C:\Users\ScottBr\AppData\Local\Temp\Ditto_Build\Release64\Ditto.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Ditto.exe
Resource
win11-20240802-en
windows11-21h2-x64
7 signatures
150 seconds
General
-
Target
Ditto.exe
-
Size
5.0MB
-
MD5
8c2857edfd21d2c720aab194689d2b0a
-
SHA1
02d14590f17bdd5020a6b984fcf813e11569b4a8
-
SHA256
9c614c4ecd5b11181be79292992b4435a583c6a9b9de24f488cf4c2976d03acf
-
SHA512
f4c4b38511a02911a99eabdc7145fa3ddb4443c21db309d4bf5cbc85917a0cb367615fa1ed7af72d2da35f7f1d5eec3fb1f0ae597461aba7fb46d2ad7e06f400
-
SSDEEP
49152:lJXpcMSF7S+7PdPeuTtAcAh1ImCGQpX/TWaVzqbk62V:ZfuJAxvsO4
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Ditto.exe
Files
-
Ditto.exe.exe windows:6 windows x64 arch:x64
fc5349165698060d2922a5edd56c58c7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
ws2_32
bind
accept
send
select
recv
__WSAFDIsSet
WSAGetLastError
socket
inet_addr
htons
connect
WSACleanup
WSAStartup
gethostname
gethostbyname
inet_ntoa
listen
closesocket
kernel32
ReadFile
RaiseException
SetLastError
GetCurrentThreadId
GetModuleHandleW
LoadLibraryA
OutputDebugStringA
CreateDirectoryW
CopyFileW
MoveFileW
RemoveDirectoryW
OpenProcess
GetLocalTime
GetVersionExW
QueryFullProcessImageNameW
GetComputerNameW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
ExpandEnvironmentStringsW
SetCurrentDirectoryW
WriteFile
GetTempPathW
GetModuleFileNameW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetEnvironmentVariableW
GetCurrentDirectoryW
GetFileAttributesExW
GetFullPathNameW
QueryPerformanceCounter
QueryPerformanceFrequency
Beep
GetVersion
GetStdHandle
GetEnvironmentVariableA
FindClose
FindFirstFileW
SetFileTime
DebugBreak
GetCurrentProcess
GetSystemTime
SystemTimeToFileTime
SetConsoleCtrlHandler
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
FlushFileBuffers
CreateFileW
CreateFileMappingW
FormatMessageA
GetSystemTimeAsFileTime
GetProcessHeap
LockFileEx
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
GetSystemInfo
HeapReAlloc
DeleteFileA
WaitForSingleObjectEx
CreateFileA
FlushViewOfFile
GetFileAttributesA
GetDiskFreeSpaceA
GetTempPathA
HeapSize
HeapValidate
UnmapViewOfFile
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
GetDiskFreeSpaceW
HeapFree
HeapCreate
AreFileApisANSI
InitializeCriticalSection
TryEnterCriticalSection
DecodePointer
lstrlenA
GetWindowsDirectoryW
WinExec
lstrcpyW
lstrcatW
lstrlenW
GetExitCodeProcess
GetFileTime
GetACP
InitOnceBeginInitialize
OutputDebugStringW
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
EncodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GetModuleHandleExW
GlobalMemoryStatus
GetFileSize
GlobalAddAtomW
GlobalDeleteAtom
FindResourceW
SizeofResource
LockResource
LoadResource
TerminateThread
WaitForMultipleObjects
CreateEventW
WaitForSingleObject
ResetEvent
InitOnceComplete
SetEvent
CloseHandle
lstrcpynW
ResumeThread
GetCurrentProcessId
CreateMutexW
DeleteFileW
GetFileAttributesW
Sleep
WideCharToMultiByte
MultiByteToWideChar
FormatMessageW
LocalFree
FreeLibrary
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalAlloc
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
MulDiv
LoadLibraryW
GetProcAddress
GetTickCount
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
MapViewOfFile
GetStartupInfoW
GetCurrentThread
user32
GetMessageTime
GetClipboardViewer
UnregisterClassW
EnableWindow
GetClientRect
GetKeyState
GetInputState
SendMessageW
ShowWindow
GetDlgItem
CheckDlgButton
RegisterClipboardFormatW
SetFocus
GetDC
ReleaseDC
LoadImageW
MonitorFromWindow
AppendMenuW
GetActiveWindow
IsClipboardFormatAvailable
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
GetMessagePos
DrawFrameControl
DrawEdge
EnableMenuItem
CopyIcon
MessageBeep
MapWindowPoints
GetClassInfoW
DrawAnimatedRects
DrawIconEx
InflateRect
FrameRect
CreatePopupMenu
ReleaseCapture
SetCapture
FindWindowW
SendInput
keybd_event
VkKeyScanW
SetKeyboardState
GetKeyboardState
DrawFocusRect
SetWindowRgn
DeleteMenu
GetNextDlgTabItem
PostQuitMessage
MonitorFromRect
MonitorFromPoint
EnumWindows
EnumChildWindows
GetMenuItemCount
GetMenuItemID
GetMenu
GetLastInputInfo
GetClipboardFormatNameW
WindowFromPoint
CheckMenuItem
GetCapture
GetGUIThreadInfo
GetClassNameW
IsRectEmpty
CopyRect
ClientToScreen
GetCaretPos
GetWindowTextW
IsIconic
AttachThreadInput
DestroyMenu
SetRectEmpty
InsertMenuW
CreateMenu
wsprintfW
GetMonitorInfoW
GetAsyncKeyState
SystemParametersInfoW
GetScrollInfo
GetFocus
OffsetRect
SetWindowPos
DestroyWindow
CreateIconIndirect
DestroyIcon
LoadIconW
SetParent
GetDesktopWindow
SetWindowLongPtrW
GetWindowLongPtrW
RedrawWindow
SetActiveWindow
SetMenuDefaultItem
GetMenuDefaultItem
TrackPopupMenu
GetSubMenu
LoadMenuW
CreateWindowExW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
DefWindowProcW
RegisterWindowMessageW
GetMessageW
SetGestureConfig
GetGestureInfo
FillRect
GetSysColor
LockWindowUpdate
GetSystemMetrics
MapVirtualKeyW
GetKeyNameTextW
UnregisterHotKey
RegisterHotKey
TabbedTextOutW
GrayStringW
DrawTextExW
LoadCursorW
LoadBitmapW
PtInRect
EqualRect
ScreenToClient
GetCursorPos
SetCursor
IsWindow
SetRect
DrawTextW
GetParent
InvalidateRect
IsWindowVisible
BringWindowToTop
SetLayeredWindowAttributes
MessageBoxW
AllowSetForegroundWindow
UpdateWindow
ModifyMenuW
CloseWindow
PeekMessageW
DispatchMessageW
TranslateMessage
PostThreadMessageW
PostMessageW
GetWindow
GetTopWindow
SetWindowLongW
GetWindowLongW
GetWindowRect
IsDlgButtonChecked
MoveWindow
SetForegroundWindow
GetWindowThreadProcessId
GetForegroundWindow
KillTimer
SetTimer
ChangeClipboardChain
SetClipboardViewer
GetClipboardOwner
EnumClipboardFormats
GetClipboardData
GetOpenClipboardWindow
gdi32
CreateCompatibleBitmap
CreateCompatibleDC
GetDIBits
GetStockObject
RealizePalette
SelectPalette
GetObjectW
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
SetDIBColorTable
PatBlt
CreateFontW
CreateFontIndirectW
GetCurrentPositionEx
GetTextColor
GetTextExtentPoint32W
RestoreDC
SaveDC
SetTextColor
BitBlt
CreateSolidBrush
Escape
PtVisible
RectVisible
TextOutW
ExtTextOutW
CreateBitmap
CreateRectRgn
CreatePen
FillRgn
CreatePolygonRgn
Polyline
GetPixel
SetBkColor
SetBkMode
GetTextMetricsW
EnumFontsW
Rectangle
CreatePalette
StretchDIBits
GetDeviceCaps
winmm
PlaySoundW
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
shlwapi
PathUnmakeSystemFolderW
PathIsSystemFolderW
SHAutoComplete
PathMakeSystemFolderW
PathSkipRootW
PathSetDlgItemPathW
PathMatchSpecW
PathMakePrettyW
PathIsRelativeW
PathGetDriveNumberW
PathFindOnPathW
PathSearchAndQualifyW
PathCommonPrefixW
PathCompactPathExW
PathCompactPathW
PathCanonicalizeW
PathBuildRootW
PathAppendW
PathAddExtensionW
PathAddBackslashW
PathFileExistsW
SHGetValueW
PathIsDirectoryW
PathFindExtensionW
StrFormatByteSizeW
PathRenameExtensionW
PathRemoveFileSpecW
PathRemoveExtensionW
PathRemoveBackslashW
PathRemoveArgsW
PathRelativePathToW
PathQuoteSpacesW
PathFindFileNameW
PathParseIconLocationW
mfc140u
ord14220
ord9056
ord361
ord1055
ord6282
ord12936
ord13419
ord12239
ord12259
ord3742
ord12631
ord12546
ord12771
ord12763
ord12963
ord13679
ord13345
ord13745
ord8572
ord13742
ord12697
ord13757
ord13753
ord12700
ord5044
ord9392
ord6251
ord3056
ord4078
ord1053
ord8817
ord973
ord2006
ord14168
ord13299
ord13309
ord878
ord1369
ord7182
ord6634
ord2222
ord12724
ord6256
ord841
ord12566
ord9681
ord9216
ord1352
ord5573
ord6361
ord3803
ord4725
ord2479
ord4086
ord8441
ord480
ord1119
ord2703
ord5641
ord5604
ord5245
ord6569
ord6648
ord13577
ord1402
ord6636
ord6638
ord12720
ord13569
ord13568
ord1631
ord4181
ord8451
ord8452
ord2415
ord2427
ord4510
ord2396
ord7191
ord3203
ord5120
ord4658
ord4675
ord12435
ord491
ord1122
ord5385
ord4561
ord4578
ord4030
ord985
ord1452
ord6724
ord2786
ord8471
ord2311
ord2195
ord6879
ord9114
ord8866
ord11063
ord11229
ord3509
ord11081
ord972
ord8173
ord2861
ord1438
ord1440
ord6231
ord3053
ord3244
ord1042
ord1665
ord14039
ord14033
ord528
ord3089
ord4724
ord3830
ord1149
ord13999
ord5742
ord6605
ord5636
ord5607
ord13301
ord7785
ord7637
ord1442
ord7387
ord5909
ord13952
ord2922
ord305
ord1510
ord12445
ord14030
ord2561
ord4913
ord1632
ord3727
ord5665
ord5654
ord7888
ord12933
ord2223
ord363
ord4002
ord261
ord258
ord1677
ord7747
ord12266
ord12564
ord8417
ord8410
ord14029
ord6717
ord12926
ord277
ord12265
ord14026
ord830
ord3719
ord10906
ord10901
ord2187
ord1346
ord5570
ord5389
ord5672
ord6260
ord10703
ord8730
ord5750
ord497
ord3953
ord9066
ord619
ord1215
ord13728
ord7120
ord912
ord3145
ord4311
ord3967
ord1905
ord10189
ord1389
ord11899
ord2543
ord8944
ord2966
ord8916
ord7367
ord281
ord1668
ord12442
ord4585
ord7811
ord3936
ord13030
ord2686
ord6566
ord4324
ord3078
ord3097
ord5628
ord7780
ord12324
ord4499
ord3728
ord11152
ord6549
ord12762
ord8501
ord8063
ord886
ord10119
ord11594
ord5642
ord7249
ord294
ord2237
ord364
ord3950
ord6656
ord6067
ord13580
ord13453
ord1511
ord8182
ord14075
ord6572
ord3151
ord1404
ord6787
ord13105
ord4182
ord472
ord13594
ord12929
ord1109
ord6603
ord3169
ord1798
ord1439
ord2909
ord5907
ord13555
ord11823
ord6814
ord6542
ord4335
ord4498
ord5380
ord5387
ord5384
ord13322
ord4951
ord6591
ord961
ord959
ord12112
ord12111
ord1427
ord6105
ord5683
ord11654
ord11653
ord12049
ord14244
ord12729
ord1689
ord4647
ord2815
ord4171
ord8196
ord14083
ord489
ord1121
ord3952
ord6090
ord310
ord2904
ord5710
ord1678
ord1674
ord309
ord306
ord300
ord12241
ord5675
ord4948
ord1643
ord12746
ord1086
ord438
ord2473
ord2475
ord287
ord1508
ord1034
ord311
ord316
ord6262
ord1430
ord964
ord4696
ord3143
ord12240
ord4946
ord1230
ord6127
ord1936
ord636
ord638
ord6727
ord4448
ord1901
ord1975
ord641
ord640
ord7235
ord8926
ord11855
ord450
ord6850
ord1091
ord1525
ord872
ord870
ord2270
ord3713
ord8449
ord6866
ord7546
ord1383
ord3266
ord3144
ord6555
ord8826
ord1424
ord4095
ord3164
ord6588
ord5237
ord4726
ord12967
ord6313
ord12761
ord357
ord5771
ord8823
ord1158
ord4084
ord7775
ord13302
ord13307
ord6343
ord8819
ord1057
ord3746
ord2906
ord8439
ord4081
ord3058
ord6258
ord6848
ord11052
ord10601
ord8468
ord4357
ord2514
ord6250
ord3756
ord4722
ord6320
ord2212
ord4656
ord7869
ord5972
ord2508
ord2488
ord12233
ord829
ord8822
ord1157
ord2689
ord14194
ord3748
ord2907
ord8440
ord4083
ord6775
ord3096
ord6342
ord7233
ord11854
ord1089
ord8731
ord10704
ord4343
ord446
ord6285
ord5916
ord6002
ord13401
ord2698
ord11902
ord10691
ord14128
ord7882
ord13199
ord990
ord8900
ord3579
ord3697
ord12932
ord13597
ord14278
ord12087
ord14225
ord12030
ord1503
ord6505
ord2340
ord266
ord265
ord2903
ord1670
ord1667
ord280
ord7366
ord11898
ord10689
ord1386
ord6083
ord11623
ord11622
ord11624
ord11621
ord10858
ord10260
ord11022
ord8733
ord10710
ord10924
ord8668
ord6153
ord902
ord7119
ord11813
ord6000
ord13397
ord2697
ord8901
ord11085
ord10163
ord3951
ord3307
ord3308
ord3071
ord3212
ord3209
ord9946
ord7913
ord14360
ord9976
ord9978
ord9977
ord9975
ord9979
ord5451
ord11414
ord11415
ord8830
ord11771
ord3718
ord11625
ord14209
ord8656
ord6729
ord8947
ord3173
ord13513
ord11944
ord11940
ord1700
ord1722
ord1748
ord1734
ord1755
ord4776
ord4843
ord4788
ord4806
ord4800
ord4794
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
RegCreateKeyExW
OpenProcessToken
RegQueryValueW
RegSetValueExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegDeleteValueW
GetTokenInformation
shell32
SHGetPathFromIDListW
SHGetMalloc
Shell_NotifyIconW
ShellExecuteExW
ShellExecuteW
DragQueryFileA
DragQueryFileW
SHGetSpecialFolderLocation
SHAppBarMessage
comctl32
_TrackMouseEvent
InitCommonControlsEx
ImageList_AddMasked
ole32
CreateStreamOnHGlobal
ReleaseStgMedium
CoCreateGuid
oleaut32
SysAllocStringLen
VariantInit
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayDestroy
SysStringLen
SysAllocString
VarBstrFromDate
VariantTimeToSystemTime
SystemTimeToVariantTime
SysFreeString
VariantClear
GetErrorInfo
VariantChangeType
SetErrorInfo
SafeArrayCreate
CreateErrorInfo
gdiplus
GdipDrawImageRectRect
GdipSetImageAttributesColorMatrix
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipDrawImageRectI
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageGraphicsContext
GdipSaveImageToFile
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipDrawImageRectRectI
GdipGraphicsClear
GdipSetInterpolationMode
GdipSetPixelOffsetMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipGetImageHeight
GdipGetImageWidth
msvcp140
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@O@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAJ@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAO@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xbad_function_call@std@@YAXXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
??0task_continuation_context@Concurrency@@AEAA@XZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Strcoll
_Strxfrm
_Wcscoll
_Wcsxfrm
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?id@?$collate@_W@std@@2V0locale@2@A
?_Random_device@std@@YAIXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Xlength_error@std@@YAXPEBD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
_Mbrtowc
?_Syserror_map@std@@YAPEBDH@Z
?_Throw_C_error@std@@YAXH@Z
_Cnd_unregister_at_thread_exit
_Cnd_register_at_thread_exit
_Cnd_broadcast
_Cnd_wait
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Mtx_unlock
_Mtx_lock
_Mtx_init_in_situ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?uncaught_exception@std@@YA_NXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
_Mtx_destroy_in_situ
wininet
InternetCanonicalizeUrlW
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_type_info_destroy_list
__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memcpy
memset
_purecall
__std_type_info_compare
__std_type_info_name
__RTDynamicCast
memchr
memcmp
memmove
strchr
wcschr
wcsstr
strstr
strrchr
__C_specific_handler
__current_exception
__current_exception_context
api-ms-win-crt-heap-l1-1-0
malloc
_recalloc
calloc
realloc
free
_msize
_set_new_mode
api-ms-win-crt-runtime-l1-1-0
_get_wide_winmain_command_line
_set_app_type
_seh_filter_exe
_resetstkoflw
_initterm
strerror
_initterm_e
_configure_wide_argv
terminate
abort
_endthreadex
_invalid_parameter_noinfo_noreturn
_cexit
_invalid_parameter_noinfo
_c_exit
_register_thread_local_exe_atexit_callback
_exit
_beginthreadex
_initialize_wide_environment
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_errno
_crt_at_quick_exit
system
raise
_execute_onexit_table
exit
_crt_atexit
api-ms-win-crt-string-l1-1-0
isupper
toupper
strcspn
wcsncmp
strcmp
isprint
_wcsicmp
isspace
strncpy
tolower
iswctype
isalnum
_wcsnicmp
isalpha
strncmp
wcsncpy_s
_strdup
wcsncpy
towupper
wcstok
iswalpha
iswspace
wcscspn
isdigit
api-ms-win-crt-stdio-l1-1-0
ftell
fseek
fputs
_pclose
_fileno
fgets
fclose
_popen
putc
fflush
rewind
fgetc
fgetpos
fputc
_get_stream_buffer_pointers
__acrt_iob_func
fread
_close
__stdio_common_vfwprintf
_wfopen
_set_fmode
_read
__stdio_common_vswprintf
fsetpos
_fseeki64
fwrite
__stdio_common_vswprintf_s
puts
setvbuf
ungetc
_isatty
_setmode
__p__commode
__stdio_common_vsprintf
_write
__stdio_common_vsprintf_s
__stdio_common_vfprintf
_open
_wfopen_s
ferror
__stdio_common_vsnprintf_s
__stdio_common_vsscanf
_wopen
_lseeki64
fopen
api-ms-win-crt-time-l1-1-0
wcsftime
_localtime64_s
_time64
_mktime64
api-ms-win-crt-filesystem-l1-1-0
_wsplitpath
_lock_file
_findclose
_unlock_file
_chmod
_access
_wunlink
_mkdir
_findnext64i32
_stat64i32
_findfirst64i32
_wstat64
_wstat64i32
_unlink
api-ms-win-crt-convert-l1-1-0
strtoull
wcstombs
atof
_wtol
wcstod
strtoll
strtol
atoi
_wtoi
api-ms-win-crt-math-l1-1-0
ceil
ceilf
pow
powf
__setusermatherr
round
api-ms-win-crt-utility-l1-1-0
rand
qsort
bsearch
srand
api-ms-win-crt-locale-l1-1-0
setlocale
_configthreadlocale
api-ms-win-crt-environment-l1-1-0
getenv
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 952KB - Virtual size: 951KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 178KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ