h:\depot\source\Rel\gen_n9\rb_2009_04_Curry3_OEM\playback\NeroShowTime\Bin\Release\ShowTime.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3a8055302ac7d5653138f48d676a41e7_JaffaCakes118.exe
Resource
win7-20240704-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
3a8055302ac7d5653138f48d676a41e7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
3a8055302ac7d5653138f48d676a41e7_JaffaCakes118
-
Size
5.7MB
-
MD5
3a8055302ac7d5653138f48d676a41e7
-
SHA1
c5530d4e4234be41f5695245155e953b60a7d9e6
-
SHA256
7344a97eee0283f34eb1708f9cf51cafdbf770845e3070032dfd3c600c366ba7
-
SHA512
f57d334ddd18be1d4c725c226662d09016271389aec0b257291cae7414c39e57ba40e8cf36f6263ee20e31c79b0972fc5aa30287f7d164cefa7c19da71c08d03
-
SSDEEP
24576:H3F35UM9cvolXpGN0R7zjV/8sW0okytvlTGDqyES7Ud3kexW4uf7FIN/fECM9JKx:T/9dNLRXmsW0o7r4FSn9apit
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a8055302ac7d5653138f48d676a41e7_JaffaCakes118
Files
-
3a8055302ac7d5653138f48d676a41e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
7ac842bbee09192f6cadddf88d1e42bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdiplus
GdipCreateBitmapFromStreamICM
GdipCreateHBITMAPFromBitmap
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromStream
GdipDeleteGraphics
GdipGetImageWidth
GdipGetImageHeight
GdipCreateFromHDC
GdipDrawImageI
GdipSaveImageToFile
GdipCreateBitmapFromFileICM
GdipGetImageDecodersSize
GdipGetImageDecoders
GdipFree
GdipGetImageEncoders
GdipDrawImageRectI
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipBitmapGetPixel
GdipBitmapSetPixel
GdipDrawImageRectRectI
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromFile
GdipDisposeImage
GdipAlloc
GdipCloneImage
GdipGetImageEncodersSize
winmm
mixerGetControlDetailsW
mixerOpen
mixerSetControlDetails
mixerClose
mixerGetDevCapsW
mixerGetLineInfoW
mixerGetLineControlsW
mciSendCommandW
mixerGetNumDevs
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
ddraw
DirectDrawCreateEx
wininet
InternetCanonicalizeUrlW
InternetCrackUrlW
dsound
ord11
nepbpshowtime
?Create@IDRMLicenseHandler1@@SAJPAPAV1@@Z
mfc80u
ord2985
ord4234
ord1582
ord2086
ord741
ord266
ord3678
ord6201
ord3590
ord899
ord283
ord6086
ord1079
ord2366
ord760
ord548
ord4026
ord1182
ord1178
ord860
ord3927
ord1472
ord6002
ord5712
ord1086
ord777
ord3581
ord1176
ord3390
ord6751
ord6749
ord3322
ord2981
ord754
ord5864
ord3249
ord1172
ord5316
ord265
ord6282
ord2364
ord2121
ord416
ord651
ord1557
ord5327
ord6293
ord4344
ord3674
ord5398
ord2460
ord5558
ord6173
ord5708
ord5711
ord745
ord618
ord2255
ord5723
ord5609
ord370
ord4101
ord2261
ord557
ord280
ord747
ord559
ord3168
ord3331
ord5999
ord6001
ord5710
ord354
ord3176
ord4256
ord2942
ord5199
ord1392
ord5908
ord6720
ord1542
ord1661
ord1662
ord2011
ord4574
ord4884
ord4729
ord4206
ord5178
ord605
ord2310
ord2656
ord620
ord587
ord5654
ord3841
ord3051
ord896
ord4902
ord6061
ord6277
ord6279
ord2046
ord332
ord722
ord1476
ord658
ord739
ord894
ord6172
ord591
ord1479
ord282
ord6700
ord6111
ord6232
ord1883
ord3983
ord2651
ord2932
ord630
ord3032
ord2012
ord3050
ord385
ord631
ord1431
ord2745
ord3925
ord2279
ord2271
ord386
ord759
ord378
ord570
ord4475
ord2832
ord5209
ord5226
ord4563
ord3942
ord5223
ord5220
ord2925
ord1911
ord628
ord2240
ord1731
ord4038
ord1908
ord1117
ord530
ord5829
ord1920
ord6101
ord1723
ord2026
ord509
ord2749
ord2151
ord4078
ord1006
ord4347
ord6171
ord2159
ord6233
ord3082
ord3144
ord6166
ord287
ord772
ord2444
ord2155
ord5053
ord2648
ord1785
ord3224
ord2952
ord4232
ord2083
ord5867
ord2860
ord1555
ord3435
ord1784
ord3635
ord1769
ord1876
ord6063
ord3158
ord4226
ord1536
ord2077
ord3877
ord2861
ord3985
ord1864
ord1765
ord3189
ord1771
ord1875
ord1873
ord3165
ord4228
ord1538
ord2080
ord4092
ord1474
ord1922
ord3223
ord4231
ord1561
ord2082
ord4093
ord1475
ord1924
ord6262
ord1388
ord657
ord3161
ord2935
ord2401
ord2406
ord2383
ord919
ord4227
ord1537
ord2078
ord4090
ord4502
ord2488
ord5740
ord1779
ord1872
ord3309
ord1580
ord1638
ord2654
ord3458
ord3630
ord391
ord2013
ord3311
ord4205
ord1866
ord3306
ord1579
ord1637
ord736
ord5965
ord4558
ord3793
ord2872
ord1386
ord3922
ord4098
ord2010
ord333
ord6115
ord3400
ord3286
ord1572
ord1634
ord715
ord552
ord3310
ord2975
ord4275
ord4715
ord1581
ord1727
ord1735
ord5357
ord4391
ord4600
ord1725
ord1937
ord6100
ord6098
ord1927
ord1912
ord5700
ord1358
ord944
ord2008
ord2043
ord2044
ord3791
ord2826
ord2791
ord6142
ord6138
ord2067
ord6006
ord6104
ord6106
ord740
ord3908
ord2876
ord3102
ord3104
ord3103
ord6300
ord6302
ord6301
ord3677
ord4535
ord593
ord5113
ord334
ord5562
ord4562
ord5222
ord3826
ord5378
ord6215
ord5096
ord1007
ord3800
ord5579
ord2054
ord4320
ord3795
ord6272
ord4008
ord4032
ord5971
ord5524
ord1049
ord866
ord4061
ord427
ord689
ord2002
ord1330
ord458
ord589
ord330
ord1554
ord1623
ord664
ord1547
ord5170
ord1351
ord3338
ord5200
ord5147
ord5910
ord6763
ord3968
ord4854
ord4857
ord4373
ord4378
ord4375
ord4393
ord4395
ord4380
ord4770
ord4172
ord4165
ord4974
ord4382
ord4775
ord4198
ord4784
ord4437
ord4438
ord3734
ord2413
ord2414
ord2415
ord2412
ord2411
ord2340
ord2742
ord3842
ord2898
ord2569
ord1571
ord2878
ord3383
ord4109
ord590
ord3163
ord2936
ord2846
ord3758
ord4195
ord467
ord5269
ord3459
ord393
ord6764
ord4581
ord4929
ord326
ord4314
ord3641
ord4267
ord3589
ord3629
ord6161
ord6203
ord4041
ord277
ord4882
ord5563
ord4113
ord2713
ord663
ord4060
ord4074
ord1189
ord865
ord3781
ord4069
ord555
ord313
ord426
ord5643
ord1156
ord5636
ord2254
ord1960
ord2788
ord3645
ord3281
ord3995
ord4117
ord5637
ord502
ord3318
ord2977
ord4237
ord1585
ord1641
ord2089
ord748
ord3875
ord2864
ord5440
ord744
ord1443
ord6306
ord5091
ord556
ord2321
ord629
ord5873
ord6284
ord291
ord5319
ord1430
ord2897
ord5083
ord384
ord5972
ord5414
ord372
ord3586
ord1047
ord2009
ord578
ord300
ord757
ord2984
ord3824
ord2239
ord566
ord3280
ord3946
ord355
ord5640
ord290
ord6013
ord4112
ord1906
ord1190
ord758
ord567
ord356
ord1091
ord1198
ord6116
ord2282
ord3417
ord3080
ord6044
ord4388
ord6251
ord2317
ord1970
ord6278
ord3382
ord1720
ord5982
ord2893
ord3424
ord5698
msvcr80
_recalloc
_time64
__RTDynamicCast
_wtoi
rand
srand
memcpy
wcsncmp
_wcsdup
wcscpy_s
setlocale
wcsncpy
wcsrchr
wcscat_s
_itow_s
vswprintf_s
_vsnprintf
_vsnwprintf
_wcsicmp
_vscprintf
wcstok_s
_beginthreadex
abort
iswdigit
_stricmp
_CIsqrt
_wcsnicmp
_mktime64
strncmp
memmove
_wsplitpath_s
_wmakepath_s
malloc
_snwprintf_s
wcsstr
_swprintf
fread
_setmode
_fileno
fopen_s
_CIexp
fclose
swscanf_s
fgetws
_wfopen_s
wcstoul
wcschr
fgetpos
fseek
fwrite
swprintf_s
tolower
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
sprintf_s
strcmp
_strupr_s
_findclose
_wfindfirst64
_wstat64i32
strlen
wcscmp
wcslen
strcat_s
_vsnprintf_s
_wassert
ftell
ferror
fputc
fprintf
sscanf_s
atoi
atof
isspace
isalpha
isalnum
strchr
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_crt_debugger_hook
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
?_type_info_dtor_internal_method@type_info@@QAEXXZ
calloc
__CxxFrameHandler3
memset
_CxxThrowException
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
memmove_s
_beginthread
memcpy_s
wcsncpy_s
free
_localtime64_s
wcsftime
strncpy_s
_purecall
wcsncat_s
kernel32
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
GetDriveTypeW
lstrlenA
ResumeThread
InterlockedIncrement
InterlockedDecrement
GetPrivateProfileIntW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleFileNameW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetWindowsDirectoryW
FreeLibrary
lstrcatW
LeaveCriticalSection
GetVersionExW
GetDiskFreeSpaceExW
RemoveDirectoryW
GetTempPathW
OutputDebugStringW
Sleep
CreateDirectoryW
RaiseException
GetFullPathNameW
CreateMutexW
DeviceIoControl
CreateFileW
GetCurrentThreadId
GetSystemDefaultLangID
InterlockedCompareExchange
DeleteAtom
FindAtomW
AddAtomW
GetTimeFormatW
GetDateFormatW
FileTimeToSystemTime
LocalUnlock
LocalFree
LocalLock
LocalAlloc
TerminateThread
DebugBreak
IsDebuggerPresent
FormatMessageA
LoadLibraryA
VirtualProtect
VirtualQuery
GetCurrentProcess
FindActCtxSectionGuid
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceW
FileTimeToLocalFileTime
GetVolumeInformationW
GetFileAttributesW
GetVersion
GetFileSize
GetLocaleInfoW
GetThreadLocale
SetErrorMode
FormatMessageW
GetNumberFormatW
DeleteFileW
SetFileAttributesW
GetEnvironmentVariableW
IsBadReadPtr
GetLongPathNameW
GetUserDefaultLangID
WinExec
lstrcmpiW
lstrcpyW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
InterlockedExchange
GetModuleFileNameA
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetTickCount
CreateEventW
CreateThread
WaitForMultipleObjects
CloseHandle
SetThreadLocale
SetEvent
SetLastError
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetACP
GetLocaleInfoA
GetVersionExA
GetSystemDirectoryW
GetPrivateProfileStringW
GetLastError
user32
DialogBoxIndirectParamW
SetWindowLongW
GetDlgItem
GetClassNameW
EnableMenuItem
MoveWindow
EndDialog
GetWindowTextW
RedrawWindow
GetDialogBaseUnits
LoadStringW
BeginPaint
GetWindowLongW
DrawIcon
EndPaint
DestroyIcon
ClientToScreen
UpdateWindow
FindWindowW
ShowWindow
SendMessageTimeoutW
GetDesktopWindow
GetKeyState
PtInRect
MessageBoxW
SetRect
DrawTextW
TranslateMessage
DispatchMessageW
LoadAcceleratorsW
TranslateAcceleratorW
PostQuitMessage
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetFocus
SetCapture
ReleaseCapture
SetParent
EqualRect
InflateRect
MonitorFromPoint
AdjustWindowRect
EnumDisplayMonitors
ClipCursor
CopyIcon
MapDialogRect
WaitForInputIdle
DrawFocusRect
ModifyMenuW
DestroyWindow
SetFocus
SetCursor
MessageBeep
GetLastActivePopup
GetCapture
UnregisterClassA
LoadImageW
DestroyAcceleratorTable
SetActiveWindow
SystemParametersInfoW
SetForegroundWindow
GetParent
KillTimer
IsWindowVisible
BringWindowToTop
IsZoomed
GetSystemMenu
CheckMenuRadioItem
RemoveMenu
InsertMenuW
CheckMenuItem
AppendMenuW
DeleteMenu
GetDlgCtrlID
GetMenu
IsMenu
IsChild
WinHelpW
GetKeyboardState
ToUnicode
UnregisterClassW
SetCursorPos
CreateWindowExW
CallWindowProcW
GetCursorInfo
ShowCursor
IsWindowEnabled
IsDialogMessageW
GetCursorPos
DestroyCursor
GetWindowRgn
IsIconic
IntersectRect
SetRectEmpty
IsRectEmpty
SetWindowTextW
PostThreadMessageW
PeekMessageW
GetMessageW
IsWindow
SetTimer
DefWindowProcW
LoadCursorW
RegisterClassW
MonitorFromWindow
GetMonitorInfoW
LoadIconW
GetWindow
GetActiveWindow
InvalidateRect
GetWindowRect
PostMessageW
GetWindowDC
GetSysColorBrush
GetSysColor
GetSystemMetrics
GetMenuItemInfoW
SetMenuItemInfoW
ReleaseDC
GetDC
LoadMenuW
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreatePopupMenu
DrawFrameControl
FillRect
LoadBitmapW
OffsetRect
CopyRect
ScreenToClient
SetWindowPos
EnableWindow
GetClientRect
SetWindowRgn
SendMessageW
CheckDlgButton
gdi32
CreateDIBSection
SetDIBitsToDevice
GetTextFaceW
CreateFontW
StretchBlt
GetTextExtentPointW
SetTextJustification
TextOutW
SelectPalette
CreateDIBitmap
CreatePalette
ExtTextOutW
RealizePalette
Polyline
CreatePen
Polygon
Arc
GetPixel
GetDIBits
PtInRegion
CreateDCW
DeleteDC
SetDIBits
GetStockObject
SetStretchBltMode
EndDoc
GetDeviceCaps
GetRgnBox
SetPixelV
GetCurrentObject
DeleteObject
EqualRgn
BitBlt
SelectObject
CreateCompatibleDC
GetObjectW
CreateCompatibleBitmap
GetTextExtentPoint32W
FrameRgn
FillRgn
CombineRgn
CreatePolygonRgn
CreateEllipticRgn
CreateRectRgn
CreateFontIndirectW
CreateSolidBrush
OffsetRgn
msimg32
AlphaBlend
advapi32
RegQueryValueW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyW
RegEnumKeyExW
RegDeleteKeyW
RegOpenCurrentUser
RegCloseKey
RegDeleteValueW
RegQueryInfoKeyW
RegEnumValueW
shell32
SHGetSpecialFolderPathW
DragQueryFileW
DragFinish
DragAcceptFiles
SHGetDesktopFolder
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetFileInfoW
SHGetMalloc
SHGetFolderPathW
SHCreateDirectoryExW
ShellExecuteW
ShellExecuteExW
comctl32
ord17
shlwapi
PathIsDirectoryW
PathFindFileNameW
PathAppendW
ole32
CoCreateInstance
CoInitializeEx
CoUninitialize
CoInitialize
StgCreateDocfile
StgOpenStorage
CoTaskMemFree
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
CoTaskMemAlloc
OleLoadFromStream
OleSaveToStream
CLSIDFromString
PropVariantClear
CoFreeUnusedLibraries
StringFromCLSID
oleaut32
SafeArrayUnaccessData
VariantChangeType
VarBstrCmp
LoadTypeLi
LoadRegTypeLi
DispCallFunc
SafeArrayAccessData
VariantInit
SysStringByteLen
SysAllocStringByteLen
SysStringLen
SysAllocString
SysAllocStringLen
SysFreeString
VariantClear
msvcp80
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@_W@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?rend@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$reverse_iterator@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@XZ
?rbegin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$reverse_iterator@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEAB_WI@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IABV12@@Z
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_W@Z
?push_back@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEX_W@Z
??1locale@std@@QAE@XZ
?is@?$ctype@_W@std@@QBE_NF_W@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
??0_Lockit@std@@QAE@H@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
?_Id_cnt@id@locale@std@@0HA
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@@Z
?_Incref@facet@locale@std@@QAEXXZ
?facet_Register@facet@locale@std@@CAXPAV123@@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?_Xran@_String_base@std@@SAXXZ
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IPB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0strstreambuf@std@@QAE@H@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7ios_base@std@@6B@
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1strstreambuf@std@@UAE@XZ
?freeze@strstreambuf@std@@QAEX_N@Z
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
?_Lock@_Mutex@std@@QAEXXZ
?_Unlock@_Mutex@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
dbghelp
ImageDirectoryEntryToData
ImageNtHeader
psapi
EnumProcessModules
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 412KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 40KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.erdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE