Static task
static1
Behavioral task
behavioral1
Sample
bec491db69503ab64d7868b44bc620e880aebf99134a8e7ec4e753c1271b36a0.exe
Resource
win7-20240215-en
windows7-x64
Behavioral task
behavioral2
Sample
bec491db69503ab64d7868b44bc620e880aebf99134a8e7ec4e753c1271b36a0.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
General
-
Target
bec491db69503ab64d7868b44bc620e880aebf99134a8e7ec4e753c1271b36a0
-
Size
2.3MB
-
MD5
e5a67c2adc85cf318f1cd5690dd87c18
-
SHA1
e2631f96a929ce8fc362b69c301be8bdfe7edb39
-
SHA256
bec491db69503ab64d7868b44bc620e880aebf99134a8e7ec4e753c1271b36a0
-
SHA512
177981daa53acf6ef3cddef865254d3433120109f7a3ed8a978ef2838baee0b39eed76f2ab1f185233d72326fbf0f28fc3d7d83ff66df11c62f3a81d64e7a785
-
SSDEEP
24576:948R3+IPClkd7KN6EdxO+2DMPFwsDzj+v6CviyycOg/REFFLEf:RR3+psaj+v6qiynOg/REHEf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bec491db69503ab64d7868b44bc620e880aebf99134a8e7ec4e753c1271b36a0
Files
-
bec491db69503ab64d7868b44bc620e880aebf99134a8e7ec4e753c1271b36a0.exe windows:5 windows x86 arch:x86
c6270e58a07097a7d45a514d59d0c39f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
PlaySoundW
kernel32
GetModuleFileNameW
WritePrivateProfileStringW
WideCharToMultiByte
SetLastError
MulDiv
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalSize
GetTickCount
lstrcmpW
CloseHandle
GetLastError
CreateSemaphoreW
Process32NextW
Process32FirstW
lstrlenW
GetCurrentProcessId
OpenProcess
GetVersionExW
HeapAlloc
CreateToolhelp32Snapshot
GetSystemTimeAsFileTime
CreateEventA
SetEvent
FreeLibrary
WaitForSingleObject
GetPrivateProfileSectionW
CopyFileW
Sleep
GetProcAddress
ReadProcessMemory
GetModuleHandleW
GetProcessHeap
HeapFree
ResumeThread
TlsSetValue
CreateMutexA
TlsGetValue
TlsFree
TlsAlloc
ReleaseMutex
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
LoadLibraryW
FormatMessageA
LocalFree
DuplicateHandle
GetCurrentProcess
UnmapViewOfFile
CreateFileMappingA
OpenFileMappingA
GetSystemInfo
MapViewOfFileEx
usbdll
?CUSB_InCtrlRequest@@YA_NAAUCNTRPIPE_RQ@@AAV?$vector@EV?$allocator@E@std@@@std@@H@Z
?CUSB_InitialUSB@@YAXAAUCDediContext@Context@@ABU_argUSBInfo@CUSBContext@2@_NH@Z
?CUSB_CloseUSB@@YA_NXZ
?CUSB_OutCtrlRequest@@YA_NAAUCNTRPIPE_RQ@@ABV?$vector@EV?$allocator@E@std@@@std@@H@Z
?CUSB_GetUSBDeviceNum@@YAIXZ
?CUSB_IsOpen@@YA_N_N@Z
?CUSB_BulkPipeWrite@@YA_NABV?$vector@EV?$allocator@E@std@@@std@@H@Z
?CUSB_SetDevIndex@@YAXH@Z
sfdevicedll
?Dev_SetLedDisplay@@YA_NIH@Z
?Dev_SendSetupPacketForDownloadICInfoNAND@@YA_NKH@Z
?Dev_SendOutOnlyInstructionWithCS@@YA_NABV?$vector@EV?$allocator@E@std@@@std@@H@Z
?Dev_SendOutOnlyInstruction@@YA_NABV?$vector@EV?$allocator@E@std@@@std@@H@Z
?Dev_InitSFDevice@@YAXPAUCDediContext@Context@@I@Z
?Dev_ExitSFDevice@@YAXXZ
?Dev_SetIOMode@@YA_NGH@Z
?Dev_SetSPIClock@@YA_NGH@Z
?Dev_SetTargetFlash@@YA_NGH@Z
sfprogboarddll
?Dev_DownloadProject@@YA_NAAUCDediContext@Context@@AAV?$vector@EV?$allocator@E@std@@@std@@IH@Z
?Dev_Send4byteFFh@@YA_NH@Z
?Dev_GetProjectName@@YAAAV?$vector@EV?$allocator@E@std@@@std@@H@Z
?Dev_GetOnBoardNandInfo@@YAAAV?$vector@EV?$allocator@E@std@@@std@@H@Z
?Dev_Send1byteFFh@@YA_NH@Z
?Dev_InitProgBoard@@YAXPAUCDediContext@Context@@H@Z
?Dev_ReadStandaloneProject@@YAAAV?$vector@EV?$allocator@E@std@@@std@@KH@Z
?Dev_SetIO@@YA_NIH@Z
?Dev_IsNewCommand@@YA_NH@Z
?Dev_isSNValid@@YA_NH@Z
?Dev_CheckSDcard@@YA_NH@Z
?Dev_GetButtonStatus@@YA_NAAV?$vector@EV?$allocator@E@std@@@std@@H@Z
?Dev_SetCS@@YA_NIH@Z
?Dev_SetLEDOnOff@@YA_NIIIH@Z
?Dev_LeaveSF600Standalone@@YA_N_NH@Z
?Dev_UpdateFW@@YA_NAAUCDediContext@Context@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?Dev_SetTargetVCCorVPP@@YA_NIGH@Z
?Dev_ExitProgBoard@@YAXH@Z
vm_mgr
?vm_write@@YAH_KPBE0@Z
?vm_free@@YAH_K@Z
?vm_alloc@@YA_K_K@Z
?vm_read@@YAHPAE_K1@Z
?vm_getPtrPath@@YAPA_W_K0@Z
log
?log_level_add_ascii@@YAHW4log_level@@PBDZZ
?log_exit_c@@YAHXZ
?log_init_c@@YAHPBD@Z
dp_log
?dplog_add_c@@YAHPB_WW4logtype@@@Z
?dplog_release_c@@YAHXZ
?dplog_init_c@@YAHPB_W00ZZ
?dplog_programmerinfo_c@@YAHPBUPROG_INFO@@H@Z
mfc90u
ord6130
ord711
ord5387
ord6515
ord6512
ord6218
ord2351
ord4309
ord1855
ord2571
ord1383
ord2372
ord5851
ord2702
ord6574
ord3513
ord6174
ord6418
ord5850
ord5863
ord6040
ord5974
ord6101
ord6183
ord6372
ord6569
ord4579
ord6566
ord6060
ord6572
ord6063
ord2758
ord1255
ord1220
ord4530
ord2901
ord2197
ord481
ord1707
ord3687
ord6311
ord1420
ord770
ord2152
ord3191
ord6817
ord2694
ord569
ord4582
ord5363
ord480
ord3807
ord4306
ord797
ord792
ord2532
ord2757
ord6729
ord6699
ord6693
ord2504
ord4457
ord5773
ord702
ord453
ord3054
ord1145
ord587
ord491
ord3494
ord3131
ord4822
ord729
ord5825
ord5982
ord3993
ord654
ord3528
ord1678
ord795
ord590
ord3674
ord6094
ord3818
ord3741
ord5371
ord2879
ord2880
ord4773
ord6496
ord6605
ord2820
ord669
ord413
ord4006
ord4763
ord670
ord415
ord2971
ord6805
ord2097
ord5947
ord6831
ord3423
ord4127
ord1868
ord6545
ord3775
ord3061
ord3742
ord4010
ord6355
ord6195
ord6194
ord3456
ord5615
ord6426
ord2189
ord4985
ord5354
ord2445
ord2079
ord2860
ord5447
ord5450
ord4730
ord4553
ord3232
ord5338
ord3229
ord6379
ord3230
ord6381
ord980
ord5803
ord3287
ord2651
ord2650
ord4429
ord1681
ord4344
ord5598
ord5655
ord2369
ord1380
ord4697
ord6375
ord3225
ord4685
ord640
ord779
ord619
ord3819
ord4451
ord1496
ord3252
ord3563
ord2274
ord1665
ord4652
ord3489
ord611
ord693
ord2081
ord1935
ord2593
ord4490
ord3183
ord1937
ord615
ord2103
ord1601
ord4510
ord2277
ord1667
ord4654
ord3496
ord5409
ord4918
ord4887
ord5012
ord5055
ord4888
ord5344
ord4630
ord5166
ord5151
ord3122
ord3236
ord3533
ord2479
ord3360
ord5979
ord3953
ord4516
ord5497
ord2909
ord2360
ord1918
ord750
ord1779
ord1708
ord3627
ord3685
ord6493
ord767
ord1714
ord3642
ord5845
ord4405
ord4518
ord333
ord320
ord525
ord6095
ord4541
ord4410
ord3488
ord3622
ord1261
ord3868
ord2592
ord2326
ord6822
ord5778
ord4037
ord788
ord3157
ord1787
ord1723
ord6524
ord4616
ord4320
ord3588
ord4396
ord2078
ord2289
ord2297
ord2288
ord2269
ord2265
ord2227
ord1432
ord5429
ord1425
ord1431
ord5595
ord6794
ord5652
ord2627
ord5403
ord5611
ord2137
ord3662
ord585
ord6811
ord5767
ord1243
ord3589
ord1533
ord6666
ord2144
ord2143
ord1357
ord2596
ord2130
ord4512
ord2282
ord3577
ord1688
ord1063
ord1248
ord1088
ord686
ord3554
ord436
ord337
ord6096
ord613
ord4527
ord4442
ord4351
ord6079
ord3749
ord3012
ord11307
ord10855
ord11762
ord9766
ord10268
ord2356
ord1503
ord2728
ord3794
ord5016
ord6491
ord4324
ord2478
ord4131
ord6275
ord404
ord5535
ord3187
ord5770
ord1552
ord663
ord578
ord2084
ord3165
ord811
ord405
ord2209
ord3399
ord664
ord7463
ord2224
ord4266
ord6945
ord2643
ord2644
ord2647
ord2646
ord2645
ord4109
ord4866
ord4865
ord5224
ord4622
ord5214
ord4809
ord5418
ord4589
ord4596
ord5209
ord4807
ord4823
ord4820
ord4802
ord4805
ord1405
ord1709
ord12295
ord4700
ord1640
ord8930
ord4692
ord4800
ord5296
ord9172
ord6955
ord12890
ord5293
ord4378
ord3354
ord6410
ord5601
ord5654
ord3681
ord1440
ord1680
ord4693
ord7216
ord403
ord3728
ord4719
ord266
ord4128
ord8385
ord8370
ord13076
ord10178
ord8454
ord6950
ord516
ord6949
ord7506
ord7493
ord265
ord3220
ord285
ord6630
ord3185
ord1607
ord524
ord744
ord4494
ord280
ord3396
ord2904
ord6065
ord2676
ord2695
ord5624
ord2597
ord775
ord1783
ord1716
ord3651
ord2595
ord846
ord778
ord2283
ord1719
ord4660
ord3286
ord3654
ord595
ord4543
ord3537
ord1250
ord1254
ord5137
ord650
ord4994
ord2859
ord2867
ord6762
ord2204
ord5606
ord6044
ord1462
ord5861
ord3009
ord5945
ord4677
ord5285
ord5171
ord2090
ord4641
ord3340
ord3035
ord6439
ord6553
ord4906
ord4684
ord388
ord4004
ord3803
ord4043
ord6760
ord813
ord6687
ord3736
ord9748
ord10484
ord13161
ord2280
ord3355
ord6411
ord1493
ord4658
ord5664
ord12263
ord8915
ord9152
ord6930
ord8392
ord7203
ord4211
ord1186
ord1182
ord1098
ord6482
ord4441
ord570
ord996
ord341
ord5567
ord5675
ord617
ord6604
ord4262
ord1599
ord286
ord4890
ord2656
ord290
ord935
ord938
ord6579
ord794
ord4448
ord4423
ord6801
ord4173
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord2087
ord3217
ord5674
ord5676
msvcr90
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
_CxxThrowException
abort
_beginthreadex
strerror
??0exception@std@@QAE@ABV01@@Z
_purecall
_gmtime64
_localtime64
_time64
_localtime64_s
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
sprintf
??0bad_cast@std@@QAE@ABV01@@Z
memcpy
memmove_s
??8type_info@@QBE_NABV0@@Z
wcscpy_s
wcstol
_wtoi
clock
memset
??0exception@std@@QAE@ABQBDH@Z
swscanf_s
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_controlfp_s
_invoke_watson
_except_handler4_common
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
__CxxFrameHandler3
wcstod
free
wcsftime
wcstoul
memcpy_s
fclose
fopen
sscanf
fgets
__iob_func
fprintf
feof
mbstowcs_s
wcstombs_s
_wmkdir
user32
EnableWindow
GetClientRect
UpdateWindow
SendMessageW
WindowFromDC
RegisterWindowMessageW
GetClassNameW
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsMenu
AdjustWindowRectEx
GetWindowLongW
GetScrollInfo
LoadBitmapW
GetWindowRgn
MapWindowPoints
EndPaint
BeginPaint
SetWindowRgn
IsZoomed
GetDoubleClickTime
WindowFromPoint
ClientToScreen
CopyRect
ReleaseCapture
ClipCursor
GetCursorPos
GetMessagePos
IsClipboardFormatAvailable
GetClassInfoW
DefWindowProcW
GrayStringW
DrawTextExW
TabbedTextOutW
GetFocus
SetCapture
GetCapture
ScreenToClient
InvertRect
GetKeyState
IntersectRect
PtInRect
SetCursor
GetSysColor
DrawTextW
DrawEdge
FrameRect
FillRect
InflateRect
SystemParametersInfoW
GetDC
ReleaseDC
LoadImageW
LoadMenuW
GetSubMenu
IsWindowVisible
SetRect
MessageBoxW
RedrawWindow
OffsetRect
GetParent
PostMessageW
SetScrollRange
SetScrollPos
GetScrollPos
InvalidateRect
PostQuitMessage
GetSystemMetrics
GetDlgItem
RegisterDeviceNotificationW
KillTimer
SetTimer
GetWindowRect
LoadCursorW
GetDesktopWindow
GetWindow
IsWindow
GetPropW
IsIconic
ShowWindow
SetForegroundWindow
GetLastActivePopup
gdi32
GetClipRgn
Rectangle
CreateSolidBrush
DeleteObject
GetBkColor
SetViewportOrgEx
GetViewportOrgEx
CreateCompatibleBitmap
CreatePen
GetCurrentObject
GetDeviceCaps
CreateFontIndirectW
GetTextExtentPoint32W
CreateRectRgn
CreateFontW
CombineRgn
SetRectRgn
CreateRectRgnIndirect
GetPixel
CreatePolygonRgn
CreateBitmap
ExtSelectClipRgn
BitBlt
CreateCompatibleDC
GetObjectW
GetStockObject
OffsetRgn
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
advapi32
InitializeSecurityDescriptor
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
SetSecurityDescriptorDacl
shell32
SHGetFolderPathW
DragQueryFileW
ShellExecuteW
comctl32
InitCommonControlsEx
shlwapi
PathFileExistsW
SHAutoComplete
oleaut32
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime
VarUdateFromDate
VariantClear
msvcp90
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??_D?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?close@?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PB_WHH@Z
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?length@?$char_traits@D@std@@SAIPBD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?eof@?$char_traits@D@std@@SAHXZ
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?str@?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?construct@?$allocator@_W@std@@QAEXPA_WAB_W@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0@Z
?destroy@?$allocator@_W@std@@QAEXPA_W@Z
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@PB_WHH@Z
??_D?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PB_WHH@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?classic@locale@std@@SAABV12@XZ
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@JH@Z
?tellg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?read@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_WH@Z
??_D?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0ABV12@@Z
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
??1_Locimp@locale@std@@MAE@XZ
??0_Locimp@locale@std@@AAE@ABV012@@Z
?id@?$codecvt@_WDH@std@@2V0locale@2@A
?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?do_length@?$codecvt@_WDH@std@@MBEHABHPBD1I@Z
?do_out@?$codecvt@_WDH@std@@MBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
??0?$codecvt@_WDH@std@@QAE@I@Z
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Id_cnt@id@locale@std@@0HA
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PB_WHH@Z
??Bios_base@std@@QBEPAXXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@00@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??$?6_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??0?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAI@Z
??_D?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0ABV12@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$allocator@D@std@@QAE@XZ
??0?$_String_val@DV?$allocator@D@std@@@std@@IAE@V?$allocator@D@1@@Z
??0?$_String_val@_WV?$allocator@_W@std@@@std@@IAE@V?$allocator@_W@1@@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@0@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
??4locale@std@@QAEAAV01@ABV01@@Z
?precision@ios_base@std@@QAEHH@Z
?flags@ios_base@std@@QAEHH@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?exceptions@ios_base@std@@QAEXH@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?widen@?$ctype@_W@std@@QBE_WD@Z
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_W@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
?toupper@?$ctype@_W@std@@QBE_W_W@Z
?narrow@?$ctype@_W@std@@QBED_WD@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0locale@std@@QAE@XZ
?grouping@?$numpunct@_W@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?thousands_sep@?$numpunct@_W@std@@QBE_WXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?assign@?$char_traits@_W@std@@SAXAA_WAB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEAB_WI@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
?allocate@?$allocator@_W@std@@QAEPA_WIPBX@Z
?copy@?$char_traits@_W@std@@SAPA_WPA_WPB_WI@Z
?to_char_type@?$char_traits@_W@std@@SA_WABG@Z
?eq@?$char_traits@_W@std@@SA_NAB_W0@Z
?not_eof@?$char_traits@_W@std@@SAGABG@Z
?to_int_type@?$char_traits@_W@std@@SAGAB_W@Z
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_WH@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHPB_WH@Z
?_Xsgetn_s@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHPA_WIH@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHPA_WH@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$allocator@_W@std@@QAE@XZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ
?id@?$numpunct@_W@std@@2V0locale@2@A
?_Getcat@?$numpunct@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0_Lockit@std@@QAE@H@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Incref@facet@locale@std@@QAEXXZ
??1_Lockit@std@@QAE@XZ
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEPADXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??1locale@std@@QAE@XZ
??0locale@std@@QAE@ABV01@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
?str@?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??_D?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?length@?$char_traits@_W@std@@SAIPB_W@Z
?width@ios_base@std@@QBEHXZ
?flags@ios_base@std@@QBEHXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?eof@?$char_traits@_W@std@@SAGXZ
?eq_int_type@?$char_traits@_W@std@@SA_NABG0@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
?width@ios_base@std@@QAEHH@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?good@ios_base@std@@QBE_NXZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?setf@ios_base@std@@QAEHH@Z
?unsetf@ios_base@std@@QAEXH@Z
?setf@ios_base@std@@QAEHHH@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@_W@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@PB_W1@Z
??1?$codecvt@_WDH@std@@MAE@XZ
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
ws2_32
WSAGetLastError
Sections
.text Size: 742KB - Virtual size: 742KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ