Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
848b30c320f34225df39b036e742a0d1_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
848b30c320f34225df39b036e742a0d1_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
848b30c320f34225df39b036e742a0d1_JaffaCakes118
Size
837KB
MD5
848b30c320f34225df39b036e742a0d1
SHA1
70c9c36be02f38473ac05d5c0addaee40efa167d
SHA256
39ec83b4dea754028f8fba083d9e541e2985f72c4ac45935b615848ca06dfaab
SHA512
5b95aadc2597370b5b31dd7eebd6d58c28849bda7064fe74b0761f76c4c5b30b5c811ce210a4f10d9df0c32b4ce9de7a854f2dbf81c52063d3ce5aa4eb968ba3
SSDEEP
12288:zkPn3y8u6fZJY3XvEIgTUiE4BzARK5spFDVkLBnLEaE+433h4LQLEms4nF:IPC81Z+v9Y1E4BcdqLBne13h8AEms4F
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?getRoot@Logger@log4cplus@@SA?AV12@XZ
??1Logger@log4cplus@@UAE@XZ
??0Logger@log4cplus@@QAE@ABV01@@Z
??6@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@AAV01@PBD@Z
?forcedLog@Logger@log4cplus@@QBEXHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBDH@Z
?getInstance@Logger@log4cplus@@SA?AV12@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?isEnabledFor@Logger@log4cplus@@QBE_NH@Z
closesocket
WSAGetLastError
WSACleanup
WSAStartup
select
ntohl
ntohs
htonl
htons
sendto
socket
inet_addr
getnameinfo
freeaddrinfo
getaddrinfo
recvfrom
CreateProcessW
GetPrivateProfileIntW
WritePrivateProfileStringW
DeleteFileW
CreateEventW
MultiByteToWideChar
GetLastError
WideCharToMultiByte
CopyFileW
WaitForMultipleObjects
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcess
DuplicateHandle
CreateSemaphoreA
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
CreateWaitableTimerA
SetWaitableTimer
SystemTimeToFileTime
ResumeThread
TlsSetValue
ResetEvent
OpenEventA
GetTempPathW
TlsFree
TlsAlloc
GetModuleHandleA
SetLastError
OutputDebugStringW
LoadLibraryW
FreeLibrary
GetSystemTimes
DeleteFileA
SetFileAttributesW
GetWindowsDirectoryW
FindNextFileW
GetModuleFileNameA
RemoveDirectoryW
FindClose
GetLogicalDriveStringsA
FindFirstFileA
GetFileAttributesW
FindFirstFileW
CreateToolhelp32Snapshot
lstrcmpiW
Process32NextW
QueryDosDeviceW
ReleaseSemaphore
GetSystemTimeAsFileTime
GetTickCount
CreateEventA
SetEvent
WaitForSingleObject
CloseHandle
ProcessIdToSessionId
IsWow64Process
Sleep
Process32FirstW
LoadLibraryA
TlsGetValue
LocalAlloc
GetProcAddress
TerminateProcess
GetModuleHandleW
GetLogicalDriveStringsW
GetCurrentProcessId
GetSystemInfo
OpenProcess
GetProcessTimes
GlobalMemoryStatusEx
GetComputerNameW
HeapFree
HeapAlloc
GetProcessHeap
GetModuleFileNameW
LocalFree
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
?Create@CMsgBase@comm@@SAPAV12@PAD@Z
?Destroy@CMsgBase@comm@@SAXPAV12@@Z
?GetLen@CMsgBase@comm@@QAEHXZ
?GetData@CMsgBase@comm@@QAEPADXZ
_ReadMessageFromClient@8
_SendMessageToClient@8
?GetTimeStamp@log7@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?WriteLogA@log7@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0_N1@Z
ord27
ord25
ord26
ord28
ord35
ord23
ord5
ord24
ord22
ord21
ord20
ord19
ord18
ord17
ord14
ord13
ord34
ord12
ord10
ord29
ord6
ord1
ord2
ord4
ord15
ord16
ord7
ord8
ord30
ord31
ord9
?ids_htons@@YAGG@Z
??0cRuleMgr@@QAE@XZ
??1cRuleMgr@@QAE@XZ
?setRuleIcmpFlow@cRuleMgr@@QAEHABVcParamIcmpFlow@@@Z
?getRuleIcmpFlow@cRuleMgr@@QAE?AVcParamIcmpFlow@@XZ
?setRuleUdpFlow@cRuleMgr@@QAEHABVcParamUdpFlow@@@Z
?setRuleTcpPortScan@cRuleMgr@@QAEHABVcParamTcpPortScan@@@Z
?getRuleTcpPortScan@cRuleMgr@@QAE?AVcParamTcpPortScan@@XZ
?setRuleUrlFollow@cRuleMgr@@QAEHABVcParamUrlFollow@@@Z
?getRuleUrlFollow@cRuleMgr@@QAE?AVcParamUrlFollow@@XZ
?setRuleSpider@cRuleMgr@@QAEHABVcParamSpider@@@Z
?getRuleSpider@cRuleMgr@@QAE?AVcParamSpider@@XZ
?setRuleProxyMax@cRuleMgr@@QAEHABVcParamProxyMax@@@Z
?getRuleProxyMax@cRuleMgr@@QAE?AVcParamProxyMax@@XZ
?setRuleTcpSynCount@cRuleMgr@@QAEHABVcParamTcpSynCount@@@Z
?getRuleTcpSynCount@cRuleMgr@@QAE?AVcParamTcpSynCount@@XZ
?setAddToQuery@cRuleMgr@@QAEHP6AHIPBD@Z@Z
?setGetQuery@cRuleMgr@@QAEHP6AHI@Z@Z
?setAddTempWhiteIp@cRuleMgr@@QAEHP6AHABU__DENYINO@@@Z@Z
?setAddHttpWhiteIp@cRuleMgr@@QAEHP6AHABU__DENYINO@@@Z@Z
?setVerifyFlag@cRuleMgr@@QAEH_N@Z
?setDenyFun@cRuleMgr@@QAEHP6AHABU__DENYINO@@@Z@Z
?setUdpFloodNotice@cRuleMgr@@QAEHP6AH_N@Z@Z
?setIcmpFloodNotice@cRuleMgr@@QAEHP6AH_N@Z@Z
?setIsWhiteUrl@cRuleMgr@@QAEHP6A_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?setIsWhite@cRuleMgr@@QAEHP6A_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?setTcpFloodNotice@cRuleMgr@@QAEHP6AH_N@Z@Z
?setVerifyFun@cRuleMgr@@QAEHP6AHABU__DENYINO@@@Z@Z
?setLogLevel@cRuleMgr@@QAEHE@Z
?setFunWriteNoFile@cRuleMgr@@QAEHP6AHPBDI@Z@Z
?setLogFilePath@cRuleMgr@@QAEHPBD@Z
?handlePktEntry@cRuleMgr@@QAEHKPBDKK_N@Z
?setUrlPort@cRuleMgr@@QAEHABV?$set@IU?$less@I@std@@V?$allocator@I@2@@std@@@Z
?setVerifyFirstFlag@cRuleMgr@@QAEH_N@Z
?setRuleFtp@cRuleMgr@@QAEHABVcParamFtp@@@Z
?getRuleFtp@cRuleMgr@@QAE?AVcParamFtp@@XZ
?setFtpPort@cRuleMgr@@QAEHABV?$set@IU?$less@I@std@@V?$allocator@I@2@@std@@@Z
?setRDPPort@cRuleMgr@@QAEHABV?$set@IU?$less@I@std@@V?$allocator@I@2@@std@@@Z
?setRuleRdp@cRuleMgr@@QAEHABVcParamRdp@@@Z
?getRuleRdp@cRuleMgr@@QAE?AVcParamRdp@@XZ
?ids_ntohs@@YAGG@Z
?ids_hton32@@YAII@Z
?getRuleUdpFlow@cRuleMgr@@QAE?AVcParamUdpFlow@@XZ
?GetBool@config7@@YA_NPB_W00_N1@Z
?GetInt@config7@@YAHPB_W00H_N@Z
?GetString@config7@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_W000_N@Z
??1CConfigMoniter@config7@@UAE@XZ
?RegisterMoniter@CConfigMoniter@config7@@QAE_NPB_W00@Z
?UnRegisterMoniter@CConfigMoniter@config7@@QAE_NPB_W00@Z
??1CConfigArray@config7@@QAE@XZ
??BCConfigElem@config7@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
??ACConfigArray@config7@@QAEAAVCConfigElem@1@I@Z
?size@CConfigArray@config7@@QBEIXZ
??0CConfigArray@config7@@QAE@PB_W000_N1@Z
?SetString@config7@@YA_NPB_W000_N1@Z
?SetBool@config7@@YA_NPB_W00_N11@Z
?SetInt@config7@@YA_NPB_W00H_N1@Z
??0CConfigMoniter@config7@@QAE@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?good@ios_base@std@@QBE_NXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?max@?$numeric_limits@I@std@@SAIXZ
?min@?$numeric_limits@I@std@@SAIXZ
?max@?$numeric_limits@_J@std@@SA_JXZ
?min@?$numeric_limits@_J@std@@SA_JXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
??$?6_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@M@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WXZ
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??1locale@std@@QAE@XZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0locale@std@@QAE@ABV01@@Z
?classic@locale@std@@SAABV12@XZ
?tolower@?$ctype@D@std@@QBEDD@Z
??1_Lockit@std@@QAE@XZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
??Bid@locale@std@@QAEIXZ
?id@?$ctype@D@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEPADXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?eq@?$char_traits@D@std@@SA_NABD0@Z
?max@?$numeric_limits@G@std@@SAGXZ
?thousands_sep@?$numpunct@D@std@@QBEDXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?grouping@?$numpunct@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??9locale@std@@QBE_NABV01@@Z
??0locale@std@@QAE@XZ
?_Getcat@?$numpunct@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$numpunct@D@std@@2V0locale@2@A
?max@?$numeric_limits@H@std@@SAHXZ
?min@?$numeric_limits@H@std@@SAHXZ
?max@?$numeric_limits@_K@std@@SA_KXZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEAB_WI@Z
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_K@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?global@locale@std@@SA?AV12@ABV12@@Z
??0locale@std@@QAE@PBDH@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHABV12@@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?length@?$char_traits@_W@std@@SAIPB_W@Z
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
??$getline@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?close@?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?is_open@?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QBE_NXZ
?rdbuf@?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_filebuf@_WU?$char_traits@_W@std@@@2@XZ
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PB_WHH@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??_D?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??_D?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??Bios_base@std@@QBEPAXXZ
?eof@?$char_traits@D@std@@SAHXZ
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?length@?$char_traits@D@std@@SAIPBD@Z
?max_size@?$allocator@D@std@@QBEIXZ
??0?$allocator@D@std@@QAE@ABV01@@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
??0?$allocator@D@std@@QAE@XZ
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@JH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0ABV12@@Z
?construct@?$allocator@D@std@@QAEXPADABD@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
?destroy@?$allocator@D@std@@QAEXPAD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?decimal_point@?$numpunct@D@std@@QBEDXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@PBD3@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??0?$_String_val@DV?$allocator@D@std@@@std@@IAE@V?$allocator@D@1@@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?max@?$numeric_limits@J@std@@SAJXZ
?min@?$numeric_limits@J@std@@SAJXZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?flags@ios_base@std@@QAEHH@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
??0_Locimp@locale@std@@AAE@ABV012@@Z
??1_Locimp@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@UAE@XZ
?_Getcat@facet@locale@std@@SAIPAPBV123@PBV23@@Z
??0id@locale@std@@QAE@I@Z
?max_size@?$allocator@_W@std@@QBEIXZ
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
??0?$allocator@_W@std@@QAE@ABV01@@Z
??0?$allocator@_W@std@@QAE@XZ
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIABV12@@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QBEHXZ
?fail@ios_base@std@@QBE_NXZ
?rdstate@ios_base@std@@QBEHXZ
??7ios_base@std@@QBE_NXZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?eof@?$char_traits@_W@std@@SAGXZ
?eq_int_type@?$char_traits@_W@std@@SA_NABG0@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
?width@ios_base@std@@QAEHH@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??_D?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?width@ios_base@std@@QBEHXZ
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?flags@ios_base@std@@QBEHXZ
?_Id_cnt@id@locale@std@@0HA
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
isspace
ispunct
strlen
_vsnprintf
memmove_s
swprintf_s
swscanf
memcmp
sprintf_s
strftime
_gmtime32
_time32
rand
srand
free
printf
malloc
fopen_s
fread
ftell
fseek
ferror
fputc
fprintf
sscanf_s
atof
_vsnprintf_s
fclose
tolower
isalpha
isalnum
strncmp
strchr
memmove
realloc
??0exception@std@@QAE@ABQBDH@Z
_wcsicmp
longjmp
_ftelli64
wcsncpy_s
_localtime64_s
strstr
_fseeki64
_wstat64i32
wcsstr
wcsftime
clock
strrchr
wcsncat_s
wcscat_s
_vsnwprintf_s
wcscpy_s
_stat64i32
_fsopen
towlower
wcschr
fopen
_mktime64
_snwscanf_s
iswdigit
_wfopen_s
_vscwprintf
_wmkdir
_errno
vswprintf_s
wcsrchr
towupper
_wfopen
fwrite
abort
_beginthreadex
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?terminate@@YAXXZ
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
_localtime64
atoi
wcscmp
_wtoi
wcslen
??0exception@std@@QAE@ABQBD@Z
_invalid_parameter_noinfo
memcpy
_time64
??_V@YAXPAX@Z
memset
_gmtime64
_purecall
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@XZ
__CxxFrameHandler3
??2@YAPAXI@Z
??3@YAXPAX@Z
_setjmp3
_local_unwind4
??0bad_cast@std@@QAE@ABV01@@Z
GetAdaptersInfo
GetIpNetTable
GetIfEntry
GetIfTable
SendARP
PathIsDirectoryW
PathRemoveFileSpecW
PathFindFileNameW
GetProcessImageFileNameA
GetProcessMemoryInfo
EnumProcessModules
GetModuleFileNameExA
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
SetEntriesInAclW
RegCreateKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegSaveKeyW
RegDeleteValueW
RegEnumValueW
RegOpenKeyExW
RegEnumKeyExW
QueryServiceConfigW
ControlService
UnlockServiceDatabase
QueryServiceStatusEx
EnumServicesStatusW
ChangeServiceConfigW
QueryServiceStatus
StartServiceW
ChangeServiceConfig2W
LockServiceDatabase
QueryServiceConfig2W
RegSetValueExW
CreateServiceW
DeleteService
OpenSCManagerW
EnumDependentServicesW
OpenServiceW
AdjustTokenPrivileges
RegOpenKeyW
RegQueryValueExW
RegCloseKey
OpenEventLogW
ReadEventLogW
CloseEventLog
CloseServiceHandle
OpenProcessToken
GetTokenInformation
EqualSid
AllocateAndInitializeSid
FreeSid
DuplicateTokenEx
LookupAccountSidW
DeleteAce
GetAclInformation
SetNamedSecurityInfoW
LookupPrivilegeValueW
GetAce
GetNamedSecurityInfoW
BuildExplicitAccessWithNameW
RegRestoreKeyW
ShellExecuteW
CommandLineToArgvW
CoInitializeEx
NetIdsStart
NetIdsStop
SetServiceCtrlFun
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ