D:\pfchen\preshell\Release\preshell.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-21_34f672697cdcc3b883eb8d33482ea5d5_mafia.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-21_34f672697cdcc3b883eb8d33482ea5d5_mafia.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-21_34f672697cdcc3b883eb8d33482ea5d5_mafia
-
Size
656KB
-
MD5
34f672697cdcc3b883eb8d33482ea5d5
-
SHA1
a20282d01942675511230fe4db988994c774ea0d
-
SHA256
c5ba8511bfb731dcd0546ce3eef96044c993a61e3ecce70afd6ada1ac035613c
-
SHA512
787e37ee44e7709cf597d233fdbfbe646e1dd34812fcc7972891e606a6bda9bc9f23b1fa5e8d43cb97c041cdb272d62b042e5baee47e69d011654c034996557f
-
SSDEEP
6144:cLpzI30ll5L8mOTRnykTAHXrBgvT5K1i3+tkhyE9GBT7hchEvCrMXKXMoyB7gvbW:Wi30lTmRTwBUT5e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-05-21_34f672697cdcc3b883eb8d33482ea5d5_mafia
Files
-
2024-05-21_34f672697cdcc3b883eb8d33482ea5d5_mafia.exe windows:5 windows x86 arch:x86
715740ff900f8c5b1574d1680e3f2c80
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
WaitForSingleObject
CloseHandle
GetModuleFileNameW
WritePrivateProfileStringA
GetPrivateProfileStringA
GetFileAttributesExW
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FindClose
FindNextFileW
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
GetStdHandle
WideCharToMultiByte
GetLastError
FindFirstFileExW
GetComputerNameA
GetTempPathA
GetWindowsDirectoryA
GetSystemTimeAsFileTime
GetCurrentThreadId
RtlCaptureStackBackTrace
GetCurrentProcess
SetEnvironmentVariableA
CompareStringW
ReadFile
GetProcessHeap
SetEndOfFile
GetDriveTypeW
HeapReAlloc
HeapSize
WriteConsoleW
OutputDebugStringA
MultiByteToWideChar
GetExitCodeProcess
CreatePipe
CreateFileW
SetStdHandle
SetFilePointer
FlushFileBuffers
GetCurrentDirectoryW
CreateFileA
PeekNamedPipe
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
EncodePointer
DecodePointer
HeapFree
GetCommandLineA
HeapSetInformation
RtlUnwind
RaiseException
GetProcAddress
GetModuleHandleW
ExitProcess
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
HeapAlloc
CreateProcessA
DuplicateHandle
WriteFile
GetConsoleCP
GetConsoleMode
GetFileAttributesA
GetCurrentProcessId
SetConsoleCtrlHandler
LCMapStringW
GetCPInfo
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
InitializeCriticalSectionAndSpinCount
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetTickCount
GetTimeZoneInformation
LoadLibraryW
GetFullPathNameA
GetFileInformationByHandle
DeleteFileA
user32
MonitorFromWindow
GetMonitorInfoW
GetDesktopWindow
EnumDisplaySettingsW
GetDC
FindWindowW
gdi32
GetDeviceCaps
shell32
ShellExecuteExW
shlwapi
PathRemoveFileSpecW
dbghelp
SymSetOptions
SymCleanup
SymFromAddr
UnDecorateSymbolName
SymInitialize
Exports
Exports
??$MakeCheckOpValueString@C@google@@YAXPAV?$basic_ostream@DU?$char_traits@D@std@@@std@@ABC@Z
??$MakeCheckOpValueString@D@google@@YAXPAV?$basic_ostream@DU?$char_traits@D@std@@@std@@ABD@Z
??$MakeCheckOpValueString@E@google@@YAXPAV?$basic_ostream@DU?$char_traits@D@std@@@std@@ABE@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@$$QAV01@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@ABV01@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0CheckOpMessageBuilder@base@google@@QAE@PBD@Z
??0ErrnoLogMessage@google@@QAE@PBDHH_KP8LogMessage@1@AEXXZ@Z
??0LogMessage@google@@QAE@PBDH@Z
??0LogMessage@google@@QAE@PBDHABUCheckOpString@1@@Z
??0LogMessage@google@@QAE@PBDHH@Z
??0LogMessage@google@@QAE@PBDHHPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0LogMessage@google@@QAE@PBDHHPAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z
??0LogMessage@google@@QAE@PBDHHPAVLogSink@1@_N@Z
??0LogMessage@google@@QAE@PBDHH_KP801@AEXXZ@Z
??0LogMessageFatal@google@@QAE@PBDH@Z
??0LogMessageFatal@google@@QAE@PBDHABUCheckOpString@1@@Z
??0LogMessageVoidify@google@@QAE@XZ
??0LogSink@google@@QAE@ABV01@@Z
??0LogSink@google@@QAE@XZ
??0LogStream@LogMessage@google@@QAE@PADH_K@Z
??0LogStreamBuf@base_logging@google@@QAE@ABV012@@Z
??0LogStreamBuf@base_logging@google@@QAE@PADH@Z
??0Logger@base@google@@QAE@ABV012@@Z
??0Logger@base@google@@QAE@XZ
??0NullStream@google@@QAE@PBDHABUCheckOpString@1@@Z
??0NullStream@google@@QAE@XZ
??0NullStreamFatal@google@@QAE@PBDHABUCheckOpString@1@@Z
??0NullStreamFatal@google@@QAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1CheckOpMessageBuilder@base@google@@QAE@XZ
??1ErrnoLogMessage@google@@QAE@XZ
??1LogMessage@google@@QAE@XZ
??1LogMessageFatal@google@@QAE@XZ
??1LogSink@google@@UAE@XZ
??1LogStream@LogMessage@google@@UAE@XZ
??1LogStreamBuf@base_logging@google@@UAE@XZ
??1Logger@base@google@@UAE@XZ
??1NullStream@google@@UAE@XZ
??1NullStreamFatal@google@@UAE@XZ
??4?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEAAV01@ABV01@@Z
??4CheckOpMessageBuilder@base@google@@QAEAAV012@ABV012@@Z
??4LogMessageVoidify@google@@QAEAAV01@ABV01@@Z
??4LogSink@google@@QAEAAV01@ABV01@@Z
??4LogStreamBuf@base_logging@google@@QAEAAV012@ABV012@@Z
??4Logger@base@google@@QAEAAV012@ABV012@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6google@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AAV12@ABW4PRIVATE_Counter@0@@Z
??ILogMessageVoidify@google@@QAEXAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@
??_7LogSink@google@@6B@
??_7LogStream@LogMessage@google@@6B@
??_7LogStreamBuf@base_logging@google@@6B@
??_7Logger@base@google@@6B@
??_7NullStream@google@@6B@
??_7NullStreamFatal@google@@6B@
??_8?$basic_ostream@DU?$char_traits@D@std@@@std@@7B@
??_8LogStream@LogMessage@google@@7B@
??_8NullStream@google@@7B@
??_8NullStreamFatal@google@@7B@
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_DLogStream@LogMessage@google@@QAEXXZ
??_DNullStream@google@@QAEXXZ
??_DNullStreamFatal@google@@QAEXXZ
?AddLogSink@google@@YAXPAVLogSink@1@@Z
?CheckstrcasecmpfalseImpl@google@@YAPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD00@Z
?CheckstrcasecmptrueImpl@google@@YAPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD00@Z
?CheckstrcmpfalseImpl@google@@YAPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD00@Z
?CheckstrcmptrueImpl@google@@YAPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD00@Z
?Demangle@google@@YA_NPBDPADI@Z
?DisableLogCleaner@google@@YAXXZ
?EnableLogCleaner@google@@YAXH@Z
?FLAGS_alsologtoemail@fLS@@3AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A
?FLAGS_alsologtostderr@fLB@@3_NA
?FLAGS_colorlogtostderr@fLB@@3_NA
?FLAGS_log_backtrace_at@fLS@@3AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A
?FLAGS_log_dir@fLS@@3AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A
?FLAGS_log_link@fLS@@3AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A
?FLAGS_log_prefix@fLB@@3_NA
?FLAGS_log_utc_time@fLB@@3_NA
?FLAGS_logbuflevel@fLI@@3HA
?FLAGS_logbufsecs@fLI@@3HA
?FLAGS_logemaillevel@fLI@@3HA
?FLAGS_logfile_mode@fLI@@3HA
?FLAGS_logmailer@fLS@@3AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A
?FLAGS_logtostderr@fLB@@3_NA
?FLAGS_max_log_size@fLI@@3HA
?FLAGS_minloglevel@fLI@@3HA
?FLAGS_stderrthreshold@fLI@@3HA
?FLAGS_stop_logging_if_full_disk@fLB@@3_NA
?FLAGS_symbolize_stacktrace@fLB@@3_NA
?FLAGS_timestamp_in_logfile_name@fLB@@3_NA
?FLAGS_v@fLI@@3HA
?FLAGS_vmodule@fLS@@3AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A
?Fail@LogMessage@google@@SAXXZ
?Flush@LogMessage@google@@QAEXXZ
?FlushLogFiles@google@@YAXH@Z
?FlushLogFilesUnsafe@google@@YAXH@Z
?ForVar1@CheckOpMessageBuilder@base@google@@QAEPAV?$basic_ostream@DU?$char_traits@D@std@@@std@@XZ
?ForVar2@CheckOpMessageBuilder@base@google@@QAEPAV?$basic_ostream@DU?$char_traits@D@std@@@std@@XZ
?GetExistingTempDirectories@google@@YAXPAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z
?GetLogSeverityName@google@@YAPBDH@Z
?GetLogger@base@google@@YAPAVLogger@12@H@Z
?GetLoggingDirectories@google@@YAABV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ
?GetStackTrace@google@@YAHPAPAXHH@Z
?Init@LogMessage@google@@AAEXPBDHHP812@AEXXZ@Z
?InitGoogleLogging@google@@YAXPBD@Z
?InitVLOG3__@google@@YA_NPAUSiteFlag@1@PAHPBDH@Z
?InstallFailureFunction@google@@YAXP6AXXZ@Z
?InstallFailureSignalHandler@google@@YAXXZ
?InstallFailureWriter@google@@YAXP6AXPBDI@Z@Z
?InstallSymbolizeCallback@google@@YAXP6AHHPAXPADI_K@Z@Z
?IsFailureSignalHandlerInstalled@glog_internal_namespace_@google@@YA_NXZ
?IsGoogleLoggingInitialized@google@@YA_NXZ
?LogSeverityNames@google@@3QBQBDB
?LogToStderr@google@@YAXXZ
?NewString@CheckOpMessageBuilder@base@google@@QAEPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?RawLog__@google@@YAXHPBDH0ZZ
?RecordCrashReason@LogMessage@google@@AAEXPAUCrashReason@glog_internal_namespace_@2@@Z
?RemoveLogSink@google@@YAXPAVLogSink@1@@Z
?ReprintFatalMessage@google@@YAXXZ
?SafeFNMatch_@glog_internal_namespace_@google@@YA_NPBDI0I@Z
?SaveOrSendToLog@LogMessage@google@@AAEXXZ
?SendEmail@google@@YA_NPBD00@Z
?SendToLog@LogMessage@google@@QAEXXZ
?SendToSink@LogMessage@google@@AAEXXZ
?SendToSinkAndLog@LogMessage@google@@AAEXXZ
?SendToSyslogAndLog@LogMessage@google@@QAEXXZ
?SetApplicationFingerprint@google@@YAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetEmailLogging@google@@YAXHPBD@Z
?SetLogDestination@google@@YAXHPBD@Z
?SetLogFilenameExtension@google@@YAXPBD@Z
?SetLogSymlink@google@@YAXHPBD@Z
?SetLogger@base@google@@YAXHPAVLogger@12@@Z
?SetStderrLogging@google@@YAXH@Z
?SetVLOGLevel@google@@YAHPBDH@Z
?ShutdownGoogleLogging@google@@YAXXZ
?StrError@google@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?Symbolize@google@@YA_NPAXPADI@Z
?ToString@LogSink@google@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HPBDHPBUtm@@0I@Z
?ToString@LogSink@google@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HPBDHPBUtm@@0IH@Z
?TruncateLogFile@google@@YAXPBD_J1@Z
?TruncateStdoutStderr@google@@YAXXZ
?WaitTillSent@LogSink@google@@UAEXXZ
?WriteToStringAndLog@LogMessage@google@@AAEXXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gnpreinc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXI@Z
?copyfmt@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEAAV12@ABV12@@Z
?ctr@LogStream@LogMessage@google@@QBE_KXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?g_logging_fail_func@google@@3P6AXXZA
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?gmtime_r@@YAPAUtm@@PB_JPAU1@@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?in_avail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JXZ
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z
?kMaxLogMessageLen@LogMessage@google@@2IB
?localtime_r@@YAPAUtm@@PB_JPAU1@@Z
?move@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEX$$QAV12@@Z
?narrow@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDDD@Z
?num_messages@LogMessage@google@@SA_JH@Z
?num_messages_@LogMessage@google@@0PA_JA
?opfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE_NXZ
?osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?overflow@LogStreamBuf@base_logging@google@@UAEHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@LogStream@LogMessage@google@@QBEPADXZ
?pbase@LogStreamBuf@base_logging@google@@QBEPADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?pcount@LogStream@LogMessage@google@@QBEIXZ
?pcount@LogStreamBuf@base_logging@google@@QBEIXZ
?posix_strerror_r@google@@YAHHPADI@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?preserved_errno@LogMessage@google@@QBEHXZ
?pubimbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?pubseekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@_JHH@Z
?pubseekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@_JII@Z
?pubseekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@V32@H@Z
?pubseekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@V32@I@Z
?pubsetbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PAD_J@Z
?pubsync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PAV32@@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?safe_vsnprintf@@YAHPADIPBD0@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@_JHH@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?self@LogStream@LogMessage@google@@QBEPAV123@XZ
?send@LogSink@google@@UAEXHPBD0HPBUtm@@0IH@Z
?set_ctr@LogStream@LogMessage@google@@QAEX_K@Z
?set_rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXI@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snprintf@@YAHPADIPBDZZ
?sputbackc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?stossc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?str@LogStream@LogMessage@google@@QBEPADXZ
?stream@LogMessage@google@@QAEAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@XZ
?stream@NullStream@google@@QAEAAV12@XZ
?sungetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?swap@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXAAV12@@Z
?swap@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXAAV12@@Z
?swap@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXAAV12@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@PAV32@@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
Sections
.text Size: 198KB - Virtual size: 198KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 353KB - Virtual size: 353KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ