EtumrepMMO[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

EtumrepMMO.rar
Size

28.8MB
MD5

633f6d39536dff392899047609d6ba48
SHA1

d3348e0ee0d47c55f0a0d44a57ce01ed65e2b53a
SHA256

395b84897855768b03411c41cd591fda636645abb6595dee270cb99cddba15c2
SHA512

57270f00311f769a289aef57b4d5cd8ebd85b18cf74fceb5afbc11201156f06b22195d023a1515fca92bb6d48d05cc2f7c47200ce7fefac611d68b15856ea454
SSDEEP

786432:oHBkQylEUX4hUp219nziRxyMMLGOHBkQylLP7Pm:oHBkVlEq4hUEjMmGOHBkVlLDPm

Score

3^/10

Malware Config

Signatures

Unsigned PE 7 IoCs

Checks for missing Authenticode signature.

resource
unpack001/EtumrepMMO/EtumrepMMO.ConsoleApp.dll
unpack001/EtumrepMMO/EtumrepMMO.ConsoleApp.exe
unpack001/EtumrepMMO/EtumrepMMO.Lib.dll
unpack001/EtumrepMMO/IndexRange.dll
unpack001/EtumrepMMO/PKHeX.Core.dll
unpack001/EtumrepMMO/PLA-SeedFinder.dll
unpack001/EtumrepMMO/ref/EtumrepMMO.ConsoleApp.dll

Files

EtumrepMMO.rar
.rar
EtumrepMMO/EtumrepMMO.ConsoleApp.deps.json
EtumrepMMO/EtumrepMMO.ConsoleApp.dll
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
EtumrepMMO/EtumrepMMO.ConsoleApp.exe
.exe windows x64

6dbf27f4c70fe2c8ed3e0122ba75d641

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
FindClose
MultiByteToWideChar
GetLastError
GetFileAttributesExW
GetFullPathNameW
GetProcAddress
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EnterCriticalSection
FindFirstFileExW
OutputDebugStringW
LoadLibraryA
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
GetStringTypeW

user32

MessageBoxW

shell32

ShellExecuteW

advapi32

RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey

api-ms-win-crt-runtime-l1-1-0

_exit
__p___argc
_initterm_e
_initterm
_get_initial_wide_environment
_invalid_parameter_noinfo_noreturn
_initialize_wide_environment
_configure_wide_argv
_initialize_onexit_table
_set_app_type
__p___wargv
_seh_filter_exe
_register_onexit_function
_cexit
terminate
_errno
exit
abort
_crt_atexit
_c_exit
_register_thread_local_exe_atexit_callback

api-ms-win-crt-stdio-l1-1-0

setvbuf
fflush
_wfopen
__stdio_common_vswprintf
__stdio_common_vfwprintf
_set_fmode
__stdio_common_vsprintf_s
__acrt_iob_func
fputwc
fputws
__p__commode

api-ms-win-crt-heap-l1-1-0

_set_new_mode
_callnewh
free
malloc
calloc

api-ms-win-crt-string-l1-1-0

wcsnlen
strcpy_s
_wcsdup
strcspn
wcsncmp
toupper

api-ms-win-crt-convert-l1-1-0

_wtoi
wcstoul

api-ms-win-crt-locale-l1-1-0

setlocale
___lc_locale_name_func
localeconv
_unlock_locales
_lock_locales
___mb_cur_max_func
_configthreadlocale
__pctype_func
___lc_codepage_func

api-ms-win-crt-math-l1-1-0

frexp
__setusermatherr

api-ms-win-crt-time-l1-1-0

_gmtime64_s
_time64
wcsftime

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EtumrepMMO/EtumrepMMO.ConsoleApp.runtimeconfig.json
EtumrepMMO/EtumrepMMO.Lib.dll
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 322KB - Virtual size: 322KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
EtumrepMMO/IndexRange.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EtumrepMMO/Microsoft.Z3.dll
.dll windows x64

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:32

Not After

01/09/2022, 18:32

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

43:89:a1:fa:28:28:df:b6:1a:82:71:8b:38:7b:35:07:74:2b:13:d4:0b:b6:0d:c8:23:72:8f:d7:ab:46:a5:5a
Signer

Actual PE Digest

43:89:a1:fa:28:28:df:b6:1a:82:71:8b:38:7b:35:07:74:2b:13:d4:0b:b6:0d:c8:23:72:8f:d7:ab:46:a5:5a

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

03/05/2023, 12:04
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
EtumrepMMO/PKHeX.Core.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 11.6MB - Virtual size: 11.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EtumrepMMO/PLA-SeedFinder.dll
.dll windows x64

d0dd9785ee3ab72775b1a0a75454b3a4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
CloseHandle
WaitForSingleObjectEx
GetExitCodeThread
GetNativeSystemInfo
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
WideCharToMultiByte
GetProcAddress
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetCurrentProcess
TerminateProcess
ExitProcess
GetModuleFileNameW
HeapAlloc
HeapFree
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
ReadFile
ReadConsoleW
HeapReAlloc
SetStdHandle
HeapSize
CreateFileW
WriteConsoleW
RtlUnwind

Exports

Exports

hello_world
pa_PLA_find_seeds

Sections

.text
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EtumrepMMO/libz3.dll
.dll windows x64

3e01e15f2e03463ec524a658150aebc0

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:32

Not After

01/09/2022, 18:32

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5e:36:77:4e:af:e3:c0:9d:db:3b:75:40:d2:e6:75:40:ea:fb:3a:d9:05:03:12:e9:96:e5:27:54:3d:a9:60:95
Signer

Actual PE Digest

5e:36:77:4e:af:e3:c0:9d:db:3b:75:40:d2:e6:75:40:ea:fb:3a:d9:05:03:12:e9:96:e5:27:54:3d:a9:60:95

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

03/05/2023, 12:04
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcp140

_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
_Thrd_id
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Query_perf_counter
_Query_perf_frequency
?_Xbad_function_call@std@@YAXXZ
_Mtx_init_in_situ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
_Thrd_join
_Thrd_hardware_concurrency
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_broadcast
_Cnd_signal
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??Bios_base@std@@QEBA_NXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
_Xtime_get_ticks
_Thrd_yield
_Mtx_current_owns
_Cnd_timedwait
?_Syserror_map@std@@YAPEBDH@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?copyfmt@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAAEAV12@AEBV12@@Z
_Mtx_destroy_in_situ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Xbad_alloc@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPEBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

kernel32

ResetEvent
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
GlobalMemoryStatusEx
GetSystemTimeAsFileTime

vcruntime140

memcpy
__std_type_info_destroy_list
_purecall
__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memmove
memset
strchr
memcmp
__RTDynamicCast
__RTtypeid
__std_type_info_compare
__std_type_info_name
memchr
__current_exception
__current_exception_context
__C_specific_handler

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_errno
raise
exit
signal
_set_invalid_parameter_handler
_initterm
terminate
_invalid_parameter_noinfo_noreturn
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_cexit
_crt_atexit
_beginthreadex

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc
realloc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
__stdio_common_vsprintf
ungetc
setvbuf
fwrite
_fseeki64
fsetpos
fread
fputc
fgetpos
fgetc
fflush
fclose
_get_stream_buffer_pointers
__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-convert-l1-1-0

atoi
strtol
strtod

api-ms-win-crt-string-l1-1-0

strcmp
isdigit
isalnum
isspace
strncmp

api-ms-win-crt-math-l1-1-0

pow
floor
exp
sqrt
log
log2
ceil
ceilf

api-ms-win-crt-utility-l1-1-0

rand

Exports

Exports

Z3_add_const_interp
Z3_add_func_interp
Z3_add_rec_def
Z3_algebraic_add
Z3_algebraic_div
Z3_algebraic_eq
Z3_algebraic_eval
Z3_algebraic_ge
Z3_algebraic_get_i
Z3_algebraic_get_poly
Z3_algebraic_gt
Z3_algebraic_is_neg
Z3_algebraic_is_pos
Z3_algebraic_is_value
Z3_algebraic_is_zero
Z3_algebraic_le
Z3_algebraic_lt
Z3_algebraic_mul
Z3_algebraic_neq
Z3_algebraic_power
Z3_algebraic_root
Z3_algebraic_roots
Z3_algebraic_sign
Z3_algebraic_sub
Z3_app_to_ast
Z3_append_log
Z3_apply_result_dec_ref
Z3_apply_result_get_num_subgoals
Z3_apply_result_get_subgoal
Z3_apply_result_inc_ref
Z3_apply_result_to_string
Z3_ast_map_contains
Z3_ast_map_dec_ref
Z3_ast_map_erase
Z3_ast_map_find
Z3_ast_map_inc_ref
Z3_ast_map_insert
Z3_ast_map_keys
Z3_ast_map_reset
Z3_ast_map_size
Z3_ast_map_to_string
Z3_ast_to_string
Z3_ast_vector_dec_ref
Z3_ast_vector_get
Z3_ast_vector_inc_ref
Z3_ast_vector_push
Z3_ast_vector_resize
Z3_ast_vector_set
Z3_ast_vector_size
Z3_ast_vector_to_string
Z3_ast_vector_translate
Z3_benchmark_to_smtlib_string
Z3_close_log
Z3_datatype_update_field
Z3_dec_ref
Z3_del_config
Z3_del_constructor
Z3_del_constructor_list
Z3_del_context
Z3_disable_trace
Z3_enable_trace
Z3_eval_smtlib2_string
Z3_finalize_memory
Z3_fixedpoint_add_callback
Z3_fixedpoint_add_constraint
Z3_fixedpoint_add_cover
Z3_fixedpoint_add_fact
Z3_fixedpoint_add_invariant
Z3_fixedpoint_add_rule
Z3_fixedpoint_assert
Z3_fixedpoint_dec_ref
Z3_fixedpoint_from_file
Z3_fixedpoint_from_string
Z3_fixedpoint_get_answer
Z3_fixedpoint_get_assertions
Z3_fixedpoint_get_cover_delta
Z3_fixedpoint_get_ground_sat_answer
Z3_fixedpoint_get_help
Z3_fixedpoint_get_num_levels
Z3_fixedpoint_get_param_descrs
Z3_fixedpoint_get_reachable
Z3_fixedpoint_get_reason_unknown
Z3_fixedpoint_get_rule_names_along_trace
Z3_fixedpoint_get_rules
Z3_fixedpoint_get_rules_along_trace
Z3_fixedpoint_get_statistics
Z3_fixedpoint_inc_ref
Z3_fixedpoint_init
Z3_fixedpoint_query
Z3_fixedpoint_query_from_lvl
Z3_fixedpoint_query_relations
Z3_fixedpoint_register_relation
Z3_fixedpoint_set_params
Z3_fixedpoint_set_predicate_representation
Z3_fixedpoint_set_reduce_app_callback
Z3_fixedpoint_set_reduce_assign_callback
Z3_fixedpoint_to_string
Z3_fixedpoint_update_rule
Z3_fpa_get_ebits
Z3_fpa_get_numeral_exponent_bv
Z3_fpa_get_numeral_exponent_int64
Z3_fpa_get_numeral_exponent_string
Z3_fpa_get_numeral_sign
Z3_fpa_get_numeral_sign_bv
Z3_fpa_get_numeral_significand_bv
Z3_fpa_get_numeral_significand_string
Z3_fpa_get_numeral_significand_uint64
Z3_fpa_get_sbits
Z3_fpa_is_numeral_inf
Z3_fpa_is_numeral_nan
Z3_fpa_is_numeral_negative
Z3_fpa_is_numeral_normal
Z3_fpa_is_numeral_positive
Z3_fpa_is_numeral_subnormal
Z3_fpa_is_numeral_zero
Z3_func_decl_to_ast
Z3_func_decl_to_string
Z3_func_entry_dec_ref
Z3_func_entry_get_arg
Z3_func_entry_get_num_args
Z3_func_entry_get_value
Z3_func_entry_inc_ref
Z3_func_interp_add_entry
Z3_func_interp_dec_ref
Z3_func_interp_get_arity
Z3_func_interp_get_else
Z3_func_interp_get_entry
Z3_func_interp_get_num_entries
Z3_func_interp_inc_ref
Z3_func_interp_set_else
Z3_get_algebraic_number_lower
Z3_get_algebraic_number_upper
Z3_get_app_arg
Z3_get_app_decl
Z3_get_app_num_args
Z3_get_arity
Z3_get_array_sort_domain
Z3_get_array_sort_range
Z3_get_as_array_func_decl
Z3_get_ast_hash
Z3_get_ast_id
Z3_get_ast_kind
Z3_get_bool_value
Z3_get_bv_sort_size
Z3_get_datatype_sort_constructor
Z3_get_datatype_sort_constructor_accessor
Z3_get_datatype_sort_num_constructors
Z3_get_datatype_sort_recognizer
Z3_get_decl_ast_parameter
Z3_get_decl_double_parameter
Z3_get_decl_func_decl_parameter
Z3_get_decl_int_parameter
Z3_get_decl_kind
Z3_get_decl_name
Z3_get_decl_num_parameters
Z3_get_decl_parameter_kind
Z3_get_decl_rational_parameter
Z3_get_decl_sort_parameter
Z3_get_decl_symbol_parameter
Z3_get_denominator
Z3_get_domain
Z3_get_domain_size
Z3_get_error_code
Z3_get_error_msg
Z3_get_estimated_alloc_size
Z3_get_finite_domain_sort_size
Z3_get_full_version
Z3_get_func_decl_id
Z3_get_implied_equalities
Z3_get_index_value
Z3_get_lstring
Z3_get_num_probes
Z3_get_num_tactics
Z3_get_numeral_binary_string
Z3_get_numeral_decimal_string
Z3_get_numeral_double
Z3_get_numeral_int
Z3_get_numeral_int64
Z3_get_numeral_rational_int64
Z3_get_numeral_small
Z3_get_numeral_string
Z3_get_numeral_uint
Z3_get_numeral_uint64
Z3_get_numerator
Z3_get_pattern
Z3_get_pattern_num_terms
Z3_get_probe_name
Z3_get_quantifier_body
Z3_get_quantifier_bound_name
Z3_get_quantifier_bound_sort
Z3_get_quantifier_no_pattern_ast
Z3_get_quantifier_num_bound
Z3_get_quantifier_num_no_patterns
Z3_get_quantifier_num_patterns
Z3_get_quantifier_pattern_ast
Z3_get_quantifier_weight
Z3_get_range
Z3_get_re_sort_basis
Z3_get_relation_arity
Z3_get_relation_column
Z3_get_seq_sort_basis
Z3_get_sort
Z3_get_sort_id
Z3_get_sort_kind
Z3_get_sort_name
Z3_get_string
Z3_get_string_contents
Z3_get_string_length
Z3_get_symbol_int
Z3_get_symbol_kind
Z3_get_symbol_string
Z3_get_tactic_name
Z3_get_tuple_sort_field_decl
Z3_get_tuple_sort_mk_decl
Z3_get_tuple_sort_num_fields
Z3_get_version
Z3_global_param_get
Z3_global_param_reset_all
Z3_global_param_set
Z3_goal_assert
Z3_goal_convert_model
Z3_goal_dec_ref
Z3_goal_depth
Z3_goal_formula
Z3_goal_inc_ref
Z3_goal_inconsistent
Z3_goal_is_decided_sat
Z3_goal_is_decided_unsat
Z3_goal_num_exprs
Z3_goal_precision
Z3_goal_reset
Z3_goal_size
Z3_goal_to_dimacs_string
Z3_goal_to_string
Z3_goal_translate
Z3_inc_ref
Z3_interrupt
Z3_is_algebraic_number
Z3_is_app
Z3_is_as_array
Z3_is_char_sort
Z3_is_eq_ast
Z3_is_eq_func_decl
Z3_is_eq_sort
Z3_is_lambda
Z3_is_numeral_ast
Z3_is_quantifier_exists
Z3_is_quantifier_forall
Z3_is_re_sort
Z3_is_seq_sort
Z3_is_string
Z3_is_string_sort
Z3_is_well_sorted
Z3_mk_add
Z3_mk_and
Z3_mk_app
Z3_mk_array_default
Z3_mk_array_ext
Z3_mk_array_sort
Z3_mk_array_sort_n
Z3_mk_as_array
Z3_mk_ast_map
Z3_mk_ast_vector
Z3_mk_atleast
Z3_mk_atmost
Z3_mk_bool_sort
Z3_mk_bound
Z3_mk_bv2int
Z3_mk_bv_numeral
Z3_mk_bv_sort
Z3_mk_bvadd
Z3_mk_bvadd_no_overflow
Z3_mk_bvadd_no_underflow
Z3_mk_bvand
Z3_mk_bvashr
Z3_mk_bvlshr
Z3_mk_bvmul
Z3_mk_bvmul_no_overflow
Z3_mk_bvmul_no_underflow
Z3_mk_bvnand
Z3_mk_bvneg
Z3_mk_bvneg_no_overflow
Z3_mk_bvnor
Z3_mk_bvnot
Z3_mk_bvor
Z3_mk_bvredand
Z3_mk_bvredor
Z3_mk_bvsdiv
Z3_mk_bvsdiv_no_overflow
Z3_mk_bvsge
Z3_mk_bvsgt
Z3_mk_bvshl
Z3_mk_bvsle
Z3_mk_bvslt
Z3_mk_bvsmod
Z3_mk_bvsrem
Z3_mk_bvsub
Z3_mk_bvsub_no_overflow
Z3_mk_bvsub_no_underflow
Z3_mk_bvudiv
Z3_mk_bvuge
Z3_mk_bvugt
Z3_mk_bvule
Z3_mk_bvult
Z3_mk_bvurem
Z3_mk_bvxnor
Z3_mk_bvxor
Z3_mk_char_from_bv
Z3_mk_char_is_digit
Z3_mk_char_le
Z3_mk_char_sort
Z3_mk_char_to_bv
Z3_mk_char_to_int
Z3_mk_concat
Z3_mk_config
Z3_mk_const
Z3_mk_const_array
Z3_mk_constructor
Z3_mk_constructor_list
Z3_mk_context
Z3_mk_context_rc
Z3_mk_datatype
Z3_mk_datatypes
Z3_mk_distinct
Z3_mk_div
Z3_mk_divides
Z3_mk_empty_set
Z3_mk_enumeration_sort
Z3_mk_eq
Z3_mk_exists
Z3_mk_exists_const
Z3_mk_ext_rotate_left
Z3_mk_ext_rotate_right
Z3_mk_extract
Z3_mk_false
Z3_mk_finite_domain_sort
Z3_mk_fixedpoint
Z3_mk_forall
Z3_mk_forall_const
Z3_mk_fpa_abs
Z3_mk_fpa_add
Z3_mk_fpa_div
Z3_mk_fpa_eq
Z3_mk_fpa_fma
Z3_mk_fpa_fp
Z3_mk_fpa_geq
Z3_mk_fpa_gt
Z3_mk_fpa_inf
Z3_mk_fpa_is_infinite
Z3_mk_fpa_is_nan
Z3_mk_fpa_is_negative
Z3_mk_fpa_is_normal
Z3_mk_fpa_is_positive
Z3_mk_fpa_is_subnormal
Z3_mk_fpa_is_zero
Z3_mk_fpa_leq
Z3_mk_fpa_lt
Z3_mk_fpa_max
Z3_mk_fpa_min
Z3_mk_fpa_mul
Z3_mk_fpa_nan
Z3_mk_fpa_neg
Z3_mk_fpa_numeral_double
Z3_mk_fpa_numeral_float
Z3_mk_fpa_numeral_int
Z3_mk_fpa_numeral_int64_uint64
Z3_mk_fpa_numeral_int_uint
Z3_mk_fpa_rem
Z3_mk_fpa_rna
Z3_mk_fpa_rne
Z3_mk_fpa_round_nearest_ties_to_away
Z3_mk_fpa_round_nearest_ties_to_even
Z3_mk_fpa_round_to_integral
Z3_mk_fpa_round_toward_negative
Z3_mk_fpa_round_toward_positive
Z3_mk_fpa_round_toward_zero
Z3_mk_fpa_rounding_mode_sort
Z3_mk_fpa_rtn
Z3_mk_fpa_rtp
Z3_mk_fpa_rtz
Z3_mk_fpa_sort
Z3_mk_fpa_sort_128
Z3_mk_fpa_sort_16
Z3_mk_fpa_sort_32
Z3_mk_fpa_sort_64
Z3_mk_fpa_sort_double
Z3_mk_fpa_sort_half
Z3_mk_fpa_sort_quadruple
Z3_mk_fpa_sort_single
Z3_mk_fpa_sqrt
Z3_mk_fpa_sub
Z3_mk_fpa_to_fp_bv
Z3_mk_fpa_to_fp_float
Z3_mk_fpa_to_fp_int_real
Z3_mk_fpa_to_fp_real
Z3_mk_fpa_to_fp_signed
Z3_mk_fpa_to_fp_unsigned
Z3_mk_fpa_to_ieee_bv
Z3_mk_fpa_to_real
Z3_mk_fpa_to_sbv
Z3_mk_fpa_to_ubv
Z3_mk_fpa_zero
Z3_mk_fresh_const
Z3_mk_fresh_func_decl
Z3_mk_full_set
Z3_mk_func_decl
Z3_mk_ge
Z3_mk_goal
Z3_mk_gt
Z3_mk_iff
Z3_mk_implies
Z3_mk_int
Z3_mk_int2bv
Z3_mk_int2real
Z3_mk_int64
Z3_mk_int_sort
Z3_mk_int_symbol
Z3_mk_int_to_str
Z3_mk_is_int
Z3_mk_ite
Z3_mk_lambda
Z3_mk_lambda_const
Z3_mk_le
Z3_mk_linear_order
Z3_mk_list_sort
Z3_mk_lstring
Z3_mk_lt
Z3_mk_map
Z3_mk_mod
Z3_mk_model
Z3_mk_mul
Z3_mk_not
Z3_mk_numeral
Z3_mk_optimize
Z3_mk_or
Z3_mk_params
Z3_mk_partial_order
Z3_mk_pattern
Z3_mk_pbeq
Z3_mk_pbge
Z3_mk_pble
Z3_mk_piecewise_linear_order
Z3_mk_power
Z3_mk_probe
Z3_mk_quantifier
Z3_mk_quantifier_const
Z3_mk_quantifier_const_ex
Z3_mk_quantifier_ex
Z3_mk_re_allchar
Z3_mk_re_complement
Z3_mk_re_concat
Z3_mk_re_diff
Z3_mk_re_empty
Z3_mk_re_full
Z3_mk_re_intersect
Z3_mk_re_loop
Z3_mk_re_option
Z3_mk_re_plus
Z3_mk_re_range
Z3_mk_re_sort
Z3_mk_re_star
Z3_mk_re_union
Z3_mk_real
Z3_mk_real2int
Z3_mk_real_sort
Z3_mk_rec_func_decl
Z3_mk_rem
Z3_mk_repeat
Z3_mk_rotate_left
Z3_mk_rotate_right
Z3_mk_sbv_to_str
Z3_mk_select
Z3_mk_select_n
Z3_mk_seq_at
Z3_mk_seq_concat
Z3_mk_seq_contains
Z3_mk_seq_empty
Z3_mk_seq_extract
Z3_mk_seq_in_re
Z3_mk_seq_index
Z3_mk_seq_last_index
Z3_mk_seq_length
Z3_mk_seq_nth
Z3_mk_seq_prefix
Z3_mk_seq_replace
Z3_mk_seq_sort
Z3_mk_seq_suffix
Z3_mk_seq_to_re
Z3_mk_seq_unit
Z3_mk_set_add
Z3_mk_set_complement
Z3_mk_set_del
Z3_mk_set_difference
Z3_mk_set_has_size
Z3_mk_set_intersect
Z3_mk_set_member
Z3_mk_set_sort
Z3_mk_set_subset
Z3_mk_set_union
Z3_mk_sign_ext

Sections

.text
Size: 12.4MB - Virtual size: 12.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 424KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EtumrepMMO/ref/EtumrepMMO.ConsoleApp.dll
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.mvid
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
EtumrepMMO/runtimes/linux-x64/native/libz3.so
.elf linux x64
EtumrepMMO/runtimes/osx-x64/native/libz3.dylib
.macho macos
EtumrepMMO/runtimes/win-x64/native/libz3.dll
.dll windows x64

3e01e15f2e03463ec524a658150aebc0

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:32

Not After

01/09/2022, 18:32

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5e:36:77:4e:af:e3:c0:9d:db:3b:75:40:d2:e6:75:40:ea:fb:3a:d9:05:03:12:e9:96:e5:27:54:3d:a9:60:95
Signer

Actual PE Digest

5e:36:77:4e:af:e3:c0:9d:db:3b:75:40:d2:e6:75:40:ea:fb:3a:d9:05:03:12:e9:96:e5:27:54:3d:a9:60:95

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

03/05/2023, 12:04
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcp140

_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
_Thrd_id
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Query_perf_counter
_Query_perf_frequency
?_Xbad_function_call@std@@YAXXZ
_Mtx_init_in_situ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
_Thrd_join
_Thrd_hardware_concurrency
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_broadcast
_Cnd_signal
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??Bios_base@std@@QEBA_NXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
_Xtime_get_ticks
_Thrd_yield
_Mtx_current_owns
_Cnd_timedwait
?_Syserror_map@std@@YAPEBDH@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?copyfmt@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAAEAV12@AEBV12@@Z
_Mtx_destroy_in_situ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Xbad_alloc@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPEBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

kernel32

ResetEvent
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
GlobalMemoryStatusEx
GetSystemTimeAsFileTime

vcruntime140

memcpy
__std_type_info_destroy_list
_purecall
__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memmove
memset
strchr
memcmp
__RTDynamicCast
__RTtypeid
__std_type_info_compare
__std_type_info_name
memchr
__current_exception
__current_exception_context
__C_specific_handler

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_errno
raise
exit
signal
_set_invalid_parameter_handler
_initterm
terminate
_invalid_parameter_noinfo_noreturn
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_cexit
_crt_atexit
_beginthreadex

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc
realloc

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
__stdio_common_vsprintf
ungetc
setvbuf
fwrite
_fseeki64
fsetpos
fread
fputc
fgetpos
fgetc
fflush
fclose
_get_stream_buffer_pointers
__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-convert-l1-1-0

atoi
strtol
strtod

api-ms-win-crt-string-l1-1-0

strcmp
isdigit
isalnum
isspace
strncmp

api-ms-win-crt-math-l1-1-0

pow
floor
exp
sqrt
log
log2
ceil
ceilf

api-ms-win-crt-utility-l1-1-0

rand

Exports

Exports

Z3_add_const_interp
Z3_add_func_interp
Z3_add_rec_def
Z3_algebraic_add
Z3_algebraic_div
Z3_algebraic_eq
Z3_algebraic_eval
Z3_algebraic_ge
Z3_algebraic_get_i
Z3_algebraic_get_poly
Z3_algebraic_gt
Z3_algebraic_is_neg
Z3_algebraic_is_pos
Z3_algebraic_is_value
Z3_algebraic_is_zero
Z3_algebraic_le
Z3_algebraic_lt
Z3_algebraic_mul
Z3_algebraic_neq
Z3_algebraic_power
Z3_algebraic_root
Z3_algebraic_roots
Z3_algebraic_sign
Z3_algebraic_sub
Z3_app_to_ast
Z3_append_log
Z3_apply_result_dec_ref
Z3_apply_result_get_num_subgoals
Z3_apply_result_get_subgoal
Z3_apply_result_inc_ref
Z3_apply_result_to_string
Z3_ast_map_contains
Z3_ast_map_dec_ref
Z3_ast_map_erase
Z3_ast_map_find
Z3_ast_map_inc_ref
Z3_ast_map_insert
Z3_ast_map_keys
Z3_ast_map_reset
Z3_ast_map_size
Z3_ast_map_to_string
Z3_ast_to_string
Z3_ast_vector_dec_ref
Z3_ast_vector_get
Z3_ast_vector_inc_ref
Z3_ast_vector_push
Z3_ast_vector_resize
Z3_ast_vector_set
Z3_ast_vector_size
Z3_ast_vector_to_string
Z3_ast_vector_translate
Z3_benchmark_to_smtlib_string
Z3_close_log
Z3_datatype_update_field
Z3_dec_ref
Z3_del_config
Z3_del_constructor
Z3_del_constructor_list
Z3_del_context
Z3_disable_trace
Z3_enable_trace
Z3_eval_smtlib2_string
Z3_finalize_memory
Z3_fixedpoint_add_callback
Z3_fixedpoint_add_constraint
Z3_fixedpoint_add_cover
Z3_fixedpoint_add_fact
Z3_fixedpoint_add_invariant
Z3_fixedpoint_add_rule
Z3_fixedpoint_assert
Z3_fixedpoint_dec_ref
Z3_fixedpoint_from_file
Z3_fixedpoint_from_string
Z3_fixedpoint_get_answer
Z3_fixedpoint_get_assertions
Z3_fixedpoint_get_cover_delta
Z3_fixedpoint_get_ground_sat_answer
Z3_fixedpoint_get_help
Z3_fixedpoint_get_num_levels
Z3_fixedpoint_get_param_descrs
Z3_fixedpoint_get_reachable
Z3_fixedpoint_get_reason_unknown
Z3_fixedpoint_get_rule_names_along_trace
Z3_fixedpoint_get_rules
Z3_fixedpoint_get_rules_along_trace
Z3_fixedpoint_get_statistics
Z3_fixedpoint_inc_ref
Z3_fixedpoint_init
Z3_fixedpoint_query
Z3_fixedpoint_query_from_lvl
Z3_fixedpoint_query_relations
Z3_fixedpoint_register_relation
Z3_fixedpoint_set_params
Z3_fixedpoint_set_predicate_representation
Z3_fixedpoint_set_reduce_app_callback
Z3_fixedpoint_set_reduce_assign_callback
Z3_fixedpoint_to_string
Z3_fixedpoint_update_rule
Z3_fpa_get_ebits
Z3_fpa_get_numeral_exponent_bv
Z3_fpa_get_numeral_exponent_int64
Z3_fpa_get_numeral_exponent_string
Z3_fpa_get_numeral_sign
Z3_fpa_get_numeral_sign_bv
Z3_fpa_get_numeral_significand_bv
Z3_fpa_get_numeral_significand_string
Z3_fpa_get_numeral_significand_uint64
Z3_fpa_get_sbits
Z3_fpa_is_numeral_inf
Z3_fpa_is_numeral_nan
Z3_fpa_is_numeral_negative
Z3_fpa_is_numeral_normal
Z3_fpa_is_numeral_positive
Z3_fpa_is_numeral_subnormal
Z3_fpa_is_numeral_zero
Z3_func_decl_to_ast
Z3_func_decl_to_string
Z3_func_entry_dec_ref
Z3_func_entry_get_arg
Z3_func_entry_get_num_args
Z3_func_entry_get_value
Z3_func_entry_inc_ref
Z3_func_interp_add_entry
Z3_func_interp_dec_ref
Z3_func_interp_get_arity
Z3_func_interp_get_else
Z3_func_interp_get_entry
Z3_func_interp_get_num_entries
Z3_func_interp_inc_ref
Z3_func_interp_set_else
Z3_get_algebraic_number_lower
Z3_get_algebraic_number_upper
Z3_get_app_arg
Z3_get_app_decl
Z3_get_app_num_args
Z3_get_arity
Z3_get_array_sort_domain
Z3_get_array_sort_range
Z3_get_as_array_func_decl
Z3_get_ast_hash
Z3_get_ast_id
Z3_get_ast_kind
Z3_get_bool_value
Z3_get_bv_sort_size
Z3_get_datatype_sort_constructor
Z3_get_datatype_sort_constructor_accessor
Z3_get_datatype_sort_num_constructors
Z3_get_datatype_sort_recognizer
Z3_get_decl_ast_parameter
Z3_get_decl_double_parameter
Z3_get_decl_func_decl_parameter
Z3_get_decl_int_parameter
Z3_get_decl_kind
Z3_get_decl_name
Z3_get_decl_num_parameters
Z3_get_decl_parameter_kind
Z3_get_decl_rational_parameter
Z3_get_decl_sort_parameter
Z3_get_decl_symbol_parameter
Z3_get_denominator
Z3_get_domain
Z3_get_domain_size
Z3_get_error_code
Z3_get_error_msg
Z3_get_estimated_alloc_size
Z3_get_finite_domain_sort_size
Z3_get_full_version
Z3_get_func_decl_id
Z3_get_implied_equalities
Z3_get_index_value
Z3_get_lstring
Z3_get_num_probes
Z3_get_num_tactics
Z3_get_numeral_binary_string
Z3_get_numeral_decimal_string
Z3_get_numeral_double
Z3_get_numeral_int
Z3_get_numeral_int64
Z3_get_numeral_rational_int64
Z3_get_numeral_small
Z3_get_numeral_string
Z3_get_numeral_uint
Z3_get_numeral_uint64
Z3_get_numerator
Z3_get_pattern
Z3_get_pattern_num_terms
Z3_get_probe_name
Z3_get_quantifier_body
Z3_get_quantifier_bound_name
Z3_get_quantifier_bound_sort
Z3_get_quantifier_no_pattern_ast
Z3_get_quantifier_num_bound
Z3_get_quantifier_num_no_patterns
Z3_get_quantifier_num_patterns
Z3_get_quantifier_pattern_ast
Z3_get_quantifier_weight
Z3_get_range
Z3_get_re_sort_basis
Z3_get_relation_arity
Z3_get_relation_column
Z3_get_seq_sort_basis
Z3_get_sort
Z3_get_sort_id
Z3_get_sort_kind
Z3_get_sort_name
Z3_get_string
Z3_get_string_contents
Z3_get_string_length
Z3_get_symbol_int
Z3_get_symbol_kind
Z3_get_symbol_string
Z3_get_tactic_name
Z3_get_tuple_sort_field_decl
Z3_get_tuple_sort_mk_decl
Z3_get_tuple_sort_num_fields
Z3_get_version
Z3_global_param_get
Z3_global_param_reset_all
Z3_global_param_set
Z3_goal_assert
Z3_goal_convert_model
Z3_goal_dec_ref
Z3_goal_depth
Z3_goal_formula
Z3_goal_inc_ref
Z3_goal_inconsistent
Z3_goal_is_decided_sat
Z3_goal_is_decided_unsat
Z3_goal_num_exprs
Z3_goal_precision
Z3_goal_reset
Z3_goal_size
Z3_goal_to_dimacs_string
Z3_goal_to_string
Z3_goal_translate
Z3_inc_ref
Z3_interrupt
Z3_is_algebraic_number
Z3_is_app
Z3_is_as_array
Z3_is_char_sort
Z3_is_eq_ast
Z3_is_eq_func_decl
Z3_is_eq_sort
Z3_is_lambda
Z3_is_numeral_ast
Z3_is_quantifier_exists
Z3_is_quantifier_forall
Z3_is_re_sort
Z3_is_seq_sort
Z3_is_string
Z3_is_string_sort
Z3_is_well_sorted
Z3_mk_add
Z3_mk_and
Z3_mk_app
Z3_mk_array_default
Z3_mk_array_ext
Z3_mk_array_sort
Z3_mk_array_sort_n
Z3_mk_as_array
Z3_mk_ast_map
Z3_mk_ast_vector
Z3_mk_atleast
Z3_mk_atmost
Z3_mk_bool_sort
Z3_mk_bound
Z3_mk_bv2int
Z3_mk_bv_numeral
Z3_mk_bv_sort
Z3_mk_bvadd
Z3_mk_bvadd_no_overflow
Z3_mk_bvadd_no_underflow
Z3_mk_bvand
Z3_mk_bvashr
Z3_mk_bvlshr
Z3_mk_bvmul
Z3_mk_bvmul_no_overflow
Z3_mk_bvmul_no_underflow
Z3_mk_bvnand
Z3_mk_bvneg
Z3_mk_bvneg_no_overflow
Z3_mk_bvnor
Z3_mk_bvnot
Z3_mk_bvor
Z3_mk_bvredand
Z3_mk_bvredor
Z3_mk_bvsdiv
Z3_mk_bvsdiv_no_overflow
Z3_mk_bvsge
Z3_mk_bvsgt
Z3_mk_bvshl
Z3_mk_bvsle
Z3_mk_bvslt
Z3_mk_bvsmod
Z3_mk_bvsrem
Z3_mk_bvsub
Z3_mk_bvsub_no_overflow
Z3_mk_bvsub_no_underflow
Z3_mk_bvudiv
Z3_mk_bvuge
Z3_mk_bvugt
Z3_mk_bvule
Z3_mk_bvult
Z3_mk_bvurem
Z3_mk_bvxnor
Z3_mk_bvxor
Z3_mk_char_from_bv
Z3_mk_char_is_digit
Z3_mk_char_le
Z3_mk_char_sort
Z3_mk_char_to_bv
Z3_mk_char_to_int
Z3_mk_concat
Z3_mk_config
Z3_mk_const
Z3_mk_const_array
Z3_mk_constructor
Z3_mk_constructor_list
Z3_mk_context
Z3_mk_context_rc
Z3_mk_datatype
Z3_mk_datatypes
Z3_mk_distinct
Z3_mk_div
Z3_mk_divides
Z3_mk_empty_set
Z3_mk_enumeration_sort
Z3_mk_eq
Z3_mk_exists
Z3_mk_exists_const
Z3_mk_ext_rotate_left
Z3_mk_ext_rotate_right
Z3_mk_extract
Z3_mk_false
Z3_mk_finite_domain_sort
Z3_mk_fixedpoint
Z3_mk_forall
Z3_mk_forall_const
Z3_mk_fpa_abs
Z3_mk_fpa_add
Z3_mk_fpa_div
Z3_mk_fpa_eq
Z3_mk_fpa_fma
Z3_mk_fpa_fp
Z3_mk_fpa_geq
Z3_mk_fpa_gt
Z3_mk_fpa_inf
Z3_mk_fpa_is_infinite
Z3_mk_fpa_is_nan
Z3_mk_fpa_is_negative
Z3_mk_fpa_is_normal
Z3_mk_fpa_is_positive
Z3_mk_fpa_is_subnormal
Z3_mk_fpa_is_zero
Z3_mk_fpa_leq
Z3_mk_fpa_lt
Z3_mk_fpa_max
Z3_mk_fpa_min
Z3_mk_fpa_mul
Z3_mk_fpa_nan
Z3_mk_fpa_neg
Z3_mk_fpa_numeral_double
Z3_mk_fpa_numeral_float
Z3_mk_fpa_numeral_int
Z3_mk_fpa_numeral_int64_uint64
Z3_mk_fpa_numeral_int_uint
Z3_mk_fpa_rem
Z3_mk_fpa_rna
Z3_mk_fpa_rne
Z3_mk_fpa_round_nearest_ties_to_away
Z3_mk_fpa_round_nearest_ties_to_even
Z3_mk_fpa_round_to_integral
Z3_mk_fpa_round_toward_negative
Z3_mk_fpa_round_toward_positive
Z3_mk_fpa_round_toward_zero
Z3_mk_fpa_rounding_mode_sort
Z3_mk_fpa_rtn
Z3_mk_fpa_rtp
Z3_mk_fpa_rtz
Z3_mk_fpa_sort
Z3_mk_fpa_sort_128
Z3_mk_fpa_sort_16
Z3_mk_fpa_sort_32
Z3_mk_fpa_sort_64
Z3_mk_fpa_sort_double
Z3_mk_fpa_sort_half
Z3_mk_fpa_sort_quadruple
Z3_mk_fpa_sort_single
Z3_mk_fpa_sqrt
Z3_mk_fpa_sub
Z3_mk_fpa_to_fp_bv
Z3_mk_fpa_to_fp_float
Z3_mk_fpa_to_fp_int_real
Z3_mk_fpa_to_fp_real
Z3_mk_fpa_to_fp_signed
Z3_mk_fpa_to_fp_unsigned
Z3_mk_fpa_to_ieee_bv
Z3_mk_fpa_to_real
Z3_mk_fpa_to_sbv
Z3_mk_fpa_to_ubv
Z3_mk_fpa_zero
Z3_mk_fresh_const
Z3_mk_fresh_func_decl
Z3_mk_full_set
Z3_mk_func_decl
Z3_mk_ge
Z3_mk_goal
Z3_mk_gt
Z3_mk_iff
Z3_mk_implies
Z3_mk_int
Z3_mk_int2bv
Z3_mk_int2real
Z3_mk_int64
Z3_mk_int_sort
Z3_mk_int_symbol
Z3_mk_int_to_str
Z3_mk_is_int
Z3_mk_ite
Z3_mk_lambda
Z3_mk_lambda_const
Z3_mk_le
Z3_mk_linear_order
Z3_mk_list_sort
Z3_mk_lstring
Z3_mk_lt
Z3_mk_map
Z3_mk_mod
Z3_mk_model
Z3_mk_mul
Z3_mk_not
Z3_mk_numeral
Z3_mk_optimize
Z3_mk_or
Z3_mk_params
Z3_mk_partial_order
Z3_mk_pattern
Z3_mk_pbeq
Z3_mk_pbge
Z3_mk_pble
Z3_mk_piecewise_linear_order
Z3_mk_power
Z3_mk_probe
Z3_mk_quantifier
Z3_mk_quantifier_const
Z3_mk_quantifier_const_ex
Z3_mk_quantifier_ex
Z3_mk_re_allchar
Z3_mk_re_complement
Z3_mk_re_concat
Z3_mk_re_diff
Z3_mk_re_empty
Z3_mk_re_full
Z3_mk_re_intersect
Z3_mk_re_loop
Z3_mk_re_option
Z3_mk_re_plus
Z3_mk_re_range
Z3_mk_re_sort
Z3_mk_re_star
Z3_mk_re_union
Z3_mk_real
Z3_mk_real2int
Z3_mk_real_sort
Z3_mk_rec_func_decl
Z3_mk_rem
Z3_mk_repeat
Z3_mk_rotate_left
Z3_mk_rotate_right
Z3_mk_sbv_to_str
Z3_mk_select
Z3_mk_select_n
Z3_mk_seq_at
Z3_mk_seq_concat
Z3_mk_seq_contains
Z3_mk_seq_empty
Z3_mk_seq_extract
Z3_mk_seq_in_re
Z3_mk_seq_index
Z3_mk_seq_last_index
Z3_mk_seq_length
Z3_mk_seq_nth
Z3_mk_seq_prefix
Z3_mk_seq_replace
Z3_mk_seq_sort
Z3_mk_seq_suffix
Z3_mk_seq_to_re
Z3_mk_seq_unit
Z3_mk_set_add
Z3_mk_set_complement
Z3_mk_set_del
Z3_mk_set_difference
Z3_mk_set_has_size
Z3_mk_set_intersect
Z3_mk_set_member
Z3_mk_set_sort
Z3_mk_set_subset
Z3_mk_set_union
Z3_mk_sign_ext

Sections

.text
Size: 12.4MB - Virtual size: 12.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 124KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 424KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EtumrepMMO/runtimes/win-x86/native/libz3.dll
.dll windows x86

5f150f099484b622161dc82380d26013

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02/09/2021, 18:32

Not After

01/09/2022, 18:32

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1f:2a:e7:63:23:ed:e5:08:9a:e8:27:ac:d2:b6:83:6a:f7:0e:77:78:19:9f:8a:07:35:16:10:99:2e:6d:3f:6a
Signer

Actual PE Digest

1f:2a:e7:63:23:ed:e5:08:9a:e8:27:ac:d2:b6:83:6a:f7:0e:77:78:19:9f:8a:07:35:16:10:99:2e:6d:3f:6a

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

03/05/2023, 12:04
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcp140

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
_Thrd_id
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Query_perf_counter
_Query_perf_frequency
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
?_Xinvalid_argument@std@@YAXPBD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
_Thrd_join
_Thrd_hardware_concurrency
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_broadcast
_Cnd_signal
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??Bios_base@std@@QBE_NXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
_Xtime_get_ticks
_Thrd_yield
_Mtx_current_owns
_Cnd_timedwait
?_Syserror_map@std@@YAPBDH@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?copyfmt@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEAAV12@ABV12@@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Xbad_alloc@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ

kernel32

InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
CloseHandle
GlobalMemoryStatusEx
GetSystemTimeAsFileTime

vcruntime140

__CxxFrameHandler3
memcpy
_purecall
__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memmove
memset
strchr
__RTDynamicCast
__RTtypeid
__std_type_info_compare
__std_type_info_name
memchr
__current_exception
__current_exception_context
__std_type_info_destroy_list
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_errno
_seh_filter_dll
_configure_narrow_argv
terminate
_beginthreadex
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_invalid_parameter_noinfo_noreturn
_set_invalid_parameter_handler
raise
_cexit
exit
signal

api-ms-win-crt-heap-l1-1-0

realloc
malloc
free
_callnewh

api-ms-win-crt-stdio-l1-1-0

fgetc
fgetpos
__stdio_common_vsprintf
ungetc
__stdio_common_vsprintf_s
__acrt_iob_func
__stdio_common_vfprintf
_get_stream_buffer_pointers
fclose
fflush
setvbuf
fwrite
_fseeki64
fsetpos
fread
fputc

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_lock_file

api-ms-win-crt-convert-l1-1-0

atoi
strtod
strtol

api-ms-win-crt-math-l1-1-0

floor
_libm_sse2_exp_precise
_libm_sse2_pow_precise
log2
_libm_sse2_sqrt_precise
ceil
_libm_sse2_log_precise

api-ms-win-crt-string-l1-1-0

isspace
isdigit
isalnum
strncmp

api-ms-win-crt-utility-l1-1-0

rand

Exports

Exports

Z3_add_const_interp
Z3_add_func_interp
Z3_add_rec_def
Z3_algebraic_add
Z3_algebraic_div
Z3_algebraic_eq
Z3_algebraic_eval
Z3_algebraic_ge
Z3_algebraic_get_i
Z3_algebraic_get_poly
Z3_algebraic_gt
Z3_algebraic_is_neg
Z3_algebraic_is_pos
Z3_algebraic_is_value
Z3_algebraic_is_zero
Z3_algebraic_le
Z3_algebraic_lt
Z3_algebraic_mul
Z3_algebraic_neq
Z3_algebraic_power
Z3_algebraic_root
Z3_algebraic_roots
Z3_algebraic_sign
Z3_algebraic_sub
Z3_app_to_ast
Z3_append_log
Z3_apply_result_dec_ref
Z3_apply_result_get_num_subgoals
Z3_apply_result_get_subgoal
Z3_apply_result_inc_ref
Z3_apply_result_to_string
Z3_ast_map_contains
Z3_ast_map_dec_ref
Z3_ast_map_erase
Z3_ast_map_find
Z3_ast_map_inc_ref
Z3_ast_map_insert
Z3_ast_map_keys
Z3_ast_map_reset
Z3_ast_map_size
Z3_ast_map_to_string
Z3_ast_to_string
Z3_ast_vector_dec_ref
Z3_ast_vector_get
Z3_ast_vector_inc_ref
Z3_ast_vector_push
Z3_ast_vector_resize
Z3_ast_vector_set
Z3_ast_vector_size
Z3_ast_vector_to_string
Z3_ast_vector_translate
Z3_benchmark_to_smtlib_string
Z3_close_log
Z3_datatype_update_field
Z3_dec_ref
Z3_del_config
Z3_del_constructor
Z3_del_constructor_list
Z3_del_context
Z3_disable_trace
Z3_enable_trace
Z3_eval_smtlib2_string
Z3_finalize_memory
Z3_fixedpoint_add_callback
Z3_fixedpoint_add_constraint
Z3_fixedpoint_add_cover
Z3_fixedpoint_add_fact
Z3_fixedpoint_add_invariant
Z3_fixedpoint_add_rule
Z3_fixedpoint_assert
Z3_fixedpoint_dec_ref
Z3_fixedpoint_from_file
Z3_fixedpoint_from_string
Z3_fixedpoint_get_answer
Z3_fixedpoint_get_assertions
Z3_fixedpoint_get_cover_delta
Z3_fixedpoint_get_ground_sat_answer
Z3_fixedpoint_get_help
Z3_fixedpoint_get_num_levels
Z3_fixedpoint_get_param_descrs
Z3_fixedpoint_get_reachable
Z3_fixedpoint_get_reason_unknown
Z3_fixedpoint_get_rule_names_along_trace
Z3_fixedpoint_get_rules
Z3_fixedpoint_get_rules_along_trace
Z3_fixedpoint_get_statistics
Z3_fixedpoint_inc_ref
Z3_fixedpoint_init
Z3_fixedpoint_query
Z3_fixedpoint_query_from_lvl
Z3_fixedpoint_query_relations
Z3_fixedpoint_register_relation
Z3_fixedpoint_set_params
Z3_fixedpoint_set_predicate_representation
Z3_fixedpoint_set_reduce_app_callback
Z3_fixedpoint_set_reduce_assign_callback
Z3_fixedpoint_to_string
Z3_fixedpoint_update_rule
Z3_fpa_get_ebits
Z3_fpa_get_numeral_exponent_bv
Z3_fpa_get_numeral_exponent_int64
Z3_fpa_get_numeral_exponent_string
Z3_fpa_get_numeral_sign
Z3_fpa_get_numeral_sign_bv
Z3_fpa_get_numeral_significand_bv
Z3_fpa_get_numeral_significand_string
Z3_fpa_get_numeral_significand_uint64
Z3_fpa_get_sbits
Z3_fpa_is_numeral_inf
Z3_fpa_is_numeral_nan
Z3_fpa_is_numeral_negative
Z3_fpa_is_numeral_normal
Z3_fpa_is_numeral_positive
Z3_fpa_is_numeral_subnormal
Z3_fpa_is_numeral_zero
Z3_func_decl_to_ast
Z3_func_decl_to_string
Z3_func_entry_dec_ref
Z3_func_entry_get_arg
Z3_func_entry_get_num_args
Z3_func_entry_get_value
Z3_func_entry_inc_ref
Z3_func_interp_add_entry
Z3_func_interp_dec_ref
Z3_func_interp_get_arity
Z3_func_interp_get_else
Z3_func_interp_get_entry
Z3_func_interp_get_num_entries
Z3_func_interp_inc_ref
Z3_func_interp_set_else
Z3_get_algebraic_number_lower
Z3_get_algebraic_number_upper
Z3_get_app_arg
Z3_get_app_decl
Z3_get_app_num_args
Z3_get_arity
Z3_get_array_sort_domain
Z3_get_array_sort_range
Z3_get_as_array_func_decl
Z3_get_ast_hash
Z3_get_ast_id
Z3_get_ast_kind
Z3_get_bool_value
Z3_get_bv_sort_size
Z3_get_datatype_sort_constructor
Z3_get_datatype_sort_constructor_accessor
Z3_get_datatype_sort_num_constructors
Z3_get_datatype_sort_recognizer
Z3_get_decl_ast_parameter
Z3_get_decl_double_parameter
Z3_get_decl_func_decl_parameter
Z3_get_decl_int_parameter
Z3_get_decl_kind
Z3_get_decl_name
Z3_get_decl_num_parameters
Z3_get_decl_parameter_kind
Z3_get_decl_rational_parameter
Z3_get_decl_sort_parameter
Z3_get_decl_symbol_parameter
Z3_get_denominator
Z3_get_domain
Z3_get_domain_size
Z3_get_error_code
Z3_get_error_msg
Z3_get_estimated_alloc_size
Z3_get_finite_domain_sort_size
Z3_get_full_version
Z3_get_func_decl_id
Z3_get_implied_equalities
Z3_get_index_value
Z3_get_lstring
Z3_get_num_probes
Z3_get_num_tactics
Z3_get_numeral_binary_string
Z3_get_numeral_decimal_string
Z3_get_numeral_double
Z3_get_numeral_int
Z3_get_numeral_int64
Z3_get_numeral_rational_int64
Z3_get_numeral_small
Z3_get_numeral_string
Z3_get_numeral_uint
Z3_get_numeral_uint64
Z3_get_numerator
Z3_get_pattern
Z3_get_pattern_num_terms
Z3_get_probe_name
Z3_get_quantifier_body
Z3_get_quantifier_bound_name
Z3_get_quantifier_bound_sort
Z3_get_quantifier_no_pattern_ast
Z3_get_quantifier_num_bound
Z3_get_quantifier_num_no_patterns
Z3_get_quantifier_num_patterns
Z3_get_quantifier_pattern_ast
Z3_get_quantifier_weight
Z3_get_range
Z3_get_re_sort_basis
Z3_get_relation_arity
Z3_get_relation_column
Z3_get_seq_sort_basis
Z3_get_sort
Z3_get_sort_id
Z3_get_sort_kind
Z3_get_sort_name
Z3_get_string
Z3_get_string_contents
Z3_get_string_length
Z3_get_symbol_int
Z3_get_symbol_kind
Z3_get_symbol_string
Z3_get_tactic_name
Z3_get_tuple_sort_field_decl
Z3_get_tuple_sort_mk_decl
Z3_get_tuple_sort_num_fields
Z3_get_version
Z3_global_param_get
Z3_global_param_reset_all
Z3_global_param_set
Z3_goal_assert
Z3_goal_convert_model
Z3_goal_dec_ref
Z3_goal_depth
Z3_goal_formula
Z3_goal_inc_ref
Z3_goal_inconsistent
Z3_goal_is_decided_sat
Z3_goal_is_decided_unsat
Z3_goal_num_exprs
Z3_goal_precision
Z3_goal_reset
Z3_goal_size
Z3_goal_to_dimacs_string
Z3_goal_to_string
Z3_goal_translate
Z3_inc_ref
Z3_interrupt
Z3_is_algebraic_number
Z3_is_app
Z3_is_as_array
Z3_is_char_sort
Z3_is_eq_ast
Z3_is_eq_func_decl
Z3_is_eq_sort
Z3_is_lambda
Z3_is_numeral_ast
Z3_is_quantifier_exists
Z3_is_quantifier_forall
Z3_is_re_sort
Z3_is_seq_sort
Z3_is_string
Z3_is_string_sort
Z3_is_well_sorted
Z3_mk_add
Z3_mk_and
Z3_mk_app
Z3_mk_array_default
Z3_mk_array_ext
Z3_mk_array_sort
Z3_mk_array_sort_n
Z3_mk_as_array
Z3_mk_ast_map
Z3_mk_ast_vector
Z3_mk_atleast
Z3_mk_atmost
Z3_mk_bool_sort
Z3_mk_bound
Z3_mk_bv2int
Z3_mk_bv_numeral
Z3_mk_bv_sort
Z3_mk_bvadd
Z3_mk_bvadd_no_overflow
Z3_mk_bvadd_no_underflow
Z3_mk_bvand
Z3_mk_bvashr
Z3_mk_bvlshr
Z3_mk_bvmul
Z3_mk_bvmul_no_overflow
Z3_mk_bvmul_no_underflow
Z3_mk_bvnand
Z3_mk_bvneg
Z3_mk_bvneg_no_overflow
Z3_mk_bvnor
Z3_mk_bvnot
Z3_mk_bvor
Z3_mk_bvredand
Z3_mk_bvredor
Z3_mk_bvsdiv
Z3_mk_bvsdiv_no_overflow
Z3_mk_bvsge
Z3_mk_bvsgt
Z3_mk_bvshl
Z3_mk_bvsle
Z3_mk_bvslt
Z3_mk_bvsmod
Z3_mk_bvsrem
Z3_mk_bvsub
Z3_mk_bvsub_no_overflow
Z3_mk_bvsub_no_underflow
Z3_mk_bvudiv
Z3_mk_bvuge
Z3_mk_bvugt
Z3_mk_bvule
Z3_mk_bvult
Z3_mk_bvurem
Z3_mk_bvxnor
Z3_mk_bvxor
Z3_mk_char_from_bv
Z3_mk_char_is_digit
Z3_mk_char_le
Z3_mk_char_sort
Z3_mk_char_to_bv
Z3_mk_char_to_int
Z3_mk_concat
Z3_mk_config
Z3_mk_const
Z3_mk_const_array
Z3_mk_constructor
Z3_mk_constructor_list
Z3_mk_context
Z3_mk_context_rc
Z3_mk_datatype
Z3_mk_datatypes
Z3_mk_distinct
Z3_mk_div
Z3_mk_divides
Z3_mk_empty_set
Z3_mk_enumeration_sort
Z3_mk_eq
Z3_mk_exists
Z3_mk_exists_const
Z3_mk_ext_rotate_left
Z3_mk_ext_rotate_right
Z3_mk_extract
Z3_mk_false
Z3_mk_finite_domain_sort
Z3_mk_fixedpoint
Z3_mk_forall
Z3_mk_forall_const
Z3_mk_fpa_abs
Z3_mk_fpa_add
Z3_mk_fpa_div
Z3_mk_fpa_eq
Z3_mk_fpa_fma
Z3_mk_fpa_fp
Z3_mk_fpa_geq
Z3_mk_fpa_gt
Z3_mk_fpa_inf
Z3_mk_fpa_is_infinite
Z3_mk_fpa_is_nan
Z3_mk_fpa_is_negative
Z3_mk_fpa_is_normal
Z3_mk_fpa_is_positive
Z3_mk_fpa_is_subnormal
Z3_mk_fpa_is_zero
Z3_mk_fpa_leq
Z3_mk_fpa_lt
Z3_mk_fpa_max
Z3_mk_fpa_min
Z3_mk_fpa_mul
Z3_mk_fpa_nan
Z3_mk_fpa_neg
Z3_mk_fpa_numeral_double
Z3_mk_fpa_numeral_float
Z3_mk_fpa_numeral_int
Z3_mk_fpa_numeral_int64_uint64
Z3_mk_fpa_numeral_int_uint
Z3_mk_fpa_rem
Z3_mk_fpa_rna
Z3_mk_fpa_rne
Z3_mk_fpa_round_nearest_ties_to_away
Z3_mk_fpa_round_nearest_ties_to_even
Z3_mk_fpa_round_to_integral
Z3_mk_fpa_round_toward_negative
Z3_mk_fpa_round_toward_positive
Z3_mk_fpa_round_toward_zero
Z3_mk_fpa_rounding_mode_sort
Z3_mk_fpa_rtn
Z3_mk_fpa_rtp
Z3_mk_fpa_rtz
Z3_mk_fpa_sort
Z3_mk_fpa_sort_128
Z3_mk_fpa_sort_16
Z3_mk_fpa_sort_32
Z3_mk_fpa_sort_64
Z3_mk_fpa_sort_double
Z3_mk_fpa_sort_half
Z3_mk_fpa_sort_quadruple
Z3_mk_fpa_sort_single
Z3_mk_fpa_sqrt
Z3_mk_fpa_sub
Z3_mk_fpa_to_fp_bv
Z3_mk_fpa_to_fp_float
Z3_mk_fpa_to_fp_int_real
Z3_mk_fpa_to_fp_real
Z3_mk_fpa_to_fp_signed
Z3_mk_fpa_to_fp_unsigned
Z3_mk_fpa_to_ieee_bv
Z3_mk_fpa_to_real
Z3_mk_fpa_to_sbv
Z3_mk_fpa_to_ubv
Z3_mk_fpa_zero
Z3_mk_fresh_const
Z3_mk_fresh_func_decl
Z3_mk_full_set
Z3_mk_func_decl
Z3_mk_ge
Z3_mk_goal
Z3_mk_gt
Z3_mk_iff
Z3_mk_implies
Z3_mk_int
Z3_mk_int2bv
Z3_mk_int2real
Z3_mk_int64
Z3_mk_int_sort
Z3_mk_int_symbol
Z3_mk_int_to_str
Z3_mk_is_int
Z3_mk_ite
Z3_mk_lambda
Z3_mk_lambda_const
Z3_mk_le
Z3_mk_linear_order
Z3_mk_list_sort
Z3_mk_lstring
Z3_mk_lt
Z3_mk_map
Z3_mk_mod
Z3_mk_model
Z3_mk_mul
Z3_mk_not
Z3_mk_numeral
Z3_mk_optimize
Z3_mk_or
Z3_mk_params
Z3_mk_partial_order
Z3_mk_pattern
Z3_mk_pbeq
Z3_mk_pbge
Z3_mk_pble
Z3_mk_piecewise_linear_order
Z3_mk_power
Z3_mk_probe
Z3_mk_quantifier
Z3_mk_quantifier_const
Z3_mk_quantifier_const_ex
Z3_mk_quantifier_ex
Z3_mk_re_allchar
Z3_mk_re_complement
Z3_mk_re_concat
Z3_mk_re_diff
Z3_mk_re_empty
Z3_mk_re_full
Z3_mk_re_intersect
Z3_mk_re_loop
Z3_mk_re_option
Z3_mk_re_plus
Z3_mk_re_range
Z3_mk_re_sort
Z3_mk_re_star
Z3_mk_re_union
Z3_mk_real
Z3_mk_real2int
Z3_mk_real_sort
Z3_mk_rec_func_decl
Z3_mk_rem
Z3_mk_repeat
Z3_mk_rotate_left
Z3_mk_rotate_right
Z3_mk_sbv_to_str
Z3_mk_select
Z3_mk_select_n
Z3_mk_seq_at
Z3_mk_seq_concat
Z3_mk_seq_contains
Z3_mk_seq_empty
Z3_mk_seq_extract
Z3_mk_seq_in_re
Z3_mk_seq_index
Z3_mk_seq_last_index
Z3_mk_seq_length
Z3_mk_seq_nth
Z3_mk_seq_prefix
Z3_mk_seq_replace
Z3_mk_seq_sort
Z3_mk_seq_suffix
Z3_mk_seq_to_re
Z3_mk_seq_unit
Z3_mk_set_add
Z3_mk_set_complement
Z3_mk_set_del
Z3_mk_set_difference
Z3_mk_set_has_size
Z3_mk_set_intersect
Z3_mk_set_member
Z3_mk_set_sort
Z3_mk_set_subset
Z3_mk_set_union
Z3_mk_sign_ext

Sections

.text
Size: 10.5MB - Virtual size: 10.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 417KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

6dbf27f4c70fe2c8ed3e0122ba75d641

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

advapi32

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

Sections

.text Size: 97KB - Virtual size: 96KB

.rdata Size: 37KB - Virtual size: 36KB

.data Size: 2KB - Virtual size: 5KB

.pdata Size: 5KB - Virtual size: 5KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 792B

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 322KB - Virtual size: 322KB

.rsrc Size: 1024B - Virtual size: 856B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 3KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

Code Sign

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

43:89:a1:fa:28:28:df:b6:1a:82:71:8b:38:7b:35:07:74:2b:13:d4:0b:b6:0d:c8:23:72:8f:d7:ab:46:a5:5aSigner

Signature Validations

Verification

03/05/2023, 12:04 Valid: false

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 211KB - Virtual size: 210KB

.rsrc Size: 1KB - Virtual size: 1KB

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 11.6MB - Virtual size: 11.6MB

.rsrc Size: 1024B - Virtual size: 916B

.reloc Size: 512B - Virtual size: 12B

d0dd9785ee3ab72775b1a0a75454b3a4

Headers

DLL Characteristics

.text
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.text
Size: 97KB - Virtual size: 96KB

.rdata
Size: 37KB - Virtual size: 36KB

.data
Size: 2KB - Virtual size: 5KB

.pdata
Size: 5KB - Virtual size: 5KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 792B

.text
Size: 322KB - Virtual size: 322KB

.rsrc
Size: 1024B - Virtual size: 856B

.text
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

43:89:a1:fa:28:28:df:b6:1a:82:71:8b:38:7b:35:07:74:2b:13:d4:0b:b6:0d:c8:23:72:8f:d7:ab:46:a5:5a
Signer

03/05/2023, 12:04
Valid: false

.text
Size: 211KB - Virtual size: 210KB

.rsrc
Size: 1KB - Virtual size: 1KB

.text
Size: 11.6MB - Virtual size: 11.6MB

.rsrc
Size: 1024B - Virtual size: 916B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 177KB - Virtual size: 177KB

.rdata
Size: 81KB - Virtual size: 81KB

.data
Size: 5KB - Virtual size: 12KB

.pdata
Size: 10KB - Virtual size: 9KB

_RDATA
Size: 512B - Virtual size: 252B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 3KB - Virtual size: 2KB

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

5e:36:77:4e:af:e3:c0:9d:db:3b:75:40:d2:e6:75:40:ea:fb:3a:d9:05:03:12:e9:96:e5:27:54:3d:a9:60:95
Signer

03/05/2023, 12:04
Valid: false

.text
Size: 12.4MB - Virtual size: 12.4MB

.rdata
Size: 2.1MB - Virtual size: 2.1MB

.data
Size: 124KB - Virtual size: 128KB

.pdata
Size: 424KB - Virtual size: 424KB

.reloc
Size: 33KB - Virtual size: 33KB

.mvid
Size: 512B - Virtual size: 16B

.text
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

33:00:00:02:52:8b:33:aa:f8:95:f3:39:db:00:00:00:00:02:52
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

5e:36:77:4e:af:e3:c0:9d:db:3b:75:40:d2:e6:75:40:ea:fb:3a:d9:05:03:12:e9:96:e5:27:54:3d:a9:60:95
Signer

03/05/2023, 12:04
Valid: false