msvcr80.AMD64.pdb
Overview
overview
3Static
static
3beta_lm_to...lm.exe
windows7-x64
1beta_lm_to...lm.exe
windows10-2004-x64
1beta_lm_to...ol.exe
windows7-x64
1beta_lm_to...ol.exe
windows10-2004-x64
1beta_lm_to...er.exe
windows7-x64
1beta_lm_to...er.exe
windows10-2004-x64
1beta_lm_to...at.exe
windows7-x64
1beta_lm_to...at.exe
windows10-2004-x64
1beta_lm_to...80.dll
windows7-x64
1beta_lm_to...80.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
beta_lm_tools_v7.2/win64/beta_lm.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
beta_lm_tools_v7.2/win64/beta_lm.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
beta_lm_tools_v7.2/win64/beta_lm_control.exe
Resource
win7-20231129-en
Behavioral task
behavioral4
Sample
beta_lm_tools_v7.2/win64/beta_lm_control.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
beta_lm_tools_v7.2/win64/beta_lm_kill_user.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
beta_lm_tools_v7.2/win64/beta_lm_kill_user.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
beta_lm_tools_v7.2/win64/beta_lm_stat.exe
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
beta_lm_tools_v7.2/win64/beta_lm_stat.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
beta_lm_tools_v7.2/win64/msvcr80.dll
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
beta_lm_tools_v7.2/win64/msvcr80.dll
Resource
win10v2004-20240508-en
General
-
Target
0efe897151fb2304fcde28444ea98fb99dcfa31feecd427c00eb092b3e0d43db
-
Size
989KB
-
MD5
beb2eb21f9b801cfd788ef7b0fda56b6
-
SHA1
a32b9c495b3874483480de0934d317ceaa9a2d5c
-
SHA256
0efe897151fb2304fcde28444ea98fb99dcfa31feecd427c00eb092b3e0d43db
-
SHA512
4655d986b6ddf4a613b8d129b70f3ff4a8488de528b3542779e1bb9e3a133edcbf8fef9e78648071064ae3e51da1a0d49b26770c7af3326244945f491410c599
-
SSDEEP
24576:+5wy8oqfroGQNdQK8fSHzGFuf5KHcrbRLzDz9OSh3qqv:6wy8oqfro1kUzGFufsHSRPDZhv
Malware Config
Signatures
-
Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack001/beta_lm_tools_v7.2/win64/beta_lm.exe unpack001/beta_lm_tools_v7.2/win64/beta_lm_control.exe unpack001/beta_lm_tools_v7.2/win64/beta_lm_kill_user.exe unpack001/beta_lm_tools_v7.2/win64/beta_lm_stat.exe unpack001/beta_lm_tools_v7.2/win64/msvcr80.dll
Files
-
0efe897151fb2304fcde28444ea98fb99dcfa31feecd427c00eb092b3e0d43db.zip
-
beta_lm_tools_v7.2/win64/beta_lm.exe.exe windows:4 windows x64 arch:x64
9b19f5a4117c4940aec9321052dd7209
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
iphlpapi
GetAdaptersInfo
wsock32
listen
accept
getsockname
ioctlsocket
connect
setsockopt
gethostbyname
gethostbyaddr
select
bind
WSAStartup
WSACleanup
shutdown
WSAGetLastError
closesocket
socket
htonl
gethostname
ntohl
recv
send
htons
user32
GetUserObjectInformationW
GetProcessWindowStation
GetDesktopWindow
MessageBoxW
kernel32
ReleaseMutex
GetCurrentProcess
GetLastError
SetConsoleCtrlHandler
GetCurrentThreadId
LocalFree
lstrlenA
FormatMessageA
GetVersion
GetModuleFileNameA
HeapFree
HeapAlloc
GetProcessHeap
QueryPerformanceCounter
GetTickCount
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
MultiByteToWideChar
GetFileType
GetStdHandle
GlobalMemoryStatus
FreeLibrary
GetProcAddress
LoadLibraryW
GetVersionExW
GetCurrentProcessId
CreateEventA
WaitForMultipleObjects
CreateMutexA
SetEvent
Sleep
CreateThread
CloseHandle
GetSystemTimeAsFileTime
WaitForSingleObject
GetExitCodeProcess
advapi32
ChangeServiceConfig2A
CloseServiceHandle
SetServiceStatus
GetUserNameA
RegOpenKeyExA
RegNotifyChangeKeyValue
RegisterEventSourceA
ReportEventA
DeregisterEventSource
AllocateAndInitializeSid
CheckTokenMembership
RegisterEventSourceW
ReportEventW
RegDeleteValueA
RegDeleteKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegEnumValueA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
OpenServiceA
ControlService
QueryServiceStatus
DeleteService
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
OpenSCManagerA
FreeSid
CreateServiceA
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
CoSetProxyBlanket
oleaut32
VariantClear
SysAllocString
SysFreeString
msvcrt
signal
_getcwd
_strdup
__set_app_type
free
strstr
malloc
wcstombs
strncmp
sprintf
calloc
memcmp
toupper
exit
fprintf
_iob
qsort
memset
time
_snprintf
memcpy
getenv
printf
tolower
atoi
strtok
mktime
strncpy
strchr
strtol
perror
_errno
fclose
vfprintf
fopen
ctime
isalpha
_timezone
localtime
_stat
realloc
fgets
sscanf
_fileno
_beginthread
isupper
strspn
bsearch
isxdigit
isdigit
strncat
rewind
atof
_stricmp
wcsstr
_vsnwprintf
abort
memchr
fread
fwrite
fflush
_setmode
ftell
fseek
strcmp
__dllonexit
_onexit
__C_specific_handler
_XcptFilter
_c_exit
_exit
_cexit
__initenv
__getmainargs
_initterm
__setusermatherr
_commode
_fmode
Sections
.text Size: 282KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 968B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
beta_lm_tools_v7.2/win64/beta_lm_control.exe.exe windows:4 windows x64 arch:x64
d80531fdb76232a9b72a24626361b2d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
iphlpapi
GetAdaptersInfo
wsock32
recv
send
select
getsockname
gethostname
connect
gethostbyname
gethostbyaddr
htons
htonl
WSAStartup
WSACleanup
shutdown
WSAGetLastError
closesocket
socket
ntohl
setsockopt
ioctlsocket
user32
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
GetSystemMetrics
MessageBoxW
wtsapi32
WTSQuerySessionInformationA
kernel32
GetVersionExW
LoadLibraryW
GetProcAddress
FreeLibrary
GlobalMemoryStatus
GetStdHandle
GetFileType
MultiByteToWideChar
GetVersion
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
WaitForMultipleObjects
GetCurrentProcessId
GetCurrentProcess
CloseHandle
WaitForSingleObject
CreateThread
SetEvent
GetLastError
CreateEventA
Sleep
SetConsoleOutputCP
GetConsoleOutputCP
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
advapi32
FreeSid
AllocateAndInitializeSid
GetUserNameA
DeregisterEventSource
ReportEventW
RegisterEventSourceW
CheckTokenMembership
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
CoSetProxyBlanket
oleaut32
SysFreeString
SysAllocString
VariantClear
msvcrt
mktime
_strdup
__set_app_type
_fmode
free
strstr
malloc
strncmp
sprintf
calloc
memcmp
toupper
exit
fprintf
_iob
qsort
memset
getenv
printf
sscanf
perror
memcpy
realloc
signal
time
strtol
strtok
strncpy
strchr
atoi
isdigit
fclose
fgets
fopen
_timezone
localtime
_fileno
isspace
tolower
strspn
bsearch
isxdigit
_pclose
_popen
memchr
wcsstr
_vsnwprintf
vfprintf
abort
fread
fwrite
fflush
_setmode
ftell
fseek
strcmp
__dllonexit
_onexit
__C_specific_handler
_XcptFilter
_c_exit
_exit
_cexit
__initenv
__getmainargs
_initterm
__setusermatherr
_commode
Sections
.text Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
beta_lm_tools_v7.2/win64/beta_lm_kill_user.exe.exe windows:4 windows x64 arch:x64
fa4a7a1f92c75adf1758ba75fbb2b497
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
iphlpapi
GetAdaptersInfo
wsock32
recv
send
select
getsockname
gethostname
connect
htons
htonl
WSAStartup
WSACleanup
shutdown
WSAGetLastError
closesocket
socket
gethostbyname
gethostbyaddr
ntohl
setsockopt
ioctlsocket
user32
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
GetSystemMetrics
MessageBoxW
wtsapi32
WTSQuerySessionInformationA
kernel32
GetVersionExW
LoadLibraryW
GetProcAddress
FreeLibrary
GlobalMemoryStatus
GetStdHandle
GetFileType
MultiByteToWideChar
GetVersion
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
WaitForMultipleObjects
GetCurrentProcessId
GetCurrentProcess
CloseHandle
WaitForSingleObject
CreateThread
SetEvent
GetLastError
CreateEventA
Sleep
SetConsoleOutputCP
GetConsoleOutputCP
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
advapi32
FreeSid
AllocateAndInitializeSid
GetUserNameA
DeregisterEventSource
ReportEventW
RegisterEventSourceW
CheckTokenMembership
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
CoSetProxyBlanket
oleaut32
SysFreeString
SysAllocString
VariantClear
msvcrt
_strdup
__set_app_type
_fmode
free
strstr
malloc
strncmp
sprintf
calloc
memcmp
toupper
exit
fprintf
_iob
qsort
memset
getenv
printf
perror
memcpy
realloc
signal
time
strtol
strtok
strncpy
strchr
atoi
isdigit
fclose
fgets
fopen
_timezone
localtime
_fileno
isspace
_pclose
_popen
memchr
wcsstr
_vsnwprintf
vfprintf
abort
fread
fwrite
fflush
_setmode
ftell
fseek
strcmp
__dllonexit
_onexit
__C_specific_handler
_XcptFilter
_c_exit
_exit
_cexit
__initenv
__getmainargs
_initterm
__setusermatherr
_commode
Sections
.text Size: 174KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
beta_lm_tools_v7.2/win64/beta_lm_stat.exe.exe windows:4 windows x64 arch:x64
b77f35eb7d44c83c73db06be7b8f2047
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
iphlpapi
GetAdaptersInfo
wsock32
recv
send
select
getsockname
gethostname
connect
gethostbyname
gethostbyaddr
htons
htonl
WSAStartup
WSACleanup
shutdown
WSAGetLastError
closesocket
socket
ntohl
setsockopt
ioctlsocket
user32
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
GetSystemMetrics
MessageBoxW
wtsapi32
WTSQuerySessionInformationA
kernel32
GetVersionExW
LoadLibraryW
GetProcAddress
FreeLibrary
GlobalMemoryStatus
GetStdHandle
GetFileType
MultiByteToWideChar
GetVersion
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
WaitForMultipleObjects
GetCurrentProcessId
GetCurrentProcess
CloseHandle
WaitForSingleObject
CreateThread
SetEvent
GetLastError
CreateEventA
Sleep
SetConsoleOutputCP
GetConsoleOutputCP
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
advapi32
FreeSid
AllocateAndInitializeSid
GetUserNameA
DeregisterEventSource
ReportEventW
RegisterEventSourceW
CheckTokenMembership
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
CoSetProxyBlanket
oleaut32
SysFreeString
SysAllocString
VariantClear
msvcrt
mktime
_strdup
__set_app_type
_fmode
free
strstr
malloc
strncmp
sprintf
calloc
memcmp
toupper
exit
fprintf
_iob
qsort
memset
getenv
printf
strtok
ctime
realloc
strchr
perror
memcpy
signal
time
strtol
strncpy
atoi
isdigit
fclose
fgets
fopen
_timezone
localtime
_fileno
sscanf
isspace
tolower
strspn
bsearch
isxdigit
_pclose
_popen
memchr
wcsstr
_vsnwprintf
vfprintf
abort
fread
fwrite
fflush
_setmode
ftell
fseek
strcmp
__dllonexit
_onexit
__C_specific_handler
_XcptFilter
_c_exit
_exit
_cexit
__initenv
__getmainargs
_initterm
__setusermatherr
_commode
Sections
.text Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
beta_lm_tools_v7.2/win64/msvcr80.dll.dll windows:4 windows x64 arch:x64
6c31ff1756690f37d3e2c95f96fa9b5a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_getdrives
kernel32
GetStringTypeW
GetLocalTime
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetSystemDirectoryW
GetLongPathNameW
GetCurrentThreadId
FlsSetValue
FlsGetValue
DebugBreak
OutputDebugStringA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
TlsFree
FlsFree
SetLastError
TlsSetValue
GetCurrentThread
FlsAlloc
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
Sleep
HeapSetInformation
HeapCreate
HeapDestroy
HeapReAlloc
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteConsoleW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
RtlUnwindEx
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryA
InitializeCriticalSection
MultiByteToWideChar
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
SetLocalTime
LoadLibraryW
GetLocaleInfoA
GetLocaleInfoW
SetEnvironmentVariableA
SetEnvironmentVariableW
RtlVirtualUnwind
RtlLookupFunctionEntry
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetDateFormatA
GetTimeFormatA
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
SetStdHandle
CreateFileA
CompareStringA
CompareStringW
Beep
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
RaiseException
RtlPcToFileHeader
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
CreateProcessW
HeapValidate
HeapCompact
HeapWalk
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
IsDBCSLeadByteEx
ReadConsoleA
ReadConsoleW
SetConsoleMode
SetEndOfFile
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
LockFile
UnlockFile
CreatePipe
ReadFile
CreateFileW
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
Exports
Exports
$I10_OUTPUT
??0__non_rtti_object@std@@QEAA@AEBV01@@Z
??0__non_rtti_object@std@@QEAA@PEBD@Z
??0bad_cast@std@@AEAA@PEBQEBD@Z
??0bad_cast@std@@QEAA@AEBV01@@Z
??0bad_cast@std@@QEAA@PEBD@Z
??0bad_typeid@std@@QEAA@AEBV01@@Z
??0bad_typeid@std@@QEAA@PEBD@Z
??0exception@std@@QEAA@AEBQEBD@Z
??0exception@std@@QEAA@AEBQEBDH@Z
??0exception@std@@QEAA@AEBV01@@Z
??0exception@std@@QEAA@XZ
??1__non_rtti_object@std@@UEAA@XZ
??1bad_cast@std@@UEAA@XZ
??1bad_typeid@std@@UEAA@XZ
??1exception@std@@UEAA@XZ
??1type_info@@UEAA@XZ
??2@YAPEAX_K@Z
??2@YAPEAX_KHPEBDH@Z
??3@YAXPEAX@Z
??4__non_rtti_object@std@@QEAAAEAV01@AEBV01@@Z
??4bad_cast@std@@QEAAAEAV01@AEBV01@@Z
??4bad_typeid@std@@QEAAAEAV01@AEBV01@@Z
??4exception@std@@QEAAAEAV01@AEBV01@@Z
??8type_info@@QEBA_NAEBV0@@Z
??9type_info@@QEBA_NAEBV0@@Z
??_7__non_rtti_object@std@@6B@
??_7bad_cast@std@@6B@
??_7bad_typeid@std@@6B@
??_7exception@@6B@
??_7exception@std@@6B@
??_Fbad_cast@std@@QEAAXXZ
??_Fbad_typeid@std@@QEAAXXZ
??_U@YAPEAX_K@Z
??_U@YAPEAX_KHPEBDH@Z
??_V@YAXPEAX@Z
?_Name_base@type_info@@CAPEBDPEBV1@PEAU__type_info_node@@@Z
?_Name_base_internal@type_info@@CAPEBDPEBV1@PEAU__type_info_node@@@Z
?_Type_info_dtor@type_info@@CAXPEAV1@@Z
?_Type_info_dtor_internal@type_info@@CAXPEAV1@@Z
?_ValidateExecute@@YAHP6A_JXZ@Z
?_ValidateRead@@YAHPEBXI@Z
?_ValidateWrite@@YAHPEAXI@Z
?_inconsistency@@YAXXZ
?_invalid_parameter@@YAXPEBG00I_K@Z
?_is_exception_typeof@@YAHAEBVtype_info@@PEAU_EXCEPTION_POINTERS@@@Z
?_name_internal_method@type_info@@QEBAPEBDPEAU__type_info_node@@@Z
?_open@@YAHPEBDHH@Z
?_query_new_handler@@YAP6AH_K@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AH_K@ZH@Z
?_set_new_handler@@YAP6AH_K@ZP6AH0@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZH@Z
?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?_sopen@@YAHPEBDHHH@Z
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
?_wopen@@YAHPEB_WHH@Z
?_wsopen@@YAHPEB_WHHH@Z
?before@type_info@@QEBAHAEBV1@@Z
?name@type_info@@QEBAPEBDPEAU__type_info_node@@@Z
?raw_name@type_info@@QEBAPEBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZH@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZH@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?terminate@@YAXXZ
?unexpected@@YAXXZ
?what@exception@std@@UEBAPEBDXZ
_CRT_RTC_INIT
_CRT_RTC_INITW
_CreateFrameInfo
_CxxThrowException
_FindAndUnlinkFrame
_GetImageBase
_GetThrowImageBase
_Getdays
_Getmonths
_Gettnames
_HUGE
_IsExceptionObjectToBeDestroyed
_SetImageBase
_SetThrowImageBase
_Strftime
_XcptFilter
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__C_specific_handler
__CppXcptFilter
__CxxCallUnwindDelDtor
__CxxCallUnwindDtor
__CxxCallUnwindStdDelDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__NLG_Dispatch2
__NLG_Return2
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__STRINGTOLD_L
__TypeMatch
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___mb_cur_max_l_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__clean_type_info_names_internal
__create_locale
__crtCompareStringA
__crtCompareStringW
__crtGetLocaleInfoW
__crtGetStringTypeW
__crtLCMapStringA
__crtLCMapStringW
__crt_debugger_hook
__daylight
__dllonexit
__doserrno
__dstbias
__fls_getvalue
__fls_setvalue
__fpecode
__free_locale
__get_app_type
__get_current_locale
__get_flsindex
__get_tlsindex
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__lc_clike
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__osplatform
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__set_app_type
__set_flsgetvalue
__setlc_active
__setusermatherr
__strncnt
__swprintf_l
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__unDNameHelper
__uncaught_exception
__unguarded_readlc_active
__vswprintf_l
__wargv
__wcserror
__wcserror_s
__wcsncnt
__wgetmainargs
__winitenv
_abs64
_access
_access_s
_acmdln
_aexit_rtn
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_amsg_exit
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_crt
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chgsignf
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_commode
_configthreadlocale
_control87
_controlfp
_controlfp_s
_copysign
_copysignf
_cprintf
_cprintf_l
_cprintf_p
_cprintf_p_l
_cprintf_s
_cprintf_s_l
_cputs
_cputws
_creat
_create_locale
_cscanf
_cscanf_l
_cscanf_s
_cscanf_s_l
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_cwait
_cwprintf
_cwprintf_l
_cwprintf_p
_cwprintf_p_l
_cwprintf_s
_cwprintf_s_l
_cwscanf
_cwscanf_l
_cwscanf_s
_cwscanf_s_l
_daylight
_decode_pointer
_difftime32
_difftime64
_dosmaperr
_dstbias
_dup
_dup2
_dupenv_s
_ecvt
_ecvt_s
_encode_pointer
_encoded_null
_endthread
_endthreadex
_environ
_eof
_errno
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fclose_nolock
_fcloseall
_fcvt
_fcvt_s
_fdopen
_fflush_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filbuf
_filelength
_filelengthi64
_fileno
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_finite
_finitef
_flsbuf
_flushall
_fmode
_fpclass
_fpclassf
_fpieee_flt
_fpreset
_fprintf_l
_fprintf_p
_fprintf_p_l
_fprintf_s_l
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_free_locale
_freea
_freea_s
_freefls
_fscanf_l
_fscanf_s_l
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_ftell_nolock
_ftelli64
_ftelli64_nolock
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_fullpath
_futime32
_futime64
_fwprintf_l
_fwprintf_p
_fwprintf_p_l
_fwprintf_s_l
_fwrite_nolock
_fwscanf_l
_fwscanf_s_l
_gcvt
_gcvt_s
_get_amblksiz
_get_current_locale
_get_daylight
_get_doserrno
_get_dstbias
_get_errno
_get_fmode
_get_heap_handle
_get_invalid_parameter_handler
_get_osfhandle
_get_osplatform
_get_osver
_get_output_format
_get_pgmptr
_get_printf_count_output
_get_purecall_handler
_get_sbh_threshold
_get_terminate
_get_timezone
_get_tzname
_get_unexpected
_get_winmajor
_get_winminor
_get_winver
_get_wpgmptr
_getch
_getch_nolock
_getche
_getche_nolock
_getcwd
_getdcwd
_getdcwd_nolock
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getptd
_getsystime
_getw
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_getws
_getws_s
_gmtime32
_gmtime32_s
_gmtime64
_gmtime64_s
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_hypotf
_i64toa
_i64toa_s
_i64tow
_i64tow_s
_initptd
_initterm
_initterm_e
_invalid_parameter
_invalid_parameter_noinfo
_invoke_watson
_iob
_isalnum_l
_isalpha_l
_isatty
_iscntrl_l
_isctype
_isctype_l
_isdigit_l
_isgraph_l
_isleadbyte_l
_islower_l
_ismbbalnum
_ismbbalnum_l
_ismbbalpha
_ismbbalpha_l
_ismbbgraph
_ismbbgraph_l
_ismbbkalnum
_ismbbkalnum_l
_ismbbkana
_ismbbkana_l
_ismbbkprint
_ismbbkprint_l
_ismbbkpunct
Sections
.text Size: 620KB - Virtual size: 620KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ