e:\Company\Holter\HolterSystem\trunk\HolterSystem\Release\HSMiscSetting.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a7f872dcee85919ccc1bed97eb8ce2f51f0b03809ffd6a938b08ee81febcd591.exe
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
a7f872dcee85919ccc1bed97eb8ce2f51f0b03809ffd6a938b08ee81febcd591.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
a7f872dcee85919ccc1bed97eb8ce2f51f0b03809ffd6a938b08ee81febcd591
-
Size
1.8MB
-
MD5
36d749b0c4448a181ffb313ba863cf0f
-
SHA1
a477b9dd1abdddbcdef4f87030f162e482ff46c2
-
SHA256
a7f872dcee85919ccc1bed97eb8ce2f51f0b03809ffd6a938b08ee81febcd591
-
SHA512
c581e3935a16fdea6fdd014eb4c3f9d598cb75afff44f92487d714e8bbc99b9afbd79dddd53dbe4aa59eaa2b5febaa5ce7a2f780d708e132327c5bb43ae88367
-
SSDEEP
24576:pUKUzUUAW4HqwdigBdDt3lLB80OQ/K5e30I5wS4Uuj9ZHOcxT0+57igVaNbdBIW5:p+U6ypdRLVgT0+57NVaNbdBIW5
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7f872dcee85919ccc1bed97eb8ce2f51f0b03809ffd6a938b08ee81febcd591
Files
-
a7f872dcee85919ccc1bed97eb8ce2f51f0b03809ffd6a938b08ee81febcd591.exe windows:5 windows x86 arch:x86
c476ac8eeaaaf4a0d0bbf8ccfa0dad57
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mfc90u
ord1047
ord587
ord792
ord2081
ord2430
ord1140
ord3397
ord3396
ord1063
ord3622
ord3637
ord3577
ord2282
ord4512
ord2130
ord6088
ord2097
ord3057
ord2469
ord4410
ord4541
ord1220
ord6693
ord586
ord686
ord1688
ord436
ord1144
ord2449
ord2452
ord2451
ord452
ord5535
ord702
ord663
ord404
ord2145
ord2523
ord2458
ord608
ord324
ord2084
ord3991
ord3664
ord1725
ord1789
ord1268
ord613
ord337
ord4039
ord2800
ord1745
ord3943
ord3231
ord1357
ord4451
ord6013
ord6808
ord3749
ord1116
ord5867
ord6091
ord6699
ord6527
ord287
ord5938
ord579
ord6574
ord4398
ord2595
ord4138
ord3687
ord1213
ord3685
ord2431
ord3993
ord3908
ord3445
ord1018
ord756
ord1628
ord551
ord4692
ord1640
ord4700
ord5662
ord1709
ord1405
ord3374
ord6157
ord5011
ord4027
ord258
ord3810
ord400
ord3646
ord2953
ord2959
ord5943
ord5777
ord6821
ord1276
ord453
ord950
ord3854
ord4496
ord4250
ord1494
ord291
ord1219
ord869
ord871
ord517
ord862
ord864
ord1246
ord4196
ord3654
ord4660
ord1719
ord2283
ord778
ord4026
ord2366
ord753
ord539
ord3628
ord5152
ord5661
ord5168
ord4632
ord4608
ord5277
ord5301
ord5047
ord5231
ord5508
ord5511
ord5509
ord5510
ord6095
ord525
ord6760
ord3651
ord1716
ord1783
ord775
ord1925
ord2045
ord1868
ord3819
ord3333
ord3033
ord4507
ord3853
ord1070
ord339
ord6469
ord2356
ord6761
ord2243
ord4056
ord5930
ord1041
ord554
ord6727
ord571
ord4454
ord985
ord3859
ord4389
ord1224
ord2100
ord5897
ord3882
ord2656
ord3881
ord2267
ord6636
ord6089
ord1127
ord664
ord3399
ord2209
ord405
ord3812
ord3360
ord3122
ord5151
ord5344
ord5055
ord4918
ord5409
ord3994
ord5012
ord4887
ord4888
ord6172
ord2262
ord6807
ord2831
ord443
ord4473
ord3319
ord695
ord3486
ord901
ord5875
ord1009
ord3868
ord749
ord5497
ord3082
ord4351
ord4399
ord2263
ord1222
ord692
ord1488
ord6791
ord2105
ord1602
ord4511
ord2279
ord1695
ord4657
ord3562
ord3110
ord3841
ord4311
ord1678
ord1099
ord6476
ord3807
ord411
ord2210
ord2818
ord2224
ord340
ord2207
ord4630
ord5166
ord3236
ord3498
ord320
ord1487
ord846
ord1261
ord4490
ord814
ord2337
ord321
ord4275
ord2702
ord1088
ord1298
ord6164
ord899
ord933
ord277
ord3773
ord3966
ord4519
ord2600
ord1855
ord3494
ord338
ord2141
ord2758
ord6063
ord6572
ord6060
ord6566
ord4579
ord6569
ord6372
ord6547
ord6183
ord6096
ord6101
ord5974
ord6040
ord5863
ord5850
ord6418
ord6174
ord3513
ord367
ord1145
ord1353
ord1255
ord636
ord2478
ord6187
ord2833
ord802
ord800
ord3322
ord786
ord6604
ord4044
ord4037
ord6577
ord4530
ord5387
ord2901
ord4527
ord333
ord6094
ord590
ord795
ord5322
ord3741
ord2470
ord2597
ord4543
ord3488
ord2971
ord2592
ord3953
ord788
ord3157
ord1787
ord1723
ord6524
ord4616
ord4320
ord5802
ord4396
ord2078
ord2289
ord2297
ord2288
ord2269
ord2265
ord2227
ord1432
ord1425
ord1431
ord5595
ord6794
ord5652
ord2627
ord5403
ord5611
ord2137
ord3662
ord585
ord1199
ord790
ord3674
ord3235
ord6311
ord1533
ord4276
ord1102
ord611
ord3489
ord4652
ord1665
ord2274
ord2593
ord809
ord4518
ord4476
ord2479
ord2676
ord3323
ord1553
ord2490
ord665
ord406
ord904
ord5879
ord698
ord446
ord4477
ord905
ord5919
ord2143
ord1354
ord5880
ord447
ord699
ord3515
ord1607
ord2360
ord4774
ord4494
ord938
ord5182
ord744
ord524
ord2069
ord3589
ord6822
ord5778
ord6811
ord5767
ord1243
ord1707
ord2571
ord614
ord6065
ord2904
ord1096
ord286
ord935
ord2596
ord1599
ord5851
ord285
ord3220
ord6659
ord4442
ord290
ord1137
ord1108
ord3496
ord4654
ord1667
ord2277
ord4510
ord1601
ord2103
ord266
ord265
ord799
ord2694
ord6630
ord5979
ord12404
ord13194
ord9972
ord10457
ord10304
ord13136
ord12165
ord12617
ord7766
ord9965
ord4448
ord4423
ord6801
ord4173
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord2087
ord3217
ord5674
ord5676
ord8452
ord4347
ord4996
ord5680
ord5663
ord6018
ord3115
ord4905
ord9272
ord1603
ord1248
ord4405
ord615
ord1098
ord4211
ord7332
ord7138
ord4043
ord4967
ord811
ord5632
ord5324
ord2208
ord1810
ord1809
ord1675
ord3353
ord6408
ord1492
ord5653
ord4682
ord280
ord6579
ord5008
ord4631
ord5167
ord4131
ord4000
ord1938
ord5939
msvcr90
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
ldiv
vswprintf_s
_vscwprintf
swprintf_s
_wtof
_wtoi
wcscpy_s
_purecall
?what@exception@std@@UBEPBDXZ
??8type_info@@QBE_NABV0@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
_localtime64_s
swscanf_s
wcsftime
_localtime32_s
_time32
_mktime64
??0exception@std@@QAE@ABV01@@Z
rand
srand
_time64
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
memmove_s
memcpy_s
_recalloc
calloc
_invalid_parameter_noinfo
free
strtod
__iob_func
fprintf
longjmp
strncpy
fread
_setjmp3
sprintf
abort
_CIatan
_CIcos
strchr
_CxxThrowException
strcpy_s
strrchr
wcsncpy_s
_CIpow
_CIsqrt
_wcslwr_s
memcpy
wcsncmp
malloc
iswalpha
iswdigit
iswspace
iswalnum
iswxdigit
iswprint
atof
_wtol
qsort
wcschr
_wcsicmp
wcsstr
memset
__CxxFrameHandler3
kernel32
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
GetModuleHandleW
lstrcpynW
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
GetFileSizeEx
CreateFileW
ReadFile
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
GetLastError
lstrlenW
GetModuleFileNameW
GetCommandLineW
LocalFree
GetFileAttributesW
GetPrivateProfileStringW
GetVersion
SetThreadUILanguage
SetThreadLocale
GetTickCount
FindResourceW
SizeofResource
LoadResource
LockResource
FreeResource
CreateProcessW
CloseHandle
GetModuleHandleA
SetLastError
GetVersionExW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
LoadLibraryExW
SetEvent
ResumeThread
SetThreadPriority
CreateEventW
CreateThread
EnumResourceLanguagesW
EnumResourceTypesW
EnumResourceNamesW
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryA
LoadLibraryExA
GetModuleFileNameA
OpenProcess
LocalSize
HeapFree
HeapAlloc
GetProcessHeap
lstrcmpA
TlsAlloc
TlsGetValue
TlsSetValue
CompareStringW
GetCurrentDirectoryW
GetUserDefaultUILanguage
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
FormatMessageW
LoadLibraryW
GetProcAddress
FreeLibrary
GetLogicalDrives
GetDriveTypeW
InterlockedIncrement
OutputDebugStringW
InterlockedDecrement
SetFilePointer
SetEndOfFile
SetFilePointerEx
WriteFile
user32
GetDCEx
LockWindowUpdate
PeekMessageW
PostThreadMessageW
DrawStateW
LoadBitmapW
GetIconInfo
CopyIcon
LoadImageW
DestroyIcon
CreateIconIndirect
CreateIconFromResourceEx
DrawIconEx
RegisterClipboardFormatW
WindowFromPoint
GetCursor
EqualRect
SetWindowRgn
KillTimer
DrawFrameControl
DrawFocusRect
LookupIconIdFromDirectoryEx
GetMenuStringW
LoadMenuW
SetScrollPos
SetScrollInfo
EnableScrollBar
GetScrollInfo
CallWindowProcA
DefWindowProcA
DefFrameProcA
DefFrameProcW
DefDlgProcA
DefDlgProcW
DefMDIChildProcA
DefMDIChildProcW
RegisterClassA
RegisterClassW
AdjustWindowRectEx
DrawEdge
GetClassLongW
SendMessageTimeoutW
MoveWindow
GetDoubleClickTime
GetSubMenu
InvertRect
IntersectRect
InvalidateRect
RegisterWindowMessageW
EmptyClipboard
CloseClipboard
SetClipboardData
MessageBeep
ShowCaret
HideCaret
OpenClipboard
GetDesktopWindow
GetDlgItem
mouse_event
IsWindowVisible
EnumWindows
IsWindowUnicode
IsWindow
CallWindowProcW
GetWindowLongW
GetWindowLongA
SetWindowLongW
SetWindowLongA
SetTimer
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowThreadProcessId
PostMessageW
DefWindowProcW
BeginPaint
SetWindowsHookExW
CallNextHookEx
GetClassNameW
GetSysColor
UnhookWindowsHookEx
CopyRect
SystemParametersInfoW
SetWindowPos
GetMessageW
LoadIconW
ReleaseCapture
GetCursorPos
SetCursor
GetKeyState
GetSysColorBrush
FillRect
LoadCursorW
GetParent
GetWindow
GetNextDlgTabItem
SetCapture
GetCapture
RedrawWindow
ReleaseDC
GetDC
ScreenToClient
ClientToScreen
OffsetRect
SetRectEmpty
SetRect
PtInRect
TranslateMessage
GetMenuItemCount
GetMenuState
SetClassLongW
GetMenu
GetWindowRgn
GetDlgCtrlID
UnionRect
UpdateWindow
MapVirtualKeyW
WaitMessage
GetMenuItemID
GetMenuItemInfoW
IsMenu
IsChild
SetParent
DeferWindowPos
MapWindowPoints
SetFocus
IsDialogMessageW
ShowWindow
IsClipboardFormatAvailable
EndDeferWindowPos
BeginDeferWindowPos
CreatePopupMenu
GetMenuDefaultItem
SetCursorPos
CharUpperW
ToUnicodeEx
GetKeyboardState
GetKeyboardLayoutList
DestroyMenu
EndDialog
GetForegroundWindow
GetLastActivePopup
InflateRect
IsRectEmpty
GetFocus
GetClipboardData
EnableWindow
EndPaint
SendMessageW
GetSystemMenu
AppendMenuW
GetWindowRect
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
MessageBoxW
DispatchMessageW
gdi32
GetDeviceCaps
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
SelectObject
EnumFontFamiliesExW
CreatePen
CreateRectRgnIndirect
GetTextExtentPoint32W
GetPixel
SetPixel
GetCurrentObject
DeleteDC
StretchBlt
CreateBitmap
SetTextColor
SetBkColor
CreateDIBSection
SetStretchBltMode
GetDIBits
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateSolidBrush
DeleteObject
GetObjectType
PatBlt
CreateFontIndirectW
GetStockObject
GetObjectW
GetTextColor
GetBitmapBits
ExtCreateRegion
ExtSelectClipRgn
IntersectClipRect
Rectangle
Polygon
GetWindowOrgEx
RoundRect
GetRgnBox
CreatePolygonRgn
GetViewportOrgEx
CreateFontW
BeginPath
PolyBezierTo
LineTo
CloseFigure
EndPath
StrokeAndFillPath
FillPath
StrokePath
Polyline
Ellipse
GetWindowExtEx
GetViewportExtEx
MoveToEx
OffsetViewportOrgEx
PtInRegion
SetPixelV
GetClipBox
SelectPalette
CreateDIBitmap
CreatePalette
GetTextMetricsW
CreatePatternBrush
SetBrushOrgEx
SetBkMode
GetTextCharsetInfo
OffsetRgn
CombineRgn
CreateRectRgn
GetClipRgn
advapi32
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
shell32
ShellExecuteW
CommandLineToArgvW
comctl32
InitCommonControlsEx
_TrackMouseEvent
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Destroy
ImageList_GetBkColor
ImageList_GetImageInfo
ImageList_DrawIndirect
FlatSB_GetScrollProp
oleaut32
SysFreeString
SysAllocString
VariantClear
msvcp90
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@QAEXXZ
??0locale@std@@QAE@XZ
??1locale@std@@QAE@XZ
??4locale@std@@QAEAAV01@ABV01@@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?narrow@?$ctype@_W@std@@QBED_WD@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?exceptions@ios_base@std@@QAEXH@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHPA_WH@Z
?_Xsgetn_s@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHPA_WIH@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHPB_WH@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_WH@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXD@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXID@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?copy@?$char_traits@_W@std@@SAPA_WPA_WPB_WI@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?uncaught_exception@std@@YA_NXZ
?id@?$ctype@_W@std@@2V0locale@2@A
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?allocate@?$allocator@_W@std@@QAEPA_WIPBX@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
xmllite
CreateXmlReader
CreateXmlWriterOutputWithEncodingName
CreateXmlWriter
winmm
PlaySoundW
imagehlp
ImageDirectoryEntryToData
shlwapi
PathIsDirectoryW
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 301KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 609KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ