d:\dbs\el\dec\target\x86\ship\msodll_30\x-none\Mso30Win32Client.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
da4dc5ddc2f5e5f5a982d62194c5b1d5d3cfd0fe6d8288ff69c1efde6deb04ba.dll
Resource
win7-20231129-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
da4dc5ddc2f5e5f5a982d62194c5b1d5d3cfd0fe6d8288ff69c1efde6deb04ba.dll
Resource
win10v2004-20240412-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
da4dc5ddc2f5e5f5a982d62194c5b1d5d3cfd0fe6d8288ff69c1efde6deb04ba
-
Size
8.7MB
-
MD5
acac1c362b0e26b2fc0fcd222504e7a6
-
SHA1
caffd671bafb99dfa45c94369d62a403671057ce
-
SHA256
da4dc5ddc2f5e5f5a982d62194c5b1d5d3cfd0fe6d8288ff69c1efde6deb04ba
-
SHA512
e58e260382d913f3c3b7bbacded476cc6175c682681fc9fd4e9cb6833568beea8c97d4ccca850ed93791e8dfd4489b679c62f92b7efcbb23fface87f899643d1
-
SSDEEP
196608:eRJG4eu6tybwTH5eU9sJngTBHaqq7Pg3x3A3:Jpn9tsJn/qqSK
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da4dc5ddc2f5e5f5a982d62194c5b1d5d3cfd0fe6d8288ff69c1efde6deb04ba
Files
-
da4dc5ddc2f5e5f5a982d62194c5b1d5d3cfd0fe6d8288ff69c1efde6deb04ba.dll windows:6 windows x86 arch:x86
b8841777c6eac0ee974c5449a3f57177
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
MultiByteToWideChar
InitializeCriticalSectionEx
GetLastError
DeleteCriticalSection
EnterCriticalSection
GetCurrentThreadId
LeaveCriticalSection
CompareStringEx
WideCharToMultiByte
SystemTimeToFileTime
GetSystemTime
CreateEventExW
ResetEvent
CloseHandle
SetEvent
WaitForSingleObjectEx
FileTimeToSystemTime
GetTickCount64
GetSystemTimeAsFileTime
FindFirstFileExW
FindNextFileW
DeleteFileW
FindClose
DisableThreadLibraryCalls
SetLastError
InitializeCriticalSection
TlsAlloc
GetSystemInfo
TlsFree
TryEnterCriticalSection
LoadLibraryExA
GetModuleHandleA
GetProcAddress
GetModuleHandleW
TlsSetValue
TlsGetValue
HeapAlloc
GetProcessHeap
HeapFree
GetLocalTime
EnumCalendarInfoExEx
GetDateFormatEx
GetCalendarInfoEx
GetUserDefaultLocaleName
InitializeSRWLock
FreeLibrary
ReleaseSRWLockShared
AcquireSRWLockShared
RaiseException
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetFileAttributesExW
GetCurrentProcessId
GetModuleHandleExW
LoadLibraryW
GetModuleFileNameW
OutputDebugStringA
GlobalSize
GlobalLock
GlobalUnlock
GetLocaleInfoEx
IsValidLocaleName
LocaleNameToLCID
FindNLSStringEx
CompareStringOrdinal
GetTimeFormatEx
EnumDateFormatsExEx
EnumTimeFormatsEx
LoadLibraryA
LoadLibraryExW
FindResourceW
LoadResource
LockResource
SizeofResource
MoveFileExW
RemoveDirectoryW
ReleaseSemaphore
CreateSemaphoreExW
LocalFree
GetSystemDefaultLangID
ResolveLocaleName
GetTickCount
OpenProcess
IsDBCSLeadByte
GetCurrentProcess
K32EnumProcessModules
K32GetModuleInformation
K32GetModuleBaseNameW
WerRegisterFile
SuspendThread
GetThreadContext
ResumeThread
CreateEventW
OpenThread
SetThreadContext
SetThreadPriority
Sleep
QueueUserAPC
GetCurrentThread
ExitThread
GetModuleFileNameA
RegisterApplicationRecoveryCallback
RegisterApplicationRestart
EncodePointer
VirtualAlloc
DecodePointer
SetUnhandledExceptionFilter
VirtualProtect
GetVersionExW
IsWow64Process
GlobalAlloc
LCIDToLocaleName
GetStringTypeExW
LCMapStringEx
IsValidLocale
GetUserDefaultLCID
GetSystemDefaultLCID
GetSystemDefaultLocaleName
GetUserGeoID
GetGeoInfoW
GetUserDefaultUILanguage
GetFileSize
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
WriteFile
CreateProcessA
SwitchToThread
ReadFile
CreateDirectoryW
EnumSystemLocalesEx
GetThreadUILanguage
VerSetConditionMask
VerifyVersionInfoW
GetFileSizeEx
FlsFree
OutputDebugStringW
RtlCaptureStackBackTrace
GetTempPathW
GetLongPathNameW
SetFileAttributesW
SetFilePointerEx
SetEndOfFile
FlushFileBuffers
LockFileEx
UnlockFileEx
GetDiskFreeSpaceExW
CopyFileExW
GetVolumePathNamesForVolumeNameW
SetFileInformationByHandle
IsDebuggerPresent
TerminateProcess
FindAtomA
AddAtomA
ExpandEnvironmentStringsW
RaiseFailFastException
LocalAlloc
GetComputerNameW
SetErrorMode
GetLocaleInfoW
GetUserPreferredUILanguages
GetACP
EnumSystemLanguageGroupsW
GetNumberFormatW
GetSystemDirectoryW
GetSystemPowerStatus
SystemTimeToTzSpecificLocalTime
ReleaseMutex
FindResourceExW
WaitForSingleObject
HeapDestroy
HeapReAlloc
HeapSize
FindFirstFileW
lstrlenW
lstrcmpW
CopyFileW
OpenFileMappingW
FlushViewOfFile
QueryPerformanceCounter
FormatMessageW
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsProcessorFeaturePresent
UnhandledExceptionFilter
VirtualQuery
ole32
OleUninitialize
ReadClassStg
CoWaitForMultipleHandles
ReleaseStgMedium
WriteClassStg
GetConvertStg
ReadClassStm
CoGetObject
CoGetTreatAsClass
GetClassFile
PropVariantCopy
CoCreateInstance
OleCreate
CLSIDFromString
CoTaskMemFree
PropVariantClear
CoTaskMemAlloc
GetHGlobalFromStream
GetHGlobalFromILockBytes
StringFromCLSID
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
OleCreateFromFile
OleCreateLinkToFile
StgOpenStorageOnILockBytes
CoInitialize
OleGetClipboard
OleSetClipboard
OleFlushClipboard
OleInitialize
OleLoad
WriteClassStm
CoInitializeEx
CoUninitialize
CoCreateFreeThreadedMarshaler
StringFromGUID2
CoCreateGuid
IIDFromString
CreateBindCtx
ProgIDFromCLSID
StgCreateDocfileOnILockBytes
rpcrt4
UuidCreate
wevtapi
EvtNext
EvtCreateRenderContext
EvtRender
EvtQuery
EvtClose
mso20win32client
ord650
ord714
ord1565
ord844
ord1890
ord719
ord1457
ord471
ord2476
ord330
ord1080
ord929
ord899
ord785
ord502
ord735
ord2747
ord2744
ord2756
ord2746
ord2755
ord2891
ord337
ord1064
ord1207
ord1714
ord1232
ord1933
ord320
ord1863
ord1382
ord429
ord1931
ord710
ord2753
ord2751
ord2752
ord2749
ord2750
ord1051
ord633
ord1252
ord375
ord1576
ord1324
ord17
ord1460
ord1357
ord1913
ord2913
ord2319
ord2908
ord2416
ord2394
ord2763
ord2284
ord1329
ord1928
ord813
ord1364
ord341
ord386
ord304
ord1321
ord1256
ord2330
ord1556
ord2867
ord2316
ord2396
ord2745
ord2824
ord423
ord1065
ord1586
ord2266
ord2261
ord2255
ord990
ord2477
ord1619
ord2906
ord2131
ord2106
ord2165
ord2126
ord720
ord1830
ord2142
ord2718
ord2325
ord1174
ord263
ord88
ord689
ord713
ord529
ord184
ord770
ord309
ord555
ord930
ord577
ord270
ord382
ord1797
ord1236
ord1489
ord288
ord554
ord1626
ord563
ord1921
ord1966
ord1654
ord819
ord1923
ord1605
ord467
ord1650
ord1987
ord1474
ord11
ord249
ord1128
ord2428
ord958
ord779
ord2425
ord1715
ord408
ord548
ord1479
ord897
ord134
ord1165
ord1332
ord293
ord171
ord691
ord1420
ord839
ord924
ord827
ord378
ord2098
ord257
ord2426
ord1542
ord1973
ord44
ord1083
ord871
ord2314
ord1795
ord1132
ord359
ord85
ord248
ord70
ord1561
ord1839
ord1721
ord722
ord289
ord102
ord632
ord1385
ord1864
ord1107
ord146
ord845
ord1794
ord186
ord128
ord682
ord1793
ord1201
ord1791
ord760
ord913
ord1481
ord540
ord142
ord1821
ord1609
ord542
ord2838
ord361
ord23
ord592
ord625
ord1606
ord1926
ord1091
ord291
ord322
ord730
ord666
ord798
ord384
ord2015
ord793
ord2299
ord519
ord1541
ord1333
ord33
ord266
ord1862
ord137
ord1163
ord972
ord1399
ord764
ord1815
ord131
ord1971
ord2374
ord1406
ord1100
ord936
ord492
ord723
ord344
ord38
ord396
ord660
ord9
ord1197
ord1762
ord1666
ord1186
ord956
ord1400
ord1287
ord1359
ord1521
ord1200
ord618
ord973
ord535
ord241
ord1996
ord82
ord1506
ord2487
ord449
ord780
ord583
ord242
ord1416
ord522
ord2356
ord2309
ord67
ord1937
ord983
ord407
ord1647
ord788
ord468
ord834
ord1427
ord488
ord652
ord1471
ord173
ord1340
ord497
ord1104
ord379
ord1876
ord765
ord944
ord8
ord300
ord1727
ord1842
ord1510
ord381
ord808
ord425
ord2196
ord2057
ord649
ord347
ord1154
ord705
ord269
ord438
ord1746
ord2840
ord2469
ord2479
ord1088
ord1039
ord1299
ord1147
ord1674
ord1293
ord1507
ord1380
ord77
ord1084
ord1574
ord101
ord1850
ord410
ord404
ord533
ord1681
ord1964
ord156
ord259
ord1062
ord677
ord994
ord1251
ord1634
ord1356
ord42
ord1957
ord1837
ord1149
ord1262
ord1515
ord1902
ord842
ord369
ord996
ord909
ord1409
ord1822
ord148
ord1377
ord1267
ord1782
ord732
ord1717
ord1238
ord508
ord1245
ord1866
ord1389
ord370
ord758
ord1525
ord1557
ord1373
ord1810
ord409
ord613
ord1812
ord1322
ord1811
ord1353
ord641
ord560
ord1363
ord1103
ord324
ord213
ord414
ord2715
ord1362
ord2517
ord2917
ord1444
ord1195
ord1630
ord333
ord16
ord2060
ord284
ord287
ord469
ord1014
ord41
ord1109
ord715
ord1767
ord1585
ord2235
ord1248
ord2207
ord1593
ord297
ord545
ord1194
ord120
ord2197
ord1368
ord1686
ord938
ord1153
ord1383
ord1319
ord1446
ord478
ord2700
ord1220
ord2856
ord2283
ord427
ord260
ord1005
ord820
ord1097
ord653
ord1101
ord2224
ord2282
ord805
ord1696
ord995
ord2297
ord1462
ord1950
ord688
ord635
ord565
ord1584
ord1338
ord1302
ord252
ord643
ord129
ord1284
ord1054
ord879
ord1244
ord235
ord917
ord1464
ord2328
ord979
ord881
ord1079
ord659
ord1979
ord1092
ord230
ord668
ord860
ord380
ord302
ord2310
ord305
ord2032
ord749
ord1212
ord1263
ord667
ord638
ord954
ord2292
ord352
ord1925
ord2296
ord546
ord1523
ord447
ord1117
ord1643
ord1504
ord2061
ord1208
ord36
ord188
ord989
ord1698
ord882
ord1651
ord892
ord2896
ord2857
ord2436
ord385
ord1601
ord1865
ord2442
ord498
ord787
ord2905
ord1577
ord281
ord2888
ord1171
ord472
ord1215
ord1992
ord853
ord616
ord1487
ord1467
ord2001
ord2742
ord725
ord2829
vcruntime140
_except_handler4_common
memcpy
memset
memmove
strstr
wcsrchr
wcsstr
wcschr
__std_type_info_destroy_list
__std_type_info_compare
_purecall
__std_exception_copy
__std_exception_destroy
__std_terminate
__CxxFrameHandler3
_CxxThrowException
memchr
memcmp
strchr
msvcp140
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_K@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?peek@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?ignore@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_JG@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAI@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?empty@locale@std@@SA?AV12@XZ
??Bios_base@std@@QBE_NXZ
?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
_Cnd_init
_Mtx_init
_Cnd_do_broadcast_at_thread_exit
_Cnd_signal
_Cnd_destroy
_Mtx_destroy
_Thrd_start
_Cnd_wait
_Thrd_detach
_Thrd_join
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE_W_W@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
_Thrd_sleep
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEGXZ
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?eof@ios_base@std@@QBE_NXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
_Xtime_get_ticks
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Random_device@std@@YAIXZ
_Cnd_timedwait
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_current_owns
_Cnd_broadcast
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Query_perf_frequency
_Query_perf_counter
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WXZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z
?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?width@ios_base@std@@QBE_JXZ
?width@ios_base@std@@QAE_J_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?flags@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?uncaught_exception@std@@YA_NXZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
_Wcscoll
_Wcsxfrm
?id@?$collate@_W@std@@2V0locale@2@A
?id@?$ctype@_W@std@@2V0locale@2@A
?is@?$ctype@_W@std@@QBE_NF_W@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
??0_Lockit@std@@QAE@H@Z
??0_Locinfo@std@@QAE@PBD@Z
?c_str@?$_Yarn@D@std@@QBEPBDXZ
??1_Lockit@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
?_Incref@facet@locale@std@@UAEXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?_Xbad_function_call@std@@YAXXZ
_Thrd_id
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
?_Xinvalid_argument@std@@YAXPBD@Z
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
?_XGetLastError@std@@YAXXZ
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setf@ios_base@std@@QAEHHH@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?fail@ios_base@std@@QBE_NXZ
?id@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?_Getcat@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
?get@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PB_W4@Z
?_Syserror_map@std@@YAPBDH@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
api-ms-win-crt-heap-l1-1-0
malloc
calloc
free
realloc
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_initialize_narrow_environment
_errno
_configure_narrow_argv
_crt_atexit
_invalid_parameter_noinfo
_seh_filter_dll
_initterm_e
terminate
_initterm
_cexit
_invalid_parameter_noinfo_noreturn
strerror
_register_onexit_function
_execute_onexit_table
api-ms-win-crt-string-l1-1-0
toupper
tolower
isxdigit
isalnum
_stricmp
wcscmp
wcstok_s
wmemcpy_s
_wcsnicmp
iswdigit
isdigit
wcsncmp
wcscpy_s
strncpy_s
wcsncpy_s
wcsncat_s
wcscat_s
isspace
_towupper_l
_wcsicmp
strcmp
towlower
towupper
iswspace
wcsnlen
strncmp
api-ms-win-crt-math-l1-1-0
_dtest
round
_libm_sse2_cos_precise
_libm_sse2_log_precise
_libm_sse2_pow_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
ceil
floor
_except1
copysign
api-ms-win-crt-time-l1-1-0
_time64
_gmtime32_s
_mktime64
_difftime64
_gmtime64_s
strftime
api-ms-win-crt-convert-l1-1-0
wcstol
wcstoul
_i64tow_s
_wtoi64
atoi
_wtoi
_ui64tow_s
_itow_s
_wcstoui64
wcstombs_s
strtol
btowc
_wtol
strtoul
strtoull
_ultow_s
strtoll
strtod
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
fgets
fclose
__stdio_common_vsprintf_s
fgetwc
fwrite
__stdio_common_vswprintf
__stdio_common_vswprintf_s
__stdio_common_vsprintf
fputwc
setvbuf
ungetwc
ungetc
fgetc
__stdio_common_vsnwprintf_s
__stdio_common_vsnprintf_s
fgetpos
_fseeki64
fsetpos
fflush
__stdio_common_vsscanf
api-ms-win-crt-utility-l1-1-0
rand
srand
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-locale-l1-1-0
_create_locale
localeconv
__initialize_lconv_for_unsigned_char
Exports
Exports
?MsoGetSystemDefaultLCID@Config@Mso@@YAKXZ
?MsoGetUserDefaultLCID@Config@Mso@@YAKXZ
_AdjustMonth@12
_ConvertDateGregToLocal@8
_ConvertDateLocalToGreg@8
_DaysInMonth@12
_GetDateFormatInfo@12
_GetMonthAdvance@16
_IsCalendarSupported@4
_MonthsInYear@16
_MsoCchLoadWz@16
_MsoChsFromLid@4
_MsoFLoadWz@16
_MsoGetHinstIntl@0
_MsoGetUILcid@0
_MsoLoadStringW@16
_MsoSetLocale@4
_MsoWchToLower@4
_MsoWchToUpper@4
_SetMonthAdvance@16
Sections
.text Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 168KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ