238ab8337f9e3f69ff64e3799a1041f8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

238ab8337f9e3f69ff64e3799a1041f8_JaffaCakes118
Size

3.5MB
MD5

238ab8337f9e3f69ff64e3799a1041f8
SHA1

3bc3f7cb2e4e2f16b77b9a925b200725aecb875d
SHA256

0813ec401593cf50945af43ef58c68fdb8bd8975d8c50135ac540ac91fbad64b
SHA512

1609329a3bd2f5bd1848b022892609142f31f567c2479666879538f12a41a12fd0c6e30c03875f91947da3faef9953e9271e1e264ff0c1009def2c1bc4cc96a1
SSDEEP

49152:7xrN8gfZdZiBid4dyDO3rOg7dxLNqcyh6sslXDTyj3dFqkb8s+knr:NrN2id4dCsrN7dxLUxQPlXSAkJ

Score

1^/10

Malware Config

Signatures

Files

238ab8337f9e3f69ff64e3799a1041f8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ebe0da1b06582416236f09ff18595187

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

31/12/2015, 00:00

Not After

09/07/2019, 18:40

Subject

CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:5e:ea:2a:41:de:1b:0f:f5:3a:c5:b1:4a:e5:bb:1b
Certificate

Issuer

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Not Before

18/01/2017, 00:00

Not After

18/03/2020, 23:59

Subject

CN=厦门美图网科技有限公司,O=厦门美图网科技有限公司,L=厦门,ST=福建,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

43:40:58:b0:d0:8a:1e:9a:96:d3:a4:3c:00:5a:20:83:05:e9:be:45
Signer

Actual PE Digest

43:40:58:b0:d0:8a:1e:9a:96:d3:a4:3c:00:5a:20:83:05:e9:be:45

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\MyProject\MFCXiuxiu\MTXXPC6\XiuXiu\XiuXiu.pdb

Imports

pcfile

?GetImageInfo@PC_File@@SAPAUtag_ImageInfo@@XZ
?ImageReadFrombinary@PC_File@@SAPAVBitmap@Gdiplus@@PB_W@Z
?ImageSaveTobinary@PC_File@@SAHPAVBitmap@Gdiplus@@PB_W@Z
?OnLoadImage@PC_File@@SAPAVBitmap@Gdiplus@@PB_WHHPAVCObjProgress@@HH@Z
?OnLoadImage@PC_File@@SAPAVBitmap@Gdiplus@@PAEHW4MT_IMAGE_FORMAT@@PAVCObjProgress@@HH@Z
?OnLoadImage@PC_File@@SAPAVBitmap@Gdiplus@@PB_WPAVCObjProgress@@HH0@Z
?OnSaveQuick@PC_File@@SAHPB_WPAVBitmap@Gdiplus@@HHW4MT_IMAGE_FORMAT@@H@Z
?OnSaveQuick@PC_File@@SAHPB_WPAVBitmap@Gdiplus@@W4MT_IMAGE_FORMAT@@H@Z
?OnSaveHDJpeg@PC_File@@SAHPB_WPAVBitmap@Gdiplus@@HHPAVCObjProgress@@HH@Z

pceffect

?paper@CEffect@@SAHPAEHHPAXPAVCObjProgress@@HH@Z
?Effect_GuDianSuMiaoEx@CEffect@@SAHPAEHHPAXPAU_MT_2D_RECT@@PAVCObjProgress@@HH@Z
?Effect_XieShengSuMiaoEx@CEffect@@SAHPAEHHPAXPAU_MT_2D_RECT@@PAVCObjProgress@@HH@Z
?Effect_FenNenXi@CEffect@@SAHPAEHHPAXPAVCObjProgress@@HH@Z
?Effect_WeiMei@CEffect@@SAHPAEHHPAXPAVCObjProgress@@HH@Z
?Effect_TianMeiKeRen@CEffect@@SAHPAEHHPAXPAVCObjProgress@@HH@Z
?NewLOMO_14@CEffect@@SAHPAEHHPAXPAVCObjProgress@@HH@Z
?Effect_LaoZhaoPian@CEffect@@SAHPAEHHPAXPAVCObjProgress@@HH@Z
?Effect_FuGu@CEffect@@SAHPAEHHPAXPAVCObjProgress@@HH@Z
?Effect_HeiBai@CEffect@@SAHPAEHHPAXPAVCObjProgress@@HH@Z
?Effect_Silver@CEffect@@SAHPAEHHPAXPAVCObjProgress@@HH@Z
?Effect_DanYa@CEffect@@SAHPAEHHPAXPAVCObjProgress@@HH@Z
?Effect_80S@CEffect@@SAHPAEHHPAXPAVCObjProgress@@HH@Z
?Effect_GeTeFeng@CEffect@@SAHPAEHHPAXPAVCObjProgress@@HH@Z
?Effect_GuTongSe@CEffect@@SAHPAEHHPAXPAVCObjProgress@@HH@Z
?Effect_YouGe@CEffect@@SAHPAEHHPAXPAVCObjProgress@@HH@Z
?Effect_RiXi@CEffect@@SAHPAEHHPAXPAVCObjProgress@@HH@Z
?Effect_LiuNian@CEffect@@SAHPAEHHPAXPAVCObjProgress@@HH@Z
?Effect_JiaoPian@CEffect@@SAHPAEHHPAXPAVCObjProgress@@HH@Z
?Effect_Louguang@CEffect@@SAHPAEHHPAXPAVCObjProgress@@HH@Z
?Effect_FenHongJiaRen@CEffect@@SAHPAEHHPAXPAVCObjProgress@@HH@Z
?Effect_JingdianLomo@CEffect@@SAHPAEHHPAXPAVCObjProgress@@HH@Z
?GetParam@CMathDefine@@SAMHMMAAM0@Z
?Effect_AlphaAdJust@CEffect@@SAHPAE0HHN@Z
?ChannelBlend_X@CEffect@@SAHPAE0HHHPAVCObjProgress@@HH@Z
?AverageRandom@CMathDefine@@SAHHH@Z
?PtChangeByRotate@CMathDefine@@SAXAAVPoint@Gdiplus@@HHN@Z
?ResizeMainToSuit@CMathDefine@@SAHHHHHPAVCRect@@AAN@Z

pcdsp

?WholeWhitening@PC_Dsp@@SA_NPAVBitmap@Gdiplus@@HHHPAVCObjProgress@@HH@Z
?CompositeColor@PC_Dsp@@SAHPAVBitmap@Gdiplus@@EEEPAVCObjProgress@@HH@Z
?MeiBaiYaChi@PC_Dsp@@SAHPAEHHPAVCObjProgress@@HH@Z
?SkinDenoise@PC_Dsp@@SAHPAVBitmap@Gdiplus@@HHHHPAVCObjProgress@@HH@Z
?CurveDenoise@PC_Dsp@@SAHPAVBitmap@Gdiplus@@HHHPAVCObjProgress@@HH@Z
?NaturalSkin@PC_Dsp@@SA_NPAVBitmap@Gdiplus@@H@Z
?SimilarTopaz@PC_Dsp@@SAHPAVBitmap@Gdiplus@@PAVCObjProgress@@HH@Z
?GaussDenoise@PC_Dsp@@SAHPAVBitmap@Gdiplus@@HNNNNPAVCObjProgress@@HH@Z
?CannyDericheBlur@PC_Dsp@@SA_NPAVBitmap@Gdiplus@@MMPAEPAVCObjProgress@@HH@Z
?SoftLight_Channel_Composite@PC_Dsp@@SA_NPAVBitmap@Gdiplus@@HPAVCObjProgress@@HH@Z
?Color_Channel_Composite@PC_Dsp@@SA_NPAVBitmap@Gdiplus@@EEEPAVCObjProgress@@HH@Z
?BlackEye@PC_Dsp@@SA_NPAEHH0HHPAVCObjProgress@@HH@Z
?Circle_Gradient_Alpha@PC_Dsp@@SA_NPAPAEH@Z
?Normal_Channel_Composite@PC_Dsp@@SA_NPAVBitmap@Gdiplus@@EEEPAVCObjProgress@@HH@Z
?MultiRotate@PC_Dsp@@SAPAVBitmap@Gdiplus@@PAV23@HHHHH@Z
?MultiRotateEx@PC_Dsp@@SAPAVBitmap@Gdiplus@@PAV23@HHHHEEE@Z
?SingleRotate@PC_Dsp@@SAHPAVBitmap@Gdiplus@@W4RotateFlipType@3@@Z
?OnKeyBeauty@PC_Dsp@@SAHPAEHHHW4eScenarioType@@PAVCObjProgress@@HH@Z
?ConvertTo32Bits@PC_Dsp@@SAHPAPAVBitmap@Gdiplus@@@Z
?CalSuitRectForScene@PC_Dsp@@SAHHHHHPAUtagRECT@@AAN@Z
?GeneralGifByBmp@PC_Dsp@@SAHPAPAVBitmap@Gdiplus@@HHHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAHPAVCObjProgress@@HH@Z
?ResizeBitmap@PC_Dsp@@SAHPAPAVBitmap@Gdiplus@@HH@Z
?Clone@PC_Dsp@@SAHPAVBitmap@Gdiplus@@HHHHPAPAV23@@Z
?WC2MB@PC_Dsp@@SAPADPB_W@Z
?GetWordSizeEx@PC_Dsp@@SAHPAUHWND__@@PAUtagFontObj@@PAUtagPathObj@@H@Z
?CompositeWordEx@PC_Dsp@@SAHPAVGraphics@Gdiplus@@PAUtagFontObj@@PAUtagPathObj@@HNNMM@Z
?GrayScale@PC_Dsp@@SAHPAVBitmap@Gdiplus@@PAVCObjProgress@@HH@Z
?Circle_Gradient_Alpha2Eye@PC_Dsp@@SA_NPAPAEH@Z
?BitCrop@PC_Dsp@@SAPAVBitmap@Gdiplus@@PAV23@HHHH@Z
?WhiteBank@PC_Dsp@@SAHPAVBitmap@Gdiplus@@@Z
?IncreaseBpp@PC_Dsp@@SAHPAPAVBitmap@Gdiplus@@H@Z
?Negative@PC_Dsp@@SAHPAVBitmap@Gdiplus@@PAVCObjProgress@@HH@Z
?Mix@PC_Dsp@@SAHPAVBitmap@Gdiplus@@0JJ@Z
?GetBitDib@PC_Dsp@@SAPAUtagBITMAPINFOHEADER@@PAVBitmap@Gdiplus@@AAH@Z
?GaussIIRBlur@PC_Dsp@@SAHPAVBitmap@Gdiplus@@HHPAVCObjProgress@@HH@Z
?DrawImage@PC_Dsp@@SAHPAVBitmap@Gdiplus@@PAPAV23@HHHH@Z
?Light@PC_Dsp@@SAHPAVBitmap@Gdiplus@@JJPAVCObjProgress@@HH@Z
?Multiple@PC_Dsp@@SAHPAVBitmap@Gdiplus@@0PAVCObjProgress@@HH@Z
?SetColorWithBitmap@PC_Dsp@@SAHPAVBitmap@Gdiplus@@EEE@Z
?DrawByAlphaChange@PC_Dsp@@SAHPAVBitmap@Gdiplus@@0N@Z
?ExpandFrame@PC_Dsp@@SAHPAPAVBitmap@Gdiplus@@HHHHUtagRGBQUAD@@@Z
?ShowShadow@PC_Dsp@@SAHPAPAVBitmap@Gdiplus@@HHHHHK@Z
?UsmSharp@PC_Dsp@@SAHPAEHHMMPAVCObjProgress@@HH@Z
?LightNew@PC_Dsp@@SAHPAEHHJHPAVCObjProgress@@HH@Z
?Light@PC_Dsp@@SAHPAEHHJJPAVCObjProgress@@HH@Z
?Saturateconst@PC_Dsp@@SAHPAEHHJJPAVCObjProgress@@HH@Z
?ExposureFilter@PC_Dsp@@SAHPAEHHMPAVCObjProgress@@HH@Z
?ShadowHighLight@PC_Dsp@@SAHPAEHHHHPAX@Z
?SetHue@PC_Dsp@@SAHPAEHHHPAVCObjProgress@@HH@Z
?SetColor@PC_Dsp@@SAHPAEHHHHHPAVCObjProgress@@HH@Z
?AutoBeauty@PC_Dsp@@SA_NHPAEHHHHHHPAX@Z
?RedEyeRemove@PC_Dsp@@SAHPAVBitmap@Gdiplus@@ABUtagRECT@@@Z
?DisplayImageUseGDIPLUS@PC_Dsp@@SAHPAVGraphics@Gdiplus@@PAVBitmap@3@HHNHN@Z
?CropBitmap@PC_Dsp@@SAHPAPAVBitmap@Gdiplus@@HHHH@Z

glew32

__glewUniform1i
__glewActiveTexture
__glewUseProgram
__glewGetShaderiv
__glewGetShaderInfoLog
__glewDeleteShader
__glewCreateProgram
__glewAttachShader
__glewLinkProgram
__glewGetProgramiv
__glewGetProgramInfoLog
__glewGenerateMipmap
__glewShaderSource
__glewCreateShader
__glewBindRenderbuffer
__glewGetUniformLocation
__glewGetAttribLocation
_glewGetErrorString@4
_glewInit@0
glewExperimental
__glewDeleteProgram
__glewIsProgram
__glewGenFramebuffers
__glewDeleteFramebuffers
__glewDisableVertexAttribArray
__glewUniform4fv
__glewUniform2fv
__glewDeleteBuffers
__glewBufferData
__glewGenBuffers
__glewBufferSubData
__glewBindBuffer
__glewUniform2f
__glewBlendEquation
__glewUniform4f
__glewUniform3f
__glewUniform1f
__glewCheckFramebufferStatus
__glewFramebufferTexture2D
__glewBindFramebuffer
__glewVertexAttribPointer
__glewEnableVertexAttribArray
__glewUniformMatrix4fv
__glewCompileShader

opengl32

glTexParameteri
wglGetCurrentContext
wglDeleteContext
glGetString
glTexParameterf
glTexImage2D
glGenTextures
glDrawElements
glDisable
glReadPixels
glDrawArrays
glViewport
glBindTexture
glBlendFunc
glEnable
glLineWidth
glPointSize
glClear
glClearColor
glGetError
wglMakeCurrent
glDeleteTextures
glTexSubImage2D
wglShareLists
wglCreateContext

libmlab

?translate@Matrix4@mlab@@QAEAAV12@MMM@Z
??DMatrix4@mlab@@QBE?AV01@ABV01@@Z
?identity@Matrix4@mlab@@QAEAAV12@XZ
?getTranspose@Matrix4@mlab@@QAEPBMXZ
?RunThinFace@CThinFace@mlab@@QAEXPAUVector2@2@PAEHHM@Z
?rotate@Matrix4@mlab@@QAEAAV12@MMMM@Z
?rotateZ@Matrix4@mlab@@QAEAAV12@M@Z
?scale@Matrix4@mlab@@QAEAAV12@M@Z
?transpose@Matrix4@mlab@@QAEAAV12@XZ
?BilinearReSample@SFDSP@mlab@@SA_NPAEHH0HHH@Z
??1InterPoint@mlab@@QAE@XZ
?AutoColorLevel@SFDSP@mlab@@SAXPAEHH_N@Z
?Lut3D16@SFDSP@mlab@@SAXPAE0MHH@Z
?Lut3D64@SFDSP@mlab@@SAXPAE0MHH@Z
?Saturateconst_Faster@SFDSP@mlab@@SAXPAEJJJ@Z
?stackBlurAndHighPass@SFDSP@mlab@@SAXPAEHHH@Z
?RGBtoHSL@SFDSP@mlab@@SAXEEEPAE00@Z
?HSLtoRGB@SFDSP@mlab@@SAXEEEPAE00@Z
?stackBlur@SFDSP@mlab@@SAXPAEHHH@Z
?Sharp@SFDSP@mlab@@SAXPAE0HHM@Z
?DecomposeToLab@SFDSP@mlab@@SAXPAEHHH000@Z
?MTSelectiveColorRed@SFDSP@mlab@@SAXPAEHHHPAHHHH@Z
?MTSelectiveColorYellow@SFDSP@mlab@@SAXPAEHHHPAHHHH@Z
?MTSelectiveColorGreen@SFDSP@mlab@@SAXPAEHHHPAHHHH@Z
?MTSelectiveColorCyan@SFDSP@mlab@@SAXPAEHHHPAHHHH@Z
?MTSelectiveColorBlue@SFDSP@mlab@@SAXPAEHHHPAHHHH@Z
?MTSelectiveColorMagenta@SFDSP@mlab@@SAXPAEHHHPAHHHH@Z
?MTSelectiveColorWhite@SFDSP@mlab@@SAXPAEHHHPAHHHH@Z
?MTSelectiveColorGray@SFDSP@mlab@@SAXPAEHHHPAHHHH@Z
?MTSelectiveColorBlack@SFDSP@mlab@@SAXPAEHHHPAHHHH@Z
?HQCColor@SFDSP@mlab@@SAXPAEHM@Z
?HueSaturationBright@SFDSP@mlab@@SAXPAEHHHHH@Z
?GetResPoint@InterPoint@mlab@@QAEPAUVector2@2@XZ
?GetCount@InterPoint@mlab@@QAEHXZ
?SelectFace@InterPoint@mlab@@QAE_NH@Z
?FindTri@InterPoint@mlab@@QAEHPAGHHHH@Z
??0MTMaskMap@mlab@@QAE@XZ
??1MTMaskMap@mlab@@QAE@XZ
?setMask@MTMaskMap@mlab@@QAEXPAEHH@Z
?maskMap@MTMaskMap@mlab@@QAEXPAEHHPAUVector2@2@HHHHHPAGH@Z
?WeiMei@SFDSP@mlab@@SAXPAEHH@Z
?BlurOneChannel@SFDSP@mlab@@SAXPAEHHH@Z
??0CContours@mlab@@QAE@XZ
??1CContours@mlab@@QAE@XZ
?Run@CContours@mlab@@QAEPAUMTRect@2@PAE0HHH0HHHHHMHHHHHHHHH_NHHH1N1@Z
?Run_NOPoint@CContours@mlab@@QAEPAUMTRect@2@PAE0HHH0HHHHHMHHHHHHHHH_NHHH1@Z
?Run_OuterPoint@CContours@mlab@@QAEPAUMTRect@2@PAE0HHH0HH0HHHHHMHHHHHHHHH_NHHH@Z
?Run_Smooth@CContours@mlab@@QAEPAUMTRect@2@PAE0HHH0HHHHHMHHHHHHHHH_NHHH11@Z
?ReturnFG@CContours@mlab@@QAEPAUMTRect@2@PAE0HHH0HHHHHMHHHHHHHHH_NHHH@Z
?g_StandCoord@mlab@@3PAUVector2@1@A
?scale@Matrix4@mlab@@QAEAAV12@MMM@Z
??1PosEstimator@mlab@@QAE@XZ
?Run@PosEstimator@mlab@@QAEXHPAUVector2@2@0@Z
?GetPoints@PosEstimator@mlab@@QAEXHPAUVector2@2@0@Z
??0CMTMaskRaster@mlab@@QAE@XZ
??1CMTMaskRaster@mlab@@UAE@XZ
?BindSrc@CMTMaskRaster@mlab@@QAEXPAEHH@Z
?BindDst@CMTMaskRaster@mlab@@QAEXPAEHH@Z
?DrawTrangles@CMTMaskRaster@mlab@@UAEXPAUVector2@2@0QAGH@Z
??0MtRectF@mlab@@QAE@MMMM@Z
?SmoothLines@CMathUtils@mlab@@SAHPAUVector2@2@0HMH@Z
?SmoothLines2@CMathUtils@mlab@@SAHPAUVector2@2@0HMH@Z
?LagrangePolyfit@CMathUtils@mlab@@SAXPAUVector2@2@H0H@Z
??0MLS@mlab@@QAE@XZ
??1MLS@mlab@@QAE@XZ
?MLSD2DpointsDefRigid@MLS@mlab@@QAEXPAPAM000HH@Z
??0Subdiv2D@mlab@@QAE@UcvmtRect@1@@Z
??1Subdiv2D@mlab@@QAE@XZ
?insert@Subdiv2D@mlab@@QAEHUVector2@2@@Z
?getSize@Subdiv2D@mlab@@QBEHXZ
?getTrianglePointListt@Subdiv2D@mlab@@QBEHPAUVec3p@2@H@Z
??0MtRectF@mlab@@QAE@XZ
?MLSD2DpointsDefAffine@MLS@mlab@@QAEXPAPAM000HH@Z
?intersect@CMathUtils@mlab@@SA_NUVector2@2@000@Z
??0CUniquePointSet@mlab@@QAE@XZ
??1CUniquePointSet@mlab@@QAE@XZ
?Insert@CUniquePointSet@mlab@@QAE_NAAUVector2@2@@Z
?insert@Subdiv2D@mlab@@QAEXABV?$vector@UVector2@mlab@@V?$allocator@UVector2@mlab@@@std@@@std@@@Z
?GetVector@CUniquePointSet@mlab@@QAEABV?$vector@UVector2@mlab@@V?$allocator@UVector2@mlab@@@std@@@std@@XZ
?getAffineTransform@CMathUtils@mlab@@SA?AVMatrix3@2@QAUVector2@2@0@Z
?transform@CMathUtils@mlab@@SAXPAUVector2@2@0HAAVMatrix3@2@@Z
?identity@Matrix3@mlab@@QAEAAV12@XZ
?setOrthoFrustum@mlab@@YA?AVMatrix4@1@MMMMMM@Z
?RunBigEyes@CThinFace@mlab@@QAEXPAUVector2@2@PAEHHM@Z
??1CThinFace@mlab@@QAE@XZ
??0CThinFace@mlab@@QAE@XZ
?Run@CBlackEyeCleaner@mlab@@QAE_NPAEHHHPAUVector2@2@HHHHM@Z
??1CBlackEyeCleaner@mlab@@QAE@XZ
??0CBlackEyeCleaner@mlab@@QAE@XZ
?Run@CFleckCleaner@mlab@@QAE_NPAE0HHHHHHHHH@Z
??1CFleckCleaner@mlab@@QAE@XZ
??0CFleckCleaner@mlab@@QAE@XZ
?Run@CProtectFace@mlab@@QAE_NPAEHHPAUVector2@2@HH@Z
??1CProtectFace@mlab@@QAE@XZ
??0CProtectFace@mlab@@QAE@XZ
?CreateSkinMask@SFDSP@mlab@@SAXPAEHH0_NHHHH@Z
??1SFDSP@mlab@@QAE@XZ
??0PosEstimator@mlab@@QAE@XZ
??0SFDSP@mlab@@QAE@XZ

tinyxml2

?FirstChildElement@XMLNode@tinyxml2@@QBEPBVXMLElement@2@PBD@Z
?NextSiblingElement@XMLNode@tinyxml2@@QBEPBVXMLElement@2@PBD@Z
?GetText@XMLElement@tinyxml2@@QBEPBDXZ
?PrintError@XMLDocument@tinyxml2@@QBEXXZ
?LoadFile@XMLDocument@tinyxml2@@QAE?AW4XMLError@2@PBD@Z
??1XMLDocument@tinyxml2@@UAE@XZ
??0XMLDocument@tinyxml2@@QAE@_NW4Whitespace@1@@Z

pthreadvc2

pthread_mutex_unlock
pthread_mutex_lock
pthread_mutex_destroy
pthread_mutex_init

facedetectdll

_harrDetectObjects@24

mfc120u

ord10168
ord10167
ord10165
ord10169
ord5557
ord11600
ord11601
ord9020
ord11964
ord3795
ord11811
ord14447
ord8846
ord6875
ord10883
ord9137
ord3224
ord13738
ord12134
ord12132
ord1711
ord1723
ord1731
ord1727
ord1736
ord4879
ord4920
ord4887
ord4899
ord4895
ord4891
ord4928
ord4916
ord4883
ord4932
ord4905
ord4867
ord4874
ord10166
ord4459
ord9574
ord4451
ord3013
ord14449
ord7807
ord14455
ord6774
ord11592
ord13563
ord5838
ord2640
ord11999
ord3898
ord3330
ord3329
ord3223
ord12043
ord5157
ord5454
ord5664
ord9231
ord5430
ord5693
ord5160
ord5316
ord5137
ord7609
ord7610
ord7600
ord5314
ord8101
ord10136
ord9091
ord6434
ord3790
ord12047
ord14094
ord2718
ord8092
ord3260
ord3263
ord13612
ord6121
ord3122
ord3361
ord4909
ord3362
ord500
ord1139
ord290
ord310
ord14448
ord971
ord1445
ord13824
ord13117
ord13118
ord12455
ord1682
ord1648
ord2397
ord2167
ord8346
ord5027
ord819
ord1348
ord2173
ord4049
ord2708
ord8699
ord9349
ord1518
ord11271
ord12413
ord8921
ord12006
ord4843
ord3806
ord450
ord1105
ord2478
ord362
ord1065
ord13554
ord13983
ord13972
ord13975
ord13987
ord7025
ord7806
ord14454
ord2367
ord9279
ord4109
ord4047
ord12818
ord492
ord1138
ord11837
ord12222
ord2843
ord14465
ord10961
ord8655
ord13800
ord14099
ord944
ord1422
ord7521
ord10390
ord11456
ord12910
ord2948
ord286
ord4772
ord4838
ord2204
ord8658
ord2262
ord10353
ord7382
ord1520
ord296
ord1108
ord458
ord973
ord1447
ord6404
ord2343
ord2347
ord2130
ord266
ord265
ord285
ord5824
ord2967
ord5787
ord280
ord1042
ord1658
ord1506
ord1508
ord7825
ord1992
ord11857
ord11858
ord14326
ord12402
ord7884
ord14526
ord6251
ord14528
ord6253
ord14527
ord6252
ord501
ord1140
ord6128
ord7376
ord6392
ord3839
ord6469
ord2480
ord13997
ord887
ord1386
ord10875
ord10023
ord5675
ord4050
ord10895
ord8920
ord14390
ord11343
ord10476
ord10380
ord10022
ord10145
ord11610
ord10412
ord8898
ord9001
ord9173
ord12792
ord8601
ord5019
ord2954
ord503
ord1141
ord4672
ord4692
ord8059
ord6777
ord11778
ord10307
ord4605
ord6720
ord9107
ord11998
ord2638
ord6773
ord8186
ord11156
ord11159
ord9390
ord9405
ord9395
ord9867
ord9872
ord9407
ord10998
ord8804
ord8794
ord11621
ord11003
ord8892
ord11027
ord9928
ord9929
ord5488
ord2844
ord6853
ord2214
ord6219
ord1521
ord8242
ord12755
ord4621
ord12634
ord5020
ord4984
ord4280
ord12430
ord10260
ord7542
ord992
ord1467
ord7881
ord2265
ord2163
ord13771
ord366
ord5485
ord6402
ord5865
ord4048
ord365
ord4620
ord3809
ord5821
ord12114
ord12122
ord8099
ord10314
ord12126
ord7671
ord13782
ord6099
ord6129
ord11267
ord13404
ord5022
ord306
ord1043
ord5491
ord6431
ord13121
ord13635
ord12429
ord12449
ord12824
ord12738
ord12966
ord13149
ord8763
ord12890
ord12893
ord6389
ord5119
ord12941
ord4606
ord7331
ord1684
ord1687
ord6652
ord6123
ord13616
ord2719
ord12095
ord6763
ord3194
ord4813
ord12276
ord14463
ord12219
ord2336
ord14516
ord2341
ord6713
ord13907
ord12958
ord7543
ord2308
ord1471
ord999
ord8594
ord8352
ord8268
ord12736
ord8206
ord5262
ord2444
ord12412
ord2823
ord12094
ord12799
ord5667
ord10131
ord9090
ord6758
ord8639
ord4546
ord2280
ord11902
ord1069
ord293

msvcr120

_wcsicmp
_wtoi
ldiv
?terminate@@YAXXZ
_controlfp_s
wcstombs
freopen
__CxxFrameHandler3
_CxxThrowException
memcpy
wcslen
wcscpy
wcscat
strlen
wcscmp
_wcslwr
wcsrchr
isdigit
sqrt
abs
iswalnum
_vsnwprintf_s
fflush
setvbuf
fsetpos
fgetpos
_fseeki64
_unlock_file
_lock_file
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABV01@@Z
strncpy
_localtime64
wprintf
ungetc
fputc
fgetc
wcsncpy
wcsstr
_vswprintf
memcpy_s
_strtime
_vsnwprintf
fwrite
fopen_s
fclose
exit
clock
__iob_func
fprintf
rand
_time64
srand
_purecall
atoi
sprintf
_wtoll
memcmp
_gmtime64
strcpy
strcmp
_lrotl
isalpha
strerror
_dclass
_errno
strtoll
localeconv
_HUGE
_wstat64i32
_mktime64
_gmtime64_s
_get_heap_handle
fputwc
ungetwc
fgetwc
_wgetenv
_wmkdir
_wgetdcwd
_wsopen_s
_get_osfhandle
_close
towlower
towupper
iswcntrl
_except1
_CIatan2
_CIfmod
__RTDynamicCast
_libm_sse2_acos_precise
_libm_sse2_atan_precise
_libm_sse2_cos_precise
_libm_sse2_exp_precise
_libm_sse2_log_precise
_libm_sse2_pow_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
_libm_sse2_tan_precise
ceil
floor
_invoke_watson
__crtSetUnhandledExceptionFilter
_except_handler4_common
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
_commode
_fmode
_wcmdln
_initterm
_initterm_e
__setusermatherr
_configthreadlocale
_cexit
_exit
__set_app_type
__wgetmainargs
_amsg_exit
__crtGetShowWindowMode
_XcptFilter
memset
wcscat_s
_findclose
_findfirst64i32
feof
isspace
strncat
_snprintf
ferror
_ftelli64
strtod
atoll
memchr
fmin
fmax
_wremove
_swprintf
wcscpy_s
_stricmp
wcsncmp
fopen
strrchr
_beginthreadex
swscanf_s
_recalloc
_wtof
_strlwr
wcsncpy_s
_wrename
memmove_s
_strupr_s
ftell
_wfopen_s
atol
toupper
qsort
atof
wcsftime
_strupr
printf
fseek
fread
_wfopen
calloc
_wcsnicmp
??0exception@std@@QAE@XZ
_vsnprintf
sprintf_s
strchr
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
sscanf
strncpy_s
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
_localtime64_s
wcstoul
malloc
free
realloc
memmove
wcstol

kernel32

SetFileTime
LocalFileTimeToFileTime
GetCurrentDirectoryW
SystemTimeToFileTime
lstrcatW
DeviceIoControl
SetConsoleTextAttribute
MulDiv
lstrlenW
QueryPerformanceCounter
QueryPerformanceFrequency
ResetEvent
GetCurrentThreadId
GetCurrentProcess
GetPrivateProfileSectionW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
VirtualFree
VirtualAlloc
lstrcpyW
GetModuleHandleW
SetCurrentDirectoryW
GetSystemDefaultLCID
GetLocalTime
GlobalMemoryStatusEx
Sleep
GetStdHandle
GetConsoleWindow
LockResource
DecodePointer
Process32NextW
TerminateProcess
OpenProcess
Process32FirstW
CreateToolhelp32Snapshot
InterlockedIncrement
InterlockedDecrement
CreateSemaphoreW
FreeConsole
AllocConsole
GetPrivateProfileIntW
CopyFileW
WaitForSingleObject
GlobalMemoryStatus
GetVersionExW
GlobalAlloc
GetPrivateProfileStringW
DeleteFileW
WritePrivateProfileStringW
CreateDirectoryW
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
GetModuleFileNameW
GetFileAttributesW
GlobalReAlloc
ReadFile
GetFileSize
GlobalFree
lstrcpynW
lstrlenA
ExitProcess
DosDateTimeToFileTime
GetFileType
DuplicateHandle
SwitchToThread
TlsGetValue
GetCurrentThread
TlsSetValue
QueueUserAPC
TlsAlloc
TlsFree
UnlockFile
LockFileEx
GetConsoleMode
WriteConsoleW
GetConsoleScreenBufferInfo
LocalFree
FormatMessageW
WriteFile
SetFilePointer
CreateFileW
OutputDebugStringW
FreeLibrary
GlobalUnlock
GlobalLock
MultiByteToWideChar
AreFileApisANSI
WideCharToMultiByte
GetTickCount
CreateEventW
SetEvent
CloseHandle
GetPrivateProfileStringA
GetLastError
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
LoadLibraryW
GetProcAddress
FindResourceW
SizeofResource
LoadResource
RemoveDirectoryW

user32

SetPropW
CallWindowProcW
RegisterClassExW
GetClassInfoExW
RegisterClassW
GetSystemMetrics
LoadImageW
DefWindowProcW
GetFocus
GetUpdateRect
GetWindow
wvsprintfW
GetPropW
AdjustWindowRectEx
GetMenu
CharPrevW
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
CreateCaret
ShowCaret
HideCaret
SetCaretPos
IsZoomed
UpdateLayeredWindow
InvalidateRgn
CreateAcceleratorTableW
MsgWaitForMultipleObjects
PeekMessageW
SetRectEmpty
CreateWindowExW
DestroyWindow
SetClipboardData
EmptyClipboard
EndPaint
BeginPaint
CreateIconIndirect
PostThreadMessageW
CopyRect
PostQuitMessage
DispatchMessageW
TranslateMessage
GetMessageW
DestroyCursor
UnhookWindowsHookEx
EqualRect
UnionRect
SetRect
CharNextW
IntersectRect
MapWindowPoints
MonitorFromWindow
GetMonitorInfoW
GetDesktopWindow
GetWindowDC
GetCursor
SetLayeredWindowAttributes
ReleaseCapture
SetCapture
OffsetRect
InvalidateRect
FlashWindowEx
SetFocus
MoveWindow
IsWindowEnabled
GetAsyncKeyState
BringWindowToTop
CloseClipboard
GetClipboardData
OpenClipboard
RegisterClipboardFormatW
WindowFromPoint
MessageBoxW
PtInRect
TabbedTextOutW
DrawTextW
DrawTextExW
SetWindowPos
SetTimer
GetDC
GetWindowRect
GetWindowLongW
SetWindowLongW
ReleaseDC
KillTimer
GetKeyState
PostMessageW
EnableWindow
IsWindow
IsWindowVisible
SendMessageW
SetCursor
LoadCursorW
IsRectEmpty
GetClientRect
ClientToScreen
ScreenToClient
GetDlgItem
FillRect
GetParent
wsprintfW
EnumDisplaySettingsW
FindWindowW
IsIconic
ShowWindow
SetForegroundWindow
GetCursorPos
GetSysColor
InflateRect
SetWindowRgn
GrayStringW

gdi32

SaveDC
RestoreDC
SetWindowOrgEx
GetObjectA
CloseEnhMetaFile
GetTextMetricsW
SelectClipRgn
CreateRectRgnIndirect
ExtSelectClipRgn
CreatePenIndirect
MoveToEx
LineTo
RoundRect
SetTextColor
GetCharABCWidthsW
GetTextExtentPoint32W
CreateEnhMetaFileW
SetPixelFormat
DescribePixelFormat
ChoosePixelFormat
CreateFontIndirectW
SetBkMode
SetPixelV
LineDDA
OffsetRgn
SwapBuffers
Ellipse
GetClipBox
PtInRegion
GetWindowExtEx
GetViewportExtEx
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
LPtoDP
GetBkColor
CombineRgn
CreateRectRgn
CreatePolygonRgn
CreateRoundRectRgn
GetPixel
SetPixel
CreatePen
SetBkColor
GetMapMode
DPtoLP
Rectangle
CreateSolidBrush
GdiFlush
StretchBlt
SetStretchBltMode
BitBlt
CreateDIBSection
GetDIBits
GetStockObject
GetObjectW
RealizePalette
SelectPalette
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
DeleteDC
GetDeviceCaps

advapi32

GetLengthSid
RegSetValueExW
RegQueryValueExW
RegCloseKey
ReportEventW
DeregisterEventSource
RegCreateKeyExW
CopySid
GetTokenInformation
OpenProcessToken
RegisterEventSourceW
RegOpenKeyExW

shell32

SHGetSpecialFolderPathW
ShellExecuteW
ShellExecuteExW
DragAcceptFiles
DragQueryFileW
DragFinish
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc

comctl32

InitCommonControlsEx
_TrackMouseEvent
ord17

shlwapi

PathFindFileNameA
PathFileExistsW
PathRemoveFileSpecW
PathFindExtensionW
PathFindFileNameW

ole32

OleLockRunning
CLSIDFromString
ReleaseStgMedium
RegisterDragDrop
DoDragDrop
OleDuplicateData
CreateStreamOnHGlobal
CoInitialize
OleInitialize
CoUninitialize
OleUninitialize
RevokeDragDrop
CoCreateGuid
CoTaskMemFree
StringFromGUID2
CoInitializeSecurity
CoCreateInstance
CLSIDFromProgID

oleaut32

VariantChangeType
VariantClear
VariantInit
OleLoadPicture
VarUdateFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SysStringLen
SysAllocStringByteLen
SysAllocString
SysAllocStringLen
SysFreeString

urlmon

ObtainUserAgentString
FindMimeFromData

gdiplus

GdipGetPointCount
GdipGetPathData
GdipClosePathFigure
GdipTransformMatrixPoints
GdipAddPathStringI
GdipResetTextureTransform
GdipScaleTextureTransform
GdipTranslateTextureTransform
GdipBitmapSetPixel
GdipBitmapGetPixel
GdipSetPenCustomEndCap
GdipDeleteCustomLineCap
GdipCreateCustomLineCap
GdipAddPathPolygon
GdipCreateTextureIAI
GdipSetPenWidth
GdipSetPenMode
GdipSetPenEndCap
GdipSetPenStartCap
GdipGetPenFillType
GdipGetPenColor
GdipDrawCurve
GdipGetPenWidth
GdipDrawLinesI
GdipAddPathRectangleI
GdipGetDC
GdipAddPathLineI
GdipAddPathArcI
GdipDrawEllipse
GdipDrawPolygonI
GdipSetMatrixElements
GdipResetClip
GdipLoadImageFromFile
GdipSetClipRect
GdipFillEllipse
GdipDrawRectangle
GdipSetPenDashStyle
GdipCreateRegionRect
GdipDrawLine
GdipGetFontStyle
GdipGetFontSize
GdipCombineRegionPath
GdipAddPathEllipseI
GdipSetEmpty
GdipCreateRegion
GdipFillEllipseI
GdipSetPenColor
GdipCreatePen2
GdipCreateLineBrushI
GdipSetClipRectI
GdipDrawLineI
GdipSetTextureTransform
GdipSetTextureWrapMode
GdipSetStringFormatLineAlign
GdipGetFamily
GdipSetStringFormatAlign
GdipDrawImageRect
GdipDrawImagePointsI
GdipGetPageUnit
GdipGetDpiX
GdipGetDpiY
GdipAddPathLine
GdipAddPathCurve2I
GdipAddPathBezier
GdipSaveGraphics
ord1
GdipSaveImageToFile
GdipIsEmptyRegion
GdipCreateRegionPath
GdipAddPathLine2I
GdipTranslateWorldTransform
GdipRestoreGraphics
GdipGetWorldTransform
GdipSetClipRegion
GdipGetClip
GdipClonePen
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipMultiplyMatrix
GdipSetImagePalette
GdipFillPath
GdipClonePath
GdipSetPenLineJoin
GdipTransformPath
GdipGetPathWorldBounds
GdipGetGenericFontFamilyMonospace
GdipGetGenericFontFamilySerif
GdipGetGenericFontFamilySansSerif
GdipAddPathString
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipCreateStringFormat
GdipFillRectangle
GdipCreateTexture
GdipSetCompositingMode
GdipDrawPath
GdipAddPathPath
GdipResetPath
GdipDeletePath
GdipCreatePath
GdipGetInterpolationMode
GdipDrawImageI
GdipResetWorldTransform
GdipSetImageAttributesWrapMode
GdipSetImageAttributesColorMatrix
GdipGetImagePixelFormat
GdipCreateBitmapFromFile
GdipFree
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageRectRect
GdipGetImageHeight
GdipGetImageWidth
GdipLoadImageFromStream
GdipCreateFromHDC
GdipDrawImageRectI
GdipDrawImagePointRectI
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipCreateFont
GdipDeleteFont
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipSetTextRenderingHint
GdipDrawString
GdipReleaseDC
GdiplusStartup
GdiplusShutdown
GdipFillRectangleI
GdipSetSolidFillColor
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipDeleteRegion
GdipFillRegion
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateHBITMAPFromBitmap
GdipGraphicsClear
GdipDeletePrivateFontCollection
GdipPrivateAddFontFile
GdipGetFontCollectionFamilyCount
GdipCloneFontFamily
GdipGetFontCollectionFamilyList
GdipGetFamilyName
GdipNewInstalledFontCollection
GdipNewPrivateFontCollection
GdipCreateLineBrushFromRectI
GdipSetInterpolationMode
GdipDrawImageRectRectI
GdipCloneBitmapAreaI
GdipImageRotateFlip
GdipCreatePen1
GdipSetSmoothingMode
GdipDrawRectangleI
GdipCreateRegionRectI
GdipCombineRegionRegion
GdipCreateHatchBrush
GdipDrawEllipseI
GdipDeletePen
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipImageSelectActiveFrame
GdipCreateMatrix
GdipDeleteMatrix
GdipScaleMatrix
GdipTransformMatrixPointsI
GdipTranslateMatrix
GdipRotateMatrix
GdipSetWorldTransform

winmm

timeGetTime

msvcp120

??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
?id@?$codecvt@_WDH@std@@2V0locale@2@A
?_Xruntime_error@std@@YAXPBD@Z
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
?tellp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_JH@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?pubsetbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEPAV12@PA_W_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?classic@locale@std@@SAABV12@XZ
?_Swap_all@_Container_base12@std@@QAEXAAU12@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_W@Z
_Mtx_init
_Cnd_timedwait
_Mtx_current_owns
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
??0_Locinfo@std@@QAE@HPBD@Z
_Mtx_lock
_Cnd_wait
_Cnd_broadcast
_Mtx_unlock
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Syserror_map@std@@YAPBDH@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_BADOFF@std@@3_JB
_Cnd_init
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_C_error@std@@YAXH@Z
_Xtime_get_ticks
_Cnd_destroy
_Mtx_destroy
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
??1_Locinfo@std@@QAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Winerror_map@std@@YAPBDH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z

libeay32

ord2291
ord67
ord246
ord1882
ord497
ord2081
ord227
ord493
ord484

libcurl

curl_slist_free_all
curl_easy_perform
curl_slist_append
curl_easy_init
curl_easy_setopt
curl_global_cleanup
curl_easy_cleanup
curl_global_init
curl_easy_getinfo

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

wininet

HttpSendRequestExW
HttpSendRequestW
HttpQueryInfoW
HttpEndRequestW
InternetSetOptionW
InternetConnectW
InternetOpenW
InternetOpenUrlW
InternetReadFile
InternetCloseHandle
HttpOpenRequestA
HttpAddRequestHeadersA
InternetWriteFile

crashreport

Install
Unstall
TrySwitch

libmtlabface

??1MTModels@mtface@@QAE@XZ
??0FaceDetector@mtface@@QAE@XZ
??1FaceDetector@mtface@@QAE@XZ
?PushModelFromFile@MTModels@mtface@@QAE_NPBD0@Z
?LoadModels@FaceDetector@mtface@@QAE?AW4MTRET@2@PAVMTModels@2@@Z
?from_rgba@MTImage@mtface@@SA?AU12@HHPAEHH@Z
??1MTImage@mtface@@QAE@XZ
??0?$MTVector@UMTFaceFeature@mtface@@@mtface@@QAE@XZ
??1?$MTVector@UMTFaceFeature@mtface@@@mtface@@QAE@XZ
?SetMode@FaceDetector@mtface@@QAE?AW4MTRET@2@I@Z
?Detect@FaceDetector@mtface@@QAE?AW4MTRET@2@ABUMTImage@2@AAV?$MTVector@UMTFaceFeature@mtface@@@2@@Z
?size@?$MTVector@UMTFaceFeature@mtface@@@mtface@@QBEIXZ
??A?$MTVector@UMTFaceFeature@mtface@@@mtface@@QAEAAUMTFaceFeature@1@I@Z
?data@?$MTVector@U?$MTPoint_@M@mtface@@@mtface@@QBEPBU?$MTPoint_@M@2@XZ
??0?$MTRect_@M@mtface@@QAE@XZ
??0MTModels@mtface@@QAE@XZ

qiniu

Qiniu_Conf_Init
Qiniu_Client_Cleanup
Qiniu_Global_Cleanup
Qiniu_Global_Init
Qiniu_Client_InitNoAuth
Qiniu_Io_PutFile

setupapi

SetupIterateCabinetW

ws2_32

gethostname
WSAStartup
connect
WSAStringToAddressW
send
gethostbyname
closesocket
recv
WSACleanup
htonl
WSASocketW
WSAGetLastError
htons
shutdown
setsockopt

psapi

GetProcessMemoryInfo

intelligentfill

??1IntelligentFill@@QAE@XZ
??0IntelligentFill@@QAE@XZ
?RunFill@IntelligentFill@@QAE_NPAEHH0@Z

glu32

gluErrorString

makecode

?MakeCodePic@MakeCode@@SAHPBDPAD@Z

iphlpapi

GetAdaptersAddresses

vcomp120

_vcomp_for_static_simple_init
_vcomp_fork
_vcomp_for_static_end

Exports

Exports

??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@XZ
??1CxFile@@UAE@XZ
??4CxFile@@QAEAAV0@ABV0@@Z
??_7CxFile@@6B@
?PutC@CxFile@@UAE_NE@Z

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 637KB - Virtual size: 637KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ebe0da1b06582416236f09ff18595187

Code Sign

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0bCertificate

Extended Key Usages

Key Usages

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cbCertificate

Extended Key Usages

Key Usages

4d:5e:ea:2a:41:de:1b:0f:f5:3a:c5:b1:4a:e5:bb:1bCertificate

Extended Key Usages

Key Usages

43:40:58:b0:d0:8a:1e:9a:96:d3:a4:3c:00:5a:20:83:05:e9:be:45Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

pcfile

pceffect

pcdsp

glew32

opengl32

libmlab

tinyxml2

pthreadvc2

facedetectdll

mfc120u

msvcr120

kernel32

user32

gdi32

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

urlmon

gdiplus

winmm

msvcp120

libeay32

libcurl

version

wininet

crashreport

libmtlabface

qiniu

setupapi

ws2_32

psapi

intelligentfill

glu32

makecode

iphlpapi

vcomp120

Exports

Exports

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 637KB - Virtual size: 637KB

.data Size: 58KB - Virtual size: 84KB

.tls Size: 512B - Virtual size: 2B

_RDATA Size: 2KB - Virtual size: 2KB

.rsrc Size: 60KB - Virtual size: 60KB

.reloc Size: 212KB - Virtual size: 212KB

16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Certificate

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

4d:5e:ea:2a:41:de:1b:0f:f5:3a:c5:b1:4a:e5:bb:1b
Certificate

43:40:58:b0:d0:8a:1e:9a:96:d3:a4:3c:00:5a:20:83:05:e9:be:45
Signer

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 637KB - Virtual size: 637KB

.data
Size: 58KB - Virtual size: 84KB

.tls
Size: 512B - Virtual size: 2B

_RDATA
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 60KB - Virtual size: 60KB

.reloc
Size: 212KB - Virtual size: 212KB