ce510e7b-bbda-452f-9199-a21e28ba608e.tmp

Description:

Authors:

Version:

Architecture: 64-bit

Operating System:

SHA256: 93d30670decab063250273790255388c

File Size: 4.5 MB

Uploaded At: May 12, 2026, 8:03 p.m.

Views: 24

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: VirtualAllocEx, CreateRemoteThread, OpenProcess, WriteProcessMemory

Exported Functions

  • JNI_OnLoad (Ordinal: 1, Address: 0x679f0)

Imported DLLs & Functions

ADVAPI32.dll
  • CryptAcquireContextA (Address: 0x18015a078)
  • CryptCreateHash (Address: 0x18015a030)
  • CryptDestroyHash (Address: 0x18015a020)
  • CryptDestroyKey (Address: 0x18015a018)
  • CryptEncrypt (Address: 0x18015a008)
  • CryptGenRandom (Address: 0x18015a088)
  • CryptGetHashParam (Address: 0x18015a070)
  • CryptHashData (Address: 0x18015a028)
  • CryptImportKey (Address: 0x18015a010)
  • CryptReleaseContext (Address: 0x18015a080)
  • GetUserNameW (Address: 0x18015a048)
  • OpenThreadToken (Address: 0x18015a090)
  • RegCloseKey (Address: 0x18015a068)
  • RegEnumKeyExW (Address: 0x18015a000)
  • RegOpenKeyExA (Address: 0x18015a058)
  • RegOpenKeyExW (Address: 0x18015a050)
  • RegOpenKeyW (Address: 0x18015a040)
  • RegQueryValueExA (Address: 0x18015a060)
  • RegQueryValueExW (Address: 0x18015a038)
api-ms-win-crt-convert-l1-1-0.dll
  • atoi (Address: 0x18015ad50)
  • strtod (Address: 0x18015ad70)
  • strtol (Address: 0x18015ad60)
  • strtoll (Address: 0x18015ad38)
  • strtoul (Address: 0x18015ad58)
  • strtoull (Address: 0x18015ad40)
  • wcstombs (Address: 0x18015ad68)
  • wcstombs_s (Address: 0x18015ad48)
api-ms-win-crt-environment-l1-1-0.dll
  • _dupenv_s (Address: 0x18015ad88)
  • getenv (Address: 0x18015ad80)
api-ms-win-crt-filesystem-l1-1-0.dll
  • _access (Address: 0x18015ad98)
  • _fstat64 (Address: 0x18015ada0)
  • _lock_file (Address: 0x18015adb8)
  • _stat64 (Address: 0x18015ada8)
  • _unlink (Address: 0x18015adc0)
  • _unlock_file (Address: 0x18015adb0)
api-ms-win-crt-heap-l1-1-0.dll
  • _aligned_free (Address: 0x18015add8)
  • _aligned_malloc (Address: 0x18015ade8)
  • _callnewh (Address: 0x18015add0)
  • calloc (Address: 0x18015adf8)
  • free (Address: 0x18015adf0)
  • malloc (Address: 0x18015ae00)
  • realloc (Address: 0x18015ade0)
api-ms-win-crt-locale-l1-1-0.dll
  • ___lc_codepage_func (Address: 0x18015ae18)
  • localeconv (Address: 0x18015ae10)
api-ms-win-crt-math-l1-1-0.dll
  • _dclass (Address: 0x18015ae88)
  • _dsign (Address: 0x18015ae58)
  • _fdopen (Address: 0x18015ae60)
  • acosf (Address: 0x18015ae78)
  • ceilf (Address: 0x18015ae70)
  • cosf (Address: 0x18015ae68)
  • expf (Address: 0x18015ae50)
  • fmaxf (Address: 0x18015ae38)
  • fminf (Address: 0x18015ae28)
  • fmodf (Address: 0x18015ae48)
  • powf (Address: 0x18015ae40)
  • round (Address: 0x18015ae30)
  • sinf (Address: 0x18015ae90)
  • sqrtf (Address: 0x18015ae80)
api-ms-win-crt-runtime-l1-1-0.dll
  • __sys_errlist (Address: 0x18015af28)
  • __sys_nerr (Address: 0x18015af30)
  • _beginthreadex (Address: 0x18015aeb8)
  • _cexit (Address: 0x18015aea8)
  • _configure_narrow_argv (Address: 0x18015af00)
  • _crt_atexit (Address: 0x18015aec8)
  • _errno (Address: 0x18015aee8)
  • _execute_onexit_table (Address: 0x18015aed0)
  • _initialize_narrow_environment (Address: 0x18015aef8)
  • _initialize_onexit_table (Address: 0x18015aee0)
  • _initterm (Address: 0x18015af20)
  • _initterm_e (Address: 0x18015aea0)
  • _invalid_parameter_noinfo (Address: 0x18015aef0)
  • _invalid_parameter_noinfo_noreturn (Address: 0x18015aeb0)
  • _register_onexit_function (Address: 0x18015aed8)
  • _seh_filter_dll (Address: 0x18015af10)
  • _wassert (Address: 0x18015af18)
  • abort (Address: 0x18015af38)
  • system (Address: 0x18015aec0)
  • terminate (Address: 0x18015af08)
api-ms-win-crt-stdio-l1-1-0.dll
  • __acrt_iob_func (Address: 0x18015afa0)
  • __stdio_common_vfprintf (Address: 0x18015afc0)
  • __stdio_common_vsprintf (Address: 0x18015afe8)
  • __stdio_common_vsscanf (Address: 0x18015af48)
  • __stdio_common_vswprintf (Address: 0x18015af88)
  • _close (Address: 0x18015aff8)
  • _fileno (Address: 0x18015aff0)
  • _fseeki64 (Address: 0x18015b018)
  • _get_stream_buffer_pointers (Address: 0x18015b020)
  • _lseeki64 (Address: 0x18015af58)
  • _open (Address: 0x18015af50)
  • _read (Address: 0x18015afd8)
  • _wfopen (Address: 0x18015afd0)
  • _write (Address: 0x18015afe0)
  • fclose (Address: 0x18015afb0)
  • feof (Address: 0x18015af80)
  • fflush (Address: 0x18015afa8)
  • fgetc (Address: 0x18015af70)
  • fgetpos (Address: 0x18015af78)
  • fgets (Address: 0x18015b028)
  • fopen (Address: 0x18015af68)
  • fputc (Address: 0x18015af60)
  • fputs (Address: 0x18015af90)
  • fread (Address: 0x18015b030)
  • fseek (Address: 0x18015afb8)
  • fsetpos (Address: 0x18015b010)
  • ftell (Address: 0x18015af98)
  • fwrite (Address: 0x18015afc8)
  • setvbuf (Address: 0x18015b000)
  • ungetc (Address: 0x18015b008)
api-ms-win-crt-string-l1-1-0.dll
  • _strdup (Address: 0x18015b078)
  • _wcsicmp (Address: 0x18015b040)
  • isdigit (Address: 0x18015b060)
  • isspace (Address: 0x18015b070)
  • strcmp (Address: 0x18015b0a0)
  • strcspn (Address: 0x18015b0a8)
  • strncmp (Address: 0x18015b048)
  • strncpy (Address: 0x18015b080)
  • strncpy_s (Address: 0x18015b090)
  • strpbrk (Address: 0x18015b088)
  • strspn (Address: 0x18015b058)
  • tolower (Address: 0x18015b068)
  • toupper (Address: 0x18015b050)
  • towlower (Address: 0x18015b098)
api-ms-win-crt-time-l1-1-0.dll
  • _gmtime64 (Address: 0x18015b0c8)
  • _mktime64 (Address: 0x18015b0c0)
  • _time64 (Address: 0x18015b0d0)
  • strftime (Address: 0x18015b0b8)
api-ms-win-crt-utility-l1-1-0.dll
  • qsort (Address: 0x18015b0e8)
  • rand (Address: 0x18015b0f0)
  • srand (Address: 0x18015b0e0)
bcrypt.dll
  • BCryptGenRandom (Address: 0x18015b100)
CRYPT32.dll
  • CertAddCertificateContextToStore (Address: 0x18015a0d0)
  • CertCloseStore (Address: 0x18015a108)
  • CertCreateCertificateChainEngine (Address: 0x18015a0b0)
  • CertEnumCertificatesInStore (Address: 0x18015a100)
  • CertFindCertificateInStore (Address: 0x18015a0f8)
  • CertFindExtension (Address: 0x18015a0c8)
  • CertFreeCertificateChain (Address: 0x18015a0b8)
  • CertFreeCertificateChainEngine (Address: 0x18015a0a8)
  • CertFreeCertificateContext (Address: 0x18015a0f0)
  • CertGetCertificateChain (Address: 0x18015a0a0)
  • CertGetNameStringA (Address: 0x18015a0c0)
  • CertOpenStore (Address: 0x18015a110)
  • CryptDecodeObjectEx (Address: 0x18015a0d8)
  • CryptQueryObject (Address: 0x18015a118)
  • CryptStringToBinaryA (Address: 0x18015a0e8)
  • PFXImportCertStore (Address: 0x18015a0e0)
d3d11.dll
  • D3D11CreateDeviceAndSwapChain (Address: 0x18015b110)
D3DCOMPILER_47.dll
  • D3DCompile (Address: 0x18015a128)
GDI32.dll
  • CreateCompatibleDC (Address: 0x18015a140)
  • CreateDIBSection (Address: 0x18015a150)
  • DeleteDC (Address: 0x18015a148)
  • DeleteObject (Address: 0x18015a138)
  • SelectObject (Address: 0x18015a158)
IMM32.dll
  • ImmGetContext (Address: 0x18015a168)
  • ImmReleaseContext (Address: 0x18015a170)
  • ImmSetCandidateWindow (Address: 0x18015a180)
  • ImmSetCompositionWindow (Address: 0x18015a178)
IPHLPAPI.DLL
  • GetAdaptersInfo (Address: 0x18015a190)
KERNEL32.dll
  • AcquireSRWLockExclusive (Address: 0x18015a428)
  • AreFileApisANSI (Address: 0x18015a1a0)
  • BuildCommDCBAndTimeoutsA (Address: 0x18015a3c8)
  • CloseHandle (Address: 0x18015a288)
  • CreateDirectoryA (Address: 0x18015a3e8)
  • CreateDirectoryW (Address: 0x18015a1d8)
  • CreateEventA (Address: 0x18015a460)
  • CreateFileA (Address: 0x18015a2e0)
  • CreateFileMappingW (Address: 0x18015a318)
  • CreateFileW (Address: 0x18015a358)
  • CreateMutexA (Address: 0x18015a350)
  • CreateRemoteThread (Address: 0x18015a298)
  • CreateThread (Address: 0x18015a408)
  • CreateToolhelp32Snapshot (Address: 0x18015a270)
  • DeleteCriticalSection (Address: 0x18015a450)
  • DisableThreadLibraryCalls (Address: 0x18015a4d0)
  • EnterCriticalSection (Address: 0x18015a438)
  • ExitProcess (Address: 0x18015a310)
  • ExpandEnvironmentStringsW (Address: 0x18015a348)
  • FindClose (Address: 0x18015a1d0)
  • FindFirstFileW (Address: 0x18015a1c8)
  • FormatMessageA (Address: 0x18015a4c8)
  • FormatMessageW (Address: 0x18015a360)
  • FreeLibrary (Address: 0x18015a1f8)
  • GetComputerNameA (Address: 0x18015a400)
  • GetComputerNameExA (Address: 0x18015a3e0)
  • GetCurrentProcess (Address: 0x18015a2b0)
  • GetCurrentProcessId (Address: 0x18015a2c0)
  • GetCurrentThread (Address: 0x18015a418)
  • GetCurrentThreadId (Address: 0x18015a2b8)
  • GetDiskFreeSpaceExW (Address: 0x18015a390)
  • GetEnvironmentVariableA (Address: 0x18015a488)
  • GetExitCodeThread (Address: 0x18015a278)
  • GetFileAttributesA (Address: 0x18015a378)
  • GetFileAttributesExW (Address: 0x18015a1b8)
  • GetFileAttributesW (Address: 0x18015a1c0)
  • GetFileInformationByHandleEx (Address: 0x18015a1a8)
  • GetFileSizeEx (Address: 0x18015a4b0)
  • GetFileType (Address: 0x18015a498)
  • GetLastError (Address: 0x18015a1e0)
  • GetLocaleInfoA (Address: 0x18015a238)
  • GetLocaleInfoEx (Address: 0x18015a4b8)
  • GetModuleHandleA (Address: 0x18015a230)
  • GetModuleHandleW (Address: 0x18015a2c8)
  • GetPhysicallyInstalledSystemMemory (Address: 0x18015a338)
  • GetProcAddress (Address: 0x18015a1f0)
  • GetProcessHeap (Address: 0x18015a3b8)
  • GetStdHandle (Address: 0x18015a490)
  • GetSystemDirectoryA (Address: 0x18015a468)
  • GetSystemFirmwareTable (Address: 0x18015a328)
  • GetSystemInfo (Address: 0x18015a2a8)
  • GetSystemTimeAsFileTime (Address: 0x18015a4d8)
  • GetTempPathW (Address: 0x18015a1b0)
  • GetTickCount (Address: 0x18015a430)
  • GetTickCount64 (Address: 0x18015a368)
  • GetWindowsDirectoryW (Address: 0x18015a3a8)
  • GlobalAlloc (Address: 0x18015a208)
  • GlobalFree (Address: 0x18015a210)
  • GlobalLock (Address: 0x18015a218)
  • GlobalMemoryStatusEx (Address: 0x18015a3c0)
  • GlobalUnlock (Address: 0x18015a228)
  • InitializeCriticalSectionEx (Address: 0x18015a448)
  • InitializeSListHead (Address: 0x18015a4e8)
  • IsDebuggerPresent (Address: 0x18015a4e0)
  • IsProcessorFeaturePresent (Address: 0x18015a500)
  • IsWow64Process (Address: 0x18015a3f8)
  • K32EnumProcesses (Address: 0x18015a3a0)
  • K32GetModuleBaseNameW (Address: 0x18015a388)
  • LeaveCriticalSection (Address: 0x18015a440)
  • LoadLibraryA (Address: 0x18015a240)
  • LoadLibraryW (Address: 0x18015a1e8)
  • LocalAlloc (Address: 0x18015a2d8)
  • LocalFree (Address: 0x18015a2e8)
  • lstrcmpiA (Address: 0x18015a3d0)
  • lstrcmpiW (Address: 0x18015a3f0)
  • MapViewOfFile (Address: 0x18015a320)
  • MoveFileExA (Address: 0x18015a478)
  • MultiByteToWideChar (Address: 0x18015a200)
  • OpenFileMappingW (Address: 0x18015a2f8)
  • OpenProcess (Address: 0x18015a308)
  • PeekNamedPipe (Address: 0x18015a4a0)
  • Process32FirstW (Address: 0x18015a398)
  • Process32NextW (Address: 0x18015a380)
  • QueryFullProcessImageNameW (Address: 0x18015a410)
  • QueryPerformanceCounter (Address: 0x18015a258)
  • QueryPerformanceFrequency (Address: 0x18015a248)
  • ReadFile (Address: 0x18015a2d0)
  • ReleaseSRWLockExclusive (Address: 0x18015a420)
  • RemoveDirectoryA (Address: 0x18015a3b0)
  • SetEvent (Address: 0x18015a458)
  • SetLastError (Address: 0x18015a330)
  • SetUnhandledExceptionFilter (Address: 0x18015a510)
  • Sleep (Address: 0x18015a280)
  • SleepConditionVariableSRW (Address: 0x18015a4f0)
  • SleepEx (Address: 0x18015a470)
  • TerminateProcess (Address: 0x18015a508)
  • UnhandledExceptionFilter (Address: 0x18015a4c0)
  • UnmapViewOfFile (Address: 0x18015a300)
  • VerifyVersionInfoW (Address: 0x18015a3d8)
  • VerSetConditionMask (Address: 0x18015a250)
  • VirtualAllocEx (Address: 0x18015a290)
  • VirtualFreeEx (Address: 0x18015a2a0)
  • VirtualQueryEx (Address: 0x18015a2f0)
  • WaitForMultipleObjects (Address: 0x18015a4a8)
  • WaitForSingleObject (Address: 0x18015a268)
  • WaitForSingleObjectEx (Address: 0x18015a480)
  • WakeAllConditionVariable (Address: 0x18015a4f8)
  • WideCharToMultiByte (Address: 0x18015a220)
  • Wow64DisableWow64FsRedirection (Address: 0x18015a340)
  • Wow64RevertWow64FsRedirection (Address: 0x18015a370)
  • WriteProcessMemory (Address: 0x18015a260)
MPR.dll
  • WNetGetProviderNameW (Address: 0x18015a520)
MSVCP140.dll
  • _Cnd_do_broadcast_at_thread_exit (Address: 0x18015a6c8)
  • _Mtx_destroy_in_situ (Address: 0x18015a6e0)
  • _Mtx_init_in_situ (Address: 0x18015a6d0)
  • _Mtx_lock (Address: 0x18015a6d8)
  • _Mtx_unlock (Address: 0x18015a6a8)
  • _Query_perf_counter (Address: 0x18015a6c0)
  • _Query_perf_frequency (Address: 0x18015a6f0)
  • _Strcoll (Address: 0x18015a618)
  • _Strxfrm (Address: 0x18015a678)
  • _Thrd_detach (Address: 0x18015a6b8)
  • _Thrd_hardware_concurrency (Address: 0x18015a680)
  • _Thrd_sleep (Address: 0x18015a538)
  • _Wcscoll (Address: 0x18015a670)
  • _Wcsxfrm (Address: 0x18015a620)
  • _Xtime_get_ticks (Address: 0x18015a6b0)
  • ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ (Address: 0x18015a588)
  • ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z (Address: 0x18015a7a0)
  • ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x18015a7b8)
  • ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x18015a5d0)
  • ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x18015a5b0)
  • ?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x18015a558)
  • ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ (Address: 0x18015a578)
  • ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x18015a770)
  • ?_Incref@facet@locale@std@@UEAAXXZ (Address: 0x18015a580)
  • ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ (Address: 0x18015a7f0)
  • ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z (Address: 0x18015a668)
  • ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z (Address: 0x18015a6a0)
  • ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x18015a860)
  • ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ (Address: 0x18015a610)
  • ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x18015a800)
  • ?_Syserror_map@std@@YAPEBDH@Z (Address: 0x18015a7b0)
  • ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x18015a6e8)
  • ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x18015a868)
  • ?_Winerror_map@std@@YAHH@Z (Address: 0x18015a790)
  • ?_Xbad_alloc@std@@YAXXZ (Address: 0x18015a778)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x18015a640)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18015a7a8)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18015a780)
  • ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x18015a650)
  • ??0_Locinfo@std@@QEAA@PEBD@Z (Address: 0x18015a568)
  • ??0_Lockit@std@@QEAA@H@Z (Address: 0x18015a758)
  • ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x18015a848)
  • ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x18015a850)
  • ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x18015a808)
  • ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x18015a7f8)
  • ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x18015a7e8)
  • ??0facet@locale@std@@IEAA@_K@Z (Address: 0x18015a590)
  • ??1_Locinfo@std@@QEAA@XZ (Address: 0x18015a570)
  • ??1_Lockit@std@@QEAA@XZ (Address: 0x18015a750)
  • ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18015a658)
  • ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18015a730)
  • ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18015a738)
  • ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18015a8b0)
  • ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x18015a858)
  • ??1facet@locale@std@@MEAA@XZ (Address: 0x18015a598)
  • ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z (Address: 0x18015a690)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z (Address: 0x18015a5d8)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z (Address: 0x18015a828)
  • ??7ios_base@std@@QEBA_NXZ (Address: 0x18015a708)
  • ??Bid@locale@std@@QEAA_KXZ (Address: 0x18015a6f8)
  • ??Bios_base@std@@QEBA_NXZ (Address: 0x18015a688)
  • ?always_noconv@codecvt_base@std@@QEBA_NXZ (Address: 0x18015a700)
  • ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A (Address: 0x18015a788)
  • ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A (Address: 0x18015a768)
  • ?fail@ios_base@std@@QEBA_NXZ (Address: 0x18015a540)
  • ?flags@ios_base@std@@QEBAHXZ (Address: 0x18015a718)
  • ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ (Address: 0x18015a5e8)
  • ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x18015a740)
  • ?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z (Address: 0x18015a550)
  • ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ (Address: 0x18015a7d0)
  • ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ (Address: 0x18015a548)
  • ?good@ios_base@std@@QEBA_NXZ (Address: 0x18015a710)
  • ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A (Address: 0x18015a798)
  • ?id@?$collate@_W@std@@2V0locale@2@A (Address: 0x18015a630)
  • ?id@?$collate@D@std@@2V0locale@2@A (Address: 0x18015a628)
  • ?id@?$ctype@_W@std@@2V0locale@2@A (Address: 0x18015a660)
  • ?id@?$ctype@D@std@@2V0locale@2@A (Address: 0x18015a638)
  • ?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A (Address: 0x18015a560)
  • ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x18015a8a0)
  • ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z (Address: 0x18015a810)
  • ?is@?$ctype@_W@std@@QEBA_NF_W@Z (Address: 0x18015a5b8)
  • ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z (Address: 0x18015a818)
  • ?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z (Address: 0x18015a5f0)
  • ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z (Address: 0x18015a7c0)
  • ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ (Address: 0x18015a8a8)
  • ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ (Address: 0x18015a698)
  • ?set_new_handler@std@@YAP6AXXZP6AXXZ@Z (Address: 0x18015a530)
  • ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z (Address: 0x18015a890)
  • ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z (Address: 0x18015a830)
  • ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z (Address: 0x18015a838)
  • ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z (Address: 0x18015a600)
  • ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x18015a840)
  • ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ (Address: 0x18015a870)
  • ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z (Address: 0x18015a5e0)
  • ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x18015a7d8)
  • ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z (Address: 0x18015a608)
  • ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x18015a820)
  • ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x18015a898)
  • ?tolower@?$ctype@_W@std@@QEBA_W_W@Z (Address: 0x18015a5c0)
  • ?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z (Address: 0x18015a5c8)
  • ?tolower@?$ctype@D@std@@QEBADD@Z (Address: 0x18015a5a0)
  • ?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z (Address: 0x18015a5a8)
  • ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x18015a878)
  • ?uncaught_exceptions@std@@YAHXZ (Address: 0x18015a760)
  • ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z (Address: 0x18015a7e0)
  • ?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A (Address: 0x18015a648)
  • ?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z (Address: 0x18015a5f8)
  • ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z (Address: 0x18015a7c8)
  • ?width@ios_base@std@@QEAA_J_J@Z (Address: 0x18015a728)
  • ?width@ios_base@std@@QEBA_JXZ (Address: 0x18015a720)
  • ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z (Address: 0x18015a748)
  • ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z (Address: 0x18015a880)
  • ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z (Address: 0x18015a888)
Normaliz.dll
  • IdnToAscii (Address: 0x18015a8c0)
  • IdnToUnicode (Address: 0x18015a8c8)
ntdll.dll
  • NtClose (Address: 0x18015b128)
  • NtCreateFile (Address: 0x18015b130)
  • RtlCaptureContext (Address: 0x18015b140)
  • RtlInitUnicodeString (Address: 0x18015b120)
  • RtlLookupFunctionEntry (Address: 0x18015b148)
  • RtlVirtualUnwind (Address: 0x18015b138)
ole32.dll
  • CoCreateInstance (Address: 0x18015b158)
  • CoInitialize (Address: 0x18015b168)
  • CoInitializeEx (Address: 0x18015b160)
  • CoInitializeSecurity (Address: 0x18015b180)
  • CoSetProxyBlanket (Address: 0x18015b178)
  • CoUninitialize (Address: 0x18015b170)
OLEAUT32.dll
  • SysAllocString (Address: 0x18015a8e0)
  • SysFreeString (Address: 0x18015a8e8)
  • VariantClear (Address: 0x18015a8d8)
  • VariantInit (Address: 0x18015a8f0)
SHELL32.dll
  • ExtractIconExW (Address: 0x18015a910)
  • ShellExecuteA (Address: 0x18015a908)
  • SHGetSpecialFolderPathW (Address: 0x18015a900)
SHLWAPI.dll
  • PathCombineW (Address: 0x18015a920)
USER32.dll
  • ClientToScreen (Address: 0x18015a960)
  • CloseClipboard (Address: 0x18015a9e8)
  • CreateWindowExW (Address: 0x18015a9b0)
  • DefWindowProcW (Address: 0x18015aa98)
  • DestroyIcon (Address: 0x18015aa70)
  • DestroyWindow (Address: 0x18015aaa8)
  • DispatchMessageW (Address: 0x18015a988)
  • DrawIconEx (Address: 0x18015aa80)
  • EmptyClipboard (Address: 0x18015a9e0)
  • EnumWindows (Address: 0x18015aa78)
  • FindWindowW (Address: 0x18015aa90)
  • GetCapture (Address: 0x18015a958)
  • GetClassLongPtrW (Address: 0x18015aa68)
  • GetClientRect (Address: 0x18015aa20)
  • GetClipboardData (Address: 0x18015a9d8)
  • GetCursorPos (Address: 0x18015a9f8)
  • GetDC (Address: 0x18015a948)
  • GetDesktopWindow (Address: 0x18015a930)
  • GetForegroundWindow (Address: 0x18015a998)
  • GetKeyboardLayout (Address: 0x18015a9b8)
  • GetKeyState (Address: 0x18015a938)
  • GetMessageExtraInfo (Address: 0x18015a940)
  • GetSystemMetrics (Address: 0x18015a9a8)
  • GetWindowRect (Address: 0x18015aaa0)
  • GetWindowTextLengthW (Address: 0x18015aa50)
  • GetWindowTextW (Address: 0x18015aa88)
  • GetWindowThreadProcessId (Address: 0x18015aa48)
  • IsWindowUnicode (Address: 0x18015aa18)
  • IsWindowVisible (Address: 0x18015aa58)
  • LoadCursorW (Address: 0x18015aa38)
  • OpenClipboard (Address: 0x18015a9f0)
  • PeekMessageW (Address: 0x18015a980)
  • PostQuitMessage (Address: 0x18015a970)
  • RegisterClassExW (Address: 0x18015a9c8)
  • ReleaseCapture (Address: 0x18015aa10)
  • ReleaseDC (Address: 0x18015aa00)
  • ScreenToClient (Address: 0x18015a950)
  • SendMessageW (Address: 0x18015aa60)
  • SetCapture (Address: 0x18015aa30)
  • SetClipboardData (Address: 0x18015a9d0)
  • SetCursor (Address: 0x18015aa28)
  • SetCursorPos (Address: 0x18015aa08)
  • SetWindowPos (Address: 0x18015aa40)
  • ShowWindow (Address: 0x18015a990)
  • TrackMouseEvent (Address: 0x18015a968)
  • TranslateMessage (Address: 0x18015a978)
  • UnregisterClassW (Address: 0x18015a9a0)
  • UpdateWindow (Address: 0x18015a9c0)
VCRUNTIME140_1.dll
  • __CxxFrameHandler4 (Address: 0x18015ab60)
VCRUNTIME140.dll
  • __C_specific_handler (Address: 0x18015ab28)
  • __current_exception (Address: 0x18015aac8)
  • __current_exception_context (Address: 0x18015aac0)
  • __RTDynamicCast (Address: 0x18015aae8)
  • __std_exception_copy (Address: 0x18015ab30)
  • __std_exception_destroy (Address: 0x18015ab38)
  • __std_terminate (Address: 0x18015ab50)
  • __std_type_info_compare (Address: 0x18015ab20)
  • __std_type_info_destroy_list (Address: 0x18015aab8)
  • __std_type_info_name (Address: 0x18015ab10)
  • _CxxThrowException (Address: 0x18015ab08)
  • _purecall (Address: 0x18015ab18)
  • memchr (Address: 0x18015aad0)
  • memcmp (Address: 0x18015aae0)
  • memcpy (Address: 0x18015ab00)
  • memmove (Address: 0x18015aaf8)
  • memset (Address: 0x18015aaf0)
  • strchr (Address: 0x18015ab40)
  • strrchr (Address: 0x18015aad8)
  • strstr (Address: 0x18015ab48)
wevtapi.dll
  • EvtClose (Address: 0x18015b1a8)
  • EvtNext (Address: 0x18015b198)
  • EvtOpenLog (Address: 0x18015b1b0)
  • EvtQuery (Address: 0x18015b1a0)
  • EvtRender (Address: 0x18015b190)
WLDAP32.dll
  • (Address: 0x18015ab88)
  • (Address: 0x18015ab90)
  • (Address: 0x18015ab98)
  • (Address: 0x18015aba0)
  • (Address: 0x18015aba8)
  • (Address: 0x18015abb0)
  • (Address: 0x18015abb8)
  • (Address: 0x18015abc0)
  • (Address: 0x18015abc8)
  • (Address: 0x18015abd0)
  • (Address: 0x18015abd8)
  • (Address: 0x18015abe0)
  • (Address: 0x18015abe8)
  • (Address: 0x18015abf0)
  • (Address: 0x18015abf8)
  • (Address: 0x18015ac00)
  • (Address: 0x18015ac08)
  • (Address: 0x18015ac10)
WS2_32.dll
  • __WSAFDIsSet (Address: 0x18015ac80)
  • accept (Address: 0x18015ac90)
  • bind (Address: 0x18015ac38)
  • closesocket (Address: 0x18015ace8)
  • connect (Address: 0x18015ac40)
  • freeaddrinfo (Address: 0x18015ac28)
  • getaddrinfo (Address: 0x18015ac78)
  • gethostname (Address: 0x18015acb0)
  • getpeername (Address: 0x18015ac48)
  • getsockname (Address: 0x18015ac50)
  • getsockopt (Address: 0x18015ad28)
  • htonl (Address: 0x18015acb8)
  • htons (Address: 0x18015ac58)
  • ioctlsocket (Address: 0x18015aca8)
  • listen (Address: 0x18015acc8)
  • ntohs (Address: 0x18015ac20)
  • recv (Address: 0x18015ac60)
  • recvfrom (Address: 0x18015ac98)
  • select (Address: 0x18015ac88)
  • send (Address: 0x18015ad20)
  • sendto (Address: 0x18015aca0)
  • setsockopt (Address: 0x18015ac68)
  • socket (Address: 0x18015ac70)
  • WSACleanup (Address: 0x18015ac30)
  • WSACloseEvent (Address: 0x18015ad18)
  • WSACreateEvent (Address: 0x18015ad10)
  • WSAEnumNetworkEvents (Address: 0x18015ad08)
  • WSAEventSelect (Address: 0x18015ad00)
  • WSAGetLastError (Address: 0x18015acd8)
  • WSAIoctl (Address: 0x18015acd0)
  • WSAResetEvent (Address: 0x18015acf8)
  • WSASetLastError (Address: 0x18015ace0)
  • WSAStartup (Address: 0x18015acc0)
  • WSAWaitForMultipleEvents (Address: 0x18015acf0)