Static task
static1
Behavioral task
behavioral1
Sample
aaac3f33d6f6c1eee03a0c62aa8fd3a4db6d077d4d2e40b5941677b023df501d.exe
Resource
win7-20231020-en
windows7-x64
Behavioral task
behavioral2
Sample
aaac3f33d6f6c1eee03a0c62aa8fd3a4db6d077d4d2e40b5941677b023df501d.exe
Resource
win10v2004-20231127-en
windows10-2004-x64
General
-
Target
aaac3f33d6f6c1eee03a0c62aa8fd3a4db6d077d4d2e40b5941677b023df501d
-
Size
11.4MB
-
MD5
d2758e986ffb7b4512ef88a10e0bca54
-
SHA1
7429cc7f5d47bf8e332dd060c319bdb7f7ef6bb1
-
SHA256
aaac3f33d6f6c1eee03a0c62aa8fd3a4db6d077d4d2e40b5941677b023df501d
-
SHA512
12061aa3d2fe04f08daac752e536049838f3efd688f28d135740f79997155681bcd7ae148b71ddf9675a7a042dac197242c52a330dc9c57d287716db9bd7e217
-
SSDEEP
196608:rFgrp6Y+sXadz4RLGzOyelr//EwajqeZl:rQN+zEEOjV/8tjvZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aaac3f33d6f6c1eee03a0c62aa8fd3a4db6d077d4d2e40b5941677b023df501d
Files
-
aaac3f33d6f6c1eee03a0c62aa8fd3a4db6d077d4d2e40b5941677b023df501d.exe windows:6 windows x86 arch:x86
ec02ba9c189c890ea1721aaecfb0c4fd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
elementskill
?GetExecuteTime@ElementSkill@GNET@@SAHIH@Z
?GetComboSkActivated@ElementSkill@GNET@@SAXABUComboSkillState@2@AAV?$vector@U?$pair@IH@std@@V?$allocator@U?$pair@IH@std@@@2@@std@@@Z
?SetAbility@ElementSkill@GNET@@SAHIH@Z
?SetLevel@ElementSkill@GNET@@SAHIH@Z
?LoadSkillData@ElementSkill@GNET@@SAXPAX@Z
?IsMovingSkill@ElementSkill@GNET@@SA_NI@Z
?Condition@ElementSkill@GNET@@SAHIAAUUseRequirement@2@H@Z
?PetLearn@ElementSkill@GNET@@SAHIAAUPetRequirement@2@H@Z
?GetAbilityPercent@ElementSkill@GNET@@SAHI@Z
?GetName@ElementSkill@GNET@@SAPB_WI@Z
?GetCommonCoolDown@ElementSkill@GNET@@SAHI@Z
?Query@VisibleState@GNET@@SAPBV12@HH@Z
?LearnCondition@ElementSkill@GNET@@SAHIAAULearnRequirement@2@H@Z
?GoblinCondition@ElementSkill@GNET@@SAHIAAUGoblinUseRequirement@2@H@Z
?GoblinLearn@ElementSkill@GNET@@SAHIAAUGoblinRequirement@2@H@Z
?Destroy@ElementSkill@GNET@@QAEXXZ
?Create@ElementSkill@GNET@@SAPAV12@IH@Z
?InitStaticData@ElementSkill@GNET@@SAXXZ
?GetComboSkPreSkill@ElementSkill@GNET@@SAHI@Z
?GetInherentSkills@ElementSkill@GNET@@SAABV?$vector@IV?$allocator@I@std@@@std@@H@Z
?GetEffect@ElementSkill@GNET@@SAPBDI@Z
?GetRequiredBook@ElementSkill@GNET@@SAHIH@Z
?GetNativeName@ElementSkill@GNET@@SAPBDI@Z
?NextSkill@ElementSkill@GNET@@SAII@Z
?GetMaxAbility@ElementSkill@GNET@@SAHIH@Z
?GetRequiredRealmLevel@ElementSkill@GNET@@SAHIH@Z
?GetRequiredLevel@ElementSkill@GNET@@SAHIH@Z
?IsOverridden@ElementSkill@GNET@@SA_NI@Z
?GetType@ElementSkill@GNET@@SADI@Z
?IsGoblinSkill@ElementSkill@GNET@@SA_NI@Z
?Query@TeamState@GNET@@SAPBV12@H@Z
?GetRequiredMoney@ElementSkill@GNET@@SAHIH@Z
?GetRequiredSp@ElementSkill@GNET@@SAHIH@Z
?GetIcon@ElementSkill@GNET@@SAPBDI@Z
?GetAbility@ElementSkill@GNET@@SAHI@Z
?GetVersion@ElementSkill@GNET@@SAHXZ
ftdriver
?CreateFTManager@@YAPAVIFTManager@@HHH@Z
d3d9
Direct3DCreate9
d3dx9_43
D3DXCreateBuffer
D3DXAssembleShader
D3DXLoadSurfaceFromSurface
D3DXGetImageInfoFromFileA
D3DXQuaternionRotationMatrix
D3DXMatrixRotationQuaternion
D3DXLoadSurfaceFromFileInMemory
D3DXSaveTextureToFileA
D3DXCreateTextureFromFileInMemoryEx
D3DXGetImageInfoFromFileInMemory
D3DXMatrixOrthoOffCenterLH
D3DXMatrixPerspectiveFovLH
D3DXMatrixLookAtLH
D3DXMatrixRotationAxis
D3DXMatrixMultiply
D3DXSaveSurfaceToFileA
D3DXPlaneTransform
D3DXVec3TransformCoord
D3DXMatrixShadow
dsound
ord11
ws2_32
select
setsockopt
socket
inet_addr
getsockname
__WSAFDIsSet
closesocket
send
recv
ntohs
htons
ioctlsocket
connect
bind
gethostbyname
sendto
WSAGetLastError
inet_ntoa
WSACleanup
WSAStartup
imm32
ImmSetCompositionWindow
ImmNotifyIME
ImmGetCompositionStringW
ImmAssociateContext
ImmReleaseContext
ImmSetCandidateWindow
ImmGetCandidateListW
ImmGetContext
ImmGetProperty
ImmGetDescriptionW
ImmIsIME
glu32
gluTessProperty
gluTessEndPolygon
gluTessEndContour
gluTessVertex
gluTessBeginContour
gluTessBeginPolygon
gluDeleteTess
gluNewTess
gluTessCallback
ddraw
DirectDrawCreate
shlwapi
PathFileExistsA
PathFindExtensionA
StrToIntW
PathFileExistsW
PathAppendW
PathFindFileNameA
wininet
InternetOpenA
HttpOpenRequestA
HttpSendRequestA
InternetCloseHandle
InternetOpenUrlW
HttpQueryInfoA
InternetConnectA
HttpAddRequestHeadersA
InternetReadFile
winmm
timeGetTime
speedtreert
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
??3CSpeedTreeRT@@SAXPAX@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?GetDiscreteLeafLodLevel@CSpeedTreeRT@@QBEGM@Z
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
??2CSpeedTreeRT@@SAPAXI@Z
??1CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0SGeometry@CSpeedTreeRT@@QAE@XZ
?Authorize@CSpeedTreeRT@@SAXPBD@Z
?SetTime@CSpeedTreeRT@@SAXM@Z
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
kernel32
InterlockedPushEntrySList
InterlockedPopEntrySList
EncodePointer
GetSystemTimeAsFileTime
GetStartupInfoW
VirtualAlloc
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
LoadLibraryExA
InitializeSListHead
VirtualFree
SetFilePointer
GetFileAttributesW
FormatMessageA
GlobalSize
GlobalReAlloc
GetCommandLineA
IsDBCSLeadByte
GetWindowsDirectoryA
GlobalFree
LocalAlloc
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
WinExec
QueryPerformanceFrequency
QueryPerformanceCounter
IsDBCSLeadByteEx
SetThreadPriorityBoost
SetThreadPriority
SignalObjectAndWait
GetDiskFreeSpaceA
IsDebuggerPresent
SetCurrentDirectoryA
CreateNamedPipeW
ConnectNamedPipe
WriteFile
GetCommandLineW
lstrcpyW
CreateFileW
GetFileAttributesA
OpenFile
CreateSemaphoreW
ReleaseSemaphore
WritePrivateProfileStringW
GetPrivateProfileStringW
FindClose
ReadFile
CopyFileA
GetExitCodeThread
WaitForMultipleObjects
ResetEvent
GetFileSize
lstrcmpiW
GetCurrentDirectoryA
GetCurrentDirectoryW
CreateDirectoryA
DeleteFileA
FindFirstFileA
FindNextFileA
OutputDebugStringW
CloseHandle
DuplicateHandle
GetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
WaitForSingleObject
CreateMutexA
CreateEventW
Sleep
GetCurrentProcess
GetCurrentProcessId
ExitProcess
CreateThread
GetCurrentThread
GetCurrentThreadId
SuspendThread
ResumeThread
CreateProcessW
GetVersion
GetVersionExW
GetPrivateProfileIntA
GetPrivateProfileStringA
CreateToolhelp32Snapshot
Process32First
Process32Next
OutputDebugStringA
DecodePointer
RaiseException
InitializeCriticalSectionEx
VirtualProtect
FreeLibrary
GetProcAddress
LoadLibraryA
GetLocalTime
GetTickCount
WideCharToMultiByte
GetModuleHandleA
HeapAlloc
HeapFree
GetProcessHeap
OpenProcess
GetSystemTime
VirtualQueryEx
SystemTimeToFileTime
TerminateProcess
ReadProcessMemory
CreateFileA
DeviceIoControl
GlobalMemoryStatusEx
GetSystemInfo
GlobalMemoryStatus
lstrlenA
GetComputerNameW
GetModuleHandleW
LoadLibraryW
FlushInstructionCache
ReleaseMutex
CreateMutexW
IsBadReadPtr
IsBadWritePtr
SetCurrentDirectoryW
MultiByteToWideChar
GlobalAlloc
GlobalUnlock
GlobalLock
InitializeCriticalSectionAndSpinCount
ExitThread
GetModuleFileNameA
SetLastError
QueueUserAPC
GetModuleFileNameW
LoadLibraryExW
LoadResource
SizeofResource
FindResourceW
MulDiv
lstrcmpW
user32
SetWindowLongA
ShowWindow
MoveWindow
SetCapture
ReleaseCapture
GetSystemMetrics
UpdateWindow
SetForegroundWindow
AdjustWindowRect
MessageBoxA
SetCursor
FindWindowW
LoadCursorW
LoadIconW
PostMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
UnregisterClassW
IsWindow
GetAsyncKeyState
GetForegroundWindow
BeginPaint
EndPaint
InvalidateRect
GetWindowThreadProcessId
ChangeDisplaySettingsW
GetGUIThreadInfo
GetWindowRect
IsRectEmpty
PtInRect
FindWindowA
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
GetWindowTextA
EnumWindows
GetClassNameA
GetTopWindow
GetWindow
GetKeyState
GetDC
ReleaseDC
SetCursorPos
ClientToScreen
GetCapture
GetCursorPos
ScreenToClient
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
SetWindowPos
IsWindowVisible
IsIconic
IsZoomed
IsWindowEnabled
GetWindowTextW
GetWindowLongW
GetClassNameW
GetClientRect
DefWindowProcW
RegisterClassExW
RegisterClipboardFormatW
WindowFromDC
CreateWindowExA
EnumThreadWindows
GetWindowDC
IsWindowUnicode
CreateCaret
SetCaretPos
GetClipboardData
GetKeyboardLayout
SetRect
IntersectRect
DestroyCursor
LoadCursorFromFileA
wsprintfW
AdjustWindowRectEx
PostQuitMessage
GetAncestor
GetParent
GetDesktopWindow
SetWindowLongW
CreateWindowExW
FillRect
GetSysColor
MessageBoxW
GetWindowTextLengthW
SetWindowTextW
RedrawWindow
InvalidateRgn
DestroyAcceleratorTable
CreateAcceleratorTableW
KillTimer
SetTimer
keybd_event
GetFocus
SetFocus
CharNextW
GetDlgItem
DestroyWindow
IsChild
GetClassInfoExW
CallWindowProcW
GetMessageW
RegisterWindowMessageW
GetMenuBarInfo
EnumChildWindows
SetActiveWindow
GetActiveWindow
SendMessageW
gdi32
EnumFontFamiliesExW
CreatePolygonRgn
PtInRegion
CreateFontIndirectW
GetDIBits
TextOutA
SetMapMode
GetTextExtentPoint32W
CreateFontW
ExtTextOutW
GetGlyphOutlineW
SetTextColor
SetBkColor
SelectObject
GetDeviceCaps
DeleteDC
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectW
CreateDIBSection
DeleteObject
BitBlt
GetStockObject
SetTextAlign
CreateEllipticRgn
shell32
SHGetFolderPathW
ShellExecuteA
Shell_NotifyIconW
ShellExecuteExA
SHOpenFolderAndSelectItems
ShellExecuteW
ole32
OleUninitialize
CoTaskMemFree
OleLockRunning
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoGetClassObject
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
OleInitialize
oleaut32
OleCreateFontIndirect
DispCallFunc
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
SysFreeString
SysAllocString
SysAllocStringLen
SysStringLen
VariantInit
VariantClear
VariantCopy
advapi32
RegSetValueExW
GetUserNameW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
SystemFunction036
OpenProcessToken
OpenThreadToken
AdjustTokenPrivileges
LookupPrivilegeValueW
msvcp140
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
_Thrd_join
_Thrd_hardware_concurrency
_Thrd_id
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_broadcast
_Cnd_do_broadcast_at_thread_exit
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Xbad_function_call@std@@YAXXZ
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
_Cnd_signal
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Syserror_map@std@@YAPBDH@Z
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?uncaught_exception@std@@YA_NXZ
?_Random_device@std@@YAIXZ
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?id@?$ctype@_W@std@@2V0locale@2@A
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
urlmon
URLDownloadToFileW
vcruntime140
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
memchr
memcpy
memmove
memset
__RTDynamicCast
_purecall
_local_unwind4
wcschr
wcsstr
strrchr
wcsrchr
__std_type_info_name
strchr
longjmp
strstr
_setjmp3
__current_exception_context
__current_exception
_except_handler4_common
api-ms-win-crt-runtime-l1-1-0
_configure_wide_argv
system
_register_thread_local_exe_atexit_callback
_c_exit
_set_app_type
_initialize_onexit_table
_beginthreadex
_register_onexit_function
_controlfp_s
strerror
_crt_atexit
terminate
_exit
_initterm_e
exit
_initterm
_cexit
_invalid_parameter_noinfo
_errno
_resetstkoflw
_invalid_parameter_noinfo_noreturn
_beginthread
_seh_filter_exe
_initialize_wide_environment
_get_wide_winmain_command_line
api-ms-win-crt-stdio-l1-1-0
setvbuf
ungetc
fputs
__stdio_common_vswprintf_s
fgetwc
fgetws
__p__commode
_set_fmode
__stdio_common_vswscanf
__stdio_common_vfwprintf
fclose
feof
fgets
setbuf
_fileno
ftell
fopen
__stdio_common_vsprintf
__stdio_common_vswprintf
fflush
__stdio_common_vfscanf
fseek
ferror
freopen
getc
fwrite
tmpnam
__stdio_common_vsscanf
fread
_wfopen
__acrt_iob_func
__stdio_common_vfprintf
tmpfile
_popen
clearerr
_pclose
api-ms-win-crt-filesystem-l1-1-0
_wremove
remove
_rmdir
_mkdir
_findclose
_findnext32
_findfirst32
_splitpath
rename
_fstat32
_access
_stat32
api-ms-win-crt-math-l1-1-0
log10
tan
log
atan2
fabs
sqrt
_isnan
asin
exp
__setusermatherr
cos
ldexp
atan
tanh
sinh
cosh
ceil
floor
pow
acos
fmod
modf
frexp
sin
api-ms-win-crt-heap-l1-1-0
calloc
_set_new_mode
_recalloc
free
malloc
realloc
api-ms-win-crt-convert-l1-1-0
strtod
strtoul
atoi
atof
_wtoi
atol
_itow
_itoa
api-ms-win-crt-time-l1-1-0
_localtime32
_mktime32
_gmtime32
clock
_time32
strftime
asctime
_difftime32
api-ms-win-crt-utility-l1-1-0
qsort
rand
srand
api-ms-win-crt-string-l1-1-0
isalnum
isalpha
strcoll
iscntrl
_strupr
_strnicmp
_wcsicmp
isspace
isupper
islower
isxdigit
ispunct
toupper
tolower
strpbrk
isdigit
wcsncpy
strncat
_strlwr
wcsncpy_s
wcsncmp
strcpy_s
_stricmp
strncmp
strncpy
wcsncat
_wcslwr
_wcsupr
strcspn
iswdigit
api-ms-win-crt-locale-l1-1-0
setlocale
localeconv
_configthreadlocale
api-ms-win-crt-environment-l1-1-0
getenv
Sections
.text Size: 8.9MB - Virtual size: 8.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 214KB - Virtual size: 433KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 353KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 587KB - Virtual size: 587KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ