GetWclAccObject
GetWclAccObjectUsage
GetWclAccStyleByClassName
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1df49dd7a42237f6065761e1ec878fc172d64b1b821d75eb4002e3a26830fcaf.exe
Resource
win7-20231215-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
1df49dd7a42237f6065761e1ec878fc172d64b1b821d75eb4002e3a26830fcaf.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
8 signatures
150 seconds
General
-
Target
1df49dd7a42237f6065761e1ec878fc172d64b1b821d75eb4002e3a26830fcaf
-
Size
8.2MB
-
MD5
26c8f722186e653fe69485b0690f2921
-
SHA1
ad5c254239832d19da1b47ed82248ae8e57821c9
-
SHA256
1df49dd7a42237f6065761e1ec878fc172d64b1b821d75eb4002e3a26830fcaf
-
SHA512
9ff41f4e8506dd746cf9b7cf8ee5ce257d7563c0bf0aa68df27c36cdc6f1a007a2717aad03f64a3878b5c10c72ef3e1e1c114e544a3e02e309f3f69a688da83e
-
SSDEEP
49152:wznpmQC8+G0tdGDm57+WiwMeTTM3lZ2lbGJojJCg7YhyOOOOOYa9rV+SKkdLOOLX:YT70tdGcyxQTbJbUdA0vV4Y8w
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1df49dd7a42237f6065761e1ec878fc172d64b1b821d75eb4002e3a26830fcaf
Files
-
1df49dd7a42237f6065761e1ec878fc172d64b1b821d75eb4002e3a26830fcaf.exe windows:6 windows x64 arch:x64
4f21a33aff4f7f5162f14e79f1a79f0d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
crypt32
CryptUnprotectData
CryptProtectData
kernel32
UnmapViewOfFile
GetStdHandle
CreateFileA
SetFilePointer
TerminateProcess
GetPrivateProfileStringW
FreeConsole
AllocConsole
WriteConsoleW
GetConsoleWindow
Module32FirstW
CreatePipe
CreateProcessW
lstrcmpA
lstrcmpW
K32GetModuleFileNameExW
GetCurrentProcess
QueryFullProcessImageNameW
K32QueryWorkingSet
FileTimeToLocalFileTime
GetFileTime
VerSetConditionMask
SetCurrentDirectoryW
GetCurrentDirectoryW
InitializeCriticalSectionAndSpinCount
GetTickCount
GlobalAlloc
GlobalSize
GlobalUnlock
GlobalLock
GlobalFree
MulDiv
VerifyVersionInfoW
CompareStringW
CompareStringA
GetLogicalDriveStringsW
QueryDosDeviceW
SetEndOfFile
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentThread
VirtualQuery
FlushViewOfFile
OpenFile
WritePrivateProfileStringW
IsBadReadPtr
GetOEMCP
CreateMutexA
GetEnvironmentVariableW
SetEnvironmentVariableW
GetDiskFreeSpaceExW
GetNativeSystemInfo
SetThreadExecutionState
CreateEventA
CreateFileMappingA
OpenFileMappingA
AreFileApisANSI
TryEnterCriticalSection
HeapCreate
GetFullPathNameW
GetDiskFreeSpaceW
LockFile
GetFullPathNameA
UnlockFileEx
HeapValidate
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
DeleteFileA
HeapCompact
UnlockFile
LockFileEx
SystemTimeToFileTime
FormatMessageA
FlushFileBuffers
MapViewOfFile
lstrlenW
MultiByteToWideChar
GetTickCount64
DecodePointer
RaiseException
GetLastError
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
InitOnceBeginInitialize
InitOnceComplete
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
EncodePointer
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
VirtualAlloc
VirtualFree
LoadLibraryExA
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
GetModuleHandleW
GetProcAddress
GetLocalTime
GetPrivateProfileIntA
GetPrivateProfileStringA
GetLocaleInfoW
DeleteFileW
CopyFileW
CreateDirectoryW
GetFileAttributesW
GetVersionExW
GetSystemTime
MoveFileW
GetCurrentProcessId
GetCurrentThreadId
GetTempPathA
CreateFileW
FindClose
FindFirstFileW
FindNextFileW
ReadFile
RemoveDirectoryW
CloseHandle
CreateDirectoryA
GetVersionExA
FreeLibrary
GetModuleFileNameA
GetModuleFileNameW
LoadLibraryA
GetDynamicTimeZoneInformation
WideCharToMultiByte
GetGeoInfoW
GetUserGeoID
GetSystemDefaultLocaleName
Sleep
GetProcessTimes
GetExitCodeProcess
OpenProcess
GetSystemTimes
GlobalMemoryStatusEx
GetSystemInfo
GetSystemTimeAsFileTime
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
K32GetProcessMemoryInfo
CompareFileTime
GetFileSize
FileTimeToSystemTime
WaitForSingleObject
CreateThread
TerminateThread
GetExitCodeThread
EnterCriticalSection
LeaveCriticalSection
LoadLibraryW
lstrcmpiW
lstrlenA
GetSystemDirectoryW
WriteFile
OutputDebugStringA
OutputDebugStringW
InitializeCriticalSection
ReleaseSemaphore
CreateSemaphoreW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LocalFree
IsDebuggerPresent
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexW
LoadLibraryExW
GetTempPathW
SetLastError
SetEvent
ResetEvent
CreateEventW
OpenEventW
WaitForSingleObjectEx
QueueUserAPC
WaitForMultipleObjectsEx
OpenMutexW
SetWaitableTimer
WaitForMultipleObjects
CreateWaitableTimerW
CreateFileMappingW
OpenFileMappingW
user32
wsprintfA
GetActiveWindow
EnableWindow
CharNextW
DefWindowProcW
PostQuitMessage
CallWindowProcW
RegisterClassExW
GetClassInfoExW
CreateWindowExW
GetWindowLongPtrW
SetWindowLongPtrW
GetDoubleClickTime
CalculatePopupWindowPosition
FindWindowW
EnumWindows
GetWindowThreadProcessId
GetWindow
LoadStringW
GetKeyboardLayout
TrackMouseEvent
PostThreadMessageW
AttachThreadInput
ReplyMessage
IsChild
SetLayeredWindowAttributes
IsIconic
IsZoomed
GetNextDlgTabItem
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
RegisterClipboardFormatW
EmptyClipboard
IsClipboardFormatAvailable
CharLowerBuffW
SetFocus
GetFocus
GetKeyState
GetAsyncKeyState
GetCapture
SetCapture
ReleaseCapture
PeekMessageW
LoadMenuW
GetMenuStringW
GetMenuState
DestroyMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
DeleteMenu
TrackPopupMenu
GetMenuItemInfoW
SetMenuItemInfoW
DrawTextW
UpdateWindow
GetForegroundWindow
GetDC
GetWindowDC
ReleaseDC
GetRawInputData
EndPaint
GetUpdateRect
GetWindowRgn
InvalidateRect
SetPropW
GetPropW
SetWindowTextW
GetClientRect
GetCursorPos
CreateCaret
DestroyCaret
ShowCaret
SetCaretPos
ClientToScreen
ScreenToClient
MapWindowPoints
WindowFromPoint
GetSysColor
GetSysColorBrush
DrawFocusRect
FillRect
InvertRect
GetWindowLongW
SetWindowLongW
GetClassLongW
GetParent
SetParent
GetClassNameW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
DestroyIcon
CreateIconFromResourceEx
MonitorFromWindow
GetGUIThreadInfo
SendMessageW
wsprintfW
GetWindowTextW
SetActiveWindow
DispatchMessageW
ShowWindow
UpdateLayeredWindow
MoveWindow
SetWindowPos
SetTimer
KillTimer
GetWindowRect
TranslateMessage
GetMessageW
GetMonitorInfoW
MonitorFromRect
LoadCursorW
mouse_event
SetCursorPos
NotifyWinEvent
SystemParametersInfoW
PostMessageW
IsWindow
IsWindowVisible
SendMessageTimeoutW
DestroyWindow
GetDesktopWindow
SetCursor
SetForegroundWindow
EnableMenuItem
GetSystemMenu
UnregisterClassW
RegisterRawInputDevices
IsWindowEnabled
BeginPaint
gdi32
CreateCompatibleBitmap
DeleteDC
CreateBitmap
CreateFontIndirectW
GetDIBits
GetDeviceCaps
CreateDCW
GetObjectW
CreatePen
CreateRectRgn
DeleteObject
CreateCompatibleDC
SelectObject
ExcludeClipRect
Polyline
ExtTextOutW
MoveToEx
CreateDIBSection
ModifyWorldTransform
SetWorldTransform
GetWorldTransform
GetTextMetricsW
SetTextColor
SetStretchBltMode
StretchBlt
SetLayout
SetGraphicsMode
SetBkMode
SetBkColor
ExtSelectClipRgn
SaveDC
RestoreDC
PatBlt
OffsetRgn
LineTo
IntersectClipRect
GetTextExtentExPointW
GetStockObject
BitBlt
comdlg32
GetSaveFileNameW
advapi32
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegEnumValueW
RegQueryInfoKeyW
RegEnumKeyExW
GetUserNameW
AllocateAndInitializeSid
FreeSid
GetSecurityDescriptorSacl
SetNamedSecurityInfoW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyW
RegDeleteTreeW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptDecrypt
CryptEncrypt
CryptImportKey
CryptExportKey
CryptGetUserKey
CryptDestroyKey
CryptDeriveKey
CryptGenKey
CryptReleaseContext
CryptAcquireContextW
LookupAccountSidW
SetTokenInformation
GetLengthSid
DuplicateTokenEx
CreateProcessAsUserW
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
GetTokenInformation
RevertToSelf
MapGenericMask
ImpersonateSelf
GetFileSecurityW
AccessCheck
OpenThreadToken
shell32
Shell_NotifyIconGetRect
SHFileOperationW
SHGetFolderPathW
ShellExecuteW
SHAppBarMessage
Shell_NotifyIconW
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ole32
OleLockRunning
OleDuplicateData
DoDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
ReleaseStgMedium
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
CoUninitialize
OleRun
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoCreateInstance
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoTaskMemFree
oleaut32
LoadTypeLi
VariantCopy
VarBstrCmp
SysStringLen
SysAllocStringLen
LoadRegTypeLi
VariantChangeType
VariantInit
VariantClear
SysFreeString
SysAllocString
VarBstrFromI4
CreateErrorInfo
VarUI4FromStr
GetErrorInfo
SetErrorInfo
msvcp140
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
_Cnd_broadcast
_Cnd_register_at_thread_exit
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
_Cnd_unregister_at_thread_exit
??0task_continuation_context@Concurrency@@AEAA@XZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?_Xbad_function_call@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
?id@?$collate@D@std@@2V0locale@2@A
?_Random_device@std@@YAIXZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
_Strxfrm
_Strcoll
??7ios_base@std@@QEBA_NXZ
?fail@ios_base@std@@QEBA_NXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?rdstate@ios_base@std@@QEBAHXZ
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA_N_N@Z
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
?imbue@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@G@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGD@Z
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
?clear@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?_Init@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAPEAG0PEAH001@Z
?_Init@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXXZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?_Gninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
?getloc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEBA?AVlocale@2@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
?_Getcat@?$codecvt@GDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBGHH@Z
_Cnd_signal
_Cnd_wait
_Cnd_destroy_in_situ
_Cnd_init_in_situ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?eof@ios_base@std@@QEBA_NXZ
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Thrd_id
_Thrd_sleep
_Thrd_join
_Xtime_get_ticks
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
_Query_perf_frequency
_Query_perf_counter
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?setf@ios_base@std@@QEAAHHH@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
_Mbrtowc
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Getdays@_Locinfo@std@@QEBAPEBDXZ
?_Getmonths@_Locinfo@std@@QEBAPEBDXZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?clog@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?is@?$ctype@D@std@@QEBA_NFD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??Bios_base@std@@QEBA_NXZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?id@?$ctype@D@std@@2V0locale@2@A
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
wininet
InternetConnectW
InternetCrackUrlW
InternetOpenW
InternetSetOptionW
HttpOpenRequestW
HttpSendRequestW
InternetCrackUrlA
InternetOpenA
InternetConnectA
InternetReadFile
InternetSetOptionA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetWriteFile
InternetQueryOptionA
HttpAddRequestHeadersA
HttpSendRequestExA
HttpEndRequestW
InternetErrorDlg
InternetCloseHandle
shlwapi
StrStrIA
PathAppendA
PathFindFileNameW
PathRemoveFileSpecW
PathFileExistsW
PathAppendW
PathCombineW
PathFileExistsA
PathFindExtensionW
comctl32
ord410
ord412
ord413
ord380
msimg32
GradientFill
AlphaBlend
rpcrt4
UuidFromStringA
ws2_32
inet_ntoa
gethostname
WSAStartup
WSACleanup
inet_ntop
WSAGetLastError
inet_pton
setsockopt
sendto
htons
recvfrom
socket
select
closesocket
bind
__WSAFDIsSet
getnameinfo
freeaddrinfo
getaddrinfo
gethostbyname
iphlpapi
GetAdaptersAddresses
IcmpCreateFile
IcmpSendEcho
gdiplus
GdiplusShutdown
usp10
ScriptLayout
ScriptItemize
ScriptApplyDigitSubstitution
ScriptBreak
ScriptRecordDigitSubstitution
imm32
ImmGetCompositionStringW
ImmIsIME
ImmGetContext
ImmReleaseContext
ImmAssociateContext
ImmSetCompositionWindow
ImmAssociateContextEx
ImmSetCompositionFontW
ImmGetCompositionFontW
oleacc
AccessibleObjectFromWindow
LresultFromObject
vcruntime140
memmove
strchr
__std_type_info_name
__C_specific_handler
wcsstr
__std_type_info_compare
wcschr
memchr
__std_terminate
memcpy
memset
__RTDynamicCast
strrchr
__current_exception
__current_exception_context
__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy
memcmp
__std_exception_copy
wcsrchr
_purecall
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_c_exit
_set_app_type
_exit
_seh_filter_exe
exit
_initterm_e
_cexit
_endthreadex
_crt_at_quick_exit
_beginthreadex
_initterm
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_crt_atexit
_errno
abort
_execute_onexit_table
_register_onexit_function
terminate
_initialize_onexit_table
strerror
_register_thread_local_exe_atexit_callback
_seh_filter_dll
_initialize_narrow_environment
_configure_narrow_argv
api-ms-win-crt-stdio-l1-1-0
fflush
fputwc
__stdio_common_vfprintf
fgetwc
fgetc
__acrt_iob_func
__stdio_common_vsprintf
fopen_s
__stdio_common_vsprintf_s
rewind
ftell
fseek
_fsopen
fputs
fgets
feof
__stdio_common_vsnprintf_s
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf_s
__stdio_common_vswprintf
fopen
fgetpos
fputc
__p__commode
ungetc
__stdio_common_vsscanf
_set_fmode
fclose
setvbuf
_wfopen
_get_stream_buffer_pointers
ungetwc
ferror
_ftelli64
fwrite
_fseeki64
fsetpos
fread
api-ms-win-crt-time-l1-1-0
_difftime64
clock
_tzset
_gmtime64
_time64
_ftime64
_localtime64_s
_gmtime64_s
strftime
_ftime64_s
_localtime64
_mktime64
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
_msize
malloc
calloc
realloc
_callnewh
_recalloc
api-ms-win-crt-string-l1-1-0
isalpha
isspace
strncmp
strcmp
_wcsnicmp
wcscpy_s
isprint
tolower
strtok
wmemcpy_s
_strdup
wcsnlen
strcspn
towlower
strlen
wcsncmp
wcslen
wcscmp
strnlen
toupper
isdigit
iswspace
_wcsupr_s
wcsncpy_s
_strnicmp
_wcsicmp
wcscat_s
_wcslwr_s
strtok_s
wcspbrk
isalnum
api-ms-win-crt-convert-l1-1-0
atoll
atof
_wtoi64
_wtoll
wcstol
_wtoi
_itoa_s
wcstombs_s
atol
wcstoul
atoi
_wtol
_strtoui64
strtoul
strtol
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_wsplitpath_s
_mkdir
_access
_waccess
_stat64i32
_lock_file
remove
api-ms-win-crt-utility-l1-1-0
qsort
abs
rand
qsort_s
srand
api-ms-win-crt-environment-l1-1-0
_wdupenv_s
_dupenv_s
api-ms-win-crt-math-l1-1-0
_finite
fmodf
floorf
_dsign
cosf
ceilf
atan2f
_dclass
floor
_isnan
tan
sqrt
sin
pow
__setusermatherr
log
fmod
fabs
exp
cos
sqrtf
modf
ceil
sinf
acosf
api-ms-win-crt-locale-l1-1-0
localeconv
_configthreadlocale
setlocale
Exports
Exports
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 83KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 381KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 681KB - Virtual size: 680KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 596KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE