filename148797_xgZkx9_kdmapperHack.exe
size18899456 (0x1206200)
md5c0a56ac330b0603f4d73a0f19af6ba2b
typePE32+ executable (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0
blocks_in_file0
num_relocs0
header_paragraphs0
min_extra_paragraphs0
max_extra_paragraphs0
ss0
sp0
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x40

PE Header

SignaturePE
Machine0x8664
NumberOfSections8
TimeDateStamp0x5f627dd2
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x23
Magic0x20b
LinkerVersion14.0
SizeOfCode0xc0e00
SizeOfInitializedData0x2ec00
SizeOfUninitializedData0
AddressOfEntryPoint0x2196066
BaseOfCode0x1000
ImageBase0x140000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x2379000
SizeOfHeaders0x400
CheckSum0
Subsystem2
DllCharacteristics0x120
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000xc0d5a0R-X CODE
.data0xc20000x27d900RW- IDATA UDATA
.pdata0xea0000x672c0R-- IDATA
ADM00xf10000x1b80R-- IDATA
.tls0xf200090x200RW- IDATA
ADM10xf30000x107ea0b0R-X CODE IDATA
ADM20x11720000x12058540x1205a00R-X CODE IDATA
.rsrc0x23780000x1b10x200R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x11990400x1f4
RESOURCE0x23780000x1b1
EXCEPTION0x236dcf00x9b64
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0x11acbf80x28
LOAD_CONFIG0x236dc500x94
Bound_IAT00
IAT0x21df0000xfd0
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x1400f20000x1400f20080x1400e9cdc000
typenamesizecp
MANIFEST#13450
module_namehintordfunction_name
api-ms-win-crt-math-l1-1-0.dll__setusermatherr
api-ms-win-crt-math-l1-1-0.dllcosf
api-ms-win-crt-math-l1-1-0.dllldexp
api-ms-win-crt-math-l1-1-0.dllsinf
api-ms-win-crt-locale-l1-1-0.dll_configthreadlocale
api-ms-win-crt-filesystem-l1-1-0.dll_unlock_file
api-ms-win-crt-filesystem-l1-1-0.dll_lock_file
api-ms-win-crt-time-l1-1-0.dll_time64
api-ms-win-crt-stdio-l1-1-0.dllungetc
api-ms-win-crt-stdio-l1-1-0.dll_get_stream_buffer_pointers
api-ms-win-crt-stdio-l1-1-0.dllfputwc
api-ms-win-crt-stdio-l1-1-0.dllfgetwc
api-ms-win-crt-stdio-l1-1-0.dll_set_fmode
api-ms-win-crt-stdio-l1-1-0.dllfwrite
api-ms-win-crt-stdio-l1-1-0.dll__p__commode
api-ms-win-crt-stdio-l1-1-0.dllfopen_s
api-ms-win-crt-stdio-l1-1-0.dllungetwc
api-ms-win-crt-stdio-l1-1-0.dllsetvbuf
api-ms-win-crt-stdio-l1-1-0.dllfgetc
api-ms-win-crt-stdio-l1-1-0.dllfread
api-ms-win-crt-stdio-l1-1-0.dllfgetpos
api-ms-win-crt-stdio-l1-1-0.dll__stdio_common_vsnwprintf_s
api-ms-win-crt-stdio-l1-1-0.dll_fseeki64
api-ms-win-crt-stdio-l1-1-0.dllfflush
api-ms-win-crt-stdio-l1-1-0.dllfputc
api-ms-win-crt-stdio-l1-1-0.dllfclose
api-ms-win-crt-stdio-l1-1-0.dllfseek
api-ms-win-crt-stdio-l1-1-0.dllfsetpos
api-ms-win-crt-stdio-l1-1-0.dll__stdio_common_vswprintf_s
USER32.dllBringWindowToTop
USER32.dllMessageBoxW
USER32.dllBeginPaint
USER32.dllGetMessageW
USER32.dllwsprintfW
USER32.dllCreateWindowExW
USER32.dllGetWindowRect
USER32.dllDefWindowProcW
USER32.dllEndPaint
USER32.dllDestroyWindow
USER32.dllUpdateWindow
USER32.dllSetTimer
USER32.dllCloseWindow
USER32.dllGetActiveWindow
USER32.dllLoadIconW
USER32.dllKillTimer
USER32.dllDispatchMessageW
USER32.dllGetSystemMetrics
USER32.dllSetWindowLongPtrW
USER32.dllLoadCursorW
USER32.dllShowWindow
USER32.dllRedrawWindow
USER32.dllGetForegroundWindow
USER32.dllEnumDisplayDevicesW
USER32.dllRegisterClassExW
USER32.dllTranslateMessage
api-ms-win-crt-utility-l1-1-0.dllrand
api-ms-win-crt-utility-l1-1-0.dllsrand
GDI32.dllDeleteObject
GDI32.dllGetStockObject
GDI32.dllSelectObject
GDI32.dllDeleteDC
GDI32.dllCreateCompatibleDC
GDI32.dllBitBlt
GDI32.dllCreateCompatibleBitmap
MSVCP140.dll_Cnd_init
MSVCP140.dllprotected: virtual int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sync(void) __ptr64

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

MSVCP140.dllpublic: __cdecl std::_Lockit::_Lockit(int) __ptr64

??0_Lockit@std@@QEAA@H@Z

MSVCP140.dll_Mtx_destroy
MSVCP140.dllprivate: static void __cdecl std::locale::_Locimp::_Locimp_Addfac(class std::locale::_Locimp * __ptr64, class std::locale::facet * __ptr64, unsigned __int64)

?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z

MSVCP140.dllvoid __cdecl std::_Throw_Cpp_error(int)

?_Throw_Cpp_error@std@@YAXH@Z

MSVCP140.dllvoid __cdecl std::_Xbad_alloc(void)

?_Xbad_alloc@std@@YAXXZ

MSVCP140.dllpublic: class std::locale __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::getloc(void)const __ptr64

?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ

MSVCP140.dllprotected: virtual __int64 __cdecl std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::xsputn(wchar_t const * __ptr64, __int64) __ptr64

?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z

MSVCP140.dllpublic: static class std::locale::id std::codecvt<wchar_t, char, struct _Mbstatet>::id

?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A

MSVCP140.dllpublic: bool __cdecl std::basic_istream<wchar_t, struct std::char_traits<wchar_t> >::_Ipfx(bool) __ptr64

?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z

MSVCP140.dllbool __cdecl std::uncaught_exception(void)

?uncaught_exception@std@@YA_NXZ

MSVCP140.dllunsigned int __cdecl std::_Random_device(void)

?_Random_device@std@@YAIXZ

MSVCP140.dll_Mtx_unlock
MSVCP140.dllprotected: virtual class std::basic_streambuf<char, struct std::char_traits<char> > * __ptr64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::setbuf(char * __ptr64, __int64) __ptr64

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z

MSVCP140.dllpublic: __cdecl std::codecvt<wchar_t, char, struct _Mbstatet>::codecvt<wchar_t, char, struct _Mbstatet>(unsigned __int64) __ptr64

??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z

MSVCP140.dllpublic: virtual class std::_Facet_base * __ptr64 __cdecl std::locale::facet::_Decref(void) __ptr64

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ

MSVCP140.dllpublic: virtual __cdecl std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::~basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >(void) __ptr64

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

MSVCP140.dllprotected: virtual int __cdecl std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::sync(void) __ptr64

?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ

MSVCP140.dll_Thrd_detach
MSVCP140.dllprotected: void __cdecl std::ios_base::_Init(void) __ptr64

?_Init@ios_base@std@@IEAAXXZ

MSVCP140.dll_Thrd_join
MSVCP140.dllvoid __cdecl std::_Xlength_error(char const * __ptr64)

?_Xlength_error@std@@YAXPEBD@Z

MSVCP140.dllvoid __cdecl std::_Xbad_function_call(void)

?_Xbad_function_call@std@@YAXXZ

MSVCP140.dllpublic: class std::basic_istream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_istream<char, struct std::char_traits<char> >::read(char * __ptr64, __int64) __ptr64

?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z

MSVCP140.dllprotected: virtual unsigned short __cdecl std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::uflow(void) __ptr64

?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ

MSVCP140.dllvoid __cdecl std::_Xout_of_range(char const * __ptr64)

?_Xout_of_range@std@@YAXPEBD@Z

MSVCP140.dllpublic: static unsigned __int64 __cdecl std::codecvt<wchar_t, char, struct _Mbstatet>::_Getcat(class std::locale::facet const * __ptr64 * __ptr64, class std::locale const * __ptr64)

?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

MSVCP140.dllpublic: class std::locale __cdecl std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::getloc(void)const __ptr64

?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ

MSVCP140.dllpublic: __cdecl std::basic_iostream<char, struct std::char_traits<char> >::basic_iostream<char, struct std::char_traits<char> >(class std::basic_streambuf<char, struct std::char_traits<char> > * __ptr64) __ptr64

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

MSVCP140.dllprotected: virtual int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::uflow(void) __ptr64

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

MSVCP140.dllprotected: virtual __cdecl std::codecvt<wchar_t, char, struct _Mbstatet>::~codecvt<wchar_t, char, struct _Mbstatet>(void) __ptr64

??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ

MSVCP140.dllpublic: virtual void __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::_Unlock(void) __ptr64

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

MSVCP140.dllpublic: class std::fpos<struct _Mbstatet> __cdecl std::basic_istream<char, struct std::char_traits<char> >::tellg(void) __ptr64

?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ

MSVCP140.dllpublic: void __cdecl std::ios_base::clear(int, bool) __ptr64

?clear@ios_base@std@@QEAAXH_N@Z

MSVCP140.dll_Cnd_wait
MSVCP140.dllprotected: virtual void __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::imbue(class std::locale const & __ptr64) __ptr64

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z

MSVCP140.dllpublic: __cdecl std::_Lockit::~_Lockit(void) __ptr64

??1_Lockit@std@@QEAA@XZ

MSVCP140.dll_Cnd_destroy
MSVCP140.dllprivate: static class std::locale::_Locimp * __ptr64 __cdecl std::locale::_Locimp::_New_Locimp(class std::locale::_Locimp const & __ptr64)

?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z

MSVCP140.dllvoid __cdecl std::_Throw_C_error(int)

?_Throw_C_error@std@@YAXH@Z

MSVCP140.dllpublic: virtual __cdecl std::ios_base::~ios_base(void) __ptr64

??1ios_base@std@@UEAA@XZ

MSVCP140.dllstruct std::_Smanip<__int64> __cdecl std::setw(__int64)

?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z

MSVCP140.dllprotected: __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::basic_streambuf<char, struct std::char_traits<char> >(void) __ptr64

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

MSVCP140.dll_Mtx_init
MSVCP140.dllpublic: __cdecl std::basic_iostream<wchar_t, struct std::char_traits<wchar_t> >::basic_iostream<wchar_t, struct std::char_traits<wchar_t> >(class std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> > * __ptr64) __ptr64

??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

MSVCP140.dllprotected: virtual __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::xsgetn(char * __ptr64, __int64) __ptr64

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z

MSVCP140.dll_Thrd_yield
MSVCP140.dllpublic: char __cdecl std::basic_ios<char, struct std::char_traits<char> >::widen(char)const __ptr64

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z

MSVCP140.dllstruct _iobuf * __ptr64 __cdecl std::_Fiopen(char const * __ptr64, int, int)

?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z

MSVCP140.dllpublic: static class std::locale::id std::codecvt<char, char, struct _Mbstatet>::id

?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A

MSVCP140.dll_Thrd_id
MSVCP140.dll__int64 const std::_BADOFF

?_BADOFF@std@@3_JB

MSVCP140.dll_Cnd_do_broadcast_at_thread_exit
MSVCP140.dllpublic: virtual void __cdecl std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::_Lock(void) __ptr64

?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ

MSVCP140.dllprotected: __cdecl std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >(void) __ptr64

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

MSVCP140.dll_Mtx_lock
MSVCP140.dllpublic: virtual void __cdecl std::locale::facet::_Incref(void) __ptr64

?_Incref@facet@locale@std@@UEAAXXZ

MSVCP140.dllpublic: unsigned short __cdecl std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::sbumpc(void) __ptr64

?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ

MSVCP140.dllvoid __cdecl std::_Xinvalid_argument(char const * __ptr64)

?_Xinvalid_argument@std@@YAXPEBD@Z

MSVCP140.dllpublic: class std::basic_ostream<wchar_t, struct std::char_traits<wchar_t> > & __ptr64 __cdecl std::basic_ostream<wchar_t, struct std::char_traits<wchar_t> >::operator<<(unsigned short) __ptr64

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z

MSVCP140.dllprivate: static class std::locale::_Locimp * __ptr64 __cdecl std::locale::_Init(bool)

?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

MSVCP140.dllprotected: virtual __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::showmanyc(void) __ptr64

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ

MSVCP140.dllpublic: wchar_t __cdecl std::basic_ios<wchar_t, struct std::char_traits<wchar_t> >::widen(char)const __ptr64

?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z

MSVCP140.dllpublic: unsigned short __cdecl std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::snextc(void) __ptr64

?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ

MSVCP140.dllprivate: static class std::locale::_Locimp * __ptr64 __cdecl std::locale::_Getgloballocale(void)

?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

MSVCP140.dllprivate: static int std::locale::id::_Id_cnt

?_Id_cnt@id@locale@std@@0HA

MSVCP140.dllpublic: unsigned short __cdecl std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::sputc(wchar_t) __ptr64

?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z

MSVCP140.dllprotected: virtual __int64 __cdecl std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::showmanyc(void) __ptr64

?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ

MSVCP140.dllpublic: virtual __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::~basic_streambuf<char, struct std::char_traits<char> >(void) __ptr64

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ

MSVCP140.dllstruct _iobuf * __ptr64 __cdecl std::_Fiopen(wchar_t const * __ptr64, int, int)

?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z

MSVCP140.dllpublic: class std::basic_istream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_istream<char, struct std::char_traits<char> >::seekg(__int64, int) __ptr64

?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z

MSVCP140.dllprotected: virtual void __cdecl std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::imbue(class std::locale const & __ptr64) __ptr64

?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z

MSVCP140.dllprotected: virtual __int64 __cdecl std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::xsgetn(wchar_t * __ptr64, __int64) __ptr64

?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z

MSVCP140.dll_Thrd_start
MSVCP140.dllpublic: virtual void __cdecl std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::_Unlock(void) __ptr64

?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ

MSVCP140.dllpublic: int __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::sputc(char) __ptr64

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z

MSVCP140.dllprotected: __cdecl std::ios_base::ios_base(void) __ptr64

??0ios_base@std@@IEAA@XZ

MSVCP140.dllpublic: class std::_Yarn<char> & __ptr64 __cdecl std::_Yarn<char>::operator=(char const * __ptr64) __ptr64

??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z

MSVCP140.dllprotected: virtual class std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> > * __ptr64 __cdecl std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::setbuf(wchar_t * __ptr64, __int64) __ptr64

?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z

MSVCP140.dll_Cnd_signal
MSVCP140.dllpublic: static unsigned __int64 __cdecl std::codecvt<char, char, struct _Mbstatet>::_Getcat(class std::locale::facet const * __ptr64 * __ptr64, class std::locale const * __ptr64)

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

MSVCP140.dllpublic: virtual void __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::_Lock(void) __ptr64

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

MSVCP140.dllpublic: class std::basic_ostream<wchar_t, struct std::char_traits<wchar_t> > & __ptr64 __cdecl std::basic_ostream<wchar_t, struct std::char_traits<wchar_t> >::flush(void) __ptr64

?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ

MSVCP140.dllpublic: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::operator<<(int) __ptr64

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z

MSVCP140.dllpublic: unsigned short __cdecl std::basic_streambuf<wchar_t, struct std::char_traits<wchar_t> >::sgetc(void) __ptr64

?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ

MSVCP140.dllprotected: virtual __int64 __cdecl std::basic_streambuf<char, struct std::char_traits<char> >::xsputn(char const * __ptr64, __int64) __ptr64

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z

MSVCP140.dllpublic: class std::basic_ostream<char, struct std::char_traits<char> > & __ptr64 __cdecl std::basic_ostream<char, struct std::char_traits<char> >::flush(void) __ptr64

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

SHLWAPI.dll12
api-ms-win-crt-heap-l1-1-0.dllmalloc
api-ms-win-crt-heap-l1-1-0.dll_callnewh
api-ms-win-crt-heap-l1-1-0.dll_set_new_mode
api-ms-win-crt-heap-l1-1-0.dllfree
ADVAPI32.dllRegDeleteValueW
ADVAPI32.dllOpenSCManagerW
ADVAPI32.dllCloseServiceHandle
ADVAPI32.dllRegQueryValueExW
ADVAPI32.dllControlService
ADVAPI32.dllCryptAcquireContextW
ADVAPI32.dllRegCreateKeyW
ADVAPI32.dllQueryServiceStatus
ADVAPI32.dllRegOpenKeyW
ADVAPI32.dllCryptReleaseContext
ADVAPI32.dllRegSetValueExW
ADVAPI32.dllRegDeleteKeyW
ADVAPI32.dllOpenServiceW
ADVAPI32.dllOpenProcessToken
ADVAPI32.dllRegCloseKey
ADVAPI32.dllAdjustTokenPrivileges
ADVAPI32.dllCryptGenRandom
ADVAPI32.dllRegOpenKeyExW
ADVAPI32.dllGetUserNameW
api-ms-win-crt-string-l1-1-0.dllwcscat
api-ms-win-crt-string-l1-1-0.dllstrlen
api-ms-win-crt-string-l1-1-0.dlltolower
api-ms-win-crt-string-l1-1-0.dllwcslen
api-ms-win-crt-string-l1-1-0.dllwcscpy
api-ms-win-crt-string-l1-1-0.dllstrcpy_s
api-ms-win-crt-string-l1-1-0.dllwcscpy_s
api-ms-win-crt-string-l1-1-0.dll_wcslwr_s
api-ms-win-crt-string-l1-1-0.dll_wcsnicmp
api-ms-win-crt-string-l1-1-0.dll_stricmp
api-ms-win-crt-string-l1-1-0.dllisalnum
api-ms-win-crt-string-l1-1-0.dllwcscat_s
api-ms-win-crt-string-l1-1-0.dllwcscmp
api-ms-win-crt-runtime-l1-1-0.dll_invalid_parameter_noinfo_noreturn
api-ms-win-crt-runtime-l1-1-0.dll_initialize_wide_environment
api-ms-win-crt-runtime-l1-1-0.dll_seh_filter_exe
api-ms-win-crt-runtime-l1-1-0.dll_register_onexit_function
api-ms-win-crt-runtime-l1-1-0.dllterminate
api-ms-win-crt-runtime-l1-1-0.dllexit
api-ms-win-crt-runtime-l1-1-0.dll_configure_wide_argv
api-ms-win-crt-runtime-l1-1-0.dll_initterm
api-ms-win-crt-runtime-l1-1-0.dll_set_app_type
api-ms-win-crt-runtime-l1-1-0.dll_errno
api-ms-win-crt-runtime-l1-1-0.dll_register_thread_local_exe_atexit_callback
api-ms-win-crt-runtime-l1-1-0.dll_initterm_e
api-ms-win-crt-runtime-l1-1-0.dll_crt_atexit
api-ms-win-crt-runtime-l1-1-0.dll_cexit
api-ms-win-crt-runtime-l1-1-0.dll_initialize_onexit_table
api-ms-win-crt-runtime-l1-1-0.dll_exit
api-ms-win-crt-runtime-l1-1-0.dll_get_wide_winmain_command_line
api-ms-win-crt-runtime-l1-1-0.dll_wassert
api-ms-win-crt-runtime-l1-1-0.dll_c_exit
KERNEL32.dllSetEvent
KERNEL32.dllGetProcessHeap
KERNEL32.dllGetFileSize
KERNEL32.dllGetVersionExW
KERNEL32.dllTlsGetValue
KERNEL32.dllQueryPerformanceCounter
KERNEL32.dllVirtualAlloc
KERNEL32.dllResetEvent
KERNEL32.dllGetTickCount64
KERNEL32.dllOpenProcess
KERNEL32.dllReadFile
KERNEL32.dllRtlLookupFunctionEntry
KERNEL32.dllInitializeSListHead
KERNEL32.dllRtlCaptureContext
KERNEL32.dllCreateProcessW
KERNEL32.dllGetProcAddress
KERNEL32.dllDeleteFileW
KERNEL32.dllGetCurrentThreadId
KERNEL32.dllGetComputerNameW
KERNEL32.dllVirtualFree
KERNEL32.dllFreeLibrary
KERNEL32.dllWriteFile
KERNEL32.dllRtlVirtualUnwind
KERNEL32.dllUnhandledExceptionFilter
KERNEL32.dllLeaveCriticalSection
KERNEL32.dllGetSystemDefaultLocaleName
KERNEL32.dllHeapReAlloc
KERNEL32.dllVerSetConditionMask
KERNEL32.dllFileTimeToSystemTime
KERNEL32.dllCreateFileW
KERNEL32.dllLocalFree
KERNEL32.dllSetCurrentDirectoryW
KERNEL32.dllDeleteCriticalSection
KERNEL32.dllGetSystemWindowsDirectoryW
KERNEL32.dllGetProcessVersion
KERNEL32.dllGetProcessTimes
KERNEL32.dllLoadLibraryExW
KERNEL32.dllIsProcessorFeaturePresent
KERNEL32.dllGetModuleFileNameW
KERNEL32.dllGetLastError
KERNEL32.dllHeapAlloc
KERNEL32.dllCloseHandle
KERNEL32.dllIsDebuggerPresent
KERNEL32.dllFindNextFileW
KERNEL32.dllTlsAlloc
KERNEL32.dllVerifyVersionInfoW
KERNEL32.dllGetSystemDirectoryW
KERNEL32.dllGetModuleHandleW
KERNEL32.dllSetLastError
KERNEL32.dllGetPhysicallyInstalledSystemMemory
KERNEL32.dllSetFilePointer
KERNEL32.dllRtlRestoreContext
KERNEL32.dllGetStartupInfoW
KERNEL32.dllFindClose
KERNEL32.dllGetCurrentProcessId
KERNEL32.dllTerminateThread
KERNEL32.dllHeapFree
KERNEL32.dllGetCurrentDirectoryW
KERNEL32.dllSetThreadPriority
KERNEL32.dllWaitForSingleObject
KERNEL32.dllWaitForSingleObjectEx
KERNEL32.dllDebugBreak
KERNEL32.dllGetFileAttributesW
KERNEL32.dllTlsSetValue
KERNEL32.dllGetSystemTimeAsFileTime
KERNEL32.dllSleep
KERNEL32.dllSetUnhandledExceptionFilter
KERNEL32.dllEnterCriticalSection
KERNEL32.dllInitializeCriticalSection
KERNEL32.dllGetTickCount
KERNEL32.dllFindFirstFileW
KERNEL32.dllCreateFileMappingW
KERNEL32.dllFormatMessageW
KERNEL32.dllDeviceIoControl
KERNEL32.dllCreateEventW
SHELL32.dllCommandLineToArgvW
SHELL32.dllShellExecuteW
VCRUNTIME140.dllwcsstr
VCRUNTIME140.dllmemset
VCRUNTIME140.dllmemcmp
VCRUNTIME140.dll_CxxThrowException
VCRUNTIME140.dllmemmove
VCRUNTIME140.dll__std_exception_copy
VCRUNTIME140.dllmemcpy
VCRUNTIME140.dll__CxxFrameHandler3
VCRUNTIME140.dll__vcrt_InitializeCriticalSectionEx
VCRUNTIME140.dll__std_terminate
VCRUNTIME140.dll_purecall
VCRUNTIME140.dll__std_type_info_compare
VCRUNTIME140.dllmemchr
VCRUNTIME140.dll__std_exception_destroy
VCRUNTIME140.dll__C_specific_handler
api-ms-win-crt-convert-l1-1-0.dllstrtoull
api-ms-win-crt-convert-l1-1-0.dllatoi
gdiplus.dllGdipCreateLineBrushI
gdiplus.dllGdipEndContainer
gdiplus.dllGdipDeletePrivateFontCollection
gdiplus.dllGdipSetCompositingQuality
gdiplus.dllGdipCreatePath
gdiplus.dllGdipDisposeImage
gdiplus.dllGdipDrawLine
gdiplus.dllGdiplusStartup
gdiplus.dllGdipCreateSolidFill
gdiplus.dllGdipSetStringFormatAlign
gdiplus.dllGdipDeleteStringFormat
gdiplus.dllGdipSetPenColor
gdiplus.dllGdipCloneFontFamily
gdiplus.dllGdipSetStringFormatLineAlign
gdiplus.dllGdipDeleteFont
gdiplus.dllGdipBeginContainer2
gdiplus.dllGdipDrawString
gdiplus.dllGdipLoadImageFromStream
gdiplus.dllGdipFillRectangle
gdiplus.dllGdipTranslateWorldTransform
gdiplus.dllGdipGetPathWorldBoundsI
gdiplus.dllGdipAlloc
gdiplus.dllGdipSetPenWidth
gdiplus.dllGdipDeleteBrush
gdiplus.dllGdipCreateFontFamilyFromName
gdiplus.dllGdipDeleteFontFamily
gdiplus.dllGdipPrivateAddMemoryFont
gdiplus.dllGdipCloneImage
gdiplus.dllGdipDrawRectangleI
gdiplus.dllGdipCreateFont
gdiplus.dllGdipAddPathLineI
gdiplus.dllGdipCreateFromHDC
gdiplus.dllGdipDrawImageRect
gdiplus.dllGdipCreatePen1
gdiplus.dllGdipSetClipRectI
gdiplus.dllGdipSetSmoothingMode
gdiplus.dllGdipDrawPath
gdiplus.dllGdipFree
gdiplus.dllGdipAddPathRectangleI
gdiplus.dllGdipSetSolidFillColor
gdiplus.dllGdiplusShutdown
gdiplus.dllGdipFillRectangleI
gdiplus.dllGdipSetTextRenderingHint
gdiplus.dllGdipGetFontCollectionFamilyList
gdiplus.dllGdipFillPath
gdiplus.dllGdipDrawLineI
gdiplus.dllGdipDeletePath
gdiplus.dllGdipDeleteGraphics
gdiplus.dllGdipCreateStringFormat
gdiplus.dllGdipMeasureString
gdiplus.dllGdipNewPrivateFontCollection
gdiplus.dllGdipDeletePen
WTSAPI32.dllWTSSendMessageW
KERNEL32.dllFlsSetValue
KERNEL32.dllGetSystemTimeAsFileTime
KERNEL32.dllGetModuleHandleA
KERNEL32.dllCreateEventA
KERNEL32.dllGetModuleFileNameW
KERNEL32.dllLoadLibraryA
KERNEL32.dllFreeLibrary
KERNEL32.dllTerminateProcess
KERNEL32.dllGetCurrentProcess
KERNEL32.dllGetSystemInfo
KERNEL32.dllCreateToolhelp32Snapshot
KERNEL32.dllThread32First
KERNEL32.dllGetCurrentProcessId
KERNEL32.dllGetCurrentThreadId
KERNEL32.dllOpenThread
KERNEL32.dllThread32Next
KERNEL32.dllCloseHandle
KERNEL32.dllSuspendThread
KERNEL32.dllResumeThread
KERNEL32.dllWriteProcessMemory
KERNEL32.dllVirtualAlloc
KERNEL32.dllVirtualProtect
KERNEL32.dllVirtualFree
KERNEL32.dllGetProcessAffinityMask
KERNEL32.dllSetProcessAffinityMask
KERNEL32.dllGetCurrentThread
KERNEL32.dllSetThreadAffinityMask
KERNEL32.dllSleep
KERNEL32.dllGetTickCount
KERNEL32.dllGlobalFree
KERNEL32.dllGetProcAddress
KERNEL32.dllLocalAlloc
KERNEL32.dllLocalFree
KERNEL32.dllExitProcess
KERNEL32.dllEnterCriticalSection
KERNEL32.dllLeaveCriticalSection
KERNEL32.dllInitializeCriticalSection
KERNEL32.dllDeleteCriticalSection
KERNEL32.dllGetModuleHandleW
KERNEL32.dllLoadResource
KERNEL32.dllMultiByteToWideChar
KERNEL32.dllFindResourceExW
KERNEL32.dllFindResourceExA
KERNEL32.dllWideCharToMultiByte
KERNEL32.dllGetThreadLocale
KERNEL32.dllGetUserDefaultLCID
KERNEL32.dllGetSystemDefaultLCID
KERNEL32.dllEnumResourceNamesA
KERNEL32.dllEnumResourceNamesW
KERNEL32.dllEnumResourceLanguagesA
KERNEL32.dllEnumResourceLanguagesW
KERNEL32.dllEnumResourceTypesA
KERNEL32.dllEnumResourceTypesW
KERNEL32.dllCreateFileW
KERNEL32.dllLoadLibraryW
KERNEL32.dllGetLastError
KERNEL32.dllFlushFileBuffers
KERNEL32.dllCreateFileA
KERNEL32.dllWriteConsoleW
KERNEL32.dllGetConsoleOutputCP
KERNEL32.dllWriteConsoleA
KERNEL32.dllSetStdHandle
KERNEL32.dllGetCommandLineA
KERNEL32.dllRaiseException
KERNEL32.dllRtlPcToFileHeader
KERNEL32.dllRtlLookupFunctionEntry
KERNEL32.dllRtlUnwindEx
KERNEL32.dllHeapFree
KERNEL32.dllGetCPInfo
KERNEL32.dllGetACP
KERNEL32.dllGetOEMCP
KERNEL32.dllIsValidCodePage
KERNEL32.dllEncodePointer
KERNEL32.dllDecodePointer
KERNEL32.dllFlsGetValue
KERNEL32.dllFlsFree
KERNEL32.dllSetLastError
KERNEL32.dllFlsAlloc
KERNEL32.dllUnhandledExceptionFilter
KERNEL32.dllSetUnhandledExceptionFilter
KERNEL32.dllIsDebuggerPresent
KERNEL32.dllRtlVirtualUnwind
KERNEL32.dllRtlCaptureContext
KERNEL32.dllHeapAlloc
KERNEL32.dllLCMapStringA
KERNEL32.dllLCMapStringW
KERNEL32.dllSetHandleCount
KERNEL32.dllGetStdHandle
KERNEL32.dllGetFileType
KERNEL32.dllGetStartupInfoA
KERNEL32.dllGetModuleFileNameA
KERNEL32.dllFreeEnvironmentStringsA
KERNEL32.dllGetEnvironmentStrings
KERNEL32.dllFreeEnvironmentStringsW
KERNEL32.dllGetEnvironmentStringsW
KERNEL32.dllHeapSetInformation
KERNEL32.dllHeapCreate
KERNEL32.dllHeapDestroy
KERNEL32.dllQueryPerformanceCounter
KERNEL32.dllGetStringTypeA
KERNEL32.dllGetStringTypeW
KERNEL32.dllGetLocaleInfoA
KERNEL32.dllHeapSize
KERNEL32.dllWriteFile
KERNEL32.dllSetFilePointer
KERNEL32.dllGetConsoleCP
KERNEL32.dllGetConsoleMode
KERNEL32.dllHeapReAlloc
KERNEL32.dllInitializeCriticalSectionAndSpinCount
USER32.dllGetProcessWindowStation
USER32.dllGetUserObjectInformationW
USER32.dllCharUpperBuffW
USER32.dllMessageBoxW
KERNEL32.dllLocalAlloc
KERNEL32.dllLocalFree
KERNEL32.dllGetModuleFileNameW
KERNEL32.dllGetProcessAffinityMask
KERNEL32.dllSetProcessAffinityMask
KERNEL32.dllSetThreadAffinityMask
KERNEL32.dllSleep
KERNEL32.dllExitProcess
KERNEL32.dllFreeLibrary
KERNEL32.dllLoadLibraryA
KERNEL32.dllGetModuleHandleA
KERNEL32.dllGetProcAddress
USER32.dllGetProcessWindowStation
USER32.dllGetUserObjectInformationW
offsetsizetypecomment
15c115HTM#
15d018893872BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







[?] can't find file_offset of VA 0xe9cdc