D:\my2018\nstools\nsSetup\HofoInstallers-2.0\Release\Install_silent.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
adac8b4e34443ef5c717695ccb1497be89b34b38136370eb6274032d0fbf18e7.exe
Resource
win7-20240221-en
windows7-x64
16 signatures
150 seconds
General
-
Target
adac8b4e34443ef5c717695ccb1497be89b34b38136370eb6274032d0fbf18e7
-
Size
5.6MB
-
MD5
be1852fed384bd9bf99cc5a4fc0ed7df
-
SHA1
7d0495660d8b42954ef46087999735cca1684b43
-
SHA256
adac8b4e34443ef5c717695ccb1497be89b34b38136370eb6274032d0fbf18e7
-
SHA512
0331e990e3b4b99e7a1f7f6a58712afe616a938b50a20bf180d8cc07108629b16666909d302737544425d54acf52d1fc62a8c2281017c4a6e096cf167a0f1a78
-
SSDEEP
98304:o7bqfINq1N1r1T1MRuwB0e56wfHyPex5U/IyhLopQUi48U77t:2si0mPIePU/IyhkpQUeU
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adac8b4e34443ef5c717695ccb1497be89b34b38136370eb6274032d0fbf18e7
Files
-
adac8b4e34443ef5c717695ccb1497be89b34b38136370eb6274032d0fbf18e7.exe windows:5 windows x86 arch:x86
8cbd072e37deaaddab061128638d8858
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
DeleteCriticalSection
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
FindResourceExW
FindResourceW
LoadResource
LockResource
SetEndOfFile
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
FindClose
GetTimeZoneInformation
GetFileAttributesExW
FlushFileBuffers
SetFilePointerEx
GetConsoleCP
ReadConsoleW
SizeofResource
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
lstrlenW
CloseHandle
GetLastError
CreateMutexW
GetConsoleMode
SetStdHandle
GetFullPathNameW
GetCurrentDirectoryW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetStdHandle
DuplicateHandle
FreeLibraryAndExitThread
ExitThread
MoveFileExW
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
GetDriveTypeW
GetModuleHandleExW
RtlUnwind
GetModuleFileNameW
lstrcpyW
GetExitCodeProcess
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
GetTickCount
CreateThread
WideCharToMultiByte
GetCurrentProcess
MultiByteToWideChar
InterlockedDecrement
GetProcAddress
WaitForSingleObject
GetNativeSystemInfo
GetVersionExW
CreateDirectoryW
GetDiskFreeSpaceExW
lstrcatW
CreateFileW
GetFileSize
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
lstrcpynW
FreeResource
LoadLibraryW
UpdateResourceW
BeginUpdateResourceW
EndUpdateResourceW
UnmapViewOfFile
LCMapStringA
GetSystemPowerStatus
GetACP
ReadFile
SetFilePointer
lstrcmpiW
GetTempPathW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetSystemDirectoryW
GetSystemInfo
SystemTimeToFileTime
CreatePipe
GetStartupInfoW
CreateProcessW
DeleteFileW
CopyFileW
Sleep
lstrcmpW
GetSystemWow64DirectoryW
ExitProcess
SetCurrentDirectoryW
TerminateThread
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
TerminateProcess
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
GetCurrentProcessId
FreeLibrary
GetLogicalDriveStringsW
QueryDosDeviceW
FindFirstFileW
FindNextFileW
WriteFile
GetCurrentThread
VirtualFreeEx
ResumeThread
Module32FirstW
Module32NextW
InitializeCriticalSection
GetLocalTime
GetSystemDefaultLangID
GetSystemTime
GlobalMemoryStatusEx
GetComputerNameW
CreateEventW
ResetEvent
LocalAlloc
LocalFree
EncodePointer
SetLastError
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
VirtualAlloc
VirtualFree
SetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
InitializeSListHead
LoadLibraryExW
VirtualQuery
VirtualProtect
InterlockedCompareExchange
FlushInstructionCache
SetThreadContext
GetThreadContext
SuspendThread
VirtualProtectEx
ReadProcessMemory
VirtualQueryEx
CreateProcessA
user32
GetCursorPos
UnregisterClassW
MessageBoxW
UpdateLayeredWindow
GetWindowThreadProcessId
DrawIconEx
EnableWindow
SystemParametersInfoW
SetWindowRgn
OffsetRect
TrackMouseEvent
ReleaseCapture
SetCapture
SetLayeredWindowAttributes
ClientToScreen
GetClientRect
EndPaint
BeginPaint
SetWindowPos
MoveWindow
GetMessageW
TranslateMessage
DispatchMessageW
PostQuitMessage
GetDC
ReleaseDC
wsprintfW
FindWindowW
ShowWindow
IsIconic
SetForegroundWindow
SendMessageW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetClipboardData
GetSystemMetrics
LoadImageW
PrivateExtractIconsW
GetWindow
ExitWindowsEx
GetWindowRect
SetCursor
LoadCursorW
FillRect
PostMessageW
GetWindowLongW
DefWindowProcW
LoadIconW
RegisterClassExW
CreateWindowExW
SetWindowLongW
DestroyWindow
wininet
GetUrlCacheEntryInfoW
InternetOpenW
InternetGetConnectedState
FtpGetFileSize
FtpOpenFileW
InternetReadFile
HttpAddRequestHeadersW
HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetSetOptionW
InternetCloseHandle
InternetConnectW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
winmm
mciSendStringW
PlaySoundW
gdiplus
GdipSetImageAttributesColorKeys
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCloneBrush
GdipAlloc
GdipFree
GdipCreateSolidFill
GdipDisposeImage
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipCreateFromHDC
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipResetWorldTransform
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipDrawString
GdipMeasureString
GdipDrawImageRectI
GdipGetImageEncodersSize
GdipCreateBitmapFromHBITMAP
GdipGetImageEncoders
GdipDeleteBrush
GdipCreateBitmapFromScan0
GdipImageRotateFlip
GdipGetImageHeight
GdipGetImageWidth
GdipSaveImageToStream
GdipSaveImageToFile
GdipCloneImage
GdipLoadImageFromStream
GdiplusShutdown
GdipLoadImageFromStreamICM
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDrawImageRectRectI
GdipCreateImageAttributes
GdipDrawImagePointsI
GdiplusStartup
crypt32
CertFindCertificateInStore
CryptMsgClose
CertGetNameStringW
CryptMsgGetParam
CryptQueryObject
CertCreateCertificateContext
CertOpenStore
CertFreeCertificateContext
CertAddCertificateContextToStore
CertCloseStore
wintrust
CryptCATAdminAcquireContext
CryptCATAdminReleaseContext
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminEnumCatalogFromHash
CryptCATAdminReleaseCatalogContext
CryptCATCatalogInfoFromContext
WinVerifyTrust
ws2_32
WSAStartup
closesocket
recvfrom
sendto
bind
setsockopt
socket
gethostbyname
inet_addr
WSACleanup
urlmon
URLDownloadToFileW
psapi
GetProcessMemoryInfo
GetModuleFileNameExW
GetProcessImageFileNameW
iphlpapi
GetAdaptersInfo
netapi32
Netbios
gdi32
CreatePen
GetTextExtentPoint32W
SelectObject
SetROP2
DeleteObject
CreateRectRgn
MoveToEx
CombineRgn
BitBlt
LineTo
OffsetRgn
CreateDIBSection
CreateDCW
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
GetObjectA
CreateFontIndirectW
GetStockObject
GetObjectW
SetRectRgn
CreateSolidBrush
comdlg32
GetSaveFileNameW
ChooseColorW
GetOpenFileNameW
advapi32
StartServiceW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW
OpenSCManagerW
CreateServiceW
OpenServiceW
CloseServiceHandle
ControlService
DeleteService
RegOpenKeyW
RegCreateKeyW
RegSetValueW
RegDeleteKeyW
GetTokenInformation
LookupAccountSidW
RegDeleteValueW
RegNotifyChangeKeyValue
shell32
SHChangeNotify
Shell_NotifyIconW
ShellExecuteExW
SHGetSpecialFolderPathW
ShellExecuteW
SHOpenFolderAndSelectItems
SHGetPathFromIDListW
SHBrowseForFolderW
ole32
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize
OleRun
CoTaskMemFree
oleaut32
VariantInit
SysFreeString
VariantClear
VariantChangeType
SysAllocString
shlwapi
PathMakeSystemFolderW
PathFileExistsA
PathFileExistsW
Exports
Exports
?$TSS0@?1??Instance@CNsApp@@SAAAV2@XZ@4HA
?$TSS0@?1??Instance@CNsCode@@SAAAV2@XZ@4HA
?$TSS0@?1??Instance@CNsDownload@@SAAAV2@XZ@4HA
?$TSS0@?1??Instance@CNsFont@@SAAAV2@XZ@4HA
?$TSS0@?1??Instance@CNsHook@@SAAAV2@XZ@4HA
?$TSS0@?1??Instance@CNsImage@@SAAAV2@XZ@4HA
?$TSS0@?1??Instance@CNsLog@@SAAAV2@XZ@4HA
?$TSS0@?1??Instance@CNsNet@@SAAAV2@XZ@4HA
?$TSS0@?1??Instance@CNsNetManager@@SAAAV2@XZ@4HA
?$TSS0@?1??Instance@CNsNetTools@@SAAAV2@XZ@4HA
?$TSS0@?1??Instance@CNsProcess@@SAAAV2@XZ@4HA
?$TSS0@?1??Instance@CNsReg@@SAAAV2@XZ@4HA
?$TSS0@?1??Instance@CNsSkin@@SAAAV2@XZ@4HA
?$TSS0@?1??Instance@CNsStringManager@@SAAAV2@XZ@4HA
?$TSS0@?1??Instance@CNsSysInfo@@SAAAV2@XZ@4HA
?$TSS0@?1??Instance@CNsThread@@SAAAV2@XZ@4HA
?$TSS0@?1??Instance@CNsUpdate@@SAAAV2@XZ@4HA
?$TSS0@?1??Instance@CNsXml@@SAAAV2@XZ@4HA
?$TSS0@?1??Instance@CNsZlib@@SAAAV2@XZ@4HA
??0CLock@@QAE@XZ
??0CNsApp@@QAE@XZ
??0CNsCode@@QAE@ABV0@@Z
??0CNsCode@@QAE@XZ
??0CNsDC@@QAE@PAUHDC__@@AAUtagRECT@@_N2PAUHWND__@@@Z
??0CNsDC@@QAE@XZ
??0CNsDownload@@QAE@XZ
??0CNsFont@@QAE@ABV0@@Z
??0CNsFont@@QAE@XZ
??0CNsHook@@QAE@XZ
??0CNsImage@@QAE@ABV0@@Z
??0CNsImage@@QAE@XZ
??0CNsInstaller@@QAE@ABV0@@Z
??0CNsInstaller@@QAE@XZ
??0CNsLog@@QAE@ABV0@@Z
??0CNsLog@@QAE@XZ
??0CNsNet@@QAE@XZ
??0CNsNetManager@@QAE@ABV0@@Z
??0CNsNetManager@@QAE@XZ
??0CNsNetTools@@QAE@XZ
??0CNsPacket@@QAE@ABV0@@Z
??0CNsProcess@@QAE@XZ
??0CNsReg@@QAE@XZ
??0CNsSkin@@QAE@ABV0@@Z
??0CNsSkin@@QAE@XZ
??0CNsStringManager@@QAE@ABV0@@Z
??0CNsStringManager@@QAE@XZ
??0CNsSysInfo@@QAE@XZ
??0CNsThread@@QAE@ABV0@@Z
??0CNsThread@@QAE@XZ
??0CNsUpdate@@QAE@ABV0@@Z
??0CNsUpdate@@QAE@XZ
??0CNsXml@@QAE@ABV0@@Z
??0CNsXml@@QAE@XZ
??0CNsZlib@@QAE@XZ
??0CharReader@Json@@QAE@ABV01@@Z
??0CharReader@Json@@QAE@XZ
??0CharReaderBuilder@Json@@QAE@ABV01@@Z
??0CharReaderBuilder@Json@@QAE@XZ
??0Exception@Json@@QAE@ABV01@@Z
??0Exception@Json@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0Factory@CharReader@Json@@QAE@ABV012@@Z
??0Factory@CharReader@Json@@QAE@XZ
??0Factory@StreamWriter@Json@@QAE@ABV012@@Z
??0Factory@StreamWriter@Json@@QAE@XZ
??0FastWriter@Json@@QAE@ABV01@@Z
??0FastWriter@Json@@QAE@XZ
??0Features@Json@@QAE@XZ
??0LogicError@Json@@QAE@$$QAV01@@Z
??0LogicError@Json@@QAE@ABV01@@Z
??0LogicError@Json@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0Path@Json@@QAE@$$QAV01@@Z
??0Path@Json@@QAE@ABV01@@Z
??0Path@Json@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVPathArgument@1@1111@Z
??0PathArgument@Json@@QAE@$$QAV01@@Z
??0PathArgument@Json@@QAE@ABV01@@Z
??0PathArgument@Json@@QAE@I@Z
??0PathArgument@Json@@QAE@PBD@Z
??0PathArgument@Json@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0PathArgument@Json@@QAE@XZ
??0Reader@Json@@QAE@$$QAV01@@Z
??0Reader@Json@@QAE@ABV01@@Z
??0Reader@Json@@QAE@ABVFeatures@1@@Z
??0Reader@Json@@QAE@XZ
??0RuntimeError@Json@@QAE@$$QAV01@@Z
??0RuntimeError@Json@@QAE@ABV01@@Z
??0RuntimeError@Json@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0StaticString@Json@@QAE@PBD@Z
??0StreamWriter@Json@@QAE@ABV01@@Z
??0StreamWriter@Json@@QAE@XZ
??0StreamWriterBuilder@Json@@QAE@ABV01@@Z
??0StreamWriterBuilder@Json@@QAE@XZ
??0StyledStreamWriter@Json@@QAE@ABV01@@Z
??0StyledStreamWriter@Json@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0StyledWriter@Json@@QAE@ABV01@@Z
??0StyledWriter@Json@@QAE@XZ
??0Value@Json@@QAE@$$QAV01@@Z
??0Value@Json@@QAE@ABV01@@Z
??0Value@Json@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0Value@Json@@QAE@ABVStaticString@1@@Z
??0Value@Json@@QAE@H@Z
??0Value@Json@@QAE@I@Z
??0Value@Json@@QAE@N@Z
??0Value@Json@@QAE@PBD0@Z
??0Value@Json@@QAE@PBD@Z
??0Value@Json@@QAE@W4ValueType@1@@Z
??0Value@Json@@QAE@_J@Z
??0Value@Json@@QAE@_K@Z
??0Value@Json@@QAE@_N@Z
??0ValueConstIterator@Json@@AAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json@@V23@@std@@@std@@@std@@@std@@@Z
??0ValueConstIterator@Json@@QAE@ABVValueIterator@1@@Z
??0ValueConstIterator@Json@@QAE@XZ
??0ValueIterator@Json@@AAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json@@V23@@std@@@std@@@std@@@std@@@Z
??0ValueIterator@Json@@QAE@ABV01@@Z
??0ValueIterator@Json@@QAE@ABVValueConstIterator@1@@Z
??0ValueIterator@Json@@QAE@XZ
??0ValueIteratorBase@Json@@QAE@ABV?$_Tree_iterator@V?$_Tree_val@U?$_Tree_simple_types@U?$pair@$$CBVCZString@Value@Json@@V23@@std@@@std@@@std@@@std@@@Z
??0ValueIteratorBase@Json@@QAE@XZ
??0Writer@Json@@QAE@ABV01@@Z
??0Writer@Json@@QAE@XZ
??1CLock@@QAE@XZ
??1CNsApp@@QAE@XZ
??1CNsCode@@QAE@XZ
??1CNsDC@@QAE@XZ
??1CNsDownload@@QAE@XZ
??1CNsFont@@QAE@XZ
??1CNsHook@@QAE@XZ
??1CNsImage@@QAE@XZ
??1CNsInstaller@@QAE@XZ
??1CNsLog@@QAE@XZ
??1CNsNet@@QAE@XZ
??1CNsNetManager@@UAE@XZ
??1CNsNetTools@@QAE@XZ
??1CNsProcess@@QAE@XZ
??1CNsReg@@QAE@XZ
??1CNsSkin@@QAE@XZ
??1CNsStringManager@@UAE@XZ
??1CNsSysInfo@@QAE@XZ
??1CNsThread@@QAE@XZ
??1CNsUpdate@@QAE@XZ
??1CNsXml@@QAE@XZ
??1CNsZlib@@QAE@XZ
??1CharReader@Json@@UAE@XZ
??1CharReaderBuilder@Json@@UAE@XZ
??1Exception@Json@@UAE@XZ
??1Factory@CharReader@Json@@UAE@XZ
??1Factory@StreamWriter@Json@@UAE@XZ
??1FastWriter@Json@@UAE@XZ
??1LogicError@Json@@UAE@XZ
??1Path@Json@@QAE@XZ
??1PathArgument@Json@@QAE@XZ
??1Reader@Json@@QAE@XZ
??1RuntimeError@Json@@UAE@XZ
??1StreamWriter@Json@@UAE@XZ
??1StreamWriterBuilder@Json@@UAE@XZ
??1StyledStreamWriter@Json@@QAE@XZ
??1StyledWriter@Json@@UAE@XZ
??1Value@Json@@QAE@XZ
??1Writer@Json@@UAE@XZ
??4CAntiTracking@@QAEAAV0@$$QAV0@@Z
??4CAntiTracking@@QAEAAV0@ABV0@@Z
??4CLock@@QAEAAV0@ABV0@@Z
??4CNsApp@@QAEAAV0@ABV0@@Z
??4CNsCertManage@@QAEAAV0@$$QAV0@@Z
??4CNsCertManage@@QAEAAV0@ABV0@@Z
??4CNsCode@@QAEAAV0@ABV0@@Z
??4CNsDC@@QAEAAV0@ABV0@@Z
??4CNsDownload@@QAEAAV0@ABV0@@Z
??4CNsEncrypt@@QAEAAV0@$$QAV0@@Z
??4CNsEncrypt@@QAEAAV0@ABV0@@Z
??4CNsFont@@QAEAAV0@ABV0@@Z
??4CNsHook@@QAEAAV0@ABV0@@Z
??4CNsImage@@QAEAAV0@ABV0@@Z
??4CNsInstaller@@QAEAAV0@ABV0@@Z
??4CNsLog@@QAEAAV0@ABV0@@Z
??4CNsNet@@QAEAAV0@ABV0@@Z
??4CNsNetManager@@QAEAAV0@ABV0@@Z
??4CNsNetTools@@QAEAAV0@ABV0@@Z
??4CNsPETools@@QAEAAV0@$$QAV0@@Z
??4CNsPETools@@QAEAAV0@ABV0@@Z
??4CNsPacket@@QAEAAV0@ABV0@@Z
??4CNsProcess@@QAEAAV0@ABV0@@Z
??4CNsReg@@QAEAAV0@ABV0@@Z
??4CNsSkin@@QAEAAV0@ABV0@@Z
??4CNsStringManager@@QAEAAV0@ABV0@@Z
??4CNsSysCmd@@QAEAAV0@$$QAV0@@Z
??4CNsSysCmd@@QAEAAV0@ABV0@@Z
??4CNsSysInfo@@QAEAAV0@ABV0@@Z
??4CNsThread@@QAEAAV0@ABV0@@Z
??4CNsUpdate@@QAEAAV0@ABV0@@Z
??4CNsXml@@QAEAAV0@ABV0@@Z
??4CNsZlib@@QAEAAV0@$$QAV0@@Z
??4CNsZlib@@QAEAAV0@ABV0@@Z
??4CharReader@Json@@QAEAAV01@ABV01@@Z
??4CharReaderBuilder@Json@@QAEAAV01@ABV01@@Z
??4Exception@Json@@QAEAAV01@ABV01@@Z
??4Factory@CharReader@Json@@QAEAAV012@ABV012@@Z
??4Factory@StreamWriter@Json@@QAEAAV012@ABV012@@Z
??4FastWriter@Json@@QAEAAV01@ABV01@@Z
??4Features@Json@@QAEAAV01@$$QAV01@@Z
??4Features@Json@@QAEAAV01@ABV01@@Z
??4LogicError@Json@@QAEAAV01@$$QAV01@@Z
??4LogicError@Json@@QAEAAV01@ABV01@@Z
??4Path@Json@@QAEAAV01@$$QAV01@@Z
??4Path@Json@@QAEAAV01@ABV01@@Z
??4PathArgument@Json@@QAEAAV01@$$QAV01@@Z
??4PathArgument@Json@@QAEAAV01@ABV01@@Z
??4Reader@Json@@QAEAAV01@$$QAV01@@Z
??4Reader@Json@@QAEAAV01@ABV01@@Z
??4RuntimeError@Json@@QAEAAV01@$$QAV01@@Z
??4RuntimeError@Json@@QAEAAV01@ABV01@@Z
??4StaticString@Json@@QAEAAV01@$$QAV01@@Z
??4StaticString@Json@@QAEAAV01@ABV01@@Z
??4StreamWriter@Json@@QAEAAV01@ABV01@@Z
??4StreamWriterBuilder@Json@@QAEAAV01@ABV01@@Z
??4StyledStreamWriter@Json@@QAEAAV01@ABV01@@Z
??4StyledWriter@Json@@QAEAAV01@ABV01@@Z
??4Value@Json@@QAEAAV01@$$QAV01@@Z
??4Value@Json@@QAEAAV01@ABV01@@Z
??4ValueConstIterator@Json@@QAEAAV01@$$QAV01@@Z
??4ValueConstIterator@Json@@QAEAAV01@ABV01@@Z
??4ValueConstIterator@Json@@QAEAAV01@ABVValueIteratorBase@1@@Z
??4ValueIterator@Json@@QAEAAV01@ABV01@@Z
??4ValueIteratorBase@Json@@QAEAAV01@$$QAV01@@Z
??4ValueIteratorBase@Json@@QAEAAV01@ABV01@@Z
??4Writer@Json@@QAEAAV01@ABV01@@Z
??5Json@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@std@@AAV12@AAVValue@0@@Z
??6Json@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AAV12@ABVValue@0@@Z
??8Value@Json@@QBE_NABV01@@Z
??8ValueIteratorBase@Json@@QBE_NABV01@@Z
??9Value@Json@@QBE_NABV01@@Z
??9ValueIteratorBase@Json@@QBE_NABV01@@Z
??ACharReaderBuilder@Json@@QAEAAVValue@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??AStreamWriterBuilder@Json@@QAEAAVValue@1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??AValue@Json@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??AValue@Json@@QAEAAV01@ABVStaticString@1@@Z
??AValue@Json@@QAEAAV01@H@Z
??AValue@Json@@QAEAAV01@I@Z
??AValue@Json@@QAEAAV01@PBD@Z
??AValue@Json@@QBEABV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??AValue@Json@@QBEABV01@H@Z
??AValue@Json@@QBEABV01@I@Z
??AValue@Json@@QBEABV01@PBD@Z
??BStaticString@Json@@QBEPBDXZ
??BValue@Json@@QBE_NXZ
??CValueConstIterator@Json@@QBEPBVValue@1@XZ
??CValueIterator@Json@@QBEPAVValue@1@XZ
??DValueConstIterator@Json@@QBEABVValue@1@XZ
??DValueIterator@Json@@QBEAAVValue@1@XZ
??EValueConstIterator@Json@@QAE?AV01@H@Z
??EValueConstIterator@Json@@QAEAAV01@XZ
??EValueIterator@Json@@QAE?AV01@H@Z
??EValueIterator@Json@@QAEAAV01@XZ
??FValueConstIterator@Json@@QAE?AV01@H@Z
??FValueConstIterator@Json@@QAEAAV01@XZ
??FValueIterator@Json@@QAE?AV01@H@Z
??FValueIterator@Json@@QAEAAV01@XZ
??GValueIteratorBase@Json@@QBEHABV01@@Z
??MValue@Json@@QBE_NABV01@@Z
??NValue@Json@@QBE_NABV01@@Z
??OValue@Json@@QBE_NABV01@@Z
??PValue@Json@@QBE_NABV01@@Z
??_7CNsNetManager@@6B@
??_7CNsStringManager@@6B@
??_7CharReader@Json@@6B@
??_7CharReaderBuilder@Json@@6B@
??_7Exception@Json@@6B@
??_7Factory@CharReader@Json@@6B@
??_7Factory@StreamWriter@Json@@6B@
??_7FastWriter@Json@@6B@
??_7LogicError@Json@@6B@
??_7RuntimeError@Json@@6B@
??_7StreamWriter@Json@@6B@
??_7StreamWriterBuilder@Json@@6B@
??_7StyledWriter@Json@@6B@
??_7Writer@Json@@6B@
??_FStyledStreamWriter@Json@@QAEXXZ
??_FValue@Json@@QAEXXZ
?ActiveCode2@CNsCode@@QAE_NPBDH@Z
?ActiveCode@@YAHPBDH@Z
?ActiveCode@CNsCode@@QAEHPBDH@Z
?AddDelInfo@CNsInstaller@@AAE_NAAUtagDelInfo@@@Z
?AddMovie@CNsImage@@QAE_NPAUHWND__@@HPB_WHHHHHHHHPAUHDC__@@@Z
?AddMovie@CNsImage@@QAE_NPAUHWND__@@PB_WHHHHHHHHPAUHDC__@@@Z
?AddShell@CNsSysCmd@@SA_NPBD0@Z
?AddShellMenu@@YAHPB_W0H0H@Z
?AddTask@CNsDownload@@QAEHPB_W0@Z
?AddTimer@CNsThread@@AAEPAUtagNsTimer@@AAU2@@Z
?AdjustTokenPrivilegesForNT@CNsHook@@QAEX_N@Z
?AesDecode@CNsEncrypt@@SA_NPBEPAE01AAII@Z
?AesEncode@CNsEncrypt@@SA_NPBEPAE01AAII@Z
?AutoRun@CNsInstaller@@QAEXXZ
?BindHost@CNsNetManager@@SA_NPB_W0@Z
?BmToStream@CNsImage@@QAE_NPAUHBITMAP__@@PAUIStream@@PB_W@Z
?CertExists@@YAHPB_W0@Z
?CertExists@CNsCertManage@@SA_NPB_W0@Z
?CheckCert@CNsCertManage@@SA_NPB_W0@Z
?CheckCode2@CNsCode@@QAE_NXZ
?CheckCode@@YAHXZ
?CheckCode@CNsCode@@QAEHXZ
?CheckCodeEx@CNsCode@@QAE_NPB_W@Z
?CheckComponent@CNsInstaller@@QAE_NXZ
?CheckDate2@CNsCode@@QAE_N_N@Z
?CheckDate@@YAHXZ
?CheckDate@CNsCode@@QAEHXZ
?CheckDir@CNsInstaller@@QAEXPB_W0@Z
?CheckEVIP@CNsCode@@QAE_NPBD@Z
?CheckEVIP@CNsInstaller@@QAE_NXZ
?CheckFont@CNsFont@@QAEHPB_W@Z
?CheckHfSign@CNsCertManage@@SA_NPB_W@Z
?CheckImage@CNsImage@@QAE_NPB_W@Z
?CheckInfo@CNsUpdate@@AAE_NPBD@Z
?CheckInstalled@@YAHPB_W@Z
?CheckInstalledHotfix@CNsSysInfo@@SA_NPBD@Z
?CheckMsSign@CNsCertManage@@SA_NPB_W0@Z
?CheckMsSignEx@CNsCertManage@@SA_NPB_W0@Z
?CheckNotice@CNsInstaller@@QAEXXZ
?CheckOneInstance@@YAHPB_W0@Z
?CheckSafeMsg@CNsInstaller@@QAE_NXZ
?CheckSetup@CNsUpdate@@AAEXXZ
?CheckTask@CNsUpdate@@AAEXPB_W@Z
?CheckUpdate@CNsUpdate@@QAEHPB_WP6GXHHH@ZP6GXH0_J2N@Z@Z
?CheckValid@CNsInstaller@@QAEXXZ
?CloseUsedProc@CNsHook@@QAEXPB_W@Z
?CompVersion@@YAHPB_W0@Z
?CreateCompatibleBitmapEx@CNsDC@@QAEPAUHBITMAP__@@UtagRECT@@@Z
?CreateDirTree@@YAHPB_W@Z
?CreateFolder@@YAHPB_W@Z
?CreateMD5@CNsSysCmd@@SA_NPBDPAD@Z
?CreateMemDC@CNsDC@@QAEXPAUHDC__@@AAUtagRECT@@_N2PAUHWND__@@@Z
?CreateNewFont@CNsFont@@AAEPAUHFONT__@@AAUtagFontInfo@@@Z
?CreateProcWithDll@CNsHook@@QAEXPB_WPBD@Z
?CreateShareMem@@YAPAXPB_WK@Z
?CreateShortcut@@YAHPB_W000G0H@Z
?CreateShortcuts@CNsInstaller@@QAEXPAUtagSetupInfo@@@Z
?CreateUID@@YAXPA_WH@Z
?CreateUninstallCfg@CNsInstaller@@QAEXPAUtagSetupInfo@@@Z
?CreateUrlShortcut@@YAHPB_W0@Z
?CreateUserShortcuts@CNsInstaller@@AAEXXZ
?DeCodeBase64@CNsEncrypt@@SA_NPBDPAPAX@Z
?DecodeFile@CNsEncrypt@@SA_NPB_W0IPBE@Z
?DecodeFile@CNsZlib@@QAEJPB_W0K@Z
?DecodeGZipBuffer@CNsZlib@@QAEJPAEJPAPAEPAJ@Z
?DecodeStr@CNsStringManager@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_W@Z
?DecodeStrA@CNsStringManager@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z
?DelTask@CNsDownload@@QAEHPB_W@Z
?DelTray@@YAHPAUHWND__@@@Z
?DeleteMemDC@CNsDC@@QAEXXZ
?Des3Decode@CNsEncrypt@@SA_NPBEPAE01AAI@Z
?Des3Encode@CNsEncrypt@@SA_NPBEPAE01AAI@Z
?DesGo@@YAXQBDPADHH@Z
?DisableFsRedirection@@YAXPAPAX@Z
?DoFunc@@YAHPB_W0@Z
?DoReport@@YAXPB_W00@Z
?DoRun@@YAHPB_W0HH@Z
?DoSetup@CNsInstaller@@AAEXPB_W@Z
?DoUpdate@CNsInstaller@@QAEX_NPB_W@Z
?DosToDrivePath@CNsProcess@@QAE_NPA_W@Z
?DownComponent@CNsInstaller@@AAEXPB_W@Z
?DownNotify2@CNsInstaller@@CGXHPB_W_J1N@Z
?DownNotify@CNsInstaller@@CGXHPB_W_J1N@Z
?DownUrlList@CNsNetManager@@QAE_NPB_W0@Z
?DownloadThread@CNsDownload@@CGIPAX@Z
?Draw@CNsDC@@QAEXXZ
?DrawCaret@CNsApp@@QAEXPAUHWND__@@@Z
?DrawImg@CNsImage@@QAE_NPAUHDC__@@HPB_WHHHHPAUtagRECT@@@Z
?DrawImg@CNsImage@@QAE_NPAUHDC__@@PAUIStream@@HHHHPAUtagRECT@@@Z
?DrawImg@CNsImage@@QAE_NPAUHDC__@@PAVImage@Gdiplus@@HHHHPAUtagRECT@@PAVImageAttributes@4@@Z
?DrawImg@CNsImage@@QAE_NPAUHDC__@@PB_WHHHHPAUtagRECT@@@Z
?DrawImgEx@CNsImage@@QAE_NPAUHDC__@@HPB_WMMMMHHHH@Z
?DrawImgEx@CNsImage@@QAE_NPAUHDC__@@PAUIStream@@MMMMHHHH@Z
?DrawImgEx@CNsImage@@QAE_NPAUHDC__@@PB_WMMMMHHHH@Z
?DrawRotate3D@CNsImage@@QAEXPAUHDC__@@HPB_WHHHHHH@Z
?DrawRotate3D@CNsImage@@QAEXPAUHDC__@@PAUIStream@@HHHHHH@Z
?DrawRotate@CNsImage@@QAE_NPAUHDC__@@HPB_WHHHHH@Z
?DrawRotate@CNsImage@@QAE_NPAUHDC__@@PAUIStream@@HHHHH@Z
?DrawRotate@CNsImage@@QAE_NPAUHDC__@@PB_WHHHHH@Z
?DrawRotateFlip@CNsImage@@QAE_NPAUHDC__@@HPB_WHHHHW4RotateFlipType@Gdiplus@@M@Z
?DrawRotateFlip@CNsImage@@QAE_NPAUHDC__@@PAUIStream@@HHHHW4RotateFlipType@Gdiplus@@M@Z
?DrawRotateFlip@CNsImage@@QAE_NPAUHDC__@@PB_WHHHHW4RotateFlipType@Gdiplus@@M@Z
?DrawSplitH@CNsImage@@AAE_NPAUHDC__@@PAVImage@Gdiplus@@HHHHPAUtagRECT@@H@Z
?DrawSplitV@CNsImage@@AAE_NPAUHDC__@@PAVImage@Gdiplus@@HHHHPAUtagRECT@@HH@Z
?DrawStretchImg@CNsImage@@QAE_NPAUHDC__@@HPB_WHHHHHHHH@Z
?DrawStretchImg@CNsImage@@QAE_NPAUHDC__@@PAUIStream@@HHHHHHHH@Z
?DrawStretchImg@CNsImage@@QAE_NPAUHDC__@@PAVImage@Gdiplus@@HHHHHHHH@Z
?DrawStretchImg@CNsImage@@QAE_NPAUHDC__@@PB_WHHHHHHHH@Z
?DrawString@CNsImage@@QAEXPAUHDC__@@PAUHFONT__@@PB_WHHHHKH_N3H@Z
?DrawTranImg@CNsImage@@QAE_NPAUHDC__@@HPB_WKKHHHH@Z
?DrawTranImg@CNsImage@@QAE_NPAUHDC__@@PAUIStream@@KKHHHH@Z
?DrawTranImg@CNsImage@@QAE_NPAUHDC__@@PB_WKKHHHH@Z
?EasyEncode@@YAXPADH@Z
?EasyEncode@CNsEncrypt@@SA_NPAEIE@Z
?EnCodeBase64@CNsEncrypt@@SA_NPBEIAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?EncodeFile@CNsEncrypt@@SA_NPB_W0IPBE@Z
?EncodeFile@CNsZlib@@QAEJPB_W0H@Z
?ExecCMD@CNsSysCmd@@SA_NPBDPAPAD@Z
?ExecScript@CNsInstaller@@QAEXPB_W@Z
?ExitApp@CNsApp@@QAEXXZ
?ExitThread@CNsThread@@QAEXPAXH@Z
?ExtractCollection@CNsInstaller@@AAE_N_JPB_WPAU_iobuf@@@Z
?ExtractFile@CNsInstaller@@AAE_NPAUtagPacketInfo@@PAU_iobuf@@@Z
?ExtractFileEx@CNsInstaller@@AAE_NPAUtagPacketInfo@@@Z
?ExtractFileName@@YAXPA_W@Z
?ExtractPath@@YAXPA_W@Z
?FileLocation@CNsSysCmd@@SA_NPB_W@Z
?FileSize@@YA_JPB_W@Z
?FileTime@@YAHPB_WPAU_SYSTEMTIME@@11@Z
?FindRes@CNsSkin@@AAE_NPB_WPAUIStream@@@Z
?ForceLog@CNsLog@@QAEX_N@Z
?FreeSkin@CNsSkin@@QAEXXZ
?GbToTraditional@@YAXPADH@Z
?GetAdvInfo@CNsInstaller@@QAE_NAAUtagStyleInfo2@@@Z
?GetBaseBoardByCmd@@YAHPADH@Z
?GetCPUID@@YAXPAD@Z
?GetCPUID@CNsSysInfo@@SA_NPA_W@Z
?GetCPUInfo@CNsSysInfo@@SA_NPA_W@Z
?GetCPUUsage@CNsSysInfo@@SA_NPA_W@Z
?GetCertInfo@CNsCertManage@@SA_NPB_WPA_W@Z
?GetClipboard@@YAHPA_WH@Z
?GetCloudInfo@CNsInstaller@@QAE_NAAUtagCloudInfo@@@Z
?GetCollectionInfo@CNsInstaller@@QAE_NAAUtagCollectionInfo@@@Z
?GetColorDlg@@YAKPAUHWND__@@K@Z
?GetCurPath@@YAXPA_W@Z
?GetCurPathEx@@YAXPB_WPA_W@Z
?GetDefLogPath@CNsLog@@AAE_NXZ
?GetDefaultBrowser@CNsSysInfo@@SA_NPA_W@Z
?GetDefaultSize@CNsFont@@QAEHXZ
?GetDeskWin@@YAPAUHWND__@@XZ
?GetDesktopPath@@YAHPA_W@Z
?GetEncoderClsid@CNsImage@@QAEHPB_WPAU_GUID@@@Z
?GetFileIcon@@YAPAUHICON__@@PB_WHH@Z
?GetFileMD5@CNsEncrypt@@SA_NPB_WAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetFileMD5@CNsEncrypt@@SA_NPB_WAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetFileVer@@YAHPB_WPA_W@Z
?GetFlashVer@CNsSysInfo@@SA_NPA_W@Z
?GetFont@CNsFont@@AAEPAUHFONT__@@AAUtagFontInfo@@@Z
?GetFont@CNsFont@@QAEPAUHFONT__@@HPB_WHHH@Z
?GetFtpFile@CNsDownload@@QAEHPB_W0HP6GXH0_J1N@Z00@Z
?GetFullUrl@CNsNetManager@@QAE_NAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetGPUInfo@CNsSysInfo@@SA_NPA_W@Z
?GetHostname@CNsSysInfo@@SA_NPA_W@Z
?GetHotfixInfo@CNsSysInfo@@SA_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetHttpFile@CNsDownload@@QAEHPB_W0HP6GXH0_J1N@ZH@Z
?GetIEVer@CNsSysInfo@@SA_NPA_W@Z
?GetImgSize@CNsImage@@QAE_NHAAH0@Z
?GetImgSize@CNsImage@@QAE_NPB_WAAH1@Z
?GetInfoEx@CNsUpdate@@AAE_NPB_WPADI@Z
?GetInfoLen@CNsNet@@QAEHXZ
?GetInstallPath@@YAHPB_WPA_W@Z
?GetKey@CNsEncrypt@@SA_NQAEIPBE@Z
?GetLangType@CNsStringManager@@SAHXZ
?GetLocalId@CNsSysInfo@@SA_NPA_W@Z
?GetMD5@CNsEncrypt@@SA_NPBEIAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetMD5@CNsEncrypt@@SA_NPBEIAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetMac@CNsSysInfo@@SA_NPA_W@Z
?GetMacAddr@@YAHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetMemUsage@CNsSysInfo@@SA_NPA_W@Z
?GetModuleAddr@CNsHook@@QAE_NPB_WKPAPAE@Z
?GetMoreInfo@CNsInstaller@@QAE_NAAUtagMorePacketInfo@@@Z
?GetMovieIndex@CNsImage@@QAEHH@Z
?GetNodeAttr@CNsXml@@QAEHPB_W0PA_W@Z
?GetNodeAttr@CNsXml@@QAE_NPB_W0AAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?GetOSVersion@CNsProcess@@QAE_NPA_W@Z
?GetOsName@@YAHPA_W@Z
?GetPID@@YAHPAD@Z
?GetPID@CNsCode@@QAEHPAD@Z
?GetParentPID@CNsProcess@@QAEHH@Z
?GetParentPIDEx@CNsProcess@@QAEHH@Z
?GetParentProcName@CNsProcess@@QAE_NPA_WH@Z
?GetPathUseSpace@@YA_KPB_W@Z
?GetProcByName@CNsProcess@@QAE_NPB_WPAUtagPROCESSENTRY32W@@@Z
?GetProcFullPath@CNsProcess@@QAE_NPB_WPA_W@Z
?GetProcId@CNsProcess@@QAEHPB_W@Z
?GetProcList@CNsProcess@@QAE_NAAV?$vector@UtagPROCESSENTRY32W@@V?$allocator@UtagPROCESSENTRY32W@@@std@@@std@@@Z
?GetProcMemUsage@CNsSysInfo@@SA_JPB_W_N@Z
?GetProcNameByID@CNsProcess@@QAE_NKPA_W@Z
?GetProcessHandle@CNsHook@@QAEPAXPB_W@Z
?GetProgramFilePath@@YAHPA_W@Z
?GetProgramsPath@@YAHPA_W@Z
?GetQuickLaunchPath@@YAHPA_WH@Z
?GetRegInfo@@YAHPAUHKEY__@@PA_W1H1@Z
?GetRegInfo@CNsReg@@QAEHPAUHKEY__@@PA_W1H1@Z
?GetRes@CNsSkin@@QAE_NPB_WPAUIStream@@@Z
?GetResType@CNsSkin@@QAEHXZ
?GetSetupInfo@CNsInstaller@@QAE_NAAUtagSetupInfo@@@Z
?GetSetupInfoEx@CNsInstaller@@QAE_NAAUtagSetupInfo@@@Z
?GetShortcutIcon@@YAHPB_WPA_WPAH@Z
?GetShortcutUrl@@YAHPB_WPA_W@Z
?GetSoftVer@@YAHPB_WPA_W@Z
?GetStartMenuPath@@YAHPA_W@Z
?GetStrSize@CNsImage@@QAE?AUtagSIZE@@PB_WPAUHWND__@@PAUHFONT__@@VRectF@Gdiplus@@@Z
?GetStrWidth@CNsImage@@QAEHPB_WPAUHWND__@@PAUHFONT__@@_N@Z
?GetString@CNsStringManager@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?GetString@CNsStringManager@@QAE_NHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetStringA@CNsStringManager@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?GetSystemVersion@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetThemesPath@CNsSkin@@QAEXPA_W@Z
?GetTimeStamp@CNsSysInfo@@SA_KXZ
?GetUrlCacheIcon@@YAPAUHICON__@@PB_WH@Z
?GetUrlCacheIconPath@@YAHPB_WPA_W@Z
?GetUrlInfo@@YAHPB_WPADH@Z
Sections
.text Size: 686KB - Virtual size: 686KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 215KB - Virtual size: 215KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ