filename1bbf6108505884106877824e403def3f6162d63f.bin
size596328 (0x91968)
md50800e511af0b4125a2cc2ea2504fe36c
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x138

Rich Header

lib idversiontimes used
1473072920
199411184
2602811711
2592811711
257281174
2612811730
260283148
263257111
260257113
262257111
257283149
2572571138
10758
2652831498
256283141
255283141
258283141

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0xee9ad527
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2122
Magic0x10b
LinkerVersion14.24
SizeOfCode0x57600
SizeOfInitializedData0x3a400
SizeOfUninitializedData0
AddressOfEntryPoint0x4f860
BaseOfCode0x1000
BaseOfData0x59000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x95000
SizeOfHeaders0x400
CheckSum0x9712d
Subsystem2
DllCharacteristics0x4140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

namevavsizeraw sizeflags
.text0x10000x5750a0x57600R-X CODE
.rdata0x590000x2a7fc0x2a800R-- IDATA
.data0x840000x6e780x4a00RW- IDATA
.rsrc0x8b0000x4500x600R-- IDATA
.reloc0x8c0000x847c0x8600R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x7dbc00x1424
IMPORT0x7efe40x258
RESOURCE0x8b0000x450
EXCEPTION00
SECURITY0x8f8000x2168
BASERELOC0x8c0000x847c
DEBUG0x726900x8c
ARCHITECTURE00
GLOBALPTR00
TLS0x727c40x18
LOAD_CONFIG0x727200x40
Bound_IAT00
IAT0x590000x800
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x1007738c0x100773980x10088d200x100599a800x300000
typenamesizecp
VERSION#110040
module_namehintordfunction_name
LoggingPlatform.DLL11public: __thiscall ScenarioTracking::TransferScope::~TransferScope(void)

??1TransferScope@ScenarioTracking@@QAE@XZ

LoggingPlatform.DLL6public: __thiscall ScenarioTracking::TransferScope::TransferScope(class ScenarioTracking::ITrace const * const)

??0TransferScope@ScenarioTracking@@QAE@QBVITrace@1@@Z

LoggingPlatform.DLL16class std::unique_ptr<class ScenarioTracking::ITrace, struct std::default_delete<class ScenarioTracking::ITrace> > __stdcall ScenarioTracking::CaptureTrace(void)

?CaptureTrace@ScenarioTracking@@YG?AV?$unique_ptr@VITrace@ScenarioTracking@@U?$default_delete@VITrace@ScenarioTracking@@@std@@@std@@XZ

LoggingPlatform.DLL46void __stdcall LoggingRecordAssert(wchar_t const *, wchar_t const *, wchar_t const *, unsigned int, wchar_t const *, bool, unsigned int, bool)

?LoggingRecordAssert@@YGXPB_W00I0_NI1@Z

LoggingPlatform.DLL38bool __cdecl QoS::IsAnyLibraryIrmEnabled(void)

?IsAnyLibraryIrmEnabled@QoS@@YA_NXZ

LoggingPlatform.DLL22unsigned int __cdecl QoS::GetActiveHydrationsCount(void)

?GetActiveHydrationsCount@QoS@@YAIXZ

LoggingPlatform.DLL71class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> > __stdcall NarrowStringToWideString(char const *)

?NarrowStringToWideString@@YG?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PBD@Z

LoggingPlatform.DLL30class ILoggingSession * __stdcall GetLoggingSession(void)

?GetLoggingSession@@YGPAVILoggingSession@@XZ

LoggingPlatform.DLL55void __stdcall LoggingSendTelemetryEvent(struct TelemetryEvent const &, struct StructuredEventParameter * const)

?LoggingSendTelemetryEvent@@YGXABUTelemetryEvent@@QAUStructuredEventParameter@@@Z

LoggingPlatform.DLL35class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> > __stdcall GuidToString(struct _GUID const &)

?GuidToString@@YG?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABU_GUID@@@Z

LoggingPlatform.DLL5public: __thiscall TelemetryEvent::TelemetryEvent(char const *, char const *, struct _GUID const &, unsigned int, unsigned int, char const *, char const *, unsigned int, unsigned int)

??0TelemetryEvent@@QAE@PBD0ABU_GUID@@II00II@Z

LoggingPlatform.DLL85class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> > __stdcall StripPrivateInfoFromString(wchar_t const *)

?StripPrivateInfoFromString@@YG?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_W@Z

LoggingPlatform.DLL89class std::basic_string<char, struct std::char_traits<char>, class std::allocator<char> > __stdcall WideStringToNarrowString(wchar_t const *)

?WideStringToNarrowString@@YG?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PB_W@Z

LoggingPlatform.DLL73void __cdecl OneDriveAssertWorker(wchar_t const *, enum OneDriveAssertType, wchar_t const *, unsigned int, wchar_t const *, wchar_t const *, wchar_t const *, ...)

?OneDriveAssertWorker@@YAXPB_WW4OneDriveAssertType@@0I000ZZ

LoggingPlatform.DLL24long __stdcall GetDefaultLoggingPath(class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> > &, class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> > const &)

?GetDefaultLoggingPath@@YGJAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV12@@Z

LoggingPlatform.DLL53void __stdcall LoggingRotateIfNeeded(void)

?LoggingRotateIfNeeded@@YGXXZ

LoggingPlatform.DLL68void __stdcall LoggingWriteStructuredEvent(struct StructuredEvent const &, struct StructuredEventParameter * const)

?LoggingWriteStructuredEvent@@YGXABUStructuredEvent@@QAUStructuredEventParameter@@@Z

LoggingPlatform.DLL4public: __thiscall StructuredEvent::StructuredEvent(char const *, int, char const *, struct _GUID const &, unsigned int, unsigned int, unsigned int, unsigned int)

??0StructuredEvent@@QAE@PBDH0ABU_GUID@@IIII@Z

LoggingPlatform.DLL52void __stdcall LoggingRotate(void)

?LoggingRotate@@YGXXZ

Telemetry.dll111public: virtual __thiscall QoS::ScenarioQosSyncWrapper::~ScenarioQosSyncWrapper(void)

??1ScenarioQosSyncWrapper@QoS@@UAE@XZ

Telemetry.dll177public: virtual void __thiscall QoS::ScenarioQosSyncWrapper::RecordScenario(int, enum TelemetryConstants::ErrorType::Type)

?RecordScenario@ScenarioQosSyncWrapper@QoS@@UAEXHW4Type@ErrorType@TelemetryConstants@@@Z

Telemetry.dll181public: virtual void __thiscall QoS::ScenarioQosSyncWrapper::RecordScenarioWithSize(int, enum TelemetryConstants::ErrorType::Type, unsigned int, class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> >, class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> >)

?RecordScenarioWithSize@ScenarioQosSyncWrapper@QoS@@UAEXHW4Type@ErrorType@TelemetryConstants@@IV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@1@Z

Telemetry.dll49public: __thiscall QoS::ScenarioQosSyncWrapper::ScenarioQosSyncWrapper(class QoS::QosSyncWrapperConfig const &, wchar_t const *)

??0ScenarioQosSyncWrapper@QoS@@QAE@ABVQosSyncWrapperConfig@1@PB_W@Z

Telemetry.dll184public: virtual void __thiscall QoS::ScenarioQosSyncWrapper::RecordUploadDownloadScenario(int, enum TelemetryConstants::ErrorType::Type, unsigned int, int, class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> > const &, class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> > const &, class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> > const &, unsigned int, unsigned int)

?RecordUploadDownloadScenario@ScenarioQosSyncWrapper@QoS@@UAEXHW4Type@ErrorType@TelemetryConstants@@IHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@11II@Z

Telemetry.dll185public: virtual void __thiscall QoS::ScenarioQosSyncWrapper::RecordUploadDownloadTransferTestScenario(int, enum TelemetryConstants::ErrorType::Type, unsigned int, class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> > const &, class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> > const &, unsigned int, unsigned int, class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> > const &)

?RecordUploadDownloadTransferTestScenario@ScenarioQosSyncWrapper@QoS@@UAEXHW4Type@ErrorType@TelemetryConstants@@IABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@1II1@Z

Telemetry.dll169public: virtual void __thiscall QoS::ScenarioQosSyncWrapper::RecordLogBatchUploadScenario(int, enum TelemetryConstants::ErrorType::Type, unsigned int, int, int, int, int, int, bool, bool, int, int, int, int, int, int, int, int, int, int, int, int, int, int, int, int, bool, bool, bool, unsigned __int64, unsigned __int64, int, int, int, int, int, int, int, int, int, int, int, bool)

?RecordLogBatchUploadScenario@ScenarioQosSyncWrapper@QoS@@UAEXHW4Type@ErrorType@TelemetryConstants@@IHHHHH_N1HHHHHHHHHHHHHHHH111_K2HHHHHHHHHHH1@Z

Telemetry.dll167public: virtual void __thiscall QoS::ScenarioQosSyncWrapper::RecordApiWithSize(long, unsigned int, unsigned int, class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> > const &, class std::set<unsigned int, struct std::less<unsigned int>, class std::allocator<unsigned int> > const &)

?RecordApiWithSize@ScenarioQosSyncWrapper@QoS@@UAEXJIIABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$set@IU?$less@I@std@@V?$allocator@I@2@@4@@Z

Telemetry.dll182public: virtual void __thiscall QoS::ScenarioQosSyncWrapper::RecordServiceApiResponse(long, unsigned int, unsigned int, class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> > const &, class std::set<unsigned int, struct std::less<unsigned int>, class std::allocator<unsigned int> > const &, class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> > const &, class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> > const &, bool, class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> > const &)

?RecordServiceApiResponse@ScenarioQosSyncWrapper@QoS@@UAEXJIIABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$set@IU?$less@I@std@@V?$allocator@I@2@@4@00_N0@Z

Telemetry.dll48public: __thiscall QoS::ScenarioQosSyncWrapper::ScenarioQosSyncWrapper(class QoS::QosSyncWrapperConfig const &, wchar_t const *, wchar_t const *)

??0ScenarioQosSyncWrapper@QoS@@QAE@ABVQosSyncWrapperConfig@1@PB_W1@Z

Telemetry.dll72public: __thiscall QoS::QosSyncWrapperConfig::~QosSyncWrapperConfig(void)

??1QosSyncWrapperConfig@QoS@@QAE@XZ

Telemetry.dll151public: wchar_t const * __thiscall QoS::QosSyncWrapperConfig::GetUploadFileScenarioName(bool)const

?GetUploadFileScenarioName@QosSyncWrapperConfig@QoS@@QBEPB_W_N@Z

Telemetry.dll136public: wchar_t const * __thiscall QoS::QosSyncWrapperConfig::GetDownloadFileScenarioName(bool)const

?GetDownloadFileScenarioName@QosSyncWrapperConfig@QoS@@QBEPB_W_N@Z

Telemetry.dll144public: wchar_t const * __thiscall QoS::QosSyncWrapperConfig::GetPollingChangeEnumerationScenarioName(void)const

?GetPollingChangeEnumerationScenarioName@QosSyncWrapperConfig@QoS@@QBEPB_WXZ

Telemetry.dll153public: wchar_t const * __thiscall QoS::QosSyncWrapperConfig::GetWnsChangeEnumerationScenarioName(void)const

?GetWnsChangeEnumerationScenarioName@QosSyncWrapperConfig@QoS@@QBEPB_WXZ

Telemetry.dll148public: wchar_t const * __thiscall QoS::QosSyncWrapperConfig::GetStartupChangeEnumerationScenarioName(void)const

?GetStartupChangeEnumerationScenarioName@QosSyncWrapperConfig@QoS@@QBEPB_WXZ

Telemetry.dll135public: wchar_t const * __thiscall QoS::QosSyncWrapperConfig::GetChangeEnumerationScenarioName(void)const

?GetChangeEnumerationScenarioName@QosSyncWrapperConfig@QoS@@QBEPB_WXZ

Telemetry.dll145public: wchar_t const * __thiscall QoS::QosSyncWrapperConfig::GetQuotaStatusScenarioName(void)const

?GetQuotaStatusScenarioName@QosSyncWrapperConfig@QoS@@QBEPB_WXZ

Telemetry.dll152public: wchar_t const * __thiscall QoS::QosSyncWrapperConfig::GetUploadMetadataScenarioName(bool, bool)const

?GetUploadMetadataScenarioName@QosSyncWrapperConfig@QoS@@QBEPB_W_N0@Z

Telemetry.dll172protected: virtual void __thiscall QoS::ScenarioQosWrapper::RecordQosTelemetry(wchar_t const *, wchar_t const *, enum TelemetryConstants::PropertyId::Id, __int64, unsigned int, int, enum TelemetryConstants::ErrorType::Type, wchar_t const *, class std::vector<class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> >, class std::allocator<class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> > > >, wchar_t const *, struct QoS::ScenarioQosWrapper::ScenarioQosWrapperAdditionalInfo const &)

?RecordQosTelemetry@ScenarioQosWrapper@QoS@@MAEXPB_W0W4Id@PropertyId@TelemetryConstants@@_JIHW4Type@ErrorType@5@0V?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@0ABUScenarioQosWrapperAdditionalInfo@12@@Z

Telemetry.dll192public: void __thiscall QoS::ScenarioQosWrapper::SetComponent(wchar_t const *)

?SetComponent@ScenarioQosWrapper@QoS@@QAEXPB_W@Z

Telemetry.dll133public: virtual void __thiscall QoS::ScenarioQosWrapper::FreeTxnContextString(wchar_t const *)

?FreeTxnContextString@ScenarioQosWrapper@QoS@@UAEXPB_W@Z

Telemetry.dll150public: virtual wchar_t const * __thiscall QoS::ScenarioQosWrapper::GetTxnContextString(void)

?GetTxnContextString@ScenarioQosWrapper@QoS@@UAEPB_WXZ

Telemetry.dll170public: virtual void __thiscall QoS::ScenarioQosLogUploadBatch::RecordQosTelemetry(wchar_t const *, wchar_t const *, enum TelemetryConstants::PropertyId::Id, __int64, unsigned int, int, enum TelemetryConstants::ErrorType::Type, wchar_t const *, class std::vector<class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> >, class std::allocator<class std::basic_string<wchar_t, struct std::char_traits<wchar_t>, class std::allocator<wchar_t> > > >, wchar_t const *, struct QoS::ScenarioQosWrapper::ScenarioQosWrapperAdditionalInfo const &)

?RecordQosTelemetry@ScenarioQosLogUploadBatch@QoS@@UAEXPB_W0W4Id@PropertyId@TelemetryConstants@@_JIHW4Type@ErrorType@5@0V?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@0ABUScenarioQosWrapperAdditionalInfo@ScenarioQosWrapper@2@@Z

Telemetry.dll241public: void __thiscall QoS::ScenarioQosSyncWrapper::StartUploadLogBatch(void)

?StartUploadLogBatch@ScenarioQosSyncWrapper@QoS@@QAEXXZ

Telemetry.dll223public: void __thiscall QoS::ScenarioQosSyncWrapper::StartGetLogUploadLocation(void)

?StartGetLogUploadLocation@ScenarioQosSyncWrapper@QoS@@QAEXXZ

FileSyncSessions.dll129GetIAuthInstance
UpdateRingSettings.dll1class IUpdateRingSettingsManager * __stdcall GetUpdateRingSettingsManager(void)

?GetUpdateRingSettingsManager@@YGPAVIUpdateRingSettingsManager@@XZ

KERNEL32.dll217CreateMutexW
KERNEL32.dll534GetCurrentProcessId
KERNEL32.dll1412TerminateProcess
KERNEL32.dll1487WaitForSingleObject
KERNEL32.dll741GetSystemTimeAsFileTime
KERNEL32.dll228CreateProcessW
KERNEL32.dll959LoadLibraryW
KERNEL32.dll908IsWow64Process
KERNEL32.dll425FreeLibrary
KERNEL32.dll382FindFirstFileW
KERNEL32.dll371FindClose
KERNEL32.dll275DeleteFileW
KERNEL32.dll940LCMapStringW
KERNEL32.dll394FindNextFileW
KERNEL32.dll550GetDiskFreeSpaceExW
KERNEL32.dll1052PostQueuedCompletionStatus
KERNEL32.dll710GetQueuedCompletionStatus
KERNEL32.dll1131ReadDirectoryChangesW
KERNEL32.dll207CreateIoCompletionPort
KERNEL32.dll1020OpenFileById
KERNEL32.dll588GetFinalPathNameByHandleW
KERNEL32.dll579GetFileInformationByHandle
KERNEL32.dll580GetFileInformationByHandleEx
KERNEL32.dll1304SetFileInformationByHandle
KERNEL32.dll153CompareStringOrdinal
KERNEL32.dll577GetFileAttributesW
KERNEL32.dll568GetExitCodeProcess
KERNEL32.dll388FindFirstVolumeW
KERNEL32.dll399FindNextVolumeW
KERNEL32.dll406FindVolumeClose
KERNEL32.dll283DeviceIoControl
KERNEL32.dll584GetFileSizeEx
KERNEL32.dll1132ReadFile
KERNEL32.dll565GetEnvironmentVariableW
KERNEL32.dll469GetCommandLineW
KERNEL32.dll172CopyFileW
KERNEL32.dll104BindIoCompletionCallback
KERNEL32.dll1193ReleaseMutex
KERNEL32.dll1180RegisterApplicationRestart
KERNEL32.dll1322SetLastError
KERNEL32.dll1448UnmapViewOfFile
KERNEL32.dll190CreateEventW
KERNEL32.dll246CreateThreadpoolWait
KERNEL32.dll1377SetThreadpoolWait
KERNEL32.dll1491WaitForThreadpoolWaitCallbacks
KERNEL32.dll144CloseThreadpoolWait
KERNEL32.dll993MoveFileExW
KERNEL32.dll1211ReplaceFileW
KERNEL32.dll1301SetFileAttributesW
KERNEL32.dll798GetVolumePathNameW
KERNEL32.dll185CreateDirectoryW
KERNEL32.dll1202RemoveDirectoryW
KERNEL32.dll1307SetFilePointerEx
KERNEL32.dll413FlushFileBuffers
KERNEL32.dll1397Sleep
KERNEL32.dll796GetVolumeNameForVolumeMountPointW
KERNEL32.dll800GetVolumePathNamesForVolumeNameW
KERNEL32.dll794GetVolumeInformationW
KERNEL32.dll793GetVolumeInformationByHandleW
KERNEL32.dll1288SetEndOfFile
KERNEL32.dll586GetFileType
KERNEL32.dll473GetCompressedFileSizeW
KERNEL32.dll743GetSystemTimes
KERNEL32.dll822GlobalMemoryStatusEx
KERNEL32.dll928K32GetPerformanceInfo
KERNEL32.dll931K32GetProcessMemoryInfo
KERNEL32.dll687GetProcessHandleCount
KERNEL32.dll701GetProcessWorkingSetSizeEx
KERNEL32.dll736GetSystemPowerStatus
KERNEL32.dll527GetCurrentDirectoryW
KERNEL32.dll996MoveFileW
KERNEL32.dll926K32GetModuleFileNameExW
KERNEL32.dll1030OpenProcess
KERNEL32.dll897IsProcessorFeaturePresent
KERNEL32.dll284DisableThreadLibraryCalls
KERNEL32.dll862InitializeSListHead
KERNEL32.dll280DeleteTimerQueueTimer
KERNEL32.dll249CreateTimerQueueTimer
KERNEL32.dll1000MultiByteToWideChar
KERNEL32.dll641GetNativeSystemInfo
KERNEL32.dll935K32QueryWorkingSet
KERNEL32.dll969LocalFree
KERNEL32.dll790GetVersionExA
KERNEL32.dll842HeapSize
KERNEL32.dll836HeapDestroy
KERNEL32.dll403FindResourceExW
KERNEL32.dll404FindResourceW
KERNEL32.dll1396SizeofResource
KERNEL32.dll980LockResource
KERNEL32.dll962LoadResource
KERNEL32.dll352ExpandEnvironmentStringsW
KERNEL32.dll1588lstrlenW
KERNEL32.dll840HeapReAlloc
KERNEL32.dll833HeapAlloc
KERNEL32.dll688GetProcessHeap
KERNEL32.dll837HeapFree
KERNEL32.dll682GetProcAddress
KERNEL32.dll628GetModuleHandleW
KERNEL32.dll1094QueryPerformanceCounter
KERNEL32.dll1095QueryPerformanceFrequency
KERNEL32.dll1104QueueUserWorkItem
KERNEL32.dll816GlobalFree
KERNEL32.dll477GetComputerNameW
KERNEL32.dll303EnterCriticalSection
KERNEL32.dll952LeaveCriticalSection
KERNEL32.dll857InitializeCriticalSection
KERNEL32.dll1294SetEvent
KERNEL32.dll189CreateEventExW
KERNEL32.dll698GetProcessTimes
KERNEL32.dll769GetThreadTimes
KERNEL32.dll270DeleteCriticalSection
KERNEL32.dll1115RaiseException
KERNEL32.dll134CloseHandle
KERNEL32.dll537GetCurrentThread
KERNEL32.dll605GetLastError
KERNEL32.dll772GetTickCount64
KERNEL32.dll732GetSystemDirectoryW
KERNEL32.dll538GetCurrentThreadId
KERNEL32.dll202CreateFileW
KERNEL32.dll859InitializeCriticalSectionEx
KERNEL32.dll533GetCurrentProcess
KERNEL32.dll965LocalAlloc
KERNEL32.dll1469VerifyVersionInfoW
KERNEL32.dll1465VerSetConditionMask
KERNEL32.dll1310SetFileTime
KERNEL32.dll624GetModuleFileNameW
KERNEL32.dll1381SetUnhandledExceptionFilter
KERNEL32.dll1445UnhandledExceptionFilter
KERNEL32.dll1488WaitForSingleObjectEx
KERNEL32.dll1215ResetEvent
KERNEL32.dll858InitializeCriticalSectionAndSpinCount
KERNEL32.dll1042OutputDebugStringW
KERNEL32.dll890IsDebuggerPresent
KERNEL32.dll1286SetDllDirectoryW
USER32.dll795SendMessageTimeoutW
ADVAPI32.dll732SetFileSecurityW
ADVAPI32.dll512MapGenericMask
ADVAPI32.dll240DuplicateToken
ADVAPI32.dll538OpenThreadToken
ADVAPI32.dll235DeleteAce
ADVAPI32.dll398InitializeAcl
ADVAPI32.dll129ConvertStringSecurityDescriptorToSecurityDescriptorW
ADVAPI32.dll308FreeSid
ADVAPI32.dll312GetAclInformation
ADVAPI32.dll763StartServiceW
ADVAPI32.dll587QueryServiceConfigW
ADVAPI32.dll147CreateWellKnownSid
ADVAPI32.dll106ControlService
ADVAPI32.dll593QueryServiceStatusEx
ADVAPI32.dll592QueryServiceStatus
ADVAPI32.dll236DeleteService
ADVAPI32.dll739SetNamedSecurityInfoW
ADVAPI32.dll728SetEntriesInAclW
ADVAPI32.dll32AllocateAndInitializeSid
ADVAPI32.dll343GetNamedSecurityInfoW
ADVAPI32.dll139CreateProcessAsUserW
ADVAPI32.dll241DuplicateTokenEx
ADVAPI32.dll537OpenServiceW
ADVAPI32.dll754SetServiceStatus
ADVAPI32.dll691RegisterServiceCtrlHandlerW
ADVAPI32.dll762StartServiceCtrlDispatcherW
ADVAPI32.dll101CloseServiceHandle
ADVAPI32.dll91ChangeServiceConfig2W
ADVAPI32.dll93ChangeServiceConfigW
ADVAPI32.dll145CreateServiceW
ADVAPI32.dll535OpenSCManagerW
ADVAPI32.dll684RegUnLoadKeyW
ADVAPI32.dll645RegLoadKeyW
ADVAPI32.dll635RegEnumKeyW
ADVAPI32.dll614RegCreateKeyTransactedW
ADVAPI32.dll31AdjustTokenPrivileges
ADVAPI32.dll431LookupPrivilegeValueW
ADVAPI32.dll637RegEnumValueW
ADVAPI32.dll133CopySid
ADVAPI32.dll331GetLengthSid
ADVAPI32.dll123ConvertSidToStringSidW
ADVAPI32.dll368GetTokenInformation
ADVAPI32.dll533OpenProcessToken
ADVAPI32.dll618RegDeleteKeyExW
ADVAPI32.dll625RegDeleteTreeW
ADVAPI32.dll634RegEnumKeyExW
ADVAPI32.dll641RegGetValueW
ADVAPI32.dll678RegSetKeyValueW
ADVAPI32.dll612RegCreateKeyExW
ADVAPI32.dll200CryptDestroyKey
ADVAPI32.dll221CryptSetHashParam
ADVAPI32.dll219CryptImportKey
ADVAPI32.dll213CryptGetHashParam
ADVAPI32.dll217CryptHashData
ADVAPI32.dll196CryptCreateHash
ADVAPI32.dll194CryptAcquireContextW
ADVAPI32.dll220CryptReleaseContext
ADVAPI32.dll199CryptDestroyHash
ADVAPI32.dll651RegOpenKeyExA
ADVAPI32.dll659RegQueryInfoKeyW
ADVAPI32.dll681RegSetValueExW
ADVAPI32.dll627RegDeleteValueW
ADVAPI32.dll665RegQueryValueExW
ADVAPI32.dll603RegCloseKey
ADVAPI32.dll652RegOpenKeyExW
ADVAPI32.dll423LookupAccountNameW
ADVAPI32.dll379GetUserNameW
ADVAPI32.dll311GetAce
ADVAPI32.dll22AddAce
ADVAPI32.dll291EventUnregister
ADVAPI32.dll5AccessCheck
SHELL32.dll155
SHELL32.dll132SHBindToParent
SHELL32.dll526
SHELL32.dll155SHCreateDirectoryExW
SHELL32.dll341SHGetFolderPathAndSubDirW
SHELL32.dll329SHGetDataFromIDListW
SHELL32.dll159SHCreateItemFromParsingName
SHELL32.dll437ShellExecuteExW
SHELL32.dll139SHChangeNotify
SHELL32.dll320SHFileOperationW
SHELL32.dll353SHGetKnownFolderPath
SHELL32.dll394SHParseDisplayName
SHELL32.dll373SHGetSpecialFolderPathW
SHELL32.dll343SHGetFolderPathW
ole32.dll155CreateBindCtx
ole32.dll132CoSetProxyBlanket
ole32.dll39CoCreateGuid
ole32.dll137CoTaskMemFree
ole32.dll94CoInitializeEx
ole32.dll458StringFromGUID2
ole32.dll148CoWaitForMultipleHandles
ole32.dll38CoCreateFreeThreadedMarshaler
ole32.dll141CoUninitialize
ole32.dll40CoCreateInstance
OLEAUT32.dll6
OLEAUT32.dll2
OLEAUT32.dll161
OLEAUT32.dll162
OLEAUT32.dll323
RPCRT4.dll400RpcEpUnregister
RPCRT4.dll389RpcBindingVectorFree
RPCRT4.dll398RpcEpRegisterW
RPCRT4.dll455RpcServerInqBindings
RPCRT4.dll495RpcServerUseProtseqW
RPCRT4.dll474RpcServerRegisterIfEx
RPCRT4.dll534UuidCreate
RPCRT4.dll543UuidToStringW
RPCRT4.dll525RpcStringFreeW
RPCRT4.dll477RpcServerUnregisterIf
RPCRT4.dll458RpcServerInqCallAttributesW
RPCRT4.dll365RpcBindingFree
RPCRT4.dll521RpcStringBindingComposeW
RPCRT4.dll367RpcBindingFromStringBindingW
RPCRT4.dll382RpcBindingSetAuthInfoExW
SHLWAPI.dll73PathFileExistsW
SHLWAPI.dll199SHGetValueW
SHLWAPI.dll103PathIsPrefixW
SHLWAPI.dll328StrRetToBufW
SHLWAPI.dll232SHRegGetBoolUSValueW
VERSION.dll7GetFileVersionInfoSizeW
VERSION.dll8GetFileVersionInfoW
VERSION.dll16VerQueryValueW
WININET.dll147InternetCheckConnectionW
WS2_32.dll58WSAIoctl
WS2_32.dll87WSASocketW
WS2_32.dll111
WS2_32.dll3
WS2_32.dll115
WTSAPI32.dll38WTSQuerySessionInformationW
WTSAPI32.dll41WTSQueryUserToken
WTSAPI32.dll23WTSFreeMemory
WTSAPI32.dll22WTSEnumerateSessionsW
MSVCP140.dll136public: virtual __thiscall std::basic_ostream<wchar_t, struct std::char_traits<wchar_t> >::~basic_ostream<wchar_t, struct std::char_traits<wchar_t> >(void)

??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ

MSVCP140.dll258public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::operator<<(unsigned long)

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z

MSVCP140.dll19public: __thiscall std::basic_iostream<char, struct std::char_traits<char> >::basic_iostream<char, struct std::char_traits<char> >(class std::basic_streambuf<char, struct std::char_traits<char> > *)

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

MSVCP140.dll12protected: __thiscall std::basic_ios<char, struct std::char_traits<char> >::basic_ios<char, struct std::char_traits<char> >(void)

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ

MSVCP140.dll1221public: void __thiscall std::basic_ios<char, struct std::char_traits<char> >::setstate(int, bool)

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z

MSVCP140.dll539public: bool __thiscall std::basic_istream<wchar_t, struct std::char_traits<wchar_t> >::_Ipfx(bool)

?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z

MSVCP140.dll1175public: unsigned short __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::sbumpc(void)

?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ

MSVCP140.dll1233public: unsigned short __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::sgetc(void)

?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ

MSVCP140.dll1456_Thrd_detach
MSVCP140.dll872public: class std::basic_ostream<char, struct std::char_traits<char> > & __thiscall std::basic_ostream<char, struct std::char_traits<char> >::flush(void)

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ

MSVCP140.dll580public: void __thiscall std::basic_ostream<char, struct std::char_traits<char> >::_Osfx(void)

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ

MSVCP140.dll47protected: __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::basic_streambuf<char, struct std::char_traits<char> >(void)

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ

MSVCP140.dll1249public: __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::sputn(char const *, __int64)

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z

MSVCP140.dll1014protected: virtual void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::imbue(class std::locale const &)

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z

MSVCP140.dll1205protected: virtual class std::basic_streambuf<char, struct std::char_traits<char> > * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::setbuf(char *, __int64)

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z

MSVCP140.dll1347protected: virtual __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::xsgetn(char *, __int64)

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z

MSVCP140.dll1307protected: virtual int __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::uflow(void)

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ

MSVCP140.dll1237protected: virtual __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::showmanyc(void)

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ

MSVCP140.dll1350protected: virtual __int64 __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::xsputn(char const *, __int64)

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z

MSVCP140.dll1277protected: virtual int __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::sync(void)

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ

MSVCP140.dll552public: virtual void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::_Lock(void)

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ

MSVCP140.dll639public: virtual void __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::_Unlock(void)

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ

MSVCP140.dll1246public: int __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::sputc(char)

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z

MSVCP140.dll128public: virtual __thiscall std::basic_iostream<char, struct std::char_traits<char> >::~basic_iostream<char, struct std::char_traits<char> >(void)

??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ

MSVCP140.dll137public: virtual __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::~basic_streambuf<char, struct std::char_traits<char> >(void)

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ

MSVCP140.dll586protected: char * __thiscall std::basic_streambuf<char, struct std::char_traits<char> >::_Pninc(void)

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ

MSVCP140.dll125public: virtual __thiscall std::basic_ios<char, struct std::char_traits<char> >::~basic_ios<char, struct std::char_traits<char> >(void)

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ

MSVCP140.dll652void __cdecl std::_Xbad_function_call(void)

?_Xbad_function_call@std@@YAXXZ

MSVCP140.dll23public: __thiscall std::basic_iostream<wchar_t, struct std::char_traits<wchar_t> >::basic_iostream<wchar_t, struct std::char_traits<wchar_t> >(class std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> > *)

??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

MSVCP140.dll16protected: __thiscall std::basic_ios<wchar_t, struct std::char_traits<wchar_t> >::basic_ios<wchar_t, struct std::char_traits<wchar_t> >(void)

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ

MSVCP140.dll290public: class std::basic_ostream<wchar_t, struct std::char_traits<wchar_t> > & __thiscall std::basic_ostream<wchar_t, struct std::char_traits<wchar_t> >::operator<<(unsigned int)

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z

MSVCP140.dll43public: __thiscall std::basic_ostream<wchar_t, struct std::char_traits<wchar_t> >::basic_ostream<wchar_t, struct std::char_traits<wchar_t> >(class std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> > *, bool)

??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z

MSVCP140.dll1360_Cnd_init_in_situ
MSVCP140.dll1357_Cnd_destroy_in_situ
MSVCP140.dll1355_Cnd_broadcast
MSVCP140.dll1365_Cnd_wait
MSVCP140.dll1242public: unsigned short __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::snextc(void)

?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ

MSVCP140.dll629void __cdecl std::_Throw_Cpp_error(int)

?_Throw_Cpp_error@std@@YAXH@Z

MSVCP140.dll651void __cdecl std::_Xbad_alloc(void)

?_Xbad_alloc@std@@YAXXZ

MSVCP140.dll655void __cdecl std::_Xout_of_range(char const *)

?_Xout_of_range@std@@YAXPBD@Z

MSVCP140.dll628void __cdecl std::_Throw_C_error(int)

?_Throw_C_error@std@@YAXH@Z

MSVCP140.dll654void __cdecl std::_Xlength_error(char const *)

?_Xlength_error@std@@YAXPBD@Z

MSVCP140.dll1409_Mtx_destroy_in_situ
MSVCP140.dll1413_Mtx_lock
MSVCP140.dll1412_Mtx_init_in_situ
MSVCP140.dll1358_Cnd_do_broadcast_at_thread_exit
MSVCP140.dll1460_Thrd_id
MSVCP140.dll1461_Thrd_join
MSVCP140.dll1417_Mtx_unlock
MSVCP140.dll127public: virtual __thiscall std::basic_ios<wchar_t, struct std::char_traits<wchar_t> >::~basic_ios<wchar_t, struct std::char_traits<wchar_t> >(void)

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ

MSVCP140.dll877protected: void __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::gbump(int)

?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z

MSVCP140.dll588protected: wchar_t * __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::_Pninc(void)

?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ

MSVCP140.dll139public: virtual __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::~basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >(void)

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ

MSVCP140.dll130public: virtual __thiscall std::basic_iostream<wchar_t, struct std::char_traits<wchar_t> >::~basic_iostream<wchar_t, struct std::char_traits<wchar_t> >(void)

??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ

MSVCP140.dll1248public: unsigned short __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::sputc(wchar_t)

?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z

MSVCP140.dll1310bool __cdecl std::uncaught_exception(void)

?uncaught_exception@std@@YA_NXZ

MSVCP140.dll1352protected: virtual __int64 __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::xsputn(wchar_t const *, __int64)

?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z

MSVCP140.dll641public: virtual void __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::_Unlock(void)

?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ

MSVCP140.dll554public: virtual void __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::_Lock(void)

?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ

MSVCP140.dll1279protected: virtual int __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::sync(void)

?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ

MSVCP140.dll1239protected: virtual __int64 __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::showmanyc(void)

?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ

MSVCP140.dll1309protected: virtual unsigned short __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::uflow(void)

?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ

MSVCP140.dll1349protected: virtual __int64 __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::xsgetn(wchar_t *, __int64)

?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z

MSVCP140.dll1207protected: virtual class std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> > * __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::setbuf(wchar_t *, __int64)

?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z

MSVCP140.dll1016protected: virtual void __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::imbue(class std::locale const &)

?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z

MSVCP140.dll582public: void __thiscall std::basic_ostream<wchar_t, struct std::char_traits<wchar_t> >::_Osfx(void)

?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ

MSVCP140.dll874public: class std::basic_ostream<wchar_t, struct std::char_traits<wchar_t> > & __thiscall std::basic_ostream<wchar_t, struct std::char_traits<wchar_t> >::flush(void)

?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ

MSVCP140.dll1251public: __int64 __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::sputn(wchar_t const *, __int64)

?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z

MSVCP140.dll1225public: void __thiscall std::basic_ios<wchar_t, struct std::char_traits<wchar_t> >::setstate(int, bool)

?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z

MSVCP140.dll53protected: __thiscall std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >(void)

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ

USERENV.dll3CreateEnvironmentBlock
VCRUNTIME140.dll53_except_handler4_common
VCRUNTIME140.dll29__current_exception_context
VCRUNTIME140.dll69memcmp
VCRUNTIME140.dll1_CxxThrowException
VCRUNTIME140.dll72memset
VCRUNTIME140.dll70memcpy
VCRUNTIME140.dll36__std_type_info_compare
VCRUNTIME140.dll71memmove
VCRUNTIME140.dll25__RTDynamicCast
VCRUNTIME140.dll28__current_exception
VCRUNTIME140.dll37__std_type_info_destroy_list
VCRUNTIME140.dll16__CxxFrameHandler3
VCRUNTIME140.dll34__std_exception_destroy
VCRUNTIME140.dll33__std_exception_copy
VCRUNTIME140.dll35__std_terminate
VCRUNTIME140.dll61_purecall
VCRUNTIME140.dll78wcschr
VCRUNTIME140.dll80wcsstr
VCRUNTIME140.dll79wcsrchr
api-ms-win-crt-heap-l1-1-0.dll8_callnewh
api-ms-win-crt-heap-l1-1-0.dll25malloc
api-ms-win-crt-heap-l1-1-0.dll24free
api-ms-win-crt-convert-l1-1-0.dll110wcstol
api-ms-win-crt-convert-l1-1-0.dll112wcstoll
api-ms-win-crt-convert-l1-1-0.dll71_wtoi
api-ms-win-crt-stdio-l1-1-0.dll11__stdio_common_vsnprintf_s
api-ms-win-crt-stdio-l1-1-0.dll47_fseeki64
api-ms-win-crt-stdio-l1-1-0.dll38_fileno
api-ms-win-crt-stdio-l1-1-0.dll13__stdio_common_vsprintf
api-ms-win-crt-stdio-l1-1-0.dll82_read
api-ms-win-crt-stdio-l1-1-0.dll55_get_osfhandle
api-ms-win-crt-stdio-l1-1-0.dll124fgetws
api-ms-win-crt-stdio-l1-1-0.dll99_wfopen_s
api-ms-win-crt-stdio-l1-1-0.dll__acrt_iob_func
api-ms-win-crt-stdio-l1-1-0.dll74_open_osfhandle
api-ms-win-crt-stdio-l1-1-0.dll135fseek
api-ms-win-crt-stdio-l1-1-0.dll98_wfopen
api-ms-win-crt-stdio-l1-1-0.dll116fclose
api-ms-win-crt-stdio-l1-1-0.dll22_chsize_s
api-ms-win-crt-stdio-l1-1-0.dll17__stdio_common_vswprintf
api-ms-win-crt-stdio-l1-1-0.dll119fflush
api-ms-win-crt-stdio-l1-1-0.dll107_write
api-ms-win-crt-stdio-l1-1-0.dll131fread
api-ms-win-crt-stdio-l1-1-0.dll7__stdio_common_vfwprintf
api-ms-win-crt-stdio-l1-1-0.dll23_close
api-ms-win-crt-runtime-l1-1-0.dll21_beginthreadex
api-ms-win-crt-runtime-l1-1-0.dll106terminate
api-ms-win-crt-runtime-l1-1-0.dll35_errno
api-ms-win-crt-runtime-l1-1-0.dll59_invalid_parameter_noinfo_noreturn
api-ms-win-crt-runtime-l1-1-0.dll58_invalid_parameter_noinfo
api-ms-win-crt-runtime-l1-1-0.dll41_get_errno
api-ms-win-crt-runtime-l1-1-0.dll57_initterm_e
api-ms-win-crt-runtime-l1-1-0.dll65_seh_filter_dll
api-ms-win-crt-runtime-l1-1-0.dll25_configure_narrow_argv
api-ms-win-crt-runtime-l1-1-0.dll53_initialize_narrow_environment
api-ms-win-crt-runtime-l1-1-0.dll54_initialize_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll62_register_onexit_function
api-ms-win-crt-runtime-l1-1-0.dll36_execute_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll31_crt_atexit
api-ms-win-crt-runtime-l1-1-0.dll23_cexit
api-ms-win-crt-runtime-l1-1-0.dll56_initterm
api-ms-win-crt-time-l1-1-0.dll48_time64
api-ms-win-crt-time-l1-1-0.dll36_localtime64_s
api-ms-win-crt-time-l1-1-0.dll31_gmtime64
api-ms-win-crt-string-l1-1-0.dll161wcscpy_s
api-ms-win-crt-string-l1-1-0.dll84_wcsnicmp
api-ms-win-crt-string-l1-1-0.dll74_wcsicmp
api-ms-win-crt-string-l1-1-0.dll166wcsncmp
api-ms-win-crt-string-l1-1-0.dll168wcsncpy_s
api-ms-win-crt-string-l1-1-0.dll177wmemmove_s
api-ms-win-crt-string-l1-1-0.dll123iswspace
api-ms-win-crt-string-l1-1-0.dll155towupper
api-ms-win-crt-string-l1-1-0.dll154towlower
api-ms-win-crt-string-l1-1-0.dll176wmemcpy_s
api-ms-win-crt-filesystem-l1-1-0.dll44_wfindfirst64i32
api-ms-win-crt-filesystem-l1-1-0.dll49_wfullpath
ntdll.dll1233RtlNtStatusToDosError
ntdll.dll459NtQueryDirectoryFile
WINHTTP.dll47WinHttpReceiveResponse
WINHTTP.dll20WinHttpCrackUrl
WINHTTP.dll53WinHttpSetOption
WINHTTP.dll40WinHttpQueryAuthSchemes
WINHTTP.dll44WinHttpReadData
WINHTTP.dll7WinHttpCloseHandle
WINHTTP.dll41WinHttpQueryDataAvailable
WINHTTP.dll42WinHttpQueryHeaders
WINHTTP.dll50WinHttpSendRequest
WINHTTP.dll55WinHttpSetTimeouts
WINHTTP.dll54WinHttpSetStatusCallback
WINHTTP.dll64WinHttpWriteData
WINHTTP.dll4WinHttpAddRequestHeaders
WINHTTP.dll38WinHttpOpenRequest
WINHTTP.dll28WinHttpGetIEProxyConfigForCurrentUser
WINHTTP.dll29WinHttpGetProxyForUrl
WINHTTP.dll8WinHttpConnect
WINHTTP.dll37WinHttpOpen
api-ms-win-crt-math-l1-1-0.dll162ceil
ordentry_vafunction_name
10x5850??0QosSyncWrapperConfig@QoS@@QAE@XZ
20x5b30??0ScenarioQosChangeEnumeration@QoS@@QAE@ABVQosSyncWrapperConfig@1@@Z
30x5b60??0ScenarioQosChangeEnumeration@QoS@@QAE@ABVQosSyncWrapperConfig@1@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
40x5ba0??0ScenarioQosChangeEnumeration@QoS@@QAE@ABVQosSyncWrapperConfig@1@PB_W1@Z
50x5950??0ScenarioQosClientPolicy@QoS@@QAE@ABVQosSyncWrapperConfig@1@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
60x5e20??0ScenarioQosDownloadFile@QoS@@QAE@ABVQosSyncWrapperConfig@1@_N@Z
70x5f10??0ScenarioQosDownloadSignature@QoS@@QAE@ABVQosSyncWrapperConfig@1@@Z
80x5a50??0ScenarioQosGetItemByPath@QoS@@QAE@ABVQosSyncWrapperConfig@1@@Z
90x6fc0??0ScenarioQosGetPlaceholderThumbnail@QoS@@QAE@XZ
100x65c0??0ScenarioQosGetSpecialFolderInfo@QoS@@QAE@ABVQosSyncWrapperConfig@1@@Z
110x6ee0??0ScenarioQosGetVersionHistory@QoS@@QAE@ABVQosSyncWrapperConfig@1@@Z
120x6c40??0ScenarioQosLockVault@QoS@@QAE@ABVQosSyncWrapperConfig@1@@Z
130x66a0??0ScenarioQosLogUpload@QoS@@QAE@XZ
140x67a0??0ScenarioQosLogUploadBatch@QoS@@QAE@XZ
150x5d00??0ScenarioQosPollingChangeEnumeration@QoS@@QAE@ABVQosSyncWrapperConfig@1@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
160x62d0??0ScenarioQosQuotaStatus@QoS@@QAE@ABVQosSyncWrapperConfig@1@@Z
170x6e00??0ScenarioQosRetrieveVaultKey@QoS@@QAE@ABVQosSyncWrapperConfig@1@@Z
180x5d40??0ScenarioQosSelectiveSyncEnumeration@QoS@@QAE@ABVQosSyncWrapperConfig@1@@Z
190x5c80??0ScenarioQosStartupChangeEnumeration@QoS@@QAE@ABVQosSyncWrapperConfig@1@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
200x5870??0ScenarioQosStorageProvisioning@QoS@@QAE@ABVQosSyncWrapperConfig@1@@Z
210x6d20??0ScenarioQosStoreVaultKey@QoS@@QAE@ABVQosSyncWrapperConfig@1@@Z
220x68a0??0ScenarioQosSubScopeMapping@QoS@@QAE@XZ
230x63b0??0ScenarioQosSyncVerification@QoS@@QAE@XZ
240x63d0??0ScenarioQosSyncVerification@QoS@@QAE@_N@Z
250x69a0??0ScenarioQosUploadCrossScopeCopy@QoS@@QAE@ABVQosSyncWrapperConfig@1@@Z
260x64e0??0ScenarioQosUploadExternalFile@QoS@@QAE@ABVQosSyncWrapperConfig@1@@Z
270x5ff0??0ScenarioQosUploadFile@QoS@@QAE@ABVQosSyncWrapperConfig@1@_N@Z
280x61e0??0ScenarioQosUploadMetadata@QoS@@QAE@ABVQosSyncWrapperConfig@1@_N1@Z
290x60e0??0ScenarioQosUploadTransferTest@QoS@@QAE@XZ
300x6a80??0ScenarioQosVaultInitialization@QoS@@QAE@ABVQosSyncWrapperConfig@1@@Z
310x6b60??0ScenarioQosVaultUnlock@QoS@@QAE@ABVQosSyncWrapperConfig@1@@Z
320x5cc0??0ScenarioQosWNSNotificationChangeEnumeration@QoS@@QAE@ABVQosSyncWrapperConfig@1@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
330x5bd0??1ScenarioQosChangeEnumeration@QoS@@UAE@XZ
340x59a0??1ScenarioQosClientPolicy@QoS@@UAE@XZ
350x5e60??1ScenarioQosDownloadFile@QoS@@UAE@XZ
360x5f40??1ScenarioQosDownloadSignature@QoS@@UAE@XZ
370x5a80??1ScenarioQosGetItemByPath@QoS@@UAE@XZ
380x7010??1ScenarioQosGetPlaceholderThumbnail@QoS@@UAE@XZ
390x65f0??1ScenarioQosGetSpecialFolderInfo@QoS@@UAE@XZ
400x6f10??1ScenarioQosGetVersionHistory@QoS@@UAE@XZ
410x6c70??1ScenarioQosLockVault@QoS@@UAE@XZ
420x66f0??1ScenarioQosLogUpload@QoS@@UAE@XZ
430x67f0??1ScenarioQosLogUploadBatch@QoS@@UAE@XZ
440x5bd0??1ScenarioQosPollingChangeEnumeration@QoS@@UAE@XZ
450x6300??1ScenarioQosQuotaStatus@QoS@@UAE@XZ
460x6e30??1ScenarioQosRetrieveVaultKey@QoS@@UAE@XZ
470x5d70??1ScenarioQosSelectiveSyncEnumeration@QoS@@UAE@XZ
480x5bd0??1ScenarioQosStartupChangeEnumeration@QoS@@UAE@XZ
490x58a0??1ScenarioQosStorageProvisioning@QoS@@UAE@XZ
500x6d50??1ScenarioQosStoreVaultKey@QoS@@UAE@XZ
510x68f0??1ScenarioQosSubScopeMapping@QoS@@UAE@XZ
520x6430??1ScenarioQosSyncVerification@QoS@@UAE@XZ
530x69d0??1ScenarioQosUploadCrossScopeCopy@QoS@@UAE@XZ
540x6510??1ScenarioQosUploadExternalFile@QoS@@UAE@XZ
550x6030??1ScenarioQosUploadFile@QoS@@UAE@XZ
560x6220??1ScenarioQosUploadMetadata@QoS@@UAE@XZ
570x6130??1ScenarioQosUploadTransferTest@QoS@@UAE@XZ
580x6ab0??1ScenarioQosVaultInitialization@QoS@@UAE@XZ
590x6b90??1ScenarioQosVaultUnlock@QoS@@UAE@XZ
600x5bd0??1ScenarioQosWNSNotificationChangeEnumeration@QoS@@UAE@XZ
610x118f0?AdjustLogRotationParameters@@YGXIIIP6GXPB_W_J@Z@Z
620x5820?DefaultOrMostSevereErrorTypeRecorded@ScenarioQosWrapper@QoS@@QAE?AW4Type@ErrorType@TelemetryConstants@@W4345@@Z
630x11810?ForceLogRotationAndUpload@@YGX_NPB_W0@Z
640x11a30?FreeLogUploaderSessionId@@YGXPAPA_W@Z
650x5840?GetApiName@ScenarioQosWrapper@QoS@@IAEPB_WXZ
660x11990?GetLogUploaderSessionId@@YGJPAPA_W@Z
670x5810?GetMostSevereErrorCodeRecorded@ScenarioQosWrapper@QoS@@QAEHXZ
680x5800?GetMostSevereErrorTypeRecorded@ScenarioQosWrapper@QoS@@QAE?AW4Type@ErrorType@TelemetryConstants@@XZ
690x57f0?GetScenarioName@ScenarioQosWrapper@QoS@@QBEPB_WXZ
700x11730?InitializeLogUploader@@YGXPB_W@Z
710x11880?LogUploaderOnLogRotatedHandler@@YGXPB_W_J@Z
720x11940?SetLogUploaderPauseState@@YGX_N@Z
730x11af0?ShutdownLogUploader@@YGXXZ
740x11ab0?UpdateLogUploaderRingSettings@@YGXXZ
750x11a60?UpdateLogUploaderSettings@@YGXPB_W@Z
module_nameLogUploader.dll
flags0
timestamp2096-11-07 11:01:59
version0.0
ordinal_base1
nFunctions75
nNames75
Names(75)0x7dd14
Functions(75)0x7dbe8
NameOrdinals(75)0x7de40

StringTable 040904b0

CompanyNameMicrosoft Corporation
FileDescriptionOneDrive Sync LogUploader Library
InternalNameLogUploader.dll
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameLogUploader.dll
ProductNameMicrosoft OneDrive
FileVersion20.052.0311.0002
ProductVersion20.052.0311.0002
SpecialBuildb/build/bf4a5933-4113-e6b8-7744-ede4eebe2960

VS_FIXEDFILEINFO

FileVersion20.52.311.2
ProductVersion20.52.311.2
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0x20
FileOS4
FileType1
FileSubtype0

Signers (1)

issuer: /C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=Microsoft Code Signing PCA 2010
serial: 33000002C2813CEF6A1E0924010000000002C2

Certificates (2)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:00:02:c2:81:3c:ef:6a:1e:09:24:01:00:00:00:00:02:c2
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA 2010
        Validity
            Not Before: May  2 21:25:29 2019 GMT
            Not After : May  2 21:25:29 2020 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Corporation
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ba:73:09:2d:a5:0a:58:f2:76:c1:ba:7e:98:58:
                    2f:21:9e:74:a2:29:14:17:e4:36:c2:2b:10:11:fe:
                    ff:e8:c3:07:88:bd:3b:0a:88:b7:b7:0e:5e:ff:43:
                    bc:dc:9e:5e:14:e2:2a:0f:08:24:b7:ea:be:fb:d2:
                    14:c3:9d:60:ec:02:3a:ce:7c:a7:17:05:9c:d8:49:
                    96:11:74:59:87:42:b3:cd:05:eb:aa:e6:66:1a:77:
                    93:df:d6:a6:d2:ba:e7:48:64:b8:4a:06:b2:1f:45:
                    73:0d:d0:aa:fe:9a:3f:aa:08:e1:12:5f:46:cf:16:
                    f9:c6:2c:1e:d3:ff:04:3f:a6:96:dd:aa:66:08:5c:
                    5b:a5:d7:1e:14:b5:a8:dc:07:27:7c:76:9f:39:42:
                    16:74:54:8d:eb:bb:e7:25:9b:7d:f6:6b:3b:ca:80:
                    82:4a:09:d0:77:85:7b:93:f0:69:32:89:d0:8c:db:
                    c5:c5:dc:02:f3:57:f7:64:ad:14:7e:18:09:24:3b:
                    0a:77:fe:2c:d4:2a:e8:96:81:93:17:e7:03:0c:7e:
                    6d:99:c3:5b:5e:fe:f9:ae:3e:cb:19:54:ab:fd:13:
                    12:52:58:cb:90:53:fa:24:1f:46:70:ce:a9:37:22:
                    50:77:ec:dc:f5:7d:48:32:9b:21:88:fa:91:28:76:
                    a3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Extended Key Usage: 
                1.3.6.1.4.1.311.10.3.21, Code Signing
            X509v3 Subject Key Identifier: 
                4C:02:C4:7A:66:81:C7:29:A5:61:49:B2:59:04:19:3A:3C:BF:11:8F
            X509v3 Subject Alternative Name: 
                DirName:/OU=Microsoft Operations Puerto Rico/serialNumber=229861\+454108
            X509v3 Authority Key Identifier: 
                E6:FC:5F:7B:BB:22:00:58:E4:72:4E:B5:F4:21:74:23:32:E6:EF:AC
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicCodSigPCA_2010-07-06.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicCodSigPCA_2010-07-06.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        58:5c:6b:28:ac:cb:a2:0c:c5:bd:b2:9c:c2:05:ab:dd:6a:9a:
        08:ae:ed:61:0d:49:2c:9b:92:c9:12:17:7b:a8:d9:e1:88:12:
        2e:9d:e8:f2:d8:38:14:cd:20:89:7d:bf:c1:78:a0:b6:07:4e:
        c1:e2:62:40:27:13:78:d8:76:90:0b:63:00:9d:94:51:4f:64:
        23:c2:00:3a:61:2b:78:a9:a7:f3:4c:18:f7:55:d3:3a:35:2a:
        da:12:18:46:a2:09:97:3d:bf:50:b1:f0:5e:1f:9c:ef:de:81:
        ac:ed:81:d8:67:ba:70:f9:fa:46:7f:79:69:38:75:78:ed:41:
        77:52:7c:74:ed:00:70:b2:dc:7a:58:4e:b3:a8:17:b9:a7:aa:
        88:e8:88:16:c4:47:41:c9:88:3d:01:b0:7a:29:f9:d5:4b:56:
        86:dc:5f:0d:ae:f5:3d:51:66:d2:c3:a6:12:42:a6:d2:72:c2:
        1c:c9:4d:d1:d6:d5:e2:49:d4:06:ab:7b:1f:71:14:14:28:b8:
        14:b2:15:fe:48:bc:bd:b4:32:c5:3e:69:37:ef:73:83:66:ae:
        fb:a1:50:a2:ff:3c:9b:43:91:ea:21:99:4d:91:f1:a0:f4:dc:
        22:9c:37:6e:e6:b3:f8:44:9c:fd:61:e9:af:e8:87:0d:3c:08:
        48:62:24:1e

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0c:52:4c:00:00:00:00:00:03
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Root Certificate Authority 2010
        Validity
            Not Before: Jul  6 20:40:17 2010 GMT
            Not After : Jul  6 20:50:17 2025 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=Microsoft Code Signing PCA 2010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e9:0e:64:50:79:67:b5:c4:e3:fd:09:00:4c:9e:
                    94:ac:f7:56:68:ea:44:d8:cf:c5:58:4f:a9:a5:76:
                    7c:6d:45:ba:d3:39:92:b4:a4:1e:f9:f9:65:82:e4:
                    17:d2:8f:fd:44:9c:08:e8:65:93:ce:2c:55:84:bf:
                    7d:08:e3:2e:2b:a8:41:2b:18:b7:a2:4b:6e:49:4c:
                    6b:15:07:de:d1:d2:c2:89:1e:71:94:cd:b5:7f:4b:
                    b4:af:08:d8:cc:88:d6:6b:17:94:3a:93:ce:26:3f:
                    ec:e6:fe:34:98:57:d5:1d:5d:49:f6:b2:2a:2e:d5:
                    85:bb:59:3f:f8:90:b4:2b:83:74:ca:2b:b3:3b:46:
                    e3:f0:46:49:c1:17:66:54:c9:1c:bd:1d:c4:55:62:
                    57:72:f8:67:b9:25:20:34:de:5d:a6:a5:95:5e:ab:
                    28:80:cd:d5:b2:9e:e5:03:b5:63:d3:b2:14:c8:c1:
                    c8:8a:26:0a:59:7f:07:ec:ff:0e:ed:80:12:35:4c:
                    12:a6:be:52:5b:f5:a6:da:e0:8b:0b:48:77:d6:85:
                    47:d5:10:b9:c6:e8:aa:ee:8b:6a:2d:05:5c:60:c6:
                    b4:2a:5b:9c:23:1c:5f:45:e3:1a:14:1e:6f:37:cb:
                    19:33:80:6a:89:4d:a3:6a:66:63:78:93:d5:30:cf:
                    95:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            1.3.6.1.4.1.311.21.1: 
                ...
            X509v3 Subject Key Identifier: 
                E6:FC:5F:7B:BB:22:00:58:E4:72:4E:B5:F4:21:74:23:32:E6:EF:AC
            1.3.6.1.4.1.311.20.2: 
                .
.S.u.b.C.A
            X509v3 Key Usage: 
                Digital Signature, Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Authority Key Identifier: 
                D5:F6:56:CB:8F:E8:A2:5C:62:68:D1:3D:94:90:5B:D7:CE:9A:18:C4
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.311.46.3
                  CPS: http://www.microsoft.com/PKI/docs/CPS/default.htm
                  User Notice:
                    Explicit Text:  
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        1a:74:ef:57:4f:29:7b:c4:16:85:78:b8:50:d3:22:fc:09:9d:
        ac:82:97:f8:34:ff:2a:2c:97:95:12:e5:e4:bf:cf:bf:93:c8:
        e3:34:a9:db:81:b8:dc:1e:00:be:d2:35:6f:af:e5:7f:79:95:
        77:e5:02:d4:f1:eb:d8:cd:4e:1e:1b:61:a2:c2:5a:23:1a:f0:
        8c:a8:62:51:45:67:08:e3:3f:3c:1e:93:f8:30:85:17:c8:39:
        40:a6:d7:0e:b3:21:29:e5:a5:a1:69:8c:22:93:cc:74:98:e7:
        a1:47:43:f2:53:ac:c0:0f:30:69:7f:fe:d2:25:20:6d:6f:61:
        d3:df:07:d5:d9:72:00:2c:69:86:76:3d:51:db:a6:39:48:c9:
        37:61:6d:07:dd:53:19:cb:a7:d6:61:c2:bf:e2:83:ab:0f:e0:
        6b:9b:95:d6:7d:28:51:b0:89:4a:51:a4:9a:6c:c8:b7:1f:4a:
        1a:0e:69:a9:d7:dc:c1:7e:d1:49:70:aa:b6:ad:bb:72:47:63:
        17:fa:a6:d6:a2:a6:86:ec:a8:10:44:9b:63:b6:b2:69:89:06:
        c7:46:86:7a:18:3f:e8:c5:1d:21:d5:7b:f9:02:23:2d:c5:41:
        cb:bf:1d:4c:c8:16:ef:b1:9c:7f:fc:22:4b:49:8a:6e:15:e3:
        a6:7f:76:5b:d1:53:79:91:85:9d:d5:d2:db:3d:73:35:f3:3c:
        ae:54:b2:52:47:6a:c0:aa:13:95:d2:8e:11:da:99:67:5e:32:
        8c:fb:37:85:d1:dc:75:85:9c:87:c6:5a:57:85:c2:bf:dd:0d:
        8f:8c:9b:2d:eb:b4:ee:cf:27:d3:b5:5e:69:fa:a4:16:04:01:
        a7:24:67:73:cf:4d:4f:b6:de:05:56:97:7a:f7:e9:52:4d:f4:
        77:05:4f:85:c6:d8:0b:f1:8e:ed:42:09:d1:0d:76:e3:23:56:
        78:22:26:36:be:ca:b1:8c:6e:aa:1d:e4:85:da:47:33:62:8f:
        a4:c9:91:33:5f:71:1e:40:af:98:65:c9:22:e8:42:21:25:8a:
        1c:2d:60:d9:37:89:41:89:2a:16:0f:d7:61:3c:94:68:60:52:
        ef:d6:47:99:a0:80:40:ee:15:81:77:3e:9c:e0:53:18:1a:50:
        1d:38:95:9b:1e:66:33:13:27:39:17:78:87:36:ce:4e:c3:5f:
        b2:f5:3d:47:53:b6:e0:e5:db:0b:61:3d:2a:d7:92:2c:ce:37:
        5a:3e:40:42:31:a4:1f:10:08:c2:56:9c:bf:24:5d:51:02:9d:
        6a:79:d2:17:d3:da:c1:94:8e:07:7b:25:71:44:ab:06:6a:e6:
        d4:c6:df:23:9a:96:75:c5

undefined method `first' for #

offsetsizetypecomment
0587776DLL11/07/2096 11:01:59#
15c115HTM#
8f8008552PKCS7Authenticode Signature#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0x88d20