H:\baidu\netdisk\pc-international\output\pdb\YunUi.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4990dcfa83bea484b39bf2fad1aaf15e3039731296de4cad4443e9c4c3e379b4.exe
Resource
win7-20240729-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
4990dcfa83bea484b39bf2fad1aaf15e3039731296de4cad4443e9c4c3e379b4.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
4990dcfa83bea484b39bf2fad1aaf15e3039731296de4cad4443e9c4c3e379b4
-
Size
6.8MB
-
MD5
2f2cd03b1809d98ed782be12771016dd
-
SHA1
d6b2330939f6b865b2fead8001539600f4b44f84
-
SHA256
4990dcfa83bea484b39bf2fad1aaf15e3039731296de4cad4443e9c4c3e379b4
-
SHA512
b0436e77d0cb356f9681270acb966dd5214f688d21c97d2367c262cfe98fa5ab81878c025840912bbf2bf791f5da7042c3e4fb59f431d41d42d15b70e8c56b02
-
SSDEEP
98304:IVvTm0B0w8uOMSdQUpB5hHZVTbJGpkVShIsIM8iKqUU8C:cvTm64JMIp5T0kVSXIM8iKbC
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4990dcfa83bea484b39bf2fad1aaf15e3039731296de4cad4443e9c4c3e379b4
Files
-
4990dcfa83bea484b39bf2fad1aaf15e3039731296de4cad4443e9c4c3e379b4.exe windows:5 windows x86 arch:x86
5c4fad4dece2e8e8a524c0c805907c43
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
updateagent
update_agent_global_init
update_agent_global_cleanup
update_agent_setopt
bull140u
?AssertOut@BULL@@YAJPB_WH_N0@Z
?GuidToString@BULL@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABU_GUID@@@Z
?LoadModuleInfo@BULL@@YAJPB_W@Z
?CreateObjectNative@BULL@@YAJABU_GUID@@0PAPAX@Z
?XLogMonitor@BULL@@YAJ_KPB_W11@Z
?XLogV@BULL@@YAXIPB_W0PAD@Z
?MultiByteToWideChar@BULL@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@IPBD@Z
?_wtoui@@YAIPB_W@Z
?CreateGuid@BULL@@YA?AU_GUID@@XZ
?RegisterObject@BULL@@YAJABU_GUID@@0P6GJPAX0PAPAX@ZPB_W@Z
?Base64Decode@BULL@@YAJPA_WPAPAUIGeneralBuffer@1@@Z
?Base64Encode@BULL@@YAJPAUIGeneralBuffer@1@PAPA_WK@Z
?MD5@BULL@@YAJPAUIGeneralBuffer@1@PAPAU21@@Z
?KillTimer_s@BULL@@YAXK@Z
?KillTimer@BULL@@YAJK@Z
?SetTimer@BULL@@YAJK_NPAUICallbackTimer@1@KPAK@Z
?EnableNamedObject@BULL@@YAJPA_WABU_GUID@@@Z
?GetModuleVer@BULL@@YAJPA_WPAPA_W1@Z
?GetLogController@BULL@@YAJPAPAUILogController@1@@Z
?GetNamedObject@BULL@@YAJPA_WABU_GUID@@1PAPAX@Z
apputil
?TransformWStringToUtf8String@Misc@AppUtil@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@4@@Z
?CurlIsIPV6@Misc@AppUtil@@YAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?GetValueByKey@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0AAV23@H@Z
?GetValueByKey@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0AA_J@Z
?VersionInfoDecode@Misc@AppUtil@@YAJPAPA_WH@Z
?GetChannelInfo@Misc@AppUtil@@YAJPAPA_W@Z
?GetTeraBoxTempPath@Misc@AppUtil@@YAJPAPA_W@Z
?IsAllAUPackageReady@Misc@AppUtil@@YAHAAH@Z
?IsAutoUpdate@Misc@AppUtil@@YAHXZ
GetInt64FromJsonDataShim
?GetUrl@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@HW4EDomainType@1@0AAV23@@Z
?SetValueByKey@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@00H@Z
?TransformUtf8BufferToBSTR@Misc@AppUtil@@YAJPAUIGeneralBuffer@BULL@@PAPA_W@Z
?GetCurrentLangId@Misc@AppUtil@@YAJAAK@Z
?CurURLDecode@Misc@AppUtil@@YAJPBDAAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z
?GetDomain@HelpAppSetting@@YAJW4EDomainType@1@AAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?GetDomain@HelpAppSetting@@YAJAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?CurURLEncode@Misc@AppUtil@@YAJPBDAAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z
?Parse@JsonLib@@YAJPA_WPAPAUIGeneralArray@BULL@@@Z
?GetProxyInfo@HelpProxySetting@@YAJPAKPAPA_WPAG@Z
?SetProxyInfo@HelpProxySetting@@YAJKPA_WG@Z
?IsAutoRun@Misc@AppUtil@@YAHXZ
?SetAutoRun@Misc@AppUtil@@YAJH@Z
?SetValueByKey@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0H@Z
?CurURLEncode@Misc@AppUtil@@YAJPB_WAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?JsonEncode@JsonLib@@YAJPAUIGeneralData@BULL@@AAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z
?IsNeedAutoUpdate@Misc@AppUtil@@YAHXZ
?GetLangDuiStringTableId@Misc@AppUtil@@YAJAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?GetUpdateLevel@Misc@AppUtil@@YAJPAH@Z
?GetForceUpdateContent@Misc@AppUtil@@YAJPAPA_W00@Z
?IsTeraBoxDomain@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAH@Z
?TransUidToString@Misc@AppUtil@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV34@@Z
?GetValueByKey@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0AAH@Z
?GetUrl@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@HW4EDomainType@1@AAV23@@Z
?TransformUtf8StringToWString@Misc@AppUtil@@YAJV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@AAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@4@@Z
?GetValueByKey@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0AAI@Z
?Parse@JsonLib@@YAJPA_WPAPAUIGeneralData@BULL@@@Z
?TransformUtf8HttpMemoryBlockToBSTR@Misc@AppUtil@@YAJPAUIHttpMemoryBlock@BULL@@PAPA_W@Z
kernel32
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
lstrcmpW
Sleep
GetDiskFreeSpaceExW
VerifyVersionInfoW
VerSetConditionMask
GetModuleHandleW
GetFileSize
ReadFile
WriteFile
lstrlenW
GetTempPathW
DeleteFileW
GlobalFree
GetDriveTypeW
SetThreadExecutionState
OpenProcess
VirtualAllocEx
ReadProcessMemory
VirtualFreeEx
LocalFree
WriteProcessMemory
CreateEventW
GetPrivateProfileIntW
VirtualAlloc
VirtualFree
FindClose
GetFullPathNameW
FindFirstFileW
FindNextFileW
GetExitCodeProcess
OpenMutexW
WaitForSingleObjectEx
ReleaseMutex
CreateMutexW
OpenFileMappingW
GetTempFileNameW
VirtualQuery
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
OpenEventW
SetEvent
GetSystemDirectoryW
GetLogicalDrives
WinExec
GetSystemTime
ExpandEnvironmentStringsW
GetSystemInfo
GetCurrentProcess
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
EncodePointer
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
LoadLibraryExA
VirtualProtect
LoadLibraryA
GetModuleHandleA
RemoveDirectoryW
DecodePointer
MoveFileExW
GetStdHandle
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
DeleteFiber
ConvertFiberToThread
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
SetLastError
InitializeCriticalSection
FreeResource
lstrcpyW
DosDateTimeToFileTime
SetFilePointer
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
RaiseException
WideCharToMultiByte
GetLastError
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryW
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
WaitForSingleObject
CreateProcessW
GetThreadContext
Thread32Next
CloseHandle
SuspendThread
OpenThread
Thread32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetVersionExW
GetEnvironmentVariableW
GetCurrentThreadId
MultiByteToWideChar
SetUnhandledExceptionFilter
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
ResetEvent
SetErrorMode
LoadLibraryExW
lstrcmpiW
CreateFileW
HeapCreate
user32
MessageBeep
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
OemToCharBuffW
DestroyIcon
SetForegroundWindow
AttachThreadInput
GetActiveWindow
AllowSetForegroundWindow
CharLowerBuffW
PeekMessageW
LoadImageW
LoadIconW
UnregisterHotKey
SetClipboardData
SetActiveWindow
UnhookWinEvent
SetWinEventHook
ClipCursor
ShowCursor
GetCursorInfo
GetDoubleClickTime
GetShellWindow
GetForegroundWindow
FindWindowExW
UpdateWindow
GetWindowDC
RegisterHotKey
EnumChildWindows
RegisterClipboardFormatW
KillTimer
SetTimer
EmptyClipboard
ChangeClipboardChain
SetClipboardViewer
GetClipboardOwner
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
GetKeyState
UnionRect
SetRectEmpty
SetCursor
GetCursorPos
SystemParametersInfoW
TrackMouseEvent
GetWindowThreadProcessId
MonitorFromPoint
FindWindowW
DrawTextW
FrameRect
MapWindowPoints
GetMonitorInfoW
MonitorFromWindow
CopyRect
IsIconic
mouse_event
SetCursorPos
GetSystemMetrics
MapVirtualKeyA
EnableWindow
IsWindowEnabled
IsZoomed
GetWindowRect
ShowWindow
SendMessageTimeoutW
RegisterWindowMessageW
GetWindowTextLengthW
BeginPaint
EndPaint
TrackPopupMenu
AppendMenuW
InsertMenuW
DestroyMenu
CreatePopupMenu
IsMenu
EnableMenuItem
DrawIconEx
SetCaretPos
GetCaretBlinkTime
CreateCaret
EndMenu
SetLayeredWindowAttributes
PrintWindow
UpdateLayeredWindow
AnimateWindow
PostThreadMessageW
DispatchMessageW
TranslateMessage
GetMessageW
IsChild
GetFocus
PostMessageW
DefWindowProcW
CallWindowProcW
RegisterClassExW
GetClassInfoExW
LoadCursorW
CreateWindowExW
IsWindow
DestroyWindow
SetWindowLongW
GetWindowLongW
SendMessageW
SetWindowPos
GetParent
GetWindow
MessageBoxW
UnregisterClassW
SetRect
IsRectEmpty
PtInRect
GetClientRect
InvalidateRect
ClientToScreen
ScreenToClient
GetDC
OffsetRect
InflateRect
EqualRect
GetUserObjectInformationW
GetProcessWindowStation
GetDlgItem
GetClassNameW
GetSysColor
ReleaseDC
IntersectRect
SetCapture
SetFocus
GetMenuItemInfoW
SetWindowTextW
GetWindowTextW
MoveWindow
CharNextW
IsWindowVisible
DestroyAcceleratorTable
GetDesktopWindow
InvalidateRgn
FillRect
ReleaseCapture
CreateAcceleratorTableW
RedrawWindow
WaitForInputIdle
gdi32
CreateFontIndirectW
CreateBitmap
GetTextMetricsW
GetTextColor
GetTextExtentPoint32W
GetTextExtentPointW
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
SetBkColor
SetTextColor
CreateDIBitmap
GetObjectA
GetViewportOrgEx
LineTo
RoundRect
CreateDIBSection
ExtCreatePen
MoveToEx
TextOutW
SaveDC
RestoreDC
Rectangle
RectInRegion
GetObjectType
SelectObject
BitBlt
GetStockObject
GetClipRgn
ExcludeClipRect
CreateRectRgn
GetObjectW
GetDeviceCaps
GetClipBox
CreateRectRgnIndirect
OffsetViewportOrgEx
StretchBlt
GetRgnBox
GetCurrentObject
CombineRgn
SetViewportOrgEx
DeleteDC
CreatePen
ExtTextOutW
SetBkMode
ExtSelectClipRgn
SelectClipRgn
DeleteObject
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
CryptGetUserKey
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
DeregisterEventSource
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptDestroyHash
CryptSignHashW
CryptEnumProvidersW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegEnumKeyW
RegEnumValueW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegisterEventSourceW
shell32
SHGetSpecialFolderPathW
SHGetDesktopFolder
SHGetPathFromIDListW
ord4
Shell_NotifyIconW
SHGetSpecialFolderLocation
DragFinish
SHChangeNotify
DragQueryFileW
SHAppBarMessage
ShellExecuteExW
SHBrowseForFolderW
ord2
SHGetMalloc
SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW
ShellExecuteW
CommandLineToArgvW
ole32
CreateBindCtx
CLSIDFromString
CoCreateInstance
CoSetProxyBlanket
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoUninitialize
OleUninitialize
CoInitializeEx
OleInitialize
StringFromGUID2
OleLockRunning
CreateStreamOnHGlobal
CoGetClassObject
CLSIDFromProgID
RegisterDragDrop
RevokeDragDrop
ReleaseStgMedium
DoDragDrop
OleDuplicateData
StgCreateDocfile
CreateOleAdviseHolder
OleSetContainedObject
CoLoadLibrary
CoFreeLibrary
oleaut32
VariantClear
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetVartype
SafeArrayUnlock
SafeArrayLock
SafeArrayDestroy
SysStringLen
LoadRegTypeLi
LoadTypeLi
SysAllocStringLen
VarUI4FromStr
OleCreateFontIndirect
SysAllocStringByteLen
SysStringByteLen
VarBstrCmp
SysAllocString
SysFreeString
GetErrorInfo
VariantInit
shlwapi
SHDeleteKeyW
ord219
StrCmpLogicalW
StrToIntW
StrToIntExA
StrStrIW
PathAppendW
comctl32
InitCommonControlsEx
msvcp140
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Xruntime_error@std@@YAXPBD@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
??0_Locinfo@std@@QAE@HPBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?id@?$numpunct@D@std@@2V0locale@2@A
?uncaught_exception@std@@YA_NXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??0_Lockit@std@@QAE@H@Z
??0_Locinfo@std@@QAE@PBD@Z
??1_Lockit@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@PBD3@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?id@?$ctype@D@std@@2V0locale@2@A
_Strxfrm
_Strcoll
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?classic@locale@std@@SAABV12@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_BADOFF@std@@3_JB
?id@?$collate@D@std@@2V0locale@2@A
gdiplus
GdipLoadImageFromFile
GdipLoadImageFromStream
GdipCreateTexture2I
GdipDeleteBrush
GdipCloneBrush
GdiplusShutdown
GdiplusStartup
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesWrapMode
GdipSetCompositingMode
GdipFillRectangleI
GdipDrawImageRectRectI
GdipImageRotateFlip
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipGetPropertyItemSize
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetSmoothingMode
GdipLoadImageFromStreamICM
GdipDeletePen
GdipDrawArcI
GdipCreateBitmapFromHBITMAP
GdipFree
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipSaveImageToFile
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipGetPropertyItem
GdipDrawImageRectI
GdipImageSelectActiveFrame
GdipCreatePen1
GdipLoadImageFromFileICM
GdipSetImageAttributesColorMatrix
crypt32
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetCertificateContextProperty
CertGetNameStringW
CertDuplicateCertificateContext
wintrust
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
WinVerifyTrust
ws2_32
closesocket
WSASetLastError
send
recv
WSAGetLastError
WSACleanup
urlmon
UrlMkGetSessionOption
UrlMkSetSessionOption
psapi
EnumProcesses
GetModuleBaseNameW
wininet
InternetSetCookieExW
FindFirstUrlCacheEntryW
InternetSetCookieW
FindCloseUrlCache
DeleteUrlCacheEntryW
FindNextUrlCacheEntryW
winmm
PlaySoundW
vcruntime140
wcschr
memcpy
memset
__vcrt_InitializeCriticalSectionEx
__CxxFrameHandler3
_except_handler4_common
_CxxThrowException
memcmp
strrchr
strstr
__RTDynamicCast
memchr
strchr
__std_exception_copy
__std_exception_destroy
_purecall
wcsstr
wcsrchr
memmove
__std_terminate
api-ms-win-crt-runtime-l1-1-0
_controlfp_s
_invalid_parameter_noinfo_noreturn
_errno
_invalid_parameter_noinfo
_c_exit
strerror_s
_exit
_set_invalid_parameter_handler
terminate
strerror
raise
_initialize_onexit_table
_control87
_register_onexit_function
_crt_atexit
exit
_initterm_e
_initterm
_cexit
_get_wide_winmain_command_line
_seh_filter_exe
_set_app_type
_configure_wide_argv
_register_thread_local_exe_atexit_callback
_initialize_wide_environment
signal
api-ms-win-crt-string-l1-1-0
_wcsicmp
isspace
isblank
iswxdigit
isprint
isdigit
iswprint
wcscat_s
iswalpha
wcscspn
wcsspn
iswdigit
_wcsnicmp
wcsncmp
strncmp
iswalnum
wcstok
wcscpy_s
strnlen
strcpy
strcpy_s
_wcsdup
wcsncpy
wcscpy
_stricmp
_strnicmp
strncpy
strcspn
strspn
wmemcpy_s
wcscmp
wcsnlen
iswspace
_wcslwr_s
_wcsupr_s
strlen
wcslen
wcsncpy_s
strcmp
strcat
api-ms-win-crt-stdio-l1-1-0
fputs
__stdio_common_vsprintf_s
__stdio_common_vsprintf
__stdio_common_vsscanf
fgetc
_set_fmode
__p__commode
fputc
ungetc
fflush
setvbuf
_wfopen
fsetpos
_fseeki64
_setmode
fgetpos
ftell
fwrite
_get_stream_buffer_pointers
fclose
ferror
fopen
__acrt_iob_func
__stdio_common_vswscanf
_wfopen_s
__stdio_common_vfwprintf
__stdio_common_vswprintf_s
__stdio_common_vswprintf
fseek
__stdio_common_vsnwprintf_s
fread
__stdio_common_vfprintf
feof
_fileno
fgets
api-ms-win-crt-time-l1-1-0
_localtime64_s
wcsftime
_mktime64
_time64
_gmtime64_s
api-ms-win-crt-heap-l1-1-0
_callnewh
_set_new_mode
calloc
realloc
malloc
_recalloc
free
api-ms-win-crt-multibyte-l1-1-0
_mbsrchr
_mbsicmp
_mbslwr_s
_mbscmp
api-ms-win-crt-convert-l1-1-0
_wtoi64
_atoi64
atoi
wcstol
atof
strtoul
_wtoi
strtol
api-ms-win-crt-filesystem-l1-1-0
_stat64i32
_wfindnext64i32
_findclose
_wrmdir
_lock_file
_unlock_file
_wfindfirst64i32
_wremove
_waccess
api-ms-win-crt-utility-l1-1-0
div
srand
abs
rand
qsort
bsearch
labs
api-ms-win-crt-math-l1-1-0
ceil
_CIfmod
__setusermatherr
_except1
fabs
_libm_sse2_cos_precise
_libm_sse2_log10_precise
_libm_sse2_pow_precise
_libm_sse2_sin_precise
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-environment-l1-1-0
getenv
bcrypt
BCryptGenRandom
imm32
ImmAssociateContext
ImmReleaseContext
ImmGetContext
msimg32
GradientFill
AlphaBlend
Sections
.text Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 148KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 918KB - Virtual size: 917KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 300KB - Virtual size: 299KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 771KB - Virtual size: 771KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ