
ord14044
ord12960
ord14029
ord8838
ord14032
ord13619
ord13966
ord13234
ord13230
ord13028
ord13027
ord13036
ord12808
ord12894
ord450
ord12521
ord12501
ord13699
ord6290
ord3686
ord1814
ord1444
ord13202
ord2518
ord6502
ord6460
ord6463
ord898
ord6768
ord3874
ord2520
ord6540
ord13724
ord13730
ord13556
ord968
ord4372
ord1440
ord5561
ord4085
ord1141
ord501
ord6200
ord7480
ord11492
ord9383
ord9196
ord3827
ord13633
ord13635
ord5019
ord3837
ord3355
ord3248
ord6803
ord2298
ord3825
ord9422
ord13407
ord5406
ord4468
ord14054
ord4870
ord9088
ord2751
ord14487
ord3866
ord2989
ord8704
ord4215
ord6996
ord3184
ord6562
ord6104
ord5401
ord5960
ord9089
ord1178
ord8031
ord4216
ord8026
ord13584
ord6563
ord1177
ord7459
ord12074
ord6193
ord13677
ord2758
ord9167
ord12115
ord1109
ord8997
ord10963
ord11343
ord10421
ord4084
ord458
ord3395
ord3396
ord3159
ord6505
ord6195
ord13681
ord3298
ord3295
ord10207
ord8173
ord2759
ord14699
ord10237
ord10239
ord10238
ord10236
ord10240
ord5631
ord11671
ord2438
ord9096
ord12032
ord3830
ord11881
ord14502
ord8922
ord11744
ord2407
ord9173
ord11750
ord12125
ord9308
ord8361
ord12051
ord7772
ord3271
ord561
ord7147
ord11581
ord9258
ord5931
ord4011
ord4374
ord7956
ord1783
ord8306
ord6369
ord11850
ord7475
ord13278
ord6946
ord3166
ord3797
ord8426
ord2200
ord8429
ord7618
ord1468
ord8347
ord12190
ord1534
ord10383
ord12869
ord1533
ord12806
ord4580
ord8285
ord5336
ord2484
ord12485
ord12484
ord14509
ord7886
ord14507
ord9353
ord4143
ord4082
ord12888
ord7905
ord12189
ord11972
ord2027
ord11928
ord11927
ord14380
ord12474
ord7964
ord14581
ord6322
ord5059
ord5095
ord12863
ord14583
ord6324
ord974
ord14582
ord6323
ord13830
ord8421
ord993
ord6831
ord1070
ord366
ord3844
ord5894
ord12182
ord8180
ord12194
ord12162
ord5742
ord10202
ord14513
ord6785
ord4841
ord3230
ord13405
ord3674
ord3799
ord3800
ord12512
ord845
ord8088
ord13883
ord3289
ord7407
ord6330
ord13782
ord7470
ord6194
ord13679
ord8869
ord13198
ord1447
ord8877
ord3808
ord14421
ord12119
ord3168
ord9482
ord10453
ord1147
ord511
ord7106
ord2165
ord11225
ord11222
ord7751
ord8188
ord11065
ord2678
ord13193
ord9421
ord12734
ord12031
ord12066
ord9183
ord13262
ord6847
ord10001
ord10000
ord11094
ord5155
ord8968
ord11070
ord11692
ord9480
ord9944
ord9940
ord9468
ord9478
ord9463
ord8266
ord5008
ord5009
ord5013
ord5010
ord5011
ord7477
ord9381
ord9260
ord3826
ord11748
ord5932
ord494
ord11743
ord1784
ord12123
ord6529
ord5493
ord3932
ord8360
ord12049
ord7657
ord500
ord498
ord11907
ord14520
ord2880
ord1140
ord971
ord12372
ord1446
ord2894
ord6274
ord13854
ord6851
ord6852
ord6791
ord3238
ord1424
ord11528
ord10377
ord3796
ord3683
ord7094
ord11490
ord3946
ord4457
ord5648
ord7855
ord3257
ord7873
ord5862
ord12294
ord3675
ord2283
ord14294
ord4278
ord2098
ord9037
ord5645
ord1418
ord5647
ord3028
ord13841
ord995
ord1470
ord259
ord976
ord1449
ord6475
ord7416
ord7042
ord3685
ord973
ord6306
ord5869
ord11917
ord14243
ord14390
ord8312
ord7783
ord8732
ord14291
ord1066
ord362
ord358
ord6094
ord4957
ord8949
ord1978
ord11722
ord11662
ord2624
ord2648
ord1456
ord5109
ord5818
ord5802
ord2940
ord13256
ord8435
ord13887
ord3359
ord3254
ord982
ord6819
ord2292
ord13900
ord14492
ord12021
ord12041
ord12114
ord3931
ord8135
ord12400
ord8300
ord3834
ord4246
ord4276
ord4242
ord4200
ord4170
ord306
ord301
ord1692
ord1696
ord1693
ord4656
ord12826
ord8672
ord8322
ord6777
ord928
ord13882
ord13197
ord2467
ord8012
ord12582
ord1410
ord3949
ord6533
ord4865
ord3856
ord13026
ord8770
ord8326
ord4639
ord4162
ord540
ord3177
ord3861
ord1169
ord7152
ord6581
ord3924
ord4869
ord2524
ord5930
ord4218
ord8705
ord2251
ord2210
ord2649
ord11672
ord4104
ord3186
ord558
ord7144
ord2172
ord7295
ord2199
ord4787
ord12362
ord4607
ord13003
ord8735
ord13041
ord6853
ord13855
ord13856
ord3572
ord8124
ord12584
ord4874
ord7649
ord7774
ord14045
ord7107
ord5421
ord7402
ord7961
ord6103
ord476
ord8401
ord12927
ord1121
ord2188
kernel32
CreateThread
Sleep
CloseHandle
LocalAlloc
FormatMessageA
GetVersion
GetVersionExA
LoadResource
LockResource
lstrcmpiA
lstrlenA
FindResourceA
MultiByteToWideChar
WideCharToMultiByte
GetCPInfo
CreateFileA
WriteFile
GetWindowsDirectoryA
FreeLibrary
LoadLibraryA
GetTimeFormatA
WinExec
lstrcpyA
lstrcatA
GetLogicalDriveStringsA
LoadLibraryExA
MulDiv
GetModuleHandleA
GetProcAddress
WaitForSingleObject
TerminateThread
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetLastError
CreateMutexA
GetModuleFileNameA
SetThreadLocale
DeleteFileA
CopyFileA
GetThreadLocale
ReleaseMutex
GlobalAlloc
GlobalFree
GetTickCount
CreateDirectoryA
FindClose
FindFirstFileA
GlobalUnlock
GlobalLock
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
DecodePointer
HeapDestroy
OutputDebugStringW
RaiseException
VerSetConditionMask
VerifyVersionInfoW
GetLocaleInfoA
GetSystemDefaultLCID
EnumSystemLocalesA
GetFileAttributesA
GlobalReAlloc
GlobalSize
GetCurrentDirectoryA
lstrcmpA
SizeofResource
SetFilePointer
GetTempPathA
GetTempFileNameA
lstrcpynA
GetDateFormatA
EnterCriticalSection
SetThreadPriority
SearchPathA
FindResourceExA
GetSystemDirectoryA
GetACP
ExitProcess
LocalFree
HeapAlloc
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
LoadLibraryW
GetModuleHandleW
GetModuleFileNameW
SetLastError
OutputDebugStringA
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
user32
DestroyCaret
GetWindowContextHelpId
GetDialogBaseUnits
IsCharAlphaNumericA
GetScrollRange
SetScrollRange
LoadMenuA
GetMenuDefaultItem
AdjustWindowRectEx
GetNextDlgGroupItem
GetUpdateRect
SubtractRect
GetDlgCtrlID
DeferWindowPos
WindowFromDC
RegisterClipboardFormatA
EnumChildWindows
SetMenuDefaultItem
IsClipboardFormatAvailable
LoadAcceleratorsA
MapVirtualKeyA
ToAsciiEx
GetKeyboardState
CharUpperA
GetKeyboardLayout
WaitMessage
PostThreadMessageA
TranslateMessage
MonitorFromRect
GetTopWindow
SetActiveWindow
CopyAcceleratorTableA
DestroyAcceleratorTable
CreateAcceleratorTableA
MonitorFromWindow
TrackPopupMenu
ShowWindow
CharUpperBuffA
GetForegroundWindow
ShowScrollBar
TrackPopupMenuEx
SetWindowPos
SetCursorPos
DestroyWindow
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
CheckMenuItem
LoadMenuW
SetFocus
EndDeferWindowPos
BeginDeferWindowPos
IsChild
ValidateRect
DestroyMenu
PeekMessageA
DispatchMessageA
GetMessageA
UnionRect
CopyImage
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetScrollInfo
GetDoubleClickTime
MonitorFromPoint
SetClassLongA
GetClassLongA
GetAsyncKeyState
GetKeyState
BringWindowToTop
EnumDisplayMonitors
GetMonitorInfoA
LoadIconA
LoadCursorW
RegisterWindowMessageA
WinHelpA
LockWindowUpdate
EnableScrollBar
GetCapture
GetWindowRgn
GetTabbedTextExtentA
CreateCaret
GrayStringA
TabbedTextOutA
FillRect
DrawEdge
GetSystemMetrics
GetMenuState
CreateMenu
CreatePopupMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
ShowCaret
AppendMenuA
ModifyMenuA
RemoveMenu
DeleteMenu
GetMenuItemInfoA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
SetRect
CopyRect
GetDesktopWindow
LoadBitmapW
DestroyIcon
DrawIconEx
SystemParametersInfoA
PostMessageA
IsMenu
GetNextDlgTabItem
GetActiveWindow
DrawStateA
SetCaretPos
InvalidateRect
GetWindowRect
SetCursor
ClientToScreen
WindowFromPoint
DrawFocusRect
FrameRect
InflateRect
OffsetRect
GetWindowLongA
GetParent
DestroyCursor
LoadImageA
CreateIconIndirect
GetIconInfo
IsWindow
MessageBeep
PtInRect
SetWindowLongA
LoadCursorA
CopyIcon
DrawFrameControl
RedrawWindow
SetCapture
ReleaseCapture
EnableMenuItem
LoadStringA
DefWindowProcA
GetClassInfoA
GetWindowPlacement
IsIconic
IsWindowEnabled
GetMenuItemRect
SetWindowRgn
GetWindowTextA
GetCursorPos
ChildWindowFromPoint
SetRectEmpty
IntersectRect
IsRectEmpty
EqualRect
EnumWindows
TranslateAcceleratorA
GetClassNameA
UpdateWindow
SetForegroundWindow
GetPropA
GetLastActivePopup
GetWindow
IsWindowVisible
SetParent
IsZoomed
DrawMenuBar
GetSystemMenu
SetPropA
RemovePropA
FindWindowA
LoadIconW
SetScrollPos
GetScrollPos
GetFocus
MapWindowPoints
UnregisterClassA
MessageBoxA
CreateWindowExA
GetCaretPos
MapDialogRect
IsCharLowerA
GetKeyNameTextA
HideCaret
SetWindowTextA
DrawTextExA
DrawTextA
KillTimer
SetTimer
ScreenToClient
GetClientRect
EnableWindow
MapVirtualKeyExA
DrawIcon
InvertRect
GetClipboardData
SendNotifyMessageA
BeginPaint
InsertMenuA
EndPaint
SendMessageA
GetMessagePos
gdi32
ExtSelectClipRgn
CreatePolyPolygonRgn
CreateEllipticRgnIndirect
Arc
SetRectRgn
AbortDoc
EndPage
StartPage
EndDoc
StartDocA
GetCurrentObject
SetPaletteEntries
ExtFloodFill
GetPaletteEntries
GetRgnBox
UnrealizeObject
SetBrushOrgEx
GetTextColor
CreateEllipticRgn
SetWindowOrgEx
SetWindowExtEx
SetViewportExtEx
Polyline
Polygon
ExtCreatePen
SetMapMode
SelectPalette
GetObjectType
GetTextCharsetInfo
EnumFontFamiliesA
CreatePatternBrush
CreateDIBitmap
CreateRectRgnIndirect
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
Escape
GetBkColor
GetMapMode
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
PtVisible
RectVisible
PolyBezier
TextOutA
ExtTextOutA
DPtoLP
LPtoDP
CreateFontIndirectA
CreateHatchBrush
CreatePen
DeleteDC
DeleteObject
Ellipse
GetBkMode
GetDeviceCaps
GetPixel
GetTextExtentPoint32A
GetTextExtentPoint32W
PatBlt
SelectObject
SetPixel
CreateDIBSection
GetObjectA
CreateBitmap
GetStockObject
SetBkColor
SetTextColor
RoundRect
CreatePalette
RealizePalette
LineTo
StretchBlt
MoveToEx
SetBkMode
SetTextJustification
GetTextMetricsA
CombineRgn
CreateRectRgn
CreateRoundRectRgn
FillRgn
FrameRgn
GetClipBox
OffsetRgn
SelectClipRgn
CreatePolygonRgn
GetDCOrgEx
FloodFill
GetDIBits
CreateFontA
SetDIBColorTable
Rectangle
SetPixelFormat
ChoosePixelFormat
GetRegionData
EnumFontFamiliesExA
SetPixelV
GetSystemPaletteEntries
GetNearestPaletteIndex
PtInRegion
GetBoundsRect
SelectClipPath
FillPath
EndPath
CloseFigure
GetClipRgn
BeginPath
advapi32
RegDeleteValueA
RegQueryValueA
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegSetValueExA
RegQueryInfoKeyA
RegEnumKeyExA
RegEnumKeyA
RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
shell32
SHGetDesktopFolder
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
SHAppBarMessage
SHGetFileInfoA
ShellExecuteA
ShellExecuteExA
ExtractIconExA
SHGetDataFromIDListA
comctl32
ImageList_GetImageInfo
ImageList_SetImageCount
ImageList_Remove
ImageList_Destroy
ImageList_Add
ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_Draw
ImageList_AddMasked
ImageList_GetIcon
ImageList_GetIconSize
_TrackMouseEvent
ord17
ImageList_Create
ImageList_DrawEx
ole32
OleDraw
CoDisconnectObject
CoInitialize
CoUninitialize
CreateStreamOnHGlobal
OleRun
CoCreateInstance
oleaut32
GetErrorInfo
VariantChangeType
VariantCopy
VariantClear
VariantInit
SafeArrayPutElement
SafeArrayGetElement
SafeArrayCreate
SysAllocStringByteLen
SetErrorInfo
SysFreeString
SysAllocString
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantChangeTypeEx
VarBstrFromDate
CreateErrorInfo
VarBstrCmp
OleLoadPicture
VarUdateFromDate
SysStringByteLen
hcmodbus
?WriteSingleRegister@CModbusRTU@@QAEHAAVCSeriesPort@@EIK@Z
?ReadSingleRegister@CModbusRTU@@QAEHAAVCSeriesPort@@EIPAK@Z
?Close@CSeriesPort@@QAEHXZ
?GetLastErrorCode@CSeriesPort@@QAEKXZ
?AggrSpecialData@CModbusRTU@@QAEHAAVCSeriesPort@@EIHQAEAAH@Z
?DumpSpecialData@CModbusRTU@@QAEHAAVCSeriesPort@@EIQAEH@Z
??1CModbusRTU@@UAE@XZ
??0CModbusRTU@@QAE@XZ
?ContinuousSampling@CModbusRTU@@QAEKAAVCSeriesPort@@EQAEH@Z
?SingleSampling128@CModbusRTU@@QAEHAAVCSeriesPort@@EGQAE@Z
?WriteDoubleRegister@CModbusRTU@@QAEHAAVCSeriesPort@@EIKH@Z
?GetLastErrorCode@CModbusRTU@@QAEKXZ
?ReadDoubleRegister@CModbusRTU@@QAEHAAVCSeriesPort@@EIPAKH@Z
??1CSeriesPort@@UAE@XZ
??0CSeriesPort@@QAE@XZ
?Open@CSeriesPort@@QAEHHHHHH@Z
msvcp140
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Xinvalid_argument@std@@YAXPBD@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
?_W_Getmonths@_Locinfo@std@@QBEPBGXZ
?_W_Getdays@_Locinfo@std@@QBEPBGXZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
_Mbrtowc
?uncaught_exceptions@std@@YAHXZ
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
vcruntime140
memcpy
memset
_setjmp3
longjmp
_purecall
__std_type_info_destroy_list
_except_handler4_common
__current_exception_context
__current_exception
__std_exception_destroy
__std_exception_copy
memmove
__RTDynamicCast
_CxxThrowException
__std_terminate
__CxxFrameHandler3
api-ms-win-crt-runtime-l1-1-0
_set_app_type
_seh_filter_exe
_initterm
_initterm_e
_crt_at_quick_exit
_crt_atexit
_endthread
_execute_onexit_table
_register_onexit_function
_get_narrow_winmain_command_line
_initialize_onexit_table
exit
_exit
_initialize_narrow_environment
strerror
_configure_narrow_argv
_seh_filter_dll
abort
terminate
_invalid_parameter_noinfo_noreturn
_beginthreadex
_controlfp_s
_invalid_parameter_noinfo
_errno
_c_exit
_cexit
_register_thread_local_exe_atexit_callback
_beginthread
api-ms-win-crt-convert-l1-1-0
_gcvt
atoi
strtoul
atol
strtol
atof
_atoi64
_i64toa_s
_ultoa
_ltoa
_itoa
strtod
_ui64toa_s
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfscanf
fopen
fclose
ferror
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vsprintf
feof
_get_stream_buffer_pointers
fflush
fgetc
fgetpos
fputc
__stdio_common_vsscanf
fread
fsetpos
_fseeki64
fwrite
__p__commode
__stdio_common_vsprintf_s
setvbuf
_set_fmode
ungetc
api-ms-win-crt-time-l1-1-0
clock
_localtime64
_time64
_localtime64_s
_mktime64
_gmtime64
strftime
api-ms-win-crt-math-l1-1-0
_libm_sse2_log10_precise
frexp
floor
_libm_sse2_sqrt_precise
_libm_sse2_atan_precise
_isnan
_libm_sse2_tan_precise
_libm_sse2_log_precise
_except1
modf
ceil
__setusermatherr
_CIfmod
_libm_sse2_sin_precise
_libm_sse2_exp_precise
_finite
_CIatan2
_libm_sse2_pow_precise
_libm_sse2_cos_precise
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
_recalloc
malloc
calloc
api-ms-win-crt-multibyte-l1-1-0
_ismbcprint
_ismbcdigit
_ismbcalnum
_mbsninc
_mbsnbicmp
_mbsnbcmp
_mbsnbcpy
_mbsstr
_mbsinc
_mbsnbcpy_s
_mbctolower
_ismbcspace
_mbctoupper
_mbscmp
_mbschr
_mbslen
_ismbcalpha
api-ms-win-crt-utility-l1-1-0
qsort
rand
api-ms-win-crt-string-l1-1-0
islower
strncpy_s
_strupr
isalpha
_strdup
isprint
wcscpy_s
isdigit
toupper
api-ms-win-crt-filesystem-l1-1-0
remove
_lock_file
_mkdir
_access
_splitpath_s
_makepath_s
_unlock_file
api-ms-win-crt-locale-l1-1-0
_setmbcp
_configthreadlocale
setlocale
winmm
PlaySoundA
gdiplus
GdipCreateSolidFill
GdipSetTextureWrapMode
GdipCreateTextureIAI
GdipDeleteBrush
GdipCloneBrush
GdipDeleteRegion
GdipCreateRegionPath
GdipCreateRegion
GdiplusShutdown
GdiplusStartup
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipGetStringFormatFlags
GdipSetStringFormatFlags
GdipMeasureString
GdipDrawString
GdipGetFontSize
GdipGetFontStyle
GdipGetFamily
GdipGetCellDescent
GdipGetEmHeight
GdipDeleteFontFamily
GdipResetClip
GdipSetClipRegion
GdipSetClipPath
GdipDrawImageRectRect
GdipFillRegion
GdipFillPath
GdipFillEllipse
GdipFillRectangle
GdipGraphicsClear
GdipDrawPath
GdipDrawEllipse
GdipDrawRectangle
GdipDrawArc
GdipDrawLine
GdipGetDpiY
GdipSetPageUnit
GdipGetWorldTransform
GdipMultiplyWorldTransform
GdipResetWorldTransform
GdipSetWorldTransform
GdipGetInterpolationMode
GdipSetInterpolationMode
GdipSetPixelOffsetMode
GdipGetSmoothingMode
GdipSetSmoothingMode
GdipGetCompositingMode
GdipSetCompositingMode
GdipCreateFromHDC
GdipSetImageAttributesColorMatrix
GdipCloneBitmapArea
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipCloneImage
GdipCreatePathGradientFromPath
GdipSetPenDashOffset
GdipSetPenDashStyle
GdipSetPenMiterLimit
GdipSetPenLineJoin
GdipSetPenDashCap197819
GdipSetPenEndCap
GdipSetPenStartCap
GdipScalePathGradientTransform
GdipTranslatePathGradientTransform
GdipMultiplyPathGradientTransform
GdipSetPathGradientTransform
GdipGetPathGradientTransform
GdipSetPathGradientWrapMode
GdipSetPathGradientPresetBlend
GdipGetPathGradientPointCount
GdipSetPathGradientCenterPoint
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientCenterColor
GdipRotateLineTransform
GdipScaleLineTransform
GdipTranslateLineTransform
GdipMultiplyLineTransform
GdipSetLineTransform
GdipGetLineTransform
GdipSetLineWrapMode
GdipSetLinePresetBlend
GdipTranslateTextureTransform
GdipSetTextureTransform
GdipGetTextureTransform
GdipGetBrushType
GdipGetRegionHRgn
GdipCombineRegionRegion
GdipCombineRegionPath
GdipCloneRegion
GdipIsMatrixIdentity
GdipGetMatrixElements
GdipTransformMatrixPoints
GdipRotateMatrix
GdipScaleMatrix
GdipTranslateMatrix
GdipMultiplyMatrix
GdipSetMatrixElements
GdipDeleteMatrix
GdipCreateMatrix
GdipGetPathWorldBounds
GdipTransformPath
GdipAddPathPath
GdipAddPathEllipse
GdipAddPathRectangle
GdipAddPathBezier
GdipAddPathArc
GdipAddPathLine2
GdipAddPathLine
GdipClosePathFigure
GdipStartPathFigure
GdipSetPathFillMode
GdipDeletePath
GdipCreatePath
GdipFree
GdipAlloc
GdipCreatePen1
GdipCreateLineBrush
GdipCreatePen2
GdipDeletePen
GdipGetImageGraphicsContext
GdipGetImageType
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHICON
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipDeleteGraphics
GdipDrawImageRect
GdipCreateFontFamilyFromName
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipDeleteFont
GdipCreateStringFormat
GdipSetPenDashArray
GdipDeleteStringFormat
oleacc
LresultFromObject
AccessibleObjectFromWindow
comdlg32
GetFileTitleA
winspool.drv
ord201
ClosePrinter
DeviceCapabilitiesA
DocumentPropertiesA
EnumPrintersA
OpenPrinterA
Sections
.text Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 513KB - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 572KB - Virtual size: 571KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ