C:\Users\sursen\Desktop\codes\Ofd_Pro_Master\websocket\OFD_YANFA3_dev_Outer\build\Release\websocket.pdb
Static task
static1
Behavioral task
behavioral1
Sample
db628dbb67c803c734083f16e7caf0893543476e9690038f1a560346689cd7e1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
db628dbb67c803c734083f16e7caf0893543476e9690038f1a560346689cd7e1.exe
Resource
win10v2004-20240419-en
General
-
Target
db628dbb67c803c734083f16e7caf0893543476e9690038f1a560346689cd7e1
-
Size
2.0MB
-
MD5
0242f56851d39931c0d68202a9c6d04d
-
SHA1
2b6735f78c5589d209e9c33f4c1e934d0195a60b
-
SHA256
db628dbb67c803c734083f16e7caf0893543476e9690038f1a560346689cd7e1
-
SHA512
34481856ffd0ac67b081a0951175fa5b03f0a6c936563a3991d5e7fb559bf2ef6b36a6981f87c1713ee254b6c637fd0d1db5922221fd5e5c95edb76f9fb107fe
-
SSDEEP
49152:BkKwSpbHbJ6+GYUe7PcKu6GaX8m4IBAUZLYc/1bsszC:6JSpbHbGZKBAUZLbs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db628dbb67c803c734083f16e7caf0893543476e9690038f1a560346689cd7e1
Files
-
db628dbb67c803c734083f16e7caf0893543476e9690038f1a560346689cd7e1.exe windows:5 windows x86 arch:x86
b25255b5d068110901ff4d20368e9af9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
sep40
?GetResolution@CSEP_Page@@QBE?AW4tag_SEP_Error@@PAH@Z
?GetWidth_mm@CSEP_Page@@QAENXZ
?GetHeight_mm@CSEP_Page@@QAENXZ
?GetPagesCount@CSEP_Doc@@QBE?AW4tag_SEP_Error@@PAI@Z
?Save@CSEP_Docbase@@QAE?AW4tag_SEP_Error@@XZ
?Disconnect@CSEP_DCMS@@QAE?AW4tag_SEP_Error@@XZ
?Close@CSEP_Docbase@@QAE?AW4tag_SEP_Error@@XZ
?GetAllCharsInfo@CSEP_Text@@QAE?AW4tag_SEP_Error@@PAUSINGLE_CHAR_INFO@1@AAH@Z
?GetSeal@CSEP_SealList@@QBE?AW4tag_SEP_Error@@IPAPAVCSEP_Seal@@@Z
?GetSealsCount@CSEP_SealList@@QBE?AW4tag_SEP_Error@@PAI@Z
?GetDocsCount@CSEP_DocSet@@QBE?AW4tag_SEP_Error@@PAI@Z
?Size@CSEP_From@@QBEIXZ
?GetSEPObject@CSEP_From@@QAEPAVCSEP_Object@@H@Z
?AddSEPObject@CSEP_From@@QAEIPAVCSEP_Object@@@Z
?AppendAnnotImage@CSEP_Doc@@QAE?AW4tag_SEP_Error@@ABU_tagAnnotImageParams@1@@Z
?GetPage@CSEP_Doc@@QBE?AW4tag_SEP_Error@@IPAPAVCSEP_Page@@@Z
?GetOESSealImage@CEStamp_GB_Lib@@QAEHPBDPAPAEPAH2PAJ3@Z
?SetColorSpace@CSEP_Object@@QAE?AW4tag_SEP_Error@@H@Z
?AppendAnnotTextInRect@CSEP_Doc@@QAE?AW4tag_SEP_Error@@ABU_tagAnnotTextInRectParams@1@@Z
?AppendAnnotTextEx@CSEP_Doc@@QAE?AW4tag_SEP_Error@@ABU_tagAnnotTextParams@1@AAPAX@Z
?GetAllText@CSEP_Doc@@QAE?AW4tag_SEP_Error@@PAPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H_N@Z
?DeletePtr@CSEP_Doc@@SAXPAX@Z
?GetRootDocSet@CSEP_Docbase@@QBE?AW4tag_SEP_Error@@PAPAVCSEP_DocSet@@@Z
??0DevicePara@@QAE@XZ
??1DevicePara@@UAE@XZ
?SetPrinterParam@CSEP_Printer@@QAE_NPAVDevicePara@@@Z
?GetStampManager@CEStamp_GB_Lib@@SAAAV1@XZ
?GetProviders@CEStamp_GB_Lib@@QAEHPAPAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z
?SetProvider@CEStamp_GB_Lib@@QAE_NPBD@Z
?DeleteArrayMem@CEStamp_GB_Lib@@SAXPAX@Z
?DeleteVecStrings@CEStamp_GB_Lib@@SAXPAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z
?GetSealList@CEStamp_GB_Lib@@QAEHPAPAEPAH@Z
?GetSealList@CEStamp_GB_Lib@@QAEHPAPAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@0@Z
?GetSealDataFromDev@CEStamp_GB_Lib@@QAEHPBEIPAPAXPAI@Z
?GetErrorMsg@CEStamp_GB_Lib@@QAEXKPAPAEPAH@Z
??0CSEP_GDIPrinter@@QAE@PBD@Z
??1CSEP_GDIPrinter@@UAE@XZ
?SetEnableFilter@CSEP_Docbase@@QAE?AW4tag_SEP_Error@@H@Z
?AddFilterPara@CSEP_Docbase@@QAE?AW4tag_SEP_Error@@PBD@Z
?DelFilterPara@CSEP_Docbase@@QAE?AW4tag_SEP_Error@@PBD@Z
?GetSealList@CSEP_Docbase@@QBE?AW4tag_SEP_Error@@PAPAVCSEP_SealList@@@Z
?What@CSEP_Object@@QBE?AW4tag_ObjType@1@XZ
?TraceParent@CSEP_Object@@QBEPAV1@W4tag_ObjType@1@@Z
?GetWidth@CSEP_Page@@QBE?AW4tag_SEP_Error@@PAN@Z
??1CSEP_From@@QAE@XZ
??0CSEP_From@@QAE@XZ
?GetErrorInfo@CSEP_DCMS@@QAEXPAD@Z
?OpenDocbase@CSEP_DCMS@@QAE?AW4tag_SEP_Error@@PBDPAPAVCSEP_Docbase@@@Z
?Connect@CSEP_DCMS@@SA?AW4tag_SEP_Error@@PAPAV1@@Z
?PrintDocEx@CSEP_Doc@@QAE?AW4tag_SEP_Error@@PAVCSEP_Printer@@_N@Z
?SetDynamicWatermarking@CSEP_Doc@@QAEXABU_tagDynamicWatermarking@1@@Z
?GetVersionsCount@CSEP_Doc@@QBE?AW4tag_SEP_Error@@PAI@Z
?InsertSeal@CSEP_Doc@@QAE?AW4tag_SEP_Error@@PBU__SealParam@CSEP_Seal@@@Z
?GetPage_s@CSEP_Doc@@QBE?AW4tag_SEP_Error@@IPAPAVCSEP_Page@@@Z
?GetPagesCount_s@CSEP_Doc@@QBE?AW4tag_SEP_Error@@PAI@Z
?Execute@CSEP_SimpleQuery@@UAE?AW4tag_SEP_Error@@XZ
??1CSEP_SimpleQuery@@UAE@XZ
??0CSEP_SimpleQuery@@QAE@XZ
?GetRecord@CSEP_Query@@QAEPAVCSEP_From@@XZ
?SetFrom@CSEP_Query@@QAEXPAVCSEP_From@@@Z
?SetObjectType@CSEP_Query@@QAEXPBD@Z
?VerifySealSign@CSEP_Seal@@QAE?AW4tag_SEP_Error@@HPA_NPAD@Z
?GetRightBottom@CSEP_Seal@@QBE?AW4tag_SEP_Error@@PAN0H@Z
?GetLeftTop@CSEP_Seal@@QBE?AW4tag_SEP_Error@@PAN0H@Z
?GetPageNo@CSEP_Seal@@QAEIH@Z
?GetName@CSEP_Seal@@QBE?AW4tag_SEP_Error@@PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetImage@CSEP_Page@@QAE?AW4tag_SEP_Error@@PBVCSEP_Path@@NW4tag_PageImageFormat@1@W4tag_PageImageOutput@1@PBDPAIPBV?$vector@HV?$allocator@H@std@@@std@@_N@Z
?GetHeight@CSEP_Page@@QBE?AW4tag_SEP_Error@@PAN@Z
?MergeOFD@CSEP_DCMS@@QAE?AW4tag_SEP_Error@@PBD0000H@Z
?SaveAs@CSEP_Docbase@@QAE?AW4tag_SEP_Error@@PBD@Z
?GetDoc@CSEP_DocSet@@QBE?AW4tag_SEP_Error@@IPAPAVCSEP_Doc@@@Z
kernel32
ExpandEnvironmentStringsA
EncodePointer
PeekNamedPipe
GetACP
UnhandledExceptionFilter
HeapSetInformation
GetFileType
FormatMessageA
TerminateProcess
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
LocalFree
QueryPerformanceFrequency
DecodePointer
LoadLibraryExA
CopyFileA
CreateWaitableTimerA
ReleaseMutex
DeleteCriticalSection
CreateMutexA
GetModuleHandleA
CreateIoCompletionPort
WaitForMultipleObjects
CreateEventW
QueueUserAPC
GetShortPathNameA
VerifyVersionInfoA
InitializeCriticalSectionAndSpinCount
TerminateThread
SleepEx
VerSetConditionMask
GetQueuedCompletionStatus
SetUnhandledExceptionFilter
SetWaitableTimer
SetErrorMode
GetFileAttributesA
GetTickCount
GetFileSize
CreateNamedPipeA
FlushFileBuffers
DisconnectNamedPipe
Sleep
ConnectNamedPipe
DeleteFileA
FindNextFileA
SetFileAttributesA
RemoveDirectoryA
FindFirstFileA
CreateDirectoryA
WaitForSingleObject
TlsFree
TlsAlloc
PostQueuedCompletionStatus
InterlockedExchangeAdd
EnterCriticalSection
InterlockedExchange
LeaveCriticalSection
SetEvent
CreateEventA
WaitForSingleObjectEx
TlsSetValue
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
TlsGetValue
FindClose
SetLastError
GetModuleFileNameA
CreateFileMappingW
CloseHandle
UnmapViewOfFile
MapViewOfFile
MultiByteToWideChar
WideCharToMultiByte
CreateFileA
SetFilePointer
SetEndOfFile
FreeLibrary
GetProcAddress
LoadLibraryA
GetLocalTime
GetTempPathA
SystemTimeToFileTime
GetCurrentProcess
SetHandleInformation
WriteFile
ReadFile
GetStdHandle
GetLastError
user32
GetDC
MessageBoxA
ReleaseDC
gdi32
GetDeviceCaps
winspool.drv
ord201
shell32
SHGetSpecialFolderPathA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteA
ShellExecuteExA
ole32
CoCreateGuid
oleaut32
VariantClear
advapi32
RegOpenKeyExA
RegQueryValueExA
GetUserNameA
RegCloseKey
pdflib
pdf_jbuf
PDF_get_errnum
PDF_get_api
PDF_set_parameter
pdf_catch
PDF_get_opaque
PDF_get_apiname
PDF_get_errmsg
qtcore4
?qRegisterResourceData@@YA_NHPBE00@Z
?codecForCStrings@QString@@0PAVQTextCodec@@A
?cftr@QTextCodec@@0PAV1@A
?execute@QProcess@@SAHABVQString@@@Z
?qUnregisterResourceData@@YA_NHPBE00@Z
?shared_null@QByteArray@@0UData@1@A
??0QBuffer@@QAE@PAVQByteArray@@PAVQObject@@@Z
??1QBuffer@@UAE@XZ
?open@QBuffer@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
?close@QBuffer@@UAEXXZ
??1QByteArray@@QAE@XZ
??0QString@@QAE@PBD@Z
??1QString@@QAE@XZ
??0QVariant@@QAE@XZ
?codecForName@QTextCodec@@SAPAV1@PBD@Z
??0QVariant@@QAE@H@Z
??1QVariant@@QAE@XZ
?isNull@QVariant@@QBE_NXZ
?toInt@QVariant@@QBEHPA_N@Z
?toString@QVariant@@QBE?AVQString@@XZ
??0QSettings@@QAE@ABVQString@@W4Format@0@PAVQObject@@@Z
??1QSettings@@UAE@XZ
?beginGroup@QSettings@@QAEXABVQString@@@Z
?endGroup@QSettings@@QAEXXZ
?value@QSettings@@QBE?AVQVariant@@ABVQString@@ABV2@@Z
?setIniCodec@QSettings@@QAEXPAVQTextCodec@@@Z
?toLocal8Bit@QString@@QBE?AVQByteArray@@XZ
deflate
crc32
deflateInit2_
get_crc_table
?data@QByteArray@@QAEPADXZ
deflateEnd
qtgui4
?save@QImage@@QBE_NPAVQIODevice@@PBDH@Z
?load@QImage@@QAE_NABVQString@@PBD@Z
??1QImage@@UAE@XZ
??0QImage@@QAE@XZ
??1QPainter@@QAE@XZ
??0QPainter@@QAE@PAVQPaintDevice@@@Z
?drawImage@QPainter@@QAEXHHABVQImage@@HHHHV?$QFlags@W4ImageConversionFlag@Qt@@@@@Z
msvcp100
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Incref@facet@locale@std@@QAEXXZ
??Bid@locale@std@@QAEIXZ
?system_category@std@@YAABVerror_category@1@XZ
?_Xfunc@tr1@std@@YAXXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1_Container_base12@std@@QAE@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?id@?$ctype@D@std@@2V0locale@2@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?classic@locale@std@@SAABV12@XZ
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?toupper@?$ctype@D@std@@QBEDD@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?uncaught_exception@std@@YA_NXZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_BADOFF@std@@3_JB
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
msvcr100
fread
??_V@YAXPAX@Z
fclose
fwrite
memcpy_s
_lock_file
setvbuf
fopen
fsetpos
fgetc
fflush
_fseeki64
memchr
fgetpos
ungetc
_unlock_file
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
fputc
__CxxFrameHandler3
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??2@YAPAXI@Z
memset
memmove
memcpy
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
strrchr
ftell
fseek
_stricmp
strcpy_s
sprintf
feof
_gmtime64
_time64
_snprintf_s
_vsnprintf_s
_access
printf
_mkdir
fprintf
strcat_s
abort
sscanf
strncmp
free
isspace
calloc
malloc
strerror
fputs
__iob_func
strchr
atoi
_wfopen
_snprintf
_errno
_beginthread
isalnum
tolower
isprint
strncpy
_CIsqrt
fgets
rand
isdigit
strftime
_fileno
toupper
vfprintf
realloc
strtoul
_localtime64
getenv
isxdigit
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBDH@Z
_localtime64_s
_purecall
atol
atof
rewind
strtok_s
remove
srand
strstr
??8type_info@@QBE_NABV0@@Z
_beginthreadex
ceil
wprintf
setlocale
sprintf_s
exit
_stat64i32
modf
strpbrk
qsort
strtol
_strtoi64
_fstat64i32
__sys_nerr
isalpha
islower
isupper
isgraph
_ftelli64
ferror
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
_invoke_watson
_controlfp_s
_strdup
_strlwr
_open
_lseek
_close
_read
_setjmp3
__CxxLongjmpUnwind
_vsnprintf
ws2_32
WSAStartup
recvfrom
ntohl
htonl
select
WSAGetLastError
htons
ntohs
inet_ntoa
shutdown
setsockopt
sendto
recv
bind
socket
__WSAFDIsSet
closesocket
send
getsockopt
listen
accept
connect
ioctlsocket
getpeername
WSACleanup
WSASend
gethostbyname
WSARecv
WSASocketW
WSASetLastError
getsockname
WSAAddressToStringA
mswsock
AcceptEx
GetAcceptExSockaddrs
shlwapi
PathIsDirectoryA
PathFileExistsA
freeimage
_FreeImage_GetFileType@8
_FreeImage_GetHeight@4
_FreeImage_Save@16
_FreeImage_GetFIFFromFilename@4
_FreeImage_GetWidth@4
_FreeImage_Load@12
_FreeImage_Unload@4
_FreeImage_FIFSupportsReading@4
_FreeImage_Rescale@16
iphlpapi
GetTcpTable
Sections
.text Size: 868KB - Virtual size: 868KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1016KB - Virtual size: 1015KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 451KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ