celerycmd
icallback
init
test
Overview
overview
10Static
static
10krnl/Folde...o.html
windows7-x64
1krnl/Folde...o.html
windows10-2004-x64
1krnl/Folde...ain.js
windows7-x64
3krnl/Folde...ain.js
windows10-2004-x64
3krnl/Folde...bat.js
windows7-x64
3krnl/Folde...bat.js
windows10-2004-x64
3krnl/Folde...fee.js
windows7-x64
3krnl/Folde...fee.js
windows10-2004-x64
3krnl/Folde...cpp.js
windows7-x64
3krnl/Folde...cpp.js
windows10-2004-x64
3krnl/Folde...arp.js
windows7-x64
3krnl/Folde...arp.js
windows10-2004-x64
3krnl/Folde...csp.js
windows7-x64
3krnl/Folde...csp.js
windows10-2004-x64
3krnl/Folde...css.js
windows7-x64
3krnl/Folde...css.js
windows10-2004-x64
3krnl/Folde...ile.js
windows7-x64
3krnl/Folde...ile.js
windows10-2004-x64
3krnl/Folde...arp.js
windows7-x64
3krnl/Folde...arp.js
windows10-2004-x64
3krnl/Folde.../go.js
windows7-x64
3krnl/Folde.../go.js
windows10-2004-x64
3krnl/Folde...ars.js
windows7-x64
3krnl/Folde...ars.js
windows10-2004-x64
3krnl/Folde...tml.js
windows7-x64
3krnl/Folde...tml.js
windows10-2004-x64
3krnl/Folde...ini.js
windows7-x64
3krnl/Folde...ini.js
windows10-2004-x64
3krnl/Folde...ava.js
windows7-x64
3krnl/Folde...ava.js
windows10-2004-x64
3krnl/Folde...ess.js
windows7-x64
3krnl/Folde...ess.js
windows10-2004-x64
3Behavioral task
behavioral1
Sample
krnl/Folder/Bin/Monaco/Monaco.html
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
krnl/Folder/Bin/Monaco/Monaco.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
krnl/Folder/Bin/Monaco/vs/base/worker/workerMain.js
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
krnl/Folder/Bin/Monaco/vs/base/worker/workerMain.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/bat/bat.js
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/bat/bat.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/coffee/coffee.js
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/coffee/coffee.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/cpp/cpp.js
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/cpp/cpp.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/csharp/csharp.js
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/csharp/csharp.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/csp/csp.js
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/csp/csp.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/css/css.js
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/css/css.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/dockerfile/dockerfile.js
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/dockerfile/dockerfile.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/fsharp/fsharp.js
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/fsharp/fsharp.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/go/go.js
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/go/go.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/handlebars/handlebars.js
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/handlebars/handlebars.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/html/html.js
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/html/html.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/ini/ini.js
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/ini/ini.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral29
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/java/java.js
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/java/java.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/less/less.js
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
krnl/Folder/Bin/Monaco/vs/basic-languages/less/less.js
Resource
win10v2004-20240709-en
Target
krnl.zip
Size
7.6MB
MD5
b349a048ca3b0a715a667edad44c3f27
SHA1
fd91bc19c30d266e4a6958bc435262526978eabb
SHA256
c7db4a8dabc8d24edeff62b6e911563c3854a427233a38cbf63c7226d162f7ca
SHA512
99a70b3b904ea9164ee911b41e6e26ab5b7fb834e8e6a734552611d20c36e5fc2ef820aead97d57bbd2cd254ab2091d0c6695dc33c2ab09f6bacd4f0a3258d72
SSDEEP
196608:kbjXvNVNsTtNk/0Y//p9Lhi/WDWpXqUkKPD:k/fNVNsTw/0YZ9LhyWDmkKPD
resource | yara_rule |
---|---|
static1/unpack001/krnl/Folder/Guna.UI2.dll | family_agenttesla |
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
resource | yara_rule |
---|---|
static1/unpack001/krnl/Folder/Krnl.exe | net_reactor |
static1/unpack001/krnl/Folder/KrnlAPI.dll | net_reactor |
Checks for missing Authenticode signature.
resource |
---|
unpack001/krnl/Folder/CeleryIn.bin |
unpack001/krnl/Folder/CuoreUI.dll |
unpack001/krnl/Folder/Krnl.exe |
unpack001/krnl/Folder/KrnlAPI.dll |
unpack001/krnl/Folder/SipaaFramework.dll |
unpack001/krnl/Folder/krnlss.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetProcessHeaps
HeapWalk
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
RtlCaptureContext
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
QueryPerformanceCounter
__std_type_info_destroy_list
__C_specific_handler
memset
memcpy
strlen
tolower
_ui64toa_s
_itoa
_gcvt_s
_itoa_s
_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
_initialize_onexit_table
celerycmd
icallback
init
test
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
C:\Users\Kacper\source\repos\wfcl1\wfcl1\obj\Release\CuoreUI.pdb
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Krnl.pdb
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
KrnlAPI.pdb
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
C:\Sources\VS\SipaaOS\SipaaOS\obj\Debug\SipaaFramework.pdb
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Siticone.Desktop.UI.pdb
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
C:\Users\Javan\Desktop\Projects\Release\CeleryInject.pdb
GetThreadContext
VirtualAllocEx
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalUnlock
GlobalLock
lstrcpynW
lstrcpyW
lstrcatW
lstrlenW
CreateToolhelp32Snapshot
Thread32First
Thread32Next
K32EnumProcessModules
K32GetModuleFileNameExW
K32QueryWorkingSetEx
GetCurrentProcess
ResumeThread
QueryPerformanceCounter
QueryPerformanceFrequency
VirtualQueryEx
OpenProcess
lstrcmpiW
Process32FirstW
Process32NextW
FindClose
GetLocaleInfoEx
CreateFileW
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SuspendThread
GetThreadPriority
OpenThread
GetLastError
CloseHandle
GetTempPathW
GetFileAttributesW
DeleteFileW
CreateDirectoryW
lstrlenA
LocalFree
Sleep
TerminateProcess
InitializeSListHead
AreFileApisANSI
GetModuleHandleW
GetFileInformationByHandleEx
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
FormatMessageA
OpenClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
FindWindowW
CloseClipboard
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Syserror_map@std@@YAPEBDH@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??Bios_base@std@@QEBA_NXZ
?rdstate@ios_base@std@@QEBAHXZ
?fail@ios_base@std@@QEBA_NXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@AEAD@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPEBD@Z
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?width@ios_base@std@@QEAA_J_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Winerror_map@std@@YAHH@Z
URLOpenBlockingStreamA
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
NtQueryInformationProcess
PathRemoveFileSpecW
__std_exception_destroy
strchr
_purecall
__C_specific_handler
__std_exception_copy
_CxxThrowException
memchr
memmove
memset
__current_exception_context
memcpy
__current_exception
memcmp
__CxxFrameHandler4
terminate
_invalid_parameter_noinfo_noreturn
_errno
_register_thread_local_exe_atexit_callback
_c_exit
__p___argv
__p___argc
exit
_exit
_initterm_e
_initterm
_get_initial_narrow_environment
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
system
_register_onexit_function
_initialize_narrow_environment
_configure_narrow_argv
_initialize_onexit_table
isdigit
strncat
strcspn
strnlen
strspn
isspace
strpbrk
toupper
iscntrl
strncpy
strncmp
isgraph
tolower
isalpha
isalnum
ispunct
isxdigit
islower
isupper
_callnewh
_set_new_mode
free
malloc
_fseeki64
__stdio_common_vsprintf
fwrite
setvbuf
ungetc
__stdio_common_vsprintf_s
__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vsnprintf_s
_set_fmode
fread
__p__commode
fputc
_wfopen
__stdio_common_vfwprintf
_get_stream_buffer_pointers
fgetpos
fgetc
fflush
fsetpos
fclose
srand
rand
atoi
strtoul
strtoull
strtod
_wstat64
_waccess_s
_wrmdir
_wmkdir
_unlock_file
_lock_file
_difftime64
_gmtime64_s
_localtime64_s
clock
_time64
strftime
sqrt
tan
tanh
_dsign
log10
log
frexp
modf
fmod
floorf
sinh
exp
cosh
cos
ceil
atan2
atan
asin
acos
round
ldexp
sin
pow
__setusermatherr
floor
log2
ceilf
_configthreadlocale
___lc_codepage_func
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ