OpenVape-v4.21.4.zip
- SHA256 2678d9768edbefa38039f00b6c8806d5d76ca8369560e8be38887f0e6c29a278
Overview
overview
3Static
static
3Vape421Injector.exe
windows10-2004-x64
1Vape421Injector.exe
windows11-ltsc_2024-x64
1Vape421Native.dll
windows10-2004-x64
1Vape421Native.dll
windows11-ltsc_2024-x64
1service.bat
windows10-2004-x64
3service.bat
windows11-ltsc_2024-x64
3vape421-ex....0.jar
windows10-2004-x64
1vape421-ex....0.jar
windows11-ltsc_2024-x64
1vape_v4_rewrite.exe
windows10-2004-x64
1vape_v4_rewrite.exe
windows11-ltsc_2024-x64
1Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Vape421Injector.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Vape421Injector.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Vape421Native.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Vape421Native.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
service.bat
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
service.bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
vape421-experimental-service-0.1.0.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
vape421-experimental-service-0.1.0.jar
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
vape_v4_rewrite.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
vape_v4_rewrite.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target OpenVape-v4.21.4.zip
- Size 27.0MB
- Sample260827-pp6pcsvcld
- SHA256 2678d9768edbefa38039f00b6c8806d5d76ca8369560e8be38887f0e6c29a278
- MD5 fbfc7ec30568ccbd31f6886d0b9b18b9
- SHA1 c016150a0033fb36c3339d98dc0409ab6e5d2c13
- SHA512 24add8d6dd8e7bb910e437445b10a3d9ce78463ec57f073d2659eb839fd10febc478404b61d63267e4940a86c975a28a4c16e618ad3cf9ff64a943df7d72806a
- SSDEEP 786432:ZeveBkhFUNGRyq8VSdtyzHgqn/BosFqktQ:ZepUNGRyq5nyzA+BOUQ
- TLSH T1A857333AD97E005C64407E383EB511895E3C8D7B71FEE6B57BA39629A1611CCA03B32D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned JAR 1 IoCs
Checks for missing JAR codesign signature.
resource unpack001/vape421-experimental-service-0.1.0.jar - Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Vape421Injector.exe unpack001/Vape421Native.dll unpack001/vape_v4_rewrite.exe
File Explorer
-
OpenVape-v4.21.4.zip.zip 27.0MB
-
README.md10KB
-
Vape421Injector.exe.exe 19KB
-
Vape421Native.dll.dll 23.3MB
-
service.bat55B
-
vape421-experimental-service-0.1.0.jar.jar 5.1MB
-
vape_v4_rewrite.exe.exe 257KB
README.md
- SHA256 cf10e95b78833ff7cf593646edf14cbcf4acabd0808b3671c60451c681e1c765
- MD5 7914aee4d9d0df1e6a6e8051e5309562
- SHA1 48c3eb38fc2543f7d44be40e120c343de6fbfdb5
- SHA512 e8dc46b581d1ea5b2f2020fb5b1221a80289f327cae8a38612986366966e32ad4117bf20f10a1fe141c19b3e45cac7774adcb7d2220f5de6e587be0615b979cc
- SSDEEP 192:wvoI0pJP1XDIyyybkWBmVu76s9nAGWeN3aeCXbFbt7bMoPJSG6s3zAZ0796buG:wvt0pJdXDIyyM7dHy/7sls3cZ0J6bB
- TLSH T1C432FAF85C6965E81E53E6D70A9E231BF44DC52FC039B29DF28C444C378DEA9928F216
- MD5 SHA1 SHA512 SSDEEP TLSH
Vape421Injector.exe
- IMPHASH 52c0eaebbe48554d7678e56077f8b882
- SHA256 a51fe50eae88d329323b5971d38bc2463fd824275238c4da6e27c91a0d75af82
- MD5 93e18ca322c0ceb7d18905ec0536ee27
- SHA1 5c95076e9d1a6072f632ef99d8e5fb8477870b97
- SHA512 7c899fa5f3c0ae75acb5e2e2ffeed97c2dc49825ce4291fbd781d8aeb2bf39a21cf7191f20512249d08e130530634247db6284be17ab664e70a258b7eca2a55b
- SSDEEP 384:l71trhY+ENTYhYc0c5Rb7trk3N7we7gne:l73ydYhZdmNbse
- TLSH T157921A46FBFA14DAF57AD63689725136A6B1791B2B328ADF0358801C0D727D0EC34F46
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
9360
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetStdHandle
GetFileAttributesW
GetFullPathNameW
CloseHandle
GetLastError
WaitForSingleObject
Sleep
CreateRemoteThread
OpenProcess
GetTickCount64
VirtualAllocEx
WriteProcessMemory
VirtualFreeEx
IsWow64Process
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LocalFree
FormatMessageW
FillConsoleOutputCharacterW
FillConsoleOutputAttribute
GetConsoleCursorInfo
SetConsoleCursorInfo
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
Module32FirstW
Module32NextW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
QueryPerformanceCounter
user32
IsWindowVisible
GetWindowTextW
GetWindowTextLengthW
EnumWindows
GetWindowThreadProcessId
vcruntime140
__C_specific_handler
memset
wcsrchr
__current_exception
__current_exception_context
memcpy
api-ms-win-crt-string-l1-1-0
_wcsicmp
wcscpy
wcslen
wcsncpy
api-ms-win-crt-conio-l1-1-0
_getwch
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
_kbhit
__p__commode
_set_fmode
__stdio_common_vfwprintf
fflush
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-convert-l1-1-0
wcstoul
api-ms-win-crt-runtime-l1-1-0
_initterm_e
exit
_initterm
_get_initial_wide_environment
__p___argc
__p___wargv
_initialize_wide_environment
_c_exit
_register_thread_local_exe_atexit_callback
_configure_wide_argv
_set_app_type
_exit
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_seh_filter_exe
_cexit
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
272B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
588B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35721,
count=4, id=259, version=35721,
count=10, id=260, version=35721,
count=19, id=261, version=35721,
count=5, id=257, version=33145,
count=88, id=1, productName=Unmarked objects,
count=1, id=260, version=36252,
count=1, id=255, version=36252,
count=1, id=258, version=36252,
Vape421Native.dll
- IMPHASH 2628d709222f2224fbbfed713eae5df5
- SHA256 5af8904584bdac1c7d88e2b0fc58e9123e4011b56b500ae8d2a9fda3add4d449
- MD5 e5a880e0fcdeae71670f444bcfdc87f1
- SHA1 9c3966465cfb14f0c58fa13cdc07e03d90e5a7de
- SHA512 b0c2d1cac6369b8239453546eda9d358bf609351cd0010d689aa935115b2a25c252d1f0663d7150c965f5a2479a6152f0cd68bdc1f92736c2e79ac6a7bb6ccc1
- SSDEEP 393216:YlZlPft/bFU8epsnuv88M6/jmGw5rwgAVhw4mYvUxll8XaPBqVHB:Yfl5FZUsa/s5rwZV+4TcrKacH
- TLSH T1A1371293E8E8643EEA7B46366294023B7E3E8BD8E10780D514F875D254BBC8D5F503AD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
29120
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
user32
DispatchMessageW
PeekMessageW
PostMessageW
DefWindowProcW
CallWindowProcW
IsWindow
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
GetAsyncKeyState
GetKeyNameTextA
GetWindowThreadProcessId
GetClassNameW
EnumWindows
SetWindowLongPtrW
ScreenToClient
GetCursorPos
GetForegroundWindow
MapVirtualKeyA
TranslateMessage
ws2_32
connect
htonl
htons
recv
send
closesocket
WSACleanup
WSAStartup
socket
shutdown
setsockopt
kernel32
InitOnceExecuteOnce
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
AcquireSRWLockShared
ReleaseSRWLockShared
GetProcessHeap
HeapFree
HeapAlloc
SetLastError
UnmapViewOfFile
MapViewOfFile
OpenFileMappingW
OpenEventW
SetEvent
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SetEnvironmentVariableA
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
GetModuleHandleExW
GetModuleHandleW
GetModuleFileNameW
FreeLibraryAndExitThread
CreateDirectoryW
CreateFileW
DeleteFileW
FlushFileBuffers
WriteFile
GetTempPathW
OutputDebugStringW
CloseHandle
GetLastError
Sleep
GetCurrentProcessId
CreateThread
GetLocalTime
DisableThreadLibraryCalls
vcruntime140
__C_specific_handler
__std_type_info_destroy_list
memset
wcsrchr
memcpy
memchr
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsnwprintf_s
fclose
__stdio_common_vsnprintf_s
fputws
_wfopen_s
api-ms-win-crt-string-l1-1-0
strlen
strncmp
strcpy_s
strcmp
wcslen
api-ms-win-crt-heap-l1-1-0
calloc
free
api-ms-win-crt-runtime-l1-1-0
_cexit
_initterm
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_initterm_e
JNI_OnLoad
JNI_OnUnload
Name
.text
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
23.2MB
Virtual Size
23.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35721,
count=4, id=259, version=35721,
count=8, id=260, version=35721,
count=12, id=261, version=35721,
count=7, id=257, version=33145,
count=113, id=1, productName=Unmarked objects,
count=3, id=260, version=36252,
count=1, id=256, version=36252,
count=1, id=255, version=36252,
count=1, id=151,
count=1, id=258, version=36252,
service.bat
- SHA256 d5fd5c427e018bb04f9b2a5a8c97b693fe4ce442fdddfa4648a92937e9d7236c
- MD5 6507800fb443c893c1090248fd903154
- SHA1 b6e7f55a464aa4cfae76680921f7ab28291d622e
- SHA512 5075d995f1b50374a6a685e629685ff04803e104ff30f075bc384479f09b868dbeebd85c76e366a8a8801e2432073c9c0e180fffaa363eeefc5acf491fa33bff
- TLSH T1D09022008E000AC220800083BE0A020A008E0028A028E00202F8E2080C00C083B02200
- MD5 SHA1 SHA512 TLSH
vape421-experimental-service-0.1.0.jar
- SHA256 f9b16014109cacdd5f14f5142f548a8a616a1c32da3d23101b1cb437f6ad46ea
- MD5 622f73dd9180cce02bb18dcde951be1f
- SHA1 e1dfb71ee1eb5dcd84773bf29770cc221e0488a6
- SHA512 0592a44a0bda55f1699d34e35ddafd2a407d9df0e0df67047b7efafcf1a0f28249884ce0b1b50582a463fb3b6cf06e2e393c9856ae1a5578025ab6dcf3022d7d
- SSDEEP 98304:L4ieD1JtrKcmMoHDEH0vqqJ7RvozcoUG5YeA4z1HVF/g+geG3CZM1L:7AeDMoQUv3tQzcGKeL11h+eG36YL
- TLSH T13B36E07994DC5465E2A3A23080809873F91C99C8FA1BB8D625F8274764FECC9DFB17C9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned JAR
Checks for missing JAR codesign signature.
vape_v4_rewrite.exe
- IMPHASH cad7c450f2ef34afd8ddfb6a58334b61
- SHA256 804587cabf06f7670294d5913ab8837dd8c65adca719ea8bf8eea2f43775ac1c
- MD5 35074dd1f12902d905eb453a6a5f3633
- SHA1 004302f9b2fa7ef8b43971a265efff0e2c7edd32
- SHA512 0728fd113855c9669ad906070b49519a3d657b8d6498c1793d56d8d996434e59a4abc0189bb1b45436b3a7883199b3037dabc816f8442c0a62e50d8a4aed7c2b
- SSDEEP 6144:CqvqNRJsH0pAg2ke9JFvF4Bu+Um9aus8nIz91f36bGRwNt:/XBpJFSL9ps8nKv32Kw7
- TLSH T13A449E1AB265022DD367D978DA626705FB73FC4B0B25A7EF43801CB20E126E85F7A741
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
91840
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
gdiplus
GdipGetFontCollectionFamilyList
GdipGetGenericFontFamilySansSerif
GdipPrivateAddMemoryFont
GdipDrawString
GdipCreateStringFormat
GdipGetFamilyName
GdipDeleteFontFamily
GdipGetClip
GdipSetClipRegion
GdipSetClipPath
GdipDrawImageRectRect
GdipDrawImageRect
GdipFillPath
GdipFillRectangle
GdipDrawPath
GdipDeleteGraphics
GdipScaleWorldTransform
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipDeleteStringFormat
GdipSetStringFormatFlags
GdipCreateFont
GdipSetSmoothingMode
GdipCloneImage
GdipDisposeImage
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipCreateFromHDC
GdipDeletePrivateFontCollection
GdipNewPrivateFontCollection
GdipSetStringFormatAlign
GdipDeleteFont
GdipCloneFontFamily
GdipSetStringFormatLineAlign
GdipFree
GdipDrawLine
GdipLoadImageFromStream
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipDeleteRegion
GdipCreateRegion
GdipAddPathArc
GdipClosePathFigure
GdipDeletePath
GdipCreatePath
GdiplusShutdown
GdiplusStartup
GdipAlloc
winhttp
WinHttpSendRequest
WinHttpOpenRequest
WinHttpSetTimeouts
WinHttpQueryDataAvailable
WinHttpReceiveResponse
WinHttpConnect
WinHttpCloseHandle
WinHttpOpen
WinHttpCrackUrl
WinHttpQueryHeaders
WinHttpReadData
shell32
ShellExecuteW
shlwapi
ord12
ws2_32
closesocket
WSACleanup
WSAStartup
accept
bind
socket
getsockname
htonl
listen
ntohs
recv
send
shutdown
kernel32
Sleep
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
UnmapViewOfFile
VirtualFreeEx
MapViewOfFile
CreateFileMappingW
WriteProcessMemory
VirtualAllocEx
OpenProcess
CreateRemoteThread
GetCurrentProcess
CreateEventW
WaitForSingleObject
GetLastError
GetFileAttributesW
GetEnvironmentVariableA
MulDiv
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
FindResourceW
SizeofResource
LockResource
LoadResource
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
WideCharToMultiByte
GetModuleFileNameW
CloseHandle
GetVolumeInformationW
CreateDirectoryW
GetEnvironmentVariableW
GetStartupInfoW
user32
AdjustWindowRectExForDpi
GetWindowLongPtrW
SetWindowLongPtrW
LoadCursorW
LoadIconW
GetDpiForSystem
GetClientRect
KillTimer
SetTimer
GetKeyState
SetFocus
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
InvalidateRect
SetWindowPos
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
TrackMouseEvent
GetWindowThreadProcessId
EnumWindows
GetWindowTextLengthW
GetWindowTextW
IsWindowVisible
PostMessageW
EndPaint
BeginPaint
OpenClipboard
UpdateWindow
gdi32
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
advapi32
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
msvcp140
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??Bios_base@std@@QEBA_NXZ
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?_Id_cnt@id@locale@std@@0HA
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Mtx_unlock
_Mtx_lock
_Thrd_id
_Thrd_join
_Query_perf_frequency
_Query_perf_counter
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Xbad_alloc@std@@YAXXZ
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
vcruntime140
__std_exception_destroy
_CxxThrowException
__current_exception
__C_specific_handler
memset
memmove
memcpy
memcmp
__std_exception_copy
__current_exception_context
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-string-l1-1-0
_wcsicmp
wcslen
strlen
api-ms-win-crt-stdio-l1-1-0
fputwc
ungetwc
__stdio_common_vswprintf_s
fclose
fflush
fgetc
fgetpos
fsetpos
_fseeki64
fwrite
setvbuf
ungetc
fgetwc
__p__commode
_set_fmode
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_crt_atexit
_set_app_type
_seh_filter_exe
_exit
_beginthreadex
terminate
api-ms-win-crt-math-l1-1-0
ceilf
__setusermatherr
exp
api-ms-win-crt-convert-l1-1-0
strtoul
atoi
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
malloc
_callnewh
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
91KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
40KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
118KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35721,
count=10, id=260, version=35721,
count=33, id=261, version=35721,
count=6, id=257, version=35721,
count=19, id=257, version=33145,
count=328, id=1, productName=Unmarked objects,
count=5, id=261, version=36248,
count=1, id=255, version=36248,
count=1, id=151,
count=1, id=258, version=36248,