Static task
static1
Behavioral task
behavioral1
Sample
5b52397ebe7f4b43e1cec7b8ea956e3420d4acfbdd7a772b9f67c70da5587c28.exe
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral2
Sample
5b52397ebe7f4b43e1cec7b8ea956e3420d4acfbdd7a772b9f67c70da5587c28.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
General
-
Target
5b52397ebe7f4b43e1cec7b8ea956e3420d4acfbdd7a772b9f67c70da5587c28
-
Size
11.2MB
-
MD5
1bfead6b7e945965296d7fe7be35ea82
-
SHA1
6d392847ce28c52d451ca303974257a2e4d912bc
-
SHA256
5b52397ebe7f4b43e1cec7b8ea956e3420d4acfbdd7a772b9f67c70da5587c28
-
SHA512
74953c7a5975e9f95ed777d8e4a21ab9795dc3c75e140b0e0d0b0cb9c3c97eef4b712713b3df65ef460d3e8928153dfc3b3d72d7a4f9885392c9f9136ff1a972
-
SSDEEP
196608:nkvhAQZhQW72b4nbwbXaQUIithNNmiak7tpUfTBD7:nkvVWb4n8bXaQVspG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b52397ebe7f4b43e1cec7b8ea956e3420d4acfbdd7a772b9f67c70da5587c28
Files
-
5b52397ebe7f4b43e1cec7b8ea956e3420d4acfbdd7a772b9f67c70da5587c28.exe windows:6 windows x86 arch:x86
354d7aaa91140898ce2fa54f016e7925
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
elementskill
?PetLearn@ElementSkill@GNET@@SAHIAAUPetRequirement@2@H@Z
?LearnCondition@ElementSkill@GNET@@SAHIAAULearnRequirement@2@H@Z
?GetGlyphType@ElementSkill@GNET@@SAHI@Z
?GetAbilityPercent@ElementSkill@GNET@@SAHI@Z
?Condition@ElementSkill@GNET@@SAHIAAUUseRequirement@2@HH@Z
?Destroy@ElementSkill@GNET@@QAEXXZ
?GetVersion@ElementSkill@GNET@@SAHXZ
?GoblinLearn@ElementSkill@GNET@@SAHIAAUGoblinRequirement@2@H@Z
?GetComboSkActivated@ElementSkill@GNET@@SAXABUComboSkillState@2@AAV?$vector@U?$pair@IH@std@@V?$allocator@U?$pair@IH@std@@@2@@std@@@Z
?Query@VisibleState@GNET@@SAPBV12@HH@Z
?GetCommonCoolDown@ElementSkill@GNET@@SAHI@Z
?GetName@ElementSkill@GNET@@SAPB_WI@Z
?GetExecuteTime@ElementSkill@GNET@@SAHIH@Z
?SetAbility@ElementSkill@GNET@@SAHIH@Z
?LoadSkillData@ElementSkill@GNET@@SAXPAX@Z
?SetLevel@ElementSkill@GNET@@SAHIH@Z
?GoblinCondition@ElementSkill@GNET@@SAHIAAUGoblinUseRequirement@2@H@Z
?GetIcon@ElementSkill@GNET@@SAPBDI@Z
?GetNativeName@ElementSkill@GNET@@SAPBDI@Z
?GetRequiredBook@ElementSkill@GNET@@SAHIH@Z
?GetEffect@ElementSkill@GNET@@SAPBDI@Z
?NextSkill@ElementSkill@GNET@@SAII@Z
?GetComboSkPreSkill@ElementSkill@GNET@@SAHI@Z
?GetInherentSkills@ElementSkill@GNET@@SAABV?$vector@IV?$allocator@I@std@@@std@@H@Z
?InitStaticData@ElementSkill@GNET@@SAXXZ
?IsMovingSkill@ElementSkill@GNET@@SA_NI@Z
?GetAbility@ElementSkill@GNET@@SAHI@Z
?GetMaxAbility@ElementSkill@GNET@@SAHIH@Z
?GetRequiredLevel@ElementSkill@GNET@@SAHIH@Z
?GetRequiredRealmLevel@ElementSkill@GNET@@SAHIH@Z
?IsOverridden@ElementSkill@GNET@@SA_NI@Z
?GetType@ElementSkill@GNET@@SADI@Z
?IsGoblinSkill@ElementSkill@GNET@@SA_NI@Z
?Query@TeamState@GNET@@SAPBV12@H@Z
?GetRequiredSp@ElementSkill@GNET@@SAHIH@Z
?GetRequiredMoney@ElementSkill@GNET@@SAHIH@Z
?Create@ElementSkill@GNET@@SAPAV12@IH@Z
immwrapper
?Release@AMImmWrapper@@QAE_NXZ
??1AMImmWrapper@@QAE@XZ
?Stop@AMImmEffect@@QAE_NXZ
?Start@AMImmEffect@@QAE_NXZ
?LoadImmEffect@AMImmWrapper@@QAE_NPADPAPAVAMImmEffect@@@Z
?ReleaseImmEffect@AMImmWrapper@@QAE_NAAPAVAMImmEffect@@@Z
ftdriver
?CreateFTManager@@YAPAVIFTManager@@HHH@Z
speedtreert
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
??0CSpeedTreeRT@@QAE@XZ
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?GetDiscreteLeafLodLevel@CSpeedTreeRT@@QBEGM@Z
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
??0SGeometry@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?SetTime@CSpeedTreeRT@@SAXM@Z
?Authorize@CSpeedTreeRT@@SAXPBD@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
??1CSpeedTreeRT@@QAE@XZ
??2CSpeedTreeRT@@SAPAXI@Z
??3CSpeedTreeRT@@SAXPAX@Z
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
d3d9
Direct3DCreate9
d3dx9_43
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXAssembleShader
D3DXSaveSurfaceToFileA
D3DXVec3TransformCoord
D3DXSaveVolumeToFileA
D3DXCreateBuffer
D3DXLoadSurfaceFromSurface
D3DXGetImageInfoFromFileA
D3DXMatrixMultiply
D3DXMatrixRotationY
D3DXMatrixRotationX
D3DXVec4Transform
D3DXMatrixOrthoOffCenterLH
D3DXGetImageInfoFromFileInMemory
D3DXPlaneTransform
D3DXMatrixPerspectiveFovLH
D3DXMatrixLookAtLH
D3DXQuaternionRotationMatrix
D3DXGetShaderConstantTable
D3DXDeclaratorFromFVF
D3DXMatrixInverse
D3DXCreateTextureFromFileInMemoryEx
D3DXCompileShader
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXMatrixRotationAxis
D3DXLoadSurfaceFromFileInMemory
D3DXMatrixRotationZ
D3DXMatrixRotationQuaternion
D3DXCreateEffectCompiler
dsound
ord11
wininet
InternetOpenUrlW
HttpQueryInfoA
InternetOpenA
InternetCloseHandle
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
InternetConnectA
InternetReadFile
shlwapi
StrToIntW
PathCombineA
PathIsFileSpecA
PathAppendW
PathCanonicalizeA
PathRemoveFileSpecA
PathFileExistsA
PathFileExistsW
PathFindFileNameA
winmm
timeGetTime
ws2_32
send
socket
ntohs
connect
WSAStartup
htons
sendto
ioctlsocket
setsockopt
WSACleanup
closesocket
inet_ntoa
gethostbyname
WSAGetLastError
inet_addr
recv
getsockname
select
bind
__WSAFDIsSet
imm32
ImmGetCompositionStringA
ImmNotifyIME
ImmGetDefaultIMEWnd
ImmGetConversionStatus
ImmGetCandidateListA
ImmGetIMEFileNameA
ImmGetOpenStatus
ImmSetCompositionStringW
ImmSetConversionStatus
ImmIsIME
ImmGetCandidateListW
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
ImmGetProperty
ImmGetCompositionStringW
ImmAssociateContext
ImmSetCandidateWindow
ImmGetDescriptionW
ddraw
DirectDrawCreate
zlibwapi
ord26
ord46
ord7
ord6
ord19
ord4
ord2
ord21
ord20
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
glu32
gluTessVertex
gluTessEndContour
gluTessBeginPolygon
gluTessBeginContour
gluNewTess
gluTessProperty
gluTessEndPolygon
gluDeleteTess
gluTessCallback
kernel32
QueryPerformanceFrequency
LoadLibraryExW
MulDiv
lstrcmpW
lstrcmpiW
QueueUserAPC
FindResourceW
LoadResource
SetLastError
SizeofResource
CreateSemaphoreW
ReleaseSemaphore
OpenFile
SetCurrentDirectoryW
GetPrivateProfileStringA
GetPrivateProfileIntA
DuplicateHandle
SuspendThread
SetCurrentDirectoryA
WaitForSingleObjectEx
GetCurrentDirectoryA
GetPrivateProfileStringW
WritePrivateProfileStringW
SetThreadPriorityBoost
WinExec
SignalObjectAndWait
GetDiskFreeSpaceA
ConnectNamedPipe
CreateProcessW
CreateMutexA
CreateNamedPipeW
WriteFile
IsDebuggerPresent
FindClose
SetFilePointer
CreateFileMappingW
MapViewOfFile
lstrlenW
LocalAlloc
IsDBCSLeadByte
GetLocaleInfoA
CompareStringA
GetVersionExA
VirtualFree
VirtualAlloc
FormatMessageA
QueryPerformanceCounter
LocalFree
LoadLibraryExA
InterlockedPushEntrySList
InterlockedPopEntrySList
EncodePointer
GetStartupInfoW
GetSystemTimeAsFileTime
IsDBCSLeadByteEx
ExitProcess
ResumeThread
OutputDebugStringA
GetCommandLineW
ReadFile
GetFileSize
GetLocalTime
ResetEvent
CopyFileA
GetExitCodeThread
WaitForMultipleObjects
CreateDirectoryA
FindNextFileA
FindFirstFileA
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GlobalSize
GlobalFree
UnmapViewOfFile
GlobalReAlloc
SetThreadPriority
InitializeSListHead
GetVersion
GetModuleFileNameA
EnterCriticalSection
GetCurrentProcess
GetModuleFileNameW
LeaveCriticalSection
CreateFileW
GetCurrentThreadId
GetLastError
GetCurrentThread
CloseHandle
LoadLibraryW
GetProcAddress
GetCurrentProcessId
FreeLibrary
lstrcpyW
IsBadReadPtr
GetTickCount
GetCommandLineA
GetFileAttributesA
VirtualProtect
InitializeCriticalSection
WaitForSingleObject
GetModuleHandleA
LoadLibraryA
CreateThread
DeleteCriticalSection
Process32First
TerminateProcess
OpenProcess
CreateToolhelp32Snapshot
Process32Next
ReadProcessMemory
VirtualQueryEx
lstrlenA
GetVersionExW
Sleep
GetSystemInfo
GlobalMemoryStatus
HeapFree
HeapAlloc
GetProcessHeap
SystemTimeToFileTime
GetSystemTime
DeviceIoControl
CreateFileA
GetModuleHandleW
FlushInstructionCache
CreateMutexW
ReleaseMutex
IsBadWritePtr
OutputDebugStringW
GlobalAlloc
GlobalLock
WideCharToMultiByte
GlobalUnlock
MultiByteToWideChar
DeleteFileA
InitializeCriticalSectionAndSpinCount
ExitThread
CreateEventW
SetEvent
RaiseException
GetCurrentDirectoryW
DecodePointer
user32
IsChild
DestroyAcceleratorTable
SetWindowLongA
RedrawWindow
SetTimer
InvalidateRgn
FillRect
keybd_event
DestroyWindow
GetFocus
CallWindowProcW
GetMessageW
GetWindowTextLengthW
SendMessageA
IntersectRect
EnumDisplaySettingsW
SetRect
DestroyCursor
LoadCursorFromFileA
RegisterClipboardFormatW
GetClipboardData
CreateCaret
GetKeyboardLayout
SetCaretPos
IsWindowUnicode
EnumThreadWindows
GetWindowDC
CreateWindowExA
WindowFromDC
GetCaretBlinkTime
PostMessageA
LoadCursorW
UpdateWindow
SetForegroundWindow
GetCapture
SetCapture
ReleaseCapture
ChangeDisplaySettingsW
DispatchMessageW
PeekMessageW
MessageBoxA
GetForegroundWindow
TranslateMessage
LoadIconW
GetSysColor
GetGUIThreadInfo
BeginPaint
EndPaint
SetWindowTextW
AdjustWindowRectEx
SetWindowLongW
InvalidateRect
GetAsyncKeyState
SetCursorPos
SetActiveWindow
EnumChildWindows
SendMessageW
UnregisterClassW
GetMenuBarInfo
IsWindow
GetWindowLongW
IsWindowVisible
SetWindowPos
ShowWindow
IsWindowEnabled
FindWindowW
GetClassNameW
IsZoomed
IsIconic
GetWindowTextW
GetActiveWindow
GetClientRect
PostMessageW
ClientToScreen
GetKeyState
OpenClipboard
CloseClipboard
EmptyClipboard
SetClipboardData
ScreenToClient
GetCursorPos
CreateAcceleratorTableW
SetFocus
CharNextW
GetDlgItem
KillTimer
GetDesktopWindow
GetClassInfoExW
PostQuitMessage
EnumWindows
GetWindowRect
CallNextHookEx
UnhookWindowsHookEx
IsRectEmpty
SetWindowsHookExW
FindWindowA
PtInRect
GetWindowThreadProcessId
GetWindow
GetClassNameA
GetWindowTextA
GetTopWindow
wsprintfW
GetParent
RegisterWindowMessageW
GetAncestor
GetDC
ReleaseDC
DefWindowProcW
MessageBoxW
CreateWindowExW
GetSystemMetrics
AdjustWindowRect
SetCursor
MoveWindow
RegisterClassExW
gdi32
CreateFontW
TextOutA
SetBkColor
SetTextAlign
ExtTextOutW
CreateCompatibleBitmap
SelectObject
SetMapMode
GetDeviceCaps
DeleteDC
CreateSolidBrush
CreateDIBSection
GetObjectW
DeleteObject
GetStockObject
GetTextExtentPoint32W
CreateCompatibleDC
SetTextColor
BitBlt
GetDIBits
CreateEllipticRgn
GetGlyphOutlineW
CreatePolygonRgn
PtInRegion
CreateFontIndirectW
EnumFontFamiliesExW
advapi32
OpenThreadToken
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegQueryInfoKeyW
shell32
SHOpenFolderAndSelectItems
ShellExecuteExA
SHGetFolderPathW
ShellExecuteA
ShellExecuteW
Shell_NotifyIconW
ole32
CoGetClassObject
OleUninitialize
CoTaskMemAlloc
StringFromGUID2
CLSIDFromProgID
CoTaskMemFree
CreateStreamOnHGlobal
OleInitialize
CLSIDFromString
OleLockRunning
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemRealloc
CoInitializeEx
oleaut32
LoadRegTypeLi
VariantInit
LoadTypeLi
VariantCopy
SysFreeString
VariantClear
SysAllocString
VarUI4FromStr
SysAllocStringLen
SysStringLen
OleCreateFontIndirect
DispCallFunc
msvcp140
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?_Xbad_function_call@std@@YAXXZ
?_Throw_C_error@std@@YAXH@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Syserror_map@std@@YAPBDH@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
_Mtx_lock
?__ExceptionPtrCurrentException@@YAXPAX@Z
_Cnd_register_at_thread_exit
_Cnd_wait
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
_Cnd_signal
?__ExceptionPtrAssign@@YAXPAXPBX@Z
_Cnd_unregister_at_thread_exit
?__ExceptionPtrCreate@@YAXPAX@Z
_Cnd_init_in_situ
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?_Xlength_error@std@@YAXPBD@Z
?_Random_device@std@@YAIXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?uncaught_exception@std@@YA_NXZ
_Mtx_unlock
_Cnd_broadcast
_Cnd_destroy_in_situ
_Thrd_hardware_concurrency
?_Throw_Cpp_error@std@@YAXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Thrd_join
_Thrd_id
_Cnd_do_broadcast_at_thread_exit
?_Xout_of_range@std@@YAXPBD@Z
urlmon
URLDownloadToFileW
iphlpapi
GetAdaptersInfo
vcruntime140
_purecall
__std_exception_copy
__std_exception_destroy
strstr
__std_terminate
__CxxFrameHandler3
wcsstr
wcsrchr
wcschr
strchr
__std_type_info_name
longjmp
__current_exception
__current_exception_context
_except_handler4_common
memset
memmove
_CxxThrowException
_local_unwind4
strrchr
_setjmp3
memchr
memcpy
__RTDynamicCast
api-ms-win-crt-stdio-l1-1-0
fflush
__stdio_common_vsprintf_s
__stdio_common_vswprintf
_set_fmode
__stdio_common_vswscanf
fread
__acrt_iob_func
__stdio_common_vfprintf
fseek
_fileno
_ftelli64
_fseeki64
ftell
__p__commode
__stdio_common_vsscanf
__stdio_common_vsprintf
_popen
tmpfile
_pclose
clearerr
fwrite
fputc
fgetc
__stdio_common_vfscanf
fclose
fgetpos
setvbuf
ungetc
fsetpos
_get_stream_buffer_pointers
__stdio_common_vswprintf_s
fopen
fputs
ferror
freopen
_wfopen
tmpnam
__stdio_common_vfwprintf
fgetwc
fgetws
feof
fgets
getc
api-ms-win-crt-convert-l1-1-0
atof
atoi
_i64toa
_itow
_wtoi
atol
strtod
strtoul
_itoa
api-ms-win-crt-string-l1-1-0
wcsncmp
iscntrl
strpbrk
isupper
tolower
isalnum
isxdigit
islower
wcsncpy_s
wcsncat
iswdigit
isalpha
strcspn
wcsncpy
_stricmp
_wcsupr
_wcslwr
isspace
strncmp
strcoll
strncpy
_strlwr
strcpy_s
isdigit
_strnicmp
_wcsicmp
_strupr
strncpy_s
toupper
strncat
wcscpy_s
wcscat_s
strcat_s
ispunct
api-ms-win-crt-runtime-l1-1-0
system
_resetstkoflw
exit
_beginthread
_controlfp_s
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_beginthreadex
_invalid_parameter_noinfo
_errno
strerror
_invalid_parameter_noinfo_noreturn
_seh_filter_exe
_get_wide_winmain_command_line
_set_app_type
_configure_wide_argv
_initialize_wide_environment
_register_thread_local_exe_atexit_callback
terminate
_c_exit
_cexit
_initterm
_initterm_e
_exit
api-ms-win-crt-utility-l1-1-0
qsort
srand
rand
api-ms-win-crt-time-l1-1-0
_difftime64
_time32
_gmtime32
_mktime64
strftime
_gmtime64
_localtime64
asctime
_localtime32
_mktime32
_time64
clock
api-ms-win-crt-heap-l1-1-0
free
realloc
malloc
_set_new_mode
_recalloc
calloc
api-ms-win-crt-filesystem-l1-1-0
_mkdir
rename
_findfirst32
_findnext32
_findclose
_wremove
_rmdir
remove
_stat32
_access
_splitpath
_unlock_file
_stat64i32
_fstat64i32
_lock_file
api-ms-win-crt-math-l1-1-0
__setusermatherr
modf
frexp
_isnan
_CItanh
_CIsinh
_CIfmod
_CIcosh
__libm_sse2_acos
__libm_sse2_acosf
__libm_sse2_asin
__libm_sse2_asinf
__libm_sse2_atan
__libm_sse2_atan2
__libm_sse2_cos
__libm_sse2_cosf
__libm_sse2_exp
__libm_sse2_expf
__libm_sse2_log
__libm_sse2_log10
__libm_sse2_logf
__libm_sse2_pow
__libm_sse2_powf
__libm_sse2_sin
__libm_sse2_sinf
__libm_sse2_tan
__libm_sse2_tanf
ceil
ldexp
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
setlocale
localeconv
api-ms-win-crt-environment-l1-1-0
getenv
Sections
.text Size: 9.0MB - Virtual size: 9.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 281KB - Virtual size: 492KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 602KB - Virtual size: 601KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ