c:\Build\_source\Agent\bin\ManagementAgentNT.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ba034261c18c61f2f5bb9aa2da84334d.exe
Resource
win7-20240220-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
ba034261c18c61f2f5bb9aa2da84334d.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
ba034261c18c61f2f5bb9aa2da84334d
-
Size
280KB
-
MD5
ba034261c18c61f2f5bb9aa2da84334d
-
SHA1
8ee6f5c48f86c45966c9e180e6e06dba62f3f4e9
-
SHA256
db3a1a07bc58429356f5ec0e69ccb693324ba3ceca68ce24f04992ac93e27fad
-
SHA512
0e18d8ea667119ec81fb3e9bb50e5039eeb3fd3add5dfbf5dcab5a58a61af239dc6a25a9124af51c751e1d752d31ef5ce6b7ceff1b31f3be5e832decba779baa
-
SSDEEP
3072:mO5INo8rWtmU7vYYBOr6YWIFNUJSYYvqdhon1EznoCqJcc21thd0Yems2xsz44Rx:V5ItSkivYYBOKCv8hDLiJcRdxC4h8RC
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba034261c18c61f2f5bb9aa2da84334d
Files
-
ba034261c18c61f2f5bb9aa2da84334d.exe windows:5 windows x86 arch:x86
5fc3ad58c6b556ee54206caef609fb1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ace
??M@YA_NABVACE_Time_Value@@0@Z
??YACE_Time_Value@@QAEAAV0@ABV0@@Z
??0ACE_Time_Value@@QAE@JJ@Z
?msec@ACE_Time_Value@@QBEKXZ
??0ACE_Time_Value@@QAE@ABU_FILETIME@@@Z
??1ACE_Thread_Mutex@@QAE@XZ
??0ACE_Condition_Thread_Mutex@@QAE@ABVACE_Thread_Mutex@@PBDPAX@Z
??0ACE_Thread_Mutex@@QAE@PBDPAUACE_mutexattr_t@@@Z
??1ACE_Condition_Thread_Mutex@@QAE@XZ
??1ACE_Configuration_Win32Registry@@UAE@XZ
??1ACE_Configuration_Section_Key@@QAE@XZ
?acquire@ACE_Thread_Mutex@@QAEHXZ
?release@ACE_Thread_Mutex@@QAEHXZ
?broadcast@ACE_Condition_Thread_Mutex@@QAEHXZ
?wait@ACE_Condition_Thread_Mutex@@QAEHPBVACE_Time_Value@@@Z
??0ACE_Time_Value@@QAE@XZ
?set@ACE_Time_Value@@QAEXJJ@Z
??4ACE_Time_Value@@QAEAAV0@ABV0@@Z
??P@YA_NABVACE_Time_Value@@0@Z
??H@YA?AVACE_Time_Value@@ABV0@0@Z
?ace_os_main_i@@YAHAAVACE_Main_Base@@HQAPAD@Z
??0ACE_Main_Base@@QAE@XZ
?ACE_SOCK_CONNECT_RETRY@@3HA
?spawn@ACE_Thread@@SAHP6AKPAX@Z0JPAKPAPAXJ0IPAVACE_Thread_Adapter@@@Z
??1?$ACE_String_Base@D@@QAE@XZ
?fast_rep@?$ACE_String_Base@D@@QBEPBDXZ
??1ACE_Recursive_Thread_Mutex@@QAE@XZ
??0ACE_Recursive_Thread_Mutex@@QAE@PBDPAUACE_mutexattr_t@@@Z
?symbol@ACE_DLL@@QAEPAXPBDH@Z
??1ACE_DLL@@QAE@XZ
?open@ACE_DLL@@QAEHPBDHH@Z
??0ACE_DLL@@QAE@H@Z
??0ACE_DLL@@QAE@ABV0@@Z
?acquire@ACE_Recursive_Thread_Mutex@@QAEHXZ
?release@ACE_Recursive_Thread_Mutex@@QAEHXZ
?scandir_emulation@ACE_OS@@YAHPBDQAPAPAUdirent@@P6AHPBU2@@ZP6AHPAPBU2@4@Z@Z
??1ACE_Log_Msg_Backend@@UAE@XZ
?set_flags@ACE_Log_Msg@@QAEXK@Z
?msg_backend@ACE_Log_Msg@@SAPAVACE_Log_Msg_Backend@@PAV2@@Z
?clr_flags@ACE_Log_Msg@@QAEXK@Z
?instance@ACE_Log_Msg@@SAPAV1@XZ
?priority_mask@ACE_Log_Msg@@QAEKKW4MASK_TYPE@1@@Z
?log@ACE_Log_Msg@@QAEHPBDW4ACE_Log_Priority@@PAD@Z
?thr_keyfree@ACE_OS@@YAHK@Z
?thr_key_detach@ACE_OS@@YAHKPAX@Z
?c_str@?$ACE_String_Base@D@@QBEPBDXZ
?thr_keycreate@ACE_OS@@YAHPAKP6AXPAX@Z1@Z
?thr_setspecific@ACE_OS@@YAHKPAX@Z
?NULL_key@ACE_OS@@3KA
?getspecific@ACE_Thread@@SAHKPAPAX@Z
??1ACE_Cleanup@@UAE@XZ
?at_exit_i@ACE_Object_Manager@@AAEHPAXP6AX00@Z0@Z
?instance@ACE_Object_Manager@@SAPAV1@XZ
ace_cleanup_destroyer
?get_singleton_lock@ACE_Object_Manager@@SAHAAPAVACE_Null_Mutex@@@Z
?shutting_down@ACE_Object_Manager@@SAHXZ
?starting_up@ACE_Object_Manager@@SAHXZ
?free@ACE_OS@@YAXPAX@Z
?self@ACE_Thread@@SAKXZ
?load_key@ACE_Configuration_Win32Registry@@IAEHABVACE_Configuration_Section_Key@@AAPAUHKEY__@@@Z
??0?$ACE_String_Base@D@@QAE@PBDPAVACE_Allocator@@H@Z
??9ACE_Configuration_Win32Registry@@UBE_NABV0@@Z
??8ACE_Configuration_Win32Registry@@UBE_NABV0@@Z
?remove_value@ACE_Configuration_Win32Registry@@UAEHABVACE_Configuration_Section_Key@@PBD@Z
?find_value@ACE_Configuration_Win32Registry@@UAEHABVACE_Configuration_Section_Key@@PBDAAW4VALUETYPE@ACE_Configuration@@@Z
?get_binary_value@ACE_Configuration_Win32Registry@@UAEHABVACE_Configuration_Section_Key@@PBDAAPAXAAI@Z
?get_integer_value@ACE_Configuration_Win32Registry@@UAEHABVACE_Configuration_Section_Key@@PBDAAI@Z
?get_string_value@ACE_Configuration_Win32Registry@@UAEHABVACE_Configuration_Section_Key@@PBDAAV?$ACE_String_Base@D@@@Z
?set_binary_value@ACE_Configuration_Win32Registry@@UAEHABVACE_Configuration_Section_Key@@PBDPBXI@Z
?set_integer_value@ACE_Configuration_Win32Registry@@UAEHABVACE_Configuration_Section_Key@@PBDI@Z
?set_string_value@ACE_Configuration_Win32Registry@@UAEHABVACE_Configuration_Section_Key@@PBDABV?$ACE_String_Base@D@@@Z
?enumerate_sections@ACE_Configuration_Win32Registry@@UAEHABVACE_Configuration_Section_Key@@HAAV?$ACE_String_Base@D@@@Z
?enumerate_values@ACE_Configuration_Win32Registry@@UAEHABVACE_Configuration_Section_Key@@HAAV?$ACE_String_Base@D@@AAW4VALUETYPE@ACE_Configuration@@@Z
?remove_section@ACE_Configuration_Win32Registry@@UAEHABVACE_Configuration_Section_Key@@PBDH@Z
?open_section@ACE_Configuration_Win32Registry@@UAEHABVACE_Configuration_Section_Key@@PBDHAAV2@@Z
?root_section@ACE_Configuration@@UBEABVACE_Configuration_Section_Key@@XZ
??0ACE_Configuration_Section_Key@@QAE@XZ
??0ACE_Configuration_Win32Registry@@QAE@PAUHKEY__@@@Z
?dec_ref@ACE_Section_Key_Internal@@UAEHXZ
?add_ref@ACE_Section_Key_Internal@@UAEHXZ
??4ACE_Configuration_Section_Key@@QAEAAV0@ABV0@@Z
??0ACE_Configuration_Section_Key@@QAE@PAVACE_Section_Key_Internal@@@Z
??0ACE_Section_Key_Win32@@QAE@PAUHKEY__@@@Z
?validate_name@ACE_Configuration@@IAEHPBDH@Z
??1ACE_Section_Key_Win32@@MAE@XZ
?normalize@ACE_Time_Value@@AAEXXZ
?wait@ACE_Condition_Thread_Mutex@@QAEHXZ
?join@ACE_Thread_Manager@@QAEHKPAK@Z
?instance@ACE_Thread_Manager@@SAPAV1@XZ
?spawn@ACE_Thread_Manager@@QAEHP6AKPAX@Z0JPAKPAPAXJH0I@Z
?get_ip_address@ACE_INET_Addr@@QBEIXZ
?string_to_addr@ACE_INET_Addr@@UAEHQBD@Z
?addr_to_string@ACE_INET_Addr@@UBEHQADIH@Z
?set_addr@ACE_INET_Addr@@UAEXPAXHH@Z
?hash@ACE_INET_Addr@@UBEKXZ
?set_addr@ACE_INET_Addr@@UAEXPAXH@Z
?get_addr@ACE_INET_Addr@@UBEPAXXZ
??0ACE_INET_Addr@@QAE@ABV0@@Z
??1ACE_INET_Addr@@UAE@XZ
??1ACE_Addr@@UAE@XZ
??_7ACE_INET_Addr@@6B@
??MACE_INET_Addr@@QBE_NABV0@@Z
?get_ip_interfaces@ACE@@YAHAAIAAPAVACE_INET_Addr@@@Z
?write_4@ACE_OutputCDR@@AAE_NPBI@Z
?write_string@ACE_OutputCDR@@QAE_NPBD@Z
?write_1@ACE_OutputCDR@@AAE_NPBE@Z
?read_4@ACE_InputCDR@@AAE_NPAI@Z
?read_string@ACE_InputCDR@@QAE_NAAPAD@Z
?read_1@ACE_InputCDR@@AAE_NPAE@Z
?read_wstring@ACE_InputCDR@@QAE_NAAPAG@Z
?write_wstring@ACE_OutputCDR@@QAE_NPBG@Z
??0ACE_InputCDR@@QAE@ABV0@@Z
??1ACE_Message_Block@@UAE@XZ
tao
??0Any@CORBA@@QAE@ABV01@@Z
??1TAO_String_Manager@@QAE@XZ
??0Any@CORBA@@QAE@XZ
??4Any@CORBA@@QAEAAV01@ABV01@@Z
??1Any@CORBA@@QAE@XZ
?kind@TypeCode@CORBA@@QBE?AW4TCKind@2@XZ
?type@Any@CORBA@@QBEPAVTypeCode@2@XZ
?in@TAO_String_Manager@@QBEPBDXZ
?_tc_wstring@CORBA@@3QAVTypeCode@1@A
?_tc_ulong@CORBA@@3QAVTypeCode@1@A
?wstring_free@CORBA@@YAXQAG@Z
??1?$Objref@PBDVNull_RefCount_Policy@TAO@@@TypeCode@TAO@@UAE@XZ
??1?$Sequence@PBQAVTypeCode@CORBA@@VNull_RefCount_Policy@TAO@@@TypeCode@TAO@@UAE@XZ
??1?$Struct@PBDPBQAVTypeCode@CORBA@@PBU?$Struct_Field@PBDPBQAVTypeCode@CORBA@@@1TAO@@VNull_RefCount_Policy@4@@TypeCode@TAO@@UAE@XZ
??1?$Alias@PBDPBQAVTypeCode@CORBA@@VNull_RefCount_Policy@TAO@@@TypeCode@TAO@@UAE@XZ
?_tc_boolean@CORBA@@3QAVTypeCode@1@A
??0?$Objref@PBDVNull_RefCount_Policy@TAO@@@TypeCode@TAO@@QAE@W4TCKind@CORBA@@PBD1@Z
?_tc_any@CORBA@@3QAVTypeCode@1@A
??0?$Sequence@PBQAVTypeCode@CORBA@@VNull_RefCount_Policy@TAO@@@TypeCode@TAO@@QAE@W4TCKind@CORBA@@PBQAV14@I@Z
?string_free@CORBA@@YAXPAD@Z
??_3@YAXAAVAny@CORBA@@PBD@Z
?check_bounds@TAO_Base_Sequence@@IBEXPBDKII@Z
?length@TAO_Unbounded_Base_Sequence@@QAEXI@Z
??0TAO_WString_Manager@@QAE@XZ
??1TAO_WString_Manager@@QAE@XZ
?wstring_dup@CORBA@@YAPAGQBG@Z
??4TAO_WString_Manager@@QAEAAV0@PAG@Z
?resolve_initial_references@ORB@CORBA@@QAEPAVObject@2@PBD@Z
??_2@YA_NABVAny@CORBA@@AAPBD@Z
??4TAO_String_Manager@@QAEAAV0@ABV0@@Z
??0TAO_String_Manager@@QAE@XZ
?string_dup@CORBA@@YAPADPBD@Z
??4TAO_String_Manager@@QAEAAV0@PAD@Z
??0?$Struct@PBDPBQAVTypeCode@CORBA@@PBU?$Struct_Field@PBDPBQAVTypeCode@CORBA@@@1TAO@@VNull_RefCount_Policy@4@@TypeCode@TAO@@QAE@W4TCKind@CORBA@@PBD1PBU?$Struct_Field@PBDPBQAVTypeCode@CORBA@@@12@I@Z
?_upcast@TAO_Base_Sequence@@UBEPAVObject@CORBA@@PAX@Z
?_downcast@TAO_Base_Sequence@@UAEXPAXPAVObject@CORBA@@@Z
??0Exception@CORBA@@QAE@ABV01@@Z
??1Environment@CORBA@@QAE@XZ
??0Environment@CORBA@@QAE@XZ
??6@YA_NAAVTAO_OutputCDR@@ABVAny@CORBA@@@Z
??5@YA_NAAVTAO_InputCDR@@AAVAny@CORBA@@@Z
?_shrink_buffer@TAO_Base_Sequence@@UAEXII@Z
?to_abstract_base@Any_Impl@TAO@@UBE_NAAPAVAbstractBase@CORBA@@@Z
?to_value@Any_Impl@TAO@@UBE_NAAPAVValueBase@CORBA@@@Z
?to_object@Any_Impl@TAO@@UBE_NAAPAVObject@CORBA@@@Z
?_remove_ref@Any_Impl@TAO@@UAEXXZ
?_add_ref@Any_Impl@TAO@@UAEXXZ
?_tao_byte_order@Any_Impl@TAO@@UBEHXZ
??0Any_Impl@TAO@@IAE@P6AXPAX@ZPAVTypeCode@CORBA@@_N@Z
??1Any_Impl@TAO@@MAE@XZ
??0SystemException@CORBA@@QAE@ABV01@@Z
??0MARSHAL@CORBA@@QAE@ABV01@@Z
??1MARSHAL@CORBA@@UAE@XZ
??0MARSHAL@CORBA@@QAE@XZ
??1TAO_Unbounded_Base_Sequence@@UAE@XZ
??_7TAO_Base_Sequence@@6B@
?replace@Any@CORBA@@QAEXPAVAny_Impl@TAO@@@Z
??1TAO_InputCDR@@QAE@XZ
?encoded@Any_Impl@TAO@@QBE_NXZ
?equivalent@TypeCode@CORBA@@QBE_NPAV12@@Z
?_tao_get_typecode@Any@CORBA@@QBEPAVTypeCode@2@XZ
??0?$Alias@PBDPBQAVTypeCode@CORBA@@VNull_RefCount_Policy@TAO@@@TypeCode@TAO@@QAE@W4TCKind@CORBA@@PBD1PBQAV14@@Z
?_tc_string@CORBA@@3QAVTypeCode@1@A
?_tc_long@CORBA@@3QAVTypeCode@1@A
tao_dynamicany
?_narrow@DynAnyFactory@DynamicAny@@SAPAV12@PAVObject@CORBA@@@Z
?release@?$Objref_Traits@VDynAny@DynamicAny@@@TAO@@SAXPAVDynAny@DynamicAny@@@Z
?release@?$Objref_Traits@VDynAnyFactory@DynamicAny@@@TAO@@SAXPAVDynAnyFactory@DynamicAny@@@Z
?Initializer@TAO_DynamicAny_Loader@@SAHXZ
netapi32
NetServerGetInfo
NetApiBufferFree
NetWkstaGetInfo
certificationclientlibrary
?Flush@CFileSysStoreDirectory@CertificationClientLibrary@@UAEXXZ
?RetrieveAttribute@CFileSysStoreDirectory@CertificationClientLibrary@@UAEPAEPBDPAI@Z
?IsAttributePresent@CFileSysStoreDirectory@CertificationClientLibrary@@UAE_NPBD@Z
?StoreAttribute@CFileSysStoreDirectory@CertificationClientLibrary@@UAEXPBDPBEI@Z
??0CFileSysStoreDirectory@CertificationClientLibrary@@QAE@PBD@Z
??1CFileSysStoreDirectory@CertificationClientLibrary@@UAE@XZ
?DeleteAttribute@CFileSysStoreDirectory@CertificationClientLibrary@@UAEXPBD@Z
msclientlib
?Instance@IClientLibrary@MessagingSystemClientLib@@SAPAV12@XZ
shfolder
SHGetFolderPathA
kernel32
SetCurrentDirectoryA
ExitProcess
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
WaitForSingleObject
CreateEventA
LocalFree
FormatMessageA
GetCurrentProcessId
GetComputerNameW
GetSystemInfo
ReadProcessMemory
SetLastError
CreateFileA
GetCurrentThread
IsBadReadPtr
GetModuleHandleA
OpenProcess
GetLastError
GetProcessHeap
HeapAlloc
HeapReAlloc
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSection
GetSystemTimeAsFileTime
Sleep
GetCurrentProcess
SetProcessWorkingSetSize
SetErrorMode
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
lstrlenA
WideCharToMultiByte
HeapFree
lstrlenW
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
HeapSize
HeapDestroy
GetModuleFileNameA
user32
PeekMessageA
TranslateMessage
DispatchMessageA
advapi32
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA
ControlService
QueryServiceStatus
DeleteService
OpenSCManagerA
RegConnectRegistryA
AllocateAndInitializeSid
LookupAccountSidA
OpenThreadToken
EqualSid
FreeSid
OpenServiceA
ChangeServiceConfigA
CloseServiceHandle
CreateServiceA
InitializeAcl
AddAce
IsValidSid
GetLengthSid
LsaOpenPolicy
LsaQueryInformationPolicy
LsaFreeMemory
CopySid
GetSidLengthRequired
InitializeSid
GetSidSubAuthority
SetNamedSecurityInfoA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegisterEventSourceA
DeregisterEventSource
ReportEventA
GetTokenInformation
RegEnumKeyExA
RegQueryValueExA
RegNotifyChangeKeyValue
RegCreateKeyExA
LsaClose
OpenProcessToken
ole32
CoInitializeEx
CoUninitialize
CoInitializeSecurity
msvcp71
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGI@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?_Nomemory@std@@YAXXZ
?_Fpz@std@@3_JA
?widen@?$ctype@G@std@@QBEGD@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
?ends@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@AAV21@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?str@?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?width@ios_base@std@@QAEHH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?eof@?$char_traits@D@std@@SAHXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?width@ios_base@std@@QBEHXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1locale@std@@QAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??1_Lockit@std@@QAE@XZ
?_Register@facet@locale@std@@QAEXXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
??Bid@locale@std@@QAEIXZ
??0_Lockit@std@@QAE@H@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?flags@ios_base@std@@QBEHXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?good@ios_base@std@@QBE_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?eq_int_type@?$char_traits@G@std@@SA_NABG0@Z
?eof@?$char_traits@G@std@@SAGXZ
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEXXZ
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@@Z
?id@?$ctype@G@std@@2V0locale@2@A
?size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGXZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setf@ios_base@std@@QAEHHH@Z
?rbegin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$reverse_iterator@Viterator@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?data@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@IAEX_NI@Z
??0?$_String_val@GV?$allocator@G@std@@@std@@IAE@V?$allocator@G@1@@Z
?reserve@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
?max@?$numeric_limits@I@std@@SAIXZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?ends@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??_D?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
msvcr71
_mkdir
__RTDynamicCast
_unlink
_ltoa
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
_cexit
_ismbblead
_XcptFilter
realloc
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
_c_exit
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__security_error_handler
__CxxFrameHandler
??3@YAXPAX@Z
exit
_set_purecall_handler
_errno
??0exception@@QAE@ABV0@@Z
_CxxThrowException
??1exception@@UAE@XZ
??0exception@@QAE@XZ
_purecall
??0bad_cast@@QAE@ABV0@@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@PBD@Z
??_V@YAXPAX@Z
memset
_except_handler3
free
strlen
_strnicmp
memmove
_resetstkoflw
malloc
memcpy
__p___argc
__p___argv
_stricmp
strcpy
_snwprintf
??0exception@@QAE@ABQBD@Z
strncmp
strrchr
gmtime
strftime
time
fopen
fclose
_iob
fputs
localtime
ftell
fflush
_exit
?name@type_info@@QBEPBDXZ
__RTtypeid
_callnewh
userenv
UnloadUserProfile
Sections
.text Size: 172KB - Virtual size: 170KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ