Scintilla_DirectFunction
Static task
static1
Behavioral task
behavioral1
Sample
SimpleNotePad/SciLexer.dll
Resource
win7-20220812-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
SimpleNotePad/SciLexer.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
SimpleNotePad/SimpleNotePad.exe
Resource
win7-20220901-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
SimpleNotePad/SimpleNotePad.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
SimpleNotePad/tinyxml2.dll
Resource
win7-20220812-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
SimpleNotePad/tinyxml2.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
SimpleNotePad_V1.43_x64.zip
-
Size
951KB
-
MD5
79c0cced8fe5ac1ff711f9828177badf
-
SHA1
e4317b6850caff9a62e935e61854760c74e149b7
-
SHA256
524d7b57abc999d2e273541a052391791b21df1645d90d8f5c8115b25e237fdb
-
SHA512
67bb18a810e9ac81ac6dbaf5d54db9bfe0de2a416d7fc5197deb9c13d55ce6e564353e202ec2619995588fa4fcc4576dc9002e177c46eabd2fbbfcb0ed6c4e40
-
SSDEEP
24576:SmclCH3Jk89ypnp4XHNU2tshZSjrYFT136YpO:9SOXIpwHNU2ts2jr43lpO
Score
N/A
Malware Config
Signatures
Files
-
SimpleNotePad_V1.43_x64.zip.zip
-
SimpleNotePad/SciLexer.dll.dll windows x64
4f3945b948d0b435f6ed0c307b76c2f6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
gdi32
IntersectClipRect
ExtTextOutW
RoundRect
SetTextAlign
CreateFontIndirectW
CreateSolidBrush
DeleteObject
Ellipse
SetBkColor
MoveToEx
Polygon
GetObjectW
Rectangle
CreatePen
LineTo
SetBkMode
SetTextColor
GetTextExtentPoint32W
DeleteDC
CreatePatternBrush
GetTextMetricsW
GetDeviceCaps
GetTextExtentExPointA
GetStockObject
StretchBlt
GetTextExtentExPointW
CreateCompatibleDC
GetTextExtentPoint32A
CreateDIBSection
SelectObject
ExtTextOutA
CreateCompatibleBitmap
BitBlt
CombineRgn
CreateBitmap
CreateRectRgn
CreateRectRgnIndirect
imm32
ImmNotifyIME
ImmSetCandidateWindow
ImmSetCompositionStringW
ImmEscapeW
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmSetCompositionFontW
ImmReleaseContext
ImmGetContext
ole32
CLSIDFromProgID
CoCreateInstance
ReleaseStgMedium
DoDragDrop
OleInitialize
RegisterDragDrop
RevokeDragDrop
OleUninitialize
oleaut32
SysAllocString
SysFreeString
msimg32
AlphaBlend
kernel32
InitOnceBeginInitialize
InitOnceComplete
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetModuleHandleW
FreeLibrary
MulDiv
LoadLibraryExW
GetLocaleInfoA
Sleep
GlobalSize
GlobalAlloc
GlobalLock
LCMapStringW
WideCharToMultiByte
GetTickCount
GlobalUnlock
TerminateProcess
IsProcessorFeaturePresent
RtlCaptureContext
user32
PtInRect
KillTimer
ShowCaret
GetCaretBlinkTime
IsClipboardFormatAvailable
AppendMenuW
SetClipboardData
DestroyCaret
GetClipboardData
SetFocus
GetMessageTime
GetKeyboardLayout
TrackMouseEvent
ValidateRect
CreateCaret
IsChild
DefWindowProcW
CloseClipboard
GetDlgCtrlID
SetTimer
OpenClipboard
SetCaretPos
MsgWaitForMultipleObjects
GetScrollInfo
NotifyWinEvent
ScreenToClient
HideCaret
PostMessageW
GetUpdateRgn
GetKeyState
RegisterClipboardFormatW
SetScrollInfo
EndPaint
AdjustWindowRectEx
CallWindowProcW
MonitorFromPoint
GetWindowRect
DestroyWindow
InflateRect
GetDC
SetWindowPos
CopyImage
MonitorFromRect
MonitorFromWindow
SetWindowLongPtrW
FillRect
CreateWindowExW
GetIconInfo
SendMessageW
GetSystemMetrics
UnregisterClassW
CreatePopupMenu
GetWindowLongPtrW
RegisterClassExW
DestroyCursor
BeginPaint
ShowWindow
DrawTextA
GetMonitorInfoW
CreateIconIndirect
ClientToScreen
MapWindowPoints
GetDoubleClickTime
FrameRect
GetSysColor
DestroyMenu
LoadCursorW
SetCapture
SetCursor
SystemParametersInfoA
GetClientRect
DrawTextW
SystemParametersInfoW
GetParent
ReleaseCapture
InvalidateRect
ReleaseDC
GetWindowLongW
EmptyClipboard
GetCursorPos
TrackPopupMenu
msvcp140
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?_Xout_of_range@std@@YAXPEBD@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??Bid@locale@std@@QEAA_KXZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?_Xlength_error@std@@YAXPEBD@Z
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
_Query_perf_counter
_Strcoll
_Wcsxfrm
?id@?$collate@D@std@@2V0locale@2@A
?id@?$collate@_W@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?_Xbad_alloc@std@@YAXXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
_Query_perf_frequency
_Wcscoll
_Strxfrm
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception_context
__C_specific_handler
_CxxThrowException
memset
__std_type_info_destroy_list
strstr
_purecall
strchr
__std_exception_copy
__std_exception_destroy
__std_terminate
memmove
memcpy
memcmp
__current_exception
memchr
__RTDynamicCast
api-ms-win-crt-string-l1-1-0
strnlen
ispunct
isupper
iscntrl
toupper
isspace
strcmp
isalpha
isxdigit
isalnum
isdigit
islower
tolower
isgraph
strncmp
strncpy
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
terminate
_crt_atexit
_cexit
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
abort
_seh_filter_dll
api-ms-win-crt-convert-l1-1-0
atoi
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
__stdio_common_vsscanf
api-ms-win-crt-math-l1-1-0
floorf
floor
ceilf
roundf
lroundf
truncf
api-ms-win-crt-heap-l1-1-0
free
_callnewh
realloc
malloc
Exports
Exports
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SimpleNotePad/SimpleNotePad.exe.exe windows x64
a7fac12ee1e375793ad4199061b06fca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
tinyxml2
??0XMLDocument@tinyxml2@@QEAA@_NW4Whitespace@1@@Z
?GetText@XMLElement@tinyxml2@@QEBAPEBDXZ
?Attribute@XMLElement@tinyxml2@@QEBAPEBDPEBD0@Z
?Parse@XMLDocument@tinyxml2@@QEAA?AW4XMLError@2@PEBD_K@Z
?Value@XMLNode@tinyxml2@@QEBAPEBDXZ
?NextSiblingElement@XMLNode@tinyxml2@@QEBAPEBVXMLElement@2@PEBD@Z
??1XMLDocument@tinyxml2@@UEAA@XZ
?FirstChildElement@XMLNode@tinyxml2@@QEBAPEBVXMLElement@2@PEBD@Z
mfc140u
ord9217
ord10807
ord8614
ord8604
ord11435
ord10811
ord8702
ord10835
ord9738
ord9739
ord6313
ord2427
ord12706
ord3484
ord3509
ord2222
ord979
ord1446
ord7389
ord11805
ord10199
ord13999
ord10070
ord7393
ord983
ord1450
ord985
ord1452
ord2903
ord2344
ord14288
ord6121
ord6123
ord14290
ord2311
ord7716
ord2178
ord940
ord13109
ord7054
ord13545
ord8159
ord6614
ord9941
ord5555
ord12606
ord11901
ord11933
ord10124
ord7920
ord4445
ord11929
ord11921
ord5706
ord3731
ord7719
ord12212
ord14088
ord9200
ord11664
ord2011
ord7668
ord12625
ord3949
ord4011
ord9089
ord14216
ord7650
ord14210
ord12223
ord12222
ord2439
ord5183
ord8023
ord12544
ord8084
ord8167
ord4097
ord8828
ord6590
ord1426
ord8441
ord4086
ord6361
ord3803
ord2187
ord1665
ord8507
ord1821
ord1830
ord13578
ord6651
ord14221
ord14219
ord4725
ord2479
ord3166
ord10727
ord5742
ord12442
ord12265
ord3270
ord3161
ord6584
ord1420
ord7159
ord4098
ord3273
ord3167
ord8829
ord1432
ord7783
ord7382
ord6850
ord450
ord1091
ord9682
ord12949
ord6634
ord13568
ord12720
ord7235
ord11594
ord10968
ord10965
ord8003
ord11770
ord6630
ord2628
ord8917
ord7173
ord1125
ord495
ord5978
ord6007
ord1157
ord6342
ord8822
ord3096
ord4083
ord8440
ord2907
ord3748
ord14194
ord2689
ord5672
ord2686
ord13199
ord13767
ord8058
ord8416
ord2149
ord6090
ord3952
ord1121
ord489
ord7780
ord7775
ord13309
ord8449
ord4357
ord2514
ord2212
ord4181
ord1383
ord6555
ord3144
ord3266
ord1158
ord6343
ord5771
ord8823
ord4084
ord8926
ord3953
ord497
ord7882
ord2703
ord7551
ord1111
ord6866
ord1503
ord12600
ord12443
ord277
ord8161
ord3728
ord1667
ord11999
ord11677
ord533
ord6775
ord4721
ord266
ord265
ord6260
ord5750
ord10703
ord8730
ord4726
ord3950
ord364
ord6724
ord6250
ord6320
ord3756
ord4656
ord2270
ord356
ord4499
ord8043
ord1369
ord878
ord7394
ord1424
ord6588
ord8826
ord3164
ord4095
ord7151
ord1489
ord8471
ord3599
ord286
ord1057
ord990
ord6258
ord9677
ord8900
ord5916
ord11902
ord8819
ord9205
ord11855
ord2698
ord13401
ord6002
ord3058
ord4081
ord8439
ord2906
ord3746
ord3713
ord9159
ord13761
ord13864
ord4335
ord5240
ord14289
ord285
ord5709
ord2921
ord280
ord6122
ord6848
ord11813
ord8731
ord10704
ord11085
ord3951
ord3308
ord3307
ord3071
ord6000
ord13397
ord3212
ord3209
ord7913
ord2697
ord14360
ord9976
ord9978
ord9977
ord9975
ord9979
ord5451
ord11414
ord11415
ord8830
ord11771
ord3718
ord11625
ord14209
ord8656
ord11854
ord6729
ord10691
ord8947
ord3173
ord13513
ord11944
ord11940
ord1700
ord1722
ord1748
ord1734
ord1755
ord4776
ord4843
ord4788
ord4806
ord4800
ord4794
ord4853
ord4837
ord4782
ord4859
ord4814
ord4752
ord4767
ord4828
ord4360
ord9384
ord4352
ord2967
ord14211
ord7651
ord14217
ord6631
ord11406
ord13354
ord5723
ord2629
ord11806
ord3812
ord9215
ord3279
ord3278
ord3172
ord11850
ord5080
ord5363
ord5552
ord9041
ord5339
ord5582
ord5083
ord5229
ord5062
ord7460
ord7461
ord7450
ord5227
ord7922
ord9946
ord8901
ord6285
ord13136
ord1670
ord1501
ord5245
ord10163
ord1089
ord446
ord7233
ord1033
ord296
ord1491
ord2370
ord11665
kernel32
GetCurrentProcessId
GetCurrentThreadId
WideCharToMultiByte
GetModuleFileNameW
MulDiv
SetThreadUILanguage
WaitForSingleObject
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
GetStartupInfoW
MultiByteToWideChar
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetLastError
CloseHandle
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
user32
GetParent
GetDC
ReleaseDC
FillRect
GetWindowRect
GetClassNameW
EnumChildWindows
GetKeyState
SetWindowLongW
InvalidateRect
PostMessageW
GetCursorPos
GetClientRect
SendMessageW
EnableWindow
GetSystemMetrics
LoadImageW
GetClassInfoW
LoadIconW
SetActiveWindow
GetSubMenu
GetMenuItemCount
DeleteMenu
SetMenuItemInfoW
SetParent
CheckMenuRadioItem
CheckMenuItem
EnableMenuItem
KillTimer
ClientToScreen
TranslateAcceleratorW
AppendMenuW
DrawIcon
IsIconic
SetTimer
LoadMenuW
LoadAcceleratorsW
GetSystemMenu
gdi32
GetDeviceCaps
GetTextExtentPoint32W
DeleteObject
CreateDIBSection
shell32
ShellExecuteW
DragFinish
DragQueryFileW
comctl32
InitCommonControlsEx
shlwapi
PathFileExistsW
ole32
CoCreateInstance
OleInitialize
OleUninitialize
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?_Xbad_function_call@std@@YAXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?uncaught_exception@std@@YA_NXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memset
memcpy
memcmp
memchr
__RTDynamicCast
_CxxThrowException
__std_terminate
__current_exception
_purecall
__std_exception_copy
__std_exception_destroy
__current_exception_context
memmove
__C_specific_handler
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_register_onexit_function
_initialize_onexit_table
terminate
_register_thread_local_exe_atexit_callback
_c_exit
_seh_filter_exe
_set_app_type
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
exit
_exit
_cexit
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-stdio-l1-1-0
fclose
__p__commode
_get_stream_buffer_pointers
fputc
ungetc
fgetc
__stdio_common_vsscanf
fwrite
fgetpos
_fseeki64
fsetpos
setvbuf
fflush
fread
_set_fmode
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-convert-l1-1-0
_wtof
_wtoi
atoi
wcstoul
api-ms-win-crt-string-l1-1-0
wcscpy_s
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
api-ms-win-crt-math-l1-1-0
log10
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 418KB - Virtual size: 418KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SimpleNotePad/lang.xml.xml .js
-
SimpleNotePad/tinyxml2.dll.dll windows x64
55450e25fa61b111b9dabd13515ed8b5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
vcruntime140
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__C_specific_handler
memset
memcpy
__CxxFrameHandler3
strchr
__std_type_info_destroy_list
_purecall
api-ms-win-crt-string-l1-1-0
isdigit
isalpha
strncmp
isspace
api-ms-win-crt-stdio-l1-1-0
fputc
__stdio_common_vsscanf
__stdio_common_vsnprintf_s
__stdio_common_vsprintf
__stdio_common_vfprintf
fwrite
_ftelli64
_fseeki64
fread
fopen_s
fgetc
ferror
fclose
__acrt_iob_func
api-ms-win-crt-runtime-l1-1-0
_initterm
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
_initterm_e
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
free
kernel32
InitializeSListHead
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
RtlCaptureContext
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
Exports
Exports
??0StrPair@tinyxml2@@QEAA@XZ
??0XMLAttribute@tinyxml2@@AEAA@XZ
??0XMLComment@tinyxml2@@IEAA@PEAVXMLDocument@1@@Z
??0XMLConstHandle@tinyxml2@@QEAA@AEBV01@@Z
??0XMLConstHandle@tinyxml2@@QEAA@AEBVXMLNode@1@@Z
??0XMLConstHandle@tinyxml2@@QEAA@PEBVXMLNode@1@@Z
??0XMLDeclaration@tinyxml2@@IEAA@PEAVXMLDocument@1@@Z
??0XMLDocument@tinyxml2@@QEAA@_NW4Whitespace@1@@Z
??0XMLElement@tinyxml2@@AEAA@PEAVXMLDocument@1@@Z
??0XMLHandle@tinyxml2@@QEAA@AEAVXMLNode@1@@Z
??0XMLHandle@tinyxml2@@QEAA@AEBV01@@Z
??0XMLHandle@tinyxml2@@QEAA@PEAVXMLNode@1@@Z
??0XMLNode@tinyxml2@@IEAA@PEAVXMLDocument@1@@Z
??0XMLPrinter@tinyxml2@@QEAA@PEAU_iobuf@@_NH@Z
??0XMLText@tinyxml2@@IEAA@PEAVXMLDocument@1@@Z
??0XMLUnknown@tinyxml2@@IEAA@PEAVXMLDocument@1@@Z
??0XMLVisitor@tinyxml2@@QEAA@AEBV01@@Z
??0XMLVisitor@tinyxml2@@QEAA@XZ
??1StrPair@tinyxml2@@QEAA@XZ
??1XMLAttribute@tinyxml2@@EEAA@XZ
??1XMLComment@tinyxml2@@MEAA@XZ
??1XMLDeclaration@tinyxml2@@MEAA@XZ
??1XMLDocument@tinyxml2@@UEAA@XZ
??1XMLElement@tinyxml2@@EEAA@XZ
??1XMLNode@tinyxml2@@MEAA@XZ
??1XMLPrinter@tinyxml2@@UEAA@XZ
??1XMLText@tinyxml2@@MEAA@XZ
??1XMLUnknown@tinyxml2@@MEAA@XZ
??1XMLVisitor@tinyxml2@@UEAA@XZ
??4XMLConstHandle@tinyxml2@@QEAAAEAV01@AEBV01@@Z
??4XMLHandle@tinyxml2@@QEAAAEAV01@AEBV01@@Z
??4XMLUtil@tinyxml2@@QEAAAEAV01@$$QEAV01@@Z
??4XMLUtil@tinyxml2@@QEAAAEAV01@AEBV01@@Z
??4XMLVisitor@tinyxml2@@QEAAAEAV01@AEBV01@@Z
??_7XMLAttribute@tinyxml2@@6B@
??_7XMLComment@tinyxml2@@6B@
??_7XMLDeclaration@tinyxml2@@6B@
??_7XMLDocument@tinyxml2@@6B@
??_7XMLElement@tinyxml2@@6B@
??_7XMLNode@tinyxml2@@6B@
??_7XMLPrinter@tinyxml2@@6B@
??_7XMLText@tinyxml2@@6B@
??_7XMLUnknown@tinyxml2@@6B@
??_7XMLVisitor@tinyxml2@@6B@
??_FXMLDocument@tinyxml2@@QEAAXXZ
??_FXMLPrinter@tinyxml2@@QEAAXXZ
?Accept@XMLComment@tinyxml2@@UEBA_NPEAVXMLVisitor@2@@Z
?Accept@XMLDeclaration@tinyxml2@@UEBA_NPEAVXMLVisitor@2@@Z
?Accept@XMLDocument@tinyxml2@@UEBA_NPEAVXMLVisitor@2@@Z
?Accept@XMLElement@tinyxml2@@UEBA_NPEAVXMLVisitor@2@@Z
?Accept@XMLText@tinyxml2@@UEBA_NPEAVXMLVisitor@2@@Z
?Accept@XMLUnknown@tinyxml2@@UEBA_NPEAVXMLVisitor@2@@Z
?Attribute@XMLElement@tinyxml2@@QEBAPEBDPEBD0@Z
?BoolAttribute@XMLElement@tinyxml2@@QEBA_NPEBD_N@Z
?BoolText@XMLElement@tinyxml2@@QEBA_N_N@Z
?BoolValue@XMLAttribute@tinyxml2@@QEBA_NXZ
?CData@XMLText@tinyxml2@@QEBA_NXZ
?CStr@XMLPrinter@tinyxml2@@QEBAPEBDXZ
?CStrSize@XMLPrinter@tinyxml2@@QEBAHXZ
?Clear@XMLDocument@tinyxml2@@QEAAXXZ
?ClearBuffer@XMLPrinter@tinyxml2@@QEAAX_N@Z
?ClearError@XMLDocument@tinyxml2@@QEAAXXZ
?CloseElement@XMLPrinter@tinyxml2@@UEAAX_N@Z
?ClosingType@XMLElement@tinyxml2@@QEBA?AW4ElementClosingType@12@XZ
?CollapseWhitespace@StrPair@tinyxml2@@AEAAXXZ
?CompactMode@XMLPrinter@tinyxml2@@MEAA_NAEBVXMLElement@2@@Z
?ConvertUTF32ToUTF8@XMLUtil@tinyxml2@@SAXKPEADPEAH@Z
?CreateAttribute@XMLElement@tinyxml2@@AEAAPEAVXMLAttribute@2@XZ
?DeepClone@XMLNode@tinyxml2@@QEBAPEAV12@PEAVXMLDocument@2@@Z
?DeepCopy@XMLDocument@tinyxml2@@QEBAXPEAV12@@Z
?DeleteAttribute@XMLElement@tinyxml2@@CAXPEAVXMLAttribute@2@@Z
?DeleteAttribute@XMLElement@tinyxml2@@QEAAXPEBD@Z
?DeleteChild@XMLNode@tinyxml2@@QEAAXPEAV12@@Z
?DeleteChildren@XMLNode@tinyxml2@@QEAAXXZ
?DeleteNode@XMLDocument@tinyxml2@@QEAAXPEAVXMLNode@2@@Z
?DeleteNode@XMLNode@tinyxml2@@CAXPEAV12@@Z
?DoubleAttribute@XMLElement@tinyxml2@@QEBANPEBDN@Z
?DoubleText@XMLElement@tinyxml2@@QEBANN@Z
?DoubleValue@XMLAttribute@tinyxml2@@QEBANXZ
?Empty@StrPair@tinyxml2@@QEBA_NXZ
?Error@XMLDocument@tinyxml2@@QEBA_NXZ
?ErrorID@XMLDocument@tinyxml2@@QEBA?AW4XMLError@2@XZ
?ErrorIDToName@XMLDocument@tinyxml2@@SAPEBDW4XMLError@2@@Z
?ErrorLineNum@XMLDocument@tinyxml2@@QEBAHXZ
?ErrorName@XMLDocument@tinyxml2@@QEBAPEBDXZ
?ErrorStr@XMLDocument@tinyxml2@@QEBAPEBDXZ
?FindAttribute@XMLElement@tinyxml2@@QEBAPEBVXMLAttribute@2@PEBD@Z
?FindOrCreateAttribute@XMLElement@tinyxml2@@AEAAPEAVXMLAttribute@2@PEBD@Z
?FirstAttribute@XMLElement@tinyxml2@@QEBAPEBVXMLAttribute@2@XZ
?FirstChild@XMLConstHandle@tinyxml2@@QEBA?BV12@XZ
?FirstChild@XMLHandle@tinyxml2@@QEAA?AV12@XZ
?FirstChild@XMLNode@tinyxml2@@QEAAPEAV12@XZ
?FirstChild@XMLNode@tinyxml2@@QEBAPEBV12@XZ
?FirstChildElement@XMLConstHandle@tinyxml2@@QEBA?BV12@PEBD@Z
?FirstChildElement@XMLHandle@tinyxml2@@QEAA?AV12@PEBD@Z
?FirstChildElement@XMLNode@tinyxml2@@QEAAPEAVXMLElement@2@PEBD@Z
?FirstChildElement@XMLNode@tinyxml2@@QEBAPEBVXMLElement@2@PEBD@Z
?FloatAttribute@XMLElement@tinyxml2@@QEBAMPEBDM@Z
?FloatText@XMLElement@tinyxml2@@QEBAMM@Z
?FloatValue@XMLAttribute@tinyxml2@@QEBAMXZ
?GetCharacterRef@XMLUtil@tinyxml2@@SAPEBDPEBDPEADPEAH@Z
?GetDocument@XMLNode@tinyxml2@@QEAAPEAVXMLDocument@2@XZ
?GetDocument@XMLNode@tinyxml2@@QEBAPEBVXMLDocument@2@XZ
?GetLineNum@XMLAttribute@tinyxml2@@QEBAHXZ
?GetLineNum@XMLNode@tinyxml2@@QEBAHXZ
?GetStr@StrPair@tinyxml2@@QEAAPEBDXZ
?GetText@XMLElement@tinyxml2@@QEBAPEBDXZ
?GetUserData@XMLNode@tinyxml2@@QEBAPEAXXZ
?HasBOM@XMLDocument@tinyxml2@@QEBA_NXZ
?Identify@XMLDocument@tinyxml2@@QEAAPEADPEADPEAPEAVXMLNode@2@@Z
?InsertAfterChild@XMLNode@tinyxml2@@QEAAPEAV12@PEAV12@0@Z
?InsertChildPreamble@XMLNode@tinyxml2@@AEBAXPEAV12@@Z
?InsertEndChild@XMLNode@tinyxml2@@QEAAPEAV12@PEAV12@@Z
?InsertFirstChild@XMLNode@tinyxml2@@QEAAPEAV12@PEAV12@@Z
?InsertNewChildElement@XMLElement@tinyxml2@@QEAAPEAV12@PEBD@Z
?InsertNewComment@XMLElement@tinyxml2@@QEAAPEAVXMLComment@2@PEBD@Z
?InsertNewDeclaration@XMLElement@tinyxml2@@QEAAPEAVXMLDeclaration@2@PEBD@Z
?InsertNewText@XMLElement@tinyxml2@@QEAAPEAVXMLText@2@PEBD@Z
?InsertNewUnknown@XMLElement@tinyxml2@@QEAAPEAVXMLUnknown@2@PEBD@Z
?Int64Attribute@XMLElement@tinyxml2@@QEBA_JPEBD_J@Z
?Int64Text@XMLElement@tinyxml2@@QEBA_J_J@Z
?Int64Value@XMLAttribute@tinyxml2@@QEBA_JXZ
?IntAttribute@XMLElement@tinyxml2@@QEBAHPEBDH@Z
?IntText@XMLElement@tinyxml2@@QEBAHH@Z
?IntValue@XMLAttribute@tinyxml2@@QEBAHXZ
?IsNameChar@XMLUtil@tinyxml2@@SA_NE@Z
?IsNameStartChar@XMLUtil@tinyxml2@@SA_NE@Z
?IsPrefixHex@XMLUtil@tinyxml2@@SA_NPEBD@Z
?IsUTF8Continuation@XMLUtil@tinyxml2@@SA_ND@Z
?IsWhiteSpace@XMLUtil@tinyxml2@@SA_ND@Z
?LastChild@XMLConstHandle@tinyxml2@@QEBA?BV12@XZ
?LastChild@XMLHandle@tinyxml2@@QEAA?AV12@XZ
?LastChild@XMLNode@tinyxml2@@QEAAPEAV12@XZ
?LastChild@XMLNode@tinyxml2@@QEBAPEBV12@XZ
?LastChildElement@XMLConstHandle@tinyxml2@@QEBA?BV12@PEBD@Z
?LastChildElement@XMLHandle@tinyxml2@@QEAA?AV12@PEBD@Z
?LastChildElement@XMLNode@tinyxml2@@QEAAPEAVXMLElement@2@PEBD@Z
?LastChildElement@XMLNode@tinyxml2@@QEBAPEBVXMLElement@2@PEBD@Z
?LinkEndChild@XMLNode@tinyxml2@@QEAAPEAV12@PEAV12@@Z
?LoadFile@XMLDocument@tinyxml2@@QEAA?AW4XMLError@2@PEAU_iobuf@@@Z
?LoadFile@XMLDocument@tinyxml2@@QEAA?AW4XMLError@2@PEBD@Z
?MarkInUse@XMLDocument@tinyxml2@@QEAAXQEBVXMLNode@2@@Z
?Name@XMLAttribute@tinyxml2@@QEBAPEBDXZ
?Name@XMLElement@tinyxml2@@QEBAPEBDXZ
?NewComment@XMLDocument@tinyxml2@@QEAAPEAVXMLComment@2@PEBD@Z
?NewDeclaration@XMLDocument@tinyxml2@@QEAAPEAVXMLDeclaration@2@PEBD@Z
?NewElement@XMLDocument@tinyxml2@@QEAAPEAVXMLElement@2@PEBD@Z
?NewText@XMLDocument@tinyxml2@@QEAAPEAVXMLText@2@PEBD@Z
?NewUnknown@XMLDocument@tinyxml2@@QEAAPEAVXMLUnknown@2@PEBD@Z
?Next@XMLAttribute@tinyxml2@@QEBAPEBV12@XZ
?NextSibling@XMLConstHandle@tinyxml2@@QEBA?BV12@XZ
?NextSibling@XMLHandle@tinyxml2@@QEAA?AV12@XZ
?NextSibling@XMLNode@tinyxml2@@QEAAPEAV12@XZ
?NextSibling@XMLNode@tinyxml2@@QEBAPEBV12@XZ
?NextSiblingElement@XMLConstHandle@tinyxml2@@QEBA?BV12@PEBD@Z
?NextSiblingElement@XMLHandle@tinyxml2@@QEAA?AV12@PEBD@Z
?NextSiblingElement@XMLNode@tinyxml2@@QEAAPEAVXMLElement@2@PEBD@Z
?NextSiblingElement@XMLNode@tinyxml2@@QEBAPEBVXMLElement@2@PEBD@Z
?NoChildren@XMLNode@tinyxml2@@QEBA_NXZ
?OpenElement@XMLPrinter@tinyxml2@@QEAAXPEBD_N@Z
?Parent@XMLNode@tinyxml2@@QEAAPEAV12@XZ
?Parent@XMLNode@tinyxml2@@QEBAPEBV12@XZ
?Parse@XMLDocument@tinyxml2@@AEAAXXZ
?Parse@XMLDocument@tinyxml2@@QEAA?AW4XMLError@2@PEBD_K@Z
?ParseAttributes@XMLElement@tinyxml2@@AEAAPEADPEADPEAH@Z
?ParseDeep@XMLAttribute@tinyxml2@@AEAAPEADPEAD_NPEAH@Z
?ParseDeep@XMLComment@tinyxml2@@MEAAPEADPEADPEAVStrPair@2@PEAH@Z
?ParseDeep@XMLDeclaration@tinyxml2@@MEAAPEADPEADPEAVStrPair@2@PEAH@Z
?ParseDeep@XMLElement@tinyxml2@@MEAAPEADPEADPEAVStrPair@2@PEAH@Z
?ParseDeep@XMLNode@tinyxml2@@MEAAPEADPEADPEAVStrPair@2@PEAH@Z
?ParseDeep@XMLText@tinyxml2@@MEAAPEADPEADPEAVStrPair@2@PEAH@Z
?ParseDeep@XMLUnknown@tinyxml2@@MEAAPEADPEADPEAVStrPair@2@PEAH@Z
?ParseName@StrPair@tinyxml2@@QEAAPEADPEAD@Z
?ParseText@StrPair@tinyxml2@@QEAAPEADPEADPEBDHPEAH@Z
?PopDepth@XMLDocument@tinyxml2@@AEAAXXZ
?PrepareForNewNode@XMLPrinter@tinyxml2@@AEAAX_N@Z
?PreviousSibling@XMLConstHandle@tinyxml2@@QEBA?BV12@XZ
?PreviousSibling@XMLHandle@tinyxml2@@QEAA?AV12@XZ
?PreviousSibling@XMLNode@tinyxml2@@QEAAPEAV12@XZ
?PreviousSibling@XMLNode@tinyxml2@@QEBAPEBV12@XZ
?PreviousSiblingElement@XMLConstHandle@tinyxml2@@QEBA?BV12@PEBD@Z
?PreviousSiblingElement@XMLHandle@tinyxml2@@QEAA?AV12@PEBD@Z
?PreviousSiblingElement@XMLNode@tinyxml2@@QEAAPEAVXMLElement@2@PEBD@Z
?PreviousSiblingElement@XMLNode@tinyxml2@@QEBAPEBVXMLElement@2@PEBD@Z
?Print@XMLDocument@tinyxml2@@QEBAXPEAVXMLPrinter@2@@Z
?Print@XMLPrinter@tinyxml2@@MEAAXPEBDZZ
?PrintError@XMLDocument@tinyxml2@@QEBAXXZ
?PrintSpace@XMLPrinter@tinyxml2@@MEAAXH@Z
?PrintString@XMLPrinter@tinyxml2@@AEAAXPEBD_N@Z
?ProcessEntities@XMLDocument@tinyxml2@@QEBA_NXZ
?PushAttribute@XMLPrinter@tinyxml2@@QEAAXPEBD0@Z
?PushAttribute@XMLPrinter@tinyxml2@@QEAAXPEBDH@Z
?PushAttribute@XMLPrinter@tinyxml2@@QEAAXPEBDI@Z
?PushAttribute@XMLPrinter@tinyxml2@@QEAAXPEBDN@Z
?PushAttribute@XMLPrinter@tinyxml2@@QEAAXPEBD_J@Z
?PushAttribute@XMLPrinter@tinyxml2@@QEAAXPEBD_K@Z
?PushAttribute@XMLPrinter@tinyxml2@@QEAAXPEBD_N@Z
?PushComment@XMLPrinter@tinyxml2@@QEAAXPEBD@Z
?PushDeclaration@XMLPrinter@tinyxml2@@QEAAXPEBD@Z
?PushDepth@XMLDocument@tinyxml2@@AEAAXXZ
?PushHeader@XMLPrinter@tinyxml2@@QEAAX_N0@Z
?PushText@XMLPrinter@tinyxml2@@QEAAXH@Z
?PushText@XMLPrinter@tinyxml2@@QEAAXI@Z
?PushText@XMLPrinter@tinyxml2@@QEAAXM@Z
?PushText@XMLPrinter@tinyxml2@@QEAAXN@Z
?PushText@XMLPrinter@tinyxml2@@QEAAXPEBD_N@Z
?PushText@XMLPrinter@tinyxml2@@QEAAX_J@Z
?PushText@XMLPrinter@tinyxml2@@QEAAX_K@Z
?PushText@XMLPrinter@tinyxml2@@QEAAX_N@Z
?PushUnknown@XMLPrinter@tinyxml2@@QEAAXPEBD@Z
?Putc@XMLPrinter@tinyxml2@@MEAAXD@Z
?QueryAttribute@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEBDPEAH@Z
?QueryAttribute@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEBDPEAI@Z
?QueryAttribute@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEBDPEAM@Z
?QueryAttribute@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEBDPEAN@Z
?QueryAttribute@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEBDPEAPEBD@Z
?QueryAttribute@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEBDPEA_J@Z
?QueryAttribute@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEBDPEA_K@Z
?QueryAttribute@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEBDPEA_N@Z
?QueryBoolAttribute@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEBDPEA_N@Z
?QueryBoolText@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEA_N@Z
?QueryBoolValue@XMLAttribute@tinyxml2@@QEBA?AW4XMLError@2@PEA_N@Z
?QueryDoubleAttribute@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEBDPEAN@Z
?QueryDoubleText@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEAN@Z
?QueryDoubleValue@XMLAttribute@tinyxml2@@QEBA?AW4XMLError@2@PEAN@Z
?QueryFloatAttribute@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEBDPEAM@Z
?QueryFloatText@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEAM@Z
?QueryFloatValue@XMLAttribute@tinyxml2@@QEBA?AW4XMLError@2@PEAM@Z
?QueryInt64Attribute@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEBDPEA_J@Z
?QueryInt64Text@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEA_J@Z
?QueryInt64Value@XMLAttribute@tinyxml2@@QEBA?AW4XMLError@2@PEA_J@Z
?QueryIntAttribute@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEBDPEAH@Z
?QueryIntText@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEAH@Z
?QueryIntValue@XMLAttribute@tinyxml2@@QEBA?AW4XMLError@2@PEAH@Z
?QueryStringAttribute@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEBDPEAPEBD@Z
?QueryUnsigned64Attribute@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEBDPEA_K@Z
?QueryUnsigned64Text@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEA_K@Z
?QueryUnsigned64Value@XMLAttribute@tinyxml2@@QEBA?AW4XMLError@2@PEA_K@Z
?QueryUnsignedAttribute@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEBDPEAI@Z
?QueryUnsignedText@XMLElement@tinyxml2@@QEBA?AW4XMLError@2@PEAI@Z
?QueryUnsignedValue@XMLAttribute@tinyxml2@@QEBA?AW4XMLError@2@PEAI@Z
?ReadBOM@XMLUtil@tinyxml2@@SAPEBDPEBDPEA_N@Z
?Reset@StrPair@tinyxml2@@QEAAXXZ
?RootElement@XMLDocument@tinyxml2@@QEAAPEAVXMLElement@2@XZ
?RootElement@XMLDocument@tinyxml2@@QEBAPEBVXMLElement@2@XZ
?SaveFile@XMLDocument@tinyxml2@@QEAA?AW4XMLError@2@PEAU_iobuf@@_N@Z
?SaveFile@XMLDocument@tinyxml2@@QEAA?AW4XMLError@2@PEBD_N@Z
?SealElementIfJustOpened@XMLPrinter@tinyxml2@@IEAAXXZ
?Set@StrPair@tinyxml2@@QEAAXPEAD0H@Z
?SetAttribute@XMLAttribute@tinyxml2@@QEAAXH@Z
?SetAttribute@XMLAttribute@tinyxml2@@QEAAXI@Z
?SetAttribute@XMLAttribute@tinyxml2@@QEAAXM@Z
?SetAttribute@XMLAttribute@tinyxml2@@QEAAXN@Z
?SetAttribute@XMLAttribute@tinyxml2@@QEAAXPEBD@Z
?SetAttribute@XMLAttribute@tinyxml2@@QEAAX_J@Z
?SetAttribute@XMLAttribute@tinyxml2@@QEAAX_K@Z
?SetAttribute@XMLAttribute@tinyxml2@@QEAAX_N@Z
?SetAttribute@XMLElement@tinyxml2@@QEAAXPEBD0@Z
?SetAttribute@XMLElement@tinyxml2@@QEAAXPEBDH@Z
?SetAttribute@XMLElement@tinyxml2@@QEAAXPEBDI@Z
?SetAttribute@XMLElement@tinyxml2@@QEAAXPEBDM@Z
?SetAttribute@XMLElement@tinyxml2@@QEAAXPEBDN@Z
?SetAttribute@XMLElement@tinyxml2@@QEAAXPEBD_J@Z
?SetAttribute@XMLElement@tinyxml2@@QEAAXPEBD_K@Z
?SetAttribute@XMLElement@tinyxml2@@QEAAXPEBD_N@Z
?SetBOM@XMLDocument@tinyxml2@@QEAAX_N@Z
?SetBoolSerialization@XMLUtil@tinyxml2@@SAXPEBD0@Z
?SetCData@XMLText@tinyxml2@@QEAAX_N@Z
?SetError@XMLDocument@tinyxml2@@AEAAXW4XMLError@2@HPEBDZZ
?SetInternedStr@StrPair@tinyxml2@@QEAAXPEBD@Z
?SetName@XMLAttribute@tinyxml2@@AEAAXPEBD@Z
?SetName@XMLElement@tinyxml2@@QEAAXPEBD_N@Z
?SetStr@StrPair@tinyxml2@@QEAAXPEBDH@Z
?SetText@XMLElement@tinyxml2@@QEAAXH@Z
?SetText@XMLElement@tinyxml2@@QEAAXI@Z
?SetText@XMLElement@tinyxml2@@QEAAXM@Z
?SetText@XMLElement@tinyxml2@@QEAAXN@Z
?SetText@XMLElement@tinyxml2@@QEAAXPEBD@Z
?SetText@XMLElement@tinyxml2@@QEAAX_J@Z
?SetText@XMLElement@tinyxml2@@QEAAX_K@Z
?SetText@XMLElement@tinyxml2@@QEAAX_N@Z
?SetUserData@XMLNode@tinyxml2@@QEAAXPEAX@Z
?SetValue@XMLNode@tinyxml2@@QEAAXPEBD_N@Z
?ShallowClone@XMLComment@tinyxml2@@UEBAPEAVXMLNode@2@PEAVXMLDocument@2@@Z
?ShallowClone@XMLDeclaration@tinyxml2@@UEBAPEAVXMLNode@2@PEAVXMLDocument@2@@Z
?ShallowClone@XMLDocument@tinyxml2@@UEBAPEAVXMLNode@2@PEAV12@@Z
?ShallowClone@XMLElement@tinyxml2@@UEBAPEAVXMLNode@2@PEAVXMLDocument@2@@Z
?ShallowClone@XMLText@tinyxml2@@UEBAPEAVXMLNode@2@PEAVXMLDocument@2@@Z
?ShallowClone@XMLUnknown@tinyxml2@@UEBAPEAVXMLNode@2@PEAVXMLDocument@2@@Z
?ShallowEqual@XMLComment@tinyxml2@@UEBA_NPEBVXMLNode@2@@Z
?ShallowEqual@XMLDeclaration@tinyxml2@@UEBA_NPEBVXMLNode@2@@Z
?ShallowEqual@XMLDocument@tinyxml2@@UEBA_NPEBVXMLNode@2@@Z
?ShallowEqual@XMLElement@tinyxml2@@UEBA_NPEBVXMLNode@2@@Z
?ShallowEqual@XMLText@tinyxml2@@UEBA_NPEBVXMLNode@2@@Z
?ShallowEqual@XMLUnknown@tinyxml2@@UEBA_NPEBVXMLNode@2@@Z
?SkipWhiteSpace@XMLUtil@tinyxml2@@SAPEADQEADPEAH@Z
?SkipWhiteSpace@XMLUtil@tinyxml2@@SAPEBDPEBDPEAH@Z
?StringEqual@XMLUtil@tinyxml2@@SA_NPEBD0H@Z
?ToBool@XMLUtil@tinyxml2@@SA_NPEBDPEA_N@Z
?ToComment@XMLComment@tinyxml2@@UEAAPEAV12@XZ
?ToComment@XMLComment@tinyxml2@@UEBAPEBV12@XZ
?ToComment@XMLNode@tinyxml2@@UEAAPEAVXMLComment@2@XZ
?ToComment@XMLNode@tinyxml2@@UEBAPEBVXMLComment@2@XZ
?ToDeclaration@XMLConstHandle@tinyxml2@@QEBAPEBVXMLDeclaration@2@XZ
?ToDeclaration@XMLDeclaration@tinyxml2@@UEAAPEAV12@XZ
?ToDeclaration@XMLDeclaration@tinyxml2@@UEBAPEBV12@XZ
?ToDeclaration@XMLHandle@tinyxml2@@QEAAPEAVXMLDeclaration@2@XZ
?ToDeclaration@XMLNode@tinyxml2@@UEAAPEAVXMLDeclaration@2@XZ
?ToDeclaration@XMLNode@tinyxml2@@UEBAPEBVXMLDeclaration@2@XZ
?ToDocument@XMLDocument@tinyxml2@@UEAAPEAV12@XZ
?ToDocument@XMLDocument@tinyxml2@@UEBAPEBV12@XZ
?ToDocument@XMLNode@tinyxml2@@UEAAPEAVXMLDocument@2@XZ
?ToDocument@XMLNode@tinyxml2@@UEBAPEBVXMLDocument@2@XZ
?ToDouble@XMLUtil@tinyxml2@@SA_NPEBDPEAN@Z
?ToElement@XMLConstHandle@tinyxml2@@QEBAPEBVXMLElement@2@XZ
?ToElement@XMLElement@tinyxml2@@UEAAPEAV12@XZ
?ToElement@XMLElement@tinyxml2@@UEBAPEBV12@XZ
?ToElement@XMLHandle@tinyxml2@@QEAAPEAVXMLElement@2@XZ
?ToElement@XMLNode@tinyxml2@@UEAAPEAVXMLElement@2@XZ
?ToElement@XMLNode@tinyxml2@@UEBAPEBVXMLElement@2@XZ
?ToElementWithName@XMLNode@tinyxml2@@AEBAPEBVXMLElement@2@PEBD@Z
?ToFloat@XMLUtil@tinyxml2@@SA_NPEBDPEAM@Z
?ToInt64@XMLUtil@tinyxml2@@SA_NPEBDPEA_J@Z
?ToInt@XMLUtil@tinyxml2@@SA_NPEBDPEAH@Z
?ToNode@XMLConstHandle@tinyxml2@@QEBAPEBVXMLNode@2@XZ
?ToNode@XMLHandle@tinyxml2@@QEAAPEAVXMLNode@2@XZ
?ToStr@XMLUtil@tinyxml2@@SAXHPEADH@Z
?ToStr@XMLUtil@tinyxml2@@SAXIPEADH@Z
?ToStr@XMLUtil@tinyxml2@@SAXMPEADH@Z
?ToStr@XMLUtil@tinyxml2@@SAXNPEADH@Z
?ToStr@XMLUtil@tinyxml2@@SAX_JPEADH@Z
?ToStr@XMLUtil@tinyxml2@@SAX_KPEADH@Z
?ToStr@XMLUtil@tinyxml2@@SAX_NPEADH@Z
?ToText@XMLConstHandle@tinyxml2@@QEBAPEBVXMLText@2@XZ
?ToText@XMLHandle@tinyxml2@@QEAAPEAVXMLText@2@XZ
?ToText@XMLNode@tinyxml2@@UEAAPEAVXMLText@2@XZ
?ToText@XMLNode@tinyxml2@@UEBAPEBVXMLText@2@XZ
?ToText@XMLText@tinyxml2@@UEAAPEAV12@XZ
?ToText@XMLText@tinyxml2@@UEBAPEBV12@XZ
?ToUnknown@XMLConstHandle@tinyxml2@@QEBAPEBVXMLUnknown@2@XZ
?ToUnknown@XMLHandle@tinyxml2@@QEAAPEAVXMLUnknown@2@XZ
?ToUnknown@XMLNode@tinyxml2@@UEAAPEAVXMLUnknown@2@XZ
?ToUnknown@XMLNode@tinyxml2@@UEBAPEBVXMLUnknown@2@XZ
?ToUnknown@XMLUnknown@tinyxml2@@UEAAPEAV12@XZ
?ToUnknown@XMLUnknown@tinyxml2@@UEBAPEBV12@XZ
?ToUnsigned64@XMLUtil@tinyxml2@@SA_NPEBDPEA_K@Z
?ToUnsigned@XMLUtil@tinyxml2@@SA_NPEBDPEAI@Z
?TransferTo@StrPair@tinyxml2@@QEAAXPEAV12@@Z
?Unlink@XMLNode@tinyxml2@@AEAAXPEAV12@@Z
?Unsigned64Attribute@XMLElement@tinyxml2@@QEBA_KPEBD_K@Z
?Unsigned64Text@XMLElement@tinyxml2@@QEBA_K_K@Z
?Unsigned64Value@XMLAttribute@tinyxml2@@QEBA_KXZ
?UnsignedAttribute@XMLElement@tinyxml2@@QEBAIPEBDI@Z
?UnsignedText@XMLElement@tinyxml2@@QEBAII@Z
?UnsignedValue@XMLAttribute@tinyxml2@@QEBAIXZ
?Value@XMLAttribute@tinyxml2@@QEBAPEBDXZ
?Value@XMLNode@tinyxml2@@QEBAPEBDXZ
?Visit@XMLPrinter@tinyxml2@@UEAA_NAEBVXMLComment@2@@Z
?Visit@XMLPrinter@tinyxml2@@UEAA_NAEBVXMLDeclaration@2@@Z
?Visit@XMLPrinter@tinyxml2@@UEAA_NAEBVXMLText@2@@Z
?Visit@XMLPrinter@tinyxml2@@UEAA_NAEBVXMLUnknown@2@@Z
?Visit@XMLVisitor@tinyxml2@@UEAA_NAEBVXMLComment@2@@Z
?Visit@XMLVisitor@tinyxml2@@UEAA_NAEBVXMLDeclaration@2@@Z
?Visit@XMLVisitor@tinyxml2@@UEAA_NAEBVXMLText@2@@Z
?Visit@XMLVisitor@tinyxml2@@UEAA_NAEBVXMLUnknown@2@@Z
?VisitEnter@XMLPrinter@tinyxml2@@UEAA_NAEBVXMLDocument@2@@Z
?VisitEnter@XMLPrinter@tinyxml2@@UEAA_NAEBVXMLElement@2@PEBVXMLAttribute@2@@Z
?VisitEnter@XMLVisitor@tinyxml2@@UEAA_NAEBVXMLDocument@2@@Z
?VisitEnter@XMLVisitor@tinyxml2@@UEAA_NAEBVXMLElement@2@PEBVXMLAttribute@2@@Z
?VisitExit@XMLPrinter@tinyxml2@@UEAA_NAEBVXMLDocument@2@@Z
?VisitExit@XMLPrinter@tinyxml2@@UEAA_NAEBVXMLElement@2@@Z
?VisitExit@XMLVisitor@tinyxml2@@UEAA_NAEBVXMLDocument@2@@Z
?VisitExit@XMLVisitor@tinyxml2@@UEAA_NAEBVXMLElement@2@@Z
?WhitespaceMode@XMLDocument@tinyxml2@@QEBA?AW4Whitespace@2@XZ
?Write@XMLPrinter@tinyxml2@@IEAAXPEBD@Z
?Write@XMLPrinter@tinyxml2@@MEAAXPEBD_K@Z
?_errorNames@XMLDocument@tinyxml2@@0PAPEBDA
?writeBoolFalse@XMLUtil@tinyxml2@@0PEBDEB
?writeBoolTrue@XMLUtil@tinyxml2@@0PEBDEB
Sections
.text Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 283B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ