Static task
static1
Behavioral task
behavioral1
Sample
ccb9291751bdd7a8d35d343fe683429c6584c4ba4b8028b2287e86b773b7e2ed.exe
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral2
Sample
ccb9291751bdd7a8d35d343fe683429c6584c4ba4b8028b2287e86b773b7e2ed.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
General
-
Target
ccb9291751bdd7a8d35d343fe683429c6584c4ba4b8028b2287e86b773b7e2ed
-
Size
7.3MB
-
MD5
feb92baaf9425258872ed0ccc1f1c662
-
SHA1
64630d1414881b0157fd7890dcd198a2fadebe14
-
SHA256
ccb9291751bdd7a8d35d343fe683429c6584c4ba4b8028b2287e86b773b7e2ed
-
SHA512
159598950ada04aedaf6f2080f9e700ef1c0574dc418531c5124ea75cc0547f187c30a0b9110b00de0739f78871114ea60b87eb59abacce6bc082e3838df5cd8
-
SSDEEP
98304:CBaKvRi0O7DXBDk5f6Z7qY45z+nzYLtjoxpKXpG7lEJ1iCKMkQIBY:Q1s0OXa56YjptjOAXpG7WJnKMkXY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ccb9291751bdd7a8d35d343fe683429c6584c4ba4b8028b2287e86b773b7e2ed
Files
-
ccb9291751bdd7a8d35d343fe683429c6584c4ba4b8028b2287e86b773b7e2ed.exe windows:5 windows x86
8bf9c80dea55df213cd020ca36bdffdc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
updateagent
update_agent_global_init
update_agent_global_cleanup
update_agent_setopt
bull140u
?AssertOut@BULL@@YAJPB_WH_N0@Z
?GuidToString@BULL@@YAPA_WABU_GUID@@@Z
?LoadModuleInfo@BULL@@YAJPB_W@Z
?CreateObjectNative@BULL@@YAJABU_GUID@@0PAPAX@Z
?XLogMonitor@BULL@@YAJ_KPB_W11@Z
?XLogV@BULL@@YAXIPB_W0PAD@Z
?MultiByteToWideChar@BULL@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@IPBD@Z
?_wtoui@@YAIPB_W@Z
?CreateGuid@BULL@@YA?AU_GUID@@XZ
?RegisterObject@BULL@@YAJABU_GUID@@0P6GJPAX0PAPAX@ZPB_W@Z
?Base64Decode@BULL@@YAJPA_WPAPAUIGeneralBuffer@1@@Z
?Base64Encode@BULL@@YAJPAUIGeneralBuffer@1@PAPA_WK@Z
?MD5@BULL@@YAJPAUIGeneralBuffer@1@PAPAU21@@Z
?KillTimer_s@BULL@@YAXK@Z
?KillTimer@BULL@@YAJK@Z
?SetTimer@BULL@@YAJK_NPAUICallbackTimer@1@KPAK@Z
?EnableNamedObject@BULL@@YAJPA_WABU_GUID@@@Z
?GetModuleVer@BULL@@YAJPA_WPAPA_W1@Z
?GetLogController@BULL@@YAJPAPAUILogController@1@@Z
?GetNamedObject@BULL@@YAJPA_WABU_GUID@@1PAPAX@Z
apputil
?Parse@JsonLib@@YAJPA_WPAPAUIGeneralData@BULL@@@Z
?TransformUtf8HttpMemoryBlockToBSTR@Misc@AppUtil@@YAJPAUIHttpMemoryBlock@BULL@@PAPA_W@Z
?TransformUtf8StringToWString@Misc@AppUtil@@YAJV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@AAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@4@@Z
?GetUrl@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H0AAV23@@Z
?GetValueByKey@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0AAH@Z
?GetValueByKey@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0AAV23@H@Z
?TransformWStringToUtf8String@Misc@AppUtil@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@4@@Z
?CurlIsIPV6@Misc@AppUtil@@YAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?GetValueByKey@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0AAI@Z
?GetValueByKey@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0AA_J@Z
?VersionInfoDecode@Misc@AppUtil@@YAJPAPA_WH@Z
?GetChannelInfo@Misc@AppUtil@@YAJPAPA_W@Z
?GetTeraBoxTempPath@Misc@AppUtil@@YAJPAPA_W@Z
?IsAllAUPackageReady@Misc@AppUtil@@YAHAAH@Z
?IsAutoUpdate@Misc@AppUtil@@YAHXZ
GetInt64FromJsonDataShim
?GetUrl@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H00AAV23@@Z
?TransformUtf8BufferToBSTR@Misc@AppUtil@@YAJPAUIGeneralBuffer@BULL@@PAPA_W@Z
?GetCurrentLangId@Misc@AppUtil@@YAJAAK@Z
?CurURLDecode@Misc@AppUtil@@YAJPBDAAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z
?GetDomain@HelpAppSetting@@YAJAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?CurURLEncode@Misc@AppUtil@@YAJPBDAAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z
?Parse@JsonLib@@YAJPA_WPAPAUIGeneralArray@BULL@@@Z
?GetProxyInfo@HelpProxySetting@@YAJPAKPAPA_WPAG@Z
?SetProxyInfo@HelpProxySetting@@YAJKPA_WG@Z
?IsAutoRun@Misc@AppUtil@@YAHXZ
?SetAutoRun@Misc@AppUtil@@YAJH@Z
?SetValueByKey@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0H@Z
?CurURLEncode@Misc@AppUtil@@YAJPB_WAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?JsonEncode@JsonLib@@YAJPAUIGeneralData@BULL@@AAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z
?IsNeedAutoUpdate@Misc@AppUtil@@YAHXZ
?GetLangDuiStringTableId@Misc@AppUtil@@YAJAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?GetUpdateLevel@Misc@AppUtil@@YAJPAH@Z
?GetForceUpdateContent@Misc@AppUtil@@YAJPAPA_W00@Z
?IsTeraBoxDomain@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAH@Z
?TransUidToString@Misc@AppUtil@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV34@@Z
kernel32
GlobalAlloc
MulDiv
lstrcmpW
Sleep
GetDiskFreeSpaceExW
VerifyVersionInfoW
VerSetConditionMask
CreateFileW
GetFileSize
LoadLibraryExW
WriteFile
lstrlenW
GetTempPathW
DeleteFileW
GlobalFree
GetDriveTypeW
SetThreadExecutionState
OpenProcess
VirtualAllocEx
ReadProcessMemory
VirtualFreeEx
LocalFree
WriteProcessMemory
CreateEventW
GetPrivateProfileIntW
VirtualAlloc
VirtualFree
FindClose
GetFullPathNameW
FindFirstFileW
FindNextFileW
GetExitCodeProcess
OpenMutexW
WaitForSingleObjectEx
ReleaseMutex
CreateMutexW
OpenFileMappingW
GetTempFileNameW
VirtualQuery
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
OpenEventW
SetEvent
GetSystemDirectoryW
GetLogicalDrives
WinExec
GetSystemTime
ExpandEnvironmentStringsW
GetSystemInfo
GetCurrentProcess
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
EncodePointer
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
LoadLibraryExA
VirtualProtect
LoadLibraryA
GetModuleHandleA
RemoveDirectoryW
MoveFileExW
GlobalLock
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
DeleteFiber
ConvertFiberToThread
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
HeapCreate
InitializeCriticalSection
lstrcmpiW
lstrcpyW
DosDateTimeToFileTime
SetFilePointer
GetModuleHandleW
SetLastError
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
RaiseException
MultiByteToWideChar
WideCharToMultiByte
GetLastError
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryW
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
WaitForSingleObject
CreateProcessW
GetThreadContext
Thread32Next
CloseHandle
SuspendThread
OpenThread
Thread32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetVersionExW
GetEnvironmentVariableW
GetCurrentThreadId
SetUnhandledExceptionFilter
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
ResetEvent
GlobalUnlock
DecodePointer
GetStdHandle
SetErrorMode
ReadFile
FreeResource
user32
DeferWindowPos
EndDeferWindowPos
OemToCharBuffW
DestroyIcon
SetForegroundWindow
AttachThreadInput
GetActiveWindow
AllowSetForegroundWindow
CharLowerBuffW
PeekMessageW
LoadImageW
LoadIconW
UnregisterHotKey
SetClipboardData
SetActiveWindow
UnhookWinEvent
SetWinEventHook
ClipCursor
ShowCursor
GetCursorInfo
GetDoubleClickTime
GetShellWindow
GetForegroundWindow
FindWindowExW
UpdateWindow
GetWindowDC
RegisterHotKey
EnumChildWindows
RegisterClipboardFormatW
KillTimer
SetTimer
EmptyClipboard
ChangeClipboardChain
BeginDeferWindowPos
SetClipboardViewer
GetClipboardOwner
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
GetKeyState
UnionRect
SetRectEmpty
SetCursor
GetCursorPos
SystemParametersInfoW
TrackMouseEvent
GetWindowThreadProcessId
MonitorFromPoint
FindWindowW
DrawTextW
FrameRect
MapWindowPoints
GetMonitorInfoW
MonitorFromWindow
CopyRect
IsIconic
mouse_event
SetCursorPos
GetSystemMetrics
IsWindowVisible
EnableWindow
MessageBeep
IsZoomed
GetWindowRect
ShowWindow
SendMessageTimeoutW
RegisterWindowMessageW
GetWindowTextLengthW
BeginPaint
EndPaint
MapVirtualKeyA
GetMenuItemInfoW
TrackPopupMenu
AppendMenuW
InsertMenuW
DestroyMenu
CreatePopupMenu
IsMenu
EnableMenuItem
DrawIconEx
SetCaretPos
GetCaretBlinkTime
CreateCaret
EndMenu
SetLayeredWindowAttributes
PrintWindow
UpdateLayeredWindow
AnimateWindow
PostThreadMessageW
DispatchMessageW
IsChild
GetFocus
DefWindowProcW
CallWindowProcW
PostMessageW
RegisterClassExW
GetClassInfoExW
LoadCursorW
CreateWindowExW
SendMessageW
SetWindowPos
IsWindow
DestroyWindow
SetWindowLongW
GetWindowLongW
GetParent
GetWindow
GetClientRect
InvalidateRect
MessageBoxW
UnregisterClassW
SetRect
IsRectEmpty
PtInRect
ClientToScreen
ScreenToClient
GetDC
ReleaseDC
SetCapture
TranslateMessage
GetMessageW
EqualRect
GetDlgItem
GetClassNameW
GetSysColor
OffsetRect
InflateRect
SetFocus
IntersectRect
SetWindowTextW
GetWindowTextW
MoveWindow
CharNextW
DestroyAcceleratorTable
GetDesktopWindow
IsWindowEnabled
InvalidateRgn
FillRect
ReleaseCapture
CreateAcceleratorTableW
RedrawWindow
WaitForInputIdle
GetProcessWindowStation
GetUserObjectInformationW
gdi32
CreateFontIndirectW
CreateBitmap
GetTextMetricsW
GetTextColor
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
SetBkColor
SetTextColor
CreateDIBitmap
GetObjectA
GetViewportOrgEx
LineTo
RoundRect
CreateDIBSection
ExtCreatePen
MoveToEx
TextOutW
SaveDC
RestoreDC
Rectangle
RectInRegion
GetObjectType
SelectObject
BitBlt
GetStockObject
GetClipRgn
ExcludeClipRect
CreateRectRgn
GetObjectW
GetDeviceCaps
GetClipBox
CreateRectRgnIndirect
OffsetViewportOrgEx
GetTextExtentPoint32W
GetTextExtentPointW
StretchBlt
GetRgnBox
GetCurrentObject
CombineRgn
SetViewportOrgEx
DeleteDC
CreatePen
ExtTextOutW
SetBkMode
ExtSelectClipRgn
SelectClipRgn
DeleteObject
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
CryptGetUserKey
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
DeregisterEventSource
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptDestroyHash
CryptSignHashW
CryptEnumProvidersW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegEnumKeyW
RegEnumValueW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegisterEventSourceW
shell32
SHGetSpecialFolderPathW
SHGetDesktopFolder
SHGetPathFromIDListW
ord4
Shell_NotifyIconW
SHGetSpecialFolderLocation
DragFinish
SHChangeNotify
DragQueryFileW
SHAppBarMessage
ShellExecuteExW
SHBrowseForFolderW
ord2
SHGetMalloc
SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW
ShellExecuteW
CommandLineToArgvW
ole32
CreateBindCtx
CoFreeLibrary
CoLoadLibrary
OleSetContainedObject
CreateOleAdviseHolder
StgCreateDocfile
OleDuplicateData
DoDragDrop
ReleaseStgMedium
RevokeDragDrop
CLSIDFromString
CoCreateInstance
CoSetProxyBlanket
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoUninitialize
OleUninitialize
CoInitializeEx
OleInitialize
StringFromGUID2
OleLockRunning
CreateStreamOnHGlobal
CoGetClassObject
CLSIDFromProgID
RegisterDragDrop
oleaut32
SafeArrayGetLBound
SafeArrayGetVartype
SafeArrayUnlock
SafeArrayLock
SafeArrayDestroy
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysAllocStringLen
VarUI4FromStr
OleCreateFontIndirect
SysAllocStringByteLen
SysStringByteLen
VarBstrCmp
VariantClear
VariantInit
SysAllocString
SysFreeString
GetErrorInfo
SafeArrayGetUBound
shlwapi
SHDeleteKeyW
ord219
StrCmpLogicalW
StrToIntW
StrToIntExA
StrStrIW
PathAppendW
comctl32
InitCommonControlsEx
msvcp140
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?classic@locale@std@@SAABV12@XZ
?_Xruntime_error@std@@YAXPBD@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
??0_Locinfo@std@@QAE@HPBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?id@?$numpunct@D@std@@2V0locale@2@A
?uncaught_exception@std@@YA_NXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??0_Locinfo@std@@QAE@PBD@Z
??1_Lockit@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@PBD3@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
_Strxfrm
_Strcoll
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?id@?$collate@D@std@@2V0locale@2@A
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_BADOFF@std@@3_JB
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
gdiplus
GdipImageGetFrameDimensionsCount
GdipImageRotateFlip
GdipDrawImageRectRectI
GdipFillRectangleI
GdipSetCompositingMode
GdipSetImageAttributesWrapMode
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipImageGetFrameDimensionsList
GdipLoadImageFromStreamICM
GdipLoadImageFromFile
GdipLoadImageFromStream
GdipCreateTexture2I
GdipDeleteBrush
GdipCloneBrush
GdiplusShutdown
GdiplusStartup
GdipGetPropertyItemSize
GdipLoadImageFromFileICM
GdipGetPropertyItem
GdipDrawImageRectI
GdipImageSelectActiveFrame
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetSmoothingMode
GdipCreatePen1
GdipDeletePen
GdipDrawArcI
GdipCreateBitmapFromHBITMAP
GdipFree
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipSaveImageToFile
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipImageGetFrameCount
crypt32
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertGetNameStringW
CertDuplicateCertificateContext
wintrust
WinVerifyTrust
WTHelperProvDataFromStateData
WTHelperGetProvCertFromChain
WTHelperGetProvSignerFromChain
ws2_32
closesocket
WSASetLastError
send
recv
WSAGetLastError
WSACleanup
urlmon
UrlMkSetSessionOption
UrlMkGetSessionOption
psapi
EnumProcesses
GetModuleBaseNameW
wininet
InternetSetCookieExW
FindFirstUrlCacheEntryW
InternetSetCookieW
FindCloseUrlCache
DeleteUrlCacheEntryW
FindNextUrlCacheEntryW
winmm
PlaySoundW
vcruntime140
memset
__vcrt_InitializeCriticalSectionEx
__CxxFrameHandler3
_except_handler4_common
_CxxThrowException
memcmp
strrchr
strstr
__RTDynamicCast
memcpy
wcschr
memchr
strchr
__std_exception_copy
__std_exception_destroy
_purecall
wcsstr
wcsrchr
memmove
__std_terminate
api-ms-win-crt-runtime-l1-1-0
strerror
_invalid_parameter_noinfo_noreturn
raise
strerror_s
_c_exit
_invalid_parameter_noinfo
_initialize_onexit_table
_register_onexit_function
terminate
_controlfp_s
_set_invalid_parameter_handler
_control87
_register_thread_local_exe_atexit_callback
_crt_atexit
_cexit
_exit
exit
_seh_filter_exe
_initterm_e
_set_app_type
_configure_wide_argv
_initialize_wide_environment
_errno
_get_wide_winmain_command_line
signal
_initterm
api-ms-win-crt-string-l1-1-0
isblank
strncmp
isprint
isdigit
_wcsicmp
iswxdigit
wcscat_s
iswprint
wcscspn
wcsspn
iswdigit
_wcsnicmp
wcsncmp
strcmp
iswalpha
wcstok
strcpy_s
strnlen
wcsnlen
strcpy
_wcsdup
wcsncpy
_stricmp
wcscpy
_strnicmp
strncpy
strcspn
strspn
wcscpy_s
wmemcpy_s
wcscmp
wcsncpy_s
iswspace
_wcslwr_s
_wcsupr_s
wcslen
isspace
strcat
strlen
iswalnum
api-ms-win-crt-stdio-l1-1-0
__p__commode
__stdio_common_vsprintf
fgetc
fputs
fputc
ungetc
__stdio_common_vsscanf
fflush
setvbuf
fsetpos
_wfopen
_set_fmode
_fseeki64
fgetpos
fwrite
_get_stream_buffer_pointers
fclose
ferror
__stdio_common_vswprintf_s
fopen
_setmode
__acrt_iob_func
__stdio_common_vswscanf
_wfopen_s
__stdio_common_vswprintf
__stdio_common_vfwprintf
ftell
__stdio_common_vsnwprintf_s
fseek
__stdio_common_vsprintf_s
fread
_fileno
fgets
feof
__stdio_common_vfprintf
api-ms-win-crt-time-l1-1-0
_localtime64_s
wcsftime
_mktime64
_gmtime64_s
_time64
api-ms-win-crt-heap-l1-1-0
_set_new_mode
realloc
free
malloc
_recalloc
calloc
_callnewh
api-ms-win-crt-multibyte-l1-1-0
_mbsicmp
_mbscmp
_mbsrchr
_mbslwr_s
api-ms-win-crt-convert-l1-1-0
_wtoi64
_atoi64
atoi
atof
wcstol
strtoul
_wtoi
strtol
api-ms-win-crt-filesystem-l1-1-0
_stat64i32
_wfindnext64i32
_findclose
_wrmdir
_lock_file
_unlock_file
_wfindfirst64i32
_wremove
_waccess
api-ms-win-crt-utility-l1-1-0
rand
srand
div
qsort
bsearch
labs
abs
api-ms-win-crt-math-l1-1-0
__setusermatherr
_CIfmod
_except1
fabs
_libm_sse2_cos_precise
_libm_sse2_log10_precise
_libm_sse2_pow_precise
ceil
_libm_sse2_sin_precise
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-environment-l1-1-0
getenv
bcrypt
BCryptGenRandom
imm32
ImmAssociateContext
ImmReleaseContext
ImmGetContext
msimg32
GradientFill
AlphaBlend
Sections
.text Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 148KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 904KB - Virtual size: 904KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 299KB - Virtual size: 299KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE