c:\dezide\Merlion\bin_offline_troubleshooter_vc8\release\hpqgplgt01.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0975ad38751a65465e224aea39ba0b97_JaffaCakes118.exe
Resource
win7-20240611-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
0975ad38751a65465e224aea39ba0b97_JaffaCakes118.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
0975ad38751a65465e224aea39ba0b97_JaffaCakes118
-
Size
260KB
-
MD5
0975ad38751a65465e224aea39ba0b97
-
SHA1
8261bf7b559e9ed51326ae4d640016ba1b095d7d
-
SHA256
228ecb845d3c3f4d9399cd6a7b44f49b7c685979b953f4a7bb1baca95d529eb8
-
SHA512
b7b69bb2baae622766271b463daa81eeb7be82f0ee42474ff30dc7588b2a5eb1e6f2108b10f6fe4912bb64774d75ebc7d3dc3b1f0db0fbf8f00364596322c896
-
SSDEEP
3072:bFd7hrVdyxdBXaPZDOFqMZrfn89vVaLdsRBM3aOm2j9v0KvnP:xd7hrVoJbFRfn89daiRBrOJ5v0KH
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0975ad38751a65465e224aea39ba0b97_JaffaCakes118
Files
-
0975ad38751a65465e224aea39ba0b97_JaffaCakes118.exe windows:4 windows x86 arch:x86
ac3e868778547c0a3be57a4f7983f9e8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
hpqgplgtmain
?getVariable@ConfigurationFile@Troubleshooter@@QBEABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@ABV34@@Z
?GetCloseSCOnExit@Root@Troubleshooter@@QBE_NXZ
?_log@Log@Troubleshooter@@QAEXW4LogLevel@2@ABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
??1Exception@Troubleshooter@@UAE@XZ
??0Exception@Troubleshooter@@QAE@ABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@00I@Z
??0ConfigurationFile@Troubleshooter@@QAE@ABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0_N@Z
?getDataPath@Root@Troubleshooter@@QBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@ABV34@@Z
?getIntVariable@ConfigurationFile@Troubleshooter@@QBEHABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z
??1Root@Troubleshooter@@QAE@XZ
?getSingleton@?$Singleton@VRoot@Troubleshooter@@@Troubleshooter@@SAAAVRoot@2@XZ
?getSingleton@?$Singleton@VLog@Troubleshooter@@@Troubleshooter@@SAAAVLog@2@XZ
??0Exception@Troubleshooter@@QAE@ABV01@@Z
?getTemplatePath@Root@Troubleshooter@@QBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@ABV34@@Z
?_onSizing@BrowserInterface@Troubleshooter@@QAEXIPAUtagRECT@@@Z
?_createBrowserInterface@Root@Troubleshooter@@QAEPAVBrowserInterface@2@PAVCDHtmlDialog@@@Z
?_launchApplication@Root@Troubleshooter@@QAEXXZ
?_destroyBrowserInterface@Root@Troubleshooter@@QAEXXZ
?closeForced@BrowserInterface@Troubleshooter@@QBE_NXZ
?_exitApplication@Root@Troubleshooter@@QAE_NXZ
?getTagNoHTML@Language@Troubleshooter@@QBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@ABV34@@Z
?_setCommandline@Root@Troubleshooter@@QAEXABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?_cleanup@StateManager@Troubleshooter@@QAEXXZ
?getSingleton@?$Singleton@VStateManager@Troubleshooter@@@Troubleshooter@@SAAAVStateManager@2@XZ
?getSessionPath@Root@Troubleshooter@@QBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@ABV34@@Z
?getUserConfig@Root@Troubleshooter@@QBEAAVConfigurationFile@2@XZ
?getBoolVariable@ConfigurationFile@Troubleshooter@@QBE_NABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@_N@Z
?getConfig@Root@Troubleshooter@@QBEAAVConfigurationFile@2@XZ
?getLanguage@Root@Troubleshooter@@QBEAAVLanguage@2@XZ
?getTag@Language@Troubleshooter@@QBE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@ABV34@@Z
??0Root@Troubleshooter@@QAE@ABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0_N1@Z
??1ConfigurationFile@Troubleshooter@@QAE@XZ
?loadConfiguration@ConfigurationFile@Troubleshooter@@QAEXXZ
?getCommandline@Root@Troubleshooter@@QBEABV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
vc8_xerces-c_2_7
?getSrcFile@XMLException@xercesc_2_7@@QBEPBDXZ
?Initialize@XMLPlatformUtils@xercesc_2_7@@SAXQBD0QAVPanicHandler@2@QAVMemoryManager@2@_N@Z
?fgXercescDefaultLocale@XMLUni@xercesc_2_7@@2QBDB
?Terminate@XMLPlatformUtils@xercesc_2_7@@SAXXZ
??_7ErrorHandler@xercesc_2_7@@6B@
??3XMemory@xercesc_2_7@@SAXPAX@Z
?getRawBuffer@MemBufFormatTarget@xercesc_2_7@@QBEPBEXZ
??0MemBufFormatTarget@xercesc_2_7@@QAE@HQAVMemoryManager@1@@Z
??2XMemory@xercesc_2_7@@SAPAXI@Z
?fgDOMWRTBOM@XMLUni@xercesc_2_7@@2QB_WB
?fgDOMWRTFormatPrettyPrint@XMLUni@xercesc_2_7@@2QB_WB
?fgDOMWRTDiscardDefaultContent@XMLUni@xercesc_2_7@@2QB_WB
?fgDOMWRTSplitCdataSections@XMLUni@xercesc_2_7@@2QB_WB
?fgMemoryManager@XMLPlatformUtils@xercesc_2_7@@2PAVMemoryManager@2@A
?getDOMImplementation@DOMImplementationRegistry@xercesc_2_7@@SAPAVDOMImplementation@2@PB_W@Z
?writeChars@MemBufFormatTarget@xercesc_2_7@@UAEXQBEIQAVXMLFormatter@2@@Z
?flush@XMLFormatTarget@xercesc_2_7@@UAEXXZ
??1MemBufFormatTarget@xercesc_2_7@@UAE@XZ
?getLineNumber@SAXParseException@xercesc_2_7@@QBEJXZ
?getColumnNumber@SAXParseException@xercesc_2_7@@QBEJXZ
??1MemBufInputSource@xercesc_2_7@@UAE@XZ
?adoptDocument@AbstractDOMParser@xercesc_2_7@@QAEPAVDOMDocument@2@XZ
?parse@AbstractDOMParser@xercesc_2_7@@QAEXABVInputSource@2@@Z
?setErrorHandler@XercesDOMParser@xercesc_2_7@@QAEXQAVErrorHandler@2@@Z
?setLoadExternalDTD@AbstractDOMParser@xercesc_2_7@@QAEX_N@Z
??0MemBufInputSource@xercesc_2_7@@QAE@QBEIQBD_NQAVMemoryManager@1@@Z
??0XercesDOMParser@xercesc_2_7@@QAE@QAVXMLValidator@1@QAVMemoryManager@1@QAVXMLGrammarPool@1@@Z
?docCharacters@AbstractDOMParser@xercesc_2_7@@UAEXQB_WI_N@Z
?docComment@AbstractDOMParser@xercesc_2_7@@UAEXQB_W@Z
?docPI@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0@Z
?endDocument@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?endElement@AbstractDOMParser@xercesc_2_7@@UAEXABVXMLElementDecl@2@I_NQB_W@Z
?endEntityReference@AbstractDOMParser@xercesc_2_7@@UAEXABVXMLEntityDecl@2@@Z
?ignorableWhitespace@AbstractDOMParser@xercesc_2_7@@UAEXQB_WI_N@Z
?resetDocument@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?startDocument@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?startElement@AbstractDOMParser@xercesc_2_7@@UAEXABVXMLElementDecl@2@IQB_WABV?$RefVectorOf@VXMLAttr@xercesc_2_7@@@2@I_N3@Z
?startEntityReference@AbstractDOMParser@xercesc_2_7@@UAEXABVXMLEntityDecl@2@@Z
?XMLDecl@AbstractDOMParser@xercesc_2_7@@UAEXQB_W000@Z
?elementTypeInfo@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0@Z
?setPSVIHandler@AbstractDOMParser@xercesc_2_7@@UAEXQAVPSVIHandler@2@@Z
?createElementNSNode@AbstractDOMParser@xercesc_2_7@@MAEPAVDOMElement@2@PB_W0@Z
?error@XercesDOMParser@xercesc_2_7@@UAEXIQB_WW4ErrTypes@XMLErrorReporter@2@000JJ@Z
?resetErrors@XercesDOMParser@xercesc_2_7@@UAEXXZ
?endInputSource@XercesDOMParser@xercesc_2_7@@UAEXABVInputSource@2@@Z
?expandSystemId@XercesDOMParser@xercesc_2_7@@UAE_NQB_WAAVXMLBuffer@2@@Z
?resetEntities@XercesDOMParser@xercesc_2_7@@UAEXXZ
?resolveEntity@XercesDOMParser@xercesc_2_7@@UAEPAVInputSource@2@PAVXMLResourceIdentifier@2@@Z
?resolveEntity@XercesDOMParser@xercesc_2_7@@UAEPAVInputSource@2@QB_W00@Z
?startInputSource@XercesDOMParser@xercesc_2_7@@UAEXABVInputSource@2@@Z
?attDef@AbstractDOMParser@xercesc_2_7@@UAEXABVDTDElementDecl@2@ABVDTDAttDef@2@_N@Z
?doctypeComment@AbstractDOMParser@xercesc_2_7@@UAEXQB_W@Z
?doctypeDecl@AbstractDOMParser@xercesc_2_7@@UAEXABVDTDElementDecl@2@QB_W1_N2@Z
?doctypePI@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0@Z
?doctypeWhitespace@AbstractDOMParser@xercesc_2_7@@UAEXQB_WI@Z
?elementDecl@AbstractDOMParser@xercesc_2_7@@UAEXABVDTDElementDecl@2@_N@Z
?endAttList@AbstractDOMParser@xercesc_2_7@@UAEXABVDTDElementDecl@2@@Z
?endIntSubset@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?endExtSubset@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?entityDecl@AbstractDOMParser@xercesc_2_7@@UAEXABVDTDEntityDecl@2@_N1@Z
?resetDocType@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?notationDecl@AbstractDOMParser@xercesc_2_7@@UAEXABVXMLNotationDecl@2@_N@Z
?startAttList@AbstractDOMParser@xercesc_2_7@@UAEXABVDTDElementDecl@2@@Z
?startIntSubset@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?startExtSubset@AbstractDOMParser@xercesc_2_7@@UAEXXZ
?TextDecl@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0@Z
?handleElementPSVI@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0PAVPSVIElement@2@@Z
?handlePartialElementPSVI@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0PAVPSVIElement@2@@Z
?handleAttributesPSVI@AbstractDOMParser@xercesc_2_7@@UAEXQB_W0PAVPSVIAttributeList@2@@Z
??1XercesDOMParser@xercesc_2_7@@UAE@XZ
mfc80u
ord4574
ord1154
ord5316
ord288
ord317
ord584
ord1202
ord6282
ord1271
ord3198
ord1925
ord3204
ord2250
ord1172
ord2297
ord1178
ord1182
ord6747
ord2696
ord3192
ord379
ord6306
ord1443
ord6167
ord6173
ord777
ord5083
ord384
ord3383
ord284
ord6172
ord2897
ord5621
ord5319
ord6284
ord1430
ord383
ord629
ord776
ord555
ord5342
ord6160
ord744
ord5484
ord4100
ord5524
ord265
ord894
ord4074
ord3990
ord5558
ord2260
ord4101
ord6161
ord860
ord5705
ord5485
ord2444
ord1476
ord764
ord293
ord577
ord774
ord4535
ord3677
ord566
ord757
ord3824
ord1118
ord283
ord762
ord2011
ord280
ord1908
ord287
ord2311
ord604
ord6111
ord3327
ord4255
ord4475
ord3943
ord2638
ord3703
ord3713
ord3712
ord2527
ord2640
ord2534
ord2832
ord2708
ord4301
ord2829
ord2725
ord2531
ord5562
ord5209
ord5226
ord4562
ord3942
ord2239
ord5222
ord5220
ord2925
ord1911
ord3826
ord5378
ord6215
ord5096
ord1007
ord3800
ord5579
ord2009
ord2054
ord4320
ord6274
ord3795
ord6272
ord4008
ord4032
ord1472
ord6700
ord290
ord282
ord1479
ord900
ord899
ord896
ord354
ord605
ord3635
ord350
ord1058
ord1079
ord3634
ord4573
ord2365
ord4026
ord5844
ord6063
ord4109
ord3395
ord6061
ord6277
ord4120
ord2366
ord5829
ord4334
ord501
ord709
ord4743
ord1894
ord4920
ord4729
ord3175
ord4256
ord4480
ord2856
ord2709
ord5196
ord1590
ord1646
ord1647
ord1955
ord5171
ord1353
ord4961
ord3339
ord6275
ord3796
ord6273
ord1513
ord2163
ord2169
ord2399
ord2381
ord2379
ord2397
ord2409
ord2386
ord2402
ord2407
ord2390
ord2392
ord2394
ord2388
ord2404
ord2384
ord931
ord927
ord929
ord925
ord920
ord5229
ord5231
ord5956
ord1591
ord4276
ord4716
ord3397
ord5199
ord4179
ord6271
ord5067
ord1899
ord5148
ord4238
ord1392
ord3940
ord1608
ord1609
ord5908
ord6720
ord1542
ord1661
ord1662
ord4884
ord5178
ord1355
ord4193
ord4664
ord3930
ord2793
ord6083
ord3785
ord6253
ord2139
ord4361
ord4494
ord5511
ord3058
ord2674
ord2723
ord6157
ord2257
ord1384
ord985
ord5388
ord3706
ord3698
ord2812
ord3894
ord1975
ord2632
ord3176
ord1611
ord1198
ord4206
ord2261
ord266
msvcr80
_encode_pointer
__set_app_type
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
memcpy
strncpy
strstr
qsort
wprintf
_localtime64_s
wcsftime
malloc
_time64
memset
??0bad_cast@std@@QAE@ABV01@@Z
_CxxThrowException
atoi
sprintf
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
__CxxFrameHandler3
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
exit
wcsncpy
??0exception@std@@QAE@ABV01@@Z
_wcsdup
free
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
memmove_s
memmove
??8type_info@@QBE_NABV0@@Z
_purecall
kernel32
GetStringTypeExW
FreeLibrary
LCMapStringW
LoadLibraryA
GetSystemTimeAsFileTime
GetUserDefaultLCID
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetVersion
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
WaitForSingleObject
GetExitCodeProcess
CreateDirectoryW
CreateProcessW
GetFileAttributesW
SetCurrentDirectoryW
GetCurrentDirectoryW
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
CreateEventW
GetCommandLineW
GetLastError
CreateMutexW
user32
RegisterWindowMessageW
MessageBoxW
LoadStringW
SetForegroundWindow
SendMessageW
SendMessageTimeoutW
EnumWindows
LoadIconW
GetSystemMenu
EnableWindow
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
SetActiveWindow
AdjustWindowRect
AppendMenuW
gdi32
GetObjectW
CreateFontIndirectW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
comctl32
ord17
ws2_32
WSAStartup
msvcp80
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V32@_W@Z
??$?O_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W0@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHPB_W@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0_Lockit@std@@QAE@H@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
?_Id_cnt@id@locale@std@@0HA
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?toupper@?$ctype@_W@std@@QBE_W_W@Z
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?widen@?$ctype@_W@std@@QBE_WD@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?length@?$char_traits@_W@std@@SAIPB_W@Z
?str@?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_D?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?_Unlock@_Mutex@std@@QAEXXZ
?facet_Register@facet@locale@std@@CAXPAV123@@Z
?_Incref@facet@locale@std@@QAEXXZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??1locale@std@@QAE@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
mpr
WNetGetUserW
Sections
.text Size: 168KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE